Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

attention! system has detected a potential hazard (Trojan SPM/LX)...


  • Please log in to reply
10 replies to this topic

#1 mrpman44

mrpman44

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 20 September 2009 - 12:16 PM

The problem started yesterday (9/19). I was prompted by McAfee to fix a lack in security on my computer. Not long after I did that Internet Explorer crashed and would not open again. I received the following message: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions or access."

Upon further attempts, I also received this message: "Application cannot be executed. The file is infected. Please activate your antivirus software."

I tried to run a scan with McAfee, but got this error: "Scanning has encountered a problem from which it cannot recover. Here are the problem details - Error starting on demand scanner."

I opened a Firefox browser and was able to use it temporarily - but then it crashed also and will not open again.

Other applications have also failed - Outlook Express, etc.

I tried running Ad-Aware - it also crashes.

I tried running HijackThis, and the preferred methods suggested on this site (DDS.scr and RootRepeal). These executables all seem to start but do not run to completion. They just seem to disappear.

I'm sorry but I have no logs to post at this time. First off, I guess I need help figuring out how to get these logging tools to run in the current state of this machine.

Finally, I have also received this lengthy message: "Attention! System detected a potential hazard (Trojan SPM/LX) on your computer that may infect executable files. You private information and PC security is at risk. To get rid of unwanted spyware and keep your computer safe you need to update your current security software. Check OK to download official intrusion detection system (IDS software)

I did NOT click the OK button on this!

I am currently running in safe mode to make this post, using Safari. So far it has not died as the others did. I tried to access internet explorer in safe mode from the start menu and got this error message: "The item you selected is unavailable. It might have been moved, renamed or removed. Do you want to remove it from the list?"

Also I get Antivirus 2010 popping up every so often telling me there are malware detected and to register with them. I did NOT do this either.

I am running windows XP service pack 3.

Thank you for your help... J

BC AdBot (Login to Remove)

 


#2 Guest_The weatherman_*

Guest_The weatherman_*

  • Guests
  • OFFLINE
  •  

Posted 20 September 2009 - 03:46 PM

Moved from HJT to a more appropriate forum. Tw

#3 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA

Posted 20 September 2009 - 03:55 PM

Hello. Plesae try running MBAM below. After install and update please disable McAfee if possible temporarily. Als disconnect from the internet while scanning.

Next run MBAM (MalwareBytes):

NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.

Please download Malwarebytes Anti-Malware and save it to your desktop.

alternate download link

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#4 mrpman44

mrpman44
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 22 September 2009 - 10:07 PM

I could not run the Malwarebytes Anti-Malware scan.

I was able to download the software and was able to update program before scanning. However, when I started the scan, it ran for a few seconds and then shut down (disappeared). When I tried to run it again, I got one of the messages that I had seen before when other applications became unavailable... "Windiws cannot acess the specific device, path or file...." as I listed in my original post.

I tried to go the the task manager to see what was running, but I got a new error message "Task manager has been disabled by your administrator."

And the Safari browser is no longer working correctly. It opens but I am unable to enter a new http address or enter anything in the google search box. So I think that my options are limited there - I don't think that I have any way to access the internet on the infected computer anymore.. I am on another computer now posting this reply.

What can I do?

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:51 AM

Posted 23 September 2009 - 11:19 AM

EDIT: Please do this First.Download this Utility and save it to your Desktop.
Double-click the Utility to run it and and let it finish.
When it states Finished! Press any key to exit, press any key to close the program.
It will save a .txt file to your desktop automatically. Double-click on the Win32kDiag.txt file that is located on your Desktop and post the entire contents of that log as part of the reply in the topic you will create below..
This step involves making changes in the registry. Always back up your registry before making any changes.

Go to Start Run and type: regedit
Click OK.
On the left side, click to highlight My Computer at the top.
Go up to File Export
Make sure in that window there is a tick next to "All" under Export Branch.
Leave the "Save As Type" as "Registration Files".
Under "Filename" put RegBackup.
Choose to save it to C:\
Click save and then go to File Exit.

Or you can download and use ERUNTwhich is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

Click on the link below:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Scroll down to #275 and click "Lift Restrictions - TM, Regedit and CMD" in the left column. Go to File, choose "Save page as" All Files and save regtmcmdrestore.vbs to your desktop. Double-click on that file to allow the script to run and reboot when done. Since the script modifies certain registry settings your anti-virus package may warn you about it. Ignore the warning and allow it to run.


Some types of malware will disable MBAM (MalwareBytes) and other security tools. If MBAM will not install, try renaming it.

Before saving any of your security programs, rename them first. For example, before you save Malwarebytes', rename it to something like MBblah.exe and then click on Save and save it to your desktop. Same thing after you install it. Before running it, rename the main executable file first
***
Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.

If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run..

Edited by boopme, 23 September 2009 - 01:45 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 61,114 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:08:51 AM

Posted 23 September 2009 - 11:30 AM

boopme, sorry to rudely interrupt you, but maybe you can first ask for a log of win32kDiag.exe here (just a thought).

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:03:51 PM

Posted 23 September 2009 - 01:44 PM

Sure thing....
I'll edit it in.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 mrpman44

mrpman44
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 23 September 2009 - 06:41 PM

Just want to verify that I've been doing all of this in safe mode - that's where I want to be right?

Still no luck running the MBAM. I have renamed both the setup.exe and the MBAM.exe to different names as instructed and changed the extensions. The install works ok, but when I attempt to run the scan - it starts and shows "Scan in progress" - but then it crashes (with no messages) after a 5 seconds.

FYI: I could not run regedit. When I tried I received a message (something like): "Registry editing has been disabled by your administrator". Before I could write the message down I got a blue screen of death. After I turned the machine off and back on, I continued using the ERUNT software to backup the registry and successfully downloaded and ran the regtmcmdrestore.vbs.

But I cannot get the MBAM to run. I also tried removing the MBAM via the control panel add or remove programs feature. And then downloaded, renamed and tried again. - Same result - dead after 5 seconds.

Finally, here is the contents of the Win32kDiag.txt file:

Running from: C:\Documents and Settings\michael\Desktop\Win32kDiag.exe

Log file at : C:\Documents and Settings\michael\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...



Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB933729\KB933729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\$NtUninstallKB824141$\user32.dll

[1] 2005-03-02 14:19:56 577024 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 11:48:36 578048 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 11:36:28 577536 C:\WINDOWS\$NtServicePackUninstall$\user32.dll (Microsoft Corporation)

[1] 2002-11-01 18:26:46 528896 C:\WINDOWS\$NtUninstallKB824141$\user32.dll ()

[1] 2002-08-29 07:00:00 560128 C:\WINDOWS\$NtUninstallKB826939$\user32.dll ()

[1] 2003-09-25 12:49:02 560128 C:\WINDOWS\$NtUninstallKB840987$\user32.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:46 577024 C:\WINDOWS\$NtUninstallKB890859$\user32.dll (Microsoft Corporation)

[1] 2005-03-02 14:09:30 577024 C:\WINDOWS\$NtUninstallKB925902$\user32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:08 578560 C:\WINDOWS\ServicePackFiles\i386\user32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:08 578560 C:\WINDOWS\SYSTEM32\user32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 560128 C:\i386\USER32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB824141$\win32k.sys

[1] 2005-03-01 21:11:25 1836160 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2005-10-05 20:10:04 1839360 C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2007-03-08 09:49:49 1843968 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2008-03-19 05:40:27 1845888 C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2008-09-15 08:25:27 1846912 C:\WINDOWS\$hf_mig$\KB954211\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2009-02-09 07:08:53 1847552 C:\WINDOWS\$hf_mig$\KB958690\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2009-04-17 06:50:18 1847808 C:\WINDOWS\$hf_mig$\KB968537\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2008-03-19 05:47:00 1845248 C:\WINDOWS\$NtServicePackUninstall$\win32k.sys (Microsoft Corporation)

[1] 2003-04-21 11:14:36 1700992 C:\WINDOWS\$NtUninstallKB824141$\win32k.sys ()

[1] 2003-09-25 12:35:48 1796864 C:\WINDOWS\$NtUninstallKB840987$\win32k.sys (Microsoft Corporation)

[1] 2004-08-04 02:17:40 1835904 C:\WINDOWS\$NtUninstallKB890859$\win32k.sys (Microsoft Corporation)

[1] 2005-03-01 21:06:57 1836288 C:\WINDOWS\$NtUninstallKB896424$\win32k.sys (Microsoft Corporation)

[1] 2005-10-05 20:05:59 1839488 C:\WINDOWS\$NtUninstallKB925902$\win32k.sys (Microsoft Corporation)

