 HijackThis Log for XP with bolenja, bolenjx?, Computer is in rough shape, may have more than the above malware. |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Forum Guidelines
Read this topic before posting a log. DO NOT post a ComboFix log unless requested to. Only members of the HijackThis Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log. When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc. Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  |
 Jan 16 2009, 01:29 PM
Post
#16
|
|
 Forum Addict  Group: HJT Team Posts: 5,949 Joined: 4-December 07 Member No.: 174,482  |
-------------------- Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson   Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive Away for three months (22 August - 1 December 2009) |
 |
 
|
|
Jan 16 2009, 06:12 PM
Post
#17
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
Hi Wan,
Well if the World Clock is to be believed I guess it's good morning to you in Malaysia. I hope your day is getting off to a great start. I downloaded Combo-Fix again, installed the Recovery Console as you requested, and Combo-Fix ran very smoothly without any of the "windows error reporting" messages I mentioned previously, and it was pretty darn quick this time. So, without further delay, here is my Combo-Fix Log from literally just 5 minutes ago. Oh, and I'm actually at the store on that computer now, so if you have any other things you need me to do based on this log I'll be near the computer for the next 45 minutes or hour. Thanks in advance. ComboFix 09-01-16.02 - Alohboh 2009-01-16 17:59:50.3 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.510.294 [GMT -5:00] Running from: c:\documents and settings\Alohboh\Desktop\Combo-Fix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\ini.ini\ . ((((((((((((((((((((((((( Files Created from 2008-12-16 to 2009-01-16 ))))))))))))))))))))))))))))))) . 2009-01-14 17:31 . 2009-01-14 17:31 250 --a------ c:\windows\gmer.ini 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- C:\rsit 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- c:\program files\trend micro 2009-01-14 16:38 . 2009-01-14 16:38 <DIR> d-------- c:\documents and settings\Alohboh\Application Data\Malwarebytes 2009-01-14 16:38 . 2009-01-04 18:38 15,504 --a------ c:\windows\SYSTEM32\DRIVERS\mbam.sys 2009-01-14 16:28 . 2009-01-14 16:38 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-14 16:28 . 2009-01-14 16:28 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-14 16:28 . 2009-01-04 18:38 38,496 --a------ c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-16 22:35 --------- d-----w c:\program files\Common Files\Symantec Shared 2008-01-22 14:23 0 ----a-w c:\documents and settings\Alohboh\del.bat 2008-01-21 15:32 246 ----a-w c:\program files\Common Files\rycil844 2008-01-20 18:12 61 ----a-w c:\program files\ini.ini 2007-07-28 09:06 135 ----a-w c:\program files\Common Files\viloz.html . Files Infected - Patched c:\program files\QuickTime\qttask.exe c:\program files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe c:\progra~1\SYMNET~1\SNDMon.exe c:\windows\System32\igfxtray.exe c:\program files\Intel\Modem Event Monitor\IntelMEM.exe c:\windows\System32\spool\drivers\w32x86\3\hpztsb10.exe c:\program files\Analog Devices\Core\smax4pnp.exe . ((((((((((((((((((((((((((((( snapshot@2009-01-15_21.41.06.31 ))))))))))))))))))))))))))))))))))))))))) . - 2009-01-16 02:37:48 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT + 2009-01-16 22:35:31 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT - 2009-01-16 02:37:48 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT + 2009-01-16 22:35:31 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT - 2009-01-16 02:38:22 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-16 22:35:31 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-16 22:35:49 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_2e0.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06DBC41D-B12E-4133-876A-64E0C8FDD1D3}] 2002-08-29 05:00 84480 --a------ c:\windows\System32\APPHEL.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\System32\ctfmon.exe" [2002-08-29 13312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\System32\igfxtray.exe" [2008-01-21 155648] "IntelMeM"="c:\program files\Intel\Modem Event Monitor\IntelMEM.exe" [2008-01-21 221184] "HPDJ Taskbar Utility"="c:\windows\System32\spool\drivers\w32x86\3\hpztsb10.exe" [2008-01-21 172032] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-01-21 1404928] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PCANotify] 2003-10-31 11:01 8704 c:\windows\SYSTEM32\PCANotify.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 c:\program files\Adobe\Reader 8.0\Reader\Reader_SL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp] --a------ 2005-03-23 14:34 58992 c:\program files\Common Files\Symantec Shared\CCAPP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2008-01-21 10:33 77824 c:\program files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSC_UserPrompt] --a------ 2008-01-21 10:33 218240 c:\program files\Common Files\Symantec Shared\Security Center\usrprmpt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor] --a------ 2008-01-21 10:33 100056 c:\progra~1\SYMNET~1\sndmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "AntivirusOverride"=dword:00000001 R0 eljalihj;eljalihj;c:\windows\System32\drivers\rxnskyhv.dat --> c:\windows\System32\drivers\rxnskyhv.dat [?] R1 ShldDrv;Panda File Shield Driver;c:\windows\SYSTEM32\DRIVERS\ShlDrv51.sys [2008-01-22 38968] R4 CtlSvr;CtlSvr;c:\alohaqs\BIN\CTLSVR.EXE [2004-08-05 1703936] R4 PavProc;Panda Process Protection Driver;c:\windows\SYSTEM32\DRIVERS\PavProc.sys [2008-01-22 178872] S0 sipuf;sipuf;c:\windows\System32\drivers\gviteepr.sys --> c:\windows\System32\drivers\gviteepr.sys [?] . Contents of the 'Scheduled Tasks' folder 2009-01-16 c:\windows\Tasks\At1.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At2.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At3.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At4.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At5.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At6.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At7.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At8.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2005-03-24 c:\windows\Tasks\ISP signup reminder 1.job - c:\windows\System32\OOBE\OOBEBALN.EXE [2002-08-29 05:00] 2009-01-03 c:\windows\Tasks\Norton AntiVirus - Scan my computer - Alohboh.job - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2005-01-10 11:20] 2009-01-16 c:\windows\Tasks\PCA.job - c:\b50\StopStartpcA.bat [2005-05-20 15:37] 2009-01-16 c:\windows\Tasks\Symantec NetDetect.job - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-12-14 12:24] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://www.google.com IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm Trusted Zone: www.google.com Trusted Zone: *.microsoft.com TCP: {4C8379DF-D0D2-4C2E-999C-F03572DBA64A} = 192.168.0.1 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-16 18:02:20 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\eljalihj] "ImagePath"="system32\drivers\rxnskyhv.dat" . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(456) c:\windows\System32\ODBC32.dll - - - - - - - > 'lsass.exe'(1096) c:\windows\System32\dssenh.dll . Completion time: 2009-01-16 18:03:56 ComboFix-quarantined-files.txt 2009-01-16 23:03:50 ComboFix2.txt 2009-01-16 02:42:28 Pre-Run: 68,101,439,488 bytes free Post-Run: 68,094,144,512 bytes free winxpsp1_en_hom_bf.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect 150 |
|
|
|
|
Jan 17 2009, 01:45 AM
Post
#18
|
|
|
Forum Addict Group: HJT Team Posts: 5,949 Joined: 4-December 07 Member No.: 174,482 |
Lets do this first....
Please download Dr.Web CureIt to the Desktop:
Dr.Web will delete your ComboFix.. So, I need you to download the ComboFix again from below and run it.. Link 1 Post these logs in your next reply.. 1. Dr.Web CureIt 2. ComboFix -------------------- Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive Away for three months (22 August - 1 December 2009) |
|
|
|
|
Jan 17 2009, 06:27 AM
Post
#19
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
Hey Wan,
WOW that Dr Web program really ran the computer through it's paces. And the infections it found were through the roof. Anyway, as instructed I ran Dr Web, got the log after following all of your other instructions, and then ran combo-fix after the reboot into a normal windows session. I am actually out at the store working on this and other projects... so if you get a chance to post that will be great as I can implement your next set of instructions immediately. Thanks again Wan. G Here are the logs: apphel.dll;c:\windows\system32;Trojan.DownLoader.44922;Cannot cure; ALOHASPY.EXE;C:\AlohaQS\BIN;Probably BACKDOOR.Trojan;Incurable.Moved.; data002\32788R22FWJFW\C.bat;C:\Documents and Settings\Alohboh\Desktop\Combo-Fix.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\Alohboh\Desktop\Combo-Fix.exe\data002;Program.PsExec.171;; data002;C:\Documents and Settings\Alohboh\Desktop\Combo-Fix.exe;Archive contains infected objects;; Combo-Fix.exe;C:\Documents and Settings\Alohboh\Desktop;Archive contains infected objects;Moved.; mrofinu1000106.exe;C:\Documents and Settings\Alohboh\Desktop\from Windows folder;Trojan.DownLoader.38055;Deleted.; mrofinu572.exe.tmp;C:\Documents and Settings\Alohboh\Desktop\from Windows folder;Trojan.DownLoader.38055;Deleted.; data002\32788R22FWJFW\C.bat;C:\Documents and Settings\Alohboh\Desktop\Garth's Spyware Removal Folder\Combofix\Combo-Fix.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\Alohboh\Desktop\Garth's Spyware Removal Folder\Combofix\Combo-Fix.exe\data002;Program.PsExec.171;; data002;C:\Documents and Settings\Alohboh\Desktop\Garth's Spyware Removal Folder\Combofix\Combo-Fix.exe;Archive contains infected objects;; Combo-Fix.exe;C:\Documents and Settings\Alohboh\Desktop\Garth's Spyware Removal Folder\Combofix;Archive contains infected objects;Moved.; pcant.exe;C:\Documents and Settings\Alohboh\Desktop\Temp probably spyware pulled from docnsettings alohaboh appdata;Trojan.MulDrop.17011;Deleted.; trant.exe;C:\Documents and Settings\Alohboh\Desktop\Temp probably spyware pulled from docnsettings alohaboh appdata;Trojan.MulDrop.17011;Deleted.; X.exe\data006;C:\Documents and Settings\Alohboh\Desktop\Temp probably spyware pulled from docnsettings alohaboh appdata\From alohaboh folder;Trojan.DownLoader.24715;; X.exe;C:\Documents and Settings\Alohboh\Desktop\Temp probably spyware pulled from docnsettings alohaboh appdata\From alohaboh folder;Archive contains infected objects;Moved.; vncviewer.exe;C:\Program Files\UltraVNC.CHANGED;Program.RemoteAdmin;Incurable.Moved.; winvnc.exe;C:\Program Files\UltraVNC.CHANGED;Program.RemoteAdmin;Incurable.Moved.; DDPLAY~1.VIR;C:\Qoobox\Quarantine\C\Documents and Settings\Alohboh\Application Data\YSTEM3~1;Adware.Outer;Deleted.; dvdplay.ex_.vir;C:\Qoobox\Quarantine\C\Program Files\Common Files\SCURIT~1;Trojan.DownLoader.22753;Deleted.; ifastseek.dll.vir;C:\Qoobox\Quarantine\C\Program Files\Helper;Trojan.StartPage.20562;Deleted.; bolenja.exe.vir;C:\Qoobox\Quarantine\C\WINDOWS;Trojan.MulDrop.10460;Deleted.; bolenjx.exe.vir;C:\Qoobox\Quarantine\C\WINDOWS;Trojan.MulDrop.13351;Deleted.; kus109.dat.vir;C:\Qoobox\Quarantine\C\WINDOWS;Trojan.Proxy.1739;Deleted.; F2233warxy11.dll.vir;C:\Qoobox\Quarantine\C\WINDOWS\Media;Trojan.Warx;Deleted.; smartwarxyu.dll.vir;C:\Qoobox\Quarantine\C\WINDOWS\Media;Trojan.Warx;Deleted.; kus109.dat.vir;C:\Qoobox\Quarantine\C\WINDOWS\SYSTEM32;Trojan.Proxy.1739;Deleted.; multikz.exe.vir;C:\Qoobox\Quarantine\C\WINDOWS\SYSTEM32;Trojan.DownLoader.44921;Deleted.; users32.dat.vir;C:\Qoobox\Quarantine\C\WINDOWS\SYSTEM32;Trojan.Click.5043;Deleted.; ineWc011065.exe.vir;C:\Qoobox\Quarantine\C\WINDOWS\SYSTEM32\ineWc01;Trojan.DownLoader.24715;Deleted.; data002\32788R22FWJFW\C.bat;C:\RECYCLER\S-1-5-21-2248645817-3289682256-113954702-1009\Dc8\Combo-Fix.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\RECYCLER\S-1-5-21-2248645817-3289682256-113954702-1009\Dc8\Combo-Fix.exe\data002;Program.PsExec.171;; data002;C:\RECYCLER\S-1-5-21-2248645817-3289682256-113954702-1009\Dc8\Combo-Fix.exe;Archive contains infected objects;; Combo-Fix.exe;C:\RECYCLER\S-1-5-21-2248645817-3289682256-113954702-1009\Dc8;Archive contains infected objects;Moved.; A0619112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0619113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0619114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0620112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0620113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0620114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0620115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0621112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0621113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0622112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0622113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0622114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0623112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0623113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0623114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0624112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0624113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.10460;Deleted.; A0624114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0624115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP193;Trojan.MulDrop.13351;Deleted.; A0625112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.10460;Deleted.; A0625113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.10460;Deleted.; A0625114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.13351;Deleted.; A0626112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.10460;Deleted.; A0626113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.10460;Deleted.; A0626114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP194;Trojan.MulDrop.13351;Deleted.; A0627112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0627113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0627114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.13351;Deleted.; A0628112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0628113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0629112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0629113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.10460;Deleted.; A0629114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP195;Trojan.MulDrop.13351;Deleted.; A0630112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0630113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0630114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.13351;Deleted.; A0630115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.13351;Deleted.; A0631112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0631113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0631114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.13351;Deleted.; A0632112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0632113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP196;Trojan.MulDrop.10460;Deleted.; A0633112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0633113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0633114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0633115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0634112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0634113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0634114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0635112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0635113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0635114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0636112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0636113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.10460;Deleted.; A0636114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0636115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP197;Trojan.MulDrop.13351;Deleted.; A0637112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP198;Trojan.MulDrop.10460;Deleted.; A0637113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP198;Trojan.MulDrop.10460;Deleted.; A0637114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP198;Trojan.MulDrop.13351;Deleted.; A0638112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0638113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0639112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0639113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0639114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.13351;Deleted.; A0639115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.13351;Deleted.; A0640112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0640113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0640114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.13351;Deleted.; A0641112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0641113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.10460;Deleted.; A0641114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP199;Trojan.MulDrop.13351;Deleted.; A0642112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0642113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0642114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0643112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0643113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0643114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0643115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0644112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0644113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0645112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0645113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0645114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0646112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0646113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0646114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0646115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0647112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0647113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.10460;Deleted.; A0647114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0647115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP200;Trojan.MulDrop.13351;Deleted.; A0648112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP201;Trojan.MulDrop.10460;Deleted.; A0648113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP201;Trojan.MulDrop.10460;Deleted.; A0648114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP201;Trojan.MulDrop.13351;Deleted.; A0649112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP201;Trojan.MulDrop.10460;Deleted.; A0649113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP201;Trojan.MulDrop.10460;Deleted.; A0650112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0650113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0650114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0650115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0651112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0651113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0651114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0652112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0652113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0652114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0653112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0653113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0653114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0653115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0654112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0654113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0654114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0655112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0655113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0655114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0655115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0656112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0656113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0656114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0657112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0657113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0657114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0657115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0658112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0658113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.10460;Deleted.; A0658114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP202;Trojan.MulDrop.13351;Deleted.; A0659112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0659113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0659114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.13351;Deleted.; A0660112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0660113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0661112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0661113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.10460;Deleted.; A0661114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP203;Trojan.MulDrop.13351;Deleted.; A0662112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0662113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0662114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0662115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0663112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0663113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0664112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0664113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0664114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0665112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0665113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0665114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0666112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0666113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0666114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0667112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0667113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.10460;Deleted.; A0667114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0667115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP204;Trojan.MulDrop.13351;Deleted.; A0668112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0668113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0668114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.13351;Deleted.; A0668115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.13351;Deleted.; A0669112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0669113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0669114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.13351;Deleted.; A0670112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0670113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0670114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.13351;Deleted.; A0671112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0671113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.10460;Deleted.; A0671114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP205;Trojan.MulDrop.13351;Deleted.; A0672112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0672113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0672114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0673112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0673113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0673114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0674112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0674113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0674114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0674115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0675112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0675113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0675114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0676112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0676113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0676114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0676115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0677112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0677113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0677114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0678112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0678113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.10460;Deleted.; A0678114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP206;Trojan.MulDrop.13351;Deleted.; A0679112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.10460;Deleted.; A0679113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.10460;Deleted.; A0679114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.13351;Deleted.; A0680112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.10460;Deleted.; A0680113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.10460;Deleted.; A0680114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP207;Trojan.MulDrop.13351;Deleted.; A0681112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.10460;Deleted.; A0681113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.10460;Deleted.; A0681114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.13351;Deleted.; A0682112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.10460;Deleted.; A0682113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.10460;Deleted.; A0682114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.13351;Deleted.; A0682115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP208;Trojan.MulDrop.13351;Deleted.; A0683112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0683113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0684112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0684113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0684114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.13351;Deleted.; A0684115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.13351;Deleted.; A0685112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0685113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP209;Trojan.MulDrop.10460;Deleted.; A0686112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP210;Trojan.MulDrop.10460;Deleted.; A0686113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP210;Trojan.MulDrop.10460;Deleted.; A0686114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP210;Trojan.MulDrop.13351;Deleted.; A0686115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP210;Trojan.MulDrop.13351;Deleted.; A0687112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0687113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0688112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0688113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0688114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.13351;Deleted.; A0688115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.13351;Deleted.; A0689112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0689113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0689114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.13351;Deleted.; A0690112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0690113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0690114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.13351;Deleted.; A0691112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0691113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.10460;Deleted.; A0691114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP211;Trojan.MulDrop.13351;Deleted.; A0692112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0692113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0692114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.13351;Deleted.; A0693112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0693113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0693114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.13351;Deleted.; A0694112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0694113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.10460;Deleted.; A0694114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP212;Trojan.MulDrop.13351;Deleted.; A0695112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0695113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0695114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.13351;Deleted.; A0696112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0696113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0696114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.13351;Deleted.; A0697112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0697113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.10460;Deleted.; A0697114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.13351;Deleted.; A0697115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP213;Trojan.MulDrop.13351;Deleted.; A0698112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0698113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0699112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0699113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0699114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.13351;Deleted.; A0700112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0700113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.10460;Deleted.; A0700114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.13351;Deleted.; A0700115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP214;Trojan.MulDrop.13351;Deleted.; A0701112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.10460;Deleted.; A0701113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.10460;Deleted.; A0702112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.10460;Deleted.; A0702113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.10460;Deleted.; A0702114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.13351;Deleted.; A0702115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP215;Trojan.MulDrop.13351;Deleted.; A0703112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.10460;Deleted.; A0703113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.10460;Deleted.; A0703114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.13351;Deleted.; A0704112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.10460;Deleted.; A0704113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.10460;Deleted.; A0704114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP216;Trojan.MulDrop.13351;Deleted.; A0705112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0705113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0705114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.13351;Deleted.; A0706112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0706113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0706114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.13351;Deleted.; A0707112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0707113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0707114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.13351;Deleted.; A0707115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.13351;Deleted.; A0708112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0708113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.10460;Deleted.; A0708114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP217;Trojan.MulDrop.13351;Deleted.; A0709112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0709113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0709114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.13351;Deleted.; A0710112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0710113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0710114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.13351;Deleted.; A0711112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0711113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0711114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.13351;Deleted.; A0712112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0712113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.10460;Deleted.; A0712114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.13351;Deleted.; A0712115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP218;Trojan.MulDrop.13351;Deleted.; A0713112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.10460;Deleted.; A0713113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.10460;Deleted.; A0713114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.13351;Deleted.; A0714112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.10460;Deleted.; A0714113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.10460;Deleted.; A0714114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP219;Trojan.MulDrop.13351;Deleted.; A0715112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.10460;Deleted.; A0715113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.10460;Deleted.; A0715114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.13351;Deleted.; A0716112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.10460;Deleted.; A0716113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.10460;Deleted.; A0716114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.13351;Deleted.; A0716115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP220;Trojan.MulDrop.13351;Deleted.; A0717112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0717113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0717114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.13351;Deleted.; A0718112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0718113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0718114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.13351;Deleted.; A0719112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0719113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.10460;Deleted.; A0719114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP221;Trojan.MulDrop.13351;Deleted.; A0720112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.10460;Deleted.; A0720113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.10460;Deleted.; A0720114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.13351;Deleted.; A0720115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.13351;Deleted.; A0721112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.10460;Deleted.; A0721113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.10460;Deleted.; A0721114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP222;Trojan.MulDrop.13351;Deleted.; A0722112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP223;Trojan.MulDrop.10460;Deleted.; A0722113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP223;Trojan.MulDrop.10460;Deleted.; A0723112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP223;Trojan.MulDrop.10460;Deleted.; A0723113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP223;Trojan.MulDrop.10460;Deleted.; A0723114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP223;Trojan.MulDrop.13351;Deleted.; A0724112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.10460;Deleted.; A0724113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.10460;Deleted.; A0724114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.13351;Deleted.; A0725112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.10460;Deleted.; A0725113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.10460;Deleted.; A0725114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP224;Trojan.MulDrop.13351;Deleted.; A0726112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0726113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0726114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.13351;Deleted.; A0726115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.13351;Deleted.; A0727112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0727113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0727114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.13351;Deleted.; A0728112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0728113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP225;Trojan.MulDrop.10460;Deleted.; A0729112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP226;Trojan.MulDrop.10460;Deleted.; A0729113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP226;Trojan.MulDrop.10460;Deleted.; A0729114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP226;Trojan.MulDrop.13351;Deleted.; A0730112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.10460;Deleted.; A0730113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.10460;Deleted.; A0730114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.13351;Deleted.; A0731112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.10460;Deleted.; A0731113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.10460;Deleted.; A0731114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP227;Trojan.MulDrop.13351;Deleted.; A0732112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0732113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0732114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0733112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0733113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0733114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0734112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0734113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0734114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0735112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0735113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0735114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0736112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0736113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0736114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0737112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0737113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0737114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0738112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0738113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0738114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0739112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0739113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.10460;Deleted.; A0739114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0739115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP228;Trojan.MulDrop.13351;Deleted.; A0740112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0740113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0741112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0741113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0741114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.13351;Deleted.; A0742112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0742113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0742114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.13351;Deleted.; A0742115.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.13351;Deleted.; A0743112.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0743113.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0743114.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.13351;Deleted.; A0743123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0743124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.10460;Deleted.; A0743125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP229;Trojan.MulDrop.13351;Deleted.; A0744123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0744124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0745123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0745124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0745125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.13351;Deleted.; A0745126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.13351;Deleted.; A0746123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0746124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0747123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0747124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0747125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.13351;Deleted.; A0747126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.13351;Deleted.; A0748123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0748124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.10460;Deleted.; A0748125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP230;Trojan.MulDrop.13351;Deleted.; A0749123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0749124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0749125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0750123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0750124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0750125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0751123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0751124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0752123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0752124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0752125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0753123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0753124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0753125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0754123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0754124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.10460;Deleted.; A0754125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0754126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP231;Trojan.MulDrop.13351;Deleted.; A0755123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP232;Trojan.MulDrop.10460;Deleted.; A0755124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP232;Trojan.MulDrop.10460;Deleted.; A0755125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP232;Trojan.MulDrop.13351;Deleted.; A0756123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP232;Trojan.MulDrop.10460;Deleted.; A0756124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP232;Trojan.MulDrop.10460;Deleted.; A0757123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0757124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0757125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.13351;Deleted.; A0758123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0758124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0758125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.13351;Deleted.; A0758126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.13351;Deleted.; A0759123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0759124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0759125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.13351;Deleted.; A0760123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0760124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.10460;Deleted.; A0760125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP233;Trojan.MulDrop.13351;Deleted.; A0761123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP234;Trojan.MulDrop.10460;Deleted.; A0761124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP234;Trojan.MulDrop.10460;Deleted.; A0761125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP234;Trojan.MulDrop.13351;Deleted.; A0762123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP235;Trojan.MulDrop.10460;Deleted.; A0762124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP235;Trojan.MulDrop.10460;Deleted.; A0762125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP235;Trojan.MulDrop.13351;Deleted.; A0763123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0763124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0763125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.13351;Deleted.; A0764123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0764124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0764125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.13351;Deleted.; A0765123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0765124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.10460;Deleted.; A0765125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP236;Trojan.MulDrop.13351;Deleted.; A0766123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.10460;Deleted.; A0766124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.10460;Deleted.; A0766125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.13351;Deleted.; A0766126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.13351;Deleted.; A0766131.exe\data006;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237\A0766131.exe;Trojan.DownLoader.24715;; A0766131.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Archive contains infected objects;Moved.; A0767123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.10460;Deleted.; A0767124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP237;Trojan.MulDrop.10460;Deleted.; A0768123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0768124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0768125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0769123.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769124.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769125.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0769126.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0769135.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769136.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769137.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0769143.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769144.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0769145.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0769146.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0770143.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0770144.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0770153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0770154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0770155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0771153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0771154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0771155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0772153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0772154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0772155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0773153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0773154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0773155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0773156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.13351;Deleted.; A0774153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0774154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP238;Trojan.MulDrop.10460;Deleted.; A0775153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.10460;Deleted.; A0775154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.10460;Deleted.; A0775155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.13351;Deleted.; A0776153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.10460;Deleted.; A0776154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.10460;Deleted.; A0776155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP239;Trojan.MulDrop.13351;Deleted.; A0777153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0777154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0777155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.13351;Deleted.; A0777156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.13351;Deleted.; A0778153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0778154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0779153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0779154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.10460;Deleted.; A0779155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP240;Trojan.MulDrop.13351;Deleted.; A0780153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP241;Trojan.MulDrop.10460;Deleted.; A0780154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP241;Trojan.MulDrop.10460;Deleted.; A0780155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP241;Trojan.MulDrop.13351;Deleted.; A0781153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.10460;Deleted.; A0781154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.10460;Deleted.; A0781155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.13351;Deleted.; A0781156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.13351;Deleted.; A0782153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.10460;Deleted.; A0782154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.10460;Deleted.; A0782155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP242;Trojan.MulDrop.13351;Deleted.; A0783153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0783154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0783155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0784153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0784154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0784155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0785153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0785154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0785155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0786153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0786154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0786155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0787153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0787154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0787155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0788153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0788154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0788155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0789153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0789154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0789155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0790153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0790154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0790155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0791153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0791154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0791155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0791156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0792153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0792154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0793153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0793154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0793155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0793156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0794153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0794154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0794155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0795153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0795154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.10460;Deleted.; A0795155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP243;Trojan.MulDrop.13351;Deleted.; A0796153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0796154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0796155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0796156.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0797153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0797154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798153.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798154.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798155.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0798160.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798161.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798162.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0798163.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0798170.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798171.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798172.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0798272.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0798273.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0799272.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800272.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800273.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800274.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800280.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800281.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800282.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800283.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800291.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.DownLoader.38055;Deleted.; A0800293.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800294.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800295.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800301.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800302.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800303.OLD;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800304.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800305.OLD;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800306.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800307.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800308.OLD;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800312.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.DownLoader.44921;Deleted.; A0800322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.10460;Deleted.; A0800324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.MulDrop.13351;Deleted.; A0800326.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP244;Trojan.DownLoader.44921;Deleted.; A0801322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.10460;Deleted.; A0801323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.10460;Deleted.; A0801324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.13351;Deleted.; A0801325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.DownLoader.44921;Deleted.; A0802322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.10460;Deleted.; A0802323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.10460;Deleted.; A0802324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.MulDrop.13351;Deleted.; A0802325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP245;Trojan.DownLoader.44921;Deleted.; A0803322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP246;Trojan.MulDrop.10460;Deleted.; A0803323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP246;Trojan.MulDrop.10460;Deleted.; A0803324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP246;Trojan.MulDrop.13351;Deleted.; A0803328.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP246;Trojan.DownLoader.44921;Deleted.; A0804322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0804323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0804324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0804325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.DownLoader.44921;Deleted.; A0805322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0805323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0805324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.DownLoader.44921;Deleted.; A0806322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0806323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0806324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0806325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.DownLoader.44921;Deleted.; A0807322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0807323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0807324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0807325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.DownLoader.44921;Deleted.; A0808322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0808323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0808324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0808325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0808326.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.DownLoader.44921;Deleted.; A0809322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0809323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.10460;Deleted.; A0809324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP247;Trojan.MulDrop.13351;Deleted.; A0810322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP248;Trojan.MulDrop.10460;Deleted.; A0810323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP248;Trojan.MulDrop.10460;Deleted.; A0810324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP248;Trojan.MulDrop.13351;Deleted.; A0810325.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP248;Trojan.MulDrop.13351;Deleted.; A0810326.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP248;Trojan.DownLoader.44921;Deleted.; A0811322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0811323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0811324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.44921;Deleted.; A0812322.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0812323.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0812324.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.13351;Deleted.; A0812328.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.44921;Deleted.; A0812332.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0812333.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.10460;Deleted.; A0812334.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.13351;Deleted.; A0812335.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.13351;Deleted.; A0812336.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.44921;Deleted.; A0812346.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Juan.60;Deleted.; A0812347.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.278;Deleted.; A0812349.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.854;Deleted.; A0812351.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.278;Deleted.; A0812353.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.278;Deleted.; A0812355.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.Nopage;Incurable.Moved.; A0812356.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.PWS.Tanspy.1178;Deleted.; A0812357.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.62808;Deleted.; A0812358.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.based;Deleted.; A0812360.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.51199;Deleted.; A0812361.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Click.17012;Deleted.; A0812362.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.Ttc;Incurable.Moved.; A0812363.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.Outer;Incurable.Moved.; A0812364.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.Ttc;Incurable.Moved.; A0812365.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.Ttc;Incurable.Moved.; A0812366.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812367.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812369.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812370.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812371.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812372.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Juan.60;Deleted.; A0812373.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.ClickSpring;Incurable.Moved.; A0812374.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Imp;Deleted.; A0812375.sys;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Program.Winfixer - read error;; A0812376.SYS;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.NtRootKit.497;Deleted.; A0812378.exe\data002;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249\A0812378.exe;Adware.Ttc;; A0812378.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Archive contains infected objects;Moved.; A0812380.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.25873;Deleted.; A0812382.SYS;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Spambot.2885;Deleted.; A0812383.sys;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Spambot.2885;Deleted.; A0812385.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.38055;Deleted.; A0812388.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Fakealert;Deleted.; A0812389.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Fakealert;Deleted.; A0812394.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Adware.ClickSpring.9;Incurable.Moved.; A0812395.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.9785;Deleted.; A0812396.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.25873;Deleted.; A0812400.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Fakealert;Deleted.; A0812401.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.DownLoader.25873;Deleted.; A0812402.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.MulDrop.12148;Deleted.; A0812410.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.855;Deleted.; A0812411.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Virtumod.240;Deleted.; A0812412.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP249;Trojan.Popuper.5076;Deleted.; A0812419.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP250;Trojan.DownLoader.44921;Deleted.; A0812423.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP250;Trojan.Warx;Deleted.; A0812424.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP250;Trojan.Warx;Deleted.; A0812425.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.DownLoader.44921;Deleted.; A0812428.ex_;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.DownLoader.22753;Deleted.; A0812429.dll;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.StartPage.20562;Deleted.; A0812430.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.MulDrop.10460;Deleted.; A0812431.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.MulDrop.13351;Deleted.; A0812433.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Trojan.DownLoader.24715;Deleted.; A0812435.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Adware.Outer;; A0813418.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Probably BATCH.Virus;Incurable.Moved.; A0813461.EXE;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Program.PsExec.170;Incurable.Moved.; A0813472.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Probably BATCH.Virus;Incurable.Moved.; A0813482.EXE;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP251;Program.PsExec.170;Incurable.Moved.; A0813589.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP252;Probably BATCH.Virus;Incurable.Moved.; A0813630.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Probably BATCH.Virus;Incurable.Moved.; data002\32788R22FWJFW\C.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814688.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814688.exe\data002;Program.PsExec.171;; data002;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814688.exe;Archive contains infected objects;; A0814688.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Archive contains infected objects;Moved.; A0814689.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Trojan.DownLoader.38055;Deleted.; data002\32788R22FWJFW\C.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814690.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814690.exe\data002;Program.PsExec.171;; data002;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814690.exe;Archive contains infected objects;; A0814690.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Archive contains infected objects;Moved.; A0814691.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Trojan.MulDrop.17011;Deleted.; A0814692.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Trojan.MulDrop.17011;Deleted.; A0814693.exe\data006;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814693.exe;Trojan.DownLoader.24715;; A0814693.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Archive contains infected objects;Moved.; data002\32788R22FWJFW\C.bat;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814694.exe\data002;Probably BATCH.Virus;; data002\32788R22FWJFW\psexec.cfexe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814694.exe\data002;Program.PsExec.171;; data002;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253\A0814694.exe;Archive contains infected objects;; A0814694.exe;C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP253;Archive contains infected objects;Moved.; expxcee.exe;C:\WINDOWS;BackDoor.Bulknet.128;Deleted.; shell.exe.OLD;C:\WINDOWS;Trojan.Fakealert;Deleted.; APPHEL.dll;C:\WINDOWS\SYSTEM32;Trojan.DownLoader.44922;Cannot cure; bolenjcfa.txt;C:\WINDOWS\SYSTEM32;Trojan.MulDrop.10460;Deleted.; And then here is the Combo-Fix Log that was run after Dr. Web: ComboFix 09-01-16.03 - Alohboh 2009-01-17 6:13:17.4 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.510.300 [GMT -5:00] Running from: c:\documents and settings\Alohboh\Desktop\Combo-Fix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\ini.ini\ . ((((((((((((((((((((((((( Files Created from 2008-12-17 to 2009-01-17 ))))))))))))))))))))))))))))))) . 2009-01-17 03:27 . 2009-01-17 04:42 <DIR> d-------- c:\documents and settings\Alohboh\DoctorWeb 2009-01-14 17:31 . 2009-01-14 17:31 250 --a------ c:\windows\gmer.ini 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- C:\rsit 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- c:\program files\trend micro 2009-01-14 16:38 . 2009-01-14 16:38 <DIR> d-------- c:\documents and settings\Alohboh\Application Data\Malwarebytes 2009-01-14 16:38 . 2009-01-04 18:38 15,504 --a------ c:\windows\SYSTEM32\DRIVERS\mbam.sys 2009-01-14 16:28 . 2009-01-14 16:38 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-14 16:28 . 2009-01-14 16:28 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-14 16:28 . 2009-01-04 18:38 38,496 --a------ c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-17 11:01 --------- d-----w c:\program files\Common Files\Symantec Shared 2009-01-17 10:59 --------- d-----w c:\program files\UltraVNC.CHANGED 2008-01-22 14:23 0 ----a-w c:\documents and settings\Alohboh\del.bat 2008-01-21 15:32 246 ----a-w c:\program files\Common Files\rycil844 2008-01-20 18:12 61 ----a-w c:\program files\ini.ini 2007-07-28 09:06 135 ----a-w c:\program files\Common Files\viloz.html . Files Infected - Patched c:\program files\QuickTime\qttask.exe c:\program files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe c:\progra~1\SYMNET~1\SNDMon.exe c:\windows\System32\igfxtray.exe c:\program files\Intel\Modem Event Monitor\IntelMEM.exe c:\windows\System32\spool\drivers\w32x86\3\hpztsb10.exe c:\program files\Analog Devices\Core\smax4pnp.exe . ((((((((((((((((((((((((((((( snapshot@2009-01-15_21.41.06.31 ))))))))))))))))))))))))))))))))))))))))) . - 2009-01-16 02:37:48 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT + 2009-01-17 11:01:46 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT - 2009-01-16 02:37:48 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT + 2009-01-17 11:01:46 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT - 2009-01-16 02:38:22 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-17 11:01:46 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-17 11:02:10 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_30c.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06DBC41D-B12E-4133-876A-64E0C8FDD1D3}] 2002-08-29 05:00 84480 --a------ c:\windows\System32\APPHEL.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\System32\ctfmon.exe" [2002-08-29 13312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\System32\igfxtray.exe" [2008-01-21 155648] "IntelMeM"="c:\program files\Intel\Modem Event Monitor\IntelMEM.exe" [2008-01-21 221184] "HPDJ Taskbar Utility"="c:\windows\System32\spool\drivers\w32x86\3\hpztsb10.exe" [2008-01-21 172032] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-01-21 1404928] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PCANotify] 2003-10-31 11:01 8704 c:\windows\SYSTEM32\PCANotify.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2007-10-10 19:51 39792 c:\program files\Adobe\Reader 8.0\Reader\Reader_SL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp] --a------ 2005-03-23 14:34 58992 c:\program files\Common Files\Symantec Shared\CCAPP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2008-01-21 10:33 77824 c:\program files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSC_UserPrompt] --a------ 2008-01-21 10:33 218240 c:\program files\Common Files\Symantec Shared\Security Center\usrprmpt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor] --a------ 2008-01-21 10:33 100056 c:\progra~1\SYMNET~1\sndmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "AntivirusOverride"=dword:00000001 R0 eljalihj;eljalihj;c:\windows\System32\drivers\rxnskyhv.dat --> c:\windows\System32\drivers\rxnskyhv.dat [?] R1 ShldDrv;Panda File Shield Driver;c:\windows\SYSTEM32\DRIVERS\ShlDrv51.sys [2008-01-22 38968] R4 CtlSvr;CtlSvr;c:\alohaqs\BIN\CTLSVR.EXE [2004-08-05 1703936] R4 PavProc;Panda Process Protection Driver;c:\windows\SYSTEM32\DRIVERS\PavProc.sys [2008-01-22 178872] S0 sipuf;sipuf;c:\windows\System32\drivers\gviteepr.sys --> c:\windows\System32\drivers\gviteepr.sys [?] . Contents of the 'Scheduled Tasks' folder 2009-01-16 c:\windows\Tasks\At1.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At2.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At3.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At4.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At5.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At6.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At7.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2009-01-16 c:\windows\Tasks\At8.job - c:\b50\AlohaPoll.bat [2005-05-18 14:06] 2005-03-24 c:\windows\Tasks\ISP signup reminder 1.job - c:\windows\System32\OOBE\OOBEBALN.EXE [2002-08-29 05:00] 2009-01-17 c:\windows\Tasks\Norton AntiVirus - Scan my computer - Alohboh.job - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2005-01-10 11:20] 2009-01-16 c:\windows\Tasks\PCA.job - c:\b50\StopStartpcA.bat [2005-05-20 15:37] 2009-01-17 c:\windows\Tasks\Symantec NetDetect.job - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-12-14 12:24] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://www.google.com IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a} - %SystemRoot%\web\related.htm Trusted Zone: www.google.com Trusted Zone: *.microsoft.com TCP: {4C8379DF-D0D2-4C2E-999C-F03572DBA64A} = 192.168.0.1 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-17 06:17:17 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\eljalihj] "ImagePath"="system32\drivers\rxnskyhv.dat" . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(456) c:\windows\System32\ODBC32.dll - - - - - - - > 'lsass.exe'(1096) c:\windows\System32\dssenh.dll . Completion time: 2009-01-17 6:18:52 ComboFix-quarantined-files.txt 2009-01-17 11:18:48 ComboFix2.txt 2009-01-16 02:42:28 Pre-Run: 68,031,512,576 bytes free Post-Run: 68,021,448,704 bytes free 145 |
|
|
|
|
Jan 17 2009, 07:23 AM
Post
#20
|
|
|
Forum Addict Group: HJT Team Posts: 5,949 Joined: 4-December 07 Member No.: 174,482 |
Hello.. I want to go out dinner with my friends... So, lets get to your logs..
QUOTE Files Infected - Patched c:\program files\QuickTime\qttask.exe c:\program files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe c:\progra~1\SYMNET~1\SNDMon.exe c:\windows\System32\igfxtray.exe c:\program files\Intel\Modem Event Monitor\IntelMEM.exe c:\windows\System32\spool\drivers\w32x86\3\hpztsb10.exe c:\program files\Analog Devices\Core\smax4pnp.exe These files are infected.. Unfortunately, these are required files.. Can you search for each files and try to disinfect it with either your Norton or the Dr.Web CureIt?.. Just go to each file >> right click >> choose Scan with any antivirus that listed.. If that fails, you may need to uninstall >> reinstall each programs that stated there.. Please do that and tell me more about it
-------------------- Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive Away for three months (22 August - 1 December 2009) |
|
|
|
|
Jan 18 2009, 07:24 PM
Post
#21
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
Hey Wan,
Sorry it took me a little while to get back with you, I got a bit busy with other stuff over the weekend. But, I did what you asked and here's where we are at: The Norton Virus Scanner is actually old and out of date, but I could never fully uninstall it due to the level of infection on the computer (not even Norton's Product Removal Tool would work). However, that was quite a long time ago, and perhaps I can clear that stuff old stuff out now. When I clicked on the files that you sited, it did not give me the option to use Dr. Web. Therefore I ran Dr. Web again, and it did not actually tag any of those files as infected. Still, to be confident I went ahead and ran Trend Micro's online (housecall) virus scanner, and it tagged a lot, but not any of these except for the smax4pnp.exe file. Which it could not clean, but gave manual instructions for instead. I also installed AVG 8.0 Free Edition, and that tagged and cleaned some items. Then I ultimately just did a search for each of them on the computer and pulled all instances into a folder that is ready to delete. I've run all my "critical" systems and nothing seems broken, and if push comes to shove I'll figure out a way to reinstall the programs later. So, barring you saying it's a really bad idea, I'll go ahead and delete the folder with all those questionable files and we should be good. Assuming that's ok? Then I guess my other question would simply be, what is the next step we should take? Thanks again, Sincerely, G |
|
|
|
|
Jan 20 2009, 06:55 AM
Post
#22
|
|
|
Forum Addict Group: HJT Team Posts: 5,949 Joined: 4-December 07 Member No.: 174,482 |
Hello, first of all, lets do a search for this file.. igfxtray.exe and hpztsb10.exe
Tell me in details about below for each igfxtray.exe that you find.. Repeat with hpztsb10.exe file.. - locations/fullpath - size - date created Post me the information that I need here.. Then, please uninstall and re-install (if you wish) these applications.. QuickTime Analog Devices Symantec/Norton Modem Event Monitor After you uninstall them, please delete these files/folders.. c:\program files\QuickTime c:\program files\Common Files\Symantec Shared c:\progra~1\SYMNET~1 c:\program files\Intel\Modem Event Monitor\IntelMEM.exe c:\program files\Analog Devices\Core\smax4pnp.exe Next, run ComboFix once again and post the log here.. Also, post me the details that I need.. Because we need to replace those two files...
-------------------- Keep calm, make it simple, use your brain, don't freak out, and you'll be just fine..
