Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Firewall Problem


  • Please log in to reply
58 replies to this topic

#1 Leafer

Leafer

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 07:51 AM

Good morning.

The past couple of days I have been unable to activate the Windows Firewall. Using IE8 and all Microsoft security patches were installed including the September 11th release. Here is what I am getting for error messages:

============
Automatically repair Windows Firewall problems, such as Windows fails to start Windows Firewall service (0x5), BFE service is missing, or Windows remote assistance is not working
================
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7001
Date: 9/20/2012
Time: 6:35:53 AM
User: N/A
Computer: JDHOGG
Description:
The Windows Firewall/Internet Connection Sharing (ICS) service depends on the Network Connections service which failed to start because of the following error:
Windows Firewall/Internet Connection Sharing (ICS) is not a valid Win32 application.
===============

I am also having other trouble as I can't seem to access Safe Mode using F8 when rebooting and Microsoft Update just hangs and never loads.

I have run MBAM & Avast to ensure the computer is malware free. I also ran a SFC & Check Disk but everything appeared to be okay.

Any help or suggestions would be greatly appreciated. If you need to see a HJT log, I can run one and post it in the appropriate forum as well.

Thanks in advance.

(Running XP SP3 - Home edition)

Edited by hamluis, 20 September 2012 - 08:36 AM.
Moved from XP to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


#2 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 20 September 2012 - 07:53 AM

Download

http://www.bleepingcomputer.com/download/rkill/

Run it and after scan finishes,post the contents of RKILL log located on the desktop here

Download

FSS

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.

#3 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 08:18 AM

Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 09/20/2012 08:55:36 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\WINDOWS\System32\MsPMSPSv.exe (PID: 1912) [WD-HEUR]

1 proccess terminated!

Possibly Patched Files.

* C:\WINDOWS\system32\services.exe
* C:\WINDOWS\system32\lsass.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\system32\spoolsv.exe
* C:\WINDOWS\Explorer.EXE
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\system32\ctfmon.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\system32\wscntfy.exe

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* Cryptographic Services (CryptSvc) is not Running.
Startup Type set to: Automatic

* DNS Client (Dnscache) is not Running.
Startup Type set to: Manual

* Network Connections (Netman) is not Running.
Startup Type set to: Manual

* Automatic Updates (wuauserv) is not Running.
Startup Type set to: Automatic

Searching for Missing Digital Signatures:

* C:\WINDOWS\System32\browser.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2705219\SP3QFE\browser.dll : 78,336 : 07/06/2012 00:58 AM : fc6d1d80588d371f0321e15a75b2f8f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\browser.dll : 77,312 : 08/04/2004 00:56 AM : e3cfccdda4edd1d0dc9168b2e18f27b8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2705219$\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]

* C:\WINDOWS\System32\clipsrv.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe : 33,280 : 08/04/2004 08:56 AM : c8dec22c4137d7a90f8bdf41ca4b82ae [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe : 33,280 : 04/13/2008 08:12 PM : 34cbe729f38138217f9c80212a2a0c82 [Pos Repl]

* C:\WINDOWS\System32\comctl32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll : 617,472 : 08/25/2006 08:45 AM : b0124cb21d28b1c9f678b566b6b57d92 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll : 611,328 : 08/04/2004 08:56 AM : a77dfb85faee49d66c74da6024ebc69b [Pos Repl]
+-> C:\WINDOWS\I386\ASMS\6000\MSFT\WINDOWS\COMMON\CONTROLS\COMCTL32.DLL : 921,088 : 08/29/2002 00:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921,088 : 08/29/2002 08:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll : 921,600 : 08/29/2002 08:00 AM : 76b90bd220f1b1cc9e183c6b1ae9fbb4 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1331_x-ww_7abf6d02\comctl32.dll : 921,600 : 02/20/2004 10:07 PM : 8a9c54692387060aad0ab02d75896a59 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1515_x-ww_7bb98b8a\comctl32.dll : 921,600 : 04/16/2004 05:56 PM : a7b3f3fb365b8b3b29c7c7322392c765 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll : 1,050,624 : 08/04/2004 05:57 AM : 5af68a5e44734a082442668e9c787743 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll : 1,054,208 : 08/25/2006 05:45 AM : c4e80875c1cf1222fc5efd0314ae5c01 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1,054,208 : 04/13/2008 08:12 PM : bd38d1ebe24a46bd3eda059560afba12 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1,054,208 : 08/23/2010 08:12 AM : 736b12b725aeb2b07f0241a9f680cb10 [Pos Repl]

* C:\WINDOWS\System32\comres.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comres.dll : 792,064 : 08/04/2004 08:56 AM : 6728270cb7dbb776ed086f5ac4c82310 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comres.dll : 792,064 : 04/13/2008 08:11 PM : 1280a158c722fa95a80fb7aebe78fa7d [Pos Repl]

* C:\WINDOWS\System32\cryptsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll : 60,416 : 08/04/2004 08:56 AM : 10654f9ddcea9c46cfb77554231be73b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [Pos Repl]

* C:\WINDOWS\System32\csrss.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\csrss.exe : 6,144 : 08/04/2004 08:56 AM : f12b178b1678d778cfd3ff1fc38c71fb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\csrss.exe : 6,144 : 04/13/2008 08:12 PM : 44f275c64738ea2056e3d9580c23b60f [Pos Repl]

* C:\WINDOWS\System32\ctfmon.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe : 15,360 : 08/04/2004 08:56 AM : 24232996a38c0b0cf151c2140ae29fc8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe : 15,360 : 04/13/2008 08:12 PM : 5f1d5f88303d4a4dbc8e5f97ba967cc3 [Pos Repl]

* C:\WINDOWS\System32\d3d8.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll : 1,179,648 : 08/04/2004 08:56 AM : 42803ec60803c1a0754671e9183458f1 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8.dll : 1,156,608 : 12/11/2002 11:14 PM : 0f90fa771b76f6793e5ac601daea550a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8.dll : 1,179,648 : 04/13/2008 08:11 PM : f099b129022170f2df9e1c0185c9bcfb [Pos Repl]

* C:\WINDOWS\System32\d3d8thk.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll : 8,192 : 08/04/2004 08:56 AM : 8d9210e9858d525646251dfa1fe37ebe [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\d3d8thk.dll : 8,192 : 12/11/2002 11:14 PM : d6e38d3cde17a05ba6304917c80d6d3c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll : 8,192 : 04/13/2008 08:11 PM : 31b067c412fa1a9bad3ca2a63d7da440 [Pos Repl]

* C:\WINDOWS\System32\d3d9.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll : 1,689,088 : 08/04/2004 08:56 AM : d67bdbbda86cc9aeebbaf3217c1717d8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d9.dll : 1,689,088 : 04/13/2008 08:11 PM : 0607cbc6fa20114cb491efe4b2f9efad [Pos Repl]

* C:\WINDOWS\System32\ddraw.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll : 266,240 : 08/04/2004 08:56 AM : 7ed462f353b3d915a418a689fa881f96 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll : 257,536 : 12/11/2002 11:14 PM : dd7437d215b2ace3c84226be5457634a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ddraw.dll : 279,552 : 04/13/2008 08:11 PM : a340cd71eb535a3dd751b5f28723e50c [Pos Repl]

* C:\WINDOWS\System32\dllhost.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe : 5,120 : 08/04/2004 08:56 AM : dd87db7387b9eb441c5674888a0d840c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dllhost.exe : 5,120 : 04/13/2008 08:12 PM : 0a9ba6af531afe7fa5e4fb973852d863 [Pos Repl]

* C:\WINDOWS\System32\drivers\acpiec.sys [NoSig]

* C:\WINDOWS\System32\drivers\acpi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\acpi.sys : 187,776 : 08/04/2004 08:07 AM : a10c7534f7223f4a73a948967d00e69b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\acpi.sys : 187,776 : 04/13/2008 02:36 PM : 8fd99680a539792a30e97944fdaecf17 [Pos Repl]

* C:\WINDOWS\System32\drivers\aec.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys : 142,464 : 02/14/2006 07:30 PM : 1ee7b434ba961ef845de136224c30fec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\aec.sys : 142,464 : 02/14/2006 07:22 PM : 1ee7b434ba961ef845de136224c30fec [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB900485$\aec.sys : 142,464 : 08/04/2004 07:39 AM : 841f385c6cfaf66b58fbd898722bb4f0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\aec.sys : 142,592 : 04/13/2008 02:39 AM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]

* C:\WINDOWS\System32\drivers\afd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys : 138,496 : 02/16/2011 07:25 AM : 8d499b1276012eb907e7a9e0f4d8fda4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138,496 : 10/16/2008 07:07 AM : 38d7b715504da4741df35e3594fe2099 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138,496 : 08/17/2011 07:41 AM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys : 138,496 : 06/20/2008 07:48 AM : d6ee6014241d034e63c49a50cb2b442a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys : 138,496 : 08/14/2008 07:34 AM : 4d43e74f2a1239d53929b82600f1971c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\afd.sys : 138,496 : 08/04/2004 07:14 AM : 5ac495f4cb807b2b98ad2ad591e6d92e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2503665$\afd.sys : 138,496 : 10/16/2008 07:43 AM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138,496 : 08/14/2008 07:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138,496 : 02/16/2011 07:22 AM : 355556d9e580915118cd7ef736653a89 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956803$\afd.sys : 138,496 : 06/20/2008 03:40 AM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]

* C:\WINDOWS\System32\drivers\agp440.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\agp440.sys : 42,368 : 08/04/2004 03:07 AM : 2c428fa0c3e3a01ed93c9b2a27d8d4bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\agp440.sys : 42,368 : 04/13/2008 02:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\AGP440.SYS : 25,472 : 08/17/2001 00:58 AM : 65880045c51aa36184841cee915a61df [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk6.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys : 36,992 : 08/04/2004 03:59 AM : dad16a9d5c873e7219e6b43802ed316a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk6.sys : 37,376 : 04/13/2008 02:31 PM : d7701d7e72243286cc88c9973d891057 [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk7.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys : 37,376 : 08/04/2004 03:59 AM : 680ad1c1bb16239e28d8f33a54a7a3c7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk7.sys : 37,760 : 04/13/2008 02:31 PM : 8fce268cdbdd83b23419d1f35f42c7b1 [Pos Repl]

* C:\WINDOWS\System32\drivers\arp1394.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys : 60,800 : 08/04/2004 03:58 AM : f0d692b0bffb46e30eb3cea168bbc49f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\arp1394.sys : 60,800 : 04/13/2008 02:51 PM : b5b8a80875c1dededa8b02765642c32f [Pos Repl]

* C:\WINDOWS\System32\drivers\asyncmac.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys : 14,336 : 08/04/2004 03:05 AM : 02000abf34af4c218c35d257024807d6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys : 14,336 : 04/13/2008 02:57 PM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]

* C:\WINDOWS\System32\drivers\atapi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys : 95,360 : 08/04/2004 03:59 AM : cdfe4411a69c224bd1d11b2da92dac51 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\atapi.sys : 96,512 : 04/13/2008 02:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\atapi.sys : 86,912 : 08/29/2002 00:00 AM : 95b858761a00e1d4f81f79a0da019aca [Pos Repl]

* C:\WINDOWS\System32\drivers\audstub.sys [NoSig]

* C:\WINDOWS\System32\drivers\beep.sys [NoSig]

* C:\WINDOWS\System32\drivers\bridge.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\bridge.sys : 71,552 : 08/04/2004 03:59 AM : e4e6a0922e3d983728c9ad4e8d466954 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bridge.sys : 71,552 : 04/13/2008 02:53 PM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl]

* C:\WINDOWS\System32\drivers\bthport.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys : 272,128 : 04/14/2008 07:36 AM : f6cbbcc40f94eb8a88b1e826911ac795 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 272,128 : 06/13/2008 07:27 AM : 51d05d5a8a7d93ab0b1a8d6a38db3ca4 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\bthport.sys : 274,304 : 08/04/2004 03:10 AM : 30b76ec553b202890e90a93a4e1a27b5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376$\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys : 272,128 : 04/14/2008 02:30 AM : 8381fb906f05495f3d2045fbc9576cd5 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 272,128 : 06/13/2008 02:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]

* C:\WINDOWS\System32\drivers\cbidf2k.sys [NoSig]

* C:\WINDOWS\System32\drivers\cdaudio.sys [NoSig]

* C:\WINDOWS\System32\drivers\cdfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys : 63,744 : 08/04/2004 02:14 AM : cd7d5152df32b47f4e36f710b35aae02 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdfs.sys : 63,744 : 04/13/2008 03:14 PM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl]

* C:\WINDOWS\System32\drivers\cdrom.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys : 49,536 : 08/04/2004 02:59 AM : af9c19b3100fe010496b1a27181fbf72 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdrom.sys : 62,976 : 04/13/2008 02:40 PM : 1f4260cc5b42272d71f79e570a27a4fe [Pos Repl]

* C:\WINDOWS\System32\drivers\classpnp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys : 49,664 : 08/04/2004 02:14 AM : d86173b401470f06d9810f7962969ddf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\classpnp.sys : 49,536 : 04/13/2008 03:16 PM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl]

* C:\WINDOWS\System32\drivers\cpqdap01.sys [NoSig]

* C:\WINDOWS\System32\drivers\crusoe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys : 36,480 : 08/04/2004 02:59 AM : 6af1684ccaac3f7ef4ee9ba65eb0677a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\crusoe.sys : 36,736 : 04/13/2008 02:31 PM : f50d9bdbb25cce075e514dc07472a22f [Pos Repl]

* C:\WINDOWS\System32\drivers\diskdump.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys : 14,208 : 08/04/2004 02:59 AM : d16c81677a9be399c63cd2ea486472a5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\diskdump.sys : 14,208 : 04/13/2008 02:40 PM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\disk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\disk.sys : 36,352 : 08/04/2004 02:59 AM : 00ca44e4534865f8a3b64f7c0984bff0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\disk.sys : 36,352 : 04/13/2008 02:40 PM : 044452051f3e02e7963599fc8f4f3e25 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmboot.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys : 799,744 : 08/04/2004 02:07 AM : c0fbb516e06e243f0cf31f597e7ebf7d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmboot.sys : 799,744 : 04/13/2008 02:44 PM : d992fe1274bde0f84ad826acae022a41 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmio.sys : 153,344 : 08/04/2004 02:07 AM : f5e7b358a732d09f4bcf2824b88b9e28 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmio.sys : 153,344 : 04/13/2008 02:44 PM : 7c824cf7bbde77d95c08005717a95f6f [Pos Repl]

* C:\WINDOWS\System32\drivers\dmload.sys [NoSig]

* C:\WINDOWS\System32\drivers\DMusic.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys : 52,864 : 08/04/2004 02:07 AM : a6f881284ac1150e37d9ae47ff601267 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmusic.sys : 52,864 : 04/13/2008 02:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\dmusic.sys : 52,864 : 04/13/2008 02:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmkaud.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys : 2,944 : 08/04/2004 02:07 AM : 1ed4dbbae9f5d558dbba4cc450e3eb2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys : 2,944 : 04/13/2008 02:45 PM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmk.sys : 60,288 : 08/04/2004 02:07 AM : ff86422268de771d571e123eb7092c6a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmk.sys : 60,160 : 04/13/2008 02:45 PM : 6cb08593487f5701d2d2254e693eafce [Pos Repl]

* C:\WINDOWS\System32\drivers\dxapi.sys [NoSig]

* C:\WINDOWS\System32\drivers\dxg.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dxg.sys : 71,040 : 08/04/2004 02:00 AM : d3dac8432110aad0b02a58b4459ab835 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dxg.sys : 71,168 : 04/13/2008 02:38 PM : ac7280566a7bb85cb3291f04ddc1198e [Pos Repl]

* C:\WINDOWS\System32\drivers\dxgthk.sys [NoSig]

* C:\WINDOWS\System32\drivers\fastfat.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys : 143,360 : 08/04/2004 02:14 AM : 3117f595e9615e04f05a54fc15a03b20 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fastfat.sys : 143,744 : 04/13/2008 03:14 PM : 38d332a6d56af32635675f132548343e [Pos Repl]

* C:\WINDOWS\System32\drivers\fdc.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fdc.sys : 27,392 : 08/04/2004 02:59 AM : ced2e8396a8838e59d8fd529c680e02c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fdc.sys : 27,392 : 04/13/2008 02:40 PM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [Pos Repl]

* C:\WINDOWS\System32\drivers\fips.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fips.sys : 34,944 : 08/29/2002 02:00 AM : e153ab8a11de5452bcf5ac7652dbf3ed [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fips.sys : 44,544 : 04/13/2008 02:33 PM : d45926117eb9fa946a6af572fbe1caa3 [Pos Repl]

* C:\WINDOWS\System32\drivers\flpydisk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys : 20,480 : 08/04/2004 02:59 AM : 0dd1de43115b93f4d85e889d7a86f548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys : 20,480 : 04/13/2008 02:40 PM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fltMgr.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys : 128,768 : 08/21/2006 07:43 AM : 5a85cd3d07273e3f6fe72ee9c6431632 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys : 128,896 : 08/21/2006 02:14 AM : 3d234fb6d6ee875eb009864a299bea29 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922582$\fltmgr.sys : 124,800 : 08/04/2004 02:01 AM : 157754f0df355a9e0a6f54721914f9c6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys : 129,792 : 04/13/2008 02:32 PM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fs_rec.sys [NoSig]

* C:\WINDOWS\System32\drivers\fsvga.sys [NoSig]

* C:\WINDOWS\System32\drivers\ftdisk.sys [NoSig]

* C:\WINDOWS\System32\drivers\hidclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys : 36,224 : 08/04/2004 02:08 AM : 378055ab8dda86228683c697c4e11685 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidclass.sys : 36,864 : 04/13/2008 02:45 PM : 1af592532532a402ed7c060f6954004f [Pos Repl]

* C:\WINDOWS\System32\drivers\hidparse.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys : 24,960 : 08/04/2004 02:08 AM : 5fff41cd5108e9051d255c37825af697 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidparse.sys : 24,960 : 04/13/2008 02:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]

* C:\WINDOWS\System32\drivers\hidusb.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidusb.sys : 9,600 : 08/17/2001 02:02 PM : 1de6783b918f540149aa69943bdfeba8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidusb.sys : 10,368 : 04/13/2008 02:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\http.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB887742\SP2QFE\http.sys : 262,272 : 10/08/2004 07:18 PM : 3247a2db333d1521680e6864a8295a47 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys : 262,656 : 03/16/2006 08:08 PM : 909d110c9634b0f1487eaaea837317d9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265,728 : 10/20/2009 08:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\http.sys : 262,784 : 03/16/2006 07:33 PM : cb77bb47e67e84deb17ba29632501730 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB887742$\http.sys : 263,040 : 08/04/2004 07:00 AM : c19b522a9ae0bbc3293397f3055e80a1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB916595$\http.sys : 262,400 : 10/08/2004 07:48 PM : bfb7b73c942e816c4fb4a5a7bae87136 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\http.sys : 265,728 : 10/20/2009 02:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]

* C:\WINDOWS\System32\drivers\i8042prt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys : 52,736 : 08/04/2004 02:14 AM : 5502b58eef7486ee6f93f3f164dcb808 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys : 52,480 : 04/13/2008 03:18 PM : 4a0b06aa8943c1e332520f7440c0aa30 [Pos Repl]

* C:\WINDOWS\System32\drivers\imapi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imapi.sys : 41,856 : 08/04/2004 02:00 AM : f8aa320c6a0409c0380e5d8a99d76ec6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imapi.sys : 42,112 : 04/13/2008 02:40 PM : 083a052659f5310dd8b6a6cb05edcf8e [Pos Repl]

* C:\WINDOWS\System32\drivers\intelide.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelide.sys : 5,504 : 08/04/2004 02:59 AM : 2d722b2b54ab55b2fa475eb58d7b2aad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelide.sys : 5,504 : 04/13/2008 02:40 PM : b5466a9250342a7aa0cd1fba13420678 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\intelide.sys : 4,736 : 08/29/2002 00:00 AM : 3049227da71a4a68515dcdce3030eacd [Pos Repl]

* C:\WINDOWS\System32\drivers\intelppm.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys : 36,096 : 08/04/2004 02:59 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelppm.sys : 36,352 : 04/13/2008 02:31 PM : 8c953733d8f36eb2133f5bb58808b66b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\intelppm.sys : 36,096 : 08/04/2004 00:59 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]

* C:\WINDOWS\System32\drivers\ip6fw.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys : 29,056 : 08/04/2004 02:00 AM : 4448006b6bc60e6c027932cfc38d6855 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys : 36,608 : 04/13/2008 02:53 PM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipfltdrv.sys [NoSig]

* C:\WINDOWS\System32\drivers\ipinip.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys : 20,992 : 08/04/2004 02:04 AM : e1ec7f5da720b640cd8fb8424f1b14bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipinip.sys : 20,864 : 04/13/2008 02:57 PM : b87ab476dcf76e72010632b5550955f5 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipnat.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys : 134,912 : 09/29/2004 06:31 PM : 5191673215c91ff13ceaa83ef8e9653f [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys : 134,912 : 09/29/2004 06:28 PM : e2168cbc7098ffe963c6f23f472a3593 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB886185$\ipnat.sys : 134,912 : 08/04/2004 06:04 AM : b5a8e215ac29d24d60b4d1250ef05ace [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipnat.sys : 152,832 : 04/13/2008 02:57 PM : cc748ea12c6effde940ee98098bf96bb [Pos Repl]

* C:\WINDOWS\System32\drivers\ipsec.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys : 74,752 : 08/04/2004 06:14 AM : 64537aa5c003a6afeee1df819062d0d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsec.sys : 75,264 : 04/13/2008 03:19 PM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]

* C:\WINDOWS\System32\drivers\irenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\irenum.sys : 11,264 : 08/04/2004 06:00 AM : 50708daa1b1cbb7d6ac1cf8f56a24410 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\irenum.sys : 11,264 : 04/13/2008 02:54 PM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl]

