Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SAS Infection?


  • Please log in to reply
32 replies to this topic

#1 5Cape5

5Cape5

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 27 October 2012 - 11:31 AM

"";"C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS";"Service function NtTerminateProcess hook -> SASKUTIL.SYS +0xA640";"Object is hidden"
Rootkit Infection

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 27 October 2012 - 09:04 PM

Welcome 5Cape5,Please run these next and post thge logs.

Run RKill....


Download and Run RKill
  • Please download RKill by Grinler from one of the 4 links below and save it to your desktop.

    Link 1
    Link 2
    Link 3
    Link 4

  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
  • Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
  • A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
  • If nothing happens or if the tool does not run, please let me know in your next reply

Do not reboot your computer after running rkill as the malware programs will start again. Or if rebooting is required run it again.


If you continue having problems running rkill.com, you can download iExplore.exe or eXplorer.exe, which are renamed copies of rkill.com, and try them instead.


>>>
Please download TDSSKiller.zip and and extract it.
  • Run TDSSKiller.exe.
  • Click on Change Parameters
  • Put a check in the box of Detect TDLFS file system
  • Click Start scan.
  • When it is finished the utility outputs a list of detected objects with description.
    The utility automatically selects an action (Cure or Delete) for malicious objects.
    The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
  • Let reboot if needed and tell me if the tool needed a reboot.
  • Click on Report and post the contents of the text file that will open.

    Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log has a name like: TDSSKiller.Version_Date_Time_log.txt.

>>>
Please download aswMBR ( 511KB ) to your desktop.
  • Double click the aswMBR.exe icon to run it
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 01:52 PM

Hello, thank you for your help.

As requested.

