- 2001-08-23 12:00:00 90,112 ----a-w c:\windows\system32\mycomput.dll
+ 2004-08-04 10:00:00 90,112 ----a-w c:\windows\system32\mycomput.dll
- 2008-04-14 00:12:01 90,624 ----a-w c:\windows\system32\mydocs.dll
+ 2004-08-04 10:00:00 90,624 ----a-w c:\windows\system32\mydocs.dll
- 2008-04-14 00:12:29 53,760 ----a-w c:\windows\system32\narrator.exe
+ 2004-08-04 10:00:00 53,760 ----a-w c:\windows\system32\narrator.exe
- 2001-08-23 12:00:00 35,840 ----a-w c:\windows\system32\narrhook.dll
+ 2004-08-04 10:00:00 35,840 ----a-w c:\windows\system32\narrhook.dll
- 2001-08-23 12:00:00 20,480 ----a-w c:\windows\system32\nbtstat.exe
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\nbtstat.exe
- 2008-04-14 00:12:01 36,352 ----a-w c:\windows\system32\ncobjapi.dll
+ 2004-08-04 10:00:00 36,352 ----a-w c:\windows\system32\ncobjapi.dll
- 2001-08-23 12:00:00 7,680 ----a-w c:\windows\system32\ncxpnt.dll
+ 2004-08-04 10:00:00 7,680 ----a-w c:\windows\system32\ncxpnt.dll
- 2008-04-14 00:12:01 17,920 ----a-w c:\windows\system32\nddeapi.dll
+ 2004-08-04 10:00:00 17,920 ----a-w c:\windows\system32\nddeapi.dll
- 2008-04-14 00:12:29 4,096 ----a-w c:\windows\system32\nddeapir.exe
+ 2004-08-04 10:00:00 4,096 ----a-w c:\windows\system32\nddeapir.exe
- 2008-04-14 00:12:01 18,944 ----a-w c:\windows\system32\nddenb32.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\nddenb32.dll
- 2008-04-14 00:12:29 42,496 ----a-w c:\windows\system32\net.exe
+ 2004-08-04 10:00:00 42,496 ----a-w c:\windows\system32\net.exe
- 2008-04-14 00:12:29 124,928 ----a-w c:\windows\system32\net1.exe
+ 2004-08-04 10:00:00 124,928 ----a-w c:\windows\system32\net1.exe
- 2001-08-23 12:00:00 108,464 ----a-w c:\windows\system32\netapi.dll
+ 2004-08-04 10:00:00 108,464 ----a-w c:\windows\system32\netapi.dll
- 2008-10-15 16:34:24 337,408 ----a-w c:\windows\system32\netapi32.dll
+ 2004-08-04 10:00:00 332,288 ----a-w c:\windows\system32\netapi32.dll
- 2008-04-14 00:12:01 622,592 ----a-w c:\windows\system32\netcfgx.dll
+ 2004-08-04 10:00:00 622,080 ----a-w c:\windows\system32\netcfgx.dll
- 2008-04-14 00:12:29 111,104 ----a-w c:\windows\system32\netdde.exe
+ 2004-08-04 10:00:00 111,104 ----a-w c:\windows\system32\netdde.exe
- 2001-08-23 12:00:00 214,016 ----a-w c:\windows\system32\netevent.dll
+ 2004-08-04 10:00:00 214,016 ----a-w c:\windows\system32\netevent.dll
- 2001-08-23 12:00:00 253,952 ----a-w c:\windows\system32\neth.dll
+ 2004-08-04 10:00:00 253,952 ----a-w c:\windows\system32\neth.dll
- 2008-04-14 00:12:01 139,264 ----a-w c:\windows\system32\netid.dll
+ 2004-08-04 10:00:00 139,264 ----a-w c:\windows\system32\netid.dll
- 2008-04-14 00:12:01 407,040 ----a-w c:\windows\system32\netlogon.dll
+ 2004-08-04 10:00:00 407,040 ----a-w c:\windows\system32\netlogon.dll
- 2008-04-14 00:12:01 198,144 ----a-w c:\windows\system32\netman.dll
+ 2004-08-04 10:00:00 198,144 ----a-w c:\windows\system32\netman.dll
- 2001-08-23 12:00:00 171,008 ----a-w c:\windows\system32\netmsg.dll
+ 2004-08-04 10:00:00 171,008 ----a-w c:\windows\system32\netmsg.dll
- 2008-04-14 00:12:01 875,008 ----a-w c:\windows\system32\netplwiz.dll
+ 2004-08-04 10:00:00 875,008 ----a-w c:\windows\system32\netplwiz.dll
- 2008-04-14 00:12:01 11,776 ----a-w c:\windows\system32\netrap.dll
+ 2004-08-04 10:00:00 12,288 ----a-w c:\windows\system32\netrap.dll
- 2008-04-14 00:16:51 329,728 ----a-w c:\windows\system32\netsetup.exe
+ 2004-08-04 10:00:00 329,728 ----a-w c:\windows\system32\netsetup.exe
- 2008-04-14 00:12:29 86,016 ----a-w c:\windows\system32\netsh.exe
+ 2004-08-04 10:00:00 86,016 ----a-w c:\windows\system32\netsh.exe
- 2008-04-14 00:12:02 1,703,936 ----a-w c:\windows\system32\netshell.dll
+ 2004-08-04 10:00:00 1,708,032 ----a-w c:\windows\system32\netshell.dll
- 2008-04-14 00:12:29 36,864 ----a-w c:\windows\system32\netstat.exe
+ 2004-08-04 10:00:00 36,864 ----a-w c:\windows\system32\netstat.exe
- 2008-04-14 00:12:02 80,896 ----a-w c:\windows\system32\netui0.dll
+ 2004-08-04 10:00:00 80,896 ----a-w c:\windows\system32\netui0.dll
- 2008-04-14 00:12:02 245,760 ----a-w c:\windows\system32\netui1.dll
+ 2004-08-04 10:00:00 245,760 ----a-w c:\windows\system32\netui1.dll
- 2001-08-23 12:00:00 308,224 ----a-w c:\windows\system32\netui2.dll
+ 2004-08-04 10:00:00 308,224 ----a-w c:\windows\system32\netui2.dll
- 2001-08-23 12:00:00 2,656 ----a-w c:\windows\system32\netware.drv
+ 2004-08-04 10:00:00 2,656 ----a-w c:\windows\system32\netware.drv
- 2008-04-14 00:12:02 247,808 ----a-w c:\windows\system32\newdev.dll
+ 2004-08-04 10:00:00 248,832 ----a-w c:\windows\system32\newdev.dll
- 2008-04-14 00:12:02 98,304 ----a-w c:\windows\system32\nlhtml.dll
+ 2004-08-04 10:00:00 103,936 ----a-w c:\windows\system32\nlhtml.dll
- 2001-08-23 12:00:00 7,052 ----a-w c:\windows\system32\nlsfunc.exe
+ 2004-08-04 10:00:00 7,052 ----a-w c:\windows\system32\nlsfunc.exe
- 2008-04-14 00:12:02 28,672 ----a-w c:\windows\system32\nmmkcert.dll
+ 2004-08-04 10:00:00 28,672 ----a-w c:\windows\system32\nmmkcert.dll
- 2008-04-14 00:12:29 69,120 ----a-w c:\windows\system32\notepad.exe
+ 2004-08-04 10:00:00 69,120 ----a-w c:\windows\system32\notepad.exe
- 2008-04-14 00:12:01 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
+ 2004-08-04 10:00:00 57,344 ----a-w c:\windows\system32\npp\ndisnpp.dll
- 2008-04-14 00:12:29 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\npp\nppagent.exe
- 2008-04-14 00:12:02 54,784 ----a-w c:\windows\system32\npptools.dll
+ 2004-08-04 10:00:00 54,784 ----a-w c:\windows\system32\npptools.dll
- 2008-04-14 00:12:29 76,800 ----a-w c:\windows\system32\nslookup.exe
+ 2004-08-04 10:00:00 76,800 ----a-w c:\windows\system32\nslookup.exe
- 2008-04-14 00:12:30 1,200,640 ----a-w c:\windows\system32\ntbackup.exe
+ 2004-08-04 10:00:00 1,200,128 ----a-w c:\windows\system32\ntbackup.exe
- 2008-04-14 00:11:24 706,048 ----a-w c:\windows\system32\ntdll.dll
+ 2004-08-04 10:00:00 708,096 ----a-w c:\windows\system32\ntdll.dll
- 2001-08-23 12:00:00 27,866 ----a-w c:\windows\system32\ntdos.sys
+ 2004-08-04 10:00:00 27,866 ----a-w c:\windows\system32\ntdos.sys
- 2001-08-23 12:00:00 29,146 ----a-w c:\windows\system32\ntdos404.sys
+ 2004-08-04 10:00:00 29,146 ----a-w c:\windows\system32\ntdos404.sys
- 2001-08-23 12:00:00 29,370 ----a-w c:\windows\system32\ntdos411.sys
+ 2004-08-04 10:00:00 29,370 ----a-w c:\windows\system32\ntdos411.sys
- 2001-08-23 12:00:00 29,274 ----a-w c:\windows\system32\ntdos412.sys
+ 2004-08-04 10:00:00 29,274 ----a-w c:\windows\system32\ntdos412.sys
- 2001-08-23 12:00:00 29,146 ----a-w c:\windows\system32\ntdos804.sys
+ 2004-08-04 10:00:00 29,146 ----a-w c:\windows\system32\ntdos804.sys
- 2008-04-14 00:12:02 67,072 ----a-w c:\windows\system32\ntdsapi.dll
+ 2004-08-04 10:00:00 67,072 ----a-w c:\windows\system32\ntdsapi.dll
- 2001-08-23 12:00:00 26,112 ----a-w c:\windows\system32\ntdsbcli.dll
+ 2004-08-04 10:00:00 26,112 ----a-w c:\windows\system32\ntdsbcli.dll
- 2004-08-04 04:45:10 33,840 ----a-w c:\windows\system32\ntio.sys
+ 2004-08-04 10:00:00 33,840 ----a-w c:\windows\system32\ntio.sys
- 2004-08-04 04:45:16 34,560 ----a-w c:\windows\system32\ntio404.sys
+ 2004-08-04 10:00:00 34,560 ----a-w c:\windows\system32\ntio404.sys
- 2004-08-04 04:45:12 35,648 ----a-w c:\windows\system32\ntio411.sys
+ 2004-08-04 10:00:00 35,648 ----a-w c:\windows\system32\ntio411.sys
- 2004-08-04 04:45:16 35,424 ----a-w c:\windows\system32\ntio412.sys
+ 2004-08-04 10:00:00 35,424 ----a-w c:\windows\system32\ntio412.sys
- 2004-08-04 04:45:14 34,560 ----a-w c:\windows\system32\ntio804.sys
+ 2004-08-04 10:00:00 34,560 ----a-w c:\windows\system32\ntio804.sys
- 2008-08-14 09:33:16 2,066,048 ----a-w c:\windows\system32\ntkrnlpa.exe
+ 2005-03-30 01:01:12 2,056,832 ----a-w c:\windows\system32\ntkrnlpa.exe
- 2008-04-14 00:12:02 44,032 ----a-w c:\windows\system32\ntlanman.dll
+ 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\ntlanman.dll
- 2001-08-23 12:00:00 57,856 ----a-w c:\windows\system32\ntlanui.dll
+ 2004-08-04 10:00:00 57,856 ----a-w c:\windows\system32\ntlanui.dll
- 2001-08-23 12:00:00 14,336 ----a-w c:\windows\system32\ntlanui2.dll
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\ntlanui2.dll
- 2008-04-14 00:12:02 8,192 ----a-w c:\windows\system32\ntlsapi.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\ntlsapi.dll
- 2008-04-14 00:12:02 118,784 ----a-w c:\windows\system32\ntmarta.dll
+ 2004-08-04 10:00:00 118,784 ----a-w c:\windows\system32\ntmarta.dll
- 2008-04-14 00:12:02 40,960 ----a-w c:\windows\system32\ntmsapi.dll
+ 2004-08-04 10:00:00 40,960 ----a-w c:\windows\system32\ntmsapi.dll
- 2008-04-14 00:12:02 179,200 ----a-w c:\windows\system32\ntmsdba.dll
+ 2004-08-04 10:00:00 179,712 ----a-w c:\windows\system32\ntmsdba.dll
- 2001-08-23 12:00:00 36,864 ----a-w c:\windows\system32\ntmsevt.dll
+ 2004-08-04 10:00:00 36,864 ----a-w c:\windows\system32\ntmsevt.dll
- 2008-04-14 00:12:02 488,448 ----a-w c:\windows\system32\ntmsmgr.dll
+ 2004-08-04 10:00:00 488,448 ----a-w c:\windows\system32\ntmsmgr.dll
- 2008-04-14 00:12:02 435,200 ----a-w c:\windows\system32\ntmssvc.dll
+ 2004-08-04 10:00:00 435,200 ----a-w c:\windows\system32\ntmssvc.dll
- 2008-08-14 10:11:02 2,189,184 ----a-w c:\windows\system32\ntoskrnl.exe
+ 2005-03-30 01:23:32 2,179,584 ----a-w c:\windows\system32\ntoskrnl.exe
- 2008-04-14 00:12:02 91,136 ----a-w c:\windows\system32\ntprint.dll
+ 2004-08-04 10:00:00 91,136 ----a-w c:\windows\system32\ntprint.dll
- 2001-08-23 12:00:00 31,744 ----a-w c:\windows\system32\ntsd.exe
+ 2004-08-04 10:00:00 31,744 ----a-w c:\windows\system32\ntsd.exe
- 2001-08-23 12:00:00 36,864 ----a-w c:\windows\system32\ntsdexts.dll
+ 2004-08-04 10:00:00 36,864 ----a-w c:\windows\system32\ntsdexts.dll
- 2008-04-14 00:12:02 143,360 ----a-w c:\windows\system32\ntshrui.dll
+ 2004-08-04 10:00:00 143,872 ----a-w c:\windows\system32\ntshrui.dll
- 2008-04-14 00:12:30 420,864 ----a-w c:\windows\system32\ntvdm.exe
+ 2004-08-04 10:00:00 419,840 ----a-w c:\windows\system32\ntvdm.exe
- 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\ntvdmd.dll
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\ntvdmd.dll
- 2008-04-14 00:12:02 4,274,816 ------w c:\windows\system32\nv4_disp.dll
+ 2004-08-04 05:56:46 4,274,816 ----a-w c:\windows\system32\nv4_disp.dll
- 2001-08-23 12:00:00 3,252 ----a-w c:\windows\system32\nw16.exe
+ 2004-08-04 10:00:00 3,252 ----a-w c:\windows\system32\nw16.exe
- 2001-08-23 12:00:00 17,408 ----a-w c:\windows\system32\nwapi16.dll
+ 2004-08-04 10:00:00 17,408 ----a-w c:\windows\system32\nwapi16.dll
- 2008-04-14 00:12:02 64,000 ----a-w c:\windows\system32\nwapi32.dll
+ 2004-08-04 10:00:00 58,880 ----a-w c:\windows\system32\nwapi32.dll
- 2001-08-23 12:00:00 20,480 ----a-w c:\windows\system32\nwcfg.dll
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\nwcfg.dll
- 2001-08-23 12:00:00 6,144 ----a-w c:\windows\system32\nwevent.dll
+ 2004-08-04 10:00:00 6,144 ----a-w c:\windows\system32\nwevent.dll
- 2008-04-14 00:12:02 142,336 ----a-w c:\windows\system32\nwprovau.dll
+ 2004-08-04 10:00:00 144,384 ----a-w c:\windows\system32\nwprovau.dll
- 2001-08-23 12:00:00 126,464 ----a-w c:\windows\system32\nwscript.exe
+ 2004-08-04 10:00:00 126,464 ----a-w c:\windows\system32\nwscript.exe
- 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\nwwks.dll
+ 2004-08-04 10:00:00 64,000 ----a-w c:\windows\system32\nwwks.dll
- 2008-04-14 00:12:02 270,336 ----a-w c:\windows\system32\oakley.dll
+ 2004-08-04 10:00:00 266,752 ----a-w c:\windows\system32\oakley.dll
- 2008-04-14 00:12:02 286,208 ----a-w c:\windows\system32\objsel.dll
+ 2004-08-04 10:00:00 285,696 ----a-w c:\windows\system32\objsel.dll
- 2008-10-16 20:38:39 102,912 ------w c:\windows\system32\occache.dll
+ 2004-08-04 10:00:00 96,256 ----a-w c:\windows\system32\occache.dll
- 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\ocmanage.dll
+ 2004-08-04 10:00:00 60,928 ----a-w c:\windows\system32\ocmanage.dll
- 2001-08-23 12:00:00 26,224 ----a-w c:\windows\system32\odbc16gt.dll
+ 2004-08-04 10:00:00 26,224 ----a-w c:\windows\system32\odbc16gt.dll
- 2008-04-14 00:12:02 249,856 ----a-w c:\windows\system32\odbc32.dll
+ 2004-08-04 10:00:00 249,856 ----a-w c:\windows\system32\odbc32.dll
- 2008-04-14 00:12:02 16,384 ----a-w c:\windows\system32\odbc32gt.dll
+ 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\odbc32gt.dll
- 2008-04-14 00:12:30 32,768 ----a-w c:\windows\system32\odbcad32.exe
+ 2004-08-04 10:00:00 32,768 ----a-w c:\windows\system32\odbcad32.exe
- 2008-04-14 00:12:02 24,576 ----a-w c:\windows\system32\odbcbcp.dll
+ 2004-08-04 10:00:00 24,576 ----a-w c:\windows\system32\odbcbcp.dll
- 2008-04-14 00:12:02 135,168 ----a-w c:\windows\system32\odbcconf.dll
+ 2004-08-04 10:00:00 135,168 ----a-w c:\windows\system32\odbcconf.dll
- 2008-04-14 00:12:30 69,632 ----a-w c:\windows\system32\odbcconf.exe
+ 2004-08-04 10:00:00 69,632 ----a-w c:\windows\system32\odbcconf.exe
- 2008-04-14 00:12:02 106,496 ----a-w c:\windows\system32\odbccp32.dll
+ 2004-08-04 10:00:00 106,496 ----a-w c:\windows\system32\odbccp32.dll
- 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccr32.dll
+ 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\odbccr32.dll
- 2008-04-14 00:12:02 65,536 ----a-w c:\windows\system32\odbccu32.dll
+ 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\odbccu32.dll
- 2008-04-13 17:26:05 94,208 ----a-w c:\windows\system32\odbcint.dll
+ 2004-08-04 10:00:00 94,208 ----a-w c:\windows\system32\odbcint.dll
- 2008-04-14 00:10:31 53,279 ----a-w c:\windows\system32\odbcji32.dll
+ 2004-08-04 10:00:00 53,279 ----a-w c:\windows\system32\odbcji32.dll
- 2008-04-14 00:12:02 278,559 ----a-w c:\windows\system32\odbcjt32.dll
+ 2004-08-04 10:00:00 278,559 ----a-w c:\windows\system32\odbcjt32.dll
- 2008-04-13 17:26:05 12,288 ----a-w c:\windows\system32\odbcp32r.dll
+ 2004-08-04 10:00:00 12,288 ----a-w c:\windows\system32\odbcp32r.dll
- 2008-04-14 00:12:02 147,456 ----a-w c:\windows\system32\odbctrac.dll
+ 2004-08-04 10:00:00 147,456 ----a-w c:\windows\system32\odbctrac.dll
- 2008-04-14 00:12:02 20,511 ----a-w c:\windows\system32\oddbse32.dll
+ 2004-08-04 10:00:00 20,511 ----a-w c:\windows\system32\oddbse32.dll
- 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odexl32.dll
+ 2004-08-04 10:00:00 20,510 ----a-w c:\windows\system32\odexl32.dll
- 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odfox32.dll
+ 2004-08-04 10:00:00 20,510 ----a-w c:\windows\system32\odfox32.dll
- 2008-04-14 00:12:02 20,510 ----a-w c:\windows\system32\odpdx32.dll
+ 2004-08-04 10:00:00 20,510 ----a-w c:\windows\system32\odpdx32.dll