Awesomeness: When I get sad, I stop being sad and be awesome instead.. True story - Barney Stinson Its gonna be legen.. wait for it.. dary! Cherish the pain, it means you're still alive Away for three months (22 August - 1 December 2009) |
|
|
|
|
Jan 21 2009, 06:53 PM
Post
#23
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
Hi Wan,
I was able to do almost everything you requested... with some slight modifications. Because I don't have the install disks for some of my programs, I was reluctant to completely uninstall and delete certain items unless we have absolutely no other choice. I can probably get my hands on a clean version of the individual files that we feel are corrupted to ultimately replace the infected ones... thus allowing me to keep those programs. However, if it turns out that there is no other choice, I can just lose those programs if necessary. So, here's where we are at: I uninstalled the following, deleted their folders, and deleted all instances of the offending file(s) associated with these programs: Quicktime [qttask.exe] Modem Event Monitor [IntelMEM.exe] SymNet [whatever the offending file was, and the actual full program iteself... something other than SymNet] For all other files in question I either outright deleted the offending file, and/or cut it to a folder on my desktop and renamed it by changing them from .exe files to .bad files I then rebooted and ran a search and none of the offending files were located. as for igfxtray.exe. I cut all instances of it and renamed them with a .bad extension (I don't think this is a program I actually need) It was located in these folders: c:\i386 c:\DRIVERS\VIDEO c:\WINDOWS\SYSTEM32 c:\WINDOWS\SYSTEM32\ReinstallBackups\0000\DriverFiles c:\WINDOWS\SYSTEM32\ReinstallBackups\0010\DriverFiles as for hpztsb10.exe. It was located in one folder, I cut it, renamed it with the .bad extension (again, this does not seem to be a critical file for my setup). It was located in this folder: C:\WINDOWS\System32\spool\drivers\w32x86\3\ Both igfxtray.exe and hpztsb10.exe were startup items as well. I disabled any associations within msconfig for for both startup and services, so they no longer attempt to run at startup. Basically, all the files you expressed concern about have been deleted or temporarily renamed and are ready for deletion at a later date. It does not appear as if any of these files are being executed in the current setup of the computer. I then ran combofix as you requested, and the log for that is located below: |
|
|
|
|
Jan 21 2009, 06:55 PM
Post
#24
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
ComboFix 09-01-21.02 - Alohboh 2009-01-21 18:13:29.5 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.286 [GMT -5:00] Running from: c:\documents and settings\Alohboh\Desktop\Combo-Fix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\IE4 Error Log.txt . ((((((((((((((((((((((((( Files Created from 2008-12-21 to 2009-01-21 ))))))))))))))))))))))))))))))) . 2009-01-19 02:36 . 2009-01-19 16:04 <DIR> d--h----- C:\$AVG8.VAULT$ 2009-01-19 02:23 . 2009-01-19 02:27 <DIR> d-------- c:\windows\SYSTEM32\DRIVERS\Avg 2009-01-19 02:23 . 2009-01-19 02:23 <DIR> d-------- c:\program files\AVG 2009-01-19 02:23 . 2009-01-19 02:23 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg8 2009-01-19 02:23 . 2009-01-19 02:23 97,928 --a------ c:\windows\SYSTEM32\DRIVERS\avgldx86.sys 2009-01-19 02:23 . 2009-01-19 02:23 76,040 --a------ c:\windows\SYSTEM32\DRIVERS\avgtdix.sys 2009-01-19 02:23 . 2009-01-19 02:23 10,520 --a------ c:\windows\SYSTEM32\avgrsstx.dll 2009-01-19 02:05 . 2008-10-16 15:38 6,066,176 --------- c:\windows\SYSTEM32\DLLCACHE\ieframe.dll 2009-01-19 02:05 . 2007-04-17 04:32 2,455,488 --------- c:\windows\SYSTEM32\DLLCACHE\ieapfltr.dat 2009-01-19 02:05 . 2007-03-08 00:10 991,232 --------- c:\windows\SYSTEM32\DLLCACHE\ieframe.dll.mui 2009-01-19 02:05 . 2008-10-16 15:38 459,264 --------- c:\windows\SYSTEM32\DLLCACHE\msfeeds.dll 2009-01-19 02:05 . 2008-10-16 15:38 383,488 --------- c:\windows\SYSTEM32\DLLCACHE\ieapfltr.dll 2009-01-19 02:05 . 2008-10-16 15:38 267,776 --------- c:\windows\SYSTEM32\DLLCACHE\iertutil.dll 2009-01-19 02:05 . 2008-10-16 15:38 63,488 --------- c:\windows\SYSTEM32\DLLCACHE\icardie.dll 2009-01-19 02:05 . 2008-10-16 15:38 52,224 --------- c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll 2009-01-19 02:05 . 2008-10-16 08:11 13,824 --------- c:\windows\SYSTEM32\DLLCACHE\ieudinit.exe 2009-01-19 01:54 . 2005-10-19 08:59 163,840 --a------ c:\windows\SYSTEM32\igfxres.dll 2009-01-19 01:49 . 2009-01-19 01:49 <DIR> d-------- c:\program files\MSXML 4.0 2009-01-19 01:44 . 2008-12-11 05:57 333,952 --------- c:\windows\SYSTEM32\DLLCACHE\srv.sys 2009-01-19 01:43 . 2008-12-13 01:40 3,593,216 --------- c:\windows\SYSTEM32\DLLCACHE\mshtml.dll 2009-01-19 01:43 . 2008-10-15 20:00 1,499,136 --------- c:\windows\SYSTEM32\DLLCACHE\shdocvw.dll 2009-01-19 01:43 . 2008-10-16 15:38 1,160,192 --------- c:\windows\SYSTEM32\DLLCACHE\urlmon.dll 2009-01-19 01:43 . 2008-10-16 15:38 826,368 --------- c:\windows\SYSTEM32\DLLCACHE\wininet.dll 2009-01-19 01:42 . 2008-09-04 12:15 1,106,944 --------- c:\windows\SYSTEM32\DLLCACHE\msxml3.dll 2009-01-19 01:42 . 2008-10-24 06:21 455,296 --------- c:\windows\SYSTEM32\DLLCACHE\mrxsmb.sys 2009-01-19 01:42 . 2008-10-15 11:34 337,408 --------- c:\windows\SYSTEM32\DLLCACHE\netapi32.dll 2009-01-19 01:41 . 2008-08-14 05:11 2,189,184 --------- c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe 2009-01-19 01:41 . 2008-08-14 05:09 2,145,280 --------- c:\windows\SYSTEM32\DLLCACHE\ntkrnlmp.exe 2009-01-19 01:41 . 2008-08-14 04:33 2,066,048 --------- c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe 2009-01-19 01:41 . 2008-08-14 04:33 2,023,936 --------- c:\windows\SYSTEM32\DLLCACHE\ntkrpamp.exe 2009-01-19 01:41 . 2008-09-15 07:12 1,846,400 --------- c:\windows\SYSTEM32\DLLCACHE\win32k.sys 2009-01-19 01:40 . 2008-04-11 14:04 691,712 --------- c:\windows\SYSTEM32\DLLCACHE\inetcomm.dll 2009-01-19 01:40 . 2008-05-01 09:33 331,776 --------- c:\windows\SYSTEM32\DLLCACHE\msadce.dll 2009-01-19 01:39 . 2008-06-13 06:05 272,128 --------- c:\windows\SYSTEM32\DLLCACHE\bthport.sys 2009-01-19 01:39 . 2008-05-08 09:02 203,136 --------- c:\windows\SYSTEM32\DLLCACHE\rmcast.sys 2009-01-19 01:19 . 2009-01-19 01:19 <DIR> d-------- c:\windows\SYSTEM32\scripting 2009-01-19 01:19 . 2009-01-19 01:19 <DIR> d-------- c:\windows\SYSTEM32\en 2009-01-19 01:19 . 2009-01-19 01:19 <DIR> d-------- c:\windows\l2schemas 2009-01-19 00:59 . 2008-09-09 20:14 1,307,648 --a------ c:\windows\SYSTEM32\msxml6.dll 2009-01-19 00:58 . 2008-04-13 19:12 695,808 --------- c:\windows\SYSTEM32\DLLCACHE\drmv2clt.dll 2009-01-19 00:57 . 2008-04-13 19:11 286,720 --------- c:\windows\SYSTEM32\DLLCACHE\blackbox.dll 2009-01-19 00:57 . 2008-04-13 19:11 233,472 --------- c:\windows\SYSTEM32\azroles.dll 2009-01-19 00:57 . 2008-04-13 19:11 136,192 --------- c:\windows\SYSTEM32\aaclient.dll 2009-01-19 00:57 . 2008-04-13 12:23 8,192 --------- c:\windows\SYSTEM32\DLLCACHE\asferror.dll 2009-01-19 00:57 . 2008-04-13 19:11 7,168 --------- c:\windows\SYSTEM32\bitsprx4.dll 2009-01-19 00:57 . 2002-08-29 05:00 999 --------- c:\windows\SYSTEM32\DLLCACHE\bktrh.gif 2009-01-19 00:13 . 2008-04-13 19:12 221,184 --a------ c:\windows\SYSTEM32\wmpns.dll 2009-01-19 00:11 . 2009-01-19 00:11 <DIR> d-------- c:\windows\provisioning 2009-01-19 00:11 . 2009-01-19 01:19 <DIR> d-------- c:\windows\peernet 2009-01-19 00:08 . 2009-01-19 00:08 <DIR> d-------- c:\windows\ServicePackFiles 2009-01-19 00:01 . 2009-01-19 01:07 <DIR> d-------- c:\windows\EHome 2009-01-18 23:53 . 2002-04-15 21:11 67,866 --------- c:\windows\SYSTEM32\DRIVERS\netwlan5.img 2009-01-18 23:48 . 2008-10-16 14:07 23,576 --a------ c:\windows\SYSTEM32\wuapi.dll.mui 2009-01-18 15:16 . 2009-01-18 23:04 <DIR> d-------- c:\documents and settings\Alohboh\.housecall6.6 2009-01-17 03:27 . 2009-01-17 04:42 <DIR> d-------- c:\documents and settings\Alohboh\DoctorWeb 2009-01-14 17:31 . 2009-01-14 17:31 250 --a------ c:\windows\gmer.ini 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- C:\rsit 2009-01-14 17:28 . 2009-01-14 17:28 <DIR> d-------- c:\program files\trend micro 2009-01-14 16:38 . 2009-01-14 16:38 <DIR> d-------- c:\documents and settings\Alohboh\Application Data\Malwarebytes 2009-01-14 16:38 . 2009-01-04 18:38 15,504 --a------ c:\windows\SYSTEM32\DRIVERS\mbam.sys 2009-01-14 16:28 . 2009-01-14 16:38 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-14 16:28 . 2009-01-14 16:28 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-14 16:28 . 2009-01-04 18:38 38,496 --a------ c:\windows\SYSTEM32\DRIVERS\mbamswissarmy.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-21 21:58 --------- d-----w c:\program files\Common Files\Symantec Shared 2009-01-21 21:33 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-21 21:33 --------- d-----w c:\program files\Intel 2009-01-17 10:59 --------- d-----w c:\program files\UltraVNC.CHANGED 2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys 2008-01-22 14:23 0 ----a-w c:\documents and settings\Alohboh\del.bat . ((((((((((((((((((((((((((((( snapshot@2009-01-15_21.41.06.31 ))))))))))))))))))))))))))))))))))))))))) . - 2004-03-06 02:16:12 1,183,744 -c----w c:\windows\$NtUninstallKB873333$\ole32.dll - 2002-08-29 10:00:00 68,608 -c----w c:\windows\$NtUninstallKB873333$\olecli32.dll - 2002-08-29 10:00:00 34,304 -c----w c:\windows\$NtUninstallKB873333$\olecnv32.dll - 2004-03-06 02:16:12 263,680 -c----w c:\windows\$NtUninstallKB873333$\rpcss.dll + 2004-03-06 02:16:12 1,183,744 -c----w c:\windows\$NtUninstallKB873333_0$\ole32.dll + 2002-08-29 10:00:00 68,608 -c----w c:\windows\$NtUninstallKB873333_0$\olecli32.dll + 2002-08-29 10:00:00 34,304 -c----w c:\windows\$NtUninstallKB873333_0$\olecnv32.dll + 2004-03-06 02:16:12 263,680 -c----w c:\windows\$NtUninstallKB873333_0$\rpcss.dll + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB873333_0$\spuninst\spuninst.exe - 2002-08-29 10:00:00 489,984 -c----w c:\windows\$NtUninstallKB873339$\hypertrm.dll + 2002-08-29 10:00:00 489,984 -c----w c:\windows\$NtUninstallKB873339_0$\hypertrm.dll + 2004-10-14 15:36:18 169,984 -c----w c:\windows\$NtUninstallKB873339_0$\spuninst\spuninst.exe - 2004-10-12 16:22:52 436,608 -c----w c:\windows\$NtUninstallKB885250$\mrxsmb.sys + 2004-10-28 01:29:54 92,160 -c----w c:\windows\$NtUninstallKB885250_0$\cscdll.dll + 2004-10-12 16:22:52 436,608 -c----w c:\windows\$NtUninstallKB885250_0$\mrxsmb.sys + 2004-10-12 16:22:52 436,608 -c----w c:\windows\$NtUninstallKB885250_0$\mrxsmb.sys.000 + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB885250_0$\spuninst\spuninst.exe - 2004-03-30 01:48:36 667,648 -c----w c:\windows\$NtUninstallKB885835$\lsasrv.dll - 2002-08-29 10:00:00 163,328 -c----w c:\windows\$NtUninstallKB885835$\rdbss.sys + 2002-08-29 10:00:00 89,600 -c----w c:\windows\$NtUninstallKB885835_0$\cscdll.dll + 2004-03-30 01:48:36 667,648 -c----w c:\windows\$NtUninstallKB885835_0$\lsasrv.dll + 2002-11-18 18:27:40 392,576 -c----w c:\windows\$NtUninstallKB885835_0$\mrxsmb.sys + 2003-04-24 15:57:52 1,892,864 -c----w c:\windows\$NtUninstallKB885835_0$\ntkrnlmp.exe + 2003-04-24 15:57:54 1,949,440 -c----w c:\windows\$NtUninstallKB885835_0$\ntkrnlpa.exe + 2003-04-24 15:57:58 1,921,536 -c----w c:\windows\$NtUninstallKB885835_0$\ntkrpamp.exe + 2003-04-24 15:57:50 1,925,760 -c----w c:\windows\$NtUninstallKB885835_0$\ntoskrnl.exe + 2002-08-29 10:00:00 163,328 -c----w c:\windows\$NtUninstallKB885835_0$\rdbss.sys + 2002-08-29 10:00:00 116,224 -c----w c:\windows\$NtUninstallKB885835_0$\shsvcs.dll + 2004-10-14 16:36:18 169,984 -c----w c:\windows\$NtUninstallKB885835_0$\spuninst\spuninst.exe + 2004-10-14 16:36:18 169,984 -c----w c:\windows\$NtUninstallKB885836_0$\spuninst\spuninst.exe + 2002-08-29 10:00:00 200,704 -c----w c:\windows\$NtUninstallKB885836_0$\wordpad.exe - 2002-08-29 10:00:00 77,850 -c----w c:\windows\$NtUninstallKB888113$\hlink.dll + 2002-08-29 10:00:00 77,850 -c----w c:\windows\$NtUninstallKB888113_0$\hlink.dll + 2004-10-14 15:36:18 169,984 -c----w c:\windows\$NtUninstallKB888113_0$\spuninst\spuninst.exe - 2002-08-29 10:00:00 87,040 -c----w c:\windows\$NtUninstallKB888302$\srvsvc.dll + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB888302_0$\spuninst\spuninst.exe + 2002-08-29 10:00:00 87,040 -c----w c:\windows\$NtUninstallKB888302_0$\srvsvc.dll - 2002-08-29 10:00:00 50,688 -c----w c:\windows\$NtUninstallKB890046$\agentdpv.dll + 2002-08-29 10:00:00 50,688 -c----w c:\windows\$NtUninstallKB890046_0$\agentdpv.dll + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB890046_0$\spuninst\spuninst.exe + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB890046_0$\spuninst\updspapi.dll - 2004-06-10 19:51:27 8,350,720 -c----w c:\windows\$NtUninstallKB890047$\shell32.dll + 2004-04-17 00:56:06 82,432 -c----w c:\windows\$NtUninstallKB890047_0$\fldrclnr.dll + 2004-06-10 19:51:27 8,350,720 -c----w c:\windows\$NtUninstallKB890047_0$\shell32.dll + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB890047_0$\spuninst\spuninst.exe + 2004-04-17 00:56:04 676,864 -c----w c:\windows\$NtUninstallKB890047_0$\sxs.dll + 2004-05-18 03:46:28 593,408 -c----w c:\windows\$NtUninstallKB890047_0$\xpsp2res.dll + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB890175_0$\spuninst\spuninst.exe - 2002-08-29 10:00:00 51,200 -c----w c:\windows\$NtUninstallKB890859$\authz.dll - 2004-10-22 07:29:40 1,955,840 -c----w c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe - 2004-10-22 08:33:31 2,088,448 -c----w c:\windows\$NtUninstallKB890859$\ntoskrnl.exe - 2004-12-29 01:31:44 574,464 -c----w c:\windows\$NtUninstallKB890859$\user32.dll - 2004-08-05 18:15:00 1,845,888 -c----w c:\windows\$NtUninstallKB890859$\win32k.sys - 2002-11-01 22:26:44 272,896 -c----w c:\windows\$NtUninstallKB890859$\winsrv.dll + 2002-08-29 10:00:00 51,200 -c----w c:\windows\$NtUninstallKB890859_0$\authz.dll + 2004-10-22 07:29:14 1,900,032 -c----w c:\windows\$NtUninstallKB890859_0$\ntkrnlmp.exe + 2004-10-22 07:29:40 1,955,840 -c----w c:\windows\$NtUninstallKB890859_0$\ntkrnlpa.exe + 2004-10-22 07:29:42 1,928,704 -c----w c:\windows\$NtUninstallKB890859_0$\ntkrpamp.exe + 2004-10-22 08:33:31 2,088,448 -c----w c:\windows\$NtUninstallKB890859_0$\ntoskrnl.exe + 2005-02-24 23:35:06 209,632 -c----w c:\windows\$NtUninstallKB890859_0$\spuninst\spuninst.exe + 2005-02-24 23:35:08 371,936 -c----w c:\windows\$NtUninstallKB890859_0$\spuninst\updspapi.dll + 2004-12-29 01:31:44 574,464 -c----w c:\windows\$NtUninstallKB890859_0$\user32.dll + 2004-08-05 18:15:00 1,845,888 -c----w c:\windows\$NtUninstallKB890859_0$\win32k.sys + 2002-11-01 22:26:44 272,896 -c----w c:\windows\$NtUninstallKB890859_0$\winsrv.dll + 2004-12-01 01:22:42 169,984 -c----w c:\windows\$NtUninstallKB891781_0$\spuninst\spuninst.exe - 2002-08-29 10:00:00 332,928 -c----w c:\windows\$NtUninstallKB893066$\tcpip.sys + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB893066_0$\spuninst\spuninst.exe + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB893066_0$\spuninst\updspapi.dll + 2002-08-29 10:00:00 332,928 -c----w c:\windows\$NtUninstallKB893066_0$\tcpip.sys - 2004-12-21 20:55:12 8,443,904 -c----w c:\windows\$NtUninstallKB893086$\shell32.dll + 2004-12-21 20:55:12 8,443,904 -c----w c:\windows\$NtUninstallKB893086_0$\shell32.dll + 2005-02-24 23:35:06 209,632 -c----w c:\windows\$NtUninstallKB893086_0$\spuninst\spuninst.exe + 2005-02-24 23:35:08 371,936 -c----w c:\windows\$NtUninstallKB893086_0$\spuninst\updspapi.dll + 2004-12-01 14:46:38 594,432 -c----w c:\windows\$NtUninstallKB893086_0$\xpsp2res.dll - 2002-12-17 22:43:00 10,752 -c----w c:\windows\$NtUninstallKB896358$\hh.exe - 2003-01-10 21:43:46 37,888 -c----w c:\windows\$NtUninstallKB896358$\hhsetup.dll - 2003-08-28 14:57:04 143,872 -c----w c:\windows\$NtUninstallKB896358$\itircl.dll - 2004-06-23 00:43:42 123,392 -c----w c:\windows\$NtUninstallKB896358$\itss.dll + 2002-12-17 22:43:00 10,752 -c----w c:\windows\$NtUninstallKB896358_0$\hh.exe + 2003-01-10 21:43:46 37,888 -c----w c:\windows\$NtUninstallKB896358_0$\hhsetup.dll + 2003-08-28 14:57:04 143,872 -c----w c:\windows\$NtUninstallKB896358_0$\itircl.dll + 2004-06-23 00:43:42 123,392 -c----w c:\windows\$NtUninstallKB896358_0$\itss.dll + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB896358_0$\spuninst\spuninst.exe + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB896358_0$\spuninst\updspapi.dll - 2003-03-28 18:54:56 322,048 -c----w c:\windows\$NtUninstallKB896422$\srv.sys + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB896422_0$\spuninst\spuninst.exe + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB896422_0$\spuninst\updspapi.dll + 2003-03-28 18:54:56 322,048 -c----w c:\windows\$NtUninstallKB896422_0$\srv.sys - 2002-08-29 10:00:00 71,168 -c----w c:\windows\$NtUninstallKB896428$\telnet.exe + 2005-02-25 00:35:06 209,632 -c----w c:\windows\$NtUninstallKB896428_0$\spuninst\spuninst.exe + 2005-02-25 00:35:08 371,936 -c----w c:\windows\$NtUninstallKB896428_0$\spuninst\updspapi.dll + 2002-08-29 10:00:00 71,168 -c----w c:\windows\$NtUninstallKB896428_0$\telnet.exe + 2008-04-14 00:11:48 39,424 ------w c:\windows\AppPatch\acadproc.dll - 2002-11-27 00:20:08 1,821,184 ----a-w c:\windows\AppPatch\acgenral.dll + 2008-04-14 00:11:48 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll - 2002-08-29 10:00:00 406,528 ----a-w c:\windows\AppPatch\AcLayers.dll + 2008-04-14 00:11:48 451,072 ----a-w c:\windows\AppPatch\aclayers.dll - 2002-08-29 10:00:00 125,440 ----a-w c:\windows\AppPatch\AcLua.dll + 2008-04-14 00:11:48 141,312 ----a-w c:\windows\AppPatch\aclua.dll - 2002-08-29 10:00:00 219,136 ----a-w c:\windows\AppPatch\AcSpecfc.dll + 2008-04-14 00:11:48 245,248 ----a-w c:\windows\AppPatch\acspecfc.dll - 2002-08-29 10:00:00 107,520 ----a-w c:\windows\AppPatch\AcXtrnal.dll + 2008-04-14 00:11:48 116,224 ----a-w c:\windows\AppPatch\acxtrnal.dll - 2005-06-20 14:51:05 1,257,472 ----a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2009-01-19 06:46:24 1,265,664 ----a-w c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll - 2005-03-24 17:15:21 1,224,704 ----a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2009-01-19 06:46:24 1,232,896 ----a-w c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2009-01-19 06:46:39 61,440 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_de44f1c0\CustomMarshalers.dll + 2009-01-19 06:47:18 118,784 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_e3d1df92\CustomMarshalers.dll + 2009-01-19 06:47:43 8,908,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_bbcfe4ca\mscorlib.dll + 2009-01-19 06:47:10 3,391,488 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_e307169f\mscorlib.dll + 2009-01-19 06:47:35 3,395,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_da227c03\System.Design.dll + 2009-01-19 06:47:02 1,470,464 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ec720726\System.Design.dll + 2009-01-19 06:47:20 192,512 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_9211b4ac\System.Drawing.Design.dll + 2009-01-19 06:46:42 90,112 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b58c3710\System.Drawing.Design.dll + 2009-01-19 06:47:05 835,584 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_31d5f92d\System.Drawing.dll + 2009-01-19 06:47:37 2,244,608 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_acf00268\System.Drawing.dll + 2009-01-19 06:47:27 7,884,800 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_85a50d19\System.Windows.Forms.dll + 2009-01-19 06:46:49 3,018,752 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c3aef1c0\System.Windows.Forms.dll + 2009-01-19 06:47:32 5,513,216 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_5ad27705\System.Xml.dll + 2009-01-19 06:46:56 2,088,960 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_fa761e0d\System.Xml.dll + 2009-01-19 06:47:17 4,788,224 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_a4cdf242\System.dll + 2009-01-19 06:46:37 1,966,080 ----a-w c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_f0b46d3b\System.dll + 2008-06-13 11:05:51 272,128 ------w c:\windows\Driver Cache\I386\bthport.sys - 2005-01-19 03:51:40 440,064 ----a-w c:\windows\Driver Cache\I386\mrxsmb.sys + 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\I386\mrxsmb.sys - 2005-03-02 00:36:43 1,900,032 ----a-w c:\windows\Driver Cache\I386\ntkrnlmp.exe + 2008-08-14 10:09:26 2,145,280 ------w c:\windows\Driver Cache\I386\ntkrnlmp.exe - 2005-03-02 00:36:42 1,955,840 ----a-w c:\windows\Driver Cache\I386\ntkrnlpa.exe + 2008-08-14 09:33:16 2,066,048 ------w c:\windows\Driver Cache\I386\ntkrnlpa.exe - 2005-03-02 00:36:43 1,928,704 ----a-w c:\windows\Driver Cache\I386\ntkrpamp.exe + 2008-08-14 09:33:16 2,023,936 ------w c:\windows\Driver Cache\I386\ntkrpamp.exe - 2005-03-02 01:33:36 2,040,832 ----a-w c:\windows\Driver Cache\I386\ntoskrnl.exe + 2008-08-14 10:11:02 2,189,184 ------w c:\windows\Driver Cache\I386\ntoskrnl.exe - 2002-08-29 10:00:00 1,004,032 ------w c:\windows\EXPLORER.EXE + 2008-04-14 00:12:19 1,033,728 ----a-w c:\windows\explorer.exe - 2002-08-29 10:00:00 32,256 ----a-w c:\windows\Help\SNIFFPOL.DLL + 2008-04-14 00:12:06 34,816 ----a-w c:\windows\Help\sniffpol.dll - 2002-08-29 10:00:00 30,720 ----a-w c:\windows\Help\SSTUB.DLL + 2008-04-14 00:12:07 33,280 ----a-w c:\windows\Help\sstub.dll - 2002-08-29 10:00:00 262,656 ----a-w c:\windows\Help\TSHOOT.DLL + 2008-04-14 00:12:07 279,040 ----a-w c:\windows\Help\tshoot.dll - 2005-05-25 22:44:31 10,752 ----a-w c:\windows\hh.exe + 2008-04-14 00:12:21 10,752 ----a-w c:\windows\hh.exe + 2008-04-14 00:11:48 61,440 -c--a-w c:\windows\ie7\admparse.dll + 2008-04-14 00:11:48 99,840 -c--a-w c:\windows\ie7\advpack.dll + 2008-04-14 00:11:51 33,792 -c--a-w c:\windows\ie7\custsat.dll + 2008-04-14 00:11:52 357,888 -c--a-w c:\windows\ie7\dxtmsft.dll + 2008-04-14 00:11:52 205,312 -c--a-w c:\windows\ie7\dxtrans.dll + 2008-04-14 00:11:53 55,808 -c--a-w c:\windows\ie7\extmgr.dll + 2008-04-14 00:11:54 38,912 -c--a-w c:\windows\ie7\hmmapi.dll + 2008-04-14 00:12:22 34,304 -c--a-w c:\windows\ie7\ie4uinit.exe + 2008-04-14 00:11:54 143,360 -c--a-w c:\windows\ie7\ieakeng.dll + 2008-04-14 00:11:54 216,576 -c--a-w c:\windows\ie7\ieaksie.dll + 2002-08-29 10:00:00 221,184 -c--a-w c:\windows\ie7\ieakui.dll + 2008-04-14 00:11:54 323,584 -c--a-w c:\windows\ie7\iedkcs32.dll + 2008-04-14 00:12:22 18,432 -c--a-w c:\windows\ie7\iedw.exe + 2008-04-14 00:11:54 251,904 -c--a-w c:\windows\ie7\iepeers.dll + 2008-04-14 00:11:54 48,640 -c--a-w c:\windows\ie7\iernonce.dll + 2008-04-14 00:11:54 62,976 -c--a-w c:\windows\ie7\iesetup.dll + 2008-04-14 00:12:22 93,184 -c--a-w c:\windows\ie7\iexplore.exe + 2008-04-14 00:11:54 35,840 -c--a-w c:\windows\ie7\imgutil.dll + 2008-04-14 00:11:55 96,256 -c--a-w c:\windows\ie7\inseng.dll + 2008-04-14 00:11:56 15,872 -c--a-w c:\windows\ie7\jsproxy.dll + 2008-04-14 00:11:56 22,016 -c--a-w c:\windows\ie7\licmgr10.dll + 2008-04-14 00:12:27 29,184 -c--a-w c:\windows\ie7\mshta.exe + 2008-12-12 17:01:00 3,067,904 -c--a-w c:\windows\ie7\mshtml.dll + 2008-04-14 00:11:59 449,024 -c--a-w c:\windows\ie7\mshtmled.dll + 2008-04-13 16:26:26 56,832 -c--a-w c:\windows\ie7\mshtmler.dll + 2002-08-29 10:00:00 146,432 -c--a-w c:\windows\ie7\msls31.dll + 2008-04-14 00:12:00 146,432 -c--a-w c:\windows\ie7\msrating.dll + 2008-04-14 00:12:00 532,480 -c--a-w c:\windows\ie7\mstime.dll + 2008-04-14 00:12:02 96,256 -c--a-w c:\windows\ie7\occache.dll + 2008-04-14 00:12:02 39,424 -c--a-w c:\windows\ie7\pngfilt.dll + 2007-08-13 23:54:42 32,960 -c--a-w c:\windows\ie7\spuninst\iecustom.dll + 2007-08-13 23:52:06 66,048 -c--a-w c:\windows\ie7\spuninst\ieResetIcons.exe + 2006-09-06 22:43:16 213,216 -c--a-w c:\windows\ie7\spuninst\spuninst.exe + 2006-09-06 22:43:18 371,424 -c--a-w c:\windows\ie7\spuninst\updspapi.dll + 2008-04-14 00:12:08 37,888 -c--a-w c:\windows\ie7\url.dll + 2008-10-16 01:00:11 619,520 -c--a-w c:\windows\ie7\urlmon.dll + 2008-04-14 00:12:08 851,968 -c--a-w c:\windows\ie7\vgx.dll + 2008-04-14 00:12:08 276,480 -c--a-w c:\windows\ie7\webcheck.dll + 2008-10-16 01:00:11 666,112 -c--a-w c:\windows\ie7\wininet.dll + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB938127-v2-IE7\spuninst\updspapi.dll + 2007-08-13 23:54:10 765,952 -c----w c:\windows\ie7updates\KB938127-v2-IE7\vgx.dll + 2007-08-13 23:39:00 123,904 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll + 2007-08-13 23:39:00 123,904 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll.000 + 2007-08-13 23:35:46 346,624 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll + 2007-08-13 23:35:46 346,624 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll.000 + 2007-08-13 23:35:38 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll + 2007-08-13 23:35:38 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll.000 + 2007-08-13 23:54:10 131,584 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll + 2007-08-13 23:54:10 131,584 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll.000 + 2007-08-13 23:36:26 61,952 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll + 2007-08-13 23:39:06 54,784 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe + 2007-08-13 23:39:06 54,784 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe.000 + 2007-08-13 23:39:26 152,064 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll + 2007-08-13 23:39:26 152,064 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll.000 + 2007-08-13 23:39:54 229,376 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll + 2007-08-13 23:39:54 229,376 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll.000 + 2007-08-13 22:56:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll + 2007-08-13 22:56:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll.000 + 2007-02-12 21:10:12 2,451,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dat + 2007-07-11 17:27:48 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll + 2007-08-13 23:39:50 382,976 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll + 2007-08-13 23:39:50 382,976 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll.000 + 2007-08-13 23:54:10 6,049,280 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll + 2007-08-13 23:39:10 43,008 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll + 2007-08-13 23:39:10 43,008 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll.000 + 2007-08-13 23:34:04 266,752 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll + 2007-08-13 23:39:10 13,312 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe + 2007-08-13 23:43:56 622,080 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe + 2007-08-13 23:43:56 622,080 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe.000 + 2007-08-13 23:54:10 27,136 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll + 2007-08-13 23:54:10 27,136 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll.000 + 2007-08-13 23:54:10 458,752 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll + 2007-08-13 23:54:10 50,688 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll + 2007-08-13 23:54:12 3,578,368 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll + 2007-08-13 23:54:10 475,648 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll + 2007-08-13 23:54:10 475,648 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll.000 + 2007-08-13 23:44:26 192,000 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll + 2007-08-13 23:44:26 192,000 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll.000 + 2007-08-13 23:54:10 670,720 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll + 2007-08-13 23:54:10 670,720 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll.000 + 2007-08-13 23:44:06 101,376 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll + 2007-08-13 23:44:06 101,376 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll.000 + 2007-08-13 23:36:12 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll + 2007-08-13 23:36:12 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll.000 + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll + 2007-08-13 23:44:30 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll + 2007-08-13 23:44:30 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll.000 + 2007-08-13 23:54:10 1,162,240 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll + 2007-08-13 23:54:10 231,424 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll + 2007-08-13 23:54:10 231,424 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll.000 + 2007-08-13 23:54:10 818,688 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll + 2008-08-26 07:24:28 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll + 2008-08-26 07:24:28 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll.000 + 2008-08-26 07:24:28 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll + 2008-08-26 07:24:28 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll.000 + 2008-08-26 07:24:28 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll + 2008-08-26 07:24:28 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll.000 + 2008-08-26 07:24:28 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll + 2008-08-26 07:24:28 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll + 2008-08-26 07:24:28 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll.000 + 2008-08-25 08:37:59 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe + 2008-08-26 07:24:28 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll + 2008-08-26 07:24:28 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll + 2007-04-17 09:32:38 2,455,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dat + 2008-08-26 07:24:28 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll + 2008-08-26 07:24:28 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll.000 + 2008-08-26 07:24:29 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll + 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll + 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll.000 + 2008-08-26 07:24:29 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll + 2008-08-26 07:24:29 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll + 2008-08-26 07:24:29 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll.000 + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe.000 + 2008-08-26 07:24:30 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll + 2008-08-26 07:24:30 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll + 2008-08-26 07:24:30 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll.000 + 2008-08-26 07:24:30 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll + 2008-08-26 07:24:30 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll.000 + 2008-08-27 18:54:32 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll + 2008-08-27 18:54:32 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll.000 + 2008-08-26 07:24:30 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll + 2008-08-26 07:24:30 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll.000 + 2008-08-26 07:24:30 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll + 2008-08-26 07:24:30 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll + 2008-08-26 07:24:30 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll + 2008-08-26 07:24:30 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll + 2008-08-26 07:24:30 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll.000 + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll + 2008-08-26 07:24:30 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll + 2008-08-26 07:24:30 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll.000 + 2008-08-26 07:24:31 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll + 2008-08-26 07:24:31 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll.000 + 2008-08-26 07:24:31 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll + 2008-08-26 07:24:31 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll.000 + 2008-08-26 07:24:31 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll + 2008-08-26 07:24:31 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll.000 + 2008-10-17 07:08:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll + 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe + 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll - 2002-08-29 10:00:00 203,776 ----a-w c:\windows\IME\MSCANDUI.DLL + 2008-04-14 00:11:58 220,160 ----a-w c:\windows\IME\mscandui.dll - 2002-08-29 10:00:00 121,344 ----a-w c:\windows\IME\SOFTKBD.DLL + 2008-04-14 00:12:06 130,048 ----a-w c:\windows\IME\softkbd.dll - 2002-08-29 10:00:00 62,464 ----a-w c:\windows\IME\SPGRMR.DLL + 2008-04-13 16:43:18 62,976 ----a-w c:\windows\IME\spgrmr.dll - 2002-08-29 10:00:00 235,520 ----a-w c:\windows\IME\SPTIP.DLL + 2008-04-14 00:12:06 250,368 ----a-w c:\windows\IME\sptip.dll - 2002-08-29 10:00:00 249,856 ----a-w c:\windows\INF\UNREGMP2.EXE + 2008-04-14 00:12:38 208,896 ----a-w c:\windows\INF\unregmp2.exe + 2009-01-19 06:49:50 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe + 2008-01-18 15:13:09 2,247 ------w c:\windows\Installer\tsclientmsitrans\tscdsbl.bat + 2007-12-12 10:33:51 18,917 ------w c:\windows\Installer\tsclientmsitrans\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w c:\windows\Installer\tsclientmsitrans\tscuinst.vbs + 2008-04-14 00:11:31 25,600 ------w c:\windows\Installer\tsclientmsitrans\tscupdc.dll - 2004-07-15 06:49:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll + 2007-04-14 02:30:52 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2004-07-15 06:49:22 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2007-04-14 02:30:52 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2004-07-15 05:32:22 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2007-04-14 01:57:52 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2003-02-21 00:09:14 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2007-04-14 01:57:58 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2004-07-15 05:25:06 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2007-04-14 01:56:30 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll - 2004-07-15 05:33:04 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2007-04-14 01:58:00 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2004-07-15 19:29:02 2,138,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2007-04-14 01:50:46 2,142,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2003-02-21 00:09:18 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2007-04-14 01:58:02 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2004-07-15 05:26:52 2,510,848 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2007-04-14 01:57:00 2,523,136 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - 2004-07-15 05:28:34 2,502,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2007-04-14 01:57:28 2,514,944 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll - 2004-08-10 21:20:00 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe + 2007-01-15 21:11:26 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\netfxupdate.exe + 2004-07-15 06:49:16 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_aspnet_isapi.dll + 2004-07-15 05:32:22 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_CORPerfMonExt.dll + 2004-07-15 05:24:30 282,624 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_fusion.dll + 2004-07-15 05:25:06 315,392 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_mscorjit.dll + 2004-07-15 19:29:02 2,138,112 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_mscorlib.dll + 2003-02-21 00:09:18 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_mscorsn.dll + 2004-07-15 05:26:52 2,510,848 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_mscorsvr.dll + 2004-07-15 05:28:34 2,502,656 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_mscorwks.dll + 2003-02-21 09:42:22 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_msvcr71.dll + 2004-07-15 05:34:50 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\SHADOW3124\_PerfCounter.dll - 2004-07-15 19:31:16 1,224,704 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll + 2007-04-14 02:35:38 1,232,896 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2004-10-08 10:20:12 1,257,472 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2007-04-14 02:35:46 1,265,664 ----a-w c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2002-08-29 10:00:00 22,016 ----a-w c:\windows\MSAGENT\AGENTANM.DLL + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\MSAGENT\agentanm.dll - 2002-08-29 10:00:00 204,288 ----a-w c:\windows\MSAGENT\AGENTCTL.DLL + 2008-04-14 00:11:48 214,016 ----a-w c:\windows\MSAGENT\agentctl.dll - 2002-08-29 10:00:00 35,840 ----a-w c:\windows\MSAGENT\AGENTDP2.DLL + 2008-04-14 00:11:48 42,496 ----a-w c:\windows\MSAGENT\agentdp2.dll - 2005-04-22 05:20:24 51,712 ----a-w c:\windows\MSAGENT\agentdpv.dll + 2008-04-14 00:11:48 57,344 ----a-w c:\windows\MSAGENT\agentdpv.dll - 2002-08-29 10:00:00 44,032 ----a-w c:\windows\MSAGENT\AGENTMPX.DLL + 2008-04-14 00:11:48 49,152 ----a-w c:\windows\MSAGENT\agentmpx.dll - 2002-08-29 10:00:00 21,504 ----a-w c:\windows\MSAGENT\AGENTPSH.DLL + 2008-04-14 00:11:48 24,064 ----a-w c:\windows\MSAGENT\agentpsh.dll - 2002-08-29 10:00:00 39,936 ----a-w c:\windows\MSAGENT\AGENTSR.DLL + 2008-04-14 00:11:48 44,032 ----a-w c:\windows\MSAGENT\agentsr.dll - 2002-08-29 10:00:00 235,008 ----a-w c:\windows\MSAGENT\AGENTSVR.EXE + 2008-04-14 00:12:12 256,512 ----a-w c:\windows\MSAGENT\agentsvr.exe - 2002-08-29 10:00:00 21,504 ----a-w c:\windows\MSAGENT\AGTINTL.DLL + 2008-04-14 00:11:49 24,064 ----a-w c:\windows\MSAGENT\agtintl.