[1] 2007-03-08 09:47:48 1843584 C:\WINDOWS\$NtUninstallKB941693$\win32k.sys (Microsoft Corporation)

[1] 2008-04-13 15:30:10 1845632 C:\WINDOWS\$NtUninstallKB954211$\win32k.sys (Microsoft Corporation)

[1] 2008-09-15 08:12:56 1846400 C:\WINDOWS\$NtUninstallKB958690$\win32k.sys (Microsoft Corporation)

[1] 2009-02-09 07:13:27 1846784 C:\WINDOWS\$NtUninstallKB968537$\win32k.sys (Microsoft Corporation)

[1] 2008-04-13 15:30:10 1845632 C:\WINDOWS\ServicePackFiles\i386\win32k.sys (Microsoft Corporation)

[1] 2009-04-17 08:26:40 1847168 C:\WINDOWS\SYSTEM32\DLLCACHE\win32k.sys (Microsoft Corporation)

[1] 2009-04-17 08:26:40 1847168 C:\WINDOWS\SYSTEM32\win32k.sys (Microsoft Corporation)

[1] 2003-04-21 11:14:36 1700992 C:\i386\win32k.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe

[1] 2004-08-04 03:56:47 183808 C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 179200 C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe ()

[1] 2008-04-13 20:12:11 184320 C:\WINDOWS\ServicePackFiles\i386\accwiz.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:11 184320 C:\WINDOWS\SYSTEM32\accwiz.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:11 184320 C:\WINDOWS\SYSTEM32\DLLCACHE\accwiz.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 179200 C:\i386\ACCWIZ.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll

[1] 2004-08-04 03:56:41 60416 C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 53248 C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll ()

[1] 2008-04-13 20:11:51 62464 C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 62464 C:\WINDOWS\SYSTEM32\cryptsvc.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 53248 C:\i386\CRYPTSVC.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll

[1] 2005-05-26 22:08:59 41472 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll (Microsoft Corporation)

[1] 2005-05-26 22:04:27 41472 C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll (Microsoft Corporation)

[1] 2003-03-20 17:57:24 37888 C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll ()

[1] 2004-08-04 03:56:42 38912 C:\WINDOWS\$NtUninstallKB896358$\hhsetup.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 41472 C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 41472 C:\WINDOWS\SYSTEM32\hhsetup.dll (Microsoft Corporation)

[1] 2003-03-20 17:57:24 37888 C:\i386\hhsetup.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\html32.cnv

[1] 2002-08-29 07:00:00 401480 C:\WINDOWS\$NtUninstallKB826939$\html32.cnv ()

[1] 2003-06-27 15:38:50 311864 C:\WINDOWS\ServicePackFiles\i386\html32.cnv ()

[1] 2002-08-29 07:00:00 401480 C:\i386\HTML32.CNV ()



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\itss.dll

[1] 2005-05-26 22:08:59 137216 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll (Microsoft Corporation)

[1] 2005-05-26 22:04:27 137216 C:\WINDOWS\$NtServicePackUninstall$\itss.dll (Microsoft Corporation)

[1] 2003-03-20 17:57:26 122368 C:\WINDOWS\$NtUninstallKB826939$\itss.dll ()

[1] 2003-01-10 17:43:48 122368 C:\WINDOWS\$NtUninstallKB840315$\itss.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:42 134144 C:\WINDOWS\$NtUninstallKB896358$\itss.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:55 138240 C:\WINDOWS\ServicePackFiles\i386\itss.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:55 138240 C:\WINDOWS\SYSTEM32\itss.dll (Microsoft Corporation)

[1] 2003-03-20 17:57:26 122368 C:\i386\itss.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\locator.exe

[1] 2004-08-04 03:56:50 75264 C:\WINDOWS\$NtServicePackUninstall$\locator.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 68096 C:\WINDOWS\$NtUninstallKB826939$\locator.exe ()

[1] 2008-04-13 20:12:24 75264 C:\WINDOWS\ServicePackFiles\i386\locator.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:24 75264 C:\WINDOWS\SYSTEM32\locator.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 68096 C:\i386\LOCATOR.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\magnify.exe

[1] 2006-10-04 06:40:05 72704 C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\magnify.exe (Microsoft Corporation)

[1] 2006-10-04 04:48:36 72704 C:\WINDOWS\$NtServicePackUninstall$\magnify.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 67584 C:\WINDOWS\$NtUninstallKB826939$\magnify.exe ()

[1] 2004-08-04 03:56:50 72704 C:\WINDOWS\$NtUninstallKB925720$\magnify.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:24 72704 C:\WINDOWS\ServicePackFiles\i386\magnify.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:24 72704 C:\WINDOWS\SYSTEM32\DLLCACHE\magnify.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:24 72704 C:\WINDOWS\SYSTEM32\magnify.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 67584 C:\i386\MAGNIFY.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe

[1] 2004-08-04 03:56:51 240128 C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 230400 C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe ()

[1] 2008-04-13 20:12:25 245248 C:\WINDOWS\ServicePackFiles\i386\migwiz.exe (Microsoft Corporation)

[2] 2008-04-13 20:12:25 241152 C:\WINDOWS\ServicePackFiles\i386\migwiza.exe (Microsoft Corporation)

[2] 2004-08-04 03:56:51 236032 C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe (Microsoft Corporation)

[2] 2008-04-13 20:12:25 241152 C:\WINDOWS\SYSTEM32\DLLCACHE\migwiza.exe (Microsoft Corporation)

[2] 2004-08-04 03:56:51 236032 C:\WINDOWS\SYSTEM32\DLLCACHE\migwiz_a.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:25 245248 C:\WINDOWS\SYSTEM32\USMT\migwiz.exe (Microsoft Corporation)

[2] 2008-04-13 20:12:25 241152 C:\WINDOWS\SYSTEM32\USMT\migwiza.exe (Microsoft Corporation)

[2] 2004-08-04 03:56:51 236032 C:\WINDOWS\SYSTEM32\USMT\migwiz_a.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 230400 C:\i386\MIGWIZ.EXE (Microsoft Corporation)

[2] 2002-08-29 07:00:00 226816 C:\i386\MIGWIZ_A.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys

[1] 2005-01-18 23:51:57 451584 C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2004-10-27 21:15:16 448128 C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2006-05-05 06:16:39 454400 C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 07:41:11 455936 C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2006-05-05 05:41:45 453120 C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 407552 C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys ()

[1] 2004-10-27 21:14:18 448128 C:\WINDOWS\$NtUninstallKB885250$\mrxsmb.sys (Microsoft Corporation)

[1] 2004-08-04 02:15:16 451456 C:\WINDOWS\$NtUninstallKB885835$\mrxsmb.sys (Microsoft Corporation)

[1] 2005-01-19 00:26:52 451584 C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys (Microsoft Corporation)

[1] 2008-04-13 15:17:01 456576 C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 07:21:09 455296 C:\WINDOWS\Driver Cache\I386\mrxsmb.sys (Microsoft Corporation)

[1] 2008-04-13 15:17:01 456576 C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 07:21:09 455296 C:\WINDOWS\SYSTEM32\DLLCACHE\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 07:21:09 455296 C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 407552 C:\i386\MRXSMB.SYS (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll

[1] 2002-08-29 07:00:00 143434 C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll ()

[1] 2003-06-27 15:38:56 116288 C:\WINDOWS\ServicePackFiles\i386\msconv97.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 143434 C:\i386\MSCONV97.DLL ()



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\narrator.exe

[1] 2006-10-04 06:40:06 53760 C:\WINDOWS\$hf_mig$\KB925720\SP2QFE\narrator.exe (Microsoft Corporation)

[1] 2006-10-04 04:48:36 53760 C:\WINDOWS\$NtServicePackUninstall$\narrator.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\WINDOWS\$NtUninstallKB826939$\narrator.exe ()

[1] 2004-08-04 03:56:54 53760 C:\WINDOWS\$NtUninstallKB925720$\narrator.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:29 53760 C:\WINDOWS\ServicePackFiles\i386\narrator.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:29 53760 C:\WINDOWS\SYSTEM32\DLLCACHE\narrator.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:29 53760 C:\WINDOWS\SYSTEM32\narrator.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\i386\NARRATOR.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\newdev.dll

[1] 2004-08-04 03:56:44 248832 C:\WINDOWS\$NtServicePackUninstall$\newdev.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 238080 C:\WINDOWS\$NtUninstallKB826939$\newdev.dll ()