* C:\WINDOWS\System32\drivers\isapnp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys : 35,840 : 08/29/2002 06:00 AM : e504f706ccb699c2596e9a3da1596e87 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\isapnp.sys : 37,248 : 04/13/2008 02:36 PM : 05a299ec56e52649b1cf2fc52d20f2d7 [Pos Repl]

* C:\WINDOWS\System32\drivers\kbdclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys : 24,576 : 08/04/2004 06:58 AM : ebdee8a2ee5393890a1acee971c4c246 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys : 24,576 : 04/13/2008 02:39 PM : 463c1ec80cd17420a542b7f36a36f128 [Pos Repl]

* C:\WINDOWS\System32\drivers\kmixer.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys : 172,416 : 06/14/2006 06:50 AM : 8531438246ce9474e41ee1599904c0c7 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys : 172,416 : 06/14/2006 06:47 AM : ba5deda4d934e6288c2f66caf58d2562 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\kmixer.sys : 171,776 : 08/04/2004 06:07 AM : d93cad07c5683db066b0b2d2d3790ead [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kmixer.sys : 172,416 : 04/13/2008 02:45 PM : 692bcf44383d056aed41b045a323d378 [Pos Repl]

* C:\WINDOWS\System32\drivers\ksecdd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92,928 : 06/24/2009 06:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys : 92,032 : 08/04/2004 06:59 AM : eb7ffe87fd367ea8fca0506f74a87fbb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92,288 : 04/13/2008 02:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
+-> C:\WINDOWS\I386\KSECDD.SYS : 79,744 : 08/29/2002 02:00 AM : abc70e8b89cce44731a346deb764bf95 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys : 92,288 : 04/13/2008 02:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]

* C:\WINDOWS\System32\drivers\ks.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ks.sys : 140,928 : 08/04/2004 02:15 AM : b9540e258f952650de8dec68719a5c97 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ks.sys : 130,304 : 12/11/2002 11:14 PM : dc197a88746a55ae60d1c81d45cd1b4a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ks.sys : 141,056 : 04/13/2008 03:16 PM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mcd.sys [NoSig]

* C:\WINDOWS\System32\drivers\mf.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mf.sys : 63,744 : 08/04/2004 02:07 AM : 729d83e56c29c510258a6e9e79ffddc3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mf.sys : 63,744 : 04/13/2008 02:36 PM : a7da20ab18a1bdae28b0f349e57da0d1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mnmdd.sys [NoSig]

* C:\WINDOWS\System32\drivers\modem.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\modem.sys : 30,080 : 08/04/2004 02:08 AM : 6fc6f9d7acc36dca9b914565a3aeda05 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\modem.sys : 30,080 : 04/13/2008 03:00 PM : dfcbad3cec1c5f964962ae10e0bcc8e1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mouclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys : 23,040 : 08/04/2004 02:58 AM : 34e1f0031153e491910e12551400192c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mouclass.sys : 23,040 : 04/13/2008 02:39 PM : 35c9e97194c8cfb8430125f8dbc34d04 [Pos Repl]

* C:\WINDOWS\System32\drivers\mouhid.sys [NoSig]

* C:\WINDOWS\System32\drivers\mountmgr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys : 42,240 : 08/04/2004 02:58 AM : 65653f3b4477f3c63e68a9659f85ee2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys : 42,368 : 04/13/2008 02:39 PM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxdav.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys : 179,712 : 12/18/2007 06:38 AM : 9921d9df98f266560ec28b3bdb580180 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxdav.sys : 179,584 : 12/18/2007 02:51 AM : 29414447eb5bde2f8397dc965dbb3156 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys : 181,248 : 08/04/2004 02:00 AM : 46edcc8f2db2f322c24f48785cb46366 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys : 180,608 : 04/13/2008 02:32 PM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxsmb.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys : 457,472 : 02/17/2011 06:19 AM : fb7dfd15d760ad339837a470f0e780d3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys : 457,856 : 04/29/2011 06:47 AM : 8dd801e28eb76fda2a38907882a0036f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457,856 : 07/15/2011 06:29 AM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys : 451,584 : 01/18/2005 10:51 PM : 7b195060ff456fa65954c72c5c1640ff [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys : 448,128 : 10/27/2004 09:15 PM : a1be3cb080dcc0a8270d21e3ca3b7005 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys : 454,400 : 05/05/2006 09:16 AM : 7412ce77c6fd823f8889b4df420c680b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys : 455,936 : 10/24/2008 09:41 AM : 7170ab42b51954def2781a4d1cce65f4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys : 456,832 : 12/04/2009 09:25 AM : 602549d1e8a622e5746991f6c56b21ca [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys : 457,216 : 02/24/2010 09:57 AM : d09b9f0b9960dd41e73127b7814c115f [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys : 453,120 : 05/05/2006 02:41 AM : 025af03ce51645c62f3b6907a7e2be5e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2511455$\mrxsmb.sys : 455,680 : 02/24/2010 02:11 AM : f3aefb11abc521122b67095044169e98 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276$\mrxsmb.sys : 455,936 : 02/17/2011 02:18 AM : 0ea4d8ed179b75f8afa7998ba22285ca [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456,320 : 04/29/2011 02:19 AM : 0dc719e9b15e902346e87e9dcd5751fa [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB885250$\mrxsmb.sys : 448,128 : 10/27/2004 09:14 PM : c9d17daa82b917cf2fd6e4f595974934 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB885835$\mrxsmb.sys : 451,456 : 08/04/2004 09:15 AM : 1fd607fc67f7f7c633c3da65bfc53d18 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys : 451,584 : 01/18/2005 11:26 PM : 5ddc9a1b2eb5a4bf010ce8c019a18c1f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978251$\mrxsmb.sys : 455,296 : 10/24/2008 03:21 AM : 60ae98742484e7ab80c3c1450e708148 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980232$\mrxsmb.sys : 455,424 : 12/04/2009 01:22 PM : 421f7b922cec5a5f340e7574a98f7b7c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ810577$\mrxsmb.sys : 407,552 : 08/29/2002 01:00 AM : 7a3a2be44e12e2abde1af891e83ac130 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456,320 : 07/15/2011 02:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]

* C:\WINDOWS\System32\drivers\msfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msfs.sys : 19,072 : 08/04/2004 01:00 AM : 561b3a4333ca2dbdba28b5b956822519 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msfs.sys : 19,072 : 04/13/2008 02:32 PM : c941ea2454ba8350021d774daf0f1027 [Pos Repl]

* C:\WINDOWS\System32\drivers\msgpc.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgpc.sys : 35,072 : 08/04/2004 01:04 AM : c0f1d4a21de5a415df8170616703debf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgpc.sys : 35,072 : 04/13/2008 02:56 PM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSKSSRV.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys : 7,552 : 08/04/2004 01:58 AM : ae431a8dd3c1d0d0610cdbac16057ad0 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mskssrv.sys : 7,424 : 12/11/2002 11:14 PM : 85736f804191cb420a31aca2a7f0674f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys : 7,552 : 04/13/2008 02:39 PM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPCLOCK.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspclock.sys : 5,376 : 08/04/2004 01:58 AM : 13e75fef9dfeb08eeded9d0246e1f448 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspclock.sys : 5,248 : 12/11/2002 11:14 PM : e943adb93d83c5cbc0ca3f53f53b48cc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspclock.sys : 5,376 : 04/13/2008 02:39 PM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPQM.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspqm.sys : 4,992 : 08/04/2004 01:58 AM : 1988a33ff19242576c3d0ef9ce785da7 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\mspqm.sys : 4,608 : 08/23/2001 02:00 AM : f6a726b8832db1f88326b8be98b11981 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspqm.sys : 4,992 : 04/13/2008 02:39 PM : bad59648ba099da4a17680b39730cb3d [Pos Repl]

* C:\WINDOWS\System32\drivers\mssmbios.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mssmbios.sys : 15,488 : 08/04/2004 01:07 AM : 469541f8bfd2b32659d5d463a6714bce [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys : 15,488 : 04/13/2008 02:36 PM : af5f4f3f14a8ea2c26de30f7a1e17136 [Pos Repl]

* C:\WINDOWS\System32\drivers\mup.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105,472 : 04/21/2011 09:52 AM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mup.sys : 107,904 : 08/04/2004 01:15 AM : 82035e0f41c2dd05ae41d27fe6cf7de1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndis.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndis.sys : 182,912 : 08/04/2004 03:14 AM : 558635d3af1c7546d26067d5d9b6959e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB826942$\ndis.sys : 162,432 : 03/06/2003 03:30 AM : 09b38768036508b51564201afb000950 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ815485$\ndis.sys : 167,552 : 08/29/2002 03:00 AM : 3b350e5a2a5e951453f3993275a4523a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndis.sys : 182,656 : 04/13/2008 03:20 PM : 1df7f42665c94b825322fae71721130d [Pos Repl]

* C:\WINDOWS\System32\drivers\ndistapi.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10,496 : 07/08/2011 09:51 AM : 091735a5f20acb1dc147383a905ae002 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndistapi.sys : 9,600 : 08/29/2002 03:00 AM : 08d43bbdacdf23f34d79e44ed35c1b4c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]

* C:\WINDOWS\System32\drivers\ndisuio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys : 12,928 : 08/04/2004 02:03 AM : 34d6cd56409da9a7ed573e1c90a308bf [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB826942$\ndisuio.sys : 12,416 : 03/06/2003 02:30 AM : ac136fdc051a57e5f8f93694fce2b240 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ815485$\ndisuio.sys : 12,288 : 08/29/2002 02:00 AM : e6b6d5e4c9c199b7bb56d7862ea68fbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys : 14,592 : 04/13/2008 02:55 PM : f927a4434c5028758a842943ef1a3849 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndiswan.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys : 91,776 : 08/04/2004 02:14 AM : 0b90e255a9490166ab368cd55a529893 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys : 91,520 : 04/13/2008 03:20 PM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]

* C:\WINDOWS\System32\drivers\ndproxy.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40,960 : 11/03/2010 09:55 AM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndproxy.sys : 38,016 : 08/29/2002 02:00 AM : 59fc3fb44d2669bc144fd87826bb571f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]

* C:\WINDOWS\System32\drivers\netbios.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbios.sys : 34,560 : 08/04/2004 02:03 AM : 3a2aca8fc1d7786902ca434998d7ceb4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbios.sys : 34,688 : 04/13/2008 02:56 PM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl]

* C:\WINDOWS\System32\drivers\netbt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbt.sys : 162,816 : 08/04/2004 02:14 AM : 0c80e410cd2f47134407ee7dd19cc86b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB824105$\netbt.sys : 157,056 : 08/29/2002 02:00 AM : d96f3bc5a6e7452b0e3275b560dc8528 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbt.sys : 162,816 : 04/13/2008 03:21 PM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl]

* C:\WINDOWS\System32\drivers\nic1394.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys : 61,824 : 08/04/2004 02:58 AM : 5c5c53db4fef16cf87b9911c7e8c6fbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nic1394.sys : 61,824 : 04/13/2008 02:51 PM : e9e47cfb2d461fa0fc75b7a74c6383ea [Pos Repl]

* C:\WINDOWS\System32\drivers\nikedrv.sys [NoSig]

* C:\WINDOWS\System32\drivers\nmnt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys : 40,320 : 08/04/2004 02:59 AM : 60cf8c7192b3614f240838ddbaa4a245 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nmnt.sys : 40,320 : 04/13/2008 02:53 PM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl]

* C:\WINDOWS\System32\drivers\npfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\npfs.sys : 30,848 : 08/04/2004 02:00 AM : 4f601bcb8f64ea3ac0994f98fed03f8e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\npfs.sys : 30,848 : 04/13/2008 02:32 PM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl]

* C:\WINDOWS\System32\drivers\ntfs.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys : 574,976 : 02/09/2007 09:23 AM : 05ab81909514bfd69cbb1f2c147cf6b9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys : 574,464 : 02/09/2007 02:10 AM : 19a811ef5f1ed5c926a028ce107ff1af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys : 574,592 : 08/04/2004 02:15 AM : b78be402c3f63dd55521f73876951cdd [Pos Repl]
+-> C:\WINDOWS\I386\NTFS.SYS : 561,920 : 08/29/2002 02:00 AM : e3ae9c79498210a5f39fe5a9ad62bc55 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]

* C:\WINDOWS\System32\drivers\null.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkflt.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkfwd.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkipx.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys : 88,448 : 08/04/2004 02:03 AM : 79ea3fcda7067977625b3363a2657c80 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys : 88,320 : 04/13/2008 02:56 PM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnknb.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkspx.sys [NoSig]

* C:\WINDOWS\System32\drivers\oprghdlr.sys [NoSig]

* C:\WINDOWS\System32\drivers\p3.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\p3.sys : 42,496 : 08/04/2004 02:59 AM : 3e16eff2a6fed2d8d7f5a66dfe65d183 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\p3.sys : 42,752 : 04/13/2008 02:31 PM : c90018bafdc7098619a4a95b046b30f3 [Pos Repl]

* C:\WINDOWS\System32\drivers\parport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\parport.sys : 80,128 : 08/04/2004 02:59 AM : 29744eb4ce659dfe3b4122deb45bc478 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\parport.sys : 80,128 : 04/13/2008 02:40 PM : 5575faf8f97ce5e713d108c2a58d7c7c [Pos Repl]

* C:\WINDOWS\System32\drivers\partmgr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\partmgr.sys : 18,688 : 08/29/2002 02:00 AM : 3334430c29dc338092f79c38ef7b4cd0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\partmgr.sys : 19,712 : 04/13/2008 02:40 PM : beb3ba25197665d82ec7065b724171c6 [Pos Repl]

* C:\WINDOWS\System32\drivers\parvdm.sys [NoSig]

* C:\WINDOWS\System32\drivers\pciidex.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys : 25,088 : 08/04/2004 02:59 AM : 520b91ab011456b940d9b05fc91108ff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pciidex.sys : 24,960 : 04/13/2008 02:40 PM : 52e60f29221d0d1ac16737e8dbf7c3e9 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\pciidex.sys : 23,680 : 08/29/2002 00:00 AM : 146d37a214304bd3432cfd3360ff067f [Pos Repl]

* C:\WINDOWS\System32\drivers\pci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pci.sys : 68,224 : 08/04/2004 02:07 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pci.sys : 68,224 : 04/13/2008 02:36 PM : a219903ccf74233761d92bef471a07b1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\pci.sys : 62,976 : 08/29/2002 00:00 AM : 9390447f3b1be5064a3ebe98c555a1e5 [Pos Repl]

* C:\WINDOWS\System32\drivers\pcmcia.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys : 119,936 : 08/04/2004 02:07 AM : 82a087207decec8456fbe8537947d579 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys : 120,192 : 04/13/2008 02:36 PM : 9e89ef60e9ee05e3f2eef2da7397f1c1 [Pos Repl]

* C:\WINDOWS\System32\drivers\portcls.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\portcls.sys : 145,792 : 08/04/2004 02:15 AM : 5b0f00e43a7094c0b7e433cb42c79164 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\portcls.sys : 146,048 : 04/13/2008 03:19 PM : e82a496c3961efc6828b508c310ce98f [Pos Repl]

* C:\WINDOWS\System32\drivers\processr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\processr.sys : 35,328 : 08/04/2004 02:59 AM : 0d97d88720a4087ec93af7dbb303b30a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\processr.sys : 35,840 : 04/13/2008 02:31 PM : a32bebaf723557681bfc6bd93e98bd26 [Pos Repl]

* C:\WINDOWS\System32\drivers\psched.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psched.sys : 69,120 : 08/04/2004 02:04 AM : 48671f327553dcf1d27f6197f622a668 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psched.sys : 69,120 : 04/13/2008 02:56 PM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl]

* C:\WINDOWS\System32\drivers\ptilink.sys [NoSig]

* C:\WINDOWS\System32\drivers\rasacd.sys [NoSig]

* C:\WINDOWS\System32\drivers\rasl2tp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys : 51,328 : 08/04/2004 02:14 AM : 98faeb4a4dcf812ba1c6fca4aa3e115c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys : 51,328 : 04/13/2008 03:19 PM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspppoe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspppoe.sys : 41,472 : 08/04/2004 02:05 AM : 7306eeed8895454cbed4669be9f79faa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys : 41,472 : 04/13/2008 02:57 PM : 5bc962f2654137c9909c3d4603587dee [Pos Repl]

* C:\WINDOWS\System32\drivers\raspptp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys : 48,384 : 08/04/2004 02:14 AM : 1c5cc65aac0783c344f16353e60b72ac [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ329834$\raspptp.sys : 46,336 : 08/29/2002 02:00 AM : fed674d73eb56c35444f701e847bf85b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspptp.sys : 48,384 : 04/13/2008 03:19 PM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspti.sys [NoSig]

* C:\WINDOWS\System32\drivers\rawwan.sys [NoSig]

* C:\WINDOWS\System32\drivers\rdbss.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys : 174,592 : 10/27/2004 09:14 PM : d0fef8156d2d2fec557c100956d76887 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys : 174,592 : 05/05/2006 09:22 AM : ed375ce745c42a14f10753f7022ecd6a [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys : 174,592 : 05/05/2006 02:47 AM : 03b965b1ca47f6ef60eb5e51cb50e0af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB885835$\rdbss.sys : 176,512 : 08/04/2004 02:20 AM : 29d66245adba878fff574cd66abd2884 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB914389$\rdbss.sys : 174,592 : 10/27/2004 09:13 PM : 809ca45caa9072b3176ad44579d7f688 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdbss.sys : 175,744 : 04/13/2008 03:28 PM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpcdd.sys [NoSig]

* C:\WINDOWS\System32\drivers\rdpdr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys : 196,864 : 08/04/2004 09:01 AM : a2cae2c60bc37e0751ef9dda7ceaf4ad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys : 196,224 : 04/13/2008 02:32 PM : 15cabd0f7c00c47c70124907916af3f1 [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpwd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys : 139,656 : 06/24/2011 09:09 AM : 3348e61a78ba4f79c795aad6565d3b6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 09:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2685939\SP3QFE\rdpwd.sys : 139,656 : 05/02/2012 09:45 AM : 997c59b9955f911ec460241dd9e01b04 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2723135\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 09:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys : 139,528 : 06/10/2005 09:06 AM : 047bea21274c8a4a233674a76c958c2c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys : 139,528 : 06/10/2005 09:09 AM : b54cd38a9ebfbf2b3561426e3fe26f62 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2570222$\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139,656 : 06/24/2011 08:10 AM : fc105dd312ed64eb66bff111e8ec6eac [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2685939$\rdpwd.sys : 139,784 : 01/09/2012 08:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2723135$\rdpwd.sys : 139,656 : 05/02/2012 08:46 AM : 6589db6e5969f8eee594cf71171c5028 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB899591$\rdpwd.sys : 139,400 : 08/04/2004 08:01 AM : d4f5643d7714ef499ae9527fdcd50894 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]

* C:\WINDOWS\System32\drivers\redbook.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\redbook.sys : 57,472 : 08/04/2004 08:59 AM : b31b4588e4086d8d84adbf9845c2402b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\redbook.sys : 57,600 : 04/13/2008 02:40 PM : f828dd7e1419b6653894a8f97a0094c5 [Pos Repl]

* C:\WINDOWS\System32\drivers\rmcast.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys : 202,496 : 07/13/2006 09:43 AM : bcea2b2bf1b6dddd11e65b7478f2d19a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203,136 : 05/08/2008 09:58 AM : c711645c76b8ed87c021bf6165e52795 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rmcast.sys : 202,240 : 07/13/2006 08:48 AM : 9d54c7c15847b933e03d6e7c9307bae5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB919007$\rmcast.sys : 200,064 : 08/29/2002 08:00 AM : 35e81b908ae4e97fc7bdf4607c516ff4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]

* C:\WINDOWS\System32\drivers\rndismp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rndismp.sys : 30,080 : 08/04/2004 02:04 AM : 7ce8b277f3207ea82d7d22ad348befc6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rndismp.sys : 30,592 : 04/13/2008 02:56 PM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl]

* C:\WINDOWS\System32\drivers\rootmdm.sys [NoSig]

* C:\WINDOWS\System32\drivers\scsiport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys : 96,256 : 08/04/2004 02:59 AM : d7fd0ff761e28ac0ea35ad71e0cd67e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scsiport.sys : 96,384 : 04/13/2008 02:40 PM : 76c465f570e90c28942d52ccb2580a10 [Pos Repl]

* C:\WINDOWS\System32\drivers\sdbus.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sdbus.sys : 67,584 : 08/04/2004 02:07 AM : 02fc71b020ec8700ee8a46c58bc6f276 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sdbus.sys : 79,232 : 04/13/2008 02:36 PM : 8d04819a3ce51b9eb47e5689b44d43c4 [Pos Repl]

* C:\WINDOWS\System32\drivers\serenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serenum.sys : 15,488 : 08/04/2004 02:59 AM : a2d868aeeff612e70e213c451a70cafb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serenum.sys : 15,744 : 04/13/2008 02:40 PM : 0f29512ccd6bead730039fb4bd2c85ce [Pos Repl]

* C:\WINDOWS\System32\drivers\serial.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serial.sys : 64,896 : 08/04/2004 02:15 AM : cd9404d115a00d249f70a371b46d5a26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serial.sys : 64,512 : 04/13/2008 03:15 PM : cca207a8896d4c6a0c9ce29a4ae411a7 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffdisk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffdisk.sys : 11,136 : 08/04/2004 02:59 AM : 1d9f1bec651815741f088a8fb88e17ee [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys : 11,904 : 04/13/2008 02:40 PM : 0fa803c64df0914b41f807ea276bf2a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffp_sd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffp_sd.sys : 10,240 : 08/04/2004 02:59 AM : 586499fd312ffd7f78553f408e71682e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys : 11,008 : 04/13/2008 02:40 PM : c17c331e435ed8737525c86a7557b3ac [Pos Repl]