- 2008-04-14 00:12:02 20,511 ----a-w c:\windows\system32\odtext32.dll
+ 2004-08-04 10:00:00 20,511 ----a-w c:\windows\system32\odtext32.dll
- 2001-08-23 12:00:00 13,107,200 ----a-w c:\windows\system32\oembios.bin
+ 2005-03-21 23:48:05 13,107,200 ----a-w c:\windows\system32\oembios.bin
- 2001-08-23 12:00:00 4,463 ----a-w c:\windows\system32\oembios.dat
+ 2005-03-21 23:48:05 4,627 ----a-w c:\windows\system32\oembios.dat
- 2008-04-14 00:12:02 192,000 ----a-w c:\windows\system32\offfilt.dll
+ 2004-08-04 10:00:00 120,832 ----a-w c:\windows\system32\offfilt.dll
- 2001-08-23 12:00:00 39,744 ----a-w c:\windows\system32\ole2.dll
+ 2004-08-04 10:00:00 39,744 ----a-w c:\windows\system32\ole2.dll
- 2001-08-23 12:00:00 169,520 ----a-w c:\windows\system32\ole2disp.dll
+ 2004-08-04 10:00:00 169,520 ----a-w c:\windows\system32\ole2disp.dll
- 2001-08-23 12:00:00 153,008 ----a-w c:\windows\system32\ole2nls.dll
+ 2004-08-04 10:00:00 153,008 ----a-w c:\windows\system32\ole2nls.dll
- 2008-04-14 00:12:02 1,287,168 ----a-w c:\windows\system32\ole32.dll
+ 2004-08-04 10:00:00 1,281,536 ----a-w c:\windows\system32\ole32.dll
- 2001-08-23 12:00:00 163,328 ----a-w c:\windows\system32\oleacc.dll
+ 2004-08-04 10:00:00 163,328 ----a-w c:\windows\system32\oleacc.dll
- 2001-08-23 12:00:00 16,896 ----a-w c:\windows\system32\oleaccrc.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\oleaccrc.dll
- 2008-04-14 00:12:02 551,936 ----a-w c:\windows\system32\oleaut32.dll
+ 2004-08-04 10:00:00 553,472 ----a-w c:\windows\system32\oleaut32.dll
- 2001-08-23 12:00:00 82,944 ----a-w c:\windows\system32\olecli.dll
+ 2004-08-04 10:00:00 82,944 ----a-w c:\windows\system32\olecli.dll
- 2008-04-14 00:12:02 74,752 ----a-w c:\windows\system32\olecli32.dll
+ 2004-08-04 10:00:00 68,608 ----a-w c:\windows\system32\olecli32.dll
- 2008-04-14 00:12:02 37,376 ----a-w c:\windows\system32\olecnv32.dll
+ 2004-08-04 10:00:00 34,304 ----a-w c:\windows\system32\olecnv32.dll
- 2008-04-14 00:12:02 122,880 ----a-w c:\windows\system32\oledlg.dll
+ 2004-08-04 10:00:00 117,760 ----a-w c:\windows\system32\oledlg.dll
- 2008-04-14 00:12:02 107,008 ----a-w c:\windows\system32\oleprn.dll
+ 2004-08-04 10:00:00 107,008 ----a-w c:\windows\system32\oleprn.dll
- 2008-04-14 00:12:02 84,992 ----a-w c:\windows\system32\olepro32.dll
+ 2004-08-04 10:00:00 83,456 ----a-w c:\windows\system32\olepro32.dll
- 2001-08-23 12:00:00 24,064 ----a-w c:\windows\system32\olesvr.dll
+ 2004-08-04 10:00:00 24,064 ----a-w c:\windows\system32\olesvr.dll
- 2001-08-23 12:00:00 22,016 ----a-w c:\windows\system32\olesvr32.dll
+ 2004-08-04 10:00:00 22,016 ----a-w c:\windows\system32\olesvr32.dll
- 2001-08-23 12:00:00 69,120 ----a-w c:\windows\system32\olethk32.dll
+ 2004-08-04 10:00:00 69,120 ----a-w c:\windows\system32\olethk32.dll
- 2008-04-14 00:12:00 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll
+ 2004-08-04 10:00:00 122,368 ----a-w c:\windows\system32\oobe\msobcomm.dll
- 2008-04-14 00:12:00 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
+ 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\oobe\msobdl.dll
- 2008-04-14 00:12:00 565,248 ----a-w c:\windows\system32\oobe\msobmain.dll
+ 2004-08-04 10:00:00 561,664 ----a-w c:\windows\system32\oobe\msobmain.dll
- 2008-04-14 00:12:00 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
+ 2004-08-04 10:00:00 30,720 ----a-w c:\windows\system32\oobe\msobshel.dll
- 2008-04-14 00:12:00 19,456 ----a-w c:\windows\system32\oobe\msobweb.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\oobe\msobweb.dll
- 2008-04-14 00:12:28 29,184 ----a-w c:\windows\system32\oobe\msoobe.exe
+ 2004-08-04 10:00:00 28,160 ----a-w c:\windows\system32\oobe\msoobe.exe
- 2008-04-14 00:12:31 51,200 ----a-w c:\windows\system32\oobe\oobebaln.exe
+ 2004-08-04 10:00:00 51,200 ----a-w c:\windows\system32\oobe\oobebaln.exe
- 2008-04-14 00:12:31 67,584 ----a-w c:\windows\system32\openfiles.exe
+ 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\openfiles.exe
- 2008-04-14 00:12:02 713,728 ----a-w c:\windows\system32\opengl32.dll
+ 2004-08-04 10:00:00 713,728 ----a-w c:\windows\system32\opengl32.dll
- 2008-04-14 00:12:31 215,552 ----a-w c:\windows\system32\osk.exe
+ 2004-08-04 10:00:00 215,552 ----a-w c:\windows\system32\osk.exe
- 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\osuninst.dll
+ 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\osuninst.dll
- 2001-08-23 12:00:00 40,448 ----a-w c:\windows\system32\osuninst.exe
+ 2004-08-04 10:00:00 40,448 ----a-w c:\windows\system32\osuninst.exe
- 2008-04-14 00:12:02 153,600 ------w c:\windows\system32\p2p.dll
+ 2004-08-04 10:00:00 116,224 ----a-w c:\windows\system32\p2p.dll
- 2008-04-14 00:12:02 105,472 ------w c:\windows\system32\p2pgasvc.dll
+ 2004-08-04 10:00:00 86,016 ----a-w c:\windows\system32\p2pgasvc.dll
- 2008-04-14 00:12:02 313,856 ------w c:\windows\system32\p2pgraph.dll
+ 2004-08-04 10:00:00 312,320 ----a-w c:\windows\system32\p2pgraph.dll
- 2008-04-14 00:12:02 115,712 ------w c:\windows\system32\p2pnetsh.dll
+ 2004-08-04 10:00:00 88,064 ----a-w c:\windows\system32\p2pnetsh.dll
- 2008-04-14 00:12:02 554,496 ------w c:\windows\system32\p2psvc.dll
+ 2004-08-04 10:00:00 526,848 ----a-w c:\windows\system32\p2psvc.dll
- 2008-04-14 00:12:31 58,368 ----a-w c:\windows\system32\packager.exe
+ 2004-08-04 10:00:00 58,368 ----a-w c:\windows\system32\packager.exe
- 2001-08-23 12:00:00 167,219 ----a-w c:\windows\system32\pagefileconfig.vbs
+ 2004-08-04 10:00:00 167,219 ----a-w c:\windows\system32\pagefileconfig.vbs
- 2001-08-23 12:00:00 10,240 ----a-w c:\windows\system32\panmap.dll
+ 2004-08-04 10:00:00 10,240 ----a-w c:\windows\system32\panmap.dll
- 2001-08-23 12:00:00 157,696 ----a-w c:\windows\system32\paqsp.dll
+ 2004-08-04 10:00:00 157,696 ----a-w c:\windows\system32\paqsp.dll
- 2001-08-23 12:00:00 21,504 ----a-w c:\windows\system32\pathping.exe
+ 2004-08-04 10:00:00 21,504 ----a-w c:\windows\system32\pathping.exe
- 2008-04-14 00:12:02 67,584 ----a-w c:\windows\system32\pautoenr.dll
+ 2004-08-04 10:00:00 62,976 ----a-w c:\windows\system32\pautoenr.dll
- 2008-04-14 00:12:02 284,160 ----a-w c:\windows\system32\pdh.dll
+ 2004-08-04 10:00:00 283,648 ----a-w c:\windows\system32\pdh.dll
- 2001-08-23 12:00:00 15,360 ----a-w c:\windows\system32\pentnt.exe
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\pentnt.exe
- 2009-03-21 23:38:46 63,528 ----a-w c:\windows\system32\perfc009.dat
+ 2009-04-02 03:31:41 63,528 ----a-w c:\windows\system32\perfc009.dat
- 2008-04-14 00:12:02 39,936 ----a-w c:\windows\system32\perfctrs.dll
+ 2004-08-04 10:00:00 39,936 ----a-w c:\windows\system32\perfctrs.dll
- 2001-08-23 12:00:00 28,626 ----a-w c:\windows\system32\perfd009.dat
+ 2004-08-04 10:00:00 28,626 ----a-w c:\windows\system32\perfd009.dat
- 2008-04-14 00:12:02 26,624 ----a-w c:\windows\system32\perfdisk.dll
+ 2004-08-04 10:00:00 26,624 ----a-w c:\windows\system32\perfdisk.dll
- 2009-03-21 23:38:46 406,328 ----a-w c:\windows\system32\perfh009.dat
+ 2009-04-02 03:31:41 406,328 ----a-w c:\windows\system32\perfh009.dat
- 2001-08-23 12:00:00 272,128 ----a-w c:\windows\system32\perfi009.dat
+ 2004-08-04 10:00:00 272,128 ----a-w c:\windows\system32\perfi009.dat
- 2008-04-14 00:12:31 15,872 ----a-w c:\windows\system32\perfmon.exe
+ 2004-08-04 10:00:00 15,872 ----a-w c:\windows\system32\perfmon.exe
- 2008-04-14 00:12:02 17,920 ----a-w c:\windows\system32\perfnet.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\perfnet.dll
- 2001-08-23 12:00:00 5,632 ----a-w c:\windows\system32\perfnw.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\perfnw.dll
- 2008-04-14 00:12:02 25,088 ----a-w c:\windows\system32\perfos.dll
+ 2004-08-04 10:00:00 25,088 ----a-w c:\windows\system32\perfos.dll
- 2008-04-14 00:12:02 34,816 ----a-w c:\windows\system32\perfproc.dll
+ 2004-08-04 10:00:00 34,816 ----a-w c:\windows\system32\perfproc.dll
- 2001-08-23 12:00:00 12,288 ----a-w c:\windows\system32\perfts.dll
+ 2004-08-04 10:00:00 12,288 ----a-w c:\windows\system32\perfts.dll
- 2008-04-14 00:12:02 176,128 ----a-w c:\windows\system32\photowiz.dll
+ 2004-08-04 10:00:00 176,128 ----a-w c:\windows\system32\photowiz.dll
- 2008-04-14 00:12:02 35,328 ----a-w c:\windows\system32\pid.dll
+ 2004-08-04 10:00:00 35,328 ----a-w c:\windows\system32\pid.dll
- 2008-04-14 00:11:09 24,064 ----a-w c:\windows\system32\pidgen.dll
+ 2004-08-04 10:00:00 24,064 ----a-w c:\windows\system32\pidgen.dll
- 2001-08-23 12:00:00 35,328 ----a-w c:\windows\system32\pifmgr.dll
+ 2004-08-04 10:00:00 35,328 ----a-w c:\windows\system32\pifmgr.dll
- 2008-04-14 00:12:31 17,920 ----a-w c:\windows\system32\ping.exe
+ 2004-08-04 10:00:00 17,920 ----a-w c:\windows\system32\ping.exe
- 2001-08-23 12:00:00 33,280 ----a-w c:\windows\system32\ping6.exe
+ 2004-08-04 10:00:00 33,280 ----a-w c:\windows\system32\ping6.exe
- 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\pjlmon.dll
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\pjlmon.dll
- 2001-08-23 12:00:00 30,720 ----a-w c:\windows\system32\plustab.dll
+ 2004-08-04 10:00:00 30,720 ----a-w c:\windows\system32\plustab.dll
- 2001-08-23 12:00:00 46,592 ----a-w c:\windows\system32\pmspl.dll
+ 2004-08-04 10:00:00 46,592 ----a-w c:\windows\system32\pmspl.dll
- 2008-10-16 20:38:39 44,544 ----a-w c:\windows\system32\pngfilt.dll
+ 2006-03-04 03:33:44 39,424 ----a-w c:\windows\system32\pngfilt.dll
- 2008-04-14 00:12:02 58,880 ------w c:\windows\system32\pnrpnsp.dll
+ 2004-08-04 10:00:00 48,640 ----a-w c:\windows\system32\pnrpnsp.dll
- 2008-04-14 00:12:02 105,472 ----a-w c:\windows\system32\polstore.dll
+ 2004-08-04 10:00:00 105,472 ----a-w c:\windows\system32\polstore.dll
- 2008-04-14 00:12:31 49,152 ------w c:\windows\system32\powercfg.exe
+ 2004-08-04 10:00:00 49,152 ----a-w c:\windows\system32\powercfg.exe
- 2008-04-14 00:12:03 17,408 ----a-w c:\windows\system32\powrprof.dll
+ 2004-08-04 10:00:00 17,408 ----a-w c:\windows\system32\powrprof.dll
- 2001-08-23 12:00:00 16,384 ----a-w c:\windows\system32\prflbmsg.dll
+ 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\prflbmsg.dll
- 2001-08-23 12:00:00 9,216 ----a-w c:\windows\system32\print.exe
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\print.exe
- 2008-04-14 00:12:03 560,640 ----a-w c:\windows\system32\printui.dll
+ 2004-08-04 10:00:00 560,640 ----a-w c:\windows\system32\printui.dll
- 2001-08-23 12:00:00 35,755 ----a-w c:\windows\system32\prncnfg.vbs
+ 2004-08-04 10:00:00 35,755 ----a-w c:\windows\system32\prncnfg.vbs
- 2001-08-23 12:00:00 25,415 ----a-w c:\windows\system32\prndrvr.vbs
+ 2004-08-04 10:00:00 25,415 ----a-w c:\windows\system32\prndrvr.vbs
- 2001-08-23 12:00:00 21,527 ----a-w c:\windows\system32\prnjobs.vbs
+ 2004-08-04 10:00:00 21,527 ----a-w c:\windows\system32\prnjobs.vbs
- 2001-08-23 12:00:00 32,546 ----a-w c:\windows\system32\prnmngr.vbs
+ 2004-08-04 10:00:00 32,546 ----a-w c:\windows\system32\prnmngr.vbs
- 2001-08-23 12:00:00 29,454 ----a-w c:\windows\system32\prnport.vbs
+ 2004-08-04 10:00:00 29,454 ----a-w c:\windows\system32\prnport.vbs
- 2001-08-23 12:00:00 15,860 ----a-w c:\windows\system32\prnqctl.vbs
+ 2004-08-04 10:00:00 15,860 ----a-w c:\windows\system32\prnqctl.vbs
- 2008-04-14 00:12:03 27,648 ----a-w c:\windows\system32\profmap.dll
+ 2004-08-04 10:00:00 27,648 ----a-w c:\windows\system32\profmap.dll
- 2008-04-14 00:12:31 109,568 ----a-w c:\windows\system32\progman.exe
+ 2004-08-04 10:00:00 109,568 ----a-w c:\windows\system32\progman.exe
- 2008-04-14 00:12:32 50,176 ----a-w c:\windows\system32\proquota.exe
+ 2004-08-04 10:00:00 50,176 ----a-w c:\windows\system32\proquota.exe
- 2008-04-14 00:12:32 9,216 ----a-w c:\windows\system32\proxycfg.exe
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\proxycfg.exe
- 2008-04-14 00:12:03 23,040 ----a-w c:\windows\system32\psapi.dll
+ 2004-08-04 10:00:00 23,040 ----a-w c:\windows\system32\psapi.dll
- 2008-04-14 00:12:03 96,768 ----a-w c:\windows\system32\psbase.dll
+ 2004-08-04 10:00:00 96,768 ----a-w c:\windows\system32\psbase.dll
- 2001-08-23 12:00:00 10,752 ----a-w c:\windows\system32\pschdprf.dll
+ 2004-08-04 10:00:00 10,752 ----a-w c:\windows\system32\pschdprf.dll
- 2001-08-23 12:00:00 8,192 ----a-w c:\windows\system32\psnppagn.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\psnppagn.dll
- 2008-04-14 00:12:03 43,520 ----a-w c:\windows\system32\pstorec.dll
+ 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\pstorec.dll
- 2008-04-14 00:12:03 34,304 ----a-w c:\windows\system32\pstorsvc.dll
+ 2004-08-04 10:00:00 34,304 ----a-w c:\windows\system32\pstorsvc.dll
- 2001-08-23 12:00:00 3,708 ----a-w c:\windows\system32\pubprn.vbs
+ 2004-08-04 10:00:00 3,708 ----a-w c:\windows\system32\pubprn.vbs
- 2006-10-19 03:47:18 211,456 ----a-w c:\windows\system32\qasf.dll
+ 2004-08-11 07:45:04 221,184 ----a-w c:\windows\system32\qasf.dll
- 2008-04-14 00:12:03 192,512 ----a-w c:\windows\system32\qcap.dll
+ 2004-08-04 10:00:00 192,512 ----a-w c:\windows\system32\qcap.dll
- 2008-04-14 00:12:03 279,040 ----a-w c:\windows\system32\qdv.dll
+ 2004-08-04 10:00:00 279,040 ----a-w c:\windows\system32\qdv.dll
- 2008-04-14 00:12:03 386,048 ----a-w c:\windows\system32\qdvd.dll
+ 2004-08-04 10:00:00 385,024 ----a-w c:\windows\system32\qdvd.dll
- 2008-04-14 00:12:03 562,176 ----a-w c:\windows\system32\qedit.dll
+ 2004-08-04 10:00:00 562,176 ----a-w c:\windows\system32\qedit.dll
- 2008-04-13 17:21:32 733,696 ----a-w c:\windows\system32\qedwipes.dll
+ 2004-08-04 10:00:00 733,696 ----a-w c:\windows\system32\qedwipes.dll
- 2008-04-14 00:12:03 409,088 ----a-w c:\windows\system32\qmgr.dll
+ 2004-08-04 10:00:00 382,464 ----a-w c:\windows\system32\qmgr.dll
- 2008-04-14 00:12:03 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\qmgrprxy.dll
- 2001-08-23 12:00:00 8,192 ----a-w c:\windows\system32\qosname.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\qosname.dll
- 2008-04-14 00:12:32 19,968 ----a-w c:\windows\system32\qprocess.exe
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\qprocess.exe
- 2008-05-07 05:12:40 1,288,192 ----a-w c:\windows\system32\quartz.dll
+ 2004-08-04 10:00:00 1,287,680 ----a-w c:\windows\system32\quartz.dll
- 2008-04-14 00:12:03 1,435,648 ----a-w c:\windows\system32\query.dll
+ 2004-08-04 10:00:00 1,435,648 ----a-w c:\windows\system32\query.dll
- 2008-04-14 00:12:03 43,520 ----a-w c:\windows\system32\racpldlg.dll
+ 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\racpldlg.dll
- 2008-04-14 00:12:03 7,680 ----a-w c:\windows\system32\rasadhlp.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\rasadhlp.dll
