Link to home
Start Free TrialLog in
Avatar of tomdlgns
tomdlgnsFlag for United States of America

asked on

windows XP pc infected...

hey guys,

i am working on a windows xp home PC that was heavily infected.

IE, ff, opera, netscape browsers wont load a web page. the PC had all these browsers, i didnt add anything extra.

i can go into cmd prompt and ping 208.67.222.222 and 8.8.8.8.8- those are DNS servers. i get replies back all day long.

so it does have a connection to the internet, just not via the browser.

i checked the hosts file, it looks clean i only see 127.0.0.1 localhost

IE isnt using any proxies

i started with my normal scans

malwarebytes
superantispyware
spybot search and destroy.

all 3 programs found a handful of viruses.

i ran each program until there were no more traces on the PC.

i was hoping that getting rid of all the viruses would fix the issue.

nope, that didnt work.

i came to this site, got combofix and followed the guide, the only part of comobix that wouldnt run was the MS download. it said that i needed a connection to the internet.

i let it scan, it rebooted and did some more scanning upon the reboot.

i saw the log file that combofix had on my screen and that was as far as i went.

according to the tutorial, i am supposed to post the log in the thread to get some help, but i dont want to do that until i am asked to do so.

is this the proper forum for that?

any help is appreciated.

thank you.
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
Reset your TCP\IP stack.

http://windowsxp.mvps.org/winsock.htm
Avatar of frankky
frankky
Flag of Canada image
You scanned for malwares, what about good'ol Anti-virus softwares...

I would give a go to AVAST AV I like the boot time scanner.

if you have a second computer handy and can remove the HD from the infected, you could hook it to the good PC for offline scanning.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@dariusg

i already tried one program to fix that, but i will try yours.

i will update soon.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@franky

i believe spybot s&D scans for viruses as well, but i will check AVAST and let you know.

SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

one more thing i would like to mention

i downloaded MS SP3 and transferred it over to the infected PC and it couldn't install it.  it fails during the install.

also, i tried to restore it to a restore point from a few weeks ago and when the computer is rebooting, the first thing i see in windows is an error message saying it couldn't complete the restore process.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@dariusg

what does that do, exactly?

unforunatley, i cant reformat this persons PC.

they dont have any of the software that came with the PC.

sure, they could always purchase it, but as of right now, the only thing that doesnt work is the fact that it cant get online.

before i removed the viruses and spyware, they were getting slow response times, pop ups, programs opening, etc...and now the PC is stable, other than not being able to use IE, firefox, etc...

but as i stated in my original post, i can ping websites and DNS servers in CMD and get a reply, so i know for a fact it isnt the router/ISP

thanks
Avatar of antony_kibble<!-8D58D5C365651885FB5A77A120C8C8C6-->
antony_kibble<!-8D58D5C365651885FB5A77A120C8C8C6-->
Try uninstalling and reinstalling the network drivers.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

dariusg:
Reset your TCP\IP stack.

http://windowsxp.mvps.org/winsock.htm

when i got to the site, it was the same site i had already been to.

so that didnt work.

i am going to try an a/v scan and reinstalling the drivers for the network card.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

btw, the only problem i seem to have with another a/v scanner is that i am not able to get the latest updates.

that might be an issue...but maybe not...i guess it depends how old the virus is, chances are, it is not a newer virus.
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
sfc /scannow will repair corrupt Windows XP system files.

You can also run a Windows XP repair on the system from the Windows XP install CD.

So, when you run the scanners are getting anymore hits for viruses or malware?

Have you run AVG?

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

no, i have not ran AVG yet, i will.

sfc /scannow

that just repairs corrupt files, correct?

it wont do anything to existing files?

also, i have never had to run a repair from the windows disk.

that wont format anything, correct?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

wow, just discovered something....

i can no longer ping google.com, or any other site, and get a reply.

strange....

i still get replies back from pinging 8.8.8.8 and 208.67.222.222 so the connection is there.

seems to be getting worse now...
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
You must still have a virus are you running these scans in Safe Mode? Make sure you download the updates for these tools you are using from another computer then install them manually onto the computer with virus issues.

Running a repair will not format.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

yes, i am running in safe mode.

hopefully AVG finds something in safe mode.

i have never had to manually download the updates and install them.

do i just download them to a usb device and then put them in the proper directory on the infected computer?

Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
You need to go into the Menu of the AV scanner then find the option to install update from downloaded files.

Do this if you can't download and install update files.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

how do i manually download the updates?

right now, i am running sfc /scannow

AVG is next on the list.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

as far as the AVG updates...

i havent tried via the program yet, but i am getting ready to do the manual, just in case...

http://free.avg.com/us-en/download-update

is that just for program updates?  or are they definition updates as well?

thanks
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image
Def updates.
ASKER CERTIFIED SOLUTION
Avatar of Jonvee
Jonvee
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

yes, i can post combo fix, i wast sure if we could post the log in here.

btw, i had to take a break to work on some other things, i will update after the AVG scan runs.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

well, AVG wont install since i dont have an internet connection.

do i need to get the actual program and not just the installer program?

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

update

updating nic driver didnt work.  i went to get the latest driver right from the manuf. web site.

avg is installing now, i found the .exe file as opposed to the download manager file i had before.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i have the old combo fix log, but i am not going to post it until i run AVG and i will get another combo fix log, and HT log, assuming AVG finds something else.

thanks guys.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

AVG cant install

Local machine: installation failed
    Installation:
        Error: Action failed for registry key

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows: creating registry key....
            Access is denied.


Avatar of Jonvee
Jonvee
Ok, looks like you'll need to re-run Combofix.  Download it from here & save to your Desktop>
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Before using ComboFix please disable any realtime Anti-virus, Anti-spyware, Shields, etc. that you may have running.
Also it may be necessary to rename ComboFix.exe (to Combo-Fix.exe for example), before saving it to your desktop.  If you have difficulties downloading it, try downloading to another machine, then into a USB memory stick (or equivalent).  Rename it and connect to the infected machine.

Double click "combofix.exe" and follow the prompts.
When it's finished it will have produced a Logfile, probably at C:\ComboFix.txt.
You could post that log together with a HijackThis log, in a reply for us.
Please do not mouseclick Combofix's window while it is running, because it may stall.  
Ideally ComboFix should be run in normal mode, although it will work in safe mode.

Should you need it>
A guide and tutorial on using ComboFix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

combo fix is already on the PC.  since AVG couldnt install, i will just find the log i have and post it.

after i post that, i will get a HT log.

thanks for all the replies everyone.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Combo Fix Log

I was not able to get the MS console installed, no internet connection

ComboFix 09-12-31.01 - Doug 12/31/2009  11:10:01.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1033.18.2039.1544 [GMT -6:00]
Running from: c:\documents and settings\Doug\Desktop\ComboFix.exe
AV: Spy Sweeper with AntiVirus *On-access scanning disabled* (Updated) {B3891867-7230-459B-9987-E7CCFA7A7D1D}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Doug\Local Settings\Application Data\{00EE5128-07F5-4E35-A0A8-1298D0845CBD}
c:\documents and settings\Doug\Local Settings\Application Data\{00EE5128-07F5-4E35-A0A8-1298D0845CBD}\chrome.manifest
c:\documents and settings\Doug\Local Settings\Application Data\{00EE5128-07F5-4E35-A0A8-1298D0845CBD}\chrome\content\_cfg.js
c:\documents and settings\Doug\Local Settings\Application Data\{00EE5128-07F5-4E35-A0A8-1298D0845CBD}\chrome\content\overlay.xul
c:\documents and settings\Doug\Local Settings\Application Data\{00EE5128-07F5-4E35-A0A8-1298D0845CBD}\install.rdf
c:\documents and settings\Doug\My Documents\ZbThumbnail.info
c:\documents and settings\Owner\Local Settings\Application Data\{2EF34810-59CC-46F8-AAA1-FCE459C147A1}
c:\documents and settings\Owner\Local Settings\Application Data\{2EF34810-59CC-46F8-AAA1-FCE459C147A1}\chrome.manifest
c:\documents and settings\Owner\Local Settings\Application Data\{2EF34810-59CC-46F8-AAA1-FCE459C147A1}\chrome\content\_cfg.js
c:\documents and settings\Owner\Local Settings\Application Data\{2EF34810-59CC-46F8-AAA1-FCE459C147A1}\chrome\content\overlay.xul
c:\documents and settings\Owner\Local Settings\Application Data\{2EF34810-59CC-46F8-AAA1-FCE459C147A1}\install.rdf
c:\recycler\NPROTECT\00294562.
c:\recycler\NPROTECT\00295545.DAT
c:\recycler\NPROTECT\00295546.DAT
c:\recycler\NPROTECT\00295547
c:\recycler\NPROTECT\00295548
c:\recycler\NPROTECT\00295549
c:\recycler\NPROTECT\00295550
c:\recycler\NPROTECT\00295552
c:\recycler\NPROTECT\00295554
c:\recycler\NPROTECT\00295555
c:\recycler\NPROTECT\00295558.DAT
c:\recycler\NPROTECT\00295559
c:\recycler\NPROTECT\00295560
c:\recycler\NPROTECT\00295561
c:\recycler\NPROTECT\00295562
c:\recycler\NPROTECT\00295564
c:\recycler\NPROTECT\00295565.DAT
c:\recycler\NPROTECT\00295566
c:\recycler\NPROTECT\00295567
c:\recycler\NPROTECT\00295568.DAT
c:\recycler\NPROTECT\00295569
c:\recycler\NPROTECT\00295570
c:\recycler\NPROTECT\00295571
c:\recycler\NPROTECT\00295572
c:\recycler\NPROTECT\00295573
c:\recycler\NPROTECT\00295574
c:\recycler\NPROTECT\00295575
c:\recycler\NPROTECT\00295576
c:\recycler\NPROTECT\00295577
c:\recycler\NPROTECT\00295578
c:\recycler\NPROTECT\00295579
c:\recycler\NPROTECT\00295580
c:\recycler\NPROTECT\00295581.dat
c:\recycler\NPROTECT\00295582
c:\recycler\NPROTECT\00295583
c:\recycler\NPROTECT\00295586
c:\recycler\NPROTECT\00295587
c:\recycler\NPROTECT\00295588
c:\recycler\NPROTECT\00295589
c:\recycler\NPROTECT\00295590
c:\recycler\NPROTECT\00295592
c:\recycler\NPROTECT\00295595
c:\recycler\NPROTECT\00295596
c:\recycler\NPROTECT\00295597
c:\recycler\NPROTECT\00295599
c:\recycler\NPROTECT\00295600
c:\recycler\NPROTECT\00295601
c:\recycler\NPROTECT\00295603
c:\recycler\NPROTECT\00295604
c:\recycler\NPROTECT\00295605
c:\recycler\NPROTECT\00295606
c:\recycler\NPROTECT\00295607
c:\recycler\NPROTECT\00295608
c:\recycler\NPROTECT\00295609
c:\recycler\NPROTECT\00295610
c:\recycler\NPROTECT\00295611
c:\recycler\NPROTECT\00295612
c:\recycler\NPROTECT\00295613
c:\recycler\NPROTECT\00295614
c:\recycler\NPROTECT\00295615
c:\recycler\NPROTECT\00295617
c:\recycler\NPROTECT\00295618
c:\recycler\NPROTECT\00295620
c:\recycler\NPROTECT\00295621
c:\recycler\NPROTECT\00295623
c:\recycler\NPROTECT\00295624
c:\recycler\NPROTECT\00295625
c:\recycler\NPROTECT\00295626
c:\recycler\NPROTECT\00295627
c:\recycler\NPROTECT\00295629
c:\recycler\NPROTECT\00295630
c:\recycler\NPROTECT\00295631
c:\recycler\NPROTECT\00295632
c:\recycler\NPROTECT\00295634
c:\recycler\NPROTECT\00295635
c:\recycler\NPROTECT\00295636
c:\recycler\NPROTECT\00295637
c:\recycler\NPROTECT\00295638
c:\recycler\NPROTECT\00295639
c:\recycler\NPROTECT\00295640
c:\recycler\NPROTECT\00295641
c:\recycler\NPROTECT\00295642
c:\recycler\NPROTECT\00295643
c:\recycler\NPROTECT\00295647
c:\recycler\NPROTECT\00295648.dat
c:\recycler\NPROTECT\00295649.dat
c:\recycler\NPROTECT\00295650
c:\recycler\NPROTECT\00295651
c:\recycler\NPROTECT\00295652
c:\recycler\NPROTECT\00295653
c:\recycler\NPROTECT\00295654
c:\recycler\NPROTECT\00295655
c:\recycler\NPROTECT\00295656
c:\recycler\NPROTECT\00295658
c:\recycler\NPROTECT\00295660.dat
c:\recycler\NPROTECT\00295662
c:\recycler\NPROTECT\00295663.bat
c:\recycler\NPROTECT\00295664
c:\recycler\NPROTECT\00295665
c:\recycler\NPROTECT\00295667
c:\recycler\NPROTECT\00295669
c:\recycler\NPROTECT\00295670
c:\recycler\NPROTECT\00295671
c:\recycler\NPROTECT\00295674
c:\recycler\NPROTECT\00295675
c:\recycler\NPROTECT\00295676
c:\recycler\NPROTECT\00295677
c:\recycler\NPROTECT\00295679
c:\recycler\NPROTECT\00295680
c:\recycler\NPROTECT\00295681
c:\recycler\NPROTECT\00295682
c:\recycler\NPROTECT\00295683
c:\recycler\NPROTECT\00295684
c:\recycler\NPROTECT\00295685
c:\recycler\NPROTECT\00295686
c:\recycler\NPROTECT\00295687
c:\recycler\NPROTECT\00295688
c:\recycler\NPROTECT\00295689
c:\recycler\NPROTECT\00295690
c:\recycler\NPROTECT\00295691
c:\recycler\NPROTECT\00295692
c:\recycler\NPROTECT\00295693
c:\recycler\NPROTECT\00295695
c:\recycler\NPROTECT\00295696
c:\recycler\NPROTECT\00295700
c:\recycler\NPROTECT\00295703
c:\recycler\NPROTECT\00295704
c:\recycler\NPROTECT\00295705
c:\recycler\NPROTECT\00295706
c:\recycler\NPROTECT\00295707.dat
c:\recycler\NPROTECT\00295708
c:\recycler\NPROTECT\00295709.bad
c:\recycler\NPROTECT\00295710
c:\recycler\NPROTECT\00295711
c:\recycler\NPROTECT\00295712
c:\recycler\NPROTECT\00295713
c:\recycler\NPROTECT\00295714
c:\recycler\NPROTECT\00295720
c:\recycler\NPROTECT\00295721
c:\recycler\NPROTECT\00295722.md5
c:\recycler\NPROTECT\00295966
c:\recycler\NPROTECT\00295967
c:\recycler\S-1-5-21-1935655697-1078081533-682003330-1003
c:\recycler\S-1-5-21-2354860106-3078933950-2568686149-1003
c:\recycler\S-1-5-21-3042203698-2541144799-1653457281-1630
c:\recycler\S-1-5-21-404325864-2632854785-862258185-1003
c:\windows\jestertb.dll
c:\windows\patch.exe
c:\windows\setup.exe
c:\windows\system32\_003106_.tmp.dll
c:\windows\system32\_003107_.tmp.dll
c:\windows\system32\_003108_.tmp.dll
c:\windows\system32\_003109_.tmp.dll
c:\windows\system32\_003116_.tmp.dll
c:\windows\system32\_003117_.tmp.dll
c:\windows\system32\_003118_.tmp.dll
c:\windows\system32\_003119_.tmp.dll
c:\windows\system32\_003121_.tmp.dll
c:\windows\system32\_003122_.tmp.dll
c:\windows\system32\_003125_.tmp.dll
c:\windows\system32\_003126_.tmp.dll
c:\windows\system32\_003128_.tmp.dll
c:\windows\system32\_003129_.tmp.dll
c:\windows\system32\_003130_.tmp.dll
c:\windows\system32\_003132_.tmp.dll
c:\windows\system32\_003135_.tmp.dll
c:\windows\system32\_003136_.tmp.dll
c:\windows\system32\_003140_.tmp.dll
c:\windows\system32\_003141_.tmp.dll
c:\windows\system32\_003143_.tmp.dll
c:\windows\system32\_003146_.tmp.dll
c:\windows\system32\_003148_.tmp.dll
c:\windows\system32\_003149_.tmp.dll
c:\windows\system32\_003150_.tmp.dll
c:\windows\system32\_003151_.tmp.dll
c:\windows\system32\_003152_.tmp.dll
c:\windows\system32\_003155_.tmp.dll
c:\windows\system32\_003156_.tmp.dll
c:\windows\system32\_003157_.tmp.dll
c:\windows\system32\_003158_.tmp.dll
c:\windows\system32\_003159_.tmp.dll
c:\windows\system32\_003164_.tmp.dll
c:\windows\system32\_003166_.tmp.dll
c:\recycler\NPROTECT . . . . failed to delete
c:\recycler\NPROTECT\NPROTECT.LOG . . . . failed to delete

.
(((((((((((((((((((((((((   Files Created from 2009-11-28 to 2009-12-31  )))))))))))))))))))))))))))))))
.

2009-12-31 14:24 . 2009-12-31 14:24      --------      d-----w-      c:\windows\system32\en
2009-12-31 14:24 . 2009-12-31 14:24      --------      d-----w-      c:\windows\system32\bits
2009-12-30 20:41 . 2008-04-14 11:41      7168      ------w-      c:\windows\system32\bitsprx4.dll
2009-12-30 20:38 . 2009-12-30 20:42      --------      d-----w-      c:\windows\ServicePackFiles
2009-12-30 20:36 . 2008-04-14 11:41      4255      ------w-      c:\windows\system32\drivers\adv01nt5.dll
2009-12-30 20:31 . 2009-12-30 20:31      --------      d-----w-      c:\windows\EHome
2009-12-30 20:29 . 2009-12-30 20:42      --------      d-----w-      c:\windows\system32\CatRoot_bak
2009-12-29 22:57 . 2009-12-29 22:58      148661698      ----a-w-      C:\reg122909_2.reg
2009-12-29 22:56 . 2009-12-29 22:56      148661776      ----a-w-      C:\reg122909.reg
2009-12-29 19:54 . 2009-12-29 19:54      52224      ----a-w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2009-12-29 19:50 . 2009-12-29 19:54      117760      ----a-w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2009-12-29 19:50 . 2009-12-29 19:50      --------      d-----w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
2009-12-29 19:45 . 2009-12-29 19:45      552      ----a-w-      c:\windows\system32\d3d8caps.dat
2009-12-29 19:45 . 2009-12-29 19:45      --------      d-----w-      c:\documents and settings\Administrator\Application Data\Sony Corporation
2009-12-29 17:34 . 2009-12-29 17:34      --------      d-----w-      c:\documents and settings\Owner\Application Data\Malwarebytes
2009-12-28 21:11 . 2009-12-30 17:52      52224      ----a-w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2009-12-28 19:17 . 2009-12-31 15:00      --------      d-----w-      c:\program files\Spybot - Search & Destroy
2009-12-28 19:17 . 2009-12-31 15:00      --------      d-----w-      c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-28 19:11 . 2009-12-30 17:52      117760      ----a-w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\program files\SUPERAntiSpyware
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\program files\Common Files\Wise Installation Wizard
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\Doug\Application Data\Malwarebytes
2009-12-28 19:10 . 2009-12-03 22:14      38224      ----a-w-      c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-28 19:09 . 2009-12-28 19:09      --------      d-----w-      c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-28 19:09 . 2009-12-28 19:10      --------      d-----w-      c:\program files\Malwarebytes' Anti-Malware
2009-12-28 19:09 . 2009-12-03 22:13      19160      ----a-w-      c:\windows\system32\drivers\mbam.sys
2009-12-28 19:02 . 2001-08-17 19:48      12160      -c--a-w-      c:\windows\system32\dllcache\mouhid.sys
2009-12-28 19:02 . 2001-08-17 19:48      12160      ----a-w-      c:\windows\system32\drivers\mouhid.sys
2009-12-23 12:41 . 2009-12-28 20:09      --------      d-----w-      c:\documents and settings\Doug\Local Settings\Application Data\gjuvqv
2009-12-20 17:51 . 2009-12-20 17:51      --------      d-----w-      c:\documents and settings\Owner\Local Settings\Application Data\{CAB0D9B9-C4F1-4336-82C9-2FB8C6BE711C}
2009-12-19 16:44 . 2009-12-19 16:44      --------      d-----w-      c:\documents and settings\Owner\Application Data\DriverCure
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\program files\Common Files\ParetoLogic
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\documents and settings\All Users\Application Data\DriverCure
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\documents and settings\All Users\Application Data\ParetoLogic
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\program files\ParetoLogic
2009-12-17 23:37 . 2009-12-17 23:37      116      ----a-w-      c:\windows\system32\fjhdyfhsn.bat
2009-12-17 12:34 . 2009-12-25 14:16      0      ----a-w-      c:\windows\Bquzerokonibu.bin
2009-12-17 12:34 . 2009-12-25 22:48      2945      ----a-w-      c:\windows\Dtoqodipokidupa.dat
2009-12-17 12:34 . 2009-12-17 12:34      --------      d-----w-      c:\documents and settings\Doug\Local Settings\Application Data\{7103367E-A524-4D09-8E0F-A8FB449F0EE7}
2009-12-17 12:30 . 2009-12-17 12:30      --------      d-sh--w-      c:\windows\system32\config\systemprofile\History
2009-12-17 12:30 . 2009-12-17 12:30      --------      d-sh--w-      c:\windows\system32\config\systemprofile\Temporary Internet Files
2009-12-10 21:51 . 2009-12-10 21:51      --------      d-----w-      c:\documents and settings\Owner\Local Settings\Application Data\{1548B00D-F086-4C8A-837A-E1CDFF4BA6B4}

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-31 14:24 . 2004-09-16 01:05      --------      d-----w-      c:\program files\Common Files\Symantec Shared
2009-12-31 13:47 . 2004-09-16 01:03      --------      d-----w-      c:\program files\Google
2009-12-10 22:19 . 2006-12-30 20:19      --------      d-----w-      c:\program files\Norton SystemWorks Basic Edition
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\documents and settings\All Users\Application Data\Norton
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\program files\Norton Security Scan
2009-11-26 23:44 . 2004-09-16 01:05      --------      d-----w-      c:\documents and settings\All Users\Application Data\Symantec
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\program files\NortonInstaller
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\documents and settings\All Users\Application Data\NortonInstaller
2009-11-26 23:04 . 2009-01-24 14:20      --------      d-----w-      c:\program files\Registry Winner
2009-10-23 11:52 . 2009-10-23 11:52      1924440      ----a-w-      c:\documents and settings\Doug\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 20:21      548352      ----a-w-      c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute      REG_MULTI_SZ         autocheck autochk *\0SsiEfr.e

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnk
backup=c:\windows\pss\America Online 9.0 Tray Icon.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Remocon Driver.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Remocon Driver.lnk
backup=c:\windows\pss\Remocon Driver.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Timer Recording Manager.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Timer Recording Manager.lnk
backup=c:\windows\pss\Timer Recording Manager.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck]
c:\windows\system32\dumprep 0 -u [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2004-07-20 17:22      57344      ----a-w-      c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2004-08-24 18:01      2552320      ----a-w-      c:\windows\ALCWZRD.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Spyware Protection]
2004-10-19 00:42      79448      ----a-w-      c:\progra~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer]
2004-04-07 20:07      496752      ----a-w-      c:\program files\Common Files\AOL\ACS\AOLDial.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
2002-09-11 05:26      368706      ----a-w-      c:\program files\BroadJump\Client Foundation\CFD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
2007-01-10 02:59      115816      ----a-r-      c:\program files\Common Files\Symantec Shared\ccApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CreateCD_Reminder]
2004-07-16 19:17      53248      ----a-w-      c:\windows\SONYSYS\VAIO Recovery\Reminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative WebCam Tray]
2004-11-18 02:50      258048      ----a-w-      c:\program files\Creative\Shared Files\CamTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2004-08-04 12:00      15360      ------w-      c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverCure]
2009-08-07 19:36      3993368      ----a-w-      c:\program files\ParetoLogic\DriverCure\DriverCure.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-03-17 22:10      61952      ----a-w-      c:\windows\system32\Hdaudpropshortcut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2004-07-01 18:58      118784      ----a-w-      c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPInSightLAN 02]
2003-06-11 09:52      380928      ----a-w-      c:\program files\Visual Networks\Visual IP InSight\SBC\IPClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPInSightMonitor 02]
2003-06-11 09:52      122880      ----a-w-      c:\program files\Visual Networks\Visual IP InSight\SBC\ipmon32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-09-21 21:36      305440      ----a-w-      c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
2002-07-17 01:21      28672      ----a-w-      c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2007-01-19 18:54      5674352      ----a-w-      c:\program files\MSN Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDUiP6000DMon]
2004-05-31 18:26      57344      ----a-w-      c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDUiP6000DTskbr]
2004-05-28 14:29      69632      ----a-w-      c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DTskbr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pure Networks Port Magic]
2004-05-27 19:17      99480      ----a-w-      c:\progra~1\PURENE~1\PORTMA~1\PortAOL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-05 06:54      417792      ----a-w-      c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
2005-01-07 03:12      26112      ----a-w-      c:\program files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2004-08-24 18:14      77824      ----a-w-      c:\windows\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
2006-11-17 22:14      4806656      ----a-w-      c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2009-12-16 22:26      2002160      ----a-w-      c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng]
2008-01-29 22:38      583048      ----a-w-      c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Upromise]
2007-07-10 20:00      385024      ----a-w-      c:\program files\Upromise\Upromise.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Upromise Update]
2007-07-10 20:00      147456      ----a-w-      c:\program files\Upromise\UpromiseUa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Recovery]
2003-04-20 05:08      28672      ----a-w-      c:\windows\SONYSYS\VAIO Recovery\PartSeal.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2]
2004-01-17 10:36      135168      ----a-w-      c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VF0060 STISvc]
2004-11-01 01:00      36864      ----a-r-      c:\windows\system32\V0060Pin.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YOP]
2005-04-23 01:49      397312      ----a-w-      c:\progra~1\Yahoo!\YOP\yop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\America Online 9.0\\waol.exe"=
"c:\\PROGRA~1\\Yahoo!\\MESSEN~1\\yserver.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Games\\Links 2003\\LinksMMIII.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [12/16/2009 4:26 PM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12/16/2009 4:26 PM 74480]
R2 NProtectService;Norton UnErase Protection;c:\progra~1\NORTON~1\NORTON~1\NPROTECT.EXE [11/3/2005 9:08 PM 95832]
R2 VAIO Entertainment File Import Service;VAIO Entertainment File Import Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe [11/4/2004 2:52 PM 118877]
S0 kymvuumt;kymvuumt; [x]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [12/16/2009 4:27 PM 7408]
S3 V0060VID;Creative WebCam Live! Ultra;c:\windows\system32\drivers\V0060Vid.sys [12/25/2005 7:32 AM 196409]
S3 VAIO Entertainment UPnP Client Adapter;VAIO Entertainment UPnP Client Adapter;c:\program files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe -RunBySCM --> c:\program files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe -RunBySCM [?]

--- Other Services/Drivers In Memory ---

*Deregistered* - IPVNMon
.
Contents of the 'Scheduled Tasks' folder

2009-12-19 c:\windows\Tasks\DriverCure.job
- c:\program files\ParetoLogic\DriverCure\DriverCure.exe [2009-08-07 19:36]

2009-12-30 c:\windows\Tasks\Norton Security Scan for Owner.job
- c:\program files\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2009-11-26 01:58]

2009-08-03 c:\windows\Tasks\Norton SystemWorks One Button Checkup.job
- c:\program files\Norton SystemWorks Basic Edition\OBC.exe [2006-11-16 20:51]

2009-12-31 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2009-12-31 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]

2009-12-28 c:\windows\Tasks\wrSpySweeper_1ADAD726508241898543D0F41BA6CEF2.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2006-10-23 22:14]

2009-12-28 c:\windows\Tasks\wrSpySweeper_1ADAD726508241898543D0F41BA6CEF2.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2006-10-23 22:14]

2009-12-28 c:\windows\Tasks\wrSpySweeper_5862EBE2B4454815B639F25FD63EBB06.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2006-10-23 22:14]

2009-12-28 c:\windows\Tasks\wrSpySweeper_5862EBE2B4454815B639F25FD63EBB06.job
- c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe [2006-10-23 22:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://yahoo.sbc.com/dsl
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uDefault_Search_URL = hxxp://www.google.com/ie
IE: &AOL Toolbar search - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
Trusted Zone: sbc.com\yahoo
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - ORPHANS REMOVED - - - -

SafeBoot-svcWRSSSDK
MSConfigStartUp-deadvlon - c:\documents and settings\Doug\Local Settings\Application Data\gjuvqv\fvaosysguard.exe
MSConfigStartUp-Qyoqayujupiliyo - c:\windows\utoxizuxawodafuv.dll
MSConfigStartUp-RegistrySmart - c:\program files\RegistrySmart\RegistrySmart.exe
AddRemove-CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030030 - c:\program files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030030\HXFSETUP.EXE -U -IHDAUDIO\FUNC_02&VEN_14F1&DEV_2BFA&SUBSYS_20030030



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-31 11:23
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...  

scanning hidden autostart entries ...

scanning hidden files ...  

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(492)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WRLogonNTF.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\program files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
c:\progra~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Sony\Giga Pocket\shwserv.exe
c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
c:\progra~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
c:\program files\Webroot\Spy Sweeper\SpySweeper.exe
c:\program files\Sony\Giga Pocket\RM_SV.exe
.
**************************************************************************
.
Completion time: 2009-12-31  11:28:03 - machine was rebooted
ComboFix-quarantined-files.txt  2009-12-31 17:27

Pre-Run: 152,772,997,120 bytes free
Post-Run: 152,711,843,840 bytes free

- - End Of File - - 4FC4A264C93ABFF19D4DD4AE983567BA
Avatar of Jonvee
Jonvee
Thanks for the log, but assuming the "Other Deletions" have already been dealt with by ComboFix, and running Malwarebytes(or other scanner) may have also modified the results, we really need a new Combo log file.

May i suggest you uninstall ComboFix as follows >
Start > Run > then type "ComboFix /Uninstall" (with no quotes, and space between x and / )
Then hit enter.  This will uninstall ComboFix, reset your clock settings, re-hide system hidden files, re-hide the file extensions and reset System Restore.

Then using another computer, download a fresh copy from here into a USB memory stick (or equivalent).  Rename it and connect to the infected machine.  THEN save to your Desktop>
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Incidently Combofix will disconnect your internet connection while it is scanning, but will restore your connection upon completion.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

combofix was the last thing i ran after i cleaned out the PC with the infections from malware bytes, super anti spyware, and spybot s & D.

however, i still need to install HT, so i dont think uninstalling combo fix and running it again will hurt anything.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

HT Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:23:19 PM, on 1/4/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Sony\Giga Pocket\shwserv.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\Program Files\Sony\Giga Pocket\RM_SV.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
J:\doug PC\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: ToolHelper - {EDC0F17F-F4B7-47e4-B73E-887FAEB376FA} - C:\Program Files\Upromise\upromisetoolbar.dll
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn3\yt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Upromise IE Toolbar - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files\Upromise\upromisetoolbar.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Upromise IE Toolbar - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files\Upromise\upromisetoolbar.dll
O9 - Extra 'Tools' menuitem: Upromise IE Toolbar - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files\Upromise\upromisetoolbar.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Basic Edition\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Basic Edition\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: http://yahoo.sbc.com
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {231B1C6E-F934-42A2-92B6-C2FEFEC24276} (yucsetreg Class) - C:\Program Files\Yahoo!\common\yucconfig.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} (Yahoo! Webcam Upload Wrapper) - http://chat.yahoo.com/cab/yuplapp.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} - http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\Sony\Giga Pocket\shwserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Canon PIXMA iP6000D Memory Card Manager (PDUiP6000DMemCrdMgr) - CANON INC. - C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Giga Pocket\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Giga Pocket\RM_SV.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe

--
End of file - 11608 bytes
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Combo Fix Log- latest log ran today.

ComboFix 09-12-31.01 - Doug 01/04/2010  13:26:09.3.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1033.18.2039.1640 [GMT -6:00]
Running from: c:\documents and settings\Doug\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Owner\Local Settings\temp\7zS1.tmp\avgsetup.exe
c:\documents and settings\Owner\Local Settings\temp\7zS1E.tmp\avgsetup.exe
c:\documents and settings\Owner\Local Settings\temp\GLF12.EXE
c:\recycler\NPROTECT\00000000.DAT
c:\recycler\NPROTECT\00000001.DAT
c:\recycler\NPROTECT\00000002
c:\recycler\NPROTECT\00000003
c:\recycler\NPROTECT\00000004
c:\recycler\NPROTECT\00000005
c:\recycler\NPROTECT\00000007
c:\recycler\NPROTECT\00000009
c:\recycler\NPROTECT\00000010
c:\recycler\NPROTECT\00000013.DAT
c:\recycler\NPROTECT\00000014
c:\recycler\NPROTECT\00000015
c:\recycler\NPROTECT\00000016
c:\recycler\NPROTECT\00000017
c:\recycler\NPROTECT\00000019
c:\recycler\NPROTECT\00000020.DAT
c:\recycler\NPROTECT\00000021
c:\recycler\NPROTECT\00000022
c:\recycler\NPROTECT\00000023.DAT
c:\recycler\NPROTECT\00000024
c:\recycler\NPROTECT\00000025
c:\recycler\NPROTECT\00000026
c:\recycler\NPROTECT\00000027
c:\recycler\NPROTECT\00000028
c:\recycler\NPROTECT\00000029
c:\recycler\NPROTECT\00000030
c:\recycler\NPROTECT\00000031
c:\recycler\NPROTECT\00000032
c:\recycler\NPROTECT\00000033
c:\recycler\NPROTECT\00000034
c:\recycler\NPROTECT\00000035
c:\recycler\NPROTECT\00000036.dat
c:\recycler\NPROTECT\00000037
c:\recycler\NPROTECT\00000038
c:\recycler\NPROTECT\00000041
c:\recycler\NPROTECT\00000042
c:\recycler\NPROTECT\00000043
c:\recycler\NPROTECT\00000044
c:\recycler\NPROTECT\00000045
c:\recycler\NPROTECT\00000048
c:\recycler\NPROTECT\00000049
c:\recycler\NPROTECT\00000050
c:\recycler\NPROTECT\00000051
c:\recycler\NPROTECT\00000053
c:\recycler\NPROTECT\00000054
c:\recycler\NPROTECT\00000055
c:\recycler\NPROTECT\00000057
c:\recycler\NPROTECT\00000058
c:\recycler\NPROTECT\00000059
c:\recycler\NPROTECT\00000060
c:\recycler\NPROTECT\00000061
c:\recycler\NPROTECT\00000062
c:\recycler\NPROTECT\00000063
c:\recycler\NPROTECT\00000064
c:\recycler\NPROTECT\00000065
c:\recycler\NPROTECT\00000066
c:\recycler\NPROTECT\00000067
c:\recycler\NPROTECT\00000068
c:\recycler\NPROTECT\00000069
c:\recycler\NPROTECT\00000071
c:\recycler\NPROTECT\00000072
c:\recycler\NPROTECT\00000074
c:\recycler\NPROTECT\00000075
c:\recycler\NPROTECT\00000077
c:\recycler\NPROTECT\00000078
c:\recycler\NPROTECT\00000079
c:\recycler\NPROTECT\00000080
c:\recycler\NPROTECT\00000081
c:\recycler\NPROTECT\00000083
c:\recycler\NPROTECT\00000084
c:\recycler\NPROTECT\00000085
c:\recycler\NPROTECT\00000086
c:\recycler\NPROTECT\00000088
c:\recycler\NPROTECT\00000089
c:\recycler\NPROTECT\00000090
c:\recycler\NPROTECT\00000091
c:\recycler\NPROTECT\00000092
c:\recycler\NPROTECT\00000093
c:\recycler\NPROTECT\00000094
c:\recycler\NPROTECT\00000095
c:\recycler\NPROTECT\00000096
c:\recycler\NPROTECT\00000097
c:\recycler\NPROTECT\00000098
c:\recycler\NPROTECT\00000099
c:\recycler\NPROTECT\00000100
c:\recycler\NPROTECT\00000104
c:\recycler\NPROTECT\00000105.dat
c:\recycler\NPROTECT\00000106.dat
c:\recycler\NPROTECT\00000108
c:\recycler\NPROTECT\00000109
c:\recycler\NPROTECT\00000110
c:\recycler\NPROTECT\00000111
c:\recycler\NPROTECT\00000112
c:\recycler\NPROTECT\00000113
c:\recycler\NPROTECT\00000114
c:\recycler\NPROTECT\00000116
c:\recycler\NPROTECT\00000118.dat
c:\recycler\NPROTECT\00000120
c:\recycler\NPROTECT\00000121.bat
c:\recycler\NPROTECT\00000122
c:\recycler\NPROTECT\00000123
c:\recycler\NPROTECT\00000125
c:\recycler\NPROTECT\00000127
c:\recycler\NPROTECT\00000128
c:\recycler\NPROTECT\00000129
c:\recycler\NPROTECT\00000132
c:\recycler\NPROTECT\00000133
c:\recycler\NPROTECT\00000134
c:\recycler\NPROTECT\00000135
c:\recycler\NPROTECT\00000137
c:\recycler\NPROTECT\00000138
c:\recycler\NPROTECT\00000139
c:\recycler\NPROTECT\00000140
c:\recycler\NPROTECT\00000141
c:\recycler\NPROTECT\00000142
c:\recycler\NPROTECT\00000143
c:\recycler\NPROTECT\00000144
c:\recycler\NPROTECT\00000145
c:\recycler\NPROTECT\00000146
c:\recycler\NPROTECT\00000147
c:\recycler\NPROTECT\00000148
c:\recycler\NPROTECT\00000149
c:\recycler\NPROTECT\00000150
c:\recycler\NPROTECT\00000151
c:\recycler\NPROTECT\00000153
c:\recycler\NPROTECT\00000154
c:\recycler\NPROTECT\00000157
c:\recycler\NPROTECT\00000160
c:\recycler\NPROTECT\00000161
c:\recycler\NPROTECT\00000162
c:\recycler\NPROTECT\00000163
c:\recycler\NPROTECT\00000164
c:\recycler\NPROTECT\00000165.dat
c:\recycler\NPROTECT\00000166
c:\recycler\NPROTECT\00000167.bad
c:\recycler\NPROTECT\00000168
c:\recycler\NPROTECT\00000169
c:\recycler\NPROTECT\00000170
c:\recycler\NPROTECT\00000171
c:\recycler\NPROTECT\00000172
c:\recycler\NPROTECT\00000178
c:\recycler\NPROTECT\00000179
c:\recycler\NPROTECT\00000180.md5
c:\recycler\NPROTECT\00000425
c:\recycler\NPROTECT\00000426
c:\recycler\NPROTECT . . . . failed to delete
c:\recycler\NPROTECT\NPROTECT.LOG . . . . failed to delete
.
---- Previous Run -------
.
c:\recycler\NPROTECT\00000000.DAT
c:\recycler\NPROTECT\00000001.DAT
c:\recycler\NPROTECT\00000002
c:\recycler\NPROTECT\00000003
c:\recycler\NPROTECT\00000004
c:\recycler\NPROTECT\00000005
c:\recycler\NPROTECT\00000007
c:\recycler\NPROTECT\00000009
c:\recycler\NPROTECT\00000010
c:\recycler\NPROTECT\00000013.DAT
c:\recycler\NPROTECT\00000014
c:\recycler\NPROTECT\00000015
c:\recycler\NPROTECT\00000016
c:\recycler\NPROTECT\00000017
c:\recycler\NPROTECT\00000019
c:\recycler\NPROTECT\00000020.DAT
c:\recycler\NPROTECT\00000021
c:\recycler\NPROTECT\00000022
c:\recycler\NPROTECT\00000023.DAT
c:\recycler\NPROTECT\00000024
c:\recycler\NPROTECT\00000025
c:\recycler\NPROTECT\00000026
c:\recycler\NPROTECT\00000027
c:\recycler\NPROTECT\00000028
c:\recycler\NPROTECT\00000029
c:\recycler\NPROTECT\00000030
c:\recycler\NPROTECT\00000031
c:\recycler\NPROTECT\00000032
c:\recycler\NPROTECT\00000033
c:\recycler\NPROTECT\00000034
c:\recycler\NPROTECT\00000035
c:\recycler\NPROTECT\00000036.dat
c:\recycler\NPROTECT\00000037
c:\recycler\NPROTECT\00000038
c:\recycler\NPROTECT\00000041
c:\recycler\NPROTECT\00000042
c:\recycler\NPROTECT\00000043
c:\recycler\NPROTECT\00000044
c:\recycler\NPROTECT\00000045
c:\recycler\NPROTECT\00000047
c:\recycler\NPROTECT\00000050
c:\recycler\NPROTECT\00000051
c:\recycler\NPROTECT\00000052
c:\recycler\NPROTECT\00000054
c:\recycler\NPROTECT\00000055
c:\recycler\NPROTECT\00000056
c:\recycler\NPROTECT\00000058
c:\recycler\NPROTECT\00000059
c:\recycler\NPROTECT\00000060
c:\recycler\NPROTECT\00000061
c:\recycler\NPROTECT\00000062
c:\recycler\NPROTECT\00000063
c:\recycler\NPROTECT\00000064
c:\recycler\NPROTECT\00000065
c:\recycler\NPROTECT\00000066
c:\recycler\NPROTECT\00000067
c:\recycler\NPROTECT\00000068
c:\recycler\NPROTECT\00000069
c:\recycler\NPROTECT\00000070
c:\recycler\NPROTECT\00000072
c:\recycler\NPROTECT\00000073
c:\recycler\NPROTECT\00000075
c:\recycler\NPROTECT\00000076
c:\recycler\NPROTECT\00000078
c:\recycler\NPROTECT\00000079
c:\recycler\NPROTECT\00000080
c:\recycler\NPROTECT\00000081
c:\recycler\NPROTECT\00000082
c:\recycler\NPROTECT\00000084
c:\recycler\NPROTECT\00000085
c:\recycler\NPROTECT\00000086
c:\recycler\NPROTECT\00000087
c:\recycler\NPROTECT\00000089
c:\recycler\NPROTECT\00000090
c:\recycler\NPROTECT\00000091
c:\recycler\NPROTECT\00000092
c:\recycler\NPROTECT\00000093
c:\recycler\NPROTECT\00000094
c:\recycler\NPROTECT\00000095
c:\recycler\NPROTECT\00000096
c:\recycler\NPROTECT\00000097
c:\recycler\NPROTECT\00000098
c:\recycler\NPROTECT\00000099
c:\recycler\NPROTECT\00000100
c:\recycler\NPROTECT\00000104
c:\recycler\NPROTECT\00000105.dat
c:\recycler\NPROTECT\00000106.dat
c:\recycler\NPROTECT\00000108
c:\recycler\NPROTECT\00000109
c:\recycler\NPROTECT\00000110
c:\recycler\NPROTECT\00000111
c:\recycler\NPROTECT\00000112
c:\recycler\NPROTECT\00000113
c:\recycler\NPROTECT\00000114
c:\recycler\NPROTECT\00000116
c:\recycler\NPROTECT\00000118.dat
c:\recycler\NPROTECT\00000120
c:\recycler\NPROTECT\00000121.bat
c:\recycler\NPROTECT\00000122
c:\recycler\NPROTECT\00000123
c:\recycler\NPROTECT\00000125
c:\recycler\NPROTECT\00000127
c:\recycler\NPROTECT\00000128
c:\recycler\NPROTECT\00000129
c:\recycler\NPROTECT\00000132
c:\recycler\NPROTECT\00000133
c:\recycler\NPROTECT\00000134
c:\recycler\NPROTECT\00000135
c:\recycler\NPROTECT\00000137
c:\recycler\NPROTECT\00000138
c:\recycler\NPROTECT\00000139
c:\recycler\NPROTECT\00000140
c:\recycler\NPROTECT\00000141
c:\recycler\NPROTECT\00000142
c:\recycler\NPROTECT\00000143
c:\recycler\NPROTECT\00000144
c:\recycler\NPROTECT\00000145
c:\recycler\NPROTECT\00000146
c:\recycler\NPROTECT\00000147
c:\recycler\NPROTECT\00000148
c:\recycler\NPROTECT\00000149
c:\recycler\NPROTECT\00000150
c:\recycler\NPROTECT\00000151
c:\recycler\NPROTECT\00000153
c:\recycler\NPROTECT\00000154
c:\recycler\NPROTECT\00000157
c:\recycler\NPROTECT\00000160
c:\recycler\NPROTECT\00000161
c:\recycler\NPROTECT\00000162
c:\recycler\NPROTECT\00000163
c:\recycler\NPROTECT\00000164
c:\recycler\NPROTECT\00000165.dat
c:\recycler\NPROTECT\00000166
c:\recycler\NPROTECT\00000167.bad
c:\recycler\NPROTECT\00000168
c:\recycler\NPROTECT\00000169
c:\recycler\NPROTECT\00000170
c:\recycler\NPROTECT\00000171
c:\recycler\NPROTECT\00000172
c:\recycler\NPROTECT\00000178
c:\recycler\NPROTECT\00000179
c:\recycler\NPROTECT\00000180.md5
c:\recycler\NPROTECT\00000187
c:\recycler\NPROTECT\00000188

.
(((((((((((((((((((((((((   Files Created from 2009-12-04 to 2010-01-04  )))))))))))))))))))))))))))))))
.

2010-01-04 17:56 . 2010-01-04 17:56      --------      d-----w-      c:\documents and settings\Owner\Application Data\AVG8
2010-01-04 17:45 . 2010-01-04 18:18      --------      d-----w-      C:\_Save
2010-01-04 15:56 . 2004-08-04 12:00      41600      -c--a-w-      c:\windows\system32\dllcache\weitekp9.dll
2010-01-04 15:55 . 2001-08-17 19:28      765884      -c--a-w-      c:\windows\system32\dllcache\usrti.sys
2010-01-04 15:54 . 2001-08-18 04:36      211968      -c--a-w-      c:\windows\system32\dllcache\um54scan.dll
2010-01-04 15:53 . 2001-08-17 18:10      28232      -c--a-w-      c:\windows\system32\dllcache\tos4mo.sys
2010-01-04 15:52 . 2001-08-17 19:50      103936      -c--a-w-      c:\windows\system32\dllcache\sx.sys
2010-01-04 15:51 . 2001-08-17 18:51      37040      -c--a-w-      c:\windows\system32\dllcache\sonypi.sys
2010-01-04 15:50 . 2001-08-18 04:36      28160      -c--a-w-      c:\windows\system32\dllcache\sm91w.dll
2010-01-04 15:49 . 2001-08-17 19:53      6784      -c--a-w-      c:\windows\system32\dllcache\serscan.sys
2010-01-04 15:48 . 2001-08-18 04:36      62496      -c--a-w-      c:\windows\system32\dllcache\s3mtrio.dll
2010-01-04 15:47 . 2001-08-17 19:28      899146      -c--a-w-      c:\windows\system32\dllcache\r2mdkxga.sys
2010-01-04 15:46 . 2004-08-04 12:00      131584      -c--a-w-      c:\windows\system32\dllcache\pmxviceo.dll
2010-01-04 15:45 . 2001-08-18 04:36      41984      -c--a-w-      c:\windows\system32\dllcache\ovui2rc.dll
2010-01-04 15:44 . 2001-08-17 18:49      51552      -c--a-w-      c:\windows\system32\dllcache\ntgrip.sys
2010-01-04 15:43 . 2001-08-17 19:50      75520      -c--a-w-      c:\windows\system32\dllcache\mxport.sys
2010-01-04 15:42 . 2001-08-17 19:57      16128      -c--a-w-      c:\windows\system32\dllcache\modemcsa.sys
2010-01-04 15:41 . 2001-08-17 18:12      70730      -c--a-w-      c:\windows\system32\dllcache\lne100tx.sys
2010-01-04 15:40 . 2001-08-17 19:49      26624      -c--a-w-      c:\windows\system32\dllcache\irstusb.sys
2010-01-04 15:39 . 2001-08-18 04:36      26624      -c--a-w-      c:\windows\system32\dllcache\icam3ext.dll
2010-01-04 15:38 . 2001-08-17 19:28      67167      -c--a-w-      c:\windows\system32\dllcache\hsf_bsc2.sys
2010-01-04 15:37 . 2001-08-17 19:51      82304      -c--a-w-      c:\windows\system32\dllcache\grclass.sys
2010-01-04 15:36 . 2001-08-17 18:11      12362      -c--a-w-      c:\windows\system32\dllcache\f3ab18xi.sys
2010-01-04 15:35 . 2001-08-17 18:11      70174      -c--a-w-      c:\windows\system32\dllcache\el98xn5.sys
2010-01-04 15:34 . 2001-08-17 18:14      21606      -c--a-w-      c:\windows\system32\dllcache\digiisdn.sys
2010-01-04 15:33 . 2001-08-17 18:19      6912      -c--a-w-      c:\windows\system32\dllcache\ctlfacem.sys
2010-01-04 15:32 . 2001-08-17 19:51      13824      -c--a-w-      c:\windows\system32\dllcache\bulltlp3.sys
2010-01-04 15:31 . 2001-08-17 18:49      23552      -c--a-w-      c:\windows\system32\dllcache\atixbar.sys
2010-01-04 15:30 . 2003-03-24 22:52      16384      -c--a-w-      c:\windows\system32\dllcache\tcptsat.dll
2009-12-31 18:09 . 2009-12-31 17:03      3879200      ----a-r-      C:\ComboFix.exe
2009-12-31 14:24 . 2009-12-31 14:24      --------      d-----w-      c:\windows\system32\en
2009-12-31 14:24 . 2009-12-31 14:24      --------      d-----w-      c:\windows\system32\bits
2009-12-30 20:42 . 2008-04-14 11:42      1306624      -c--a-w-      c:\windows\system32\dllcache\msxml6.dll
2009-12-30 20:42 . 2008-04-14 11:42      1306624      ------w-      c:\windows\system32\msxml6.dll
2009-12-30 20:42 . 2008-04-14 04:57      79872      -c--a-w-      c:\windows\system32\dllcache\msxml6r.dll
2009-12-30 20:42 . 2008-04-14 04:57      79872      ------w-      c:\windows\system32\msxml6r.dll
2009-12-30 20:42 . 2007-06-26 17:30      22060      -c----w-      c:\windows\system32\dllcache\npds.zip
2009-12-30 20:42 . 2007-06-26 17:26      403      -c----w-      c:\windows\system32\dllcache\npdrmv2.zip
2009-12-30 20:38 . 2009-12-30 20:42      --------      d-----w-      c:\windows\ServicePackFiles
2009-12-30 20:38 . 2008-04-14 11:42      294912      -c----w-      c:\windows\system32\dllcache\dlimport.exe
2009-12-30 20:31 . 2009-12-30 20:31      --------      d-----w-      c:\windows\EHome
2009-12-30 20:29 . 2009-12-30 20:42      --------      d-----w-      c:\windows\system32\CatRoot_bak
2009-12-29 22:57 . 2009-12-29 22:58      148661698      ----a-w-      C:\reg122909_2.reg
2009-12-29 22:56 . 2009-12-29 22:56      148661776      ----a-w-      C:\reg122909.reg
2009-12-29 19:54 . 2009-12-29 19:54      52224      ----a-w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2009-12-29 19:50 . 2009-12-29 19:54      117760      ----a-w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2009-12-29 19:50 . 2009-12-29 19:50      --------      d-----w-      c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
2009-12-29 19:45 . 2009-12-29 19:45      552      ----a-w-      c:\windows\system32\d3d8caps.dat
2009-12-29 19:45 . 2009-12-29 19:45      --------      d-----w-      c:\documents and settings\Administrator\Application Data\Sony Corporation
2009-12-29 17:34 . 2009-12-29 17:34      --------      d-----w-      c:\documents and settings\Owner\Application Data\Malwarebytes
2009-12-28 21:11 . 2009-12-30 17:52      52224      ----a-w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2009-12-28 19:17 . 2009-12-31 15:00      --------      d-----w-      c:\program files\Spybot - Search & Destroy
2009-12-28 19:17 . 2009-12-31 15:00      --------      d-----w-      c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-28 19:11 . 2009-12-30 17:52      117760      ----a-w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\program files\SUPERAntiSpyware
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\Doug\Application Data\SUPERAntiSpyware.com
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\program files\Common Files\Wise Installation Wizard
2009-12-28 19:10 . 2009-12-28 19:10      --------      d-----w-      c:\documents and settings\Doug\Application Data\Malwarebytes
2009-12-28 19:10 . 2009-12-03 22:14      38224      ----a-w-      c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-28 19:09 . 2009-12-28 19:09      --------      d-----w-      c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-28 19:09 . 2009-12-28 19:10      --------      d-----w-      c:\program files\Malwarebytes' Anti-Malware
2009-12-28 19:09 . 2009-12-03 22:13      19160      ----a-w-      c:\windows\system32\drivers\mbam.sys
2009-12-28 19:02 . 2001-08-17 19:48      12160      -c--a-w-      c:\windows\system32\dllcache\mouhid.sys
2009-12-28 19:02 . 2001-08-17 19:48      12160      ----a-w-      c:\windows\system32\drivers\mouhid.sys
2009-12-23 12:41 . 2009-12-28 20:09      --------      d-----w-      c:\documents and settings\Doug\Local Settings\Application Data\gjuvqv
2009-12-20 17:51 . 2009-12-20 17:51      --------      d-----w-      c:\documents and settings\Owner\Local Settings\Application Data\{CAB0D9B9-C4F1-4336-82C9-2FB8C6BE711C}
2009-12-19 16:44 . 2009-12-19 16:44      --------      d-----w-      c:\documents and settings\Owner\Application Data\DriverCure
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\program files\Common Files\ParetoLogic
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\documents and settings\All Users\Application Data\DriverCure
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\documents and settings\All Users\Application Data\ParetoLogic
2009-12-19 16:43 . 2009-12-19 16:43      --------      d-----w-      c:\program files\ParetoLogic
2009-12-17 23:37 . 2009-12-17 23:37      116      ----a-w-      c:\windows\system32\fjhdyfhsn.bat
2009-12-17 12:34 . 2009-12-25 14:16      0      ----a-w-      c:\windows\Bquzerokonibu.bin
2009-12-17 12:34 . 2009-12-25 22:48      2945      ----a-w-      c:\windows\Dtoqodipokidupa.dat
2009-12-17 12:34 . 2009-12-17 12:34      --------      d-----w-      c:\documents and settings\Doug\Local Settings\Application Data\{7103367E-A524-4D09-8E0F-A8FB449F0EE7}
2009-12-17 12:30 . 2009-12-17 12:30      --------      d-sh--w-      c:\windows\system32\config\systemprofile\History
2009-12-17 12:30 . 2009-12-17 12:30      --------      d-sh--w-      c:\windows\system32\config\systemprofile\Temporary Internet Files
2009-12-10 21:51 . 2009-12-10 21:51      --------      d-----w-      c:\documents and settings\Owner\Local Settings\Application Data\{1548B00D-F086-4C8A-837A-E1CDFF4BA6B4}

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-04 18:16 . 2005-01-08 20:45      --------      d-----w-      c:\program files\Webroot
2010-01-04 18:15 . 2005-01-08 20:45      --------      d-----w-      c:\documents and settings\Owner\Application Data\Webroot
2009-12-31 14:24 . 2004-09-16 01:05      --------      d-----w-      c:\program files\Common Files\Symantec Shared
2009-12-31 13:47 . 2004-09-16 01:03      --------      d-----w-      c:\program files\Google
2009-12-10 22:19 . 2006-12-30 20:19      --------      d-----w-      c:\program files\Norton SystemWorks Basic Edition
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\documents and settings\All Users\Application Data\Norton
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\program files\Norton Security Scan
2009-11-26 23:44 . 2004-09-16 01:05      --------      d-----w-      c:\documents and settings\All Users\Application Data\Symantec
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\program files\NortonInstaller
2009-11-26 23:44 . 2009-11-26 23:44      --------      d-----w-      c:\documents and settings\All Users\Application Data\NortonInstaller
2009-11-26 23:04 . 2009-01-24 14:20      --------      d-----w-      c:\program files\Registry Winner
2009-10-23 11:52 . 2009-10-23 11:52      1924440      ----a-w-      c:\documents and settings\Doug\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
.