* C:\WINDOWS\System32\drivers\sfloppy.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys : 11,392 : 08/04/2004 02:59 AM : 0d13b6df6e9e101013a7afb0ce629fe0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys : 11,392 : 04/13/2008 02:40 PM : 8e6b8c671615d126fdc553d1e2de5562 [Pos Repl]

* C:\WINDOWS\System32\drivers\smclib.sys [NoSig]

* C:\WINDOWS\System32\drivers\sonydcam.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys : 25,472 : 08/04/2004 02:09 AM : addc9e4757a68ab60562ad3cb9c288d6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys : 25,344 : 04/13/2008 02:46 PM : 489703624dac94ed943c2abda022a1cd [Pos Repl]

* C:\WINDOWS\System32\drivers\splitter.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys : 6,272 : 06/14/2006 09:50 AM : 9bb1dd670cb7505a90fc4e61d4aa8227 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\splitter.sys : 6,400 : 06/14/2006 02:47 AM : 0ce218578fff5f4f7e4201539c45c78f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\splitter.sys : 6,400 : 08/04/2004 02:07 AM : 8e186b8f23295d1e42c573b82b80d548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\splitter.sys : 6,272 : 04/13/2008 02:45 PM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl]

* C:\WINDOWS\System32\drivers\sr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sr.sys : 73,472 : 08/04/2004 02:06 AM : e41b6d037d6cd08461470af04500dc24 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sr.sys : 73,472 : 04/13/2008 02:36 PM : 76bb022c2fb6902fd5bdd4f78fc13a5d [Pos Repl]

* C:\WINDOWS\System32\drivers\srv.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357,248 : 08/26/2010 09:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357,888 : 02/17/2011 09:19 AM : 9b390283569ea58d43d2586032b892f5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896422\SP2QFE\srv.sys : 332,544 : 05/09/2005 08:22 PM : 54e79b08d0abc9c551d0fe69cc2f87ec [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys : 332,800 : 04/21/2006 08:46 AM : 58bb0cc6be72899190505741e3b83464 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys : 332,928 : 08/14/2006 08:00 AM : 5230953c21c811b5fc1ff31ae2b48097 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957095\SP3QFE\srv.sys : 333,824 : 09/08/2008 08:37 AM : ae4d13b572399b206b43d65da4d9983d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys : 333,952 : 12/11/2008 08:33 AM : e89b42b216bc86ada4345908284519cb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971468\SP3QFE\srv.sys : 353,792 : 01/01/2010 08:58 AM : 30efed0c77d59ae0cacb0b5c756767ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982214\SP3QFE\srv.sys : 354,304 : 06/21/2010 08:18 AM : 422e4508508015c7d12f40bf9763f158 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\srv.sys : 332,928 : 08/14/2006 02:34 AM : ea554a3ffc3f536fe8320eb38f5e4843 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2345886$\srv.sys : 354,304 : 06/21/2010 02:27 AM : da852e3e0bf1cea75d756f9866241e57 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 357,248 : 08/26/2010 02:39 AM : 0f6aefad3641a657e18081f52d0c15af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896422$\srv.sys : 336,256 : 08/04/2004 02:14 AM : 20b7e396720353e4117d64d9dcb926ca [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB917159$\srv.sys : 332,544 : 05/09/2005 08:17 PM : 553007ecce7f6565bbe645beb66d3b69 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB923414$\srv.sys : 332,800 : 04/21/2006 08:12 AM : e03b4ea274c9e509cca7f9f0cec24232 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957095$\srv.sys : 334,848 : 04/13/2008 03:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958687$\srv.sys : 333,824 : 09/08/2008 03:41 AM : 4f8a43adef66f135564085a9dca96a26 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971468$\srv.sys : 333,952 : 12/11/2008 03:57 AM : 3bb03f2ba89d2be417206c373d2af17c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB982214$\srv.sys : 353,792 : 12/31/2009 03:50 AM : 89220b427890aa1dffd1a02648ae51c3 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ329170$\srv.sys : 330,368 : 08/29/2002 03:00 AM : 94619eb663216f9bf12f9b950fcab3c0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ817606$\srv.sys : 322,048 : 12/20/2002 03:36 AM : 522143dc4ae9f2916c917f43c5eab814 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srv.sys : 334,848 : 04/13/2008 03:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl]

* C:\WINDOWS\System32\drivers\stream.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\stream.sys : 48,640 : 08/04/2004 03:08 AM : c43356072eb3e88cd62958db10cead47 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\stream.sys : 45,696 : 12/11/2002 11:14 PM : d5ecbe98cceda4507fa9168e8d932088 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\stream.sys : 49,408 : 04/13/2008 02:45 PM : 3e5d89099ded9e86e5639f411693218f [Pos Repl]

* C:\WINDOWS\System32\drivers\swenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swenum.sys : 4,352 : 08/04/2004 03:58 AM : 03c1bae4766e2450219d20b993d6e046 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\swenum.sys : 4,096 : 12/11/2002 11:14 PM : 616a013d3ea068b6dee83d905e92ee9f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swenum.sys : 4,352 : 04/13/2008 02:39 PM : 3941d127aef12e93addf6fe6ee027e0f [Pos Repl]

* C:\WINDOWS\System32\drivers\swmidi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys : 54,272 : 08/17/2001 03:00 AM : 94abc808fc4b6d7d2bbf42b85e25bb4d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swmidi.sys : 56,576 : 04/13/2008 02:45 PM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl]

* C:\WINDOWS\System32\drivers\sysaudio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys : 60,800 : 08/04/2004 03:15 AM : 650ad082d46bac0e64c9c0e0928492fd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys : 60,800 : 04/13/2008 03:15 PM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl]

* C:\WINDOWS\System32\drivers\tape.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tape.sys : 14,976 : 08/04/2004 03:59 AM : a2a9ca0d1a9ac1ff54220aa0789fe5cf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tape.sys : 14,976 : 04/13/2008 02:40 PM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl]

* C:\WINDOWS\System32\drivers\tcpip6.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 08:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys : 225,664 : 08/16/2006 08:13 AM : a026ea381b026d05a4a3d2388d80c3b8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 08:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226,880 : 02/11/2010 08:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys : 225,664 : 08/16/2006 03:37 AM : dccacdd2747ada221aece5c9ada5d551 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB817778$\tcpip6.sys : 196,288 : 08/29/2002 03:00 AM : 7e6d0adc725fa65bdfafd4752d9777ae [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922819$\tcpip6.sys : 223,616 : 08/04/2004 03:07 AM : 4d58bb1ae8841aafd8790ad7e1e3b8ea [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225,856 : 06/20/2008 03:08 AM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]

* C:\WINDOWS\System32\Drivers\tcpip.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 08:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys : 359,936 : 05/25/2005 03:07 PM : 63fdfea54eb53de2d863ee454937ce1e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys : 360,448 : 01/13/2006 03:07 AM : 5562cc0a47b2aef06d3417b733f3c195 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys : 360,576 : 04/20/2006 03:18 AM : b2220c618b42a2212a59d91ebd6fc4b4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys : 360,832 : 10/30/2007 03:53 AM : 64798ecfa43d78c7178375fcdd16d8c8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 03:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys : 360,064 : 10/30/2007 01:20 PM : 90caff4b094573449a0872a0f919b178 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB893066$\tcpip.sys : 359,040 : 08/04/2004 01:14 AM : 9f4b36614a0fc234525ba224957de55c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys : 359,808 : 01/12/2006 09:28 PM : 583e063fdc888ca30d05c2724b0d7ef4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys : 359,808 : 04/20/2006 09:51 AM : 1dbf125862891817f374f407626967f4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]

* C:\WINDOWS\System32\drivers\tdi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdi.sys : 18,560 : 08/04/2004 03:07 AM : 6891b74ab9a016064e82a419388d0601 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdi.sys : 19,072 : 04/13/2008 03:00 PM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl]

* C:\WINDOWS\System32\drivers\tdpipe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys : 12,040 : 08/04/2004 03:01 AM : 38d437cf2d98965f239b0abcd66dcb0f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys : 12,040 : 04/13/2008 08:13 PM : 6471a66807f5e104e4885f5b67349397 [Pos Repl]

* C:\WINDOWS\System32\drivers\tdtcp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys : 21,896 : 08/04/2004 03:01 AM : ed0580af02502d00ad8c4c066b156be9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys : 21,896 : 04/13/2008 08:13 PM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl]

* C:\WINDOWS\System32\drivers\termdd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termdd.sys : 40,840 : 08/04/2004 03:01 AM : a540a99c281d933f3d69d55e48727f47 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termdd.sys : 40,840 : 04/13/2008 08:13 PM : 88155247177638048422893737429d9e [Pos Repl]

* C:\WINDOWS\System32\drivers\tosdvd.sys [NoSig]

* C:\WINDOWS\System32\drivers\tunmp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys : 12,416 : 08/04/2004 03:03 AM : 87a0e9e18c10a9e454238e3330e2a26d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB817778$\tunmp.sys : 9,856 : 08/29/2002 03:00 AM : fcf888ad3bf91c61501093d5b2e104ba [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tunmp.sys : 12,288 : 04/13/2008 02:56 PM : 8f861eda21c05857eb8197300a92501c [Pos Repl]

* C:\WINDOWS\System32\drivers\udfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\udfs.sys : 66,176 : 08/04/2004 03:00 AM : 12f70256f140cd7d52c58c7048fde657 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\udfs.sys : 66,048 : 04/13/2008 02:32 PM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl]

* C:\WINDOWS\System32\drivers\update.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB936357\SP2QFE\update.sys : 364,160 : 04/23/2007 03:14 AM : 7b2170ee3d858ce8fbe503904cc9b663 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\update.sys : 364,160 : 04/23/2007 03:32 AM : ced744117e91bdc0beb810f7d8608183 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB936357$\update.sys : 209,408 : 08/04/2004 03:58 AM : aff2e5045961bbc0a602bb6f95eb1345 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\update.sys : 384,768 : 04/13/2008 02:39 PM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl]

* C:\WINDOWS\System32\drivers\usb8023.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys : 12,672 : 08/04/2004 03:04 AM : af090265ec388bab320f1ff7e7a7d5ea [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usb8023.sys : 12,800 : 04/13/2008 02:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd2.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd2.sys : 23,936 : 08/29/2002 03:00 AM : 61018ba9df6b63e51d9753c980e73ec2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys : 25,728 : 04/13/2008 02:45 PM : ce97845d2e3f0d274b8bac1ed07c6149 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd.sys : 23,808 : 08/29/2002 03:00 AM : 2654eecc6fb13603ebddcd5c8ea943d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys : 25,600 : 04/13/2008 02:45 PM : 1c1a47b40c23358245aa8d0443b6935e [Pos Repl]

* C:\WINDOWS\System32\drivers\usbd.sys [NoSig]

* C:\WINDOWS\System32\drivers\usbehci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys : 26,624 : 08/04/2004 03:08 AM : 15e993ba2f6946b2bfbbfcd30398621e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbehci.sys : 30,208 : 04/13/2008 02:45 PM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbhub.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys : 57,600 : 08/04/2004 03:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB822603$\usbhub.sys : 51,968 : 08/29/2002 03:00 AM : d7bf70ac85e48b6c4df953401eccb75a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbhub.sys : 59,520 : 04/13/2008 02:45 PM : 1ab3cdde553b6e064d2e754efe20285c [Pos Repl]

* C:\WINDOWS\System32\drivers\usbintel.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys : 16,000 : 08/04/2004 03:08 AM : 2853fd4c4489e0f8bfcf78efcdb7e998 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbintel.sys : 15,872 : 04/13/2008 02:45 PM : 290913dc4f1125e5a82de52579a44c43 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbport.sys : 142,976 : 08/04/2004 03:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB822603$\usbport.sys : 135,552 : 08/29/2002 03:00 AM : 2ecaba73e8a4e58499bcc1fdb534ef34 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbport.sys : 143,872 : 04/13/2008 02:45 PM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbuhci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys : 20,480 : 08/04/2004 03:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB822603$\usbuhci.sys : 19,328 : 08/29/2002 03:00 AM : 49ec068278d85bc1e20ac7f3d315e940 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys : 20,608 : 04/13/2008 02:45 PM : 26496f9dee2d787fc3e61ad54821ffe6 [Pos Repl]

* C:\WINDOWS\System32\drivers\vga.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\vga.sys : 20,992 : 08/04/2004 03:07 AM : 8a60edd72b4ea5aea8202daf0e427925 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\vga.sys : 20,992 : 04/13/2008 02:44 PM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl]

* C:\WINDOWS\System32\drivers\videoprt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys : 79,744 : 08/04/2004 03:07 AM : d5a9d123f5ed7c9965a481bd20cf66d8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\videoprt.sys : 81,664 : 04/13/2008 02:44 PM : e28726b72c46821a28830e077d39a55b [Pos Repl]

* C:\WINDOWS\System32\drivers\volsnap.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys : 52,352 : 08/04/2004 03:00 AM : ee4660083deba849ff6c485d944b379b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\volsnap.sys : 52,352 : 04/13/2008 02:41 PM : 4c8fcb5cc53aab716d810740fe59d025 [Pos Repl]

* C:\WINDOWS\System32\drivers\wanarp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys : 34,560 : 08/04/2004 03:04 AM : 984ef0b9788abf89974cfed4bfbaacbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wanarp.sys : 34,560 : 04/13/2008 02:57 PM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\wdmaud.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys : 82,944 : 06/14/2006 03:17 AM : 0bfa8203b8148fb4e54bc212c41ce497 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys : 82,944 : 06/14/2006 03:00 AM : efd235ca22b57c81118c1aeb4798f1c1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\wdmaud.sys : 82,944 : 08/04/2004 03:15 AM : 2797f33ebf50466020c430ee4f037933 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys : 83,072 : 04/13/2008 03:17 PM : 6768acf64b18196494413695f0c3a00f [Pos Repl]

* C:\WINDOWS\System32\drivers\wmilib.sys [NoSig]

* C:\WINDOWS\System32\drivers\ws2ifsl.sys [NoSig]

* C:\WINDOWS\System32\dsound.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dsound.dll : 367,616 : 08/04/2004 03:56 AM : 55e148c01296696588eafa425782c3e8 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll : 336,384 : 12/11/2002 11:14 PM : beabcd2da4fd90b44600e21f37a59fbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dsound.dll : 367,616 : 04/13/2008 08:11 PM : 4d83ed8bddec431fc8ad907b47cfb6e3 [Pos Repl]

* C:\WINDOWS\System32\dssenh.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll : 137,216 : 08/04/2004 03:31 AM : cacd2c63a79268d131ea37e85524cc44 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dssenh.dll : 138,752 : 04/13/2008 01:37 PM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]

* C:\WINDOWS\System32\es.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll : 243,200 : 07/26/2005 03:20 AM : 95f5fea4c6de2c3f28784d0dcc8f0dd3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253,952 : 07/07/2008 04:23 PM : f17f6226bdc0cd5f0bef0daf84d29bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\es.dll : 243,200 : 07/26/2005 03:39 AM : 34bbd9acc1538818f2c878898c64e793 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB828741$\es.dll : 225,280 : 08/29/2002 03:00 AM : c9702ddd814c39dc1254cf757c31c6e4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\es.dll : 243,200 : 08/04/2004 03:56 AM : acd36a2dd7d1e9d8a060aa651dc07e63 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]

* C:\WINDOWS\System32\eventlog.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll : 55,808 : 08/04/2004 08:56 AM : 82b24cb70e5944e6e34662205a2a5b78 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\eventlog.dll : 56,320 : 04/13/2008 08:11 PM : 6d4feb43ee538fc5428cc7f0565aa656 [Pos Repl]

* C:\WINDOWS\System32\hid.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hid.dll : 20,992 : 08/04/2004 08:56 AM : 18afee0ede045b6255408d634372dc29 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hid.dll : 20,992 : 04/13/2008 08:11 PM : 8973122796e3b5d6b5900fc186e55fea [Pos Repl]

* C:\WINDOWS\System32\hnetcfg.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll : 344,064 : 08/04/2004 08:56 AM : 765b30c776a1780b46b479fe614f707c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll : 344,064 : 04/13/2008 08:11 PM : 3cb32d3b8cbe79899d63280bb7a83cd9 [Pos Repl]

* C:\WINDOWS\System32\imm32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imm32.dll : 110,080 : 08/04/2004 08:56 AM : 87ca7ce6469577f059297b9d6556d66d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imm32.dll : 110,080 : 04/13/2008 08:11 PM : 0da85218e92526972a821587e6a8bf8f [Pos Repl]

* C:\WINDOWS\System32\ipsecsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll : 182,784 : 08/04/2004 08:56 AM : d1e299962b5956005113ec4ab1e0d9b7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll : 183,808 : 04/13/2008 08:11 PM : 332760fba1655fcfd35bd6f4fd871300 [Pos Repl]

* C:\WINDOWS\System32\kernel32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll : 985,088 : 07/05/2006 04:57 AM : 0fdd84928a5dde2510761b7ec76ccec9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll : 986,112 : 04/16/2007 04:07 AM : 09f7cb3687f86edaa4ca081f7ab66c03 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 991,744 : 03/21/2009 04:59 AM : da11d9d6ecbdf0f93436a4b7c13f7bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll : 984,576 : 04/16/2007 08:52 AM : a01f9ca902a88f7ced06884174d6419d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll : 983,552 : 08/04/2004 08:56 AM : 888190e31455fad793312f8d087146eb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll : 984,064 : 07/05/2006 08:55 AM : d8db5397de07577c1cb50ba6d23b3ad4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 989,696 : 04/13/2008 08:11 PM : c24b983d211c34da8fcc1ac38477971d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kernel32.dll : 989,696 : 04/13/2008 08:11 PM : c24b983d211c34da8fcc1ac38477971d [Pos Repl]

* C:\WINDOWS\System32\ksuser.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll : 4,096 : 08/04/2004 08:56 AM : cbcd254547689bff80c9f547b20911e9 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ksuser.dll : 4,096 : 12/11/2002 11:14 PM : 15914e0bf4dda56cf797993dccb637d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksuser.dll : 4,096 : 04/13/2008 08:11 PM : 9b9f1c38d559047b8ac0dba2d5febde9 [Pos Repl]

* C:\WINDOWS\System32\linkinfo.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll : 19,968 : 08/31/2005 09:44 PM : 648bf0b4dde4f7a1156dae7174d36efa [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll : 19,968 : 08/31/2005 09:41 PM : a1a688ee56cf3bbd24edeb815d48e9ba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB900725$\linkinfo.dll : 18,944 : 08/04/2004 09:56 AM : c2bbd044c741ea4292016c36f718d2e4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll : 19,968 : 04/13/2008 08:11 PM : 2dc5a8019e2387987905f77c664e4be2 [Pos Repl]

* C:\WINDOWS\System32\lpk.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lpk.dll : 22,016 : 08/04/2004 09:56 AM : 74d66b3de265e8789153414e75175f26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lpk.dll : 22,016 : 04/13/2008 08:11 PM : 012df358cebaa23acb26d82077820817 [Pos Repl]

* C:\WINDOWS\System32\lsass.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lsass.exe : 13,312 : 08/04/2004 09:56 AM : 84885f9b82f4d55c6146ebf6065d75d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lsass.exe : 13,312 : 04/13/2008 08:12 PM : bf2466b3e18e970d8a976fb95fc1ca85 [Pos Repl]

* C:\WINDOWS\System32\mfc40u.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953,856 : 09/18/2010 09:18 AM : 842900dedbc8e3e8dbcccb298fd88f65 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll : 927,504 : 11/01/2006 02:17 PM : 925f8b61ed301a317ba850ebeecbdaa0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB924667$\mfc40u.dll : 924,432 : 08/29/2002 08:00 AM : ddf8d47acf8fc3fe5f7f2b95c4d4d136 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]

* C:\WINDOWS\System32\midimap.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\midimap.dll : 18,944 : 08/04/2004 08:56 AM : 3b4702155bb2ae9dc00c06a68834bdfa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\midimap.dll : 18,944 : 04/13/2008 08:11 PM : 5c12660a97822f6e61576943b49aaad6 [Pos Repl]

* C:\WINDOWS\System32\msgsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll : 33,792 : 08/04/2004 08:56 AM : 95fd808e4ac22aba025a7b3eac0375d2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll : 34,304 : 08/29/2002 08:00 AM : a81487520f11f65bf270d50ee29887b2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll : 33,792 : 04/13/2008 08:11 PM : 986b1ff5814366d71e0ac5755c88f2d3 [Pos Repl]