- 2008-04-14 00:12:03 237,056 ----a-w c:\windows\system32\rasapi32.dll
+ 2004-08-04 10:00:00 236,544 ----a-w c:\windows\system32\rasapi32.dll
- 2008-04-14 00:12:03 88,576 ----a-w c:\windows\system32\rasauto.dll
+ 2004-08-04 10:00:00 89,088 ----a-w c:\windows\system32\rasauto.dll
- 2001-08-23 12:00:00 11,776 ----a-w c:\windows\system32\rasautou.exe
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\rasautou.exe
- 2008-04-14 00:12:03 79,872 ----a-w c:\windows\system32\raschap.dll
+ 2004-08-04 10:00:00 69,632 ----a-w c:\windows\system32\raschap.dll
- 2001-08-23 12:00:00 11,776 ----a-w c:\windows\system32\rasctrs.dll
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\rasctrs.dll
- 2001-08-23 12:00:00 11,264 ----a-w c:\windows\system32\rasdial.exe
+ 2004-08-04 10:00:00 11,264 ----a-w c:\windows\system32\rasdial.exe
- 2008-04-14 00:12:03 658,432 ----a-w c:\windows\system32\rasdlg.dll
+ 2004-08-04 10:00:00 657,920 ----a-w c:\windows\system32\rasdlg.dll
- 2008-04-14 00:12:03 61,440 ----a-w c:\windows\system32\rasman.dll
+ 2004-08-04 10:00:00 61,440 ----a-w c:\windows\system32\rasman.dll
- 2008-04-14 00:12:03 186,368 ----a-w c:\windows\system32\rasmans.dll
+ 2004-08-04 10:00:00 174,080 ----a-w c:\windows\system32\rasmans.dll
- 2001-08-23 12:00:00 143,360 ----a-w c:\windows\system32\rasmontr.dll
+ 2004-08-04 10:00:00 143,360 ----a-w c:\windows\system32\rasmontr.dll
- 2001-08-23 12:00:00 22,528 ----a-w c:\windows\system32\rasmxs.dll
+ 2004-08-04 10:00:00 22,528 ----a-w c:\windows\system32\rasmxs.dll
- 2008-04-14 00:12:32 56,832 ----a-w c:\windows\system32\rasphone.exe
+ 2004-08-04 10:00:00 56,832 ----a-w c:\windows\system32\rasphone.exe
- 2008-04-14 00:12:03 210,944 ----a-w c:\windows\system32\rasppp.dll
+ 2004-08-04 10:00:00 206,336 ----a-w c:\windows\system32\rasppp.dll
- 2001-08-23 12:00:00 23,552 ----a-w c:\windows\system32\rasrad.dll
+ 2004-08-04 10:00:00 23,552 ----a-w c:\windows\system32\rasrad.dll
- 2008-04-14 00:12:03 16,384 ----a-w c:\windows\system32\rassapi.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\rassapi.dll
- 2001-08-23 12:00:00 12,800 ----a-w c:\windows\system32\rasser.dll
+ 2004-08-04 10:00:00 12,800 ----a-w c:\windows\system32\rasser.dll
- 2008-04-14 00:12:03 58,368 ----a-w c:\windows\system32\rastapi.dll
+ 2004-08-04 10:00:00 58,880 ----a-w c:\windows\system32\rastapi.dll
- 2008-04-14 00:12:03 150,016 ----a-w c:\windows\system32\rastls.dll
+ 2004-08-04 10:00:00 112,128 ----a-w c:\windows\system32\rastls.dll
- 2008-04-14 00:12:03 102,400 ----a-w c:\windows\system32\rcbdyctl.dll
+ 2004-08-04 10:00:00 102,400 ----a-w c:\windows\system32\rcbdyctl.dll
- 2008-04-14 00:12:32 35,840 ----a-w c:\windows\system32\rcimlby.exe
+ 2004-08-04 10:00:00 35,840 ----a-w c:\windows\system32\rcimlby.exe
- 2008-04-14 00:12:32 21,504 ----a-w c:\windows\system32\rcp.exe
+ 2004-08-04 10:00:00 21,504 ----a-w c:\windows\system32\rcp.exe
- 2008-04-14 00:12:03 147,968 ----a-w c:\windows\system32\rdchost.dll
+ 2004-08-04 10:00:00 147,968 ----a-w c:\windows\system32\rdchost.dll
- 2008-04-14 00:12:32 62,976 ----a-w c:\windows\system32\rdpclip.exe
+ 2004-08-04 10:00:00 62,464 ----a-w c:\windows\system32\rdpclip.exe
- 2008-04-14 00:13:22 92,424 ----a-w c:\windows\system32\rdpdd.dll
+ 2004-08-04 10:00:00 92,168 ----a-w c:\windows\system32\rdpdd.dll
- 2008-04-14 00:12:04 19,968 ----a-w c:\windows\system32\rdpsnd.dll
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\rdpsnd.dll
- 2008-04-14 00:13:22 87,176 ----a-w c:\windows\system32\rdpwsx.dll
+ 2004-08-04 10:00:00 87,176 ----a-w c:\windows\system32\rdpwsx.dll
- 2008-04-14 00:12:32 13,824 ----a-w c:\windows\system32\rdsaddin.exe
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\rdsaddin.exe
- 2008-04-14 00:12:32 67,072 ----a-w c:\windows\system32\rdshost.exe
+ 2004-08-04 10:00:00 67,072 ----a-w c:\windows\system32\rdshost.exe
- 2001-08-23 12:00:00 7,168 ----a-w c:\windows\system32\recover.exe
+ 2004-08-04 10:00:00 7,168 ----a-w c:\windows\system32\recover.exe
- 2004-08-04 04:48:46 3,338 ----a-w c:\windows\system32\redir.exe
+ 2004-08-04 10:00:00 3,338 ----a-w c:\windows\system32\redir.exe
- 2008-04-14 00:12:32 50,176 ----a-w c:\windows\system32\reg.exe
+ 2004-08-04 10:00:00 50,176 ----a-w c:\windows\system32\reg.exe
- 2008-04-14 00:12:04 49,664 ----a-w c:\windows\system32\regapi.dll
+ 2004-08-04 10:00:00 49,664 ----a-w c:\windows\system32\regapi.dll
- 2001-08-23 12:00:00 3,584 ----a-w c:\windows\system32\regedt32.exe
+ 2004-08-04 10:00:00 3,584 ----a-w c:\windows\system32\regedt32.exe
- 2008-04-14 00:12:04 59,904 ----a-w c:\windows\system32\regsvc.dll
+ 2004-08-04 10:00:00 59,904 ----a-w c:\windows\system32\regsvc.dll
- 2008-04-14 00:12:32 11,776 ----a-w c:\windows\system32\regsvr32.exe
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\regsvr32.exe
- 2001-08-23 12:00:00 4,608 ----a-w c:\windows\system32\regwiz.exe
+ 2004-08-04 10:00:00 4,608 ----a-w c:\windows\system32\regwiz.exe
- 2008-04-14 00:12:04 397,824 ----a-w c:\windows\system32\regwizc.dll
+ 2004-08-04 10:00:00 397,824 ----a-w c:\windows\system32\regwizc.dll
+ 2002-08-22 14:48:00 26,112 ----a-w c:\windows\system32\ReinstallBackups\
0007\DriverFiles\Ultra.sys
- 2001-08-23 12:00:00 32,768 ----a-w c:\windows\system32\relog.exe
+ 2004-08-04 10:00:00 32,768 ----a-w c:\windows\system32\relog.exe
- 2008-04-14 00:12:04 60,416 ----a-w c:\windows\system32\remotepg.dll
+ 2004-08-04 10:00:00 60,416 ----a-w c:\windows\system32\remotepg.dll
- 2001-08-23 12:00:00 107,520 ----a-w c:\windows\system32\rend.dll
+ 2004-08-04 10:00:00 107,520 ----a-w c:\windows\system32\rend.dll
- 2001-08-23 12:00:00 12,800 ----a-w c:\windows\system32\replace.exe
+ 2004-08-04 10:00:00 12,800 ----a-w c:\windows\system32\replace.exe
- 2008-04-14 00:12:33 380,416 ----a-w c:\windows\system32\Restore\rstrui.exe
+ 2004-08-04 10:00:00 380,416 ----a-w c:\windows\system32\Restore\rstrui.exe
- 2008-04-14 00:12:04 58,880 ----a-w c:\windows\system32\resutils.dll
+ 2004-08-04 10:00:00 58,880 ----a-w c:\windows\system32\resutils.dll
- 2008-04-14 00:12:33 13,824 ----a-w c:\windows\system32\rexec.exe
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\rexec.exe
- 2008-04-14 00:12:04 433,664 ----a-w c:\windows\system32\riched20.dll
+ 2004-08-04 10:00:00 431,616 ----a-w c:\windows\system32\riched20.dll
- 2001-08-23 12:00:00 3,584 ----a-w c:\windows\system32\riched32.dll
+ 2004-08-04 10:00:00 3,584 ----a-w c:\windows\system32\riched32.dll
- 2001-08-23 12:00:00 3,072 ----a-w c:\windows\system32\rnr20.dll
+ 2004-08-04 10:00:00 3,072 ----a-w c:\windows\system32\rnr20.dll
- 2001-08-23 12:00:00 19,968 ----a-w c:\windows\system32\route.exe
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\route.exe
- 2001-08-23 12:00:00 25,600 ----a-w c:\windows\system32\routemon.exe
+ 2004-08-04 10:00:00 25,600 ----a-w c:\windows\system32\routemon.exe
- 2001-08-23 12:00:00 6,656 ----a-w c:\windows\system32\routetab.dll
+ 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\routetab.dll
- 2001-08-23 12:00:00 22,016 ----a-w c:\windows\system32\rpcns4.dll
+ 2004-08-04 10:00:00 22,016 ----a-w c:\windows\system32\rpcns4.dll
- 2008-04-14 00:12:04 584,704 ----a-w c:\windows\system32\rpcrt4.dll
+ 2004-08-04 10:00:00 581,120 ----a-w c:\windows\system32\rpcrt4.dll
- 2008-04-14 00:12:04 399,360 ----a-w c:\windows\system32\rpcss.dll
+ 2004-08-04 10:00:00 395,776 ----a-w c:\windows\system32\rpcss.dll
- 2008-04-13 17:37:57 208,384 ----a-w c:\windows\system32\rsaenh.dll
+ 2004-08-04 10:00:00 152,576 ----a-w c:\windows\system32\rsaenh.dll
- 2001-08-23 12:00:00 28,672 ----a-w c:\windows\system32\rsfsaps.dll
+ 2004-08-04 10:00:00 28,672 ----a-w c:\windows\system32\rsfsaps.dll
- 2008-04-14 00:12:33 14,848 ----a-w c:\windows\system32\rsh.exe
+ 2004-08-04 10:00:00 14,848 ----a-w c:\windows\system32\rsh.exe
- 2008-04-14 00:12:04 39,936 ----a-w c:\windows\system32\rshx32.dll
+ 2004-08-04 10:00:00 39,936 ----a-w c:\windows\system32\rshx32.dll
- 2001-08-23 12:00:00 49,152 ----a-w c:\windows\system32\rsm.exe
+ 2004-08-04 10:00:00 49,152 ----a-w c:\windows\system32\rsm.exe
- 2008-04-14 00:12:04 18,944 ----a-w c:\windows\system32\rsmps.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\rsmps.dll
- 2001-08-23 12:00:00 24,576 ----a-w c:\windows\system32\rsmsink.exe
+ 2004-08-04 10:00:00 24,576 ----a-w c:\windows\system32\rsmsink.exe
- 2001-08-23 12:00:00 49,152 ----a-w c:\windows\system32\rsmui.exe
+ 2004-08-04 10:00:00 49,152 ----a-w c:\windows\system32\rsmui.exe
- 2008-04-14 00:12:33 107,520 ----a-w c:\windows\system32\rsnotify.exe
+ 2004-08-04 10:00:00 107,520 ----a-w c:\windows\system32\rsnotify.exe
- 2001-08-23 12:00:00 62,976 ----a-w c:\windows\system32\rsopprov.exe
+ 2004-08-04 10:00:00 62,976 ----a-w c:\windows\system32\rsopprov.exe
- 2001-08-23 12:00:00 132,608 ----a-w c:\windows\system32\rsvp.exe
+ 2004-08-04 10:00:00 132,608 ----a-w c:\windows\system32\rsvp.exe
- 2001-08-23 12:00:00 23,552 ----a-w c:\windows\system32\rsvpmsg.dll
+ 2004-08-04 10:00:00 23,552 ----a-w c:\windows\system32\rsvpmsg.dll
- 2001-08-23 12:00:00 9,728 ----a-w c:\windows\system32\rsvpperf.dll
+ 2004-08-04 10:00:00 9,728 ----a-w c:\windows\system32\rsvpperf.dll
- 2008-04-14 00:12:04 92,672 ----a-w c:\windows\system32\rsvpsp.dll
+ 2004-08-04 10:00:00 90,112 ----a-w c:\windows\system32\rsvpsp.dll
- 2008-04-14 00:12:33 77,312 ----a-w c:\windows\system32\rtcshare.exe
+ 2004-08-04 10:00:00 77,312 ----a-w c:\windows\system32\rtcshare.exe
- 2008-04-14 00:12:04 31,744 ----a-w c:\windows\system32\rtipxmib.dll
+ 2004-08-04 10:00:00 31,744 ----a-w c:\windows\system32\rtipxmib.dll
- 2001-08-23 12:00:00 98,304 ----a-w c:\windows\system32\rtm.dll
+ 2004-08-04 10:00:00 98,304 ----a-w c:\windows\system32\rtm.dll
- 2008-04-14 00:12:04 44,032 ----a-w c:\windows\system32\rtutils.dll
+ 2004-08-04 10:00:00 44,032 ----a-w c:\windows\system32\rtutils.dll
- 2001-08-23 12:00:00 16,384 ----a-w c:\windows\system32\runas.exe
+ 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\runas.exe
- 2008-04-14 00:12:33 33,280 ----a-w c:\windows\system32\rundll32.exe
+ 2004-08-04 10:00:00 33,280 ----a-w c:\windows\system32\rundll32.exe
- 2008-04-14 00:12:33 14,336 ----a-w c:\windows\system32\runonce.exe
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\runonce.exe
- 2008-04-14 00:12:04 9,728 ------w c:\windows\system32\rwnh.dll
+ 2004-08-04 10:00:00 9,728 ----a-w c:\windows\system32\rwnh.dll
- 2008-04-14 00:12:04 397,056 ------w c:\windows\system32\s3gnb.dll
+ 2004-08-04 05:56:46 397,056 ----a-w c:\windows\system32\s3gnb.dll
- 2008-04-14 00:12:04 43,520 ----a-w c:\windows\system32\safrcdlg.dll
+ 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\safrcdlg.dll
- 2008-04-14 00:12:04 29,696 ----a-w c:\windows\system32\safrdm.dll
+ 2004-08-04 10:00:00 29,696 ----a-w c:\windows\system32\safrdm.dll
- 2008-04-14 00:12:04 45,568 ----a-w c:\windows\system32\safrslv.dll
+ 2004-08-04 10:00:00 45,568 ----a-w c:\windows\system32\safrslv.dll
- 2008-04-14 00:12:04 64,000 ----a-w c:\windows\system32\samlib.dll
+ 2004-08-04 10:00:00 64,000 ----a-w c:\windows\system32\samlib.dll
- 2008-04-14 00:12:04 415,744 ----a-w c:\windows\system32\samsrv.dll
+ 2004-08-04 10:00:00 415,744 ----a-w c:\windows\system32\samsrv.dll
- 2008-04-14 00:12:33 13,312 ----a-w c:\windows\system32\savedump.exe
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\savedump.exe
- 2008-04-14 00:12:04 270,848 ------w c:\windows\system32\sbe.dll
+ 2004-08-04 10:00:00 270,848 ----a-w c:\windows\system32\sbe.dll
- 2008-04-14 00:12:04 159,232 ------w c:\windows\system32\sbeio.dll
+ 2004-08-04 10:00:00 159,232 ----a-w c:\windows\system32\sbeio.dll
- 2001-08-23 12:00:00 31,232 ----a-w c:\windows\system32\sc.exe
+ 2004-08-04 10:00:00 31,232 ----a-w c:\windows\system32\sc.exe
- 2008-04-14 00:12:04 69,632 ----a-w c:\windows\system32\scarddlg.dll
+ 2004-08-04 10:00:00 69,632 ----a-w c:\windows\system32\scarddlg.dll
- 2001-08-23 12:00:00 118,784 ----a-w c:\windows\system32\scardssp.dll
+ 2004-08-04 10:00:00 118,784 ----a-w c:\windows\system32\scardssp.dll
- 2008-04-14 00:12:33 95,744 ----a-w c:\windows\system32\scardsvr.exe
+ 2004-08-04 10:00:00 95,744 ----a-w c:\windows\system32\scardsvr.exe
- 2004-08-04 04:31:44 169,984 ----a-w c:\windows\system32\sccbase.dll
+ 2004-08-04 10:00:00 169,984 ----a-w c:\windows\system32\sccbase.dll
- 2008-04-14 00:12:05 171,008 ----a-w c:\windows\system32\sccsccp.dll
+ 2004-08-04 10:00:00 171,008 ----a-w c:\windows\system32\sccsccp.dll
- 2008-04-14 00:12:05 181,248 ----a-w c:\windows\system32\scecli.dll
+ 2004-08-04 10:00:00 180,224 ----a-w c:\windows\system32\scecli.dll
- 2008-04-14 00:12:05 314,880 ----a-w c:\windows\system32\scesrv.dll
+ 2004-08-04 10:00:00 313,856 ----a-w c:\windows\system32\scesrv.dll
- 2008-04-14 00:12:05 144,384 ----a-w c:\windows\system32\schannel.dll
+ 2004-08-04 10:00:00 144,896 ----a-w c:\windows\system32\schannel.dll
- 2008-04-14 00:12:05 192,512 ----a-w c:\windows\system32\schedsvc.dll
+ 2004-08-04 10:00:00 190,976 ----a-w c:\windows\system32\schedsvc.dll
- 2008-04-14 00:12:34 121,856 ----a-w c:\windows\system32\schtasks.exe
+ 2004-08-04 10:00:00 121,856 ----a-w c:\windows\system32\schtasks.exe
- 2008-04-14 00:12:05 20,480 ----a-w c:\windows\system32\sclgntfy.dll
+ 2004-08-04 10:00:00 20,992 ----a-w c:\windows\system32\sclgntfy.dll
- 2001-08-23 12:00:00 26,624 ----a-w c:\windows\system32\scredir.dll
+ 2004-08-04 10:00:00 26,624 ----a-w c:\windows\system32\scredir.dll
- 2001-08-23 12:00:00 10,240 ----a-w c:\windows\system32\scriptpw.dll
+ 2004-08-04 10:00:00 10,240 ----a-w c:\windows\system32\scriptpw.dll
- 2008-04-14 00:12:43 9,216 ----a-w c:\windows\system32\scrnsave.scr
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\scrnsave.scr
- 2008-05-09 10:53:39 180,224 ----a-w c:\windows\system32\scrobj.dll
+ 2004-08-04 10:00:00 159,744 ----a-w c:\windows\system32\scrobj.dll
- 2008-05-09 10:53:40 172,032 ----a-w c:\windows\system32\scrrun.dll
+ 2004-08-04 10:00:00 151,552 ----a-w c:\windows\system32\scrrun.dll
- 2008-04-14 00:12:34 77,312 ----a-w c:\windows\system32\sdbinst.exe
+ 2004-08-04 10:00:00 77,312 ----a-w c:\windows\system32\sdbinst.exe
- 2008-04-14 00:12:05 29,184 ------w c:\windows\system32\sdhcinst.dll
+ 2004-08-04 10:00:00 29,184 ----a-w c:\windows\system32\sdhcinst.dll
- 2001-08-23 12:00:00 130,048 ----a-w c:\windows\system32\sdpblb.dll
+ 2004-08-04 10:00:00 130,048 ----a-w c:\windows\system32\sdpblb.dll
- 2008-04-14 00:12:34 18,944 ----a-w c:\windows\system32\secedit.exe