(((((((((((((((((((((((((((((   SnapShot@2009-12-31_17.23.45   )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-12 02:54 . 2009-07-12 02:54      65536              c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      49152              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      49152              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      61440              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      57344              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      65536              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      45056              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
+ 2009-07-12 02:32 . 2009-07-12 02:32      40960              c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
+ 2009-07-12 07:07 . 2009-07-12 07:07      57856              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
+ 2009-07-12 07:19 . 2009-07-12 07:19      69632              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
+ 2009-07-12 01:41 . 2009-07-12 01:41      97280              c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
+ 2010-01-04 19:34 . 2010-01-04 19:34      53248              c:\windows\Temp\catchme.dll
+ 2010-01-04 18:06 . 2003-07-28 13:55      24064              c:\windows\system32\ReinstallBackups\0021\DriverFiles\IntelNic.dll
+ 2010-01-04 18:06 . 2004-02-19 00:40      12288              c:\windows\system32\ReinstallBackups\0021\DriverFiles\e100bmsg.dll
- 2004-09-02 01:29 . 2009-12-30 20:51      52764              c:\windows\system32\perfc009.dat
+ 2004-09-02 01:29 . 2010-01-04 18:24      52764              c:\windows\system32\perfc009.dat
+ 2004-09-02 01:30 . 2003-07-28 12:55      24064              c:\windows\system32\IntelNic.dll
- 2004-09-02 01:30 . 2003-07-28 13:55      24064              c:\windows\system32\IntelNic.dll
+ 2004-09-02 01:30 . 2004-02-18 23:40      12288              c:\windows\system32\e100bmsg.dll
- 2004-09-02 01:30 . 2004-02-19 00:40      12288              c:\windows\system32\e100bmsg.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      13894              c:\windows\system32\dllcache\zonelibm.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      29760              c:\windows\system32\dllcache\znetm.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      41029              c:\windows\system32\dllcache\zcorem.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      36937              c:\windows\system32\dllcache\zclientm.exe
+ 2010-01-04 15:57 . 2001-08-18 04:36      23040              c:\windows\system32\dllcache\xrxwbtmp.dll
+ 2010-01-04 15:57 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\xrxscnui.dll
+ 2010-01-04 15:57 . 2001-08-18 04:37      27648              c:\windows\system32\dllcache\xrxftplt.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      11776              c:\windows\system32\dllcache\xolehlp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50176              c:\windows\system32\dllcache\xmlprovi.dll
+ 2010-01-04 15:57 . 2001-08-18 04:37      99865              c:\windows\system32\dllcache\xlog.exe
+ 2010-01-04 15:57 . 2001-08-17 18:11      16970              c:\windows\system32\dllcache\xem336n5.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      30720              c:\windows\system32\dllcache\xcopy.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      91648              c:\windows\system32\dllcache\xactsrv.dll
+ 2004-08-04 00:56 . 2004-08-04 12:00      51712              c:\windows\system32\dllcache\wzcsapi.dll
+ 2010-01-04 15:57 . 2008-04-14 04:04      19455              c:\windows\system32\dllcache\wvchntxx.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      32256              c:\windows\system32\dllcache\wupdmgr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      18432              c:\windows\system32\dllcache\wtsapi32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50688              c:\windows\system32\dllcache\wstdecod.dll
+ 2004-09-01 18:39 . 2008-04-14 06:16      19200              c:\windows\system32\dllcache\wstcodec.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      22528              c:\windows\system32\dllcache\wsock32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      41984              c:\windows\system32\dllcache\wsnmp32.dll
+ 2010-01-04 15:57 . 2008-04-14 04:04      12063              c:\windows\system32\dllcache\wsiintxx.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      19968              c:\windows\system32\dllcache\wshtcpip.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\wshrm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\wshisn.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14336              c:\windows\system32\dllcache\wship6.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      90112              c:\windows\system32\dllcache\wshext.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      36864              c:\windows\system32\dllcache\wshcon.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      81408              c:\windows\system32\dllcache\wscsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      13824              c:\windows\system32\dllcache\wscntfy.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      12032              c:\windows\system32\dllcache\ws2ifsl.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      19968              c:\windows\system32\dllcache\ws2help.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      82944              c:\windows\system32\dllcache\ws2_32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\wpnpinst.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      32256              c:\windows\system32\dllcache\wpabaln.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      13824              c:\windows\system32\dllcache\wowfaxui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      10368              c:\windows\system32\dllcache\wowexec.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpui.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpui.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      73728              c:\windows\system32\dllcache\wmplayer.exe
- 2009-12-30 20:38 . 2008-04-14 11:42      73728              c:\windows\system32\dllcache\wmplayer.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpcore.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpcore.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpcd.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\wmpcd.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      98304              c:\windows\system32\dllcache\wmpband.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      98304              c:\windows\system32\dllcache\wmpband.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      95232              c:\windows\system32\dllcache\wmiutils.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      52224              c:\windows\system32\dllcache\wmitimep.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      41472              c:\windows\system32\dllcache\wmipsess.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\wmiprop.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      62464              c:\windows\system32\dllcache\wmipjobj.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      61952              c:\windows\system32\dllcache\wmipiprt.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      75264              c:\windows\system32\dllcache\wmipicmp.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      61440              c:\windows\system32\dllcache\wmimsg.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      60928              c:\windows\system32\dllcache\wmicookr.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      88576              c:\windows\system32\dllcache\wmiaprpl.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      45568              c:\windows\system32\dllcache\wmi2xml.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      51200              c:\windows\system32\dllcache\wmerrenu.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      23552              c:\windows\system32\dllcache\wmdmps.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      23552              c:\windows\system32\dllcache\wmdmps.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      27136              c:\windows\system32\dllcache\wmdmlog.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      27136              c:\windows\system32\dllcache\wmdmlog.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      92672              c:\windows\system32\dllcache\wlnotify.dll
+ 2010-01-04 15:57 . 2001-08-17 18:12      34890              c:\windows\system32\dllcache\wlandrv2.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      69120              c:\windows\system32\dllcache\wlanapi.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      25088              c:\windows\system32\dllcache\wisc10.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\winstrm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      53760              c:\windows\system32\dllcache\winsta.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      17408              c:\windows\system32\dllcache\winshfhc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      99328              c:\windows\system32\dllcache\winscard.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\winrnr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\winmsd.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\winmgmtr.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\winmgmt.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      32768              c:\windows\system32\dllcache\winipsec.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      35328              c:\windows\system32\dllcache\winchat.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\win87em.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      75776              c:\windows\system32\dllcache\wiascr.dll
+ 2010-01-04 15:57 . 2001-08-18 04:36      53760              c:\windows\system32\dllcache\wiamsmud.dll
+ 2010-01-04 15:57 . 2001-08-18 04:36      87040              c:\windows\system32\dllcache\wiafbdrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      13600              c:\windows\system32\dllcache\wfwnet.drv
+ 2004-09-02 01:29 . 2008-04-14 11:42      65024              c:\windows\system32\dllcache\wextract.exe
+ 2010-01-04 15:56 . 2004-08-04 12:00      31232              c:\windows\system32\dllcache\weitekp9.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      40448              c:\windows\system32\dllcache\webhits.dll
+ 2004-09-02 01:29 . 2006-01-04 03:35      68096              c:\windows\system32\dllcache\webclnt.dll
+ 2004-09-02 02:04 . 2008-04-14 06:47      83072              c:\windows\system32\dllcache\wdmaud.sys
+ 2004-08-04 00:56 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\wdmaud.drv
+ 2004-09-02 01:29 . 2006-03-24 04:37      49152              c:\windows\system32\dllcache\wdigest.dll
+ 2010-01-04 15:56 . 2008-04-14 04:04      23615              c:\windows\system32\dllcache\wch7xxnt.sys
+ 2010-01-04 15:56 . 2008-04-14 06:15      31744              c:\windows\system32\dllcache\wceusbsh.sys
+ 2010-01-04 15:56 . 2001-08-17 18:10      35871              c:\windows\system32\dllcache\wbfirdma.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      43520              c:\windows\system32\dllcache\wbemsvc.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\wbemprox.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      43008              c:\windows\system32\dllcache\wbemperf.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      71680              c:\windows\system32\dllcache\wbemcons.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\wbemads.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\wb32.exe
+ 2009-12-30 20:36 . 2008-04-14 04:04      25471              c:\windows\system32\dllcache\watv10nt.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      22271              c:\windows\system32\dllcache\watv06nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      33599              c:\windows\system32\dllcache\watv04nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      19551              c:\windows\system32\dllcache\watv02nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      29311              c:\windows\system32\dllcache\watv01nt.sys
+ 2004-09-02 01:29 . 2008-04-14 06:15      17664              c:\windows\system32\dllcache\watchdog.sys
+ 2004-09-02 01:29 . 2008-04-14 06:27      34560              c:\windows\system32\dllcache\wanarp.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      11935              c:\windows\system32\dllcache\wadv11nt.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      11871              c:\windows\system32\dllcache\wadv09nt.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      11295              c:\windows\system32\dllcache\wadv08nt.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      11807              c:\windows\system32\dllcache\wadv07nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      11775              c:\windows\system32\dllcache\wadv05nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      12127              c:\windows\system32\dllcache\wadv02nt.sys
+ 2010-01-04 15:56 . 2008-04-14 04:04      12415              c:\windows\system32\dllcache\wadv01nt.sys
+ 2009-12-30 20:36 . 2008-04-14 06:13      14208              c:\windows\system32\dllcache\wacompen.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      30208              c:\windows\system32\dllcache\wabmig.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      85504              c:\windows\system32\dllcache\wabimp.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      32768              c:\windows\system32\dllcache\wabfind.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      46080              c:\windows\system32\dllcache\wab.exe
+ 2010-01-04 15:56 . 2001-08-17 18:13      16925              c:\windows\system32\dllcache\w940nd.sys
+ 2010-01-04 15:56 . 2001-08-17 18:13      19016              c:\windows\system32\dllcache\w926nd.sys
+ 2010-01-04 15:56 . 2001-08-17 18:13      19528              c:\windows\system32\dllcache\w840nd.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      15872              c:\windows\system32\dllcache\w3ssl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\w32topl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      49664              c:\windows\system32\dllcache\w32tm.exe
+ 2010-01-04 15:56 . 2004-08-04 12:00      48256              c:\windows\system32\dllcache\w32.dll
+ 2010-01-04 15:56 . 2001-08-17 19:28      64605              c:\windows\system32\dllcache\vvoice.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      33792              c:\windows\system32\dllcache\vssadmin.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\vss_ps.dll
+ 2004-09-02 01:29 . 2008-04-14 06:11      52352              c:\windows\system32\dllcache\volsnap.sys
+ 2010-01-04 15:56 . 2004-08-04 12:00      86073              c:\windows\system32\dllcache\voicesub.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\vmmreg32.dll
+ 2004-09-02 01:29 . 2008-04-14 06:14      81664              c:\windows\system32\dllcache\videoprt.sys
+ 2010-01-04 15:56 . 2001-08-17 19:49      24576              c:\windows\system32\dllcache\viairda.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      42240              c:\windows\system32\dllcache\viaagp.sys
+ 2004-09-02 01:30 . 2004-08-04 12:00      18176              c:\windows\system32\dllcache\vga64k.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      51456              c:\windows\system32\dllcache\vga256.dll
+ 2004-09-02 01:29 . 2008-04-14 06:14      20992              c:\windows\system32\dllcache\vga.sys
+ 2004-09-01 18:38 . 2008-04-14 11:42      53760              c:\windows\system32\dllcache\vfwwdm32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\version.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      98304              c:\windows\system32\dllcache\verifier.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      26624              c:\windows\system32\dllcache\verifier.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      51712              c:\windows\system32\dllcache\vdmredir.dll
+ 2001-08-17 14:02 . 2004-08-04 12:00      58112              c:\windows\system32\dllcache\vdmindvd.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\vdmdbg.dll
+ 2009-12-30 20:36 . 2008-04-14 11:42      11325              c:\windows\system32\dllcache\vchnt5.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      30749              c:\windows\system32\dllcache\vbajet32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50176              c:\windows\system32\dllcache\utilman.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      25600              c:\windows\system32\dllcache\utildll.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      49211              c:\windows\system32\dllcache\usrvpa.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      45116              c:\windows\system32\dllcache\usrvoica.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      49209              c:\windows\system32\dllcache\usrv80a.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      41019              c:\windows\system32\dllcache\usrsvpia.dll
+ 2001-08-17 22:37 . 2004-08-04 12:00      69700              c:\windows\system32\dllcache\usrshuta.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      49211              c:\windows\system32\dllcache\usrsdpia.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      77883              c:\windows\system32\dllcache\usrrtosa.dll
+ 2001-08-17 22:37 . 2004-08-04 12:00      61508              c:\windows\system32\dllcache\usrprbda.exe
+ 2001-08-17 22:37 . 2004-08-04 12:00      77891              c:\windows\system32\dllcache\usrmlnka.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      53305              c:\windows\system32\dllcache\usrlbva.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      86073              c:\windows\system32\dllcache\usrfaxa.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      77890              c:\windows\system32\dllcache\usrdpa.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      69699              c:\windows\system32\dllcache\usrcoina.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      61500              c:\windows\system32\dllcache\usrcntra.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      26112              c:\windows\system32\dllcache\userinit.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      47872              c:\windows\system32\dllcache\user.exe
+ 2004-09-01 18:37 . 2008-04-14 11:42      74240              c:\windows\system32\dllcache\usbui.dll
+ 2004-08-03 23:08 . 2008-04-14 06:15      20608              c:\windows\system32\dllcache\usbuhci.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      26368              c:\windows\system32\dllcache\usbstor.sys
+ 2010-01-04 15:55 . 2008-04-14 06:15      26112              c:\windows\system32\dllcache\usbser.sys
+ 2005-03-12 21:29 . 2008-04-14 06:15      15104              c:\windows\system32\dllcache\usbscan.sys
+ 2005-01-07 02:48 . 2008-04-14 06:17      25856              c:\windows\system32\dllcache\usbprint.sys
+ 2010-01-04 15:55 . 2008-04-14 06:15      17152              c:\windows\system32\dllcache\usbohci.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\usbmon.dll
+ 2004-08-03 23:08 . 2008-04-14 06:15      15872              c:\windows\system32\dllcache\usbintel.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      59520              c:\windows\system32\dllcache\usbhub.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      30208              c:\windows\system32\dllcache\usbehci.sys
+ 2005-01-07 02:48 . 2008-04-14 06:15      32128              c:\windows\system32\dllcache\usbccgp.sys
+ 2001-08-17 14:03 . 2008-04-14 06:15      25728              c:\windows\system32\dllcache\usbcamd2.sys
+ 2001-08-17 14:03 . 2008-04-14 06:15      25600              c:\windows\system32\dllcache\usbcamd.sys
+ 2010-01-04 15:55 . 2008-04-14 06:15      60032              c:\windows\system32\dllcache\usbaudio.sys
+ 2009-12-30 20:36 . 2008-04-14 06:26      12800              c:\windows\system32\dllcache\usb8023x.sys
+ 2004-09-02 01:29 . 2008-04-14 06:26      12800              c:\windows\system32\dllcache\usb8023.sys
+ 2010-01-04 15:55 . 2008-04-14 04:05      32384              c:\windows\system32\dllcache\usb101et.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      17920              c:\windows\system32\dllcache\ureg.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      18432              c:\windows\system32\dllcache\ups.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      16896              c:\windows\system32\dllcache\upnpcont.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\unsecapp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      13824              c:\windows\system32\dllcache\uniplat.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      74240              c:\windows\system32\dllcache\unimdmat.dll
+ 2010-01-04 15:55 . 2004-08-04 12:00      76288              c:\windows\system32\dllcache\uniime.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      32339              c:\windows\system32\dllcache\uniansi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\umdmxfrm.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      94720              c:\windows\system32\dllcache\umaxud32.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      28160              c:\windows\system32\dllcache\umaxu40.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      26624              c:\windows\system32\dllcache\umaxu22.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      69632              c:\windows\system32\dllcache\umaxu12.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      50688              c:\windows\system32\dllcache\umaxscan.dll
+ 2010-01-04 15:55 . 2001-08-17 19:58      22912              c:\windows\system32\dllcache\umaxpcls.sys
+ 2010-01-04 15:55 . 2001-08-18 04:36      50176              c:\windows\system32\dllcache\umaxp60.dll
+ 2010-01-04 15:55 . 2001-08-18 04:36      47616              c:\windows\system32\dllcache\umaxcam.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      35840              c:\windows\system32\dllcache\umandlg.dll
+ 2010-01-04 15:54 . 2001-08-17 19:52      36736              c:\windows\system32\dllcache\ultra.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      82432              c:\windows\system32\dllcache\ufat.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      26624              c:\windows\system32\dllcache\udhisapi.dll
+ 2004-09-02 01:29 . 2008-04-14 06:02      66048              c:\windows\system32\dllcache\udfs.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      44672              c:\windows\system32\dllcache\uagp35.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      25600              c:\windows\system32\dllcache\twunk_32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      49680              c:\windows\system32\dllcache\twunk_16.exe
+ 2010-01-04 15:54 . 2001-08-17 19:48      11520              c:\windows\system32\dllcache\twotrack.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      57856              c:\windows\system32\dllcache\twext.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50688              c:\windows\system32\dllcache\twain_32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      94784              c:\windows\system32\dllcache\twain.dll
+ 2004-08-03 23:03 . 2008-04-14 06:26      12288              c:\windows\system32\dllcache\tunmp.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\tsshutdn.exe
+ 2010-01-04 15:54 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\tsprof.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      50688              c:\windows\system32\dllcache\tspkg.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\tskill.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      53248              c:\windows\system32\dllcache\tsgqec.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\tsdiscon.exe
+ 2004-09-02 01:29 . 2008-04-14 11:43      12168              c:\windows\system32\dllcache\tsddd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\tsd32.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\tscon.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      93696              c:\windows\system32\dllcache\tscfgwmi.dll
+ 2001-08-17 14:06 . 2004-08-04 12:00      21376              c:\windows\system32\dllcache\tsbvcap.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      52224              c:\windows\system32\dllcache\tsappcmp.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      59904              c:\windows\system32\dllcache\trnsprov.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      90624              c:\windows\system32\dllcache\trkwks.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      40960              c:\windows\system32\dllcache\trialoc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      31232              c:\windows\system32\dllcache\traffic.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\tracert6.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      12288              c:\windows\system32\dllcache\tracert.exe
+ 2010-01-04 15:54 . 2001-08-17 18:12      34375              c:\windows\system32\dllcache\tpro4.sys
+ 2010-01-04 15:54 . 2001-08-18 04:35      42496              c:\windows\system32\dllcache\tp4res.dll
+ 2010-01-04 15:54 . 2008-04-14 11:42      82944              c:\windows\system32\dllcache\tp4mon.exe
+ 2010-01-04 15:54 . 2001-08-18 04:36      31744              c:\windows\system32\dllcache\tp4.dll
+ 2001-08-17 14:01 . 2004-08-04 12:00      51712              c:\windows\system32\dllcache\tosdvd.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      13888              c:\windows\system32\dllcache\toolhelp.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      61952              c:\windows\system32\dllcache\tmplprov.dll
+ 2010-01-04 15:53 . 2004-08-04 12:00      10240              c:\windows\system32\dllcache\tmigrate.dll
+ 2010-01-04 15:53 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\tintlphr.exe
+ 2010-01-04 15:53 . 2001-08-17 20:56      81408              c:\windows\system32\dllcache\tgiul50.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\tftp.exe
+ 2004-09-02 01:40 . 2008-04-14 11:43      40840              c:\windows\system32\dllcache\termdd.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      75776              c:\windows\system32\dllcache\telnet.exe
+ 2004-09-02 01:40 . 2008-04-14 11:43      21896              c:\windows\system32\dllcache\tdtcp.sys
+ 2010-01-04 15:53 . 2004-08-04 12:00      19464              c:\windows\system32\dllcache\tdspx.sys
+ 2004-09-02 01:40 . 2008-04-14 11:43      12040              c:\windows\system32\dllcache\tdpipe.sys
+ 2010-01-04 15:53 . 2001-08-17 18:13      17129              c:\windows\system32\dllcache\tdkcd31.sys
+ 2010-01-04 15:53 . 2001-08-17 18:13      37961              c:\windows\system32\dllcache\tdk100b.sys
+ 2010-01-04 15:53 . 2004-08-04 12:00      21896              c:\windows\system32\dllcache\tdipx.sys
+ 2004-09-02 01:29 . 2008-04-14 06:30      19072              c:\windows\system32\dllcache\tdi.sys
+ 2010-01-04 15:53 . 2004-08-04 12:00      13192              c:\windows\system32\dllcache\tdasync.sys
+ 2010-01-04 15:30 . 2003-03-24 22:52      32827              c:\windows\system32\dllcache\tcptest.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\tcpsvcs.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      45568              c:\windows\system32\dllcache\tcpmonui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      45568              c:\windows\system32\dllcache\tcpmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14848              c:\windows\system32\dllcache\tcpmib.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\tcmsetup.exe
+ 2010-01-04 15:53 . 2001-08-17 19:49      30464              c:\windows\system32\dllcache\tbatm155.sys
+ 2004-09-01 18:36 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\taskman.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      78848              c:\windows\system32\dllcache\tapiui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      19200              c:\windows\system32\dllcache\tapi.dll
+ 2004-09-02 01:29 . 2008-04-14 06:10      14976              c:\windows\system32\dllcache\tape.sys
+ 2010-01-04 15:53 . 2001-08-17 18:50      36640              c:\windows\system32\dllcache\t2r4mini.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\syskey.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\sysinv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18896              c:\windows\system32\dllcache\sysedit.exe
+ 2004-09-02 02:04 . 2008-04-14 06:45      60800              c:\windows\system32\dllcache\sysaudio.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      57856              c:\windows\system32\dllcache\synceng.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      51200              c:\windows\system32\dllcache\syncapp.exe
+ 2010-01-04 15:53 . 2001-08-17 20:07      32640              c:\windows\system32\dllcache\symc8xx.sys
+ 2010-01-04 15:53 . 2001-08-17 20:07      16256              c:\windows\system32\dllcache\symc810.sys
+ 2010-01-04 15:53 . 2001-08-17 20:07      30688              c:\windows\system32\dllcache\sym_u3.sys
+ 2010-01-04 15:53 . 2001-08-17 20:07      28384              c:\windows\system32\dllcache\sym_hi.sys
+ 2010-01-04 15:53 . 2001-08-18 04:36      94293              c:\windows\system32\dllcache\sxports.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      10240              c:\windows\system32\dllcache\swpidflt.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      10240              c:\windows\system32\dllcache\swpdflt2.dll
+ 2004-09-02 02:04 . 2008-04-14 06:15      56576              c:\windows\system32\dllcache\swmidi.sys
+ 2010-01-04 15:52 . 2001-08-18 04:36      53760              c:\windows\system32\dllcache\sw_wheel.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      41472              c:\windows\system32\dllcache\sw_effct.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\svchost.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      75776              c:\windows\system32\dllcache\strmfilt.dll
+ 2004-09-01 18:39 . 2008-04-14 06:16      15232              c:\windows\system32\dllcache\streamip.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      49408              c:\windows\system32\dllcache\stream.sys
+ 2004-09-01 18:36 . 2008-04-14 11:42      74752              c:\windows\system32\dllcache\storprop.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      53248              c:\windows\system32\dllcache\stlncoin.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14848              c:\windows\system32\dllcache\stimon.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      68096              c:\windows\system32\dllcache\sti.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      86528              c:\windows\system32\dllcache\stdprov.dll
+ 2010-01-04 15:52 . 2001-08-17 19:51      16896              c:\windows\system32\dllcache\stcusb.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      59392              c:\windows\system32\dllcache\stclient.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\startoc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      33280              c:\windows\system32\dllcache\sstub.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14336              c:\windows\system32\dllcache\ssstars.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\ssmyst.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      47104              c:\windows\system32\dllcache\ssmypics.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      20992              c:\windows\system32\dllcache\ssmarque.scr
+ 2004-09-02 01:29 . 2004-08-04 12:00      71680              c:\windows\system32\dllcache\ssdpsrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      34816              c:\windows\system32\dllcache\ssdpapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      19968              c:\windows\system32\dllcache\ssbezier.scr
+ 2010-01-04 15:52 . 2001-08-17 18:11      48736              c:\windows\system32\dllcache\srwlnd5.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      96768              c:\windows\system32\dllcache\srvsvc.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      99328              c:\windows\system32\dllcache\srusd.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      47104              c:\windows\system32\dllcache\srdiag.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      67584              c:\windows\system32\dllcache\srclient.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      58434              c:\windows\system32\dllcache\srchctls.dll
+ 2004-09-02 01:41 . 2008-04-14 06:06      73472              c:\windows\system32\dllcache\sr.sys
+ 2010-01-04 15:52 . 2001-08-18 04:36      24660              c:\windows\system32\dllcache\spxupchk.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      24661              c:\windows\system32\dllcache\spxcoins.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      72192              c:\windows\system32\dllcache\sprio800.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      70656              c:\windows\system32\dllcache\sprio600.dll
+ 2004-09-02 01:29 . 2005-06-10 23:53      57856              c:\windows\system32\dllcache\spoolsv.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      74752              c:\windows\system32\dllcache\spoolss.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\spnpinst.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      69632              c:\windows\system32\dllcache\spnike.dll
+ 2004-09-02 01:29 . 2008-04-14 04:13      62976              c:\windows\system32\dllcache\spgrmr.dll
+ 2010-01-04 15:52 . 2001-08-17 19:51      61824              c:\windows\system32\dllcache\speed.sys
+ 2004-09-01 18:36 . 2004-08-04 12:00      61440              c:\windows\system32\dllcache\spcplui.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      77824              c:\windows\system32\dllcache\spcommon.dll
+ 2010-01-04 15:52 . 2001-08-17 20:07      19072              c:\windows\system32\dllcache\sparrow.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      24576              c:\windows\system32\dllcache\sort.exe
+ 2010-01-04 15:51 . 2001-08-17 18:51      20752              c:\windows\system32\dllcache\sonync.sys
+ 2004-08-03 23:09 . 2008-04-14 06:16      25344              c:\windows\system32\dllcache\sonydcam.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      56832              c:\windows\system32\dllcache\sol.exe
+ 2010-01-04 15:51 . 2004-08-04 12:00      40448              c:\windows\system32\dllcache\snmpthrd.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      10240              c:\windows\system32\dllcache\snmpstup.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\snmpapi.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      32768              c:\windows\system32\dllcache\snmp.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      34816              c:\windows\system32\dllcache\sniffpol.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      40960              c:\windows\system32\dllcache\smtpcons.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50688              c:\windows\system32\dllcache\smss.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      89600              c:\windows\system32\dllcache\smlogsvc.exe
+ 2010-01-04 15:51 . 2001-08-17 18:51      58368              c:\windows\system32\dllcache\smiminib.sys
+ 2010-01-04 15:51 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\smierrsm.dll
+ 2010-01-04 15:51 . 2001-08-17 18:12      25034              c:\windows\system32\dllcache\smcpwr2n.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      14592              c:\windows\system32\dllcache\smclib.sys
+ 2010-01-04 15:51 . 2001-08-17 18:10      35913              c:\windows\system32\dllcache\smcirda.sys
+ 2010-01-04 15:51 . 2001-08-17 18:12      24576              c:\windows\system32\dllcache\smc8000n.sys
+ 2010-01-04 15:51 . 2008-04-14 06:06      16000              c:\windows\system32\dllcache\smbbatt.sys
+ 2010-01-04 15:51 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\smb6w.dll
+ 2010-01-04 15:51 . 2001-08-18 04:36      45568              c:\windows\system32\dllcache\smb3w.dll
+ 2010-01-04 15:51 . 2001-08-18 04:36      33792              c:\windows\system32\dllcache\smb0w.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\sma3w.dll
+ 2010-01-04 15:51 . 2001-08-18 04:36      28672              c:\windows\system32\dllcache\sma0w.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      38912              c:\windows\system32\dllcache\sm9aw.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\sm93w.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\sm92w.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\sm90w.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\sm8dw.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      29184              c:\windows\system32\dllcache\sm8cw.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\sm8aw.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\sm89w.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      30208              c:\windows\system32\dllcache\sm87w.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      30208              c:\windows\system32\dllcache\sm81w.dll
+ 2010-01-04 15:50 . 2004-08-04 12:00      25088              c:\windows\system32\dllcache\sm59w.dll
+ 2009-12-30 20:36 . 2008-04-14 05:53      13240              c:\windows\system32\dllcache\slwdmsup.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      73796              c:\windows\system32\dllcache\slserv.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      32866              c:\windows\system32\dllcache\slrundll.exe
+ 2009-12-30 20:36 . 2008-04-14 05:53      95424              c:\windows\system32\dllcache\slnthal.sys
+ 2004-09-01 18:39 . 2008-04-14 06:16      11136              c:\windows\system32\dllcache\slip.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      73832              c:\windows\system32\dllcache\slcoinst.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\slbrccsp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      98304              c:\windows\system32\dllcache\slbiop.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      25088              c:\windows\system32\dllcache\slayerxp.dll
+ 2010-01-04 15:50 . 2008-04-14 04:05      63547              c:\windows\system32\dllcache\sla30nd5.sys
+ 2010-01-04 15:50 . 2001-08-17 18:12      91294              c:\windows\system32\dllcache\skfpwin.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      26112              c:\windows\system32\dllcache\skeys.exe
+ 2010-01-04 15:50 . 2001-08-17 18:12      94698              c:\windows\system32\dllcache\sk98xwin.sys
+ 2010-01-04 15:50 . 2001-08-17 18:50      50432              c:\windows\system32\dllcache\sisv.sys
+ 2010-01-04 15:50 . 2008-04-14 04:05      32768              c:\windows\system32\dllcache\sisnic.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      13824              c:\windows\system32\dllcache\sisbkup.dll
+ 2009-12-30 20:36 . 2008-04-14 06:06      40960              c:\windows\system32\dllcache\sisagp.sys
+ 2010-01-04 15:50 . 2001-08-17 18:50      68608              c:\windows\system32\dllcache\sis6306p.sys
+ 2010-01-04 15:50 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\simptcp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      70144              c:\windows\system32\dllcache\sigverif.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      13312              c:\windows\system32\dllcache\sigtab.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      42573              c:\windows\system32\dllcache\shvlzm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      66113              c:\windows\system32\dllcache\shvl.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      19456              c:\windows\system32\dllcache\shutdown.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      16437              c:\windows\system32\dllcache\shtml.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      20536              c:\windows\system32\dllcache\shtml.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      27648              c:\windows\system32\dllcache\shscrap.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      77824              c:\windows\system32\dllcache\shrpubw.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      45056              c:\windows\system32\dllcache\shmgrate.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      65536              c:\windows\system32\dllcache\shimeng.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      68096              c:\windows\system32\dllcache\shgina.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      25088              c:\windows\system32\dllcache\shfolder.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\shadow.exe
+ 2010-01-04 15:50 . 2001-07-21 20:29      18400              c:\windows\system32\dllcache\sgsmld.sys
+ 2010-01-04 15:50 . 2001-08-17 18:51      98080              c:\windows\system32\dllcache\sgiulnt5.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\sfmapi.dll
+ 2010-01-04 15:50 . 2001-08-17 18:19      36480              c:\windows\system32\dllcache\sfmanm.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      11392              c:\windows\system32\dllcache\sfloppy.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      11008              c:\windows\system32\dllcache\sffp_sd.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      11904              c:\windows\system32\dllcache\sffdisk.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      32768              c:\windows\system32\dllcache\setupn.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      73216              c:\windows\system32\dllcache\setup50.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      23040              c:\windows\system32\dllcache\setup.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      31232              c:\windows\system32\dllcache\sethc.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\serwvdrv.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      56320              c:\windows\system32\dllcache\servdeps.dll
+ 2010-01-04 15:49 . 2001-08-17 19:48      17664              c:\windows\system32\dllcache\sermouse.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\serialui.dll
+ 2004-08-03 23:15 . 2008-04-14 06:45      64512              c:\windows\system32\dllcache\serial.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      15744              c:\windows\system32\dllcache\serenum.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      13824              c:\windows\system32\dllcache\senscfg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      38912              c:\windows\system32\dllcache\sens.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      54784              c:\windows\system32\dllcache\sendmail.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      29184              c:\windows\system32\dllcache\sendcmsg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      55808              c:\windows\system32\dllcache\secur32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\seclogon.dll
+ 2004-08-04 00:56 . 2008-04-14 11:42      29184              c:\windows\system32\dllcache\sdhcinst.dll
+ 2004-08-03 23:07 . 2008-04-14 06:06      79232              c:\windows\system32\dllcache\sdbus.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      77312              c:\windows\system32\dllcache\sdbinst.exe
+ 2010-01-04 15:49 . 2008-04-14 06:15      11520              c:\windows\system32\dllcache\scsiscan.sys
+ 2010-01-04 15:49 . 2001-08-17 19:52      11648              c:\windows\system32\dllcache\scsiprnt.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      96384              c:\windows\system32\dllcache\scsiport.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\scredir.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      36352              c:\windows\system32\dllcache\scrcons.exe
+ 2010-01-04 15:49 . 2001-08-17 19:51      17280              c:\windows\system32\dllcache\scr111.sys
+ 2010-01-04 15:49 . 2001-08-17 19:51      16640              c:\windows\system32\dllcache\scmstcs.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\sclgntfy.dll
+ 2010-01-04 15:49 . 2001-08-17 19:51      23936              c:\windows\system32\dllcache\sccmusbm.sys
+ 2010-01-04 15:49 . 2001-08-17 19:51      23936              c:\windows\system32\dllcache\sccmn50m.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      95744              c:\windows\system32\dllcache\scardsvr.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      69632              c:\windows\system32\dllcache\scarddlg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      31232              c:\windows\system32\dllcache\sc.exe
+ 2010-01-04 15:49 . 2008-04-14 06:10      43904              c:\windows\system32\dllcache\sbp2port.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      13312              c:\windows\system32\dllcache\savedump.exe
+ 2004-09-01 18:36 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\sapisvr.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      64000              c:\windows\system32\dllcache\samlib.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      45568              c:\windows\system32\dllcache\safrslv.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      29696              c:\windows\system32\dllcache\safrdm.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      43520              c:\windows\system32\dllcache\safrcdlg.dll
+ 2010-01-04 15:49 . 2001-08-17 18:50      75392              c:\windows\system32\dllcache\s3savmxm.sys
+ 2010-01-04 15:49 . 2001-08-17 18:50      77824              c:\windows\system32\dllcache\s3sav4m.sys
+ 2010-01-04 15:49 . 2001-08-17 18:50      61504              c:\windows\system32\dllcache\s3sav3dm.sys
+ 2010-01-04 15:48 . 2001-08-17 18:50      41216              c:\windows\system32\dllcache\s3mt3d.sys
+ 2010-01-04 15:48 . 2001-08-17 19:57      65664              c:\windows\system32\dllcache\s3legacy.sys
+ 2010-01-04 15:30 . 2001-08-17 20:56      66048              c:\windows\system32\dllcache\s3legacy.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\rwinsta.exe
+ 2010-01-04 15:48 . 2001-08-18 04:36      82432              c:\windows\system32\dllcache\rwia450.dll
+ 2010-01-04 15:48 . 2001-08-18 04:36      79872              c:\windows\system32\dllcache\rwia430.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      79872              c:\windows\system32\dllcache\rwia330.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      79872              c:\windows\system32\dllcache\rwia001.dll
+ 2010-01-04 15:48 . 2008-04-14 11:42      29696              c:\windows\system32\dllcache\rw450ext.dll
+ 2010-01-04 15:48 . 2008-04-14 11:42      27648              c:\windows\system32\dllcache\rw430ext.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\rw330ext.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\rw001ext.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      42574              c:\windows\system32\dllcache\rvsezm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      48706              c:\windows\system32\dllcache\rvse.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14336              c:\windows\system32\dllcache\runonce.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      33280              c:\windows\system32\dllcache\rundll32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\runas.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\rtutils.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      98304              c:\windows\system32\dllcache\rtm.dll
+ 2010-01-04 15:48 . 2008-04-14 04:05      20992              c:\windows\system32\dllcache\rtl8139.sys
+ 2010-01-04 15:48 . 2001-08-17 18:12      19017              c:\windows\system32\dllcache\rtl8029.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      31744              c:\windows\system32\dllcache\rtipxmib.dll
+ 2010-01-04 15:48 . 2001-08-17 18:19      30720              c:\windows\system32\dllcache\rthwcls.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      77312              c:\windows\system32\dllcache\rtcshare.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      92672              c:\windows\system32\dllcache\rsvpsp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\rsvpmsg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      49152              c:\windows\system32\dllcache\rsmui.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\rsmsink.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\rsmps.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      49152              c:\windows\system32\dllcache\rsm.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      39936              c:\windows\system32\dllcache\rshx32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14848              c:\windows\system32\dllcache\rsh.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      61440              c:\windows\system32\dllcache\rrcm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\rpcns4.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      25600              c:\windows\system32\dllcache\routemon.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      19968              c:\windows\system32\dllcache\route.exe
+ 2010-01-04 15:48 . 2008-04-14 06:10      79104              c:\windows\system32\dllcache\rocket.sys
+ 2009-12-30 20:36 . 2008-04-14 06:26      30592              c:\windows\system32\dllcache\rndismpx.sys
+ 2004-09-02 01:29 . 2008-04-14 06:26      30592              c:\windows\system32\dllcache\rndismp.sys
+ 2010-01-04 15:48 . 2001-08-17 18:12      37563              c:\windows\system32\dllcache\rlnet5.sys
+ 2001-08-17 13:24 . 2004-08-04 12:00      12032              c:\windows\system32\dllcache\riodrv.sys
+ 2001-08-17 13:24 . 2004-08-04 12:00      12032              c:\windows\system32\dllcache\rio8drv.sys
+ 2009-12-30 20:36 . 2008-04-14 06:16      59136              c:\windows\system32\dllcache\rfcomm.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      13824              c:\windows\system32\dllcache\rexec.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      58880              c:\windows\system32\dllcache\resutils.dll
+ 2010-01-04 15:48 . 2001-08-18 04:36      86097              c:\windows\system32\dllcache\reslog32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12800              c:\windows\system32\dllcache\replace.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      60416              c:\windows\system32\dllcache\remotepg.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      11776              c:\windows\system32\dllcache\regsvr32.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      59904              c:\windows\system32\dllcache\regsvc.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\register.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      33792              c:\windows\system32\dllcache\regini.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      49664              c:\windows\system32\dllcache\regapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50176              c:\windows\system32\dllcache\reg.exe
+ 2004-09-01 18:38 . 2008-04-14 06:10      57600              c:\windows\system32\dllcache\redbook.sys
+ 2009-12-30 20:36 . 2008-04-14 05:53      13776              c:\windows\system32\dllcache\recagent.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      67072              c:\windows\system32\dllcache\rdshost.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      13824              c:\windows\system32\dllcache\rdsaddin.exe
+ 2004-09-02 01:40 . 2008-04-14 11:43      87176              c:\windows\system32\dllcache\rdpwsx.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      19968              c:\windows\system32\dllcache\rdpsnd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:43      92424              c:\windows\system32\dllcache\rdpdd.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      62976              c:\windows\system32\dllcache\rdpclip.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      21504              c:\windows\system32\dllcache\rcp.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      35840              c:\windows\system32\dllcache\rcimlby.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      34432              c:\windows\system32\dllcache\rawwan.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      58368              c:\windows\system32\dllcache\rastapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12800              c:\windows\system32\dllcache\rasser.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      16384              c:\windows\system32\dllcache\rassapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\rasrad.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      61952              c:\windows\system32\dllcache\rasqec.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16512              c:\windows\system32\dllcache\raspti.sys
+ 2004-09-02 01:29 . 2008-04-14 06:49      48384              c:\windows\system32\dllcache\raspptp.sys
+ 2004-09-02 01:29 . 2008-04-14 06:27      41472              c:\windows\system32\dllcache\raspppoe.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      56832              c:\windows\system32\dllcache\rasphone.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      22528              c:\windows\system32\dllcache\rasmxs.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      61440              c:\windows\system32\dllcache\rasman.dll
+ 2004-09-02 01:29 . 2008-04-14 06:49      51328              c:\windows\system32\dllcache\rasl2tp.sys
+ 2010-01-04 15:48 . 2001-08-17 19:51      19584              c:\windows\system32\dllcache\rasirda.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\rasdial.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\rasctrs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      69632              c:\windows\system32\dllcache\raschap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\rasautou.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      88576              c:\windows\system32\dllcache\rasauto.dll
+ 2010-01-04 15:48 . 2004-08-04 12:00      20736              c:\windows\system32\dllcache\ramdisk.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      43520              c:\windows\system32\dllcache\racpldlg.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\qwinsta.exe
+ 2010-01-04 15:47 . 2001-08-18 04:36      41472              c:\windows\system32\dllcache\qvusd.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      76800              c:\windows\system32\dllcache\qutil.dll
+ 2010-01-04 15:47 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\quser.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      19968              c:\windows\system32\dllcache\qprocess.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\qmgrprxy.dll
+ 2010-01-04 15:47 . 2001-08-17 19:52      49024              c:\windows\system32\dllcache\ql1280.sys
+ 2010-01-04 15:47 . 2001-08-17 19:52      40448              c:\windows\system32\dllcache\ql1240.sys
+ 2010-01-04 15:47 . 2001-08-17 19:52      45312              c:\windows\system32\dllcache\ql12160.sys
+ 2010-01-04 15:47 . 2001-08-17 19:52      33152              c:\windows\system32\dllcache\ql10wnt.sys
+ 2010-01-04 15:47 . 2001-08-17 19:52      40320              c:\windows\system32\dllcache\ql1080.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      62464              c:\windows\system32\dllcache\qcliprov.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\qappsrv.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      17792              c:\windows\system32\dllcache\ptilink.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      34304              c:\windows\system32\dllcache\pstorsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      43520              c:\windows\system32\dllcache\pstorec.dll
+ 2010-01-04 15:47 . 2001-08-18 04:36      35328              c:\windows\system32\dllcache\psisload.dll
+ 2010-01-04 15:47 . 2001-08-17 19:51      16128              c:\windows\system32\dllcache\pscr.sys
+ 2004-09-02 01:29 . 2008-04-14 06:26      69120              c:\windows\system32\dllcache\psched.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      10752              c:\windows\system32\dllcache\pschdprf.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      96768              c:\windows\system32\dllcache\psbase.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      23040              c:\windows\system32\dllcache\psapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      50176              c:\windows\system32\dllcache\proquota.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      27648              c:\windows\system32\dllcache\profmap.dll
+ 2004-08-03 22:59 . 2008-04-14 06:01      35840              c:\windows\system32\dllcache\processr.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\prflbmsg.dll
+ 2010-01-04 15:47 . 2008-04-14 06:11      17664              c:\windows\system32\dllcache\ppa3.sys
+ 2010-01-04 15:47 . 2001-08-17 19:53      17792              c:\windows\system32\dllcache\ppa.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      17408              c:\windows\system32\dllcache\powrprof.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      49152              c:\windows\system32\dllcache\powercfg.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      58880              c:\windows\system32\dllcache\pnrpnsp.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      44544              c:\windows\system32\dllcache\pngfilt.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      44544              c:\windows\system32\dllcache\pngfilt.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\pmxmcro.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      46592              c:\windows\system32\dllcache\pmspl.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      67584              c:\windows\system32\dllcache\pmigrate.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      30720              c:\windows\system32\dllcache\plustab.dll
+ 2004-08-04 00:56 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\pjlmon.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      70144              c:\windows\system32\dllcache\pintlphr.exe
+ 2010-01-04 15:46 . 2004-08-04 12:00      53760              c:\windows\system32\dllcache\pintlcsd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      33280              c:\windows\system32\dllcache\ping6.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      17920              c:\windows\system32\dllcache\ping.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      35328              c:\windows\system32\dllcache\pifmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 06:05      24064              c:\windows\system32\dllcache\pidgen.dll
+ 2004-08-04 00:56 . 2008-04-14 11:42      35328              c:\windows\system32\dllcache\pid.dll
+ 2010-01-04 15:46 . 2001-08-17 20:07      19840              c:\windows\system32\dllcache\philtune.sys
+ 2010-01-04 15:46 . 2001-08-17 20:04      92416              c:\windows\system32\dllcache\phildec.sys
+ 2010-01-04 15:46 . 2001-08-17 20:04      75776              c:\windows\system32\dllcache\philcam1.sys
+ 2010-01-04 15:46 . 2001-08-18 04:36      16384              c:\windows\system32\dllcache\philcam1.dll
+ 2010-01-04 15:46 . 2008-04-14 06:14      28032              c:\windows\system32\dllcache\perm3.sys
+ 2010-01-04 15:46 . 2008-04-14 06:14      27904              c:\windows\system32\dllcache\perm2.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\perfts.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      34816              c:\windows\system32\dllcache\perfproc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      25088              c:\windows\system32\dllcache\perfos.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      17920              c:\windows\system32\dllcache\perfnet.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      15872              c:\windows\system32\dllcache\perfmon.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      26624              c:\windows\system32\dllcache\perfdisk.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      39936              c:\windows\system32\dllcache\perfctrs.dll
+ 2010-01-04 15:46 . 2001-08-17 20:07      27296              c:\windows\system32\dllcache\perc2.sys
+ 2004-09-02 01:30 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\pentnt.exe
+ 2010-01-04 15:46 . 2001-08-18 04:36      86016              c:\windows\system32\dllcache\pctspk.exe
+ 2010-01-04 15:46 . 2001-08-17 18:11      35328              c:\windows\system32\dllcache\pcntpci5.sys
+ 2010-01-04 15:46 . 2001-08-17 18:11      29769              c:\windows\system32\dllcache\pcntn5m.sys
+ 2010-01-04 15:46 . 2001-08-17 18:11      30282              c:\windows\system32\dllcache\pcntn5hl.sys
+ 2010-01-04 15:46 . 2001-08-17 18:12      26153              c:\windows\system32\dllcache\pcmlm56.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      24960              c:\windows\system32\dllcache\pciidex.sys
+ 2004-08-03 23:07 . 2008-04-14 06:06      68224              c:\windows\system32\dllcache\pci.sys
+ 2004-09-02 01:41 . 2004-08-04 12:00      38912              c:\windows\system32\dllcache\pchsvc.dll
+ 2010-01-04 15:46 . 2008-04-14 04:05      29502              c:\windows\system32\dllcache\pca200e.sys
+ 2010-01-04 15:46 . 2001-08-17 18:12      30495              c:\windows\system32\dllcache\pc100nds.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      67584              c:\windows\system32\dllcache\pautoenr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      21504              c:\windows\system32\dllcache\pathping.exe
+ 2004-09-02 01:29 . 2008-04-14 06:10      19712              c:\windows\system32\dllcache\partmgr.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      80128              c:\windows\system32\dllcache\parport.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      10240              c:\windows\system32\dllcache\panmap.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\padrs804.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\padrs412.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      36927              c:\windows\system32\dllcache\padrs411.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\padrs404.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      58368              c:\windows\system32\dllcache\packager.exe
+ 2004-08-03 22:59 . 2008-04-14 06:01      42752              c:\windows\system32\dllcache\p3.sys
+ 2010-01-04 15:45 . 2001-08-18 04:36      44544              c:\windows\system32\dllcache\ovui2.dll
+ 2010-01-04 15:45 . 2001-08-17 20:05      25216              c:\windows\system32\dllcache\ovsound2.sys
+ 2010-01-04 15:45 . 2001-08-18 04:36      39424              c:\windows\system32\dllcache\ovcoms.exe
+ 2010-01-04 15:45 . 2001-08-18 04:36      20480              c:\windows\system32\dllcache\ovcomc.dll
+ 2010-01-04 15:45 . 2001-08-17 20:05      31872              c:\windows\system32\dllcache\ovce.sys
+ 2010-01-04 15:45 . 2001-08-17 20:05      28032              c:\windows\system32\dllcache\ovcd.sys
+ 2010-01-04 15:45 . 2001-08-17 20:05      48000              c:\windows\system32\dllcache\ovcam2.sys
+ 2010-01-04 15:45 . 2001-08-17 20:05      25088              c:\windows\system32\dllcache\ovca.sys
+ 2010-01-04 15:45 . 2001-08-17 19:28      54186              c:\windows\system32\dllcache\otcsercb.sys
+ 2010-01-04 15:45 . 2001-08-17 18:12      43689              c:\windows\system32\dllcache\otceth5.sys
+ 2010-01-04 15:45 . 2001-08-17 18:12      27209              c:\windows\system32\dllcache\otc06x5.sys
+ 2004-09-02 01:30 . 2004-08-04 12:00      40448              c:\windows\system32\dllcache\osuninst.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      67584              c:\windows\system32\dllcache\osuninst.dll
+ 2010-01-04 15:45 . 2001-08-17 18:20      54528              c:\windows\system32\dllcache\opl3sax.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      51200              c:\windows\system32\dllcache\oobebaln.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      69120              c:\windows\system32\dllcache\olethk32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\olesvr32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      24064              c:\windows\system32\dllcache\olesvr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      83456              c:\windows\system32\dllcache\olepro32.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      65536              c:\windows\system32\dllcache\oledb32r.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      37376              c:\windows\system32\dllcache\olecnv32.dll
+ 2004-09-02 01:29 . 2005-07-26 04:39      74752              c:\windows\system32\dllcache\olecli32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      82944              c:\windows\system32\dllcache\olecli.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\oleaccrc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      39744              c:\windows\system32\dllcache\ole2.dll
+ 2004-08-03 23:10 . 2008-04-14 06:16      61696              c:\windows\system32\dllcache\ohci1394.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      35328              c:\windows\system32\dllcache\oemiglib.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      60416              c:\windows\system32\dllcache\oemig50.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      20511              c:\windows\system32\dllcache\odtext32.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      20510              c:\windows\system32\dllcache\odpdx32.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      20510              c:\windows\system32\dllcache\odfox32.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      20510              c:\windows\system32\dllcache\odexl32.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      20511              c:\windows\system32\dllcache\oddbse32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\odbcp32r.dll
+ 2004-09-02 01:29 . 2008-04-14 11:40      53279              c:\windows\system32\dllcache\odbcji32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      94208              c:\windows\system32\dllcache\odbcint.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      65536              c:\windows\system32\dllcache\odbccu32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      65536              c:\windows\system32\dllcache\odbccr32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      69632              c:\windows\system32\dllcache\odbcconf.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      32768              c:\windows\system32\dllcache\odbcad32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\odbc32gt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      26224              c:\windows\system32\dllcache\odbc16gt.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      17408              c:\windows\system32\dllcache\ocmsn.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      60928              c:\windows\system32\dllcache\ocmanage.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\ocgen.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      55936              c:\windows\system32\dllcache\nwlnkspx.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      63232              c:\windows\system32\dllcache\nwlnknb.sys
+ 2004-09-02 01:29 . 2008-04-14 06:26      88320              c:\windows\system32\dllcache\nwlnkipx.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      32512              c:\windows\system32\dllcache\nwlnkfwd.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      12416              c:\windows\system32\dllcache\nwlnkflt.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      15360              c:\windows\system32\dllcache\ntvdmd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\ntsdexts.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\ntsd.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      91136              c:\windows\system32\dllcache\ntprint.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      62976              c:\windows\system32\dllcache\ntoc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\ntmsevt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      40960              c:\windows\system32\dllcache\ntmsapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\ntlanui2.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      57856              c:\windows\system32\dllcache\ntlanui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      43520              c:\windows\system32\dllcache\ntlanman.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      34560              c:\windows\system32\dllcache\ntio804.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      35424              c:\windows\system32\dllcache\ntio412.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      35648              c:\windows\system32\dllcache\ntio411.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      34560              c:\windows\system32\dllcache\ntio404.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      33840              c:\windows\system32\dllcache\ntio.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      67072              c:\windows\system32\dllcache\ntdsapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      29146              c:\windows\system32\dllcache\ntdos804.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      29274              c:\windows\system32\dllcache\ntdos412.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      29370              c:\windows\system32\dllcache\ntdos411.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      29146              c:\windows\system32\dllcache\ntdos404.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      27866              c:\windows\system32\dllcache\ntdos.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      76800              c:\windows\system32\dllcache\nslookup.exe
+ 2010-01-04 15:44 . 2008-04-14 06:24      28672              c:\windows\system32\dllcache\nscirda.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      10240              c:\windows\system32\dllcache\npwmsdrm.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      10240              c:\windows\system32\dllcache\npwmsdrm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      54784              c:\windows\system32\dllcache\npptools.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      15360              c:\windows\system32\dllcache\nppagent.exe
+ 2004-09-02 01:29 . 2008-04-14 06:02      30848              c:\windows\system32\dllcache\npfs.sys
+ 2004-09-02 01:41 . 2004-08-04 12:00      35328              c:\windows\system32\dllcache\notiflag.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      69120              c:\windows\system32\dllcache\notepad.exe
+ 2004-09-02 01:29 . 2008-04-14 06:23      40320              c:\windows\system32\dllcache\nmnt.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      28672              c:\windows\system32\dllcache\nmmkcert.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\nmevtmsg.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      77824              c:\windows\system32\dllcache\nmcom.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      81920              c:\windows\system32\dllcache\nmchat.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      28672              c:\windows\system32\dllcache\nmasnt.dll
+ 2010-01-04 15:44 . 2001-08-17 18:20      87040              c:\windows\system32\dllcache\nm6wdm.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      98304              c:\windows\system32\dllcache\nlhtml.dll
+ 2001-08-17 13:24 . 2004-08-04 12:00      12032              c:\windows\system32\dllcache\nikedrv.sys
+ 2004-08-03 22:58 . 2008-04-14 06:21      61824              c:\windows\system32\dllcache\nic1394.sys
+ 2010-01-04 15:44 . 2001-08-17 18:12      32840              c:\windows\system32\dllcache\ngrpci.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      80896              c:\windows\system32\dllcache\netui0.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      36864              c:\windows\system32\dllcache\netstat.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      86016              c:\windows\system32\dllcache\netsh.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\netrap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      77312              c:\windows\system32\dllcache\netoc.dll
+ 2010-01-04 15:44 . 2001-08-17 18:11      65278              c:\windows\system32\dllcache\netflx3.sys
+ 2004-09-02 01:29 . 2008-04-14 06:26      34688              c:\windows\system32\dllcache\netbios.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      42496              c:\windows\system32\dllcache\net.exe
+ 2010-01-04 15:44 . 2001-08-17 18:50      39264              c:\windows\system32\dllcache\neo20xx.sys
+ 2010-01-04 15:44 . 2001-08-18 04:36      60480              c:\windows\system32\dllcache\neo20xx.dll
+ 2010-01-04 15:44 . 2001-08-17 19:49      15872              c:\windows\system32\dllcache\ne2000.sys
+ 2004-09-02 01:29 . 2008-04-14 06:27      40576              c:\windows\system32\dllcache\ndproxy.sys
+ 2004-09-02 01:29 . 2008-04-14 06:50      91520              c:\windows\system32\dllcache\ndiswan.sys
+ 2004-08-03 23:03 . 2008-04-14 06:26      14592              c:\windows\system32\dllcache\ndisuio.sys
+ 2004-09-02 01:29 . 2008-04-14 06:27      10112              c:\windows\system32\dllcache\ndistapi.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      57344              c:\windows\system32\dllcache\ndisnpp.dll
+ 2004-09-01 18:39 . 2008-04-14 06:16      10880              c:\windows\system32\dllcache\ndisip.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      18944              c:\windows\system32\dllcache\nddenb32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      17920              c:\windows\system32\dllcache\nddeapi.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      47104              c:\windows\system32\dllcache\ncprov.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      36352              c:\windows\system32\dllcache\ncobjapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      20480              c:\windows\system32\dllcache\nbtstat.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      35840              c:\windows\system32\dllcache\narrhook.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      53760              c:\windows\system32\dllcache\narrator.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      30208              c:\windows\system32\dllcache\napipsec.dll
+ 2004-09-01 18:39 . 2008-04-14 06:16      85248              c:\windows\system32\dllcache\nabtsfec.sys
+ 2010-01-04 15:44 . 2001-08-17 20:56      91488              c:\windows\system32\dllcache\n9i3disp.dll
+ 2010-01-04 15:44 . 2001-08-17 18:50      27936              c:\windows\system32\dllcache\n9i3d.sys
+ 2010-01-04 15:44 . 2001-08-17 18:50      33088              c:\windows\system32\dllcache\n9i128v2.sys
+ 2010-01-04 15:44 . 2001-08-18 04:36      59104              c:\windows\system32\dllcache\n9i128v2.dll
+ 2010-01-04 15:44 . 2001-08-17 18:50      13664              c:\windows\system32\dllcache\n9i128.sys
+ 2010-01-04 15:44 . 2001-08-17 20:56      35392              c:\windows\system32\dllcache\n9i128.dll
+ 2010-01-04 15:44 . 2001-08-17 18:11      52255              c:\windows\system32\dllcache\n1000nt5.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      90624              c:\windows\system32\dllcache\mydocs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      90112              c:\windows\system32\dllcache\mycomput.dll
+ 2010-01-04 15:43 . 2001-08-17 19:49      19968              c:\windows\system32\dllcache\mxnic.sys
+ 2010-01-04 15:43 . 2001-08-18 04:36      19968              c:\windows\system32\dllcache\mxicfg.dll
+ 2010-01-04 15:43 . 2001-08-17 19:50      21888              c:\windows\system32\dllcache\mxcard.sys
+ 2009-12-30 20:36 . 2008-04-14 06:13      12672              c:\windows\system32\dllcache\mutohpen.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      91648              c:\windows\system32\dllcache\mtxoci.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      34304              c:\windows\system32\dllcache\mtxlegih.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      30720              c:\windows\system32\dllcache\mtxdm.dll
+ 2004-09-02 01:29 . 2006-03-01 19:42      66560              c:\windows\system32\dllcache\mtxclu.dll
+ 2004-08-04 00:56 . 2008-04-14 11:42      16896              c:\windows\system32\dllcache\msyuv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\msxmlr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\msxml3r.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      37916              c:\windows\system32\dllcache\msxml2r.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\msxactps.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      72704              c:\windows\system32\dllcache\msw3prt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      25600              c:\windows\system32\dllcache\msvidc32.dll
+ 2004-09-02 01:29 . 2008-04-14 06:00      61440              c:\windows\system32\dllcache\msvcrt40.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      57344              c:\windows\system32\dllcache\msvcirt.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      12288              c:\windows\system32\dllcache\mstinit.exe
+ 2010-01-04 15:43 . 2008-04-14 06:16      49024              c:\windows\system32\dllcache\mstape.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      57344              c:\windows\system32\dllcache\mst123.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\msswch.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\mssoapr.dll
+ 2004-08-03 23:07 . 2008-04-14 06:06      15488              c:\windows\system32\dllcache\mssmbios.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      35840              c:\windows\system32\dllcache\mssign32.dll
+ 2009-12-30 20:41 . 2008-04-14 05:45      76800              c:\windows\system32\dllcache\msshamsg.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\msrle32.dll