[1] 2008-04-13 20:12:02 247808 C:\WINDOWS\ServicePackFiles\i386\newdev.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 247808 C:\WINDOWS\SYSTEM32\newdev.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 238080 C:\i386\NEWDEV.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll

[1] 2009-02-09 06:56:35 715264 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntdll.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:36 708096 C:\WINDOWS\$NtServicePackUninstall$\ntdll.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 668672 C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll ()

[1] 2008-04-13 20:11:24 706048 C:\WINDOWS\$NtUninstallKB956572$\ntdll.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:24 706048 C:\WINDOWS\ServicePackFiles\i386\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:48 714752 C:\WINDOWS\SYSTEM32\DLLCACHE\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:48 714752 C:\WINDOWS\SYSTEM32\ntdll.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 668672 C:\i386\NTDLL.DLL (Microsoft Corporation)

[1] 2002-08-29 09:00:00 668672 C:\i386\SYSTEM32\NTDLL.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntkrnlpa.exe

[1] 2005-03-01 20:36:40 2056832 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2006-12-19 12:12:16 2059392 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2007-02-28 05:15:56 2059392 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-06 06:30:40 2066176 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-08-14 15:39:46 2066048 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2007-02-28 04:38:57 2015744 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2002-08-29 03:04:56 1920512 C:\WINDOWS\$NtUninstallKB826939$\ntkrnlpa.exe ()

[1] 2003-04-24 11:57:58 1921536 C:\WINDOWS\$NtUninstallKB840987$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2004-08-04 01:59:01 2015232 C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2005-03-01 20:34:42 2015232 C:\WINDOWS\$NtUninstallKB929338$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2006-12-19 08:55:40 2015744 C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-08-14 05:33:16 2023936 C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-04-13 14:31:21 2023936 C:\WINDOWS\$NtUninstallKB956841$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-07 19:02:58 2066048 C:\WINDOWS\Driver Cache\I386\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-04-13 14:31:21 2065792 C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-07 19:02:58 2066048 C:\WINDOWS\SYSTEM32\DLLCACHE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-06 06:32:56 2023936 C:\WINDOWS\SYSTEM32\ntkrnlpa.exe (Microsoft Corporation)

[1] 2002-08-29 03:04:56 1920512 C:\i386\ntkrnlpa.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntoskrnl.exe

[1] 2005-03-01 21:04:22 2179456 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2006-12-19 12:51:12 2182016 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2007-02-28 05:55:14 2182144 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-07 19:35:26 2189184 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-08-14 16:11:10 2189184 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2007-02-28 05:08:48 2136064 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe (Microsoft Corporation)

[1] 2002-08-29 03:04:56 1891840 C:\WINDOWS\$NtUninstallKB826939$\ntoskrnl.exe ()

[1] 2003-04-24 11:57:52 1892864 C:\WINDOWS\$NtUninstallKB840987$\ntoskrnl.exe (Microsoft Corporation)

[1] 2004-08-04 02:18:30 2148352 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe (Microsoft Corporation)

[1] 2005-03-01 20:57:44 2135552 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe (Microsoft Corporation)

[1] 2006-12-19 10:15:09 2136064 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-08-14 06:09:26 2145280 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-04-13 15:24:37 2145280 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-06 07:08:19 2189056 C:\WINDOWS\Driver Cache\I386\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-04-13 15:27:53 2188928 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-06 07:08:19 2189056 C:\WINDOWS\SYSTEM32\DLLCACHE\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-06 07:06:41 2145280 C:\WINDOWS\SYSTEM32\ntoskrnl.exe (Microsoft Corporation)

[1] 2002-08-29 03:04:56 1891840 C:\i386\ntoskrnl.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll

[1] 2004-08-04 03:56:44 102400 C:\WINDOWS\$NtServicePackUninstall$\pchshell.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 97792 C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll ()

[1] 2008-04-13 20:12:02 102912 C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 102912 C:\WINDOWS\ServicePackFiles\i386\pchshell.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 102912 C:\WINDOWS\SYSTEM32\DLLCACHE\pchshell.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys

[1] 2004-08-04 02:14:26 48384 C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 46336 C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys ()

[1] 2008-04-13 15:19:48 48384 C:\WINDOWS\ServicePackFiles\i386\raspptp.sys (Microsoft Corporation)

[1] 2008-04-13 15:19:48 48384 C:\WINDOWS\SYSTEM32\DRIVERS\raspptp.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 46336 C:\i386\RASPPTP.SYS (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\shell32.dll

[1] 2004-12-21 16:50:55 8451072 C:\WINDOWS\$hf_mig$\KB890047\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2005-02-28 19:06:29 8451584 C:\WINDOWS\$hf_mig$\KB893086\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2005-09-22 23:18:20 8452608 C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-03-17 00:46:31 8454656 C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-07-13 10:03:23 8457728 C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-12-19 17:50:10 8458752 C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2008-06-17 15:04:34 8461824 C:\WINDOWS\$hf_mig$\KB967715\SP3QFE\shell32.dll (Microsoft Corporation)

[1] 2007-10-25 23:34:01 8460288 C:\WINDOWS\$NtServicePackUninstall$\shell32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 8336384 C:\WINDOWS\$NtUninstallKB826939$\shell32.dll ()

[1] 2003-06-11 16:43:48 8240640 C:\WINDOWS\$NtUninstallKB839645$\shell32.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:45 8384000 C:\WINDOWS\$NtUninstallKB890047$\shell32.dll (Microsoft Corporation)

[1] 2004-12-21 16:49:36 8450048 C:\WINDOWS\$NtUninstallKB893086$\shell32.dll (Microsoft Corporation)

[1] 2005-02-28 19:11:18 8450048 C:\WINDOWS\$NtUninstallKB900725$\shell32.dll (Microsoft Corporation)

[1] 2005-09-22 23:05:29 8450560 C:\WINDOWS\$NtUninstallKB908531$\shell32.dll (Microsoft Corporation)

[1] 2006-03-17 00:03:54 8452096 C:\WINDOWS\$NtUninstallKB921398$\shell32.dll (Microsoft Corporation)

[1] 2006-07-13 09:33:27 8453632 C:\WINDOWS\$NtUninstallKB928255$\shell32.dll (Microsoft Corporation)

[1] 2006-12-19 17:52:18 8453632 C:\WINDOWS\$NtUninstallKB943460$\shell32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:05 8461312 C:\WINDOWS\$NtUninstallKB967715$\shell32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:05 8461312 C:\WINDOWS\ServicePackFiles\i386\shell32.dll (Microsoft Corporation)

[1] 2008-06-17 15:02:19 8461312 C:\WINDOWS\SYSTEM32\DLLCACHE\shell32.dll (Microsoft Corporation)

[1] 2008-06-17 15:02:19 8461312 C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 8336384 C:\i386\SHELL32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll

[1] 2004-08-04 03:56:45 239104 C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 226304 C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll ()

[1] 2008-04-13 20:12:07 239104 C:\WINDOWS\ServicePackFiles\i386\srrstr.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:07 239104 C:\WINDOWS\SYSTEM32\srrstr.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 226304 C:\i386\SRRSTR.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\srv.sys

[1] 2005-05-09 20:22:21 332544 C:\WINDOWS\$hf_mig$\KB896422\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2006-04-21 02:46:15 332800 C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2006-08-14 08:00:42 332928 C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2008-09-08 07:37:19 333824 C:\WINDOWS\$hf_mig$\KB957095\SP3QFE\srv.sys (Microsoft Corporation)

[1] 2008-12-11 08:33:59 333952 C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys (Microsoft Corporation)

[1] 2006-08-14 06:34:41 332928 C:\WINDOWS\$NtServicePackUninstall$\srv.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 330368 C:\WINDOWS\$NtUninstallKB826939$\srv.sys ()

[1] 2004-08-04 02:14:45 336256 C:\WINDOWS\$NtUninstallKB896422$\srv.sys (Microsoft Corporation)

[1] 2005-05-09 20:17:51 332544 C:\WINDOWS\$NtUninstallKB917159$\srv.sys (Microsoft Corporation)

[1] 2006-04-21 02:12:27 332800 C:\WINDOWS\$NtUninstallKB923414$\srv.sys (Microsoft Corporation)

[1] 2008-04-13 15:15:11 334848 C:\WINDOWS\$NtUninstallKB957095$\srv.sys (Microsoft Corporation)

[1] 2008-09-08 06:41:42 333824 C:\WINDOWS\$NtUninstallKB958687$\srv.sys (Microsoft Corporation)

[1] 2008-04-13 15:15:11 334848 C:\WINDOWS\ServicePackFiles\i386\srv.sys (Microsoft Corporation)