+ 2004-08-04 10:00:00 18,432 ----a-w c:\windows\system32\secedit.exe
- 2008-04-14 00:12:05 18,944 ----a-w c:\windows\system32\seclogon.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\seclogon.dll
- 2004-08-02 20:20:40 4,569 ------w c:\windows\system32\secupd.dat
+ 2004-08-04 10:00:00 4,569 ----a-w c:\windows\system32\secupd.dat
- 2008-04-14 00:12:05 56,320 ----a-w c:\windows\system32\secur32.dll
+ 2004-08-04 10:00:00 55,808 ----a-w c:\windows\system32\secur32.dll
- 2008-04-14 00:12:05 5,632 ----a-w c:\windows\system32\security.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\security.dll
- 2008-04-14 00:12:05 29,184 ----a-w c:\windows\system32\sendcmsg.dll
+ 2004-08-04 10:00:00 29,184 ----a-w c:\windows\system32\sendcmsg.dll
- 2008-04-14 00:12:05 54,784 ----a-w c:\windows\system32\sendmail.dll
+ 2004-08-04 10:00:00 55,296 ----a-w c:\windows\system32\sendmail.dll
- 2008-04-14 00:12:05 39,424 ----a-w c:\windows\system32\sens.dll
+ 2004-08-04 10:00:00 38,912 ----a-w c:\windows\system32\sens.dll
- 2008-04-14 00:12:05 7,168 ----a-w c:\windows\system32\sensapi.dll
+ 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\sensapi.dll
- 2001-08-23 12:00:00 13,824 ----a-w c:\windows\system32\senscfg.dll
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\senscfg.dll
- 2001-08-23 12:00:00 14,336 ----a-w c:\windows\system32\serialui.dll
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\serialui.dll
- 2008-04-14 00:12:05 56,320 ----a-w c:\windows\system32\servdeps.dll
+ 2004-08-04 10:00:00 56,320 ----a-w c:\windows\system32\servdeps.dll
- 2008-04-14 00:12:34 108,544 ----a-w c:\windows\system32\services.exe
+ 2004-08-04 10:00:00 108,032 ----a-w c:\windows\system32\services.exe
- 2001-08-23 12:00:00 14,848 ----a-w c:\windows\system32\serwvdrv.dll
+ 2004-08-04 10:00:00 14,848 ----a-w c:\windows\system32\serwvdrv.dll
- 2008-04-14 00:12:34 141,312 ----a-w c:\windows\system32\sessmgr.exe
+ 2004-08-04 10:00:00 140,800 ----a-w c:\windows\system32\sessmgr.exe
- 2008-04-14 00:12:34 31,232 ----a-w c:\windows\system32\sethc.exe
+ 2004-08-04 10:00:00 31,232 ----a-w c:\windows\system32\sethc.exe
- 2008-04-14 00:12:34 23,040 ----a-w c:\windows\system32\setup.exe
+ 2004-08-04 10:00:00 23,040 ----a-w c:\windows\system32\setup.exe
- 2008-04-14 00:11:51 274,944 ----a-w c:\windows\system32\Setup\comsetup.dll
+ 2004-08-04 10:00:00 259,584 ----a-w c:\windows\system32\Setup\comsetup.dll
- 2008-04-14 00:11:53 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
+ 2004-08-04 10:00:00 32,828 ----a-w c:\windows\system32\Setup\fp40ext.dll
- 2001-08-23 12:00:00 6,144 ----a-w c:\windows\system32\Setup\fsconins.dll
+ 2004-08-04 10:00:00 6,144 ----a-w c:\windows\system32\Setup\fsconins.dll
- 2008-04-14 00:11:54 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
+ 2004-08-04 10:00:00 132,608 ----a-w c:\windows\system32\Setup\fxsocm.dll
- 2008-04-14 00:11:54 505,344 ----a-w c:\windows\system32\Setup\iis.dll
+ 2004-08-04 10:00:00 505,344 ----a-w c:\windows\system32\Setup\iis.dll
- 2008-04-14 00:11:54 123,392 ----a-w c:\windows\system32\Setup\imsinsnt.dll
+ 2004-08-04 10:00:00 115,712 ----a-w c:\windows\system32\Setup\imsinsnt.dll
- 2008-04-14 00:11:56 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\Setup\medctroc.dll
- 2008-04-14 00:11:59 90,112 ----a-w c:\windows\system32\Setup\msdtcstp.dll
+ 2004-08-04 10:00:00 82,432 ----a-w c:\windows\system32\Setup\msdtcstp.dll
- 2008-04-14 00:11:59 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\Setup\msgrocm.dll
- 2008-04-14 00:12:00 170,496 ----a-w c:\windows\system32\Setup\msmqocm.dll
+ 2004-08-04 10:00:00 169,984 ----a-w c:\windows\system32\Setup\msmqocm.dll
- 2004-08-04 04:10:58 126,976 ----a-w c:\windows\system32\Setup\netfxocm.dll
+ 2004-08-04 10:00:00 126,976 ----a-w c:\windows\system32\Setup\netfxocm.dll
- 2008-04-14 00:12:01 77,312 ----a-w c:\windows\system32\Setup\netoc.dll
+ 2004-08-04 10:00:00 77,312 ----a-w c:\windows\system32\Setup\netoc.dll
- 2008-04-14 00:12:02 62,976 ----a-w c:\windows\system32\Setup\ntoc.dll
+ 2004-08-04 10:00:00 62,976 ----a-w c:\windows\system32\Setup\ntoc.dll
- 2008-04-14 00:12:02 15,360 ----a-w c:\windows\system32\Setup\ocgen.dll
+ 2004-08-04 10:00:00 15,872 ----a-w c:\windows\system32\Setup\ocgen.dll
- 2008-04-14 00:12:02 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
+ 2004-08-04 10:00:00 17,408 ----a-w c:\windows\system32\Setup\ocmsn.dll
- 2008-04-14 00:12:05 101,376 ----a-w c:\windows\system32\Setup\setupqry.dll
+ 2004-08-04 10:00:00 101,376 ----a-w c:\windows\system32\Setup\setupqry.dll
- 2008-04-14 00:12:07 33,792 ----a-w c:\windows\system32\Setup\tabletoc.dll
+ 2004-08-04 10:00:00 33,792 ----a-w c:\windows\system32\Setup\tabletoc.dll
- 2008-04-14 00:12:07 130,048 ----a-w c:\windows\system32\Setup\tsoc.dll
+ 2004-08-04 10:00:00 121,856 ----a-w c:\windows\system32\Setup\tsoc.dll
- 2001-08-23 12:00:00 8,261 ----a-w c:\windows\system32\Setup\zoneoc.dll
+ 2004-08-04 10:00:00 8,261 ----a-w c:\windows\system32\Setup\zoneoc.dll
- 2008-04-14 10:42:06 985,088 ----a-w c:\windows\system32\setupapi.dll
+ 2004-08-04 10:00:00 983,552 ----a-w c:\windows\system32\setupapi.dll
- 2001-08-23 12:00:00 414,208 ----a-w c:\windows\system32\setupdll.dll
+ 2004-08-04 10:00:00 414,208 ----a-w c:\windows\system32\setupdll.dll
- 2001-08-23 12:00:00 11,753 ----a-w c:\windows\system32\setver.exe
+ 2004-08-04 10:00:00 11,753 ----a-w c:\windows\system32\setver.exe
- 2008-04-14 00:12:05 5,120 ----a-w c:\windows\system32\sfc.dll
+ 2004-08-04 10:00:00 5,120 ----a-w c:\windows\system32\sfc.dll
- 2001-08-23 12:00:00 9,728 ----a-w c:\windows\system32\sfc.exe
+ 2004-08-04 10:00:00 9,728 ----a-w c:\windows\system32\sfc.exe
- 2008-04-14 00:12:05 140,288 ----a-w c:\windows\system32\sfc_os.dll
+ 2004-08-04 10:00:00 140,288 ----a-w c:\windows\system32\sfc_os.dll
- 2008-04-14 00:12:05 1,614,848 ----a-w c:\windows\system32\sfcfiles.dll
+ 2004-08-04 10:00:00 1,580,544 ----a-w c:\windows\system32\sfcfiles.dll
- 2001-08-23 12:00:00 23,552 ----a-w c:\windows\system32\sfmapi.dll
+ 2004-08-04 10:00:00 23,552 ----a-w c:\windows\system32\sfmapi.dll
- 2008-04-13 17:03:19 549,376 ----a-w c:\windows\system32\shdoclc.dll
+ 2004-08-04 10:00:00 549,376 ----a-w c:\windows\system32\shdoclc.dll
- 2008-04-14 00:12:05 1,499,136 ----a-w c:\windows\system32\shdocvw.dll
+ 2006-03-30 09:16:04 1,492,480 ----a-w c:\windows\system32\shdocvw.dll
- 2001-08-23 12:00:00 5,120 ----a-w c:\windows\system32\shell.dll
+ 2004-08-04 10:00:00 5,120 ----a-w c:\windows\system32\shell.dll
- 2008-04-14 00:12:05 8,461,312 ----a-w c:\windows\system32\shell32.dll
+ 2004-08-04 10:00:00 8,384,000 ----a-w c:\windows\system32\shell32.dll
- 2001-08-23 12:00:00 435,712 ----a-w c:\windows\system32\shellstyle.dll
+ 2004-08-04 10:00:00 435,712 ----a-w c:\windows\system32\shellstyle.dll
- 2008-04-14 00:12:05 25,088 ----a-w c:\windows\system32\shfolder.dll
+ 2004-08-04 10:00:00 25,088 ----a-w c:\windows\system32\shfolder.dll
- 2008-04-14 00:12:05 68,096 ----a-w c:\windows\system32\shgina.dll
+ 2004-08-04 10:00:00 68,096 ----a-w c:\windows\system32\shgina.dll
- 2008-04-14 00:12:05 65,024 ----a-w c:\windows\system32\shimeng.dll
+ 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\shimeng.dll
- 2008-04-14 00:12:05 438,272 ----a-w c:\windows\system32\shimgvw.dll
+ 2004-08-04 10:00:00 438,272 ----a-w c:\windows\system32\shimgvw.dll
- 2008-04-14 00:12:05 474,112 ----a-w c:\windows\system32\shlwapi.dll
+ 2006-03-04 03:33:44 474,112 ----a-w c:\windows\system32\shlwapi.dll
- 2008-04-14 00:12:05 152,064 ----a-w c:\windows\system32\shmedia.dll
+ 2004-08-04 10:00:00 151,552 ----a-w c:\windows\system32\shmedia.dll
- 2008-04-14 00:12:35 45,056 ----a-w c:\windows\system32\shmgrate.exe
+ 2004-08-04 10:00:00 42,496 ----a-w c:\windows\system32\shmgrate.exe
- 2008-04-14 00:12:35 77,824 ----a-w c:\windows\system32\shrpubw.exe
+ 2004-08-04 10:00:00 77,824 ----a-w c:\windows\system32\shrpubw.exe
- 2008-04-14 00:12:05 27,648 ----a-w c:\windows\system32\shscrap.dll
+ 2004-08-04 10:00:00 27,648 ----a-w c:\windows\system32\shscrap.dll
- 2008-04-14 00:12:05 135,168 ----a-w c:\windows\system32\shsvcs.dll
+ 2004-08-04 10:00:00 134,656 ----a-w c:\windows\system32\shsvcs.dll
- 2008-04-14 00:12:35 19,456 ----a-w c:\windows\system32\shutdown.exe
+ 2004-08-04 10:00:00 19,456 ----a-w c:\windows\system32\shutdown.exe
- 2008-04-14 00:12:05 13,312 ----a-w c:\windows\system32\sigtab.dll
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\sigtab.dll
- 2008-04-14 00:12:35 70,144 ----a-w c:\windows\system32\sigverif.exe
+ 2004-08-04 10:00:00 70,144 ----a-w c:\windows\system32\sigverif.exe
- 2001-08-23 12:00:00 13,824 ----a-w c:\windows\system32\sisbkup.dll
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\sisbkup.dll
- 2001-08-23 12:00:00 5,632 ----a-w c:\windows\system32\skdll.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\skdll.dll
- 2008-04-14 00:12:35 26,112 ----a-w c:\windows\system32\skeys.exe
+ 2004-08-04 10:00:00 26,112 ----a-w c:\windows\system32\skeys.exe
- 2008-04-14 00:12:06 25,088 ----a-w c:\windows\system32\slayerxp.dll
+ 2004-08-04 10:00:00 25,088 ----a-w c:\windows\system32\slayerxp.dll
- 2004-08-04 04:31:44 306,176 ----a-w c:\windows\system32\slbcsp.dll
+ 2004-08-04 10:00:00 306,176 ----a-w c:\windows\system32\slbcsp.dll
- 2008-04-14 00:12:06 98,304 ----a-w c:\windows\system32\slbiop.dll
+ 2004-08-04 10:00:00 98,304 ----a-w c:\windows\system32\slbiop.dll
- 2001-08-23 12:00:00 14,848 ----a-w c:\windows\system32\slbrccsp.dll
+ 2004-08-04 10:00:00 14,848 ----a-w c:\windows\system32\slbrccsp.dll
- 2008-04-14 00:12:06 73,832 ------w c:\windows\system32\slcoinst.dll
+ 2004-08-04 05:56:46 73,832 ----a-w c:\windows\system32\slcoinst.dll
- 2008-04-14 00:12:06 286,792 ------w c:\windows\system32\slextspk.dll
+ 2004-08-04 05:56:46 286,792 ----a-w c:\windows\system32\slextspk.dll
- 2008-04-14 00:12:06 188,508 ------w c:\windows\system32\slgen.dll
+ 2004-08-04 05:56:46 188,508 ----a-w c:\windows\system32\slgen.dll
- 2008-04-14 00:12:35 73,796 ------w c:\windows\system32\slserv.exe
+ 2004-08-04 05:56:58 73,796 ----a-w c:\windows\system32\slserv.exe
- 2008-04-14 00:12:35 8,192 ------w c:\windows\system32\smbinst.exe
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\smbinst.exe
- 2008-04-14 00:12:06 362,496 ----a-w c:\windows\system32\smlogcfg.dll
+ 2004-08-04 10:00:00 363,008 ----a-w c:\windows\system32\smlogcfg.dll
- 2008-04-14 00:12:35 89,600 ----a-w c:\windows\system32\smlogsvc.exe
+ 2004-08-04 10:00:00 89,600 ----a-w c:\windows\system32\smlogsvc.exe
- 2008-04-14 00:12:36 50,688 ----a-w c:\windows\system32\smss.exe
+ 2004-08-04 10:00:00 50,688 ----a-w c:\windows\system32\smss.exe
- 2008-04-14 00:12:06 10,752 ------w c:\windows\system32\smtpapi.dll
+ 2004-08-04 10:00:00 10,752 ----a-w c:\windows\system32\smtpapi.dll
- 2008-04-14 00:12:36 131,584 ----a-w c:\windows\system32\sndrec32.exe
+ 2004-08-04 10:00:00 131,584 ----a-w c:\windows\system32\sndrec32.exe
- 2008-04-14 00:12:06 18,944 ----a-w c:\windows\system32\snmpapi.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\snmpapi.dll
- 2008-04-14 00:12:06 182,272 ----a-w c:\windows\system32\snmpsnap.dll
+ 2004-08-04 10:00:00 182,272 ----a-w c:\windows\system32\snmpsnap.dll
- 2001-08-23 12:00:00 5,632 ----a-w c:\windows\system32\softpub.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\softpub.dll
- 2008-04-14 00:12:36 24,576 ----a-w c:\windows\system32\sort.exe
+ 2004-08-04 10:00:00 23,552 ----a-w c:\windows\system32\sort.exe
- 2001-08-23 12:00:00 1,744 ----a-w c:\windows\system32\sound.drv
+ 2004-08-04 10:00:00 1,744 ----a-w c:\windows\system32\sound.drv
- 2008-04-14 00:12:36 538,624 ----a-w c:\windows\system32\spider.exe
+ 2004-08-04 10:00:00 538,624 ----a-w c:\windows\system32\spider.exe
- 2008-04-13 18:43:31 12,800 ------w c:\windows\system32\spiisupd.exe
+ 2004-08-04 10:00:00 12,800 ----a-w c:\windows\system32\spiisupd.exe
- 2001-08-23 12:00:00 69,632 ----a-w c:\windows\system32\spnike.dll
+ 2004-08-04 10:00:00 69,632 ----a-w c:\windows\system32\spnike.dll
- 2008-04-14 10:42:38 11,264 ------w c:\windows\system32\spnpinst.exe
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\spnpinst.exe
- 2008-04-14 00:12:06 75,264 ----a-w c:\windows\system32\spoolss.dll
+ 2004-08-04 10:00:00 74,752 ----a-w c:\windows\system32\spoolss.dll
- 2008-04-14 00:12:36 57,856 ----a-w c:\windows\system32\spoolsv.exe
+ 2004-08-04 10:00:00 57,856 ----a-w c:\windows\system32\spoolsv.exe
- 2001-08-23 12:00:00 9,728 ----a-w c:\windows\system32\sprestrt.exe
+ 2004-08-04 10:00:00 9,728 ----a-w c:\windows\system32\sprestrt.exe
- 2001-08-23 12:00:00 70,656 ----a-w c:\windows\system32\sprio600.dll
+ 2004-08-04 10:00:00 70,656 ----a-w c:\windows\system32\sprio600.dll
- 2001-08-23 12:00:00 72,192 ----a-w c:\windows\system32\sprio800.dll
+ 2004-08-04 10:00:00 72,192 ----a-w c:\windows\system32\sprio800.dll
- 2001-08-23 12:00:00 24,661 ----a-w c:\windows\system32\spxcoins.dll
+ 2004-08-04 10:00:00 24,661 ----a-w c:\windows\system32\spxcoins.dll
- 2008-04-14 00:12:06 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
+ 2004-08-04 10:00:00 442,368 ----a-w c:\windows\system32\sqlsrv32.dll
- 2008-04-14 00:12:06 180,800 ----a-w c:\windows\system32\sqlunirl.dll
+ 2004-08-04 10:00:00 180,800 ----a-w c:\windows\system32\sqlunirl.dll
- 2001-08-23 12:00:00 24,603 ----a-w c:\windows\system32\sqlwid.dll
+ 2004-08-04 10:00:00 24,603 ----a-w c:\windows\system32\sqlwid.dll
- 2001-08-23 12:00:00 49,179 ----a-w c:\windows\system32\sqlwoa.dll
+ 2004-08-04 10:00:00 49,179 ----a-w c:\windows\system32\sqlwoa.dll
- 2008-04-14 00:12:07 67,584 ----a-w c:\windows\system32\srclient.dll
+ 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\srclient.dll
- 2008-04-14 00:12:07 239,104 ----a-w c:\windows\system32\srrstr.dll
+ 2004-08-04 10:00:00 239,104 ----a-w c:\windows\system32\srrstr.dll
- 2008-04-14 00:12:07 171,008 ----a-w c:\windows\system32\srsvc.dll
+ 2004-08-04 10:00:00 170,496 ----a-w c:\windows\system32\srsvc.dll
- 2008-04-14 00:12:07 96,768 ----a-w c:\windows\system32\srvsvc.dll
+ 2004-08-04 10:00:00 96,768 ----a-w c:\windows\system32\srvsvc.dll
- 2008-04-14 00:12:43 704,512 ----a-w c:\windows\system32\ss3dfo.scr
+ 2004-08-04 10:00:00 704,512 ----a-w c:\windows\system32\ss3dfo.scr
- 2008-04-14 00:12:43 19,968 ----a-w c:\windows\system32\ssbezier.scr
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\ssbezier.scr
- 2008-04-14 00:12:07 34,816 ----a-w c:\windows\system32\ssdpapi.dll
+ 2004-08-04 10:00:00 34,816 ----a-w c:\windows\system32\ssdpapi.dll