14:32:21.0646 1840 TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47
14:32:21.0958 1840 ============================================================
14:32:21.0958 1840 Current date / time: 2012/10/28 14:32:21.0958
14:32:21.0958 1840 SystemInfo:
14:32:21.0958 1840
14:32:21.0958 1840 OS Version: 5.1.2600 ServicePack: 3.0
14:32:21.0958 1840 Product type: Workstation
14:32:21.0958 1840 ComputerName: D1BJC6C1
14:32:21.0958 1840 UserName: LJC
14:32:21.0958 1840 Windows directory: C:\WINDOWS
14:32:21.0958 1840 System windows directory: C:\WINDOWS
14:32:21.0958 1840 Processor architecture: Intel x86
14:32:21.0958 1840 Number of processors: 2
14:32:21.0958 1840 Page size: 0x1000
14:32:21.0958 1840 Boot type: Normal boot
14:32:21.0958 1840 ============================================================
14:32:23.0255 1840 Drive \Device\Harddisk0\DR0 - Size: 0x2540BE4000 (149.01 Gb), SectorSize: 0x200, Cylinders: 0x4BFC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:32:23.0286 1840 Drive \Device\Harddisk5\DR8 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
14:32:25.0239 1840 ============================================================
14:32:25.0239 1840 \Device\Harddisk0\DR0:
14:32:25.0239 1840 MBR partitions:
14:32:25.0239 1840 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x139C5, BlocksNum 0x1236AA0D
14:32:25.0239 1840 \Device\Harddisk5\DR8:
14:32:25.0239 1840 MBR partitions:
14:32:25.0239 1840 \Device\Harddisk5\DR8\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C4542
14:32:25.0239 1840 ============================================================
14:32:25.0271 1840 C: <-> \Device\Harddisk0\DR0\Partition1
14:32:25.0302 1840 J: <-> \Device\Harddisk5\DR8\Partition1
14:32:25.0302 1840 ============================================================
14:32:25.0302 1840 Initialize success
14:32:25.0302 1840 ============================================================
14:32:44.0458 5668 ============================================================
14:32:44.0458 5668 Scan started
14:32:44.0458 5668 Mode: Manual; TDLFS;
14:32:44.0458 5668 ============================================================
14:32:45.0974 5668 ================ Scan system memory ========================
14:32:45.0989 5668 System memory - ok
14:32:45.0989 5668 ================ Scan services =============================
14:32:46.0224 5668 Abiosdsk - ok
14:32:46.0286 5668 [ 6ABB91494FE6C59089B9336452AB2EA3 ] abp480n5 C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
14:32:46.0286 5668 abp480n5 - ok
14:32:46.0333 5668 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
14:32:46.0333 5668 ACPI - ok
14:32:46.0380 5668 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
14:32:46.0396 5668 ACPIEC - ok
14:32:46.0427 5668 [ 6D7F09CD92A9FEF3A8EFCE66231FDD79 ] adfs C:\WINDOWS\system32\drivers\adfs.sys
14:32:46.0458 5668 adfs - ok
14:32:46.0583 5668 [ 57A3B9A69F14414ACE12AFD6BA701773 ] Adobe Version Cue CS4 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
14:32:46.0614 5668 Adobe Version Cue CS4 - ok
14:32:46.0646 5668 [ 9A11864873DA202C996558B2106B0BBC ] adpu160m C:\WINDOWS\system32\DRIVERS\adpu160m.sys
14:32:46.0646 5668 adpu160m - ok
14:32:46.0677 5668 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
14:32:46.0693 5668 aec - ok
14:32:46.0739 5668 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
14:32:46.0755 5668 AFD - ok
14:32:46.0786 5668 [ 08FD04AA961BDC77FB983F328334E3D7 ] agp440 C:\WINDOWS\system32\DRIVERS\agp440.sys
14:32:46.0802 5668 agp440 - ok
14:32:46.0802 5668 [ 03A7E0922ACFE1B07D5DB2EEB0773063 ] agpCPQ C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
14:32:46.0818 5668 agpCPQ - ok
14:32:46.0833 5668 [ C23EA9B5F46C7F7910DB3EAB648FF013 ] Aha154x C:\WINDOWS\system32\DRIVERS\aha154x.sys
14:32:46.0849 5668 Aha154x - ok
14:32:46.0864 5668 [ 19DD0FB48B0C18892F70E2E7D61A1529 ] aic78u2 C:\WINDOWS\system32\DRIVERS\aic78u2.sys
14:32:46.0864 5668 aic78u2 - ok
14:32:46.0864 5668 [ B7FE594A7468AA0132DEB03FB8E34326 ] aic78xx C:\WINDOWS\system32\DRIVERS\aic78xx.sys
14:32:46.0880 5668 aic78xx - ok
14:32:46.0927 5668 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll
14:32:46.0943 5668 Alerter - ok
14:32:46.0958 5668 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe
14:32:46.0974 5668 ALG - ok
14:32:47.0036 5668 [ 1140AB9938809700B46BB88E46D72A96 ] AliIde C:\WINDOWS\system32\DRIVERS\aliide.sys
14:32:47.0036 5668 AliIde - ok
14:32:47.0052 5668 [ CB08AED0DE2DD889A8A820CD8082D83C ] alim1541 C:\WINDOWS\system32\DRIVERS\alim1541.sys
14:32:47.0083 5668 alim1541 - ok
14:32:47.0099 5668 [ 95B4FB835E28AA1336CEEB07FD5B9398 ] amdagp C:\WINDOWS\system32\DRIVERS\amdagp.sys
14:32:47.0099 5668 amdagp - ok
14:32:47.0099 5668 [ 79F5ADD8D24BD6893F2903A3E2F3FAD6 ] amsint C:\WINDOWS\system32\DRIVERS\amsint.sys
14:32:47.0114 5668 amsint - ok
14:32:47.0193 5668 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:32:47.0193 5668 Apple Mobile Device - ok
14:32:47.0239 5668 [ D8849F77C0B66226335A59D26CB4EDC6 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
14:32:47.0271 5668 AppMgmt - ok
14:32:47.0286 5668 [ 62D318E9A0C8FC9B780008E724283707 ] asc C:\WINDOWS\system32\DRIVERS\asc.sys
14:32:47.0286 5668 asc - ok
14:32:47.0302 5668 [ 69EB0CC7714B32896CCBFD5EDCBEA447 ] asc3350p C:\WINDOWS\system32\DRIVERS\asc3350p.sys
14:32:47.0318 5668 asc3350p - ok
14:32:47.0333 5668 [ 5D8DE112AA0254B907861E9E9C31D597 ] asc3550 C:\WINDOWS\system32\DRIVERS\asc3550.sys
14:32:47.0333 5668 asc3550 - ok
14:32:47.0380 5668 [ D880831279ED91F9A4190A2DB9539EA9 ] ASCTRM C:\WINDOWS\system32\drivers\ASCTRM.sys
14:32:47.0396 5668 ASCTRM - ok
14:32:47.0536 5668 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
14:32:47.0536 5668 aspnet_state - ok
14:32:47.0568 5668 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:32:47.0583 5668 AsyncMac - ok
14:32:47.0599 5668 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
14:32:47.0599 5668 atapi - ok
14:32:47.0630 5668 Atdisk - ok
14:32:47.0661 5668 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
14:32:47.0677 5668 Atmarpc - ok
14:32:47.0724 5668 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
14:32:47.0724 5668 AudioSrv - ok
14:32:47.0771 5668 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
14:32:47.0786 5668 audstub - ok
14:32:47.0880 5668 [ 6C73D46544DB14128CFFF04B3CB505EA ] AVGIDSAgent C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
14:32:48.0052 5668 Suspicious file (Forged): C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe. Real md5: 6C73D46544DB14128CFFF04B3CB505EA, Fake md5: F6A528DE535396C2FB1A4E3C6F00CEC4
14:32:48.0083 5668 AVGIDSAgent ( ForgedFile.Multi.Generic ) - warning
14:32:48.0083 5668 AVGIDSAgent - detected ForgedFile.Multi.Generic (1)
14:32:48.0114 5668 [ 1074F787080068C71303B61FAE7E7CA4 ] AVGIDSDriver C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys
14:32:48.0130 5668 AVGIDSDriver - ok
14:32:48.0146 5668 [ 61A7E0B02F82CFF3DB2445BBE50B3589 ] AVGIDSFilter C:\WINDOWS\system32\DRIVERS\avgidsfilterx.sys
14:32:48.0161 5668 AVGIDSFilter - ok
14:32:48.0177 5668 [ D63D83659EEDF60B3A3E620281A888E5 ] AVGIDSHX C:\WINDOWS\system32\DRIVERS\avgidshx.sys
14:32:48.0193 5668 AVGIDSHX - ok
14:32:48.0224 5668 [ BAF975B72062F53D327788E99D64197E ] AVGIDSShim C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys
14:32:48.0271 5668 AVGIDSShim - ok
14:32:48.0302 5668 [ DCB09125C8B4766A88C86914B65487C1 ] Avgldx86 C:\WINDOWS\system32\DRIVERS\avgldx86.sys
14:32:48.0318 5668 Avgldx86 - ok
14:32:48.0318 5668 [ CCDD61545AAEA265977E4B1EFDC74E8C ] Avgmfx86 C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
14:32:48.0333 5668 Avgmfx86 - ok
14:32:48.0349 5668 [ 1FD90B28D2C3100BF4500199C8AD6358 ] Avgrkx86 C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
14:32:48.0364 5668 Avgrkx86 - ok
14:32:48.0396 5668 [ C0BC3B2E3FD625E7F55E1FF863E94592 ] Avgtdix C:\WINDOWS\system32\DRIVERS\avgtdix.sys
14:32:48.0411 5668 Avgtdix - ok
14:32:48.0474 5668 [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd C:\Program Files\AVG\AVG2012\avgwdsvc.exe
14:32:48.0474 5668 avgwd - ok
14:32:48.0521 5668 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
14:32:48.0521 5668 Beep - ok
14:32:48.0568 5668 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll
14:32:48.0583 5668 BITS - ok
14:32:48.0661 5668 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
14:32:48.0677 5668 Bonjour Service - ok
14:32:48.0724 5668 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll
14:32:48.0739 5668 Browser - ok
14:32:48.0739 5668 bvrp_pci - ok
14:32:48.0755 5668 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
14:32:48.0771 5668 cbidf - ok
14:32:48.0786 5668 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
14:32:48.0786 5668 cbidf2k - ok
14:32:48.0802 5668 [ F3EC03299634490E97BBCE94CD2954C7 ] cd20xrnt C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
14:32:48.0833 5668 cd20xrnt - ok
14:32:48.0833 5668 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
14:32:48.0849 5668 Cdaudio - ok
14:32:48.0864 5668 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
14:32:48.0880 5668 Cdfs - ok
14:32:48.0911 5668 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
14:32:48.0927 5668 Cdrom - ok
14:32:48.0927 5668 Changer - ok
14:32:48.0958 5668 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe
14:32:48.0974 5668 CiSvc - ok
14:32:48.0989 5668 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
14:32:49.0005 5668 ClipSrv - ok
14:32:49.0036 5668 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:32:49.0068 5668 clr_optimization_v2.0.50727_32 - ok
14:32:49.0161 5668 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:32:49.0177 5668 clr_optimization_v4.0.30319_32 - ok
14:32:49.0208 5668 [ E5DCB56C533014ECBC556A8357C929D5 ] CmdIde C:\WINDOWS\system32\DRIVERS\cmdide.sys
14:32:49.0224 5668 CmdIde - ok
14:32:49.0224 5668 COMSysApp - ok
14:32:49.0239 5668 [ 3EE529119EED34CD212A215E8C40D4B6 ] Cpqarray C:\WINDOWS\system32\DRIVERS\cpqarray.sys
14:32:49.0271 5668 Cpqarray - ok
14:32:49.0286 5668 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
14:32:49.0286 5668 CryptSvc - ok
14:32:49.0333 5668 [ E550E7418984B65A78299D248F0A7F36 ] dac2w2k C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
14:32:49.0333 5668 dac2w2k - ok
14:32:49.0349 5668 [ 683789CAA3864EB46125AE86FF677D34 ] dac960nt C:\WINDOWS\system32\DRIVERS\dac960nt.sys
14:32:49.0349 5668 dac960nt - ok
14:32:49.0396 5668 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
14:32:49.0411 5668 DcomLaunch - ok
14:32:49.0443 5668 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
14:32:49.0443 5668 Dhcp - ok
14:32:49.0458 5668 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
14:32:49.0474 5668 Disk - ok
14:32:49.0521 5668 [ E2D0DE31442390C35E3163C87CB6A9EB ] DLABOIOM C:\WINDOWS\system32\DLA\DLABOIOM.SYS
14:32:49.0536 5668 DLABOIOM - ok
14:32:49.0552 5668 [ D979BEBCF7EDCC9C9EE1857D1A68C67B ] DLACDBHM C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
14:32:49.0552 5668 DLACDBHM - ok
14:32:49.0568 5668 [ 83545593E297F50A8E2524B4C071A153 ] DLADResN C:\WINDOWS\system32\DLA\DLADResN.SYS
14:32:49.0583 5668 DLADResN - ok
14:32:49.0583 5668 DLAIFS_M - ok
14:32:49.0599 5668 [ 0A60A39CC5E767980A31CA5D7238DFA9 ] DLAOPIOM C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
14:32:49.0614 5668 DLAOPIOM - ok
14:32:49.0630 5668 [ 9FE2B72558FC808357F427FD83314375 ] DLAPoolM C:\WINDOWS\system32\DLA\DLAPoolM.SYS
14:32:49.0646 5668 DLAPoolM - ok
14:32:49.0646 5668 [ 7EE0852AE8907689DF25049DCD2342E8 ] DLARTL_N C:\WINDOWS\system32\Drivers\DLARTL_N.SYS
14:32:49.0661 5668 DLARTL_N - ok
14:32:49.0677 5668 [ F08E1DAFAC457893399E03430A6A1397 ] DLAUDFAM C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
14:32:49.0708 5668 DLAUDFAM - ok
14:32:49.0708 5668 [ E7D105ED1E694449D444A9933DF8E060 ] DLAUDF_M C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
14:32:49.0724 5668 DLAUDF_M - ok
14:32:49.0724 5668 dmadmin - ok
14:32:49.0755 5668 [ E8BD266C43CD750CAD9A0F503523FF48 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
14:32:49.0786 5668 Suspicious file (Forged): C:\WINDOWS\system32\drivers\dmboot.sys. Real md5: E8BD266C43CD750CAD9A0F503523FF48, Fake md5: D992FE1274BDE0F84AD826ACAE022A41
14:32:49.0786 5668 dmboot ( ForgedFile.Multi.Generic ) - warning
14:32:49.0786 5668 dmboot - detected ForgedFile.Multi.Generic (1)
14:32:49.0802 5668 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys
14:32:49.0818 5668 dmio - ok
14:32:49.0833 5668 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
14:32:49.0833 5668 dmload - ok
14:32:49.0864 5668 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll
14:32:49.0864 5668 dmserver - ok
14:32:49.0896 5668 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
14:32:49.0896 5668 DMusic - ok
14:32:49.0958 5668 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
14:32:49.0958 5668 Dnscache - ok
14:32:50.0005 5668 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
14:32:50.0021 5668 Dot3svc - ok
14:32:50.0036 5668 [ 40F3B93B4E5B0126F2F5C0A7A5E22660 ] dpti2o C:\WINDOWS\system32\DRIVERS\dpti2o.sys
14:32:50.0052 5668 dpti2o - ok
14:32:50.0068 5668 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
14:32:50.0083 5668 drmkaud - ok
14:32:50.0099 5668 [ FD0F95981FEF9073659D8EC58E40AA3C ] DRVMCDB C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
14:32:50.0099 5668 DRVMCDB - ok
14:32:50.0114 5668 [ B4869D320428CDC5EC4D7F5E808E99B5 ] DRVNDDM C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
14:32:50.0114 5668 DRVNDDM - ok
14:32:50.0193 5668 [ 2AC2372FFAD9ADC85672CC8E8AE14BE9 ] DSproct C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys
14:32:50.0193 5668 DSproct - ok
14:32:50.0224 5668 [ 3FCA03CBCA11269F973B70FA483C88EF ] E100B C:\WINDOWS\system32\DRIVERS\e100b325.sys
14:32:50.0239 5668 E100B - ok
14:32:50.0271 5668 [ 00192F0C612591D585594E9467E6CA8B ] e1express C:\WINDOWS\system32\DRIVERS\e1e5132.sys
14:32:50.0286 5668 e1express - ok
14:32:50.0302 5668 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll
14:32:50.0318 5668 EapHost - ok
14:32:50.0349 5668 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll
14:32:50.0364 5668 ERSvc - ok
14:32:50.0396 5668 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe
14:32:50.0411 5668 Eventlog - ok
14:32:50.0443 5668 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll
14:32:50.0458 5668 EventSystem - ok
14:32:50.0474 5668 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
14:32:50.0489 5668 Fastfat - ok
14:32:50.0536 5668 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
14:32:50.0536 5668 FastUserSwitchingCompatibility - ok
14:32:50.0568 5668 [ E97D6A8684466DF94FF3BC24FB787A07 ] Fax C:\WINDOWS\system32\fxssvc.exe
14:32:50.0583 5668 Fax - ok
14:32:50.0614 5668 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
14:32:50.0630 5668 Fdc - ok
14:32:50.0646 5668 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
14:32:50.0646 5668 Fips - ok
14:32:50.0724 5668 [ 50AEFBE2ED921AE06650183720B6B159 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
14:32:50.0755 5668 Suspicious file (Forged): C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe. Real md5: 50AEFBE2ED921AE06650183720B6B159, Fake md5: 1F63900E2EB00101B9ACA2B7A870704E
14:32:50.0755 5668 FLEXnet Licensing Service ( ForgedFile.Multi.Generic ) - warning
14:32:50.0755 5668 FLEXnet Licensing Service - detected ForgedFile.Multi.Generic (1)
14:32:50.0755 5668 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
14:32:50.0771 5668 Flpydisk - ok
14:32:50.0818 5668 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
14:32:50.0818 5668 FltMgr - ok
14:32:50.0896 5668 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
14:32:50.0911 5668 FontCache3.0.0.0 - ok
14:32:50.0958 5668 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:32:50.0958 5668 Fs_Rec - ok
14:32:51.0036 5668 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
14:32:51.0068 5668 Ftdisk - ok
14:32:51.0130 5668 [ 185ADA973B5020655CEE342059A86CBB ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
14:32:51.0146 5668 GEARAspiWDM - ok
14:32:51.0177 5668 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
14:32:51.0193 5668 Gpc - ok
14:32:51.0224 5668 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
14:32:51.0239 5668 HDAudBus - ok
14:32:51.0349 5668 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
14:32:51.0349 5668 helpsvc - ok
14:32:51.0380 5668 [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ C:\WINDOWS\System32\hidserv.dll
14:32:51.0396 5668 HidServ - ok
14:32:51.0411 5668 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