[1] 2008-12-11 06:57:09 333952 C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys (Microsoft Corporation)

[1] 2008-12-11 06:57:09 333952 C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys (Microsoft Corporation)

[1] 2002-08-29 07:00:00 330368 C:\i386\SRV.SYS (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\sysmain.sdb

[1] 2009-03-27 02:33:14 1203922 C:\WINDOWS\$hf_mig$\KB923561\SP3QFE\sysmain.sdb ()

[1] 2006-10-04 10:06:21 1197294 C:\WINDOWS\$NtServicePackUninstall$\sysmain.sdb ()

[1] 2002-08-29 07:00:00 1082436 C:\WINDOWS\$NtUninstallKB826939$\sysmain.sdb ()

[1] 2008-04-13 20:15:28 1202774 C:\WINDOWS\$NtUninstallKB923561$\sysmain.sdb ()

[1] 2004-08-04 04:02:14 1190796 C:\WINDOWS\$NtUninstallKB926239$\sysmain.sdb ()

[1] 2009-03-27 02:58:38 1203922 C:\WINDOWS\AppPatch\sysmain.sdb ()

[1] 2008-04-13 20:15:28 1202774 C:\WINDOWS\ServicePackFiles\i386\sysmain.sdb ()

[1] 2009-03-27 02:58:38 1203922 C:\WINDOWS\SYSTEM32\DLLCACHE\sysmain.sdb ()

[1] 2002-08-29 07:00:00 1082436 C:\i386\SYSMAIN.SDB ()



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\user32.dll

[1] 2005-03-02 14:19:56 577024 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 11:48:36 578048 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 11:36:28 577536 C:\WINDOWS\$NtServicePackUninstall$\user32.dll (Microsoft Corporation)

[1] 2002-11-01 18:26:46 528896 C:\WINDOWS\$NtUninstallKB824141$\user32.dll ()

[1] 2002-08-29 07:00:00 560128 C:\WINDOWS\$NtUninstallKB826939$\user32.dll ()

[1] 2003-09-25 12:49:02 560128 C:\WINDOWS\$NtUninstallKB840987$\user32.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:46 577024 C:\WINDOWS\$NtUninstallKB890859$\user32.dll (Microsoft Corporation)

[1] 2005-03-02 14:09:30 577024 C:\WINDOWS\$NtUninstallKB925902$\user32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:08 578560 C:\WINDOWS\ServicePackFiles\i386\user32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:08 578560 C:\WINDOWS\SYSTEM32\user32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 560128 C:\i386\USER32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll

[1] 2005-03-02 14:19:56 291328 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2005-08-31 21:44:05 291840 C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2007-03-17 09:45:03 292864 C:\WINDOWS\$hf_mig$\KB930178\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2007-03-17 09:43:01 292864 C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 276480 C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll ()

[1] 2002-11-01 18:26:44 272896 C:\WINDOWS\$NtUninstallKB840987$\winsrv.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:46 290816 C:\WINDOWS\$NtUninstallKB890859$\winsrv.dll (Microsoft Corporation)

[1] 2005-03-02 14:09:30 291328 C:\WINDOWS\$NtUninstallKB900725$\winsrv.dll (Microsoft Corporation)

[1] 2005-08-31 21:41:54 291840 C:\WINDOWS\$NtUninstallKB930178$\winsrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:09 293376 C:\WINDOWS\ServicePackFiles\i386\winsrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:09 293376 C:\WINDOWS\SYSTEM32\winsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 276480 C:\i386\WINSRV.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll

[1] 2004-08-04 03:56:42 57344 C:\WINDOWS\$NtServicePackUninstall$\msasn1.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll ()

[1] 2003-09-19 13:37:54 51712 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll ()

[1] 2008-04-13 20:11:58 57344 C:\WINDOWS\ServicePackFiles\i386\msasn1.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:58 57344 C:\WINDOWS\SYSTEM32\msasn1.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\i386\MSASN1.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll

[1] 2005-07-26 00:20:23 225792 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:42 225792 C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 215040 C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll ()

[1] 2004-08-04 03:56:41 229888 C:\WINDOWS\$NtUninstallKB902400$\catsrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 226304 C:\WINDOWS\ServicePackFiles\i386\catsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 215040 C:\i386\CATSRV.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll

[1] 2005-07-26 00:20:23 625152 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:43 625152 C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 582656 C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll ()

[1] 2004-08-04 03:56:41 628224 C:\WINDOWS\$NtUninstallKB902400$\catsrvut.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 625664 C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 625664 C:\WINDOWS\SYSTEM32\catsrvut.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 582656 C:\i386\CATSRVUT.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll

[1] 2005-07-26 00:20:23 110080 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:43 110080 C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 100864 C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll ()

[1] 2004-08-04 03:56:41 110080 C:\WINDOWS\$NtUninstallKB902400$\clbcatex.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 110592 C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 110592 C:\WINDOWS\SYSTEM32\clbcatex.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 110592 C:\WINDOWS\SYSTEM32\DLLCACHE\clbcatex.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 100864 C:\i386\CLBCATEX.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll

[1] 2005-07-26 00:20:24 498688 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:43 498688 C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 468480 C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll ()

[1] 2004-08-04 03:56:41 501248 C:\WINDOWS\$NtUninstallKB902400$\clbcatq.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 498688 C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 498688 C:\WINDOWS\SYSTEM32\clbcatq.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 468480 C:\i386\CLBCATQ.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\colbact.dll

[1] 2005-07-26 00:20:24 60416 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:43 60416 C:\WINDOWS\$NtServicePackUninstall$\colbact.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 56832 C:\WINDOWS\$NtUninstallKB828741$\colbact.dll ()

[1] 2004-08-04 03:56:41 62464 C:\WINDOWS\$NtUninstallKB902400$\colbact.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 60416 C:\WINDOWS\ServicePackFiles\i386\colbact.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 60416 C:\WINDOWS\SYSTEM32\colbact.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 56832 C:\i386\COLBACT.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll

[1] 2005-07-26 00:20:24 195072 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:44 195072 C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 186880 C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll ()

[1] 2004-08-04 03:56:41 195584 C:\WINDOWS\$NtUninstallKB902400$\comadmin.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 195072 C:\WINDOWS\ServicePackFiles\i386\comadmin.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 195072 C:\WINDOWS\SYSTEM32\Com\comadmin.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 195072 C:\WINDOWS\SYSTEM32\DLLCACHE\comadmin.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 186880 C:\i386\COMADMIN.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe

[1] 2004-08-04 03:56:48 9728 C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 8192 C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe ()

[1] 2008-04-13 20:12:15 9728 C:\WINDOWS\ServicePackFiles\i386\comrepl.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:15 9728 C:\WINDOWS\SYSTEM32\Com\comrepl.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:15 9728 C:\WINDOWS\SYSTEM32\DLLCACHE\comrepl.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 8192 C:\i386\COMREPL.EXE (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll

[1] 2005-07-26 00:20:27 1267200 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:44 1267200 C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 1172992 C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll ()

[1] 2004-08-04 03:56:41 1251840 C:\WINDOWS\$NtUninstallKB902400$\comsvcs.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 1267200 C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 1267200 C:\WINDOWS\SYSTEM32\comsvcs.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 1172992 C:\i386\COMSVCS.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comuid.dll

[1] 2005-07-26 00:20:28 540160 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:45 540160 C:\WINDOWS\$NtServicePackUninstall$\comuid.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 495616 C:\WINDOWS\$NtUninstallKB828741$\comuid.dll ()

[1] 2004-08-04 03:56:41 540160 C:\WINDOWS\$NtUninstallKB902400$\comuid.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 539648 C:\WINDOWS\ServicePackFiles\i386\comuid.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 539648 C:\WINDOWS\SYSTEM32\comuid.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:51 539648 C:\WINDOWS\SYSTEM32\DLLCACHE\comuid.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 495616 C:\i386\COMUID.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\es.dll

[1] 2005-07-26 00:20:28 243200 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:06:43 253952 C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:26:58 253952 C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:23:18 253952 C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:32:22 253952 C:\WINDOWS\$NtServicePackUninstall$\es.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 225280 C:\WINDOWS\$NtUninstallKB828741$\es.dll ()

[1] 2004-08-04 03:56:42 243200 C:\WINDOWS\$NtUninstallKB902400$\es.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:53 246272 C:\WINDOWS\$NtUninstallKB950974$\es.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:45 243200 C:\WINDOWS\$NtUninstallKB950974_0$\es.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:53 246272 C:\WINDOWS\ServicePackFiles\i386\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:26:58 253952 C:\WINDOWS\SYSTEM32\DLLCACHE\es.dll (Microsoft Corporation)