* C:\WINDOWS\System32\mshtml.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll : 5,954,560 : 06/24/2010 09:24 AM : 94dc7e938c57f3c3d1bc4a0f68fc5830 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll : 5,958,656 : 09/10/2010 09:57 AM : 8a03cc037e6b7d1796192815231b0c3f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll : 5,960,704 : 11/05/2010 08:27 PM : 864e69f32656a7121444ba0193d7b64b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll : 5,962,240 : 12/20/2010 06:58 PM : 2a2c070ec691ce410533a1da7aa3cd86 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll : 5,964,800 : 02/22/2011 06:27 PM : 3422847aa07e37076a87d0b7d5044dc6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll : 5,967,360 : 05/30/2011 06:17 PM : d0b1db576941cb0b6669b8752ffac79a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll : 5,971,456 : 07/25/2011 06:15 AM : bce7ccebad6c8955d2b4c3b246bd0e57 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll : 5,972,992 : 10/03/2011 06:34 AM : 1240a6b7b470bed0aa6c9fec7ab0ea26 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 03:19 PM : 699421e2e1313c18671a703953cae14b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll : 5,980,160 : 12/17/2011 02:45 PM : 49b88a833eca99efbffc5aae5cc998ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\mshtml.dll : 5,980,672 : 03/01/2012 02:58 AM : 5dbb0c997ad276bce9d30cd609bdbf67 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\mshtml.dll : 6,009,344 : 05/11/2012 02:41 AM : 55f148b94246a77fb4ac33346671cac8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\mshtml.dll : 6,010,368 : 07/02/2012 01:48 PM : df599ac52b62de001e42d36f92b45e68 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\mshtml.dll : 3,004,928 : 09/29/2004 01:27 AM : 087ff7c54e7ebe4a59bd4dfc1d0ee9b8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB867282\SP2QFE\mshtml.dll : 3,008,000 : 01/27/2005 01:08 AM : 91c5ade25bc4e3322577854fa2e7b58b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB883939\SP2QFE\mshtml.dll : 3,014,144 : 05/02/2005 04:57 PM : dcc5c79b99f02eef8c826b074dbfc222 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\mshtml.dll : 3,011,072 : 03/10/2005 04:43 AM : 255c2ce965543abdc3e0a25a5da1874a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\mshtml.dll : 3,017,728 : 10/04/2005 08:51 PM : 3394299fbf1cd0b24089fc762611360b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\mshtml.dll : 3,016,192 : 07/19/2005 10:03 PM : a14a7a206ae22de4fe563e44cfc7ddf5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\mshtml.dll : 3,018,240 : 11/23/2005 08:07 PM : d3f037f5da702ae9ddd7663ec9d78ba7 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll : 3,067,392 : 04/21/2008 08:24 AM : 46a61ba430110f00dd990d058aa3d054 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll : 3,067,904 : 06/25/2008 08:24 AM : 04eec0ff4dd3c7041628973ca6832c33 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\mshtml.dll : 3,067,904 : 08/20/2008 08:58 AM : bd45470b132a0f98596277323d9f2e5a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll : 3,594,752 : 08/26/2008 08:08 AM : 25cc085720ee3617fd1f8ab9e2f7cab2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\mshtml.dll : 3,067,904 : 10/16/2008 08:34 AM : cc5a2205d37ae67ce23ab7fd3e1fdaca [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll : 3,595,264 : 10/16/2008 04:24 PM : b74f31a4bd83797d7a083f922169287d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960714\SP3QFE\mshtml.dll : 3,067,904 : 12/12/2008 04:14 AM : b6daa74e2ed36c71b502945589a683ae [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll : 3,594,752 : 12/13/2008 04:26 AM : c79fad61cd4a26ed5aa8c16d991c6fbd [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll : 3,596,288 : 01/16/2009 04:24 AM : cc9d001b7370b292c35b366ca05b12b4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll : 5,936,128 : 05/13/2009 04:10 AM : 1290e417bf806185cc7b2845e78a104e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll : 5,938,176 : 07/19/2009 04:17 AM : f25d866dd486ad30e05e5596cb363c3e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll : 5,942,272 : 08/29/2009 04:01 AM : b68f6e6c66d17d9edabf3d5da71046da [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll : 5,944,320 : 10/29/2009 04:45 AM : c0f9ac6fab2c788ffee3e69585a0e93f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll : 5,943,296 : 10/22/2009 04:18 AM : a6cf28c6e0b6d10098ab601d85ee55e8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll : 5,945,856 : 12/21/2009 02:09 PM : e6b64c6c729bbc38ab7cc92ce33f97a5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll : 5,946,880 : 02/25/2010 02:19 AM : 974772c74da7c7a8e7c813a9908a845f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 02:36 AM : 9be28f749a7fe7f8f177c6aa2e9da609 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll : 3,066,880 : 02/16/2008 08:32 AM : 701a6798ddf875caa3a5099ee75fd57f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB834707$\mshtml.dll : 3,003,392 : 08/04/2004 08:56 AM : 376e0843b2356ca91cec8d9837a56ff7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB867282$\mshtml.dll : 3,004,928 : 09/29/2004 02:47 PM : d94e6405e420373161467acd3da65640 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB883939$\mshtml.dll : 3,010,560 : 03/10/2005 02:02 AM : 84a1b9b0c362051e68bb131f14c6daad [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890923$\mshtml.dll : 3,006,976 : 01/27/2005 02:13 AM : fae3ca9b2459581c45b3a8845be3077c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896688$\mshtml.dll : 3,014,144 : 07/19/2005 10:00 PM : 31e7520e58e5e4dfa93215a6d5603af2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896727$\mshtml.dll : 3,012,608 : 05/02/2005 04:52 PM : dcfac5470ee0a159ec4222bc28ae3ee6 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB905915$\mshtml.dll : 3,015,168 : 10/04/2005 08:25 PM : 042ac20e084d21dd6bee99b89cc30fb7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB912812$\mshtml.dll : 3,015,680 : 11/23/2005 08:06 PM : 5e7a39950ea133bb54719a6e08c544a7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB916281$\mshtml.dll : 3,055,616 : 03/23/2006 03:31 PM : abcd123f888e4e97c8751378cccc4f26 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB918899$\mshtml.dll : 3,055,104 : 05/19/2006 03:06 AM : 8687e029be63c77d4919485068c54d77 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922760$\mshtml.dll : 3,058,176 : 07/28/2006 03:30 AM : d251679bd9ef0250201fb899ec40fd32 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925454$\mshtml.dll : 3,058,688 : 09/14/2006 03:31 AM : cefea1c301139a817931be132f0359fe [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928090$\mshtml.dll : 3,061,248 : 10/23/2006 03:34 AM : 88e1c15bb1a9ed3cba4d6f2f408d5010 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931768$\mshtml.dll : 3,062,272 : 01/04/2007 03:05 AM : 1c45525574ef206346fbafcaac7cc4a5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB933566$\mshtml.dll : 3,063,296 : 02/20/2007 03:52 AM : 2991727809c7ac3a33e4178cc73244d8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB937143$\mshtml.dll : 3,064,320 : 05/04/2007 03:59 AM : 00adcb32832a10ed9419493bcea97526 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB939653$\mshtml.dll : 3,064,320 : 06/15/2007 03:12 AM : 53f3fd772c010622346c39284c4a863b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB942615$\mshtml.dll : 3,064,832 : 08/22/2007 03:55 AM : 885e3bf99ea4b2213901ebc35b34cf12 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB944533$\mshtml.dll : 3,065,856 : 10/30/2007 03:55 AM : 79314a0a6b0da78afe491ff2d8b117ba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB947864$\mshtml.dll : 3,066,368 : 12/06/2007 07:44 PM : 8a4dd074dec1b0c063c8493abf654cbc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759$\mshtml.dll : 3,066,880 : 04/13/2008 08:11 PM : a706e122b398fe1ab85cb9b75d044223 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838$\mshtml.dll : 3,066,880 : 04/21/2008 08:44 AM : fe406de0651c9e8201dcb0460609d739 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390$\mshtml.dll : 3,067,392 : 06/23/2008 08:09 AM : f433136c23d13b120412b300d1324a7e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215$\mshtml.dll : 3,067,904 : 08/20/2008 08:30 AM : 507bda42f7db8209c0f0b3556a043491 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960714$\mshtml.dll : 3,067,904 : 10/15/2008 09:00 PM : b846c2de341cf32b42ad297437233742 [Pos Repl]
+-> C:\WINDOWS\ie7\mshtml.dll : 3,067,904 : 12/12/2008 09:01 AM : c828aa1c5469e72251f3d367005e589f [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB956390-IE7\mshtml.dll : 3,578,368 : 08/13/2007 07:54 PM : c6ec2493346ed8888a549f59210a8ed3 [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB958215-IE7\mshtml.dll : 3,593,216 : 08/27/2008 02:54 PM : 1ad035e04a7068ec2820b055a3131ed8 [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB960714-IE7\mshtml.dll : 3,593,216 : 10/17/2008 02:08 AM : eacaedef6fa2a969de5b36190d45396f [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB961260-IE7\mshtml.dll : 3,593,216 : 12/13/2008 02:40 AM : 121ec39a64d64205a88c2c45b034b455 [Pos Repl]
+-> C:\WINDOWS\ie8\mshtml.dll : 3,594,752 : 01/16/2009 09:35 PM : 3b413267da8ae71c20e5ef3e54f74728 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll : 5,950,976 : 05/06/2010 02:41 AM : c7b7a88cc7d7aba5c395145bf92f46f7 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll : 5,951,488 : 06/24/2010 02:22 AM : 4d7ef94795384cd2bbaab078b7929fea [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll : 5,957,120 : 09/10/2010 02:58 AM : de41132da8e5a3cd57201c6f2175ec05 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll : 5,959,168 : 11/05/2010 08:26 PM : d7cca87057901c87ed8cc40ddcc7fa1b [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll : 5,961,216 : 12/20/2010 06:59 PM : 1edcec5d649dbac37ed9ffb5a14ceb0c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll : 5,962,240 : 02/22/2011 06:06 PM : c2ef2335f1b6c2be20a67d9098f6c9a1 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\mshtml.dll : 5,964,800 : 05/30/2011 06:19 PM : 22ba5235ea846eda87f68a1dcc2bfcf9 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\mshtml.dll : 5,969,920 : 07/25/2011 06:17 AM : 23b3c8e9f3f280180573569253ce98ab [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5,971,456 : 10/03/2011 06:35 AM : 4963cb503600fc3bcbdbfba51fba1fac [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\mshtml.dll : 5,978,112 : 11/04/2011 03:20 PM : dd8d655e1881b70a5259a23a6018a6c2 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\mshtml.dll : 5,979,136 : 12/17/2011 02:46 PM : a9259cd226283cd4f798c00909754a94 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\mshtml.dll : 5,978,624 : 03/01/2012 02:01 AM : dade53318d8e5335ee2e1745f1c3fc4d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\mshtml.dll : 6,007,808 : 05/11/2012 02:42 AM : 886b62a906b3967cbbf0fd2c833a30bf [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB969897-IE8\mshtml.dll : 5,937,152 : 03/08/2009 02:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB972260-IE8\mshtml.dll : 5,936,128 : 05/13/2009 02:15 AM : eeaadaa744b20e68cf5eb4fbb4f8afa9 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB974455-IE8\mshtml.dll : 5,937,152 : 07/19/2009 02:18 AM : 5a32b43a48d6dca339bf24105d9a028f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll : 5,939,712 : 10/22/2009 02:19 AM : cda69bc1c23b0ea033b989f67cb722ff [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976749-IE8\mshtml.dll : 5,940,224 : 08/29/2009 02:08 AM : 0e49677ee57a928765fc47ffbacd5326 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll : 5,940,736 : 10/29/2009 02:45 AM : cbb1ef54b86edb78649909dd1699e5ca [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll : 5,942,784 : 12/21/2009 02:14 PM : be6eebef636773a8e7a82214e81c563a [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll : 5,944,832 : 02/25/2010 02:24 AM : 7054f6adc9b670887659f1561603b0d0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mshtml.dll : 3,066,880 : 04/13/2008 08:11 PM : a706e122b398fe1ab85cb9b75d044223 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\SP2GDR\mshtml.dll : 3,593,216 : 08/27/2008 02:54 PM : 1ad035e04a7068ec2820b055a3131ed8 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\SP2QFE\mshtml.dll : 3,594,752 : 08/26/2008 02:08 AM : 25cc085720ee3617fd1f8ab9e2f7cab2 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\c74979a750f473b6d9d8ef0bba9b356c\SP2GDR\mshtml.dll : 3,593,216 : 10/17/2008 02:08 AM : eacaedef6fa2a969de5b36190d45396f [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\c74979a750f473b6d9d8ef0bba9b356c\SP2QFE\mshtml.dll : 3,595,264 : 10/16/2008 04:24 PM : b74f31a4bd83797d7a083f922169287d [Pos Repl]

* C:\WINDOWS\System32\msimg32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll : 4,608 : 08/04/2004 09:56 AM : b5331f2b6f37c66c29c847f3b94ff900 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msimg32.dll : 4,608 : 04/13/2008 08:11 PM : affc87e2501fce8f09d4c10ba6421ccf [Pos Repl]

* C:\WINDOWS\System32\mspmsnsv.dll [NoSig]
+-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 25,088 : 01/28/2005 09:44 AM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll : 25,088 : 01/28/2005 08:44 AM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll : 52,224 : 08/04/2004 02:56 AM : c086483e3dba8c1c0a687ec8d5b3d4c1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspmsnsv.dll : 52,224 : 08/04/2004 08:56 AM : c086483e3dba8c1c0a687ec8d5b3d4c1 [Pos Repl]

* C:\WINDOWS\System32\msprivs.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msprivs.dll : 48,128 : 08/04/2004 09:56 AM : 6bec17053284e847cf1fbb8c9a181e1e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msprivs.dll : 48,128 : 04/13/2008 08:23 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl]

* C:\WINDOWS\System32\msvcrt.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll : 343,040 : 08/04/2004 09:56 AM : b0fefa816d61ec66aa765ddf534eab5e [Pos Repl]
+-> C:\WINDOWS\I386\ASMS\7000\MSFT\WINDOWS\MSWINCRT\MSVCRT.DLL : 322,560 : 08/29/2002 00:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322,560 : 08/29/2002 08:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll : 323,072 : 08/29/2002 08:00 AM : 70630cad245477f8db02b79d9a92834c [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll : 343,040 : 08/04/2004 08:57 AM : 98ec447e00229afd88d5161a25d065da [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : d7075e95aa599ee77b7a89d39296bd3d [Pos Repl]

* C:\WINDOWS\System32\mswsock.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll : 245,248 : 08/04/2004 09:56 AM : 4e74af063c3271fbea20dd940cfd1184 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]

* C:\WINDOWS\System32\netlogon.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll : 407,040 : 08/04/2004 08:56 AM : 96353fcecba774bb8da74a1c6507015a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netlogon.dll : 407,040 : 04/13/2008 08:12 PM : 1b7f071c51b77c272875c3a23e1e4550 [Pos Repl]

* C:\WINDOWS\System32\netman.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll : 197,632 : 08/22/2005 02:24 PM : 3516d8a18b36784b1005b950b84232e1 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\netman.dll : 197,632 : 08/22/2005 02:29 PM : 36739b39267914ba69ad0610a0299732 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB905414$\netman.dll : 198,144 : 08/04/2004 02:56 AM : dab9e6c7105d2ef49876fe92c524f565 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netman.dll : 198,144 : 04/13/2008 08:12 PM : 13e67b55b3abd7bf3fe7aae5a0f9a9de [Pos Repl]

* C:\WINDOWS\System32\ntkrnlpa.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2,069,376 : 12/09/2010 06:39 PM : f67cd97282e0abfaf91a9a1359b16f2d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe : 2,069,376 : 10/25/2011 06:52 AM : db19fff0c805664cb95062c027b11fe9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2,069,120 : 04/11/2012 06:42 AM : 063a0f8a90d8e2b802e5243fe9aabcf3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe : 2,069,120 : 05/04/2012 06:41 AM : 8e99a0ce02c1beda6c0935a4dde9ceaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe : 2,056,832 : 03/01/2005 07:36 PM : d8aba3eab509627e707a3b14f00fbb6b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe : 2,059,392 : 12/19/2006 07:12 AM : ba4b97c00a437c1cc3da365d93ee1e9d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe : 2,059,392 : 02/28/2007 07:15 AM : 4d3dbdccbf97f5ba1e74f322b155c3ba [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2,066,176 : 02/06/2009 07:30 AM : 607352b9cb3d708c67f6039097801b5a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe : 2,066,048 : 08/14/2008 03:39 PM : a25e9b86effb2af33bf51e676b68bfb0 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe : 2,066,176 : 08/04/2009 06:47 PM : 363b2bbee0aedc9e5433616d0ad0236a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe : 2,066,176 : 12/08/2009 11:10 PM : ffdce1eea79c678c40237d4e031e5b51 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe : 2,066,944 : 02/16/2010 11:12 AM : ded8b5a89b085284634502e9d75ac78c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe : 2,066,944 : 04/28/2010 11:14 AM : 756362706de8bc92f11e197c98a73844 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe : 2,057,600 : 02/28/2007 02:38 AM : 515d30e2c90a3665a2739309334c9283 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2,066,816 : 04/27/2010 02:05 AM : dc57abed7bde1487e658968b4423bed7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntkrnlpa.exe : 2,069,376 : 12/09/2010 02:07 AM : 84ff488e249dbd2050eb39ea81c6f5c2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2,069,376 : 10/25/2011 02:52 AM : ce1a2fedbd001ecdc5ad1975afad040a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntkrnlpa.exe : 2,069,120 : 04/11/2012 02:35 AM : 0c9e44d256948fa68ae10d67984862ce [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe : 2,056,832 : 08/04/2004 02:58 AM : 947fb1d86d14afcffdb54bf837ec25d0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB929338$\ntkrnlpa.exe : 2,056,832 : 03/01/2005 07:34 PM : 81013f36b21c7f72cf784cc6731e0002 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe : 2,057,600 : 12/19/2006 07:55 AM : 1d659bfb788ed2ba45075624b748d249 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2,066,048 : 08/14/2008 07:33 AM : 4ac58f03eb94a72809949d757fc39d80 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841$\ntkrnlpa.exe : 2,065,792 : 04/13/2008 02:31 PM : 109f8e3e3c82e337bb71b6bc9b895d61 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntkrnlpa.exe : 2,066,048 : 02/07/2009 06:02 PM : 5ba7f2141bc6db06100d0e5a732c617a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntkrnlpa.exe : 2,066,048 : 08/04/2009 06:20 AM : 7437ba6f538e89381a2e3643aed296c7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntkrnlpa.exe : 2,066,048 : 12/08/2009 01:43 PM : a6683e23468776f75eb2d8c6a02aad3b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntkrnlpa.exe : 2,066,816 : 02/16/2010 01:25 AM : a046c627ec20456e2959b7bd628e1fd0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ811493$\ntkrnlpa.exe : 1,947,904 : 08/29/2002 01:00 AM : 0e8efb15746878a9b256e75267337233 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2,069,120 : 05/04/2012 08:32 AM : 5dd80d56af1cefbff4f25951069b55bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe : 2,065,792 : 04/13/2008 02:31 PM : 109f8e3e3c82e337bb71b6bc9b895d61 [Pos Repl]

* C:\WINDOWS\System32\ntmssvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll : 435,200 : 08/04/2004 01:56 AM : b62f29c00ac55a761b2e45877d85ea0f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll : 435,200 : 04/13/2008 08:12 PM : 156f64a3345bd23c600655fb4d10bc08 [Pos Repl]

* C:\WINDOWS\System32\ntoskrnl.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2,192,768 : 12/09/2010 11:43 AM : a531bbd3de13121c1380ed7dc99082db [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe : 2,192,768 : 10/25/2011 11:34 AM : f512c662874d7545e5bd8005e6800a44 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2,192,640 : 04/11/2012 11:22 AM : 8d061bb825bc606c2b1c6f7452d1baaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe : 2,192,640 : 05/04/2012 11:20 AM : 099a0f80a563ebe935f4a9750f96c219 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe : 2,179,456 : 03/01/2005 08:04 PM : 28187802b7c368c0d3aef7d4c382aabb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe : 2,182,016 : 12/19/2006 08:51 AM : cef243f6defd20be4adde26c7ecacb54 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe : 2,182,144 : 02/28/2007 08:55 AM : 5a5c8db4aa962c714c8371fbdf189fc9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2,189,184 : 02/07/2009 06:35 PM : efe8eace83eaad5849a7a548fb75b584 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe : 2,189,184 : 08/14/2008 04:11 PM : 31914172342bff330063f343ac6958fe [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe : 2,189,312 : 08/04/2009 04:56 AM : fde779ea1a564ebfe16f4e0f82b61bad [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe : 2,189,312 : 12/08/2009 11:52 PM : 05be3d9a71972223aff6a3c823ba51b1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe : 2,190,080 : 02/16/2010 11:52 AM : e1f653a542449d54fa2d27463d99b6b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe : 2,190,080 : 04/27/2010 11:50 AM : a2abbec40cdb57454645d06b7ebd22f5 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe : 2,180,352 : 02/28/2007 01:10 AM : 582a8dbaa58c3b1f176eb2817daee77c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2,189,952 : 04/27/2010 10:25 PM : 472059774023f80eb7227eaf9a7acda1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntoskrnl.exe : 2,192,768 : 12/09/2010 10:38 AM : 64c1adf6df629f340c5a439fe0ef8ed1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2,192,768 : 10/25/2011 10:33 AM : 892cddff7ef96951b9b0b50974070e47 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntoskrnl.exe : 2,192,640 : 04/11/2012 10:10 AM : 536168936ebf326e36c655ec5ae34b03 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe : 2,180,992 : 08/04/2004 10:19 AM : ce218bc7088681faa06633e218596ca7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe : 2,179,328 : 03/01/2005 07:59 PM : 4d4cf2c14550a4b7718e94a6e581856e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe : 2,180,352 : 12/19/2006 07:17 AM : 8f0deab1f81fb83f9c5995853ce48b9f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2,189,184 : 08/14/2008 07:11 AM : eeaf32f8e15a24f62becb1bd403bb5c5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe : 2,188,928 : 04/13/2008 03:27 PM : 0c89243c7c3ee199b96fcc16990e0679 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe : 2,189,056 : 02/06/2009 03:08 AM : 7a95b10a73737ebf24139aaa63f5212b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntoskrnl.exe : 2,189,184 : 08/04/2009 08:44 PM : 8415d9c7c050e7022aed8abf281be4a6 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntoskrnl.exe : 2,189,184 : 12/08/2009 02:27 PM : 78ec47f9b9a3a1d539262d8834c896ce [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntoskrnl.exe : 2,189,952 : 02/17/2010 02:10 AM : d41c3cbad0e1c0728d1cdfd541f60cfa [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ811493$\ntoskrnl.exe : 2,042,240 : 08/29/2002 02:00 AM : b9080d97dbd631aadf9128f7316958d2 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2,192,640 : 05/04/2012 08:12 AM : ddf0cb8cd3c6007cdf4ad8f0409ed930 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe : 2,188,928 : 04/13/2008 03:27 PM : 0c89243c7c3ee199b96fcc16990e0679 [Pos Repl]