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0405.DLL + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\MSAGENT\INTL\agt0405.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0406.DLL + 2007-04-02 18:25:59 19,456 ----a-w c:\windows\MSAGENT\INTL\agt0406.dll - 2002-08-29 10:00:00 21,504 ----a-w c:\windows\MSAGENT\INTL\AGT0407.DLL + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\MSAGENT\INTL\agt0407.dll - 2002-08-29 10:00:00 22,016 ----a-w c:\windows\MSAGENT\INTL\AGT0408.DLL + 2007-04-02 18:26:00 22,016 ----a-w c:\windows\MSAGENT\INTL\agt0408.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0409.DLL + 2008-04-13 17:32:28 19,968 ----a-w c:\windows\MSAGENT\INTL\agt0409.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT040B.DLL + 2007-04-02 18:26:00 19,456 ----a-w c:\windows\MSAGENT\INTL\agt040b.dll - 2002-08-29 10:00:00 21,504 ----a-w c:\windows\MSAGENT\INTL\AGT040C.DLL + 2007-04-02 18:26:00 21,504 ----a-w c:\windows\MSAGENT\INTL\agt040c.dll - 2002-08-29 10:00:00 19,968 ----a-w c:\windows\MSAGENT\INTL\AGT040E.DLL + 2007-04-02 18:26:00 19,968 ----a-w c:\windows\MSAGENT\INTL\agt040e.dll - 2002-08-29 10:00:00 20,992 ----a-w c:\windows\MSAGENT\INTL\AGT0410.DLL + 2007-04-02 18:26:00 20,992 ----a-w c:\windows\MSAGENT\INTL\agt0410.dll - 2002-08-29 10:00:00 20,992 ----a-w c:\windows\MSAGENT\INTL\AGT0413.DLL + 2007-04-02 18:26:01 20,992 ----a-w c:\windows\MSAGENT\INTL\agt0413.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0414.DLL + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\MSAGENT\INTL\agt0414.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0415.DLL + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\MSAGENT\INTL\agt0415.dll - 2002-08-29 10:00:00 20,480 ----a-w c:\windows\MSAGENT\INTL\AGT0416.DLL + 2007-04-02 18:26:01 20,480 ----a-w c:\windows\MSAGENT\INTL\agt0416.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT0419.DLL + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\MSAGENT\INTL\agt0419.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT041D.DLL + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\MSAGENT\INTL\agt041d.dll - 2002-08-29 10:00:00 19,456 ----a-w c:\windows\MSAGENT\INTL\AGT041F.DLL + 2007-04-02 18:26:01 19,456 ----a-w c:\windows\MSAGENT\INTL\agt041f.dll - 2002-08-29 10:00:00 20,992 ----a-w c:\windows\MSAGENT\INTL\AGT0816.DLL + 2007-04-02 18:26:02 20,992 ----a-w c:\windows\MSAGENT\INTL\agt0816.dll - 2002-08-29 10:00:00 20,480 ----a-w c:\windows\MSAGENT\INTL\AGT0C0A.DLL + 2007-04-02 18:26:02 20,480 ----a-w c:\windows\MSAGENT\INTL\agt0c0a.dll - 2002-08-29 10:00:00 36,352 ----a-w c:\windows\MSAGENT\MSLWVTTS.DLL + 2008-04-14 00:12:00 39,936 ----a-w c:\windows\MSAGENT\mslwvtts.dll + 2008-04-14 00:11:51 33,792 ------w c:\windows\network diagnostic\custsat.dll + 2008-04-13 18:53:32 558,080 ------w c:\windows\network diagnostic\xpnetdiag.exe - 2002-08-29 10:00:00 66,048 ----a-w c:\windows\NOTEPAD.EXE + 2008-04-14 00:12:29 69,120 ----a-w c:\windows\notepad.exe - 2004-04-14 22:50:06 740,864 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpctr.exe + 2008-04-14 00:12:21 769,024 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpctr.exe - 2002-08-29 10:00:00 703,488 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\HelpSvc.exe + 2008-04-14 00:12:21 744,448 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\helpsvc.exe - 2004-04-11 00:53:14 16,384 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\hscupd.exe + 2008-04-14 00:12:21 18,432 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\hscupd.exe - 2002-08-29 10:00:00 145,408 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\MSCONFIG.EXE + 2008-04-14 00:12:27 169,984 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msconfig.exe - 2002-08-29 10:00:00 348,160 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\MSINFO.DLL + 2008-04-14 00:11:59 376,832 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\msinfo.dll - 2002-11-27 18:50:20 94,208 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchshell.dll + 2008-04-14 00:12:02 102,912 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchshell.dll - 2002-08-29 10:00:00 29,696 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\PCHSVC.DLL + 2008-04-14 00:12:02 38,400 ----a-w c:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll - 2004-06-23 20:23:14 9,258 ----a-w c:\windows\PCHealth\HelpCtr\Config\Cntstore.bin + 2009-01-19 05:13:23 9,492 ----a-w c:\windows\PCHealth\HelpCtr\Config\Cntstore.bin - 2004-06-23 20:34:18 72,903 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat + 2009-01-19 06:22:24 78,699 ----a-w c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat - 2004-08-05 19:36:47 17,404 ----a-w c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin + 2009-01-19 06:22:24 18,080 ----a-w c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin - 2002-08-29 10:00:00 138,752 ----a-w c:\windows\PCHealth\UploadLB\Binaries\UploadM.exe + 2008-04-14 00:12:38 150,528 ----a-w c:\windows\PCHealth\UploadLB\Binaries\uploadm.exe + 2008-04-14 00:12:06 151,552 ------w c:\windows\peernet\sqldb20.dll + 2008-04-14 00:12:06 462,848 ------w c:\windows\peernet\sqlqp20.dll + 2008-04-14 00:12:06 110,592 ------w c:\windows\peernet\sqlse20.dll - 2002-08-29 10:00:00 134,144 ----a-w c:\windows\REGEDIT.EXE + 2008-04-14 00:12:32 146,432 ----a-w c:\windows\regedit.exe + 2008-04-13 18:46:18 53,376 ------w c:\windows\ServicePackFiles\i386\1394bus.sys + 2008-04-13 18:40:50 12,288 ------w c:\windows\ServicePackFiles\i386\4mmdat.sys + 2008-04-13 18:46:20 48,128 ------w c:\windows\ServicePackFiles\i386\61883.sys + 2008-04-14 00:11:48 100,352 ------w c:\windows\ServicePackFiles\i386\6to4svc.dll + 2008-04-14 00:11:48 136,192 ------w c:\windows\ServicePackFiles\i386\aaclient.dll + 2002-08-29 04:00:48 231,552 ------w c:\windows\ServicePackFiles\i386\ac97ali.sys + 2002-08-29 04:00:56 84,480 ------w c:\windows\ServicePackFiles\i386\ac97via.sys + 2008-04-14 00:11:48 39,424 ------w c:\windows\ServicePackFiles\i386\acadproc.dll + 2008-04-14 00:12:11 184,320 ------w c:\windows\ServicePackFiles\i386\accwiz.exe + 2008-04-14 00:11:48 1,852,928 ------w c:\windows\ServicePackFiles\i386\acgenral.dll + 2008-04-14 00:11:48 451,072 ------w c:\windows\ServicePackFiles\i386\aclayers.dll + 2008-04-14 00:11:48 141,312 ------w c:\windows\ServicePackFiles\i386\aclua.dll + 2008-04-14 00:11:48 115,712 ------w c:\windows\ServicePackFiles\i386\aclui.dll + 2008-04-13 18:36:35 187,776 ------w c:\windows\ServicePackFiles\i386\acpi.sys + 2008-04-14 00:11:48 245,248 ------w c:\windows\ServicePackFiles\i386\acspecfc.dll + 2008-04-14 00:11:48 193,536 ------w c:\windows\ServicePackFiles\i386\activeds.dll + 2008-04-14 00:12:12 4,096 ------w c:\windows\ServicePackFiles\i386\actmovie.exe + 2008-04-14 00:11:48 98,304 ------w c:\windows\ServicePackFiles\i386\actxprxy.dll + 2008-04-14 00:11:48 116,224 ------w c:\windows\ServicePackFiles\i386\acxtrnal.dll + 2008-04-14 00:11:48 20,540 ------w c:\windows\ServicePackFiles\i386\admin.dll + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\admin.exe + 2002-08-29 04:00:48 10,880 ------w c:\windows\ServicePackFiles\i386\admjoy.sys + 2008-04-14 00:11:48 61,440 ------w c:\windows\ServicePackFiles\i386\admparse.dll + 2008-04-14 00:11:48 175,616 ------w c:\windows\ServicePackFiles\i386\adsldp.dll + 2008-04-14 00:11:48 143,360 ------w c:\windows\ServicePackFiles\i386\adsldpc.dll + 2008-04-14 00:11:48 68,096 ------w c:\windows\ServicePackFiles\i386\adsmsext.dll + 2008-04-14 00:11:48 263,680 ------w c:\windows\ServicePackFiles\i386\adsnt.dll + 2008-04-14 00:11:48 4,255 ------w c:\windows\ServicePackFiles\i386\adv01nt5.dll + 2008-04-14 00:11:48 3,967 ------w c:\windows\ServicePackFiles\i386\adv02nt5.dll + 2008-04-14 00:11:48 3,615 ------w c:\windows\ServicePackFiles\i386\adv05nt5.dll + 2008-04-14 00:11:48 3,647 ------w c:\windows\ServicePackFiles\i386\adv07nt5.dll + 2008-04-14 00:11:48 3,135 ------w c:\windows\ServicePackFiles\i386\adv08nt5.dll + 2008-04-14 00:11:48 3,711 ------w c:\windows\ServicePackFiles\i386\adv09nt5.dll + 2008-04-14 00:11:48 3,775 ------w c:\windows\ServicePackFiles\i386\adv11nt5.dll + 2008-04-14 00:11:48 617,472 ------w c:\windows\ServicePackFiles\i386\advapi32.dll + 2008-04-14 00:11:48 99,840 ------w c:\windows\ServicePackFiles\i386\advpack.dll + 2008-04-13 16:39:23 142,592 ------w c:\windows\ServicePackFiles\i386\aec.sys + 2008-04-13 19:19:23 138,112 ------w c:\windows\ServicePackFiles\i386\afd.sys + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentanm.dll + 2008-04-14 00:11:48 214,016 ------w c:\windows\ServicePackFiles\i386\agentctl.dll + 2008-04-14 00:11:48 42,496 ------w c:\windows\ServicePackFiles\i386\agentdp2.dll + 2008-04-14 00:11:48 57,344 ------w c:\windows\ServicePackFiles\i386\agentdpv.dll + 2008-04-14 00:11:48 49,152 ------w c:\windows\ServicePackFiles\i386\agentmpx.dll + 2008-04-14 00:11:48 24,064 ------w c:\windows\ServicePackFiles\i386\agentpsh.dll + 2008-04-14 00:11:48 44,032 ------w c:\windows\ServicePackFiles\i386\agentsr.dll + 2008-04-14 00:12:12 256,512 ------w c:\windows\ServicePackFiles\i386\agentsvr.exe + 2008-04-13 18:36:38 42,368 ------w c:\windows\ServicePackFiles\i386\agp440.sys + 2008-04-13 18:36:39 44,928 ------w c:\windows\ServicePackFiles\i386\agpcpq.sys + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0401.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0404.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0405.dll + 2007-04-02 18:25:59 19,456 ------w c:\windows\ServicePackFiles\i386\agt0406.dll + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt0407.dll + 2007-04-02 18:26:00 22,016 ------w c:\windows\ServicePackFiles\i386\agt0408.dll + 2008-04-13 17:32:28 19,968 ------w c:\windows\ServicePackFiles\i386\agt0409.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040b.dll + 2007-04-02 18:26:00 21,504 ------w c:\windows\ServicePackFiles\i386\agt040c.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt040d.dll + 2007-04-02 18:26:00 19,968 ------w c:\windows\ServicePackFiles\i386\agt040e.dll + 2007-04-02 18:26:00 20,992 ------w c:\windows\ServicePackFiles\i386\agt0410.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0411.dll + 2007-04-02 18:26:00 19,456 ------w c:\windows\ServicePackFiles\i386\agt0412.dll + 2007-04-02 18:26:01 20,992 ------w c:\windows\ServicePackFiles\i386\agt0413.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0414.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0415.dll + 2007-04-02 18:26:01 20,480 ------w c:\windows\ServicePackFiles\i386\agt0416.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt0419.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041d.dll + 2007-04-02 18:26:01 19,456 ------w c:\windows\ServicePackFiles\i386\agt041f.dll + 2007-04-02 18:26:02 19,456 ------w c:\windows\ServicePackFiles\i386\agt0804.dll + 2007-04-02 18:26:02 20,992 ------w c:\windows\ServicePackFiles\i386\agt0816.dll + 2007-04-02 18:26:02 20,480 ------w c:\windows\ServicePackFiles\i386\agt0c0a.dll + 2008-04-14 00:11:49 24,064 ------w c:\windows\ServicePackFiles\i386\agtintl.dll + 2008-04-14 00:12:12 98,304 ------w c:\windows\ServicePackFiles\i386\ahui.exe + 2008-04-14 00:12:12 44,544 ------w c:\windows\ServicePackFiles\i386\alg.exe + 2008-04-13 18:36:38 42,752 ------w c:\windows\ServicePackFiles\i386\alim1541.sys + 2008-04-14 00:11:49 17,408 ------w c:\windows\ServicePackFiles\i386\alrsvc.dll + 2008-04-13 18:36:39 43,008 ------w c:\windows\ServicePackFiles\i386\amdagp.sys + 2008-04-13 18:31:32 37,376 ------w c:\windows\ServicePackFiles\i386\amdk6.sys + 2008-04-13 18:31:33 37,760 ------w c:\windows\ServicePackFiles\i386\amdk7.sys + 2008-04-14 00:11:49 70,656 ------w c:\windows\ServicePackFiles\i386\amstream.dll + 2002-08-29 03:59:12 36,224 ------w c:\windows\ServicePackFiles\i386\an983.sys + 2008-04-14 00:11:49 125,952 ------w c:\windows\ServicePackFiles\i386\apphelp.dll + 2008-04-14 00:11:49 331,264 ------w c:\windows\ServicePackFiles\i386\aqueue.dll + 2008-04-13 18:51:25 60,800 ------w c:\windows\ServicePackFiles\i386\arp1394.sys + 2004-08-04 07:55:59 8,192 ------w c:\windows\ServicePackFiles\i386\asferror.dll + 2008-04-14 00:11:49 65,024 ------w c:\windows\ServicePackFiles\i386\asycfilt.dll + 2008-04-13 18:57:27 14,336 ------w c:\windows\ServicePackFiles\i386\asyncmac.sys + 2008-04-14 00:12:12 25,088 ------w c:\windows\ServicePackFiles\i386\at.exe + 2008-04-13 18:40:30 96,512 ------w c:\windows\ServicePackFiles\i386\atapi.sys + 2004-08-04 05:29:29 56,623 ------w c:\windows\ServicePackFiles\i386\ati1btxx.sys + 2004-08-04 05:29:29 11,615 ------w c:\windows\ServicePackFiles\i386\ati1mdxx.sys + 2004-08-04 05:29:29 12,047 ------w c:\windows\ServicePackFiles\i386\ati1pdxx.sys + 2004-08-04 05:29:30 30,671 ------w c:\windows\ServicePackFiles\i386\ati1raxx.sys + 2004-08-04 05:29:30 63,663 ------w c:\windows\ServicePackFiles\i386\ati1rvxx.sys + 2004-08-04 05:29:31 26,367 ------w c:\windows\ServicePackFiles\i386\ati1snxx.sys + 2004-08-04 05:29:31 21,343 ------w c:\windows\ServicePackFiles\i386\ati1ttxx.sys + 2004-08-04 05:29:31 36,463 ------w c:\windows\ServicePackFiles\i386\ati1tuxx.sys + 2004-08-04 05:29:31 29,455 ------w c:\windows\ServicePackFiles\i386\ati1xbxx.sys + 2004-08-04 05:29:31 34,735 ------w c:\windows\ServicePackFiles\i386\ati1xsxx.sys + 2008-04-14 00:11:49 229,376 ------w c:\windows\ServicePackFiles\i386\ati2cqag.dll + 2008-04-14 00:11:49 377,984 ------w c:\windows\ServicePackFiles\i386\ati2dvaa.dll + 2008-04-14 00:11:49 201,728 ------w c:\windows\ServicePackFiles\i386\ati2dvag.dll + 2004-08-04 05:29:26 327,040 ------w c:\windows\ServicePackFiles\i386\ati2mtaa.sys + 2004-08-04 05:29:26 701,440 ------w c:\windows\ServicePackFiles\i386\ati2mtag.sys + 2008-04-14 00:11:49 870,784 ------w c:\windows\ServicePackFiles\i386\ati3d1ag.dll + 2008-04-14 00:11:49 1,057,760 ------w c:\windows\ServicePackFiles\i386\ati3d2ag.dll + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\ServicePackFiles\i386\ati3duag.dll + 2004-08-04 05:29:27 57,856 ------w c:\windows\ServicePackFiles\i386\atinbtxx.sys + 2004-08-04 05:29:28 13,824 ------w c:\windows\ServicePackFiles\i386\atinmdxx.sys + 2004-08-04 05:29:29 14,336 ------w c:\windows\ServicePackFiles\i386\atinpdxx.sys + 2004-08-04 05:29:29 52,224 ------w c:\windows\ServicePackFiles\i386\atinraxx.sys + 2004-08-04 05:29:30 104,960 ------w c:\windows\ServicePackFiles\i386\atinrvxx.sys + 2004-08-04 05:29:30 28,672 ------w c:\windows\ServicePackFiles\i386\atinsnxx.sys + 2004-08-04 05:29:30 13,824 ------w c:\windows\ServicePackFiles\i386\atinttxx.sys + 2004-08-04 05:29:31 73,216 ------w c:\windows\ServicePackFiles\i386\atintuxx.sys + 2004-08-04 05:29:31 31,744 ------w c:\windows\ServicePackFiles\i386\atinxbxx.sys + 2004-08-04 05:29:31 63,488 ------w c:\windows\ServicePackFiles\i386\atinxsxx.sys + 2008-04-14 00:11:50 32,768 ------w c:\windows\ServicePackFiles\i386\ativtmxx.dll + 2008-04-14 00:11:50 516,768 ------w c:\windows\ServicePackFiles\i386\ativvaxx.dll + 2008-04-14 00:11:50 58,880 ------w c:\windows\ServicePackFiles\i386\atl.dll + 2008-04-14 00:12:12 11,264 ------w c:\windows\ServicePackFiles\i386\atmadm.exe + 2008-04-13 18:51:25 59,904 ------w c:\windows\ServicePackFiles\i386\atmarpc.sys + 2008-04-14 00:09:01 285,696 ------w c:\windows\ServicePackFiles\i386\atmfd.dll + 2008-04-13 18:51:30 55,808 ------w c:\windows\ServicePackFiles\i386\atmlane.sys + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\atmlib.dll + 2008-04-14 00:12:12 12,288 ------w c:\windows\ServicePackFiles\i386\attrib.exe + 2008-04-14 00:11:50 21,183 ------w c:\windows\ServicePackFiles\i386\atv01nt5.dll + 2008-04-14 00:11:50 11,359 ------w c:\windows\ServicePackFiles\i386\atv02nt5.dll + 2008-04-14 00:11:50 25,471 ------w c:\windows\ServicePackFiles\i386\atv04nt5.dll + 2008-04-14 00:11:50 14,143 ------w c:\windows\ServicePackFiles\i386\atv06nt5.dll + 2008-04-14 00:11:50 17,279 ------w c:\windows\ServicePackFiles\i386\atv10nt5.dll + 2008-04-14 00:11:50 42,496 ------w c:\windows\ServicePackFiles\i386\audiosrv.dll + 2008-04-14 00:12:12 14,336 ------w c:\windows\ServicePackFiles\i386\auditusr.exe + 2008-04-14 00:11:50 20,540 ------w c:\windows\ServicePackFiles\i386\author.dll + 2008-04-14 00:12:12 16,439 ------w c:\windows\ServicePackFiles\i386\author.exe + 2008-04-14 00:11:50 62,464 ------w c:\windows\ServicePackFiles\i386\authz.dll + 2008-04-14 00:12:12 588,800 ------w c:\windows\ServicePackFiles\i386\autochk.exe + 2008-04-14 00:12:12 602,624 ------w c:\windows\ServicePackFiles\i386\autoconv.exe + 2008-04-14 00:12:13 580,608 ------w c:\windows\ServicePackFiles\i386\autofmt.exe + 2008-04-14 00:12:13 11,264 ------w c:\windows\ServicePackFiles\i386\autolfn.exe + 2008-04-13 18:46:20 38,912 ------w c:\windows\ServicePackFiles\i386\avc.sys + 2008-04-13 18:46:07 13,696 ------w c:\windows\ServicePackFiles\i386\avcstrm.sys + 2008-04-14 00:11:50 84,992 ------w c:\windows\ServicePackFiles\i386\avifil32.dll + 2008-04-14 00:11:50 233,472 ------w c:\windows\ServicePackFiles\i386\azroles.dll + 2008-04-14 00:11:50 52,736 ------w c:\windows\ServicePackFiles\i386\basesrv.dll + 2008-04-14 00:11:50 29,184 ------w c:\windows\ServicePackFiles\i386\batmeter.dll + 2008-04-14 00:11:50 8,704 ------w c:\windows\ServicePackFiles\i386\batt.dll + 2008-04-13 18:36:32 14,208 ------w c:\windows\ServicePackFiles\i386\battc.sys + 2008-04-13 18:46:21 11,776 ------w c:\windows\ServicePackFiles\i386\bdasup.sys + 2008-04-14 00:11:50 17,408 ------w c:\windows\ServicePackFiles\i386\bidispl.dll + 2008-04-14 00:11:50 8,192 ------w c:\windows\ServicePackFiles\i386\bitsprx2.dll + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx3.dll + 2008-04-14 00:11:50 7,168 ------w c:\windows\ServicePackFiles\i386\bitsprx4.dll + 2004-08-04 07:56:41 286,208 ------w c:\windows\ServicePackFiles\i386\blackbox.dll + 2008-04-14 00:12:13 71,680 ------w c:\windows\ServicePackFiles\i386\blastcln.exe + 2008-04-13 18:53:23 71,552 ------w c:\windows\ServicePackFiles\i386\bridge.sys + 2008-04-13 17:03:24 63,488 ------w c:\windows\ServicePackFiles\i386\browselc.dll + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\browser.dll + 2008-04-14 00:11:50 1,025,024 ------w c:\windows\ServicePackFiles\i386\browseui.dll + 2008-04-14 00:11:50 78,336 ------w c:\windows\ServicePackFiles\i386\browsewm.dll + 2008-04-14 00:11:50 20,992 ------w c:\windows\ServicePackFiles\i386\bthci.dll + 2008-04-13 18:46:33 17,024 ------w c:\windows\ServicePackFiles\i386\bthenum.sys + 2008-04-13 18:46:33 37,888 ------w c:\windows\ServicePackFiles\i386\bthmodem.sys + 2008-04-13 18:51:34 101,120 ------w c:\windows\ServicePackFiles\i386\bthpan.sys + 2008-04-13 18:46:32 273,024 ------w c:\windows\ServicePackFiles\i386\bthport.sys + 2008-04-13 18:46:31 36,480 ------w c:\windows\ServicePackFiles\i386\bthprint.sys + 2008-04-14 00:11:50 30,208 ------w c:\windows\ServicePackFiles\i386\bthserv.dll + 2008-04-13 18:46:29 18,944 ------w c:\windows\ServicePackFiles\i386\bthusb.sys + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\btpanui.dll + 2008-04-14 00:11:50 218,112 ------w c:\windows\ServicePackFiles\i386\c_g18030.dll + 2008-04-14 00:11:50 60,416 ------w c:\windows\ServicePackFiles\i386\cabinet.dll + 2008-04-14 00:11:50 84,480 ------w c:\windows\ServicePackFiles\i386\cabview.dll + 2008-04-14 00:12:13 19,968 ------w c:\windows\ServicePackFiles\i386\cacls.exe + 2008-04-14 00:11:50 385,024 ------w c:\windows\ServicePackFiles\i386\callcont.dll + 2008-04-14 00:11:50 121,856 ------w c:\windows\ServicePackFiles\i386\camext30.dll + 2008-04-14 00:11:50 50,688 ------w c:\windows\ServicePackFiles\i386\camocx.dll + 2008-04-14 00:11:50 150,016 ------w c:\windows\ServicePackFiles\i386\capesnpn.dll + 2008-04-14 00:11:50 226,304 ------w c:\windows\ServicePackFiles\i386\catsrv.dll + 2008-04-14 00:11:50 85,504 ------w c:\windows\ServicePackFiles\i386\catsrvps.dll + 2008-04-14 00:11:50 625,664 ------w c:\windows\ServicePackFiles\i386\catsrvut.dll + 2008-04-13 18:46:23 17,024 ------w c:\windows\ServicePackFiles\i386\ccdecode.sys + 2008-04-13 19:14:21 63,744 ------w c:\windows\ServicePackFiles\i386\cdfs.sys + 2008-04-14 00:11:50 151,040 ------w c:\windows\ServicePackFiles\i386\cdfview.dll + 2008-04-14 00:11:50 66,560 ------w c:\windows\ServicePackFiles\i386\cdm.dll + 2008-04-14 00:11:50 2,091,520 ------w c:\windows\ServicePackFiles\i386\cdosys.dll + 2008-04-13 18:40:46 62,976 ------w c:\windows\ServicePackFiles\i386\cdrom.sys + 2008-04-14 00:11:50 194,560 ------w c:\windows\ServicePackFiles\i386\certcli.dll + 2008-04-14 00:11:50 457,728 ------w c:\windows\ServicePackFiles\i386\certmgr.dll + 2004-08-04 07:56:41 159,232 ------w c:\windows\ServicePackFiles\i386\cewmdm.dll + 2008-04-14 00:11:50 38,912 ------w c:\windows\ServicePackFiles\i386\cfgbkend.dll + 2008-04-14 00:09:05 16,896 ------w c:\windows\ServicePackFiles\i386\cfgmgr32.dll + 2008-04-14 00:12:14 188,480 ------w c:\windows\ServicePackFiles\i386\cfgwiz.exe + 2008-04-14 00:11:50 15,423 ------w c:\windows\ServicePackFiles\i386\ch7xxnt5.dll + 2008-04-13 18:40:58 8,192 ------w c:\windows\ServicePackFiles\i386\changer.sys + 2008-04-14 00:11:50 148,480 ------w c:\windows\ServicePackFiles\i386\cic.dll + 2008-04-14 00:11:50 1,358,848 ------w c:\windows\ServicePackFiles\i386\cimwin32.dll + 2008-04-14 00:11:50 69,120 ------w c:\windows\ServicePackFiles\i386\ciodm.dll + 2008-04-14 00:12:14 5,632 ------w c:\windows\ServicePackFiles\i386\cisvc.exe + 2008-04-13 19:16:22 49,536 ------w c:\windows\ServicePackFiles\i386\classpnp.sys + 2008-04-14 00:11:50 110,592 ------w c:\windows\ServicePackFiles\i386\clbcatex.dll + 2008-04-14 00:11:50 498,688 ------w c:\windows\ServicePackFiles\i386\clbcatq.dll + 2008-04-14 00:12:14 64,000 ------w c:\windows\ServicePackFiles\i386\cleanmgr.exe + 2008-04-14 00:11:50 77,824 ------w c:\windows\ServicePackFiles\i386\cliconfg.dll + 2008-04-14 00:12:14 20,480 ------w c:\windows\ServicePackFiles\i386\cliconfg.exe + 2008-04-14 00:12:14 102,912 ------w c:\windows\ServicePackFiles\i386\clipbrd.exe + 2008-04-14 00:12:14 33,280 ------w c:\windows\ServicePackFiles\i386\clipsrv.exe + 2008-04-14 00:11:50 58,368 ------w c:\windows\ServicePackFiles\i386\clusapi.dll + 2008-04-13 18:36:37 13,952 ------w c:\windows\ServicePackFiles\i386\cmbatt.sys + 2008-04-14 00:11:50 15,872 ------w c:\windows\ServicePackFiles\i386\cmcfg32.dll + 2008-04-14 00:12:14 389,120 ------w c:\windows\ServicePackFiles\i386\cmd.exe + 2008-04-14 00:11:50 344,064 ------w c:\windows\ServicePackFiles\i386\cmdial32.dll + 2008-04-14 00:12:14 25,600 ------w c:\windows\ServicePackFiles\i386\cmdl32.exe + 2008-04-14 00:12:15 39,936 ------w c:\windows\ServicePackFiles\i386\cmmon32.exe + 2008-04-14 00:11:50 185,344 ------w c:\windows\ServicePackFiles\i386\cmprops.dll + 2008-04-14 00:11:50 13,312 ------w c:\windows\ServicePackFiles\i386\cmsetacl.dll + 2008-04-14 00:12:15 63,488 ------w c:\windows\ServicePackFiles\i386\cmstp.exe + 2008-04-14 00:11:50 39,424 ------w c:\windows\ServicePackFiles\i386\cmutil.dll + 2008-04-14 00:11:50 47,104 ------w c:\windows\ServicePackFiles\i386\cnbjmon.dll + 2008-04-14 00:11:50 79,360 ------w c:\windows\ServicePackFiles\i386\cnbjmon2.dll + 2008-04-13 16:44:16 17,920 ------w c:\windows\ServicePackFiles\i386\cobramsg.dll + 2008-04-14 00:11:51 60,416 ------w c:\windows\ServicePackFiles\i386\colbact.dll + 2008-04-14 00:11:51 28,160 ------w c:\windows\ServicePackFiles\i386\comaddin.dll + 2008-04-14 00:11:51 195,072 ------w c:\windows\ServicePackFiles\i386\comadmin.dll + 2008-04-14 00:11:51 617,472 ------w c:\windows\ServicePackFiles\i386\comctl32.dll + 2008-04-14 00:11:51 276,992 ------w c:\windows\ServicePackFiles\i386\comdlg32.dll + 2008-04-14 00:11:51 252,928 ------w c:\windows\ServicePackFiles\i386\compatui.dll + 2008-04-13 18:36:37 10,240 ------w c:\windows\ServicePackFiles\i386\compbatt.sys + 2008-04-14 00:11:51 229,376 ------w c:\windows\ServicePackFiles\i386\compstui.dll + 2008-04-14 00:11:51 97,792 ------w c:\windows\ServicePackFiles\i386\comrepl.dll + 2008-04-14 00:12:15 9,728 ------w c:\windows\ServicePackFiles\i386\comrepl.exe + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\comrereg.exe + 2008-04-14 00:11:51 792,064 ------w c:\windows\ServicePackFiles\i386\comres.dll + 2008-04-14 00:11:51 274,944 ------w c:\windows\ServicePackFiles\i386\comsetup.dll + 2008-04-14 00:11:51 167,424 ------w c:\windows\ServicePackFiles\i386\comsnap.dll + 2008-04-14 00:11:51 1,267,200 ------w c:\windows\ServicePackFiles\i386\comsvcs.dll + 2008-04-14 00:11:51 539,648 ------w c:\windows\ServicePackFiles\i386\comuid.dll + 2008-04-14 00:12:15 1,032,192 ------w c:\windows\ServicePackFiles\i386\conf.exe + 2008-04-14 00:11:51 45,056 ------w c:\windows\ServicePackFiles\i386\confmrsl.dll + 2008-04-14 00:11:51 357,888 ------w c:\windows\ServicePackFiles\i386\confmsp.dll + 2008-04-14 00:12:15 27,648 ------w c:\windows\ServicePackFiles\i386\conime.exe + 2008-04-14 00:11:51 35,328 ------w c:\windows\ServicePackFiles\i386\corpol.dll + 2008-04-14 00:11:51 12,800 ------w c:\windows\ServicePackFiles\i386\credssp.dll + 2008-04-14 00:11:51 163,840 ------w c:\windows\ServicePackFiles\i386\credui.dll + 2008-04-13 18:31:32 36,736 ------w c:\windows\ServicePackFiles\i386\crusoe.sys + 2008-04-14 00:11:51 599,040 ------w c:\windows\ServicePackFiles\i386\crypt32.dll + 2008-04-14 00:11:51 74,752 ------w c:\windows\ServicePackFiles\i386\cryptdlg.dll + 2008-04-14 00:11:51 33,280 ------w c:\windows\ServicePackFiles\i386\cryptdll.dll + 2008-04-14 00:11:51 53,760 ------w c:\windows\ServicePackFiles\i386\cryptext.dll + 2008-04-14 00:11:51 64,512 ------w c:\windows\ServicePackFiles\i386\cryptnet.dll + 2008-04-14 00:11:51 62,464 ------w c:\windows\ServicePackFiles\i386\cryptsvc.dll + 2008-04-14 00:11:51 512,512 ------w c:\windows\ServicePackFiles\i386\cryptui.dll + 2008-04-14 00:11:51 101,888 ------w c:\windows\ServicePackFiles\i386\cscdll.dll + 2008-04-14 00:12:15 139,264 ------w c:\windows\ServicePackFiles\i386\cscript.exe + 2008-04-14 00:11:51 326,656 ------w c:\windows\ServicePackFiles\i386\cscui.dll + 2008-04-14 00:11:51 32,256 ------w c:\windows\ServicePackFiles\i386\csrsrv.dll + 2008-04-14 00:12:15 6,144 ------w c:\windows\ServicePackFiles\i386\csrss.exe + 2008-04-14 00:12:16 15,360 ------w c:\windows\ServicePackFiles\i386\ctfmon.exe + 2008-04-14 00:11:51 249,856 ------w c:\windows\ServicePackFiles\i386\ctmasetp.dll + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\i386\custsat.dll + 2004-08-04 05:32:25 48,640 ------w c:\windows\ServicePackFiles\i386\cwrwdm.sys + 2008-04-14 00:11:51 1,179,648 ------w c:\windows\ServicePackFiles\i386\d3d8.dll + 2008-04-14 00:11:51 8,192 ------w c:\windows\ServicePackFiles\i386\d3d8thk.dll + 2008-04-14 00:11:51 1,689,088 ------w c:\windows\ServicePackFiles\i386\d3d9.dll + 2008-04-14 00:11:51 824,320 ------w c:\windows\ServicePackFiles\i386\d3dim700.dll + 2008-04-14 00:11:51 1,054,208 ------w c:\windows\ServicePackFiles\i386\danim.dll + 2008-01-19 11:04:48 554,008 ------w c:\windows\ServicePackFiles\i386\dao360.dll + 2008-04-14 00:11:51 54,272 ------w c:\windows\ServicePackFiles\i386\dataclen.dll + 2008-04-14 00:11:51 165,376 ------w c:\windows\ServicePackFiles\i386\datime.dll + 2008-04-14 00:11:51 25,088 ------w c:\windows\ServicePackFiles\i386\davclnt.dll + 2008-04-14 00:11:51 640,000 ------w c:\windows\ServicePackFiles\i386\dbghelp.dll + 2008-04-14 00:11:51 24,576 ------w c:\windows\ServicePackFiles\i386\dbmsrpcn.dll + 2008-04-14 00:11:51 110,592 ------w c:\windows\ServicePackFiles\i386\dbnetlib.dll + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dbnmpntw.dll + 2008-04-14 00:25:26 1,804 ------w c:\windows\ServicePackFiles\i386\dcache.bin + 2008-04-14 00:11:51 40,960 ------w c:\windows\ServicePackFiles\i386\dcap32.dll + 2008-04-14 00:11:51 8,704 ------w c:\windows\ServicePackFiles\i386\dciman32.dll + 2008-04-14 00:12:16 6,144 ------w c:\windows\ServicePackFiles\i386\dcomcnfg.exe + 2008-04-14 00:12:16 30,208 ------w c:\windows\ServicePackFiles\i386\ddeshare.exe + 2008-04-14 00:11:51 279,552 ------w c:\windows\ServicePackFiles\i386\ddraw.dll + 2008-04-14 00:11:51 27,136 ------w c:\windows\ServicePackFiles\i386\ddrawex.dll + 2008-04-14 00:12:16 25,088 ------w c:\windows\ServicePackFiles\i386\defrag.exe + 2008-04-14 00:11:51 59,904 ------w c:\windows\ServicePackFiles\i386\devenum.dll + 2008-04-14 00:11:51 282,624 ------w c:\windows\ServicePackFiles\i386\devmgr.dll + 2008-04-14 00:12:16 82,944 ------w c:\windows\ServicePackFiles\i386\dfrgfat.exe + 2008-04-14 00:12:16 105,472 ------w c:\windows\ServicePackFiles\i386\dfrgntfs.exe + 2008-04-14 00:11:51 39,424 ------w c:\windows\ServicePackFiles\i386\dfrgsnap.dll + 2008-04-14 00:11:51 124,416 ------w c:\windows\ServicePackFiles\i386\dfrgui.dll + 2008-04-14 00:11:51 28,672 ------w c:\windows\ServicePackFiles\i386\dfsshlex.dll + 2008-04-14 00:11:51 111,104 ------w c:\windows\ServicePackFiles\i386\dgnet.dll + 2008-04-14 00:11:51 126,976 ------w c:\windows\ServicePackFiles\i386\dhcpcsvc.dll + 2008-04-14 00:11:52 379,904 ------w c:\windows\ServicePackFiles\i386\dhcpmon.dll + 2008-04-14 00:11:52 48,640 ------w c:\windows\ServicePackFiles\i386\dhcpqec.dll + 2008-04-14 00:12:17 539,136 ------w c:\windows\ServicePackFiles\i386\dialer.exe + 2008-04-14 00:12:17 87,040 ------w c:\windows\ServicePackFiles\i386\diantz.exe + 2007-04-02 18:34:11 