[1] 2008-07-07 16:26:58 253952 C:\WINDOWS\SYSTEM32\es.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 225280 C:\i386\ES.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll

[1] 2005-07-26 00:20:29 425472 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2006-03-01 15:34:20 426496 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 10:09:35 428032 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2006-03-01 15:42:42 426496 C:\WINDOWS\$NtServicePackUninstall$\msdtcprx.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 359936 C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll ()

[1] 2004-08-04 03:56:43 425472 C:\WINDOWS\$NtUninstallKB902400$\msdtcprx.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:46 425472 C:\WINDOWS\$NtUninstallKB913580$\msdtcprx.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 427008 C:\WINDOWS\$NtUninstallKB952004$\msdtcprx.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 427008 C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 428032 C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 428032 C:\WINDOWS\SYSTEM32\msdtcprx.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 359936 C:\i386\MSDTCPRX.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll

[1] 2005-07-26 00:20:31 945152 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll (Microsoft Corporation)

[1] 2006-03-01 15:34:20 956416 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 10:09:35 956928 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtctm.dll (Microsoft Corporation)

[1] 2006-03-01 15:42:42 956416 C:\WINDOWS\$NtServicePackUninstall$\msdtctm.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 869376 C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll ()

[1] 2004-08-04 03:56:43 949248 C:\WINDOWS\$NtUninstallKB902400$\msdtctm.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:47 945152 C:\WINDOWS\$NtUninstallKB913580$\msdtctm.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 956928 C:\WINDOWS\$NtUninstallKB952004$\msdtctm.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 956928 C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 956928 C:\WINDOWS\SYSTEM32\DLLCACHE\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 956928 C:\WINDOWS\SYSTEM32\msdtctm.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 869376 C:\i386\MSDTCTM.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll

[1] 2005-07-26 00:20:31 161280 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2006-03-01 15:34:20 161280 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 10:09:35 161792 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2006-03-01 15:42:42 161280 C:\WINDOWS\$NtServicePackUninstall$\msdtcuiu.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 151040 C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll ()

[1] 2004-08-04 03:56:43 161280 C:\WINDOWS\$NtUninstallKB902400$\msdtcuiu.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:47 161280 C:\WINDOWS\$NtUninstallKB913580$\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 161792 C:\WINDOWS\$NtUninstallKB952004$\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 161792 C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 161792 C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 161792 C:\WINDOWS\SYSTEM32\msdtcuiu.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 151040 C:\i386\MSDTCUIU.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll

[1] 2005-07-26 00:20:39 66560 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll (Microsoft Corporation)

[1] 2006-03-01 15:34:20 66560 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll (Microsoft Corporation)

[1] 2008-06-12 10:09:35 66560 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\mtxclu.dll (Microsoft Corporation)

[1] 2006-03-01 15:42:42 66560 C:\WINDOWS\$NtServicePackUninstall$\mtxclu.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 61440 C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll ()

[1] 2004-08-04 03:56:44 66560 C:\WINDOWS\$NtUninstallKB902400$\mtxclu.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:47 66560 C:\WINDOWS\$NtUninstallKB913580$\mtxclu.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 66560 C:\WINDOWS\$NtUninstallKB952004$\mtxclu.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 66560 C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 66560 C:\WINDOWS\SYSTEM32\DLLCACHE\mtxclu.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 66560 C:\WINDOWS\SYSTEM32\mtxclu.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 61440 C:\i386\MTXCLU.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll

[1] 2005-07-26 00:20:40 91136 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll (Microsoft Corporation)

[1] 2006-03-01 15:34:20 91136 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 10:09:35 91648 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\mtxoci.dll (Microsoft Corporation)

[1] 2006-03-01 15:42:42 91136 C:\WINDOWS\$NtServicePackUninstall$\mtxoci.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 83968 C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll ()

[1] 2004-08-04 03:56:44 90112 C:\WINDOWS\$NtUninstallKB902400$\mtxoci.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:47 91136 C:\WINDOWS\$NtUninstallKB913580$\mtxoci.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 91648 C:\WINDOWS\$NtUninstallKB952004$\mtxoci.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 91648 C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 91648 C:\WINDOWS\SYSTEM32\DLLCACHE\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 10:23:32 91648 C:\WINDOWS\SYSTEM32\mtxoci.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 83968 C:\i386\MTXOCI.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\ole32.dll

[1] 2005-01-14 01:07:42 1284608 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 12:35:02 1286144 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-26 00:20:40 1285632 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:48 1285120 C:\WINDOWS\$NtServicePackUninstall$\ole32.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:44 1172992 C:\WINDOWS\$NtUninstallKB828741$\ole32.dll ()

[1] 2004-08-04 03:56:44 1281536 C:\WINDOWS\$NtUninstallKB873333$\ole32.dll (Microsoft Corporation)

[1] 2005-01-14 04:55:50 1285120 C:\WINDOWS\$NtUninstallKB894391$\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 15:31:11 1285120 C:\WINDOWS\$NtUninstallKB902400$\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 1287168 C:\WINDOWS\ServicePackFiles\i386\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 1287168 C:\WINDOWS\SYSTEM32\ole32.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:44 1172992 C:\i386\OLE32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll

[1] 2009-04-15 11:24:20 585216 C:\WINDOWS\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll (Microsoft Corporation)

[1] 2007-07-09 09:16:16 582656 C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:46 532480 C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll ()

[1] 2004-08-04 03:56:44 581120 C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:04 584704 C:\WINDOWS\$NtUninstallKB970238$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:04 584704 C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 10:51:25 585216 C:\WINDOWS\SYSTEM32\DLLCACHE\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 10:51:25 585216 C:\WINDOWS\SYSTEM32\rpcrt4.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:46 532480 C:\i386\RPCRT4.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll

[1] 2005-01-14 01:07:42 395776 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 15:35:01 396288 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-26 00:20:40 398336 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 06:56:36 401408 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:49 397824 C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:40 260608 C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll ()

[1] 2004-08-04 03:56:44 395776 C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll (Microsoft Corporation)

[1] 2005-01-14 04:55:50 395776 C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 15:31:11 395776 C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:04 399360 C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:04 399360 C:\WINDOWS\ServicePackFiles\i386\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:48 401408 C:\WINDOWS\SYSTEM32\DLLCACHE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:48 401408 C:\WINDOWS\SYSTEM32\rpcss.dll (Microsoft Corporation)

[1] 2003-08-25 15:53:40 260608 C:\i386\RPCSS.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\txflog.dll

[1] 2005-07-26 00:20:40 101376 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll (Microsoft Corporation)

[1] 2005-07-26 00:39:49 101376 C:\WINDOWS\$NtServicePackUninstall$\txflog.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 90624 C:\WINDOWS\$NtUninstallKB828741$\txflog.dll ()

[1] 2004-08-04 03:56:46 101376 C:\WINDOWS\$NtUninstallKB902400$\txflog.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:07 101376 C:\WINDOWS\ServicePackFiles\i386\txflog.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:07 101376 C:\WINDOWS\SYSTEM32\DLLCACHE\txflog.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:07 101376 C:\WINDOWS\SYSTEM32\txflog.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 90624 C:\i386\TXFLOG.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\callcont.dll

[1] 2004-08-04 03:56:41 385024 C:\WINDOWS\$NtServicePackUninstall$\callcont.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 360448 C:\WINDOWS\$NtUninstallKB835732$\callcont.dll ()

[1] 2008-04-13 20:11:50 385024 C:\WINDOWS\ServicePackFiles\i386\callcont.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:50 385024 C:\WINDOWS\SYSTEM32\DLLCACHE\callcont.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 360448 C:\i386\CALLCONT.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll

[1] 2005-10-05 23:18:28 280064 C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2005-12-28 23:04:05 280064 C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2007-03-08 11:48:36 282112 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2007-06-19 09:37:21 282112 C:\WINDOWS\$hf_mig$\KB938829\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-02-20 02:52:43 282624 C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 08:43:42 286720 C:\WINDOWS\$hf_mig$\KB956802\SP3QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-02-20 02:51:05 282624 C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 250368 C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll ()

[1] 2004-03-29 21:48:36 257536 C:\WINDOWS\$NtUninstallKB840987$\gdi32.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:42 278016 C:\WINDOWS\$NtUninstallKB896424$\gdi32.dll (Microsoft Corporation)

[1] 2005-10-05 23:09:36 280064 C:\WINDOWS\$NtUninstallKB912919$\gdi32.dll (Microsoft Corporation)