+ 2010-01-04 15:43 . 2001-08-17 19:48      12416              c:\windows\system32\dllcache\msriffwv.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      60416              c:\windows\system32\dllcache\msratelc.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      69632              c:\windows\system32\dllcache\msr2c.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      48128              c:\windows\system32\dllcache\msprivs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      41984              c:\windows\system32\dllcache\msports.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      52224              c:\windows\system32\dllcache\mspmsnsv.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      52224              c:\windows\system32\dllcache\mspmsnsv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      30208              c:\windows\system32\dllcache\mspatcha.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      20480              c:\windows\system32\dllcache\msorc32r.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      29184              c:\windows\system32\dllcache\msoobe.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      19456              c:\windows\system32\dllcache\msobweb.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      30720              c:\windows\system32\dllcache\msobshel.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      33280              c:\windows\system32\dllcache\msobjs.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      16384              c:\windows\system32\dllcache\msobdl.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      39936              c:\windows\system32\dllcache\mslwvtts.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      25088              c:\windows\system32\dllcache\mslbui.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      60192              c:\windows\system32\dllcache\msjter40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      60192              c:\windows\system32\dllcache\msjter40.dll
+ 2004-09-02 01:29 . 2005-03-21 20:00      15360              c:\windows\system32\dllcache\msisip.dll
+ 2010-01-04 15:43 . 2004-08-04 12:00      40960              c:\windows\system32\dllcache\msiregmv.exe
+ 2010-01-04 15:43 . 2008-04-14 06:24      22016              c:\windows\system32\dllcache\msircomm.sys
+ 2010-01-04 15:43 . 2004-08-04 12:00      98304              c:\windows\system32\dllcache\msir3jp.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      39936              c:\windows\system32\dllcache\msinfo32.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      60416              c:\windows\system32\dllcache\msimn.exe
+ 2004-09-02 01:29 . 2005-03-21 20:00      78848              c:\windows\system32\dllcache\msiexec.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\msidntld.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      51712              c:\windows\system32\dllcache\msident.dll
+ 2004-09-02 01:29 . 2007-08-14 00:01      48128              c:\windows\system32\dllcache\mshtmler.dll
- 2007-08-14 00:01 . 2007-08-14 00:01      48128              c:\windows\system32\dllcache\mshtmler.dll
- 2007-08-14 00:32 . 2007-08-14 00:32      45568              c:\windows\system32\dllcache\mshta.exe
+ 2004-09-02 01:29 . 2007-08-14 00:32      45568              c:\windows\system32\dllcache\mshta.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      33792              c:\windows\system32\dllcache\msgsvc.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\msgrocm.dll
+ 2004-09-02 01:29 . 2008-04-14 06:26      35072              c:\windows\system32\dllcache\msgpc.sys
+ 2010-01-04 15:43 . 2001-08-17 20:02      35200              c:\windows\system32\dllcache\msgame.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      20992              c:\windows\system32\dllcache\msg.exe
+ 2004-09-02 01:29 . 2008-04-14 06:02      19072              c:\windows\system32\dllcache\msfs.sys
+ 2010-01-04 15:43 . 2008-04-14 06:16      51200              c:\windows\system32\dllcache\msdv.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      82432              c:\windows\system32\dllcache\msdtcstp.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      58880              c:\windows\system32\dllcache\msdtclog.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14336              c:\windows\system32\dllcache\msdmo.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      36864              c:\windows\system32\dllcache\msdfmap.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      20480              c:\windows\system32\dllcache\msdatt.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      94208              c:\windows\system32\dllcache\msdatl3.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\msdasqlr.dll
+ 2004-09-02 01:41 . 2008-04-14 04:56      16384              c:\windows\system32\dllcache\msdaremr.dll
+ 2004-09-02 01:41 . 2008-04-14 04:56      16384              c:\windows\system32\dllcache\msdaprsr.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      77824              c:\windows\system32\dllcache\msdaosp.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\msdaorar.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      68608              c:\windows\system32\dllcache\msctfp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\mscpxl32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\mscpx32r.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      69632              c:\windows\system32\dllcache\msconf.dll
+ 2004-09-02 01:29 . 2008-06-24 16:23      74240              c:\windows\system32\dllcache\mscms.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      65024              c:\windows\system32\dllcache\msaudite.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      57344              c:\windows\system32\dllcache\msasn1.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      86016              c:\windows\system32\dllcache\msapsspc.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      57344              c:\windows\system32\dllcache\msadrh15.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      57344              c:\windows\system32\dllcache\msador15.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\msader15.dll
+ 2004-09-02 01:41 . 2008-04-14 04:56      24576              c:\windows\system32\dllcache\msaddsr.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      53248              c:\windows\system32\dllcache\msadcs.dll
+ 2004-09-02 01:41 . 2008-04-14 04:55      16384              c:\windows\system32\dllcache\msadcor.dll
+ 2004-09-02 01:41 . 2008-04-14 04:55      16384              c:\windows\system32\dllcache\msadcfr.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      61440              c:\windows\system32\dllcache\msadcf.dll
+ 2004-09-02 01:41 . 2008-04-14 04:55      20480              c:\windows\system32\dllcache\msadcer.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      71680              c:\windows\system32\dllcache\msacm32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      61168              c:\windows\system32\dllcache\msacm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12800              c:\windows\system32\dllcache\mrinfo.exe
+ 2010-01-04 15:43 . 2001-08-17 19:52      17280              c:\windows\system32\dllcache\mraid35x.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      47104              c:\windows\system32\dllcache\mprui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      99840              c:\windows\system32\dllcache\mprmsg.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      53248              c:\windows\system32\dllcache\mprdim.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      69120              c:\windows\system32\dllcache\mprddm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      87040              c:\windows\system32\dllcache\mprapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      59904              c:\windows\system32\dllcache\mpr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22016              c:\windows\system32\dllcache\mpnotify.exe
+ 2010-01-04 15:43 . 2008-04-14 06:16      15232              c:\windows\system32\dllcache\mpe.sys
+ 2004-09-02 01:29 . 2008-04-14 06:09      42368              c:\windows\system32\dllcache\mountmgr.sys
+ 2004-08-03 22:58 . 2008-04-14 06:09      23040              c:\windows\system32\dllcache\mouclass.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\mofcomp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      10112              c:\windows\system32\dllcache\modex.dll
+ 2004-08-03 23:08 . 2008-04-14 06:30      30080              c:\windows\system32\dllcache\modem.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      32768              c:\windows\system32\dllcache\mnmsrvc.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      34560              c:\windows\system32\dllcache\mnmdd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      68768              c:\windows\system32\dllcache\mmsystem.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      17408              c:\windows\system32\dllcache\mmfutil.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\mmdrv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      61440              c:\windows\system32\dllcache\mmcshext.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      33792              c:\windows\system32\dllcache\mmcperf.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      29696              c:\windows\system32\dllcache\mimefilt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      60928              c:\windows\system32\dllcache\miglibnt.dll
+ 2010-01-04 15:42 . 2004-08-04 12:00      34304              c:\windows\system32\dllcache\migisol.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\midimap.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      14848              c:\windows\system32\dllcache\mgmtapi.dll
+ 2010-01-04 15:42 . 2004-08-04 12:00      92416              c:\windows\system32\dllcache\mga.sys
+ 2010-01-04 15:42 . 2004-08-04 12:00      92032              c:\windows\system32\dllcache\mga.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      22528              c:\windows\system32\dllcache\mfcsubs.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      40960              c:\windows\system32\dllcache\mf3216.dll
+ 2004-08-03 23:07 . 2008-04-14 06:06      63744              c:\windows\system32\dllcache\mf.sys
+ 2010-01-04 15:42 . 2008-04-14 06:11      26112              c:\windows\system32\dllcache\memstpci.sys
+ 2010-01-04 15:42 . 2001-08-18 04:36      47616              c:\windows\system32\dllcache\memgrp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      39274              c:\windows\system32\dllcache\mem.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      50176              c:\windows\system32\dllcache\mdhcp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      28160              c:\windows\system32\dllcache\mciwave.drv
+ 2004-09-02 01:29 . 2008-04-14 11:41      23552              c:\windows\system32\dllcache\mciwave.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      25264              c:\windows\system32\dllcache\mciseq.drv
+ 2004-09-02 01:29 . 2008-04-14 11:41      23040              c:\windows\system32\dllcache\mciseq.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      35328              c:\windows\system32\dllcache\mciqtz32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      17408              c:\windows\system32\dllcache\mcicda.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      84480              c:\windows\system32\dllcache\mciavi32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      73376              c:\windows\system32\dllcache\mciavi.drv
+ 2004-09-02 01:29 . 2004-08-04 12:00      10496              c:\windows\system32\dllcache\mcdsrv32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      10240              c:\windows\system32\dllcache\mcd32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      14336              c:\windows\system32\dllcache\mcastmib.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      57344              c:\windows\system32\dllcache\makecab.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      72704              c:\windows\system32\dllcache\magnify.exe
+ 2010-01-04 15:42 . 2001-08-17 18:19      48768              c:\windows\system32\dllcache\maestro.sys
+ 2010-01-04 15:42 . 2001-08-18 04:36      58880              c:\windows\system32\dllcache\m3092dc.dll
+ 2010-01-04 15:42 . 2001-08-18 04:36      58368              c:\windows\system32\dllcache\m3091dc.dll
+ 2010-01-04 15:42 . 2001-08-17 18:49      22848              c:\windows\system32\dllcache\lwusbhid.sys
+ 2010-01-04 15:42 . 2008-04-14 04:09      20864              c:\windows\system32\dllcache\lwadihid.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\lsass.exe
+ 2010-01-04 15:42 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\lprmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      10240              c:\windows\system32\dllcache\lprhelp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      22016              c:\windows\system32\dllcache\lpk.dll
+ 2010-01-04 15:42 . 2004-08-04 12:00      22528              c:\windows\system32\dllcache\lpdsvc.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\logoff.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      59392              c:\windows\system32\dllcache\logman.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      50176              c:\windows\system32\dllcache\loghours.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      19968              c:\windows\system32\dllcache\log.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      75264              c:\windows\system32\dllcache\locator.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      11776              c:\windows\system32\dllcache\localui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      97280              c:\windows\system32\dllcache\loadperf.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      25088              c:\windows\system32\dllcache\lnkstub.exe
+ 2010-01-04 15:41 . 2001-08-17 18:12      20573              c:\windows\system32\dllcache\lne100.sys
+ 2010-01-04 15:41 . 2001-08-17 18:11      25065              c:\windows\system32\dllcache\lmndis3.sys
+ 2010-01-04 15:41 . 2004-08-04 12:00      33792              c:\windows\system32\dllcache\lmmib2.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      13824              c:\windows\system32\dllcache\lmhsvc.dll
+ 2010-01-04 15:41 . 2001-08-17 19:51      15744              c:\windows\system32\dllcache\lit220p.sys
+ 2004-09-02 01:29 . 2005-09-01 01:41      19968              c:\windows\system32\dllcache\linkinfo.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      29696              c:\windows\system32\dllcache\lights.exe
+ 2004-09-02 01:40 . 2008-04-14 11:41      58880              c:\windows\system32\dllcache\licwmi.dll
+ 2004-09-02 01:29 . 2007-08-14 00:44      40960              c:\windows\system32\dllcache\licmgr10.dll
- 2007-08-14 00:44 . 2007-08-14 00:44      40960              c:\windows\system32\dllcache\licmgr10.dll
+ 2010-01-04 15:41 . 2008-04-14 06:10      34688              c:\windows\system32\dllcache\lbrtfdc.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      89600              c:\windows\system32\dllcache\langwrbk.dll
+ 2010-01-04 15:41 . 2001-08-17 18:12      26442              c:\windows\system32\dllcache\lanepic5.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      37376              c:\windows\system32\dllcache\l2store.dll
+ 2010-01-04 15:41 . 2001-08-17 18:12      19016              c:\windows\system32\dllcache\ktc111.sys
+ 2004-09-02 01:29 . 2008-04-14 06:01      92288              c:\windows\system32\dllcache\ksecdd.sys
+ 2004-09-02 01:40 . 2008-04-14 11:41      24576              c:\windows\system32\dllcache\krnlprov.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      92224              c:\windows\system32\dllcache\krnl386.exe
+ 2010-01-04 15:41 . 2001-08-18 04:36      37376              c:\windows\system32\dllcache\kousd.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      70656              c:\windows\system32\dllcache\korwbrkr.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      61440              c:\windows\system32\dllcache\kmsvc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      42537              c:\windows\system32\dllcache\keyboard.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      42809              c:\windows\system32\dllcache\key01.sys
+ 2010-01-04 15:41 . 2008-04-14 11:41      48640              c:\windows\system32\dllcache\kdsui.dll
+ 2010-01-04 15:41 . 2008-04-14 06:09      14592              c:\windows\system32\dllcache\kbdhid.sys
+ 2004-08-03 22:58 . 2008-04-14 06:09      24576              c:\windows\system32\dllcache\kbdclass.sys
+ 2010-01-04 15:41 . 2004-08-04 12:00      18432              c:\windows\system32\dllcache\jupiw.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      27648              c:\windows\system32\dllcache\jsproxy.dll
- 2006-05-10 05:22 . 2008-08-26 07:24      27648              c:\windows\system32\dllcache\jsproxy.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      47952              c:\windows\system32\dllcache\jobexec.dll
+ 2004-08-04 00:56 . 2008-04-14 11:41      47616              c:\windows\system32\dllcache\iyuv_32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      54272              c:\windows\system32\dllcache\ixsso.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      32768              c:\windows\system32\dllcache\isrdbg32.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\isignup.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      81920              c:\windows\system32\dllcache\isign32.dll
+ 2001-08-17 13:58 . 2008-04-14 06:06      37248              c:\windows\system32\dllcache\isapnp.sys
+ 2010-01-04 15:40 . 2001-08-17 19:51      18688              c:\windows\system32\dllcache\irsir.sys
+ 2010-01-04 15:40 . 2008-04-14 11:41      28160              c:\windows\system32\dllcache\irmon.dll
+ 2010-01-04 15:40 . 2001-08-17 19:49      23552              c:\windows\system32\dllcache\irmk7.sys
+ 2004-09-01 18:36 . 2008-04-14 06:24      11264              c:\windows\system32\dllcache\irenum.sys
+ 2010-01-04 15:40 . 2008-04-14 06:24      88192              c:\windows\system32\dllcache\irda.sys
+ 2004-09-01 18:36 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\irclass.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      22016              c:\windows\system32\dllcache\ipxwan.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      66560              c:\windows\system32\dllcache\ipxsap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      39936              c:\windows\system32\dllcache\ipxrtmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      23552              c:\windows\system32\dllcache\ipxroute.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      21504              c:\windows\system32\dllcache\ipxrip.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      69120              c:\windows\system32\dllcache\ipxpromn.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      83968              c:\windows\system32\dllcache\ipxmontr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      59904              c:\windows\system32\dllcache\ipv6mon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      53248              c:\windows\system32\dllcache\ipv6.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\ipsec6.exe
+ 2004-09-02 01:29 . 2008-04-14 06:49      75264              c:\windows\system32\dllcache\ipsec.sys
+ 2010-01-04 15:40 . 2004-08-04 12:00      35328              c:\windows\system32\dllcache\iprip.dll
+ 2004-09-02 01:29 . 2008-04-14 06:27      20864              c:\windows\system32\dllcache\ipinip.sys
+ 2004-09-02 01:29 . 2006-05-19 12:59      94720              c:\windows\system32\dllcache\iphlpapi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      32896              c:\windows\system32\dllcache\ipfltdrv.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      55808              c:\windows\system32\dllcache\ipconfig.exe
+ 2004-09-02 01:29 . 2008-04-14 06:23      36608              c:\windows\system32\dllcache\ip6fw.sys
+ 2010-01-04 15:40 . 2001-08-17 18:12      45632              c:\windows\system32\dllcache\ip5515.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      30720              c:\windows\system32\dllcache\iologmsg.dll
+ 2010-01-04 15:40 . 2001-08-18 04:36      90200              c:\windows\system32\dllcache\io8ports.dll
+ 2010-01-04 15:40 . 2001-08-17 19:50      38784              c:\windows\system32\dllcache\io8.sys
+ 2004-08-03 22:59 . 2008-04-14 06:01      36352              c:\windows\system32\dllcache\intelppm.sys
- 2006-05-10 05:22 . 2007-08-14 00:39      92672              c:\windows\system32\dllcache\inseng.dll
+ 2004-09-02 01:29 . 2007-08-14 00:39      92672              c:\windows\system32\dllcache\inseng.dll
+ 2010-01-04 15:40 . 2001-08-17 19:47      13056              c:\windows\system32\dllcache\inport.sys
+ 2010-01-04 15:40 . 2001-08-17 19:52      16000              c:\windows\system32\dllcache\ini910u.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      20480              c:\windows\system32\dllcache\inetwiz.exe
+ 2004-09-02 01:41 . 2008-04-14 03:52      48128              c:\windows\system32\dllcache\inetres.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      15872              c:\windows\system32\dllcache\inetppui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      75264              c:\windows\system32\dllcache\inetpp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      32768              c:\windows\system32\dllcache\inetmib1.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      59392              c:\windows\system32\dllcache\imscinst.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      59904              c:\windows\system32\dllcache\imkrinst.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      45109              c:\windows\system32\dllcache\imjpuex.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      81976              c:\windows\system32\dllcache\imjpdct.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      57398              c:\windows\system32\dllcache\imjpdadm.exe
+ 2004-09-02 01:29 . 2007-08-14 00:36      36352              c:\windows\system32\dllcache\imgutil.dll
- 2007-08-14 00:36 . 2007-08-14 00:36      36352              c:\windows\system32\dllcache\imgutil.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      36921              c:\windows\system32\dllcache\imeshare.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\imekrmig.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      86016              c:\windows\system32\dllcache\imekrmbx.dll
+ 2004-08-03 23:00 . 2008-04-14 06:11      42112              c:\windows\system32\dllcache\imapi.sys
+ 2004-09-02 01:41 . 2008-04-14 11:41      81920              c:\windows\system32\dllcache\ils.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      70656              c:\windows\system32\dllcache\ifsutil.dll
- 2007-08-14 00:39 . 2007-08-14 00:39      55296              c:\windows\system32\dllcache\iesetup.dll
+ 2004-09-02 01:29 . 2007-08-14 00:39      55296              c:\windows\system32\dllcache\iesetup.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      44544              c:\windows\system32\dllcache\iernonce.dll
- 2007-08-14 00:39 . 2008-08-26 07:24      44544              c:\windows\system32\dllcache\iernonce.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      81920              c:\windows\system32\dllcache\ieencode.dll
+ 2004-09-02 01:41 . 2007-08-14 00:44      69120              c:\windows\system32\dllcache\iedw.exe
- 2006-05-09 11:00 . 2007-08-14 00:44      69120              c:\windows\system32\dllcache\iedw.exe
+ 2004-09-02 01:29 . 2008-08-25 08:37      70656              c:\windows\system32\dllcache\ie4uinit.exe
- 2007-08-14 00:39 . 2008-08-25 08:37      70656              c:\windows\system32\dllcache\ie4uinit.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      49152              c:\windows\system32\dllcache\icwutil.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      73728              c:\windows\system32\dllcache\icwtutor.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      24576              c:\windows\system32\dllcache\icwrmind.exe
+ 2004-09-02 01:41 . 2004-08-04 12:00      61440              c:\windows\system32\dllcache\icwres.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      65536              c:\windows\system32\dllcache\icwphbk.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      32768              c:\windows\system32\dllcache\icwdl.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      73728              c:\windows\system32\dllcache\icwdial.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      86016              c:\windows\system32\dllcache\icwconn2.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      61440              c:\windows\system32\dllcache\icwconn.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      54784              c:\windows\system32\dllcache\icmui.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\icfgnt5.dll
+ 2010-01-04 15:40 . 2001-08-18 04:36      20480              c:\windows\system32\dllcache\icam5ext.dll
+ 2010-01-04 15:40 . 2001-08-18 04:36      45056              c:\windows\system32\dllcache\icam5com.dll
+ 2010-01-04 15:40 . 2001-08-18 04:36      61952              c:\windows\system32\dllcache\icam4ext.dll
+ 2010-01-04 15:40 . 2001-08-18 04:36      91136              c:\windows\system32\dllcache\icam4com.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\icaapi.dll
+ 2010-01-04 15:39 . 2001-08-17 20:06      38528              c:\windows\system32\dllcache\ibmvcap.sys
+ 2010-01-04 15:39 . 2001-08-17 18:11      28700              c:\windows\system32\dllcache\ibmexmp.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      59392              c:\windows\system32\dllcache\iassvcs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      86528              c:\windows\system32\dllcache\iassam.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      17920              c:\windows\system32\dllcache\iaspolcy.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      62464              c:\windows\system32\dllcache\iasnap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      32256              c:\windows\system32\dllcache\iashlpr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      41472              c:\windows\system32\dllcache\iasads.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\iasacct.dll
+ 2004-08-03 23:14 . 2008-04-14 06:48      52480              c:\windows\system32\dllcache\i8042prt.sys
+ 2010-01-04 15:39 . 2001-08-17 18:49      58592              c:\windows\system32\dllcache\i740nt5.sys
+ 2010-01-04 15:39 . 2008-04-14 06:11      18560              c:\windows\system32\dllcache\i2omp.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      41984              c:\windows\system32\dllcache\htui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      24576              c:\windows\system32\dllcache\httpapi.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\htrn_jis.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      32285              c:\windows\system32\dllcache\hsfcisp2.dll
+ 2010-01-04 15:39 . 2001-08-17 19:28      50751              c:\windows\system32\dllcache\hsf_tone.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      73279              c:\windows\system32\dllcache\hsf_spkp.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      44863              c:\windows\system32\dllcache\hsf_soar.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      57471              c:\windows\system32\dllcache\hsf_samp.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      18432              c:\windows\system32\dllcache\hscupd.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      42573              c:\windows\system32\dllcache\hrtzzm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      57409              c:\windows\system32\dllcache\hrtz.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      19456              c:\windows\system32\dllcache\hr1w.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      13312              c:\windows\system32\dllcache\hpsjmcro.dll
+ 2010-01-04 15:38 . 2001-08-17 20:07      25952              c:\windows\system32\dllcache\hpn.sys
+ 2010-01-04 15:38 . 2001-08-18 04:36      32768              c:\windows\system32\dllcache\hpgtmcro.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      68608              c:\windows\system32\dllcache\hpgt53tk.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      31232              c:\windows\system32\dllcache\hpgt42tk.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      93696              c:\windows\system32\dllcache\hpgt42.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      48128              c:\windows\system32\dllcache\hpgt33tk.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      89088              c:\windows\system32\dllcache\hpgt33.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      83968              c:\windows\system32\dllcache\hpgt21.dll
+ 2010-01-04 15:38 . 2004-08-04 12:00      39936              c:\windows\system32\dllcache\hostmib.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\hnetmon.dll
- 2007-08-14 00:18 . 2007-08-14 00:18      60416              c:\windows\system32\dllcache\hmmapi.dll
+ 2004-09-02 01:41 . 2007-08-14 00:18      60416              c:\windows\system32\dllcache\hmmapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      72704              c:\windows\system32\dllcache\hlink.dll
+ 2005-01-07 02:49 . 2008-04-14 06:15      10368              c:\windows\system32\dllcache\hidusb.sys
+ 2010-01-04 15:38 . 2008-04-14 11:41      21504              c:\windows\system32\dllcache\hidserv.dll
+ 2004-08-03 23:08 . 2008-04-14 06:15      24960              c:\windows\system32\dllcache\hidparse.sys
+ 2009-12-30 20:36 . 2008-04-14 06:15      19200              c:\windows\system32\dllcache\hidir.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      36864              c:\windows\system32\dllcache\hidclass.sys
+ 2009-12-30 20:36 . 2008-04-14 06:16      25600              c:\windows\system32\dllcache\hidbth.sys
+ 2010-01-04 15:38 . 2008-04-14 06:06      20352              c:\windows\system32\dllcache\hidbatt.sys
+ 2004-08-04 00:56 . 2004-08-04 12:00      20992              c:\windows\system32\dllcache\hid.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      41472              c:\windows\system32\dllcache\hhsetup.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      87552              c:\windows\system32\dllcache\hhctrlui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      10752              c:\windows\system32\dllcache\hh.exe
+ 2004-09-02 01:41 . 2004-08-04 12:00      99840              c:\windows\system32\dllcache\helphost.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      15872              c:\windows\system32\dllcache\help.exe
+ 2010-01-04 15:38 . 2004-08-04 12:00      36864              c:\windows\system32\dllcache\hanjadic.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      57344              c:\windows\system32\dllcache\h323cc.dll
+ 2010-01-04 15:38 . 2008-04-14 06:10      28288              c:\windows\system32\dllcache\grserial.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      39424              c:\windows\system32\dllcache\grpconv.exe
+ 2010-01-04 15:37 . 2001-08-17 19:51      17408              c:\windows\system32\dllcache\gpr400.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\gdi.exe
+ 2010-01-04 15:37 . 2008-04-14 06:15      59136              c:\windows\system32\dllcache\gckernel.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      76800              c:\windows\system32\dllcache\gcdef.dll
+ 2010-01-04 15:37 . 2008-04-14 06:15      10624              c:\windows\system32\dllcache\gameenum.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      46464              c:\windows\system32\dllcache\gagp30kx.sys
+ 2010-01-04 15:37 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\fxssend.exe
+ 2010-01-04 15:37 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\fxsroute.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\fxsmon.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      23552              c:\windows\system32\dllcache\fxsext32.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      55296              c:\windows\system32\dllcache\fxsevent.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      27136              c:\windows\system32\dllcache\fxsdrv.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      72192              c:\windows\system32\dllcache\fxscom.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      53248              c:\windows\system32\dllcache\fwdprov.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      60416              c:\windows\system32\dllcache\fwcfg.dll
+ 2010-01-04 15:37 . 2001-08-18 04:36      92160              c:\windows\system32\dllcache\fuusd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      42496              c:\windows\system32\dllcache\ftp.exe
+ 2001-08-17 13:57 . 2004-08-04 12:00      12160              c:\windows\system32\dllcache\fsvga.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      56320              c:\windows\system32\dllcache\fsutil.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      81408              c:\windows\system32\dllcache\fsusd.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      55296              c:\windows\system32\dllcache\freecell.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      20538              c:\windows\system32\dllcache\fpremadm.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      20541              c:\windows\system32\dllcache\fpexedll.dll
+ 2010-01-04 15:37 . 2003-03-24 22:52      94208              c:\windows\system32\dllcache\fpencode.dll
+ 2010-01-04 15:37 . 2003-03-24 22:52      20541              c:\windows\system32\dllcache\fpadmdll.dll
+ 2010-01-04 15:37 . 2003-03-24 22:52      24632              c:\windows\system32\dllcache\fpadmcgi.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      14608              c:\windows\system32\dllcache\fp98sadm.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      49212              c:\windows\system32\dllcache\fp4awebs.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      32826              c:\windows\system32\dllcache\fp4avss.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      41020              c:\windows\system32\dllcache\fp4avnb.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      49210              c:\windows\system32\dllcache\fp4areg.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      82035              c:\windows\system32\dllcache\fp4anscp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      32828              c:\windows\system32\dllcache\fp40ext.dll
+ 2010-01-04 15:37 . 2008-04-14 04:05      34173              c:\windows\system32\dllcache\forehe.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      20992              c:\windows\system32\dllcache\fontview.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      80896              c:\windows\system32\dllcache\fontsub.dll
+ 2010-01-04 15:37 . 2001-08-18 04:36      71680              c:\windows\system32\dllcache\fnfilter.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\fmifs.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      23040              c:\windows\system32\dllcache\fltmc.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      16896              c:\windows\system32\dllcache\fltlib.dll
+ 2004-08-03 22:59 . 2008-04-14 06:10      20480              c:\windows\system32\dllcache\flpydisk.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      87552              c:\windows\system32\dllcache\fldrclnr.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\flattemp.exe
+ 2004-09-02 01:29 . 2008-04-14 06:03      44544              c:\windows\system32\dllcache\fips.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      27136              c:\windows\system32\dllcache\findstr.exe
+ 2010-01-04 15:37 . 2001-08-17 18:13      27165              c:\windows\system32\dllcache\fetnd5.sys
+ 2010-01-04 15:37 . 2001-08-17 18:10      22090              c:\windows\system32\dllcache\fem556n5.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      21504              c:\windows\system32\dllcache\feclient.dll
+ 2004-08-03 22:59 . 2008-04-14 06:10      27392              c:\windows\system32\dllcache\fdc.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      14848              c:\windows\system32\dllcache\fc.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      80384              c:\windows\system32\dllcache\faultrep.dll
+ 2010-01-04 15:37 . 2001-08-17 18:12      24618              c:\windows\system32\dllcache\fa410nd5.sys
+ 2010-01-04 15:37 . 2001-08-17 18:12      16074              c:\windows\system32\dllcache\fa312nd5.sys
+ 2010-01-04 15:37 . 2001-08-17 18:11      11850              c:\windows\system32\dllcache\f3ab18xj.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      24064              c:\windows\system32\dllcache\extrac32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\expand.exe
+ 2010-01-04 15:51 . 2001-08-18 04:36      12288              c:\windows\system32\dllcache\EXCH_smtpctrs.dll
+ 2010-01-04 15:49 . 2001-08-18 04:36      26112              c:\windows\system32\dllcache\EXCH_seos.dll
+ 2010-01-04 15:49 . 2001-08-18 04:36      57856              c:\windows\system32\dllcache\EXCH_scripto.dll
+ 2010-01-04 15:48 . 2001-08-18 04:36      23040              c:\windows\system32\dllcache\EXCH_regtrace.exe
+ 2010-01-04 15:44 . 2001-08-18 04:36      38912              c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
+ 2010-01-04 15:42 . 2001-08-18 04:36      65536              c:\windows\system32\dllcache\EXCH_mailmsg.dll
+ 2010-01-04 15:37 . 2001-08-18 04:36      43520              c:\windows\system32\dllcache\EXCH_fcachdll.dll
+ 2010-01-04 15:31 . 2001-08-18 04:36      45056              c:\windows\system32\dllcache\EXCH_aqadmin.dll
+ 2010-01-04 15:36 . 2001-08-17 18:12      16998              c:\windows\system32\dllcache\ex10.sys
+ 2010-01-04 15:36 . 2004-08-04 12:00      92160              c:\windows\system32\dllcache\evntwin.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      21504              c:\windows\system32\dllcache\evntrprv.dll
+ 2010-01-04 15:36 . 2004-08-04 12:00      24064              c:\windows\system32\dllcache\evntcmd.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      55808              c:\windows\system32\dllcache\eventlog.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      33280              c:\windows\system32\dllcache\eventcls.dll
+ 2010-01-04 15:36 . 2004-08-04 12:00      25856              c:\windows\system32\dllcache\et4000.sys
+ 2010-01-04 15:36 . 2004-08-04 12:00      45056              c:\windows\system32\dllcache\esunid.dll
+ 2010-01-04 15:36 . 2001-08-18 04:36      45568              c:\windows\system32\dllcache\esunib.dll
+ 2010-01-04 15:36 . 2001-08-18 04:36      45568              c:\windows\system32\dllcache\esuni.dll
+ 2010-01-04 15:36 . 2004-08-04 12:00      57856              c:\windows\system32\dllcache\esuimgd.dll
+ 2010-01-04 15:36 . 2001-08-18 04:36      34816              c:\windows\system32\dllcache\esuimg.dll
+ 2010-01-04 15:36 . 2004-08-04 12:00      31744              c:\windows\system32\dllcache\esucmd.dll
+ 2010-01-04 15:36 . 2001-08-18 04:36      43008              c:\windows\system32\dllcache\esucm.dll
+ 2010-01-04 15:36 . 2001-08-17 18:19      63360              c:\windows\system32\dllcache\ess.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      39424              c:\windows\system32\dllcache\esentutl.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      17408              c:\windows\system32\dllcache\esentprf.dll
+ 2010-01-04 15:36 . 2001-08-17 18:19      72192              c:\windows\system32\dllcache\es1969.sys
+ 2010-01-04 15:36 . 2001-08-17 18:19      40704              c:\windows\system32\dllcache\es1371mp.sys
+ 2010-01-04 15:36 . 2001-08-17 18:19      37120              c:\windows\system32\dllcache\es1370mp.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      23040              c:\windows\system32\dllcache\ersvc.dll
+ 2010-01-04 15:36 . 2001-08-18 04:36      61952              c:\windows\system32\dllcache\eqnloop.exe
+ 2010-01-04 15:36 . 2001-08-18 04:36      51200              c:\windows\system32\dllcache\eqnlogr.exe
+ 2010-01-04 15:36 . 2001-08-18 04:36      53248              c:\windows\system32\dllcache\eqndiag.exe
+ 2010-01-04 15:36 . 2001-08-17 18:12      18503              c:\windows\system32\dllcache\epro4.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      20480              c:\windows\system32\dllcache\encapi.dll
+ 2010-01-04 15:36 . 2001-08-17 18:10      19996              c:\windows\system32\dllcache\em556n4.sys
+ 2010-01-04 15:36 . 2001-08-17 18:10      25159              c:\windows\system32\dllcache\elnk3.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      66591              c:\windows\system32\dllcache\el90xbc5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      77386              c:\windows\system32\dllcache\el656nd5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      69194              c:\windows\system32\dllcache\el656cd5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:10      26141              c:\windows\system32\dllcache\el589nd5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:10      69692              c:\windows\system32\dllcache\el575nd5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:10      24653              c:\windows\system32\dllcache\el574nd4.sys
+ 2010-01-04 15:35 . 2001-08-17 18:10      55999              c:\windows\system32\dllcache\el556nd5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:10      44103              c:\windows\system32\dllcache\el515.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      12642              c:\windows\system32\dllcache\edlin.exe
+ 2009-12-30 20:41 . 2008-04-14 11:41      33792              c:\windows\system32\dllcache\eapsvc.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      59392              c:\windows\system32\dllcache\eapqec.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      40960              c:\windows\system32\dllcache\eappprxy.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      94208              c:\windows\system32\dllcache\eappgnui.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      30720              c:\windows\system32\dllcache\eapolqec.dll
+ 2010-01-04 15:35 . 2001-08-17 18:12      19594              c:\windows\system32\dllcache\e100isa4.sys
+ 2010-01-04 15:35 . 2001-08-17 18:12      50719              c:\windows\system32\dllcache\e1000nt5.sys
+ 2004-08-03 23:00 . 2008-04-14 06:08      71168              c:\windows\system32\dllcache\dxg.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      10496              c:\windows\system32\dllcache\dxapi.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      55632              c:\windows\system32\dllcache\dwil1033.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      17920              c:\windows\system32\dllcache\dvdupgrd.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      55296              c:\windows\system32\dllcache\dvdplay.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      10752              c:\windows\system32\dllcache\dumprep.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      19456              c:\windows\system32\dllcache\dswave.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      51200              c:\windows\system32\dllcache\dssec.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      92672              c:\windows\system32\dllcache\dskquota.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      71680              c:\windows\system32\dllcache\dsdmoprp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      62976              c:\windows\system32\dllcache\dsauth.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      16384              c:\windows\system32\dllcache\ds32gt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      45568              c:\windows\system32\dllcache\drwtsn32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      28112              c:\windows\system32\dllcache\drwatson.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\drprov.dll
- 2009-12-30 20:38 . 2008-04-14 11:41      87040              c:\windows\system32\dllcache\drmstor.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      87040              c:\windows\system32\dllcache\drmstor.dll
+ 2004-09-02 02:03 . 2008-04-14 06:15      60160              c:\windows\system32\dllcache\drmk.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      57344              c:\windows\system32\dllcache\dpwsockx.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      42768              c:\windows\system32\dllcache\dpwsock.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      83456              c:\windows\system32\dllcache\dpvsetup.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      21504              c:\windows\system32\dllcache\dpvacm.dll
+ 2010-01-04 15:35 . 2001-08-17 20:07      20192              c:\windows\system32\dllcache\dpti2o.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      53520              c:\windows\system32\dllcache\dpserial.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      61952              c:\windows\system32\dllcache\dpnwsock.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      17920              c:\windows\system32\dllcache\dpnsvr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      62464              c:\windows\system32\dllcache\dpnmodem.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      60928              c:\windows\system32\dllcache\dpnhupnp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      35328              c:\windows\system32\dllcache\dpnhpast.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      23552              c:\windows\system32\dllcache\dpmodemx.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      29696              c:\windows\system32\dllcache\dplaysvr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      33040              c:\windows\system32\dllcache\dplay.dll
+ 2010-01-04 15:35 . 2001-08-17 18:12      28062              c:\windows\system32\dllcache\dp83820.sys
+ 2010-01-04 15:35 . 2001-08-17 19:47      23808              c:\windows\system32\dllcache\dot4usb.sys
+ 2010-01-04 15:35 . 2001-08-17 19:47      12928              c:\windows\system32\dllcache\dot4prt.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      56320              c:\windows\system32\dllcache\dot3msm.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      39936              c:\windows\system32\dllcache\dot3clnt.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      57856              c:\windows\system32\dllcache\dot3cfg.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      26112              c:\windows\system32\dllcache\dot3api.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      53840              c:\windows\system32\dllcache\dosx.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      10752              c:\windows\system32\dllcache\doskey.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      48128              c:\windows\system32\dllcache\docprop2.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      46080              c:\windows\system32\dllcache\docprop.dll
+ 2004-09-02 01:29 . 2008-02-20 05:32      45568              c:\windows\system32\dllcache\dnsrslvr.dll
+ 2004-08-04 00:56 . 2008-04-14 11:41      52224              c:\windows\system32\dllcache\dmutil.dll
+ 2004-09-02 02:04 . 2008-04-14 06:15      52864              c:\windows\system32\dllcache\dmusic.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      23552              c:\windows\system32\dllcache\dmserver.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      82432              c:\windows\system32\dllcache\dmscript.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      15872              c:\windows\system32\dllcache\dmremote.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\dmocx.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      35840              c:\windows\system32\dllcache\dmloader.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18432              c:\windows\system32\dllcache\dmintf.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      61440              c:\windows\system32\dllcache\dmcompos.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      28672              c:\windows\system32\dllcache\dmband.dll
+ 2010-01-04 15:35 . 2001-08-17 18:11      29696              c:\windows\system32\dllcache\dm9pci5.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      26698              c:\windows\system32\dllcache\dlh5xnd5.sys
+ 2010-01-04 15:35 . 2001-08-18 04:36      29768              c:\windows\system32\dllcache\divasu.dll
+ 2010-01-04 15:35 . 2001-08-18 04:36      37962              c:\windows\system32\dllcache\divaprop.dll
+ 2010-01-04 15:35 . 2001-08-18 04:36      38985              c:\windows\system32\dllcache\disrvsu.dll
+ 2010-01-04 15:35 . 2001-08-18 04:36      31305              c:\windows\system32\dllcache\disrvpp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      32768              c:\windows\system32\dllcache\dispex.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      17920              c:\windows\system32\dllcache\diskperf.exe
+ 2004-09-02 01:29 . 2008-04-14 06:10      14208              c:\windows\system32\dllcache\diskdump.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      36352              c:\windows\system32\dllcache\disk.sys
+ 2004-09-02 01:41 . 2008-04-14 11:41      86528              c:\windows\system32\dllcache\directdb.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      39936              c:\windows\system32\dllcache\dimsroam.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      19456              c:\windows\system32\dllcache\dimsntfy.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      44032              c:\windows\system32\dllcache\dimap.dll
+ 2010-01-04 15:35 . 2001-08-17 18:13      91305              c:\windows\system32\dllcache\dimaint.sys
+ 2010-01-04 15:35 . 2001-08-17 18:17      42432              c:\windows\system32\dllcache\digirlpt.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      41046              c:\windows\system32\dllcache\digiisdn.dll
+ 2010-01-04 15:34 . 2001-08-17 18:17      90525              c:\windows\system32\dllcache\digifep5.sys
+ 2010-01-04 15:34 . 2001-08-17 18:13      37735              c:\windows\system32\dllcache\digiasyn.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      65622              c:\windows\system32\dllcache\digiasyn.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      68608              c:\windows\system32\dllcache\digest.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      32256              c:\windows\system32\dllcache\diapi2NT.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      87040              c:\windows\system32\dllcache\diantz.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      74240              c:\windows\system32\dllcache\dhcpsapi.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      48640              c:\windows\system32\dllcache\dhcpqec.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      85020              c:\windows\system32\dllcache\dgsetup.dll
+ 2010-01-04 15:34 . 2001-08-17 18:17      29531              c:\windows\system32\dllcache\dgapci.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      28672              c:\windows\system32\dllcache\dfsshlex.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      39424              c:\windows\system32\dllcache\dfrgsnap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      51200              c:\windows\system32\dllcache\dfrgres.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      82944              c:\windows\system32\dllcache\dfrgfat.exe
+ 2010-01-04 15:34 . 2001-08-17 18:11      24649              c:\windows\system32\dllcache\dfe650d.sys
+ 2010-01-04 15:34 . 2001-08-17 18:11      24648              c:\windows\system32\dllcache\dfe650.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      24064              c:\windows\system32\dllcache\devldr32.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      59904              c:\windows\system32\dllcache\devenum.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      18432              c:\windows\system32\dllcache\deskperf.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\deskmon.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\deskadp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      25088              c:\windows\system32\dllcache\defrag.exe
+ 2010-01-04 15:34 . 2001-08-17 18:11      20928              c:\windows\system32\dllcache\defpa.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      20634              c:\windows\system32\dllcache\debug.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      27136              c:\windows\system32\dllcache\ddrawex.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      30208              c:\windows\system32\dllcache\ddeshare.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      39424              c:\windows\system32\dllcache\ddeml.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      40960              c:\windows\system32\dllcache\dcap32.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      86016              c:\windows\system32\dllcache\dc240usd.dll
+ 2010-01-04 15:34 . 2001-08-17 18:12      63208              c:\windows\system32\dllcache\dc21x4.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      80896              c:\windows\system32\dllcache\dc210usd.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      25600              c:\windows\system32\dllcache\dc210_32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      24576              c:\windows\system32\dllcache\davclnt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      54272              c:\windows\system32\dllcache\dataclen.dll
+ 2010-01-04 15:34 . 2001-08-17 19:52      14720              c:\windows\system32\dllcache\dac960nt.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      47616              c:\windows\system32\dllcache\d3dxof.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      34816              c:\windows\system32\dllcache\d3dpmesh.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      27648              c:\windows\system32\dllcache\cyzports.dll
+ 2010-01-04 15:34 . 2001-08-17 19:50      49792              c:\windows\system32\dllcache\cyzport.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      27136              c:\windows\system32\dllcache\cyzcoins.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      27648              c:\windows\system32\dllcache\cyyports.dll
+ 2010-01-04 15:34 . 2001-08-17 19:50      50176              c:\windows\system32\dllcache\cyyport.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      28672              c:\windows\system32\dllcache\cyycoins.dll
+ 2010-01-04 15:34 . 2001-08-17 19:50      14848              c:\windows\system32\dllcache\cyclom-y.sys
+ 2010-01-04 15:34 . 2001-08-17 19:50      17152              c:\windows\system32\dllcache\cyclad-z.sys
+ 2010-01-04 15:34 . 2008-04-14 04:06      48640              c:\windows\system32\dllcache\cwrwdm.sys
+ 2010-01-04 15:34 . 2001-08-17 18:19      93952              c:\windows\system32\dllcache\cwcwdm.sys
+ 2010-01-04 15:34 . 2001-08-17 18:19      72832              c:\windows\system32\dllcache\cwbwdm.sys
- 2008-01-04 01:20 . 2007-08-14 00:54      33792              c:\windows\system32\dllcache\custsat.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      33792              c:\windows\system32\dllcache\custsat.dll
+ 2010-01-04 15:34 . 2001-08-17 18:19      96256              c:\windows\system32\dllcache\ctlsb16.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      27200              c:\windows\system32\dllcache\ctl3dv2.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      27136              c:\windows\system32\dllcache\ctl3d32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      15360              c:\windows\system32\dllcache\ctfmon.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      73728              c:\windows\system32\dllcache\csseqchk.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      32256              c:\windows\system32\dllcache\csrsrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      60416              c:\windows\system32\dllcache\cryptsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      64512              c:\windows\system32\dllcache\cryptnet.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      53760              c:\windows\system32\dllcache\cryptext.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      33280              c:\windows\system32\dllcache\cryptdll.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      74752              c:\windows\system32\dllcache\cryptdlg.dll
+ 2004-08-03 22:59 . 2008-04-14 06:01      36736              c:\windows\system32\dllcache\crusoe.sys
+ 2010-01-04 15:33 . 2001-08-17 18:19      42112              c:\windows\system32\dllcache\crtaud.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      12800              c:\windows\system32\dllcache\credssp.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      18944              c:\windows\system32\dllcache\cprofile.exe
+ 2010-01-04 15:33 . 2001-08-17 18:11      60970              c:\windows\system32\dllcache\cpqtrnd5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      21533              c:\windows\system32\dllcache\cpqndis5.sys
+ 2001-08-17 13:24 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\cpqdap01.sys
+ 2010-01-04 15:33 . 2001-08-17 19:52      14976              c:\windows\system32\dllcache\cpqarray.sys
+ 2010-01-04 15:33 . 2004-08-04 12:00      57399              c:\windows\system32\dllcache\cplexe.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      27097              c:\windows\system32\dllcache\country.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      35328              c:\windows\system32\dllcache\corpol.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      13824              c:\windows\system32\dllcache\convert.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      66560              c:\windows\system32\dllcache\console.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      27648              c:\windows\system32\dllcache\conime.exe
+ 2004-09-02 01:41 . 2008-04-14 11:41      45056              c:\windows\system32\dllcache\confmrsl.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      97792              c:\windows\system32\dllcache\comrepl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      30160              c:\windows\system32\dllcache\compobj.dll
+ 2010-01-04 15:33 . 2008-04-14 06:06      10240              c:\windows\system32\dllcache\compbatt.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      17408              c:\windows\system32\dllcache\compact.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\comp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      32816              c:\windows\system32\dllcache\commdlg.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      28160              c:\windows\system32\dllcache\comaddin.dll
+ 2004-09-02 01:40 . 2005-07-26 04:39      60416              c:\windows\system32\dllcache\colbact.dll
+ 2009-12-30 20:41 . 2008-04-14 04:14      17920              c:\windows\system32\dllcache\cobramsg.dll
+ 2010-01-04 15:33 . 2001-08-17 18:11      39936              c:\windows\system32\dllcache\cnxt1803.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      26624              c:\windows\system32\dllcache\cnvfat.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      44032              c:\windows\system32\dllcache\cnusd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      32768              c:\windows\system32\dllcache\cnetcfg.dll
+ 2004-08-04 00:56 . 2004-08-04 12:00      47104              c:\windows\system32\dllcache\cnbjmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      39424              c:\windows\system32\dllcache\cmutil.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      63488              c:\windows\system32\dllcache\cmstp.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      13312              c:\windows\system32\dllcache\cmsetacl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\cmpbk32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      39936              c:\windows\system32\dllcache\cmmon32.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      25600              c:\windows\system32\dllcache\cmdl32.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      15872              c:\windows\system32\dllcache\cmcfg32.dll
+ 2010-01-04 15:33 . 2001-08-17 19:51      20736              c:\windows\system32\dllcache\cmbp0wdm.sys
+ 2010-01-04 15:33 . 2008-04-14 06:06      13952              c:\windows\system32\dllcache\cmbatt.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      57856              c:\windows\system32\dllcache\clusapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      33280              c:\windows\system32\dllcache\clipsrv.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      64000              c:\windows\system32\dllcache\cleanmgr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      10752              c:\windows\system32\dllcache\clb.dll
+ 2004-09-02 01:29 . 2008-04-14 06:46      49536              c:\windows\system32\dllcache\classpnp.sys
+ 2010-01-04 15:33 . 2001-08-17 19:57      45696              c:\windows\system32\dllcache\cirrus.sys
+ 2010-01-04 15:33 . 2001-08-17 20:56      91264              c:\windows\system32\dllcache\cirrus.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      69120              c:\windows\system32\dllcache\ciodm.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      56320              c:\windows\system32\dllcache\chtskdic.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      97792              c:\windows\system32\dllcache\chtmbx.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      42575              c:\windows\system32\dllcache\chkrzm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      40515              c:\windows\system32\dllcache\chkr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\chkntfs.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      11776              c:\windows\system32\dllcache\chkdsk.exe
+ 2010-01-04 15:33 . 2004-08-04 12:00      14336              c:\windows\system32\dllcache\chgusr.exe
+ 2010-01-04 15:33 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\chgport.exe
+ 2010-01-04 15:33 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\chglogon.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      80384              c:\windows\system32\dllcache\charmap.exe
+ 2009-12-30 20:36 . 2008-04-14 11:41      15423              c:\windows\system32\dllcache\ch7xxnt5.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      16896              c:\windows\system32\dllcache\cfgmgr32.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      38912              c:\windows\system32\dllcache\cfgbkend.dll
+ 2010-01-04 15:33 . 2001-08-17 18:13      49182              c:\windows\system32\dllcache\cem56n5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      22044              c:\windows\system32\dllcache\cem33n5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      22044              c:\windows\system32\dllcache\cem28n5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      27164              c:\windows\system32\dllcache\ce3n5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      21530              c:\windows\system32\dllcache\ce2n5.sys
+ 2004-08-03 22:59 . 2008-04-14 06:10      62976              c:\windows\system32\dllcache\cdrom.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      15872              c:\windows\system32\dllcache\cdmodem.dll
+ 2004-09-02 01:29 . 2008-04-14 06:44      63744              c:\windows\system32\dllcache\cdfs.sys
+ 2001-08-17 13:52 . 2004-08-04 12:00      18688              c:\windows\system32\dllcache\cdaudio.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      27648              c:\windows\system32\dllcache\ccfgnt.dll
+ 2004-09-01 18:39 . 2008-04-14 06:16      17024              c:\windows\system32\dllcache\ccdecode.sys
+ 2001-08-17 13:52 . 2004-08-04 12:00      13952              c:\windows\system32\dllcache\cbidf2k.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      46108              c:\windows\system32\dllcache\cben5.sys
+ 2010-01-04 15:33 . 2001-08-17 18:12      39680              c:\windows\system32\dllcache\cb325.sys
+ 2004-09-02 01:41 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\cb32.exe
+ 2010-01-04 15:33 . 2001-08-17 18:12      37916              c:\windows\system32\dllcache\cb102.sys
+ 2004-09-02 01:40 . 2008-04-14 11:41      85504              c:\windows\system32\dllcache\catsrvps.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      54528              c:\windows\system32\dllcache\cap7146.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      50688              c:\windows\system32\dllcache\camocx.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      74240              c:\windows\system32\dllcache\camexo20.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      19968              c:\windows\system32\dllcache\cacls.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      84480              c:\windows\system32\dllcache\cabview.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      59904              c:\windows\system32\dllcache\cabinet.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      10752              c:\windows\system32\dllcache\c_iscii.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      50688              c:\windows\system32\dllcache\btpanui.dll
+ 2009-12-30 20:36 . 2008-04-14 06:16      18944              c:\windows\system32\dllcache\bthusb.sys
+ 2004-08-04 00:56 . 2008-04-14 11:41      30208              c:\windows\system32\dllcache\bthserv.dll
+ 2009-12-30 20:36 . 2008-04-14 06:16      36480              c:\windows\system32\dllcache\bthprint.sys
+ 2009-12-30 20:36 . 2008-04-14 06:16      37888              c:\windows\system32\dllcache\bthmodem.sys
+ 2009-12-30 20:36 . 2008-04-14 06:16      17024              c:\windows\system32\dllcache\bthenum.sys
+ 2004-08-04 00:56 . 2008-04-14 11:41      20992              c:\windows\system32\dllcache\bthci.dll
+ 2010-01-04 15:32 . 2001-08-17 18:11      31529              c:\windows\system32\dllcache\brzwlan.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      10368              c:\windows\system32\dllcache\brusbscn.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      11008              c:\windows\system32\dllcache\brusbmdm.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      60416              c:\windows\system32\dllcache\brserwdm.sys
+ 2004-09-02 01:41 . 2004-08-04 12:00      21504              c:\windows\system32\dllcache\brpinfo.dll
+ 2010-01-04 15:32 . 2001-08-17 19:12      39552              c:\windows\system32\dllcache\brparwdm.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      78336              c:\windows\system32\dllcache\browsewm.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      77312              c:\windows\system32\dllcache\browser.dll
+ 2004-09-02 01:29 . 2008-04-14 04:33      63488              c:\windows\system32\dllcache\browselc.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      41472              c:\windows\system32\dllcache\brmfusb.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      32256              c:\windows\system32\dllcache\brmfrsmg.exe
+ 2010-01-04 15:32 . 2001-08-18 04:36      29696              c:\windows\system32\dllcache\brmflpt.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      81408              c:\windows\system32\dllcache\brmfcwia.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      15360              c:\windows\system32\dllcache\brmfbidi.dll
+ 2004-09-02 01:29 . 2008-04-14 06:23      71552              c:\windows\system32\dllcache\bridge.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      12160              c:\windows\system32\dllcache\brfiltlo.sys
+ 2010-01-04 15:32 . 2001-08-18 04:36      12800              c:\windows\system32\dllcache\brevif.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      19456              c:\windows\system32\dllcache\brbidiif.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      12288              c:\windows\system32\dllcache\bootvid.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      71680              c:\windows\system32\dllcache\blastcln.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      17408              c:\windows\system32\dllcache\bidispl.dll
+ 2010-01-04 15:32 . 2008-04-14 06:16      11776              c:\windows\system32\dllcache\bdasup.sys
+ 2010-01-04 15:32 . 2001-08-17 18:11      26568              c:\windows\system32\dllcache\bcm4e5.sys
+ 2010-01-04 15:32 . 2001-08-17 18:11      54271              c:\windows\system32\dllcache\bcm42xx5.sys
+ 2010-01-04 15:32 . 2001-08-17 18:11      66557              c:\windows\system32\dllcache\bcm42u.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      42577              c:\windows\system32\dllcache\bckgzm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      82501              c:\windows\system32\dllcache\bckg.dll
+ 2010-01-04 15:32 . 2008-04-14 06:06      14208              c:\windows\system32\dllcache\battc.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      28672              c:\windows\system32\dllcache\batmeter.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      52736              c:\windows\system32\dllcache\basesrv.dll
+ 2010-01-04 15:32 . 2001-08-17 18:48      36128              c:\windows\system32\dllcache\banshee.sys
+ 2010-01-04 15:32 . 2001-08-17 18:11      96640              c:\windows\system32\dllcache\b57xp32.sys
+ 2010-01-04 15:32 . 2001-08-17 18:13      89952              c:\windows\system32\dllcache\b1cbase.sys
+ 2010-01-04 15:32 . 2001-08-17 18:19      36992              c:\windows\system32\dllcache\aztw2320.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      73216              c:\windows\system32\dllcache\avwav.dll
+ 2010-01-04 15:32 . 2001-08-17 18:13      37568              c:\windows\system32\dllcache\avmwan.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      16384              c:\windows\system32\dllcache\avmeter.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      87552              c:\windows\system32\dllcache\avmcoxp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      84992              c:\windows\system32\dllcache\avifil32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      64000              c:\windows\system32\dllcache\avicap32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      69584              c:\windows\system32\dllcache\avicap.dll
+ 2010-01-04 15:32 . 2008-04-14 06:16      13696              c:\windows\system32\dllcache\avcstrm.sys
+ 2010-01-04 15:32 . 2001-08-17 20:01      36096              c:\windows\system32\dllcache\avcaudio.sys
+ 2010-01-04 15:32 . 2008-04-14 06:16      38912              c:\windows\system32\dllcache\avc.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\autolfn.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      80384              c:\windows\system32\dllcache\autodisc.dll
+ 2004-09-02 01:29 . 2005-03-02 18:09      56832              c:\windows\system32\dllcache\authz.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      16439              c:\windows\system32\dllcache\author.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      20540              c:\windows\system32\dllcache\author.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      14336              c:\windows\system32\dllcache\auditusr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      42496              c:\windows\system32\dllcache\audiosrv.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      17279              c:\windows\system32\dllcache\atv10nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      14143              c:\windows\system32\dllcache\atv06nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      25471              c:\windows\system32\dllcache\atv04nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      11359              c:\windows\system32\dllcache\atv02nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      21183              c:\windows\system32\dllcache\atv01nt5.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      12288              c:\windows\system32\dllcache\attrib.exe
+ 2004-09-02 01:41 . 2004-08-04 12:00      11264              c:\windows\system32\dllcache\atrace.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      34816              c:\windows\system32\dllcache\atmpvcno.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      30208              c:\windows\system32\dllcache\atmlib.dll
+ 2004-09-02 01:29 . 2008-04-14 06:21      55808              c:\windows\system32\dllcache\atmlane.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      31360              c:\windows\system32\dllcache\atmepvc.sys
+ 2004-09-02 01:29 . 2008-04-14 06:21      59904              c:\windows\system32\dllcache\atmarpc.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      11264              c:\windows\system32\dllcache\atmadm.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      58880              c:\windows\system32\dllcache\atl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      13312              c:\windows\system32\dllcache\atkctrs.dll
+ 2010-01-04 15:31 . 2001-08-17 18:49      26624              c:\windows\system32\dllcache\ativxbar.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      19456              c:\windows\system32\dllcache\ativttxx.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      32768              c:\windows\system32\dllcache\ativtmxx.dll
+ 2010-01-04 15:31 . 2001-08-17 18:49      17152              c:\windows\system32\dllcache\atitvsnd.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      17152              c:\windows\system32\dllcache\atitunep.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      26880              c:\windows\system32\dllcache\atirtsnd.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      49920              c:\windows\system32\dllcache\atirtcap.sys
+ 2010-01-04 15:31 . 2001-08-17 18:48      70528              c:\windows\system32\dllcache\atiragem.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      10240              c:\windows\system32\dllcache\atipcxxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      63488              c:\windows\system32\dllcache\atinxsxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      31744              c:\windows\system32\dllcache\atinxbxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      73216              c:\windows\system32\dllcache\atintuxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      13824              c:\windows\system32\dllcache\atinttxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      28672              c:\windows\system32\dllcache\atinsnxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      52224              c:\windows\system32\dllcache\atinraxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      14336              c:\windows\system32\dllcache\atinpdxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      13824              c:\windows\system32\dllcache\atinmdxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      57856              c:\windows\system32\dllcache\atinbtxx.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      75136              c:\windows\system32\dllcache\atimpae.sys
+ 2010-01-04 15:31 . 2001-08-18 04:36      37376              c:\windows\system32\dllcache\atievxx.exe
+ 2010-01-04 15:31 . 2001-08-17 18:49      46464              c:\windows\system32\dllcache\atibt829.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      34735              c:\windows\system32\dllcache\ati1xsxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      29455              c:\windows\system32\dllcache\ati1xbxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      36463              c:\windows\system32\dllcache\ati1tuxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      21343              c:\windows\system32\dllcache\ati1ttxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      26367              c:\windows\system32\dllcache\ati1snxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      63663              c:\windows\system32\dllcache\ati1rvxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      30671              c:\windows\system32\dllcache\ati1raxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      12047              c:\windows\system32\dllcache\ati1pdxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      11615              c:\windows\system32\dllcache\ati1mdxx.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      56623              c:\windows\system32\dllcache\ati1btxx.sys
+ 2010-01-04 15:31 . 2001-08-17 19:57      77568              c:\windows\system32\dllcache\ati.sys
+ 2010-01-04 15:31 . 2001-08-17 20:55      96128              c:\windows\system32\dllcache\ati.dll
+ 2004-08-03 22:59 . 2008-04-14 06:10      96512              c:\windows\system32\dllcache\atapi.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      25088              c:\windows\system32\dllcache\at.exe
+ 2004-09-02 01:29 . 2008-04-14 06:27      14336              c:\windows\system32\dllcache\asyncmac.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      65024              c:\windows\system32\dllcache\asycfilt.dll
+ 2010-01-04 15:31 . 2001-08-17 18:12      97354              c:\windows\system32\dllcache\aspndis3.sys
+ 2010-01-04 15:31 . 2001-08-17 19:51      14848              c:\windows\system32\dllcache\asc3550.sys
+ 2010-01-04 15:31 . 2001-08-17 19:52      22400              c:\windows\system32\dllcache\asc3350p.sys
+ 2010-01-04 15:31 . 2001-08-17 19:52      26496              c:\windows\system32\dllcache\asc.sys
+ 2004-08-03 22:58 . 2008-04-14 06:21      60800              c:\windows\system32\dllcache\arp1394.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\arp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      12498              c:\windows\system32\dllcache\append.exe
+ 2010-01-04 15:31 . 2008-04-14 04:05      36224              c:\windows\system32\dllcache\an983.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      70656              c:\windows\system32\dllcache\amstream.dll
+ 2010-01-04 15:31 . 2001-08-17 19:52      12032              c:\windows\system32\dllcache\amsint.sys
+ 2004-08-03 22:59 . 2008-04-14 06:01      37760              c:\windows\system32\dllcache\amdk7.sys
+ 2004-08-03 22:59 . 2008-04-14 06:01      37376              c:\windows\system32\dllcache\amdk6.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      43008              c:\windows\system32\dllcache\amdagp.sys
+ 2010-01-04 15:31 . 2001-08-17 18:11      16969              c:\windows\system32\dllcache\amb8002.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      17408              c:\windows\system32\dllcache\alrsvc.dll
+ 2009-12-30 20:36 . 2008-04-14 06:06      42752              c:\windows\system32\dllcache\alim1541.sys
+ 2010-01-04 15:31 . 2001-08-17 19:49      26624              c:\windows\system32\dllcache\alifir.sys
+ 2010-01-04 15:31 . 2001-08-17 18:11      27678              c:\windows\system32\dllcache\ali5261.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      44544              c:\windows\system32\dllcache\alg.exe
+ 2010-01-04 15:31 . 2001-08-17 20:07      56960              c:\windows\system32\dllcache\aic78xx.sys
+ 2010-01-04 15:31 . 2001-08-17 20:07      55168              c:\windows\system32\dllcache\aic78u2.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      98304              c:\windows\system32\dllcache\ahui.exe