* C:\WINDOWS\System32\oakley.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 270,336 : 10/13/2009 11:38 AM : 7eadba6d371c60cca9e4db57c28c8045 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\oakley.dll : 266,752 : 08/04/2004 02:56 AM : a76128be63eea6a3af521a0576d3ebf7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 270,336 : 04/13/2008 08:12 PM : 33ceb89b62589e8b12aee9e2d523dade [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\oakley.dll : 270,336 : 04/13/2008 08:12 PM : 33ceb89b62589e8b12aee9e2d523dade [Pos Repl]

* C:\WINDOWS\System32\ole32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1,289,216 : 11/01/2011 11:05 AM : 7d9dde1ab4b00ddb173f5a16e9206517 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\ole32.dll : 1,284,608 : 01/14/2005 11:07 AM : 2e752611c9a9ae1b6bfd0da03cf7f17e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll : 1,286,144 : 04/28/2005 03:35 PM : 7440d29f257b7e44329343f944f2142c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll : 1,285,632 : 07/26/2005 03:20 AM : a2f755e237fa2cdd748a80bfbe6657f3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1,289,216 : 07/16/2010 03:04 AM : 8d51fb47062f2a1a9efeccef338a4c46 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ole32.dll : 1,285,120 : 07/26/2005 08:39 AM : ab8231d13692ac5088eb9c226b0c0576 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1,288,192 : 07/16/2010 08:05 AM : 7a6a7900b5e322763430ba6fd9a31224 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB823980$\ole32.dll : 1,169,920 : 08/29/2002 08:00 AM : cb598c117c6ab02584bb3b3452a04f11 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB824146$\ole32.dll : 1,120,256 : 07/05/2003 08:12 AM : 510ceb482636b4a9eed6f2da3444aeb1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB828741$\ole32.dll : 1,172,992 : 08/25/2003 02:53 PM : ffaaab74b30b2e22738e0d54e9f2b048 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB873333$\ole32.dll : 1,281,536 : 08/04/2004 02:56 AM : 4fe9d9fa62d020e35e0ac6d1aeeb96f0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB894391$\ole32.dll : 1,285,120 : 01/14/2005 02:55 AM : abdef60ced7c04ab35a415efb6b96d81 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\ole32.dll : 1,285,120 : 04/28/2005 03:31 PM : 5950e4f28fda9d147576bf6798937397 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]

* C:\WINDOWS\System32\olepro32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll : 83,456 : 08/04/2004 08:56 AM : b48d3193dd1474dcbcc32bf4779ac698 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [Pos Repl]

* C:\WINDOWS\System32\perfctrs.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll : 39,936 : 08/04/2004 08:56 AM : 96492c721c6ea517e2bfd5381fef55e3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll : 39,936 : 04/13/2008 08:12 PM : dbe2b62353660ecca0d75ea307a717e9 [Pos Repl]

* C:\WINDOWS\System32\powrprof.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll : 17,408 : 08/04/2004 08:56 AM : 1b5f6923abb450692e9fe0672c897aed [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\powrprof.dll : 17,408 : 04/13/2008 08:12 PM : 50a166237a0fa771261275a405646cc0 [Pos Repl]

* C:\WINDOWS\System32\psbase.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psbase.dll : 96,768 : 08/04/2004 08:56 AM : 4d3ccdf22d2b4bae229ba73b81d13e26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psbase.dll : 96,768 : 04/13/2008 08:12 PM : 22d89d84e8e081cda529dbf8c0255a38 [Pos Repl]

* C:\WINDOWS\System32\pstorsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pstorsvc.dll : 34,304 : 08/04/2004 08:56 AM : 306b30a036db25fcb76b507fede07d58 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll : 34,304 : 04/13/2008 08:12 PM : 853d0d0c6f02d7bfdf1cf99dd7553732 [Pos Repl]

* C:\WINDOWS\System32\qmgr.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll : 382,464 : 08/04/2004 08:56 AM : 2c69ec7e5a311334d10dd95f338fccea [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB842773$\qmgr.dll : 221,696 : 08/29/2002 08:00 AM : 6a1cf14d0e7d0b2241f552223769c8a7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]
+-> C:\WINDOWS\system32\bits\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]

* C:\WINDOWS\System32\rasadhlp.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll : 7,680 : 06/26/2006 01:45 PM : b5d08c96b2dadaf5171fb69e341b272b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll : 8,192 : 06/26/2006 01:37 PM : 5f098bd2ae6b03044b085decffdf91ec [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920683$\rasadhlp.dll : 8,192 : 08/04/2004 01:56 AM : 4caec028c1e21c75e17877d4522d3db4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll : 7,680 : 04/13/2008 08:12 PM : 6f9bef24c578d5d6740e080bedd6a448 [Pos Repl]

* C:\WINDOWS\System32\regsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll : 59,904 : 08/04/2004 01:56 AM : 3151427db7d87107d1c5be58fac53960 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\regsvc.dll : 59,904 : 04/13/2008 08:12 PM : 5b19b557b0c188210a56a6b699d90b8f [Pos Repl]

* C:\WINDOWS\System32\rpcss.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\rpcss.dll : 395,776 : 01/14/2005 01:07 AM : 94456045beb4545b5ebe1dcc85951afa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll : 396,288 : 04/28/2005 03:35 PM : da383fb39a6f1c445f3afc94b3eb1248 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll : 398,336 : 07/26/2005 03:20 AM : c369df215d352b6f3a0b8c3469aa34f8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401,408 : 02/09/2009 03:56 AM : 9222562d44021b988b9f9f62207fb6f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll : 397,824 : 07/26/2005 01:39 AM : ce94a2bd25e3e9f4d46a7373ff455c6d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB823980$\rpcss.dll : 260,608 : 08/29/2002 01:00 AM : 493fcbed180dcacf0b5d4c8c29949ca9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB824146$\rpcss.dll : 202,752 : 07/05/2003 01:12 AM : cb95493f46b8113362d8925ad6a5a4fa [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll : 260,608 : 08/25/2003 02:53 PM : 7a6f20eeac4b2168451878af9054396f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll : 395,776 : 08/04/2004 02:56 AM : 5c83a4408604f737717ab96371201680 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll : 395,776 : 01/14/2005 02:55 AM : 419899803ca479b73b02390318c787c0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll : 395,776 : 04/28/2005 03:31 PM : c8061f289e000703e7672916b7fe1571 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]

* C:\WINDOWS\System32\scecli.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll : 180,224 : 08/04/2004 08:56 AM : 0f78e27f563f2aaf74b91a49e2abf19a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scecli.dll : 181,248 : 04/13/2008 08:12 PM : a86bb5e61bf3e39b62ab4c7e7085a084 [Pos Repl]

* C:\WINDOWS\System32\schannel.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2541763\SP3QFE\schannel.dll : 151,552 : 04/29/2011 01:23 PM : 6fd5eec3703d7770c9029e774acc2294 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152,064 : 11/16/2011 01:20 AM : d444009f7cd704c89f7f9e62396ed4f1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153,088 : 06/04/2012 01:31 AM : 26f1193092b9ac2586deb38dd1cbb25c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll : 144,896 : 04/25/2007 04:32 PM : d8b13f0b90de29903cbe044190417f98 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll : 144,896 : 12/05/2008 04:58 AM : 1cdfcf9d0fdc55d76ac3955bd04ac200 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147,456 : 06/25/2009 04:41 AM : e513ba8bc33fd00f35d69659b478b1df [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980436\SP3QFE\schannel.dll : 149,504 : 06/30/2010 04:23 AM : e04b6497b6407d2f444e86b30680dc5a [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\schannel.dll : 144,896 : 04/25/2007 08:21 AM : 532ea80e9f5452928f8426653215be29 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2541763$\schannel.dll : 149,504 : 06/30/2010 08:31 AM : 30ace70b3c0242f0d1ac3b4fa708710f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 151,552 : 04/29/2011 01:25 PM : abeedd547e939ad827b2e29dec754206 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152,064 : 11/16/2011 01:21 AM : a645a78fcdabad67067324d7e6cd9f79 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB835732$\schannel.dll : 136,704 : 08/29/2002 01:00 AM : c5c90ae3f24a9588759c11bca2558186 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB935840$\schannel.dll : 144,896 : 08/04/2004 01:56 AM : 29632e787dcfc0085a555c681eb82693 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960225$\schannel.dll : 144,384 : 04/13/2008 08:12 PM : c61e8ecffdbf05ff71d079bbd35396b3 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144,896 : 12/05/2008 08:54 AM : 636c52fc618acb09ec356e9e82d072e2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980436$\schannel.dll : 147,456 : 06/25/2009 08:25 AM : bfdece69e293e6db4e25def862418428 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schannel.dll : 144,384 : 04/13/2008 08:12 PM : c61e8ecffdbf05ff71d079bbd35396b3 [Pos Repl]

* C:\WINDOWS\System32\schedsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll : 190,976 : 08/04/2004 08:56 AM : 92360854316611f6cc471612213c3d92 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB841873$\schedsvc.dll : 159,232 : 08/29/2002 08:00 AM : 719b05113003a1934ea25ea1fed68c85 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll : 192,512 : 04/13/2008 08:12 PM : 0a9a7365a1ca4319aa7c1d6cd8e4eafa [Pos Repl]

* C:\WINDOWS\System32\services.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 110,592 : 02/06/2009 04:06 AM : 020ceaaedc8eb655b6506b8c70d53bb6 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\services.exe : 108,032 : 08/04/2004 08:56 AM : c6ce6eec82f187615d1002bb3bb50ed4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]

* C:\WINDOWS\System32\setupapi.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll : 983,552 : 08/04/2004 08:56 AM : 7808313cbc634ee08346d5ddfef1cc5f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\setupapi.dll : 985,088 : 04/14/2008 08:42 AM : 24192246760e0e64435522e246b1d6c2 [Pos Repl]

* C:\WINDOWS\System32\sfc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfc.dll : 5,120 : 08/04/2004 08:56 AM : e8a12a12ea9088b4327d49edca3add3e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [Pos Repl]

* C:\WINDOWS\System32\sfcfiles.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll : 1,580,544 : 08/04/2004 08:56 AM : 30a609e00bd1d4ffc49d6b5a432be7f2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [Pos Repl]

* C:\WINDOWS\System32\shsvcs.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll : 135,168 : 12/19/2006 04:50 PM : 53d9184a21c5cbf600d918e51ef3a7e5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135,168 : 07/27/2009 06:13 PM : 888cd7b39c37e13a2419becfaaf0a28c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll : 134,656 : 12/19/2006 04:52 PM : 6815def9b810aefac107eeaf72da6f82 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928255$\shsvcs.dll : 134,656 : 08/04/2004 04:56 AM : e7518dc542d3ebdcb80edd98462c7821 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]

* C:\WINDOWS\System32\smss.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\smss.exe : 50,688 : 08/04/2004 08:56 AM : bd7fb0957c716f1a60333aee04de2178 [Pos Repl]
+-> C:\WINDOWS\I386\SYSTEM32\SMSS.EXE : 470,016 : 08/29/2002 08:00 AM : 1ec8fd151e5d2ee6fdafca67690188d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\smss.exe : 50,688 : 04/13/2008 08:12 PM : 5f816c1f539266d2d4c78694239da0b5 [Pos Repl]

* C:\WINDOWS\System32\spoolsv.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58,880 : 08/17/2010 06:19 AM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe : 57,856 : 06/10/2005 08:17 PM : ad3d9d191aea7b5445fe1d82ffbb4788 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe : 57,856 : 06/10/2005 07:53 PM : da81ec57acd4cdc3d4c51cf3d409af9f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe : 57,856 : 08/04/2004 08:56 AM : 7435b108b935e42ea92ca94f59c8e717 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]

* C:\WINDOWS\System32\srsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll : 170,496 : 08/04/2004 08:56 AM : 92bdf74f12d6cbec43c94d4b7f804838 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srsvc.dll : 171,008 : 04/13/2008 08:12 PM : 3805df0ac4296a34ba4bf93b346cc378 [Pos Repl]

* C:\WINDOWS\System32\ssdpsrv.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll : 71,680 : 08/04/2004 08:56 AM : 4b8d61792f7175bed48859cc18ce4e38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll : 71,680 : 04/13/2008 08:12 PM : 0a5679b3714edab99e357057ee88fca6 [Pos Repl]

* C:\WINDOWS\System32\svchost.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\svchost.exe : 14,336 : 08/04/2004 08:56 AM : 8f078ae4ed187aaabc0a305146de6716 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\svchost.exe : 14,336 : 04/13/2008 08:12 PM : 27c6d03bcdb8cfeb96b716f3d8be3e18 [Pos Repl]

* C:\WINDOWS\System32\tapisrv.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll : 249,344 : 07/08/2005 08:28 AM : 1418a3a6e76e5a2e3f5e43866e793a8b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll : 249,344 : 07/08/2005 08:27 AM : fb78839b36025aa286a51289ed28b73e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB893756$\tapisrv.dll : 246,272 : 08/04/2004 08:56 AM : eb4a4187d74a8efdcbea3ea2cb1bdfbd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll : 249,856 : 04/13/2008 08:12 PM : 3cb78c17bb664637787c9a1c98f79c38 [Pos Repl]

* C:\WINDOWS\System32\termsrv.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll : 295,424 : 08/04/2004 08:56 AM : b60c877d16d9c880b952fda04adf16e6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termsrv.dll : 295,424 : 04/13/2008 08:12 PM : ff3477c03be7201c294c35f684b3479f [Pos Repl]

* C:\WINDOWS\System32\upnphost.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB931261\SP2QFE\upnphost.dll : 185,344 : 02/05/2007 03:19 PM : 36aca6cdc19c95ff468a1426eb7f32f0 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll : 185,344 : 02/05/2007 03:17 PM : aca5d98663d879c6baafcea7e2f1b710 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931261$\upnphost.dll : 185,344 : 08/04/2004 03:56 AM : 0546477bde979e33294fe97f6b3de84a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\upnphost.dll : 185,856 : 04/13/2008 08:12 PM : 1ebafeb9a3fbdc41b8d9c7f0f687ad91 [Pos Repl]

* C:\WINDOWS\System32\user32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll : 577,024 : 03/02/2005 01:19 PM : 1800f293bccc8ede8a70e12b88d80036 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll : 578,048 : 03/08/2007 01:48 AM : 7aa4f6c00405dfc4b70ed4214e7d687b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\user32.dll : 577,536 : 03/08/2007 03:36 AM : b409909f6e2e8a7067076ed748abf1e7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB824141$\user32.dll : 528,896 : 11/01/2002 03:26 PM : 68e1f4ef02df52ca9c5e157045d23582 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890859$\user32.dll : 577,024 : 08/04/2004 03:56 AM : c72661f8552ace7c5c85e16a3cf505c4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925902$\user32.dll : 577,024 : 03/02/2005 01:09 PM : de2db164bbb35db061af0997e4499054 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallQ328310$\user32.dll : 560,128 : 08/29/2002 01:00 AM : dd9269230c21ee8fb7fd3fccc3b1cfcb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\user32.dll : 578,560 : 04/13/2008 08:12 PM : b26b135ff1b9f60c9388b4a7d16f600b [Pos Repl]

* C:\WINDOWS\System32\userinit.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\userinit.exe : 24,576 : 08/04/2004 01:56 AM : 39b1ffb03c2296323832acbae50d2aff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\userinit.exe : 26,112 : 04/13/2008 08:12 PM : a93aee1928a9d7ce3e16d24ec7380f89 [Pos Repl]

* C:\WINDOWS\System32\usp10.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406,016 : 04/16/2010 01:29 AM : f8894bcc961d461674002b4bae7aecc1 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\usp10.dll : 406,528 : 08/04/2004 01:56 AM : 2eb58f9dcd6ab320b46744a4ea48b2d2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]

* C:\WINDOWS\System32\UxTheme.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll : 218,624 : 08/04/2004 08:56 AM : 2cde496666a975a2ce8f969f3042c8db [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll : 218,624 : 04/13/2008 08:12 PM : 7a2cc3719b255e6b5d74396183b7715b [Pos Repl]

* C:\WINDOWS\System32\version.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\version.dll : 18,944 : 08/04/2004 08:56 AM : d38408967be738d0c1b47005bce8ceeb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\version.dll : 18,944 : 04/13/2008 08:12 PM : c7ce131408739b0b3a318be2d0032719 [Pos Repl]

* C:\WINDOWS\System32\w32time.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\w32time.dll : 174,592 : 08/04/2004 08:56 AM : 2b281958f5d0cf99ed626e3ef39d5c8d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\w32time.dll : 175,104 : 04/13/2008 08:12 PM : 54af4b1d5459500ef0937f6d33b1914f [Pos Repl]

* C:\WINDOWS\System32\wbem\wmiprvse.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227,840 : 02/06/2009 01:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe : 218,112 : 08/04/2004 08:56 AM : 075ea6c849ab0fe416a3d6dd65c3cf41 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]

* C:\WINDOWS\System32\wdigest.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB904942\SP2QFE\wdigest.dll : 49,152 : 10/26/2005 11:08 PM : c15728ecdfc7cd901a2d6ce89c44fff2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54,272 : 06/25/2009 11:41 AM : d9dcec3fa1b27689fc56e34c38d3f148 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll : 49,152 : 10/26/2005 11:03 PM : 9f33de80b5532856fc396371a4bf9143 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB904942$\wdigest.dll : 49,152 : 08/04/2004 11:56 AM : a8b82c5d30b7ab937e164ab349478fba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49,152 : 04/13/2008 08:12 PM : cefcc6a64983eb8119f3a07a0c1ede30 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdigest.dll : 49,152 : 04/13/2008 08:12 PM : cefcc6a64983eb8119f3a07a0c1ede30 [Pos Repl]

* C:\WINDOWS\System32\wiaservc.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll : 333,824 : 12/19/2006 01:47 PM : d9f097aa3b97034d3358a01b43e635b2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll : 333,824 : 12/19/2006 01:16 PM : b6763f8534ac547cf1af98afdff2edc8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB927802$\wiaservc.dll : 333,312 : 08/04/2004 01:56 AM : d9f6c4f6b1e188adafc42b561d9bc2e6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll : 333,824 : 04/13/2008 08:12 PM : 8bad69cbac032d4bbacfce0306174c30 [Pos Repl]