[1] 2005-12-28 22:54:35 280064 C:\WINDOWS\$NtUninstallKB925902$\gdi32.dll (Microsoft Corporation)

[1] 2007-03-08 11:36:28 281600 C:\WINDOWS\$NtUninstallKB938829$\gdi32.dll (Microsoft Corporation)

[1] 2007-06-19 09:31:19 282112 C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 285184 C:\WINDOWS\$NtUninstallKB956802$\gdi32.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 285184 C:\WINDOWS\ServicePackFiles\i386\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 08:36:14 286720 C:\WINDOWS\SYSTEM32\DLLCACHE\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 08:36:14 286720 C:\WINDOWS\SYSTEM32\gdi32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 250368 C:\i386\GDI32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\h323.tsp

[1] 2004-08-04 03:56:57 265728 C:\WINDOWS\$NtServicePackUninstall$\h323.tsp ()

[1] 2002-08-29 07:00:00 252928 C:\WINDOWS\$NtUninstallKB835732$\h323.tsp ()

[1] 2008-04-13 20:12:45 265728 C:\WINDOWS\ServicePackFiles\i386\h323.tsp ()

[1] 2008-04-13 20:12:45 265728 C:\WINDOWS\SYSTEM32\h323.tsp ()

[1] 2002-08-29 07:00:00 252928 C:\i386\H323.TSP ()



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll

[1] 2004-08-04 03:56:42 614912 C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 592896 C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll ()

[1] 2008-04-13 20:11:54 614912 C:\WINDOWS\ServicePackFiles\i386\h323msp.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 614912 C:\WINDOWS\SYSTEM32\DLLCACHE\h323msp.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:54 614912 C:\WINDOWS\SYSTEM32\h323msp.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 592896 C:\i386\H323MSP.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe

[1] 2004-08-04 03:56:49 768512 C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe (Microsoft Corporation)

[1] 2002-08-29 07:00:00 742400 C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe ()

[1] 2004-03-29 21:34:15 741376 C:\WINDOWS\$NtUninstallKB840374$\helpctr.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:21 769024 C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:21 769024 C:\WINDOWS\ServicePackFiles\i386\helpctr.exe (Microsoft Corporation)

[1] 2008-04-13 20:12:21 769024 C:\WINDOWS\SYSTEM32\DLLCACHE\helpctr.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll

[1] 2004-08-04 03:56:42 331264 C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 435200 C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll ()

[1] 2008-04-13 20:11:55 331264 C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:55 331264 C:\WINDOWS\SYSTEM32\ipnathlp.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 435200 C:\i386\IPNATHLP.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll

[1] 2004-10-27 21:28:18 721920 C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2006-08-17 08:37:49 726528 C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2007-11-07 05:50:47 727040 C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 06:56:36 729088 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\lsasrv.dll (Microsoft Corporation)

[1] 2007-11-07 05:26:56 721920 C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 671744 C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll ()

[1] 2004-08-04 03:56:42 721920 C:\WINDOWS\$NtUninstallKB885835$\lsasrv.dll (Microsoft Corporation)

[1] 2004-10-27 21:21:01 721920 C:\WINDOWS\$NtUninstallKB924270$\lsasrv.dll (Microsoft Corporation)

[1] 2006-08-17 08:28:27 721920 C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:56 728064 C:\WINDOWS\$NtUninstallKB956572$\lsasrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:56 728064 C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-25 04:44:41 724480 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP2GDR\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-25 04:17:27 729600 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-25 04:25:26 730112 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP3GDR\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-26 15:11:12 730112 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP3QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:49 729088 C:\WINDOWS\SYSTEM32\DLLCACHE\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 08:10:49 729088 C:\WINDOWS\SYSTEM32\lsasrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 671744 C:\i386\LSASRV.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll

[1] 2007-03-08 11:48:36 40960 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\mf3216.dll (Microsoft Corporation)

[1] 2007-03-08 11:36:28 40960 C:\WINDOWS\$NtServicePackUninstall$\mf3216.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 35328 C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll ()

[1] 2004-08-04 03:56:42 39936 C:\WINDOWS\$NtUninstallKB925902$\mf3216.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:56 40960 C:\WINDOWS\ServicePackFiles\i386\mf3216.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:56 40960 C:\WINDOWS\SYSTEM32\DLLCACHE\mf3216.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:56 40960 C:\WINDOWS\SYSTEM32\mf3216.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 35328 C:\i386\MF3216.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll

[1] 2004-08-04 03:56:42 57344 C:\WINDOWS\$NtServicePackUninstall$\msasn1.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll ()

[1] 2003-09-19 13:37:54 51712 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll ()

[1] 2008-04-13 20:11:58 57344 C:\WINDOWS\ServicePackFiles\i386\msasn1.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:58 57344 C:\WINDOWS\SYSTEM32\msasn1.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 51200 C:\i386\MSASN1.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\msgina.dll

[1] 2004-08-04 03:56:43 994304 C:\WINDOWS\$NtServicePackUninstall$\msgina.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 968192 C:\WINDOWS\$NtUninstallKB835732$\msgina.dll ()

[1] 2008-04-13 20:11:59 997376 C:\WINDOWS\ServicePackFiles\i386\msgina.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:59 997376 C:\WINDOWS\SYSTEM32\msgina.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 968192 C:\i386\MSGINA.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\mst120.dll

[1] 2004-08-04 03:56:43 274432 C:\WINDOWS\$NtServicePackUninstall$\mst120.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 249856 C:\WINDOWS\$NtUninstallKB835732$\mst120.dll ()

[1] 2008-04-13 20:12:00 274432 C:\WINDOWS\ServicePackFiles\i386\mst120.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:00 274432 C:\WINDOWS\SYSTEM32\DLLCACHE\mst120.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 249856 C:\i386\MST120.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll

[1] 2006-07-14 11:41:56 336896 C:\WINDOWS\$hf_mig$\KB921883\SP2QFE\netapi32.dll (Microsoft Corporation)

[1] 2006-08-17 08:37:49 337408 C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll (Microsoft Corporation)

[1] 2008-10-15 12:25:53 339456 C:\WINDOWS\$hf_mig$\KB958644\SP3QFE\netapi32.dll (Microsoft Corporation)

[1] 2006-08-17 08:28:27 332288 C:\WINDOWS\$NtServicePackUninstall$\netapi32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 309248 C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll ()

[1] 2004-03-29 21:48:36 306176 C:\WINDOWS\$NtUninstallKB841873$\netapi32.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:44 332288 C:\WINDOWS\$NtUninstallKB921883$\netapi32.dll (Microsoft Corporation)

[1] 2006-07-14 11:31:39 332288 C:\WINDOWS\$NtUninstallKB924270$\netapi32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 337408 C:\WINDOWS\$NtUninstallKB958644$\netapi32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:01 337408 C:\WINDOWS\ServicePackFiles\i386\netapi32.dll (Microsoft Corporation)

[1] 2008-10-15 12:34:24 337408 C:\WINDOWS\SYSTEM32\DLLCACHE\netapi32.dll (Microsoft Corporation)

[1] 2008-10-15 12:34:24 337408 C:\WINDOWS\SYSTEM32\netapi32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 309248 C:\i386\NETAPI32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll

[1] 2004-08-04 03:56:44 77824 C:\WINDOWS\$NtServicePackUninstall$\nmcom.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 69632 C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll ()

[1] 2008-04-13 20:12:02 77824 C:\WINDOWS\ServicePackFiles\i386\nmcom.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:02 77824 C:\WINDOWS\SYSTEM32\DLLCACHE\nmcom.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 69632 C:\i386\NMCOM.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll

[1] 2002-08-29 07:00:00 548864 C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll ()

[1] 2008-04-13 20:12:50 991232 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 548864 C:\i386\RTCDLL.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\schannel.dll

[1] 2007-04-25 16:32:22 144896 C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll (Microsoft Corporation)

[1] 2008-12-05 02:58:08 144896 C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll (Microsoft Corporation)

[1] 2007-04-25 10:21:15 144896 C:\WINDOWS\$NtServicePackUninstall$\schannel.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 136704 C:\WINDOWS\$NtUninstallKB835732$\schannel.dll ()

[1] 2004-08-04 03:56:44 144896 C:\WINDOWS\$NtUninstallKB935840$\schannel.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:05 144384 C:\WINDOWS\$NtUninstallKB960225$\schannel.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:05 144384 C:\WINDOWS\ServicePackFiles\i386\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 04:44:41 168448 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP2GDR\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 04:17:27 168448 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP2QFE\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 04:25:26 147456 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP3GDR\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 04:41:11 147456 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\SP3QFE\schannel.dll (Microsoft Corporation)