+ 2010-01-04 15:31 . 2001-08-17 19:52      12800              c:\windows\system32\dllcache\aha154x.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      24064              c:\windows\system32\dllcache\agtintl.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      20480              c:\windows\system32\dllcache\agt0c0a.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      20992              c:\windows\system32\dllcache\agt0816.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt0804.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt041f.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt041d.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt0419.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      20480              c:\windows\system32\dllcache\agt0416.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt0415.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt0414.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      20992              c:\windows\system32\dllcache\agt0413.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt0412.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt0411.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      20992              c:\windows\system32\dllcache\agt0410.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      19968              c:\windows\system32\dllcache\agt040e.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt040d.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      21504              c:\windows\system32\dllcache\agt040c.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt040b.dll
+ 2004-09-02 01:29 . 2008-04-14 05:02      19968              c:\windows\system32\dllcache\agt0409.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      22016              c:\windows\system32\dllcache\agt0408.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      21504              c:\windows\system32\dllcache\agt0407.dll
+ 2004-09-02 01:29 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt0406.dll
+ 2004-09-01 18:36 . 2007-04-03 05:56      19456              c:\windows\system32\dllcache\agt0405.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt0404.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      19456              c:\windows\system32\dllcache\agt0401.dll
+ 2009-12-30 20:36 . 2008-04-14 06:06      44928              c:\windows\system32\dllcache\agpcpq.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      42368              c:\windows\system32\dllcache\agp440.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      44032              c:\windows\system32\dllcache\agentsr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      24064              c:\windows\system32\dllcache\agentpsh.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      49152              c:\windows\system32\dllcache\agentmpx.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      57344              c:\windows\system32\dllcache\agentdpv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      42496              c:\windows\system32\dllcache\agentdp2.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      24064              c:\windows\system32\dllcache\agentanm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      68096              c:\windows\system32\dllcache\adsmsext.dll
+ 2010-01-04 15:31 . 2001-08-17 18:11      46112              c:\windows\system32\dllcache\adptsf50.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      26112              c:\windows\system32\dllcache\adptif.dll
- 2007-08-14 00:39 . 2007-08-14 00:39      71680              c:\windows\system32\dllcache\admparse.dll
+ 2004-09-02 01:29 . 2007-08-14 00:39      71680              c:\windows\system32\dllcache\admparse.dll
+ 2010-01-04 15:31 . 2008-04-14 04:06      10880              c:\windows\system32\dllcache\admjoy.sys
+ 2010-01-04 15:30 . 2003-03-24 22:52      16439              c:\windows\system32\dllcache\admin.exe
+ 2010-01-04 15:30 . 2003-03-24 22:52      20540              c:\windows\system32\dllcache\admin.dll
+ 2010-01-04 15:31 . 2001-08-17 18:11      20160              c:\windows\system32\dllcache\adm8511.sys
+ 2001-08-17 13:57 . 2004-08-04 12:00      11648              c:\windows\system32\dllcache\acpiec.sys
+ 2010-01-04 15:31 . 2001-08-18 04:36      61440              c:\windows\system32\dllcache\acerscad.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      64512              c:\windows\system32\dllcache\acctres.dll
+ 2010-01-04 15:31 . 2008-04-14 04:06      84480              c:\windows\system32\dllcache\ac97via.sys
+ 2010-01-04 15:31 . 2001-08-17 18:20      96256              c:\windows\system32\dllcache\ac97intc.sys
+ 2010-01-04 15:31 . 2001-08-17 19:52      23552              c:\windows\system32\dllcache\abp480n5.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      25600              c:\windows\system32\dllcache\aaaamon.dll
+ 2010-01-04 15:31 . 2001-08-18 04:36      98304              c:\windows\system32\dllcache\a3d.dll
+ 2010-01-04 15:31 . 2001-08-17 20:55      38400              c:\windows\system32\dllcache\8514a.dll
+ 2010-01-04 15:31 . 2008-04-14 06:16      48128              c:\windows\system32\dllcache\61883.sys
+ 2010-01-04 15:31 . 2008-04-14 06:10      12288              c:\windows\system32\dllcache\4mmdat.sys
+ 2010-01-04 15:31 . 2001-08-17 20:06      11264              c:\windows\system32\dllcache\1394vdbg.sys
+ 2004-08-03 23:10 . 2008-04-14 06:16      53376              c:\windows\system32\dllcache\1394bus.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      8261              c:\windows\system32\dllcache\zoneoc.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      4677              c:\windows\system32\dllcache\zeeverm.dll
+ 2010-01-04 15:57 . 2001-08-18 04:37      4608              c:\windows\system32\dllcache\xrxflnch.exe
+ 2004-09-02 01:41 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\wuauserv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\wshnetbs.dll
+ 2010-01-04 15:57 . 2008-04-14 11:42      8192              c:\windows\system32\dllcache\wshirda.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\wshatm.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\write.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      3200              c:\windows\system32\dllcache\wowfax.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      2736              c:\windows\system32\dllcache\wowdeb.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      5632              c:\windows\system32\dllcache\wmm2res2.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      7680              c:\windows\system32\dllcache\wmm2ext.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      4096              c:\windows\system32\dllcache\wmm2eres.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4352              c:\windows\system32\dllcache\wmilib.sys
+ 2004-09-02 01:40 . 2008-04-14 04:40      6656              c:\windows\system32\dllcache\wmiapres.dll
+ 2010-01-04 15:57 . 2008-04-14 06:06      8832              c:\windows\system32\dllcache\wmiacpi.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\wmi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      5632              c:\windows\system32\dllcache\winver.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      2112              c:\windows\system32\dllcache\winspool.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      2864              c:\windows\system32\dllcache\winsock.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\winnls.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\winhstb.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\winfax.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\wifeman.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\vjoy.dll
+ 2010-01-04 15:56 . 2008-04-14 06:10      5376              c:\windows\system32\dllcache\viaide.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      2176              c:\windows\system32\dllcache\vga.drv
+ 2004-09-02 01:29 . 2004-08-04 12:00      9344              c:\windows\system32\dllcache\vga.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9008              c:\windows\system32\dllcache\ver.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\vcdex.dll
+ 2010-01-04 15:55 . 2001-08-17 19:28      7556              c:\windows\system32\dllcache\usroslba.sys
+ 2001-08-17 14:03 . 2004-08-04 12:00      4736              c:\windows\system32\dllcache\usbd.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\unlodctr.exe
+ 2001-08-17 22:36 . 2001-08-18 05:36      8192              c:\windows\system32\dllcache\tsbyuv.dll
+ 2010-01-04 15:54 . 2001-08-17 19:51      4992              c:\windows\system32\dllcache\toside.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      4048              c:\windows\system32\dllcache\timer.drv
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\tapiperf.dll
+ 2010-01-04 15:53 . 2001-08-17 19:52      7040              c:\windows\system32\dllcache\tandqic.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      3072              c:\windows\system32\dllcache\systray.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      3360              c:\windows\system32\dllcache\system.drv
+ 2010-01-04 15:52 . 2001-08-17 20:02      3968              c:\windows\system32\dllcache\swusbflt.sys
+ 2004-08-03 22:58 . 2008-04-14 06:09      4352              c:\windows\system32\dllcache\swenum.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\svcpack.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\subst.exe
+ 2001-08-17 22:36 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\streamci.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4208              c:\windows\system32\dllcache\storage.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\sprestrt.exe
+ 2004-09-02 02:04 . 2008-04-14 06:15      6272              c:\windows\system32\dllcache\splitter.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      1744              c:\windows\system32\dllcache\sound.drv
+ 2010-01-04 15:52 . 2001-08-17 19:56      7552              c:\windows\system32\dllcache\sonypvu1.sys
+ 2010-01-04 15:51 . 2001-08-17 19:53      9600              c:\windows\system32\dllcache\sonymc.sys
+ 2010-01-04 15:51 . 2008-04-14 06:10      7552              c:\windows\system32\dllcache\sonyait.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\softpub.dll
+ 2010-01-04 15:51 . 2001-08-17 19:53      7040              c:\windows\system32\dllcache\snyaitmc.sys
+ 2010-01-04 15:51 . 2004-08-04 12:00      8704              c:\windows\system32\dllcache\snmptrap.exe
+ 2010-01-04 15:51 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\snmpmib.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\smimsgif.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\smierrsy.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      8192              c:\windows\system32\dllcache\smbinst.exe
+ 2010-01-04 15:51 . 2001-08-17 19:57      6784              c:\windows\system32\dllcache\smbhc.sys
+ 2010-01-04 15:51 . 2008-04-14 06:06      6912              c:\windows\system32\dllcache\smbclass.sys
+ 2009-12-30 20:36 . 2008-04-14 06:06      5888              c:\windows\system32\dllcache\smbali.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\skdll.dll
+ 2009-12-30 20:36 . 2008-04-14 11:42      3901              c:\windows\system32\dllcache\siint5.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\shell.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\sfc.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\sfc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      7168              c:\windows\system32\dllcache\sensapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      5632              c:\windows\system32\dllcache\security.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4569              c:\windows\system32\dllcache\secupd.dat
+ 2010-01-04 15:49 . 2001-08-17 19:53      6912              c:\windows\system32\dllcache\seaddsmc.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      9216              c:\windows\system32\dllcache\scrnsave.scr
+ 2004-09-02 01:29 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\rsvpperf.dll
+ 2010-01-04 15:48 . 2001-08-18 04:36      9216              c:\windows\system32\dllcache\rsmgrstr.dll
+ 2010-01-04 15:48 . 2001-08-17 18:19      3840              c:\windows\system32\dllcache\rpfun.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\routetab.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5888              c:\windows\system32\dllcache\rootmdm.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      3072              c:\windows\system32\dllcache\rnr20.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      3584              c:\windows\system32\dllcache\riched32.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\reset.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\regwiz.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      3584              c:\windows\system32\dllcache\regedt32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      3338              c:\windows\system32\dllcache\redir.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\recover.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\rdpcfgex.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4224              c:\windows\system32\dllcache\rdpcdd.sys
+ 2004-09-02 01:29 . 2006-06-26 17:37      8192              c:\windows\system32\dllcache\rasadhlp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8832              c:\windows\system32\dllcache\rasacd.sys
+ 2010-01-04 15:47 . 2001-08-17 19:53      3328              c:\windows\system32\dllcache\qv2kux.sys
+ 2010-01-04 15:47 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\query.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\qosname.dll
+ 2010-01-04 15:47 . 2008-04-14 06:10      6016              c:\windows\system32\dllcache\qic157.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      3708              c:\windows\system32\dllcache\pubprn.vbs
+ 2010-01-04 15:47 . 2001-08-18 04:36      5632              c:\windows\system32\dllcache\ptpusb.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\psnppagn.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      9216              c:\windows\system32\dllcache\proxycfg.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\print.exe
+ 2010-01-04 15:47 . 2008-04-14 06:10      8832              c:\windows\system32\dllcache\powerfil.sys
+ 2010-01-04 15:47 . 2001-08-17 19:53      7168              c:\windows\system32\dllcache\pnrmc.sys
+ 2010-01-04 15:46 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\pmxgl.dll
+ 2010-01-04 15:46 . 2001-08-17 20:07      5504              c:\windows\system32\dllcache\perc2hib.sys
+ 2001-08-17 13:51 . 2001-08-17 20:51      3328              c:\windows\system32\dllcache\pciide.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      6784              c:\windows\system32\dllcache\parvdm.sys
+ 2001-08-17 13:57 . 2004-08-04 12:00      3456              c:\windows\system32\dllcache\oprghdlr.sys
+ 2004-09-02 01:29 . 2001-08-23 04:25      4530              c:\windows\system32\dllcache\oembios.dat
+ 2004-09-02 01:29 . 2004-08-04 12:00      2944              c:\windows\system32\dllcache\null.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      8192              c:\windows\system32\dllcache\ntlsapi.dll
+ 2010-01-04 15:44 . 2001-08-17 19:47      9344              c:\windows\system32\dllcache\ntapm.sys
+ 2010-01-04 15:44 . 2001-08-17 19:53      7552              c:\windows\system32\dllcache\nsmmc.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      7052              c:\windows\system32\dllcache\nlsfunc.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      4096              c:\windows\system32\dllcache\nddeapir.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\ncxpnt.dll
+ 2010-01-04 15:43 . 2001-08-18 04:36      7168              c:\windows\system32\dllcache\mxport.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      4096              c:\windows\system32\dllcache\mtxex.dll
+ 2004-09-01 18:39 . 2008-04-14 06:09      5504              c:\windows\system32\dllcache\mstee.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\msswchx.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\mssip32.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\msr2cenu.dll
+ 2004-09-01 18:39 . 2008-04-14 06:09      4992              c:\windows\system32\dllcache\mspqm.sys
+ 2004-09-01 18:39 . 2008-04-14 06:09      5376              c:\windows\system32\dllcache\mspclock.sys
+ 2010-01-04 15:43 . 2001-08-17 20:00      2944              c:\windows\system32\dllcache\msmpu401.sys
+ 2004-09-01 18:39 . 2008-04-14 06:09      7552              c:\windows\system32\dllcache\mskssrv.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\msimg32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\msidle.dll
+ 2010-01-04 15:43 . 2001-08-17 19:48      6016              c:\windows\system32\dllcache\msfsio.sys
+ 2004-09-02 01:30 . 2008-04-14 11:40      4126              c:\windows\system32\dllcache\msdxmlc.dll
- 2009-12-30 20:38 . 2008-04-14 11:40      4126              c:\windows\system32\dllcache\msdxmlc.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      6144              c:\windows\system32\dllcache\msdtc.exe
+ 2004-09-02 01:41 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\msdaurl.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\msdasc.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\msdaer.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\msdaenum.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\msdadc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\mscat32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:40      3584              c:\windows\system32\dllcache\msafd.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      4639              c:\windows\system32\dllcache\mplayer2.exe
- 2009-12-30 20:38 . 2008-04-14 11:42      4639              c:\windows\system32\dllcache\mplayer2.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      2032              c:\windows\system32\dllcache\mouse.drv
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\mountvol.exe
+ 2004-09-02 01:30 . 2004-08-04 12:00      4224              c:\windows\system32\dllcache\mnmdd.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\mll_qic.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\mll_mtf.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      3584              c:\windows\system32\dllcache\mll_hp.dll
+ 2010-01-04 15:42 . 2001-08-17 19:52      6528              c:\windows\system32\dllcache\miniqic.sys
+ 2010-01-04 15:42 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\migregdb.exe
+ 2010-01-04 15:42 . 2001-08-17 19:58      8320              c:\windows\system32\dllcache\memcard.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\mciole32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\mciole16.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\mchgrcoi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\mcd.sys
+ 2010-01-04 15:42 . 2001-08-17 19:52      7424              c:\windows\system32\dllcache\mammoth.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\mag_hook.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9936              c:\windows\system32\dllcache\lzexpand.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      2560              c:\windows\system32\dllcache\lz32.dll
+ 2010-01-04 15:42 . 2008-04-14 06:10      7040              c:\windows\system32\dllcache\ltotape.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\lprmonui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\lpr.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\lpq.exe
+ 2010-01-04 15:42 . 2001-08-17 19:53      4992              c:\windows\system32\dllcache\loop.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\lodctr.exe
+ 2004-09-02 01:30 . 2008-04-14 11:41      6656              c:\windows\system32\dllcache\laprxy.dll
- 2009-12-30 20:38 . 2008-04-14 11:41      6656              c:\windows\system32\dllcache\laprxy.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\label.exe
+ 2004-09-01 18:38 . 2008-04-14 11:41      4096              c:\windows\system32\dllcache\ksuser.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      2000              c:\windows\system32\dllcache\keyboard.drv
+ 2004-09-02 01:29 . 2004-08-04 12:00      7040              c:\windows\system32\dllcache\kdcom.dll
+ 2004-09-02 01:29 . 2008-04-14 06:01      7424              c:\windows\system32\dllcache\kd1394.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdycl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdycc.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdvntc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbduzb.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdusx.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdusr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdusl.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdusa.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdus.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdurdu.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdur.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7168              c:\windows\system32\dllcache\kbdukx.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbduk.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdtuq.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdtuf.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdth3.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdth2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdth1.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdth0.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdtat.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdsyr2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdsyr1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdsw.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdsp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7680              c:\windows\system32\dllcache\kbdsmsno.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7680              c:\windows\system32\dllcache\kbdsmsfi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdsl1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdsl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdsg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdsf.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdru1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdru.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdro.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdpo.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdpl1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdpl.dll
+ 2009-12-30 20:41 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdpash.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7168              c:\windows\system32\dllcache\kbdno1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdno.dll
+ 2009-12-30 20:41 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdnepr.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\kbdnecnt.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\kbdnecat.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\kbdnec95.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7168              c:\windows\system32\dllcache\kbdnec.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdne.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdmlt48.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdmlt47.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      5632              c:\windows\system32\dllcache\kbdmaori.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdmac.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdlv1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdlv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdlt1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdlt.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdlk41j.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdlk41a.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdla.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdkyr.dll
+ 2010-01-04 15:41 . 2001-08-18 04:36      8192              c:\windows\system32\dllcache\kbdkor.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdkaz.dll
+ 2010-01-04 15:41 . 2001-08-18 04:36      8704              c:\windows\system32\dllcache\kbdjpn.dll
+ 2009-12-30 20:41 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdiultn.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdit142.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdit.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdir.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdintel.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdintam.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdinpun.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdinmar.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      6656              c:\windows\system32\dllcache\kbdinmal.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdinkan.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdinhin.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdinguj.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdindev.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdinben.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdinbe1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdic.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\kbdibm02.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdhu1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdhu.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\kbdhept.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdhela3.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdhela2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdheb.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdhe319.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdhe220.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdhe.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdgr1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdgr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdgkl.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\kbdgeo.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdgae.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdfr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdfo.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      7168              c:\windows\system32\dllcache\kbdfi1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdfi.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdfc.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdfa.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdest.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdes.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\kbddv.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbddiv2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbddiv1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdda.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdcz2.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdcz1.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\kbdcz.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdcr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\kbdcan.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdca.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdbu.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdbr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdblr.dll
+ 2009-12-30 20:41 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbdbhc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdbene.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdbe.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdazel.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbdaze.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbdax2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\kbdarmw.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\kbdarme.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\kbdal.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbda3.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbda2.dll
+ 2004-09-02 01:27 . 2004-08-04 12:00      5632              c:\windows\system32\dllcache\kbda1.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbd106n.dll
+ 2010-01-04 15:41 . 2008-04-14 11:39      6144              c:\windows\system32\dllcache\kbd106.dll
+ 2010-01-04 15:41 . 2001-08-17 20:55      5632              c:\windows\system32\dllcache\kbd103.dll
+ 2010-01-04 15:41 . 2001-08-17 20:55      6144              c:\windows\system32\dllcache\kbd101c.dll
+ 2010-01-04 15:41 . 2001-08-17 20:55      6144              c:\windows\system32\dllcache\kbd101b.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbd101a.dll
+ 2010-01-04 15:41 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\kbd101.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4096              c:\windows\system32\dllcache\iprtprio.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      3584              c:\windows\system32\dllcache\iprop.dll
+ 2004-09-01 18:37 . 2008-04-14 06:10      5504              c:\windows\system32\dllcache\intelide.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      8192              c:\windows\system32\dllcache\igmpagnt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      3584              c:\windows\system32\dllcache\icmp.dll
+ 2010-01-04 15:39 . 2001-08-18 04:34      9216              c:\windows\system32\dllcache\ibmsgnet.dll
+ 2010-01-04 15:39 . 2008-04-14 06:11      8576              c:\windows\system32\dllcache\i2omgmt.sys
+ 2010-01-04 15:39 . 2001-08-18 04:36      9759              c:\windows\system32\dllcache\hsf_inst.dll
+ 2010-01-04 15:38 . 2001-08-17 19:52      5760              c:\windows\system32\dllcache\hpt4qic.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\hostname.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      4768              c:\windows\system32\dllcache\himem.sys
+ 2010-01-04 15:38 . 2001-08-17 20:02      2688              c:\windows\system32\dllcache\hidswvd.sys
+ 2010-01-04 15:38 . 2001-08-17 20:02      8576              c:\windows\system32\dllcache\hidgame.sys
+ 2004-08-04 00:56 . 2008-04-14 11:41      7168              c:\windows\system32\dllcache\hccoin.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\hcappres.dll
+ 2004-09-02 01:29 . 2006-12-31 12:56      9728              c:\windows\system32\dllcache\gpkrsrc.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\fxsres.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      8704              c:\windows\system32\dllcache\fxsperf.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\ftlx041e.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\fsconins.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      7936              c:\windows\system32\dllcache\fs_rec.sys
+ 2004-09-02 01:29 . 2008-04-14 11:39      9344              c:\windows\system32\dllcache\framebuf.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      7680              c:\windows\system32\dllcache\forcedos.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      3072              c:\windows\system32\dllcache\fixmapi.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\finger.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      9216              c:\windows\system32\dllcache\find.exe
+ 2010-01-04 15:37 . 2004-08-04 12:00      7168              c:\windows\system32\dllcache\f3ahvoas.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      8424              c:\windows\system32\dllcache\exe2bin.exe
+ 2010-01-04 15:51 . 2001-08-18 04:36      7168              c:\windows\system32\dllcache\EXCH_snprfdll.dll
+ 2010-01-04 15:31 . 2001-08-18 04:36      5632              c:\windows\system32\dllcache\EXCH_adsiisex.dll
+ 2010-01-04 15:36 . 2001-08-17 19:52      7040              c:\windows\system32\dllcache\exabyte2.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      8704              c:\windows\system32\dllcache\eventvwr.exe
+ 2004-09-01 18:38 . 2001-08-17 13:46      6400              c:\windows\system32\dllcache\enum1394.sys
+ 2010-01-04 15:36 . 2001-08-17 19:53      7296              c:\windows\system32\dllcache\elmsmc.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      3328              c:\windows\system32\dllcache\dxgthk.sys
+ 2004-09-02 01:29 . 2008-04-14 04:39      4096              c:\windows\system32\dllcache\dsprpres.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4656              c:\windows\system32\dllcache\ds16gt.dll
+ 2004-09-02 02:04 . 2008-04-14 06:15      2944              c:\windows\system32\dllcache\drmkaud.sys
+ 2004-09-02 01:29 . 2008-04-14 11:39      3072              c:\windows\system32\dllcache\dpnlobby.dll
+ 2004-09-02 01:29 . 2008-04-14 11:39      3072              c:\windows\system32\dllcache\dpnaddr.dll
+ 2010-01-04 15:35 . 2001-08-17 19:47      8704              c:\windows\system32\dllcache\dot4scan.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      9216              c:\windows\system32\dllcache\dot3dlg.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5888              c:\windows\system32\dllcache\dmload.sys
+ 2010-01-04 15:35 . 2008-04-14 06:10      8320              c:\windows\system32\dllcache\dlttape.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\dllhst3g.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      5120              c:\windows\system32\dllcache\dllhost.exe
+ 2010-01-04 15:35 . 2001-08-18 04:36      6216              c:\windows\system32\dllcache\divaci.dll
+ 2010-01-04 15:35 . 2001-08-18 04:36      6729              c:\windows\system32\dllcache\disrvci.dll
+ 2010-01-04 15:34 . 2001-08-17 19:52      7424              c:\windows\system32\dllcache\ddsmc.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      6144              c:\windows\system32\dllcache\dcomcnfg.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      8704              c:\windows\system32\dllcache\dciman32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      8192              c:\windows\system32\dllcache\d3d8thk.dll
+ 2010-01-04 15:34 . 2001-08-17 18:19      3584              c:\windows\system32\dllcache\cwcosnt5.sys
+ 2010-01-04 15:34 . 2001-08-17 18:19      3072              c:\windows\system32\dllcache\cwbmidi.sys
+ 2010-01-04 15:34 . 2001-08-17 18:19      3072              c:\windows\system32\dllcache\cwbase.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      4096              c:\windows\system32\dllcache\ctwdm32.dll
+ 2010-01-04 15:34 . 2001-08-17 18:19      3712              c:\windows\system32\dllcache\ctljystk.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      6144              c:\windows\system32\dllcache\csrss.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\control.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      6144              c:\windows\system32\dllcache\comrereg.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      9728              c:\windows\system32\dllcache\comrepl.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      3584              c:\windows\system32\dllcache\comcat.dll
+ 2010-01-04 15:33 . 2001-08-17 19:51      6656              c:\windows\system32\dllcache\cmdide.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      7680              c:\windows\system32\dllcache\ckcnv.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      5632              c:\windows\system32\dllcache\cisvc.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      8192              c:\windows\system32\dllcache\cidaemon.exe
+ 2010-01-04 15:33 . 2008-04-14 06:11      8192              c:\windows\system32\dllcache\changer.sys
+ 2010-01-04 15:33 . 2004-08-04 12:00      9728              c:\windows\system32\dllcache\change.exe
+ 2010-01-04 15:33 . 2001-08-17 19:52      7680              c:\windows\system32\dllcache\cd20xrnt.sys
+ 2010-01-04 15:33 . 2004-08-04 12:00      6656              c:\windows\system32\dllcache\c_is2022.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      9728              c:\windows\system32\dllcache\brserif.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      5120              c:\windows\system32\dllcache\brscnrsm.dll
+ 2010-01-04 15:32 . 2001-08-17 19:12      3168              c:\windows\system32\dllcache\brparimg.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      3968              c:\windows\system32\dllcache\brfiltup.sys
+ 2010-01-04 15:32 . 2001-08-17 19:12      2944              c:\windows\system32\dllcache\brfilt.sys
+ 2010-01-04 15:32 . 2001-08-18 04:36      9728              c:\windows\system32\dllcache\brcoinst.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      5120              c:\windows\system32\dllcache\bootvrfy.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      4608              c:\windows\system32\dllcache\bootok.exe
+ 2009-12-30 20:41 . 2008-04-14 11:41      7168              c:\windows\system32\dllcache\bitsprx4.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      7168              c:\windows\system32\dllcache\bitsprx3.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      8192              c:\windows\system32\dllcache\bitsprx2.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      4224              c:\windows\system32\dllcache\beep.sys
+ 2004-09-01 18:36 . 2008-04-14 11:41      8704              c:\windows\system32\dllcache\batt.dll
+ 2004-09-01 18:39 . 2001-08-17 13:59      3072              c:\windows\system32\dllcache\audstub.sys
+ 2010-01-04 15:31 . 2001-08-17 18:49      9472              c:\windows\system32\dllcache\ativmdcd.sys
- 2009-12-30 20:38 . 2008-04-14 04:53      8192              c:\windows\system32\dllcache\asferror.dll
+ 2004-09-02 01:30 . 2008-04-14 04:53      8192              c:\windows\system32\dllcache\asferror.dll
+ 2010-01-04 15:31 . 2001-08-17 19:47      6272              c:\windows\system32\dllcache\apmbatt.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      9029              c:\windows\system32\dllcache\ansi.sys
+ 2010-01-04 15:31 . 2001-08-17 19:51      5248              c:\windows\system32\dllcache\aliide.sys
+ 2009-12-30 20:36 . 2008-04-14 11:41      3775              c:\windows\system32\dllcache\adv11nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      3711              c:\windows\system32\dllcache\adv09nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      3135              c:\windows\system32\dllcache\adv08nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      3647              c:\windows\system32\dllcache\adv07nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      3615              c:\windows\system32\dllcache\adv05nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      3967              c:\windows\system32\dllcache\adv02nt5.dll
+ 2009-12-30 20:36 . 2008-04-14 11:41      4255              c:\windows\system32\dllcache\adv01nt5.dll
+ 2010-01-04 15:31 . 2001-08-17 19:53      7424              c:\windows\system32\dllcache\adicvls.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      4096              c:\windows\system32\dllcache\actmovie.exe
+ 2005-09-23 04:48 . 2005-09-23 04:48      626688              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
+ 2005-09-23 04:48 . 2005-09-23 04:48      548864              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
+ 2005-09-23 04:48 . 2005-09-23 04:48      479232              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
+ 2009-07-12 07:12 . 2009-07-12 07:12      632656              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-12 07:09 . 2009-07-12 07:09      554832              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-12 07:08 . 2009-07-12 07:08      479232              c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
+ 2010-01-04 18:06 . 2003-11-21 22:26      118784              c:\windows\system32\ReinstallBackups\0021\DriverFiles\Prounstl.exe
+ 2010-01-04 18:06 . 2004-02-10 22:49      154112              c:\windows\system32\ReinstallBackups\0021\DriverFiles\e100b325.sys
+ 2004-09-02 01:30 . 2003-11-21 21:26      118784              c:\windows\system32\Prounstl.exe
- 2004-09-02 01:30 . 2003-11-21 22:26      118784              c:\windows\system32\Prounstl.exe
- 2004-09-02 01:29 . 2009-12-30 20:51      380350              c:\windows\system32\perfh009.dat
+ 2004-09-02 01:29 . 2010-01-04 18:24      380350              c:\windows\system32\perfh009.dat
+ 2004-09-02 01:30 . 2004-02-10 21:49      154112              c:\windows\system32\drivers\e100b325.sys
- 2004-09-02 01:30 . 2004-02-10 22:49      154112              c:\windows\system32\drivers\e100b325.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      113222              c:\windows\system32\dllcache\zoneclim.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      338432              c:\windows\system32\dllcache\zipfldr.dll
+ 2010-01-04 15:57 . 2008-04-14 11:42      116224              c:\windows\system32\dllcache\xrxwiadr.dll
+ 2005-05-17 00:25 . 2008-04-14 05:09      689152              c:\windows\system32\dllcache\xpsp3res.dll
+ 2004-09-02 01:29 . 2008-04-14 05:09      187392              c:\windows\system32\dllcache\xpsp1res.dll
+ 2004-09-02 01:29 . 2008-04-14 05:09      438784              c:\windows\system32\dllcache\xpob2res.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      129024              c:\windows\system32\dllcache\xmlprov.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      174200              c:\windows\system32\dllcache\xenroll.dll
+ 2004-08-04 00:56 . 2004-08-04 12:00      359936              c:\windows\system32\dllcache\wzcsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      383488              c:\windows\system32\dllcache\wzcdlg.dll
+ 2004-08-04 00:56 . 2008-04-14 11:42      108032              c:\windows\system32\dllcache\wshbth.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      155648              c:\windows\system32\dllcache\wscript.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      264192              c:\windows\system32\dllcache\wow32.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      214528              c:\windows\system32\dllcache\wordpad.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      809984              c:\windows\system32\dllcache\wmvdmod.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      809984              c:\windows\system32\dllcache\wmvdmod.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      303616              c:\windows\system32\dllcache\wmstream.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      303616              c:\windows\system32\dllcache\wmstream.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      897024              c:\windows\system32\dllcache\wmspdmoe.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      897024              c:\windows\system32\dllcache\wmspdmoe.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      485376              c:\windows\system32\dllcache\wmspdmod.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      485376              c:\windows\system32\dllcache\wmspdmod.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      115200              c:\windows\system32\dllcache\wmsdmoe.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      115200              c:\windows\system32\dllcache\wmsdmoe.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      759296              c:\windows\system32\dllcache\wmsdmod.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      759296              c:\windows\system32\dllcache\wmsdmod.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      102400              c:\windows\system32\dllcache\wmpshell.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      102400              c:\windows\system32\dllcache\wmpshell.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      221184              c:\windows\system32\dllcache\wmpns.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      221184              c:\windows\system32\dllcache\wmpns.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      233472              c:\windows\system32\dllcache\wmpdxm.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      233472              c:\windows\system32\dllcache\wmpdxm.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      114688              c:\windows\system32\dllcache\wmpasf.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      114688              c:\windows\system32\dllcache\wmpasf.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      325632              c:\windows\system32\dllcache\wmm2fxb.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      502272              c:\windows\system32\dllcache\wmm2fxa.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      402432              c:\windows\system32\dllcache\wmm2filt.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      167936              c:\windows\system32\dllcache\wmm2ae.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      144896              c:\windows\system32\dllcache\wmisvc.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      218112              c:\windows\system32\dllcache\wmiprvse.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      437248              c:\windows\system32\dllcache\wmiprvsd.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      144896              c:\windows\system32\dllcache\wmiprov.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      132096              c:\windows\system32\dllcache\wmipdskq.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      156672              c:\windows\system32\dllcache\wmipcima.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      151552              c:\windows\system32\dllcache\wmidx.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      151552              c:\windows\system32\dllcache\wmidx.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      140800              c:\windows\system32\dllcache\wmidcprv.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      126464              c:\windows\system32\dllcache\wmiapsrv.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      196608              c:\windows\system32\dllcache\wmiadap.exe
- 2009-12-30 20:42 . 2008-04-14 04:53      168448              c:\windows\system32\dllcache\wmerror.dll
+ 2004-09-02 01:30 . 2008-04-14 04:53      168448              c:\windows\system32\dllcache\wmerror.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      230912              c:\windows\system32\dllcache\wmasf.dll
- 2007-10-27 23:39 . 2008-04-14 11:42      230912              c:\windows\system32\dllcache\wmasf.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      670720              c:\windows\system32\dllcache\wmadmoe.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      670720              c:\windows\system32\dllcache\wmadmoe.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      408064              c:\windows\system32\dllcache\wmadmod.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      408064              c:\windows\system32\dllcache\wmadmod.dll
+ 2010-01-04 15:57 . 2008-04-14 04:05      154624              c:\windows\system32\dllcache\wlluc48.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      172032              c:\windows\system32\dllcache\wldap32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      132096              c:\windows\system32\dllcache\wkssvc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      176640              c:\windows\system32\dllcache\wintrust.dll
+ 2004-09-02 01:29 . 2007-03-17 13:43      292864              c:\windows\system32\dllcache\winsrv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      146432              c:\windows\system32\dllcache\winspool.drv
+ 2004-09-02 01:29 . 2008-04-14 11:41      756224              c:\windows\system32\dllcache\winntbbu.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      176128              c:\windows\system32\dllcache\winmm.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      119808              c:\windows\system32\dllcache\winmine.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      502272              c:\windows\system32\dllcache\winlogon.exe
+ 2004-09-02 01:29 . 2008-08-26 07:24      826368              c:\windows\system32\dllcache\wininet.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      826368              c:\windows\system32\dllcache\wininet.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      351232              c:\windows\system32\dllcache\winhttp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      283648              c:\windows\system32\dllcache\winhlp32.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      256192              c:\windows\system32\dllcache\winhelp.exe
+ 2010-01-04 15:57 . 2001-08-17 19:28      771581              c:\windows\system32\dllcache\winacisa.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      102400              c:\windows\system32\dllcache\win32spl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      145408              c:\windows\system32\dllcache\wiavusd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      111104              c:\windows\system32\dllcache\wiavideo.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      589312              c:\windows\system32\dllcache\wiashext.dll
+ 2004-09-02 01:29 . 2006-12-19 18:16      333824              c:\windows\system32\dllcache\wiaservc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      124416              c:\windows\system32\dllcache\wiadss.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      463360              c:\windows\system32\dllcache\wiadefui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      433664              c:\windows\system32\dllcache\wiaacmgr.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      135680              c:\windows\system32\dllcache\webvw.dll
- 2007-08-14 00:54 . 2008-08-26 07:24      233472              c:\windows\system32\dllcache\webcheck.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      233472              c:\windows\system32\dllcache\webcheck.dll
+ 2010-01-04 15:56 . 2001-08-17 19:28      701386              c:\windows\system32\dllcache\wdhaalba.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      197120              c:\windows\system32\dllcache\wbemupgd.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      116224              c:\windows\system32\dllcache\wbemtest.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      273920              c:\windows\system32\dllcache\wbemess.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      178176              c:\windows\system32\dllcache\wbemdisp.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      530944              c:\windows\system32\dllcache\wbemcore.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      214528              c:\windows\system32\dllcache\wbemcomn.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      196608              c:\windows\system32\dllcache\wbemcntl.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      215552              c:\windows\system32\dllcache\wavemsp.dll
+ 2004-09-02 01:41 . 2008-04-14 03:51      249856              c:\windows\system32\dllcache\wab32res.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      510976              c:\windows\system32\dllcache\wab32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      174592              c:\windows\system32\dllcache\w32time.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      289792              c:\windows\system32\dllcache\vssvc.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      430592              c:\windows\system32\dllcache\vssapi.dll
+ 2010-01-04 15:56 . 2001-08-17 19:28      397502              c:\windows\system32\dllcache\vpctcom.sys
+ 2010-01-04 15:56 . 2004-08-04 12:00      426041              c:\windows\system32\dllcache\voicepad.dll
+ 2010-01-04 15:56 . 2001-08-17 19:28      604253              c:\windows\system32\dllcache\vmodem.sys
+ 2010-01-04 15:56 . 2001-08-17 18:14      249402              c:\windows\system32\dllcache\vinwm.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      131584              c:\windows\system32\dllcache\viewprov.dll
+ 2004-09-02 01:41 . 2007-07-12 23:31      765952              c:\windows\system32\dllcache\vgx.dll
- 2006-09-18 14:15 . 2007-07-12 23:31      765952              c:\windows\system32\dllcache\vgx.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      434176              c:\windows\system32\dllcache\vbscript.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      218624              c:\windows\system32\dllcache\uxtheme.dll
+ 2010-01-04 15:56 . 2001-08-17 19:28      687999              c:\windows\system32\dllcache\usrwdxjs.sys
+ 2001-08-17 22:36 . 2004-08-04 12:00      102457              c:\windows\system32\dllcache\usrv42a.dll
+ 2010-01-04 15:55 . 2001-08-17 19:28      113762              c:\windows\system32\dllcache\usrpda.sys
+ 2001-08-17 22:36 . 2004-08-04 12:00      323641              c:\windows\system32\dllcache\usrdtea.dll
+ 2010-01-04 15:55 . 2001-08-17 19:28      224802              c:\windows\system32\dllcache\usr1807a.sys
+ 2010-01-04 15:55 . 2001-08-17 19:28      794399              c:\windows\system32\dllcache\usr1806v.sys
+ 2010-01-04 15:55 . 2001-08-17 19:28      793598              c:\windows\system32\dllcache\usr1806.sys
+ 2010-01-04 15:55 . 2001-08-17 19:28      794654              c:\windows\system32\dllcache\usr1801.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      406016              c:\windows\system32\dllcache\usp10.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      723456              c:\windows\system32\dllcache\userenv.dll
+ 2004-09-02 01:29 . 2007-03-08 15:36      577536              c:\windows\system32\dllcache\user32.dll
+ 2009-12-30 20:36 . 2008-04-14 06:16      121984              c:\windows\system32\dllcache\usbvideo.sys
+ 2004-08-03 23:08 . 2008-04-14 06:15      143872              c:\windows\system32\dllcache\usbport.sys
+ 2004-09-02 01:29 . 2008-08-26 07:24      105984              c:\windows\system32\dllcache\url.dll
- 2007-08-14 00:44 . 2008-08-26 07:24      105984              c:\windows\system32\dllcache\url.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      239616              c:\windows\system32\dllcache\upnpui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      185856              c:\windows\system32\dllcache\upnphost.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      132608              c:\windows\system32\dllcache\upnp.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      150528              c:\windows\system32\dllcache\uploadm.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      116224              c:\windows\system32\dllcache\updprov.dll
+ 2004-09-02 01:30 . 2008-04-14 06:09      384768              c:\windows\system32\dllcache\update.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      316416              c:\windows\system32\dllcache\untfs.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      208896              c:\windows\system32\dllcache\unregmp2.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      208896              c:\windows\system32\dllcache\unregmp2.exe
+ 2004-09-02 01:29 . 2005-08-23 03:35      123392              c:\windows\system32\dllcache\umpnpmgr.dll
+ 2010-01-04 15:54 . 2001-08-18 04:36      216064              c:\windows\system32\dllcache\um34scan.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      275456              c:\windows\system32\dllcache\ulib.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      177856              c:\windows\system32\dllcache\typelib.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      101376              c:\windows\system32\dllcache\txflog.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      121856              c:\windows\system32\dllcache\tsoc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      279040              c:\windows\system32\dllcache\tshoot.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      153088              c:\windows\system32\dllcache\triedit.dll
+ 2010-01-04 15:54 . 2001-08-17 18:51      166784              c:\windows\system32\dllcache\tridxpm.sys
+ 2010-01-04 15:54 . 2001-08-18 04:36      525568              c:\windows\system32\dllcache\tridxp.dll
+ 2010-01-04 15:54 . 2001-08-17 18:51      159232              c:\windows\system32\dllcache\tridkbm.sys
+ 2010-01-04 15:54 . 2001-08-17 20:56      440576              c:\windows\system32\dllcache\tridkb.dll
+ 2010-01-04 15:54 . 2001-08-17 18:51      222336              c:\windows\system32\dllcache\trid3dm.sys
+ 2010-01-04 15:54 . 2001-08-17 20:56      315520              c:\windows\system32\dllcache\trid3d.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      347136              c:\windows\system32\dllcache\tourstrt.exe
+ 2010-01-04 15:54 . 2001-08-17 20:02      230912              c:\windows\system32\dllcache\tosdvd03.sys
+ 2010-01-04 15:54 . 2001-08-17 20:01      241664              c:\windows\system32\dllcache\tosdvd02.sys
+ 2010-01-04 15:53 . 2001-08-17 18:14      123995              c:\windows\system32\dllcache\tjisdn.sys
+ 2010-01-04 15:53 . 2004-08-04 12:00      455168              c:\windows\system32\dllcache\tintsetp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      385536              c:\windows\system32\dllcache\themeui.dll
+ 2010-01-04 15:53 . 2004-08-04 12:00      185344              c:\windows\system32\dllcache\thawbrkr.dll
+ 2010-01-04 15:53 . 2001-08-17 18:51      138528              c:\windows\system32\dllcache\tgiulnt5.sys
+ 2010-01-04 15:53 . 2008-04-14 06:10      149376              c:\windows\system32\dllcache\tffsport.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      295424              c:\windows\system32\dllcache\termsrv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      358400              c:\windows\system32\dllcache\termmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 06:30      225664              c:\windows\system32\dllcache\tcpip6.sys
+ 2004-09-02 01:29 . 2008-04-14 06:50      361344              c:\windows\system32\dllcache\tcpip.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      135680              c:\windows\system32\dllcache\taskmgr.exe
+ 2004-09-02 01:29 . 2005-07-08 16:27      249344              c:\windows\system32\dllcache\tapisrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      181760              c:\windows\system32\dllcache\tapi32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      858624              c:\windows\system32\dllcache\tapi3.dll
+ 2010-01-04 15:53 . 2001-08-17 20:56      172768              c:\windows\system32\dllcache\t2r4disp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      117760              c:\windows\system32\dllcache\t2embed.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      990208              c:\windows\system32\dllcache\syssetup.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      106496              c:\windows\system32\dllcache\sysocmgr.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      173568              c:\windows\system32\dllcache\sysmoda.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      193024              c:\windows\system32\dllcache\sysmod.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      191488              c:\windows\system32\dllcache\syncui.dll
+ 2004-09-02 01:29 . 2006-10-19 13:56      713216              c:\windows\system32\dllcache\sxs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      138752              c:\windows\system32\dllcache\swprv.dll
- 2006-08-21 15:52 . 2008-04-14 11:42      246814              c:\windows\system32\dllcache\strmdll.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      246814              c:\windows\system32\dllcache\strmdll.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      121856              c:\windows\system32\dllcache\stobject.dll
+ 2010-01-04 15:52 . 2001-08-18 04:36      155648              c:\windows\system32\dllcache\stlnprop.dll
+ 2010-01-04 15:52 . 2001-08-17 18:18      285760              c:\windows\system32\dllcache\stlnata.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      136704              c:\windows\system32\dllcache\sti_ci.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      679936              c:\windows\system32\dllcache\sstext3d.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      610304              c:\windows\system32\dllcache\sspipes.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      393216              c:\windows\system32\dllcache\ssflwbox.scr
+ 2004-09-02 01:29 . 2008-04-14 11:42      704512              c:\windows\system32\dllcache\ss3dfo.scr
+ 2004-09-02 01:29 . 2008-04-14 06:45      334848              c:\windows\system32\dllcache\srv.sys
+ 2010-01-04 15:52 . 2004-08-04 12:00      101376              c:\windows\system32\dllcache\srusbusd.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      170496              c:\windows\system32\dllcache\srsvc.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      239104              c:\windows\system32\dllcache\srrstr.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      726078              c:\windows\system32\dllcache\srchui.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      217088              c:\windows\system32\dllcache\sqlxmlx.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      180800              c:\windows\system32\dllcache\sqlunirl.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      110592              c:\windows\system32\dllcache\sqlse20.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      462848              c:\windows\system32\dllcache\sqlqp20.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      151552              c:\windows\system32\dllcache\sqldb20.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      774144              c:\windows\system32\dllcache\spttseng.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      250368              c:\windows\system32\dllcache\sptip.dll
+ 2009-12-30 20:41 . 2008-04-14 06:10      576512              c:\windows\system32\dllcache\sprc0424.dll
+ 2009-12-30 20:41 . 2008-04-14 06:10      577536              c:\windows\system32\dllcache\sprc041b.dll
+ 2004-09-02 01:29 . 2008-04-14 06:08      732160              c:\windows\system32\dllcache\sprb0424.dll
+ 2004-09-02 01:29 . 2008-04-14 06:08      757248              c:\windows\system32\dllcache\sprb041b.dll
+ 2004-09-02 01:29 . 2008-04-14 06:05      192512              c:\windows\system32\dllcache\spra0424.dll
+ 2004-09-02 01:29 . 2008-04-14 06:05      192512              c:\windows\system32\dllcache\spra041b.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      538624              c:\windows\system32\dllcache\spider.exe
+ 2010-01-04 15:52 . 2001-08-18 04:36      106584              c:\windows\system32\dllcache\spdports.dll
+ 2010-01-04 15:51 . 2001-08-18 04:36      114688              c:\windows\system32\dllcache\sonypi.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      143422              c:\windows\system32\dllcache\softkey.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      130048              c:\windows\system32\dllcache\softkbd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      182272              c:\windows\system32\dllcache\snmpsnap.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      188416              c:\windows\system32\dllcache\snmpsmir.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      358400              c:\windows\system32\dllcache\snmpincl.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      259072              c:\windows\system32\dllcache\snmpcl.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      138752              c:\windows\system32\dllcache\sndvol32.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      131584              c:\windows\system32\dllcache\sndrec32.exe
+ 2010-01-04 15:51 . 2004-08-04 12:00      456704              c:\windows\system32\dllcache\smtpsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      362496              c:\windows\system32\dllcache\smlogcfg.dll
+ 2010-01-04 15:51 . 2001-08-17 20:56      147200              c:\windows\system32\dllcache\smidispb.dll
+ 2010-01-04 15:51 . 2004-08-04 12:00      236544              c:\windows\system32\dllcache\smi2smir.exe
+ 2009-12-30 20:36 . 2008-04-14 05:53      404990              c:\windows\system32\dllcache\slntamr.sys
+ 2009-12-30 20:36 . 2008-04-14 05:53      129535              c:\windows\system32\dllcache\slnt7554.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      188508              c:\windows\system32\dllcache\slgen.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      286792              c:\windows\system32\dllcache\slextspk.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      306176              c:\windows\system32\dllcache\slbcsp.dll
+ 2010-01-04 15:50 . 2001-08-17 20:56      157696              c:\windows\system32\dllcache\sisv256.dll
+ 2010-01-04 15:50 . 2001-08-18 04:36      238592              c:\windows\system32\dllcache\sisgrv.dll
+ 2010-01-04 15:50 . 2001-08-17 18:50      104064              c:\windows\system32\dllcache\sisgrp.sys
+ 2010-01-04 15:50 . 2001-08-17 20:56      150144              c:\windows\system32\dllcache\sis6306v.dll
+ 2010-01-04 15:50 . 2001-08-17 20:56      252032              c:\windows\system32\dllcache\sis300iv.dll
+ 2010-01-04 15:50 . 2001-08-17 18:50      101760              c:\windows\system32\dllcache\sis300ip.sys
+ 2004-09-02 01:29 . 2006-12-19 21:52      134656              c:\windows\system32\dllcache\shsvcs.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      152064              c:\windows\system32\dllcache\shmedia.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      152064              c:\windows\system32\dllcache\shmedia.dll
+ 2004-09-02 01:29 . 2007-10-11 06:13      474112              c:\windows\system32\dllcache\shlwapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      438272              c:\windows\system32\dllcache\shimgvw.dll
+ 2004-09-02 01:29 . 2008-04-14 04:33      549376              c:\windows\system32\dllcache\shdoclc.dll
+ 2010-01-04 15:50 . 2001-07-21 20:29      161568              c:\windows\system32\dllcache\sgsmusb.sys
+ 2010-01-04 15:50 . 2001-08-18 04:36      386560              c:\windows\system32\dllcache\sgiul50.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      140288              c:\windows\system32\dllcache\sfc_os.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      101376              c:\windows\system32\dllcache\setupqry.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      414208              c:\windows\system32\dllcache\setupdll.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      985088              c:\windows\system32\dllcache\setupapi.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      774144              c:\windows\system32\dllcache\setup_wm.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      774144              c:\windows\system32\dllcache\setup_wm.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      141312              c:\windows\system32\dllcache\sessmgr.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      108544              c:\windows\system32\dllcache\services.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      130048              c:\windows\system32\dllcache\sdpblb.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      172032              c:\windows\system32\dllcache\scrrun.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      180224              c:\windows\system32\dllcache\scrobj.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      199680              c:\windows\system32\dllcache\scripta.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      215552              c:\windows\system32\dllcache\script.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      190976              c:\windows\system32\dllcache\schedsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      144384              c:\windows\system32\dllcache\schannel.dll
+ 2004-09-02 01:29 . 2004-08-12 20:26      313856              c:\windows\system32\dllcache\scesrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      180224              c:\windows\system32\dllcache\scecli.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      171008              c:\windows\system32\dllcache\sccsccp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      169984              c:\windows\system32\dllcache\sccbase.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      118784              c:\windows\system32\dllcache\scardssp.dll
+ 2010-01-04 15:49 . 2001-08-18 04:36      495616              c:\windows\system32\dllcache\sblfx.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      159232              c:\windows\system32\dllcache\sbeio.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      270848              c:\windows\system32\dllcache\sbe.dll
+ 2004-09-01 18:36 . 2008-04-14 11:42      741376              c:\windows\system32\dllcache\sapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      415744              c:\windows\system32\dllcache\samsrv.dll
+ 2010-01-04 15:49 . 2001-08-17 20:56      245632              c:\windows\system32\dllcache\s3savmx.dll
+ 2010-01-04 15:49 . 2001-08-17 20:56      198400              c:\windows\system32\dllcache\s3sav4.dll
+ 2010-01-04 15:49 . 2001-08-17 20:56      179264              c:\windows\system32\dllcache\s3sav3d.dll
+ 2010-01-04 15:49 . 2001-08-17 20:56      210496              c:\windows\system32\dllcache\s3mvirge.dll
+ 2010-01-04 15:48 . 2001-08-17 20:56      182272              c:\windows\system32\dllcache\s3mt3d.dll
+ 2010-01-04 15:48 . 2001-08-17 18:50      166720              c:\windows\system32\dllcache\s3m.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      166912              c:\windows\system32\dllcache\s3gnbm.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      397056              c:\windows\system32\dllcache\s3gnb.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      753236              c:\windows\system32\dllcache\rvseres.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      132608              c:\windows\system32\dllcache\rsvp.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      380416              c:\windows\system32\dllcache\rstrui.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      152576              c:\windows\system32\dllcache\rsaenh.dll
+ 2004-09-02 01:29 . 2005-07-26 04:39      397824              c:\windows\system32\dllcache\rpcss.dll
+ 2004-09-02 01:29 . 2007-07-09 13:09      584192              c:\windows\system32\dllcache\rpcrt4.dll
+ 2004-09-02 01:29 . 2008-04-14 06:25      202624              c:\windows\system32\dllcache\rmcast.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      433664              c:\windows\system32\dllcache\riched20.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      290304              c:\windows\system32\dllcache\rhttpaa.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      177152              c:\windows\system32\dllcache\repdrvfs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      107520              c:\windows\system32\dllcache\rend.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      397824              c:\windows\system32\dllcache\regwizc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      146432              c:\windows\system32\dllcache\regedit.exe
+ 2004-09-02 01:40 . 2008-04-14 11:43      139656              c:\windows\system32\dllcache\rdpwd.sys
+ 2004-09-02 01:40 . 2008-04-14 06:02      196224              c:\windows\system32\dllcache\rdpdr.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      147968              c:\windows\system32\dllcache\rdchost.dll
+ 2004-09-02 01:29 . 2008-04-14 06:58      175744              c:\windows\system32\dllcache\rdbss.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      102400              c:\windows\system32\dllcache\rcbdyctl.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      112128              c:\windows\system32\dllcache\rastls.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      206336              c:\windows\system32\dllcache\rasppp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      143360              c:\windows\system32\dllcache\rasmontr.dll
+ 2004-09-02 01:29 . 2006-06-22 10:47      181248              c:\windows\system32\dllcache\rasmans.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      658432              c:\windows\system32\dllcache\rasdlg.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      237056              c:\windows\system32\dllcache\rasapi32.dll
+ 2010-01-04 15:48 . 2001-08-17 19:28      714762              c:\windows\system32\dllcache\r2mdmkxx.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      409088              c:\windows\system32\dllcache\qmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 04:51      733696              c:\windows\system32\dllcache\qedwipes.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      562176              c:\windows\system32\dllcache\qedit.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      386048              c:\windows\system32\dllcache\qdvd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      279040              c:\windows\system32\dllcache\qdv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      192512              c:\windows\system32\dllcache\qcap.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      237568              c:\windows\system32\dllcache\qasf.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      291328              c:\windows\system32\dllcache\qagentrt.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      150528              c:\windows\system32\dllcache\qagent.dll
+ 2010-01-04 15:47 . 2001-08-17 19:28      130942              c:\windows\system32\dllcache\ptserlv.sys
+ 2010-01-04 15:47 . 2001-08-17 19:28      112574              c:\windows\system32\dllcache\ptserlp.sys
+ 2010-01-04 15:47 . 2001-08-17 19:28      128286              c:\windows\system32\dllcache\ptserli.sys
+ 2010-01-04 15:47 . 2008-04-14 11:42      159232              c:\windows\system32\dllcache\ptpusd.dll
+ 2010-01-04 15:47 . 2008-04-14 11:42      363520              c:\windows\system32\dllcache\psisdecd.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      237056              c:\windows\system32\dllcache\provthrd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      109568              c:\windows\system32\dllcache\progman.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      560640              c:\windows\system32\dllcache\printui.dll
+ 2004-03-16 00:41 . 2008-04-14 06:49      146048              c:\windows\system32\dllcache\portcls.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      105472              c:\windows\system32\dllcache\polstore.dll
+ 2010-01-04 15:46 . 2004-08-04 12:00      175104              c:\windows\system32\dllcache\pintlcsa.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      281088              c:\windows\system32\dllcache\pinball.exe
+ 2010-01-04 15:46 . 2001-08-18 04:36      121344              c:\windows\system32\dllcache\phvfwext.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      176128              c:\windows\system32\dllcache\photowiz.dll
+ 2010-01-04 15:46 . 2001-08-17 20:04      173696              c:\windows\system32\dllcache\philcam2.sys
+ 2010-01-04 15:46 . 2008-04-14 11:40      259328              c:\windows\system32\dllcache\perm3dd.dll
+ 2010-01-04 15:46 . 2008-04-14 11:40      211584              c:\windows\system32\dllcache\perm2dll.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      284160              c:\windows\system32\dllcache\pdh.dll
+ 2010-01-04 15:46 . 2008-04-14 03:42      169984              c:\windows\system32\dllcache\pcx500.sys
+ 2004-08-03 23:07 . 2008-04-14 06:06      120192              c:\windows\system32\dllcache\pcmcia.sys
+ 2004-09-02 01:41 . 2008-04-14 11:42      102912              c:\windows\system32\dllcache\pchshell.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      157696              c:\windows\system32\dllcache\paqsp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      554496              c:\windows\system32\dllcache\p2psvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      115712              c:\windows\system32\dllcache\p2pnetsh.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      313856              c:\windows\system32\dllcache\p2pgraph.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      105472              c:\windows\system32\dllcache\p2pgasvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      153600              c:\windows\system32\dllcache\p2p.dll
+ 2010-01-04 15:45 . 2001-08-17 20:05      351616              c:\windows\system32\dllcache\ovcodek2.sys
+ 2010-01-04 15:45 . 2001-08-18 04:36      116736              c:\windows\system32\dllcache\ovcodec2.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      215552              c:\windows\system32\dllcache\osk.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      713728              c:\windows\system32\dllcache\opengl32.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      144384              c:\windows\system32\dllcache\onex.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      107008              c:\windows\system32\dllcache\oleprn.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      122880              c:\windows\system32\dllcache\oledlg.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      487424              c:\windows\system32\dllcache\oledb32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      551936              c:\windows\system32\dllcache\oleaut32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      163328              c:\windows\system32\dllcache\oleacc.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      153008              c:\windows\system32\dllcache\ole2nls.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      169520              c:\windows\system32\dllcache\ole2disp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      192000              c:\windows\system32\dllcache\offfilt.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      104448              c:\windows\system32\dllcache\oeimport.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      147456              c:\windows\system32\dllcache\odbctrac.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      278559              c:\windows\system32\dllcache\odbcjt32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      106496              c:\windows\system32\dllcache\odbccp32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      135168              c:\windows\system32\dllcache\odbcconf.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      249856              c:\windows\system32\dllcache\odbc32.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      102912              c:\windows\system32\dllcache\occache.dll
- 2007-08-14 00:44 . 2008-08-26 07:24      102912              c:\windows\system32\dllcache\occache.dll
+ 2004-09-02 01:29 . 2008-04-14 06:10      408576              c:\windows\system32\dllcache\obrb0424.dll
+ 2004-09-02 01:29 . 2008-04-14 06:10      405504              c:\windows\system32\dllcache\obrb041b.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      286208              c:\windows\system32\dllcache\objsel.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      266752              c:\windows\system32\dllcache\oakley.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      142336              c:\windows\system32\dllcache\nwprovau.dll
+ 2010-01-04 15:45 . 2001-08-17 18:50      198144              c:\windows\system32\dllcache\nv3.sys