884,712 ------w c:\windows\ServicePackFiles\i386\digcore.exe + 2008-04-14 00:11:52 68,608 ------w c:\windows\ServicePackFiles\i386\digest.dll + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dimsntfy.dll + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dimsroam.dll + 2008-04-14 00:11:52 158,720 ------w c:\windows\ServicePackFiles\i386\dinput.dll + 2008-04-14 00:11:52 181,760 ------w c:\windows\ServicePackFiles\i386\dinput8.dll + 2008-04-14 00:11:52 86,528 ------w c:\windows\ServicePackFiles\i386\directdb.dll + 2008-04-13 18:40:47 36,352 ------w c:\windows\ServicePackFiles\i386\disk.sys + 2008-04-14 00:11:52 1,504,256 ------w c:\windows\ServicePackFiles\i386\diskcopy.dll + 2008-04-13 18:40:44 14,208 ------w c:\windows\ServicePackFiles\i386\diskdump.sys + 2008-04-14 00:12:17 163,840 ------w c:\windows\ServicePackFiles\i386\diskpart.exe + 2008-04-14 00:11:52 32,768 ------w c:\windows\ServicePackFiles\i386\dispex.dll + 2004-08-04 07:56:48 294,912 ------w c:\windows\ServicePackFiles\i386\dlimport.exe + 2008-04-14 00:12:17 5,120 ------w c:\windows\ServicePackFiles\i386\dllhost.exe + 2008-04-13 18:40:51 8,320 ------w c:\windows\ServicePackFiles\i386\dlttape.sys + 2008-04-14 00:12:17 224,768 ------w c:\windows\ServicePackFiles\i386\dmadmin.exe + 2008-04-14 00:11:52 28,672 ------w c:\windows\ServicePackFiles\i386\dmband.dll + 2008-04-13 18:44:48 799,744 ------w c:\windows\ServicePackFiles\i386\dmboot.sys + 2008-04-14 00:11:52 61,440 ------w c:\windows\ServicePackFiles\i386\dmcompos.dll + 2008-04-14 00:11:52 285,184 ------w c:\windows\ServicePackFiles\i386\dmdlgs.dll + 2008-04-14 00:11:52 200,704 ------w c:\windows\ServicePackFiles\i386\dmdskmgr.dll + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dmime.dll + 2008-04-13 18:44:46 153,344 ------w c:\windows\ServicePackFiles\i386\dmio.sys + 2008-04-14 00:11:52 35,840 ------w c:\windows\ServicePackFiles\i386\dmloader.dll + 2008-04-14 00:12:17 15,872 ------w c:\windows\ServicePackFiles\i386\dmremote.exe + 2008-04-14 00:11:52 82,432 ------w c:\windows\ServicePackFiles\i386\dmscript.dll + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dmserver.dll + 2008-04-14 00:11:52 105,984 ------w c:\windows\ServicePackFiles\i386\dmstyle.dll + 2008-04-14 00:11:52 103,424 ------w c:\windows\ServicePackFiles\i386\dmsynth.dll + 2008-04-14 00:11:52 104,448 ------w c:\windows\ServicePackFiles\i386\dmusic.dll + 2008-04-13 18:45:01 52,864 ------w c:\windows\ServicePackFiles\i386\dmusic.sys + 2008-04-14 00:11:52 52,224 ------w c:\windows\ServicePackFiles\i386\dmutil.dll + 2008-04-14 00:11:52 147,968 ------w c:\windows\ServicePackFiles\i386\dnsapi.dll + 2008-04-14 00:11:52 45,568 ------w c:\windows\ServicePackFiles\i386\dnsrslvr.dll + 2008-04-14 00:11:52 48,128 ------w c:\windows\ServicePackFiles\i386\docprop2.dll + 2004-08-04 05:51:21 53,840 ------w c:\windows\ServicePackFiles\i386\dosx.exe + 2008-04-14 00:11:52 26,112 ------w c:\windows\ServicePackFiles\i386\dot3api.dll + 2008-04-14 00:11:52 57,856 ------w c:\windows\ServicePackFiles\i386\dot3cfg.dll + 2008-04-14 00:11:52 39,936 ------w c:\windows\ServicePackFiles\i386\dot3clnt.dll + 2008-04-14 00:11:52 9,216 ------w c:\windows\ServicePackFiles\i386\dot3dlg.dll + 2008-04-14 00:11:52 56,320 ------w c:\windows\ServicePackFiles\i386\dot3msm.dll + 2008-04-14 00:11:52 132,096 ------w c:\windows\ServicePackFiles\i386\dot3svc.dll + 2008-04-14 00:11:52 650,752 ------w c:\windows\ServicePackFiles\i386\dot3ui.dll + 2008-04-13 18:39:46 206,976 ------w c:\windows\ServicePackFiles\i386\dot4.sys + 2008-04-13 21:00:49 103,424 ------w c:\windows\ServicePackFiles\i386\dpcdll.dll + 2008-04-14 00:12:17 29,696 ------w c:\windows\ServicePackFiles\i386\dplaysvr.exe + 2008-04-14 00:11:52 229,888 ------w c:\windows\ServicePackFiles\i386\dplayx.dll + 2008-04-14 00:11:52 23,552 ------w c:\windows\ServicePackFiles\i386\dpmodemx.dll + 2008-04-14 00:09:19 3,072 ------w c:\windows\ServicePackFiles\i386\dpnaddr.dll + 2008-04-14 00:11:52 375,296 ------w c:\windows\ServicePackFiles\i386\dpnet.dll + 2008-04-14 00:11:52 35,328 ------w c:\windows\ServicePackFiles\i386\dpnhpast.dll + 2008-04-14 00:11:52 60,928 ------w c:\windows\ServicePackFiles\i386\dpnhupnp.dll + 2008-04-14 00:09:20 3,072 ------w c:\windows\ServicePackFiles\i386\dpnlobby.dll + 2008-04-14 00:12:17 17,920 ------w c:\windows\ServicePackFiles\i386\dpnsvr.exe + 2008-04-14 00:11:52 21,504 ------w c:\windows\ServicePackFiles\i386\dpvacm.dll + 2008-04-14 00:11:52 212,480 ------w c:\windows\ServicePackFiles\i386\dpvoice.dll + 2008-04-14 00:12:18 83,456 ------w c:\windows\ServicePackFiles\i386\dpvsetup.exe + 2008-04-14 00:11:52 116,736 ------w c:\windows\ServicePackFiles\i386\dpvvox.dll + 2008-04-14 00:11:52 57,344 ------w c:\windows\ServicePackFiles\i386\dpwsockx.dll + 2004-08-04 07:57:04 299,520 ------w c:\windows\ServicePackFiles\i386\drmclien.dll + 2008-04-13 18:45:14 60,160 ------w c:\windows\ServicePackFiles\i386\drmk.sys + 2008-04-13 18:45:13 2,944 ------w c:\windows\ServicePackFiles\i386\drmkaud.sys + 2004-08-04 07:56:42 87,040 ------w c:\windows\ServicePackFiles\i386\drmstor.dll + 2004-08-04 07:57:02 695,296 ------w c:\windows\ServicePackFiles\i386\drmv2clt.dll + 2008-04-14 00:11:52 14,336 ------w c:\windows\ServicePackFiles\i386\drprov.dll + 2002-08-29 10:00:00 4,656 ------w c:\windows\ServicePackFiles\i386\ds16gt.dll + 2008-04-14 00:11:52 16,384 ------w c:\windows\ServicePackFiles\i386\ds32gt.dll + 2008-04-14 00:11:52 181,248 ------w c:\windows\ServicePackFiles\i386\dsdmo.dll + 2008-04-14 00:11:52 71,680 ------w c:\windows\ServicePackFiles\i386\dsdmoprp.dll + 2008-04-14 00:11:52 92,672 ------w c:\windows\ServicePackFiles\i386\dskquota.dll + 2008-04-14 00:11:52 155,648 ------w c:\windows\ServicePackFiles\i386\dskquoui.dll + 2008-04-14 00:11:52 367,616 ------w c:\windows\ServicePackFiles\i386\dsound.dll + 2008-04-14 00:11:52 1,293,824 ------w c:\windows\ServicePackFiles\i386\dsound3d.dll + 2008-04-14 00:11:52 142,848 ------w c:\windows\ServicePackFiles\i386\dsprop.dll + 2008-04-13 17:09:30 4,096 ------w c:\windows\ServicePackFiles\i386\dsprpres.dll + 2008-04-14 00:11:52 239,104 ------w c:\windows\ServicePackFiles\i386\dsquery.dll + 2008-04-14 00:11:52 51,200 ------w c:\windows\ServicePackFiles\i386\dssec.dll + 2008-04-13 17:37:57 138,752 ------w c:\windows\ServicePackFiles\i386\dssenh.dll + 2008-04-14 00:11:52 113,152 ------w c:\windows\ServicePackFiles\i386\dsuiext.dll + 2008-04-14 00:11:52 19,456 ------w c:\windows\ServicePackFiles\i386\dswave.dll + 2008-04-14 00:12:18 10,752 ------w c:\windows\ServicePackFiles\i386\dumprep.exe + 2008-04-14 00:11:52 304,128 ------w c:\windows\ServicePackFiles\i386\duser.dll + 2008-04-14 00:12:18 17,920 ------w c:\windows\ServicePackFiles\i386\dvdupgrd.exe + 2008-04-14 00:12:18 180,224 ------w c:\windows\ServicePackFiles\i386\dwwin.exe + 2008-04-14 00:11:52 619,008 ------w c:\windows\ServicePackFiles\i386\dx7vb.dll + 2008-04-14 00:11:52 1,227,264 ------w c:\windows\ServicePackFiles\i386\dx8vb.dll + 2008-04-14 00:12:18 1,298,432 ------w c:\windows\ServicePackFiles\i386\dxdiag.exe + 2008-04-14 00:11:52 2,113,536 ------w c:\windows\ServicePackFiles\i386\dxdiagn.dll + 2008-04-13 18:38:29 71,168 ------w c:\windows\ServicePackFiles\i386\dxg.sys + 2004-08-04 07:56:42 498,205 ------w c:\windows\ServicePackFiles\i386\dxmasf.dll + 2008-04-14 00:11:52 357,888 ------w c:\windows\ServicePackFiles\i386\dxtmsft.dll + 2008-04-14 00:11:52 205,312 ------w c:\windows\ServicePackFiles\i386\dxtrans.dll + 2008-04-14 00:11:52 30,720 ------w c:\windows\ServicePackFiles\i386\eapolqec.dll + 2008-04-14 00:11:52 184,832 ------w c:\windows\ServicePackFiles\i386\eapp3hst.dll + 2008-04-14 00:11:52 126,976 ------w c:\windows\ServicePackFiles\i386\eappcfg.dll + 2008-04-14 00:11:52 94,208 ------w c:\windows\ServicePackFiles\i386\eappgnui.dll + 2008-04-14 00:11:52 180,224 ------w c:\windows\ServicePackFiles\i386\eapphost.dll + 2008-04-14 00:11:52 40,960 ------w c:\windows\ServicePackFiles\i386\eappprxy.dll + 2008-04-14 00:11:52 59,392 ------w c:\windows\ServicePackFiles\i386\eapqec.dll + 2008-04-14 00:11:52 33,792 ------w c:\windows\ServicePackFiles\i386\eapsvc.dll + 2008-04-14 00:11:52 175,616 ------w c:\windows\ServicePackFiles\i386\ediskeer.dll + 2008-04-14 00:11:53 183,296 ------w c:\windows\ServicePackFiles\i386\els.dll + 2008-04-14 00:11:53 20,480 ------w c:\windows\ServicePackFiles\i386\encapi.dll + 2008-04-14 00:11:53 186,880 ------w c:\windows\ServicePackFiles\i386\encdec.dll + 2008-04-13 16:26:02 40,960 ------w c:\windows\ServicePackFiles\i386\ep9res.dll + 2004-07-17 18:39:35 120,320 ------w c:\windows\ServicePackFiles\i386\epcl5res.dll + 2008-04-14 00:11:53 23,040 ------w c:\windows\ServicePackFiles\i386\ersvc.dll + 2008-04-14 00:11:53 246,272 ------w c:\windows\ServicePackFiles\i386\es.dll + 2008-04-14 00:11:53 1,082,368 ------w c:\windows\ServicePackFiles\i386\esent.dll + 2008-04-14 00:11:53 247,808 ------w c:\windows\ServicePackFiles\i386\esscli.dll + 2002-08-29 04:00:54 137,088 ------w c:\windows\ServicePackFiles\i386\essm2e.sys + 2008-04-14 00:12:19 193,024 ------w c:\windows\ServicePackFiles\i386\eudcedit.exe + 2008-04-14 00:11:53 56,320 ------w c:\windows\ServicePackFiles\i386\eventlog.dll + 2008-04-14 00:11:53 101,888 ------w c:\windows\ServicePackFiles\i386\evntagnt.dll + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\evntcmd.exe + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\evntrprv.dll + 2008-04-14 00:12:19 92,160 ------w c:\windows\ServicePackFiles\i386\evntwin.exe + 2008-04-14 00:12:19 1,033,728 ------w c:\windows\ServicePackFiles\i386\explorer.exe + 2008-04-14 00:11:53 380,445 ------w c:\windows\ServicePackFiles\i386\expsrv.dll + 2008-04-14 00:11:53 55,808 ------w c:\windows\ServicePackFiles\i386\extmgr.dll + 2008-04-14 00:12:19 24,064 ------w c:\windows\ServicePackFiles\i386\extrac32.exe + 2008-04-14 00:11:53 125,952 ------w c:\windows\ServicePackFiles\i386\exts.dll + 2008-04-14 00:09:30 7,168 ------w c:\windows\ServicePackFiles\i386\f3ahvoas.dll + 2008-04-13 19:14:29 143,744 ------w c:\windows\ServicePackFiles\i386\fastfat.sys + 2008-04-14 00:11:53 472,064 ------w c:\windows\ServicePackFiles\i386\fastprox.dll + 2008-04-14 00:11:53 80,384 ------w c:\windows\ServicePackFiles\i386\faultrep.dll + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\faxpatch.exe + 2008-04-13 18:40:25 27,392 ------w c:\windows\ServicePackFiles\i386\fdc.sys + 2008-04-14 00:11:53 21,504 ------w c:\windows\ServicePackFiles\i386\feclient.dll + 2008-04-14 00:11:53 337,920 ------w c:\windows\ServicePackFiles\i386\filemgmt.dll + 2008-04-14 00:12:20 27,136 ------w c:\windows\ServicePackFiles\i386\findstr.exe + 2008-04-13 18:33:28 44,544 ------w c:\windows\ServicePackFiles\i386\fips.sys + 2008-04-14 00:11:53 87,552 ------w c:\windows\ServicePackFiles\i386\fldrclnr.dll + 2008-04-13 18:40:25 20,480 ------w c:\windows\ServicePackFiles\i386\flpydisk.sys + 2008-04-14 00:11:53 16,896 ------w c:\windows\ServicePackFiles\i386\fltlib.dll + 2008-04-14 00:12:20 23,040 ------w c:\windows\ServicePackFiles\i386\fltmc.exe + 2008-04-13 18:32:59 129,792 ------w c:\windows\ServicePackFiles\i386\fltmgr.sys + 2008-04-14 00:11:53 382,976 ------w c:\windows\ServicePackFiles\i386\fontext.dll + 2008-04-14 00:11:53 80,896 ------w c:\windows\ServicePackFiles\i386\fontsub.dll + 2008-04-14 00:12:20 20,992 ------w c:\windows\ServicePackFiles\i386\fontview.exe + 2008-04-14 00:12:20 7,680 ------w c:\windows\ServicePackFiles\i386\forcedos.exe + 2004-08-04 05:31:22 34,173 ------w c:\windows\ServicePackFiles\i386\forehe.sys + 2008-04-14 00:12:42 29,696 ------w c:\windows\ServicePackFiles\i386\format.com + 2008-04-14 00:11:53 32,828 ------w c:\windows\ServicePackFiles\i386\fp40ext.dll + 2008-04-14 00:11:53 184,435 ------w c:\windows\ServicePackFiles\i386\fp4amsft.dll + 2008-04-14 00:11:53 82,035 ------w c:\windows\ServicePackFiles\i386\fp4anscp.dll + 2008-04-14 00:11:53 147,513 ------w c:\windows\ServicePackFiles\i386\fp4apws.dll + 2008-04-14 00:11:53 49,210 ------w c:\windows\ServicePackFiles\i386\fp4areg.dll + 2008-04-14 00:11:53 102,509 ------w c:\windows\ServicePackFiles\i386\fp4atxt.dll + 2008-04-14 00:11:53 618,605 ------w c:\windows\ServicePackFiles\i386\fp4autl.dll + 2008-04-14 00:11:53 41,020 ------w c:\windows\ServicePackFiles\i386\fp4avnb.dll + 2008-04-14 00:11:53 32,826 ------w c:\windows\ServicePackFiles\i386\fp4avss.dll + 2008-04-14 00:11:53 49,212 ------w c:\windows\ServicePackFiles\i386\fp4awebs.dll + 2008-04-14 00:11:53 876,653 ------w c:\windows\ServicePackFiles\i386\fp4awel.dll + 2008-04-14 00:12:20 15,120 ------w c:\windows\ServicePackFiles\i386\fp98sadm.exe + 2008-04-14 00:12:20 109,840 ------w c:\windows\ServicePackFiles\i386\fp98swin.exe + 2008-04-14 00:12:20 24,632 ------w c:\windows\ServicePackFiles\i386\fpadmcgi.exe + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpadmdll.dll + 2008-04-14 00:12:20 188,494 ------w c:\windows\ServicePackFiles\i386\fpcount.exe + 2008-04-14 00:11:53 94,208 ------w c:\windows\ServicePackFiles\i386\fpencode.dll + 2008-04-14 00:11:53 20,541 ------w c:\windows\ServicePackFiles\i386\fpexedll.dll + 2008-04-14 00:11:53 598,071 ------w c:\windows\ServicePackFiles\i386\fpmmc.dll + 2007-04-02 16:36:04 208,896 ------w c:\windows\ServicePackFiles\i386\fpmmcsat.dll + 2008-04-14 00:12:20 20,538 ------w c:\windows\ServicePackFiles\i386\fpremadm.exe + 2008-04-14 00:12:20 28,728 ------w c:\windows\ServicePackFiles\i386\fpsrvadm.exe + 2008-04-14 00:09:33 9,344 ------w c:\windows\ServicePackFiles\i386\framebuf.dll + 2008-04-14 00:11:53 185,344 ------w c:\windows\ServicePackFiles\i386\framedyn.dll + 2008-04-14 00:12:20 193,024 ------w c:\windows\ServicePackFiles\i386\fsquirt.exe + 2008-04-14 00:12:20 42,496 ------w c:\windows\ServicePackFiles\i386\ftp.exe + 2008-04-14 00:11:53 60,416 ------w c:\windows\ServicePackFiles\i386\fwcfg.dll + 2008-04-14 00:11:53 451,584 ------w c:\windows\ServicePackFiles\i386\fxsapi.dll + 2008-04-14 00:12:21 142,848 ------w c:\windows\ServicePackFiles\i386\fxsclnt.exe + 2008-04-14 00:11:54 72,192 ------w c:\windows\ServicePackFiles\i386\fxscom.dll + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\fxscomex.dll + 2008-04-14 00:12:21 229,376 ------w c:\windows\ServicePackFiles\i386\fxscover.exe + 2008-04-14 00:11:54 26,624 ------w c:\windows\ServicePackFiles\i386\fxsdrv.dll + 2008-04-14 00:11:54 55,296 ------w c:\windows\ServicePackFiles\i386\fxsevent.dll + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsext32.dll + 2008-04-14 00:11:54 23,552 ------w c:\windows\ServicePackFiles\i386\fxsmon.dll + 2008-04-14 00:11:54 132,608 ------w c:\windows\ServicePackFiles\i386\fxsocm.dll + 2008-04-14 00:11:54 8,704 ------w c:\windows\ServicePackFiles\i386\fxsperf.dll + 2008-04-14 00:09:33 6,656 ------w c:\windows\ServicePackFiles\i386\fxsres.dll + 2008-04-14 00:11:54 562,176 ------w c:\windows\ServicePackFiles\i386\fxsst.dll + 2008-04-14 00:12:21 267,776 ------w c:\windows\ServicePackFiles\i386\fxssvc.exe + 2008-04-14 00:11:54 246,272 ------w c:\windows\ServicePackFiles\i386\fxst30.dll + 2008-04-14 00:11:54 397,312 ------w c:\windows\ServicePackFiles\i386\fxstiff.dll + 2008-04-14 00:11:54 154,112 ------w c:\windows\ServicePackFiles\i386\fxsui.dll + 2008-04-14 00:11:54 192,512 ------w c:\windows\ServicePackFiles\i386\fxswzrd.dll + 2008-04-14 00:11:54 400,384 ------w c:\windows\ServicePackFiles\i386\fxsxp32.dll + 2008-04-13 18:36:40 46,464 ------w c:\windows\ServicePackFiles\i386\gagp30kx.sys + 2008-04-13 18:45:29 10,624 ------w c:\windows\ServicePackFiles\i386\gameenum.sys + 2008-04-13 18:45:32 59,136 ------w c:\windows\ServicePackFiles\i386\gckernel.sys + 2008-04-14 00:11:54 285,184 ------w c:\windows\ServicePackFiles\i386\gdi32.dll + 2008-04-14 00:11:54 122,880 ------w c:\windows\ServicePackFiles\i386\glu32.dll + 2002-08-29 10:00:00 101,888 ------w c:\windows\ServicePackFiles\i386\gpkcsp.dll + 2006-12-31 01:26:44 9,728 ------w c:\windows\ServicePackFiles\i386\gpkrsrc.dll + 2008-04-14 00:12:21 39,424 ------w c:\windows\ServicePackFiles\i386\grpconv.exe + 2008-04-13 18:40:21 28,288 ------w c:\windows\ServicePackFiles\i386\grserial.sys + 2008-04-14 00:11:54 133,120 ------w c:\windows\ServicePackFiles\i386\guitrn.dll + 2004-08-04 07:56:42 108,544 ------w c:\windows\ServicePackFiles\i386\guitrn_a.dll + 2008-04-14 00:11:54 115,200 ------w c:\windows\ServicePackFiles\i386\guitrna.dll + 2008-04-14 00:11:54 57,344 ------w c:\windows\ServicePackFiles\i386\h323cc.dll + 2008-04-14 00:11:54 614,912 ------w c:\windows\ServicePackFiles\i386\h323msp.dll + 2008-04-13 18:31:32 105,344 ------w c:\windows\ServicePackFiles\i386\hal.dll + 2008-04-13 18:31:28 131,840 ------w c:\windows\ServicePackFiles\i386\halaacpi.dll + 2008-04-13 18:31:27 81,152 ------w c:\windows\ServicePackFiles\i386\halacpi.dll + 2008-04-13 18:31:28 150,528 ------w c:\windows\ServicePackFiles\i386\halapic.dll + 2008-04-13 18:31:28 134,400 ------w c:\windows\ServicePackFiles\i386\halmacpi.dll + 2008-04-13 18:31:32 152,576 ------w c:\windows\ServicePackFiles\i386\halmps.dll + 2008-04-13 18:31:31 77,696 ------w c:\windows\ServicePackFiles\i386\halsp.dll + 2008-04-14 00:11:54 7,168 ------w c:\windows\ServicePackFiles\i386\hccoin.dll + 2008-04-13 16:36:05 144,384 ------w c:\windows\ServicePackFiles\i386\hdaudbus.sys + 2008-04-14 00:12:21 15,872 ------w c:\windows\ServicePackFiles\i386\help.exe + 2008-04-14 00:12:21 769,024 ------w c:\windows\ServicePackFiles\i386\helpctr.exe + 2008-04-14 00:12:21 744,448 ------w c:\windows\ServicePackFiles\i386\helpsvc.exe + 2008-04-14 00:12:21 10,752 ------w c:\windows\ServicePackFiles\i386\hh.exe + 2008-04-14 00:11:54 41,472 ------w c:\windows\ServicePackFiles\i386\hhsetup.dll + 2008-04-14 00:11:54 20,992 ------w c:\windows\ServicePackFiles\i386\hid.dll + 2008-04-13 18:36:38 20,352 ------w c:\windows\ServicePackFiles\i386\hidbatt.sys + 2008-04-13 18:46:30 25,600 ------w c:\windows\ServicePackFiles\i386\hidbth.sys + 2008-04-13 18:45:26 36,864 ------w c:\windows\ServicePackFiles\i386\hidclass.sys + 2008-04-13 18:45:26 19,200 ------w c:\windows\ServicePackFiles\i386\hidir.sys + 2008-04-13 18:45:22 24,960 ------w c:\windows\ServicePackFiles\i386\hidparse.sys + 2008-04-14 00:11:54 21,504 ------w c:\windows\ServicePackFiles\i386\hidserv.dll + 2008-04-13 18:45:27 10,368 ------w c:\windows\ServicePackFiles\i386\hidusb.sys + 2008-04-14 00:11:54 72,704 ------w c:\windows\ServicePackFiles\i386\hlink.dll + 2008-04-14 00:11:54 38,912 ------w c:\windows\ServicePackFiles\i386\hmmapi.dll + 2008-04-14 00:11:54 344,064 ------w c:\windows\ServicePackFiles\i386\hnetcfg.dll + 2008-04-14 00:11:54 330,752 ------w c:\windows\ServicePackFiles\i386\hnetwiz.dll + 2008-04-14 00:11:54 39,936 ------w c:\windows\ServicePackFiles\i386\hostmib.dll + 2008-04-14 00:11:54 144,896 ------w c:\windows\ServicePackFiles\i386\hotplug.dll + 2008-04-14 00:11:54 10,752 ------w c:\windows\ServicePackFiles\i386\hpcjrr.dll + 2008-04-14 00:11:54 10,240 ------w c:\windows\ServicePackFiles\i386\hpcjrrps.dll + 2008-04-14 00:11:54 87,552 ------w c:\windows\ServicePackFiles\i386\hpfud50.dll + 2008-04-14 00:12:21 18,432 ------w c:\windows\ServicePackFiles\i386\hscupd.exe + 2004-08-04 05:41:46 220,032 ------w c:\windows\ServicePackFiles\i386\hsfbs2s2.sys + 2008-04-14 00:11:54 32,285 ------w c:\windows\ServicePackFiles\i386\hsfcisp2.dll + 2004-08-04 05:41:48 685,056 ------w c:\windows\ServicePackFiles\i386\hsfcxts2.sys + 2004-08-04 05:41:54 1,041,536 ------w c:\windows\ServicePackFiles\i386\hsfdpsp2.sys + 2008-04-13 18:53:53 264,832 ------w c:\windows\ServicePackFiles\i386\http.sys + 2008-04-14 00:11:54 24,576 ------w c:\windows\ServicePackFiles\i386\httpapi.dll + 2008-04-14 00:11:54 41,984 ------w c:\windows\ServicePackFiles\i386\htui.dll + 2008-04-14 00:11:54 347,136 ------w c:\windows\ServicePackFiles\i386\hypertrm.dll + 2008-04-13 18:41:22 8,576 ------w c:\windows\ServicePackFiles\i386\i2omgmt.sys + 2008-04-13 18:41:22 18,560 ------w c:\windows\ServicePackFiles\i386\i2omp.sys + 2008-04-13 19:18:00 52,480 ------w c:\windows\ServicePackFiles\i386\i8042prt.sys + 2008-04-14 00:11:54 702,845 ------w c:\windows\ServicePackFiles\i386\i81xdnt5.dll + 2004-08-04 05:29:36 161,020 ------w c:\windows\ServicePackFiles\i386\i81xnt5.sys + 2008-04-14 00:11:54 119,808 ------w c:\windows\ServicePackFiles\i386\iasrad.dll + 2008-04-14 00:11:54 11,264 ------w c:\windows\ServicePackFiles\i386\icaapi.dll + 2008-04-14 00:11:54 80,384 ------w c:\windows\ServicePackFiles\i386\iccvid.dll + 2008-04-14 00:11:54 254,976 ------w c:\windows\ServicePackFiles\i386\icm32.dll + 2008-04-14 00:09:40 3,584 ------w c:\windows\ServicePackFiles\i386\icmp.dll + 2008-04-13 16:44:29 2,560 ------w c:\windows\ServicePackFiles\i386\iconlib.dll + 2008-04-14 00:11:54 61,440 ------w c:\windows\ServicePackFiles\i386\icwconn.dll + 2008-04-14 00:12:22 214,528 ------w c:\windows\ServicePackFiles\i386\icwconn1.exe + 2008-04-14 00:12:22 86,016 ------w c:\windows\ServicePackFiles\i386\icwconn2.exe + 2008-04-14 00:11:54 73,728 ------w c:\windows\ServicePackFiles\i386\icwdial.dll + 2008-04-14 00:11:54 32,768 ------w c:\windows\ServicePackFiles\i386\icwdl.dll + 2008-04-14 00:11:54 172,032 ------w c:\windows\ServicePackFiles\i386\icwhelp.dll + 2008-04-14 00:11:54 65,536 ------w c:\windows\ServicePackFiles\i386\icwphbk.dll + 2008-04-14 00:12:22 24,576 ------w c:\windows\ServicePackFiles\i386\icwrmind.exe + 2008-04-14 00:11:54 49,152 ------w c:\windows\ServicePackFiles\i386\icwutil.dll + 2008-04-14 00:11:54 120,832 ------w c:\windows\ServicePackFiles\i386\idq.dll + 2008-04-14 00:12:22 34,304 ------w c:\windows\ServicePackFiles\i386\ie4uinit.exe + 2008-04-14 00:11:54 143,360 ------w c:\windows\ServicePackFiles\i386\ieakeng.dll + 2008-04-14 00:11:54 216,576 ------w c:\windows\ServicePackFiles\i386\ieaksie.dll + 2008-04-14 00:11:54 323,584 ------w c:\windows\ServicePackFiles\i386\iedkcs32.dll + 2008-04-14 00:12:22 18,432 ------w c:\windows\ServicePackFiles\i386\iedw.exe + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ieencode.dll + 2008-04-14 00:11:54 251,904 ------w c:\windows\ServicePackFiles\i386\iepeers.dll + 2008-04-14 00:11:54 48,640 ------w c:\windows\ServicePackFiles\i386\iernonce.dll + 2008-04-14 00:11:54 62,976 ------w c:\windows\ServicePackFiles\i386\iesetup.dll + 2008-04-14 00:12:22 93,184 ------w c:\windows\ServicePackFiles\i386\iexplore.exe + 2008-04-14 00:12:22 114,688 ------w c:\windows\ServicePackFiles\i386\iexpress.exe + 2008-04-14 00:11:54 135,680 ------w c:\windows\ServicePackFiles\i386\ifmon.dll + 2008-04-14 00:11:54 8,192 ------w c:\windows\ServicePackFiles\i386\igmpagnt.dll + 2008-04-14 00:11:54 505,344 ------w c:\windows\ServicePackFiles\i386\iis.dll + 2008-04-14 00:11:54 81,920 ------w c:\windows\ServicePackFiles\i386\ils.dll + 2008-04-14 00:11:54 144,384 ------w c:\windows\ServicePackFiles\i386\imagehlp.dll + 2008-04-14 00:12:22 150,528 ------w c:\windows\ServicePackFiles\i386\imapi.exe + 2008-04-13 18:40:58 42,112 ------w c:\windows\ServicePackFiles\i386\imapi.sys + 2008-04-14 00:11:54 36,921 ------w c:\windows\ServicePackFiles\i386\imeshare.dll + 2008-04-14 00:11:54 35,840 ------w c:\windows\ServicePackFiles\i386\imgutil.dll + 2008-04-14 00:11:54 110,080 ------w c:\windows\ServicePackFiles\i386\imm32.dll + 2008-04-14 00:11:54 123,392 ------w c:\windows\ServicePackFiles\i386\imsinsnt.dll + 2008-04-14 00:11:54 274,432 ------w c:\windows\ServicePackFiles\i386\inetcfg.dll + 2008-04-14 00:11:54 691,712 ------w c:\windows\ServicePackFiles\i386\inetcomm.dll + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\inetmib1.dll + 2008-04-14 00:11:55 75,264 ------w c:\windows\ServicePackFiles\i386\inetpp.dll + 2008-04-14 00:11:55 15,872 ------w c:\windows\ServicePackFiles\i386\inetppui.dll + 2008-04-13 16:22:12 48,128 ------w c:\windows\ServicePackFiles\i386\inetres.dll + 2008-04-14 00:12:22 20,480 ------w c:\windows\ServicePackFiles\i386\inetwiz.exe + 2008-04-14 00:11:55 147,456 ------w c:\windows\ServicePackFiles\i386\initpki.dll + 2008-04-14 00:11:55 123,392 ------w c:\windows\ServicePackFiles\i386\input.dll + 2008-04-14 00:11:55 96,256 ------w c:\windows\ServicePackFiles\i386\inseng.dll + 2008-04-13 18:40:29 5,504 ------w c:\windows\ServicePackFiles\i386\intelide.sys + 2008-04-13 18:31:32 36,352 ------w c:\windows\ServicePackFiles\i386\intelppm.sys + 2008-04-13 18:53:34 36,608 ------w c:\windows\ServicePackFiles\i386\ip6fw.sys + 2008-04-14 00:12:22 55,808 ------w c:\windows\ServicePackFiles\i386\ipconfig.exe + 2008-04-14 00:09:30 103,424 ------w c:\windows\ServicePackFiles\i386\ipevldpc.dll + 2008-04-14 00:09:23 24,064 ------w c:\windows\ServicePackFiles\i386\ipevlpid.dll + 2008-04-14 00:11:55 94,720 ------w c:\windows\ServicePackFiles\i386\iphlpapi.dll + 2008-04-13 18:57:07 20,864 ------w c:\windows\ServicePackFiles\i386\ipinip.sys + 2004-08-04 07:56:11 96,768 ------w c:\windows\ServicePackFiles\i386\ipmntdpc.dll + 2008-04-14 00:11:55 161,280 ------w c:\windows\ServicePackFiles\i386\ipmontr.dll + 2008-04-13 18:57:15 152,832 ------w c:\windows\ServicePackFiles\i386\ipnat.sys + 2008-04-14 00:11:55 331,264 ------w c:\windows\ServicePackFiles\i386\ipnathlp.dll + 2008-04-14 00:11:55 330,752 ------w c:\windows\ServicePackFiles\i386\ippromon.dll + 2008-04-14 00:11:55 35,328 ------w c:\windows\ServicePackFiles\i386\iprip.dll + 2008-04-14 00:11:55 177,152 ------w c:\windows\ServicePackFiles\i386\iprtrmgr.dll + 2008-04-13 19:19:42 75,264 ------w c:\windows\ServicePackFiles\i386\ipsec.sys + 2008-04-14 00:11:55 349,696 ------w c:\windows\ServicePackFiles\i386\ipsecsnp.dll + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ipsecsvc.dll + 2008-04-14 00:10:45 102,912 ------w c:\windows\ServicePackFiles\i386\ipseldpc.dll + 2008-04-14 00:09:24 24,064 ------w c:\windows\ServicePackFiles\i386\ipselpid.dll + 2008-04-14 00:11:55 384,000 ------w c:\windows\ServicePackFiles\i386\ipsmsnap.dll + 2008-04-14 00:12:23 53,248 ------w c:\windows\ServicePackFiles\i386\ipv6.exe + 2008-04-14 00:11:55 59,904 ------w c:\windows\ServicePackFiles\i386\ipv6mon.dll + 2008-04-14 00:12:23 23,552 ------w c:\windows\ServicePackFiles\i386\ipxroute.exe + 2008-04-14 00:11:55 22,016 ------w c:\windows\ServicePackFiles\i386\ipxwan.dll + 2008-04-14 00:11:55 120,320 ------w c:\windows\ServicePackFiles\i386\ir41_qc.dll + 2008-04-14 00:11:55 338,432 ------w c:\windows\ServicePackFiles\i386\ir41_qcx.dll + 2008-04-14 00:11:55 755,200 ------w c:\windows\ServicePackFiles\i386\ir50_32.dll + 2008-04-14 00:11:55 200,192 ------w c:\windows\ServicePackFiles\i386\ir50_qc.dll + 2008-04-14 00:11:55 183,808 ------w c:\windows\ServicePackFiles\i386\ir50_qcx.dll + 2008-04-13 18:54:36 88,192 ------w c:\windows\ServicePackFiles\i386\irda.sys + 2008-04-13 18:54:28 11,264 ------w c:\windows\ServicePackFiles\i386\irenum.sys + 2008-04-14 00:12:23 151,552 ------w c:\windows\ServicePackFiles\i386\irftp.exe + 2008-04-14 00:11:55 28,160 ------w c:\windows\ServicePackFiles\i386\irmon.dll + 2008-04-13 18:36:41 37,248 ------w c:\windows\ServicePackFiles\i386\isapnp.sys + 2008-04-14 00:10:32 105,984 ------w c:\windows\ServicePackFiles\i386\isdpc.dll + 2008-04-14 00:10:55 105,984 ------w c:\windows\ServicePackFiles\i386\isendpc.dll + 2008-04-14 00:10:55 24,064 ------w c:\windows\ServicePackFiles\i386\isenpid.dll + 2008-04-14 00:11:55 81,920 ------w c:\windows\ServicePackFiles\i386\isign32.dll + 2008-04-14 00:10:32 24,064 ------w c:\windows\ServicePackFiles\i386\ispid.dll + 2008-04-14 00:11:55 32,768 ------w c:\windows\ServicePackFiles\i386\isrdbg32.dll + 2008-04-14 00:11:55 155,136 ------w c:\windows\ServicePackFiles\i386\itircl.dll + 2008-04-14 00:11:55 138,240 ------w c:\windows\ServicePackFiles\i386\itss.dll + 2008-04-14 00:11:55 191,488 ------w c:\windows\ServicePackFiles\i386\iuengine.dll + 2008-04-14 00:11:55 54,272 ------w c:\windows\ServicePackFiles\i386\ixsso.dll + 2008-04-14 00:11:55 47,616 ------w c:\windows\ServicePackFiles\i386\iyuv_32.dll + 2008-04-14 00:11:55 163,840 ------w c:\windows\ServicePackFiles\i386\jgdw400.dll + 2008-04-14 00:11:55 27,648 ------w c:\windows\ServicePackFiles\i386\jgpl400.dll + 2008-04-14 00:11:56 512,000 ------w c:\windows\ServicePackFiles\i386\jscript.dll + 2008-04-14 00:11:56 15,872 ------w c:\windows\ServicePackFiles\i386\jsproxy.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd101.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbd106n.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdax2.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdbhc.dll + 2008-04-13 18:39:47 24,576 ------w c:\windows\ServicePackFiles\i386\kbdclass.sys + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdfi1.dll + 2008-04-13 18:39:48 14,592 ------w c:\windows\ServicePackFiles\i386\kbdhid.sys + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdibm02.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinbe1.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdinben.dll + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdinmal.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdiultn.dll + 2008-04-14 00:09:55 6,656 ------w c:\windows\ServicePackFiles\i386\kbdlk41a.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdlk41j.dll + 2008-04-14 00:09:55 5,632 ------w c:\windows\ServicePackFiles\i386\kbdmaori.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt47.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdmlt48.dll + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdnec.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdnepr.dll + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdno1.dll + 2008-04-14 00:09:55 6,144 ------w c:\windows\ServicePackFiles\i386\kbdpash.dll + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsfi.dll + 2008-04-14 00:09:55 7,680 ------w c:\windows\ServicePackFiles\i386\kbdsmsno.dll + 2008-04-14 00:09:55 7,168 ------w c:\windows\ServicePackFiles\i386\kbdukx.dll + 2008-04-13 18:31:35 7,424 ------w c:\windows\ServicePackFiles\i386\kd1394.dll + 2008-04-14 00:11:56 184,832 ------w c:\windows\ServicePackFiles\i386\kdcsvc.dll + 2008-04-14 00:11:56 48,640 ------w c:\windows\ServicePackFiles\i386\kdsui.dll + 2008-04-14 00:11:56 253,952 ------w c:\windows\ServicePackFiles\i386\kdsusd.dll + 2008-04-14 00:11:56 299,520 ------w c:\windows\ServicePackFiles\i386\kerberos.dll + 2008-04-14 00:11:56 989,696 ------w c:\windows\ServicePackFiles\i386\kernel32.dll + 2002-08-29 10:00:00 42,537 ------w c:\windows\ServicePackFiles\i386\keyboard.sys + 2008-04-14 00:11:56 150,528 ------w c:\windows\ServicePackFiles\i386\keymgr.dll + 2008-04-13 18:45:09 172,416 ------w c:\windows\ServicePackFiles\i386\kmixer.sys + 2008-04-14 00:11:56 61,440 ------w c:\windows\ServicePackFiles\i386\kmsvc.dll + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knperdpc.dll + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\knperpid.dll + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\knprodpc.dll + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\knpropid.dll + 2008-04-14 00:11:56 8,192 ------w c:\windows\ServicePackFiles\i386\koc.dll + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kperdpc.dll + 2008-04-14 00:09:56 24,064 ------w c:\windows\ServicePackFiles\i386\kperpid.dll + 2008-04-14 00:09:56 102,912 ------w c:\windows\ServicePackFiles\i386\kprodpc.dll + 2008-04-14 00:09:56 24,576 ------w c:\windows\ServicePackFiles\i386\kpropid.dll + 2004-08-04 05:49:32 92,224 ------w c:\windows\ServicePackFiles\i386\krnl386.exe + 2008-04-14 00:11:56 24,576 ------w c:\windows\ServicePackFiles\i386\krnlprov.dll + 2008-04-13 19:16:36 141,056 ------w c:\windows\ServicePackFiles\i386\ks.sys + 2008-04-13 18:31:43 92,288 ------w c:\windows\ServicePackFiles\i386\ksecdd.sys + 2008-04-14 00:11:56 4,096 ------w c:\windows\ServicePackFiles\i386\ksuser.dll + 2008-04-14 00:11:56 37,376 ------w c:\windows\ServicePackFiles\i386\l2store.dll + 2008-04-14 00:09:05 97,792 ------w c:\windows\ServicePackFiles\i386\lang\chtmbx.dll + 2008-04-14 00:09:05 56,320 ------w c:\windows\ServicePackFiles\i386\lang\chtskdic.dll + 2008-04-14 00:09:05 173,568 ------w c:\windows\ServicePackFiles\i386\lang\chtskf.dll + 2008-04-14 00:09:06 198,656 ------w c:\windows\ServicePackFiles\i386\lang\cintime.dll + 2004-08-04 05:31:54 480,256 ------w c:\windows\ServicePackFiles\i386\lang\cintsetp.exe + 2004-08-04 05:31:38 57,399 ------w c:\windows\ServicePackFiles\i386\lang\cplexe.exe + 2008-04-14 00:09:39 13,463,552 ------w c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll + 2008-04-14 00:09:43 106,496 ------w c:\windows\ServicePackFiles\i386\lang\imekrcic.dll + 2008-04-14 00:09:43 86,016 ------w c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll + 2008-04-14 00:09:44 811,064 ------w c:\windows\ServicePackFiles\i386\lang\imjp81k.dll + 2008-04-14 00:09:45 368,696 ------w c:\windows\ServicePackFiles\i386\lang\imjpcic.dll + 2008-04-14 00:09:45 716,856 ------w c:\windows\ServicePackFiles\i386\lang\imjpcus.dll + 2008-04-14 00:09:45 81,976 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.dll + 2004-08-04 05:31:53 307,257 ------w c:\windows\ServicePackFiles\i386\lang\imjpdct.exe + 2004-08-04 05:31:54 155,705 ------w c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe + 2004-08-04 05:31:57 196,665 ------w c:\windows\ServicePackFiles\i386\lang\imjpinst.exe + 2004-08-04 05:31:59 208,952 ------w c:\windows\ServicePackFiles\i386\lang\imjpmig.exe + 2004-08-04 05:32:11 233,527 ------w c:\windows\ServicePackFiles\i386\lang\imjprw.exe + 2004-08-04 05:32:14 262,200 ------w c:\windows\ServicePackFiles\i386\lang\imjputy.exe + 2008-04-14 00:09:46 274,489 ------w c:\windows\ServicePackFiles\i386\lang\imjputyc.dll + 2008-04-14 00:09:46 102,456 ------w c:\windows\ServicePackFiles\i386\lang\imlang.dll + 2004-08-04 05:31:48 59,392 ------w c:\windows\ServicePackFiles\i386\lang\imscinst.exe + 2008-04-14 00:09:47 315,455 ------w c:\windows\ServicePackFiles\i386\lang\imskf.dll + 2008-04-14 00:10:33 15,872 ------w c:\windows\ServicePackFiles\i386\lang\padrs404.dll + 2008-04-14 00:10:33 15,360 ------w c:\windows\ServicePackFiles\i386\lang\padrs804.dll + 2008-04-14 00:10:34 175,104 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll + 2008-04-14 00:10:34 53,760 ------w c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll + 2008-04-13 16:43:36 70,144 ------w c:\windows\ServicePackFiles\i386\lang\pintlphr.exe + 2008-04-14 00:10:34 67,584 ------w c:\windows\ServicePackFiles\i386\lang\pmigrate.dll + 2004-08-04 05:32:15 44,032 ------w c:\windows\ServicePackFiles\i386\lang\tintlphr.exe + 2004-08-04 05:32:15 455,168 ------w c:\windows\ServicePackFiles\i386\lang\tintsetp.exe + 2008-04-14 00:10:59 10,240 ------w c:\windows\ServicePackFiles\i386\lang\tmigrate.dll + 2008-04-14 00:11:01 76,288 ------w c:\windows\ServicePackFiles\i386\lang\uniime.dll + 2008-04-14 00:11:04 426,041 ------w c:\windows\ServicePackFiles\i386\lang\voicepad.dll + 2008-04-14 00:11:04 86,073 ------w c:\windows\ServicePackFiles\i386\lang\voicesub.dll + 2004-08-04 07:56:42 6,656 ------w c:\windows\ServicePackFiles\i386\laprxy.dll + 2008-04-13 18:40:26 34,688 ------w c:\windows\ServicePackFiles\i386\lbrtfdc.sys + 2008-04-14 00:12:23 677,888 ------w c:\windows\ServicePackFiles\i386\lhmstsc.exe + 2008-04-14 00:11:56 2,061,824 ------w c:\windows\ServicePackFiles\i386\lhmstscx.dll + 2008-04-14 10:41:58 423,936 ------w c:\windows\ServicePackFiles\i386\licdll.dll + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\licmgr10.dll + 2008-04-14 00:11:56 58,880 ------w c:\windows\ServicePackFiles\i386\licwmi.dll + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\linkinfo.dll + 2008-04-14 00:11:56 13,824 ------w c:\windows\ServicePackFiles\i386\lmhsvc.dll + 2008-04-14 00:11:56 33,792 ------w c:\windows\ServicePackFiles\i386\lmmib2.dll + 2008-04-14 00:11:56 399,872 ------w c:\windows\ServicePackFiles\i386\lmrt.dll + 2008-04-14 00:11:56 97,280 ------w c:\windows\ServicePackFiles\i386\loadperf.dll + 2008-04-14 00:11:56 221,696 ------w c:\windows\ServicePackFiles\i386\localsec.dll + 2008-04-14 00:11:56 343,040 ------w c:\windows\ServicePackFiles\i386\localspl.dll + 2008-04-14 00:11:56 11,776 ------w c:\windows\ServicePackFiles\i386\localui.dll + 2008-04-14 00:12:24 75,264 ------w c:\windows\ServicePackFiles\i386\locator.exe + 2008-04-14 00:11:56 19,968 ------w c:\windows\ServicePackFiles\i386\log.dll + 2004-08-04 07:56:50 103,936 ------w c:\windows\ServicePackFiles\i386\logagent.exe + 2008-04-14 00:12:24 59,392 ------w c:\windows\ServicePackFiles\i386\logman.exe + 2008-04-14 00:12:43 220,672 ------w c:\windows\ServicePackFiles\i386\logon.scr + 2008-04-14 00:12:24 514,560 ------w c:\windows\ServicePackFiles\i386\logonui.exe + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\lpdsvc.dll + 2008-04-14 00:11:56 22,016 ------w c:\windows\ServicePackFiles\i386\lpk.dll + 2008-04-14 00:11:56 10,240 ------w c:\windows\ServicePackFiles\i386\lprhelp.dll + 2008-04-14 00:11:56 18,944 ------w c:\windows\ServicePackFiles\i386\lprmon.dll + 2008-04-14 00:11:56 728,064 ------w c:\windows\ServicePackFiles\i386\lsasrv.dll + 2008-04-14 00:12:24 13,312 ------w c:\windows\ServicePackFiles\i386\lsass.exe + 2004-08-04 05:41:35 606,684 ------w c:\windows\ServicePackFiles\i386\ltmdmnt.sys + 2002-08-29 04:34:38 420,992 ------w c:\windows\ServicePackFiles\i386\ltmdmntt.sys + 2008-04-13 18:40:52 7,040 ------w c:\windows\ServicePackFiles\i386\ltotape.sys + 2002-08-29 04:16:22 20,864 ------w c:\windows\ServicePackFiles\i386\lwadihid.sys + 2008-04-14 00:12:24 72,704 ------w c:\windows\ServicePackFiles\i386\magnify.exe + 2008-04-14 00:12:25 57,344 ------w c:\windows\ServicePackFiles\i386\makecab.exe + 2008-04-14 00:11:56 14,336 ------w c:\windows\ServicePackFiles\i386\mcastmib.dll + 2008-04-14 00:11:56 84,480 ------w c:\windows\ServicePackFiles\i386\mciavi32.dll + 2008-04-14 00:11:56 35,328 ------w c:\windows\ServicePackFiles\i386\mciqtz32.dll + 2008-04-14 00:11:56 23,040 ------w c:\windows\ServicePackFiles\i386\mciseq.dll + 2008-04-14 00:11:56 23,552 ------w c:\windows\ServicePackFiles\i386\mciwave.dll + 2008-04-14 00:11:56 118,272 ------w c:\windows\ServicePackFiles\i386\mdminst.dll + 2008-04-14 00:11:56 86,016 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.dll + 2004-08-04 05:41:55 11,868 ------w c:\windows\ServicePackFiles\i386\mdmxsdk.sys + 2008-04-13 18:41:21 26,112 ------w c:\windows\ServicePackFiles\i386\memstpci.sys + 2008-04-13 18:36:41 63,744 ------w c:\windows\ServicePackFiles\i386\mf.sys + 2008-04-14 00:11:56 40,960 ------w c:\windows\ServicePackFiles\i386\mf3216.dll + 2008-04-14 00:11:56 927,504 ------w c:\windows\ServicePackFiles\i386\mfc40u.dll + 2008-04-14 00:11:56 1,028,096 ------w c:\windows\ServicePackFiles\i386\mfc42.dll + 2007-04-03 03:14:47 981,760 ------w c:\windows\ServicePackFiles\i386\mfc42u.dll + 2008-04-14 00:11:56 22,528 ------w c:\windows\ServicePackFiles\i386\mfcsubs.dll + 2008-04-14 00:11:56 14,848 ------w c:\windows\ServicePackFiles\i386\mgmtapi.dll + 2008-04-14 00:11:57 18,944 ------w c:\windows\ServicePackFiles\i386\midimap.dll + 2008-04-14 00:11:57 274,432 ------w c:\windows\ServicePackFiles\i386\migism.dll + 2004-08-04 07:56:42 192,512 ------w c:\windows\ServicePackFiles\i386\migism_a.dll + 2008-04-14 00:11:57 261,120 ------w c:\windows\ServicePackFiles\i386\migisma.dll + 2008-04-14 00:11:57 60,928 ------w c:\windows\ServicePackFiles\i386\miglibnt.dll + 2008-04-14 00:12:25 103,936 ------w c:\windows\ServicePackFiles\i386\migload.exe + 2004-08-04 07:56:51 786,432 ------w c:\windows\ServicePackFiles\i386\migrate.exe + 2008-04-14 00:12:25 7,680 ------w c:\windows\ServicePackFiles\i386\migregdb.exe + 2008-04-14 00:12:25 245,248 ------w c:\windows\ServicePackFiles\i386\migwiz.exe + 2004-08-04 07:56:51 236,032 ------w c:\windows\ServicePackFiles\i386\migwiz_a.exe + 2008-04-14 00:12:25 241,152 ------w c:\windows\ServicePackFiles\i386\migwiza.exe + 2008-04-14 00:11:57 29,696 ------w c:\windows\ServicePackFiles\i386\mimefilt.dll + 2008-04-14 00:11:57 586,240 ------w c:\windows\ServicePackFiles\i386\mlang.dll + 2008-04-14 00:12:25 1,414,656 ------w c:\windows\ServicePackFiles\i386\mmc.exe + 2008-04-14 00:11:57 184,320 ------w c:\windows\ServicePackFiles\i386\mmc30.dll + 2008-04-14 00:11:57 28,672 ------w c:\windows\ServicePackFiles\i386\mmc30r.dll + 2008-04-14 00:11:57 163,328 ------w c:\windows\ServicePackFiles\i386\mmcbase.dll + 2008-04-14 00:11:57 397,312 ------w c:\windows\ServicePackFiles\i386\mmcex.dll + 2008-04-14 00:11:57 40,960 ------w c:\windows\ServicePackFiles\i386\mmcexr.dll + 2008-04-14 00:11:57 106,496 ------w c:\windows\ServicePackFiles\i386\mmcfxc.dll + 2008-04-14 00:11:57 6,656 ------w c:\windows\ServicePackFiles\i386\mmcfxcr.dll + 2008-04-14 00:11:57 1,872,896 ------w c:\windows\ServicePackFiles\i386\mmcndmgr.dll + 2008-04-14 00:12:25 33,792 ------w c:\windows\ServicePackFiles\i386\mmcperf.exe + 2008-04-14 00:11:57 61,440 ------w c:\windows\ServicePackFiles\i386\mmcshext.dll + 2008-04-14 00:11:57 17,408 ------w c:\windows\ServicePackFiles\i386\mmfutil.dll + 2004-08-04 05:51:11 68,768 ------w c:\windows\ServicePackFiles\i386\mmsystem.dll + 2008-04-14 00:11:57 34,560 ------w c:\windows\ServicePackFiles\i386\mnmdd.dll + 2008-04-14 00:12:25 32,768 ------w c:\windows\ServicePackFiles\i386\mnmsrvc.exe + 2008-04-14 00:11:57 207,360 ------w c:\windows\ServicePackFiles\i386\mobsync.dll + 2008-04-14 00:12:26 143,360 ------w c:\windows\ServicePackFiles\i386\mobsync.exe + 2008-04-13 19:00:19 30,080 ------w c:\windows\ServicePackFiles\i386\modem.sys + 2008-04-14 00:11:57 153,600 ------w c:\windows\ServicePackFiles\i386\modemui.dll + 2008-04-14 00:12:26 16,384 ------w c:\windows\ServicePackFiles\i386\mofcomp.exe + 2008-04-14 00:11:57 123,904 ------w c:\windows\ServicePackFiles\i386\mofd.dll + 2008-04-14 00:12:42 16,896 ------w c:\windows\ServicePackFiles\i386\more.com + 2008-04-13 16:45:30 216,064 ------w c:\windows\ServicePackFiles\i386\moricons.dll + 2008-04-13 18:39:47 23,040 ------w c:\windows\ServicePackFiles\i386\mouclass.sys + 2008-04-13 18:39:46 42,368 ------w c:\windows\ServicePackFiles\i386\mountmgr.sys + 2008-04-14 00:12:27 3,558,912 ------w c:\windows\ServicePackFiles\i386\moviemk.exe + 2004-08-04 07:56:42 310,272 ------w c:\windows\ServicePackFiles\i386\mp43dmod.dll + 2004-08-04 07:56:42 384,512 ------w c:\windows\ServicePackFiles\i386\mp4sdmod.dll + 2008-04-13 18:46:22 15,232 ------w c:\windows\ServicePackFiles\i386\mpe.sys + 2004-08-04 07:56:42 240,640 ------w c:\windows\ServicePackFiles\i386\mpg4dmod.dll + 2008-04-14 00:12:27 123,392 ------w c:\windows\ServicePackFiles\i386\mplay32.exe + 2004-08-04 07:56:52 4,639 ------w c:\windows\ServicePackFiles\i386\mplayer2.exe + 2008-04-14 00:11:57 59,904 ------w c:\windows\ServicePackFiles\i386\mpr.dll + 2008-04-14 00:11:57 87,040 ------w c:\windows\ServicePackFiles\i386\mprapi.dll + 2008-04-14 00:11:57 53,248 ------w c:\windows\ServicePackFiles\i386\mprdim.dll + 2004-08-04 07:56:42 368,640 ------w c:\windows\ServicePackFiles\i386\mpvis.dll + 2008-04-13 18:32:44 180,608 ------w c:\windows\ServicePackFiles\i386\mrxdav.sys + 2008-04-13 19:17:01 456,576 ------w c:\windows\ServicePackFiles\i386\mrxsmb.sys + 2008-04-14 00:11:58 71,680 ------w c:\windows\ServicePackFiles\i386\msacm32.dll + 2008-04-14 00:11:58 331,776 ------w c:\windows\ServicePackFiles\i386\msadce.dll + 2008-04-13 17:25:57 20,480 ------w c:\windows\ServicePackFiles\i386\msadcer.dll + 2008-04-14 00:11:58 61,440 ------w c:\windows\ServicePackFiles\i386\msadcf.dll + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcfr.dll + 2008-04-14 00:11:58 143,360 ------w c:\windows\ServicePackFiles\i386\msadco.dll + 2008-04-13 17:25:57 16,384 ------w c:\windows\ServicePackFiles\i386\msadcor.dll + 2008-04-14 00:11:58 53,248 ------w c:\windows\ServicePackFiles\i386\msadcs.dll + 2008-04-14 00:11:58 155,648 ------w c:\windows\ServicePackFiles\i386\msadds.dll + 2008-04-13 17:25:58 24,576 ------w c:\windows\ServicePackFiles\i386\msaddsr.dll + 2008-04-13 17:26:17 24,576 ------w c:\windows\ServicePackFiles\i386\msader15.dll + 2008-04-14 00:11:58 536,576 ------w c:\windows\ServicePackFiles\i386\msado15.dll + 2008-04-14 00:11:58 180,224 ------w c:\windows\ServicePackFiles\i386\msadomd.dll + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msador15.dll + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msadox.dll + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msadrh15.dll + 2008-04-14 00:10:06 3,584 ------w c:\windows\ServicePackFiles\i386\msafd.dll + 2008-04-14 00:11:58 86,016 ------w c:\windows\ServicePackFiles\i386\msapsspc.dll + 2008-04-14 00:11:58 57,344 ------w c:\windows\ServicePackFiles\i386\msasn1.dll + 2008-04-14 00:11:58 220,160 ------w c:\windows\ServicePackFiles\i386\mscandui.dll + 2008-04-14 00:11:58 73,728 ------w c:\windows\ServicePackFiles\i386\mscms.dll + 2008-04-14 00:11:58 69,632 ------w c:\windows\ServicePackFiles\i386\msconf.dll + 2008-04-14 00:12:27 169,984 ------w c:\windows\ServicePackFiles\i386\msconfig.exe + 2004-07-17 18:42:18 116,288 ------w c:\windows\ServicePackFiles\i386\msconv97.dll + 2008-04-13 17:26:07 12,288 ------w c:\windows\ServicePackFiles\i386\mscpx32r.dll + 2008-04-14 00:11:58 36,864 ------w c:\windows\ServicePackFiles\i386\mscpxl32.dll + 2008-04-14 00:11:58 297,984 ------w c:\windows\ServicePackFiles\i386\msctf.dll + 2008-04-14 00:11:58 68,608 ------w c:\windows\ServicePackFiles\i386\msctfp.dll + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdadc.dll + 2008-04-14 00:11:58 118,784 ------w c:\windows\ServicePackFiles\i386\msdadiag.dll + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaenum.dll + 2008-04-14 00:11:58 4,096 ------w c:\windows\ServicePackFiles\i386\msdaer.dll + 2008-04-14 00:11:58 532,480 ------w c:\windows\ServicePackFiles\i386\msdaipp.dll + 2008-04-14 00:11:58 233,472 ------w c:\windows\ServicePackFiles\i386\msdaora.dll + 2008-04-13 17:24:14 16,384 ------w c:\windows\ServicePackFiles\i386\msdaorar.dll + 2008-04-14 00:11:58 77,824 ------w c:\windows\ServicePackFiles\i386\msdaosp.dll + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaprsr.dll + 2008-04-14 00:11:58 200,704 ------w c:\windows\ServicePackFiles\i386\msdaprst.dll + 2008-04-14 00:11:59 204,800 ------w c:\windows\ServicePackFiles\i386\msdaps.dll + 2008-04-14 00:11:59 118,784 ------w c:\windows\ServicePackFiles\i386\msdarem.dll + 2008-04-13 17:25:58 16,384 ------w c:\windows\ServicePackFiles\i386\msdaremr.dll + 2008-04-14 00:11:59 151,552 ------w c:\windows\ServicePackFiles\i386\msdart.dll + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdasc.dll + 2008-04-14 00:11:59 315,392 ------w c:\windows\ServicePackFiles\i386\msdasql.dll + 2008-04-13 17:26:07 16,384 ------w c:\windows\ServicePackFiles\i386\msdasqlr.dll + 2008-04-14 00:11:59 94,208 ------w c:\windows\ServicePackFiles\i386\msdatl3.dll + 2008-04-14 00:11:59 20,480 ------w c:\windows\ServicePackFiles\i386\msdatt.dll + 2008-04-14 00:11:59 4,096 ------w c:\windows\ServicePackFiles\i386\msdaurl.dll + 2008-04-14 00:11:59 36,864 ------w c:\windows\ServicePackFiles\i386\msdfmap.dll + 2008-04-14 00:11:59 14,336 ------w c:\windows\ServicePackFiles\i386\msdmo.dll + 2008-04-14 00:12:27 6,144 ------w c:\windows\ServicePackFiles\i386\msdtc.exe + 2008-04-14 00:11:59 58,880 ------w c:\windows\ServicePackFiles\i386\msdtclog.dll + 2008-04-14 00:11:59 427,008 ------w c:\windows\ServicePackFiles\i386\msdtcprx.dll + 2008-04-14 00:11:59 90,112 ------w c:\windows\ServicePackFiles\i386\msdtcstp.dll + 2008-04-14 00:11:59 956,928 ------w c:\windows\ServicePackFiles\i386\msdtctm.dll + 2008-04-14 00:11:59 161,792 ------w c:\windows\ServicePackFiles\i386\msdtcuiu.dll + 2008-04-13 18:46:09 51,200 ------w c:\windows\ServicePackFiles\i386\msdv.sys + 2004-08-04 07:56:13 4,126 ------w c:\windows\ServicePackFiles\i386\msdxmlc.dll + 2007-04-02 12:47:43 518,944 ------w c:\windows\ServicePackFiles\i386\msexch40.dll + 2007-04-02 12:47:58 326,432 ------w c:\windows\ServicePackFiles\i386\msexcl40.dll + 2008-04-13 18:32:39 19,072 ------w c:\windows\ServicePackFiles\i386\msfs.sys + 2008-04-14 00:11:59 539,136 ------w c:\windows\ServicePackFiles\i386\msftedit.dll + 2008-04-14 00:11:59 997,376 ------w c:\windows\ServicePackFiles\i386\msgina.dll + 2008-04-13 18:56:32 35,072 ------w c:\windows\ServicePackFiles\i386\msgpc.sys + 2008-04-14 00:11:59 3,166,208 ------w c:\windows\ServicePackFiles\i386\msgr3en.dll + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msgrocm.dll + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\i386\msgsc.dll + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\i386\msgslang.dll + 2008-04-14 00:11:59 33,792 ------w c:\windows\ServicePackFiles\i386\msgsvc.dll + 2008-04-14 00:12:45 188,416 ------w c:\windows\ServicePackFiles\i386\msh261.drv + 2008-04-14 00:12:45 294,912 ------w c:\windows\ServicePackFiles\i386\msh263.drv + 2008-04-14 00:12:27 29,184 ------w c:\windows\ServicePackFiles\i386\mshta.exe + 2008-04-14 00:11:59 3,066,880 ------w c:\windows\ServicePackFiles\i386\mshtml.dll + 2008-04-14 00:11:59 449,024 ------w c:\windows\ServicePackFiles\i386\mshtmled.dll + 2008-04-13 16:26:26 56,832 ------w c:\windows\ServicePackFiles\i386\mshtmler.dll + 2008-04-14 00:11:59 2,843,136 ------w c:\windows\ServicePackFiles\i386\msi.dll + 2008-04-14 00:11:59 51,712 ------w c:\windows\ServicePackFiles\i386\msident.dll + 2008-04-14 00:11:59 6,656 ------w c:\windows\ServicePackFiles\i386\msidle.dll + 2008-04-14 00:11:59 248,832 ------w c:\windows\ServicePackFiles\i386\msieftp.dll + 2008-04-14 00:12:28 78,848 ------w c:\windows\ServicePackFiles\i386\msiexec.exe + 2008-04-14 00:11:59 271,360 ------w c:\windows\ServicePackFiles\i386\msihnd.dll + 2008-04-14 00:11:59 4,608 ------w c:\windows\ServicePackFiles\i386\msimg32.dll + 2008-04-14 00:12:28 60,416 ------w c:\windows\ServicePackFiles\i386\msimn.exe + 2008-04-13 15:39:43 884,736 ------w c:\windows\ServicePackFiles\i386\msimsg.dll + 2008-04-14 00:11:59 159,232 ------w c:\windows\ServicePackFiles\i386\msimtf.dll + 2008-04-14 00:11:59 376,832 ------w c:\windows\ServicePackFiles\i386\msinfo.dll + 2008-04-13 18:54:28 22,016 ------w c:\windows\ServicePackFiles\i386\msircomm.sys + 2008-04-14 00:12:28 40,960 ------w c:\windows\ServicePackFiles\i386\msiregmv.exe + 2008-04-14 00:11:59 15,360 ------w c:\windows\ServicePackFiles\i386\msisip.dll + 2007-10-22 09:30:50 1,516,568 ------w c:\windows\ServicePackFiles\i386\msjet40.dll + 2007-04-02 12:49:20 355,112 ------w c:\windows\ServicePackFiles\i386\msjetol1.dll + 2008-04-14 00:12:00 151,583 ------w c:\windows\ServicePackFiles\i386\msjint40.dll + 2008-04-14 00:12:00 102,400 ------w c:\windows\ServicePackFiles\i386\msjro.dll + 2007-04-02 12:49:33 60,192 ------w c:\windows\ServicePackFiles\i386\msjter40.dll + 2007-04-02 12:49:37 248,608 ------w c:\windows\ServicePackFiles\i386\msjtes40.dll + 2008-04-13 18:39:52 7,552 ------w c:\windows\ServicePackFiles\i386\mskssrv.sys + 2008-04-14 00:12:00 25,088 ------w c:\windows\ServicePackFiles\i386\mslbui.dll + 2007-04-02 12:49:50 219,936 ------w c:\windows\ServicePackFiles\i386\msltus40.dll + 2008-04-14 00:12:00 39,936 ------w c:\windows\ServicePackFiles\i386\mslwvtts.dll + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\i386\msmsgs.exe + 2007-04-02 18:39:43 11,053,008 ------w c:\windows\ServicePackFiles\i386\msncli.exe + 2004-08-04 07:57:01 259,072 ------w c:\windows\ServicePackFiles\i386\msnetobj.dll + 2008-04-14 00:12:00 290,816 ------w c:\windows\ServicePackFiles\i386\msnsspc.dll + 2007-04-02 18:42:37 1,327,320 ------w c:\windows\ServicePackFiles\i386\msnsusii.exe + 2008-04-14 00:12:00 122,368 ------w c:\windows\ServicePackFiles\i386\msobcomm.dll + 2008-04-14 00:12:00 16,384 ------w c:\windows\ServicePackFiles\i386\msobdl.dll + 2008-04-14 00:12:00 565,248 ------w c:\windows\ServicePackFiles\i386\msobmain.dll + 2008-04-14 00:12:00 30,720 ------w c:\windows\ServicePackFiles\i386\msobshel.dll + 2008-04-14 00:12:00 19,456 ------w c:\windows\ServicePackFiles\i386\msobweb.dll + 2008-04-14 00:12:00 1,314,816 ------w c:\windows\ServicePackFiles\i386\msoe.dll + 2008-04-14 00:12:00 252,928 ------w c:\windows\ServicePackFiles\i386\msoeacct.dll + 2008-04-13 16:23:54 2,479,616 ------w c:\windows\ServicePackFiles\i386\msoeres.dll + 2008-04-14 00:12:00 105,984 ------w c:\windows\ServicePackFiles\i386\msoert2.dll + 2008-04-14 00:12:28 29,184 ------w c:\windows\ServicePackFiles\i386\msoobe.exe + 2008-04-13 17:24:14 20,480 ------w c:\windows\ServicePackFiles\i386\msorc32r.dll + 2008-04-14 00:12:00 143,360 ------w c:\windows\ServicePackFiles\i386\msorcl32.dll + 2008-04-14 00:12:28 343,040 ------w c:\windows\ServicePackFiles\i386\mspaint.exe + 2008-04-14 00:12:00 29,696 ------w c:\windows\ServicePackFiles\i386\mspatcha.dll + 2007-04-02 12:50:05 355,104 ------w c:\windows\ServicePackFiles\i386\mspbde40.dll + 2008-04-13 18:39:50 5,376 ------w c:\windows\ServicePackFiles\i386\mspclock.sys + 2004-08-04 07:56:43 52,224 ------w c:\windows\ServicePackFiles\i386\mspmsnsv.dll + 2004-08-04 07:56:43 201,728 ------w c:\windows\ServicePackFiles\i386\mspmsp.dll + 2008-04-13 18:39:51 4,992 ------w c:\windows\ServicePackFiles\i386\mspqm.sys + 2008-04-13 16:23:31 48,128 ------w c:\windows\ServicePackFiles\i386\msprivs.dll + 2008-04-14 00:12:00 146,432 ------w c:\windows\ServicePackFiles\i386\msrating.dll + 2007-04-02 12:50:26 432,928 ------w c:\windows\ServicePackFiles\i386\msrd2x40.dll + 2007-04-02 12:50:43 322,336 ------w c:\windows\ServicePackFiles\i386\msrd3x40.dll + 2007-04-02 12:51:05 559,904 ------w c:\windows\ServicePackFiles\i386\msrepl40.dll + 2008-04-14 00:12:00 11,264 ------w c:\windows\ServicePackFiles\i386\msrle32.dll + 2008-04-14 00:12:00 134,656 ------w c:\windows\ServicePackFiles\i386\mssap.dll + 2004-08-04 07:57:01 356,352 ------w c:\windows\ServicePackFiles\i386\msscp.dll + 2008-04-14 00:12:00 155,136 ------w c:\windows\ServicePackFiles\i386\mssha.dll + 2008-04-13 18:14:58 76,800 ------w c:\windows\ServicePackFiles\i386\msshamsg.dll + 2008-04-13 18:36:46 15,488 ------w c:\windows\ServicePackFiles\i386\mssmbios.sys + 2008-04-14 00:12:00 274,432 ------w c:\windows\ServicePackFiles\i386\mst120.dll + 2008-04-14 00:12:00 57,344 ------w c:\windows\ServicePackFiles\i386\mst123.dll + 2008-04-13 18:46:08 49,024 ------w c:\windows\ServicePackFiles\i386\mstape.sys + 2008-04-14 00:12:00 274,944 ------w c:\windows\ServicePackFiles\i386\mstask.dll + 2008-04-13 18:39:50 5,504 ------w c:\windows\ServicePackFiles\i386\mstee.sys + 2007-04-02 12:51:27 264,992 ------w c:\windows\ServicePackFiles\i386\mstext40.dll + 2008-04-14 00:12:00 532,480 ------w c:\windows\ServicePackFiles\i386\mstime.dll + 2008-04-14 00:12:29 12,288 ------w c:\windows\ServicePackFiles\i386\mstinit.exe + 2008-04-14 00:12:00 116,224 ------w c:\windows\ServicePackFiles\i386\mstlsapi.dll + 2004-08-04 05:59:40 407,552 ------w c:\windows\ServicePackFiles\i386\mstsc.exe + 2004-08-04 05:59:43 655,360 ------w c:\windows\ServicePackFiles\i386\mstscax.dll + 2008-04-14 00:12:00 195,072 ------w c:\windows\ServicePackFiles\i386\msutb.dll + 2008-04-14 00:12:00 132,608 ------w c:\windows\ServicePackFiles\i386\msv1_0.dll + 2008-04-14 00:12:00 1,384,479 ------w c:\windows\ServicePackFiles\i386\msvbvm60.dll + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\msvcirt.dll + 2008-04-14 00:12:01 413,696 ------w c:\windows\ServicePackFiles\i386\msvcp60.dll + 2008-04-14 00:12:01 343,040 ------w c:\windows\ServicePackFiles\i386\msvcrt.dll + 2008-04-13 18:30:46 61,440 ------w c:\windows\ServicePackFiles\i386\msvcrt40.dll + 2008-04-14 00:12:01 121,344 ------w c:\windows\ServicePackFiles\i386\msvfw32.dll + 2008-04-14 00:12:01 1,428,992 ------w c:\windows\ServicePackFiles\i386\msvidctl.dll + 2008-04-14 00:12:01 72,704 ------w c:\windows\ServicePackFiles\i386\msw3prt.dll + 2007-04-02 12:51:47 838,432 ------w c:\windows\ServicePackFiles\i386\mswdat10.dll + 2008-04-14 00:12:01 203,776 ------w c:\windows\ServicePackFiles\i386\mswebdvd.dll + 2004-08-04 07:56:44 245,760 ------w c:\windows\ServicePackFiles\i386\mswmdm.dll + 2008-04-14 00:12:01 245,248 ------w c:\windows\ServicePackFiles\i386\mswsock.dll + 2007-04-02 12:51:53 621,344 ------w c:\windows\ServicePackFiles\i386\mswstr10.dll + 2008-04-14 00:12:01 24,576 ------w c:\windows\ServicePackFiles\i386\msxactps.dll + 2007-04-02 12:52:01 355,104 ------w c:\windows\ServicePackFiles\i386\msxbde40.dll + 2008-04-14 00:12:01 506,368 ------w c:\windows\ServicePackFiles\i386\msxml.dll + 2008-04-14 00:12:01 701,440 ------w c:\windows\ServicePackFiles\i386\msxml2.dll + 2008-04-14 00:12:01 1,104,896 ------w c:\windows\ServicePackFiles\i386\msxml3.dll + 2008-04-14 00:12:01 16,896 ------w c:\windows\ServicePackFiles\i386\msyuv.dll + 2004-08-04 05:41:38 126,686 ------w c:\windows\ServicePackFiles\i386\mtlmnt5.sys + 2004-08-04 05:41:37 1,309,184 ------w c:\windows\ServicePackFiles\i386\mtlstrm.sys + 2008-04-14 00:12:29 119,808 ------w c:\windows\ServicePackFiles\i386\mtstocom.exe + 2008-04-14 00:12:01 66,560 ------w c:\windows\ServicePackFiles\i386\mtxclu.dll + 2008-04-14 00:12:01 30,720 ------w c:\windows\ServicePackFiles\i386\mtxdm.dll + 2008-04-14 00:12:01 4,096 ------w c:\windows\ServicePackFiles\i386\mtxex.dll + 2008-04-14 00:12:01 34,304 ------w c:\windows\ServicePackFiles\i386\mtxlegih.dll + 2008-04-14 00:12:01 91,648 ------w c:\windows\ServicePackFiles\i386\mtxoci.dll + 2008-04-14 00:12:01 1,737,856 ------w c:\windows\ServicePackFiles\i386\mtxparhd.dll + 2004-08-04 05:29:36 452,736 ------w c:\windows\ServicePackFiles\i386\mtxparhm.sys + 2008-04-14 00:12:29 90,624 ------w c:\windows\ServicePackFiles\i386\muisetup.exe + 2008-04-13 19:17:05 105,344 ------w c:\windows\ServicePackFiles\i386\mup.sys + 2008-04-13 18:43:55 12,672 ------w c:\windows\ServicePackFiles\i386\mutohpen.sys + 2008-04-14 00:12:01 90,624 ------w c:\windows\ServicePackFiles\i386\mydocs.dll + 2008-04-13 18:46:25 85,248 ------w c:\windows\ServicePackFiles\i386\nabtsfec.sys + 2008-04-14 00:12:01 221,184 ------w c:\windows\ServicePackFiles\i386\nac.dll + 2008-04-14 00:12:01 30,208 ------w c:\windows\ServicePackFiles\i386\napipsec.dll + 2008-04-14 00:12:01 193,024 ------w c:\windows\ServicePackFiles\i386\napmontr.dll + 2008-04-14 00:12:29 176,640 ------w c:\windows\ServicePackFiles\i386\napstat.exe + 2008-04-14 00:12:29 53,760 ------w c:\windows\ServicePackFiles\i386\narrator.exe + 2008-04-14 00:12:01 36,352 ------w c:\windows\ServicePackFiles\i386\ncobjapi.dll + 2008-04-14 00:12:01 47,104 ------w c:\windows\ServicePackFiles\i386\ncprov.dll + 2008-04-14 00:12:01 9,728 ------w c:\windows\ServicePackFiles\i386\ncpsres.dll + 2008-04-14 00:12:01 17,920 ------w c:\windows\ServicePackFiles\i386\nddeapi.dll + 2008-04-14 00:12:29 4,096 ------w c:\windows\ServicePackFiles\i386\nddeapir.exe + 2008-04-14 00:12:01 18,944 ------w c:\windows\ServicePackFiles\i386\nddenb32.dll + 2008-04-13 19:20:37 182,656 ------w c:\windows\ServicePackFiles\i386\ndis.sys + 2008-04-13 18:46:22 10,880 ------w c:\windows\ServicePackFiles\i386\ndisip.sys + 2008-04-14 00:12:01 57,344 ------w c:\windows\ServicePackFiles\i386\ndisnpp.dll + 2008-04-13 18:57:27 10,112 ------w c:\windows\ServicePackFiles\i386\ndistapi.sys + 2008-04-13 18:55:58 14,592 ------w c:\windows\ServicePackFiles\i386\ndisuio.sys + 2008-04-13 19:20:42 91,520 ------w c:\windows\ServicePackFiles\i386\ndiswan.sys + 2008-04-13 18:57:29 40,576 ------w c:\windows\ServicePackFiles\i386\ndproxy.sys + 2008-04-14 00:12:29 42,496 ------w c:\windows\ServicePackFiles\i386\net.exe + 2008-04-14 00:12:29 124,928 ------w c:\windows\ServicePackFiles\i386\net1.exe + 2008-04-14 00:12:01 337,408 ------w c:\windows\ServicePackFiles\i386\netapi32.dll + 2008-04-13 18:56:02 34,688 ------w c:\windows\ServicePackFiles\i386\netbios.sys + 2008-04-13 19:21:00 162,816 ------w c:\windows\ServicePackFiles\i386\netbt.sys + 2008-04-14 00:12:01 622,592 ------w c:\windows\ServicePackFiles\i386\netcfgx.dll + 2008-04-14 00:12:29 111,104 ------w c:\windows\ServicePackFiles\i386\netdde.exe + 2008-04-14 00:12:01 139,264 ------w c:\windows\ServicePackFiles\i386\netid.dll + 2008-04-14 00:12:01 407,040 ------w c:\windows\ServicePackFiles\i386\netlogon.dll + 2008-04-14 00:12:01 198,144 ------w c:\windows\ServicePackFiles\i386\netman.dll + 2008-04-14 00:12:01 77,312 ------w c:\windows\ServicePackFiles\i386\netoc.dll + 2008-04-14 00:12:01 875,008 ------w c:\windows\ServicePackFiles\i386\netplwiz.dll + 2008-04-14 00:12:01 11,776 ------w c:\windows\ServicePackFiles\i386\netrap.dll + 2008-04-14 00:16:51 329,728 ------w c:\windows\ServicePackFiles\i386\netsetup.exe + 2008-04-14 00:12:29 86,016 ------w c:\windows\ServicePackFiles\i386\netsh.exe + 2008-04-14 00:12:02 1,703,936 ------w c:\windows\ServicePackFiles\i386\netshell.dll + 2008-04-14 00:12:29 36,864 ------w c:\windows\ServicePackFiles\i386\netstat.exe + 2008-04-14 00:12:02 80,896 ------w c:\windows\ServicePackFiles\i386\netui0.dll + 2008-04-14 00:12:02 245,760 ------w c:\windows\ServicePackFiles\i386\netui1.dll + 2002-08-29 03:59:32 132,695 ------w c:\windows\ServicePackFiles\i386\netwlan5.sys + 2008-04-14 00:12:02 247,808 ------w c:\windows\ServicePackFiles\i386\newdev.dll + 2008-04-13 18:51:25 61,824 ------w c:\windows\ServicePackFiles\i386\nic1394.sys + 2008-04-14 00:12:02 98,304 ------w c:\windows\ServicePackFiles\i386\nlhtml.dll + 2008-04-14 00:12:02 229,376 ------w c:\windows\ServicePackFiles\i386\nmas.dll + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmasnt.dll + 2008-04-14 00:12:02 81,920 ------w c:\windows\ServicePackFiles\i386\nmchat.dll + 2008-04-14 00:12:02 77,824 ------w c:\windows\ServicePackFiles\i386\nmcom.dll + 2008-04-14 00:12:02 151,552 ------w c:\windows\ServicePackFiles\i386\nmft.dll + 2008-04-14 00:12:02 28,672 ------w c:\windows\ServicePackFiles\i386\nmmkcert.dll + 2008-04-13 18:53:09 40,320 ------w c:\windows\ServicePackFiles\i386\nmnt.sys + 2008-04-14 00:12:02 172,032 ------w c:\windows\ServicePackFiles\i386\nmoldwb.dll + 2008-04-14 00:12:02 188,416 ------w c:\windows\ServicePackFiles\i386\nmwb.dll + 2008-04-14 00:12:29 69,120 ------w c:\windows\ServicePackFiles\i386\notepad.exe + 2004-08-04 07:57:01 226,816 ------w c:\windows\ServicePackFiles\i386\npdrmv2.dll + 2004-08-04 07:56:44 364,544 ------w c:\windows\ServicePackFiles\i386\npdsplay.dll + 2008-04-13 18:32:39 30,848 ------w c:\windows\ServicePackFiles\i386\npfs.sys + 2008-04-14 00:12:29 15,360 ------w c:\windows\ServicePackFiles\i386\nppagent.exe + 2008-04-14 00:12:02 54,784 ------w c:\windows\ServicePackFiles\i386\npptools.dll + 2004-08-04 07:56:44 10,240 ------w c:\windows\ServicePackFiles\i386\npwmsdrm.dll + 2008-04-13 18:54:36 28,672 ------w c:\windows\ServicePackFiles\i386\nscirda.sys + 2008-04-14 00:12:29 76,800 ------w c:\windows\ServicePackFiles\i386\nslookup.exe + 2004-08-04 05:38:33 47,564 ------w c:\windows\ServicePackFiles\i386\ntdetect.com + 2008-04-14 00:11:24 706,048 ------w c:\windows\ServicePackFiles\i386\ntdll.dll + 2008-04-14 00:12:02 67,072 ------w c:\windows\ServicePackFiles\i386\ntdsapi.dll + 2008-04-14 00:12:02 212,992 ------w c:\windows\ServicePackFiles\i386\ntevt.dll + 2008-04-13 19:15:53 574,976 ------w c:\windows\ServicePackFiles\i386\ntfs.sys + 2004-08-04 05:45:08 33,840 ------w c:\windows\ServicePackFiles\i386\ntio.sys + 2004-08-04 05:45:14 34,560 ------w c:\windows\ServicePackFiles\i386\ntio404.sys + 2004-08-04 05:45:10 35,648 ------w c:\windows\ServicePackFiles\i386\ntio411.sys + 2004-08-04 05:45:15 35,424 ------w c:\windows\ServicePackFiles\i386\ntio412.sys + 2004-08-04 05:45:12 34,560 ------w c:\windows\ServicePackFiles\i386\ntio804.sys + 2008-04-13 19:24:37 2,145,280 ------w c:\windows\ServicePackFiles\i386\ntkrnlmp.exe + 2008-04-13 18:31:21 2,065,792 ------w c:\windows\ServicePackFiles\i386\ntkrnlpa.exe + 2008-04-13 18:31:21 2,023,936 ------w c:\windows\ServicePackFiles\i386\ntkrpamp.exe + 2008-04-14 00:12:02 44,032 ------w c:\windows\ServicePackFiles\i386\ntlanman.dll + 2008-04-14 00:12:02 8,192 ------w c:\windows\ServicePackFiles\i386\ntlsapi.dll + 2008-04-14 00:12:02 118,784 ------w c:\windows\ServicePackFiles\i386\ntmarta.dll + 2008-04-14 00:12:02 40,960 ------w c:\windows\ServicePackFiles\i386\ntmsapi.dll + 2008-04-14 00:12:02 179,200 ------w c:\windows\ServicePackFiles\i386\ntmsdba.dll + 2008-04-14 00:12:02 488,448 ------w c:\windows\ServicePackFiles\i386\ntmsmgr.dll + 2008-04-14 00:12:02 435,200 ------w c:\windows\ServicePackFiles\i386\ntmssvc.dll + 2004-08-04 05:41:39 180,360 ------w c:\windows\ServicePackFiles\i386\ntmtlfax.sys + 2008-04-14 00:12:02 62,976 ------w c:\windows\ServicePackFiles\i386\ntoc.dll + 2008-04-13 19:27:53 2,188,928 ------w c:\windows\ServicePackFiles\i386\ntoskrnl.exe + 2008-04-14 00:12:02 91,136 ------w c:\windows\ServicePackFiles\i386\ntprint.dll + 2008-04-14 00:12:02 143,360 ------w c:\windows\ServicePackFiles\i386\ntshrui.dll + 2008-04-14 00:12:30 420,864 ------w c:\windows\ServicePackFiles\i386\ntvdm.exe + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ntvdmd.dll + 2008-04-14 00:12:02 4,274,816 ------w c:\windows\ServicePackFiles\i386\nv4_disp.dll + 2004-08-04 05:29:54 1,897,408 ------w c:\windows\ServicePackFiles\i386\nv4_mini.sys + 2008-04-13 18:56:06 88,320 ------w c:\windows\ServicePackFiles\i386\nwlnkipx.sys + 2008-04-14 00:12:02 142,336 ------w c:\windows\ServicePackFiles\i386\nwprovau.dll + 2008-04-14 00:12:02 270,336 ------w c:\windows\ServicePackFiles\i386\oakley.dll + 2008-04-14 00:10:30 229,376 ------w c:\windows\ServicePackFiles\i386\obelog.dll + 2008-04-14 00:10:30 966,656 ------w c:\windows\ServicePackFiles\i386\obemetal.dll + 2007-04-02 18:44:11 77,824 ------w c:\windows\ServicePackFiles\i386\obemtllc.dll + 2008-04-14 00:10:30 86,016 ------w c:\windows\ServicePackFiles\i386\obepopc.dll + 2008-04-14 00:12:02 286,208 ------w c:\windows\ServicePackFiles\i386\objsel.dll + 2008-04-13 18:40:52 405,504 ------w c:\windows\ServicePackFiles\i386\obrb041b.dll + 2008-04-13 18:40:56 408,576 ------w c:\windows\ServicePackFiles\i386\obrb0424.dll + 2008-04-14 00:12:02 96,256 ------w c:\windows\ServicePackFiles\i386\occache.dll + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\ocgen.dll + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\ocmanage.dll + 2008-04-14 00:12:02 17,408 ------w c:\windows\ServicePackFiles\i386\ocmsn.dll + 2002-08-29 10:00:00 26,224 ------w c:\windows\ServicePackFiles\i386\odbc16gt.dll + 2008-04-14 00:12:02 249,856 ------w c:\windows\ServicePackFiles\i386\odbc32.dll + 2008-04-14 00:12:02 16,384 ------w c:\windows\ServicePackFiles\i386\odbc32gt.dll + 2008-04-14 00:12:30 32,768 ------w c:\windows\ServicePackFiles\i386\odbcad32.exe + 2008-04-14 00:12:02 24,576 ------w c:\windows\ServicePackFiles\i386\odbcbcp.dll + 2008-04-14 00:12:02 135,168 ------w c:\windows\ServicePackFiles\i386\odbcconf.dll + 2008-04-14 00:12:30 69,632 ------w c:\windows\ServicePackFiles\i386\odbcconf.exe + 2008-04-14 00:12:02 106,496 ------w c:\windows\ServicePackFiles\i386\odbccp32.dll + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccr32.dll + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\odbccu32.dll + 2008-04-13 17:26:05 94,208 ------w c:\windows\ServicePackFiles\i386\odbcint.dll + 2008-04-14 00:10:31 53,279 ------w c:\windows\ServicePackFiles\i386\odbcji32.dll + 2008-04-14 00:12:02 278,559 ------w c:\windows\ServicePackFiles\i386\odbcjt32.dll + 2008-04-13 17:26:05 12,288 ------w c:\windows\ServicePackFiles\i386\odbcp32r.dll + 2008-04-14 00:12:02 147,456 ------w c:\windows\ServicePackFiles\i386\odbctrac.dll + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\oddbse32.dll + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odexl32.dll + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odfox32.dll + 2008-04-14 00:12:02 20,510 ------w c:\windows\ServicePackFiles\i386\odpdx32.dll + 2008-04-14 00:12:02 20,511 ------w c:\windows\ServicePackFiles\i386\odtext32.dll + 2008-04-14 00:12:02 104,448 ------w c:\windows\ServicePackFiles\i386\oeimport.dll + 2008-04-14 00:12:30 60,416 ------w c:\windows\ServicePackFiles\i386\oemig50.exe + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\oemiglib.dll + 2008-04-14 00:12:02 192,000 ------w c:\windows\ServicePackFiles\i386\offfilt.dll + 2008-04-13 18:46:18 61,696 ------w c:\windows\ServicePackFiles\i386\ohci1394.sys + 2008-04-14 00:12:02 1,287,168 ------w c:\windows\ServicePackFiles\i386\ole32.dll + 2008-04-14 00:12:02 551,936 ------w c:\windows\ServicePackFiles\i386\oleaut32.dll + 2008-04-14 00:12:02 74,752 ------w c:\windows\ServicePackFiles\i386\olecli32.dll + 2008-04-14 00:12:02 37,376 ------w c:\windows\ServicePackFiles\i386\olecnv32.dll + 2008-04-14 00:12:02 487,424 ------w c:\windows\ServicePackFiles\i386\oledb32.dll + 2008-04-14 00:12:02 65,536 ------w c:\windows\ServicePackFiles\i386\oledb32r.dll + 2008-04-14 00:12:02 122,880 ------w c:\windows\ServicePackFiles\i386\oledlg.dll + 2008-04-14 00:12:02 107,008 ------w c:\windows\ServicePackFiles\i386\oleprn.dll + 2008-04-14 00:12:02 84,992 ------w c:\windows\ServicePackFiles\i386\olepro32.dll + 2008-04-14 00:12:02 144,384 ------w c:\windows\ServicePackFiles\i386\onex.dll + 2008-04-14 00:12:31 51,200 ------w c:\windows\ServicePackFiles\i386\oobebaln.exe + 2008-04-14 00:12:02 713,728 ------w c:\windows\ServicePackFiles\i386\opengl32.dll + 2008-04-13 18:32:32 166,912 ------w c:\windows\ServicePackFiles\i386\oschoice.exe + 2008-04-14 00:12:31 215,552 ------w c:\windows\ServicePackFiles\i386\osk.exe + 2008-04-13 18:31:43 230,400 ------w c:\windows\ServicePackFiles\i386\osloader.exe + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\osuninst.dll + 2008-04-14 00:12:02 153,600 ------w c:\windows\ServicePackFiles\i386\p2p.dll + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\p2pgasvc.dll + 2008-04-14 00:12:02 313,856 ------w c:\windows\ServicePackFiles\i386\p2pgraph.dll + 2008-04-14 00:12:02 115,712 ------w c:\windows\ServicePackFiles\i386\p2pnetsh.dll + 2008-04-14 00:12:02 554,496 ------w c:\windows\ServicePackFiles\i386\p2psvc.dll + 2008-04-13 18:31:31 42,752 ------w c:\windows\ServicePackFiles\i386\p3.sys + 2008-04-14 00:12:31 58,368 ------w c:\windows\ServicePackFiles\i386\packager.exe + 2008-04-13 18:40:10 80,128 ------w c:\windows\ServicePackFiles\i386\parport.sys + 2008-04-13 18:40:49 19,712 ------w c:\windows\ServicePackFiles\i386\partmgr.sys + 2008-04-14 00:12:02 67,584 ------w c:\windows\ServicePackFiles\i386\pautoenr.dll + 2004-08-04 05:31:22 29,502 ------w c:\windows\ServicePackFiles\i386\pca200e.sys + 2008-04-14 00:12:02 102,912 ------w c:\windows\ServicePackFiles\i386\pchshell.dll + 2008-04-14 00:12:02 38,400 ------w c:\windows\ServicePackFiles\i386\pchsvc.dll + 2008-04-13 18:36:44 68,224 ------w c:\windows\ServicePackFiles\i386\pci.sys + 2008-04-13 18:40:29 24,960 ------w c:\windows\ServicePackFiles\i386\pciidex.sys + 2007-05-15 08:08:11 288,768 ------w c:\windows\ServicePackFiles\i386\pcl4res.dll + 2007-05-15 08:08:13 1,058,816 ------w c:\windows\ServicePackFiles\i386\pcl5eres.dll + 2007-05-15 08:08:14 1,057,280 ------w c:\windows\ServicePackFiles\i386\pcl5ures.dll + 2007-05-15 08:08:14 207,872 ------w c:\windows\ServicePackFiles\i386\pclxl.dll + 2008-04-13 18:36:43 120,192 ------w c:\windows\ServicePackFiles\i386\pcmcia.sys + 2002-08-29 03:59:16 169,984 ------w c:\windows\ServicePackFiles\i386\pcx500.sys + 2008-04-14 00:12:02 284,160 ------w c:\windows\ServicePackFiles\i386\pdh.dll + 2008-04-14 00:12:02 39,936 ------w c:\windows\ServicePackFiles\i386\perfctrs.dll + 2008-04-14 00:12:02 26,624 ------w c:\windows\ServicePackFiles\i386\perfdisk.dll + 2008-04-14 00:12:31 15,872 ------w c:\windows\ServicePackFiles\i386\perfmon.exe + 2008-04-14 00:12:02 17,920 ------w c:\windows\ServicePackFiles\i386\perfnet.dll + 2008-04-14 00:12:02 25,088 ------w c:\windows\ServicePackFiles\i386\perfos.dll + 2008-04-14 00:12:02 34,816 ------w c:\windows\ServicePackFiles\i386\perfproc.dll + 2008-04-13 18:44:29 27,904 ------w c:\windows\ServicePackFiles\i386\perm2.sys + 2008-04-14 00:10:34 211,584 ------w c:\windows\ServicePackFiles\i386\perm2dll.dll + 2008-04-13 18:44:30 28,032 ------w c:\windows\ServicePackFiles\i386\perm3.sys + 2008-04-14 00:10:34 259,328 ------w c:\windows\ServicePackFiles\i386\perm3dd.dll + 2008-04-14 00:12:02 176,128 ------w c:\windows\ServicePackFiles\i386\photowiz.dll + 2008-04-14 00:12:02 35,328 ------w c:\windows\ServicePackFiles\i386\pid.dll + 2008-04-13 18:35:22 24,064 ------w c:\windows\ServicePackFiles\i386\pidgen.dll + 2008-04-14 00:12:31 281,088 ------w c:\windows\ServicePackFiles\i386\pinball.exe + 2008-04-14 00:12:31 17,920 ------w c:\windows\ServicePackFiles\i386\ping.exe + 2008-04-14 00:12:02 15,360 ------w c:\windows\ServicePackFiles\i386\pjlmon.dll + 2008-04-14 00:12:02 44,544 ------w c:\windows\ServicePackFiles\i386\plotter.dll + 2008-04-14 00:12:02 52,736 ------w c:\windows\ServicePackFiles\i386\plotui.dll + 2008-04-14 00:12:02 412,160 ------w c:\windows\ServicePackFiles\i386\pmh.dll + 2008-04-14 00:12:02 39,424 ------w c:\windows\ServicePackFiles\i386\pngfilt.dll + 2008-04-14 00:12:02 58,880 ------w c:\windows\ServicePackFiles\i386\pnrpnsp.dll + 2008-04-14 00:12:02 105,472 ------w c:\windows\ServicePackFiles\i386\polstore.dll + 2008-04-13 19:19:41 146,048 ------w c:\windows\ServicePackFiles\i386\portcls.sys + 2008-04-14 00:12:31 49,152 ------w c:\windows\ServicePackFiles\i386\powercfg.exe + 2008-04-13 18:40:56 8,832 ------w c:\windows\ServicePackFiles\i386\powerfil.sys + 2008-04-14 00:12:03 17,408 ------w c:\windows\ServicePackFiles\i386\powrprof.dll + 2008-04-13 18:41:00 17,664 ------w c:\windows\ServicePackFiles\i386\ppa3.sys + 2008-04-14 00:12:03 560,640 ------w c:\windows\ServicePackFiles\i386\printui.dll + 2008-04-13 18:31:30 35,840 ------w c:\windows\ServicePackFiles\i386\processr.sys + 2008-04-14 00:12:03 27,648 ------w c:\windows\ServicePackFiles\i386\profmap.dll + 2008-04-14 00:12:31 109,568 ------w c:\windows\ServicePackFiles\i386\progman.exe + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\proquota.exe + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\provthrd.dll + 2008-04-14 00:12:32 9,216 ------w c:\windows\ServicePackFiles\i386\proxycfg.exe + 2008-04-14 00:12:03 728,576 ------w c:\windows\ServicePackFiles\i386\ps5ui.dll + 2008-04-14 00:12:03 23,040 ------w c:\windows\ServicePackFiles\i386\psapi.dll + 2008-04-14 00:12:03 96,768 ------w c:\windows\ServicePackFiles\i386\psbase.dll + 2008-04-13 18:56:38 69,120 ------w c:\windows\ServicePackFiles\i386\psched.sys + 2008-04-14 00:12:03 543,232 ------w c:\windows\ServicePackFiles\i386\pscript5.dll + 2008-04-14 00:12:03 363,520 ------w c:\windows\ServicePackFiles\i386\psisdecd.dll + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\pstorec.dll + 2008-04-14 00:12:03 34,304 ------w c:\windows\ServicePackFiles\i386\pstorsvc.dll + 2008-04-14 00:12:03 159,232 ------w c:\windows\ServicePackFiles\i386\ptpusd.dll + 2008-04-14 00:12:03 150,528 ------w c:\windows\ServicePackFiles\i386\qagent.dll + 2008-04-14 00:12:03 291,328 ------w c:\windows\ServicePackFiles\i386\qagentrt.dll + 2008-04-14 00:12:03 237,568 ------w c:\windows\ServicePackFiles\i386\qasf.dll + 2008-04-14 00:12:03 192,512 ------w c:\windows\ServicePackFiles\i386\qcap.dll + 2008-04-14 00:12:03 62,464 ------w c:\windows\ServicePackFiles\i386\qcliprov.dll + 2008-04-14 00:12:03 279,040 ------w c:\windows\ServicePackFiles\i386\qdv.dll + 2008-04-14 00:12:03 386,048 ------w c:\windows\ServicePackFiles\i386\qdvd.dll + 2008-04-14 00:12:03 562,176 ------w c:\windows\ServicePackFiles\i386\qedit.dll + 2008-04-13 17:21:32 733,696 ------w c:\windows\ServicePackFiles\i386\qedwipes.dll + 2008-04-13 18:40:52 6,016 ------w c:\windows\ServicePackFiles\i386\qic157.sys + 2008-04-14 00:12:03 409,088 ------w c:\windows\ServicePackFiles\i386\qmgr.dll + 2008-04-14 00:12:03 18,944 ------w c:\windows\ServicePackFiles\i386\qmgrprxy.dll + 2008-04-14 00:12:32 19,968 ------w c:\windows\ServicePackFiles\i386\qprocess.exe + 2008-04-14 00:12:03 1,288,192 ------w c:\windows\ServicePackFiles\i386\quartz.dll + 2008-04-14 00:12:03 1,435,648 ------w c:\windows\ServicePackFiles\i386\query.dll + 2008-04-14 00:12:03 76,800 ------w c:\windows\ServicePackFiles\i386\qutil.dll + 2008-04-14 00:12:03 43,520 ------w c:\windows\ServicePackFiles\i386\racpldlg.dll + 2008-04-13 18:41:23 20,736 ------w c:\windows\ServicePackFiles\i386\ramdisk.sys + 2008-04-14 00:12:03 7,680 ------w c:\windows\ServicePackFiles\i386\rasadhlp.dll + 2008-04-14 00:12:03 237,056 ------w c:\windows\ServicePackFiles\i386\rasapi32.dll + 2008-04-14 00:12:03 88,576 ------w c:\windows\ServicePackFiles\i386\rasauto.dll + 2008-04-14 00:12:03 79,872 ------w c:\windows\ServicePackFiles\i386\raschap.dll + 2008-04-14 00:12:03 658,432 ------w c:\windows\ServicePackFiles\i386\rasdlg.dll + 2008-04-13 19:19:43 51,328 ------w c:\windows\ServicePackFiles\i386\rasl2tp.sys + 2008-04-14 00:12:03 61,440 ------w c:\windows\ServicePackFiles\i386\rasman.dll + 2008-04-14 00:12:03 186,368 ------w c:\windows\ServicePackFiles\i386\rasmans.dll + 2008-04-14 00:12:32 56,832 ------w c:\windows\ServicePackFiles\i386\rasphone.exe + 2008-04-14 00:12:03 210,944 ------w c:\windows\ServicePackFiles\i386\rasppp.dll + 2008-04-13 18:57:32 41,472 ------w c:\windows\ServicePackFiles\i386\raspppoe.sys + 2008-04-13 19:19:48 48,384 ------w c:\windows\ServicePackFiles\i386\raspptp.sys + 2008-04-14 00:12:03 61,952 ------w c:\windows\ServicePackFiles\i386\rasqec.dll + 2008-04-14 00:12:03 16,384 ------w c:\windows\ServicePackFiles\i386\rassapi.dll + 2008-04-14 00:12:03 58,368 ------w c:\windows\ServicePackFiles\i386\rastapi.dll + 2008-04-14 00:12:03 150,016 ------w c:\windows\ServicePackFiles\i386\rastls.dll + 2008-04-14 00:12:03 102,400 ------w c:\windows\ServicePackFiles\i386\rcbdyctl.dll + 2008-04-14 00:12:32 35,840 ------w c:\windows\ServicePackFiles\i386\rcimlby.exe + 2008-04-14 00:12:32 21,504 ------w c:\windows\ServicePackFiles\i386\rcp.exe + 2008-04-13 19:28:39 175,744 ------w c:\windows\ServicePackFiles\i386\rdbss.sys + 2008-04-14 00:12:03 147,968 ------w c:\windows\ServicePackFiles\i386\rdchost.dll + 2008-04-14 00:12:32 62,976 ------w c:\windows\ServicePackFiles\i386\rdpclip.exe + 2008-04-14 00:13:22 92,424 ------w c:\windows\ServicePackFiles\i386\rdpdd.dll + 2008-04-13 18:32:51 196,224 ------w c:\windows\ServicePackFiles\i386\rdpdr.sys + 2008-04-14 00:12:04 19,968 ------w c:\windows\ServicePackFiles\i386\rdpsnd.dll + 2008-04-14 00:13:22 139,656 ------w c:\windows\ServicePackFiles\i386\rdpwd.sys + 2008-04-14 00:13:22 87,176 ------w c:\windows\ServicePackFiles\i386\rdpwsx.dll + 2008-04-14 00:12:32 13,824 ------w c:\windows\ServicePackFiles\i386\rdsaddin.exe + 2008-04-14 00:12:32 67,072 ------w c:\windows\ServicePackFiles\i386\rdshost.exe + 2004-08-04 05:41:39 13,776 ------w c:\windows\ServicePackFiles\i386\recagent.sys + 2008-04-13 18:40:27 57,600 ------w c:\windows\ServicePackFiles\i386\redbook.sys + 2004-08-04 05:48:44 3,338 ------w c:\windows\ServicePackFiles\i386\redir.exe + 2008-04-14 00:12:32 50,176 ------w c:\windows\ServicePackFiles\i386\reg.exe + 2008-04-14 00:12:04 49,664 ------w c:\windows\ServicePackFiles\i386\regapi.dll + 2008-04-14 00:12:32 146,432 ------w c:\windows\ServicePackFiles\i386\regedit.exe + 2008-04-14 00:12:04 59,904 ------w c:\windows\ServicePackFiles\i386\regsvc.dll + 2008-04-14 00:12:32 11,776 ------w c:\windows\ServicePackFiles\i386\regsvr32.exe + 2008-04-14 00:12:04 397,824 ------w c:\windows\ServicePackFiles\i386\regwizc.dll + 2008-04-14 00:12:04 60,416 ------w c:\windows\ServicePackFiles\i386\remotepg.dll + 2008-04-14 00:12:04 178,176 ------w c:\windows\ServicePackFiles\i386\repdrvfs.dll + 2008-04-14 00:12:04 58,880 ------w c:\windows\ServicePackFiles\i386\resutils.dll + 2008-04-14 00:12:33 13,824 ------w c:\windows\ServicePackFiles\i386\rexec.exe + 2008-04-13 18:46:32 59,136 ------w c:\windows\ServicePackFiles\i386\rfcomm.sys + 2008-04-14 00:12:04 290,304 ------w c:\windows\ServicePackFiles\i386\rhttpaa.dll + 2008-04-14 00:12:04 123,392 ------w c:\windows\ServicePackFiles\i386\riafres.dll + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui1.dll + 2008-04-14 00:12:04 11,776 ------w c:\windows\ServicePackFiles\i386\riafui2.dll + 2008-04-14 00:12:04 433,664 ------w c:\windows\ServicePackFiles\i386\riched20.dll + 2008-04-13 18:55:08 202,624 ------w c:\windows\ServicePackFiles\i386\rmcast.sys + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismp.sys + 2008-04-13 18:56:49 30,592 ------w c:\windows\ServicePackFiles\i386\rndismpx.sys + 2008-04-13 18:40:14 79,104 ------w c:\windows\ServicePackFiles\i386\rocket.sys + 2008-04-14 00:12:04 584,704 ------w c:\windows\ServicePackFiles\i386\rpcrt4.dll + 2008-04-14 00:12:04 399,360 ------w c:\windows\ServicePackFiles\i386\rpcss.dll + 2008-04-14 00:12:04 61,440 ------w c:\windows\ServicePackFiles\i386\rrcm.dll + 2008-04-13 17:37:57 208,384 ------w c:\windows\ServicePackFiles\i386\rsaenh.dll + 2008-04-14 00:12:33 14,848 ------w c:\windows\ServicePackFiles\i386\rsh.exe + 2008-04-14 00:12:04 39,936 ------w c:\windows\ServicePackFiles\i386\rshx32.dll + 2008-04-14 00:12:04 18,944 ------w c:\windows\ServicePackFiles\i386\rsmps.dll + 2008-04-14 00:12:33 380,416 ------w c:\windows\ServicePackFiles\i386\rstrui.exe + 2008-04-14 00:12:04 92,672 ------w c:\windows\ServicePackFiles\i386\rsvpsp.dll + 2008-04-14 00:12:33 77,312 ------w c:\windows\ServicePackFiles\i386\rtcshare.exe + 2008-04-14 00:12:04 31,744 ------w c:\windows\ServicePackFiles\i386\rtipxmib.dll + 2004-08-04 05:31:32 20,992 ------w c:\windows\ServicePackFiles\i386\rtl8139.sys + 2008-04-14 00:12:04 44,032 ------w c:\windows\ServicePackFiles\i386\rtutils.dll + 2008-04-14 00:12:33 33,280 ------w c:\windows\ServicePackFiles\i386\rundll32.exe + 2008-04-14 00:12:33 14,336 ------w c:\windows\ServicePackFiles\i386\runonce.exe + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw001ext.dll + 2008-04-14 00:12:04 29,184 ------w c:\windows\ServicePackFiles\i386\rw330ext.dll + 2008-04-14 00:12:04 27,648 ------w c:\windows\ServicePackFiles\i386\rw430ext.dll + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\rw450ext.dll + 2008-04-14 00:12:04 397,056 ------w c:\windows\ServicePackFiles\i386\s3gnb.dll + 2004-08-04 05:29:51 166,912 ------w c:\windows\ServicePackFiles\i386\s3gnbm.sys + 2008-04-14 00:12:04 43,520 ------w c:\windows\ServicePackFiles\i386\safrcdlg.dll + 2008-04-14 00:12:04 29,696 ------w c:\windows\ServicePackFiles\i386\safrdm.dll + 2008-04-14 00:12:04 45,568 ------w c:\windows\ServicePackFiles\i386\safrslv.dll + 2008-04-14 00:12:04 64,000 ------w c:\windows\ServicePackFiles\i386\samlib.dll + 2008-04-14 00:12:04 415,744 ------w c:\windows\ServicePackFiles\i386\samsrv.dll + 2008-04-14 00:12:04 741,376 ------w c:\windows\ServicePackFiles\i386\sapi.dll + 2008-04-14 00:12:33 13,312 ------w c:\windows\ServicePackFiles\i386\savedump.exe + 2008-04-14 00:12:04 270,848 ------w c:\windows\ServicePackFiles\i386\sbe.dll + 2008-04-14 00:12:04 159,232 ------w c:\windows\ServicePackFiles\i386\sbeio.dll + 2008-04-13 18:40:48 43,904 ------w c:\windows\ServicePackFiles\i386\sbp2port.sys + 2008-04-14 00:12:04 69,632 ------w c:\windows\ServicePackFiles\i386\scarddlg.dll + 2008-04-14 00:12:33 95,744 ------w c:\windows\ServicePackFiles\i386\scardsvr.exe + 2002-08-29 10:00:00 169,984 ------w c:\windows\ServicePackFiles\i386\sccbase.dll + 2008-04-14 00:12:05 171,008 ------w c:\windows\ServicePackFiles\i386\sccsccp.dll + 2008-04-14 00:12:05 181,248 ------w c:\windows\ServicePackFiles\i386\scecli.dll + 2008-04-14 00:12:05 314,880 ------w c:\windows\ServicePackFiles\i386\scesrv.dll + 2008-04-14 00:12:05 144,384 ------w c:\windows\ServicePackFiles\i386\schannel.dll + 2008-04-14 00:12:05 192,512 ------w c:\windows\ServicePackFiles\i386\schedsvc.dll + 2008-04-14 00:12:05 20,480 ------w c:\windows\ServicePackFiles\i386\sclgntfy.dll + 2008-04-14 00:12:34 36,352 ------w c:\windows\ServicePackFiles\i386\scrcons.exe + 2008-04-14 00:12:05 215,552 ------w c:\windows\ServicePackFiles\i386\script.dll + 2004-08-04 07:56:44 188,416 ------w c:\windows\ServicePackFiles\i386\script_a.dll + 2008-04-14 00:12:05 199,680 ------w c:\windows\ServicePackFiles\i386\scripta.dll + 2008-04-14 00:12:43 9,216 ------w c:\windows\ServicePackFiles\i386\scrnsave.scr + 2008-04-14 00:12:05 180,224 ------w c:\windows\ServicePackFiles\i386\scrobj.dll + 2008-04-14 00:12:05 172,032 ------w c:\windows\ServicePackFiles\i386\scrrun.dll + 2008-04-13 18:40:30 96,384 ------w c:\windows\ServicePackFiles\i386\scsiport.sys + 2008-04-13 18:45:33 11,520 ------w c:\windows\ServicePackFiles\i386\scsiscan.sys + 2008-04-14 00:12:34 77,312 ------w c:\windows\ServicePackFiles\i386\sdbinst.exe + 2008-04-13 18:36:44 79,232 ------w c:\windows\ServicePackFiles\i386\sdbus.sys + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sdhcinst.dll + 2008-04-13 16:39:15 20,480 ------w c:\windows\ServicePackFiles\i386\secdrv.sys + 2008-04-14 00:12:05 18,944 ------w c:\windows\ServicePackFiles\i386\seclogon.dll + 2004-08-02 19:20:40 4,569 ------w c:\windows\ServicePackFiles\i386\secupd.dat + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\secur32.dll + 2008-04-14 00:12:05 5,632 ------w c:\windows\ServicePackFiles\i386\security.dll + 2008-04-14 00:12:05 29,184 ------w c:\windows\ServicePackFiles\i386\sendcmsg.dll + 2008-04-14 00:12:05 54,784 ------w c:\windows\ServicePackFiles\i386\sendmail.dll + 2008-04-14 00:12:05 39,424 ------w c:\windows\ServicePackFiles\i386\sens.dll + 2008-04-14 00:12:05 7,168 ------w c:\windows\ServicePackFiles\i386\sensapi.dll + 2008-04-13 18:40:12 15,744 ------w c:\windows\ServicePackFiles\i386\serenum.sys + 2008-04-13 19:15:45 64,512 ------w c:\windows\ServicePackFiles\i386\serial.sys + 2008-04-14 00:12:05 56,320 ------w c:\windows\ServicePackFiles\i386\servdeps.dll + 2008-04-14 00:12:34 108,544 ------w c:\windows\ServicePackFiles\i386\services.exe + 2008-04-14 00:12:34 141,312 ------w c:\windows\ServicePackFiles\i386\sessmgr.exe + 2008-04-14 00:12:34 31,232 ------w c:\windows\ServicePackFiles\i386\sethc.exe + 2008-04-14 00:12:34 23,040 ------w c:\windows\ServicePackFiles\i386\setup.exe + 2004-08-04 07:56:56 774,144 ------w c:\windows\ServicePackFiles\i386\setup_wm.exe + 2008-04-14 00:12:34 73,216 ------w c:\windows\ServicePackFiles\i386\setup50.exe + 2008-04-14 10:42:06 985,088 ------w c:\windows\ServicePackFiles\i386\setupapi.dll + 2008-04-14 00:12:35 32,768 ------w c:\windows\ServicePackFiles\i386\setupn.exe + 2008-04-14 00:12:05 101,376 ------w c:\windows\ServicePackFiles\i386\setupqry.dll + 2008-04-14 00:12:05 5,120 ------w c:\windows\ServicePackFiles\i386\sfc.dll + 2008-04-14 00:12:05 140,288 ------w c:\windows\ServicePackFiles\i386\sfc_os.dll + 2008-04-14 00:12:05 1,614,848 ------w c:\windows\ServicePackFiles\i386\sfcfiles.dll + 2008-04-13 18:40:47 11,904 ------w c:\windows\ServicePackFiles\i386\sffdisk.sys + 2008-04-13 18:40:48 10,240 ------w c:\windows\ServicePackFiles\i386\sffp_mmc.sys + 2008-04-13 18:40:47 11,008 ------w c:\windows\ServicePackFiles\i386\sffp_sd.sys + 2008-04-13 18:40:48 11,392 ------w c:\windows\ServicePackFiles\i386\sfloppy.sys + 2008-04-13 17:03:19 549,376 ------w c:\windows\ServicePackFiles\i386\shdoclc.dll + 2008-04-14 00:12:05 1,499,136 ------w c:\windows\ServicePackFiles\i386\shdocvw.dll + 2008-04-14 00:12:05 8,461,312 ------w c:\windows\ServicePackFiles\i386\shell32.dll + 2008-04-14 00:12:05 25,088 ------w c:\windows\ServicePackFiles\i386\shfolder.dll + 2008-04-14 00:12:05 68,096 ------w c:\windows\ServicePackFiles\i386\shgina.dll + 2008-04-14 00:12:05 65,024 ------w c:\windows\ServicePackFiles\i386\shimeng.dll + 2008-04-14 00:12:05 438,272 ------w c:\windows\ServicePackFiles\i386\shimgvw.dll + 2008-04-14 00:12:05 474,112 ------w c:\windows\ServicePackFiles\i386\shlwapi.dll + 2004-08-04 07:56:45 151,552 ------w c:\windows\ServicePackFiles\i386\shmedia.dll + 2008-04-14 00:12:35 45,056 ------w c:\windows\ServicePackFiles\i386\shmgrate.exe + 2008-04-14 00:12:35 77,824 ------w c:\windows\ServicePackFiles\i386\shrpubw.exe + 2008-04-14 00:12:05 27,648 ------w c:\windows\ServicePackFiles\i386\shscrap.dll + 2008-04-14 00:12:05 135,168 ------w c:\windows\ServicePackFiles\i386\shsvcs.dll + 2008-04-14 00:12:05 20,536 ------w c:\windows\ServicePackFiles\i386\shtml.dll + 2008-04-14 00:12:35 16,437 ------w c:\windows\ServicePackFiles\i386\shtml.exe + 2008-04-14 00:12:35 19,456 ------w c:\windows\ServicePackFiles\i386\shutdown.exe + 2008-04-14 00:12:05 13,312 ------w c:\windows\ServicePackFiles\i386\sigtab.dll + 2008-04-14 00:12:35 70,144 ------w c:\windows\ServicePackFiles\i386\sigverif.exe + 2008-04-14 00:12:05 3,901 ------w c:\windows\ServicePackFiles\i386\siint5.dll + 2008-04-13 18:36:39 40,960 ------w c:\windows\ServicePackFiles\i386\sisagp.sys + 2004-08-04 05:31:34 32,768 ------w c:\windows\ServicePackFiles\i386\sisnic.sys + 2008-04-14 00:12:35 26,112 ------w c:\windows\ServicePackFiles\i386\skeys.exe + 2002-08-29 03:59:32 63,547 ------w c:\windows\ServicePackFiles\i386\sla30nd5.sys + 2008-04-14 00:12:06 25,088 ------w c:\windows\ServicePackFiles\i386\slayerxp.dll + 2004-08-04 05:31:43 306,176 ------w c:\windows\ServicePackFiles\i386\slbcsp.dll + 2008-04-14 00:12:06 98,304 ------w c:\windows\ServicePackFiles\i386\slbiop.dll + 2008-04-14 00:12:06 73,832 ------w c:\windows\ServicePackFiles\i386\slcoinst.dll + 2008-04-14 00:12:06 286,792 ------w c:\windows\ServicePackFiles\i386\slextspk.dll + 2008-04-14 00:12:06 188,508 ------w c:\windows\ServicePackFiles\i386\slgen.dll + 2008-04-13 18:46:23 11,136 ------w c:\windows\ServicePackFiles\i386\slip.sys + 2004-08-04 05:41:40 129,535 ------w c:\windows\ServicePackFiles\i386\slnt7554.sys + 2004-08-04 05:41:42 404,990 ------w c:\windows\ServicePackFiles\i386\slntamr.sys + 2004-08-04 05:41:44 95,424 ------w c:\windows\ServicePackFiles\i386\slnthal.sys + 2008-04-14 00:12:35 32,866 ------w c:\windows\ServicePackFiles\i386\slrundll.exe + 2008-04-14 00:12:35 73,796 ------w c:\windows\ServicePackFiles\i386\slserv.exe + 2004-08-04 05:41:45 13,240 ------w c:\windows\ServicePackFiles\i386\slwdmsup.sys + 2008-04-13 18:36:34 5,888 ------w c:\windows\ServicePackFiles\i386\smbali.sys + 2008-04-13 18:36:33 16,000 ------w c:\windows\ServicePackFiles\i386\smbbatt.sys + 2008-04-13 18:36:33 6,912 ------w c:\windows\ServicePackFiles\i386\smbclass.sys + 2008-04-14 00:12:35 8,192 ------w c:\windows\ServicePackFiles\i386\smbinst.exe + 2008-04-14 00:12:35 236,544 ------w c:\windows\ServicePackFiles\i386\smi2smir.exe + 2008-04-14 00:12:06 362,496 ------w c:\windows\ServicePackFiles\i386\smlogcfg.dll + 2008-04-14 00:12:35 89,600 ------w c:\windows\ServicePackFiles\i386\smlogsvc.exe + 2008-04-14 00:12:36 50,688 ------w c:\windows\ServicePackFiles\i386\smss.exe + 2008-04-14 00:12:06 456,192 ------w c:\windows\ServicePackFiles\i386\smtpsvc.dll + 2008-04-14 00:12:36 131,584 ------w c:\windows\ServicePackFiles\i386\sndrec32.exe + 2008-04-14 00:12:06 34,816 ------w c:\windows\ServicePackFiles\i386\sniffpol.dll + 2008-04-14 00:12:36 33,280 ------w c:\windows\ServicePackFiles\i386\snmp.exe + 2008-04-14 00:12:06 18,944 ------w c:\windows\ServicePackFiles\i386\snmpapi.dll + 2008-04-14 00:12:06 259,072 ------w c:\windows\ServicePackFiles\i386\snmpcl.dll + 2008-04-14 00:12:06 358,400 ------w c:\windows\ServicePackFiles\i386\snmpincl.dll + 2008-04-14 00:12:06 6,144 ------w c:\windows\ServicePackFiles\i386\snmpmib.dll + 2008-04-14 00:12:06 188,416 ------w c:\windows\ServicePackFiles\i386\snmpsmir.dll + 2008-04-14 00:12:06 182,272 ------w c:\windows\ServicePackFiles\i386\snmpsnap.dll + 2008-04-14 00:12:06 39,936 ------w c:\windows\ServicePackFiles\i386\snmpthrd.dll + 2008-04-14 00:12:36 8,704 ------w c:\windows\ServicePackFiles\i386\snmptrap.exe + 2008-04-14 00:12:06 130,048 ------w c:\windows\ServicePackFiles\i386\softkbd.dll + 2008-04-13 18:40:52 7,552 ------w c:\windows\ServicePackFiles\i386\sonyait.sys + 2008-04-13 18:46:07 25,344 ------w c:\windows\ServicePackFiles\i386\sonydcam.sys + 2008-04-14 00:12:36 24,576 ------w c:\windows\ServicePackFiles\i386\sort.exe + 2008-04-14 00:12:36 7,680 ------w c:\windows\ServicePackFiles\i386\spdwnwxp.exe + 2008-04-13 16:43:18 62,976 ------w c:\windows\ServicePackFiles\i386\spgrmr.dll + 2008-04-14 00:12:36 538,624 ------w c:\windows\ServicePackFiles\i386\spider.exe + 2008-04-13 18:45:07 6,272 ------w c:\windows\ServicePackFiles\i386\splitter.sys + 2008-04-14 10:42:38 11,264 ------w c:\windows\ServicePackFiles\i386\spnpinst.exe + 2008-04-14 00:12:06 75,264 ------w c:\windows\ServicePackFiles\i386\spoolss.dll + 2008-04-14 00:12:36 57,856 ------w c:\windows\ServicePackFiles\i386\spoolsv.exe + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra041b.dll + 2008-04-13 18:35:28 192,512 ------w c:\windows\ServicePackFiles\i386\spra0424.dll + 2008-04-13 18:38:37 757,248 ------w c:\windows\ServicePackFiles\i386\sprb041b.dll + 2008-04-13 18:38:36 732,160 ------w c:\windows\ServicePackFiles\i386\sprb0424.dll + 2008-04-13 18:40:04 577,536 ------w c:\windows\ServicePackFiles\i386\sprc041b.dll + 2008-04-13 18:40:05 576,512 ------w c:\windows\ServicePackFiles\i386\sprc0424.dll + 2008-04-14 00:12:06 250,368 ------w c:\windows\ServicePackFiles\i386\sptip.dll + 2008-04-14 00:12:36 20,992 ------w c:\windows\ServicePackFiles\i386\spupdwxp.exe + 2008-04-14 00:12:06 151,552 ------w c:\windows\ServicePackFiles\i386\sqldb20.dll + 2008-04-14 00:12:06 528,384 ------w c:\windows\ServicePackFiles\i386\sqloledb.dll + 2008-04-14 00:12:06 462,848 ------w c:\windows\ServicePackFiles\i386\sqlqp20.dll + 2008-04-14 00:12:06 110,592 ------w c:\windows\ServicePackFiles\i386\sqlse20.dll + 2008-04-14 00:12:06 442,368 ------w c:\windows\ServicePackFiles\i386\sqlsrv32.dll + 2008-04-14 00:12:06 180,800 ------w c:\windows\ServicePackFiles\i386\sqlunirl.dll + 2008-04-14 00:12:06 217,088 ------w c:\windows\ServicePackFiles\i386\sqlxmlx.dll + 2008-04-13 18:36:52 73,472 ------w c:\windows\ServicePackFiles\i386\sr.sys + 2008-04-14 00:12:06 58,434 ------w c:\windows\ServicePackFiles\i386\srchctls.dll + 2008-04-14 00:12:07 726,078 ------w c:\windows\ServicePackFiles\i386\srchui.dll + 2008-04-14 00:12:07 67,584 ------w c:\windows\ServicePackFiles\i386\srclient.dll + 2008-04-14 00:12:07 239,104 ------w c:\windows\ServicePackFiles\i386\srrstr.dll + 2008-04-14 00:12:07 171,008 ------w c:\windows\ServicePackFiles\i386\srsvc.dll + 2008-04-13 19:15:11 334,848 ------w c:\windows\ServicePackFiles\i386\srv.sys + 2008-04-14 00:12:07 96,768 ------w c:\windows\ServicePackFiles\i386\srvsvc.dll + 2008-04-14 00:12:43 704,512 ------w c:\windows\ServicePackFiles\i386\ss3dfo.scr + 2008-04-14 00:12:43 19,968 ------w c:\windows\ServicePackFiles\i386\ssbezier.scr + 2008-04-14 00:12:07 34,816 ------w c:\windows\ServicePackFiles\i386\ssdpapi.dll + 2008-04-14 00:12:07 71,680 ------w c:\windows\ServicePackFiles\i386\ssdpsrv.dll + 2008-04-14 00:12:43 393,216 ------w c:\windows\ServicePackFiles\i386\ssflwbox.scr + 2008-04-14 00:12:44 20,992 ------w c:\windows\ServicePackFiles\i386\ssmarque.scr + 2008-04-14 00:12:44 47,104 ------w c:\windows\ServicePackFiles\i386\ssmypics.scr + 2008-04-14 00:12:44 18,944 ------w c:\windows\ServicePackFiles\i386\ssmyst.scr + 2008-04-14 00:12:44 610,304 ------w c:\windows\ServicePackFiles\i386\sspipes.scr + 2008-04-14 00:12:44 14,336 ------w c:\windows\ServicePackFiles\i386\ssstars.scr + 2008-04-14 00:12:44 679,936 ------w c:\windows\ServicePackFiles\i386\sstext3d.scr + 2008-04-14 00:12:07 33,280 ------w c:\windows\ServicePackFiles\i386\sstub.dll + 2008-04-14 00:12:07 26,624 ------w c:\windows\ServicePackFiles\i386\startoc.dll + 2008-04-14 00:12:07 59,392 ------w c:\windows\ServicePackFiles\i386\stclient.dll + 2008-04-14 00:12:07 86,528 ------w c:\windows\ServicePackFiles\i386\stdprov.dll + 2008-04-14 00:12:07 68,096 ------w c:\windows\ServicePackFiles\i386\sti.dll + 2008-04-14 00:12:07 136,704 ------w c:\windows\ServicePackFiles\i386\sti_ci.dll + 2008-04-14 00:12:36 14,848 ------w c:\windows\ServicePackFiles\i386\stimon.exe + 2008-04-14 00:12:07 121,856 ------w c:\windows\ServicePackFiles\i386\stobject.dll + 2008-04-14 00:12:07 74,752 ------w c:\windows\ServicePackFiles\i386\storprop.dll + 2008-04-13 18:45:15 49,408 ------w c:\windows\ServicePackFiles\i386\stream.sys + 2008-04-13 18:46:21 15,232 ------w c:\windows\ServicePackFiles\i386\streamip.sys + 2004-08-04 07:56:45 246,302 ------w c:\windows\ServicePackFiles\i386\strmdll.dll + 2008-04-14 00:12:07 75,776 ------w c:\windows\ServicePackFiles\i386\strmfilt.dll + 2008-04-14 00:12:36 16,449 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe + 2008-04-14 00:12:36 65,601 ------w c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe + 2008-04-14 00:12:36 14,336 ------w c:\windows\ServicePackFiles\i386\svchost.exe + 2008-04-13 18:39:53 4,352 ------w c:\windows\ServicePackFiles\i386\swenum.sys + 2008-04-13 18:45:09 56,576 ------w c:\windows\ServicePackFiles\i386\swmidi.sys + 2008-04-14 00:12:07 713,216 ------w c:\windows\ServicePackFiles\i386\sxs.dll + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\synceng.dll + 2008-04-14 00:12:07 191,488 ------w c:\windows\ServicePackFiles\i386\syncui.dll + 2008-04-13 19:15:55 60,800 ------w c:\windows\ServicePackFiles\i386\sysaudio.sys + 2008-04-14 00:12:07 193,024 ------w c:\windows\ServicePackFiles\i386\sysmod.dll + 2004-08-04 07:56:46 155,648 ------w c:\windows\ServicePackFiles\i386\sysmod_a.dll + 2008-04-14 00:12:07 173,568 ------w c:\windows\ServicePackFiles\i386\sysmoda.dll + 2008-04-14 00:12:37 106,496 ------w c:\windows\ServicePackFiles\i386\sysocmgr.exe + 2008-04-14 00:12:07 990,208 ------w c:\windows\ServicePackFiles\i386\syssetup.dll + 2008-04-14 00:12:07 117,760 ------w c:\windows\ServicePackFiles\i386\t2embed.dll + 2008-04-13 18:40:50 14,976 ------w c:\windows\ServicePackFiles\i386\tape.sys + 2008-04-14 00:12:07 858,624 ------w c:\windows\ServicePackFiles\i386\tapi3.dll + 2008-04-14 00:12:07 181,760 ------w c:\windows\ServicePackFiles\i386\tapi32.dll + 2008-04-14 00:12:07 249,856 ------w c:\windows\ServicePackFiles\i386\tapisrv.dll + 2008-04-14 00:12:37 135,680 ------w c:\windows\ServicePackFiles\i386\taskmgr.exe + 2008-04-13 19:20:16 361,344 ------w c:\windows\ServicePackFiles\i386\tcpip.sys + 2008-04-13 19:00:02 225,664 ------w c:\windows\ServicePackFiles\i386\tcpip6.sys + 2008-04-14 00:12:07 14,848 ------w c:\windows\ServicePackFiles\i386\tcpmib.dll + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmon.dll + 2008-04-14 00:12:07 45,568 ------w c:\windows\ServicePackFiles\i386\tcpmonui.dll + 2008-04-14 00:12:37 32,827 ------w c:\windows\ServicePackFiles\i386\tcptest.exe + 2007-04-02 16:36:07 16,384 ------w c:\windows\ServicePackFiles\i386\tcptsat.dll + 2008-04-13 19:00:05 19,072 ------w c:\windows\ServicePackFiles\i386\tdi.sys + 2008-04-14 00:13:20 12,040 ------w c:\windows\ServicePackFiles\i386\tdpipe.sys + 2008-04-14 00:13:21 21,896 ------w c:\windows\ServicePackFiles\i386\tdtcp.sys + 2008-04-14 00:12:37 75,776 ------w c:\windows\ServicePackFiles\i386\telnet.exe + 2008-04-14 00:13:20 40,840 ------w c:\windows\ServicePackFiles\i386\termdd.sys + 2008-04-14 00:12:07 358,400 ------w c:\windows\ServicePackFiles\i386\termmgr.dll + 2008-04-14 00:12:07 295,424 ------w c:\windows\ServicePackFiles\i386\termsrv.dll + 2008-04-13 18:40:50 149,376 ------w c:\windows\ServicePackFiles\i386\tffsport.sys + 2008-04-14 00:12:07 385,536 ------w c:\windows\ServicePackFiles\i386\themeui.dll + 2008-04-14 00:12:38 347,136 ------w c:\windows\ServicePackFiles\i386\tourstrt.exe + 2008-04-14 00:12:38 82,944 ------w c:\windows\ServicePackFiles\i386\tp4mon.exe + 2008-04-14 00:12:38 12,288 ------w c:\windows\ServicePackFiles\i386\tracert.exe + 2008-04-14 00:12:42 12,800 ------w c:\windows\ServicePackFiles\i386\tree.com + 2008-04-14 00:12:07 153,088 ------w c:\windows\ServicePackFiles\i386\triedit.dll + 2008-04-14 00:12:07 90,112 ------w c:\windows\ServicePackFiles\i386\trkwks.dll + 2008-01-18 15:13:09 2,247 ------w c:\windows\ServicePackFiles\i386\tscdsbl.bat + 2008-04-14 00:12:07 93,696 ------w c:\windows\ServicePackFiles\i386\tscfgwmi.dll + 2007-12-12 10:33:51 18,917 ------w c:\windows\ServicePackFiles\i386\tscinst.vbs + 2007-10-30 10:06:46 13,801 ------w c:\windows\ServicePackFiles\i386\tscuinst.vbs + 2008-04-14 00:11:31 25,600 ------w c:\windows\ServicePackFiles\i386\tscupdc.dll + 2004-08-04 05:59:27 44,544 ------w c:\windows\ServicePackFiles\i386\tscupgrd.exe + 2008-04-14 00:13:21 12,168 ------w c:\windows\ServicePackFiles\i386\tsddd.dll + 2008-04-14 00:12:07 53,248 ------w