14:32:51.0443 5668 HidUsb - ok
14:32:51.0474 5668 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
14:32:51.0489 5668 hkmsvc - ok
14:32:51.0489 5668 [ B028377DEA0546A5FCFBA928A8AEFAE0 ] hpn C:\WINDOWS\system32\DRIVERS\hpn.sys
14:32:51.0521 5668 hpn - ok
14:32:51.0552 5668 [ D03D10F7DED688FECF50F8FBF1EA9B8A ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys
14:32:51.0583 5668 HPZid412 - ok
14:32:51.0599 5668 [ 89F41658929393487B6B7D13C8528CE3 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
14:32:51.0599 5668 HPZipr12 - ok
14:32:51.0646 5668 [ ABCB05CCDBF03000354B9553820E39F8 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys
14:32:51.0646 5668 HPZius12 - ok
14:32:51.0724 5668 [ 77E4FF0B73BC0AEAAF39BF0C8104231F ] HSFHWBS2 C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys
14:32:51.0739 5668 HSFHWBS2 - ok
14:32:51.0755 5668 [ E308002F4CAABFDFA7389C2D80ED7C66 ] HSF_DP C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
14:32:51.0943 5668 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\HSF_DP.sys. Real md5: E308002F4CAABFDFA7389C2D80ED7C66, Fake md5: 60E1604729A15EF4A3B05F298427B3B1
14:32:51.0943 5668 HSF_DP ( ForgedFile.Multi.Generic ) - warning
14:32:51.0943 5668 HSF_DP - detected ForgedFile.Multi.Generic (1)
14:32:51.0958 5668 HTCAND32 - ok
14:32:52.0005 5668 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
14:32:52.0021 5668 HTTP - ok
14:32:52.0052 5668 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
14:32:52.0068 5668 HTTPFilter - ok
14:32:52.0099 5668 [ 9368670BD426EBEA5E8B18A62416EC28 ] i2omgmt C:\WINDOWS\system32\drivers\i2omgmt.sys
14:32:52.0114 5668 i2omgmt - ok
14:32:52.0146 5668 [ F10863BF1CCC290BABD1A09188AE49E0 ] i2omp C:\WINDOWS\system32\DRIVERS\i2omp.sys
14:32:52.0161 5668 i2omp - ok
14:32:52.0193 5668 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
14:32:52.0208 5668 i8042prt - ok
14:32:52.0286 5668 [ AE38A12F79A4980DDB88F36514F8A1DA ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
14:32:52.0286 5668 IAANTMON - ok
14:32:52.0318 5668 [ 179DDA94C174667EA806267C8878153C ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
14:32:52.0380 5668 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\igxpmp32.sys. Real md5: 179DDA94C174667EA806267C8878153C, Fake md5: 0674CE8AE167D830B871A99C677C5C59
14:32:52.0380 5668 ialm ( ForgedFile.Multi.Generic ) - warning
14:32:52.0380 5668 ialm - detected ForgedFile.Multi.Generic (1)
14:32:52.0427 5668 [ 997E8F5939F2D12CD9F2E6B395724C16 ] iaStor C:\WINDOWS\system32\drivers\iaStor.sys
14:32:52.0443 5668 iaStor - ok
14:32:52.0505 5668 [ 63D05CE1990B514789C1F9566140D5B0 ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:32:52.0552 5668 Suspicious file (Forged): C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe. Real md5: 63D05CE1990B514789C1F9566140D5B0, Fake md5: C01AC32DC5C03076CFB852CB5DA5229C
14:32:52.0552 5668 idsvc ( ForgedFile.Multi.Generic ) - warning
14:32:52.0552 5668 idsvc - detected ForgedFile.Multi.Generic (1)
14:32:52.0568 5668 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
14:32:52.0583 5668 Imapi - ok
14:32:52.0630 5668 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe
14:32:52.0646 5668 ImapiService - ok
14:32:52.0677 5668 [ 4A40E045FAEE58631FD8D91AFC620719 ] ini910u C:\WINDOWS\system32\DRIVERS\ini910u.sys
14:32:52.0677 5668 ini910u - ok
14:32:52.0693 5668 [ B5466A9250342A7AA0CD1FBA13420678 ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys
14:32:52.0693 5668 IntelIde - ok
14:32:52.0724 5668 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
14:32:52.0739 5668 intelppm - ok
14:32:52.0739 5668 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
14:32:52.0755 5668 Ip6Fw - ok
14:32:52.0771 5668 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:32:52.0786 5668 IpFilterDriver - ok
14:32:52.0786 5668 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
14:32:52.0802 5668 IpInIp - ok
14:32:52.0818 5668 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
14:32:52.0833 5668 IpNat - ok
14:32:52.0864 5668 [ A483AA38D07AEEEFBD875AD8247DB451 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
14:32:52.0896 5668 Suspicious file (Forged): C:\Program Files\iPod\bin\iPodService.exe. Real md5: A483AA38D07AEEEFBD875AD8247DB451, Fake md5: BC0EA61246F8D940FBC5F652D337D6BD
14:32:52.0896 5668 iPod Service ( ForgedFile.Multi.Generic ) - warning
14:32:52.0896 5668 iPod Service - detected ForgedFile.Multi.Generic (1)
14:32:52.0943 5668 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
14:32:52.0958 5668 IPSec - ok
14:32:52.0958 5668 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
14:32:52.0974 5668 IRENUM - ok
14:32:52.0989 5668 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
14:32:53.0005 5668 isapnp - ok
14:32:53.0083 5668 [ 691B9B7C0CC1653732717D292D6B305D ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
14:32:53.0099 5668 JavaQuickStarterService - ok
14:32:53.0114 5668 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
14:32:53.0130 5668 Kbdclass - ok
14:32:53.0146 5668 [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
14:32:53.0177 5668 kbdhid - ok
14:32:53.0193 5668 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
14:32:53.0193 5668 kmixer - ok
14:32:53.0208 5668 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
14:32:53.0224 5668 KSecDD - ok
14:32:53.0239 5668 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
14:32:53.0255 5668 lanmanserver - ok
14:32:53.0286 5668 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
14:32:53.0302 5668 lanmanworkstation - ok
14:32:53.0302 5668 lbrtfdc - ok
14:32:53.0318 5668 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
14:32:53.0333 5668 LmHosts - ok
14:32:53.0396 5668 [ 1BDB34A492109198CAB0575F2743BE70 ] Maxtor Sync Service C:\Program Files\Maxtor\Sync\SyncServices.exe
14:32:53.0411 5668 Maxtor Sync Service - ok
14:32:53.0411 5668 MCSTRM - ok
14:32:53.0474 5668 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
14:32:53.0489 5668 MDM - ok
14:32:53.0521 5668 [ EEAEA6514BA7C9D273B5E87C4E1AAB30 ] mdmxsdk C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
14:32:53.0536 5668 mdmxsdk - ok
14:32:53.0552 5668 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll
14:32:53.0552 5668 Messenger - ok
14:32:53.0599 5668 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
14:32:53.0614 5668 mnmdd - ok
14:32:53.0646 5668 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
14:32:53.0646 5668 mnmsrvc - ok
14:32:53.0708 5668 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
14:32:53.0724 5668 Modem - ok
14:32:53.0755 5668 [ 1992E0D143B09653AB0F9C5E04B0FD65 ] MODEMCSA C:\WINDOWS\system32\drivers\MODEMCSA.sys
14:32:53.0771 5668 MODEMCSA - ok
14:32:53.0802 5668 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
14:32:53.0818 5668 Mouclass - ok
14:32:53.0849 5668 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
14:32:53.0849 5668 mouhid - ok
14:32:53.0864 5668 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
14:32:53.0864 5668 MountMgr - ok
14:32:53.0911 5668 [ 3F4BB95E5A44F3BE34824E8E7CAF0737 ] mraid35x C:\WINDOWS\system32\DRIVERS\mraid35x.sys
14:32:53.0927 5668 mraid35x - ok
14:32:53.0943 5668 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
14:32:53.0974 5668 MRxDAV - ok
14:32:54.0005 5668 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:32:54.0036 5668 MRxSmb - ok
14:32:54.0052 5668 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe
14:32:54.0068 5668 MSDTC - ok
14:32:54.0083 5668 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
14:32:54.0083 5668 Msfs - ok
14:32:54.0083 5668 MSIServer - ok
14:32:54.0114 5668 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:32:54.0114 5668 MSKSSRV - ok
14:32:54.0130 5668 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:32:54.0146 5668 MSPCLOCK - ok
14:32:54.0161 5668 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
14:32:54.0177 5668 MSPQM - ok
14:32:54.0193 5668 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
14:32:54.0208 5668 mssmbios - ok
14:32:54.0224 5668 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
14:32:54.0239 5668 Mup - ok
14:32:54.0271 5668 [ 216AC775320F64DE28CFEB7C179C4FF9 ] MXOPSWD C:\WINDOWS\system32\DRIVERS\mxopswd.sys
14:32:54.0286 5668 MXOPSWD - ok
14:32:54.0333 5668 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll
14:32:54.0364 5668 napagent - ok
14:32:54.0396 5668 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
14:32:54.0427 5668 NDIS - ok
14:32:54.0458 5668 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:32:54.0458 5668 NdisTapi - ok
14:32:54.0474 5668 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:32:54.0489 5668 Ndisuio - ok
14:32:54.0505 5668 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:32:54.0505 5668 NdisWan - ok
14:32:54.0536 5668 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
14:32:54.0536 5668 NDProxy - ok
14:32:54.0583 5668 [ 1352E1648213551923A0A822E441553C ] Netaapl C:\WINDOWS\system32\DRIVERS\netaapl.sys
14:32:54.0614 5668 Netaapl - ok
14:32:54.0614 5668 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
14:32:54.0630 5668 NetBIOS - ok
14:32:54.0646 5668 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
14:32:54.0646 5668 NetBT - ok
14:32:54.0708 5668 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe
14:32:54.0724 5668 NetDDE - ok
14:32:54.0724 5668 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
14:32:54.0724 5668 NetDDEdsdm - ok
14:32:54.0786 5668 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe
14:32:54.0786 5668 Netlogon - ok
14:32:54.0802 5668 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll
14:32:54.0818 5668 Netman - ok
14:32:54.0864 5668 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
14:32:54.0880 5668 NetTcpPortSharing - ok
14:32:54.0927 5668 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll
14:32:54.0943 5668 Nla - ok
14:32:54.0989 5668 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
14:32:54.0989 5668 Npfs - ok
14:32:55.0021 5668 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
14:32:55.0036 5668 Ntfs - ok
14:32:55.0052 5668 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
14:32:55.0052 5668 NtLmSsp - ok
14:32:55.0083 5668 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
14:32:55.0114 5668 NtmsSvc - ok
14:32:55.0146 5668 [ CF7E041663119E09D2E118521ADA9300 ] NuidFltr C:\WINDOWS\system32\DRIVERS\NuidFltr.sys
14:32:55.0161 5668 NuidFltr - ok
14:32:55.0161 5668 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
14:32:55.0193 5668 Null - ok
14:32:55.0208 5668 [ C04FA0CCF740E1920BC7C19CA4F597A4 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
14:32:55.0271 5668 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\nv4_mini.sys. Real md5: C04FA0CCF740E1920BC7C19CA4F597A4, Fake md5: 2B298519EDBFCF451D43E0F1E8F1006D
14:32:55.0286 5668 nv ( ForgedFile.Multi.Generic ) - warning
14:32:55.0286 5668 nv - detected ForgedFile.Multi.Generic (1)
14:32:55.0349 5668 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
14:32:55.0364 5668 NwlnkFlt - ok
14:32:55.0380 5668 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
14:32:55.0380 5668 NwlnkFwd - ok
14:32:55.0411 5668 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:32:55.0427 5668 ose - ok
14:32:55.0474 5668 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
14:32:55.0474 5668 Parport - ok
14:32:55.0489 5668 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
14:32:55.0489 5668 PartMgr - ok
14:32:55.0505 5668 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
14:32:55.0505 5668 ParVdm - ok
14:32:55.0521 5668 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
14:32:55.0521 5668 PCI - ok
14:32:55.0536 5668 PCIDump - ok
14:32:55.0568 5668 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
14:32:55.0583 5668 PCIIde - ok
14:32:55.0614 5668 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
14:32:55.0614 5668 Pcmcia - ok
14:32:55.0614 5668 PDCOMP - ok
14:32:55.0630 5668 PDFRAME - ok
14:32:55.0630 5668 PDRELI - ok
14:32:55.0646 5668 PDRFRAME - ok
14:32:55.0677 5668 [ 6C14B9C19BA84F73D3A86DBA11133101 ] perc2 C:\WINDOWS\system32\DRIVERS\perc2.sys
14:32:55.0693 5668 perc2 - ok
14:32:55.0693 5668 [ F50F7C27F131AFE7BEBA13E14A3B9416 ] perc2hib C:\WINDOWS\system32\DRIVERS\perc2hib.sys
14:32:55.0693 5668 perc2hib - ok
14:32:55.0739 5668 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe
14:32:55.0739 5668 PlugPlay - ok
14:32:55.0786 5668 [ 2D091A99624FB9E7EEF0A86D872EC0C3 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe
14:32:55.0786 5668 Pml Driver HPZ12 - ok
14:32:55.0802 5668 [ 3B6973D60BDE757C53BB76842D31318E ] Point32 C:\WINDOWS\system32\DRIVERS\point32.sys
14:32:55.0818 5668 Point32 - ok
14:32:55.0818 5668 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
14:32:55.0833 5668 PolicyAgent - ok
14:32:55.0833 5668 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:32:55.0864 5668 PptpMiniport - ok
14:32:55.0864 5668 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
14:32:55.0864 5668 ProtectedStorage - ok
14:32:55.0896 5668 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
14:32:55.0896 5668 PSched - ok
14:32:55.0911 5668 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
14:32:55.0911 5668 Ptilink - ok
14:32:55.0943 5668 [ 1962166E0CEB740704F30FA55AD3D509 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
14:32:55.0974 5668 PxHelp20 - ok
14:32:56.0021 5668 [ 0A63FB54039EB5662433CABA3B26DBA7 ] ql1080 C:\WINDOWS\system32\DRIVERS\ql1080.sys
14:32:56.0036 5668 ql1080 - ok
14:32:56.0052 5668 [ 6503449E1D43A0FF0201AD5CB1B8C706 ] Ql10wnt C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
14:32:56.0068 5668 Ql10wnt - ok
14:32:56.0083 5668 [ 156ED0EF20C15114CA097A34A30D8A01 ] ql12160 C:\WINDOWS\system32\DRIVERS\ql12160.sys
14:32:56.0099 5668 ql12160 - ok
14:32:56.0099 5668 [ 70F016BEBDE6D29E864C1230A07CC5E6 ] ql1240 C:\WINDOWS\system32\DRIVERS\ql1240.sys
14:32:56.0114 5668 ql1240 - ok
14:32:56.0114 5668 [ 907F0AEEA6BC451011611E732BD31FCF ] ql1280 C:\WINDOWS\system32\DRIVERS\ql1280.sys
14:32:56.0130 5668 ql1280 - ok
14:32:56.0146 5668 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:32:56.0146 5668 RasAcd - ok
14:32:56.0193 5668 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll
14:32:56.0208 5668 RasAuto - ok
14:32:56.0208 5668 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:32:56.0224 5668 Rasl2tp - ok
14:32:56.0286 5668 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll
14:32:56.0286 5668 RasMan - ok
14:32:56.0286 5668 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:32:56.0318 5668 RasPppoe - ok
14:32:56.0318 5668 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
14:32:56.0318 5668 Raspti - ok
14:32:56.0349 5668 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:32:56.0364 5668 Rdbss - ok
14:32:56.0380 5668 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
14:32:56.0380 5668 RDPCDD - ok
14:32:56.0396 5668 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
14:32:56.0411 5668 rdpdr - ok
14:32:56.0443 5668 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
14:32:56.0458 5668 RDPWD - ok
14:32:56.0489 5668 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
14:32:56.0505 5668 RDSessMgr - ok
14:32:56.0552 5668 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
14:32:56.0583 5668 redbook - ok
14:32:56.0614 5668 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
14:32:56.0614 5668 RemoteAccess - ok
14:32:56.0646 5668 [ 5B19B557B0C188210A56A6B699D90B8F ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
14:32:56.0646 5668 RemoteRegistry - ok
14:32:56.0693 5668 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe
14:32:56.0708 5668 RpcLocator - ok
14:32:56.0755 5668 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\System32\rpcss.dll
14:32:56.0771 5668 RpcSs - ok
14:32:56.0818 5668 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe
14:32:56.0833 5668 RSVP - ok
14:32:56.0849 5668 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe
14:32:56.0849 5668 SamSs - ok
14:32:56.0880 5668 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
14:32:56.0880 5668 SCardSvr - ok
14:32:56.0911 5668 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll
14:32:56.0911 5668 Schedule - ok
14:32:56.0974 5668 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
14:32:56.0974 5668 Secdrv - ok
14:32:57.0005 5668 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll
14:32:57.0021 5668 seclogon - ok
14:32:57.0036 5668 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll
14:32:57.0036 5668 SENS - ok
14:32:57.0083 5668 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