+ 2010-01-04 15:45 . 2001-08-18 04:36      123776              c:\windows\system32\dllcache\nv3.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      420864              c:\windows\system32\dllcache\ntvdm.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      143872              c:\windows\system32\dllcache\ntshrui.dll
+ 2009-12-30 20:36 . 2008-04-14 05:53      180360              c:\windows\system32\dllcache\ntmtlfax.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      435200              c:\windows\system32\dllcache\ntmssvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      488448              c:\windows\system32\dllcache\ntmsmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      179200              c:\windows\system32\dllcache\ntmsdba.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      118784              c:\windows\system32\dllcache\ntmarta.dll
+ 2004-09-02 01:29 . 2008-04-14 06:45      574976              c:\windows\system32\dllcache\ntfs.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      212992              c:\windows\system32\dllcache\ntevt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      706048              c:\windows\system32\dllcache\ntdll.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      364544              c:\windows\system32\dllcache\npdsplay.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      364544              c:\windows\system32\dllcache\npdsplay.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      226816              c:\windows\system32\dllcache\npdrmv2.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      226816              c:\windows\system32\dllcache\npdrmv2.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      188416              c:\windows\system32\dllcache\nmwb.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      172032              c:\windows\system32\dllcache\nmoldwb.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      151552              c:\windows\system32\dllcache\nmft.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      229376              c:\windows\system32\dllcache\nmas.dll
+ 2010-01-04 15:44 . 2001-08-17 18:20      126080              c:\windows\system32\dllcache\nm5a2wdm.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      248832              c:\windows\system32\dllcache\newdev.dll
+ 2010-01-04 15:44 . 2008-04-14 04:05      132695              c:\windows\system32\dllcache\netwlan5.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      308224              c:\windows\system32\dllcache\netui2.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      245760              c:\windows\system32\dllcache\netui1.dll
+ 2004-09-02 01:29 . 2008-04-14 11:46      329728              c:\windows\system32\dllcache\netsetup.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      875008              c:\windows\system32\dllcache\netplwiz.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      171008              c:\windows\system32\dllcache\netmsg.dll
+ 2004-09-02 01:29 . 2005-08-22 18:29      197632              c:\windows\system32\dllcache\netman.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      407040              c:\windows\system32\dllcache\netlogon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      139264              c:\windows\system32\dllcache\netid.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      253952              c:\windows\system32\dllcache\neth.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      214016              c:\windows\system32\dllcache\netevent.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      111104              c:\windows\system32\dllcache\netdde.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      622080              c:\windows\system32\dllcache\netcfgx.dll
+ 2004-09-02 01:29 . 2008-04-14 06:51      162816              c:\windows\system32\dllcache\netbt.sys
+ 2004-09-02 01:29 . 2008-10-15 16:57      332800              c:\windows\system32\dllcache\netapi32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      108464              c:\windows\system32\dllcache\netapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      124928              c:\windows\system32\dllcache\net1.exe
+ 2004-09-02 01:29 . 2008-04-14 06:50      182656              c:\windows\system32\dllcache\ndis.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      176640              c:\windows\system32\dllcache\napstat.exe
+ 2009-12-30 20:41 . 2008-04-14 11:42      193024              c:\windows\system32\dllcache\napmontr.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      221184              c:\windows\system32\dllcache\nac.dll
+ 2010-01-04 15:44 . 2001-08-17 18:11      128000              c:\windows\system32\dllcache\n100325.sys
+ 2004-09-02 01:29 . 2008-04-14 06:47      105344              c:\windows\system32\dllcache\mup.sys
+ 2010-01-04 15:43 . 2004-08-04 12:00      229439              c:\windows\system32\dllcache\multibox.dll
+ 2010-01-04 15:43 . 2001-08-17 18:50      103296              c:\windows\system32\dllcache\mtxvideo.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      452736              c:\windows\system32\dllcache\mtxparhm.sys
+ 2010-01-04 15:43 . 2004-08-04 12:00      111104              c:\windows\system32\dllcache\mtstocom.exe
+ 2009-12-30 20:36 . 2008-04-14 05:53      126686              c:\windows\system32\dllcache\mtlmnt5.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      701440              c:\windows\system32\dllcache\msxml2.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      506368              c:\windows\system32\dllcache\msxml.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      355104              c:\windows\system32\dllcache\msxbde40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      355104              c:\windows\system32\dllcache\msxbde40.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      621344              c:\windows\system32\dllcache\mswstr10.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      621344              c:\windows\system32\dllcache\mswstr10.dll
+ 2004-09-02 01:29 . 2008-06-20 17:41      245248              c:\windows\system32\dllcache\mswsock.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      245760              c:\windows\system32\dllcache\mswmdm.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      245760              c:\windows\system32\dllcache\mswmdm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      203776              c:\windows\system32\dllcache\mswebdvd.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      838432              c:\windows\system32\dllcache\mswdat10.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      838432              c:\windows\system32\dllcache\mswdat10.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      126912              c:\windows\system32\dllcache\msvideo.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      121344              c:\windows\system32\dllcache\msvfw32.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      253952              c:\windows\system32\dllcache\msvcrt20.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      343040              c:\windows\system32\dllcache\msvcrt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      413696              c:\windows\system32\dllcache\msvcp60.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      565760              c:\windows\system32\dllcache\msvcp50.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      132608              c:\windows\system32\dllcache\msv1_0.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      195072              c:\windows\system32\dllcache\msutb.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      115712              c:\windows\system32\dllcache\mstlsapi.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      671232              c:\windows\system32\dllcache\mstime.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      671232              c:\windows\system32\dllcache\mstime.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      264992              c:\windows\system32\dllcache\mstext40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      264992              c:\windows\system32\dllcache\mstext40.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      274944              c:\windows\system32\dllcache\mstask.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      274432              c:\windows\system32\dllcache\mst120.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      235520              c:\windows\system32\dllcache\mssoap1.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      155136              c:\windows\system32\dllcache\mssha.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      356352              c:\windows\system32\dllcache\msscp.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      356352              c:\windows\system32\dllcache\msscp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      134656              c:\windows\system32\dllcache\mssap.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      559904              c:\windows\system32\dllcache\msrepl40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      559904              c:\windows\system32\dllcache\msrepl40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      322336              c:\windows\system32\dllcache\msrd3x40.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      322336              c:\windows\system32\dllcache\msrd3x40.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      432928              c:\windows\system32\dllcache\msrd2x40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      432928              c:\windows\system32\dllcache\msrd2x40.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      193024              c:\windows\system32\dllcache\msrating.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      193024              c:\windows\system32\dllcache\msrating.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      201728              c:\windows\system32\dllcache\mspmsp.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      201728              c:\windows\system32\dllcache\mspmsp.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      355104              c:\windows\system32\dllcache\mspbde40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      355104              c:\windows\system32\dllcache\mspbde40.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      343040              c:\windows\system32\dllcache\mspaint.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      143360              c:\windows\system32\dllcache\msorcl32.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      105984              c:\windows\system32\dllcache\msoert2.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      252928              c:\windows\system32\dllcache\msoeacct.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      565248              c:\windows\system32\dllcache\msobmain.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      122368              c:\windows\system32\dllcache\msobcomm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      290816              c:\windows\system32\dllcache\msnsspc.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      259072              c:\windows\system32\dllcache\msnetobj.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      259072              c:\windows\system32\dllcache\msnetobj.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      219936              c:\windows\system32\dllcache\msltus40.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      219936              c:\windows\system32\dllcache\msltus40.dll
- 2007-08-14 00:54 . 2007-08-14 00:54      156160              c:\windows\system32\dllcache\msls31.dll
+ 2004-09-02 01:29 . 2007-08-14 00:54      156160              c:\windows\system32\dllcache\msls31.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      248608              c:\windows\system32\dllcache\msjtes40.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      248608              c:\windows\system32\dllcache\msjtes40.dll
+ 2004-09-02 01:41 . 2006-12-26 13:07      102400              c:\windows\system32\dllcache\msjro.dll
+ 2004-09-02 01:29 . 2008-03-27 08:12      151583              c:\windows\system32\dllcache\msjint40.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      355112              c:\windows\system32\dllcache\msjetol1.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      355112              c:\windows\system32\dllcache\msjetol1.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      273920              c:\windows\system32\dllcache\msiprov.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      376832              c:\windows\system32\dllcache\msinfo.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      159232              c:\windows\system32\dllcache\msimtf.dll
+ 2004-09-02 01:29 . 2005-03-21 20:00      884736              c:\windows\system32\dllcache\msimsg.dll
+ 2004-09-02 01:29 . 2005-03-21 20:00      271360              c:\windows\system32\dllcache\msihnd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      248832              c:\windows\system32\dllcache\msieftp.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      477696              c:\windows\system32\dllcache\mshtmled.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      477696              c:\windows\system32\dllcache\mshtmled.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      126976              c:\windows\system32\dllcache\mshearts.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      994304              c:\windows\system32\dllcache\msgina.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      539136              c:\windows\system32\dllcache\msftedit.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      326432              c:\windows\system32\dllcache\msexcl40.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      326432              c:\windows\system32\dllcache\msexcl40.dll
+ 2004-09-02 01:30 . 2008-03-25 04:50      518944              c:\windows\system32\dllcache\msexch40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      518944              c:\windows\system32\dllcache\msexch40.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      161792              c:\windows\system32\dllcache\msdtcuiu.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      956928              c:\windows\system32\dllcache\msdtctm.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      427008              c:\windows\system32\dllcache\msdtcprx.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      315392              c:\windows\system32\dllcache\msdasql.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      151552              c:\windows\system32\dllcache\msdart.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      118784              c:\windows\system32\dllcache\msdarem.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      204800              c:\windows\system32\dllcache\msdaps.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      200704              c:\windows\system32\dllcache\msdaprst.dll
+ 2004-09-02 01:41 . 2004-08-04 12:00      233472              c:\windows\system32\dllcache\msdaora.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      118784              c:\windows\system32\dllcache\msdadiag.dll
+ 2004-09-02 01:29 . 2008-02-26 11:59      294912              c:\windows\system32\dllcache\msctf.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      169984              c:\windows\system32\dllcache\msconfig.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      220160              c:\windows\system32\dllcache\mscandui.dll
+ 2004-09-02 01:41 . 2006-12-26 13:07      200704              c:\windows\system32\dllcache\msadox.dll
+ 2004-09-02 01:41 . 2006-12-26 13:07      180224              c:\windows\system32\dllcache\msadomd.dll
+ 2004-09-02 01:41 . 2006-12-26 13:07      536576              c:\windows\system32\dllcache\msado15.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      155648              c:\windows\system32\dllcache\msadds.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      143360              c:\windows\system32\dllcache\msadco.dll
- 2008-08-13 17:57 . 2008-05-01 14:30      331776              c:\windows\system32\dllcache\msadce.dll
+ 2004-09-02 01:41 . 2008-05-01 14:30      331776              c:\windows\system32\dllcache\msadce.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      102912              c:\windows\system32\dllcache\msaatext.dll
+ 2004-09-02 01:29 . 2008-04-14 06:47      456576              c:\windows\system32\dllcache\mrxsmb.sys
+ 2004-09-02 01:29 . 2008-04-14 06:02      180608              c:\windows\system32\dllcache\mrxdav.sys
- 2009-12-30 20:42 . 2008-04-14 11:41      368640              c:\windows\system32\dllcache\mpvis.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      368640              c:\windows\system32\dllcache\mpvis.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      123392              c:\windows\system32\dllcache\mplay32.exe
- 2009-12-30 20:38 . 2008-04-14 11:42      123392              c:\windows\system32\dllcache\mplay32.exe
+ 2004-09-02 01:30 . 2008-04-14 11:41      240640              c:\windows\system32\dllcache\mpg4dmod.dll
- 2009-12-30 20:38 . 2008-04-14 11:41      240640              c:\windows\system32\dllcache\mpg4dmod.dll
- 2009-12-30 20:42 . 2008-04-14 11:41      384512              c:\windows\system32\dllcache\mp4sdmod.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      384512              c:\windows\system32\dllcache\mp4sdmod.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      310272              c:\windows\system32\dllcache\mp43dmod.dll
- 2009-12-30 20:42 . 2008-04-14 11:41      310272              c:\windows\system32\dllcache\mp43dmod.dll
+ 2004-09-02 01:29 . 2008-04-14 04:15      216064              c:\windows\system32\dllcache\moricons.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      123904              c:\windows\system32\dllcache\mofd.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      153600              c:\windows\system32\dllcache\modemui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      143360              c:\windows\system32\dllcache\mobsync.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      207360              c:\windows\system32\dllcache\mobsync.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      119808              c:\windows\system32\dllcache\mmutilse.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      106496              c:\windows\system32\dllcache\Mmcfxc.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      397312              c:\windows\system32\dllcache\mmcex.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      163328              c:\windows\system32\dllcache\mmcbase.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      184320              c:\windows\system32\dllcache\mmc30.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      586240              c:\windows\system32\dllcache\mlang.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      673088              c:\windows\system32\dllcache\mlang.dat
+ 2009-12-30 20:41 . 2008-04-14 11:42      241152              c:\windows\system32\dllcache\migwiza.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      245248              c:\windows\system32\dllcache\migwiz.exe
- 2009-12-30 20:42 . 2008-04-14 11:42      786432              c:\windows\system32\dllcache\migrate.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      786432              c:\windows\system32\dllcache\migrate.exe
+ 2004-09-02 01:30 . 2008-04-14 11:42      103936              c:\windows\system32\dllcache\migload.exe
+ 2009-12-30 20:41 . 2008-04-14 11:41      261120              c:\windows\system32\dllcache\migisma.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      274432              c:\windows\system32\dllcache\migism.dll
+ 2010-01-04 15:42 . 2001-08-17 18:50      320384              c:\windows\system32\dllcache\mgaum.sys
+ 2010-01-04 15:42 . 2001-08-17 20:56      235648              c:\windows\system32\dllcache\mgaud.dll
+ 2004-09-02 01:29 . 2006-10-14 08:13      981760              c:\windows\system32\dllcache\mfc42u.dll
- 2006-10-14 08:13 . 2006-10-14 08:13      981760              c:\windows\system32\dllcache\mfc42u.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      927504              c:\windows\system32\dllcache\mfc40u.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      924432              c:\windows\system32\dllcache\mfc40.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      362496              c:\windows\system32\dllcache\metal_ss.dll
+ 2001-08-17 22:36 . 2004-08-04 12:00      147968              c:\windows\system32\dllcache\mdwmdmsp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      118272              c:\windows\system32\dllcache\mdminst.dll
+ 2010-01-04 15:42 . 2001-08-17 18:12      164586              c:\windows\system32\dllcache\mdgndis5.sys
+ 2010-01-04 15:42 . 2001-08-17 19:28      797500              c:\windows\system32\dllcache\ltsmt.sys
+ 2010-01-04 15:42 . 2001-08-17 19:28      802683              c:\windows\system32\dllcache\ltsm.sys
+ 2010-01-04 15:42 . 2008-04-14 05:53      420992              c:\windows\system32\dllcache\ltmdmntt.sys
+ 2010-01-04 15:42 . 2001-08-17 19:28      576746              c:\windows\system32\dllcache\ltmdmntl.sys
+ 2010-01-04 15:42 . 2008-04-14 05:53      606684              c:\windows\system32\dllcache\ltmdmnt.sys
+ 2010-01-04 15:42 . 2001-08-17 19:28      727786              c:\windows\system32\dllcache\ltck000c.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      728064              c:\windows\system32\dllcache\lsasrv.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      514560              c:\windows\system32\dllcache\logonui.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      220672              c:\windows\system32\dllcache\logon.scr
+ 2004-09-02 01:30 . 2008-04-14 11:42      103936              c:\windows\system32\dllcache\logagent.exe
- 2009-12-30 20:38 . 2008-04-14 11:42      103936              c:\windows\system32\dllcache\logagent.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      343040              c:\windows\system32\dllcache\localspl.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      221696              c:\windows\system32\dllcache\localsec.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      399872              c:\windows\system32\dllcache\lmrt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      423936              c:\windows\system32\dllcache\licdll.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      677888              c:\windows\system32\dllcache\lhmstsc.exe
+ 2004-08-03 23:15 . 2008-04-14 06:46      141056              c:\windows\system32\dllcache\ks.sys
+ 2004-09-02 02:04 . 2008-04-14 06:15      172416              c:\windows\system32\dllcache\kmixer.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      150528              c:\windows\system32\dllcache\keymgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      989696              c:\windows\system32\dllcache\kernel32.dll
+ 2004-09-02 01:29 . 2005-06-15 17:49      295936              c:\windows\system32\dllcache\kerberos.dll
+ 2010-01-04 15:41 . 2008-04-14 11:41      253952              c:\windows\system32\dllcache\kdsusd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      512000              c:\windows\system32\dllcache\jscript.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      362496              c:\windows\system32\dllcache\jet500.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      138240              c:\windows\system32\dllcache\itss.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      155136              c:\windows\system32\dllcache\itircl.dll
+ 2010-01-04 15:40 . 2008-04-14 11:42      151552              c:\windows\system32\dllcache\irftp.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      384000              c:\windows\system32\dllcache\ipsmsnap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      182784              c:\windows\system32\dllcache\ipsecsvc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      349696              c:\windows\system32\dllcache\ipsecsnp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      177152              c:\windows\system32\dllcache\iprtrmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      330752              c:\windows\system32\dllcache\ippromon.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      331264              c:\windows\system32\dllcache\ipnathlp.dll
+ 2004-09-02 01:29 . 2008-04-14 06:27      152832              c:\windows\system32\dllcache\ipnat.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      161280              c:\windows\system32\dllcache\ipmontr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      123392              c:\windows\system32\dllcache\input.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      147456              c:\windows\system32\dllcache\initpki.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      450560              c:\windows\system32\dllcache\infosoft.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      110592              c:\windows\system32\dllcache\inetcplc.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      691712              c:\windows\system32\dllcache\inetcomm.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      274432              c:\windows\system32\dllcache\inetcfg.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      315452              c:\windows\system32\dllcache\imskf.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      471102              c:\windows\system32\dllcache\imskdic.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      115712              c:\windows\system32\dllcache\imsinsnt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      110080              c:\windows\system32\dllcache\imm32.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      102456              c:\windows\system32\dllcache\imlang.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      274489              c:\windows\system32\dllcache\imjputyc.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      262200              c:\windows\system32\dllcache\imjputy.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      233527              c:\windows\system32\dllcache\imjprw.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      208952              c:\windows\system32\dllcache\imjpmig.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      196665              c:\windows\system32\dllcache\imjpinst.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      155705              c:\windows\system32\dllcache\imjpdsvr.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      307257              c:\windows\system32\dllcache\imjpdct.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      716856              c:\windows\system32\dllcache\imjpcus.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      368696              c:\windows\system32\dllcache\imjpcic.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      811064              c:\windows\system32\dllcache\imjp81k.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      311359              c:\windows\system32\dllcache\imepadsv.exe
+ 2010-01-04 15:40 . 2004-08-04 12:00      102463              c:\windows\system32\dllcache\imepadsm.dll
+ 2010-01-04 15:40 . 2004-08-04 12:00      106496              c:\windows\system32\dllcache\imekrcic.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      150528              c:\windows\system32\dllcache\imapi.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      144384              c:\windows\system32\dllcache\imagehlp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      505344              c:\windows\system32\dllcache\iis.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      135680              c:\windows\system32\dllcache\ifmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      114688              c:\windows\system32\dllcache\iexpress.exe
- 2007-08-14 00:43 . 2008-08-23 05:56      635848              c:\windows\system32\dllcache\iexplore.exe
+ 2004-09-02 01:41 . 2008-08-23 05:56      635848              c:\windows\system32\dllcache\iexplore.exe
- 2006-05-10 05:22 . 2007-08-14 00:54      191488              c:\windows\system32\dllcache\iepeers.dll
+ 2004-09-02 01:29 . 2007-08-14 00:54      191488              c:\windows\system32\dllcache\iepeers.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      384512              c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-14 00:39 . 2008-08-26 07:24      384512              c:\windows\system32\dllcache\iedkcs32.dll
- 2007-08-13 23:56 . 2008-08-23 05:54      161792              c:\windows\system32\dllcache\ieakui.dll
+ 2004-09-02 01:29 . 2008-08-23 05:54      161792              c:\windows\system32\dllcache\ieakui.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      230400              c:\windows\system32\dllcache\ieaksie.dll
- 2007-08-14 00:39 . 2008-08-26 07:24      230400              c:\windows\system32\dllcache\ieaksie.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      153088              c:\windows\system32\dllcache\ieakeng.dll
- 2007-08-14 00:39 . 2008-08-26 07:24      153088              c:\windows\system32\dllcache\ieakeng.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      120832              c:\windows\system32\dllcache\idq.dll
+ 2004-09-02 01:41 . 2008-04-14 11:41      172032              c:\windows\system32\dllcache\icwhelp.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      214528              c:\windows\system32\dllcache\icwconn1.exe
+ 2010-01-04 15:40 . 2001-08-18 04:36      372824              c:\windows\system32\dllcache\iconf32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      254976              c:\windows\system32\dllcache\icm32.dll
+ 2010-01-04 15:40 . 2001-08-17 20:06      100992              c:\windows\system32\dllcache\icam5usb.sys
+ 2010-01-04 15:40 . 2001-08-17 20:06      154496              c:\windows\system32\dllcache\icam4usb.sys
+ 2010-01-04 15:39 . 2001-08-17 20:05      141056              c:\windows\system32\dllcache\icam3.sys
+ 2010-01-04 15:39 . 2001-08-17 18:12      109085              c:\windows\system32\dllcache\ibmtrp.sys
+ 2010-01-04 15:39 . 2001-08-17 18:12      100936              c:\windows\system32\dllcache\ibmtok.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      247808              c:\windows\system32\dllcache\iassdo.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      141312              c:\windows\system32\dllcache\iasrecst.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      119808              c:\windows\system32\dllcache\iasrad.dll
+ 2010-01-04 15:39 . 2008-04-14 04:04      161020              c:\windows\system32\dllcache\i81xnt5.sys
+ 2010-01-04 15:39 . 2008-04-14 11:41      702845              c:\windows\system32\dllcache\i81xdnt5.dll
+ 2010-01-04 15:39 . 2001-08-17 20:56      353184              c:\windows\system32\dllcache\i740dnt5.dll
+ 2004-08-03 23:00 . 2008-04-14 06:23      264832              c:\windows\system32\dllcache\http.sys
+ 2009-12-30 20:36 . 2008-04-14 05:53      685056              c:\windows\system32\dllcache\hsfcxts2.sys
+ 2009-12-30 20:36 . 2008-04-14 05:53      220032              c:\windows\system32\dllcache\hsfbs2s2.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      488383              c:\windows\system32\dllcache\hsf_v124.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      542879              c:\windows\system32\dllcache\hsf_msft.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      391199              c:\windows\system32\dllcache\hsf_k56k.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      115807              c:\windows\system32\dllcache\hsf_fsks.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      199711              c:\windows\system32\dllcache\hsf_faxx.sys
+ 2010-01-04 15:39 . 2001-08-17 19:28      289887              c:\windows\system32\dllcache\hsf_fall.sys
+ 2010-01-04 15:38 . 2001-08-17 19:28      150239              c:\windows\system32\dllcache\hsf_amos.sys
+ 2010-01-04 15:38 . 2001-08-18 04:36      324608              c:\windows\system32\dllcache\hpojwia.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      165888              c:\windows\system32\dllcache\hpgt53.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      126976              c:\windows\system32\dllcache\hpgt34tk.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      101376              c:\windows\system32\dllcache\hpgt34.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      123392              c:\windows\system32\dllcache\hpgt21tk.dll
+ 2010-01-04 15:38 . 2001-08-18 04:36      119296              c:\windows\system32\dllcache\hpdigwia.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      144896              c:\windows\system32\dllcache\hotplug.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      362496              c:\windows\system32\dllcache\home_ss.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      330752              c:\windows\system32\dllcache\hnetwiz.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      344064              c:\windows\system32\dllcache\hnetcfg.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      744448              c:\windows\system32\dllcache\helpsvc.exe
+ 2004-09-02 01:41 . 2008-04-14 11:42      769024              c:\windows\system32\dllcache\helpctr.exe
+ 2010-01-04 15:38 . 2001-08-17 19:28      907456              c:\windows\system32\dllcache\hcf_msft.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      614912              c:\windows\system32\dllcache\h323msp.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      115200              c:\windows\system32\dllcache\guitrna.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      133120              c:\windows\system32\dllcache\guitrn.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      101888              c:\windows\system32\dllcache\gpkcsp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      122880              c:\windows\system32\dllcache\glu32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      285184              c:\windows\system32\dllcache\glmf32.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      605696              c:\windows\system32\dllcache\getuname.dll
+ 2004-09-02 01:29 . 2008-02-20 06:51      282624              c:\windows\system32\dllcache\gdi32.dll
+ 2010-01-04 15:37 . 2001-08-17 18:49      322432              c:\windows\system32\dllcache\g400m.sys
+ 2010-01-04 15:37 . 2001-08-17 18:49      320384              c:\windows\system32\dllcache\g200m.sys
+ 2010-01-04 15:37 . 2001-08-17 20:56      470144              c:\windows\system32\dllcache\g200d.dll
+ 2010-01-04 15:37 . 2001-08-17 18:15      454912              c:\windows\system32\dllcache\fxusbase.sys
+ 2010-01-04 15:37 . 2004-08-04 12:00      400384              c:\windows\system32\dllcache\fxsxp32.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      192512              c:\windows\system32\dllcache\fxswzrd.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      154112              c:\windows\system32\dllcache\fxsui.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      397312              c:\windows\system32\dllcache\fxstiff.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      246272              c:\windows\system32\dllcache\fxst30.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      267776              c:\windows\system32\dllcache\fxssvc.exe
+ 2010-01-04 15:37 . 2004-08-04 12:00      562176              c:\windows\system32\dllcache\fxsst.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      132608              c:\windows\system32\dllcache\fxsocm.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      229376              c:\windows\system32\dllcache\fxscover.exe
+ 2010-01-04 15:37 . 2004-08-04 12:00      285184              c:\windows\system32\dllcache\fxscomex.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      132608              c:\windows\system32\dllcache\fxsclntr.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      143360              c:\windows\system32\dllcache\fxsclnt.exe
+ 2010-01-04 15:37 . 2004-08-04 12:00      111104              c:\windows\system32\dllcache\fxscfgwz.dll
+ 2010-01-04 15:37 . 2004-08-04 12:00      452096              c:\windows\system32\dllcache\fxsapi.dll
+ 2010-01-04 15:37 . 2001-08-17 18:15      455296              c:\windows\system32\dllcache\fusbbase.sys
+ 2010-01-04 15:37 . 2001-08-17 18:15      455680              c:\windows\system32\dllcache\fus2base.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      176128              c:\windows\system32\dllcache\ftsrch.dll
+ 2001-08-17 13:52 . 2004-08-04 12:00      125056              c:\windows\system32\dllcache\ftdisk.sys
+ 2004-08-04 00:56 . 2008-04-14 11:42      193024              c:\windows\system32\dllcache\fsquirt.exe
+ 2004-09-02 01:40 . 2008-04-14 11:41      185344              c:\windows\system32\dllcache\framedyn.dll
+ 2010-01-04 15:37 . 2001-08-17 18:15      442240              c:\windows\system32\dllcache\fpnpbase.sys
+ 2010-01-04 15:30 . 2003-03-24 22:52      208896              c:\windows\system32\dllcache\fpmmcsat.dll
+ 2010-01-04 15:30 . 2004-05-13 06:39      598071              c:\windows\system32\dllcache\fpmmc.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      188494              c:\windows\system32\dllcache\fpcount.exe
+ 2010-01-04 15:37 . 2001-08-17 18:14      441728              c:\windows\system32\dllcache\fpcmbase.sys
+ 2010-01-04 15:37 . 2001-08-17 18:14      444416              c:\windows\system32\dllcache\fpcibase.sys
+ 2010-01-04 15:30 . 2003-03-24 22:52      109328              c:\windows\system32\dllcache\fp98swin.exe
+ 2010-01-04 15:30 . 2004-05-13 06:39      876653              c:\windows\system32\dllcache\fp4awel.dll
+ 2004-09-02 01:43 . 2008-04-14 11:41      618605              c:\windows\system32\dllcache\fp4autl.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      102509              c:\windows\system32\dllcache\fp4atxt.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      147513              c:\windows\system32\dllcache\fp4apws.dll
+ 2010-01-04 15:30 . 2004-05-13 06:39      184435              c:\windows\system32\dllcache\fp4amsft.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      382976              c:\windows\system32\dllcache\fontext.dll
+ 2004-09-02 01:41 . 2008-04-14 06:03      129792              c:\windows\system32\dllcache\fltmgr.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      337920              c:\windows\system32\dllcache\filemgmt.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      472064              c:\windows\system32\dllcache\fastprox.dll
+ 2004-09-02 01:29 . 2008-04-14 06:44      143744              c:\windows\system32\dllcache\fastfat.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      125952              c:\windows\system32\dllcache\exts.dll
- 2006-05-10 05:22 . 2008-08-26 07:24      133120              c:\windows\system32\dllcache\extmgr.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      133120              c:\windows\system32\dllcache\extmgr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      380957              c:\windows\system32\dllcache\expsrv.dll
+ 2010-01-04 15:36 . 2004-08-04 12:00      101888              c:\windows\system32\dllcache\evntagnt.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      193024              c:\windows\system32\dllcache\eudcedit.exe
+ 2010-01-04 15:36 . 2008-04-14 04:06      137088              c:\windows\system32\dllcache\essm2e.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      247808              c:\windows\system32\dllcache\esscli.dll
+ 2010-01-04 15:36 . 2001-08-17 19:28      347550              c:\windows\system32\dllcache\es56tpi.sys
+ 2010-01-04 15:36 . 2001-08-17 19:28      594238              c:\windows\system32\dllcache\es56hpi.sys
+ 2010-01-04 15:36 . 2001-08-17 19:28      595647              c:\windows\system32\dllcache\es56cvmp.sys
+ 2010-01-04 15:36 . 2001-08-17 18:19      174464              c:\windows\system32\dllcache\es198x.sys
+ 2004-09-02 01:29 . 2008-07-07 20:32      253952              c:\windows\system32\dllcache\es.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      103424              c:\windows\system32\dllcache\eqnclass.dll
+ 2010-01-04 15:36 . 2001-08-17 18:17      629952              c:\windows\system32\dllcache\eqn.sys
+ 2010-01-04 15:36 . 2001-08-17 19:50      114944              c:\windows\system32\dllcache\epstw2k.sys
+ 2010-01-04 15:36 . 2001-08-17 19:50      144896              c:\windows\system32\dllcache\epcfw2k.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      186880              c:\windows\system32\dllcache\encdec.dll
+ 2010-01-04 15:36 . 2001-08-17 18:19      283904              c:\windows\system32\dllcache\emu10k1m.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      183296              c:\windows\system32\dllcache\els.dll
+ 2010-01-04 15:36 . 2001-08-17 18:11      171520              c:\windows\system32\dllcache\el99xn51.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      455199              c:\windows\system32\dllcache\el985n51.sys
+ 2010-01-04 15:35 . 2001-08-17 18:11      153631              c:\windows\system32\dllcache\el90xnd5.sys
+ 2010-01-04 15:35 . 2001-08-17 19:28      241206              c:\windows\system32\dllcache\el656se5.sys
+ 2010-01-04 15:35 . 2001-08-17 19:28      634134              c:\windows\system32\dllcache\el656ct5.sys
+ 2010-01-04 15:35 . 2004-08-04 12:00      514587              c:\windows\system32\dllcache\edb500.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      180224              c:\windows\system32\dllcache\eapphost.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      126976              c:\windows\system32\dllcache\eappcfg.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      184832              c:\windows\system32\dllcache\eapp3hst.dll
+ 2004-09-02 01:30 . 2004-02-10 22:49      154112              c:\windows\system32\dllcache\e100b325.sys
- 2006-05-10 05:22 . 2008-08-26 07:24      214528              c:\windows\system32\dllcache\dxtrans.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      214528              c:\windows\system32\dllcache\dxtrans.dll
- 2006-05-10 05:22 . 2008-08-26 07:24      347136              c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-09-02 01:29 . 2008-08-26 07:24      347136              c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      498742              c:\windows\system32\dllcache\dxmasf.dll
- 2006-08-22 10:05 . 2008-04-14 11:41      498742              c:\windows\system32\dllcache\dxmasf.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      619008              c:\windows\system32\dllcache\dx7vb.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      180224              c:\windows\system32\dllcache\dwwin.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      304128              c:\windows\system32\dllcache\duser.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      113152              c:\windows\system32\dllcache\dsuiext.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      137216              c:\windows\system32\dllcache\dssenh.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      239104              c:\windows\system32\dllcache\dsquery.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      120320              c:\windows\system32\dllcache\dsprov.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      142848              c:\windows\system32\dllcache\dsprop.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      367616              c:\windows\system32\dllcache\dsound.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      155648              c:\windows\system32\dllcache\dskquoui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      181248              c:\windows\system32\dllcache\dsdmo.dll
+ 2010-01-04 15:35 . 2001-08-17 18:20      334208              c:\windows\system32\dllcache\ds1wdm.sys
- 2009-12-30 20:38 . 2008-04-14 11:42      695808              c:\windows\system32\dllcache\drmv2clt.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      695808              c:\windows\system32\dllcache\drmv2clt.dll
- 2009-12-30 20:38 . 2008-04-14 11:43      299520              c:\windows\system32\dllcache\drmclien.dll
+ 2004-09-02 01:30 . 2008-04-14 11:43      299520              c:\windows\system32\dllcache\drmclien.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      116736              c:\windows\system32\dllcache\dpvvox.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      212480              c:\windows\system32\dllcache\dpvoice.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      375296              c:\windows\system32\dllcache\dpnet.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      229888              c:\windows\system32\dllcache\dplayx.dll
+ 2004-09-02 01:29 . 2008-04-14 08:30      103424              c:\windows\system32\dllcache\dpcdll.dll
+ 2010-01-04 15:35 . 2008-04-14 06:09      206976              c:\windows\system32\dllcache\dot4.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      650752              c:\windows\system32\dllcache\dot3ui.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      132096              c:\windows\system32\dllcache\dot3svc.dll
+ 2004-09-02 01:29 . 2008-06-20 17:41      148992              c:\windows\system32\dllcache\dnsapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      104448              c:\windows\system32\dllcache\dmusic.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      103424              c:\windows\system32\dllcache\dmsynth.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      105984              c:\windows\system32\dllcache\dmstyle.dll
+ 2004-09-02 01:29 . 2008-04-14 06:14      153344              c:\windows\system32\dllcache\dmio.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      181248              c:\windows\system32\dllcache\dmime.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      118784              c:\windows\system32\dllcache\dmdskres.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      200704              c:\windows\system32\dllcache\dmdskmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      285184              c:\windows\system32\dllcache\dmdlgs.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      330752              c:\windows\system32\dllcache\dmconfig.dll
+ 2004-09-02 01:29 . 2008-04-14 06:14      799744              c:\windows\system32\dllcache\dmboot.sys
+ 2004-09-02 01:29 . 2008-04-14 11:42      224768              c:\windows\system32\dllcache\dmadmin.exe
+ 2010-01-04 15:35 . 2001-08-17 18:14      952007              c:\windows\system32\dllcache\diwan.sys
+ 2010-01-04 15:35 . 2001-08-18 04:36      236060              c:\windows\system32\dllcache\ditrace.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      163840              c:\windows\system32\dllcache\diskpart.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      181760              c:\windows\system32\dllcache\dinput8.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      158720              c:\windows\system32\dllcache\dinput.dll
+ 2010-01-04 15:35 . 2001-08-18 04:36      614429              c:\windows\system32\dllcache\digiview.exe
+ 2010-01-04 15:35 . 2001-08-18 04:36      110621              c:\windows\system32\dllcache\digirlpt.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      102484              c:\windows\system32\dllcache\digiinf.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      159828              c:\windows\system32\dllcache\digihlc.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      229462              c:\windows\system32\dllcache\digifwrk.dll
+ 2010-01-04 15:34 . 2001-08-17 18:13      103044              c:\windows\system32\dllcache\digidxb.sys
+ 2010-01-04 15:34 . 2001-08-18 04:36      131156              c:\windows\system32\dllcache\digidbp.dll
+ 2010-01-04 15:33 . 2001-08-17 18:13      164923              c:\windows\system32\dllcache\diapi2.sys
+ 2004-09-02 01:40 . 2008-04-14 11:42      539136              c:\windows\system32\dllcache\dialer.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      394240              c:\windows\system32\dllcache\diactfrm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      379904              c:\windows\system32\dllcache\dhcpmon.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      126976              c:\windows\system32\dllcache\dhcpcsvc.dll
+ 2004-09-01 18:36 . 2004-08-04 12:00      176157              c:\windows\system32\dllcache\dgrpsetu.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      111104              c:\windows\system32\dllcache\dgnet.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      419357              c:\windows\system32\dllcache\dgconfig.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      124416              c:\windows\system32\dllcache\dfrgui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      105472              c:\windows\system32\dllcache\dfrgntfs.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      282624              c:\windows\system32\dllcache\devmgr.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      256512              c:\windows\system32\dllcache\devcon32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      279552              c:\windows\system32\dllcache\ddraw.dll
+ 2010-01-04 15:34 . 2001-08-18 04:36      110592              c:\windows\system32\dllcache\dc260usd.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      110592              c:\windows\system32\dllcache\dbnetlib.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      640000              c:\windows\system32\dllcache\dbghelp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      847872              c:\windows\system32\dllcache\dbgeng.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      165376              c:\windows\system32\dllcache\datime.dll
+ 2004-09-02 01:41 . 2008-03-25 04:50      554008              c:\windows\system32\dllcache\dao360.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      554008              c:\windows\system32\dllcache\dao360.dll
+ 2010-01-04 15:34 . 2001-08-17 19:52      179584              c:\windows\system32\dllcache\dac2w2k.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      350208              c:\windows\system32\dllcache\d3drm.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      590336              c:\windows\system32\dllcache\d3dramp.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      824320              c:\windows\system32\dllcache\d3dim700.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      436224              c:\windows\system32\dllcache\d3dim.dll
+ 2010-01-04 15:34 . 2001-08-17 18:12      117760              c:\windows\system32\dllcache\d100ib5.sys
+ 2010-01-04 15:34 . 2001-08-17 18:19      111872              c:\windows\system32\dllcache\cwcspud.sys
+ 2010-01-04 15:34 . 2008-04-14 11:41      249856              c:\windows\system32\dllcache\ctmasetp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      326656              c:\windows\system32\dllcache\cscui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      139264              c:\windows\system32\dllcache\cscript.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      101888              c:\windows\system32\dllcache\cscdll.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      175104              c:\windows\system32\dllcache\csamsp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      512512              c:\windows\system32\dllcache\cryptui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      597504              c:\windows\system32\dllcache\crypt32.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      149019              c:\windows\system32\dllcache\crtdll.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      163840              c:\windows\system32\dllcache\credui.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      216064              c:\windows\system32\dllcache\cpscan.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      357888              c:\windows\system32\dllcache\confmsp.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      539648              c:\windows\system32\dllcache\comuid.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      167424              c:\windows\system32\dllcache\comsnap.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      259584              c:\windows\system32\dllcache\comsetup.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      792064              c:\windows\system32\dllcache\comres.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      229376              c:\windows\system32\dllcache\compstui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      252928              c:\windows\system32\dllcache\compatui.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      276992              c:\windows\system32\dllcache\comdlg32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      617472              c:\windows\system32\dllcache\comctl32.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      195072              c:\windows\system32\dllcache\comadmin.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      185344              c:\windows\system32\dllcache\cmprops.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      217160              c:\windows\system32\dllcache\cmnclim.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      344064              c:\windows\system32\dllcache\cmdial32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      389120              c:\windows\system32\dllcache\cmd.exe
+ 2004-09-02 01:40 . 2008-04-14 11:42      102912              c:\windows\system32\dllcache\clipbrd.exe
+ 2004-09-02 01:40 . 2005-07-26 04:39      498688              c:\windows\system32\dllcache\clbcatq.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      110592              c:\windows\system32\dllcache\clbcatex.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      435712              c:\windows\system32\dllcache\class_ss.dll
+ 2010-01-04 15:33 . 2001-08-17 19:57      248064              c:\windows\system32\dllcache\cl546xm.sys
+ 2010-01-04 15:33 . 2001-08-17 20:56      170880              c:\windows\system32\dllcache\cl546x.dll
+ 2010-01-04 15:33 . 2001-08-17 20:56      111232              c:\windows\system32\dllcache\cl5465.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      480256              c:\windows\system32\dllcache\cintsetp.exe
+ 2010-01-04 15:33 . 2004-08-04 12:00      198656              c:\windows\system32\dllcache\cintime.dll
+ 2001-08-17 14:02 . 2004-08-04 12:00      262528              c:\windows\system32\dllcache\cinemst2.sys
+ 2010-01-04 15:33 . 2001-08-17 20:02      272640              c:\windows\system32\dllcache\cinemclc.sys
+ 2010-01-04 15:33 . 2001-08-17 18:13      980034              c:\windows\system32\dllcache\cicap.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      148480              c:\windows\system32\dllcache\cic.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      163328              c:\windows\system32\dllcache\ciadmin.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      173568              c:\windows\system32\dllcache\chtskf.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      838144              c:\windows\system32\dllcache\chtbrkr.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      780885              c:\windows\system32\dllcache\chkrres.dll
+ 2010-01-04 15:30 . 2003-03-24 22:52      188480              c:\windows\system32\dllcache\cfgwiz.exe
- 2009-12-30 20:38 . 2008-04-14 11:41      159232              c:\windows\system32\dllcache\cewmdm.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      159232              c:\windows\system32\dllcache\cewmdm.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      457728              c:\windows\system32\dllcache\certmgr.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      194560              c:\windows\system32\dllcache\certcli.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      151040              c:\windows\system32\dllcache\cdfview.dll
+ 2010-01-04 15:33 . 2001-08-17 19:28      714698              c:\windows\system32\dllcache\cbmdmkxx.sys
+ 2004-09-02 01:40 . 2005-07-26 04:39      625152              c:\windows\system32\dllcache\catsrvut.dll
+ 2004-09-02 01:40 . 2005-07-26 04:39      225792              c:\windows\system32\dllcache\catsrv.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      359936              c:\windows\system32\dllcache\cards.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      150016              c:\windows\system32\dllcache\capesnpn.dll
+ 2010-01-04 15:33 . 2008-04-14 11:41      121856              c:\windows\system32\dllcache\camext30.dll
+ 2010-01-04 15:33 . 2001-08-18 04:36      236032              c:\windows\system32\dllcache\camext20.dll
+ 2010-01-04 15:33 . 2001-08-17 20:04      171264              c:\windows\system32\dllcache\camdrv30.sys
+ 2010-01-04 15:33 . 2001-08-17 20:04      223232              c:\windows\system32\dllcache\camdrv21.sys
+ 2010-01-04 15:33 . 2001-08-17 20:05      314752              c:\windows\system32\dllcache\camdro21.sys
+ 2004-09-02 01:41 . 2008-04-14 11:41      385024              c:\windows\system32\dllcache\callcont.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      114688              c:\windows\system32\dllcache\calc.exe
+ 2010-01-04 15:33 . 2004-08-04 12:00      218112              c:\windows\system32\dllcache\c_g18030.dll
+ 2008-06-11 12:24 . 2008-04-14 06:16      273024              c:\windows\system32\dllcache\bthport.sys
+ 2009-12-30 20:36 . 2008-04-14 06:21      101120              c:\windows\system32\dllcache\bthpan.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      152576              c:\windows\system32\dllcache\bnts.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      361472              c:\windows\system32\dllcache\blue_ss.dll
- 2009-12-30 20:38 . 2008-04-14 11:41      286720              c:\windows\system32\dllcache\blackbox.dll
+ 2004-09-02 01:30 . 2008-04-14 11:41      286720              c:\windows\system32\dllcache\blackbox.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      102400              c:\windows\system32\dllcache\binlsvc.dll
+ 2010-01-04 15:32 . 2001-08-17 19:28      871388              c:\windows\system32\dllcache\bcmdm.sys
+ 2010-01-04 15:32 . 2001-08-17 20:56      342336              c:\windows\system32\dllcache\banshee.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      233472              c:\windows\system32\dllcache\azroles.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      227840              c:\windows\system32\dllcache\avtapi.dll
+ 2010-01-04 15:32 . 2001-08-18 04:36      144384              c:\windows\system32\dllcache\avmenum.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      109456              c:\windows\system32\dllcache\avifile.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      580608              c:\windows\system32\dllcache\autofmt.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      602624              c:\windows\system32\dllcache\autoconv.exe
+ 2004-09-02 01:29 . 2008-04-14 11:42      588800              c:\windows\system32\dllcache\autochk.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      352256              c:\windows\system32\dllcache\atmuni.sys
+ 2004-09-02 01:29 . 2008-04-14 11:39      285696              c:\windows\system32\dllcache\atmfd.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      516768              c:\windows\system32\dllcache\ativvaxx.dll
+ 2010-01-04 15:31 . 2001-08-17 20:56      104832              c:\windows\system32\dllcache\atiraged.dll
+ 2009-12-30 20:36 . 2008-04-14 04:04      104960              c:\windows\system32\dllcache\atinrvxx.sys
+ 2010-01-04 15:31 . 2001-08-17 18:48      281600              c:\windows\system32\dllcache\atimtai.sys
+ 2010-01-04 15:31 . 2001-08-17 18:48      289664              c:\windows\system32\dllcache\atimpab.sys
+ 2010-01-04 15:31 . 2001-08-17 20:56      268160              c:\windows\system32\dllcache\atidvai.dll
+ 2010-01-04 15:31 . 2001-08-17 20:56      137216              c:\windows\system32\dllcache\atidrae.dll
+ 2010-01-04 15:31 . 2001-08-17 20:55      382592              c:\windows\system32\dllcache\atidrab.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      870784              c:\windows\system32\dllcache\ati3d1ag.dll
+ 2009-12-30 20:36 . 2008-04-14 04:04      701440              c:\windows\system32\dllcache\ati2mtag.sys
+ 2009-12-30 20:36 . 2008-04-14 04:04      327040              c:\windows\system32\dllcache\ati2mtaa.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      201728              c:\windows\system32\dllcache\ati2dvag.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      377984              c:\windows\system32\dllcache\ati2dvaa.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      229376              c:\windows\system32\dllcache\ati2cqag.dll
+ 2010-01-04 15:31 . 2004-08-04 12:00      331264              c:\windows\system32\dllcache\aqueue.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      126976              c:\windows\system32\dllcache\apphelp.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      102912              c:\windows\system32\dllcache\apcups.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      256512              c:\windows\system32\dllcache\agentsvr.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      214016              c:\windows\system32\dllcache\agentctl.dll
+ 2004-09-02 01:29 . 2008-04-14 06:49      138112              c:\windows\system32\dllcache\afd.sys
+ 2004-09-02 02:04 . 2008-04-14 04:09      142592              c:\windows\system32\dllcache\aec.sys
+ 2004-09-02 01:29 . 2008-08-26 07:24      124928              c:\windows\system32\dllcache\advpack.dll
- 2007-08-14 00:39 . 2008-08-26 07:24      124928              c:\windows\system32\dllcache\advpack.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      617472              c:\windows\system32\dllcache\advapi32.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      263680              c:\windows\system32\dllcache\adsnt.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      143360              c:\windows\system32\dllcache\adsldpc.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      175616              c:\windows\system32\dllcache\adsldp.dll
+ 2010-01-04 15:31 . 2001-08-17 20:07      101888              c:\windows\system32\dllcache\adpu160m.sys
+ 2010-01-04 15:31 . 2001-08-17 18:19      747392              c:\windows\system32\dllcache\adm8830.sys
+ 2010-01-04 15:31 . 2001-08-17 18:19      553984              c:\windows\system32\dllcache\adm8820.sys
+ 2010-01-04 15:31 . 2001-08-17 18:19      584448              c:\windows\system32\dllcache\adm8810.sys
+ 2004-09-02 01:29 . 2004-08-04 12:00      116224              c:\windows\system32\dllcache\acxtrnal.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      101888              c:\windows\system32\dllcache\actxprxy.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      194048              c:\windows\system32\dllcache\activeds.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      244736              c:\windows\system32\dllcache\acspecfc.dll
+ 2004-08-03 23:07 . 2008-04-14 06:06      187776              c:\windows\system32\dllcache\acpi.sys
+ 2004-09-02 01:29 . 2008-04-14 11:41      115712              c:\windows\system32\dllcache\aclui.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      137728              c:\windows\system32\dllcache\aclua.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      129536              c:\windows\system32\dllcache\acledit.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      450048              c:\windows\system32\dllcache\aclayers.dll
+ 2004-09-02 01:40 . 2008-04-14 11:42      184320              c:\windows\system32\dllcache\accwiz.exe
+ 2010-01-04 15:31 . 2001-08-17 18:20      297728              c:\windows\system32\dllcache\ac97sis.sys
+ 2010-01-04 15:31 . 2008-04-14 04:06      231552              c:\windows\system32\dllcache\ac97ali.sys
+ 2009-12-30 20:41 . 2008-04-14 11:41      136192              c:\windows\system32\dllcache\aaclient.dll
+ 2010-01-04 15:31 . 2001-08-18 04:36      462848              c:\windows\system32\dllcache\a3dapi.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      100352              c:\windows\system32\dllcache\6to4svc.dll
+ 2010-01-04 15:31 . 2001-08-17 18:48      148352              c:\windows\system32\dllcache\3dfxvsm.sys
+ 2010-01-04 15:31 . 2001-08-17 20:55      689216              c:\windows\system32\dllcache\3dfxvs.dll
+ 2010-01-04 15:31 . 2001-08-17 19:28      762780              c:\windows\system32\dllcache\3cwmcru.sys
+ 2010-01-04 18:37 . 2010-01-04 18:37      301056              c:\windows\Installer\2e219.msi
+ 2010-01-04 18:25 . 2010-01-04 18:25      424448              c:\windows\Installer\2e20d.msi
+ 2009-07-12 02:46 . 2009-07-12 02:46      1093120              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
+ 2009-07-12 02:46 . 2009-07-12 02:46      1105920              c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
+ 2004-09-02 01:29 . 2008-04-14 05:09      2897920              c:\windows\system32\dllcache\xpsp2res.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      1001472              c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      1001472              c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-09-02 01:30 . 2008-04-14 11:43      2109440              c:\windows\system32\dllcache\wmvcore.dll
- 2006-12-07 23:02 . 2008-04-14 11:43      2109440              c:\windows\system32\dllcache\wmvcore.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      1119744              c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      1119744              c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-09-02 01:30 . 2008-04-14 04:58      2940928              c:\windows\system32\dllcache\wmploc.dll
- 2009-12-30 20:38 . 2008-04-14 04:58      2940928              c:\windows\system32\dllcache\wmploc.dll
- 2009-12-30 20:42 . 2008-04-14 11:42      4874240              c:\windows\system32\dllcache\wmp.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      4874240              c:\windows\system32\dllcache\wmp.dll
+ 2004-09-02 01:30 . 2008-04-14 11:42      1053184              c:\windows\system32\dllcache\wmnetmgr.dll
- 2009-12-30 20:38 . 2008-04-14 11:42      1053184              c:\windows\system32\dllcache\wmnetmgr.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      4256768              c:\windows\system32\dllcache\wmm2res.dll
+ 2004-09-02 01:29 . 2008-04-14 04:18      1647616              c:\windows\system32\dllcache\winbrand.dll
+ 2004-09-02 01:29 . 2008-04-14 07:00      1845632              c:\windows\system32\dllcache\win32k.sys
+ 2004-09-02 01:29 . 2008-08-26 07:24      1159680              c:\windows\system32\dllcache\urlmon.dll
- 2006-05-10 05:23 . 2008-08-26 07:24      1159680              c:\windows\system32\dllcache\urlmon.dll
+ 2004-09-02 01:30 . 2004-08-04 12:00      3374640              c:\windows\system32\dllcache\tourP.exe
+ 2004-09-02 01:40 . 2004-08-04 12:00      2178131              c:\windows\system32\dllcache\shvlres.dll
+ 2004-09-02 01:29 . 2007-10-26 03:34      8460288              c:\windows\system32\dllcache\shell32.dll
+ 2004-09-02 01:29 . 2007-10-11 06:13      1494528              c:\windows\system32\dllcache\shdocvw.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1614848              c:\windows\system32\dllcache\sfcfiles.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1435648              c:\windows\system32\dllcache\query.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1288192              c:\windows\system32\dllcache\quartz.dll
+ 2004-09-02 01:29 . 2005-07-26 04:39      1285120              c:\windows\system32\dllcache\ole32.dll
+ 2009-12-30 20:36 . 2008-04-14 04:04      1897408              c:\windows\system32\dllcache\nv4_mini.sys
+ 2009-12-30 20:41 . 2008-04-14 11:42      4274816              c:\windows\system32\dllcache\nv4_disp.dll
+ 2010-01-04 15:30 . 2008-04-14 06:57      2188928              c:\windows\system32\dllcache\ntoskrnl.exe
+ 2004-08-03 22:59 . 2008-04-14 06:01      2023936              c:\windows\system32\dllcache\ntkrpamp.exe
+ 2010-01-04 15:45 . 2008-04-14 06:01      2065792              c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2004-08-03 23:18 . 2008-04-14 06:54      2145280              c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      1708032              c:\windows\system32\dllcache\netshell.dll
+ 2009-12-30 20:41 . 2008-04-14 11:42      1737856              c:\windows\system32\dllcache\mtxparhd.dll
+ 2009-12-30 20:36 . 2008-04-14 05:53      1309184              c:\windows\system32\dllcache\mtlstrm.sys
+ 2004-09-02 01:29 . 2007-06-26 06:08      1104896              c:\windows\system32\dllcache\msxml3.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1428992              c:\windows\system32\dllcache\msvidctl.dll
+ 2004-09-02 01:41 . 2008-04-14 03:53      2479616              c:\windows\system32\dllcache\msoeres.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      1314816              c:\windows\system32\dllcache\msoe.dll
+ 2004-09-02 01:29 . 2008-03-25 04:50      1516568              c:\windows\system32\dllcache\msjet40.dll
- 2008-03-25 04:50 . 2008-03-25 04:50      1516568              c:\windows\system32\dllcache\msjet40.dll
+ 2004-09-02 01:29 . 2007-04-18 16:12      2854400              c:\windows\system32\dllcache\msi.dll
+ 2004-09-02 01:29 . 2008-08-27 08:24      3593216              c:\windows\system32\dllcache\mshtml.dll
- 2006-05-19 15:08 . 2008-08-27 08:24      3593216              c:\windows\system32\dllcache\mshtml.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      3166208              c:\windows\system32\dllcache\msgr3en.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      3558912              c:\windows\system32\dllcache\moviemk.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      1872896              c:\windows\system32\dllcache\mmcndmgr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1414656              c:\windows\system32\dllcache\mmc.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      1028096              c:\windows\system32\dllcache\mfc42.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      2061824              c:\windows\system32\dllcache\lhmstscx.dll
+ 2009-12-30 20:36 . 2008-04-14 05:53      1041536              c:\windows\system32\dllcache\hsfdpsp2.sys
+ 2004-09-02 01:40 . 2004-08-04 12:00      1175635              c:\windows\system32\dllcache\hrtzres.dll
+ 2010-01-04 15:37 . 2001-08-17 20:56      1733120              c:\windows\system32\dllcache\g400d.dll
+ 2004-09-02 01:29 . 2007-06-13 10:23      1033216              c:\windows\system32\dllcache\explorer.exe
+ 2004-09-02 01:29 . 2004-08-04 12:00      1114896              c:\windows\system32\dllcache\esent97.dll
+ 2004-09-02 01:29 . 2005-10-20 22:20      1082368              c:\windows\system32\dllcache\esent.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      2113536              c:\windows\system32\dllcache\dxdiagn.dll
+ 2004-09-02 01:29 . 2008-04-14 11:42      1298432              c:\windows\system32\dllcache\dxdiag.exe
+ 2004-09-02 01:29 . 2008-04-14 11:41      1227264              c:\windows\system32\dllcache\dx8vb.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      1293824              c:\windows\system32\dllcache\dsound3d.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      1504256              c:\windows\system32\dllcache\diskcopy.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      1054208              c:\windows\system32\dllcache\danim.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      1689088              c:\windows\system32\dllcache\d3d9.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      1179648              c:\windows\system32\dllcache\d3d8.dll
+ 2004-09-02 01:41 . 2008-04-14 11:42      1032192              c:\windows\system32\dllcache\conf.exe
+ 2004-09-02 01:40 . 2005-07-26 04:39      1267200              c:\windows\system32\dllcache\comsvcs.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      1039955              c:\windows\system32\dllcache\cmnresm.dll
+ 2004-09-02 01:40 . 2008-04-14 11:41      1358848              c:\windows\system32\dllcache\cimwin32.dll
+ 2010-01-04 15:33 . 2004-08-04 12:00      1677824              c:\windows\system32\dllcache\chsbrkr.dll
+ 2004-09-02 01:29 . 2008-04-14 11:41      2091520              c:\windows\system32\dllcache\cdosys.dll
+ 2004-09-02 01:29 . 2007-10-11 06:13      1023488              c:\windows\system32\dllcache\browseui.dll
+ 2004-09-02 01:40 . 2004-08-04 12:00      1817687              c:\windows\system32\dllcache\bckgres.dll
+ 2009-12-30 20:41 . 2008-04-14 11:41      1888992              c:\windows\system32\dllcache\ati3duag.dll
+ 2004-09-02 01:29 . 2004-08-04 12:00      1852416              c:\windows\system32\dllcache\acgenral.dll
+ 2004-09-02 01:29 . 2001-08-23 04:27      13107200              c:\windows\system32\dllcache\oembios.bin
+ 2010-01-04 15:39 . 2004-08-04 12:00      10129408              c:\windows\system32\dllcache\hwxkor.dll
+ 2010-01-04 15:39 . 2004-08-04 12:00      13463552              c:\windows\system32\dllcache\hwxjpn.dll
+ 2010-01-04 15:39 . 2004-08-04 12:00      10096640              c:\windows\system32\dllcache\hwxcht.dll
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 20:21      548352      ----a-w-      c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute      REG_MULTI_SZ         autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnk
backup=c:\windows\pss\America Online 9.0 Tray Icon.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Remocon Driver.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Remocon Driver.lnk
backup=c:\windows\pss\Remocon Driver.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Timer Recording Manager.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Timer Recording Manager.lnk
backup=c:\windows\pss\Timer Recording Manager.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\combofix]
c:\combofix\CF7845.cfxxe [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UserFaultCheck]
c:\windows\system32\dumprep 0 -u [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2004-07-20 17:22      57344      ----a-w-      c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2004-08-24 18:01      2552320      ----a-w-      c:\windows\ALCWZRD.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Spyware Protection]
2004-10-19 00:42      79448      ----a-w-      c:\progra~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer]
2004-04-07 20:07      496752      ----a-w-      c:\program files\Common Files\AOL\ACS\AOLDial.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BJCFD]
2002-09-11 05:26      368706      ----a-w-      c:\program files\BroadJump\Client Foundation\CFD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
2007-01-10 02:59      115816      ----a-r-      c:\program files\Common Files\Symantec Shared\ccApp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CreateCD_Reminder]
2004-07-16 19:17      53248      ----a-w-      c:\windows\SONYSYS\VAIO Recovery\Reminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative WebCam Tray]
2004-11-18 02:50      258048      ----a-w-      c:\program files\Creative\Shared Files\CamTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverCure]
2009-08-07 19:36      3993368      ----a-w-      c:\program files\ParetoLogic\DriverCure\DriverCure.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-03-17 22:10      61952      ----a-w-      c:\windows\system32\Hdaudpropshortcut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2004-07-01 18:58      118784      ----a-w-      c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPInSightLAN 02]
2003-06-11 09:52      380928      ----a-w-      c:\program files\Visual Networks\Visual IP InSight\SBC\IPClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPInSightMonitor 02]
2003-06-11 09:52      122880      ----a-w-      c:\program files\Visual Networks\Visual IP InSight\SBC\ipmon32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-09-21 21:36      305440      ----a-w-      c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
2002-07-17 01:21      28672      ----a-w-      c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2007-01-19 18:54      5674352      ----a-w-      c:\program files\MSN Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDUiP6000DMon]
2004-05-31 18:26      57344      ----a-w-      c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDUiP6000DTskbr]
2004-05-28 14:29      69632      ----a-w-      c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DTskbr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pure Networks Port Magic]
2004-05-27 19:17      99480      ----a-w-      c:\progra~1\PURENE~1\PORTMA~1\PortAOL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-05 06:54      417792      ----a-w-      c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
2005-01-07 03:12      26112      ----a-w-      c:\program files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2004-08-24 18:14      77824      ----a-w-      c:\windows\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2009-12-16 22:26      2002160      ----a-w-      c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng]
2008-01-29 22:38      583048      ----a-w-      c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Upromise]
2007-07-10 20:00      385024      ----a-w-      c:\program files\Upromise\Upromise.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Upromise Update]
2007-07-10 20:00      147456      ----a-w-      c:\program files\Upromise\UpromiseUa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Recovery]
2003-04-20 05:08      28672      ----a-w-      c:\windows\SONYSYS\VAIO Recovery\PartSeal.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2]
2004-01-17 10:36      135168      ----a-w-      c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VF0060 STISvc]
2004-11-01 01:00      36864      ----a-r-      c:\windows\system32\V0060Pin.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YOP]
2005-04-23 01:49      397312      ----a-w-      c:\progra~1\Yahoo!\YOP\yop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"c:\\Program Files\\America Online 9.0\\waol.exe"=
"c:\\PROGRA~1\\Yahoo!\\MESSEN~1\\yserver.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Games\\Links 2003\\LinksMMIII.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [12/16/2009 4:26 PM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12/16/2009 4:26 PM 74480]
R2 NProtectService;Norton UnErase Protection;c:\progra~1\NORTON~1\NORTON~1\NPROTECT.EXE [11/3/2005 9:08 PM 95832]
R2 VAIO Entertainment File Import Service;VAIO Entertainment File Import Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe [11/4/2004 2:52 PM 118877]
S0 kymvuumt;kymvuumt; [x]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [12/16/2009 4:27 PM 7408]
S3 V0060VID;Creative WebCam Live! Ultra;c:\windows\system32\drivers\V0060Vid.sys [12/25/2005 7:32 AM 196409]
S3 VAIO Entertainment UPnP Client Adapter;VAIO Entertainment UPnP Client Adapter;c:\program files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe -RunBySCM --> c:\program files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe -RunBySCM [?]