c:\windows\ServicePackFiles\i386\tsgqec.dll + 2008-04-14 00:12:07 279,040 ------w c:\windows\ServicePackFiles\i386\tshoot.dll + 2008-04-14 00:12:07 130,048 ------w c:\windows\ServicePackFiles\i386\tsoc.dll + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\tspkg.dll + 2008-04-14 00:12:07 8,704 ------w c:\windows\ServicePackFiles\i386\tty.dll + 2007-04-02 15:31:00 39,936 ------w c:\windows\ServicePackFiles\i386\ttyres.dll + 2008-04-14 00:12:07 16,384 ------w c:\windows\ServicePackFiles\i386\ttyui.dll + 2008-04-13 18:56:01 12,288 ------w c:\windows\ServicePackFiles\i386\tunmp.sys + 2008-04-14 00:12:07 50,688 ------w c:\windows\ServicePackFiles\i386\twain_32.dll + 2008-04-14 00:12:07 57,856 ------w c:\windows\ServicePackFiles\i386\twext.dll + 2008-04-14 00:12:07 101,376 ------w c:\windows\ServicePackFiles\i386\txflog.dll + 2008-04-14 00:12:38 60,416 ------w c:\windows\ServicePackFiles\i386\tzchange.exe + 2008-04-13 18:36:40 44,672 ------w c:\windows\ServicePackFiles\i386\uagp35.sys + 2008-04-13 18:32:36 66,048 ------w c:\windows\ServicePackFiles\i386\udfs.sys + 2008-04-14 00:12:07 26,624 ------w c:\windows\ServicePackFiles\i386\udhisapi.dll + 2008-04-14 00:12:07 275,456 ------w c:\windows\ServicePackFiles\i386\ulib.dll + 2008-04-14 00:12:07 35,840 ------w c:\windows\ServicePackFiles\i386\umandlg.dll + 2008-04-14 00:12:07 123,392 ------w c:\windows\ServicePackFiles\i386\umpnpmgr.dll + 2008-04-14 00:12:07 373,248 ------w c:\windows\ServicePackFiles\i386\unidrv.dll + 2008-04-14 00:12:07 744,448 ------w c:\windows\ServicePackFiles\i386\unidrvui.dll + 2008-04-14 00:12:07 74,240 ------w c:\windows\ServicePackFiles\i386\unimdmat.dll + 2008-04-14 00:12:07 13,824 ------w c:\windows\ServicePackFiles\i386\uniplat.dll + 2007-05-15 08:08:53 761,344 ------w c:\windows\ServicePackFiles\i386\unires.dll + 2004-08-04 07:56:57 208,896 ------w c:\windows\ServicePackFiles\i386\unregmp2.exe + 2008-04-14 00:12:07 316,416 ------w c:\windows\ServicePackFiles\i386\untfs.dll + 2008-04-13 18:39:46 384,768 ------w c:\windows\ServicePackFiles\i386\update.sys + 2008-04-14 00:12:38 150,528 ------w c:\windows\ServicePackFiles\i386\uploadm.exe + 2008-04-14 00:12:08 133,632 ------w c:\windows\ServicePackFiles\i386\upnp.dll + 2008-04-14 00:12:38 16,896 ------w c:\windows\ServicePackFiles\i386\upnpcont.exe + 2008-04-14 00:12:08 185,856 ------w c:\windows\ServicePackFiles\i386\upnphost.dll + 2008-04-14 00:12:08 239,616 ------w c:\windows\ServicePackFiles\i386\upnpui.dll + 2008-04-14 00:12:38 18,432 ------w c:\windows\ServicePackFiles\i386\ups.exe + 2008-04-14 00:12:08 37,888 ------w c:\windows\ServicePackFiles\i386\url.dll + 2008-04-14 00:12:08 619,520 ------w c:\windows\ServicePackFiles\i386\urlmon.dll + 2002-08-29 03:59:22 32,384 ------w c:\windows\ServicePackFiles\i386\usb101et.sys + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023.sys + 2008-04-13 18:56:49 12,800 ------w c:\windows\ServicePackFiles\i386\usb8023x.sys + 2008-04-13 18:45:12 60,032 ------w c:\windows\ServicePackFiles\i386\usbaudio.sys + 2008-04-13 18:45:40 25,600 ------w c:\windows\ServicePackFiles\i386\usbcamd.sys + 2008-04-13 18:45:41 25,728 ------w c:\windows\ServicePackFiles\i386\usbcamd2.sys + 2008-04-13 18:45:39 32,128 ------w c:\windows\ServicePackFiles\i386\usbccgp.sys + 2008-04-13 18:45:35 30,208 ------w c:\windows\ServicePackFiles\i386\usbehci.sys + 2008-04-13 18:45:37 59,520 ------w c:\windows\ServicePackFiles\i386\usbhub.sys + 2008-04-13 18:45:43 15,872 ------w c:\windows\ServicePackFiles\i386\usbintel.sys + 2008-04-14 00:12:08 16,896 ------w c:\windows\ServicePackFiles\i386\usbmon.dll + 2008-04-13 18:45:35 17,152 ------w c:\windows\ServicePackFiles\i386\usbohci.sys + 2008-04-13 18:45:36 143,872 ------w c:\windows\ServicePackFiles\i386\usbport.sys + 2008-04-13 18:47:37 25,856 ------w c:\windows\ServicePackFiles\i386\usbprint.sys + 2008-04-13 18:45:34 15,104 ------w c:\windows\ServicePackFiles\i386\usbscan.sys + 2008-04-13 18:45:36 26,112 ------w c:\windows\ServicePackFiles\i386\usbser.sys + 2008-04-13 18:45:38 26,368 ------w c:\windows\ServicePackFiles\i386\usbstor.sys + 2008-04-13 18:45:35 20,608 ------w c:\windows\ServicePackFiles\i386\usbuhci.sys + 2008-04-14 00:12:08 74,240 ------w c:\windows\ServicePackFiles\i386\usbui.dll + 2008-04-13 18:46:20 121,984 ------w c:\windows\ServicePackFiles\i386\usbvideo.sys + 2008-04-14 00:12:08 578,560 ------w c:\windows\ServicePackFiles\i386\user32.dll + 2008-04-14 00:12:08 727,040 ------w c:\windows\ServicePackFiles\i386\userenv.dll + 2008-04-14 00:12:38 26,112 ------w c:\windows\ServicePackFiles\i386\userinit.exe + 2008-04-14 00:12:08 406,016 ------w c:\windows\ServicePackFiles\i386\usp10.dll + 2008-04-14 00:12:38 50,176 ------w c:\windows\ServicePackFiles\i386\utilman.exe + 2008-04-14 00:12:08 218,624 ------w c:\windows\ServicePackFiles\i386\uxtheme.dll + 2008-04-14 00:12:08 30,749 ------w c:\windows\ServicePackFiles\i386\vbajet32.dll + 2008-04-14 00:12:08 434,176 ------w c:\windows\ServicePackFiles\i386\vbscript.dll + 2008-04-14 00:12:08 11,325 ------w c:\windows\ServicePackFiles\i386\vchnt5.dll + 2008-04-14 00:12:08 26,112 ------w c:\windows\ServicePackFiles\i386\vdmdbg.dll + 2008-04-14 00:12:08 51,712 ------w c:\windows\ServicePackFiles\i386\vdmredir.dll + 2008-04-14 00:12:38 28,672 ------w c:\windows\ServicePackFiles\i386\verclsid.exe + 2008-04-14 00:12:08 26,624 ------w c:\windows\ServicePackFiles\i386\verifier.dll + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\version.dll + 2008-04-14 00:12:08 53,760 ------w c:\windows\ServicePackFiles\i386\vfwwdm32.dll + 2008-04-13 18:44:40 20,992 ------w c:\windows\ServicePackFiles\i386\vga.sys + 2008-04-14 00:12:08 851,968 ------w c:\windows\ServicePackFiles\i386\vgx.dll + 2008-04-13 18:36:40 42,240 ------w c:\windows\ServicePackFiles\i386\viaagp.sys + 2008-04-13 18:40:31 5,376 ------w c:\windows\ServicePackFiles\i386\viaide.sys + 2008-04-13 18:44:40 81,664 ------w c:\windows\ServicePackFiles\i386\videoprt.sys + 2008-04-14 00:12:08 131,584 ------w c:\windows\ServicePackFiles\i386\viewprov.dll + 2008-04-13 18:41:01 52,352 ------w c:\windows\ServicePackFiles\i386\volsnap.sys + 2008-04-14 00:12:08 430,592 ------w c:\windows\ServicePackFiles\i386\vssapi.dll + 2008-04-14 00:12:38 289,792 ------w c:\windows\ServicePackFiles\i386\vssvc.exe + 2008-04-14 00:12:08 175,104 ------w c:\windows\ServicePackFiles\i386\w32time.dll + 2008-04-14 00:12:08 15,872 ------w c:\windows\ServicePackFiles\i386\w3ssl.dll + 2008-04-14 00:12:08 483,840 ------w c:\windows\ServicePackFiles\i386\w95upgnt.dll + 2008-04-14 00:12:38 46,080 ------w c:\windows\ServicePackFiles\i386\wab.exe + 2008-04-14 00:12:08 510,976 ------w c:\windows\ServicePackFiles\i386\wab32.dll + 2008-04-13 16:21:48 249,856 ------w c:\windows\ServicePackFiles\i386\wab32res.dll + 2008-04-14 00:12:08 32,768 ------w c:\windows\ServicePackFiles\i386\wabfind.dll + 2008-04-14 00:12:08 85,504 ------w c:\windows\ServicePackFiles\i386\wabimp.dll + 2008-04-14 00:12:39 30,208 ------w c:\windows\ServicePackFiles\i386\wabmig.exe + 2008-04-13 18:43:55 14,208 ------w c:\windows\ServicePackFiles\i386\wacompen.sys + 2004-08-04 05:29:37 12,415 ------w c:\windows\ServicePackFiles\i386\wadv01nt.sys + 2004-08-04 05:29:37 12,127 ------w c:\windows\ServicePackFiles\i386\wadv02nt.sys + 2004-08-04 05:29:37 11,775 ------w c:\windows\ServicePackFiles\i386\wadv05nt.sys + 2004-08-04 05:29:38 11,807 ------w c:\windows\ServicePackFiles\i386\wadv07nt.sys + 2004-08-04 05:29:39 11,295 ------w c:\windows\ServicePackFiles\i386\wadv08nt.sys + 2004-08-04 05:29:40 11,871 ------w c:\windows\ServicePackFiles\i386\wadv09nt.sys + 2004-08-04 05:29:40 11,935 ------w c:\windows\ServicePackFiles\i386\wadv11nt.sys + 2008-04-13 18:57:21 34,560 ------w c:\windows\ServicePackFiles\i386\wanarp.sys + 2008-04-13 18:44:59 17,664 ------w c:\windows\ServicePackFiles\i386\watchdog.sys + 2004-08-04 05:29:41 29,311 ------w c:\windows\ServicePackFiles\i386\watv01nt.sys + 2004-08-04 05:29:42 19,551 ------w c:\windows\ServicePackFiles\i386\watv02nt.sys + 2004-08-04 05:29:43 33,599 ------w c:\windows\ServicePackFiles\i386\watv04nt.sys + 2004-08-04 05:29:44 22,271 ------w c:\windows\ServicePackFiles\i386\watv06nt.sys + 2004-08-04 05:29:45 25,471 ------w c:\windows\ServicePackFiles\i386\watv10nt.sys + 2008-04-14 00:12:08 215,552 ------w c:\windows\ServicePackFiles\i386\wavemsp.dll + 2008-04-14 00:12:08 196,608 ------w c:\windows\ServicePackFiles\i386\wbemcntl.dll + 2008-04-14 00:12:08 214,528 ------w c:\windows\ServicePackFiles\i386\wbemcomn.dll + 2008-04-14 00:12:08 71,680 ------w c:\windows\ServicePackFiles\i386\wbemcons.dll + 2008-04-14 00:12:08 531,456 ------w c:\windows\ServicePackFiles\i386\wbemcore.dll + 2008-04-14 00:12:08 178,176 ------w c:\windows\ServicePackFiles\i386\wbemdisp.dll + 2008-04-14 00:12:08 273,920 ------w c:\windows\ServicePackFiles\i386\wbemess.dll + 2008-04-14 00:12:08 43,008 ------w c:\windows\ServicePackFiles\i386\wbemperf.dll + 2008-04-14 00:12:08 18,944 ------w c:\windows\ServicePackFiles\i386\wbemprox.dll + 2008-04-14 00:12:08 43,520 ------w c:\windows\ServicePackFiles\i386\wbemsvc.dll + 2008-04-14 00:12:39 116,224 ------w c:\windows\ServicePackFiles\i386\wbemtest.exe + 2008-04-14 00:12:08 197,120 ------w c:\windows\ServicePackFiles\i386\wbemupgd.dll + 2008-04-13 18:45:38 31,744 ------w c:\windows\ServicePackFiles\i386\wceusbsh.sys + 2004-08-04 05:29:45 23,615 ------w c:\windows\ServicePackFiles\i386\wch7xxnt.sys + 2008-04-14 00:12:08 49,152 ------w c:\windows\ServicePackFiles\i386\wdigest.dll + 2008-04-14 00:12:45 23,552 ------w c:\windows\ServicePackFiles\i386\wdmaud.drv + 2008-04-13 19:17:18 83,072 ------w c:\windows\ServicePackFiles\i386\wdmaud.sys + 2008-04-14 00:12:08 276,480 ------w c:\windows\ServicePackFiles\i386\webcheck.dll + 2008-04-14 00:12:08 68,096 ------w c:\windows\ServicePackFiles\i386\webclnt.dll + 2008-04-14 00:12:08 135,680 ------w c:\windows\ServicePackFiles\i386\webvw.dll + 2008-04-14 00:12:39 65,024 ------w c:\windows\ServicePackFiles\i386\wextract.exe + 2008-04-14 00:12:39 433,664 ------w c:\windows\ServicePackFiles\i386\wiaacmgr.exe + 2008-04-14 00:12:08 463,360 ------w c:\windows\ServicePackFiles\i386\wiadefui.dll + 2008-04-14 00:12:08 124,416 ------w c:\windows\ServicePackFiles\i386\wiadss.dll + 2008-04-14 00:12:08 75,776 ------w c:\windows\ServicePackFiles\i386\wiascr.dll + 2008-04-14 00:12:08 333,824 ------w c:\windows\ServicePackFiles\i386\wiaservc.dll + 2008-04-14 00:12:08 589,312 ------w c:\windows\ServicePackFiles\i386\wiashext.dll + 2008-04-14 00:12:08 111,104 ------w c:\windows\ServicePackFiles\i386\wiavideo.dll + 2008-04-14 00:12:08 712,704 ------w c:\windows\ServicePackFiles\i386\wic.dll + 2008-04-14 00:12:08 346,112 ------w c:\windows\ServicePackFiles\i386\wicext.dll + 2008-04-13 19:30:10 1,845,632 ------w c:\windows\ServicePackFiles\i386\win32k.sys + 2008-04-14 00:12:08 102,400 ------w c:\windows\ServicePackFiles\i386\win32spl.dll + 2008-04-13 16:48:53 1,647,616 ------w c:\windows\ServicePackFiles\i386\winbrand.dll + 2008-04-14 00:12:39 283,648 ------w c:\windows\ServicePackFiles\i386\winhlp32.exe + 2008-04-14 00:12:08 354,304 ------w c:\windows\ServicePackFiles\i386\winhttp.dll + 2008-04-14 00:12:08 666,112 ------w c:\windows\ServicePackFiles\i386\wininet.dll + 2008-04-14 00:12:09 32,256 ------w c:\windows\ServicePackFiles\i386\winipsec.dll + 2008-04-14 00:12:39 507,904 ------w c:\windows\ServicePackFiles\i386\winlogon.exe + 2008-04-14 00:12:09 176,128 ------w c:\windows\ServicePackFiles\i386\winmm.dll + 2002-08-29 10:00:00 5,120 ------w c:\windows\ServicePackFiles\i386\winnls.dll + 2008-04-14 00:11:11 756,224 ------w c:\windows\ServicePackFiles\i386\winntbbu.dll + 2008-04-14 00:12:09 16,896 ------w c:\windows\ServicePackFiles\i386\winrnr.dll + 2008-04-14 00:12:09 99,328 ------w c:\windows\ServicePackFiles\i386\winscard.dll + 2008-04-14 00:12:09 17,408 ------w c:\windows\ServicePackFiles\i386\winshfhc.dll + 2008-04-14 00:12:45 146,432 ------w c:\windows\ServicePackFiles\i386\winspool.drv + 2008-04-14 00:12:09 293,376 ------w c:\windows\ServicePackFiles\i386\winsrv.dll + 2008-04-14 00:12:09 53,760 ------w c:\windows\ServicePackFiles\i386\winsta.dll + 2008-04-14 00:12:09 176,640 ------w c:\windows\ServicePackFiles\i386\wintrust.dll + 2008-04-14 00:12:40 5,632 ------w c:\windows\ServicePackFiles\i386\winver.exe + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wkssvc.dll + 2008-04-14 00:12:09 69,120 ------w c:\windows\ServicePackFiles\i386\wlanapi.dll + 2008-04-14 00:12:09 172,032 ------w c:\windows\ServicePackFiles\i386\wldap32.dll + 2002-08-29 03:59:26 154,624 ------w c:\windows\ServicePackFiles\i386\wlluc48.sys + 2008-04-14 00:12:09 92,672 ------w c:\windows\ServicePackFiles\i386\wlnotify.dll + 2004-08-04 07:56:46 408,064 ------w c:\windows\ServicePackFiles\i386\wmadmod.dll + 2004-08-04 07:56:46 670,720 ------w c:\windows\ServicePackFiles\i386\wmadmoe.dll + 2004-08-04 07:56:46 230,400 ------w c:\windows\ServicePackFiles\i386\wmasf.dll + 2004-08-04 07:56:46 27,136 ------w c:\windows\ServicePackFiles\i386\wmdmlog.dll + 2004-08-04 07:56:46 23,552 ------w c:\windows\ServicePackFiles\i386\wmdmps.dll + 2004-08-04 07:56:35 168,448 ------w c:\windows\ServicePackFiles\i386\wmerror.dll + 2008-04-14 00:11:15 5,632 ------w c:\windows\ServicePackFiles\i386\wmi.dll + 2008-04-13 18:36:38 8,832 ------w c:\windows\ServicePackFiles\i386\wmiacpi.sys + 2008-04-14 00:12:40 196,608 ------w c:\windows\ServicePackFiles\i386\wmiadap.exe + 2008-04-13 17:10:20 6,656 ------w c:\windows\ServicePackFiles\i386\wmiapres.dll + 2008-04-14 00:12:09 88,576 ------w c:\windows\ServicePackFiles\i386\wmiaprpl.dll + 2008-04-14 00:12:40 126,464 ------w c:\windows\ServicePackFiles\i386\wmiapsrv.exe + 2008-04-14 00:12:09 60,928 ------w c:\windows\ServicePackFiles\i386\wmicookr.dll + 2008-04-14 00:12:09 140,800 ------w c:\windows\ServicePackFiles\i386\wmidcprv.dll + 2004-08-04 07:56:46 151,552 ------w c:\windows\ServicePackFiles\i386\wmidx.dll + 2008-04-14 00:12:09 156,672 ------w c:\windows\ServicePackFiles\i386\wmipcima.dll + 2008-04-14 00:12:09 132,096 ------w c:\windows\ServicePackFiles\i386\wmipdskq.dll + 2008-04-14 00:12:09 61,952 ------w c:\windows\ServicePackFiles\i386\wmipiprt.dll + 2008-04-14 00:12:09 62,464 ------w c:\windows\ServicePackFiles\i386\wmipjobj.dll + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmiprov.dll + 2008-04-14 00:12:09 437,248 ------w c:\windows\ServicePackFiles\i386\wmiprvsd.dll + 2008-04-14 00:12:40 218,112 ------w c:\windows\ServicePackFiles\i386\wmiprvse.exe + 2008-04-14 00:12:09 41,472 ------w c:\windows\ServicePackFiles\i386\wmipsess.dll + 2008-04-14 00:12:09 144,896 ------w c:\windows\ServicePackFiles\i386\wmisvc.dll + 2008-04-14 00:12:09 95,232 ------w c:\windows\ServicePackFiles\i386\wmiutils.dll + 2008-04-14 00:12:09 167,936 ------w c:\windows\ServicePackFiles\i386\wmm2ae.dll + 2008-04-14 00:12:09 4,096 ------w c:\windows\ServicePackFiles\i386\wmm2eres.dll + 2008-04-14 00:12:09 7,680 ------w c:\windows\ServicePackFiles\i386\wmm2ext.dll + 2008-04-14 00:12:09 402,432 ------w c:\windows\ServicePackFiles\i386\wmm2filt.dll + 2008-04-14 00:12:09 502,272 ------w c:\windows\ServicePackFiles\i386\wmm2fxa.dll + 2008-04-14 00:12:09 325,632 ------w c:\windows\ServicePackFiles\i386\wmm2fxb.dll + 2008-04-14 00:12:09 4,256,768 ------w c:\windows\ServicePackFiles\i386\wmm2res.dll + 2008-04-14 00:12:09 5,632 ------w c:\windows\ServicePackFiles\i386\wmm2res2.dll + 2004-08-04 07:56:46 1,050,624 ------w c:\windows\ServicePackFiles\i386\wmnetmgr.dll + 2004-08-04 07:56:46 4,874,240 ------w c:\windows\ServicePackFiles\i386\wmp.dll + 2004-08-04 07:56:46 114,688 ------w c:\windows\ServicePackFiles\i386\wmpasf.dll + 2004-08-04 07:56:46 98,304 ------w c:\windows\ServicePackFiles\i386\wmpband.dll + 2004-08-04 07:56:46 20,480 ------w c:\windows\ServicePackFiles\i386\wmpcd.dll + 2004-08-04 07:56:46 20,480 ------w c:\windows\ServicePackFiles\i386\wmpcore.dll + 2004-08-04 07:56:46 233,472 ------w c:\windows\ServicePackFiles\i386\wmpdxm.dll + 2008-04-14 00:12:09 276,992 ------w c:\windows\ServicePackFiles\i386\wmphoto.dll + 2004-08-04 07:56:57 73,728 ------w c:\windows\ServicePackFiles\i386\wmplayer.exe + 2004-08-04 07:56:36 2,940,928 ------w c:\windows\ServicePackFiles\i386\wmploc.dll + 2004-08-04 07:56:46 221,184 ------w c:\windows\ServicePackFiles\i386\wmpns.dll + 2004-08-04 07:56:46 102,400 ------w c:\windows\ServicePackFiles\i386\wmpshell.dll + 2004-08-04 07:56:46 20,480 ------w c:\windows\ServicePackFiles\i386\wmpui.dll + 2004-08-04 07:56:46 759,296 ------w c:\windows\ServicePackFiles\i386\wmsdmod.dll + 2004-08-04 07:56:46 115,200 ------w c:\windows\ServicePackFiles\i386\wmsdmoe.dll + 2004-08-04 07:56:46 1,119,744 ------w c:\windows\ServicePackFiles\i386\wmsdmoe2.dll + 2004-08-04 07:56:46 484,864 ------w c:\windows\ServicePackFiles\i386\wmspdmod.dll + 2004-08-04 07:56:46 896,512 ------w c:\windows\ServicePackFiles\i386\wmspdmoe.dll + 2004-08-04 07:56:46 303,616 ------w c:\windows\ServicePackFiles\i386\wmstream.dll + 2004-08-04 07:57:02 2,105,344 ------w c:\windows\ServicePackFiles\i386\wmvcore.dll + 2004-08-04 07:56:46 809,984 ------w c:\windows\ServicePackFiles\i386\wmvdmod.dll + 2004-08-04 07:56:46 1,001,472 ------w c:\windows\ServicePackFiles\i386\wmvdmoe2.dll + 2008-04-14 00:12:40 214,528 ------w c:\windows\ServicePackFiles\i386\wordpad.exe + 2008-04-14 00:12:10 264,192 ------w c:\windows\ServicePackFiles\i386\wow32.dll + 2008-04-14 00:12:40 32,256 ------w c:\windows\ServicePackFiles\i386\wpabaln.exe + 2008-04-14 00:12:41 11,264 ------w c:\windows\ServicePackFiles\i386\wpnpinst.exe + 2008-04-14 00:12:10 82,432 ------w c:\windows\ServicePackFiles\i386\ws2_32.dll + 2008-04-14 00:12:10 19,968 ------w c:\windows\ServicePackFiles\i386\ws2help.dll + 2008-04-14 00:12:41 13,824 ------w c:\windows\ServicePackFiles\i386\wscntfy.exe + 2008-04-14 00:12:41 155,648 ------w c:\windows\ServicePackFiles\i386\wscript.exe + 2008-04-14 00:12:10 80,896 ------w c:\windows\ServicePackFiles\i386\wscsvc.dll + 2008-04-14 00:12:10 108,032 ------w c:\windows\ServicePackFiles\i386\wshbth.dll + 2008-04-14 00:12:10 36,864 ------w c:\windows\ServicePackFiles\i386\wshcon.dll + 2008-04-14 00:12:10 90,112 ------w c:\windows\ServicePackFiles\i386\wshext.dll + 2008-04-14 00:12:10 14,336 ------w c:\windows\ServicePackFiles\i386\wship6.dll + 2008-04-14 00:12:10 8,192 ------w c:\windows\ServicePackFiles\i386\wshirda.dll + 2008-04-14 00:12:10 11,264 ------w c:\windows\ServicePackFiles\i386\wshrm.dll + 2008-04-14 00:12:10 19,456 ------w c:\windows\ServicePackFiles\i386\wshtcpip.dll + 2004-08-04 05:29:47 12,063 ------w c:\windows\ServicePackFiles\i386\wsiintxx.sys + 2008-04-14 00:12:10 41,984 ------w c:\windows\ServicePackFiles\i386\wsnmp32.dll + 2008-04-14 00:12:10 22,528 ------w c:\windows\ServicePackFiles\i386\wsock32.dll + 2008-04-13 18:46:24 19,200 ------w c:\windows\ServicePackFiles\i386\wstcodec.sys + 2008-04-14 00:12:10 50,688 ------w c:\windows\ServicePackFiles\i386\wstdecod.dll + 2008-04-14 00:12:10 18,432 ------w c:\windows\ServicePackFiles\i386\wtsapi32.dll + 2008-04-14 00:12:10 430,592 ------w c:\windows\ServicePackFiles\i386\wuapi.dll + 2008-04-14 00:12:41 111,104 ------w c:\windows\ServicePackFiles\i386\wuauclt.exe + 2008-04-14 00:12:41 165,888 ------w c:\windows\ServicePackFiles\i386\wuauclt1.exe + 2008-04-14 00:12:11 1,135,616 ------w c:\windows\ServicePackFiles\i386\wuaueng.dll + 2008-04-14 00:12:11 183,296 ------w c:\windows\ServicePackFiles\i386\wuaueng1.dll + 2008-04-14 00:12:11 6,656 ------w c:\windows\ServicePackFiles\i386\wuauserv.dll + 2008-04-14 00:12:11 112,640 ------w c:\windows\ServicePackFiles\i386\wucltui.dll + 2008-04-14 00:12:11 32,256 ------w c:\windows\ServicePackFiles\i386\wups.dll + 2008-04-14 00:12:11 120,320 ------w c:\windows\ServicePackFiles\i386\wuweb.dll + 2004-08-04 05:29:49 19,455 ------w c:\windows\ServicePackFiles\i386\wvchntxx.sys + 2008-04-14 00:12:11 383,488 ------w c:\windows\ServicePackFiles\i386\wzcdlg.dll + 2008-04-14 00:12:11 52,736 ------w c:\windows\ServicePackFiles\i386\wzcsapi.dll + 2008-04-14 00:12:11 483,840 ------w c:\windows\ServicePackFiles\i386\wzcsvc.dll + 2008-04-14 00:12:11 91,648 ------w c:\windows\ServicePackFiles\i386\xactsrv.dll + 2008-04-14 00:12:41 30,720 ------w c:\windows\ServicePackFiles\i386\xcopy.exe + 2004-07-17 18:39:14 174,200 ------w c:\windows\ServicePackFiles\i386\xenroll.dll + 2008-04-14 00:12:11 121,856 ------w c:\windows\ServicePackFiles\i386\xmllite.dll + 2008-04-14 00:12:11 129,024 ------w c:\windows\ServicePackFiles\i386\xmlprov.dll + 2008-04-14 00:12:11 50,176 ------w c:\windows\ServicePackFiles\i386\xmlprovi.dll + 2008-04-14 00:12:11 11,776 ------w c:\windows\ServicePackFiles\i386\xolehlp.dll + 2008-04-13 18:53:32 558,080 ------w c:\windows\ServicePackFiles\i386\xpnetdg.exe + 2008-04-13 17:39:29 438,784 ------w c:\windows\ServicePackFiles\i386\xpob2res.dll + 2008-04-13 17:39:22 187,392 ------w c:\windows\ServicePackFiles\i386\xpsp1res.dll + 2008-04-13 17:39:24 2,897,920 ------w c:\windows\ServicePackFiles\i386\xpsp2res.dll + 2008-04-13 17:39:26 689,152 ------w c:\windows\ServicePackFiles\i386\xpsp3res.dll + 2008-04-14 00:12:11 18,944 ------w c:\windows\ServicePackFiles\i386\xrxscnui.dll + 2008-04-14 00:12:11 116,224 ------w c:\windows\ServicePackFiles\i386\xrxwiadr.dll + 2008-04-14 00:12:11 338,432 ------w c:\windows\ServicePackFiles\i386\zipfldr.dll + 2008-04-14 00:11:51 33,792 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll + 2008-04-14 00:11:59 82,944 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll + 2008-04-13 17:30:28 180,224 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll + 2008-04-14 00:12:28 1,695,232 ------w c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe + 2008-04-14 00:12:35 32,866 ------w c:\windows\slrundll.exe - 2002-08-29 10:00:00 3,346,432 ----a-w c:\windows\SRCHASST\MSGR3EN.DLL + 2008-04-14 00:11:59 3,166,208 ----a-w c:\windows\SRCHASST\msgr3en.dll - 2002-08-29 10:00:00 106,562 ----a-w c:\windows\SRCHASST\SRCHCTLS.DLL + 2008-04-14 00:12:06 58,434 ----a-w c:\windows\SRCHASST\srchctls.dll - 2002-08-29 10:00:00 798,782 ----a-w c:\windows\SRCHASST\SRCHUI.DLL + 2008-04-14 00:12:07 726,078 ----a-w c:\windows\SRCHASST\srchui.dll - 2002-08-29 10:00:00 68,928 ----a-w c:\windows\SYSTEM\MMSYSTEM.DLL + 2004-08-04 05:51:11 68,768 ----a-w c:\windows\SYSTEM\mmsystem.dll - 2002-08-29 10:00:00 132,096 ----a-w c:\windows\SYSTEM\WINSPOOL.DRV + 2008-04-14 00:12:45 146,432 ----a-w c:\windows\SYSTEM\winspool.drv |
|
|
|
|
Jan 21 2009, 06:59 PM
Post
#25
|
|
|
Member Group: Members Posts: 21 Joined: 14-January 09 Member No.: 282,387 |
- 2002-08-29 10:00:00 59,392 ----a-w c:\windows\SYSTEM32\6TO4SVC.DLL + 2008-04-14 00:11:48 100,352 ----a-w c:\windows\SYSTEM32\6to4svc.dll - 2002-11-20 18:50:50 179,200 ----a-w c:\windows\SYSTEM32\accwiz.exe + 2008-04-14 00:12:11 184,320 ----a-w c:\windows\SYSTEM32\accwiz.exe - 2002-08-29 10:00:00 107,008 ----a-w c:\windows\SYSTEM32\ACLUI.DLL + 2008-04-14 00:11:48 115,712 ----a-w c:\windows\SYSTEM32\aclui.dll - 2002-08-29 10:00:00 181,760 ----a-w c:\windows\SYSTEM32\ACTIVEDS.DLL + 2008-04-14 00:11:48 193,536 ----a-w c:\windows\SYSTEM32\activeds.dll - 2002-08-29 10:00:00 4,096 ----a-w c:\windows\SYSTEM32\ACTMOVIE.EXE + 2008-04-14 00:12:12 4,096 ----a-w c:\windows\SYSTEM32\actmovie.exe - 2002-08-29 10:00:00 98,304 ----a-w c:\windows\SYSTEM32\ACTXPRXY.DLL + 2008-04-14 00:11:48 98,304 ----a-w c:\windows\SYSTEM32\actxprxy.dll - 2002-08-29 10:00:00 57,344 ----a-w c:\windows\SYSTEM32\ADMPARSE.DLL + 2007-08-13 23:39:20 71,680 ----a-w c:\windows\SYSTEM32\admparse.dll - 2002-08-29 10:00:00 162,816 ----a-w c:\windows\SYSTEM32\ADSLDP.DLL + 2008-04-14 00:11:48 175,616 ----a-w c:\windows\SYSTEM32\adsldp.dll - 2002-08-29 10:00:00 139,776 ----a-w c:\windows\SYSTEM32\ADSLDPC.DLL + 2008-04-14 00:11:48 143,360 ----a-w c:\windows\SYSTEM32\adsldpc.dll - 2002-08-29 10:00:00 62,464 ----a-w c:\windows\SYSTEM32\ADSMSEXT.DLL + 2008-04-14 00:11:48 68,096 ----a-w c:\windows\SYSTEM32\adsmsext.dll - 2002-08-29 10:00:00 239,616 ----a-w c:\windows\SYSTEM32\ADSNT.DLL + 2008-04-14 00:11:48 263,680 ----a-w c:\windows\SYSTEM32\adsnt.dll - 2002-08-29 10:00:00 558,080 ----a-w c:\windows\SYSTEM32\ADVAPI32.DLL + 2008-04-14 00:11:48 617,472 ----a-w c:\windows\SYSTEM32\advapi32.dll - 2002-08-29 10:00:00 91,136 ----a-w c:\windows\SYSTEM32\ADVPACK.DLL + 2008-10-16 20:38:34 124,928 ----a-w c:\windows\SYSTEM32\advpack.dll - 2002-08-29 10:00:00 91,648 ----a-w c:\windows\SYSTEM32\AHUI.EXE + 2008-04-14 00:12:12 98,304 ----a-w c:\windows\SYSTEM32\ahui.exe - 2002-08-29 10:00:00 41,984 ----a-w c:\windows\SYSTEM32\ALG.EXE + 2008-04-14 00:12:12 44,544 ----a-w c:\windows\SYSTEM32\alg.exe - 2002-08-29 10:00:00 15,872 ----a-w c:\windows\SYSTEM32\ALRSVC.DLL + 2008-04-14 00:11:49 17,408 ----a-w c:\windows\SYSTEM32\alrsvc.dll - 2002-12-12 05:14:32 64,512 ----a-w c:\windows\SYSTEM32\amstream.dll + 2008-04-14 00:11:49 70,656 ----a-w c:\windows\SYSTEM32\amstream.dll - 2002-08-29 10:00:00 115,712 ----a-w c:\windows\SYSTEM32\APPHELP.DLL + 2008-04-14 00:11:49 125,952 ----a-w c:\windows\SYSTEM32\apphelp.dll - 2002-08-29 10:00:00 5,120 ----a-w c:\windows\SYSTEM32\ASFERROR.DLL + 2008-04-13 17:23:38 8,192 ----a-w c:\windows\SYSTEM32\asferror.dll - 2002-08-29 10:00:00 77,824 ----a-w c:\windows\SYSTEM32\ASYCFILT.DLL + 2008-04-14 00:11:49 65,024 ----a-w c:\windows\SYSTEM32\asycfilt.dll - 2002-08-29 10:00:00 22,528 ----a-w c:\windows\SYSTEM32\AT.EXE + 2008-04-14 00:12:12 25,088 ----a-w c:\windows\SYSTEM32\at.exe + 2008-04-14 00:11:49 229,376 ------w c:\windows\SYSTEM32\ati2cqag.dll + 2008-04-14 00:11:49 377,984 ------w c:\windows\SYSTEM32\ati2dvaa.dll + 2008-04-14 00:11:49 201,728 ------w c:\windows\SYSTEM32\ati2dvag.dll + 2008-04-14 00:11:49 870,784 ------w c:\windows\SYSTEM32\ati3d1ag.dll + 2008-04-14 00:11:50 1,888,992 ------w c:\windows\SYSTEM32\ati3duag.dll + 2008-04-14 00:11:50 32,768 ------w c:\windows\SYSTEM32\ativtmxx.dll + 2008-04-14 00:11:50 516,768 ------w c:\windows\SYSTEM32\ativvaxx.dll - 2002-08-29 10:00:00 74,810 ----a-w c:\windows\SYSTEM32\ATL.DLL + 2008-04-14 00:11:50 58,880 ----a-w c:\windows\SYSTEM32\atl.dll - 2002-08-29 10:00:00 10,240 ----a-w c:\windows\SYSTEM32\ATMADM.EXE + 2008-04-14 00:12:12 11,264 ----a-w c:\windows\SYSTEM32\atmadm.exe - 2002-08-29 10:00:00 272,768 ----a-w c:\windows\SYSTEM32\ATMFD.DLL + 2008-04-14 00:09:01 285,696 ----a-w c:\windows\SYSTEM32\atmfd.dll - 2002-08-29 10:00:00 27,136 ----a-w c:\windows\SYSTEM32\ATMLIB.DLL + 2008-04-14 00:11:50 30,208 ----a-w c:\windows\SYSTEM32\atmlib.dll - 2002-08-29 10:00:00 11,264 ----a-w c:\windows\SYSTEM32\ATTRIB.EXE + 2008-04-14 00:12:12 12,288 ----a-w c:\windows\SYSTEM32\attrib.exe - 2002-08-29 10:00:00 38,912 ----a-w c:\windows\SYSTEM32\AUDIOSRV.DLL + 2008-04-14 00:11:50 42,496 ----a-w c:\windows\SYSTEM32\audiosrv.dll + 2008-04-14 00:12:12 14,336 ------w c:\windows\SYSTEM32\auditusr.exe - 2005-03-02 18:20:03 53,760 ----a-w c:\windows\SYSTEM32\authz.dll + 2008-04-14 00:11:50 62,464 ----a-w c:\windows\SYSTEM32\authz.dll - 2002-08-29 10:00:00 565,760 ----a-w c:\windows\SYSTEM32\AUTOCHK.EXE + 2008-04-14 00:12:12 588,800 ----a-w c:\windows\SYSTEM32\autochk.exe - 2002-08-29 10:00:00 578,560 ----a-w c:\windows\SYSTEM32\AUTOCONV.EXE + 2008-04-14 00:12:12 602,624 ----a-w c:\windows\SYSTEM32\autoconv.exe - 2002-08-29 10:00:00 558,592 ----a-w c:\windows\SYSTEM32\AUTOFMT.EXE + 2008-04-14 00:12:13 580,608 ----a-w c:\windows\SYSTEM32\autofmt.exe - 2002-08-29 10:00:00 8,192 ----a-w c:\windows\SYSTEM32\AUTOLFN.EXE + 2008-04-14 00:12:13 11,264 ----a-w c:\windows\SYSTEM32\autolfn.exe - 2002-08-29 10:00:00 76,288 ----a-w c:\windows\SYSTEM32\AVIFIL32.DLL + 2008-04-14 00:11:50 84,992 ----a-w c:\windows\SYSTEM32\avifil32.dll - 2002-08-29 10:00:00 44,032 ----a-w c:\windows\SYSTEM32\BASESRV.DLL + 2008-04-14 00:11:50 52,736 ----a-w c:\windows\SYSTEM32\basesrv.dll - 2002-08-29 10:00:00 27,136 ----a-w c:\windows\SYSTEM32\BATMETER.DLL + 2008-04-14 00:11:50 29,184 ----a-w c:\windows\SYSTEM32\batmeter.dll - 2002-08-29 10:00:00 6,656 ----a-w c:\windows\SYSTEM32\BATT.DLL + 2008-04-14 00:11:50 8,704 ----a-w c:\windows\SYSTEM32\batt.dll - 2002-08-29 10:00:00 14,848 ----a-w c:\windows\SYSTEM32\BIDISPL.DLL + 2008-04-14 00:11:50 17,408 ----a-w c:\windows\SYSTEM32\bidispl.dll - 2004-07-01 22:08:18 361,984 ----a-w c:\windows\SYSTEM32\bits\qmgr.dll + 2008-04-14 00:12:03 409,088 ----a-w c:\windows\SYSTEM32\bits\qmgr.dll - 2004-07-01 22:08:18 7,680 ----a-w c:\windows\SYSTEM32\bitsprx2.dll + 2008-04-14 00:11:50 8,192 ----a-w c:\windows\SYSTEM32\bitsprx2.dll - 2004-07-01 22:08:18 7,168 ----a-w c:\windows\SYSTEM32\bitsprx3.dll + 2008-04-14 00:11:50 7,168 ----a-w c:\windows\SYSTEM32\bitsprx3.dll - 2002-12-11 23:09:20 232,960 ----a-w c:\windows\SYSTEM32\blackbox.dll + 2008-04-14 00:11:50 286,720 ----a-w c:\windows\SYSTEM32\blackbox.dll + 2008-04-14 00:12:13 71,680 ------w c:\windows\SYSTEM32\blastcln.exe - 2002-08-29 10:00:00 62,976 ----a-w c:\windows\SYSTEM32\BROWSELC.DLL + 2008-04-13 17:03:24 63,488 ----a-w c:\windows\SYSTEM32\browselc.dll - 2002-08-29 10:00:00 49,152 ----a-w c:\windows\SYSTEM32\BROWSER.DLL + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\SYSTEM32\browser.dll - 2005-02-18 20:09:14 1,017,856 ----a-w c:\windows\SYSTEM32\BROWSEUI.DLL + 2008-04-14 00:11:50 1,025,024 ----a-w c:\windows\SYSTEM32\browseui.dll - 2002-08-29 10:00:00 71,680 ----a-w c:\windows\SYSTEM32\BROWSEWM.DLL + 2008-04-14 00:11:50 78,336 ----a-w c:\windows\SYSTEM32\browsewm.dll + 2008-04-14 00:11:50 20,992 ------w c:\windows\SYSTEM32\bthci.dll + 2008-04-14 00:11:50 30,208 ------w c:\windows\SYSTEM32\bthserv.dll + 2008-04-14 00:11:50 50,688 ------w c:\windows\SYSTEM32\btpanui.dll - 2002-08-29 10:00:00 59,904 ----a-w c:\windows\SYSTEM32\CABINET.DLL + 2008-04-14 00:11:50 60,416 ----a-w c:\windows\SYSTEM32\cabinet.dll - 2002-08-29 10:00:00 80,384 ----a-w c:\windows\SYSTEM32\CABVIEW.DLL + 2008-04-14 00:11:50 84,480 ----a-w c:\windows\SYSTEM32\cabview.dll - 2002-08-29 10:00:00 18,432 ----a-w c:\windows\SYSTEM32\CACLS.EXE + 2008-04-14 00:12:13 19,968 ----a-w c:\windows\SYSTEM32\cacls.exe - 2002-08-29 10:00:00 45,056 ----a-w c:\windows\SYSTEM32\CAMOCX.DLL + 2008-04-14 00:11:50 50,688 ----a-w c:\windows\SYSTEM32\camocx.dll - 2002-08-29 10:00:00 142,848 ----a-w c:\windows\SYSTEM32\CAPESNPN.DLL + 2008-04-14 00:11:50 150,016 ----a-w c:\windows\SYSTEM32\capesnpn.dll - 2004-03-06 02:16:10 225,280 ----a-w c:\windows\SYSTEM32\CATSRV.DLL + 2008-04-14 00:11:50 226,304 ----a-w c:\windows\SYSTEM32\catsrv.dll - 2002-08-29 10:00:00 85,504 ----a-w c:\windows\SYSTEM32\CATSRVPS.DLL + 2008-04-14 00:11:50 85,504 ----a-w c:\windows\SYSTEM32\catsrvps.dll - 2004-03-06 02:16:10 594,944 ----a-w c:\windows\SYSTEM32\CATSRVUT.DLL + 2008-04-14 00:11:50 625,664 ----a-w c:\windows\SYSTEM32\catsrvut.dll - 2004-12-07 22:43:02 143,360 ----a-w c:\windows\SYSTEM32\CDFVIEW.DLL + 2008-04-14 00:11:50 151,040 ----a-w c:\windows\SYSTEM32\cdfview.dll - 2007-07-30 23:19:20 92,504 ----a-w c:\windows\SYSTEM32\cdm.dll + 2008-10-16 19:09:44 92,696 ----a-w c:\windows\SYSTEM32\cdm.dll - 2002-08-29 10:00:00 2,028,032 ----a-w c:\windows\SYSTEM32\CDOSYS.DLL + 2008-04-14 00:11:50 2,091,520 ----a-w c:\windows\SYSTEM32\cdosys.dll - 2002-08-29 10:00:00 186,880 ----a-w c:\windows\SYSTEM32\CERTCLI.DLL + 2008-04-14 00:11:50 194,560 ----a-w c:\windows\SYSTEM32\certcli.dll - 2002-08-29 10:00:00 436,736 ----a-w c:\windows\SYSTEM32\CERTMGR.DLL + 2008-04-14 00:11:50 457,728 ----a-w c:\windows\SYSTEM32\certmgr.dll - 2002-11-27 00:03:32 159,232 ----a-w c:\windows\SYSTEM32\cewmdm.dll + 2008-04-14 00:11:50 159,232 ----a-w c:\windows\SYSTEM32\cewmdm.dll - 2002-08-29 10:00:00 32,768 ----a-w c:\windows\SYSTEM32\CFGBKEND.DLL + 2008-04-14 00:11:50 38,912 ----a-w c:\windows\SYSTEM32\cfgbkend.dll - 2002-08-29 10:00:00 16,896 ----a-w c:\windows\SYSTEM32\CFGMGR32.DLL + 2008-04-14 00:09:05 16,896 ----a-w c:\windows\SYSTEM32\cfgmgr32.dll - 2002-08-29 10:00:00 109,568 ----a-w c:\windows\SYSTEM32\CIC.DLL + 2008-04-14 00:11:50 148,480 ----a-w c:\windows\SYSTEM32\cic.dll - 2004-10-28 15:45:58 64,512 ----a-w c:\windows\SYSTEM32\ciodm.dll + 2008-04-14 00:11:50 69,120 ----a-w c:\windows\SYSTEM32\ciodm.dll - 2002-08-29 10:00:00 5,120 ----a-w c:\windows\SYSTEM32\CISVC.EXE + 2008-04-14 00:12:14 5,632 ----a-w c:\windows\SYSTEM32\cisvc.exe - 2004-03-06 02:16:10 110,080 ----a-w c:\windows\SYSTEM32\CLBCATEX.DLL + 2008-04-14 00:11:50 110,592 ----a-w c:\windows\SYSTEM32\clbcatex.dll - 2004-03-06 02:16:12 499,712 ----a-w c:\windows\SYSTEM32\CLBCATQ.DLL + 2008-04-14 00:11:50 498,688 ----a-w c:\windows\SYSTEM32\clbcatq.dll - 2002-08-29 10:00:00 61,440 ----a-w c:\windows\SYSTEM32\CLEANMGR.EXE + 2008-04-14 00:12:14 64,000 ----a-w c:\windows\SYSTEM32\cleanmgr.exe - 2002-09-26 19:30:36 73,728 ----a-w c:\windows\SYSTEM32\cliconfg.dll + 2008-04-14 00:11:50 77,824 ----a-w c:\windows\SYSTEM32\cliconfg.dll - 2002-09-26 19:30:38 20,480 ----a-w c:\windows\SYSTEM32\cliconfg.exe + 2008-04-14 00:12:14 20,480 ----a-w c:\windows\SYSTEM32\cliconfg.exe - 2002-08-29 10:00:00 98,816 ----a-w c:\windows\SYSTEM32\CLIPBRD.EXE + 2008-04-14 00:12:14 102,912 ----a-w c:\windows\SYSTEM32\clipbrd.exe - 2002-08-29 10:00:00 30,720 ----a-w c:\windows\SYSTEM32\CLIPSRV.EXE + 2008-04-14 00:12:14 33,280 ----a-w c:\windows\SYSTEM32\clipsrv.exe - 2002-08-29 10:00:00 54,272 ----a-w c:\windows\SYSTEM32\CLUSAPI.DLL + 2008-04-14 00:11:50 58,368 ----a-w c:\windows\SYSTEM32\clusapi.dll - 2002-08-29 10:00:00 12,288 ----a-w c:\windows\SYSTEM32\CMCFG32.DLL + 2008-04-14 00:11:50 15,872 ----a-w c:\windows\SYSTEM32\cmcfg32.dll - 2002-08-29 10:00:00 375,808 ------w c:\windows\SYSTEM32\CMD.EXE + 2008-04-14 00:12:14 389,120 ------w c:\windows\SYSTEM32\cmd.exe - 2002-08-29 10:00:00 324,608 ----a-w c:\windows\SYSTEM32\CMDIAL32.DLL + 2008-04-14 00:11:50 344,064 ----a-w c:\windows\SYSTEM32\cmdial32.dll - 2002-08-29 10:00:00 41,472 ----a-w c:\windows\SYSTEM32\CMDL32.EXE + 2008-04-14 00:12:14 25,600 ----a-w c:\windows\SYSTEM32\cmdl32.exe - 2002-08-29 10:00:00 35,840 ----a-w c:\windows\SYSTEM32\CMMON32.EXE + 2008-04-14 00:12:15 39,936 ----a-w c:\windows\SYSTEM32\cmmon32.exe - 2002-08-29 10:00:00 174,592 ----a-w c:\windows\SYSTEM32\CMPROPS.DLL + 2008-04-14 00:11:50 185,344 ----a-w c:\windows\SYSTEM32\cmprops.dll + 2008-04-14 00:11:50 13,312 ------w c:\windows\SYSTEM32\cmsetacl.dll - 2002-08-29 10:00:00 54,784 ----a-w c:\windows\SYSTEM32\CMSTP.EXE + 2008-04-14 00:12:15 63,488 ----a-w c:\windows\SYSTEM32\cmstp.exe - 2002-08-29 10:00:00 36,352 ----a-w c:\windows\SYSTEM32\CMUTIL.DLL + 2008-04-14 00:11:50 39,424 ----a-w c:\windows\SYSTEM32\cmutil.dll - 2002-08-29 10:00:00 45,568 ----a-w c:\windows\SYSTEM32\CNBJMON.DLL + 2008-04-14 00:11:50 47,104 ----a-w c:\windows\SYSTEM32\cnbjmon.dll - 2004-03-06 02:16:10 64,512 ----a-w c:\windows\SYSTEM32\COLBACT.DLL + 2008-04-14 00:11:51 60,416 ----a-w c:\windows\SYSTEM32\colbact.dll - 2004-03-06 02:16:10 187,904 ----a-w c:\windows\SYSTEM32\Com\COMADMIN.DLL + 2008-04-14 00:11:51 195,072 ----a-w c:\windows\SYSTEM32\Com\comadmin.dll - 2004-02-17 18:49:58 8,192 ----a-w c:\windows\SYSTEM32\Com\COMREPL.EXE + 2008-04-14 00:12:15 9,728 ----a-w c:\windows\SYSTEM32\Com\comrepl.exe - 2002-08-29 10:00:00 5,120 ----a-w c:\windows\SYSTEM32\Com\COMREREG.EXE + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\SYSTEM32\Com\comrereg.exe - 2004-02-17 18:50:10 6,656 ----a-w c:\windows\SYSTEM32\Com\MIGREGDB.EXE + 2008-04-14 00:12:25 7,680 ----a-w c:\windows\SYSTEM32\Com\migregdb.exe - 2002-08-29 10:00:00 25,600 ----a-w c:\windows\SYSTEM32\COMADDIN.DLL + 2008-04-14 00:11:51 28,160 ----a-w c:\windows\SYSTEM32\comaddin.dll - 2002-08-29 10:00:00 557,056 ----a-w c:\windows\SYSTEM32\COMCTL32.DLL + 2008-04-14 00:11:51 617,472 ----a-w c:\windows\SYSTEM32\comctl32.dll - 2002-08-29 10:00:00 258,048 ----a-w c:\windows\SYSTEM32\COMDLG32.DLL + 2008-04-14 00:11:51 276,992 ----a-w c:\windows\SYSTEM32\comdlg32.dll - 2002-08-29 10:00:00 238,592 ----a-w c:\windows\SYSTEM32\compatUI.dll + 2008-04-14 00:11:51 252,928 ----a-w c:\windows\SYSTEM32\compatui.dll - 2002-08-29 10:00:00 222,208 ----a-w c:\windows\SYSTEM32\COMPSTUI.DLL + 2008-04-14 00:11:51 229,376 ----a-w c:\windows\SYSTEM32\compstui.dll - 2002-08-29 10:00:00 82,432 ----a-w c:\windows\SYSTEM32\COMREPL.DLL + 2008-04-14 00:11:51 97,792 ----a-w c:\windows\SYSTEM32\comrepl.dll - 2002-08-29 10:00:00 792,064 ----a-w c:\windows\SYSTEM32\COMRES.DLL + 2008-04-14 00:11:51 792,064 ----a-w c:\windows\SYSTEM32\comres.dll - 2002-08-29 10:00:00 147,456 ----a-w c:\windows\SYSTEM32\COMSNAP.DLL + 2008-04-14 00:11:51 167,424 ----a-w c:\windows\SYSTEM32\comsnap.dll - 2004-03-06 02:16:12 1,194,496 ----a-w c:\windows\SYSTEM32\COMSVCS.DLL + 2008-04-14 00:11:51 1,267,200 ----a-w c:\windows\SYSTEM32\comsvcs.dll - 2004-03-06 02:16:10 499,200 ----a-w c:\windows\SYSTEM32\COMUID.DLL + 2008-04-14 00:11:51 539,648 ----a-w c:\windows\SYSTEM32\comuid.dll - 2009-01-16 02:37:48 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT + 2009-01-19 06:30:48 16,384 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT - 2009-01-16 02:37:48 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT + 2009-01-19 06:30:48 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT + 2009-01-19 06:30:43 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\MSHist012009011920090120\index.dat - 2009-01-16 02:38:22 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2009-01-19 06:30:48 32,768 ----a-w c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2002-08-29 10:00:00 345,600 ----a-w c:\windows\SYSTEM32\CONFMSP.DLL + 2008-04-14 00:11:51 357,888 ----a-w c:\windows\SYSTEM32\confmsp.dll - 2002-08-29 10:00:00 24,576 ----a-w c:\windows\SYSTEM32\CONIME.EXE + 2008-04-14 00:12:15 27,648 ----a-w c:\windows\SYSTEM32\conime.exe - 2002-08-29 10:00:00 14,877 ----a-w c:\windows\SYSTEM32\CORPOL.DLL + 2008-04-14 00:11:51 35,328 ----a-w c:\windows\SYSTEM32\corpol.dll + 2008-04-14 00:11:51 12,800 ------w c:\windows\SYSTEM32\credssp.dll - 2002-08-29 10:00:00 158,720 ----a-w c:\windows\SYSTEM32\CREDUI.DLL + 2008-04-14 00:11:51 163,840 ----a-w c:\windows\SYSTEM32\credui.dll - 2002-09-23 22:10:26 544,256 ----a-w c:\windows\SYSTEM32\crypt32.dll + 2008-04-14 00:11:51 599,040 ----a-w c:\windows\SYSTEM32\crypt32.dll - 2002-08-29 10:00:00 70,144 ----a-w c:\windows\SYSTEM32\CRYPTDLG.DLL + 2008-04-14 00:11:51 74,752 ----a-w c:\windows\SYSTEM32\cryptdlg.dll - 2002-08-29 10:00:00 29,184 ----a-w c:\windows\SYSTEM32\CRYPTDLL.DLL + 2008-04-14 00:11:51 33,280 ----a-w c:\windows\SYSTEM32\cryptdll.dll - 2002-08-29 10:00:00 48,640 ----a-w c:\windows\SYSTEM32\CRYPTEXT.DLL + 2008-04-14 00:11:51 53,760 ----a-w c:\windows\SYSTEM32\cryptext.dll - 2002-08-29 10:00:00 53,248 ----a-w c:\windows\SYSTEM32\CRYPTNET.DLL + 2008-04-14 00:11:51 64,512 ----a-w c:\windows\SYSTEM32\cryptnet.dll - 2003-03-26 00:40:14 53,760 ----a-w c:\windows\SYSTEM32\cryptsvc.dll + 2008-04-14 00:11:51 62,464 ----a-w c:\windows\SYSTEM32\cryptsvc.dll - 2003-07-24 21:40:22 477,696 ----a-w c:\windows\SYSTEM32\cryptui.dll + 2008-04-14 00:11:51 512,512 ----a-w c:\windows\SYSTEM32\cryptui.dll - 2004-10-28 01:29:54 92,160 ----a-w c:\windows\SYSTEM32\cscdll.dll + 2008-04-14 00:11:51 101,888 ----a-w c:\windows\SYSTEM32\cscdll.dll - 2002-08-29 10:00:00 102,450 ----a-w c:\windows\SYSTEM32\CSCRIPT.EXE + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\SYSTEM32\cscript.exe - 2002-08-29 10:00:00 307,712 ----a-w c:\windows\SYSTEM32\CSCUI.DLL + 2008-04-14 00:11:51 326,656 ----a-w c:\windows\SYSTEM32\cscui.dll - 2002-08-29 10:00:00 29,184 ----a-w c:\windows\SYSTEM32\CSRSRV.DLL + 2008-04-14 00:11:51 32,256 ----a-w c:\windows\SYSTEM32\csrsrv.dll - 2002-08-29 10:00:00 4,096 ----a-w c:\windows\SYSTEM32\CSRSS.EXE + 2008-04-14 00:12:15 6,144 ----a-w c:\windows\SYSTEM32\csrss.exe - 2002-08-29 10:00:00 13,312 ------w c:\windows\SYSTEM32\CTFMON.EXE + 2008-04-14 00:12:16 15,360 ----a-w c:\windows\SYSTEM32\ctfmon.exe - 2002-12-12 05:14:32 1,177,600 ----a-w c:\windows\SYSTEM32\d3d8.dll + 2008-04-14 00:11:51 1,179,648 ----a-w c:\windows\SYSTEM32\d3d8.dll - 2002-12-12 05:14:32 8,192 ----a-w c:\windows\SYSTEM32\d3d8thk.dll + 2008-04-14 00:11:51 8,192 ----a-w c:\windows\SYSTEM32\d3d8thk.dll - 2003-05-30 14:00:02 1,634,304 ----a-w c:\windows\SYSTEM32\d3d9.dll + 2008-04-14 00:11:51 1,689,088 ----a-w c:\windows\SYSTEM32\d3d9.dll - 2003-05-30 14:00:02 797,184 ----a-w c:\windows\SYSTEM32\d3dim700.dll + 2008-04-14 00:11:51 824,320 ----a-w c:\windows\SYSTEM32\d3dim700.dll - 2002-08-29 10:00:00 986,112 ----a-w c:\windows\SYSTEM32\DANIM.DLL + 2008-04-14 00:11:51 1,054,208 ----a-w c:\windows\SYSTEM32\danim.dll - 2002-08-29 10:00:00 51,712 ----a-w c:\windows\SYSTEM32\DATACLEN.DLL + 2008-04-14 00:11:51 54,272 ----a-w c:\windows\SYSTEM32\dataclen.dll - 2002-08-29 10:00:00 152,064 ----a-w c:\windows\SYSTEM32\DATIME.DLL + 2008-04-14 00:11:51 165,376 ----a-w c:\windows\SYSTEM32\datime.dll - 2002-08-29 10:00:00 22,016 ----a-w c:\windows\SYSTEM32\DAVCLNT.DLL + 2008-04-14 00:11:51 25,088 ----a-w c:\windows\SYSTEM32\davclnt.dll - 2002-08-29 10:00:00 489,984 ----a-w c:\windows\SYSTEM32\DBGHELP.DLL + 2008-04-14 00:11:51 640,000 ----a-w c:\windows\SYSTEM32\dbghelp.dll - 2002-08-29 10:00:00 24,576 ----a-w c:\windows\SYSTEM32\DBMSRPCN.DLL + 2008-04-14 00:11:51 24,576 ----a-w c:\windows\SYSTEM32\dbmsrpcn.dll - 2003-10-28 01:12:42 61,440 ----a-w c:\windows\SYSTEM32\DBnetlib.dll + 2008-04-14 00:11:51 110,592 ----a-w c:\windows\SYSTEM32\dbnetlib.dll - 2002-08-29 10:00:00 28,672 ----a-w c:\windows\SYSTEM32\DBNMPNTW.DLL + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\SYSTEM32\dbnmpntw.dll - 2002-08-29 10:00:00 1,740 ----a-w c:\windows\SYSTEM32\Dcache.bin + 2008-04-14 00:25:26 1,804 ----a-w c:\windows\SYSTEM32\dcache.bin - 2002-08-29 10:00:00 7,680 ----a-w c:\windows\SYSTEM32\DCIMAN32.DLL + 2008-04-14 00:11:51 8,704 ----a-w c:\windows\SYSTEM32\dciman32.dll - 2002-08-29 10:00:00 5,120 ----a-w c:\windows\SYSTEM32\DCOMCNFG.EXE + 2008-04-14 00:12:16 6,144 ----a-w c:\windows\SYSTEM32\dcomcnfg.exe - 2002-08-29 10:00:00 27,136 ----a-w c:\windows\SYSTEM32\DDESHARE.EXE + 2008-04-14 00:12:16 30,208 ----a-w c:\windows\SYSTEM32\ddeshare.exe - 2002-12-12 05:14:32 284,160 ----a-w c:\windows\SYSTEM32\ddraw.dll + 2008-04-14 00:11:51 279,552 ----a-w c:\windows\SYSTEM32\ddraw.dll - 2002-12-12 05:14:32 24,064 ----a-w c:\windows\SYSTEM32\ddrawex.dll + 2008-04-14 00:11:51 27,136 ----a-w c:\windows\SYSTEM32\ddrawex.dll - 2002-08-29 10:00:00 70,656 ----a-w c:\windows\SYSTEM32\DEFRAG.EXE + 2008-04-14 00:12:16 25,088 ----a-w c:\windows\SYSTEM32\defrag.exe - 2003-05-30 14:00:02 132,608 ----a-w c:\windows\SYSTEM32\devenum.dll + 2008-04-14 00:11:51 59,904 ----a-w c:\windows\SYSTEM32\devenum.dll - 2002-08-29 10:00:00 263,168 ----a-w c:\windows\SYSTEM32\DEVMGR.DLL + 2008-04-14 00:11:51 282,624 ----a-w c:\windows\SYSTEM32\devmgr.dll - 2002-08-29 10:00:00 76,288 ----a-w c:\windows\SYSTEM32\DFRGFAT.EXE + 2008-04-14 00:12:16 82,944 ----a-w c:\windows\SYSTEM32\dfrgfat.exe - 2002-08-29 10:00:00 99,328 ----a-w c:\windows\SYSTEM32\DFRGNTFS.EXE + 2008-04-14 00:12:16 105,472 ----a-w c:\windows\SYSTEM32\dfrgntfs.exe - 2002-08-29 10:00:00 35,328 ----a-w c:\windows\SYSTEM32\DFRGSNAP.DLL + 2008-04-14 00:11:51 39,424 ----a-w c:\windows\SYSTEM32\dfrgsnap.dll - 2002-08-29 10:00:00 113,152 ----a-w c:\windows\SYSTEM32\DFRGUI.DLL + 2008-04-14 00:11:51 124,416 ----a-w c:\windows\SYSTEM32\dfrgui.dll - 2002-08-29 10:00:00 25,600 ----a-w c:\windows\SYSTEM32\DFSSHLEX.DLL + 2008-04-14 00:11:51 28,672 ----a-w c:\windows\SYSTEM32\dfsshlex.dll - 2002-08-29 10:00:00 103,424 ----a-w c:\windows\SYSTEM32\DGNET.DLL + 2008-04-14 00:11:51 111,104 ----a-w c:\windows\SYSTEM32\dgnet.dll - 2003-10-07 01:30:25 99,840 ----a-w c:\windows\SYSTEM32\dhcpcsvc.dll + 2008-04-14 00:11:51 126,976 ----a-w c:\windows\SYSTEM32\dhcpcsvc.dll - 2002-08-29 10:00:00 370,176 ----a-w c:\windows\SYSTEM32\DHCPMON.DLL + 2008-04-14 00:11:52 379,904 ----a-w c:\windows\SYSTEM32\dhcpmon.dll + 2008-04-14 00:11:52 48,640 ------w c:\windows\SYSTEM32\dhcpqec.dll - 2002-08-29 10:00:00 79,360 ----a-w c:\windows\SYSTEM32\DIANTZ.EXE + 2008-04-14 00:12:17 87,040 ----a-w c:\windows\SYSTEM32\diantz.exe - 2002-08-29 10:00:00 55,296 ----a-w c:\windows\SYSTEM32\DIGEST.DLL + 2008-04-14 00:11:52 68,608 ----a-w c:\windows\SYSTEM32\digest.dll + 2008-04-14 00:11:52 19,456 ------w c:\windows\SYSTEM32\dimsntfy.dll + 2008-04-14 00:11:52 39,936 ------w c:\windows\SYSTEM32\dimsroam.dll - 2002-08-29 10:00:00 151,552 ----a-w c:\windows\SYSTEM32\DINPUT.DLL + 2008-04-14 00:11:52 158,720 ----a-w c:\windows\SYSTEM32\dinput.dll - 2002-08-29 10:00:00 168,960 ----a-w c:\windows\SYSTEM32\DINPUT8.DLL + 2008-04-14 00:11:52 181,760 ----a-w c:\windows\SYSTEM32\dinput8.dll - 2002-08-29 10:00:00 1,501,696 ----a-w c:\windows\SYSTEM32\DISKCOPY.DLL + 2008-04-14 00:11:52 1,504,256 ----a-w c:\windows\SYSTEM32\diskcopy.dll - 2002-08-29 10:00:00 145,920 ----a-w c:\windows\SYSTEM32\DISKPART.EXE + 2008-04-14 00:12:17 163,840 ----a-w c:\windows\SYSTEM32\diskpart.exe - 2002-08-29 10:00:00 45,083 ----a-w c:\windows\SYSTEM32\DISPEX.DLL + 2008-04-14 00:11:52 32,768 ----a-w c:\windows\SYSTEM32\dispex.dll + 2007-08-13 23:39:20 71,680 ------w c:\windows\SYSTEM32\DLLCACHE\admparse.dll + 2008-10-16 20:38:34 124,928 ------w c:\windows\SYSTEM32\DLLCACHE\advpack.dll + 2008-08-14 10:04:36 138,496 ------w c:\windows\SYSTEM32\DLLCACHE\afd.sys - 2005-02-18 20:09:14 1,017,856 ----a-w c:\windows\SYSTEM32\DLLCACHE\BROWSEUI.DLL + 2006-09-23 18:12:50 1,022,976 ------w c:\windows\SYSTEM32\DLLCACHE\browseui.dll - 2007-07-30 23:19:20 92,504 ----a-w c:\windows\SYSTEM32\DLLCACHE\cdm.dll + 2008-10-16 19:09:44 92,696 ----a-w c:\windows\SYSTEM32\DLLCACHE\cdm.dll + 2008-04-14 00:11:50 159,232 ------w c:\windows\SYSTEM32\DLLCACHE\cewmdm.dll + 2007-08-13 23:42:54 17,408 ------w c:\windows\SYSTEM32\DLLCACHE\corpol.dll + 2008-05-07 09:07:23 135,168 ------w c:\windows\SYSTEM32\DLLCACHE\cscript.exe + 2007-08-13 23:54:10 33,792 ----a-w c:\windows\SYSTEM32\DLLCACHE\custsat.dll + 2008-04-14 00:12:17 294,912 ------w c:\windows\SYSTEM32\DLLCACHE\dlimport.exe + 2008-06-20 17:46:57 147,968 ------w c:\windows\SYSTEM32\DLLCACHE\dnsapi.dll + 2008-04-14 00:13:00 299,520 ------w c:\windows\SYSTEM32\DLLCACHE\drmclien.dll + 2008-04-14 00:11:52 87,040 ------w c:\windows\SYSTEM32\DLLCACHE\drmstor.dll + 2008-04-14 00:11:52 498,742 ------w c:\windows\SYSTEM32\DLLCACHE\dxmasf.dll + 2008-10-16 20:38:34 347,136 ------w c:\windows\SYSTEM32\DLLCACHE\dxtmsft.dll + 2008-10-16 20:38:34 214,528 ------w c:\windows\SYSTEM32\DLLCACHE\dxtrans.dll - 2004-03-06 02:16:12 226,816 ----a-w c:\windows\SYSTEM32\DLLCACHE\ES.DLL + 2008-07-07 20:26:58 253,952 ------w c:\windows\SYSTEM32\DLLCACHE\es.dll + 2008-10-16 20:38:35 133,120 ------w c:\windows\SYSTEM32\DLLCACHE\extmgr.dll - 2004-03-30 01:48:36 257,536 ----a-w c:\windows\SYSTEM32\DLLCACHE\GDI32.DLL + 2008-10-23 12:36:14 286,720 ------w c:\windows\SYSTEM32\DLLCACHE\gdi32.dll + 2007-08-13 23:18:02 60,416 ------w c:\windows\SYSTEM32\DLLCACHE\hmmapi.dll + 2008-10-16 13:11:09 70,656 ------w c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe + 2008-10-16 20:38:35 153,088 ------w c:\windows\SYSTEM32\DLLCACHE\ieakeng.dll + 2008-10-16 20:38:35 230,400 ------w c:\windows\SYSTEM32\DLLCACHE\ieaksie.dll + 2008-10-15 07:04:53 161,792 ------w c:\windows\SYSTEM32\DLLCACHE\ieakui.dll + 2008-10-16 20:38:35 384,512 ------w c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll + 2007-08-13 23:44:02 69,120 ------w c:\windows\SYSTEM32\DLLCACHE\iedw.exe + 2007-08-13 23:45:18 78,336 ------w c:\windows\SYSTEM32\DLLCACHE\ieencode.dll + 2007-08-13 23:54:10 191,488 ------w c:\windows\SYSTEM32\DLLCACHE\iepeers.dll + 2008-10-16 20:38:37 44,544 ------w c:\windows\SYSTEM32\DLLCACHE\iernonce.dll + 2007-08-13 23:39:12 55,296 ------w c:\windows\SYSTEM32\DLLCACHE\iesetup.dll + 2008-10-15 07:06:26 633,632 ------w c:\windows\SYSTEM32\DLLCACHE\iexplore.exe + 2007-08-13 23:36:06 36,352 ------w c:\windows\SYSTEM32\DLLCACHE\imgutil.dll + 2007-08-13 23:39:02 92,672 ------w c:\windows\SYSTEM32\DLLCACHE\inseng.dll - 2003-01-13 19:57:58 589,881 ----a-w c:\windows\SYSTEM32\DLLCACHE\jscript.dll + 2008-05-09 10:53:39 512,000 ------w c:\windows\SYSTEM32\DLLCACHE\jscript.dll + 2008-10-16 20:38:37 27,648 ------w c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll + 2008-04-14 00:11:56 6,656 ------w c:\windows\SYSTEM32\DLLCACHE\laprxy.dll + 2007-08-13 23:44:18 40,960 ------w c:\windows\SYSTEM32\DLLCACHE\licmgr10.dll + 2008-06-10 08:11:20 103,936 ------w c:\windows\SYSTEM32\DLLCACHE\logagent.exe + 2008-04-14 00:12:25 786,432 ------w c:\windows\SYSTEM32\DLLCACHE\migrate.exe + 2008-04-14 00:11:57 310,272 ------w c:\windows\SYSTEM32\DLLCACHE\mp43dmod.dll + 2008-04-14 00:11:57 384,512 ------w c:\windows\SYSTEM32\DLLCACHE\mp4sdmod.dll + 2008-04-14 00:11:57 240,640 ------w c:\windows\SYSTEM32\DLLCACHE\mpg4dmod.dll + 2008-04-14 00:12:27 123,392 ------w c:\windows\SYSTEM32\DLLCACHE\mplay32.exe + 2008-04-14 00:12:27 4,639 ------w c:\windows\SYSTEM32\DLLCACHE\mplayer2.exe + 2008-04-14 00:11:57 368,640 ------w c:\windows\SYSTEM32\DLLCACHE\mpvis.dll + 2008-06-24 16:43:16 74,240 ------w c:\windows\SYSTEM32\DLLCACHE\mscms.dll + 2008-04-14 00:10:08 4,126 ------w c:\windows\SYSTEM32\DLLCACHE\msdxmlc.dll + 2007-08-13 23:32:30 45,568 ------w c:\windows\SYSTEM32\DLLCACHE\mshta.exe + 2008-10-16 20:38:38 477,696 ------w c:\windows\SYSTEM32\DLLCACHE\mshtmled.dll + 2007-08-13 23:01:12 48,128 ------w c:\windows\SYSTEM32\DLLCACHE\mshtmler.dll + 2007-08-13 23:54:10 156,160 ------w c:\windows\SYSTEM32\DLLCACHE\msls31.dll + 2008-04-14 00:12:55 259,072 ------w c:\windows\SYSTEM32\DLLCACHE\msnetobj.dll + 2008-04-14 00:12:00 52,224 ------w c:\windows\SYSTEM32\DLLCACHE\mspmsnsv.dll + 2008-04-14 00:12:00 201,728 ------w c:\windows\SYSTEM32\DLLCACHE\mspmsp.dll + 2008-10-16 20:38:38 193,024 ------w c:\windows\SYSTEM32\DLLCACHE\msrating.dll + 2008-04-14 00:12:56 356,352 ------w c:\windows\SYSTEM32\DLLCACHE\msscp.dll + 2008-10-16 20:38:39 671,232 ------w c:\windows\SYSTEM32\DLLCACHE\mstime.dll + 2008-04-14 00:12:01 245,760 ------w c:\windows\SYSTEM32\DLLCACHE\mswmdm.dll + 2008-06-20 17:46:57 245,248 ------w c:\windows\SYSTEM32\DLLCACHE\mswsock.dll + 2008-09-10 01:14:56 1,307,648 ------w c:\windows\SYSTEM32\DLLCACHE\msxml6.dll + 2008-04-13 17:27:18 79,872 ------w c:\windows\SYSTEM32\DLLCACHE\msxml6r.dll + 2008-04-14 00:12:56 226,816 ------w c:\windows\SYSTEM32\DLLCACHE\npdrmv2.dll + 2008-04-14 00:12:02 364,544 ------w c:\windows\SYSTEM32\DLLCACHE\npdsplay.dll + 2008-04-14 00:12:02 10,240 ------w c:\windows\SYSTEM32\DLLCACHE\npwmsdrm.dll + 2008-10-16 20:38:39 102,912 ------w c:\windows\SYSTEM32\DLLCACHE\occache.dll + 2008-10-16 20:38:39 44,544 ------w c:\windows\SYSTEM32\DLLCACHE\pngfilt.dll - 2003-05-30 14:00:02 1,962,496 ----a-w c:\windows\SYSTEM32\DLLCACHE\quartz.dll + 2008-05-07 05:12:40 1,288,192 ------w c:\windows\SYSTEM32\DLLCACHE\quartz.dll + 2008-05-09 10:53:39 180,224 ------w c:\windows\SYSTEM32\DLLCACHE\scrobj.dll + 2008-05-09 10:53:40 172,032 ------w c:\windows\SYSTEM32\DLLCACHE\scrrun.dll + 2008-04-14 00:12:35 774,144 ------w c:\windows\SYSTEM32\DLLCACHE\setup_wm.exe - 2004-12-07 23:11:50 402,432 ----a-w c:\windows\SYSTEM32\DLLCACHE\SHLWAPI.DLL + 2006-09-23 18:12:50 474,112 ------w c:\windows\SYSTEM32\DLLCACHE\shlwapi.dll + 2008-04-14 00:12:05 152,064 ------w c:\windows\SYSTEM32\DLLCACHE\shmedia.dll + 2008-10-03 10:02:42 247,326 ------w c:\windows\SYSTEM32\DLLCACHE\strmdll.dll + 2008-06-20 11:51:12 361,600 ------w c:\windows\SYSTEM32\DLLCACHE\tcpip.sys + 2008-06-20 11:08:27 225,856 ------w c:\windows\SYSTEM32\DLLCACHE\tcpip6.sys + 2008-04-14 00:12:38 208,896 ------w c:\windows\SYSTEM32\DLLCACHE\unregmp2.exe + 2008-10-16 20:38:39 105,984 ------w c:\windows\SYSTEM32\DLLCACHE\url.dll + 2008-05-09 10:53:40 430,080 ------w c:\windows\SYSTEM32\DLLCACHE\vbscript.dll + 2008-05-27 17:23:58 765,952 ------w c:\windows\SYSTEM32\DLLCACHE\vgx.dll + 2008-10-16 20:38:39 233,472 ------w c:\windows\SYSTEM32\DLLCACHE\webcheck.dll + 2008-04-14 00:12:09 408,064 ------w c:\windows\SYSTEM32\DLLCACHE\wmadmod.dll + 2008-04-14 00:12:09 670,720 ------w c:\windows\SYSTEM32\DLLCACHE\wmadmoe.dll + 2008-04-14 00:12:09 230,912 ------w c:\windows\SYSTEM32\DLLCACHE\wmasf.dll + 2008-04-14 00:12:09 27,136 ------w c:\windows\SYSTEM32\DLLCACHE\wmdmlog.dll + 2008-04-14 00:12:09 23,552 ------w c:\windows\SYSTEM32\DLLCACHE\wmdmps.dll + 2008-04-13 17:23:24 168,448 ------w c:\windows\SYSTEM32\DLLCACHE\wmerror.dll + 2008-04-14 00:12:09 151,552 ------w c:\windows\SYSTEM32\DLLCACHE\wmidx.dll + 2008-06-10 11:11:46 1,053,696 ------w c:\windows\SYSTEM32\DLLCACHE\WMNetmgr.dll + 2008-04-14 00:12:09 4,874,240 ------w c:\windows\SYSTEM32\DLLCACHE\wmp.dll + 2008-04-14 00:12:09 114,688 ------w c:\windows\SYSTEM32\DLLCACHE\wmpasf.dll + 2008-04-14 00:12:09 98,304 ------w c:\windows\SYSTEM32\DLLCACHE\wmpband.dll + 2008-04-14 00:12:09 20,480 ------w c:\windows\SYSTEM32\DLLCACHE\wmpcd.dll - 2003-09-18 11:53:40 1,302,528 ----a-w c:\windows\SYSTEM32\DLLCACHE\wmpcore.dll + 2008-04-14 00:12:09 20,480 ------w c:\windows\SYSTEM32\DLLCACHE\wmpcore.dll + 2008-04-14 00:12:09 233,472 ------w c:\windows\SYSTEM32\DLLCACHE\wmpdxm.dll - 2003-04-11 20:11:34 520,192 ----a-w c:\windows\SYSTEM32\DLLCACHE\wmplayer.exe + 2008-04-14 00:12:40 73,728 ------w c:\windows\SYSTEM32\DLLCACHE\wmplayer.exe + 2008-04-13 17:28:21 2,940,928 ------w c:\windows\SYSTEM32\DLLCACHE\wmploc.dll + 2008-04-14 00:12:09 221,184 ------w c:\windows\SYSTEM32\DLLCACHE\wmpns.dll + 2008-04-14 00:12:09 102,400 ------w c:\windows\SYSTEM32\DLLCACHE\wmpshell.dll + 2008-04-14 00:12:09 20,480 ------w c:\windows\SYSTEM32\DLLCACHE\wmpui.dll + 2008-04-14 00:12:09 759,296 ------w c:\windows\SYSTEM32\DLLCACHE\wmsdmod.dll + 2008-04-14 00:12:09 115,200 ------w c:\windows\SYSTEM32\DLLCACHE\wmsdmoe.dll + 2008-04-14 00:12:09 1,119,744 ------w c:\windows\SYSTEM32\DLLCACHE\wmsdmoe2.dll + 2008-04-14 00:12:09 485,376 ------w c:\windows\SYSTEM32\DLLCACHE\wmspdmod.dll + 2008-04-14 00:12:10 897,024 ------w c:\windows\SYSTEM32\DLLCACHE\wmspdmoe.dll + 2008-04-14 00:12:10 303,616 ------w c:\windows\SYSTEM32\DLLCACHE\wmstream.dll + 2008-11-07 21:45:32 2,174,976 ------w c:\windows\SYSTEM32\DLLCACHE\WMVCore.dll + 2008-04-14 00:12:10 809,984 ------w c:\windows\SYSTEM32\DLLCACHE\wmvdmod.dll + 2008-04-14 00:12:10 1,001,472 ------w c:\windows\SYSTEM32\DLLCACHE\wmvdmoe2.dll + 2008-05-08 11:24:44 155,648 ------w c:\windows\SYSTEM32\DLLCACHE\wscript.exe + 2008-05-09 10:53:40 90,112 ------w c:\windows\SYSTEM32\DLLCACHE\wshext.dll + 2008-10-16 19:12:20 561,688 ----a-w c:\windows\SYSTEM32\DLLCACHE\wuapi.dll - 2007-07-30 23:19:16 53,080 ----a-w c:\windows\SYSTEM32\DLLCACHE\wuauclt.exe + 2008-10-16 19:09:44 51,224 ----a-w c:\windows\SYSTEM32\DLLCACHE\wuauclt.exe - 2007-07-30 23:19:42 1,712,984 ----a-w c:\windows\SYSTEM32\DLLCACHE\wuaueng.dll + 2008-10-16 19:13:40 1,809,944 ----a-w c:\windows\SYSTEM32\DLLCACHE\wuaueng.dll + 2008-10-16 19:08:58 34,328 ----a-w c:\windows\SYSTEM32\DLLCACHE\wups.dll - 2002-08-29 10:00:00 4,608 ----a-w c:\windows\SYSTEM32\DLLHOST.EXE + 2008-04-14 00:12:17 5,120 ----a-w c:\windows\SYSTEM32\dllhost.exe - 2002-08-29 10:00:00 204,800 ----a-w c:\windows\SYSTEM32\DMADMIN.EXE + 2008-04-14 00:12:17 224,768 ----a-w c:\windows\SYSTEM32\dmadmin.exe - 2002-12-12 05:14:32 27,136 ----a-w c:\windows\SYSTEM32\dmband.dll + 2008-04-14 00:11:52 28,672 ----a-w c:\windows\SYSTEM32\dmband.dll - 2002-12-12 05:14:32 58,368 ----a-w c:\windows\SYSTEM32\dmcompos.dll + 2008-04-14 00:11:52 61,440 ----a-w c:\windows\SYSTEM32\dmcompos.dll - 2002-08-29 10:00:00 273,920 ----a-w c:\windows\SYSTEM32\DMDLGS.DLL + 2008-04-14 00:11:52 285,184 ----a-w c:\windows\SYSTEM32\dmdlgs.dll - 2002-08-29 10:00:00 184,320 ----a-w c:\windows\SYSTEM32\DMDSKMGR.DLL + 2008-04-14 00:11:52 200,704 ----a-w c:\windows\SYSTEM32\dmdskmgr.dll - 2002-12-12 05:14:32 171,520 ----a-w c:\windows\SYSTEM32\dmime.dll + 2008-04-14 00:11:52 181,248 ----a-w c:\windows\SYSTEM32\dmime.dll - 2002-12-12 05:14:32 33,280 ----a-w c:\windows\SYSTEM32\dmloader.dll + 2008-04-14 00:11:52 35,840 ----a-w c:\windows\SYSTEM32\dmloader.dll - 2002-08-29 10:00:00 14,336 ----a-w c:\windows\SYSTEM32\DMREMOTE.EXE + 2008-04-14 00:12:17 15,872 ----a-w c:\windows\SYSTEM32\dmremote.exe - 2002-12-12 05:14:32 76,800 ----a-w c:\windows\SYSTEM32\dmscript.dll + 2008-04-14 00:11:52 82,432 ----a-w c:\windows\SYSTEM32\dmscript.dll - 2002-08-29 10:00:00 21,504 ----a-w c:\windows\SYSTEM32\DMSERVER.DLL + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\SYSTEM32\dmserver.dll - 2002-12-12 05:14:32 98,816 ----a-w c:\windows\SYSTEM32\dmstyle.dll + 2008-04-14 00:11:52 105,984 ----a-w c:\windows\SYSTEM32\dmstyle.dll - 2002-12-12 05:14:32 100,864 ----a-w c:\windows\SYSTEM32\dmsynth.dll + 2008-04-14 00:11:52 103,424 ----a-w c:\windows\SYSTEM32\dmsynth.dll - 2002-12-12 05:14:32 116,736 ----a-w c:\windows\SYSTEM32\dmusic.dll + 2008-04-14 00:11:52 104,448 ----a-w c:\windows\SYSTEM32\dmusic.dll - 2002-08-29 10:00:00 50,688 ----a-w c:\windows\SYSTEM32\DMUTIL.DLL + 2008-04-14 00:11:52 52,224 ----a-w c:\windows\SYSTEM32\dmutil.dll - 2002-08-29 10:00:00 139,264 ----a-w c:\windows\SYSTEM32\DNSAPI.DLL + 2008-06-20 17:46:57 147,968 ----a-w c:\windows\SYSTEM32\dnsapi.dll - 2002-08-29 10:00:00 44,032 ----a-w c:\windows\SYSTEM32\DNSRSLVR.DLL + 2008-04-14 00:11:52 45,568 ----a-w c:\windows\SYSTEM32\dnsrslvr.dll - 2002-08-29 10:00:00 45,568 ----a-w c:\windows\SYSTEM32\DOCPROP2.DLL + 2008-04-14 00:11:52 48,128 ----a-w c:\windows\SYSTEM32\docprop2.dll - 2002-08-29 10:00:00 53,840 ----a-w c:\windows\SYSTEM32\DOSX.EXE + 2004-08-04 05:51:21 53,840 ----a-w c:\windows\SYSTEM32\dosx.exe + 2008-04-14 00:11:52 26,112 ------w c:\windows\SYSTEM32\dot3api.dll + 2008-04-14 00:11:52 57,856 ------w c:\windows\SYSTEM32\dot3cfg.dll + 2008-04-14 00:11:52 9,216 ------w c:\windows\SYSTEM32\dot3dlg.dll + 2008-04-14 00:11:52 39,936 ------w c:\windows\SYSTEM32\dot3gpclnt.dll + 2008-04-14 00:11:52 56,320 ------w c:\windows\SYSTEM32\dot3msm.dll + 2008-04-14 00:11:52 132,096 ------w c:\windows\SYSTEM32\dot3svc.dll + 2008-04-14 00:11:52 650,752 ------w c:\windows\SYSTEM32\dot3ui.dll - 2002-08-29 10:00:00 115,200 ----a-w c:\windows\SYSTEM32\DPCDLL.DLL + 2008-04-13 21:00:49 103,424 ----a-w c:\windows\SYSTEM32\dpcdll.dll - 2002-12-12 05:14:32 28,160 ----a-w c:\windows\SYSTEM32\dplaysvr.exe + 2008-04-14 00:12:17 29,696 ----a-w c:\windows\SYSTEM32\dplaysvr.exe - 2004-04-14 19:56:46 219,648 ----a-w c:\windows\SYSTEM32\dplayx.dll + 2008-04-14 00:11:52 229,888 ----a-w c:\windows\SYSTEM32\dplayx.dll - 2002-12-12 05:14:32 77,824 ----a-w c:\windows\SYSTEM32\dpmodemx.dll + 2008-04-14 00:11:52 23,552 ----a-w c:\windows\SYSTEM32\dpmodemx.dll - 2002-12-12 05:14:32 3,072 ----a-w c:\windows\SYSTEM32\dpnaddr.dll + 2008-04-14 00:09:19 3,072 ----a-w c:\windows\SYSTEM32\dpnaddr.dll - 2002-12-12 05:14:32 723,968 ----a-w c:\windows\SYSTEM32\dpnet.dll + 2008-04-14 00:11:52 375,296 ----a-w c:\windows\SYSTEM32\dpnet.dll - 2003-03-24 14:00:02 32,768 ----a-w c:\windows\SYSTEM32\dpnhpast.dll + 2008-04-14 00:11:52 35,328 ----a-w c:\windows\SYSTEM32\dpnhpast.dll - 2003-03-24 14:00:02 68,096 ----a-w c:\windows\SYSTEM32\dpnhupnp.dll + 2008-04-14 00:11:52 60,928 ----a-w c:\windows\SYSTEM32\dpnhupnp.dll - 2002-12-12 05:14:32 3,072 ----a-w c:\windows\SYSTEM32\dpnlobby.dll + 2008-04-14 00:09:20 3,072 ----a-w c:\windows\SYSTEM32\dpnlobby.dll - 2002-12-12 05:14:32 16,896 ----a-w c:\windows\SYSTEM32\dpnsvr.exe + 2008-04-14 00:12:17 17,920 ----a-w c:\windows\SYSTEM32\dpnsvr.exe - 2002-12-12 05:14:32 19,968 ----a-w c:\windows\SYSTEM32\dpvacm.dll + 2008-04-14 00:11:52 21,504 ----a-w c:\windows\SYSTEM32\dpvacm.dll - 2002-12-12 05:14:32 381,952 ----a-w c:\windows\SYSTEM32\dpvoice.dll + 2008-04-14 00:11:52 212,480 ----a-w c:\windows\SYSTEM32\dpvoice.dll - 2002-12-12 05:14:32 80,896 ----a-w c:\windows\SYSTEM32\dpvsetup.exe + 2008-04-14 00:12:18 83,456 ----a-w c:\windows\SYSTEM32\dpvsetup.exe - 2002-12-12 05:14:32 112,128 ----a-w c:\windows\SYSTEM32\dpvvox.dll + 2008-04-14 00:11:52 116,736 ----a-w c:\windows\SYSTEM32\dpvvox.dll - 2004-04-13 04:11:26 76,800 ----a-w c:\windows\SYSTEM32\dpwsockx.dll + 2008-04-14 00:11:52 57,344 ----a-w c:\windows\SYSTEM32\dpwsockx.dll - 2002-08-29 10:00:00 179,328 ----a-w c:\windows\SYSTEM32\DRIVERS\ACPI.SYS + 2008-04-13 18:36:35 187,776 ----a-w c:\windows\SYSTEM32\DRIVERS\acpi.sys + 2008-04-14 00:11:48 4,255 ------w c:\windows\SYSTEM32\DRIVERS\adv01nt5.dll + 2008-04-14 00:11:48 3,967 ------w c:\windows\SYSTEM32\DRIVERS\adv02nt5.dll + 2008-04-14 00:11:48 3,615 ------w c:\windows\SYSTEM32\DRIVERS\adv05nt5.dll + 2008-04-14 00:11:48 3,647 ------w c:\windows\SYSTEM32\DRIVERS\adv07nt5.dll + 2008-04-14 00:11:48 3,135 ------w c:\windows\SYSTEM32\DRIVERS\adv08nt5.dll + 2008-04-14 00:11:48 3,711 ------w c:\windows\SYSTEM32\DRIVERS\adv09nt5.dll + 2008-04-14 00:11:48 3,775 ------w c:\windows\SYSTEM32\DRIVERS\adv11nt5.dll - 2002-08-29 04:16:38 142,208 ----a-w c:\windows\SYSTEM32\DRIVERS\aec.sys + 2008-04-13 16:39:23 142,592 ----a-w c:\windows\SYSTEM32\DRIVERS\aec.sys - 2002-08-29 10:00:00 131,968 ----a-w c:\windows\SYSTEM32\DRIVERS\AFD.SYS + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\SYSTEM32\DRIVERS\afd.sys - 2001-08-17 18:58:00 25,472 ----a-w c:\windows\SYSTEM32\DRIVERS\AGP440.SYS + 2008-04-13 18:36:38 42,368 ----a-w c:\windows\SYSTEM32\DRIVERS\agp440.sys - 2001-08-17 18:58:02 29,056 ----a-w c:\windows\SYSTEM32\DRIVERS\AGPCPQ.SYS + 2008-04-13 18:36:39 44,928 ----a-w c:\windows\SYSTEM32\DRIVERS\agpcpq.sys - 2001-08-17 18:58:00 27,648 ----a-w c:\windows\SYSTEM32\DRIVERS\ALIM1541.SYS + 2008-04-13 18:36:38 42,752 ----a-w c:\windows\SYSTEM32\DRIVERS\alim1541.sys - 2001-08-17 18:58:02 27,648 ----a-w c:\windows\SYSTEM32\DRIVERS\AMDAGP.SYS + 2008-04-13 18:36:39 43,008 ----a-w c:\windows\SYSTEM32\DRIVERS\amdagp.sys - 2002-08-29 10:00:00 32,000 ----a-w c:\windows\SYSTEM32\DRIVERS\AMDK6.SYS + 2008-04-13 18:31:32 37,376 ----a-w c:\windows\SYSTEM32\DRIVERS\amdk6.sys - 2002-08-29 10:00:00 32,512 ----a-w c:\windows\SYSTEM32\DRIVERS\AMDK7.SYS + 2008-04-13 18:31:33 37,760 ----a-w c:\windows\SYSTEM32\DRIVERS\amdk7.sys - 2002-08-29 10:00:00 57,344 ----a-w c:\windows\SYSTEM32\DRIVERS\ARP1394.SYS + 2008-04-13 18:51:25 60,800 ----a-w c:\windows\SYSTEM32\DRIVERS\arp1394.sys - 2002-08-29 10:00:00 13,568 ----a-w c:\windows\SYSTEM32\DRIVERS\ASYNCMAC.SYS + 2008-04-13 18:57:27 14,336 ----a-w c:\windows\SYSTEM32\DRIVERS\asyncmac.sys - 2003-04-23 14:29:54 87,296 ----a-w c:\windows\SYSTEM32\DRIVERS\atapi.sys + 2008-04-13 18:40:30 96,512 ----a-w c:\windows\SYSTEM32\DRIVERS\atapi.sys + 2004-08-04 05:29:29 56,623 ------w c:\windows\SYSTEM32\DRIVERS\ati1btxx.sys + 2004-08-04 05:29:29 11,615 ------w c:\windows\SYSTEM32\DRIVERS\ati1mdxx.sys + 2004-08-04 05:29:29 12,047 ------w c:\windows\SYSTEM32\DRIVERS\ati1pdxx.sys + 2004-08-04 05:29:30 30,671 ------w c:\windows\SYSTEM32\DRIVERS\ati1raxx.sys + 2004-08-04 05:29:30 63,663 ------w c:\windows\SYSTEM32\DRIVERS\ati1rvxx.sys + 2004-08-04 05:29:31 26,367 ------w c:\windows\SYSTEM32\DRIVERS\ati1snxx.sys + 2004-08-04 05:29:31 21,343 ------w c:\windows\SYSTEM32\DRIVERS\ati1ttxx.sys + 2004-08-04 05:29:31 36,463 ------w c:\windows\SYSTEM32\DRIVERS\ati1tuxx.sys + 2004-08-04 05:29:31 29,455 ------w c:\windows\SYSTEM32\DRIVERS\ati1xbxx.sys + 2004-08-04 05:29:31 34,735 ------w c:\windows\SYSTEM32\DRIVERS\ati1xsxx.sys + 2004-08-04 05:29:26 327,040 ------w c:\windows\SYSTEM32\DRIVERS\ati2mtaa.sys + 2004-08-04 05:29:26 701,440 ------w c:\windows\SYSTEM32\DRIVERS\ati2mtag.sys + 2004-08-04 05:29:27 57,856 ------w c:\windows\SYSTEM32\DRIVERS\atinbtxx.sys + 2004-08-04 05:29:28 13,824 ------w c:\windows\SYSTEM32\DRIVERS\atinmdxx.sys + 2004-08-04 05:29:29 14,336 ------w c:\windows\SYSTEM32\DRIVERS\atinpdxx.sys + 2004-08-04 05:29:29 52,224 ------w c:\windows\SYSTEM32\DRIVERS\atinraxx.sys + 2004-08-04 05:29:30 104,960 ------w c:\windows\SYSTEM32\DRIVERS\atinrvxx.sys + 2004-08-04 05:29:30 28,672 ------w c:\windows\SYSTEM32\DRIVERS\atinsnxx.sys + 2004-08-04 05:29:30 13,824 ------w c:\windows\SYSTEM32\DRIVERS\atinttxx.sys + 2004-08-04 05:29:31 73,216 ------w c:\windows\SYSTEM32\DRIVERS\atintuxx.sys + 2004-08-04 05:29:31 31,744 ------w c:\windows\SYSTEM32\DRIVERS\atinxbxx.sys + 2004-08-04 05:29:31 63,488 ------w c:\windows\SYSTEM32\DRIVERS\atinxsxx.sys - 2002-08-29 10:00:00 57,216 ----a-w c:\windows\SYSTEM32\DRIVERS\ATMARPC.SYS + 2008-04-13 18:51:25 59,904 ----a-w c:\windows\SYSTEM32\DRIVERS\atmarpc.sys - 2002-08-29 10:00:00 53,888 ----a-w c:\windows\SYSTEM32\DRIVERS\ATMLANE.SYS + 2008-04-13 18:51:30 55,808 ----a-w c:\windows\SYSTEM32\DRIVERS\atmlane.sys + 2008-04-14 00:11:50 21,183 ------w c:\windows\SYSTEM32\DRIVERS\atv01nt5.dll + 2008-04-14 00:11:50 11,359 ------w c:\windows\SYSTEM32\DRIVERS\atv02nt5.dll + 2008-04-14 00:11:50 25,471 ------w c:\windows\SYSTEM32\DRIVERS\atv04nt5.dll + 2008-04-14 00:11:50 14,143 ------w c:\windows\SYSTEM32\DRIVERS\atv06nt5.dll + 2008-04-14 00:11:50 17,279 ------w c:\windows\SYSTEM32\DRIVERS\atv10nt5.dll + 2009-01-19 07:23:34 26,824 ----a-w c:\windows\SYSTEM32\DRIVERS\avgmfx86.sys - 2003-02-17 15:16:26 11,392 ----a-w c:\windows\SYSTEM32\DRIVERS\bdasup.sys + 2008-04-13 18:46:21 11,776 ----a-w c:\windows\SYSTEM32\DRIVERS\bdasup.sys - 2002-08-29 10:00:00 68,864 ----a-w c:\windows\SYSTEM32\DRIVERS\BRIDGE.SYS + 2008-04-13 18:53:23 71,552 ----a-w c:\windows\SYSTEM32\DRIVERS\bridge.sys + 2008-04-13 18:46:33 17,024 ------w c:\windows\SYSTEM32\DRIVERS\bthenum.sys + 2008-04-13 18:46:33 37,888 ------w c:\windows\SYSTEM32\DRIVERS\bthmodem.sys + 2008-04-13 18:51:34 101,120 ------w c:\windows\SYSTEM32\DRIVERS\bthpan.sys + 2008-06-13 11:05:51 272,128 ------w c:\windows\SYSTEM32\DRIVERS\bthport.sys + 2008-04-13 18:46:31 36,480 ------w c:\windows\SYSTEM32\DRIVERS\bthprint.sys + 2008-04-13 18:46:29 18,944 ------w c:\windows\SYSTEM32\DRIVERS\bthusb.sys - 2003-02-17 15:16:26 16,384 ----a-w c:\windows\SYSTEM32\DRIVERS\ccdecode.sys + 2008-04-13 18:46:23 17,024 ----a-w c:\windows\SYSTEM32\DRIVERS\ccdecode.sys - 2002-08-29 10:00:00 59,648 ----a-w c:\windows\SYSTEM32\DRIVERS\CDFS.SYS + 2008-04-13 19:14:21 63,744 ----a-w c:\windows\SYSTEM32\DRIVERS\cdfs.sys - 2002-08-29 10:00:00 47,488 ----a-w c:\windows\SYSTEM32\DRIVERS\CDROM.SYS + 2008-04-13 18:40:46 62,976 ----a-w c:\windows\SYSTEM32\DRIVERS\cdrom.sys + 2008-04-14 00:11:50 15,423 ------w c:\windows\SYSTEM32\DRIVERS\ch7xxnt5.dll - 2002-08-29 10:00:00 46,336 ----a-w c:\windows\SYSTEM32\DRIVERS\CLASSPNP.SYS + 2008-04-13 19:16:22 49,536 ----a-w c:\windows\SYSTEM32\DRIVERS\classpnp.sys - 2002-08-29 10:00:00 31,488 ----a-w c:\windows\SYSTEM32\DRIVERS\CRUSOE.SYS + 2008-04-13 18:31:32 36,736 ----a-w c:\windows\SYSTEM32\DRIVERS\crusoe.sys - 2002-08-29 10:00:00 33,792 ----a-w c:\windows\SYSTEM32\DRIVERS\DISK.SYS + 2008-04-13 18:40:47 36,352 ----a-w c:\windows\SYSTEM32\DRIVERS\disk.sys - 2002-08-29 10:00:00 13,184 ----a-w c:\windows\SYSTEM32� |