14:32:57.0099 5668 serenum - ok
14:32:57.0130 5668 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
14:32:57.0146 5668 Serial - ok
14:32:57.0177 5668 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
14:32:57.0193 5668 Sfloppy - ok
14:32:57.0239 5668 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
14:32:57.0255 5668 SharedAccess - ok
14:32:57.0286 5668 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:32:57.0286 5668 ShellHWDetection - ok
14:32:57.0286 5668 Simbad - ok
14:32:57.0333 5668 [ 6B33D0EBD30DB32E27D1D78FE946A754 ] sisagp C:\WINDOWS\system32\DRIVERS\sisagp.sys
14:32:57.0349 5668 sisagp - ok
14:32:57.0411 5668 [ 83C0F71F86D3BDAF915685F3D568B20E ] Sparrow C:\WINDOWS\system32\DRIVERS\sparrow.sys
14:32:57.0427 5668 Sparrow - ok
14:32:57.0443 5668 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
14:32:57.0458 5668 splitter - ok
14:32:57.0505 5668 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
14:32:57.0505 5668 Spooler - ok
14:32:57.0568 5668 [ 777115C9CC675BD98127660712D2F784 ] sprtsvc_DellSupportCenter C:\Program Files\Dell Support Center\bin\sprtsvc.exe
14:32:57.0568 5668 sprtsvc_DellSupportCenter - ok
14:32:57.0614 5668 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
14:32:57.0630 5668 sr - ok
14:32:57.0646 5668 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll
14:32:57.0661 5668 srservice - ok
14:32:57.0724 5668 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
14:32:57.0739 5668 Srv - ok
14:32:57.0786 5668 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
14:32:57.0786 5668 SSDPSRV - ok
14:32:57.0818 5668 [ 571BC278D213A22168631A3F0D5C9167 ] STHDA C:\WINDOWS\system32\drivers\sthda.sys
14:32:57.0880 5668 Suspicious file (Forged): C:\WINDOWS\system32\drivers\sthda.sys. Real md5: 571BC278D213A22168631A3F0D5C9167, Fake md5: 797FCC1D859B203958E915BB82528DA9
14:32:57.0880 5668 STHDA ( ForgedFile.Multi.Generic ) - warning
14:32:57.0880 5668 STHDA - detected ForgedFile.Multi.Generic (1)
14:32:57.0927 5668 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll
14:32:57.0943 5668 stisvc - ok
14:32:57.0943 5668 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
14:32:57.0958 5668 swenum - ok
14:32:57.0989 5668 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
14:32:58.0005 5668 swmidi - ok
14:32:58.0005 5668 SwPrv - ok
14:32:58.0036 5668 [ 1FF3217614018630D0A6758630FC698C ] symc810 C:\WINDOWS\system32\DRIVERS\symc810.sys
14:32:58.0068 5668 symc810 - ok
14:32:58.0083 5668 [ 070E001D95CF725186EF8B20335F933C ] symc8xx C:\WINDOWS\system32\DRIVERS\symc8xx.sys
14:32:58.0083 5668 symc8xx - ok
14:32:58.0099 5668 [ 80AC1C4ABBE2DF3B738BF15517A51F2C ] sym_hi C:\WINDOWS\system32\DRIVERS\sym_hi.sys
14:32:58.0114 5668 sym_hi - ok
14:32:58.0130 5668 [ BF4FAB949A382A8E105F46EBB4937058 ] sym_u3 C:\WINDOWS\system32\DRIVERS\sym_u3.sys
14:32:58.0146 5668 sym_u3 - ok
14:32:58.0177 5668 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
14:32:58.0193 5668 sysaudio - ok
14:32:58.0208 5668 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
14:32:58.0224 5668 SysmonLog - ok
14:32:58.0255 5668 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
14:32:58.0271 5668 TapiSrv - ok
14:32:58.0318 5668 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:32:58.0349 5668 Tcpip - ok
14:32:58.0396 5668 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
14:32:58.0396 5668 TDPIPE - ok
14:32:58.0411 5668 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
14:32:58.0411 5668 TDTCP - ok
14:32:58.0443 5668 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
14:32:58.0443 5668 TermDD - ok
14:32:58.0458 5668 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll
14:32:58.0474 5668 TermService - ok
14:32:58.0489 5668 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll
14:32:58.0489 5668 Themes - ok
14:32:58.0536 5668 [ DB7205804759FF62C34E3EFD8A4CC76A ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
14:32:58.0552 5668 TlntSvr - ok
14:32:58.0568 5668 [ F2790F6AF01321B172AA62F8E1E187D9 ] TosIde C:\WINDOWS\system32\DRIVERS\toside.sys
14:32:58.0583 5668 TosIde - ok
14:32:58.0614 5668 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll
14:32:58.0614 5668 TrkWks - ok
14:32:58.0661 5668 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
14:32:58.0661 5668 Udfs - ok
14:32:58.0708 5668 [ 1B698A51CD528D8DA4FFAED66DFC51B9 ] ultra C:\WINDOWS\system32\DRIVERS\ultra.sys
14:32:58.0724 5668 ultra - ok
14:32:58.0771 5668 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
14:32:58.0786 5668 Update - ok
14:32:58.0849 5668 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll
14:32:58.0864 5668 upnphost - ok
14:32:58.0927 5668 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe
14:32:58.0943 5668 UPS - ok
14:32:59.0005 5668 [ 73B41F4EAD65F355962168D766AF0F2E ] USBAAPL C:\WINDOWS\system32\Drivers\usbaapl.sys
14:32:59.0021 5668 USBAAPL - ok
14:32:59.0068 5668 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
14:32:59.0083 5668 usbccgp - ok
14:32:59.0114 5668 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
14:32:59.0114 5668 usbehci - ok
14:32:59.0146 5668 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
14:32:59.0161 5668 usbhub - ok
14:32:59.0193 5668 [ A717C8721046828520C9EDF31288FC00 ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys
14:32:59.0193 5668 usbprint - ok
14:32:59.0224 5668 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
14:32:59.0239 5668 usbscan - ok
14:32:59.0255 5668 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
14:32:59.0271 5668 USBSTOR - ok
14:32:59.0286 5668 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
14:32:59.0286 5668 usbuhci - ok
14:32:59.0302 5668 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
14:32:59.0302 5668 VgaSave - ok
14:32:59.0333 5668 [ 754292CE5848B3738281B4F3607EAEF4 ] viaagp C:\WINDOWS\system32\DRIVERS\viaagp.sys
14:32:59.0349 5668 viaagp - ok
14:32:59.0364 5668 [ 3B3EFCDA263B8AC14FDF9CBDD0791B2E ] ViaIde C:\WINDOWS\system32\DRIVERS\viaide.sys
14:32:59.0380 5668 ViaIde - ok
14:32:59.0411 5668 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
14:32:59.0427 5668 VolSnap - ok
14:32:59.0474 5668 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe
14:32:59.0505 5668 VSS - ok
14:32:59.0536 5668 [ 54AF4B1D5459500EF0937F6D33B1914F ] w32time C:\WINDOWS\system32\w32time.dll
14:32:59.0536 5668 w32time - ok
14:32:59.0568 5668 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:32:59.0583 5668 Wanarp - ok
14:32:59.0583 5668 wanatw - ok
14:32:59.0630 5668 [ D918617B46457B9AC28027722E30F647 ] Wdf01000 C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
14:32:59.0646 5668 Wdf01000 - ok
14:32:59.0661 5668 WDICA - ok
14:32:59.0693 5668 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
14:32:59.0708 5668 wdmaud - ok
14:32:59.0755 5668 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll
14:32:59.0771 5668 WebClient - ok
14:32:59.0786 5668 [ 5B6FCD63A3A9341E9117CA1F414B880C ] winachsf C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
14:32:59.0896 5668 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys. Real md5: 5B6FCD63A3A9341E9117CA1F414B880C, Fake md5: F59ED5A43B988A18EF582BB07B2327A7
14:32:59.0896 5668 winachsf ( ForgedFile.Multi.Generic ) - warning
14:32:59.0896 5668 winachsf - detected ForgedFile.Multi.Generic (1)
14:32:59.0958 5668 [ F45DD1E1365D857DD08BC23563370D0E ] WinDefend C:\Program Files\Windows Defender\MsMpEng.exe
14:32:59.0958 5668 WinDefend - ok
14:33:00.0052 5668 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
14:33:00.0068 5668 winmgmt - ok
14:33:00.0114 5668 [ DAD469FA6BD22247204906A34A0B0974 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
14:33:00.0208 5668 Suspicious file (Forged): C:\WINDOWS\system32\WsmSvc.dll. Real md5: DAD469FA6BD22247204906A34A0B0974, Fake md5: 18F347402DA544A780949B8FDF83351B
14:33:00.0208 5668 WinRM ( ForgedFile.Multi.Generic ) - warning
14:33:00.0208 5668 WinRM - detected ForgedFile.Multi.Generic (1)
14:33:00.0271 5668 [ 1FA802825542186C1976D204754A4124 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
14:33:00.0333 5668 Suspicious file (Forged): C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE. Real md5: 1FA802825542186C1976D204754A4124, Fake md5: 5144AE67D60EC653F97DDF3FEED29E77
14:33:00.0333 5668 wlidsvc ( ForgedFile.Multi.Generic ) - warning
14:33:00.0333 5668 wlidsvc - detected ForgedFile.Multi.Generic (1)
14:33:00.0364 5668 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
14:33:00.0380 5668 WmdmPmSN - ok
14:33:00.0380 5668 [ F28F075EE30FD329D97D9AA731EFE1C5 ] Wmi C:\WINDOWS\System32\advapi32.dll
14:33:00.0411 5668 Suspicious file (Forged): C:\WINDOWS\System32\advapi32.dll. Real md5: F28F075EE30FD329D97D9AA731EFE1C5, Fake md5: E76F8807070ED04E7408A86D6D3A6137
14:33:00.0411 5668 Wmi ( ForgedFile.Multi.Generic ) - warning
14:33:00.0411 5668 Wmi - detected ForgedFile.Multi.Generic (1)
14:33:00.0458 5668 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
14:33:00.0474 5668 WmiApSrv - ok
14:33:00.0521 5668 [ F24B2C2AC4AF2B1A19C42D3415CCA040 ] WMPNetworkSvc C:\Program Files\Windows Media Player\WMPNetwk.exe
14:33:00.0583 5668 Suspicious file (Forged): C:\Program Files\Windows Media Player\WMPNetwk.exe. Real md5: F24B2C2AC4AF2B1A19C42D3415CCA040, Fake md5: F74E3D9A7FA9556C3BBB14D4E5E63D3B
14:33:00.0583 5668 WMPNetworkSvc ( ForgedFile.Multi.Generic ) - warning
14:33:00.0583 5668 WMPNetworkSvc - detected ForgedFile.Multi.Generic (1)
14:33:00.0614 5668 [ CF4DEF1BF66F06964DC0D91844239104 ] WpdUsb C:\WINDOWS\system32\Drivers\wpdusb.sys
14:33:00.0614 5668 WpdUsb - ok
14:33:00.0724 5668 [ 4FB6CD0265037B5D8B86CCF770CFB25A ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
14:33:00.0771 5668 Suspicious file (Forged): C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe. Real md5: 4FB6CD0265037B5D8B86CCF770CFB25A, Fake md5: DCF3E3EDF5109EE8BC02FE6E1F045795
14:33:00.0786 5668 WPFFontCache_v0400 ( ForgedFile.Multi.Generic ) - warning
14:33:00.0786 5668 WPFFontCache_v0400 - detected ForgedFile.Multi.Generic (1)
14:33:00.0849 5668 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
14:33:00.0864 5668 wscsvc - ok
14:33:00.0864 5668 WSearch - ok
14:33:00.0896 5668 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll
14:33:00.0896 5668 wuauserv - ok
14:33:00.0958 5668 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
14:33:00.0974 5668 WudfPf - ok
14:33:01.0021 5668 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
14:33:01.0052 5668 WudfRd - ok
14:33:01.0083 5668 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
14:33:01.0083 5668 WudfSvc - ok
14:33:01.0146 5668 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
14:33:01.0146 5668 WZCSVC - ok
14:33:01.0193 5668 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
14:33:01.0193 5668 xmlprov - ok
14:33:01.0193 5668 yeddef - ok
14:33:01.0208 5668 ================ Scan global ===============================
14:33:01.0255 5668 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
14:33:01.0286 5668 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
14:33:01.0318 5668 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
14:33:01.0333 5668 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
14:33:01.0333 5668 [Global] - ok
14:33:01.0349 5668 ================ Scan MBR ==================================
14:33:01.0349 5668 [ 5CB90281D1A59B251F6603134774EEC3 ] \Device\Harddisk0\DR0
14:33:01.0739 5668 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
14:33:01.0739 5668 \Device\Harddisk0\DR0 - detected TDSS File System (1)
14:33:01.0896 5668 [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk5\DR8
14:33:02.0505 5668 \Device\Harddisk5\DR8 - ok
14:33:02.0505 5668 ================ Scan VBR ==================================
14:33:02.0505 5668 [ B151E45BB5B4C3FCE51532AE7D97371A ] \Device\Harddisk0\DR0\Partition1
14:33:02.0521 5668 \Device\Harddisk0\DR0\Partition1 - ok
14:33:02.0521 5668 [ 6690AF00A41DD4ECA997E0D27F8F024F ] \Device\Harddisk5\DR8\Partition1
14:33:02.0521 5668 \Device\Harddisk5\DR8\Partition1 - ok
14:33:02.0521 5668 ============================================================
14:33:02.0521 5668 Scan finished
14:33:02.0521 5668 ============================================================
14:33:02.0536 3432 Detected object count: 16
14:33:02.0536 3432 Actual detected object count: 16
14:33:41.0708 3432 AVGIDSAgent ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0708 3432 AVGIDSAgent ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0708 3432 dmboot ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0708 3432 dmboot ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0708 3432 FLEXnet Licensing Service ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0708 3432 FLEXnet Licensing Service ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0708 3432 HSF_DP ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0708 3432 HSF_DP ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0708 3432 ialm ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0708 3432 ialm ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0724 3432 idsvc ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0724 3432 idsvc ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0724 3432 iPod Service ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0724 3432 iPod Service ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0724 3432 nv ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0724 3432 nv ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0724 3432 STHDA ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0724 3432 STHDA ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0724 3432 winachsf ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0724 3432 winachsf ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 WinRM ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0739 3432 WinRM ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 wlidsvc ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0739 3432 wlidsvc ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 Wmi ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0739 3432 Wmi ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 WMPNetworkSvc ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0739 3432 WMPNetworkSvc ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 WPFFontCache_v0400 ( ForgedFile.Multi.Generic ) - skipped by user
14:33:41.0739 3432 WPFFontCache_v0400 ( ForgedFile.Multi.Generic ) - User select action: Skip
14:33:41.0739 3432 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
14:33:41.0739 3432 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
14:46:26.0005 4180 Deinitialize success
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-10-28 14:39:15
-----------------------------
14:39:15.161 OS Version: Windows 5.1.2600 Service Pack 3
14:39:15.161 Number of processors: 2 586 0x407
14:39:15.161 ComputerName: D1BJC6C1 UserName: LJC
14:39:17.489 Initialize success
14:39:31.271 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2
14:39:31.271 Disk 0 Vendor: SAMSUNG_ ZM10 Size: 152587MB BusType: 3
14:39:31.271 Disk 5 \Device\Harddisk5\DR8 -> \Device\0000007a
14:39:31.271 Disk 5 Vendor: Size: 152587MB BusType: 0
14:39:31.302 Disk 0 MBR read successfully
14:39:31.302 Disk 0 MBR scan
14:39:31.302 Disk 0 unknown MBR code
14:39:31.302 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 39 MB offset 63
14:39:31.318 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 149205 MB offset 80325
14:39:31.333 Disk 0 Partition 3 00 DB CP/M / CTOS Dell 8.0 3341 MB offset 305652690
14:39:31.333 Disk 0 scanning sectors +312496380
14:39:31.396 Disk 0 scanning C:\WINDOWS\system32\drivers
14:39:39.161 Service scanning
14:39:45.536 Service MBAMSwissArmy C:\WINDOWS\system32\drivers\mbamswissarmy.sys **HIDDEN**
14:39:51.427 Modules scanning
14:39:54.396 Module: C:\WINDOWS\System32\drivers\dxgthk.sys **SUSPICIOUS**
14:39:54.693 Module: C:\WINDOWS\System32\DLA\DLADResN.SYS **SUSPICIOUS**
14:39:56.458 Module: C:\WINDOWS\system32\ntdll.dll **SUSPICIOUS**
14:39:56.458 Disk 0 trace - called modules:
14:39:56.474 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
14:39:56.474 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x86f66160]
14:39:56.474 3 CLASSPNP.SYS[f74f0fd7] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x86f86030]
14:39:56.474 Scan finished successfully
14:40:33.911 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\LJC\Desktop\MBR.dat"
14:40:33.911 The log file has been saved successfully to "C:\Documents and Settings\LJC\Desktop\aswMBR.txt"