* C:\WINDOWS\System32\wininet.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll : 919,040 : 06/24/2010 01:24 AM : 60237e50d575fba9bec9bc043f157149 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll : 919,552 : 09/10/2010 01:57 AM : 0555e190dcd06b8998e6ddca42daeb82 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll : 919,552 : 11/05/2010 08:27 PM : 9357c4249f4810fb0e49c13387a8a77c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll : 919,552 : 12/20/2010 06:58 PM : 5504b4ecce892eb82cd2c5fa71940ac1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll : 919,552 : 02/22/2011 06:27 PM : a9fa95f0d7f511959ac721e4843e5967 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll : 919,552 : 04/25/2011 06:09 AM : 7f4f1697001b9e9a7924d219dc215903 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll : 919,552 : 06/23/2011 02:33 PM : 509cf67ae762a38e23a5455a0053853c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll : 919,552 : 08/22/2011 07:47 PM : 19630aebbfaeb06984cab91848270aaf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919,552 : 11/04/2011 03:19 PM : 4e4716caf514717814d07113ad0425b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll : 919,552 : 12/17/2011 02:45 PM : 84a48e9818e8440ddbfd8eec37c8a937 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\wininet.dll : 919,552 : 03/01/2012 02:58 AM : 4ec67fab39f37626ad6d9895fc094abf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\wininet.dll : 920,064 : 05/16/2012 02:06 AM : 553ad35768cd27959391dd5aa82cef6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\wininet.dll : 920,064 : 07/02/2012 01:48 PM : efb2241de3aa6480521a16d0cb67b0ec [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\wininet.dll : 656,896 : 09/29/2004 02:27 PM : 2c07195588d69a067c2afdaa31759295 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB867282\SP2QFE\wininet.dll : 657,920 : 01/27/2005 02:08 AM : a8eac5330876548e9966a7d13025d196 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB883939\SP2QFE\wininet.dll : 658,944 : 05/02/2005 04:57 PM : e1e18136f9dd3df1ad9c82193a5898a6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\wininet.dll : 657,920 : 03/10/2005 04:43 AM : c8663b488996e89a84c3d17c1d12b79e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\wininet.dll : 660,480 : 09/02/2005 07:53 PM : 97a6fd7cafd688cf2c78939ebaf0cd0c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\wininet.dll : 659,456 : 07/02/2005 10:09 PM : 6e533d155b259eb2363d3e04b5be309f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\wininet.dll : 661,504 : 10/20/2005 11:38 PM : af785c4947676a7fc1673fdc5c8d0b5b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll : 666,624 : 04/21/2008 11:24 AM : 26f240c250e5b4b395cb4b178ba75437 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll : 666,624 : 06/23/2008 11:54 AM : 972299b7241ec325d8c7e5638c884925 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\wininet.dll : 666,624 : 08/20/2008 11:58 AM : 94418f53d2612c26dbadc04dafbc197c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll : 827,904 : 08/26/2008 11:08 AM : 77c192fe56a70d7fa0247ba0a6201c32 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\wininet.dll : 667,136 : 10/15/2008 09:04 PM : e8fce58a470999350f64c591557f9e42 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll : 827,904 : 10/16/2008 04:24 PM : 0d5b75171ff51775b630a431b6c667e8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll : 827,904 : 12/20/2008 06:56 PM : 044e0a4e9fe97c0fb9afe9c89e2a82e6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll : 915,456 : 05/13/2009 06:10 AM : c0eb6850c8a02a154281749dc61faf22 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll : 915,456 : 07/03/2009 01:06 PM : 38114dab42fb2eb84d1726c42b8d80c5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll : 916,480 : 08/29/2009 01:01 AM : 972b226bdad71c55f3cc9a72bbf8f1c1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll : 916,480 : 10/29/2009 01:45 AM : 6af52998b90f72ff2325d84d90eda1cc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll : 916,480 : 12/21/2009 02:09 PM : 5e1f666b8955fd77e65d65c4c4d882a3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll : 919,040 : 02/25/2010 02:19 AM : 4458d59f2b0369f4d3b137541d284041 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll : 919,040 : 05/06/2010 02:36 AM : c1490f68b44af8b781f52f12f564625d [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wininet.dll : 666,112 : 02/16/2008 01:32 AM : bb1eacd6ab47e78ebca02eb781550d55 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB834707$\wininet.dll : 656,384 : 08/04/2004 01:56 AM : c0823fc5469663ba63e7db88f9919d70 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB867282$\wininet.dll : 656,896 : 09/29/2004 02:47 PM : cba65b573c66fe23f647ff96e3a10994 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB883939$\wininet.dll : 656,896 : 03/10/2005 02:02 AM : 6f018d6319be4f96426ea829b79e05d5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890923$\wininet.dll : 656,896 : 01/27/2005 02:13 AM : b5e043e440b210014e021b24cf0a72e3 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896688$\wininet.dll : 658,432 : 07/02/2005 10:11 PM : 5b5ff992c0fa762ccf8655fc290e6e52 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB896727$\wininet.dll : 657,920 : 05/02/2005 04:52 PM : 1a078af3f85d10ba56444c23b3a18e74 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB905915$\wininet.dll : 658,432 : 09/02/2005 07:52 PM : af61ebb1f550175eff406d545d6ab086 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB912812$\wininet.dll : 658,432 : 10/20/2005 11:39 PM : e7b27b6b6e06ce34ea019fd8b858c613 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB916281$\wininet.dll : 663,552 : 03/03/2006 10:58 PM : c0845ecbf4f9164e618ee381b79c9032 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB918899$\wininet.dll : 663,552 : 05/10/2006 10:25 AM : d94cffdb53e7ac867438e2dfd50e7cbc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922760$\wininet.dll : 664,576 : 06/23/2006 10:25 AM : 64ce26db72810b30f7855ea51e1df836 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925454$\wininet.dll : 664,576 : 09/14/2006 10:31 AM : d207370287cf769aebebf03837784963 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928090$\wininet.dll : 664,576 : 10/23/2006 10:34 AM : 231ef4179acabe486376b5ca893f1076 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931768$\wininet.dll : 665,088 : 01/04/2007 10:05 AM : 3ffa1573fc274e5aa7467d03941c45ee [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB933566$\wininet.dll : 665,600 : 02/20/2007 10:52 AM : b258c922d22deec880b60720531d7627 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB937143$\wininet.dll : 665,600 : 04/18/2007 10:46 AM : 4261ba03afd659de04f0a17dfbdd454d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB939653$\wininet.dll : 665,600 : 06/26/2007 10:35 AM : e1a3dd68b5380b360a7310a64d9bb188 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB942615$\wininet.dll : 665,600 : 08/22/2007 10:55 AM : a1bc17eb3758d73c3938b2318820f5b4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB944533$\wininet.dll : 666,112 : 10/11/2007 10:57 AM : 80d660a49e0d118144423099b2a9f5da [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB947864$\wininet.dll : 666,112 : 12/06/2007 07:44 PM : 085a7c37f9c6ede1ba870b7dbec06399 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759$\wininet.dll : 666,112 : 04/13/2008 08:12 PM : 7a4f775abb2f1c97def3e73afa2faedd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838$\wininet.dll : 666,112 : 04/21/2008 08:44 AM : 2b0c24aa747a93a28987b6d65a4a74bc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390$\wininet.dll : 666,112 : 06/23/2008 08:09 AM : f12fbb673de9cc802c5dc518fe99aa2f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215$\wininet.dll : 666,112 : 08/20/2008 08:30 AM : 9af5f25124fbdc36e2b510729cba2674 [Pos Repl]
+-> C:\WINDOWS\ie7\wininet.dll : 666,112 : 10/15/2008 09:00 PM : 1576318bf08d28cc61d1278114ad8d5b [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB956390-IE7\wininet.dll : 818,688 : 08/13/2007 07:54 PM : a4a0fc92358f39538a6494c42ef99fe9 [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB958215-IE7\wininet.dll : 826,368 : 08/26/2008 07:24 AM : ef8eba98145bfa44e80d17a3b3453300 [Pos Repl]
+-> C:\WINDOWS\ie7updates\KB961260-IE7\wininet.dll : 826,368 : 10/16/2008 04:38 PM : 6741eaf7b7f110e803a6e38f6e5fa6b0 [Pos Repl]
+-> C:\WINDOWS\ie8\wininet.dll : 826,368 : 12/20/2008 06:15 PM : a82935d32d0672e8ff4e91ae398e901c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll : 916,480 : 05/06/2010 04:41 AM : 2d9c7b010409372c34f725da5cced083 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll : 916,480 : 06/24/2010 04:22 AM : d3deb6b2b424ac93de3801eaeb21a9a5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll : 916,480 : 09/10/2010 04:58 AM : 36fe8abc59aafbe20cbe54bc372f9429 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll : 916,480 : 11/05/2010 08:26 PM : 306a2b05ea9846278113964dc6e2c940 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll : 916,480 : 12/20/2010 06:59 PM : 88014d62b5e3cdb0ac67948d86c926c8 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll : 916,480 : 02/22/2011 06:06 PM : f192d49eefe297fa858b2c774ba2291d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\wininet.dll : 916,480 : 04/25/2011 06:11 AM : cc951c2212a200475a587a440e0aa804 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\wininet.dll : 916,480 : 06/23/2011 02:36 PM : af4eddc6c0446fce5681b5ded52b8f0e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916,480 : 08/22/2011 07:48 PM : 1a377838b4b468e37c3eeb5baa24f925 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\wininet.dll : 916,992 : 11/04/2011 03:20 PM : 552263502ea8c24d301a0c43ff90b3ed [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\wininet.dll : 916,992 : 12/17/2011 02:46 PM : f362d50fbdc6e34918df41bde1770e5c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\wininet.dll : 916,992 : 03/01/2012 02:01 AM : 009e7b4c284f080608d7286484015ee5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\wininet.dll : 916,992 : 05/16/2012 02:08 AM : 6b1774334e2975aa60596e54f5ea1430 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB969897-IE8\wininet.dll : 914,944 : 03/08/2009 02:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB972260-IE8\wininet.dll : 915,456 : 05/13/2009 02:15 AM : 366c72af6970db7bb39ab0142bf09db5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB974455-IE8\wininet.dll : 915,456 : 07/03/2009 01:09 PM : 7e8a47a2e6561274b83e257ce74803fd [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll : 916,480 : 08/29/2009 01:08 AM : cf0a5fe05bf614c24950d8faec1bc309 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll : 916,480 : 10/29/2009 01:45 AM : 75240f6edbce7b85df66874407d38a4f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll : 916,480 : 12/21/2009 02:14 PM : ff4241c74e0c0a5afffe05f584213ecb [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll : 916,480 : 02/25/2010 02:24 AM : 7a42cfed96cda7f2fb1a26d1f9f65775 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wininet.dll : 666,112 : 04/13/2008 08:12 PM : 7a4f775abb2f1c97def3e73afa2faedd [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\SP2GDR\wininet.dll : 826,368 : 08/26/2008 04:24 AM : ef8eba98145bfa44e80d17a3b3453300 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\5d9d48823dca01f9929a959c29f5edc4\SP2QFE\wininet.dll : 827,904 : 08/26/2008 04:08 AM : 77c192fe56a70d7fa0247ba0a6201c32 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\c74979a750f473b6d9d8ef0bba9b356c\SP2GDR\wininet.dll : 826,368 : 10/16/2008 04:38 PM : 6741eaf7b7f110e803a6e38f6e5fa6b0 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\c74979a750f473b6d9d8ef0bba9b356c\SP2QFE\wininet.dll : 827,904 : 10/16/2008 04:24 PM : 0d5b75171ff51775b630a431b6c667e8 [Pos Repl]

* C:\WINDOWS\System32\winlogon.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe : 502,272 : 08/04/2004 06:56 AM : 01c3346c241652f43aed8e2149881bfe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [Pos Repl]

* C:\WINDOWS\System32\ws2_32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll : 82,944 : 08/04/2004 06:56 AM : 2ed0b7f12a60f90092081c50fa0ec2b2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB817778$\ws2_32.dll : 75,264 : 08/29/2002 06:00 AM : 8529c295df59b564d37a73b5629162b1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll : 82,432 : 04/13/2008 08:12 PM : 2ccc474eb85ceaa3e1fa1726580a3e5a [Pos Repl]

* C:\WINDOWS\System32\ws2help.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll : 19,968 : 08/04/2004 06:56 AM : 9beacb911ca61e5881102188ab7fb431 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2help.dll : 19,968 : 04/13/2008 08:12 PM : 9789e95e1d88eeb4b922bf3ea7779c28 [Pos Repl]

* C:\WINDOWS\System32\wscntfy.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe : 13,824 : 08/04/2004 06:56 AM : 49911dd39e023bb6c45e4e436cfbd297 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe : 13,824 : 04/13/2008 08:12 PM : f92e1076c42fcd6db3d72d8cfe9816d5 [Pos Repl]

* C:\WINDOWS\System32\xmlprov.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll : 129,536 : 08/04/2004 06:56 AM : eef46dab68229a14da3d8e73c99e2959 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll : 129,024 : 04/13/2008 08:12 PM : 295d21f14c335b53cb8154e5b1f892b9 [Pos Repl]

* C:\WINDOWS\explorer.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe : 1,033,216 : 06/13/2007 02:26 AM : 7712df0cdde3a5ac89843e61cd5b3658 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\explorer.exe : 1,033,216 : 06/13/2007 06:23 AM : 97bd6515465659ff8f3b7be375b2ea87 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB820291$\explorer.exe : 1,004,032 : 08/29/2002 06:00 AM : a82b28bfc2e4455fe43022a498c0ef0a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB938828$\explorer.exe : 1,032,192 : 08/04/2004 06:56 AM : a0732187050030ae399b241436565e64 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\explorer.exe : 1,033,728 : 04/13/2008 08:12 PM : 12896823fb95bfb3dc9b46bcaedc9923 [Pos Repl]

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost
127.0.0.1 ad.a8.net
127.0.0.1 asy.a8ww.net
127.0.0.1 www.abcsearcher.com #[Spamdexing][Microsoft.Strider]
127.0.0.1 abc-search.info
127.0.0.1 www.abx4.com #[Adware.ABXToolbar]
127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
127.0.0.1 phpadsnew.abac.com
127.0.0.1 a.abnad.net
127.0.0.1 b.abnad.net
127.0.0.1 c.abnad.net #[IE-SpyAd]
127.0.0.1 d.abnad.net
127.0.0.1 e.abnad.net
127.0.0.1 t.abnad.net
127.0.0.1 adv.abv.bg
127.0.0.1 bimg.abv.bg
127.0.0.1 accuserveadsystem.com
127.0.0.1 www.accuserveadsystem.com
127.0.0.1 gtcc1.acecounter.com
127.0.0.1 gtp1.acecounter.com

20 out of 13917 HOSTS entries shown.
Please review HOSTS file for further entries.

Program finished at: 09/20/2012 09:13:28 AM
Execution time: 0 hours(s), 17 minute(s), and 52 seconds(s)

///////////////
Farbar Service Scanner Version: 19-09-2012
Ran by Mike Keon (administrator) on 20-09-2012 at 09:16:49
Running from "C:\Documents and Settings\Mike Keon\Local Settings\Temporary Internet Files\Content.IE5\Z0EHFHWF"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is set to Demand. The default start type is Auto.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
sharedaccess Service is not running. Checking service configuration:
The start type of sharedaccess service is OK.
The ImagePath of sharedaccess service is OK.
The ServiceDll of sharedaccess service is OK.

netman Service is not running. Checking service configuration:
The start type of netman service is OK.
The ImagePath of netman service is OK.
The ServiceDll of netman service is OK.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\WINDOWS\system32\wuauserv.dll".

cryptsvc Service is not running. Checking service configuration:
The start type of cryptsvc service is OK.
The ImagePath of cryptsvc service is OK.
The ServiceDll of cryptsvc service is OK.


Windows Autoupdate Disabled Policy:
============================


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
aswTdi(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x080000000400000001000000020000000300000008000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

#4 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 20 September 2012 - 08:26 AM

Download

TDSSkiller

Launch it.Click on change parameters-Select TDLFS file system

Click on "Scan".Please post the LOG report(log file should be in your C drive)

Do not change the default options on scan results

Download

aswMBR

Launch it, allow it to download latest Avast! virus definitions
Click the "Scan" button to start scan.After scan finishes,click on Save log

Post the log results here

Download

ESET online scanner

Install it

Click on START,it should download the virus definitions
When scan gets completed,click on LIST of found threats