- 2008-04-14 00:12:07 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
+ 2004-08-04 10:00:00 71,680 ----a-w c:\windows\system32\ssdpsrv.dll
- 2008-04-14 00:12:43 393,216 ----a-w c:\windows\system32\ssflwbox.scr
+ 2004-08-04 10:00:00 393,216 ----a-w c:\windows\system32\ssflwbox.scr
- 2008-04-14 00:12:44 20,992 ----a-w c:\windows\system32\ssmarque.scr
+ 2004-08-04 10:00:00 20,992 ----a-w c:\windows\system32\ssmarque.scr
- 2008-04-14 00:12:44 47,104 ----a-w c:\windows\system32\ssmypics.scr
+ 2004-08-04 10:00:00 47,104 ----a-w c:\windows\system32\ssmypics.scr
- 2008-04-14 00:12:44 18,944 ----a-w c:\windows\system32\ssmyst.scr
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\ssmyst.scr
- 2008-04-14 00:12:44 610,304 ----a-w c:\windows\system32\sspipes.scr
+ 2004-08-04 10:00:00 610,304 ----a-w c:\windows\system32\sspipes.scr
- 2008-04-14 00:12:44 14,336 ----a-w c:\windows\system32\ssstars.scr
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\ssstars.scr
- 2008-04-14 00:12:44 679,936 ----a-w c:\windows\system32\sstext3d.scr
+ 2004-08-04 10:00:00 679,936 ----a-w c:\windows\system32\sstext3d.scr
- 2008-04-14 00:12:07 59,392 ----a-w c:\windows\system32\stclient.dll
+ 2004-08-04 10:00:00 54,272 ----a-w c:\windows\system32\stclient.dll
- 2008-04-14 00:12:07 68,096 ----a-w c:\windows\system32\sti.dll
+ 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\sti.dll
- 2008-04-14 00:12:07 136,704 ----a-w c:\windows\system32\sti_ci.dll
+ 2004-08-04 10:00:00 136,704 ----a-w c:\windows\system32\sti_ci.dll
- 2008-04-14 00:12:36 14,848 ----a-w c:\windows\system32\stimon.exe
+ 2004-08-04 10:00:00 14,848 ----a-w c:\windows\system32\stimon.exe
- 2008-04-14 00:12:07 121,856 ----a-w c:\windows\system32\stobject.dll
+ 2004-08-04 10:00:00 121,856 ----a-w c:\windows\system32\stobject.dll
- 2001-08-23 12:00:00 4,208 ----a-w c:\windows\system32\storage.dll
+ 2004-08-04 10:00:00 4,208 ----a-w c:\windows\system32\storage.dll
- 2008-04-14 00:12:07 74,752 ----a-w c:\windows\system32\storprop.dll
+ 2004-08-04 05:56:46 74,752 ----a-w c:\windows\system32\storprop.dll
- 2001-08-23 12:00:00 8,192 ----a-w c:\windows\system32\streamci.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\streamci.dll
- 2008-10-03 10:02:42 247,326 ----a-w c:\windows\system32\strmdll.dll
+ 2004-08-04 10:00:00 246,302 ----a-w c:\windows\system32\strmdll.dll
- 2008-04-14 00:12:07 75,776 ------w c:\windows\system32\strmfilt.dll
+ 2004-08-04 10:00:00 75,776 ----a-w c:\windows\system32\strmfilt.dll
- 2001-08-23 12:00:00 9,216 ----a-w c:\windows\system32\subst.exe
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\subst.exe
- 2008-04-14 00:12:36 14,336 ----a-w c:\windows\system32\svchost.exe
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\svchost.exe
- 2001-08-23 12:00:00 6,144 ----a-w c:\windows\system32\svcpack.dll
+ 2004-08-04 10:00:00 6,144 ----a-w c:\windows\system32\svcpack.dll
- 2001-08-23 12:00:00 138,752 ----a-w c:\windows\system32\swprv.dll
+ 2004-08-04 10:00:00 138,752 ----a-w c:\windows\system32\swprv.dll
- 2008-04-14 00:12:07 713,216 ----a-w c:\windows\system32\sxs.dll
+ 2004-08-04 10:00:00 713,216 ----a-w c:\windows\system32\sxs.dll
- 2001-08-23 12:00:00 51,200 ----a-w c:\windows\system32\syncapp.exe
+ 2004-08-04 10:00:00 51,200 ----a-w c:\windows\system32\syncapp.exe
- 2008-04-14 00:12:07 57,856 ----a-w c:\windows\system32\synceng.dll
+ 2004-08-04 10:00:00 57,856 ----a-w c:\windows\system32\synceng.dll
- 2008-04-14 00:12:07 191,488 ----a-w c:\windows\system32\syncui.dll
+ 2004-08-04 10:00:00 191,488 ----a-w c:\windows\system32\syncui.dll
- 2001-08-23 12:00:00 18,896 ----a-w c:\windows\system32\sysedit.exe
+ 2004-08-04 10:00:00 18,896 ----a-w c:\windows\system32\sysedit.exe
- 2001-08-23 12:00:00 15,872 ----a-w c:\windows\system32\sysinv.dll
+ 2004-08-04 10:00:00 15,872 ----a-w c:\windows\system32\sysinv.dll
- 2001-08-23 12:00:00 36,864 ----a-w c:\windows\system32\syskey.exe
+ 2004-08-04 10:00:00 36,864 ----a-w c:\windows\system32\syskey.exe
- 2008-04-14 00:12:37 106,496 ----a-w c:\windows\system32\sysocmgr.exe
+ 2004-08-04 10:00:00 105,984 ----a-w c:\windows\system32\sysocmgr.exe
- 2008-04-14 00:12:07 990,208 ----a-w c:\windows\system32\syssetup.dll
+ 2004-08-04 10:00:00 984,576 ----a-w c:\windows\system32\syssetup.dll
- 2001-08-23 12:00:00 3,360 ----a-w c:\windows\system32\system.drv
+ 2004-08-04 10:00:00 3,360 ----a-w c:\windows\system32\system.drv
- 2008-04-14 00:12:36 71,680 ----a-w c:\windows\system32\systeminfo.exe
+ 2004-08-04 10:00:00 68,096 ----a-w c:\windows\system32\systeminfo.exe
- 2001-08-23 12:00:00 3,072 ----a-w c:\windows\system32\systray.exe
+ 2004-08-04 10:00:00 3,072 ----a-w c:\windows\system32\systray.exe
- 2008-04-14 00:12:07 117,760 ----a-w c:\windows\system32\t2embed.dll
+ 2004-08-04 10:00:00 210,432 ----a-w c:\windows\system32\t2embed.dll
- 2001-08-23 12:00:00 19,200 ----a-w c:\windows\system32\tapi.dll
+ 2004-08-04 10:00:00 19,200 ----a-w c:\windows\system32\tapi.dll
- 2008-04-14 00:12:07 858,624 ----a-w c:\windows\system32\tapi3.dll
+ 2004-08-04 10:00:00 858,624 ----a-w c:\windows\system32\tapi3.dll
- 2008-04-14 00:12:07 181,760 ----a-w c:\windows\system32\tapi32.dll
+ 2004-08-04 10:00:00 181,760 ----a-w c:\windows\system32\tapi32.dll
- 2001-08-23 12:00:00 5,632 ----a-w c:\windows\system32\tapiperf.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\tapiperf.dll
- 2008-04-14 00:12:07 249,856 ----a-w c:\windows\system32\tapisrv.dll
+ 2004-08-04 10:00:00 246,272 ----a-w c:\windows\system32\tapisrv.dll
- 2001-08-23 12:00:00 78,848 ----a-w c:\windows\system32\tapiui.dll
+ 2004-08-04 10:00:00 78,848 ----a-w c:\windows\system32\tapiui.dll
- 2008-04-14 00:12:37 76,288 ----a-w c:\windows\system32\taskkill.exe
+ 2004-08-04 10:00:00 72,192 ----a-w c:\windows\system32\taskkill.exe
- 2008-04-14 00:12:37 77,824 ----a-w c:\windows\system32\tasklist.exe
+ 2004-08-04 10:00:00 72,192 ----a-w c:\windows\system32\tasklist.exe
- 2001-08-23 12:00:00 15,360 ----a-w c:\windows\system32\taskman.exe
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\taskman.exe
- 2008-04-14 00:12:37 135,680 ----a-w c:\windows\system32\taskmgr.exe
+ 2004-08-04 10:00:00 135,680 ----a-w c:\windows\system32\taskmgr.exe
- 2001-08-23 12:00:00 12,288 ----a-w c:\windows\system32\tcmsetup.exe
+ 2004-08-04 10:00:00 12,288 ----a-w c:\windows\system32\tcmsetup.exe
- 2008-04-14 00:12:07 14,848 ----a-w c:\windows\system32\tcpmib.dll
+ 2004-08-04 10:00:00 14,848 ----a-w c:\windows\system32\tcpmib.dll
- 2008-04-14 00:12:07 45,568 ----a-w c:\windows\system32\tcpmon.dll
+ 2004-08-04 10:00:00 45,568 ----a-w c:\windows\system32\tcpmon.dll
- 2008-04-14 00:12:07 45,568 ----a-w c:\windows\system32\tcpmonui.dll
+ 2004-08-04 10:00:00 45,568 ----a-w c:\windows\system32\tcpmonui.dll
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\system32\tcpsvcs.exe
+ 2004-08-04 10:00:00 19,456 ----a-w c:\windows\system32\tcpsvcs.exe
- 2008-04-14 00:12:37 75,776 ----a-w c:\windows\system32\telnet.exe
+ 2004-08-04 10:00:00 75,264 ----a-w c:\windows\system32\telnet.exe
- 2008-04-14 00:12:07 358,400 ----a-w c:\windows\system32\termmgr.dll
+ 2004-08-04 10:00:00 358,400 ----a-w c:\windows\system32\termmgr.dll
- 2008-04-14 00:12:07 295,424 ----a-w c:\windows\system32\termsrv.dll
+ 2004-08-04 10:00:00 295,424 ----a-w c:\windows\system32\termsrv.dll
- 2001-08-23 12:00:00 16,896 ----a-w c:\windows\system32\tftp.exe
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\tftp.exe
- 2008-04-14 00:12:07 385,536 ----a-w c:\windows\system32\themeui.dll
+ 2004-08-04 10:00:00 385,536 ----a-w c:\windows\system32\themeui.dll
- 2001-08-23 12:00:00 4,048 ----a-w c:\windows\system32\timer.drv
+ 2004-08-04 10:00:00 4,048 ----a-w c:\windows\system32\timer.drv
- 2008-04-14 00:12:37 61,440 ----a-w c:\windows\system32\tlntadmn.exe
+ 2004-08-04 10:00:00 61,440 ----a-w c:\windows\system32\tlntadmn.exe
- 2008-04-14 00:12:37 78,336 ----a-w c:\windows\system32\tlntsess.exe
+ 2004-08-04 10:00:00 78,336 ----a-w c:\windows\system32\tlntsess.exe
- 2008-04-14 00:12:38 73,216 ----a-w c:\windows\system32\tlntsvr.exe
+ 2004-08-04 10:00:00 73,216 ----a-w c:\windows\system32\tlntsvr.exe
- 2008-04-14 00:12:07 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
+ 2004-08-04 10:00:00 7,168 ----a-w c:\windows\system32\tlntsvrp.dll
- 2001-08-23 12:00:00 13,888 ----a-w c:\windows\system32\toolhelp.dll
+ 2004-08-04 10:00:00 13,888 ----a-w c:\windows\system32\toolhelp.dll
- 2008-04-14 00:12:38 347,136 ----a-w c:\windows\system32\tourstart.exe
+ 2004-08-04 10:00:00 347,136 ----a-w c:\windows\system32\tourstart.exe
- 2008-04-14 00:12:38 259,584 ----a-w c:\windows\system32\tracerpt.exe
+ 2004-08-04 10:00:00 259,584 ----a-w c:\windows\system32\tracerpt.exe
- 2008-04-14 00:12:38 12,288 ----a-w c:\windows\system32\tracert.exe
+ 2004-08-04 10:00:00 12,288 ----a-w c:\windows\system32\tracert.exe
- 2001-08-23 12:00:00 31,744 ----a-w c:\windows\system32\tracert6.exe
+ 2004-08-04 10:00:00 31,744 ----a-w c:\windows\system32\tracert6.exe
- 2001-08-23 12:00:00 31,232 ----a-w c:\windows\system32\traffic.dll
+ 2004-08-04 10:00:00 31,232 ----a-w c:\windows\system32\traffic.dll
- 2008-04-14 00:12:42 12,800 ----a-w c:\windows\system32\tree.com
+ 2004-08-04 10:00:00 11,264 ----a-w c:\windows\system32\tree.com
- 2008-04-14 00:12:07 90,112 ----a-w c:\windows\system32\trkwks.dll
+ 2004-08-04 10:00:00 90,624 ----a-w c:\windows\system32\trkwks.dll
- 2001-08-23 12:00:00 52,224 ----a-w c:\windows\system32\tsappcmp.dll
+ 2004-08-04 10:00:00 52,224 ----a-w c:\windows\system32\tsappcmp.dll
- 2001-08-23 12:00:00 8,192 ----a-w c:\windows\system32\tsbyuv.dll
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\tsbyuv.dll
- 2008-04-14 00:12:07 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
+ 2004-08-04 10:00:00 93,696 ----a-w c:\windows\system32\tscfgwmi.dll
- 2001-08-23 12:00:00 15,360 ----a-w c:\windows\system32\tsd32.dll
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\system32\tsd32.dll
- 2008-04-14 00:13:21 12,168 ----a-w c:\windows\system32\tsddd.dll
+ 2004-08-04 10:00:00 12,168 ----a-w c:\windows\system32\tsddd.dll
- 2008-04-14 00:12:07 57,856 ------w c:\windows\system32\twext.dll
+ 2004-08-04 10:00:00 44,032 ----a-w c:\windows\system32\twext.dll
- 2008-04-14 00:12:07 101,376 ----a-w c:\windows\system32\txflog.dll
+ 2004-08-04 10:00:00 101,376 ----a-w c:\windows\system32\txflog.dll
- 2001-08-23 12:00:00 177,856 ----a-w c:\windows\system32\typelib.dll
+ 2004-08-04 10:00:00 177,856 ----a-w c:\windows\system32\typelib.dll
- 2001-08-23 12:00:00 36,352 ----a-w c:\windows\system32\typeperf.exe
+ 2004-08-04 10:00:00 36,352 ----a-w c:\windows\system32\typeperf.exe
- 2008-04-14 00:12:07 26,624 ----a-w c:\windows\system32\udhisapi.dll
+ 2004-08-04 10:00:00 25,600 ----a-w c:\windows\system32\udhisapi.dll
- 2001-08-23 12:00:00 82,432 ----a-w c:\windows\system32\ufat.dll
+ 2004-08-04 10:00:00 82,432 ----a-w c:\windows\system32\ufat.dll
- 2008-04-14 00:12:07 275,456 ----a-w c:\windows\system32\ulib.dll
+ 2004-08-04 10:00:00 275,456 ----a-w c:\windows\system32\ulib.dll
- 2008-04-14 00:12:07 35,840 ----a-w c:\windows\system32\umandlg.dll
+ 2004-08-04 10:00:00 35,840 ----a-w c:\windows\system32\umandlg.dll
- 2001-08-23 12:00:00 13,312 ----a-w c:\windows\system32\umdmxfrm.dll
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\umdmxfrm.dll
- 2008-04-14 00:12:07 123,392 ----a-w c:\windows\system32\umpnpmgr.dll
+ 2004-08-04 10:00:00 118,272 ----a-w c:\windows\system32\umpnpmgr.dll
- 2008-04-14 00:12:07 74,240 ----a-w c:\windows\system32\unimdmat.dll
+ 2004-08-04 10:00:00 74,240 ----a-w c:\windows\system32\unimdmat.dll
- 2008-04-14 00:12:07 13,824 ----a-w c:\windows\system32\uniplat.dll
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\uniplat.dll
- 2001-08-23 12:00:00 4,096 ----a-w c:\windows\system32\unlodctr.exe
+ 2004-08-04 10:00:00 4,096 ----a-w c:\windows\system32\unlodctr.exe
- 2008-04-14 00:12:07 316,416 ----a-w c:\windows\system32\untfs.dll
+ 2004-08-04 10:00:00 316,416 ----a-w c:\windows\system32\untfs.dll
- 2008-04-14 00:12:08 133,632 ----a-w c:\windows\system32\upnp.dll
+ 2004-08-04 10:00:00 132,608 ----a-w c:\windows\system32\upnp.dll
- 2008-04-14 00:12:38 16,896 ----a-w c:\windows\system32\upnpcont.exe
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\upnpcont.exe
- 2008-04-14 00:12:08 185,856 ----a-w c:\windows\system32\upnphost.dll
+ 2004-08-04 10:00:00 185,344 ----a-w c:\windows\system32\upnphost.dll
- 2008-04-14 00:12:08 239,616 ----a-w c:\windows\system32\upnpui.dll
+ 2004-08-04 10:00:00 239,616 ----a-w c:\windows\system32\upnpui.dll
- 2008-04-14 00:12:38 18,432 ----a-w c:\windows\system32\ups.exe
+ 2004-08-04 10:00:00 18,432 ----a-w c:\windows\system32\ups.exe
- 2001-08-23 12:00:00 17,920 ----a-w c:\windows\system32\ureg.dll
+ 2004-08-04 10:00:00 17,920 ----a-w c:\windows\system32\ureg.dll
- 2008-10-16 20:38:39 105,984 ----a-w c:\windows\system32\url.dll
+ 2004-08-04 10:00:00 37,888 ----a-w c:\windows\system32\url.dll
- 2008-10-16 20:38:39 1,160,192 ----a-w c:\windows\system32\urlmon.dll
+ 2006-03-18 11:09:38 613,376 ----a-w c:\windows\system32\urlmon.dll
- 2008-04-14 00:12:08 16,896 ----a-w c:\windows\system32\usbmon.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\usbmon.dll
- 2008-04-14 00:12:08 74,240 ----a-w c:\windows\system32\usbui.dll
+ 2004-08-04 10:00:00 74,240 ----a-w c:\windows\system32\usbui.dll
- 2001-08-23 12:00:00 47,872 ----a-w c:\windows\system32\user.exe
+ 2004-08-04 10:00:00 47,872 ----a-w c:\windows\system32\user.exe
- 2008-04-14 00:12:08 578,560 ----a-w c:\windows\system32\user32.dll
+ 2004-08-04 10:00:00 577,024 ----a-w c:\windows\system32\user32.dll
- 2008-04-14 00:12:08 727,040 ----a-w c:\windows\system32\userenv.dll
+ 2004-08-04 10:00:00 723,456 ----a-w c:\windows\system32\userenv.dll
- 2004-08-04 06:56:58 24,576 ----a-w c:\windows\system32\userinit.exe
+ 2004-08-04 10:00:00 24,576 ----a-w c:\windows\system32\userinit.exe
- 2008-04-14 00:11:54 133,120 ----a-w c:\windows\system32\usmt\guitrn.dll
+ 2004-08-04 10:00:00 123,904 ----a-w c:\windows\system32\usmt\guitrn.dll
- 2004-08-04 06:56:44 108,544 ----a-w c:\windows\system32\usmt\guitrn_a.dll
+ 2004-08-04 10:00:00 108,544 ----a-w c:\windows\system32\usmt\guitrn_a.dll
- 2008-04-13 16:44:29 2,560 ----a-w c:\windows\system32\usmt\iconlib.dll
+ 2004-08-04 10:00:00 4,096 ----a-w c:\windows\system32\usmt\iconlib.dll
- 2008-04-14 00:11:56 19,968 ----a-w c:\windows\system32\usmt\log.dll
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\usmt\log.dll