POST TOO LONG ERROR - RKILL ON NEXT POST, thanks

Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 10/28/2012 12:26:04 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\WINDOWS\System32\alg.exe (PID: 2888) [WD-HEUR]
* C:\WINDOWS\system32\HPZipm12.exe (PID: 5492) [WD-HEUR]

2 proccesses terminated!

Possibly Patched Files.

* C:\WINDOWS\system32\services.exe
* C:\WINDOWS\system32\lsass.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\spoolsv.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\ctfmon.exe
* C:\WINDOWS\System32\svchost.exe

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

[HKLM\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* C:\WINDOWS\System32\appmgmts.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll : 167,936 : 08/04/2004 00:00 AM : 9c3c12975c97119412802b181fbeeffe [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\appmgmts.dll : 167,936 : 04/13/2008 08:11 PM : d8849f77c0b66226335a59d26cb4edc6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll : 167,936 : 04/13/2008 08:11 PM : d8849f77c0b66226335a59d26cb4edc6 [Pos Repl]

* C:\WINDOWS\System32\browser.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2705219\SP3QFE\browser.dll : 78,336 : 07/06/2012 00:58 AM : fc6d1d80588d371f0321e15a75b2f8f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\browser.dll : 77,312 : 08/04/2004 00:00 AM : e3cfccdda4edd1d0dc9168b2e18f27b8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2705219$\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\browser.dll : 78,336 : 07/06/2012 08:58 AM : cfd4e51402da9838b5a04ae680af54a0 [Pos Repl]

* C:\WINDOWS\System32\clipsrv.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe : 33,280 : 08/04/2004 08:00 AM : c8dec22c4137d7a90f8bdf41ca4b82ae [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe : 33,280 : 04/13/2008 08:12 PM : 34cbe729f38138217f9c80212a2a0c82 [Pos Repl]

* C:\WINDOWS\System32\comctl32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll : 617,472 : 08/25/2006 08:45 AM : b0124cb21d28b1c9f678b566b6b57d92 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll : 611,328 : 08/04/2004 08:00 AM : a77dfb85faee49d66c74da6024ebc69b [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\comctl32.dll : 617,472 : 08/23/2010 08:12 AM : 93afb83fbc1f9443cac722fca63d73bf [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921,088 : 08/04/2004 08:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll : 1,050,624 : 08/04/2004 08:00 AM : 5af68a5e44734a082442668e9c787743 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll : 1,054,208 : 08/25/2006 08:45 AM : c4e80875c1cf1222fc5efd0314ae5c01 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1,054,208 : 04/13/2008 08:12 PM : bd38d1ebe24a46bd3eda059560afba12 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1,054,208 : 08/23/2010 08:12 AM : 736b12b725aeb2b07f0241a9f680cb10 [Pos Repl]

* C:\WINDOWS\System32\comres.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comres.dll : 792,064 : 08/04/2004 08:00 AM : 6728270cb7dbb776ed086f5ac4c82310 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comres.dll : 792,064 : 04/13/2008 08:11 PM : 1280a158c722fa95a80fb7aebe78fa7d [Pos Repl]

* C:\WINDOWS\System32\cryptsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll : 60,416 : 08/04/2004 08:00 AM : 10654f9ddcea9c46cfb77554231be73b [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [Pos Repl]

* C:\WINDOWS\System32\csrss.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\csrss.exe : 6,144 : 08/04/2004 08:00 AM : f12b178b1678d778cfd3ff1fc38c71fb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\csrss.exe : 6,144 : 04/13/2008 08:12 PM : 44f275c64738ea2056e3d9580c23b60f [Pos Repl]

* C:\WINDOWS\System32\ctfmon.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe : 15,360 : 08/04/2004 08:00 AM : 24232996a38c0b0cf151c2140ae29fc8 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ctfmon.exe : 15,360 : 04/13/2008 08:12 PM : 5f1d5f88303d4a4dbc8e5f97ba967cc3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe : 15,360 : 04/13/2008 08:12 PM : 5f1d5f88303d4a4dbc8e5f97ba967cc3 [Pos Repl]

* C:\WINDOWS\System32\d3d8.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll : 1,179,648 : 08/04/2004 08:00 AM : 42803ec60803c1a0754671e9183458f1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8.dll : 1,179,648 : 04/13/2008 08:11 PM : f099b129022170f2df9e1c0185c9bcfb [Pos Repl]

* C:\WINDOWS\System32\d3d8thk.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll : 8,192 : 08/04/2004 08:00 AM : 8d9210e9858d525646251dfa1fe37ebe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll : 8,192 : 04/13/2008 08:11 PM : 31b067c412fa1a9bad3ca2a63d7da440 [Pos Repl]

* C:\WINDOWS\System32\d3d9.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll : 1,689,088 : 08/04/2004 08:00 AM : d67bdbbda86cc9aeebbaf3217c1717d8 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\d3d9.dll : 1,689,088 : 04/13/2008 08:11 PM : 0607cbc6fa20114cb491efe4b2f9efad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d9.dll : 1,689,088 : 04/13/2008 08:11 PM : 0607cbc6fa20114cb491efe4b2f9efad [Pos Repl]

* C:\WINDOWS\System32\ddraw.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll : 266,240 : 08/04/2004 08:00 AM : 7ed462f353b3d915a418a689fa881f96 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ddraw.dll : 279,552 : 04/13/2008 08:11 PM : a340cd71eb535a3dd751b5f28723e50c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ddraw.dll : 279,552 : 04/13/2008 08:11 PM : a340cd71eb535a3dd751b5f28723e50c [Pos Repl]

* C:\WINDOWS\System32\dllhost.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe : 5,120 : 08/04/2004 08:00 AM : dd87db7387b9eb441c5674888a0d840c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dllhost.exe : 5,120 : 04/13/2008 08:12 PM : 0a9ba6af531afe7fa5e4fb973852d863 [Pos Repl]

* C:\WINDOWS\System32\drivers\acpiec.sys [NoSig]
+-> C:\WINDOWS\ERDNT\cache\acpiec.sys : 11,648 : 08/04/2004 08:00 AM : 9859c0f6936e723e4892d7141b1327d5 [Pos Repl]

* C:\WINDOWS\System32\drivers\acpi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\acpi.sys : 187,776 : 08/04/2004 08:00 AM : a10c7534f7223f4a73a948967d00e69b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\acpi.sys : 187,776 : 04/13/2008 02:36 PM : 8fd99680a539792a30e97944fdaecf17 [Pos Repl]

* C:\WINDOWS\System32\drivers\aec.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys : 142,464 : 02/14/2006 07:30 PM : 1ee7b434ba961ef845de136224c30fec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\aec.sys : 142,464 : 02/14/2006 07:22 PM : 1ee7b434ba961ef845de136224c30fec [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB900485$\aec.sys : 142,464 : 08/03/2004 11:39 PM : 841f385c6cfaf66b58fbd898722bb4f0 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\aec.sys : 142,592 : 04/13/2008 02:39 AM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\aec.sys : 142,592 : 04/13/2008 02:39 AM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]

* C:\WINDOWS\System32\drivers\afd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys : 138,496 : 02/16/2011 07:25 AM : 8d499b1276012eb907e7a9e0f4d8fda4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138,496 : 10/16/2008 07:07 AM : 38d7b715504da4741df35e3594fe2099 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138,496 : 08/17/2011 07:41 AM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys : 138,368 : 06/20/2008 07:44 AM : d99ddffb33deacdcf20717cb520379f6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys : 138,496 : 06/20/2008 07:40 AM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys : 138,496 : 06/20/2008 07:48 AM : d6ee6014241d034e63c49a50cb2b442a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP2QFE\afd.sys : 138,368 : 08/14/2008 07:48 AM : 6a0397376853e604de8e1e7a87fc08ac [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP3GDR\afd.sys : 138,496 : 08/14/2008 07:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys : 138,496 : 08/14/2008 07:34 AM : 4d43e74f2a1239d53929b82600f1971c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\afd.sys : 138,368 : 08/14/2008 11:51 AM : 55e6e1c51b6d30e54335750955453702 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2503665$\afd.sys : 138,496 : 10/16/2008 11:43 AM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138,496 : 08/14/2008 11:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138,496 : 02/16/2011 11:22 AM : 355556d9e580915118cd7ef736653a89 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys : 138,496 : 08/04/2004 03:00 AM : 5ac495f4cb807b2b98ad2ad591e6d92e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956803$\afd.sys : 138,496 : 06/20/2008 03:40 AM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956803_0$\afd.sys : 138,368 : 06/20/2008 03:44 AM : 944ca435bfcfc82cc1ed9e3a7d731aa9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\afd.sys : 138,496 : 08/17/2011 03:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [Pos Repl]

* C:\WINDOWS\System32\drivers\agp440.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\agp440.sys : 42,368 : 08/04/2004 03:07 AM : 2c428fa0c3e3a01ed93c9b2a27d8d4bb [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\agp440.sys : 42,368 : 04/13/2008 02:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\agp440.sys : 42,368 : 04/13/2008 02:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk6.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys : 36,992 : 08/04/2004 03:00 AM : dad16a9d5c873e7219e6b43802ed316a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk6.sys : 37,376 : 04/13/2008 02:31 PM : d7701d7e72243286cc88c9973d891057 [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk7.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys : 37,376 : 08/04/2004 03:00 AM : 680ad1c1bb16239e28d8f33a54a7a3c7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk7.sys : 37,760 : 04/13/2008 02:31 PM : 8fce268cdbdd83b23419d1f35f42c7b1 [Pos Repl]

* C:\WINDOWS\System32\drivers\arp1394.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys : 60,800 : 08/04/2004 03:00 AM : f0d692b0bffb46e30eb3cea168bbc49f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\arp1394.sys : 60,800 : 04/13/2008 02:51 PM : b5b8a80875c1dededa8b02765642c32f [Pos Repl]

* C:\WINDOWS\System32\drivers\asyncmac.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys : 14,336 : 08/04/2004 03:00 AM : 02000abf34af4c218c35d257024807d6 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\asyncmac.sys : 14,336 : 04/13/2008 02:57 PM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys : 14,336 : 04/13/2008 02:57 PM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]

* C:\WINDOWS\System32\drivers\atapi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys : 95,360 : 08/03/2004 11:59 PM : cdfe4411a69c224bd1d11b2da92dac51 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\atapi.sys : 96,512 : 04/13/2008 02:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\atapi.sys : 96,512 : 04/13/2008 02:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [Pos Repl]

* C:\WINDOWS\System32\drivers\audstub.sys [NoSig]

* C:\WINDOWS\System32\drivers\beep.sys [NoSig]
+-> C:\WINDOWS\ERDNT\cache\beep.sys : 4,224 : 08/04/2004 02:00 AM : da1f27d85e0d1525f6621372e7b685e9 [Pos Repl]

* C:\WINDOWS\System32\drivers\bridge.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\bridge.sys : 71,552 : 08/04/2004 11:00 AM : e4e6a0922e3d983728c9ad4e8d466954 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bridge.sys : 71,552 : 04/13/2008 02:53 PM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl]

* C:\WINDOWS\System32\drivers\bthport.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys : 272,128 : 04/14/2008 07:00 AM : fc50ce8c3ada692fbe82f1d4c8a4b70b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys : 272,128 : 04/14/2008 07:30 AM : 8381fb906f05495f3d2045fbc9576cd5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys : 272,128 : 04/14/2008 07:36 AM : f6cbbcc40f94eb8a88b1e826911ac795 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys : 272,128 : 06/13/2008 07:52 AM : 956e7e86bb00e792c8ff3afb2f8e460d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys : 272,128 : 06/13/2008 07:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 272,128 : 06/13/2008 07:27 AM : 51d05d5a8a7d93ab0b1a8d6a38db3ca4 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\bthport.sys : 272,128 : 06/13/2008 11:10 AM : 95ef6f3f386d93ee1e4d9ca45a50252a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376$\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys : 272,128 : 04/14/2008 02:30 AM : 8381fb906f05495f3d2045fbc9576cd5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376-v2_0$\bthport.sys : 272,128 : 04/14/2008 02:01 AM : 0bedc4527aafdae75b1844d4db29b6db [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 272,128 : 06/13/2008 02:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\bthport.sys : 272,128 : 06/13/2008 02:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]

* C:\WINDOWS\System32\drivers\cbidf2k.sys [NoSig]