Export the list to desktop,copy the contents of the text file in your reply

#5 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 09:53 AM

09:43:20.0640 0632 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
09:43:21.0062 0632 ============================================================
09:43:21.0062 0632 Current date / time: 2012/09/20 09:43:21.0062
09:43:21.0062 0632 SystemInfo:
09:43:21.0062 0632
09:43:21.0062 0632 OS Version: 5.1.2600 ServicePack: 3.0
09:43:21.0062 0632 Product type: Workstation
09:43:21.0062 0632 ComputerName: JDHOGG
09:43:21.0062 0632 UserName: Mike Keon
09:43:21.0062 0632 Windows directory: C:\WINDOWS
09:43:21.0062 0632 System windows directory: C:\WINDOWS
09:43:21.0062 0632 Processor architecture: Intel x86
09:43:21.0062 0632 Number of processors: 1
09:43:21.0062 0632 Page size: 0x1000
09:43:21.0062 0632 Boot type: Normal boot
09:43:21.0062 0632 ============================================================
09:43:21.0906 0632 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
09:43:21.0906 0632 ============================================================
09:43:21.0906 0632 \Device\Harddisk0\DR0:
09:43:21.0906 0632 MBR partitions:
09:43:21.0906 0632 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x8F8E3DB
09:43:21.0906 0632 \Device\Harddisk0\DR0\Partition2: MBR, Type 0xC, StartLBA 0x8F8E41A, BlocksNum 0x5800A7
09:43:21.0906 0632 ============================================================
09:43:21.0953 0632 C: <-> \Device\Harddisk0\DR0\Partition1
09:43:21.0968 0632 D: <-> \Device\Harddisk0\DR0\Partition2
09:43:21.0984 0632 ============================================================
09:43:21.0984 0632 Initialize success
09:43:21.0984 0632 ============================================================
09:44:09.0203 2836 ============================================================
09:44:09.0203 2836 Scan started
09:44:09.0203 2836 Mode: Manual; TDLFS;
09:44:09.0203 2836 ============================================================
09:44:10.0171 2836 ================ Scan system memory ========================
09:44:10.0171 2836 System memory - ok
09:44:10.0187 2836 ================ Scan services =============================
09:44:10.0390 2836 [ 0352A73CD6B1782EA3ED7A03A8268F55 ] Aavmker4 C:\WINDOWS\system32\drivers\Aavmker4.sys
09:44:10.0406 2836 Aavmker4 - ok
09:44:10.0437 2836 Abiosdsk - ok
09:44:10.0468 2836 abp480n5 - ok
09:44:10.0562 2836 [ 0F2D66D5F08EBE2F77BB904288DCF6F0 ] ac97intc C:\WINDOWS\system32\drivers\ac97intc.sys
09:44:10.0578 2836 ac97intc - ok
09:44:10.0640 2836 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:44:10.0640 2836 ACPI - ok
09:44:10.0703 2836 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
09:44:10.0703 2836 ACPIEC - ok
09:44:10.0765 2836 [ 12E0A4134D5FD9914B965AA5AAA49E8F ] ADPK C:\WINDOWS\system32\Drivers\SQcaptur.sys
09:44:10.0781 2836 ADPK - ok
09:44:10.0796 2836 adpu160m - ok
09:44:10.0828 2836 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
09:44:10.0843 2836 aec - ok
09:44:10.0906 2836 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
09:44:10.0921 2836 AFD - ok
09:44:10.0968 2836 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
09:44:10.0984 2836 agp440 - ok
09:44:11.0015 2836 Aha154x - ok
09:44:11.0031 2836 aic78u2 - ok
09:44:11.0062 2836 aic78xx - ok
09:44:11.0109 2836 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
09:44:11.0125 2836 Alerter - ok
09:44:11.0171 2836 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
09:44:11.0171 2836 ALG - ok
09:44:11.0203 2836 AliIde - ok
09:44:11.0234 2836 amsint - ok
09:44:11.0281 2836 [ 116BFF96077A4A724E0AAB800525CEB5 ] AN983 C:\WINDOWS\system32\DRIVERS\AN983.sys
09:44:11.0281 2836 AN983 - ok
09:44:11.0328 2836 AppMgmt - ok
09:44:11.0359 2836 asc - ok
09:44:11.0390 2836 asc3350p - ok
09:44:11.0421 2836 asc3550 - ok
09:44:11.0546 2836 [ B979979AB8027F7F53FB16EC4229B7DB ] Aspi32 C:\WINDOWS\system32\drivers\Aspi32.sys
09:44:11.0546 2836 Aspi32 - ok
09:44:11.0656 2836 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
09:44:11.0656 2836 aspnet_state - ok
09:44:11.0703 2836 [ F5DC168BF77572D51BE28BA261B30CB4 ] aswFsBlk C:\WINDOWS\system32\drivers\aswFsBlk.sys
09:44:11.0703 2836 aswFsBlk - ok
09:44:11.0750 2836 [ 2B9B1DF809E965EF63402CBBA6DB50AE ] aswMon2 C:\WINDOWS\system32\drivers\aswMon2.sys
09:44:11.0765 2836 aswMon2 - ok
09:44:11.0796 2836 [ B7D5E4486BA658ED08624D8084ABB830 ] aswRdr C:\WINDOWS\system32\drivers\aswRdr.sys
09:44:11.0796 2836 aswRdr - ok
09:44:11.0875 2836 [ 30E45AF8B4D83176CA850FC9699E860B ] aswSnx C:\WINDOWS\system32\drivers\aswSnx.sys
09:44:11.0906 2836 aswSnx - ok
09:44:11.0968 2836 [ F04BDBCB965C05C51F4A7DE7B62063D6 ] aswSP C:\WINDOWS\system32\drivers\aswSP.sys
09:44:11.0984 2836 aswSP - ok
09:44:12.0015 2836 [ DFE9152ABFA89BB8CFDC057409B2D4DA ] aswTdi C:\WINDOWS\system32\drivers\aswTdi.sys
09:44:12.0031 2836 aswTdi - ok
09:44:12.0078 2836 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:44:12.0078 2836 AsyncMac - ok
09:44:12.0125 2836 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
09:44:12.0140 2836 atapi - ok
09:44:12.0171 2836 Atdisk - ok
09:44:12.0250 2836 [ 9643C9AA768257A617A3085F378B14EC ] ati2mtag C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
09:44:12.0296 2836 ati2mtag - ok
09:44:12.0343 2836 [ 0E4BB35C5305099AC82053AC992E3E0E ] ATITool C:\WINDOWS\system32\DRIVERS\ATITool.sys
09:44:12.0343 2836 ATITool - ok
09:44:12.0406 2836 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:44:12.0421 2836 Atmarpc - ok
09:44:12.0468 2836 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
09:44:12.0468 2836 AudioSrv - ok
09:44:12.0515 2836 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
09:44:12.0515 2836 audstub - ok
09:44:12.0625 2836 [ 04AC21E821F259845BD7367CEE057290 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
09:44:12.0625 2836 avast! Antivirus - ok
09:44:12.0671 2836 [ 5D7BE7B19E827125E016325334E58FF1 ] BANTExt C:\WINDOWS\System32\Drivers\BANTExt.sys
09:44:12.0687 2836 BANTExt - ok
09:44:12.0750 2836 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
09:44:12.0750 2836 Beep - ok
09:44:12.0828 2836 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
09:44:12.0843 2836 BITS - ok
09:44:12.0906 2836 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll
09:44:12.0921 2836 Browser - ok
09:44:12.0968 2836 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
09:44:12.0968 2836 cbidf2k - ok
09:44:13.0031 2836 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
09:44:13.0031 2836 CCDECODE - ok
09:44:13.0062 2836 cd20xrnt - ok
09:44:13.0125 2836 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
09:44:13.0125 2836 Cdaudio - ok
09:44:13.0171 2836 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
09:44:13.0171 2836 Cdfs - ok
09:44:13.0234 2836 [ 1EBD6F5F651E9CEC234FCC2757F340C0 ] Cdr4_xp C:\WINDOWS\system32\drivers\Cdr4_xp.sys
09:44:13.0250 2836 Cdr4_xp - ok
09:44:13.0296 2836 [ 6A3694293AB2DFDA983F1FE1D5942E4B ] Cdralw2k C:\WINDOWS\system32\drivers\Cdralw2k.sys
09:44:13.0296 2836 Cdralw2k - ok
09:44:13.0328 2836 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:44:13.0328 2836 Cdrom - ok
09:44:13.0375 2836 [ 7829ABDE24B2CDB4B1E8E7DB1EDC3E9C ] cdudf_xp C:\WINDOWS\system32\drivers\cdudf_xp.sys
09:44:13.0390 2836 cdudf_xp - ok
09:44:13.0421 2836 Changer - ok
09:44:13.0484 2836 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
09:44:13.0484 2836 CiSvc - ok
09:44:13.0515 2836 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
09:44:13.0515 2836 ClipSrv - ok
09:44:13.0593 2836 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
09:44:13.0593 2836 clr_optimization_v2.0.50727_32 - ok
09:44:13.0656 2836 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
09:44:13.0671 2836 clr_optimization_v4.0.30319_32 - ok
09:44:13.0703 2836 CmdIde - ok
09:44:13.0734 2836 COMSysApp - ok
09:44:13.0796 2836 Cpqarray - ok
09:44:13.0859 2836 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
09:44:13.0859 2836 CryptSvc - ok
09:44:13.0890 2836 dac2w2k - ok
09:44:13.0921 2836 dac960nt - ok
09:44:13.0953 2836 [ 12E0A4134D5FD9914B965AA5AAA49E8F ] DCamUSBSQTECH C:\WINDOWS\system32\Drivers\SQcaptur.sys
09:44:13.0968 2836 DCamUSBSQTECH - ok
09:44:14.0062 2836 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
09:44:14.0078 2836 DcomLaunch - ok
09:44:14.0125 2836 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
09:44:14.0125 2836 Dhcp - ok
09:44:14.0171 2836 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
09:44:14.0171 2836 Disk - ok
09:44:14.0203 2836 dmadmin - ok
09:44:14.0328 2836 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
09:44:14.0359 2836 dmboot - ok
09:44:14.0406 2836 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
09:44:14.0406 2836 dmio - ok
09:44:14.0468 2836 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
09:44:14.0468 2836 dmload - ok
09:44:14.0531 2836 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
09:44:14.0546 2836 dmserver - ok
09:44:14.0578 2836 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
09:44:14.0593 2836 DMusic - ok
09:44:14.0656 2836 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
09:44:14.0656 2836 Dnscache - ok
09:44:14.0718 2836 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
09:44:14.0734 2836 Dot3svc - ok
09:44:14.0765 2836 dpti2o - ok
09:44:14.0843 2836 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
09:44:14.0843 2836 drmkaud - ok
09:44:14.0875 2836 [ 02328BC9A8EA0A54A58474B2399A5F3E ] dvd_2K C:\WINDOWS\system32\drivers\dvd_2K.sys
09:44:14.0875 2836 dvd_2K - ok
09:44:14.0906 2836 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
09:44:14.0921 2836 EapHost - ok
09:44:14.0968 2836 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
09:44:14.0968 2836 ERSvc - ok
09:44:15.0031 2836 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
09:44:15.0062 2836 Eventlog - ok
09:44:15.0125 2836 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\System32\es.dll
09:44:15.0140 2836 EventSystem - ok
09:44:15.0187 2836 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
09:44:15.0203 2836 Fastfat - ok
09:44:15.0265 2836 [ 46E9A51153F2EA600B34B5F50CE556E6 ] FastNIC C:\WINDOWS\system32\DRIVERS\FastNIC.sys
09:44:15.0265 2836 FastNIC - ok
09:44:15.0343 2836 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
09:44:15.0359 2836 FastUserSwitchingCompatibility - ok
09:44:15.0390 2836 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
09:44:15.0406 2836 Fdc - ok
09:44:15.0468 2836 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
09:44:15.0468 2836 Fips - ok
09:44:15.0515 2836 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
09:44:15.0531 2836 Flpydisk - ok
09:44:15.0562 2836 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
09:44:15.0578 2836 FltMgr - ok
09:44:15.0671 2836 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
09:44:15.0671 2836 FontCache3.0.0.0 - ok
09:44:15.0718 2836 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:44:15.0718 2836 Fs_Rec - ok
09:44:15.0765 2836 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:44:15.0765 2836 Ftdisk - ok
09:44:15.0828 2836 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:44:15.0828 2836 Gpc - ok
09:44:15.0921 2836 [ 626A24ED1228580B9518C01930936DF9 ] gupdate1c9a4c8ac445586 C:\Program Files\Google\Update\GoogleUpdate.exe
09:44:15.0921 2836 gupdate1c9a4c8ac445586 - ok
09:44:15.0953 2836 [ 626A24ED1228580B9518C01930936DF9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
09:44:15.0953 2836 gupdatem - ok
09:44:16.0015 2836 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
09:44:16.0031 2836 helpsvc - ok
09:44:16.0062 2836 HidServ - ok
09:44:16.0109 2836 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:44:16.0109 2836 HidUsb - ok
09:44:16.0171 2836 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
09:44:16.0171 2836 hkmsvc - ok
09:44:16.0203 2836 hpn - ok
09:44:16.0281 2836 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
09:44:16.0281 2836 HTTP - ok
09:44:16.0343 2836 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
09:44:16.0359 2836 HTTPFilter - ok
09:44:16.0390 2836 i2omgmt - ok
09:44:16.0421 2836 i2omp - ok
09:44:16.0468 2836 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
09:44:16.0468 2836 i8042prt - ok
09:44:16.0515 2836 [ 4EC233EF7C2A2C36FA962DE2AE5D982A ] IdeBusDr C:\WINDOWS\system32\DRIVERS\IdeBusDr.sys
09:44:16.0515 2836 IdeBusDr - ok
09:44:16.0578 2836 [ E1B24E6478AB2E5E09C21D2028E2F208 ] IdeChnDr C:\WINDOWS\system32\DRIVERS\IdeChnDr.sys
09:44:16.0578 2836 IdeChnDr - ok
09:44:16.0703 2836 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
09:44:16.0718 2836 idsvc - ok
09:44:16.0765 2836 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
09:44:16.0765 2836 Imapi - ok
09:44:16.0828 2836 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\System32\imapi.exe
09:44:16.0843 2836 ImapiService - ok
09:44:16.0890 2836 ini910u - ok
09:44:16.0937 2836 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
09:44:16.0937 2836 IntelIde - ok
09:44:17.0000 2836 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:44:17.0000 2836 intelppm - ok
09:44:17.0046 2836 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
09:44:17.0046 2836 Ip6Fw - ok
09:44:17.0109 2836 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:44:17.0125 2836 IpFilterDriver - ok
09:44:17.0156 2836 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:44:17.0156 2836 IpInIp - ok
09:44:17.0203 2836 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:44:17.0218 2836 IpNat - ok
09:44:17.0265 2836 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:44:17.0265 2836 IPSec - ok
09:44:17.0312 2836 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
09:44:17.0312 2836 IRENUM - ok
09:44:17.0375 2836 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:44:17.0375 2836 isapnp - ok
09:44:17.0437 2836 [ 0E410EDC8D0527801B899CF29E60597C ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
09:44:17.0453 2836 JavaQuickStarterService - ok
09:44:17.0484 2836 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:44:17.0484 2836 Kbdclass - ok
09:44:17.0531 2836 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
09:44:17.0546 2836 kmixer - ok
09:44:17.0593 2836 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
09:44:17.0609 2836 KSecDD - ok
09:44:17.0671 2836 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
09:44:17.0687 2836 lanmanserver - ok
09:44:17.0734 2836 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
09:44:17.0750 2836 lanmanworkstation - ok
09:44:17.0781 2836 lbrtfdc - ok
09:44:17.0843 2836 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
09:44:17.0859 2836 LmHosts - ok
09:44:17.0921 2836 [ E7A30B307AC29AFBB993049DF04BB91B ] LNE100 C:\WINDOWS\system32\DRIVERS\LNE100V5.sys
09:44:17.0921 2836 LNE100 - ok
09:44:17.0968 2836 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
09:44:17.0968 2836 Messenger - ok
09:44:18.0015 2836 [ BFFFA2CBB02FEE50BAADBCBFD1124D59 ] mmc_2K C:\WINDOWS\system32\drivers\mmc_2K.sys
09:44:18.0015 2836 mmc_2K - ok
09:44:18.0062 2836 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
09:44:18.0062 2836 mnmdd - ok
09:44:18.0109 2836 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\System32\mnmsrvc.exe
09:44:18.0125 2836 mnmsrvc - ok
09:44:18.0171 2836 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
09:44:18.0171 2836 Modem - ok
09:44:18.0203 2836 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:44:18.0203 2836 Mouclass - ok
09:44:18.0250 2836 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:44:18.0250 2836 mouhid - ok
09:44:18.0281 2836 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
09:44:18.0296 2836 MountMgr - ok
09:44:18.0328 2836 mraid35x - ok
09:44:18.0375 2836 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:44:18.0390 2836 MRxDAV - ok
09:44:18.0468 2836 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:44:18.0500 2836 MRxSmb - ok
09:44:18.0546 2836 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\System32\msdtc.exe
09:44:18.0546 2836 MSDTC - ok
09:44:18.0625 2836 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
09:44:18.0625 2836 Msfs - ok
09:44:18.0656 2836 MSIServer - ok
09:44:18.0718 2836 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:44:18.0718 2836 MSKSSRV - ok
09:44:18.0765 2836 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:44:18.0765 2836 MSPCLOCK - ok
09:44:18.0796 2836 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
09:44:18.0796 2836 MSPQM - ok
09:44:18.0843 2836 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:44:18.0859 2836 mssmbios - ok
09:44:18.0906 2836 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
09:44:18.0906 2836 MSTEE - ok
09:44:18.0968 2836 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
09:44:18.0968 2836 Mup - ok
09:44:19.0015 2836 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
09:44:19.0015 2836 NABTSFEC - ok
09:44:19.0078 2836 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
09:44:19.0093 2836 napagent - ok
09:44:19.0156 2836 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
09:44:19.0156 2836 NDIS - ok
09:44:19.0203 2836 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
09:44:19.0218 2836 NdisIP - ok
09:44:19.0281 2836 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:44:19.0281 2836 NdisTapi - ok
09:44:19.0328 2836 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:44:19.0328 2836 Ndisuio - ok
09:44:19.0359 2836 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:44:19.0375 2836 NdisWan - ok
09:44:19.0421 2836 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
09:44:19.0437 2836 NDProxy - ok
09:44:19.0453 2836 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
09:44:19.0484 2836 NetBIOS - ok
09:44:19.0531 2836 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
09:44:19.0531 2836 NetBT - ok
09:44:19.0593 2836 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
09:44:19.0593 2836 NetDDE - ok
09:44:19.0625 2836 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
09:44:19.0640 2836 NetDDEdsdm - ok
09:44:19.0703 2836 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\System32\lsass.exe
09:44:19.0703 2836 Netlogon - ok
09:44:19.0765 2836 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
09:44:19.0765 2836 Netman - ok
09:44:19.0828 2836 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
09:44:19.0843 2836 NetTcpPortSharing - ok
09:44:19.0906 2836 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
09:44:19.0921 2836 Nla - ok
09:44:19.0968 2836 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
09:44:19.0984 2836 Npfs - ok
09:44:20.0062 2836 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
09:44:20.0078 2836 Ntfs - ok
09:44:20.0125 2836 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\System32\lsass.exe
09:44:20.0125 2836 NtLmSsp - ok
09:44:20.0203 2836 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
09:44:20.0218 2836 NtmsSvc - ok
09:44:20.0265 2836 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
09:44:20.0265 2836 Null - ok
09:44:20.0328 2836 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:44:20.0328 2836 NwlnkFlt - ok
09:44:20.0359 2836 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:44:20.0375 2836 NwlnkFwd - ok
09:44:20.0437 2836 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
09:44:20.0437 2836 Parport - ok
09:44:20.0468 2836 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
09:44:20.0468 2836 PartMgr - ok
09:44:20.0531 2836 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
09:44:20.0546 2836 ParVdm - ok
09:44:20.0593 2836 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
09:44:20.0593 2836 PCI - ok
09:44:20.0625 2836 PCIDump - ok
09:44:20.0656 2836 PCIIde - ok
09:44:20.0703 2836 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
09:44:20.0703 2836 Pcmcia - ok
09:44:20.0734 2836 PDCOMP - ok
09:44:20.0765 2836 PDFRAME - ok
09:44:20.0796 2836 PDRELI - ok
09:44:20.0828 2836 PDRFRAME - ok
09:44:20.0859 2836 perc2 - ok
09:44:20.0890 2836 perc2hib - ok
09:44:21.0000 2836 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
09:44:21.0000 2836 PlugPlay - ok
09:44:21.0031 2836 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\System32\lsass.exe
09:44:21.0046 2836 PolicyAgent - ok
09:44:21.0078 2836 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:44:21.0093 2836 PptpMiniport - ok
09:44:21.0125 2836 [ A32BEBAF723557681BFC6BD93E98BD26 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys
09:44:21.0125 2836 Processor - ok
09:44:21.0156 2836 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
09:44:21.0171 2836 ProtectedStorage - ok
09:44:21.0203 2836 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
09:44:21.0203 2836 PSched - ok
09:44:21.0234 2836 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:44:21.0265 2836 Ptilink - ok
09:44:21.0312 2836 [ B2126C542C7D36FE1879DB31CC47DD1C ] pwd_2k C:\WINDOWS\system32\drivers\pwd_2k.sys
09:44:21.0312 2836 pwd_2k - ok
09:44:21.0343 2836 ql1080 - ok
09:44:21.0375 2836 Ql10wnt - ok
09:44:21.0406 2836 ql12160 - ok
09:44:21.0437 2836 ql1240 - ok
09:44:21.0468 2836 ql1280 - ok
09:44:21.0531 2836 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:44:21.0531 2836 RasAcd - ok
09:44:21.0593 2836 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
09:44:21.0593 2836 RasAuto - ok
09:44:21.0640 2836 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:44:21.0656 2836 Rasl2tp - ok
09:44:21.0703 2836 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
09:44:21.0718 2836 RasMan - ok
09:44:21.0765 2836 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:44:21.0781 2836 RasPppoe - ok
09:44:21.0828 2836 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
09:44:21.0843 2836 Raspti - ok
09:44:21.0890 2836 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:44:21.0906 2836 Rdbss - ok
09:44:21.0968 2836 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:44:21.0968 2836 RDPCDD - ok
09:44:22.0062 2836 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
09:44:22.0062 2836 RDPWD - ok
09:44:22.0109 2836 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
09:44:22.0125 2836 RDSessMgr - ok
09:44:22.0187 2836 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
09:44:22.0187 2836 redbook - ok
09:44:22.0234 2836 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
09:44:22.0250 2836 RemoteAccess - ok
09:44:22.0312 2836 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\System32\locator.exe
09:44:22.0312 2836 RpcLocator - ok
09:44:22.0390 2836 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\system32\rpcss.dll
09:44:22.0406 2836 RpcSs - ok
09:44:22.0468 2836 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\System32\rsvp.exe
09:44:22.0484 2836 RSVP - ok
09:44:22.0546 2836 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
09:44:22.0562 2836 rtl8139 - ok
09:44:22.0609 2836 SABProcEnum - ok
09:44:22.0640 2836 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
09:44:22.0656 2836 SamSs - ok
09:44:22.0703 2836 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
09:44:22.0718 2836 SCardSvr - ok
09:44:22.0765 2836 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
09:44:22.0781 2836 Schedule - ok
09:44:22.0843 2836 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:44:22.0859 2836 Secdrv - ok
09:44:22.0906 2836 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
09:44:22.0906 2836 seclogon - ok
09:44:22.0953 2836 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
09:44:22.0968 2836 SENS - ok
09:44:23.0015 2836 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
09:44:23.0015 2836 serenum - ok
09:44:23.0062 2836 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
09:44:23.0062 2836 Serial - ok
09:44:23.0187 2836 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
09:44:23.0187 2836 Sfloppy - ok
09:44:23.0265 2836 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
09:44:23.0281 2836 SharedAccess - ok
09:44:23.0328 2836 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
09:44:23.0343 2836 ShellHWDetection - ok
09:44:23.0375 2836 Simbad - ok
09:44:23.0421 2836 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
09:44:23.0421 2836 SLIP - ok
09:44:23.0484 2836 Sparrow - ok
09:44:23.0531 2836 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
09:44:23.0531 2836 splitter - ok
09:44:23.0578 2836 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
09:44:23.0593 2836 Spooler - ok
09:44:23.0625 2836 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
09:44:23.0640 2836 sr - ok
09:44:23.0687 2836 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\System32\srsvc.dll
09:44:23.0703 2836 srservice - ok
09:44:23.0765 2836 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
09:44:23.0796 2836 Srv - ok
09:44:23.0843 2836 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
09:44:23.0859 2836 SSDPSRV - ok
09:44:23.0937 2836 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
09:44:23.0953 2836 stisvc - ok
09:44:24.0015 2836 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
09:44:24.0015 2836 streamip - ok
09:44:24.0062 2836 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
09:44:24.0078 2836 swenum - ok
09:44:24.0125 2836 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
09:44:24.0125 2836 swmidi - ok
09:44:24.0156 2836 SwPrv - ok
09:44:24.0203 2836 symc810 - ok
09:44:24.0234 2836 symc8xx - ok
09:44:24.0296 2836 [ B226F8A4D780ACDF76145B58BB791D5B ] symlcbrd C:\WINDOWS\system32\drivers\symlcbrd.sys
09:44:24.0296 2836 symlcbrd - ok
09:44:24.0312 2836 sym_hi - ok
09:44:24.0343 2836 sym_u3 - ok
09:44:24.0390 2836 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
09:44:24.0406 2836 sysaudio - ok
09:44:24.0453 2836 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
09:44:24.0468 2836 SysmonLog - ok
09:44:24.0531 2836 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
09:44:24.0562 2836 TapiSrv - ok
09:44:24.0656 2836 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:44:24.0671 2836 Tcpip - ok
09:44:24.0718 2836 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
09:44:24.0718 2836 TDPIPE - ok
09:44:24.0765 2836 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
09:44:24.0765 2836 TDTCP - ok
09:44:24.0812 2836 [ 12E0A4134D5FD9914B965AA5AAA49E8F ] TEC9120 C:\WINDOWS\system32\Drivers\SQcaptur.sys
09:44:24.0812 2836 TEC9120 - ok
09:44:24.0859 2836 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
09:44:24.0859 2836 TermDD - ok
09:44:24.0953 2836 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
09:44:24.0968 2836 TermService - ok
09:44:25.0015 2836 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
09:44:25.0031 2836 Themes - ok
09:44:25.0062 2836 TosIde - ok
09:44:25.0125 2836 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
09:44:25.0140 2836 TrkWks - ok
09:44:25.0218 2836 [ DCFA39E7B177643D1781FFB416B176F1 ] UdfReadr_xp C:\WINDOWS\system32\drivers\UdfReadr_xp.sys
09:44:25.0218 2836 UdfReadr_xp - ok
09:44:25.0281 2836 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
09:44:25.0281 2836 Udfs - ok
09:44:25.0312 2836 ultra - ok
09:44:25.0406 2836 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
09:44:25.0421 2836 Update - ok
09:44:25.0484 2836 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
09:44:25.0500 2836 upnphost - ok
09:44:25.0546 2836 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
09:44:25.0562 2836 UPS - ok
09:44:25.0609 2836 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:44:25.0609 2836 usbhub - ok
09:44:25.0671 2836 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
09:44:25.0687 2836 usbprint - ok
09:44:25.0718 2836 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:44:25.0734 2836 usbscan - ok
09:44:25.0765 2836 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
09:44:25.0765 2836 usbuhci - ok
09:44:25.0796 2836 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
09:44:25.0796 2836 VgaSave - ok
09:44:25.0828 2836 ViaIde - ok
09:44:25.0859 2836 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
09:44:25.0875 2836 VolSnap - ok
09:44:25.0921 2836 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
09:44:25.0953 2836 VSS - ok
09:44:26.0015 2836 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\System32\w32time.dll
09:44:26.0031 2836 W32Time - ok
09:44:26.0078 2836 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:44:26.0093 2836 Wanarp - ok
09:44:26.0125 2836 WDICA - ok
09:44:26.0171 2836 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
09:44:26.0187 2836 wdmaud - ok
09:44:26.0234 2836 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
09:44:26.0250 2836 WebClient - ok
09:44:26.0375 2836 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
09:44:26.0375 2836 winmgmt - ok
09:44:26.0531 2836 [ 18F347402DA544A780949B8FDF83351B ] WinRM C:\WINDOWS\system32\WsmSvc.dll
09:44:26.0578 2836 WinRM - ok
09:44:26.0671 2836 [ 5B6DA8F4F5047D6DF51E1C38FC57D4D9 ] WMDM PMSP Service C:\WINDOWS\System32\MsPMSPSv.exe
09:44:26.0687 2836 WMDM PMSP Service - ok
09:44:26.0750 2836 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
09:44:26.0750 2836 WmdmPmSN - ok
09:44:26.0828 2836 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\System32\wbem\wmiapsrv.exe
09:44:26.0828 2836 WmiApSrv - ok
09:44:26.0968 2836 [ F74E3D9A7FA9556C3BBB14D4E5E63D3B ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
09:44:27.0015 2836 WMPNetworkSvc - ok
09:44:27.0140 2836 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
09:44:27.0171 2836 WPFFontCache_v0400 - ok
09:44:27.0234 2836 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
09:44:27.0265 2836 wscsvc - ok
09:44:27.0312 2836 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
09:44:27.0312 2836 WSTCODEC - ok
09:44:27.0343 2836 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
09:44:27.0359 2836 wuauserv - ok
09:44:27.0421 2836 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
09:44:27.0437 2836 WudfPf - ok
09:44:27.0484 2836 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
09:44:27.0484 2836 WudfRd - ok
09:44:27.0515 2836 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
09:44:27.0531 2836 WudfSvc - ok
09:44:27.0625 2836 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
09:44:27.0656 2836 WZCSVC - ok
09:44:27.0718 2836 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
09:44:27.0750 2836 xmlprov - ok
09:44:27.0796 2836 ================ Scan global ===============================
09:44:27.0843 2836 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
09:44:27.0906 2836 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
09:44:27.0968 2836 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
09:44:28.0015 2836 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
09:44:28.0031 2836 [Global] - ok
09:44:28.0046 2836 ================ Scan MBR ==================================
09:44:28.0078 2836 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
09:44:28.0281 2836 \Device\Harddisk0\DR0 - ok
09:44:28.0296 2836 ================ Scan VBR ==================================
09:44:28.0296 2836 [ 567527BB0C5C92E50141048A95D88033 ] \Device\Harddisk0\DR0\Partition1
09:44:28.0312 2836 \Device\Harddisk0\DR0\Partition1 - ok
09:44:28.0359 2836 [ 8AA36F3D984CDD9E0F16FD6F99F1D8A2 ] \Device\Harddisk0\DR0\Partition2
09:44:28.0359 2836 \Device\Harddisk0\DR0\Partition2 - ok
09:44:28.0375 2836 ============================================================
09:44:28.0375 2836 Scan finished
09:44:28.0375 2836 ============================================================
09:44:28.0421 2840 Detected object count: 0
09:44:28.0421 2840 Actual detected object count: 0
10:02:07.0218 2704 Deinitialize success

////////////

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-09-20 09:47:52
-----------------------------
09:47:52.656 OS Version: Windows 5.1.2600 Service Pack 3
09:47:52.656 Number of processors: 1 586 0x207
09:47:52.656 ComputerName: JDHOGG UserName:
09:47:53.968 Initialize success
09:47:55.703 AVAST engine defs: 12092000
09:48:13.984 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0
09:48:13.984 Disk 0 Vendor: WDC_WD80 17.0 Size: 76319MB BusType: 3
09:48:14.000 Disk 0 MBR read successfully
09:48:14.000 Disk 0 MBR scan
09:48:14.031 Disk 0 Windows XP default MBR code
09:48:14.031 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 73500 MB offset 63
09:48:14.062 Disk 0 Partition 2 00 0C FAT32 LBA MSDOS5.0 2816 MB offset 150529050
09:48:14.062 Disk 0 scanning sectors +156296385
09:48:14.109 Disk 0 scanning C:\WINDOWS\system32\drivers
09:48:30.906 Service scanning
09:48:45.359 Modules scanning
09:50:48.515 Module: C:\WINDOWS\System32\drivers\dxgthk.sys **SUSPICIOUS**
09:50:49.734 Module: C:\WINDOWS\system32\ntdll.dll **SUSPICIOUS**
09:50:49.734 Disk 0 trace - called modules:
09:50:49.750 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll IdeChnDr.sys
09:50:49.750 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x82f8f030]
09:50:49.750 3 CLASSPNP.SYS[f85f6fd7] -> nt!IofCallDriver -> \Device\00000057[0x82f92f18]
09:50:49.750 5 ACPI.sys[f856d620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0[0x82f92030]
09:50:49.968 AVAST engine scan C:\WINDOWS
09:51:09.187 AVAST engine scan C:\WINDOWS\system32
09:54:27.093 AVAST engine scan C:\WINDOWS\system32\drivers
09:54:44.031 AVAST engine scan C:\Documents and Settings\Mike Keon
09:59:24.421 AVAST engine scan C:\Documents and Settings\All Users
10:00:59.000 Scan finished successfully
10:01:20.515 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Mike Keon\Desktop\MBR.dat"
10:01:20.515 The log file has been saved successfully to "C:\Documents and Settings\Mike Keon\Desktop\aswMBR.txt"


//////

As for ESET, no list was created as it indicated "No Threat Found".