--- Other Services/Drivers In Memory ---

*Deregistered* - IPVNMon
.
Contents of the 'Scheduled Tasks' folder

2009-12-19 c:\windows\Tasks\DriverCure.job
- c:\program files\ParetoLogic\DriverCure\DriverCure.exe [2009-08-07 19:36]

2009-12-30 c:\windows\Tasks\Norton Security Scan for Owner.job
- c:\program files\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2009-11-26 01:58]

2009-08-03 c:\windows\Tasks\Norton SystemWorks One Button Checkup.job
- c:\program files\Norton SystemWorks Basic Edition\OBC.exe [2006-11-16 20:51]

2009-12-31 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]

2009-12-31 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://yahoo.sbc.com/dsl
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uDefault_Search_URL = hxxp://www.google.com/ie
IE: &AOL Toolbar search - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
Trusted Zone: sbc.com\yahoo
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-SpySweeper - c:\program files\Webroot\Spy Sweeper\SpySweeperUI.exe
AddRemove-HijackThis - j:\doug pc\HijackThis.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-04 13:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...  

scanning hidden autostart entries ...

scanning hidden files ...  

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(684)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\program files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
c:\progra~1\COMMON~1\AOL\ACS\AOLacsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Sony\Giga Pocket\shwserv.exe
c:\program files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
c:\progra~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
c:\program files\Sony\Giga Pocket\RM_SV.exe
.
**************************************************************************
.
Completion time: 2010-01-04  13:39:03 - machine was rebooted
ComboFix-quarantined-files.txt  2010-01-04 19:39
ComboFix2.txt  2009-12-31 17:28

Pre-Run: 152,228,179,968 bytes free
Post-Run: 152,608,387,072 bytes free

- - End Of File - - CB4C147439978D987D75CCB05DDC06D9
Avatar of Jonvee
Jonvee
Still checking the ComboFix log for remaining infections but so far nothing obvious.

Have yet to check the HijackThis log file, but we should bear in mind of course that rootkits(for example) will not be detected by HijackThis.

Does the PC still show symptoms of Malware, or is it beginning to function normally?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

other than not being able to connect to the internet (unless i ping via ip address in cmd) it seems to be running normal.

i was in the registry and i get an error when i click on some of the folders/keys.

i dont have a specific error to show, i should have taken a screen shot.

are there any programs that can clean/repair the registry?

Avatar of Jonvee
Jonvee
Several people use CCleaner to clean the registry although it's also been claimed that registry cleaners generally CAN cause more problems than they fix.  But this one is often reported to be good>
http://www.ccleaner.com/
Avatar of Jonvee
Jonvee
As you can access a site by IP, it appears to be a DNS issue.
To resolve DNS issues try running "ipconfig /flushdns"  from the command prompt.
This should remove your cached DNS entries.

Also in the IE options menu(if applicable), click the connection tab to ensure proxy is not selected.

Another option worth checking is to repair any possible damage that Malware may have caused, by uninstalling the NIC in your Device Manager.
Then reboot to allow Windows to reload a driver, to try and establish a new connection.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i will try ccleaner and let you know.

thanks.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

IE-tools- no proxy, already checked that.

i tried the ipconfig /flushdns and that didnt work.

as far as the drivers go, that was recommended above and i did that with no luck.

thanks
Avatar of Jonvee
Jonvee
If still no internet access, try running this script again to fix your connection. It should reinstall winsock, the TCP/IP stack, and the HOSTS file.
http://www.softpedia.com/progDownload/WinSockFix-Download-15337.html

or here>
http://www.snapfiles.com/get/winsockxpfix.html

Also ensure your antivirus and other Security programs are not preventing website access.  You may want to 'quickly and carefully' disable each in turn to see if that resolves the issue.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ccleaner found some stuff i backed up the registry and let it "fix" the selected problems, but still nothing.

i was able to browse to google in the browser via the ip address, but that is old news.

wow, i didnt think it would be that big of a deal.

side note-  windows system restore wont work, but is there a possibility that the system restore option from ccleaner will work?  or does that do the same thing as the system restore from windows?

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Jonvee:
If still no internet access, try running this script again to fix your connection. It should reinstall winsock, the TCP/IP stack, and the HOSTS file.
http://www.softpedia.com/progDownload/WinSockFix-Download-15337.html

or here>
http://www.snapfiles.com/get/winsockxpfix.html

Also ensure your antivirus and other Security programs are not preventing website access.  You may want to 'quickly and carefully' disable each in turn to see if that resolves the issue.

i dont mind trying this, but what will that do since i already tried it?

i am going to try it now, regardless, just wanted to get your opinion.

thanks.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

well, i dont really want to reformat...but i guess at this point i dont really have a choice.  i will need to get the restore disks from the manufacturer.

i asked him to look at home and he said he didnt have them.

oh well.

thanks guys, i appreciate all the help from everyone.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

oh wait...you said repair install..

haha, my bad.
Avatar of Jonvee
Jonvee
>side note- windows system restore wont work<
_Restore folder may well be damaged by original Malware.  But you could try this repair later>
http://windowsxp.mvps.org/repairsr.htm

Reinstalling the System Restore program should not delete existing restore points which are
stored in a hidden folder.
[Probably in C:\System Volume Information].
See >
"How to gain access to the System Volume Information folder":
http://support.microsoft.com/kb/309531

To reduce possibility of losing the restore points you could backup the folder.
If you get an access denied error, run this command>
cacls "C:\System Volume Information" /E /G %username%:F

But if you go for an XP repair install (dariusg) the System Restore function is going to be repaired anyway.  But if you go for an XP repair, please ensure you first disable System Restore in case there is Malware already in the _Restore folder.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, all that info is noted above, but i am not sure if my ccleaner question was answered about ssytem restore.

does the system restore function from the ccleaner menu do the same thing as the windows system restore?

meaning, is it its own application? or just a shortcut to the windows system restore program?
SOLUTION
Avatar of optoma
optoma
Flag of United States of America image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jonvee
Jonvee
As far as i'm aware the System Restore function in ccleaner menu is effectivelly the Windows System Restore.    sorry about the delay in replying.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@ optoma

ok, i will try that and let you know what happens.

the restore points are not gone.  in the calendar, i can click on them and the computer attempts to go through the process, but upon the reboot, it tells me it failed to restore to the restore point.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

"HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms"      ""      ""      ""
+ "rdpclip"      "RDP Clip Monitor"      "Microsoft Corporation"      "c:\windows\system32\rdpclip.exe"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit"      ""      ""      ""
+ "C:\WINDOWS\system32\userinit.exe"      "Userinit Logon Application"      "Microsoft Corporation"      "c:\windows\system32\userinit.exe"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell"      ""      ""      ""
+ "Explorer.exe"      "Windows Explorer"      "Microsoft Corporation"      "c:\windows\explorer.exe"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"      ""      ""      ""
+ "KernelFaultCheck"      "Windows Error Reporting Dump Reporting Tool"      "Microsoft Corporation"      "c:\windows\system32\dumprep.exe"
+ "UserFaultCheck"      "Windows Error Reporting Dump Reporting Tool"      "Microsoft Corporation"      "c:\windows\system32\dumprep.exe"
"HKCU\Software\Microsoft\Windows\CurrentVersion\Run"      ""      ""      ""
+ "ctfmon.exe"      "CTF Loader"      "Microsoft Corporation"      "c:\windows\system32\ctfmon.exe"
"HKLM\SOFTWARE\Classes\Protocols\Filter"      ""      ""      ""
+ "application/octet-stream"      "Microsoft .NET Runtime Execution Engine"      "Microsoft Corporation"      "c:\windows\system32\mscoree.dll"
+ "application/x-complus"      "Microsoft .NET Runtime Execution Engine"      "Microsoft Corporation"      "c:\windows\system32\mscoree.dll"
+ "application/x-msdownload"      "Microsoft .NET Runtime Execution Engine"      "Microsoft Corporation"      "c:\windows\system32\mscoree.dll"
+ "Class Install Handler"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "deflate"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "gzip"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "lzdhtml"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "text/webviewhtml"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "text/xml"      "Microsoft Office XML MIME Filter"      "Microsoft Corporation"      "c:\program files\common files\microsoft shared\office11\msoxmlmf.dll"
"HKLM\SOFTWARE\Classes\Protocols\Handler"      ""      ""      ""
+ "about"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "cdl"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "dvd"      "ActiveX control for streaming video"      "Microsoft Corporation"      "c:\windows\system32\msvidctl.dll"
+ "file"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "ftp"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "gopher"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "http"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "https"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "its"      "Microsoft® InfoTech Storage System Library"      "Microsoft Corporation"      "c:\windows\system32\itss.dll"
+ "javascript"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "livecall"      "MSN Messenger Protocol Handler"      "Microsoft Corporation"      "c:\program files\msn messenger\msgrapp.8.1.0178.00.dll"
+ "local"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "mailto"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "mhtml"      "Microsoft Internet Messaging API"      "Microsoft Corporation"      "c:\windows\system32\inetcomm.dll"
+ "mk"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "ms-its"      "Microsoft® InfoTech Storage System Library"      "Microsoft Corporation"      "c:\windows\system32\itss.dll"
+ "ms-itss"      "Microsoft® InfoTech Storage System Library"      "Microsoft Corporation"      "c:\program files\common files\microsoft shared\information retrieval\msitss.dll"
+ "msnim"      "MSN Messenger Protocol Handler"      "Microsoft Corporation"      "c:\program files\msn messenger\msgrapp.8.1.0178.00.dll"
+ "mso-offdap11"      "Microsoft Office Web Components 2003"      "Microsoft Corporation"      "c:\program files\common files\microsoft shared\web components\11\owc11.dll"
+ "res"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "sysimage"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "tv"      "ActiveX control for streaming video"      "Microsoft Corporation"      "c:\windows\system32\msvidctl.dll"
+ "vbscript"      "Microsoft (R) HTML Viewer"      "Microsoft Corporation"      "c:\windows\system32\mshtml.dll"
+ "wia"      "WIA Scripting Layer"      "Microsoft Corporation"      "c:\windows\system32\wiascr.dll"
"HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components"      ""      ""      ""
+ "0"      ""      ""      "File not found: About:Home"
"HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components"      ""      ""      ""
+ "Address Book 6"      "Outlook Express Setup Library"      "Microsoft Corporation"      "c:\program files\outlook express\setup50.exe"
+ "Browser Customizations"      "IEAK branding"      "Microsoft Corporation"      "c:\windows\system32\iedkcs32.dll"
+ "IE7 Uninstall Stub"      "IE Per User Active Setup Uninstall Utility"      "Microsoft Corporation"      "c:\windows\system32\ieudinit.exe"
+ "Internet Explorer"      "Windows NT User Data Migration Tool"      "Microsoft Corporation"      "c:\windows\system32\shmgrate.exe"
+ "Internet Explorer"      "IE Per-User Initialization Utility"      "Microsoft Corporation"      "c:\windows\system32\ie4uinit.exe"
+ "Microsoft Outlook Express 6"      "Outlook Express Setup Library"      "Microsoft Corporation"      "c:\program files\outlook express\setup50.exe"
+ "Microsoft Windows Media Player"      "Microsoft Windows Media Player Setup Utility"      "Microsoft Corporation"      "c:\windows\inf\unregmp2.exe"
+ "Microsoft Windows Media Player"      "ADVPACK"      "Microsoft Corporation"      "c:\windows\system32\advpack.dll"
+ "n/a"      "Microsoft .NET IE SECURITY REGISTRATION"      "Microsoft Corporation"      "c:\windows\system32\mscories.dll"
+ "NetMeeting 3.01"      "ADVPACK"      "Microsoft Corporation"      "c:\windows\system32\advpack.dll"
+ "Outlook Express"      "Windows NT User Data Migration Tool"      "Microsoft Corporation"      "c:\windows\system32\shmgrate.exe"
+ "Themes Setup"      "Windows Theme API"      "Microsoft Corporation"      "c:\windows\system32\themeui.dll"
+ "Windows Desktop Update"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Windows Messenger 4.7"      "ADVPACK"      "Microsoft Corporation"      "c:\windows\system32\advpack.dll"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler"      ""      ""      ""
+ "Browseui preloader"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Component Categories cache daemon"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad"      ""      ""      ""
+ "CDBurn"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "PostBootReminder"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "SysTray"      "Systray shell service object"      "Microsoft Corporation"      "c:\windows\system32\stobject.dll"
+ "WebCheck"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks"      ""      ""      ""
+ "SABShellExecuteHook Class"      "ShellExecuteHook"      "SuperAdBlocker.com"      "c:\program files\superantispyware\sasseh.dll"
+ "URL Exec Hook"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers"      ""      ""      ""
+ "Offline Files"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
+ "Open With"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Open With EncryptionMenu"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "SASContextMenu Class"      "SUPERAntiSpyware Context Menu Extension"      "SUPERAntiSpyware.com"      "c:\program files\superantispyware\sasctxmn.dll"
+ "Start Menu Pin"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Yahoo! Mail"      "Yahoo! Mail"      "Yahoo! Inc."      "c:\program files\yahoo!\common\ymmapi.dll"
"HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers"      ""      ""      ""
+ "Send To"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
"HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers"      ""      ""      ""
+ "EncryptionMenu"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Offline Files"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
+ "SASContextMenu Class"      "SUPERAntiSpyware Context Menu Extension"      "SUPERAntiSpyware.com"      "c:\program files\superantispyware\sasctxmn.dll"
+ "Sharing"      "Shell extensions for sharing"      "Microsoft Corporation"      "c:\windows\system32\ntshrui.dll"
"HKLM\Software\Classes\Directory\Shellex\PropertySheetHandlers"      ""      ""      ""
+ "DfsShell Class"      "Distributed File System shell extension"      "Microsoft Corporation"      "c:\windows\system32\dfsshlex.dll"
+ "Folder Customization Tab"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Previous Versions Property Page"      "Previous Versions property page"      "Microsoft Corporation"      "c:\windows\system32\twext.dll"
+ "Security Shell Extension"      "Security Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\rshx32.dll"
+ "Sharing"      "Shell extensions for sharing"      "Microsoft Corporation"      "c:\windows\system32\ntshrui.dll"
"HKLM\Software\Classes\Directory\Shellex\CopyHookHandlers"      ""      ""      ""
+ "CDF"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "FileSystem"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "MyDocuments"      "My Documents Folder UI"      "Microsoft Corporation"      "c:\windows\system32\mydocs.dll"
+ "PIDirectoryHook"      ""      ""      "c:\program files\arcsoft\photoimpression 5\share\pihook.dll"
+ "Sharing"      "Shell extensions for sharing"      "Microsoft Corporation"      "c:\windows\system32\ntshrui.dll"
"HKLM\Software\Classes\Folder\Shellex\ColumnHandlers"      ""      ""      ""
+ "PDF Shell Extension"      "PDF Shell Extension"      "Adobe Systems, Inc."      "c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll"
+ "{0D2E74C4-3C34-11d2-A27E-00C04FC30871}"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "{24F14F01-7B1C-11d1-838f-0000F80461CF}"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "{24F14F02-7B1C-11d1-838f-0000F80461CF}"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "{66742402-F9B9-11D1-A202-0000F81FEDEE}"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers"      ""      ""      ""
+ "igfxcui"      "igfxpph Module"      "Intel Corporation"      "c:\windows\system32\igfxpph.dll"
+ "New"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers"      ""      ""      ""
+ "Offline Files"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved"      ""      ""      ""
+ "%DESC_PublishDropTarget%"      "Photo Printing Wizard"      "Microsoft Corporation"      "c:\windows\system32\photowiz.dll"
+ "&Address"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "&Links"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ ".CAB file viewer"      "Cabinet File Viewer Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\cabview.dll"
+ "Accessible"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "ActiveX Cache Folder"      "Object Control Viewer"      "Microsoft Corporation"      "c:\windows\system32\occache.dll"
+ "Address EditBox"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Administrative Tools"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Audio Media Properties Handler"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "Augmented Shell Folder"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Augmented Shell Folder 2"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Auto Update Property Sheet Extension"      "Automatic Updates Control Panel"      "Microsoft Corporation"      "c:\windows\system32\wuaucpl.cpl"
+ "Avi Properties Handler"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "BandProxy"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Briefcase"      "Windows Briefcase"      "Microsoft Corporation"      "c:\windows\system32\syncui.dll"
+ "CDF Extension Copy Hook"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Code Download Agent"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Compatibility Page"      "Compatibility Tab Shell Extension DLL"      "Microsoft Corporation"      "c:\windows\system32\slayerxp.dll"
+ "Compressed (zipped) Folder"      "Compressed (zipped) Folders"      "Microsoft Corporation"      "c:\windows\system32\zipfldr.dll"
+ "Compressed (zipped) Folder Right Drag Handler"      "Compressed (zipped) Folders"      "Microsoft Corporation"      "c:\windows\system32\zipfldr.dll"
+ "Compressed (zipped) Folder SendTo Target"      "Compressed (zipped) Folders"      "Microsoft Corporation"      "c:\windows\system32\zipfldr.dll"
+ "ConnectionAgent"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Crypto PKO Extension"      "Crypto Shell Extensions"      "Microsoft Corporation"      "c:\windows\system32\cryptext.dll"
+ "Crypto Sign Extension"      "Crypto Shell Extensions"      "Microsoft Corporation"      "c:\windows\system32\cryptext.dll"
+ "Custom MRU AutoCompleted List"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Darwin App Publisher"      "Shell Application Manager"      "Microsoft Corporation"      "c:\windows\system32\appwiz.cpl"
+ "DfsShell"      "Distributed File System shell extension"      "Microsoft Corporation"      "c:\windows\system32\dfsshlex.dll"
+ "Directory Context Menu Verbs"      "Directory Service Common UI"      "Microsoft Corporation"      "c:\windows\system32\dsuiext.dll"
+ "Directory Object Find"      "Directory Service Find"      "Microsoft Corporation"      "c:\windows\system32\dsquery.dll"
+ "Directory Property UI"      "Directory Service Common UI"      "Microsoft Corporation"      "c:\windows\system32\dsuiext.dll"
+ "Directory Query UI"      "Directory Service Find"      "Microsoft Corporation"      "c:\windows\system32\dsquery.dll"
+ "Directory Start/Search Find"      "Directory Service Find"      "Microsoft Corporation"      "c:\windows\system32\dsquery.dll"
+ "Disk Copy Extension"      "Windows DiskCopy"      "Microsoft Corporation"      "c:\windows\system32\diskcopy.dll"
+ "Disk Quota UI"      "Windows Shell Disk Quota UI DLL"      "Microsoft Corporation"      "c:\windows\system32\dskquoui.dll"
+ "Display Adapter CPL Extension"      "Advanced display adapter properties"      "Microsoft Corporation"      "c:\windows\system32\deskadp.dll"
+ "Display Monitor CPL Extension"      "Advanced display monitor properties"      "Microsoft Corporation"      "c:\windows\system32\deskmon.dll"
+ "Display TroubleShoot CPL Extension"      "Advanced display performance properties"      "Microsoft Corporation"      "c:\windows\system32\deskperf.dll"
+ "Download Status"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "DS Security Page"      "Directory Service Security UI"      "Microsoft Corporation"      "c:\windows\system32\dssec.dll"
+ "E-mail"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Explorer Band"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Extensions Manager Folder"      "Extensions Manager"      "Microsoft Corporation"      "c:\windows\system32\extmgr.dll"
+ "Favorites Band"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Fonts"      "Windows Font Folder"      "Microsoft Corporation"      "c:\windows\system32\fontext.dll"
+ "Fonts"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "For &People..."      "Find People"      "Microsoft Corporation"      "c:\program files\outlook express\wabfind.dll"
+ "FTP Folders Webview"      "Microsoft Internet Explorer FTP Folder Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\msieftp.dll"
+ "Fusion Cache"      "Microsoft .NET Runtime Execution Engine"      "Microsoft Corporation"      "c:\windows\system32\mscoree.dll"
+ "GDI+ file thumbnail extractor"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "Get a Passport Wizard"      "Map Network Drives/Network Places Wizard"      "Microsoft Corporation"      "c:\windows\system32\netplwiz.dll"
+ "Global Folder Settings"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Help and Support"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Help and Support"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "History"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "HTML Thumbnail Extractor"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "HyperTerminal Icon Ext"      "HyperTerminal Applet Library"      "Hilgraeve, Inc."      "c:\windows\system32\hticons.dll"
+ "ICC Profile"      "Microsoft Color Matching System User Interface DLL"      "Microsoft Corporation"      "c:\windows\system32\icmui.dll"
+ "ICM Monitor Management"      "Microsoft Color Matching System User Interface DLL"      "Microsoft Corporation"      "c:\windows\system32\icmui.dll"
+ "ICM Printer Management"      "Microsoft Color Matching System User Interface DLL"      "Microsoft Corporation"      "c:\windows\system32\icmui.dll"
+ "ICM Scanner Management"      "Microsoft Color Matching System User Interface DLL"      "Microsoft Corporation"      "c:\windows\system32\icmui.dll"
+ "IE AutoComplete"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE BandProxy"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Custom MRU AutoCompleted List"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Fade Task"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE IShellFolderBand"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Menu Band"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Menu Desk Bar"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Menu Site"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Microsoft BrowserBand"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Microsoft History AutoComplete List"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Microsoft Multiple AutoComplete List Container"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Microsoft Shell Folder AutoComplete List"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE MRU AutoComplete List"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Navigation Bar"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Registry Tree Options Utility"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE RSS Feeder Folder"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Search Band"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Shell Band Site Menu"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Shell Rebar BandSite"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE Tracking Shell Menu"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE User Assist"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "IE4 Suite Splash Screen"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "In-pane search"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Installed Apps Enumerator"      "Shell Application Manager"      "Microsoft Corporation"      "c:\windows\system32\appwiz.cpl"
+ "Internet"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Internet Name Space"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "InternetShortcut"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "ISFBand OC"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "iTunes"      "iTunes Mini Player DLL"      "Apple Inc."      "c:\program files\itunes\itunesminiplayer.dll"
+ "Messenger Sharing Folders"      "Messenger File Sharing Shell Extensions"      "Microsoft Corporation"      "c:\program files\msn messenger\fsshext.8.1.0178.00.dll"
+ "Microsoft Agent Character Property Sheet Handler"      "Microsoft Agent Property Sheet Handler"      "Microsoft Corporation"      "c:\windows\msagent\agentpsh.dll"
+ "Microsoft AutoComplete"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Browser Architecture"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Microsoft Browser Architecture"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Microsoft BrowserBand"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Data Link"      "Microsoft Data Access - OLE DB Core Services"      "Microsoft Corporation"      "c:\program files\common files\system\ole db\oledb32.dll"
+ "Microsoft DocProp Inplace Calendar Control"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft DocProp Inplace Droplist Combo Control"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft DocProp Inplace Edit Box Control"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft DocProp Inplace ML Edit Box Control"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft DocProp Inplace Time Control"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft DocProp Shell Ext"      "Microsoft DocProp Shell Ext"      "Microsoft Corporation"      "c:\windows\system32\docprop2.dll"
+ "Microsoft History AutoComplete List"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Internet Toolbar"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Multiple AutoComplete List Container"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Office HTML Icon Handler"      "Microsoft Office 2003 component"      "Microsoft Corporation"      "c:\program files\microsoft office\office11\msohev.dll"
+ "Microsoft Office Outlook Custom Icon Handler"      "Outlook Shell Hook for Start/Find"      "Microsoft Corporation"      "c:\program files\microsoft office\office11\olkfstub.dll"
+ "Microsoft Office Outlook Desktop Icon Handler"      "Microsoft Shell Extension Library"      "Microsoft Corporation"      "c:\program files\microsoft office\office11\mlshext.dll"
+ "Microsoft Shell Folder AutoComplete List"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Microsoft Url History Service"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Microsoft Url Search Hook"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Midi Properties Handler"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "MMC Icon Handler"      "MMC Shell Extension DLL"      "Microsoft Corporation"      "c:\windows\system32\mmcshext.dll"
+ "MRU AutoComplete List"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Multimedia File Property Sheet"      "Control Panel Drivers Applet"      "Microsoft Corporation"      "c:\windows\system32\mmsys.cpl"
+ "MyDocs Copy Hook"      "My Documents Folder UI"      "Microsoft Corporation"      "c:\windows\system32\mydocs.dll"
+ "MyDocs Drop Target"      "My Documents Folder UI"      "Microsoft Corporation"      "c:\windows\system32\mydocs.dll"
+ "MyDocs Properties"      "My Documents Folder UI"      "Microsoft Corporation"      "c:\windows\system32\mydocs.dll"
+ "Network Connections"      "Network Connections Shell"      "Microsoft Corporation"      "c:\windows\system32\netshell.dll"
+ "Network Connections"      "Network Connections Shell"      "Microsoft Corporation"      "c:\windows\system32\netshell.dll"
+ "NTFS Security Page"      "Security Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\rshx32.dll"
+ "Offline Files Folder"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
+ "Offline Files Folder Options"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
+ "Offline Files Menu"      "Client Side Caching UI"      "Microsoft Corporation"      "c:\windows\system32\cscui.dll"
+ "OLE Docfile Property Page"      "OLE DocFile Property Page"      "Microsoft Corporation"      "c:\windows\system32\docprop.dll"
+ "PlusPack CPL Extension"      "Windows Theme API"      "Microsoft Corporation"      "c:\windows\system32\themeui.dll"
+ "PostAgent"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Previous Versions"      "Previous Versions property page"      "Microsoft Corporation"      "c:\windows\system32\twext.dll"
+ "Previous Versions Property Page"      "Previous Versions property page"      "Microsoft Corporation"      "c:\windows\system32\twext.dll"
+ "Print Ordering via the Web"      "Map Network Drives/Network Places Wizard"      "Microsoft Corporation"      "c:\windows\system32\netplwiz.dll"
+ "Printers Security Page"      "Security Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\rshx32.dll"
+ "RecordNow! SendToExt"      "Shell Extensions"      ""      "c:\program files\sonic\recordnow!\shlext.dll"
+ "Registry Tree Options Utility"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Remote Sessions CPL Extension"      "Remote Sessions CPL Extension"      "Microsoft Corporation"      "c:\windows\system32\remotepg.dll"
+ "Run..."      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Scanners & Cameras"      "Imaging Devices Shell Folder UI"      "Microsoft Corporation"      "c:\windows\system32\wiashext.dll"
+ "Scanners & Cameras"      "Imaging Devices Shell Folder UI"      "Microsoft Corporation"      "c:\windows\system32\wiashext.dll"
+ "Scanners & Cameras"      "Imaging Devices Shell Folder UI"      "Microsoft Corporation"      "c:\windows\system32\wiashext.dll"
+ "Scanners & Cameras"      "Imaging Devices Shell Folder UI"      "Microsoft Corporation"      "c:\windows\system32\wiashext.dll"
+ "Scanners & Cameras"      "Imaging Devices Shell Folder UI"      "Microsoft Corporation"      "c:\windows\system32\wiashext.dll"
+ "Scheduled Tasks"      "Task Scheduler interface DLL"      "Microsoft Corporation"      "c:\windows\system32\mstask.dll"
+ "Search"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Search Assistant OC"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Sendmail service"      "Send Mail"      "Microsoft Corporation"      "c:\windows\system32\sendmail.dll"
+ "Sendmail service"      "Send Mail"      "Microsoft Corporation"      "c:\windows\system32\sendmail.dll"
+ "Set Program Access and Defaults"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Shell Application Manager"      "Shell Application Manager"      "Microsoft Corporation"      "c:\windows\system32\appwiz.cpl"
+ "Shell Automation Inproc Service"      "Shell Doc Object and Control Library"      "Microsoft Corporation"      "c:\windows\system32\shdocvw.dll"
+ "Shell Band Site Menu"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Shell DeskBar"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Shell DeskBarApp"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Shell DocObject Viewer"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Shell extensions for Microsoft Windows Network objects"      "Network object shell UI"      "Microsoft Corporation"      "c:\windows\system32\ntlanui2.dll"
+ "Shell extensions for sharing"      "Shell extensions for sharing"      "Microsoft Corporation"      "c:\windows\system32\ntshrui.dll"
+ "Shell extensions for sharing"      "Shell extensions for sharing"      "Microsoft Corporation"      "c:\windows\system32\ntshrui.dll"
+ "Shell extensions for Windows Script Host"      "Microsoft (R) Shell Extension for Windows Script Host"      "Microsoft Corporation"      "c:\windows\system32\wshext.dll"
+ "Shell Image Data Factory"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "Shell Image Property Handler"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "Shell Image Verbs"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "Shell properties for a DS object"      "Directory Service Find"      "Microsoft Corporation"      "c:\windows\system32\dsquery.dll"
+ "Shell Publishing Wizard Object"      "Map Network Drives/Network Places Wizard"      "Microsoft Corporation"      "c:\windows\system32\netplwiz.dll"
+ "Shell Rebar BandSite"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Shell Scrap DataHandler"      "Shell scrap object handler"      "Microsoft Corporation"      "c:\windows\system32\shscrap.dll"
+ "Shell Search Band"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Subscription Folder"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Subscription Mgr"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Summary Info Thumbnail handler (DOCFILES)"      "Windows Picture and Fax Viewer"      "Microsoft Corporation"      "c:\windows\system32\shimgvw.dll"
+ "Taskbar and Start Menu"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "Tasks Folder Icon Handler"      "Task Scheduler interface DLL"      "Microsoft Corporation"      "c:\windows\system32\mstask.dll"
+ "Tasks Folder Shell Extension"      "Task Scheduler interface DLL"      "Microsoft Corporation"      "c:\windows\system32\mstask.dll"
+ "Temporary Internet Files"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Temporary Internet Files"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "The Internet"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Track Popup Bar"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "TrayAgent"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "TridentImageExtractor"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "User Accounts"      "Map Network Drives/Network Places Wizard"      "Microsoft Corporation"      "c:\windows\system32\netplwiz.dll"
+ "User Assist"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "Video Media Properties Handler"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "Video Thumbnail Extractor"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "Wav Properties Handler"      "Media File Property Extractor Shell Extension"      "Microsoft Corporation"      "c:\windows\system32\shmedia.dll"
+ "Web Folders"      "Microsoft Web Folders"      "Microsoft Corporation"      "c:\program files\common files\microsoft shared\web folders\msonsext.dll"
+ "Web Printer Shell Extension"      "Print UI DLL"      "Microsoft Corporation"      "c:\windows\system32\printui.dll"
+ "Web Publishing Wizard"      "Map Network Drives/Network Places Wizard"      "Microsoft Corporation"      "c:\windows\system32\netplwiz.dll"
+ "Web Search"      "Shell Browser UI Library"      "Microsoft Corporation"      "c:\windows\system32\browseui.dll"
+ "WebCheck"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "WebCheck SyncMgr Handler"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "WebCheckChannelAgent"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "WebCheckWebCrawler"      "Web Site Monitor"      "Microsoft Corporation"      "c:\windows\system32\webcheck.dll"
+ "Windows Media Player Add to Playlist Context Menu Handler"      "Windows Media Player Launcher"      "Microsoft Corporation"      "c:\windows\system32\wmpshell.dll"
+ "Windows Media Player Burn Audio CD Context Menu Handler"      "Windows Media Player Launcher"      "Microsoft Corporation"      "c:\windows\system32\wmpshell.dll"
+ "Windows Media Player Play as Playlist Context Menu Handler"      "Windows Media Player Launcher"      "Microsoft Corporation"      "c:\windows\system32\wmpshell.dll"
+ "Yahoo! Mail"      "Yahoo! Mail"      "Yahoo! Inc."      "c:\program files\yahoo!\common\ymmapi.dll"
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects"      ""      ""      ""
+ "&Yahoo! Toolbar Helper"      "Yahoo! Toolbar"      "Yahoo! Inc."      "c:\program files\yahoo!\companion\installs\cpn3\yt.dll"
+ "AcroIEHlprObj Class"      "Adobe Acrobat IE Helper Version 7.0 for ActiveX"      "Adobe Systems Incorporated"      "c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll"
+ "Google Toolbar Helper"      "Google IE Client Toolbar"      "Google Inc."      "c:\program files\google\googletoolbar1.dll"
+ "Upromise IE Toolbar"      "upromisetoolbar.dll"      "Upromise, Inc."      "c:\program files\upromise\upromisetoolbar.dll"
+ "Yahoo! IE Services Button"      "Yahoo! IE Services"      "Yahoo! Inc."      "c:\program files\yahoo!\common\yiesrvc.dll"
"HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks"      ""      ""      ""
+ "Microsoft Url Search Hook"      "Internet Explorer"      "Microsoft Corporation"      "c:\windows\system32\ieframe.dll"
+ "Yahoo! Toolbar"      "Yahoo! Toolbar"      "Yahoo! Inc."      "c:\program files\yahoo!\companion\installs\cpn3\yt.dll"
"HKLM\Software\Microsoft\Internet Explorer\Toolbar"      ""      ""      ""
+ "&Google"      "Google IE Client Toolbar"      "Google Inc."      "c:\program files\google\googletoolbar1.dll"
+ "Easy-WebPrint"      "Easy-WebPrint"      ""      "c:\program files\canon\easy-webprint\toolband.dll"
+ "Upromise IE Toolbar"      "upromisetoolbar.dll"      "Upromise, Inc."      "c:\program files\upromise\upromisetoolbar.dll"
+ "Yahoo! Toolbar"      "Yahoo! Toolbar"      "Yahoo! Inc."      "c:\program files\yahoo!\companion\installs\cpn3\yt.dll"
"HKLM\Software\Microsoft\Internet Explorer\Extensions"      ""      ""      ""
+ "Diagnose Connection Problems..."      "Network Diagnostic for Windows XP"      "Microsoft Corporation"      "c:\windows\network diagnostic\xpnetdiag.exe"
+ "Express Cleanup"      ""      ""      "c:\program files\norton systemworks basic edition\norton cleanup\wcquick.lnk"
+ "Windows Messenger"      "Windows Messenger"      "Microsoft Corporation"      "c:\program files\messenger\msmsgs.exe"
"Task Scheduler"      ""      ""      ""
+ "DriverCure.job"      "DriverCure"      "ParetoLogic"      "c:\program files\paretologic\drivercure\drivercure.exe"
+ "Norton Security Scan for Owner.job"      "Norton Security Scan"      "Symantec Corporation"      "c:\program files\norton security scan\engine\2.3.0.44\nss.exe"
+ "Norton SystemWorks One Button Checkup.job"      "One Button Checkup"      "Symantec Corporation"      "c:\program files\norton systemworks basic edition\obc.exe"
+ "ParetoLogic Registration.job"      "ParetoLogic Update Component"      ""      "c:\program files\common files\paretologic\uus2\uus.dll"
+ "ParetoLogic Update Version2.job"      "ParetoLogic Update Application"      ""      "c:\program files\common files\paretologic\uus2\pareto_update.exe"
"HKLM\System\CurrentControlSet\Services"      ""      ""      ""
+ "ALG"      "Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall."      "Microsoft Corporation"      "c:\windows\system32\alg.exe"
+ "AOL ACS"      "AOL Connectivity Service"      "America Online, Inc."      "c:\program files\common files\aol\acs\aolacsd.exe"
+ "Apple Mobile Device"      "Provides the interface to Apple mobile devices."      "Apple Inc."      "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe"
+ "AppMgmt"      "Provides software installation services such as Assign, Publish, and Remove."      ""      "File not found: C:\WINDOWS\System32\appmgmts.dll"
+ "aspnet_state"      "Provides support for out-of-process session states for ASP.NET. If this service is stopped, out-of-process requests will not be processed. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe"
+ "AudioSrv"      "Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\audiosrv.dll"
+ "Automatic LiveUpdate Scheduler"      "Manages the scheduling of Automatic LiveUpdate sessions"      "Symantec Corporation"      "c:\program files\symantec\liveupdate\aluschedulersvc.exe"
+ "BITS"      "Transfers files in the background using idle network bandwidth. If the service is stopped, features such as Windows Update, and MSN Explorer will be unable to automatically download programs and other information. If this service is disabled, any services that explicitly depend on it may fail to transfer files if they do not have a fail safe mechanism to transfer files directly through IE in case BITS has been disabled."      "Microsoft Corporation"      "c:\windows\system32\qmgr.dll"
+ "Bonjour Service"      "Bonjour allows applications like iTunes and Safari to advertise and discover services on the local network.  Having Bonjour running enables you to connect to hardware devices like Apple TV and software services like iTunes sharing and AirTunes. If you disable Bonjour, any network service that explicitly depends on it will fail to start."      "Apple Inc."      "c:\program files\bonjour\mdnsresponder.exe"
+ "Browser"      "Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\browser.dll"
+ "ccEvtMgr"      "Event propagation and logging service"      "Symantec Corporation"      "c:\program files\common files\symantec shared\ccsvchst.exe"
+ "ccSetMgr"      "Settings storage and management service"      "Symantec Corporation"      "c:\program files\common files\symantec shared\ccsvchst.exe"
+ "CiSvc"      "Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language."      "Microsoft Corporation"      "c:\windows\system32\cisvc.exe"
+ "ClipSrv"      "Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\clipsrv.exe"
+ "CLTNetCnService"      "Symantec Lic NetConnect Service"      "Symantec Corporation"      "c:\program files\common files\symantec shared\ccsvchst.exe"
+ "COMSysApp"      "Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\dllhost.exe"
+ "CryptSvc"      "Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\cryptsvc.dll"
+ "DcomLaunch"      "Provides launch functionality for DCOM services."      "Microsoft Corporation"      "c:\windows\system32\rpcss.dll"
+ "Dhcp"      "Manages network configuration by registering and updating IP addresses and DNS names."      "Microsoft Corporation"      "c:\windows\system32\dhcpcsvc.dll"
+ "dmadmin"      "Configures hard disk drives and volumes. The service only runs for configuration processes and then stops."      "Microsoft Corp., Veritas Software"      "c:\windows\system32\dmadmin.exe"
+ "dmserver"      "Detects and monitors new hard disk drives and sends disk volume information to Logical Disk Manager Administrative Service for configuration. If this service is stopped, dynamic disk status and configuration information may become out of date. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corp."      "c:\windows\system32\dmserver.dll"
+ "Dnscache"      "Resolves and caches Domain Name System (DNS) names for this computer. If this service is stopped, this computer will not be able to resolve DNS names and locate Active Directory domain controllers. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\dnsrslvr.dll"
+ "EapHost"      "Provides windows clients Extensible Authentication Protocol Service"      "Microsoft Corporation"      "c:\windows\system32\eapsvc.dll"
+ "ERSvc"      "Allows error reporting for services and applictions running in non-standard environments."      "Microsoft Corporation"      "c:\windows\system32\ersvc.dll"
+ "Eventlog"      "Enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. This service cannot be stopped."      "Microsoft Corporation"      "c:\windows\system32\services.exe"
+ "EventSystem"      "Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\es.dll"
+ "FastUserSwitchingCompatibility"      "Provides management for applications that require assistance in a multiple user environment."      "Microsoft Corporation"      "c:\windows\system32\shsvcs.dll"
+ "Giga Pocket Hardware Detector"      "shwserv Module"      "Sony Corporation"      "c:\program files\sony\giga pocket\shwserv.exe"
+ "gusvc"      "gusvc"      "Google"      "c:\program files\google\common\google updater\googleupdaterservice.exe"
+ "helpsvc"      "Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll"
+ "hkmsvc"      "Manages health certificates and keys (used by NAP)"      "Microsoft Corporation"      "c:\windows\system32\kmsvc.dll"
+ "HTTPFilter"      "This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service,  using the Secure Socket Layer (SSL).  If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\w3ssl.dll"
+ "ImapiService"      "Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\imapi.exe"
+ "iPod Service"      "iPod hardware management services"      "Apple Inc."      "c:\program files\ipod\bin\ipodservice.exe"
+ "lanmanserver"      "Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\srvsvc.dll"
+ "lanmanworkstation"      "Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\wkssvc.dll"
+ "LiveUpdate"      "LiveUpdate Core Engine"      "Symantec Corporation"      "c:\program files\symantec\liveupdate\lucomserver_3_1.exe"
+ "LiveUpdate Notice Ex"      "Manages Norton product notices."      "Symantec Corporation"      "c:\program files\common files\symantec shared\ccsvchst.exe"
+ "LiveUpdate Notice Service"      "Manages Norton product notices"      "Symantec Corporation"      "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe"
+ "LmHosts"      "Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution."      "Microsoft Corporation"      "c:\windows\system32\lmhsvc.dll"
+ "mnmsrvc"      "Enables an authorized user to access this computer remotely by using NetMeeting over a corporate intranet. If this service is stopped, remote desktop sharing will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\mnmsrvc.exe"
+ "MSDTC"      "Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. "      "Microsoft Corporation"      "c:\windows\system32\msdtc.exe"
+ "MSIServer"      "Adds, modifies, and removes applications provided as a Windows Installer (*.msi) package. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\msiexec.exe"
+ "napagent"      "Allows windows clients to participate in Network Access Protection"      "Microsoft Corporation"      "c:\windows\system32\qagentrt.dll"
+ "Netlogon"      "Supports pass-through authentication of account logon events for computers in a domain."      "Microsoft Corporation"      "c:\windows\system32\lsass.exe"
+ "Netman"      "Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections."      "Microsoft Corporation"      "c:\windows\system32\netman.dll"
+ "Nla"      "Collects and stores network configuration and location information, and notifies applications when this information changes."      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "NProtectService"      "Protects files deleted from command line prompt and applications"      "Symantec Corporation"      "c:\program files\norton systemworks basic edition\norton utilities\nprotect.exe"
+ "NtLmSsp"      "Provides security to remote procedure call (RPC) programs that use transports other than named pipes."      "Microsoft Corporation"      "c:\windows\system32\lsass.exe"
+ "NtmsSvc"      "Removable Storage Manager"      "Microsoft Corporation"      "c:\windows\system32\ntmssvc.dll"
+ "ose"      "Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports."      "Microsoft Corporation"      "c:\program files\common files\microsoft shared\source engine\ose.exe"
+ "PDUiP6000DMemCrdMgr"      "Manage the removable drive on Canon BJ printers."      "CANON INC."      "c:\program files\canon\memory card utility\pixma ip6000d\pduip6000dmemcrdmgr.exe"
+ "PlugPlay"      "Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability."      "Microsoft Corporation"      "c:\windows\system32\services.exe"
+ "PolicyAgent"      "Manages IP security policy and starts the ISAKMP/Oakley (IKE) and the IP security driver."      "Microsoft Corporation"      "c:\windows\system32\lsass.exe"
+ "ProtectedStorage"      "Provides protected storage for sensitive data, such as private keys, to prevent access by unauthorized services, processes, or users."      "Microsoft Corporation"      "c:\windows\system32\lsass.exe"
+ "RasAuto"      "Creates a connection to a remote network whenever a program references a remote DNS or NetBIOS name or address."      "Microsoft Corporation"      "c:\windows\system32\rasauto.dll"
+ "RasMan"      "Creates a network connection."      "Microsoft Corporation"      "c:\windows\system32\rasmans.dll"
+ "RDSessMgr"      "Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box."      "Microsoft Corporation"      "c:\windows\system32\sessmgr.exe"
+ "RpcLocator"      "Manages the RPC name service database."      "Microsoft Corporation"      "c:\windows\system32\locator.exe"
+ "RpcSs"      "Provides the endpoint mapper and other miscellaneous RPC services."      "Microsoft Corporation"      "c:\windows\system32\rpcss.dll"
+ "RSVP"      "Provides network signaling and local traffic control setup functionality for QoS-aware programs and control applets."      "Microsoft Corporation"      "c:\windows\system32\rsvp.exe"
+ "SamSs"      "Stores security information for local user accounts."      "Microsoft Corporation"      "c:\windows\system32\lsass.exe"
+ "SCardSvr"      "Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\scardsvr.exe"
+ "Schedule"      "Enables a user to configure and schedule automated tasks on this computer. If this service is stopped, these tasks will not be run at their scheduled times. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\schedsvc.dll"
+ "seclogon"      "Enables starting processes under alternate credentials. If this service is stopped, this type of logon access will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\seclogon.dll"
+ "SENS"      "Tracks system events such as Windows logon, network, and power events.  Notifies COM+ Event System subscribers of these events."      "Microsoft Corporation"      "c:\windows\system32\sens.dll"
+ "SharedAccess"      "Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network."      "Microsoft Corporation"      "c:\windows\system32\ipnathlp.dll"
+ "ShellHWDetection"      "Provides notifications for AutoPlay hardware events."      "Microsoft Corporation"      "c:\windows\system32\shsvcs.dll"
+ "Sony TV Tuner Controller"      "SGPHAL_SV Module"      "Sony Corporation"      "c:\program files\sony\giga pocket\halsv.exe"
+ "Sony TV Tuner Manager"      "RM_SV Module"      "Sony Corporation"      "c:\program files\sony\giga pocket\rm_sv.exe"
+ "Speed Disk service"      "Used to schedule disk defragmentation"      "Symantec Corporation"      "c:\program files\norton systemworks basic edition\norton utilities\speed disk\nopdb.exe"
+ "Spooler"      "Loads files to memory for later printing."      "Microsoft Corporation"      "c:\windows\system32\spoolsv.exe"
+ "srservice"      "Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties"      "Microsoft Corporation"      "c:\windows\system32\srsvc.dll"
+ "SSDPSRV"      "Enables discovery of UPnP devices on your home network."      "Microsoft Corporation"      "c:\windows\system32\ssdpsrv.dll"
+ "stisvc"      "Provides image acquisition services for scanners and cameras."      "Microsoft Corporation"      "c:\windows\system32\wiaservc.dll"
+ "SwPrv"      "Manages software-based volume shadow copies taken by the Volume Shadow Copy service. If this service is stopped, software-based volume shadow copies cannot be managed. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\dllhost.exe"
+ "Symantec Core LC"      "Symantec Core LC"      "Symantec Corporation"      "c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe"
+ "SymAppCore"      "Symantec Application Service"      "Symantec Corporation"      "c:\program files\common files\symantec shared\appcore\appsvc32.exe"
+ "SysmonLog"      "Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\smlogsvc.exe"
+ "TapiSrv"      "Provides Telephony API (TAPI) support for programs that control telephony devices and IP based voice connections on the local computer and, through the LAN, on servers that are also running the service."      "Microsoft Corporation"      "c:\windows\system32\tapisrv.dll"
+ "TermService"      "Allows multiple users to be connected interactively to a machine as well as the display of desktops and applications to remote computers. The underpinning of Remote Desktop (including RD for Administrators), Fast User Switching, Remote Assistance, and Terminal Server."      "Microsoft Corporation"      "c:\windows\system32\termsrv.dll"
+ "Themes"      "Provides user experience theme management."      "Microsoft Corporation"      "c:\windows\system32\shsvcs.dll"
+ "TrkWks"      "Maintains links between NTFS files within a computer or across computers in a network domain."      "Microsoft Corporation"      "c:\windows\system32\trkwks.dll"
+ "upnphost"      "Provides support to host Universal Plug and Play devices."      "Microsoft Corporation"      "c:\windows\system32\upnphost.dll"
+ "UPS"      "Manages an uninterruptible power supply (UPS) connected to the computer."      "Microsoft Corporation"      "c:\windows\system32\ups.exe"
+ "usnjsvc"      "Service installed by Messenger to enable sharing scenarios"      "Microsoft Corporation"      "c:\program files\msn messenger\usnsvc.exe"
+ "VAIO Entertainment Aggregation and Control Service"      "VAIO Entertainment Remote Service"      "Sony Corporation"      "c:\program files\common files\sony shared\vaio entertainment\vzrs\vzrs.exe"
+ "VAIO Entertainment File Import Service"      "VAIO Entertainment File Import Service"      "Sony Corporation"      "c:\program files\common files\sony shared\vaio entertainment\vzcdb\vzfw.exe"
+ "VAIO Entertainment TV Device Arbitration Service"      "Hardware Resource Manager"      "Sony Corporation"      "c:\program files\common files\sony shared\vaio entertainment\vzcs\vzhardwareresourcemanager\vzhardwareresourcemanager.exe"
+ "VAIO Entertainment UPnP Client Adapter"      "UPnP Client"      "Sony Corporation"      "c:\program files\common files\sony shared\vaio entertainment\vcsw\vcsw.exe"
+ "VAIOMediaPlatform-IntegratedServer-AppServer"      "VAIO Media Integrated Server"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\vmisrv.exe"
+ "VAIOMediaPlatform-IntegratedServer-HTTP"      "Sony HTTP Server"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\platform\sv_httpd.exe"
+ "VAIOMediaPlatform-IntegratedServer-UPnP"      "Sony UPnP Framework"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\platform\upnpframework.exe"
+ "VAIOMediaPlatform-Mobile-Gateway"      "VAIO Media Gateway Server"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\platform\vmgateway.exe"
+ "VAIOMediaPlatform-VideoServer-AppServer"      "VAIO Media Video Server"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\video\gpvsvr.exe"
+ "VAIOMediaPlatform-VideoServer-HTTP"      "Sony HTTP Server"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\platform\sv_httpd.exe"
+ "VAIOMediaPlatform-VideoServer-UPnP"      "Sony UPnP Framework"      "Sony Corporation"      "c:\program files\sony\vaio media integrated server\platform\upnpframework.exe"
+ "VSS"      "Manages and implements Volume Shadow Copies used for backup and other purposes. If this service is stopped, shadow copies will be unavailable for backup and the backup may fail. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\vssvc.exe"
+ "W32Time"      "Maintains date and time synchronization on all clients and servers in the network. If this service is stopped, date and time synchronization will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\w32time.dll"
+ "WebClient"      "Enables Windows-based programs to create, access, and modify Internet-based files. If this service is stopped, these functions will not be available. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\webclnt.dll"
+ "winmgmt"      "Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\wbem\wmisvc.dll"
+ "WmdmPmSN"      "Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device."      "Microsoft Corporation"      "c:\windows\system32\mspmsnsv.dll"
+ "WmiApSrv"      "Provides performance library information from WMI HiPerf providers."      "Microsoft Corporation"      "c:\windows\system32\wbem\wmiapsrv.exe"
+ "wuauserv"      "Enables the download and installation of Windows updates. If this service is disabled, this computer will not be able to use the Automatic Updates feature or the Windows Update Web site."      "Microsoft Corporation"      "c:\windows\system32\wuauserv.dll"
+ "WZCSVC"      "Provides automatic configuration for the 802.11 adapters"      "Microsoft Corporation"      "c:\windows\system32\wzcsvc.dll"
+ "xmlprov"      "Manages XML configuration files on a domain basis for automatic network provisioning."      "Microsoft Corporation"      "c:\windows\system32\xmlprov.dll"
"HKLM\System\CurrentControlSet\Services"      ""      ""      ""
+ "ACPI"      "ACPI Driver for NT"      "Microsoft Corporation"      "c:\windows\system32\drivers\acpi.sys"
+ "aec"      "Microsoft Acoustic Echo Canceller"      "Microsoft Corporation"      "c:\windows\system32\drivers\aec.sys"
+ "AFD"      "AFD Networking Support Environment"      "Microsoft Corporation"      "c:\windows\system32\drivers\afd.sys"
+ "Arp1394"      "1394 ARP Client Protocol"      "Microsoft Corporation"      "c:\windows\system32\drivers\arp1394.sys"
+ "ASCTRM"      "TR Manager"      "Windows (R) 2000 DDK provider"      "c:\windows\system32\drivers\asctrm.sys"
+ "AsyncMac"      "RAS Asynchronous Media Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\asyncmac.sys"
+ "atapi"      "IDE/ATAPI Port Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\atapi.sys"
+ "Atmarpc"      "ATM ARP Client Protocol"      "Microsoft Corporation"      "c:\windows\system32\drivers\atmarpc.sys"
+ "audstub"      "AudStub Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\audstub.sys"
+ "Beep"      "BEEP Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\beep.sys"
+ "catchme"      ""      ""      "File not found: C:\WINDOWS\TEMP\catchme.sys"
+ "CCDECODE"      "WDM Closed Caption VBI Codec"      "Microsoft Corporation"      "c:\windows\system32\drivers\ccdecode.sys"
+ "Cdaudio"      "CD-ROM Audio Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\cdaudio.sys"
+ "Cdrom"      "SCSI CD-ROM Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\cdrom.sys"
+ "Changer"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\Changer.sys"
+ "Disk"      "PnP Disk Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\disk.sys"
+ "DMICall"      "Windows 2000 DMI Call Kernel Driver"      "Sony Corporation"      "c:\windows\system32\drivers\dmicall.sys"
+ "DMusic"      "Microsoft Kernel DLS Synthesizer"      "Microsoft Corporation"      "c:\windows\system32\drivers\dmusic.sys"
+ "drmkaud"      "Microsoft Kernel DRM Audio Descrambler Filter"      "Microsoft Corporation"      "c:\windows\system32\drivers\drmkaud.sys"
+ "E100B"      "Intel(R) PRO/100 Adapter NDIS 5.1 driver"      "Intel Corporation"      "c:\windows\system32\drivers\e100b325.sys"
+ "Fdc"      "Floppy Disk Controller Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\fdc.sys"
+ "Fips"      "FIPS Crypto Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\fips.sys"
+ "Flpydisk"      "Floppy Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\flpydisk.sys"
+ "FltMgr"      "File System Filter Manager Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\fltmgr.sys"
+ "Ftdisk"      "FT Disk Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ftdisk.sys"
+ "GEARAspiWDM"      "CD DVD Filter"      "GEAR Software Inc."      "c:\windows\system32\drivers\gearaspiwdm.sys"
+ "Gpc"      "Generic Packet Classifier"      "Microsoft Corporation"      "c:\windows\system32\drivers\msgpc.sys"
+ "HdAudAddService"      "High Definition Audio Function Driver v1.0"      "Windows (R) Server 2003 DDK provider"      "c:\windows\system32\drivers\hdaudio.sys"
+ "HDAudBus"      "High Definition Audio Bus Driver v1.0a"      "Windows (R) Server 2003 DDK provider"      "c:\windows\system32\drivers\hdaudbus.sys"
+ "HidUsb"      "USB Miniport Driver for Input Devices"      "Microsoft Corporation"      "c:\windows\system32\drivers\hidusb.sys"
+ "HSF_DP"      "HSF_DP driver"      "Conexant Systems, Inc."      "c:\windows\system32\drivers\hsf_dp.sys"
+ "HSFHWAZL"      "HSF_HWAZL WDM driver"      "Conexant Systems, Inc."      "c:\windows\system32\drivers\hsfhwazl.sys"
+ "HTTP"      "This service implements the hypertext transfer protocol (HTTP). If this service is disabled, any services that explicitly depend on it will fail to start."      "Microsoft Corporation"      "c:\windows\system32\drivers\http.sys"
+ "i2omgmt"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\i2omgmt.sys"
+ "i8042prt"      "i8042 Port Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\i8042prt.sys"
+ "ialm"      "Intel Graphics Miniport Driver"      "Intel Corporation"      "c:\windows\system32\drivers\ialmnt5.sys"
+ "Imapi"      "IMAPI Kernel Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\imapi.sys"
+ "IntcAzAudAddService"      "Realtek(r) High Definition Audio Function Driver"      "Realtek Semiconductor Corp."      "c:\windows\system32\drivers\rtkhdaud.sys"
+ "IntelIde"      "Intel PCI IDE Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\intelide.sys"
+ "intelppm"      "Processor Device Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\intelppm.sys"
+ "Ip6Fw"      "Provides intrusion prevention service for a home or small office network."      "Microsoft Corporation"      "c:\windows\system32\drivers\ip6fw.sys"
+ "IpFilterDriver"      "IP Traffic Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ipfltdrv.sys"
+ "IpInIp"      "IP in IP Tunnel Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ipinip.sys"
+ "IpNat"      "IP Network Address Translator"      "Microsoft Corporation"      "c:\windows\system32\drivers\ipnat.sys"
+ "IPSec"      "IPSEC driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ipsec.sys"
+ "IPVNMon"      "IPVNMon"      "Visual Networks"      "c:\windows\system32\drivers\ipvnmon.sys"
+ "IRENUM"      "Infra-Red Bus Enumerator"      "Microsoft Corporation"      "c:\windows\system32\drivers\irenum.sys"
+ "isapnp"      "PNP ISA Bus Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\isapnp.sys"
+ "Kbdclass"      "Keyboard Class Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\kbdclass.sys"
+ "kmixer"      "Kernel Mode Audio Mixer"      "Microsoft Corporation"      "c:\windows\system32\drivers\kmixer.sys"
+ "KSecDD"      "Kernel Security Support Provider Interface"      "Microsoft Corporation"      "c:\windows\system32\drivers\ksecdd.sys"
+ "kymvuumt"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\kymvuumt.sys"
+ "lbrtfdc"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\lbrtfdc.sys"
+ "mdmxsdk"      "Diagnostic Interface DRIVER"      "Conexant"      "c:\windows\system32\drivers\mdmxsdk.sys"
+ "mnmdd"      "Frame buffer simulator"      "Microsoft Corporation"      "c:\windows\system32\drivers\mnmdd.sys"
+ "Modem"      "Modem Device Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\modem.sys"
+ "Mouclass"      "Mouse Class Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\mouclass.sys"
+ "mouhid"      "HID Mouse Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\mouhid.sys"
+ "MountMgr"      "Mount Manager"      "Microsoft Corporation"      "c:\windows\system32\drivers\mountmgr.sys"
+ "MRxDAV"      "WebDav Client Redirector"      "Microsoft Corporation"      "c:\windows\system32\drivers\mrxdav.sys"
+ "MRxSmb"      "MRXSMB"      "Microsoft Corporation"      "c:\windows\system32\drivers\mrxsmb.sys"
+ "Msfs"      "Mailslot driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\msfs.sys"
+ "MSKSSRV"      "MS KS Server"      "Microsoft Corporation"      "c:\windows\system32\drivers\mskssrv.sys"
+ "MSPCLOCK"      "MS Proxy Clock"      "Microsoft Corporation"      "c:\windows\system32\drivers\mspclock.sys"
+ "MSPQM"      "MS Proxy Quality Manager"      "Microsoft Corporation"      "c:\windows\system32\drivers\mspqm.sys"
+ "mssmbios"      "System Management BIOS Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\mssmbios.sys"
+ "MSTEE"      "WDM Tee/Communication Transform Filter "      "Microsoft Corporation"      "c:\windows\system32\drivers\mstee.sys"
+ "Mup"      "Multiple UNC Provider driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\mup.sys"
+ "NABTSFEC"      "WDM NABTS/FEC VBI Codec"      "Microsoft Corporation"      "c:\windows\system32\drivers\nabtsfec.sys"
+ "NDIS"      "NDIS 5.1 wrapper driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndis.sys"
+ "NdisIP"      "Microsoft IP Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndisip.sys"
+ "NdisTapi"      "Remote Access NDIS TAPI Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndistapi.sys"
+ "Ndisuio"      "NDIS Usermode I/O Protocol"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndisuio.sys"
+ "NdisWan"      "Remote Access NDIS WAN Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndiswan.sys"
+ "NDProxy"      "NDIS Proxy"      "Microsoft Corporation"      "c:\windows\system32\drivers\ndproxy.sys"
+ "NetBIOS"      "NetBIOS Interface"      "Microsoft Corporation"      "c:\windows\system32\drivers\netbios.sys"
+ "NetBT"      "NetBios over Tcpip"      "Microsoft Corporation"      "c:\windows\system32\drivers\netbt.sys"
+ "NIC1394"      "IEEE1394 Ndis Miniport and Call Manager"      "Microsoft Corporation"      "c:\windows\system32\drivers\nic1394.sys"
+ "NPDriver"      "Norton Protection Driver"      "Symantec Corporation"      "c:\windows\system32\drivers\npdriver.sys"
+ "Npfs"      "NPFS Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\npfs.sys"
+ "Null"      "NULL Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\null.sys"
+ "NwlnkFlt"      "IPX Traffic Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\nwlnkflt.sys"
+ "NwlnkFwd"      "IPX Traffic Forwarder Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\nwlnkfwd.sys"
+ "ohci1394"      "1394 OpenHCI Port Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\ohci1394.sys"
+ "Parport"      "Parallel Port Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\parport.sys"
+ "PartMgr"      "Partition Manager"      "Microsoft Corporation"      "c:\windows\system32\drivers\partmgr.sys"
+ "PCI"      "NT Plug and Play PCI Enumerator"      "Microsoft Corporation"      "c:\windows\system32\drivers\pci.sys"
+ "PCIDump"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\PCIDump.sys"
+ "PCIIde"      "Generic PCI IDE Bus Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\pciide.sys"
+ "PDCOMP"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\PDCOMP.sys"
+ "PDFRAME"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\PDFRAME.sys"
+ "PDRELI"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\PDRELI.sys"
+ "PDRFRAME"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\PDRFRAME.sys"
+ "pfc"      "Padus(R) ASPI Shell"      "Padus, Inc."      "c:\windows\system32\drivers\pfc.sys"
+ "PptpMiniport"      "WAN Miniport (PPTP)"      "Microsoft Corporation"      "c:\windows\system32\drivers\raspptp.sys"
+ "PSched"      "QoS Packet Scheduler"      "Microsoft Corporation"      "c:\windows\system32\drivers\psched.sys"
+ "Ptilink"      "Direct Parallel Link Driver"      "Parallel Technologies, Inc."      "c:\windows\system32\drivers\ptilink.sys"
+ "PxHelp20"      "Px Engine Device Driver for Windows 2000/XP"      "Sonic Solutions"      "c:\windows\system32\drivers\pxhelp20.sys"
+ "RasAcd"      "Remote Access Auto Connection Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\rasacd.sys"
+ "Rasl2tp"      "WAN Miniport (L2TP)"      "Microsoft Corporation"      "c:\windows\system32\drivers\rasl2tp.sys"
+ "RasPppoe"      "Remote Access PPPOE Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\raspppoe.sys"
+ "Raspti"      "Direct Parallel"      "Microsoft Corporation"      "c:\windows\system32\drivers\raspti.sys"
+ "Rdbss"      "Rdbss"      "Microsoft Corporation"      "c:\windows\system32\drivers\rdbss.sys"
+ "RDPCDD"      "RDP Miniport"      "Microsoft Corporation"      "c:\windows\system32\drivers\rdpcdd.sys"
+ "RDPWD"      "RDP Terminal Stack Driver (US/Canada Only, Not for Export)"      "Microsoft Corporation"      "c:\windows\system32\drivers\rdpwd.sys"
+ "redbook"      "Redbook Audio Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\redbook.sys"
+ "SASDIFSV"      "SASDIFSV.SYS"      "SUPERAdBlocker.com and SUPERAntiSpyware.com"      "c:\program files\superantispyware\sasdifsv.sys"
+ "SASENUM"      "SASENUM.SYS"      " SUPERAdBlocker.com and SUPERAntiSpyware.com"      "c:\program files\superantispyware\sasenum.sys"
+ "SASKUTIL"      "SASKUTIL.SYS"      "SUPERAdBlocker.com and SUPERAntiSpyware.com"      "c:\program files\superantispyware\saskutil.sys"
+ "SDdriver"      "SDDRIVER"      "Symantec Corporation"      "c:\windows\system32\drivers\sddriver.sys"
+ "Secdrv"      "SafeDisc driver"      "Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K."      "c:\windows\system32\drivers\secdrv.sys"
+ "Serial"      "Serial Device Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\serial.sys"
+ "Sfloppy"      "SCSI Floppy Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\sfloppy.sys"
+ "SLIP"      "Microsoft Slip Deframing Filter Minidriver"      "Microsoft Corporation"      "c:\windows\system32\drivers\slip.sys"
+ "smrt"      "Sony MPEG RealTime encoder board"      "Sony Corporation"      "c:\windows\system32\drivers\smrt.sys"
+ "SPBBCDrv"      "SPBBC Driver"      "Symantec Corporation"      "c:\program files\common files\symantec shared\spbbc\spbbcdrv.sys"
+ "splitter"      "Microsoft Kernel Audio Splitter"      "Microsoft Corporation"      "c:\windows\system32\drivers\splitter.sys"
+ "sr"      "System Restore Filesystem Filter Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\sr.sys"
+ "Srv"      "Srv"      "Microsoft Corporation"      "c:\windows\system32\drivers\srv.sys"
+ "streamip"      "Microsoft IP Test Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\streamip.sys"
+ "swenum"      "Plug and Play Software Device Enumerator"      "Microsoft Corporation"      "c:\windows\system32\drivers\swenum.sys"
+ "swmidi"      "Microsoft GS Wavetable Synthesizer"      "Microsoft Corporation"      "c:\windows\system32\drivers\swmidi.sys"
+ "SymEvent"      "Symantec Event Library"      "Symantec Corporation"      "c:\windows\system32\drivers\symevent.sys"
+ "symlcbrd"      "Symantec Core Component"      "Symantec Corporation"      "c:\windows\system32\drivers\symlcbrd.sys"
+ "sysaudio"      "System Audio WDM Filter"      "Microsoft Corporation"      "c:\windows\system32\drivers\sysaudio.sys"
+ "Tcpip"      "TCP/IP Protocol Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\tcpip.sys"
+ "TDPIPE"      "Named Pipe Transport Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\tdpipe.sys"
+ "TDTCP"      "TCP Transport Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\tdtcp.sys"
+ "TermDD"      "Terminal Server Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\termdd.sys"
+ "Update"      "Update Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\update.sys"
+ "USBAAPL"      "Apple Mobile Device USB Driver"      "Apple, Inc."      "c:\windows\system32\drivers\usbaapl.sys"
+ "usbccgp"      "USB Common Class Generic Parent Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbccgp.sys"
+ "usbehci"      "EHCI eUSB Miniport Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbehci.sys"
+ "usbhub"      "Default Hub Driver for USB"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbhub.sys"
+ "usbprint"      "USB Printer driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbprint.sys"
+ "usbscan"      "USB Scanner Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbscan.sys"
+ "usbstor"      "USB Mass Storage Class Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbstor.sys"
+ "usbuhci"      "UHCI USB Miniport Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\usbuhci.sys"
+ "V0060VID"      "Video streaming and capture driver"      "Creative Technology Ltd."      "c:\windows\system32\drivers\v0060vid.sys"
+ "VgaSave"      "VGA/Super VGA Video Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\vga.sys"
+ "VolSnap"      "Volume Shadow Copy Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\volsnap.sys"
+ "Wanarp"      "Remote Access IP ARP Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\wanarp.sys"
+ "wanatw"      "Wan Miniport (ATW)"      "America Online, Inc."      "c:\windows\system32\drivers\wanatw4.sys"
+ "WDICA"      ""      ""      "File not found: C:\WINDOWS\System32\Drivers\WDICA.sys"
+ "wdmaud"      "MMSYSTEM Wave/Midi API mapper"      "Microsoft Corporation"      "c:\windows\system32\drivers\wdmaud.sys"
+ "winachsf"      "HSF_CNXT driver"      "Conexant Systems, Inc."      "c:\windows\system32\drivers\hsf_cnxt.sys"
+ "WSTCODEC"      "WDM WST Codec Driver"      "Microsoft Corporation"      "c:\windows\system32\drivers\wstcodec.sys"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32"      ""      ""      ""
+ "aux"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "aux1"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "midi"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "midi1"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "midimapper"      "Microsoft MIDI Mapper"      "Microsoft Corporation"      "c:\windows\system32\midimap.dll"
+ "mixer"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "mixer1"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "msacm.iac2"      "Indeo® audio software"      "Intel Corporation"      "c:\windows\system32\iac25_32.ax"
+ "msacm.imaadpcm"      "IMA ADPCM CODEC for MSACM"      "Microsoft Corporation"      "c:\windows\system32\imaadp32.acm"
+ "msacm.l3acm"      "MPEG Layer-3 Audio Codec for MSACM"      "Fraunhofer Institut Integrierte Schaltungen IIS"      "c:\windows\system32\l3codeca.acm"
+ "msacm.msadpcm"      "Microsoft ADPCM CODEC for MSACM"      "Microsoft Corporation"      "c:\windows\system32\msadp32.acm"
+ "msacm.msaudio1"      "Windows Media Audio"      "Microsoft Corporation"      "c:\windows\system32\msaud32.acm"
+ "msacm.msg711"      "Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM"      "Microsoft Corporation"      "c:\windows\system32\msg711.acm"
+ "msacm.msg723"      "Microsoft G.723.1 CODEC for MSACM"      "Microsoft Corporation"      "c:\windows\system32\msg723.acm"
+ "msacm.msgsm610"      "Microsoft GSM 6.10 Audio CODEC for MSACM"      "Microsoft Corporation"      "c:\windows\system32\msgsm32.acm"
+ "msacm.siren"      "Messenger Audio Codec"      "Microsoft Corp."      "c:\windows\system32\sirenacm.dll"
+ "msacm.sl_anet"      "Audio codec for MS ACM"      "Sipro Lab Telecom Inc."      "c:\windows\system32\sl_anet.acm"
+ "msacm.trspch"      "DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50"      "DSP GROUP, INC."      "c:\windows\system32\tssoft32.acm"
+ "MSVideo8"      "VfW MM Driver for WDM Video Capture Devices"      "Microsoft Corporation"      "c:\windows\system32\vfwwdm32.dll"
+ "vidc.cvid"      "Cinepak® Codec"      "Radius Inc."      "c:\windows\system32\iccvid.dll"
+ "VIDC.dvsd"      "Video for Windows driver for DV"      "Sony Corporation"      "c:\program files\common files\sony shared\videolib\sonydv.dll"
+ "VIDC.I420"      "Microsoft H.263 ICM Driver"      "Microsoft Corporation"      "c:\windows\system32\msh263.drv"
+ "vidc.iv31"      ""      ""      "c:\windows\system32\ir32_32.dll"
+ "vidc.iv32"      ""      ""      "c:\windows\system32\ir32_32.dll"
+ "vidc.iv41"      "Intel Indeo® Video 4.5"      "Intel Corporation"      "c:\windows\system32\ir41_32.ax"
+ "vidc.iv50"      "Intel Indeo® video 5.10"      "Intel Corporation"      "c:\windows\system32\ir50_32.dll"
+ "VIDC.IYUV"      "Intel Indeo(R) Video YUV Codec"      "Microsoft Corporation"      "c:\windows\system32\iyuv_32.dll"
+ "vidc.M261"      "Microsoft H.261 ICM Driver"      "Microsoft Corporation"      "c:\windows\system32\msh261.drv"
+ "vidc.M263"      "Microsoft H.263 ICM Driver"      "Microsoft Corporation"      "c:\windows\system32\msh263.drv"
+ "vidc.mrle"      "Microsoft RLE Compressor"      "Microsoft Corporation"      "c:\windows\system32\msrle32.dll"
+ "vidc.msvc"      "Microsoft Video 1 Compressor"      "Microsoft Corporation"      "c:\windows\system32\msvidc32.dll"
+ "VIDC.UYVY"      "Microsoft UYVY Video Decompressor"      "Microsoft Corporation"      "c:\windows\system32\msyuv.dll"
+ "VIDC.YUY2"      "Microsoft UYVY Video Decompressor"      "Microsoft Corporation"      "c:\windows\system32\msyuv.dll"
+ "VIDC.YVU9"      "Toshiba Video Codec"      "Microsoft Corporation"      "c:\windows\system32\tsbyuv.dll"
+ "VIDC.YVYU"      "Microsoft UYVY Video Decompressor"      "Microsoft Corporation"      "c:\windows\system32\msyuv.dll"
+ "wave"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "wave1"      "WDM Audio driver mapper"      "Microsoft Corporation"      "c:\windows\system32\wdmaud.drv"
+ "wavemapper"      "Microsoft Sound Mapper"      "Microsoft Corporation"      "c:\windows\system32\msacm32.drv"
"HKLM\Software\Classes\Filter"      ""      ""      ""
+ "Indeo® video 4.4 Compression Filter"      "Intel Indeo® Video 4.5"      "Intel Corporation"      "c:\windows\system32\ir41_32.ax"
+ "Indeo® video 4.4 Decompression Filter"      "Intel Indeo® Video 4.5"      "Intel Corporation"      "c:\windows\system32\ir41_32.ax"
+ "Sony MPEG2 TS Splitter Ex"      ""      "Sony Corporation"      "c:\program files\common files\sony shared\videolib\tssplt_s.ax"
"HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance"      ""      ""      ""
+ ".RAM Parser"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "9x8Resize"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "AC3 Parser Filter"      "DirectShow MPEG-2 Splitter."      "Microsoft Corporation"      "c:\windows\system32\mpg2splt.ax"
+ "ACELP.net Audio Decoder"      "ACELP.net Audio Decoder"      "Sipro Lab Telecom Inc."      "c:\windows\system32\acelpdec.ax"
+ "ACM Wrapper"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Allocator Fix"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "Arcsoft MPEG Audio Decoder"      "Arcsoft Mpeg Audio Decoder"      "Arcsoft Inc."      "c:\program files\arcsoft\videoimpression 2\mpgaudio.ax"
+ "Arcsoft Mpeg Encoder Filter"      "Arcsoft Mpeg Encoder Filter"      "Arcsoft"      "c:\program files\arcsoft\videoimpression 2\mpegcodecfilter.ax"
+ "Arcsoft MPEG Video Decoder"      "Arcsoft Mpeg Video Decoder Filter"      "Arcsoft Inc."      "c:\program files\arcsoft\videoimpression 2\mpgvideo.ax"
+ "Arcsoft MPEG1 Splitter"      "MPGSplitter Filter"      "Arcsoft Co. (hangzhou, PRC)"      "c:\program files\arcsoft\videoimpression 2\arcspl.ax"
+ "Arcsoft Source Buffer Filter"      "ScrBufferFilter(For Test)"      "ArcSoft Inc."      "c:\program files\arcsoft\videoimpression 2\srcbuffer.ax"
+ "ASF ACM Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF Animation Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF DIB Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF DJPEG Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF ICM Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF JPEG Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASF URL Handler"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASX File Parser"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "ASX v.2 File Parser"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "AVI Decompressor"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "AVI Draw Filter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "AVI frame grabber"      "CTFrameGrabber filter"      "Creative Technology Ltd"      "c:\program files\creative\creative webcam live! ultra\webcam center\ctframegrabber.ax"
+ "AVI mux"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qcap.dll"
+ "AVI Splitter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "AVI/WAV File Source"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Bitmap"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "Color Space Converter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Conexant Color Format Converter"      ""      ""      "c:\program files\sony\giga pocket\colorconvert.ax"
+ "Creative Effects Filter"      "Creative Custom DirectShow Filter for Video Effects"      "Creative Technology Ltd."      "c:\program files\creative\creative webcam live! ultra\webcam center\cteffectsfilter.ax"
+ "Default Video Renderer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "DirectShow Tap"      "Sonic DirectShow Tap Filter"      "Sonic Solutions"      "c:\program files\sony\click to dvd 2\directshowtap.ax"
+ "DV Muxer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdv.dll"
+ "DV Splitter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdv.dll"
+ "DV Video Decoder"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdv.dll"
+ "DVD Navigator"      "DirectShow DVD PlayBack Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdvd.dll"
+ "File Source (Async.)"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "File Source (URL)"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "File stream renderer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "File Writer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qcap.dll"
+ "FilmRoll Generate Filter"      "FRGen"      "Sony Corporation"      "c:\program files\sony\giga pocket\frgen.ax"
+ "Frame Eater"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "Full Screen Renderer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "G.711 Codec"      "Intel G711 CODEC"      "Microsoft Corporation"      "c:\windows\system32\g711codc.ax"
+ "GraphicEq"      "Graphic Equalizer Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\graphiceq.ax"
+ "HTTP Source (Async)"      "HTTP source filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\httpsrcflt.ax"
+ "HTTP Video Source (Async)"      "VAIO Media Video Source Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\httpvsrc.ax"
+ "Indeo® audio software"      "Indeo® audio software"      "Intel Corporation"      "c:\windows\system32\iac25_32.ax"
+ "Indeo® video 5.10 Compression Filter"      "Intel Indeo® video 5.10"      "Intel Corporation"      "c:\windows\system32\ir50_32.dll"
+ "Indeo® video 5.10 Decompression Filter"      "Intel Indeo® video 5.10"      "Intel Corporation"      "c:\windows\system32\ir50_32.dll"
+ "Index Converter"      ""      ""      "c:\program files\sony\giga pocket\indexconverter.ax"
+ "Infinite Pin Tee Filter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qcap.dll"
+ "Internal Text Renderer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "InterVideo Audio Decoder"      "IVIAUDIO"      "InterVideo Inc."      "c:\program files\intervideo\common\bin\iviaudio.ax"
+ "InterVideo Audio Processor"      ""      ""      "c:\program files\intervideo\common\bin\iviaudioprocess.ax"
+ "InterVideo Navigator"      "IVINAV"      "InterVideo Inc."      "c:\program files\intervideo\common\bin\ivinav.ax"
+ "InterVideo Video Decoder"      "IVIVIDEO"      " InterVideo Inc."      "c:\program files\intervideo\common\bin\ivivideo.ax"
+ "Line 21 Decoder"      "DirectShow DVD PlayBack Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdvd.dll"
+ "Line 21 Decoder 2"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Microsoft MPEG-4 Video Decompressor"      "Microsoft MPEG-4 Video Decompressor"      "Microsoft Corporation"      "c:\windows\system32\mpg4ds32.ax"
+ "Microsoft Screen Video Decompressor"      "Microsoft Screen Video Decompressor"      "Microsoft Corporation"      "c:\windows\system32\msscds32.ax"
+ "MIDI Parser"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "MJPEG Decompressor"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "MPEG Audio Codec"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "MPEG Layer-3 Decoder"      "MPEG Layer-3 Audio Decoder"      "Fraunhofer Institut Integrierte Schaltungen IIS"      "c:\windows\system32\l3codecx.ax"
+ "MPEG Video Codec"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "MPEG-2 Demultiplexer"      "DirectShow MPEG-2 Splitter."      "Microsoft Corporation"      "c:\windows\system32\mpg2splt.ax"
+ "MPEG-2 Splitter"      "DirectShow MPEG-2 Splitter."      "Microsoft Corporation"      "c:\windows\system32\mpg2splt.ax"
+ "Mpeg-2 Video Stream Analysis"      "DirectShow Stream Buffer Filter."      "Microsoft Corporation"      "c:\windows\system32\sbe.dll"
+ "MPEG-I Stream Splitter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Multi-file Parser"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "NSC File Parser"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "Null Renderer"      "DirectShow Editing."      "Microsoft Corporation"      "c:\windows\system32\qedit.dll"
+ "OMG TRANSFORM"      "OmgTransform Filter "      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\omgtrans.ax"
+ "OmgPushSrc"      ""      ""      "c:\program files\common files\sony shared\openmg\omgpushsrc.ax"
+ "OpenMG Async. File Source"      "OpenMG Async. File Source"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\omgafs.ax"
+ "OpenMG Audio Decrypt"      "OpenMG Decrypt Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\omgdec.ax"
+ "OpenMG OmgSource Filter"      "OpenMG OmgSource Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\omgsrc.ax"
+ "Overlay Mixer"      "DirectShow DVD PlayBack Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdvd.dll"
+ "Overlay Mixer2"      "DirectShow DVD PlayBack Runtime."      "Microsoft Corporation"      "c:\windows\system32\qdvd.dll"
+ "PCM Parser"      "PCM Parser"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\pcmparser.ax"
+ "PCM Parser"      "Sony Wave Parser"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\sonywavparser.ax"
+ "QT Decompressor"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "QuickTime Movie Parser"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Record Queue"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "Render Dib"      "Special Effects Sample"      "ArcSoft"      "c:\program files\arcsoft\photoimpression 5\modules\browser\ezrgb24.ax"
+ "RTStreamSink"      "RTStream Sink Filter"      "Sonic Solutions"      "c:\program files\sony\click to dvd 2\rtstreamsink.ax"
+ "SAL Input Converter"      "SAL Input Converter Source Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\saliconv.ax"
+ "SAL Output Converter"      "SAL Output Converter RendererFilter"      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\saloconv.ax"
+ "SAMI (CC) Reader"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Sample Grabber"      "DirectShow Editing."      "Microsoft Corporation"      "c:\windows\system32\qedit.dll"
+ "Seamless Play"      "Seamless-Play Filter (Sample)"      "Sony Corporation"      "c:\program files\common files\sony shared\openmg\seamless.ax"
+ "ShotDetect"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "Smart Tee Filter"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\qcap.dll"
+ "Sonic Audio Depth Converter"      "AudioDepthConverter"      "Sonic Solutions"      "c:\program files\sony\click to dvd 2\audiodepthconverter.ax"
+ "Sonic Cinemaster MPEG Splitter"      "Sonic MPEG Splitter"      ""      "c:\program files\sony\click to dvd 2\sonicmpegsplitter.dll"
+ "Sonic MPEG Audio Decoder"      "SonicMPEGAudio"      "Sonic Solutions"      "c:\program files\sony\click to dvd 2\sonicmpegaudio.dll"
+ "Sonic MPEG Video Decoder"      "SonicMPEGVideo"      "Sonic Solutions"      "c:\program files\sony\click to dvd 2\sonicmpegvideo.dll"
+ "Sony Audio CD Source Filter"      "OpenMG CdSource Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\cdsrc.ax"
+ "Sony Capsule Writer"      "Capsule Writer Filter"      "Sony Corporation"      "c:\program files\sony\giga pocket\scapwrt.ax"
+ "SONY DeInterlace"      "Sony Software Codec DLL"      "Sony Corporation"      "c:\program files\sony\giga pocket\deinterlace.ax"
+ "Sony DMUX-MUX Filter"      "ReComp"      "Sony Corporation"      "c:\program files\sony\giga pocket\recomp.ax"
+ "SONY DV Video Decoder"      "Sony DV Video Decoder"      "Sony Corporation"      "c:\program files\common files\sony shared\videolib\sdvvd.ax"
+ "SONY From Capture To Justclock Filter"      "FmCp2Jck"      "Sony Corporation"      "c:\program files\sony\giga pocket\fmcp2jck.ax"
+ "SONY Giga Pocket CC Decode Filter"      "SgpCCflt"      "Sony Corporation"      "c:\program files\sony\giga pocket\sgpccflt.ax"
+ "Sony MPEG Audio Decoder"      "Sony MPEG Audio Decoder"      "Sony Corporation"      "c:\program files\common files\sony shared\mpeglib\smad.ax"
+ "SONY MPEG Video Decoder"      "Sony MPEG Video Decoder"      "Sony Corporation"      "c:\program files\common files\sony shared\mpeglib\smvd.ax"
+ "SONY MPEG Video Decoder"      "Sony MPEG Video Decoder LE"      "Sony Corporation"      "c:\program files\sony\giga pocket\smvdle.ax"
+ "Sony Video Capsule Source Filter"      "Video capsule source filter"      "Sony Corporation"      "c:\program files\sony\giga pocket\vcsrcflt.ax"
+ "SonyMemSource2 (Async.)"      "Memory source Filter"      "Sony Corporation"      "c:\program files\sony\click to dvd 2\memsource2.ax"
+ "SonyMSAConv"      "OpenMG Converter Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\sonycdsrcwriter.ax"
+ "SonyMSAConv"      "OpenMG Converter Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\sonymsaconverter3.ax"
+ "SonyWavWriter"      "SonyWavWriter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\sonywavwriter.ax"
+ "StdOut"      "File Dump Filter"      "Sony Corporation"      "c:\program files\common files\sony shared\avlib\stdout.ax"
+ "Stetch"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "StreamBufferSink"      "DirectShow Stream Buffer Filter."      "Microsoft Corporation"      "c:\windows\system32\sbe.dll"
+ "StreamBufferSource"      "DirectShow Stream Buffer Filter."      "Microsoft Corporation"      "c:\windows\system32\sbe.dll"
+ "VBI Surface Allocator"      "VBI Surface Allocator Filter"      "Microsoft Corporation"      "c:\windows\system32\vbisurf.ax"
+ "VFW Null Render Filter"      "32-bit Video for Windows (VFW) driver"      "Creative Technology Ltd."      "c:\windows\system32\v0060vfw.dll"
+ "VFW Sample Grabber"      "32-bit Video for Windows (VFW) driver"      "Creative Technology Ltd."      "c:\windows\system32\v0060vfw.dll"
+ "VGA 16 color ditherer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Video Mixing Renderer 9"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Video Port Manager"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Video Renderer"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "Wave Parser"      "DirectShow Runtime."      "Microsoft Corporation"      "c:\windows\system32\quartz.dll"
+ "WIA Stream Snapshot Filter"      "WIA Stream Snapshot Filter"      "MyCompanyName"      "c:\windows\system32\wiasf.ax"
+ "Windows Media Audio Decoder"      "Windows Media Audio Decoder"      "Microsoft Corporation"      "c:\windows\system32\msadds32.ax"
+ "Windows Media Multiplexer"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "Windows Media splitter"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "Windows Media Update"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "Windows Media URL File Source"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
+ "Windows Media Video Decoder"      "Windows Media Video Decoder"      "Microsoft Corporation"      "c:\windows\system32\wmvds32.ax"
+ "Windows Media Video Decoder"      "Windows Media Video Decoder V8"      "Microsoft Corporation"      "c:\windows\system32\wmv8ds32.ax"
+ "WM ASF Reader"      "DirectShow ASF Support"      "Microsoft Corporation"      "c:\windows\system32\qasf.dll"
+ "WM ASF Writer"      "DirectShow ASF Support"      "Microsoft Corporation"      "c:\windows\system32\qasf.dll"
+ "WM VIH2 Fix"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Audio Analyzer"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Black Frame Generator"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT DirectX Transform Wrapper"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT DV Extract Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT FormatConversion"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Import Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Interlacer"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Log Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT MuxDeMux Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Sample Info Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Screen capture Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Switch Filter"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Virtual Renderer"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Virtual Source"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "WMT Volume"      "Movie Maker Filters"      "Microsoft Corporation"      "c:\program files\movie maker\wmm2filt.dll"
+ "World Standard Teletext Decoder"      "WST Decoder Filter"      "Microsoft Corporation"      "c:\windows\system32\wstdecod.dll"
+ "XML-based ASX Parser"      "Windows Media Filter Shim"      "Microsoft Corporation"      "c:\windows\system32\wmpasf.dll"
"HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute"      ""      ""      ""
+ "autocheck autochk *"      "Auto Check Utility"      "Microsoft Corporation"      "c:\windows\system32\autochk.exe"
+ "SsiEfr.e"      ""      ""      "File not found: SsiEfr.e"
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options"      ""      ""      ""
+ "Your Image File Name Here without a path"      "Symbolic Debugger for Windows 2000"      "Microsoft Corporation"      "c:\windows\system32\ntsd.exe"
"HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls"      ""      ""      ""
+ "advapi32"      "Advanced Windows 32 Base API"      "Microsoft Corporation"      "c:\windows\system32\advapi32.dll"
+ "comdlg32"      "Common Dialogs DLL"      "Microsoft Corporation"      "c:\windows\system32\comdlg32.dll"
+ "gdi32"      "GDI Client DLL"      "Microsoft Corporation"      "c:\windows\system32\gdi32.dll"
+ "imagehlp"      "Windows NT Image Helper"      "Microsoft Corporation"      "c:\windows\system32\imagehlp.dll"
+ "kernel32"      "Windows NT BASE API Client DLL"      "Microsoft Corporation"      "c:\windows\system32\kernel32.dll"
+ "lz32"      "LZ Expand/Compress API DLL"      "Microsoft Corporation"      "c:\windows\system32\lz32.dll"
+ "ole32"      "Microsoft OLE for Windows"      "Microsoft Corporation"      "c:\windows\system32\ole32.dll"
+ "oleaut32"      ""      "Microsoft Corporation"      "c:\windows\system32\oleaut32.dll"
+ "olecli32"      "Object Linking and Embedding Client Library"      "Microsoft Corporation"      "c:\windows\system32\olecli32.dll"
+ "olecnv32"      "Microsoft OLE for Windows"      "Microsoft Corporation"      "c:\windows\system32\olecnv32.dll"
+ "olesvr32"      "Object Linking and Embedding Server Library"      "Microsoft Corporation"      "c:\windows\system32\olesvr32.dll"
+ "olethk32"      "Microsoft OLE for Windows"      "Microsoft Corporation"      "c:\windows\system32\olethk32.dll"
+ "rpcrt4"      "Remote Procedure Call Runtime"      "Microsoft Corporation"      "c:\windows\system32\rpcrt4.dll"
+ "shell32"      "Windows Shell Common Dll"      "Microsoft Corporation"      "c:\windows\system32\shell32.dll"
+ "url"      "Internet Shortcut Shell Extension DLL"      "Microsoft Corporation"      "c:\windows\system32\url.dll"
+ "urlmon"      "OLE32 Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\urlmon.dll"
+ "user32"      "Windows XP USER API Client DLL"      "Microsoft Corporation"      "c:\windows\system32\user32.dll"
+ "version"      "Version Checking and File Installation Libraries"      "Microsoft Corporation"      "c:\windows\system32\version.dll"
+ "wininet"      "Internet Extensions for Win32"      "Microsoft Corporation"      "c:\windows\system32\wininet.dll"
+ "wldap32"      "Win32 LDAP API DLL"      "Microsoft Corporation"      "c:\windows\system32\wldap32.dll"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost"      ""      ""      ""
+ "logonui.exe"      "Windows Logon UI"      "Microsoft Corporation"      "c:\windows\system32\logonui.exe"
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify"      ""      ""      ""
+ "!SASWinLogon"      "SUPERAntiSpyware WinLogon Processor"      "SUPERAntiSpyware.com"      "c:\program files\superantispyware\saswinlo.dll"
+ "crypt32chain"      "Crypto API32"      "Microsoft Corporation"      "c:\windows\system32\crypt32.dll"
+ "cryptnet"      "Crypto Network Related API"      "Microsoft Corporation"      "c:\windows\system32\cryptnet.dll"
+ "cscdll"      "Offline Network Agent"      "Microsoft Corporation"      "c:\windows\system32\cscdll.dll"
+ "dimsntfy"      "DIMS Notification Handler"      "Microsoft Corporation"      "c:\windows\system32\dimsntfy.dll"
+ "igfxcui"      "igfxsrvc Module"      "Intel Corporation"      "c:\windows\system32\igfxsrvc.dll"
+ "ScCertProp"      "Common DLL to receive Winlogon notifications"      "Microsoft Corporation"      "c:\windows\system32\wlnotify.dll"
+ "Schedule"      "Common DLL to receive Winlogon notifications"      "Microsoft Corporation"      "c:\windows\system32\wlnotify.dll"
+ "sclgntfy"      "Secondary Logon Service Notification DLL"      "Microsoft Corporation"      "c:\windows\system32\sclgntfy.dll"
+ "SensLogn"      "Common DLL to receive Winlogon notifications"      "Microsoft Corporation"      "c:\windows\system32\wlnotify.dll"
+ "termsrv"      "Common DLL to receive Winlogon notifications"      "Microsoft Corporation"      "c:\windows\system32\wlnotify.dll"
+ "wlballoon"      "Common DLL to receive Winlogon notifications"      "Microsoft Corporation"      "c:\windows\system32\wlnotify.dll"
+ "WRNotifier"      ""      ""      "File not found: WRLogonNTF.dll"
"HKCU\Control Panel\Desktop\Scrnsave.exe"      ""      ""      ""
+ "C:\WINDOWS\system32\ssmypics.scr"      "My Pictures Slideshow Screensaver"      "Microsoft Corporation"      "c:\windows\system32\ssmypics.scr"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries"      ""      ""      ""
+ "000000000001"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000002"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000003"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000004"      "Microsoft Windows Rsvp 1.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\rsvpsp.dll"
+ "000000000005"      "Microsoft Windows Rsvp 1.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\rsvpsp.dll"
+ "000000000006"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000007"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000008"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000009"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000010"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000011"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000012"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000013"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000014"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000015"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000016"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000017"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "000000000018"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
"HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries"      ""      ""      ""
+ "Network Location Awareness (NLA) Namespace"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
+ "NTDS"      "LDAP RnR Provider DLL"      "Microsoft Corporation"      "c:\windows\system32\winrnr.dll"
+ "NWLink IPX/SPX/NetBIOS Compatible Transport Protocol"      "Client Service for NetWare Provider and Authentication Package DLL"      "Microsoft Corporation"      "c:\windows\system32\nwprovau.dll"
+ "Tcpip"      "Microsoft Windows Sockets 2.0 Service Provider"      "Microsoft Corporation"      "c:\windows\system32\mswsock.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors"      ""      ""      ""
+ "BJ Language Monitor"      "Langage Monitor for Canon Bubble-Jet Printer"      "Microsoft Corporation"      "c:\windows\system32\cnbjmon.dll"
+ "Canon BJ Language Monitor PIXMA iP6000D"      "BJ Language Monitor"      "CANON INC."      "c:\windows\system32\cnmlm69.dll"
+ "Local Port"      "Local Spooler DLL"      "Microsoft Corporation"      "c:\windows\system32\localspl.dll"
+ "Microsoft Document Imaging Writer Monitor"      "Microsoft® Document Imaging"      "Microsoft Corporation"      "c:\windows\system32\mdimon.dll"
+ "PDF995 Monitor"      ""      ""      "c:\windows\system32\pdf995mon.dll"
+ "PJL Language Monitor"      "PJL Language monitor"      "Microsoft Corporation"      "c:\windows\system32\pjlmon.dll"
+ "Standard TCP/IP Port"      "Standard TCP/IP Port Monitor DLL"      "Microsoft Corporation"      "c:\windows\system32\tcpmon.dll"
+ "USB Monitor"      "Standard Dynamic Printing Port Monitor DLL"      "Microsoft Corporation"      "c:\windows\system32\usbmon.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders"      ""      ""      ""
+ "digest.dll"      "Digest SSPI Authentication Package"      "Microsoft Corporation"      "c:\windows\system32\digest.dll"
+ "msapsspc.dll"      "DPA Client for 32 bit platforms"      "Microsoft Corporation"      "c:\windows\system32\msapsspc.dll"
+ "msnsspc.dll"      "MSN Internet Access"      "Microsoft Corporation"      "c:\windows\system32\msnsspc.dll"
+ "schannel.dll"      "TLS / SSL Security Provider"      "Microsoft Corporation"      "c:\windows\system32\schannel.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages"      ""      ""      ""
+ "msv1_0"      "Microsoft Authentication Package v1.0"      "Microsoft Corporation"      "c:\windows\system32\msv1_0.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages"      ""      ""      ""
+ "scecli"      "Windows Security Configuration Editor Client Engine"      "Microsoft Corporation"      "c:\windows\system32\scecli.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages"      ""      ""      ""
+ "kerberos"      "Kerberos Security Package"      "Microsoft Corporation"      "c:\windows\system32\kerberos.dll"
+ "msv1_0"      "Microsoft Authentication Package v1.0"      "Microsoft Corporation"      "c:\windows\system32\msv1_0.dll"
+ "schannel"      "TLS / SSL Security Provider"      "Microsoft Corporation"      "c:\windows\system32\schannel.dll"
+ "wdigest"      "Microsoft Digest Access"      "Microsoft Corporation"      "c:\windows\system32\wdigest.dll"
"HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order"      ""      ""      ""
+ "LanmanWorkstation"      "Microsoft Windows Network"      "Microsoft Corporation"      "c:\windows\system32\ntlanman.dll"
+ "RDPNP"      "Microsoft Terminal Services"      "Microsoft Corporation"      "c:\windows\system32\drprov.dll"
+ "WebClient"      "Web Client Network"      "Microsoft Corporation"      "c:\windows\system32\davclnt.dll"
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i deleted the following