* C:\WINDOWS\System32\drivers\cdaudio.sys [NoSig]

* C:\WINDOWS\System32\drivers\cdfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys : 63,744 : 08/04/2004 02:00 AM : cd7d5152df32b47f4e36f710b35aae02 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdfs.sys : 63,744 : 04/13/2008 03:14 PM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl]

* C:\WINDOWS\System32\drivers\cdrom.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys : 49,536 : 08/04/2004 02:00 AM : af9c19b3100fe010496b1a27181fbf72 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdrom.sys : 62,976 : 04/13/2008 02:40 PM : 1f4260cc5b42272d71f79e570a27a4fe [Pos Repl]

* C:\WINDOWS\System32\drivers\classpnp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys : 49,664 : 08/04/2004 02:00 AM : d86173b401470f06d9810f7962969ddf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\classpnp.sys : 49,536 : 04/13/2008 03:16 PM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl]

* C:\WINDOWS\System32\drivers\cpqdap01.sys [NoSig]

* C:\WINDOWS\System32\drivers\crusoe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys : 36,480 : 08/04/2004 02:00 AM : 6af1684ccaac3f7ef4ee9ba65eb0677a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\crusoe.sys : 36,736 : 04/13/2008 02:31 PM : f50d9bdbb25cce075e514dc07472a22f [Pos Repl]

* C:\WINDOWS\System32\drivers\diskdump.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys : 14,208 : 08/04/2004 02:00 AM : d16c81677a9be399c63cd2ea486472a5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\diskdump.sys : 14,208 : 04/13/2008 02:40 PM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\disk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\disk.sys : 36,352 : 08/04/2004 02:00 AM : 00ca44e4534865f8a3b64f7c0984bff0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\disk.sys : 36,352 : 04/13/2008 02:40 PM : 044452051f3e02e7963599fc8f4f3e25 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmboot.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys : 799,744 : 08/04/2004 02:00 AM : c0fbb516e06e243f0cf31f597e7ebf7d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmboot.sys : 799,744 : 04/13/2008 02:44 PM : d992fe1274bde0f84ad826acae022a41 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmio.sys : 153,344 : 08/04/2004 02:00 AM : f5e7b358a732d09f4bcf2824b88b9e28 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmio.sys : 153,344 : 04/13/2008 02:44 PM : 7c824cf7bbde77d95c08005717a95f6f [Pos Repl]

* C:\WINDOWS\System32\drivers\dmload.sys [NoSig]

* C:\WINDOWS\System32\drivers\DMusic.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys : 52,864 : 08/04/2004 02:07 AM : a6f881284ac1150e37d9ae47ff601267 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmusic.sys : 52,864 : 04/13/2008 02:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmkaud.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys : 2,944 : 08/04/2004 02:07 AM : 1ed4dbbae9f5d558dbba4cc450e3eb2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys : 2,944 : 04/13/2008 02:45 PM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmk.sys : 60,288 : 08/04/2004 02:08 AM : ff86422268de771d571e123eb7092c6a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmk.sys : 60,160 : 04/13/2008 02:45 PM : 6cb08593487f5701d2d2254e693eafce [Pos Repl]

* C:\WINDOWS\System32\drivers\dxapi.sys [NoSig]

* C:\WINDOWS\System32\drivers\dxg.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dxg.sys : 71,040 : 08/04/2004 02:00 AM : d3dac8432110aad0b02a58b4459ab835 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dxg.sys : 71,168 : 04/13/2008 02:38 PM : ac7280566a7bb85cb3291f04ddc1198e [Pos Repl]

* C:\WINDOWS\System32\drivers\dxgthk.sys [NoSig]

* C:\WINDOWS\System32\drivers\fastfat.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys : 143,360 : 08/04/2004 02:00 AM : 3117f595e9615e04f05a54fc15a03b20 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fastfat.sys : 143,744 : 04/13/2008 03:14 PM : 38d332a6d56af32635675f132548343e [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\fastfat.sys : 143,744 : 04/13/2008 03:14 PM : 38d332a6d56af32635675f132548343e [Pos Repl]

* C:\WINDOWS\System32\drivers\fdc.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fdc.sys : 27,392 : 08/04/2004 02:00 AM : ced2e8396a8838e59d8fd529c680e02c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fdc.sys : 27,392 : 04/13/2008 02:40 PM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [Pos Repl]

* C:\WINDOWS\System32\drivers\fips.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fips.sys : 34,944 : 08/04/2004 02:00 AM : e153ab8a11de5452bcf5ac7652dbf3ed [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fips.sys : 44,544 : 04/13/2008 02:33 PM : d45926117eb9fa946a6af572fbe1caa3 [Pos Repl]

* C:\WINDOWS\System32\drivers\flpydisk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys : 20,480 : 08/04/2004 02:00 AM : 0dd1de43115b93f4d85e889d7a86f548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys : 20,480 : 04/13/2008 02:40 PM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fltMgr.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys : 128,768 : 08/21/2006 07:43 AM : 5a85cd3d07273e3f6fe72ee9c6431632 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys : 128,896 : 08/21/2006 02:14 AM : 3d234fb6d6ee875eb009864a299bea29 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922582$\fltmgr.sys : 124,800 : 08/04/2004 02:00 AM : 157754f0df355a9e0a6f54721914f9c6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys : 129,792 : 04/13/2008 02:32 PM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fs_rec.sys [NoSig]

* C:\WINDOWS\System32\drivers\fsvga.sys [NoSig]

* C:\WINDOWS\System32\drivers\ftdisk.sys [NoSig]

* C:\WINDOWS\System32\drivers\hidclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys : 36,224 : 08/04/2004 02:00 AM : 378055ab8dda86228683c697c4e11685 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidclass.sys : 36,864 : 04/13/2008 02:45 PM : 1af592532532a402ed7c060f6954004f [Pos Repl]

* C:\WINDOWS\System32\drivers\hidparse.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys : 24,960 : 08/04/2004 02:00 AM : 5fff41cd5108e9051d255c37825af697 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidparse.sys : 24,960 : 04/13/2008 02:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]

* C:\WINDOWS\System32\drivers\hidusb.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidusb.sys : 9,600 : 08/17/2001 03:02 PM : 1de6783b918f540149aa69943bdfeba8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidusb.sys : 10,368 : 04/13/2008 02:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\http.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys : 262,656 : 03/16/2006 08:08 PM : 909d110c9634b0f1487eaaea837317d9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265,728 : 10/20/2009 08:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\http.sys : 262,784 : 03/16/2006 07:33 PM : cb77bb47e67e84deb17ba29632501730 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB916595$\http.sys : 263,040 : 08/04/2004 07:00 AM : c19b522a9ae0bbc3293397f3055e80a1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\http.sys : 265,728 : 10/20/2009 02:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\http.sys : 265,728 : 10/20/2009 02:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]

* C:\WINDOWS\System32\drivers\i8042prt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys : 52,736 : 08/04/2004 02:00 AM : 5502b58eef7486ee6f93f3f164dcb808 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys : 52,480 : 04/13/2008 03:18 PM : 4a0b06aa8943c1e332520f7440c0aa30 [Pos Repl]

* C:\WINDOWS\System32\drivers\imapi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imapi.sys : 41,856 : 08/04/2004 02:00 AM : f8aa320c6a0409c0380e5d8a99d76ec6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imapi.sys : 42,112 : 04/13/2008 02:40 PM : 083a052659f5310dd8b6a6cb05edcf8e [Pos Repl]

* C:\WINDOWS\System32\drivers\intelide.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelide.sys : 5,504 : 08/03/2004 11:59 PM : 2d722b2b54ab55b2fa475eb58d7b2aad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelide.sys : 5,504 : 04/13/2008 02:40 PM : b5466a9250342a7aa0cd1fba13420678 [Pos Repl]

* C:\WINDOWS\System32\drivers\intelppm.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys : 36,096 : 08/04/2004 11:00 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelppm.sys : 36,352 : 04/13/2008 02:31 PM : 8c953733d8f36eb2133f5bb58808b66b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\i386\intelppm.sys : 36,096 : 08/04/2004 00:00 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\i386\intelppm.sys : 36,096 : 08/04/2004 00:00 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]

* C:\WINDOWS\System32\drivers\ip6fw.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys : 29,056 : 08/04/2004 11:00 AM : 4448006b6bc60e6c027932cfc38d6855 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ip6fw.sys : 36,608 : 04/13/2008 02:53 PM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys : 36,608 : 04/13/2008 02:53 PM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipfltdrv.sys [NoSig]

* C:\WINDOWS\System32\drivers\ipinip.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys : 20,992 : 08/04/2004 11:00 AM : e1ec7f5da720b640cd8fb8424f1b14bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipinip.sys : 20,864 : 04/13/2008 02:57 PM : b87ab476dcf76e72010632b5550955f5 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipnat.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys : 134,912 : 09/29/2004 06:31 PM : 5191673215c91ff13ceaa83ef8e9653f [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys : 134,912 : 09/29/2004 06:28 PM : e2168cbc7098ffe963c6f23f472a3593 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB886185$\ipnat.sys : 134,912 : 08/04/2004 06:00 AM : b5a8e215ac29d24d60b4d1250ef05ace [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipnat.sys : 152,832 : 04/13/2008 02:57 PM : cc748ea12c6effde940ee98098bf96bb [Pos Repl]

* C:\WINDOWS\System32\drivers\ipsec.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys : 74,752 : 08/04/2004 06:00 AM : 64537aa5c003a6afeee1df819062d0d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsec.sys : 75,264 : 04/13/2008 03:19 PM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ipsec.sys : 75,264 : 04/13/2008 03:19 PM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]

* C:\WINDOWS\System32\drivers\irenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\irenum.sys : 11,264 : 08/04/2004 06:00 AM : 50708daa1b1cbb7d6ac1cf8f56a24410 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\irenum.sys : 11,264 : 04/13/2008 02:54 PM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl]

* C:\WINDOWS\System32\drivers\isapnp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys : 35,840 : 08/17/2001 02:58 PM : e504f706ccb699c2596e9a3da1596e87 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\isapnp.sys : 37,248 : 04/13/2008 02:36 PM : 05a299ec56e52649b1cf2fc52d20f2d7 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\isapnp.sys : 35,840 : 08/17/2001 02:58 PM : e504f706ccb699c2596e9a3da1596e87 [Pos Repl]

* C:\WINDOWS\System32\drivers\kbdclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys : 24,576 : 08/03/2004 11:58 PM : ebdee8a2ee5393890a1acee971c4c246 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\kbdclass.sys : 24,576 : 04/13/2008 02:39 PM : 463c1ec80cd17420a542b7f36a36f128 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys : 24,576 : 04/13/2008 02:39 PM : 463c1ec80cd17420a542b7f36a36f128 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0016\DriverFiles\i386\kbdclass.sys : 24,576 : 08/03/2004 11:58 PM : ebdee8a2ee5393890a1acee971c4c246 [Pos Repl]

* C:\WINDOWS\System32\drivers\kmixer.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys : 172,416 : 06/14/2006 06:50 AM : 8531438246ce9474e41ee1599904c0c7 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys : 172,416 : 06/14/2006 11:47 AM : ba5deda4d934e6288c2f66caf58d2562 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\kmixer.sys : 171,776 : 08/04/2004 11:07 AM : d93cad07c5683db066b0b2d2d3790ead [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kmixer.sys : 172,416 : 04/13/2008 02:45 PM : 692bcf44383d056aed41b045a323d378 [Pos Repl]

* C:\WINDOWS\System32\drivers\ksecdd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92,928 : 06/24/2009 06:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys : 92,032 : 08/04/2004 11:00 AM : eb7ffe87fd367ea8fca0506f74a87fbb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92,288 : 04/13/2008 02:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys : 92,288 : 04/13/2008 02:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ksecdd.sys : 92,928 : 06/24/2009 02:18 AM : b467646c54cc746128904e1654c750c1 [Pos Repl]

* C:\WINDOWS\System32\drivers\ks.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ks.sys : 140,928 : 08/04/2004 02:00 AM : b9540e258f952650de8dec68719a5c97 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ks.sys : 141,056 : 04/13/2008 03:16 PM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mcd.sys [NoSig]

* C:\WINDOWS\System32\drivers\mf.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mf.sys : 63,744 : 08/04/2004 02:00 AM : 729d83e56c29c510258a6e9e79ffddc3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mf.sys : 63,744 : 04/13/2008 02:36 PM : a7da20ab18a1bdae28b0f349e57da0d1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mnmdd.sys [NoSig]

* C:\WINDOWS\System32\drivers\modem.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\modem.sys : 30,080 : 08/04/2004 02:00 AM : 6fc6f9d7acc36dca9b914565a3aeda05 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\modem.sys : 30,080 : 04/13/2008 03:00 PM : dfcbad3cec1c5f964962ae10e0bcc8e1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mouclass.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys : 23,040 : 08/03/2004 11:58 PM : 34e1f0031153e491910e12551400192c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mouclass.sys : 23,040 : 04/13/2008 02:39 PM : 35c9e97194c8cfb8430125f8dbc34d04 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0015\DriverFiles\i386\mouclass.sys : 23,040 : 08/03/2004 11:58 PM : 34e1f0031153e491910e12551400192c [Pos Repl]