- 2008-04-14 00:11:57 274,432 ----a-w c:\windows\system32\usmt\migism.dll
+ 2004-08-04 10:00:00 201,216 ----a-w c:\windows\system32\usmt\migism.dll
- 2004-08-04 06:56:44 192,512 ----a-w c:\windows\system32\usmt\migism_a.dll
+ 2004-08-04 10:00:00 192,512 ----a-w c:\windows\system32\usmt\migism_a.dll
- 2008-04-14 00:12:25 103,936 ----a-w c:\windows\system32\usmt\migload.exe
+ 2004-08-04 10:00:00 103,424 ----a-w c:\windows\system32\usmt\migload.exe
- 2008-04-14 00:12:25 245,248 ----a-w c:\windows\system32\usmt\migwiz.exe
+ 2004-08-04 10:00:00 240,128 ----a-w c:\windows\system32\usmt\migwiz.exe
- 2004-08-04 06:56:52 236,032 ----a-w c:\windows\system32\usmt\migwiz_a.exe
+ 2004-08-04 10:00:00 236,032 ----a-w c:\windows\system32\usmt\migwiz_a.exe
- 2008-04-14 00:12:05 215,552 ----a-w c:\windows\system32\usmt\script.dll
+ 2004-08-04 10:00:00 202,752 ----a-w c:\windows\system32\usmt\script.dll
- 2004-08-04 06:56:46 188,416 ----a-w c:\windows\system32\usmt\script_a.dll
+ 2004-08-04 10:00:00 188,416 ----a-w c:\windows\system32\usmt\script_a.dll
- 2008-04-14 00:12:07 193,024 ----a-w c:\windows\system32\usmt\sysmod.dll
+ 2004-08-04 10:00:00 168,960 ----a-w c:\windows\system32\usmt\sysmod.dll
- 2004-08-04 06:56:48 155,648 ----a-w c:\windows\system32\usmt\sysmod_a.dll
+ 2004-08-04 10:00:00 155,648 ----a-w c:\windows\system32\usmt\sysmod_a.dll
- 2008-04-14 00:12:08 406,016 ----a-w c:\windows\system32\usp10.dll
+ 2004-08-04 10:00:00 406,528 ----a-w c:\windows\system32\usp10.dll
- 2001-08-23 12:00:00 61,500 ----a-w c:\windows\system32\usrcntra.dll
+ 2004-08-04 10:00:00 61,500 ----a-w c:\windows\system32\usrcntra.dll
- 2001-08-23 12:00:00 69,699 ----a-w c:\windows\system32\usrcoina.dll
+ 2004-08-04 10:00:00 69,699 ----a-w c:\windows\system32\usrcoina.dll
- 2001-08-23 12:00:00 77,890 ----a-w c:\windows\system32\usrdpa.dll
+ 2004-08-04 10:00:00 77,890 ----a-w c:\windows\system32\usrdpa.dll
- 2001-08-23 12:00:00 323,641 ----a-w c:\windows\system32\usrdtea.dll
+ 2004-08-04 10:00:00 323,641 ----a-w c:\windows\system32\usrdtea.dll
- 2001-08-23 12:00:00 86,073 ----a-w c:\windows\system32\usrfaxa.dll
+ 2004-08-04 10:00:00 86,073 ----a-w c:\windows\system32\usrfaxa.dll
- 2001-08-23 12:00:00 53,305 ----a-w c:\windows\system32\usrlbva.dll
+ 2004-08-04 10:00:00 53,305 ----a-w c:\windows\system32\usrlbva.dll
- 2001-08-23 12:00:00 77,891 ----a-w c:\windows\system32\usrmlnka.exe
+ 2004-08-04 10:00:00 77,891 ----a-w c:\windows\system32\usrmlnka.exe
- 2001-08-23 12:00:00 61,508 ----a-w c:\windows\system32\usrprbda.exe
+ 2004-08-04 10:00:00 61,508 ----a-w c:\windows\system32\usrprbda.exe
- 2001-08-23 12:00:00 77,883 ----a-w c:\windows\system32\usrrtosa.dll
+ 2004-08-04 10:00:00 77,883 ----a-w c:\windows\system32\usrrtosa.dll
- 2001-08-23 12:00:00 49,211 ----a-w c:\windows\system32\usrsdpia.dll
+ 2004-08-04 10:00:00 49,211 ----a-w c:\windows\system32\usrsdpia.dll
- 2001-08-23 12:00:00 69,700 ----a-w c:\windows\system32\usrshuta.exe
+ 2004-08-04 10:00:00 69,700 ----a-w c:\windows\system32\usrshuta.exe
- 2001-08-23 12:00:00 41,019 ----a-w c:\windows\system32\usrsvpia.dll
+ 2004-08-04 10:00:00 41,019 ----a-w c:\windows\system32\usrsvpia.dll
- 2001-08-23 12:00:00 102,457 ----a-w c:\windows\system32\usrv42a.dll
+ 2004-08-04 10:00:00 102,457 ----a-w c:\windows\system32\usrv42a.dll
- 2001-08-23 12:00:00 49,209 ----a-w c:\windows\system32\usrv80a.dll
+ 2004-08-04 10:00:00 49,209 ----a-w c:\windows\system32\usrv80a.dll
- 2001-08-23 12:00:00 45,116 ----a-w c:\windows\system32\usrvoica.dll
+ 2004-08-04 10:00:00 45,116 ----a-w c:\windows\system32\usrvoica.dll
- 2001-08-23 12:00:00 49,211 ----a-w c:\windows\system32\usrvpa.dll
+ 2004-08-04 10:00:00 49,211 ----a-w c:\windows\system32\usrvpa.dll
- 2001-08-23 12:00:00 25,600 ----a-w c:\windows\system32\utildll.dll
+ 2004-08-04 10:00:00 25,600 ----a-w c:\windows\system32\utildll.dll
- 2008-04-14 00:12:38 50,176 ----a-w c:\windows\system32\utilman.exe
+ 2004-08-04 10:00:00 50,176 ----a-w c:\windows\system32\utilman.exe
- 2006-10-19 03:58:00 8,704 ----a-w c:\windows\system32\uwdf.exe
+ 2004-08-11 07:45:04 47,104 ----a-w c:\windows\system32\uwdf.exe
- 2008-04-14 00:12:08 218,624 ----a-w c:\windows\system32\uxtheme.dll
+ 2004-08-04 10:00:00 218,624 ----a-w c:\windows\system32\uxtheme.dll
- 2008-04-14 00:12:08 30,749 ----a-w c:\windows\system32\vbajet32.dll
+ 2004-08-04 10:00:00 30,749 ----a-w c:\windows\system32\vbajet32.dll
- 2008-05-09 10:53:40 430,080 ----a-w c:\windows\system32\vbscript.dll
+ 2004-08-04 10:00:00 417,792 ----a-w c:\windows\system32\vbscript.dll
- 2001-08-23 12:00:00 7,680 ----a-w c:\windows\system32\vcdex.dll
+ 2004-08-04 10:00:00 7,680 ----a-w c:\windows\system32\vcdex.dll
- 2008-04-14 00:12:08 26,112 ----a-w c:\windows\system32\vdmdbg.dll
+ 2004-08-04 10:00:00 26,112 ----a-w c:\windows\system32\vdmdbg.dll
- 2008-04-14 00:12:08 51,712 ----a-w c:\windows\system32\vdmredir.dll
+ 2004-08-04 10:00:00 51,712 ----a-w c:\windows\system32\vdmredir.dll
- 2001-08-23 12:00:00 9,008 ----a-w c:\windows\system32\ver.dll
+ 2004-08-04 10:00:00 9,008 ----a-w c:\windows\system32\ver.dll
- 2008-04-14 00:12:08 26,624 ----a-w c:\windows\system32\verifier.dll
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\verifier.dll
- 2001-08-23 12:00:00 98,304 ----a-w c:\windows\system32\verifier.exe
+ 2004-08-04 10:00:00 98,304 ----a-w c:\windows\system32\verifier.exe
- 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\version.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\version.dll
- 2001-08-23 12:00:00 9,344 ----a-w c:\windows\system32\vga.dll
+ 2004-08-04 10:00:00 9,344 ----a-w c:\windows\system32\vga.dll
- 2001-08-23 12:00:00 2,176 ----a-w c:\windows\system32\vga.drv
+ 2004-08-04 10:00:00 2,176 ----a-w c:\windows\system32\vga.drv
- 2001-08-23 12:00:00 51,456 ----a-w c:\windows\system32\vga256.dll
+ 2004-08-04 10:00:00 51,456 ----a-w c:\windows\system32\vga256.dll
- 2001-08-23 12:00:00 18,176 ----a-w c:\windows\system32\vga64k.dll
+ 2004-08-04 10:00:00 18,176 ----a-w c:\windows\system32\vga64k.dll
- 2001-08-23 12:00:00 4,608 ----a-w c:\windows\system32\vjoy.dll
+ 2004-08-04 10:00:00 4,608 ----a-w c:\windows\system32\vjoy.dll
- 2001-08-23 12:00:00 16,896 ----a-w c:\windows\system32\vss_ps.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\vss_ps.dll
- 2001-08-23 12:00:00 33,792 ----a-w c:\windows\system32\vssadmin.exe
+ 2004-08-04 10:00:00 33,792 ----a-w c:\windows\system32\vssadmin.exe
- 2008-04-14 00:12:08 430,592 ----a-w c:\windows\system32\vssapi.dll
+ 2004-08-04 10:00:00 430,592 ----a-w c:\windows\system32\vssapi.dll
- 2008-04-14 00:12:38 289,792 ----a-w c:\windows\system32\vssvc.exe
+ 2004-08-04 10:00:00 289,792 ----a-w c:\windows\system32\vssvc.exe
- 2001-08-23 12:00:00 19,456 ----a-w c:\windows\system32\vwipxspx.dll
+ 2004-08-04 10:00:00 19,456 ----a-w c:\windows\system32\vwipxspx.dll
- 2008-04-14 00:12:08 175,104 ----a-w c:\windows\system32\w32time.dll
+ 2004-08-04 10:00:00 174,592 ----a-w c:\windows\system32\w32time.dll
- 2001-08-23 12:00:00 49,664 ----a-w c:\windows\system32\w32tm.exe
+ 2004-08-04 10:00:00 49,664 ----a-w c:\windows\system32\w32tm.exe
- 2001-08-23 12:00:00 22,016 ----a-w c:\windows\system32\w32topl.dll
+ 2004-08-04 10:00:00 22,016 ----a-w c:\windows\system32\w32topl.dll
- 2008-04-14 00:12:08 15,872 ------w c:\windows\system32\w3ssl.dll
+ 2004-08-04 10:00:00 15,872 ----a-w c:\windows\system32\w3ssl.dll
- 2008-04-13 18:44:59 17,664 ----a-w c:\windows\system32\watchdog.sys
+ 2004-08-04 10:00:00 17,664 ----a-w c:\windows\system32\watchdog.sys
- 2008-04-14 00:12:08 215,552 ----a-w c:\windows\system32\wavemsp.dll
+ 2004-08-04 10:00:00 208,896 ----a-w c:\windows\system32\wavemsp.dll
- 2008-04-14 00:11:50 1,358,848 ----a-w c:\windows\system32\wbem\cimwin32.dll
+ 2004-08-04 10:00:00 1,352,192 ----a-w c:\windows\system32\wbem\cimwin32.dll
- 2008-04-14 00:11:53 45,056 ----a-w c:\windows\system32\wbem\cmdevtgprov.dll
+ 2004-08-04 10:00:00 45,568 ----a-w c:\windows\system32\wbem\CmdEvTgProv.dll
- 2008-04-14 00:11:53 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
+ 2004-08-04 10:00:00 247,808 ----a-w c:\windows\system32\wbem\esscli.dll
- 2008-04-14 00:11:53 21,504 ----a-w c:\windows\system32\wbem\evntrprv.dll
+ 2004-08-04 10:00:00 22,016 ----a-w c:\windows\system32\wbem\evntrprv.dll
- 2008-04-14 00:11:53 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
+ 2004-08-04 10:00:00 472,064 ----a-w c:\windows\system32\wbem\fastprox.dll
- 2008-04-14 00:11:53 185,344 ----a-w c:\windows\system32\wbem\framedyn.dll
+ 2004-08-04 10:00:00 185,856 ----a-w c:\windows\system32\wbem\framedyn.dll
- 2008-04-14 00:11:56 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
+ 2004-08-04 10:00:00 24,576 ----a-w c:\windows\system32\wbem\krnlprov.dll
- 2008-04-14 00:12:26 16,384 ----a-w c:\windows\system32\wbem\mofcomp.exe
+ 2004-08-04 10:00:00 16,384 ----a-w c:\windows\system32\wbem\mofcomp.exe
- 2008-04-14 00:11:57 123,904 ----a-w c:\windows\system32\wbem\mofd.dll
+ 2004-08-04 10:00:00 123,904 ----a-w c:\windows\system32\wbem\mofd.dll
- 2008-04-14 00:12:01 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
+ 2004-08-04 10:00:00 47,104 ----a-w c:\windows\system32\wbem\ncprov.dll
- 2008-04-14 00:12:02 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
+ 2004-08-04 10:00:00 212,992 ----a-w c:\windows\system32\wbem\ntevt.dll
- 2008-04-14 00:12:02 92,672 ----a-w c:\windows\system32\wbem\policman.dll
+ 2004-08-04 10:00:00 92,672 ----a-w c:\windows\system32\wbem\policman.dll
- 2008-04-14 00:12:03 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
+ 2004-08-04 10:00:00 237,056 ----a-w c:\windows\system32\wbem\provthrd.dll
- 2008-04-14 00:12:04 178,176 ----a-w c:\windows\system32\wbem\repdrvfs.dll
+ 2004-08-04 10:00:00 177,152 ----a-w c:\windows\system32\wbem\repdrvfs.dll
- 2008-04-14 00:12:34 36,352 ----a-w c:\windows\system32\wbem\scrcons.exe
+ 2004-08-04 10:00:00 36,864 ----a-w c:\windows\system32\wbem\scrcons.exe
- 2008-04-14 00:12:07 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
+ 2004-08-04 10:00:00 86,528 ----a-w c:\windows\system32\wbem\stdprov.dll
- 2008-04-14 00:12:08 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
+ 2004-08-04 10:00:00 131,584 ----a-w c:\windows\system32\wbem\viewprov.dll
- 2008-04-14 00:12:08 196,608 ----a-w c:\windows\system32\wbem\wbemcntl.dll
+ 2004-08-04 10:00:00 196,608 ----a-w c:\windows\system32\wbem\wbemcntl.dll
- 2008-04-14 00:12:08 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
+ 2004-08-04 10:00:00 214,528 ----a-w c:\windows\system32\wbem\wbemcomn.dll
- 2008-04-14 00:12:08 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
+ 2004-08-04 10:00:00 71,680 ----a-w c:\windows\system32\wbem\wbemcons.dll
- 2008-04-14 00:12:08 531,456 ----a-w c:\windows\system32\wbem\wbemcore.dll
+ 2004-08-04 10:00:00 530,944 ----a-w c:\windows\system32\wbem\wbemcore.dll
- 2008-04-14 00:12:08 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
+ 2004-08-04 10:00:00 178,176 ----a-w c:\windows\system32\wbem\wbemdisp.dll
- 2008-04-14 00:12:08 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
+ 2004-08-04 10:00:00 273,920 ----a-w c:\windows\system32\wbem\wbemess.dll
- 2008-04-14 00:12:08 43,008 ----a-w c:\windows\system32\wbem\wbemperf.dll
+ 2004-08-04 10:00:00 43,008 ----a-w c:\windows\system32\wbem\wbemperf.dll
- 2008-04-14 00:12:08 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\wbem\wbemprox.dll
- 2008-04-14 00:12:08 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
+ 2004-08-04 10:00:00 43,520 ----a-w c:\windows\system32\wbem\wbemsvc.dll
- 2008-04-14 00:12:39 116,224 ----a-w c:\windows\system32\wbem\wbemtest.exe
+ 2004-08-04 10:00:00 116,224 ----a-w c:\windows\system32\wbem\wbemtest.exe
- 2008-04-14 00:12:08 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
+ 2004-08-04 10:00:00 197,120 ----a-w c:\windows\system32\wbem\wbemupgd.dll
- 2008-04-14 00:12:40 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
+ 2004-08-04 10:00:00 196,608 ----a-w c:\windows\system32\wbem\wmiadap.exe
- 2008-04-13 17:10:20 6,656 ----a-w c:\windows\system32\wbem\wmiapres.dll
+ 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\wbem\wmiapres.dll
- 2008-04-14 00:12:09 88,576 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
+ 2004-08-04 10:00:00 89,088 ----a-w c:\windows\system32\wbem\wmiaprpl.dll
- 2008-04-14 00:12:40 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
+ 2004-08-04 10:00:00 126,464 ----a-w c:\windows\system32\wbem\wmiapsrv.exe
- 2008-04-14 00:12:40 358,912 ----a-w c:\windows\system32\wbem\wmic.exe
+ 2004-08-04 10:00:00 358,912 ----a-w c:\windows\system32\wbem\wmic.exe
- 2008-04-14 00:12:09 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
+ 2004-08-04 10:00:00 60,928 ----a-w c:\windows\system32\wbem\wmicookr.dll
- 2008-04-14 00:12:09 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
+ 2004-08-04 10:00:00 140,800 ----a-w c:\windows\system32\wbem\wmidcprv.dll
- 2008-04-14 00:12:09 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
+ 2004-08-04 10:00:00 156,672 ----a-w c:\windows\system32\wbem\wmipcima.dll
- 2008-04-14 00:12:09 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
+ 2004-08-04 10:00:00 132,096 ----a-w c:\windows\system32\wbem\wmipdskq.dll
- 2008-04-14 00:12:09 61,952 ----a-w c:\windows\system32\wbem\wmipiprt.dll
+ 2004-08-04 10:00:00 62,464 ----a-w c:\windows\system32\wbem\wmipiprt.dll
- 2008-04-14 00:12:09 62,464 ----a-w c:\windows\system32\wbem\wmipjobj.dll
+ 2004-08-04 10:00:00 62,976 ----a-w c:\windows\system32\wbem\wmipjobj.dll
- 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
+ 2004-08-04 10:00:00 144,896 ----a-w c:\windows\system32\wbem\wmiprov.dll
- 2008-04-14 00:12:09 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
+ 2004-08-04 10:00:00 437,248 ----a-w c:\windows\system32\wbem\wmiprvsd.dll
- 2008-04-14 00:12:40 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
+ 2004-08-04 10:00:00 218,112 ----a-w c:\windows\system32\wbem\wmiprvse.exe
- 2008-04-14 00:12:09 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
+ 2004-08-04 10:00:00 41,472 ----a-w c:\windows\system32\wbem\wmipsess.dll
- 2008-04-14 00:12:09 144,896 ----a-w c:\windows\system32\wbem\wmisvc.dll
+ 2004-08-04 10:00:00 144,896 ----a-w c:\windows\system32\wbem\wmisvc.dll
- 2008-04-14 00:12:09 95,232 ----a-w c:\windows\system32\wbem\wmiutils.dll
+ 2004-08-04 10:00:00 95,232 ----a-w c:\windows\system32\wbem\wmiutils.dll
- 2006-10-19 03:47:18 4,096 ----a-w c:\windows\system32\wdfapi.dll
+ 2004-08-11 07:45:04 15,872 ----a-w c:\windows\system32\wdfapi.dll