Locate the following and delete them:
c:\windows\system32\fjhdyfhsn.bat
c:\documents and settings\Doug\Local Settings\Application Data\gjuvqv

rebooted and no luck.

thanks for all the help.
Avatar of optoma
optoma
Flag of United States of America image
Could you re run autoruns again and save it as autoruns.arn

After being saved as autoruns.arn >then right click and rename it.

You can then use the attach "file" button here to upload it
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Sorry I thought I read it wrong. Looks like I did. I am not at the office anymore.

Thanks

Avatar of optoma
optoma
Flag of United States of America image
Not to worry!
Avatar of Jonvee
Jonvee
Tom,
After re-studying the last ComboFix log, here's a script that you can run.  You'll need to run ComboFix again, then follow these instructions>


1. Open Notepad.
2. Copy & paste all text between the lines below, into Notepad window:
=========================================================

File::
c:\windows\system32\fjhdyfhsn.bat
c:\windows\Bquzerokonibu.bin
c:\windows\Dtoqodipokidupa.dat

Folder::
c:\documents and settings\Doug\Local Settings\Application Data\gjuvqv


==================================================
3. Now Save the above as CFScript.txt on your desktop.
4. Then drag the CFScript.txt just created into ComboFix.exe. This will re-start ComboFix, & hopefully the problem will be resolved.
5. Finally, please attach the newComboFix logfile.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

thanks guys, i will have to try this stuff tomorrow when i get back to the office.

the owner of the PC is a friend of the boss and i didn't feel like bringing it home to work on it, which is the reason why it is at work and not at home with me.

Avatar of orangutang
orangutang
Oh, also check your event viewer if you haven't already.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok guys, here is the latest autoruns file with the verify code signatures option enabled.




AutoRuns.txt
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@ Jonvee

I followed your instructions and created the text file and dragged it to combofix.

attached is the log file.

thanks
combofix.txt
Avatar of rwamuhire
rwamuhire
Flag of United States of America image
Stop wasting your precious time, clean re-install Windows®, be sure to install the antivirus, firewall,spyware programs before you go back online.  Good luck.
Avatar of Jonvee
Jonvee
Okay, thanks.   Once again a fairly hurried inspection, but your Combo log certainly looks cleaner than before.   Presumably there's no change in accessing the internet?
Avatar of Jonvee
Jonvee
The last thing i want to do is waste your time, but if you'll consider one more attempt at running
an IE 7 repair (since running the ComboFix script) here's a different link>

"Winsockfix for internet explorer 7.0":
http://www.softpedia.com/progDownload/WinSock-XP-Fix-Download-7144.html

You may need this information>
"Automatic download guide for IE 7 and XP SP2, XP SP3 ...":
http://www.softpedia.com/user/sp2download.shtml
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

@Jonvee

good news that the log looks cleaner, however, no internet still.

i can still ping IPs and get replies, that hasnt changed.

i tried to install MS security essentials just to see if it would isntall and it doesnt.

so something is obviously still on here not giving me full control of the system.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

well, i dont mind trying the IE repair, but it wont let me install programs and i get errors when i click some items in the registry.

also, ff and opera dont work.

do you still think i should repair IE?  even if IE is repaired, i still have another list of problems.

Avatar of Jonvee
Jonvee
Tom ...   in view of opera not working, best to go for the other list of problems.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

right.  something is still on here, but at this point, if i am having trouble installing certain programs and i am getting registry errors...i dont think there is much else to check.

i suppose i could pop the drive into another computer and run a scan on the drive as a slave...
Avatar of optoma
optoma
Flag of United States of America image
Thanks for the file.

If you slaving the drive run a Malwarebytes scan on it as well. If any rootkits are present they have a better chance of being detected once slaved.
Make note of detections.

After that when drive is back in its own OS run Norton removal tool + reboot after
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

Then you can run an automated "repair permissions" tool from Dial-A-Fix.
In Dial-A-Fix hit the hammer icon and select repair permissions + hit go. Reboot.
http://wiki.lunarsoft.net/wiki/Dial-a-fix#Mirrors.2Fdownload_locations.2C_and_articles

Depending on whats removed when drive is slaved, a windows repair may be required
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i don't think i have mentioned this yet, but this PC belongs to a friend of my boss, which is why it is stuck at the office.

unfortunately, i don't have any test machines i can slave this drive into, at the moment.

i wont be in the office the next few days, so i might not have a chance to pull the drive out and salve it.

Avatar of Jonvee
Jonvee
Then maybe it's worth persevering with these scanners.  If indeed there is (hidden) rootkit activity, can you try and run this one>
"Sophos Anti-Rootkit:  Free rootkit detection and removal tool":
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

If unsuccessful, another option (from another thread) is to try running "rkill" *before* re-running Malwarebytes, but do *not* reboot after running rkill.  
Apparantly there are different versions of rkill, and you may have to try more than one of them.  Only then do you run Malwarebytes.  
Please read the following instructions carefully.  you can get rkill from the same forum>
http://forums.cnet.com/5208-6132_102-0.html?threadID=365993

As a reminder, download Malwarebytes from here> http://www.malwarebytes.org/mbam.php
Avatar of orangutang
orangutang
Did you already try:
http://www.winhelponline.com/blog/reset-the-registry-and-the-file-permissions-in-windows-xp/
? You can put the files on a CD or something and run it. Also, did you check the event viewer?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i didnt try the win help online yet.

i must have missed that suggestion above.

also, no, i didnt get a chance to look in the event viewer.

what am i looking for in event viewer?
Avatar of orangutang
orangutang
Just look for errors in your event viewer that seem related to your problem. The errors have circles with white Xs in middle.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i will be out of town for a few days.  i wont be able to do anything until i get back.

thanks for the help guys.

the only reason i haven't wiped it due to the fact that my bosses friend said he has another computer at home and he doesn't really need this one that bad.  giving me a chance to try these programs out.

i also have multiple networks at the office.  the network that this PC plugs in to is strictly for test machines.  so no need to worry about spreading the bad files to anyone.


Avatar of Jonvee
Jonvee
No problem, we'll be here.  Incidently there are four different versions of "rkill" as shown in the cnet link above, & you only need one.  The 'other thread' referred to was here at EE  ... it seemed pretty straightforward & worth a try.
Avatar of orangutang
orangutang
Also, try temporarily uninstalling Norton with the Norton Removal Tool (http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039).
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i need to post something so make sure this thread doesn't get closed by the mods.

i will be back in town tomorrow.

thanks
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok guys, i am back in the office.

i checked the event viewer and nothing out of the ordinary is popping up.

the only error i see that it couldn't sync the time, that one is obvious.

i am uninstalling norton.

1. they are not paying for it so no need to do a temp uninstall
2. it was detection only.  the need to upgrade to get auto update and virus removal.

i will let you guys know if helped, but i doubt it.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, norton is uninstalled, i can still ping and get replies from 8.8.8.8, 208.67.222.222 but nothing when i ping a website or open IE.

it might be time to just wipe....
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i forgot there were some other recommendations

i am trying

Sophos Anti-Rootkit. right now.

next is the info from the cnet link.

fwit, Sophos Anti-Rootkit installed successfully, unlike some other programs that were recommended.  however, i did rename the .exe for Sophos, i should have tried that with the others.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Sophos Anti-Rootkit found 2 files, but they were the users hotmail file.  the program recommended NOT to delete them.

nothing else found by Sophos.

Avatar of optoma
optoma
Flag of United States of America image
Try repairing permissions from previous post if still having problems installing programs
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, trying that now.

also, rkill did not help with opening or running other programs that were not working prior.

thanks.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

SubInACL installed fine, but i dont know if i need to run it somewhere.

reset.cmd i downloaded that and it is running now.  i will let you guys know what happens once this is done running.

thanks.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

will it create a log for me?

after reset.cmd gets done running, that is.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, the window just closed, so i assume reset.cmd was done running.

anyway, i tried to install MS security essentials, and i got the same message, can not install.

this is the error code.

0x80070643

http://support.microsoft.com/kb/958052

i think i finally give up...

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i just ordered the restore CDs for 17.95.

thanks for all the help guys.

it would have been great to see what is causing this machine to act up like this, but i am sick of looking at it and getting the same results.

i did learn a few new programs and techniques, so something good came from the thread.

thanks again.

Avatar of optoma
optoma
Flag of United States of America image
Try Dialafix.exe
Select the "policies" tab. Uncheck hide disabled policies. Rescan and select remove.
Then also repair permissions.

Once those two steps are completed try installing your programs. Dont reboot after dialafix
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, trying that now, but i still think it was good to order the disks.

with all the things i tried, i dont think this will fix the problem.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

nothing...

thanks though.

Avatar of optoma
optoma
Flag of United States of America image
I suppose you have a backup of all important data since machine will be restored to factory settings?

You can try Tdsskiller if you want in case of a rootkit which is blocking progress
http://support.kaspersky.com/viruses/solutions?qid=208280684
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

the only thing they requested be saved were some images and documents.

everything else can go.

so to answer your question, yes, i do.
Avatar of optoma
optoma
Flag of United States of America image
Cool :)
Try the tool. Interesting if it helps for this..
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

well i get the tdsskiller.exe file on the infected pc, double click and it shows 0/0/0 for all 3 lines and says the scan is done.

how can it scan in 2 seconds?

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i just randomly went through the registry and found a few folders under software that looked like this

ggjxcjzc
sjcmadstgi

and i deleted them.

all these scans and stuff like this is still in the system?

what kind of virus is this...now i just want to know!
Avatar of optoma
optoma
Flag of United States of America image
Hit start, then run, type the following
"%userprofile%\Desktop\TDSSKiller.exe" -v

When it prompts/finds something type "delete"
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

that does the same thing as double clicking tdsskiller.exe

nothing comes up, just as above.

Thanks
Avatar of optoma
optoma
Flag of United States of America image
Looks like a rootkit of some sort.
Run this live cd:(can take hours to run but thorough!)
Kaspersky live cd http://devbuilds.kaspersky-labs.com/devbuilds/RescueDisk/

--It is in iso/image format so you will have to burn it to a cd.
--Once the cd is created, boot the infected machine to that cd and scan your system
--If any detections are found you will be prompted to take action
--When completed hit reports and save the logfile in noted location
NB-Update the virus database in live cd before scanning
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i will try the live CD when i get to work tomorrow.

i already have heirens boot cd, but it is about 4 months old.
Avatar of orangutang
orangutang
Wow, this is one of the longest topics I have ever seen at EE.
Avatar of Jonvee
Jonvee
Yup, certainly is.   Interesting too ..
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, well i am about to download the .iso file, but how do i get the latest definitions onto the CD?

or are they already built into the image file?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, i guess i do the updates after i boot with the CD.

it is downloading updates now, then i will do a scan.

Avatar of optoma
optoma
Flag of United States of America image
Have the machine connected to the internet. Boot machine to live cd and there is an update feature in live cd
Avatar of optoma
optoma
Flag of United States of America image
:)
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, scan from the CD is at 60% running for 1hr 48 min.

it has found

Trojan.JS.Gord.a

it cant clean it, my option is to delete or skip.

now, i know it is a trojan and that i need to delete it, but do you recommend deleting all that it finds at the end (assuming it finds more) or should i just delete them as i see them?

the reason i ask is becuase you asked for me to generate a report and i am not sure what the report would include.

the obvious answer is to delete, i would imagine, but the scan isn't done and whether i delete it now or later it wont matter to me.

also, the infected popup box is active right now, but the scanner is still scanning (well, the time is moving) so i assume it will still keep scanning, i don't think it is waiting for me to make a decision, but maybe it is...?

thanks.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, i answered my own question.  the timer is still active, but it was stuck on one file.

i clicked delete and another one was found (or waiting for me to do something)

Backdoor.Win32.Bredolab.bnu

so far those two have been found and deleted.

will update....at 61% now.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

just found this at 70%

not-a-virus adware.win32.gamevance.ao

Avatar of optoma
optoma
Flag of United States of America image
Sorry, just back. Delete away. All will be in the report at the end. Just remember to save report on the hard drive!
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

will do.  it is at 97% right now.

yes, after i deleted them, i clicked on reports and noticed that it does list everything it did.

thanks for confirming in your last post!

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

scan finished, but i still have the same issue as before.

Scan: completed 1/13/10 2:20 PM   (events: 10, objects: , time: 00:00:00)      

1/13/10 2:20 PM      Task completed            
      
1/13/10 12:42 PM      Deleted: not-a-virus:AdWare.Win32.Gamevance.ao      /discs/D:/System Volume Information/_restore{159753DE-EE53-486D-B525-FCDDC8F0A2EB}/RP844/A0216643.exe      
      
1/13/10 12:08 PM      Detected: not-a-virus:AdWare.Win32.Gamevance.ao      /discs/D:/System Volume Information/_restore{159753DE-EE53-486D-B525-FCDDC8F0A2EB}/RP844/A0216643.exe            

1/13/10 11:35 AM      Deleted: Trojan.JS.Gord.a      /discs/D:/Qoobox/Quarantine/C/Documents and Settings/Owner/Local Settings/Application Data/{2EF34810-59CC-46F8-AAA1-FCE459C147A1}/chrome/content/overlay.xul.vir            

1/13/10 11:35 AM      Deleted: Backdoor.Win32.Bredolab.bnu      /discs/D:/System Volume Information/_restore{159753DE-EE53-486D-B525-FCDDC8F0A2EB}/RP835/A0202332.exe      
      
1/13/10 11:35 AM      Deleted: Trojan.JS.Gord.a      /discs/D:/Qoobox/Quarantine/C/Documents and Settings/Doug/Local Settings/Application Data/{00EE5128-07F5-4E35-A0A8-1298D0845CBD}/chrome/content/overlay.xul.vir            

1/13/10 11:03 AM      Detected: Backdoor.Win32.Bredolab.bnu      /discs/D:/System Volume Information/_restore{159753DE-EE53-486D-B525-FCDDC8F0A2EB}/RP835/A0202332.exe
            
1/13/10 10:59 AM      Detected: Trojan.JS.Gord.a      /discs/D:/Qoobox/Quarantine/C/Documents and Settings/Owner/Local Settings/Application Data/{2EF34810-59CC-46F8-AAA1-FCE459C147A1}/chrome/content/overlay.xul.vir            

1/13/10 10:59 AM      Detected: Trojan.JS.Gord.a      /discs/D:/Qoobox/Quarantine/C/Documents and Settings/Doug/Local Settings/Application Data/{00EE5128-07F5-4E35-A0A8-1298D0845CBD}/chrome/content/overlay.xul.vir            

1/13/10 9:33 AM      Task started                  
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i noticed a few things.

when i try to open IE and go to google.com it says

The address is not valid and i see http:/// in the address bar

when i try to go to www.google.com it just says page cannot be displayed
and the address bar shows something like this

http://search.yahoo.com........

not just with google, but any site.  the results with www and w/o www are the same as i described above.  the domain doesnt seem to matter.
Avatar of optoma
optoma
Flag of United States of America image
Didnt find much of interest as being active threats:(

>At the moment how many anti-virus applications are installed.
Remove them all!

>In IE settings "restore advanced settings" and hit "reset" IE settings.

>Boot into safe mode with networking:
1-Run disk cleanup and Atf cleaner to clear temp files http://www.atribune.org/index.php?option=com_content&task=view&id=25&Itemid=25

2-Run standalone installer of IE8
http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, i am trying that now.

opera doesnt work either and is till cant install MS essentials.

i will update in a few minutes.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i unisntalled

mbam
ccleaner
superantispyware
Sophos Anti-Rootkit
spybot search and destroy.

all norton products have been removed except norton internet security.

i dont see it in the startup, but i get an error not letting me uninstall it under add/remove programs.

everything else i installed is not installed
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i can ping 8.8.8.8 in safe mode with networking and get a reply.
cant open IR or ping a domain name.

i ran ATF cleaner and it freed up 5.8 MB

installing ie 8 now.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ie8 couldnt install.

it said it needs to connect to windows update to get the latest updates.

trying the norton thing again (i assumed it was gone last time since it disappeared from the start menu, i didnt check add remove programs after i uninstalled it last time)
Avatar of optoma
optoma
Flag of United States of America image
Run removal tool again.
After, rerun Autoruns to confirm that all norton/symantec entries are gone.

When it's completely gone try IE8 again. Its strange that it stopped when trying to pull down updates. Should bypass updates and continue on.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, IE still installed w/o being able to get the updates.

norton is def gone now (from the start menu and the add/remove programs screen) but i will still run auto runs.

i got some more info given to me, that i can try read below.

If you cant, install the RC using a Windows CD then run ComboFix.

To install the Recovery Console, follow these steps:

1. Insert the Windows XP CD into the CD-ROM drive.
2. Click Start, and then click Run.
3. In the Open box, type d:\i386\winnt32.exe /cmdcons where d is the drive letter for the CD-ROM drive. In the case of 'Microsoft Windows XP Professional x64 Edition, type d:\amd64\winnt32.exe /cmdcons where d is the drive letter for the CD-ROM drive.
4. A Windows Setup Dialog Box appears. The Windows Setup Dialog Box describes the Recovery Console option. To confirm the installation, click Yes.
5. Restart the computer. The next time that you start your computer, "Microsoft Windows Recovery Console" appears on the startup menu.
Avatar of optoma
optoma
Flag of United States of America image
I think you can also download the recovery console setup package and drag and drop it into Combofix- have both on desktop.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=E8FE6868-6E4F-471C-B455-BD5AFEE126D8.

How is machine behaving now, regarding internet access?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

same...i can ping 8.8.8.8 and get replies but none of the web browsers resolve to any websites by domain name.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

autoruns saved in autoruns format and changed the extension to .txt

1-14-10

thanks.
AutoRuns1-14-10.txt
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i tried the winsokfix yesterday, after a reboot, it didnt do anything.

however, i still cant install MS security essentials, so there has to be something infecting the system still or corrupted files.

i will let you know what happens with LSP fix
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i think i need some help with LSP fix
Avatar of optoma
optoma
Flag of United States of America image
Security essentials has to go online for validation(i think)

Try winsock again.
Open lsp fix and list out what is in the left pane and if anything is in the right pane
Avatar of orangutang
orangutang
Also, have you tried creating another Windows account and using that?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Yes I tried making a new account, before I did all these scans. I will try making a new account tomorrow and I will post the results.

Thanks
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

At the top it says No Problems Found

Left side

mswsock.dll
winrnr.dll
mwprovau.dll
rsvpsp.dll


Right side

blank
Avatar of optoma
optoma
Flag of United States of America image
Lsp ok.

Go into services and stop+disable DNS Client service. Reboot + test browser

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

ok, did all that....nothing, same thing.
Avatar of optoma
optoma
Flag of United States of America image
You mentioned that browsers return with http:///
If you search the entire registry for http:/// 

If it is found and what locations?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

checking now...good idea.
Avatar of optoma
optoma
Flag of United States of America image
Also list whats under this key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

nothing found when searching http:///


that key shows me...

name------------Data

(default)           Value not set

ctfmon.exe       c:\windows\system32\ctfmon.exe
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

http://www.daniweb.com/forums/thread92848.html#

this person has the same issue with http:/// with no real fix to the problem.

thread hasnt really been updated.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i just noticed this

when i do an ipconfig /flushdns

i get the following

could not flush DNS resolver cache: function failed during execution
Avatar of optoma
optoma
Flag of United States of America image
Re-enable DNS client service. Reboot and flush!
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

oh yeah, i forgot about that :)
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

making a new account doesnt do anything.

also, after i enabled DNS service, i rebooted and same thing still.
Avatar of Jonvee
Jonvee
"Could not flush the DNS Resolver Cache: Function failed during execution.":
http://support.microsoft.com/kb/919746
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Jonvee:
"Could not flush the DNS Resolver Cache: Function failed during execution.":
http://support.microsoft.com/kb/919746

i disabled the DNS client service to try something, once i enabled it, i was able to flushdns and get successful reply.
Avatar of optoma
optoma
Flag of United States of America image
What happens when you open Firefox browser? http:/// ?
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

off hand, i don't know

but i know netscape, ff, and opera don't work and all give a general cant connect or cant resolve error.
Avatar of orangutang
orangutang
I really wonder if it's some sort of extremely hard to detect virus. Also, try:
http://www.blackviper.com/downloads/WinXP/Registry_Files/!Default_XP_Home_SP3_Start_v300.zip
and "Method 1: Reset the registry and the file permissions" from http://support.microsoft.com/kb/949377
Avatar of Jonvee
Jonvee
Yes, a rootkit could explain the symptom, particularly as the PC was heavily infected initially.  The thread is long & i'm not sure if we tried this one>
"Sophos Anti-Rootkit removal tool":
http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

Yeah, we tried sophos. Do a ctrl f and search for sophos and you can see the results of trying that program.

Thanks
Avatar of optoma
optoma
Flag of United States of America image
With firefox, when browser is open, if you type, for example http:///www.google.com it will still return a valid address (it drops the extra /).

Internet Explorer will return "not valid address"
              ............................................................................

Just to refresh:

Ping command>
>by ip address =response
>by domain name=??

nslookup command>type nslookup + hit enter=?
Under nslookup command:
>by ip address=?
>by domain name=?


Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i am not at work to do the nslookup

but when i ping by ip address i get 4 replies i am pinging 8.8.8.8 and 208.67.222.222 which are DNS servers

when i ping by domain name, i get the error

Ping request could not find host www.google.com. Please check the name and try
 again.

i will have to check the nslookup and firefox stuff on monday.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

nslookup update

nslookup cmd
default server- resolver1.opendns.com
address- 208.67.222.222

nslookup google.com
server- google.com
addresses- 74.125.95.106, 74.125.95.103, 74.125.95.147, 74.125.95.104, 74.125.95.105, 74.125.95.99

dns request timed out
timeout was 2 seconds
request to google.com timed out.

nslookup 74.125.95.106 = same results as above

however, when i open IE, http://74.125.95.106 takes me to a google page.

Avatar of optoma
optoma
Flag of United States of America image
Can you try Firefox.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i will try tomorrow, i was at another site today when i got this message.  i forgot to try firefox.

thanks.
Avatar of optoma
optoma
Flag of United States of America image
Another few things to try when you there.

1-plug a different machine in that node, keeping all hardware,network cable as it is, except machine and test.

2-Cold boot the router and machine, .ie, unplug them for a minute.

3-http://service1.symantec.com/SUPPORT/nav.nsf/8d071816eedd7cac88256c0e005a96e5/751c3298ab99cf7188256d34006702e2?OpenDocument
   1. Click Start > Run. The Run dialog box appears.
   2. Type regedit and then click OK. The Registry Editor opens.
   3. Navigate to and select the following key:

      HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCP
   4. Double-click the DependOnService value in the right window.
   5. Delete the SYMTDI entry from the list of items.
   6. Click OK.
   7. Click Registry, and then click Exit.
   8. Restart the computer.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

plug a different machine in the node?

you lost me.

i am going to boot the PC now and try firefox and post back the error for you.

as far as resetting everything, i have already tried that.

i plugged in my personal laptop from home into the router and it works.  i tried static addressing on the infected PC and it doesnt work.  initially, i thought it was a problem with the router settings, which was the reason i brought in my laptop to use for testing.

ill post results soon.

thanks.
Avatar of Jonvee
Jonvee
A long shot .... but worth reading ..
A new DNS changing Malware with a twist was recently found by researchers.
http://blog.trendmicro.com/dns-changer-malware-evolves-again/

Trend Micro's, free, HouseCall 7.1, online virus scanner:
http://housecall.trendmicro.com/uk/
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

in that registry key, i only see

Tcpip
Afd
NetBT

i would like to point out that i had this problem when symantec was still installed.

that link is for problems with internet after you uninstall norton.

however, still worth a shot, thanks.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

firefox error

Firefox cant find the server located at...
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER


Trend Micro's, free, HouseCall 7.1, online virus scanner:
http://housecall.trendmicro.com/uk/

it looks like it downloads stuff from their servers.  i cant get to the internet on the infected PC.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

running Nod32 now, i forgot that was recommended above.

will update with results, the scan just started.

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

nod32 didnt find anything.  i guess that scanner was looking for one thing, specifically.

thanks.
Avatar of Jonvee
Jonvee
Assuming for the moment that the system is perhaps clean, then this is worth quickly reading, although admittedly you've tried most of it >
"Windows XP machine will not connect to Internet with any browser but can ping out":
https://www.experts-exchange.com/questions/24206518/Windows-XP-machine-will-not-connect-to-Internet-with-any-browser-but-can-ping-out.html
Avatar of optoma
optoma
Flag of United States of America image
Sorry, did you physically unplug the network cable from problematic machine and plug that cable into laptop, thus keeping same cable and port on router the same?

Also, is the routers firmware at its latest?
If deciding to update firmware of router, create a backup of its settings.

I'm fairly certain machine is clean especially with all various scanners used, including a live cd.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

I have done a combination of the following

Diff cable
Diff router
Power cycle router
Same cable
Diff port on the routers
Tested with my laptop and infected pc on the same router

My laptop had no problem going online.

Thanks

Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

no, i have not done that, but is that the same thing as the winsock?

if not exact, is it similar?

i will try it first thing tomorrow.

btw, i hope the CDs come tomorrow.  i mentioned above that i ordered the restore disks for the user.  at this point i am just trying stuff to see if we can get the PC up and running.

Avatar of optoma
optoma
Flag of United States of America image
I don't think it is the same as winsock fix.

I remember you ordered the recovery cds.
Its an interesting issue which nobody seems to have an answer to so just throwing things out there to see if they work!
Avatar of Jonvee
Jonvee
Yes it's become quite intriguing.  Good luck with the CDs ..
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i appreciate all the help guys, i really do.

i got some good programs from this thread and some good shortcuts to try in cmd prompt.

the netsh int command didnt work.

thankfully, the disks were on my desk when i came in the office today.  

i am going to do a clean install and give the disks to the owner and tell him to keep them with the rest of his software that he purchased with the PC.

thanks again.
Avatar of optoma
optoma
Flag of United States of America image
No prob. Maybe somebody on the net will have a resolution for that type issue someday!
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

yeah, you never know.

i do appreciate all the help.

this is certainly the longest thread i have ever been a part of on this board.
Avatar of optoma
optoma
Flag of United States of America image
Yeah, been in a few! Usually they get abandoned!
All the best with the clean install :)
Avatar of Dennis Johnson
Dennis Johnson
Flag of Greece image
I've read the whole discussion and it obviously seems like a rootkit problem. I see that you tried a couple of anti-rootkit programs, but you haven't tried GMER. If you haven't started the clean install, give it a try, as a last resort. It does a quick scan at first (lasts a few seconds) and warns you if it finds anything.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i already did a clean install, put the users programs back on, and restored some of his backup files for quicken and some tax program he had.

regardless, there were some good programs listed above and i will still take a look at the program that you posted.  you never know when these might come in handy again.
Avatar of tomdlgns
tomdlgns
Flag of United States of America image

ASKER

i was very impressed with the amount of help that i got from many of the users on this site.  typically, people will recommend a few things and never come back to the discussion.

i would like to point out that i DID have to reformat to resolve my issue 100%, but there were many programs recommended that helped delete/fix some of the corrupted files and made the pc much easier to work with in trying to diagnose the last problem (probably not the last problem, but the one i was having most trouble with)

there are way too many posts to break down and assign points to.

thanks to everyone who helped.

Avatar of optoma
optoma
Flag of United States of America image
;)
Avatar of Jonvee
Jonvee
Glad you finally resolved it!  
As a matter of interest GMER is contained within ComboFix .. for anyone interested just scroll near the end of the logfile to see the reference   "..rootkit/stealth malware detector by Gmer.."

It was good troubleshooting alongside you, even though at times it felt as if i was just 'coming along for the ride'   ;)

Thanks.