* C:\WINDOWS\System32\drivers\mouhid.sys [NoSig]
+-> C:\WINDOWS\system32\dllcache\mouhid.sys : 12,160 : 08/17/2001 02:48 PM : b1c303e17fb9d46e87a98e4ba6769685 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0015\DriverFiles\i386\mouhid.sys : 12,160 : 08/17/2001 02:48 PM : b1c303e17fb9d46e87a98e4ba6769685 [Pos Repl]

* C:\WINDOWS\System32\drivers\mountmgr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys : 42,240 : 08/04/2004 11:00 AM : 65653f3b4477f3c63e68a9659f85ee2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys : 42,368 : 04/13/2008 02:39 PM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl]

* C:\WINDOWS\System32\drivers\mqac.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys : 72,960 : 07/06/2007 06:52 AM : d92fce6729ee150a15a7cdbc433f390e [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mqac.sys : 72,960 : 07/06/2007 11:05 AM : 157a32ddc6a019a4e31b19d604d2f127 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB937894$\mqac.sys : 72,960 : 08/04/2004 11:00 AM : db07b0088cdfd20c2a22e675120ede34 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mqac.sys : 92,544 : 04/13/2008 02:39 PM : 70c14f5cca5cf73f8a645c73a01d8726 [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxdav.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys : 179,712 : 12/18/2007 06:38 AM : 9921d9df98f266560ec28b3bdb580180 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxdav.sys : 179,584 : 12/18/2007 11:51 AM : 29414447eb5bde2f8397dc965dbb3156 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys : 181,248 : 08/04/2004 11:00 AM : 46edcc8f2db2f322c24f48785cb46366 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys : 180,608 : 04/13/2008 02:32 PM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxsmb.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys : 457,472 : 02/17/2011 06:19 AM : fb7dfd15d760ad339837a470f0e780d3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys : 457,856 : 04/29/2011 06:47 AM : 8dd801e28eb76fda2a38907882a0036f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457,856 : 07/15/2011 06:29 AM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys : 451,584 : 01/18/2005 10:51 PM : 7b195060ff456fa65954c72c5c1640ff [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys : 448,128 : 10/27/2004 09:15 PM : a1be3cb080dcc0a8270d21e3ca3b7005 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys : 454,400 : 05/05/2006 09:16 AM : 7412ce77c6fd823f8889b4df420c680b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP2QFE\mrxsmb.sys : 455,936 : 10/24/2008 09:25 AM : d07da410091143336dae419a921aae2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP3GDR\mrxsmb.sys : 455,296 : 10/24/2008 09:21 AM : 60ae98742484e7ab80c3c1450e708148 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys : 455,936 : 10/24/2008 09:41 AM : 7170ab42b51954def2781a4d1cce65f4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys : 456,832 : 12/04/2009 09:25 AM : 602549d1e8a622e5746991f6c56b21ca [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys : 457,216 : 02/24/2010 09:57 AM : d09b9f0b9960dd41e73127b7814c115f [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys : 453,632 : 10/24/2008 11:10 AM : 6f2d483b97b395544e59749c47963c6a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2511455$\mrxsmb.sys : 455,680 : 02/24/2010 11:11 AM : f3aefb11abc521122b67095044169e98 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276$\mrxsmb.sys : 455,936 : 02/17/2011 11:18 AM : 0ea4d8ed179b75f8afa7998ba22285ca [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456,320 : 04/29/2011 11:19 AM : 0dc719e9b15e902346e87e9dcd5751fa [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys : 451,584 : 01/18/2005 11:26 PM : 5ddc9a1b2eb5a4bf010ce8c019a18c1f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957097_0$\mrxsmb.sys : 453,120 : 05/05/2006 03:41 AM : 025af03ce51645c62f3b6907a7e2be5e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978251$\mrxsmb.sys : 455,296 : 10/24/2008 03:21 AM : 60ae98742484e7ab80c3c1450e708148 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980232$\mrxsmb.sys : 455,424 : 12/04/2009 01:22 PM : 421f7b922cec5a5f340e7574a98f7b7c [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456,320 : 07/15/2011 02:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mrxsmb.sys : 456,320 : 07/15/2011 03:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]

* C:\WINDOWS\System32\drivers\msfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msfs.sys : 19,072 : 08/04/2004 01:00 AM : 561b3a4333ca2dbdba28b5b956822519 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msfs.sys : 19,072 : 04/13/2008 02:32 PM : c941ea2454ba8350021d774daf0f1027 [Pos Repl]

* C:\WINDOWS\System32\drivers\msgpc.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgpc.sys : 35,072 : 08/04/2004 01:00 AM : c0f1d4a21de5a415df8170616703debf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgpc.sys : 35,072 : 04/13/2008 02:56 PM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSKSSRV.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys : 7,552 : 08/03/2004 11:58 PM : ae431a8dd3c1d0d0610cdbac16057ad0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys : 7,552 : 04/13/2008 02:39 PM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPCLOCK.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspclock.sys : 5,376 : 08/03/2004 11:58 PM : 13e75fef9dfeb08eeded9d0246e1f448 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspclock.sys : 5,376 : 04/13/2008 02:39 PM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPQM.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspqm.sys : 4,992 : 08/03/2004 11:58 PM : 1988a33ff19242576c3d0ef9ce785da7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspqm.sys : 4,992 : 04/13/2008 02:39 PM : bad59648ba099da4a17680b39730cb3d [Pos Repl]

* C:\WINDOWS\System32\drivers\mssmbios.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mssmbios.sys : 15,488 : 08/04/2004 11:07 AM : 469541f8bfd2b32659d5d463a6714bce [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys : 15,488 : 04/13/2008 02:36 PM : af5f4f3f14a8ea2c26de30f7a1e17136 [Pos Repl]

* C:\WINDOWS\System32\drivers\mup.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105,472 : 04/21/2011 09:52 AM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mup.sys : 107,904 : 08/04/2004 11:00 AM : 82035e0f41c2dd05ae41d27fe6cf7de1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mup.sys : 105,472 : 04/21/2011 03:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndis.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndis.sys : 182,912 : 08/04/2004 03:00 AM : 558635d3af1c7546d26067d5d9b6959e [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ndis.sys : 182,656 : 04/13/2008 03:20 PM : 1df7f42665c94b825322fae71721130d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndis.sys : 182,656 : 04/13/2008 03:20 PM : 1df7f42665c94b825322fae71721130d [Pos Repl]

* C:\WINDOWS\System32\drivers\ndistapi.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10,496 : 07/08/2011 09:51 AM : 091735a5f20acb1dc147383a905ae002 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndistapi.sys : 9,600 : 08/04/2004 03:00 AM : 08d43bbdacdf23f34d79e44ed35c1b4c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ndistapi.sys : 10,496 : 07/08/2011 02:02 AM : 0109c4f3850dfbab279542515386ae22 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndisuio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys : 12,928 : 08/04/2004 02:00 AM : 34d6cd56409da9a7ed573e1c90a308bf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys : 14,592 : 04/13/2008 02:55 PM : f927a4434c5028758a842943ef1a3849 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndiswan.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys : 91,776 : 08/04/2004 02:00 AM : 0b90e255a9490166ab368cd55a529893 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys : 91,520 : 04/13/2008 03:20 PM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ndiswan.sys : 91,520 : 04/13/2008 03:20 PM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]

* C:\WINDOWS\System32\drivers\ndproxy.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40,960 : 11/03/2010 09:55 AM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndproxy.sys : 38,016 : 08/04/2004 02:00 AM : 59fc3fb44d2669bc144fd87826bb571f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ndproxy.sys : 40,960 : 11/02/2010 02:17 AM : 9282bd12dfb069d3889eb3fcc1000a9b [Pos Repl]

* C:\WINDOWS\System32\drivers\netbios.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbios.sys : 34,560 : 08/04/2004 02:00 AM : 3a2aca8fc1d7786902ca434998d7ceb4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbios.sys : 34,688 : 04/13/2008 02:56 PM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl]

* C:\WINDOWS\System32\drivers\netbt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbt.sys : 162,816 : 08/04/2004 02:00 AM : 0c80e410cd2f47134407ee7dd19cc86b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbt.sys : 162,816 : 04/13/2008 03:21 PM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl]

* C:\WINDOWS\System32\drivers\nic1394.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys : 61,824 : 08/04/2004 02:00 AM : 5c5c53db4fef16cf87b9911c7e8c6fbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nic1394.sys : 61,824 : 04/13/2008 02:51 PM : e9e47cfb2d461fa0fc75b7a74c6383ea [Pos Repl]

* C:\WINDOWS\System32\drivers\nikedrv.sys [NoSig]

* C:\WINDOWS\System32\drivers\nmnt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys : 40,320 : 08/04/2004 02:00 AM : 60cf8c7192b3614f240838ddbaa4a245 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nmnt.sys : 40,320 : 04/13/2008 02:53 PM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl]

* C:\WINDOWS\System32\drivers\npfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\npfs.sys : 30,848 : 08/04/2004 02:00 AM : 4f601bcb8f64ea3ac0994f98fed03f8e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\npfs.sys : 30,848 : 04/13/2008 02:32 PM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl]

* C:\WINDOWS\System32\drivers\ntfs.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB930916\SP2QFE\ntfs.sys : 574,976 : 02/09/2007 09:23 AM : 05ab81909514bfd69cbb1f2c147cf6b9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys : 574,464 : 02/09/2007 02:10 AM : 19a811ef5f1ed5c926a028ce107ff1af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB930916$\ntfs.sys : 574,592 : 08/04/2004 02:00 AM : b78be402c3f63dd55521f73876951cdd [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]

* C:\WINDOWS\System32\drivers\null.sys [NoSig]
+-> C:\WINDOWS\ERDNT\cache\null.sys : 2,944 : 08/04/2004 03:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnkflt.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkfwd.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkipx.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys : 88,448 : 08/04/2004 02:00 AM : 79ea3fcda7067977625b3363a2657c80 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys : 88,320 : 04/13/2008 02:56 PM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnknb.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwlnkspx.sys [NoSig]

* C:\WINDOWS\System32\drivers\nwrdr.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwrdr.sys : 163,456 : 10/13/2006 09:39 AM : bbbc2e555bb5e4adbaeb1447f11c68c9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\nwrdr.sys : 163,584 : 10/13/2006 02:23 AM : 3f18d9365be71c7b2e43b7cf4a0c1a10 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB923980$\nwrdr.sys : 163,584 : 08/04/2004 02:00 AM : 03373a79440473062c6f3aedec6a49c8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nwrdr.sys : 163,584 : 04/13/2008 02:34 PM : 36b9b950e3d2e100970a48d8bad86740 [Pos Repl]

* C:\WINDOWS\System32\drivers\oprghdlr.sys [NoSig]

* C:\WINDOWS\System32\drivers\p3.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\p3.sys : 42,496 : 08/04/2004 02:00 AM : 3e16eff2a6fed2d8d7f5a66dfe65d183 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\p3.sys : 42,752 : 04/13/2008 02:31 PM : c90018bafdc7098619a4a95b046b30f3 [Pos Repl]

* C:\WINDOWS\System32\drivers\parport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\parport.sys : 80,128 : 08/04/2004 02:00 AM : 29744eb4ce659dfe3b4122deb45bc478 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\parport.sys : 80,128 : 04/13/2008 02:40 PM : 5575faf8f97ce5e713d108c2a58d7c7c [Pos Repl]

* C:\WINDOWS\System32\drivers\partmgr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\partmgr.sys : 18,688 : 08/04/2004 02:00 AM : 3334430c29dc338092f79c38ef7b4cd0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\partmgr.sys : 19,712 : 04/13/2008 02:40 PM : beb3ba25197665d82ec7065b724171c6 [Pos Repl]

* C:\WINDOWS\System32\drivers\parvdm.sys [NoSig]

* C:\WINDOWS\System32\drivers\pciidex.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys : 25,088 : 08/03/2004 11:59 PM : 520b91ab011456b940d9b05fc91108ff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pciidex.sys : 24,960 : 04/13/2008 02:40 PM : 52e60f29221d0d1ac16737e8dbf7c3e9 [Pos Repl]

* C:\WINDOWS\System32\drivers\pci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pci.sys : 68,224 : 08/04/2004 11:07 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pci.sys : 68,224 : 04/13/2008 02:36 PM : a219903ccf74233761d92bef471a07b1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\pci.sys : 68,224 : 08/04/2004 02:07 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\pci.sys : 68,224 : 08/04/2004 02:07 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\pci.sys : 68,224 : 08/04/2004 02:07 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]

* C:\WINDOWS\System32\drivers\pcmcia.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys : 119,936 : 08/04/2004 11:00 AM : 82a087207decec8456fbe8537947d579 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys : 120,192 : 04/13/2008 02:36 PM : 9e89ef60e9ee05e3f2eef2da7397f1c1 [Pos Repl]

* C:\WINDOWS\System32\drivers\portcls.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\portcls.sys : 136,960 : 03/16/2004 11:58 AM : bc6b2bc69c1e009443e8b1fe2db96101 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\portcls.sys : 146,048 : 04/13/2008 03:19 PM : e82a496c3961efc6828b508c310ce98f [Pos Repl]

* C:\WINDOWS\System32\drivers\processr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\processr.sys : 35,328 : 08/04/2004 11:00 AM : 0d97d88720a4087ec93af7dbb303b30a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\processr.sys : 35,840 : 04/13/2008 02:31 PM : a32bebaf723557681bfc6bd93e98bd26 [Pos Repl]

* C:\WINDOWS\System32\drivers\psched.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psched.sys : 69,120 : 08/04/2004 11:00 AM : 48671f327553dcf1d27f6197f622a668 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psched.sys : 69,120 : 04/13/2008 02:56 PM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl]