[1] 2008-12-05 02:54:55 144896 C:\WINDOWS\SYSTEM32\DLLCACHE\schannel.dll (Microsoft Corporation)

[1] 2008-12-05 02:54:55 144896 C:\WINDOWS\SYSTEM32\schannel.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 136704 C:\i386\SCHANNEL.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\xpsp2res.dll

[2] 2004-08-04 03:56:29 757248 C:\WINDOWS\$NtServicePackUninstall$\sprb041b.dll (Microsoft Corporation)

[2] 2004-08-04 03:56:30 732160 C:\WINDOWS\$NtServicePackUninstall$\sprb0424.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:36 2897920 C:\WINDOWS\$NtServicePackUninstall$\xpsp2res.dll (Microsoft Corporation)

[1] 2003-03-06 12:27:38 526848 C:\WINDOWS\$NtUninstallKB835732$\xpsp2res.dll ()

[1] 2004-03-10 13:59:50 593408 C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll (Microsoft Corporation)

[1] 2004-03-10 13:59:50 593408 C:\WINDOWS\$NtUninstallKB841873$\xpsp2res.dll (Microsoft Corporation)

[2] 2008-04-13 14:38:37 757248 C:\WINDOWS\ServicePackFiles\i386\sprb041b.dll (Microsoft Corporation)

[2] 2008-04-13 14:38:36 732160 C:\WINDOWS\ServicePackFiles\i386\sprb0424.dll (Microsoft Corporation)

[1] 2008-04-13 13:39:24 2897920 C:\WINDOWS\ServicePackFiles\i386\xpsp2res.dll (Microsoft Corporation)

[2] 2008-04-13 14:38:37 757248 C:\WINDOWS\SYSTEM32\DLLCACHE\sprb041b.dll (Microsoft Corporation)

[2] 2008-04-13 14:38:36 732160 C:\WINDOWS\SYSTEM32\DLLCACHE\sprb0424.dll (Microsoft Corporation)

[1] 2008-04-13 14:38:37 757248 C:\WINDOWS\SYSTEM32\MUI\041b\xpsp2res.dll (Microsoft Corporation)

[1] 2008-04-13 13:39:24 2897920 C:\WINDOWS\SYSTEM32\MUI\041e\xpsp2res.dll (Microsoft Corporation)

[1] 2008-04-13 14:38:36 732160 C:\WINDOWS\SYSTEM32\MUI\0424\xpsp2res.dll (Microsoft Corporation)

[1] 2008-04-13 13:39:24 2897920 C:\WINDOWS\SYSTEM32\xpsp2res.dll (Microsoft Corporation)

[1] 2003-03-06 12:27:38 526848 C:\i386\xpsp2res.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\dao360.dll

[1] 2008-01-23 00:56:21 554008 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:42 561179 C:\WINDOWS\$NtServicePackUninstall$\dao360.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 557128 C:\WINDOWS\$NtUninstallKB837001$\dao360.dll ()

[1] 2004-08-04 03:56:42 561179 C:\WINDOWS\$NtUninstallKB950749$\dao360.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:25 554008 C:\WINDOWS\ServicePackFiles\i386\dao360.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:25 554008 C:\WINDOWS\SYSTEM32\DLLCACHE\dao360.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 557128 C:\i386\DAO360.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll

[1] 2004-08-04 03:56:42 380957 C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 380445 C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll ()

[1] 2008-04-13 20:11:53 380445 C:\WINDOWS\ServicePackFiles\i386\expsrv.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:53 380445 C:\WINDOWS\SYSTEM32\expsrv.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 380445 C:\i386\EXPSRV.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll

[1] 2007-12-10 08:41:11 518944 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 512029 C:\WINDOWS\$NtServicePackUninstall$\msexch40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 512031 C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll ()

[1] 2004-08-04 03:56:43 512029 C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:28 518944 C:\WINDOWS\ServicePackFiles\i386\msexch40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:28 518944 C:\WINDOWS\SYSTEM32\DLLCACHE\msexch40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:28 518944 C:\WINDOWS\SYSTEM32\msexch40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 512031 C:\i386\MSEXCH40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll

[1] 2007-12-10 08:41:11 326432 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 319517 C:\WINDOWS\$NtServicePackUninstall$\msexcl40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 319519 C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll ()

[1] 2004-08-04 03:56:43 319517 C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:30 326432 C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:30 326432 C:\WINDOWS\SYSTEM32\DLLCACHE\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:30 326432 C:\WINDOWS\SYSTEM32\msexcl40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 319519 C:\i386\MSEXCL40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll

[1] 2007-12-10 08:41:11 1516568 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 1507356 C:\WINDOWS\$NtServicePackUninstall$\msjet40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 1503262 C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll ()

[1] 2004-08-04 03:56:43 1507356 C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:34 1516568 C:\WINDOWS\ServicePackFiles\i386\msjet40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:34 1516568 C:\WINDOWS\SYSTEM32\DLLCACHE\msjet40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:34 1516568 C:\WINDOWS\SYSTEM32\msjet40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 1503262 C:\i386\MSJET40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll

[2] 2004-03-01 14:52:15 358976 C:\WINDOWS\$NtServicePackUninstall$\msjetol1.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 348195 C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll ()

[2] 2004-03-01 14:52:15 358976 C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll (Microsoft Corporation)

[1] 2004-03-01 14:52:15 358976 C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:40 355112 C:\WINDOWS\SYSTEM32\msjetoledb40.dll ()

[1] 2002-08-29 07:00:00 348195 C:\i386\msjetoledb40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll

[1] 2008-03-27 03:39:13 151583 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll (Microsoft Corporation)

[1] 2008-03-27 04:12:54 151583 C:\WINDOWS\$NtServicePackUninstall$\msjint40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 151626 C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll ()

[1] 2004-08-04 03:56:43 151583 C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:00 151583 C:\WINDOWS\ServicePackFiles\i386\msjint40.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:00 151583 C:\WINDOWS\SYSTEM32\msjint40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 151626 C:\i386\MSJINT40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll

[1] 2007-12-10 08:41:12 60192 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 53279 C:\WINDOWS\$NtServicePackUninstall$\msjter40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 53322 C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll ()

[1] 2004-08-04 03:56:43 53279 C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 60192 C:\WINDOWS\ServicePackFiles\i386\msjter40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 60192 C:\WINDOWS\SYSTEM32\DLLCACHE\msjter40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 60192 C:\WINDOWS\SYSTEM32\msjter40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 53322 C:\i386\MSJTER40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll

[1] 2007-12-10 08:41:12 248608 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 241693 C:\WINDOWS\$NtServicePackUninstall$\msjtes40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 241695 C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll ()

[1] 2004-08-04 03:56:43 241693 C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 248608 C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 248608 C:\WINDOWS\SYSTEM32\DLLCACHE\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:42 248608 C:\WINDOWS\SYSTEM32\msjtes40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 241695 C:\i386\MSJTES40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll

[1] 2007-12-10 08:41:12 219936 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 213023 C:\WINDOWS\$NtServicePackUninstall$\msltus40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 213023 C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll ()

[1] 2004-08-04 03:56:43 213023 C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:44 219936 C:\WINDOWS\ServicePackFiles\i386\msltus40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:44 219936 C:\WINDOWS\SYSTEM32\DLLCACHE\msltus40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:44 219936 C:\WINDOWS\SYSTEM32\msltus40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 213023 C:\i386\MSLTUS40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll

[1] 2007-12-10 08:41:12 355104 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 348189 C:\WINDOWS\$NtServicePackUninstall$\mspbde40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 348191 C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll ()

[1] 2004-08-04 03:56:43 348189 C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:45 355104 C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:45 355104 C:\WINDOWS\SYSTEM32\DLLCACHE\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:45 355104 C:\WINDOWS\SYSTEM32\mspbde40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 348191 C:\i386\MSPBDE40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll

[1] 2007-12-10 08:41:13 432928 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 421919 C:\WINDOWS\$NtServicePackUninstall$\msrd2x40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 421919 C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll ()

[1] 2004-08-04 03:56:43 421919 C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:47 432928 C:\WINDOWS\ServicePackFiles\i386\msrd2x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:47 432928 C:\WINDOWS\SYSTEM32\DLLCACHE\msrd2x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:47 432928 C:\WINDOWS\SYSTEM32\msrd2x40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 421919 C:\i386\MSRD2X40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll

[1] 2007-12-10 08:41:13 322336 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 315423 C:\WINDOWS\$NtServicePackUninstall$\msrd3x40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 315466 C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll ()

[1] 2004-08-04 03:56:43 315423 C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:49 322336 C:\WINDOWS\ServicePackFiles\i386\msrd3x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:49 322336 C:\WINDOWS\SYSTEM32\DLLCACHE\msrd3x40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:49 322336 C:\WINDOWS\SYSTEM32\msrd3x40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 315466 C:\i386\MSRD3X40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll

[1] 2007-12-10 08:41:13 559904 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 552989 C:\WINDOWS\$NtServicePackUninstall$\msrepl40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 552991 C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll ()

[1] 2004-08-04 03:56:43 552989 C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:52 559904 C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:52 559904 C:\WINDOWS\SYSTEM32\DLLCACHE\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:52 559904 C:\WINDOWS\SYSTEM32\msrepl40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 552991 C:\i386\MSREPL40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll

[1] 2007-12-10 08:41:13 264992 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:43 258077 C:\WINDOWS\$NtServicePackUninstall$\mstext40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 253983 C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll ()

[1] 2004-08-04 03:56:43 258077 C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:55 264992 C:\WINDOWS\ServicePackFiles\i386\mstext40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:55 264992 C:\WINDOWS\SYSTEM32\DLLCACHE\mstext40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:55 264992 C:\WINDOWS\SYSTEM32\mstext40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 253983 C:\i386\MSTEXT40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll

[1] 2007-12-10 08:41:13 838432 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:44 831519 C:\WINDOWS\$NtServicePackUninstall$\mswdat10.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 831562 C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll ()

[1] 2004-08-04 03:56:44 831519 C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:57 838432 C:\WINDOWS\ServicePackFiles\i386\mswdat10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:57 838432 C:\WINDOWS\SYSTEM32\DLLCACHE\mswdat10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:57 838432 C:\WINDOWS\SYSTEM32\mswdat10.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 831562 C:\i386\MSWDAT10.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll

[1] 2007-12-10 08:41:14 621344 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:44 614429 C:\WINDOWS\$NtServicePackUninstall$\mswstr10.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 614474 C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll ()

[1] 2004-08-04 03:56:44 614429 C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 621344 C:\WINDOWS\ServicePackFiles\i386\mswstr10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 621344 C:\WINDOWS\SYSTEM32\DLLCACHE\mswstr10.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 621344 C:\WINDOWS\SYSTEM32\mswstr10.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 614474 C:\i386\MSWSTR10.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll

[1] 2007-12-10 08:41:14 355104 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:44 348189 C:\WINDOWS\$NtServicePackUninstall$\msxbde40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 344095 C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll ()

[1] 2004-08-04 03:56:44 348189 C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 355104 C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 355104 C:\WINDOWS\SYSTEM32\DLLCACHE\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-25 00:50:58 355104 C:\WINDOWS\SYSTEM32\msxbde40.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 344095 C:\i386\MSXBDE40.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll

[1] 2004-08-04 03:56:46 30749 C:\WINDOWS\$NtServicePackUninstall$\vbajet32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 30992 C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll ()

[1] 2008-04-13 20:12:08 30749 C:\WINDOWS\ServicePackFiles\i386\vbajet32.dll (Microsoft Corporation)

[1] 2008-04-13 20:12:08 30749 C:\WINDOWS\SYSTEM32\vbajet32.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 30992 C:\i386\VBAJET32.DLL (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx

[1] 2004-08-04 01:51:02 844314 C:\WINDOWS\$NtServicePackUninstall$\msdxm.ocx ()

[1] 2002-08-29 07:00:00 842268 C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx ()

[1] 2004-08-04 01:51:02 844314 C:\WINDOWS\ServicePackFiles\i386\msdxm.ocx ()

[1] 2008-04-13 20:10:08 844314 C:\WINDOWS\SYSTEM32\DLLCACHE\msdxm.ocx ()

[1] 2008-04-13 20:10:08 844314 C:\WINDOWS\SYSTEM32\msdxm.ocx ()

[1] 2002-08-29 07:00:00 842268 C:\i386\MSDXM.OCX ()



Cannot access: C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll

[1] 2002-08-29 07:00:00 1298432 C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll ()

[1] 2005-01-28 13:44:28 20480 C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}\wmpcore.dll (Microsoft Corporation)

[1] 2002-12-11 15:09:24 20480 C:\WINDOWS\RegisteredPackages\{60204BB3-7078-4F70-8F69-68297621941C}$BACKUP$\System\wmpcore.dll (Microsoft Corporation)

[1] 2004-08-04 03:56:46 20480 C:\WINDOWS\ServicePackFiles\i386\wmpcore.dll (Microsoft Corporation)

[1] 2005-01-28 13:44:28 20480 C:\WINDOWS\SYSTEM32\DLLCACHE\wmpcore.dll (Microsoft Corporation)

[1] 2005-01-28 13:44:28 20480 C:\WINDOWS\SYSTEM32\wmpcore.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 1298432 C:\i386\WMPCORE.DLL (Microsoft Corporation)



Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\ClientApplicationFrameWork\ClientApplicationFrameWork

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\EUSWUtil\EUSWUtil

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\NotifyAlert\NotifyAlert

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\Protocol\Protocol

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\SysInfo\SysInfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages1_v1.1.4322\TSDiscovery\TSDiscovery

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPDAB.tmp\ZAPDAB.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Cache\Adobe Reader 6.0.1\Adobe Reader 6.0.1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.10\CONFLICT.10

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.11\CONFLICT.11

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.12\CONFLICT.12

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.13\CONFLICT.13

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.14\CONFLICT.14

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.15\CONFLICT.15

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.16\CONFLICT.16

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.17\CONFLICT.17

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.18\CONFLICT.18

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.19\CONFLICT.19

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.20\CONFLICT.20

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.21\CONFLICT.21

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.22\CONFLICT.22

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.23\CONFLICT.23

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.8\CONFLICT.8

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Downloaded Program Files\CONFLICT.9\CONFLICT.9

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\History\History

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\CHSIME\APPLETS\APPLETS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\IMEJP\APPLETS\APPLETS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\IMEJP98\IMEJP98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\IMJP8_1\APPLETS\APPLETS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\IMKR6_1\APPLETS\APPLETS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\IMKR6_1\DICTS\DICTS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\IME\SHARED\RES\RES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Java\TrustLib\TrustLib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\MSAPPS\MSINFO\MSINFO

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msdownld.tmp\msdownld.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\MUI\MUI

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\ErrorRep\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\ErrorRep\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Profiles\All Users\Adobe\Webbuy\Webbuy

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\b0bbf9bad2a96231d750c48395570f92\b0bbf9bad2a96231d750c48395570f92

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\SYSTEM32\eventlog.dll

[1] 2004-08-04 03:56:42 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:53 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)

[1] 2008-04-13 20:11:53 62464 C:\WINDOWS\SYSTEM32\DLLCACHE\eventlog.dll ()

[1] 2008-04-13 20:11:53 62464 C:\WINDOWS\SYSTEM32\eventlog.dll ()

[2] 2008-04-13 20:11:53 56320 C:\WINDOWS\SYSTEM32\logevent.dll (Microsoft Corporation)

[1] 2002-08-29 07:00:00 49152 C:\i386\EVENTLOG.DLL (Microsoft Corporation)



Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2

Mount point destination : \Device\__max++>\^



Finished!

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:51 AM

Posted 25 September 2009 - 08:51 AM

Hello you have some infection there..
Please re-post the above log so we can clean it.

Next please go here HijackThis Logs and Virus/Trojan/Spyware/Malware Removal ,click New Topic,give it a relevant Title and post the Rootrepeal log and the above log.

Let me know how that went.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 mrpman44

mrpman44
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:51 AM

Posted 29 September 2009 - 05:44 AM

I have had no luck running anything on this computer. Over the weekend, I took the machine to a local computer shop where they ran some diagnostics on the hardware and I found out that the hard drive had some bad sectors and would eventually fail. I have installed a new hard drive and reinstalled the operating system. So I am starting fresh again... Thank you for all your help. I believe that this topic can be closed now. Do you do that or do I?

#11 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,220 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:51 AM

Posted 29 September 2009 - 09:04 AM

You're most welcome,as new malware is getting stronger and harder to remove, please take a moment to read quietman7's excellent prevention tips in post 17 here
Click>>Tips to protect yourself against malware and reduce the potential for re-infection:

Thanks for letting us know :thumbsup:
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users