#6 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 20 September 2012 - 09:54 AM

Download

http://www.techspot.com/downloads/4716-malwarebytes-anti-malware.html

Install,update and run a full scan

Click on SHOW results.Select all infections and remove it

Reboot the PC and scan MBAM once in regular mode until you get a clean log

Download

mini toolbox

Checkmark following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size

Click Go and post the result.

Download

FSS

Checkmark all the boxes

Click on "Scan".
Please copy and paste the log to your reply.



Download

adware cleaner

Launch it click on Delete

post the generated log

#7 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 10:17 AM

I already have MBAM 1.65.0.1400 installed. Should I just update it and use it or do you require a fresh copy?

#8 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 20 September 2012 - 10:17 AM

Update it and run a scan

#9 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 06:19 PM

Apologies for the delay and I appreciate your patience.

MBAM full scan picked up nothing. Here's the log.

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Database version: v2012.09.20.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Mike Keon :: JDHOGG [administrator]

9/20/2012 11:21:39 AM
mbam-log-2012-09-20 (11-21-39).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 273434
Time elapsed: 1 hour(s), 15 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

/////

I'll run the next in the sequence as requested now.

#10 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 20 September 2012 - 07:17 PM

///////

Running "minitool box" gives me an error off the top. The program is still running at the "getting the ipconfig..." stage.

Error message reads as follows:

"The application or DLL C:\WINDOWS\system32\ESENT.dll is not a valid Windows image. Please check this against your installation diskette."

It prompts OK to rid of the message and the scan is still running in the background. Hopefully this is what you need. Seems to fly in a loop. Clicking OK gave me the following:

"The application or DLL C:\WINDOWS\system32\rasadhlp.dll is not a valid Windows image. Please check this against your installation diskette."

I have the original legitimate RTM disk as well as one I purchased from Microsoft for XP2 (yes, there was a charge for Canadian users to get the SP2 CD).

Here's the log:

MiniToolBox by Farbar Version: 23-07-2012
Ran by Mike Keon (administrator) on 20-09-2012 at 19:21:43
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================





127.0.0.1 localhost
127.0.0.1 ad.a8.net
127.0.0.1 asy.a8ww.net
127.0.0.1 www.abcsearcher.com 127.0.0.1 abc-search.info
127.0.0.1 www.abx4.com 127.0.0.1 www.acezip.net 127.0.0.1 phpadsnew.abac.com
127.0.0.1 a.abnad.net
127.0.0.1 b.abnad.net
127.0.0.1 c.abnad.net 127.0.0.1 d.abnad.net
127.0.0.1 e.abnad.net
127.0.0.1 t.abnad.net
127.0.0.1 adv.abv.bg
127.0.0.1 bimg.abv.bg
127.0.0.1 accuserveadsystem.com
127.0.0.1 www.accuserveadsystem.com
127.0.0.1 gtcc1.acecounter.com
127.0.0.1 gtp1.acecounter.com
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com
127.0.0.1 ads.active.com

There are 9590 more lines starting with "127.0.0.1"

========================= IP Configuration: ================================



# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection 4"

set address name="Local Area Connection 4" source=dhcp
set dns name="Local Area Connection 4" source=dhcp register=PRIMARY
set wins name="Local Area Connection 4" source=dhcp


popd
# End of interface IP configuration


Server: dns.rnc.net.cable.rogers.com
Address: 64.71.255.198

Name: google.com
Addresses: 74.125.226.34, 74.125.226.37, 74.125.226.35, 74.125.226.36
74.125.226.41, 74.125.226.39, 74.125.226.46, 74.125.226.38, 74.125.226.33
74.125.226.32, 74.125.226.40



Pinging google.com [74.125.226.34] with 32 bytes of data:



Reply from 74.125.226.34: bytes=32 time=27ms TTL=57

Reply from 74.125.226.34: bytes=32 time=28ms TTL=57



Ping statistics for 74.125.226.34:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 27ms, Maximum = 28ms, Average = 27ms

Server: dns.rnc.net.cable.rogers.com
Address: 64.71.255.198

Name: yahoo.com
Addresses: 72.30.38.140, 98.139.183.24, 98.138.253.109



Pinging yahoo.com [98.139.183.24] with 32 bytes of data:



Reply from 98.139.183.24: bytes=32 time=64ms TTL=52

Reply from 98.139.183.24: bytes=32 time=64ms TTL=52



Ping statistics for 98.139.183.24:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 64ms, Maximum = 64ms, Average = 64ms

Server: dns.rnc.net.cable.rogers.com
Address: 64.71.255.198

Name: bleepingcomputer.com
Address: 208.43.87.2



Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:



Reply from 208.43.87.2: Destination host unreachable.

Reply from 208.43.87.2: Destination host unreachable.



Ping statistics for 208.43.87.2:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 12 17 51 f2 16 ...... Linksys LNE100TX(v5) Fast Ethernet Adapter
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 99.246.122.1 99.246.122.100 20
99.246.122.0 255.255.254.0 99.246.122.100 99.246.122.100 20
99.246.122.100 255.255.255.255 127.0.0.1 127.0.0.1 20
99.255.255.255 255.255.255.255 99.246.122.100 99.246.122.100 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
224.0.0.0 240.0.0.0 99.246.122.100 99.246.122.100 20
255.255.255.255 255.255.255.255 99.246.122.100 99.246.122.100 1
Default Gateway: 99.246.122.1
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/17/2012 07:04:00 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/17/2012 07:02:30 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/17/2012 06:59:53 PM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/15/2012 11:25:24 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (09/15/2012 11:25:23 AM) (Source: crypt32) (User: )
Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (09/15/2012 11:22:09 AM) (Source: Application Hang) (User: )
Description: Fault bucket 1180947459.

Error: (09/15/2012 11:21:54 AM) (Source: Application Hang) (User: )
Description: Hanging application iexplore.exe, version 8.0.6001.18702, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (09/02/2012 05:02:30 AM) (Source: JavaQuickStarterService) (User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (08/23/2012 08:30:03 AM) (Source: Application Error) (User: )
Description: Faulting application cardgames.exe, version 1.0.1.0, faulting module cardgames.exe, version 1.0.1.0, fault address 0x003417cd.
Processing media-specific event for [cardgames.exe!ws!]

Error: (08/15/2012 04:04:12 AM) (Source: Application Hang) (User: )
Description: Fault bucket 1180947459.


System errors:
=============
Error: (09/20/2012 07:34:34 PM) (Source: DCOM) (User: JDHOGG)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (09/20/2012 07:34:04 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service terminated with the following error:
%%193

Error: (09/20/2012 07:34:03 PM) (Source: DCOM) (User: JDHOGG)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (09/20/2012 07:33:33 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service terminated with the following error:
%%193

Error: (09/20/2012 07:33:33 PM) (Source: DCOM) (User: JDHOGG)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (09/20/2012 07:33:03 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service terminated with the following error:
%%193

Error: (09/20/2012 07:33:02 PM) (Source: DCOM) (User: JDHOGG)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (09/20/2012 07:32:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service terminated with the following error:
%%193

Error: (09/20/2012 07:32:31 PM) (Source: DCOM) (User: JDHOGG)
Description: The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register with DCOM within the required timeout.

Error: (09/20/2012 07:32:01 PM) (Source: Service Control Manager) (User: )
Description: The Network Connections service terminated with the following error:
%%193


Microsoft Office Sessions:
=========================
Error: (09/17/2012 07:04:00 PM) (Source: JavaQuickStarterService)(User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/17/2012 07:02:30 PM) (Source: JavaQuickStarterService)(User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/17/2012 06:59:53 PM) (Source: JavaQuickStarterService)(User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (09/15/2012 11:25:24 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabA required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (09/15/2012 11:25:23 AM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabA required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Error: (09/15/2012 11:22:09 AM) (Source: Application Hang)(User: )
Description: 1180947459

Error: (09/15/2012 11:21:54 AM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.6001.18702hungapp0.0.0.000000000

Error: (09/02/2012 05:02:30 AM) (Source: JavaQuickStarterService)(User: )
Description: Unable to create JQS API server: bind() failed (Socket error 10050)

Error: (08/23/2012 08:30:03 AM) (Source: Application Error)(User: )
Description: cardgames.exe1.0.1.0cardgames.exe1.0.1.0003417cd

Error: (08/15/2012 04:04:12 AM) (Source: Application Hang)(User: )
Description: 1180947459


=========================== Installed Programs ============================

Adobe Flash Player 11 ActiveX (Version: 11.4.402.265)
Adobe Shockwave Player 11 (Version: 11)
ATI Display Driver
avast! Free Antivirus (Version: 7.0.1466.0)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
Critical Update for Windows Media Player 11 (KB959772)
Easy CD Creator 5 Basic (Version: 5.3.1.154)
EMET (Version: 3.0.0)
Foxit Reader (Version: 3.3.1.518)
Google Advertising Cookie Opt-out (Version: 1.0.0.2)
Google Update Helper (Version: 1.3.21.123)
HighMAT Extension to Microsoft Windows XP CD Writing Wizard (Version: 1.1.1905.1)
HijackThis 1.99.1 (Version: 1.99.1)
Hoyle Card Games 5
Intel Application Accelerator
Java Auto Updater (Version: 2.0.7.1)
Java™ 6 Update 35 (Version: 6.0.350)
Malwarebytes Anti-Malware version 1.65.0.1400 (Version: 1.65.0.1400)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2003 (Version: 2003)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2003 (Version: 11.0.50)
Microsoft Money 2003 System Pack (Version: 11.0.80)
Microsoft National Language Support Downlevel APIs
Microsoft Picture It! Photo 7.0 (Version: 7.0.0.0000)
Microsoft PowerPoint Viewer (Version: 14.0.6029.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft Streets and Trips 2002 (Version: 9.00.17.0200)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Windows Journal Viewer (Version: 1.5.2315.3)
Microsoft Word 2002 (Version: 10.0.6626.0)
Microsoft Works 2003 Setup Launcher
Microsoft Works 7.0 (Version: 07.02.0710.1)
Microsoft Works Suite Add-in for Microsoft Word (Version: 2.0.0.0000)
MSN Music Assistant
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 6.0 Parser (KB933579) (Version: 6.10.1200.0)
My DSC
PowerDVD
Rapport (Version: 3.5.1105.54)
RealPlayer
RealUpgrade 1.0 (Version: 1.0.0)
Rhapsody Player Engine (Version: 1.1.0)
Simply Accounting by Sage 2007 (Version: 2007)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
SpywareBlaster 4.6 (Version: 4.6.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft Windows (KB971513)
Update for Windows Internet Explorer 8 (KB2362765) (Version: 1)
Update for Windows Internet Explorer 8 (KB2447568) (Version: 1)
Update for Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update for Windows Internet Explorer 8 (KB2632503) (Version: 1)
Update for Windows Internet Explorer 8 (KB968220) (Version: 1)
Update for Windows Internet Explorer 8 (KB969497) (Version: 1)
Update for Windows Internet Explorer 8 (KB971180) (Version: 1)
Update for Windows Internet Explorer 8 (KB971930) (Version: 1)
Update for Windows Internet Explorer 8 (KB972636) (Version: 1)
Update for Windows Internet Explorer 8 (KB973874) (Version: 1)
Update for Windows Internet Explorer 8 (KB975364) (Version: 1)
Update for Windows Internet Explorer 8 (KB976662) (Version: 1)
Update for Windows Internet Explorer 8 (KB976749) (Version: 1)
Update for Windows Internet Explorer 8 (KB978506) (Version: 1)
Update for Windows Internet Explorer 8 (KB980182) (Version: 1)
Update for Windows Internet Explorer 8 (KB980302) (Version: 1)
Update for Windows Internet Explorer 8 (KB982632) (Version: 1)
Update for Windows Internet Explorer 8 (KB982664) (Version: 1)
Update for Windows XP (KB2141007) (Version: 1)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2467659) (Version: 1)
Update for Windows XP (KB2492386) (Version: 1)
Update for Windows XP (KB2541763) (Version: 1)
Update for Windows XP (KB2607712) (Version: 1)
Update for Windows XP (KB2616676) (Version: 1)
Update for Windows XP (KB2641690) (Version: 1)
Update for Windows XP (KB2718704) (Version: 1)
Update for Windows XP (KB2736233) (Version: 1)
Update for Windows XP (KB951072-v2) (Version: 2)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB955839) (Version: 1)
Update for Windows XP (KB967715) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB971737) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
WebFldrs XP (Version: 9.50.6513)
Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0017.0)
Windows Genuine Advantage v1.3.0254.0 (Version: 1.3.0254.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Imaging Component (Version: 3.0.0.0)
Windows Internet Explorer 7 (Version: 20070813.185237)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Management Framework Core
Windows Media Connect
Windows Media Format 11 runtime
Windows Messenger 5.1 (Version: 5.1.0701)
Windows Presentation Foundation (Version: 3.0.6920.0)
Windows XP Service Pack 3 (Version: 20080414.031525)
Works Suite OS Pack (Version: 3.0.0.0000)
XML Paper Specification Shared Components Pack 1.0
Yahoo! Internet Mail

========================= Memory info: ===================================

Percentage of memory in use: 67%
Total physical RAM: 511.28 MB
Available physical RAM: 167.14 MB
Total Pagefile: 1248.07 MB
Available Pagefile: 888.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1987.11 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:71.78 GB) (Free:48.98 GB) NTFS
3 Drive d: () (Fixed) (Total:2.74 GB) (Free:0.95 GB) FAT32

========================= Users: ========================================

User accounts for \\JDHOGG

Administrator ASPNET Guest
HelpAssistant Mike Keon SUPPORT_388945a0


**** End of log ****

//////

As soon as I tried to run FSS I received a familiar error re: rasadhlp.dll so I hit OK to get the log

Farbar Service Scanner Version: 19-09-2012
Ran by Mike Keon (administrator) on 20-09-2012 at 20:06:21
Running from "C:\Documents and Settings\Mike Keon\My Documents\My Received Files"
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is set to Demand. The default start type is Auto.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============
sharedaccess Service is not running. Checking service configuration:
The start type of sharedaccess service is OK.
The ImagePath of sharedaccess service is OK.
The ServiceDll of sharedaccess service is OK.

netman Service is not running. Checking service configuration:
The start type of netman service is OK.
The ImagePath of netman service is OK.
The ServiceDll of netman service is OK.


Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is OK.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv: "C:\WINDOWS\system32\wuauserv.dll".

cryptsvc Service is not running. Checking service configuration:
The start type of cryptsvc service is OK.
The ImagePath of cryptsvc service is OK.
The ServiceDll of cryptsvc service is OK.


Windows Autoupdate Disabled Policy:
============================


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
C:\WINDOWS\system32\ipnathlp.dll => MD5 is legit
C:\WINDOWS\system32\netman.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\srsvc.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\sr.sys => MD5 is legit
C:\WINDOWS\system32\wscsvc.dll => MD5 is legit
C:\WINDOWS\system32\wbem\WMIsvc.dll => MD5 is legit
C:\WINDOWS\system32\wuauserv.dll => MD5 is legit
C:\WINDOWS\system32\qmgr.dll => MD5 is legit
C:\WINDOWS\system32\es.dll => MD5 is legit
C:\WINDOWS\system32\cryptsvc.dll => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit

Extra List:
=======
aswTdi(8) Gpc(6) IPSec(4) NetBT(5) PSched(7) Tcpip(3)
0x080000000400000001000000020000000300000008000000050000000600000007000000
IpSec Tag value is correct.

**** End of log ****

/////////

Last stage - Adware Cleaner

Error message as above re: rasadhlp.dll appears. I clicked OK

Scan log as follows:

# AdwCleaner v2.002 - Logfile created 09/20/2012 at 20:16:26
# Updated 16/09/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Mike Keon - JDHOGG
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Mike Keon\My Documents\My Received Files\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Key Found : HKLM\Software\AskBarDis

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [1038 octets] - [20/09/2012 20:16:26]

########## EOF - C:\AdwCleaner[R1].txt - [1098 octets] ##########

#11 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 20 September 2012 - 08:04 PM

C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\services.exe

Copy all these files to desktop

Go to

https://www.virustotal.com/

Click on CHOOSE FILE

Browse to desktop and upload these files one by one and click on SCAN IT

Post the generated report link here

#12 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 21 September 2012 - 04:29 AM

SHA256: 45377cb8e9f0120f836fc8261c711f7dbf7199117afb3652ebf100d5f0429b1e
SHA1: f77a7cd78877527023ebfb35e83b75ef59d3df07
MD5: ed0ef0a136dec83df69f04118870003e
File size: 496.0 KB ( 507904 bytes )
File name: winlogon.exe
File type: Win32 EXE
Detection ratio: 0 / 43
Analysis date: 2012-09-21 09:25:01 UTC ( 0 minutes ago )


========

SHA256: 1e675cb7df214172f7eb0497f7275556038a0d09c6e5a3e6862c5e26885ef455
SHA1: 9d2bf84874abc5b6e9a2744b7865c193c08d362f
MD5: 12896823fb95bfb3dc9b46bcaedc9923
File size: 1009.5 KB ( 1033728 bytes )
File name: explorer.exe
File type: Win32 EXE
Detection ratio: 0 / 43
Analysis date: 2012-09-21 09:22:16 UTC ( 1 minute ago )

=======

SHA256: 2910ebc692d833d949bfd56059e8106d324a276d5f165f874f3fb1b6c613cdd5
SHA1: 49083ae3725a0488e0a8fbbe1335c745f70c4667
MD5: 27c6d03bcdb8cfeb96b716f3d8be3e18
File size: 14.0 KB ( 14336 bytes )
File name: svchost.exe
File type: Win32 EXE
Detection ratio: 0 / 43
Analysis date: 2012-09-21 09:26:34 UTC ( 0 minutes ago )

=======

SHA256: 59c606977db40a3443dff0be2a4c761824881b22c9fdb3d23f6486db580e92a4
SHA1: de3701d2c03d9ae29b2d87eccafbbcadf1bfb7e3
MD5: 65df52f5b8b6e9bbd183505225c37315
File size: 108.0 KB ( 110592 bytes )
File name: services.exe
File type: Win32 EXE
Detection ratio: 0 / 43
Analysis date: 2012-09-21 09:28:23 UTC ( 0 minutes ago )

#13 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 21 September 2012 - 08:48 AM

Download

Windows repair tool

Extract and launch the Repair_Windows.exe file

Click on Start repairs tab-click on Start

check mark following options alone

Reset registry permissions
reset file permissions
Repair WMI
Repair Windows Firewall.
Remove Policies Set By Infections
Repair Winsock & DNS Cache
Repair windows updates


Checkmark Restart System When Finished option
click the Start button

System should restart after repair

Post the new FSS log

#14 Leafer

Leafer
  • Topic Starter

  • Members
  • 29 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Canada
  • Local time:06:17 AM

Posted 21 September 2012 - 09:19 AM

While the windows repair tool was running (stage is at Repair Jobs 1/7) I received a prompt to run a psexec.exe file (Publisher Microsoft). Should I cancel or run?

#15 narenxp

narenxp

  • BC Advisor
  • 16,371 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:17 AM

Posted 21 September 2012 - 09:36 AM

Click YES




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users