- 2006-10-19 03:58:00 8,704 ----a-w c:\windows\system32\wdfmgr.exe
+ 2004-08-11 07:45:04 38,912 ----a-w c:\windows\system32\wdfmgr.exe
- 2008-04-14 00:12:08 49,152 ----a-w c:\windows\system32\wdigest.dll
+ 2004-08-04 10:00:00 49,152 ----a-w c:\windows\system32\wdigest.dll
- 2008-04-14 00:12:45 23,552 ----a-w c:\windows\system32\wdmaud.drv
+ 2004-08-04 10:00:00 23,552 ----a-w c:\windows\system32\wdmaud.drv
- 2008-10-16 20:38:39 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2004-08-04 10:00:00 276,480 ----a-w c:\windows\system32\webcheck.dll
- 2008-04-14 00:12:08 68,096 ----a-w c:\windows\system32\webclnt.dll
+ 2004-08-04 10:00:00 67,584 ----a-w c:\windows\system32\webclnt.dll
- 2001-08-23 12:00:00 40,448 ----a-w c:\windows\system32\webhits.dll
+ 2004-08-04 10:00:00 40,448 ----a-w c:\windows\system32\webhits.dll
- 2008-04-14 00:12:08 135,680 ----a-w c:\windows\system32\webvw.dll
+ 2004-08-04 10:00:00 135,680 ----a-w c:\windows\system32\webvw.dll
- 2008-04-14 00:12:39 65,024 ----a-w c:\windows\system32\wextract.exe
+ 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\wextract.exe
- 2001-08-23 12:00:00 13,600 ----a-w c:\windows\system32\wfwnet.drv
+ 2004-08-04 10:00:00 13,600 ----a-w c:\windows\system32\wfwnet.drv
- 2008-04-14 00:12:39 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
+ 2004-08-04 10:00:00 433,664 ----a-w c:\windows\system32\wiaacmgr.exe
- 2008-04-14 00:12:08 463,360 ----a-w c:\windows\system32\wiadefui.dll
+ 2004-08-04 10:00:00 463,360 ----a-w c:\windows\system32\wiadefui.dll
- 2008-04-14 00:12:08 124,416 ----a-w c:\windows\system32\wiadss.dll
+ 2004-08-04 10:00:00 124,416 ----a-w c:\windows\system32\wiadss.dll
- 2008-04-14 00:12:08 75,776 ----a-w c:\windows\system32\wiascr.dll
+ 2004-08-04 10:00:00 75,776 ----a-w c:\windows\system32\wiascr.dll
- 2008-04-14 00:12:08 333,824 ----a-w c:\windows\system32\wiaservc.dll
+ 2004-08-04 10:00:00 333,312 ----a-w c:\windows\system32\wiaservc.dll
- 2008-04-14 00:12:08 589,312 ----a-w c:\windows\system32\wiashext.dll
+ 2004-08-04 10:00:00 589,312 ----a-w c:\windows\system32\wiashext.dll
- 2008-04-14 00:12:08 111,104 ----a-w c:\windows\system32\wiavideo.dll
+ 2004-08-04 10:00:00 111,104 ----a-w c:\windows\system32\wiavideo.dll
- 2001-08-23 12:00:00 145,408 ----a-w c:\windows\system32\wiavusd.dll
+ 2004-08-04 10:00:00 145,408 ----a-w c:\windows\system32\wiavusd.dll
- 2001-08-23 12:00:00 9,216 ----a-w c:\windows\system32\wifeman.dll
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\wifeman.dll
- 2001-08-23 12:00:00 18,432 ----a-w c:\windows\system32\win.com
+ 2004-08-04 10:00:00 18,432 ----a-w c:\windows\system32\win.com
- 2008-09-15 12:12:56 1,846,400 ----a-w c:\windows\system32\win32k.sys
+ 2004-08-04 10:00:00 1,835,904 ----a-w c:\windows\system32\win32k.sys
- 2008-04-14 00:12:08 102,400 ----a-w c:\windows\system32\win32spl.dll
+ 2004-08-04 10:00:00 101,888 ----a-w c:\windows\system32\win32spl.dll
- 2001-08-23 12:00:00 13,312 ----a-w c:\windows\system32\win87em.dll
+ 2004-08-04 10:00:00 13,312 ----a-w c:\windows\system32\win87em.dll
- 2008-04-13 16:48:53 1,647,616 ------w c:\windows\system32\winbrand.dll
+ 2004-08-04 10:00:00 937,984 ----a-w c:\windows\system32\winbrand.dll
- 2001-08-23 12:00:00 9,216 ----a-w c:\windows\system32\winfax.dll
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\winfax.dll
- 2001-08-23 12:00:00 8,192 ----a-w c:\windows\system32\winhlp32.exe
+ 2004-08-04 10:00:00 8,192 ----a-w c:\windows\system32\winhlp32.exe
- 2008-04-14 00:12:08 354,304 ----a-w c:\windows\system32\winhttp.dll
+ 2004-08-04 10:00:00 351,232 ----a-w c:\windows\system32\winhttp.dll
- 2008-10-16 20:38:40 826,368 ----a-w c:\windows\system32\wininet.dll
+ 2006-03-04 03:33:46 658,432 ----a-w c:\windows\system32\wininet.dll
- 2008-04-14 00:12:09 32,256 ----a-w c:\windows\system32\winipsec.dll
+ 2004-08-04 10:00:00 32,768 ----a-w c:\windows\system32\winipsec.dll
- 2008-04-14 00:12:39 507,904 ----a-w c:\windows\system32\winlogon.exe
+ 2004-08-04 10:00:00 502,272 ----a-w c:\windows\system32\winlogon.exe
- 2008-04-14 00:12:09 176,128 ----a-w c:\windows\system32\winmm.dll
+ 2004-08-04 10:00:00 176,128 ----a-w c:\windows\system32\winmm.dll
- 2001-08-23 12:00:00 11,776 ----a-w c:\windows\system32\winmsd.exe
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\winmsd.exe
- 2001-08-23 12:00:00 5,120 ----a-w c:\windows\system32\winnls.dll
+ 2004-08-04 10:00:00 5,120 ----a-w c:\windows\system32\winnls.dll
- 2008-04-14 00:11:11 756,224 ----a-w c:\windows\system32\winntbbu.dll
+ 2004-08-04 10:00:00 764,928 ----a-w c:\windows\system32\winntbbu.dll
- 2008-04-14 00:12:09 16,896 ----a-w c:\windows\system32\winrnr.dll
+ 2004-08-04 10:00:00 16,896 ----a-w c:\windows\system32\winrnr.dll
- 2008-04-14 00:12:09 99,328 ----a-w c:\windows\system32\winscard.dll
+ 2004-08-04 10:00:00 99,328 ----a-w c:\windows\system32\winscard.dll
- 2008-04-14 00:12:09 17,408 ------w c:\windows\system32\winshfhc.dll
+ 2004-08-04 10:00:00 17,408 ----a-w c:\windows\system32\winshfhc.dll
- 2001-08-23 12:00:00 2,864 ----a-w c:\windows\system32\winsock.dll
+ 2004-08-04 10:00:00 2,864 ----a-w c:\windows\system32\winsock.dll
- 2008-04-14 00:12:45 146,432 ----a-w c:\windows\system32\winspool.drv
+ 2004-08-04 10:00:00 146,432 ----a-w c:\windows\system32\winspool.drv
- 2001-08-23 12:00:00 2,112 ----a-w c:\windows\system32\winspool.exe
+ 2004-08-04 10:00:00 2,112 ----a-w c:\windows\system32\winspool.exe
- 2008-04-14 00:12:09 293,376 ----a-w c:\windows\system32\winsrv.dll
+ 2004-08-04 10:00:00 290,816 ----a-w c:\windows\system32\winsrv.dll
- 2008-04-14 00:12:09 53,760 ----a-w c:\windows\system32\winsta.dll
+ 2004-08-04 10:00:00 53,760 ----a-w c:\windows\system32\winsta.dll
- 2001-08-23 12:00:00 18,944 ----a-w c:\windows\system32\winstrm.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\winstrm.dll
- 2008-04-14 00:12:09 176,640 ----a-w c:\windows\system32\wintrust.dll
+ 2004-08-04 10:00:00 176,640 ----a-w c:\windows\system32\wintrust.dll
- 2008-04-14 00:12:40 5,632 ----a-w c:\windows\system32\winver.exe
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\winver.exe
- 2008-04-14 00:12:09 132,096 ----a-w c:\windows\system32\wkssvc.dll
+ 2004-08-04 10:00:00 132,096 ----a-w c:\windows\system32\wkssvc.dll
- 2008-04-14 00:12:09 172,032 ----a-w c:\windows\system32\wldap32.dll
+ 2004-08-04 10:00:00 172,032 ----a-w c:\windows\system32\wldap32.dll
- 2008-04-14 00:12:09 92,672 ----a-w c:\windows\system32\wlnotify.dll
+ 2004-08-04 10:00:00 92,672 ----a-w c:\windows\system32\wlnotify.dll
- 2006-10-19 03:47:18 757,248 ----a-w c:\windows\system32\WMADMOD.dll
+ 2004-08-11 07:45:04 380,144 ----a-w c:\windows\system32\wmadmod.dll
- 2006-10-19 03:47:18 1,117,696 ----a-w c:\windows\system32\WMADMOE.dll
+ 2004-08-11 07:45:04 712,704 ----a-w c:\windows\system32\wmadmoe.dll
- 2007-10-27 23:40:30 222,720 ----a-w c:\windows\system32\wmasf.dll
+ 2004-08-11 07:45:04 229,376 ----a-w c:\windows\system32\wmasf.dll
- 2006-10-19 03:47:18 33,792 ----a-w c:\windows\system32\wmdmlog.dll
+ 2004-08-11 07:45:04 30,208 ----a-w c:\windows\system32\WMDMLOG.dll
- 2006-10-19 03:47:18 37,376 ----a-w c:\windows\system32\wmdmps.dll
+ 2004-08-11 07:45:04 34,304 ----a-w c:\windows\system32\WMDMPS.dll
- 2006-10-19 03:47:18 429,056 ----a-w c:\windows\system32\wmdrmdev.dll
+ 2004-08-11 07:45:04 344,064 ----a-w c:\windows\system32\WMDRMdev.dll
- 2006-10-19 03:47:20 348,672 ----a-w c:\windows\system32\wmdrmnet.dll
+ 2004-08-11 07:45:04 290,816 ----a-w c:\windows\system32\WMDRMNet.dll
- 2001-08-23 12:00:00 51,200 ----a-w c:\windows\system32\wmerrenu.dll
+ 2004-08-04 10:00:00 51,200 ----a-w c:\windows\system32\wmerrenu.dll
- 2006-10-19 03:47:20 227,328 ------w c:\windows\system32\wmerror.dll
+ 2004-08-04 10:00:00 168,448 ----a-w c:\windows\system32\wmerror.dll
- 2008-04-14 00:11:15 5,632 ----a-w c:\windows\system32\wmi.dll
+ 2004-08-04 10:00:00 5,632 ----a-w c:\windows\system32\wmi.dll
- 2006-10-19 03:47:20 157,184 ----a-w c:\windows\system32\wmidx.dll
+ 2004-08-11 07:45:04 150,016 ----a-w c:\windows\system32\wmidx.dll
- 2001-08-23 12:00:00 18,944 ----a-w c:\windows\system32\wmiprop.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\system32\wmiprop.dll
- 2001-08-23 12:00:00 55,808 ----a-w c:\windows\system32\wmiscmgr.dll
+ 2004-08-04 10:00:00 55,808 ----a-w c:\windows\system32\wmiscmgr.dll
- 2008-06-18 11:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
+ 2004-08-11 07:45:04 1,027,072 ----a-w c:\windows\system32\wmnetmgr.dll
- 2007-06-12 05:51:12 10,834,944 ----a-w c:\windows\system32\wmp.dll
+ 2004-08-04 10:00:00 4,874,240 ----a-w c:\windows\system32\wmp.dll
- 2006-10-19 03:47:20 242,688 ------w c:\windows\system32\wmpasf.dll
+ 2004-08-04 10:00:00 114,688 ----a-w c:\windows\system32\wmpasf.dll
- 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcd.dll
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\wmpcd.dll
- 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpcore.dll
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\wmpcore.dll
- 2006-10-19 03:47:20 314,880 ------w c:\windows\system32\wmpdxm.dll
+ 2004-08-04 10:00:00 233,472 ----a-w c:\windows\system32\wmpdxm.dll
- 2006-10-19 03:47:20 8,231,936 ----a-w c:\windows\system32\wmploc.dll
+ 2004-08-04 10:00:00 2,940,928 ----a-w c:\windows\system32\wmploc.dll
- 2006-10-19 03:47:20 99,840 ----a-w c:\windows\system32\wmpshell.dll
+ 2004-08-04 10:00:00 102,400 ----a-w c:\windows\system32\wmpshell.dll
- 2008-04-14 00:12:09 20,480 ----a-w c:\windows\system32\wmpui.dll
+ 2004-08-04 10:00:00 20,480 ----a-w c:\windows\system32\wmpui.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\wmsdmod.dll
+ 2004-08-11 07:45:04 773,368 ----a-w c:\windows\system32\wmsdmod.dll
- 2008-04-14 00:12:09 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
+ 2004-08-04 10:00:00 115,200 ----a-w c:\windows\system32\wmsdmoe.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\wmsdmoe2.dll
+ 2004-08-11 07:45:04 1,116,160 ----a-w c:\windows\system32\wmsdmoe2.dll
- 2006-10-19 03:47:22 603,648 ----a-w c:\windows\system32\WMSPDMOD.dll
+ 2004-08-11 07:45:06 531,192 ----a-w c:\windows\system32\wmspdmod.dll
- 2006-10-19 03:47:22 1,329,152 ----a-w c:\windows\system32\WMSPDMOE.dll
+ 2004-08-11 07:45:06 936,960 ----a-w c:\windows\system32\wmspdmoe.dll
- 2008-04-14 00:12:10 303,616 ----a-w c:\windows\system32\wmstream.dll
+ 2004-08-04 10:00:00 303,616 ----a-w c:\windows\system32\wmstream.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\WMVADVD.dll
+ 2004-08-11 07:45:06 1,181,944 ----a-w c:\windows\system32\wmvadvd.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\WMVADVE.DLL
+ 2004-08-11 07:45:06 1,509,376 ----a-w c:\windows\system32\WMVADVE.DLL
- 2008-06-18 11:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
+ 2004-08-11 07:45:06 2,362,104 ----a-w c:\windows\system32\wmvcore.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\wmvdmod.dll
+ 2004-08-11 07:45:06 871,160 ----a-w c:\windows\system32\wmvdmod.dll
- 2006-10-19 03:47:22 4,096 ----a-w c:\windows\system32\wmvdmoe2.dll
+ 2004-08-11 07:45:06 999,424 ----a-w c:\windows\system32\wmvdmoe2.dll
- 2008-04-14 00:12:10 264,192 ----a-w c:\windows\system32\wow32.dll
+ 2004-08-04 10:00:00 264,192 ----a-w c:\windows\system32\wow32.dll
- 2001-08-23 12:00:00 2,736 ----a-w c:\windows\system32\wowdeb.exe
+ 2004-08-04 10:00:00 2,736 ----a-w c:\windows\system32\wowdeb.exe
- 2001-08-23 12:00:00 10,368 ----a-w c:\windows\system32\wowexec.exe
+ 2004-08-04 10:00:00 10,368 ----a-w c:\windows\system32\wowexec.exe
- 2001-08-23 12:00:00 3,200 ----a-w c:\windows\system32\wowfax.dll
+ 2004-08-04 10:00:00 3,200 ----a-w c:\windows\system32\wowfax.dll
- 2001-08-23 12:00:00 13,824 ----a-w c:\windows\system32\wowfaxui.dll
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\wowfaxui.dll
- 2008-04-14 00:12:40 32,256 ----a-w c:\windows\system32\wpabaln.exe
+ 2004-08-04 10:00:00 32,256 ----a-w c:\windows\system32\wpabaln.exe
- 2006-10-19 03:47:22 629,760 ----a-w c:\windows\system32\wpd_ci.dll
+ 2004-08-11 07:45:06 38,912 ----a-w c:\windows\system32\wpd_ci.dll
- 2006-10-19 03:47:22 35,840 ----a-w c:\windows\system32\wpdconns.dll
+ 2004-08-11 07:45:06 61,952 ----a-w c:\windows\system32\wpdconns.dll
- 2006-10-19 03:47:22 154,624 ----a-w c:\windows\system32\wpdmtp.dll
+ 2004-08-11 07:45:06 114,176 ----a-w c:\windows\system32\wpdmtp.dll
- 2006-10-19 03:47:22 63,488 ----a-w c:\windows\system32\wpdmtpus.dll
+ 2004-08-11 07:45:06 66,560 ----a-w c:\windows\system32\wpdmtpus.dll
- 2006-10-19 03:47:22 356,352 ----a-w c:\windows\system32\wpdsp.dll
+ 2004-08-11 07:45:06 327,680 ----a-w c:\windows\system32\wpdsp.dll
- 2008-04-14 00:12:41 11,264 ----a-w c:\windows\system32\wpnpinst.exe
+ 2004-08-04 10:00:00 32,256 ----a-w c:\windows\system32\wpnpinst.exe
- 2008-04-14 00:12:10 82,432 ----a-w c:\windows\system32\ws2_32.dll
+ 2004-08-04 10:00:00 82,944 ----a-w c:\windows\system32\ws2_32.dll
- 2008-04-14 00:12:10 19,968 ----a-w c:\windows\system32\ws2help.dll
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\ws2help.dll
- 2008-04-14 00:12:41 13,824 ------w c:\windows\system32\wscntfy.exe
+ 2004-08-04 10:00:00 13,824 ----a-w c:\windows\system32\wscntfy.exe
- 2008-05-08 11:24:44 155,648 ----a-w c:\windows\system32\wscript.exe
+ 2004-08-04 10:00:00 114,688 ----a-w c:\windows\system32\wscript.exe
- 2008-04-14 00:12:10 80,896 ----a-w c:\windows\system32\wscsvc.dll
+ 2004-08-04 10:00:00 81,408 ----a-w c:\windows\system32\wscsvc.dll
- 2008-04-14 00:12:10 604,160 ----a-w c:\windows\system32\wsecedit.dll
+ 2004-08-04 10:00:00 596,992 ----a-w c:\windows\system32\wsecedit.dll
- 2001-08-23 12:00:00 9,216 ----a-w c:\windows\system32\wshatm.dll
+ 2004-08-04 10:00:00 9,216 ----a-w c:\windows\system32\wshatm.dll
- 2008-04-14 00:12:10 108,032 ------w c:\windows\system32\wshbth.dll
+ 2004-08-04 10:00:00 108,032 ----a-w c:\windows\system32\wshbth.dll
- 2008-04-14 00:12:10 36,864 ----a-w c:\windows\system32\wshcon.dll
+ 2004-08-04 10:00:00 28,672 ----a-w c:\windows\system32\wshcon.dll
- 2008-05-09 10:53:40 90,112 ----a-w c:\windows\system32\wshext.dll
+ 2004-08-04 10:00:00 65,536 ----a-w c:\windows\system32\wshext.dll
- 2008-04-14 00:12:10 14,336 ----a-w c:\windows\system32\wship6.dll
+ 2004-08-04 10:00:00 14,336 ----a-w c:\windows\system32\wship6.dll
- 2001-08-23 12:00:00 11,776 ----a-w c:\windows\system32\wshisn.dll
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\wshisn.dll
- 2001-08-23 12:00:00 7,168 ----a-w c:\windows\system32\wshnetbs.dll
+ 2004-08-04 10:00:00 7,168 ----a-w c:\windows\system32\wshnetbs.dll
- 2008-04-14 00:12:10 11,264 ----a-w c:\windows\system32\wshrm.dll
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\WshRm.dll
- 2008-04-14 00:12:10 19,456 ----a-w c:\windows\system32\wshtcpip.dll
+ 2004-08-04 10:00:00 19,968 ----a-w c:\windows\system32\wshtcpip.dll
- 2008-04-14 00:12:10 41,984 ----a-w c:\windows\system32\wsnmp32.dll
+ 2004-08-04 10:00:00 42,496 ----a-w c:\windows\system32\wsnmp32.dll
- 2008-04-14 00:12:10 22,528 ----a-w c:\windows\system32\wsock32.dll
+ 2004-08-04 10:00:00 22,528 ----a-w c:\windows\system32\wsock32.dll
- 2008-04-14 00:12:10 50,688 ----a-w c:\windows\system32\wstdecod.dll
+ 2004-08-04 10:00:00 50,688 ----a-w c:\windows\system32\wstdecod.dll
- 2008-04-14 00:12:10 18,432 ----a-w c:\windows\system32\wtsapi32.dll
+ 2004-08-04 10:00:00 18,432 ----a-w c:\windows\system32\wtsapi32.dll
- 2008-10-16 20:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
+ 2008-10-16 19:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
- 2008-10-16 20:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
+ 2008-10-16 19:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
- 2005-05-26 10:16:30 172,312 ----a-w c:\windows\system32\wuauclt1.exe
+ 2004-08-04 10:00:00 165,888 ----a-w c:\windows\system32\wuauclt1.exe
- 2008-10-16 20:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
+ 2008-10-16 19:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
- 2005-05-26 10:16:30 194,328 ----a-w c:\windows\system32\wuaueng1.dll
+ 2004-08-04 10:00:00 183,296 ----a-w c:\windows\system32\wuaueng1.dll
- 2008-04-14 00:12:11 6,656 ----a-w c:\windows\system32\wuauserv.dll
+ 2004-08-04 10:00:00 6,656 ----a-w c:\windows\system32\wuauserv.dll
- 2008-10-16 20:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
+ 2008-10-16 19:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
- 2001-08-23 12:00:00 32,256 ----a-w c:\windows\system32\wupdmgr.exe
+ 2004-08-04 10:00:00 32,256 ----a-w c:\windows\system32\wupdmgr.exe
- 2008-04-14 00:12:11 383,488 ----a-w c:\windows\system32\wzcdlg.dll
+ 2004-08-04 10:00:00 378,368 ----a-w c:\windows\system32\wzcdlg.dll
- 2008-04-14 00:12:11 52,736 ----a-w c:\windows\system32\wzcsapi.dll
+ 2004-08-04 10:00:00 51,712 ----a-w c:\windows\system32\wzcsapi.dll
- 2008-04-14 00:12:11 483,840 ----a-w c:\windows\system32\wzcsvc.dll
+ 2004-08-04 10:00:00 359,936 ----a-w c:\windows\system32\wzcsvc.dll
- 2008-04-14 00:12:11 91,648 ----a-w c:\windows\system32\xactsrv.dll
+ 2004-08-04 10:00:00 91,648 ----a-w c:\windows\system32\xactsrv.dll
- 2008-04-14 00:12:41 30,720 ----a-w c:\windows\system32\xcopy.exe
+ 2004-08-04 10:00:00 30,720 ----a-w c:\windows\system32\xcopy.exe
- 2004-07-17 17:39:16 174,200 ----a-w c:\windows\system32\xenroll.dll
+ 2004-08-04 10:00:00 174,200 ----a-w c:\windows\system32\xenroll.dll
- 2008-04-14 00:12:11 129,024 ------w c:\windows\system32\xmlprov.dll
+ 2004-08-04 10:00:00 129,536 ----a-w c:\windows\system32\xmlprov.dll
- 2008-04-14 00:12:11 50,176 ------w c:\windows\system32\xmlprovi.dll
+ 2004-08-04 10:00:00 50,176 ----a-w c:\windows\system32\xmlprovi.dll
- 2008-04-14 00:12:11 11,776 ----a-w c:\windows\system32\xolehlp.dll
+ 2004-08-04 10:00:00 11,776 ----a-w c:\windows\system32\xolehlp.dll
- 2008-04-13 17:39:29 438,784 ------w c:\windows\system32\xpob2res.dll
+ 2004-08-04 10:00:00 438,784 ----a-w c:\windows\system32\xpob2res.dll
- 2008-04-13 17:39:22 187,392 ------w c:\windows\system32\xpsp1res.dll
+ 2004-08-04 10:00:00 187,392 ----a-w c:\windows\system32\xpsp1res.dll
- 2008-04-13 17:39:24 2,897,920 ------w c:\windows\system32\xpsp2res.dll
+ 2004-08-04 10:00:00 2,897,920 ----a-w c:\windows\system32\xpsp2res.dll
- 2008-04-14 00:12:11 338,432 ----a-w c:\windows\system32\zipfldr.dll
+ 2004-08-04 10:00:00 337,920 ----a-w c:\windows\system32\zipfldr.dll
- 2001-08-23 12:00:00 15,360 ----a-w c:\windows\TASKMAN.EXE
+ 2004-08-04 10:00:00 15,360 ----a-w c:\windows\taskman.exe
- 2001-08-23 12:00:00 94,784 ----a-w c:\windows\twain.dll
+ 2004-08-04 10:00:00 94,784 ----a-w c:\windows\twain.dll
- 2008-04-14 00:12:07 50,688 ----a-w c:\windows\twain_32.dll
+ 2004-08-04 10:00:00 50,688 ----a-w c:\windows\twain_32.dll
- 2001-08-23 12:00:00 49,680 ----a-w c:\windows\twunk_16.exe
+ 2004-08-04 10:00:00 49,680 ----a-w c:\windows\twunk_16.exe
- 2001-08-23 12:00:00 25,600 ----a-w c:\windows\twunk_32.exe
+ 2004-08-04 10:00:00 25,600 ----a-w c:\windows\twunk_32.exe
- 2001-08-23 12:00:00 18,944 ----a-w c:\windows\vmmreg32.dll
+ 2004-08-04 10:00:00 18,944 ----a-w c:\windows\vmmreg32.dll
- 2001-08-23 12:00:00 256,192 ----a-w c:\windows\winhelp.exe
+ 2004-08-04 10:00:00 256,192 ----a-w c:\windows\winhelp.exe
- 2008-04-14 00:12:39 283,648 ----a-w c:\windows\winhlp32.exe
+ 2004-08-04 10:00:00 283,648 ----a-w c:\windows\winhlp32.exe
+ 2001-08-23 12:00:00 921,088 ----a-w c:\windows\WinSxS\InstallTemp\91252\comctl32.dll
- 2001-08-23 12:00:00 74,802 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
+ 2004-08-04 10:00:00 74,802 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
- 2001-08-23 12:00:00 995,383 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42.dll
+ 2004-08-04 10:00:00 995,383 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42.dll
- 2001-08-23 12:00:00 995,384 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42u.dll
+ 2004-08-04 10:00:00 995,384 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\mfc42u.dll
- 2001-08-23 12:00:00 401,462 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\msvcp60.dll
+ 2004-08-04 10:00:00 401,462 ----a-r c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\msvcp60.dll
- 2001-08-23 12:00:00 921,088 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
+ 2004-08-04 10:00:00 921,088 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
- 2004-08-04 06:57:02 1,050,624 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
+ 2004-08-04 10:00:00 1,050,624 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
- 2001-08-23 12:00:00 50,688 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
+ 2004-08-04 10:00:00 50,688 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
- 2001-08-23 12:00:00 322,560 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
+ 2004-08-04 10:00:00 322,560 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
- 2004-08-04 06:57:02 54,784 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
+ 2004-08-04 10:00:00 54,784 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
- 2004-08-04 06:57:02 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
+ 2004-08-04 10:00:00 343,040 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
- 2001-08-23 12:00:00 1,700,352 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
+ 2004-08-04 10:00:00 1,700,352 ----a-r c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
- 2004-08-04 06:57:00 1,712,128 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
+ 2004-08-04 10:00:00 1,712,128 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
- 2008-04-14 00:12:49 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2004-08-04 10:00:00 853,504 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2008-04-14 00:12:50 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2004-08-04 10:00:00 991,232 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2008-04-13 18:26:33 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
+ 2004-08-04 10:00:00 132,096 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc0\rtcres.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-02-10 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2004-02-10 118784]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-03-24 53408]
"vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2006-06-15 124656]
"musohemufa"="c:\windows\system32\revulazo.dll" [ 47616]
"CTHelper"="CTHELPER.EXE" [2006-08-11 c:\windows\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-11 c:\windows\system32\CTXFIHLP.EXE]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]
c:\documents and settings\taddilack\Start Menu\Programs\Startup\
No-IP DUC.lnk - c:\program files\No-IP\DUC20.exe [2008-02-27 1172992]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)
"NoActiveDesktopChanges"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PCANotify]
2001-11-02 11:50 24636 c:\windows\system32\PCANotify.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=qjlncr.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.mpg4"= c:\windows\mpg4c32.dll
"vidc.mpg2"= c:\windows\mpg4c32.dll
"vidc.mpg3"= c:\windows\mpg4c32.dll
"vidc.GEOX"= c:\windows\system32\GeoCodec.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\
0stera
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\StubInstaller.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\RealVNC\\VNC4\\vncviewer.exe"=
"c:\\Program Files\\Intuit\\QuickBooks 2006\\QBDBMgrN.exe"=
"c:\\WINDOWS\\system32\\dlbtcoms.exe"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\DLBTPSWX.EXE"=
"c:\\Program Files\\WS_FTP\\WS_FTP95.exe"=
"c:\\Program Files\\Java\\jre1.6.0_03\\bin\\javaw.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Macromedia\\Dreamweaver 8\\Dreamweaver.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\explorer.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"135:TCP"= 135:TCP:TCP Port 135
"5000:TCP"= 5000:TCP:TCP Port 5000
"5001:TCP"= 5001:TCP:TCP Port 5001
"5002:TCP"= 5002:TCP:TCP Port 5002
"5003:TCP"= 5003:TCP:TCP Port 5003
"5004:TCP"= 5004:TCP:TCP Port 5004
"5005:TCP"= 5005:TCP:TCP Port 5005
"5006:TCP"= 5006:TCP:TCP Port 5006
"5007:TCP"= 5007:TCP:TCP Port 5007
"5008:TCP"= 5008:TCP:TCP Port 5008
"5009:TCP"= 5009:TCP:TCP Port 5009
"5010:TCP"= 5010:TCP:TCP Port 5010
"5011:TCP"= 5011:TCP:TCP Port 5011
"5012:TCP"= 5012:TCP:TCP Port 5012
"5013:TCP"= 5013:TCP:TCP Port 5013
"5014:TCP"= 5014:TCP:TCP Port 5014
"5015:TCP"= 5015:TCP:TCP Port 5015
"5016:TCP"= 5016:TCP:TCP Port 5016
"5017:TCP"= 5017:TCP:TCP Port 5017
"5018:TCP"= 5018:TCP:TCP Port 5018
"5019:TCP"= 5019:TCP:TCP Port 5019
"5020:TCP"= 5020:TCP:TCP Port 5020
"1723:TCP"= 1723:TCP:1723
"47:TCP"= 47:TCP:47
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"1108:UDP"= 1108:UDP:Windows Media Format SDK (iexplore.exe)
"1109:UDP"= 1109:UDP:Windows Media Format SDK (iexplore.exe)
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\eengine\EraserUtilRebootDrv.sys [2009-01-25 99376]
S3 DirectUpdate;Direct Update;c:\progra~1\DIRECT~1\DUService.exe [2002-11-07 634880]
S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2006-06-15 115952]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
\Shell\AutoRun\command - F:\setup.exe
.
- - - - ORPHANS REMOVED - - - -
BHO-{728e4c8d-210d-4ecb-b793-c2c199196104} - c:\windows\system32\qjlncr.dll
HKLM-Run-24b2796a - c:\windows\system32\fuwojake.dll
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE: E&xport to Microsoft Excel
TCP: {D14BFE15-9696-4A20-80C7-7E0DC9F1B897} = 192.168.1.1
DPF: {0C92900E-4D5A-4F04-ACC9-729E1767BBAE} - hxxp://www.hebphoto.com/net/Uploader/LPUploader45.cab
DPF: {1DB93715-3B60-43EE-93E6-279BB3E1DF76} - hxxp://216.85.198.82/cab/OCXChecker_6100.cab
DPF: {38AB0814-B09B-4378-9940-14A19638C3C2} - hxxp://www.auctiva.com/Aurigma/ImageUploader55.cab
DPF: {DBAFE6AD-DC14-45DF-A3F7-F8832289A1CD} - hxxp://216.85.198.83/cab/DownloadFile_6100.cab
FF - ProfilePath - c:\documents and settings\taddilack\Application Data\Mozilla\Firefox\Profiles\nwtdmhlh.default\
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\documents and settings\taddilack\Application Data\Mozilla\Firefox\Profiles\nwtdmhlh.default\extensions\moveplayer@movenetworks.com\platform\WINNT_x86-msvc\plugins\npmnqmp07074039.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
.
**************************************************************************
catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-04-07 18:19:58
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1216)
c:\windows\system32\awgina.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Symantec Shared\ccSetMgr.exe
c:\program files\Symantec AntiVirus\DefWatch.exe
c:\program files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\program files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\program files\Symantec AntiVirus\DoScan.exe
.
**************************************************************************
.
Completion time: 2009-04-07 18:23:05 - machine was rebooted
ComboFix-quarantined-files.txt 2009-04-07 23:22:56
ComboFix2.txt 2009-03-23 04:35:08
ComboFix3.txt 2009-03-23 04:20:23
ComboFix4.txt 2009-03-23 04:09:23
Pre-Run: 11,319,648,256 bytes free
Post-Run: 11,321,909,248 bytes free
7141 --- E O F --- 2008-06-12 10:03:33
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:27:18 PM, on 4/7/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\No-IP\DUC20.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [musohemufa] Rundll32.exe "C:\WINDOWS\system32\revulazo.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: No-IP DUC.lnk = C:\Program Files\No-IP\DUC20.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0C92900E-4D5A-4F04-ACC9-729E1767BBAE} (Image Uploader Control) -
http://www.hebphoto.com/net/Uploader/LPUploader45.cabO16 - DPF: {1DB93715-3B60-43EE-93E6-279BB3E1DF76} (OCXDownloadChecker Control) -
http://216.85.198.82/cab/OCXChecker_6100.cabO16 - DPF: {38AB0814-B09B-4378-9940-14A19638C3C2} (Auctiva Image Uploader Control) -
http://www.auctiva.com/Aurigma/ImageUploader55.cabO16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) -
http://cdn.scan.onecare.live.com/resource/...lscbase5483.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/windowsupd...b?1232936749875O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) -
http://web1.shutterfly.com/downloads/Uploader.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) -
http://crucial.com/controls/cpcScanner.cabO16 - DPF: {AE6C4705-0F11-4ACB-BDD4-37F138BEF289} (Image Uploader Control) -
http://www.hebphoto.com/net/Uploader/LPUploader45.cabO16 - DPF: {DBAFE6AD-DC14-45DF-A3F7-F8832289A1CD} (DownloadFile Control) -
http://216.85.198.83/cab/DownloadFile_6100.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{D14BFE15-9696-4A20-80C7-7E0DC9F1B897}: NameServer = 192.168.1.1
O20 - AppInit_DLLs: qjlncr.dll
O23 - Service: pcAnywhere Host Service (awhost32) - Unknown owner - C:\Program Files\Symantec\pcAnywhere\awhost32.exe (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Direct Update (DirectUpdate) -
http://www.directupdate.net - C:\PROGRA~1\DIRECT~1\DUService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 5475 bytes