* C:\WINDOWS\System32\drivers\ptilink.sys [NoSig]

* C:\WINDOWS\System32\drivers\rasacd.sys [NoSig]

* C:\WINDOWS\System32\drivers\rasl2tp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys : 51,328 : 08/04/2004 11:00 AM : 98faeb4a4dcf812ba1c6fca4aa3e115c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys : 51,328 : 04/13/2008 03:19 PM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspppoe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspppoe.sys : 41,472 : 08/04/2004 11:00 AM : 7306eeed8895454cbed4669be9f79faa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys : 41,472 : 04/13/2008 02:57 PM : 5bc962f2654137c9909c3d4603587dee [Pos Repl]

* C:\WINDOWS\System32\drivers\raspptp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys : 48,384 : 08/04/2004 11:00 AM : 1c5cc65aac0783c344f16353e60b72ac [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspptp.sys : 48,384 : 04/13/2008 03:19 PM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspti.sys [NoSig]

* C:\WINDOWS\System32\drivers\rawwan.sys [NoSig]

* C:\WINDOWS\System32\drivers\rdbss.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys : 174,592 : 10/27/2004 09:14 PM : d0fef8156d2d2fec557c100956d76887 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys : 174,592 : 05/05/2006 09:22 AM : ed375ce745c42a14f10753f7022ecd6a [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys : 174,592 : 05/05/2006 11:47 AM : 03b965b1ca47f6ef60eb5e51cb50e0af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB914389$\rdbss.sys : 174,592 : 10/27/2004 09:13 PM : 809ca45caa9072b3176ad44579d7f688 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdbss.sys : 175,744 : 04/13/2008 03:28 PM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpcdd.sys [NoSig]

* C:\WINDOWS\System32\drivers\rdpdr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys : 196,864 : 08/04/2004 09:01 AM : a2cae2c60bc37e0751ef9dda7ceaf4ad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys : 196,224 : 04/13/2008 02:32 PM : 15cabd0f7c00c47c70124907916af3f1 [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpwd.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys : 139,656 : 06/24/2011 09:09 AM : 3348e61a78ba4f79c795aad6565d3b6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 09:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2685939\SP3QFE\rdpwd.sys : 139,656 : 05/02/2012 09:45 AM : 997c59b9955f911ec460241dd9e01b04 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2723135\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 09:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys : 139,528 : 06/10/2005 09:06 AM : 047bea21274c8a4a233674a76c958c2c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys : 139,528 : 06/10/2005 09:09 AM : b54cd38a9ebfbf2b3561426e3fe26f62 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2570222$\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139,656 : 06/24/2011 08:10 AM : fc105dd312ed64eb66bff111e8ec6eac [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2685939$\rdpwd.sys : 139,784 : 01/09/2012 08:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2723135$\rdpwd.sys : 139,656 : 05/02/2012 08:46 AM : 6589db6e5969f8eee594cf71171c5028 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]

* C:\WINDOWS\System32\drivers\redbook.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\redbook.sys : 57,472 : 08/03/2004 11:59 PM : b31b4588e4086d8d84adbf9845c2402b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\redbook.sys : 57,600 : 04/13/2008 02:40 PM : f828dd7e1419b6653894a8f97a0094c5 [Pos Repl]

* C:\WINDOWS\System32\drivers\rmcast.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys : 202,496 : 07/13/2006 09:43 AM : bcea2b2bf1b6dddd11e65b7478f2d19a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys : 203,008 : 05/08/2008 09:14 AM : b1f077190ba1cfa0a2a2afae9e7fde2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys : 203,136 : 05/08/2008 09:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203,136 : 05/08/2008 09:58 AM : c711645c76b8ed87c021bf6165e52795 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rmcast.sys : 202,752 : 05/08/2008 11:28 AM : d18208ed6c768663b08c972eaa7a8b60 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950762_0$\rmcast.sys : 202,240 : 07/13/2006 02:48 AM : 9d54c7c15847b933e03d6e7c9307bae5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rmcast.sys : 203,136 : 05/08/2008 02:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]

* C:\WINDOWS\System32\drivers\rndismp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rndismp.sys : 30,080 : 08/04/2004 02:00 AM : 7ce8b277f3207ea82d7d22ad348befc6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rndismp.sys : 30,592 : 04/13/2008 02:56 PM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl]

* C:\WINDOWS\System32\drivers\rootmdm.sys [NoSig]

* C:\WINDOWS\System32\drivers\scsiport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys : 96,256 : 08/04/2004 02:00 AM : d7fd0ff761e28ac0ea35ad71e0cd67e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scsiport.sys : 96,384 : 04/13/2008 02:40 PM : 76c465f570e90c28942d52ccb2580a10 [Pos Repl]

* C:\WINDOWS\System32\drivers\sdbus.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sdbus.sys : 67,584 : 08/04/2004 02:00 AM : 02fc71b020ec8700ee8a46c58bc6f276 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sdbus.sys : 79,232 : 04/13/2008 02:36 PM : 8d04819a3ce51b9eb47e5689b44d43c4 [Pos Repl]

* C:\WINDOWS\System32\drivers\serenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serenum.sys : 15,488 : 08/04/2004 02:00 AM : a2d868aeeff612e70e213c451a70cafb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serenum.sys : 15,744 : 04/13/2008 02:40 PM : 0f29512ccd6bead730039fb4bd2c85ce [Pos Repl]

* C:\WINDOWS\System32\drivers\serial.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serial.sys : 64,896 : 08/04/2004 02:00 AM : cd9404d115a00d249f70a371b46d5a26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serial.sys : 64,512 : 04/13/2008 03:15 PM : cca207a8896d4c6a0c9ce29a4ae411a7 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffdisk.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffdisk.sys : 11,136 : 08/04/2004 02:00 AM : 1d9f1bec651815741f088a8fb88e17ee [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys : 11,904 : 04/13/2008 02:40 PM : 0fa803c64df0914b41f807ea276bf2a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffp_sd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffp_sd.sys : 10,240 : 08/04/2004 02:00 AM : 586499fd312ffd7f78553f408e71682e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys : 11,008 : 04/13/2008 02:40 PM : c17c331e435ed8737525c86a7557b3ac [Pos Repl]

* C:\WINDOWS\System32\drivers\sfloppy.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys : 11,392 : 08/04/2004 02:00 AM : 0d13b6df6e9e101013a7afb0ce629fe0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys : 11,392 : 04/13/2008 02:40 PM : 8e6b8c671615d126fdc553d1e2de5562 [Pos Repl]

* C:\WINDOWS\System32\drivers\smclib.sys [NoSig]

* C:\WINDOWS\System32\drivers\sonydcam.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys : 25,472 : 08/04/2004 02:00 AM : addc9e4757a68ab60562ad3cb9c288d6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys : 25,344 : 04/13/2008 02:46 PM : 489703624dac94ed943c2abda022a1cd [Pos Repl]

* C:\WINDOWS\System32\drivers\splitter.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys : 6,272 : 06/14/2006 09:50 AM : 9bb1dd670cb7505a90fc4e61d4aa8227 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\splitter.sys : 6,400 : 06/14/2006 02:47 AM : 0ce218578fff5f4f7e4201539c45c78f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\splitter.sys : 6,400 : 08/04/2004 02:07 AM : 8e186b8f23295d1e42c573b82b80d548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\splitter.sys : 6,272 : 04/13/2008 02:45 PM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl]

* C:\WINDOWS\System32\drivers\sr.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sr.sys : 73,472 : 08/04/2004 02:00 AM : e41b6d037d6cd08461470af04500dc24 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sr.sys : 73,472 : 04/13/2008 02:36 PM : 76bb022c2fb6902fd5bdd4f78fc13a5d [Pos Repl]

* C:\WINDOWS\System32\drivers\srv.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357,248 : 08/26/2010 09:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357,888 : 02/17/2011 09:19 AM : 9b390283569ea58d43d2586032b892f5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys : 332,800 : 04/21/2006 09:46 AM : 58bb0cc6be72899190505741e3b83464 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys : 332,928 : 08/14/2006 09:00 AM : 5230953c21c811b5fc1ff31ae2b48097 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957095\SP2QFE\srv.sys : 333,056 : 08/28/2008 09:35 AM : 5bfa06b8583279d277ccb469a9983998 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957095\SP3GDR\srv.sys : 333,824 : 09/08/2008 09:41 AM : 4f8a43adef66f135564085a9dca96a26 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957095\SP3QFE\srv.sys : 333,824 : 09/08/2008 09:37 AM : ae4d13b572399b206b43d65da4d9983d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP2QFE\srv.sys : 333,184 : 12/11/2008 09:24 AM : 6bfa2b79451f961d4a3dd896659193df [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP3GDR\srv.sys : 333,952 : 12/11/2008 09:57 AM : 3bb03f2ba89d2be417206c373d2af17c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys : 333,952 : 12/11/2008 09:33 AM : e89b42b216bc86ada4345908284519cb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971468\SP3QFE\srv.sys : 353,792 : 01/01/2010 09:58 AM : 30efed0c77d59ae0cacb0b5c756767ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982214\SP3QFE\srv.sys : 354,304 : 06/21/2010 09:18 AM : 422e4508508015c7d12f40bf9763f158 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\srv.sys : 333,184 : 12/11/2008 02:57 AM : ab9c79ed12d65e800aaad3d72a04792f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2345886$\srv.sys : 354,304 : 06/21/2010 02:27 AM : da852e3e0bf1cea75d756f9866241e57 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 357,248 : 08/26/2010 02:39 AM : 0f6aefad3641a657e18081f52d0c15af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB923414$\srv.sys : 332,800 : 04/21/2006 02:12 AM : e03b4ea274c9e509cca7f9f0cec24232 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957095$\srv.sys : 334,848 : 04/13/2008 03:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957095_0$\srv.sys : 332,928 : 08/14/2006 03:34 AM : ea554a3ffc3f536fe8320eb38f5e4843 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958687$\srv.sys : 333,824 : 09/08/2008 03:41 AM : 4f8a43adef66f135564085a9dca96a26 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958687_0$\srv.sys : 333,056 : 08/28/2008 03:04 AM : 7a0111577d8046633d5162a3ce15e9e1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971468$\srv.sys : 333,952 : 12/11/2008 03:57 AM : 3bb03f2ba89d2be417206c373d2af17c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB982214$\srv.sys : 353,792 : 12/31/2009 03:50 AM : 89220b427890aa1dffd1a02648ae51c3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srv.sys : 334,848 : 04/13/2008 03:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\srv.sys : 357,888 : 02/17/2011 03:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [Pos Repl]

* C:\WINDOWS\System32\drivers\stream.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\stream.sys : 48,640 : 08/04/2004 03:00 AM : c43356072eb3e88cd62958db10cead47 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\stream.sys : 49,408 : 04/13/2008 02:45 PM : 3e5d89099ded9e86e5639f411693218f [Pos Repl]

* C:\WINDOWS\System32\drivers\swenum.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swenum.sys : 4,352 : 08/03/2004 11:58 PM : 03c1bae4766e2450219d20b993d6e046 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swenum.sys : 4,352 : 04/13/2008 02:39 PM : 3941d127aef12e93addf6fe6ee027e0f [Pos Repl]

* C:\WINDOWS\System32\drivers\swmidi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys : 54,272 : 08/17/2001 03:00 PM : 94abc808fc4b6d7d2bbf42b85e25bb4d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swmidi.sys : 56,576 : 04/13/2008 02:45 PM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl]

* C:\WINDOWS\System32\drivers\sysaudio.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys : 60,800 : 08/04/2004 03:15 AM : 650ad082d46bac0e64c9c0e0928492fd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys : 60,800 : 04/13/2008 03:15 PM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl]

* C:\WINDOWS\System32\drivers\tape.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tape.sys : 14,976 : 08/04/2004 03:00 AM : a2a9ca0d1a9ac1ff54220aa0789fe5cf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tape.sys : 14,976 : 04/13/2008 02:40 PM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl]

* C:\WINDOWS\System32\drivers\tcpip6.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 09:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys : 225,664 : 08/16/2006 09:13 AM : a026ea381b026d05a4a3d2388d80c3b8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys : 225,920 : 06/20/2008 09:32 AM : 7195e0ce397545e657a81ece9dfbc1c9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys : 225,856 : 06/20/2008 09:08 AM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 09:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226,880 : 02/11/2010 09:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys : 225,920 : 06/20/2008 03:52 AM : 00586ed87ab564b03870a2a3dcc84b55 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922819$\tcpip6.sys : 223,616 : 08/04/2004 03:00 AM : 4d58bb1ae8841aafd8790ad7e1e3b8ea [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\tcpip6.sys : 225,664 : 08/16/2006 03:37 AM : dccacdd2747ada221aece5c9ada5d551 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225,856 : 06/20/2008 03:08 AM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\tcpip6.sys : 226,880 : 02/11/2010 03:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [Pos Repl]

* C:\WINDOWS\System32\Drivers\tcpip.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 09:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys : 360,576 : 04/20/2006 09:18 AM : b2220c618b42a2212a59d91ebd6fc4b4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys : 360,832 : 10/30/2007 09:53 AM : 64798ecfa43d78c7178375fcdd16d8c8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys : 360,960 : 06/20/2008 09:44 AM : 744e57c99232201ae98c49168b918f48 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys : 361,600 : 06/20/2008 09:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 09:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys : 360,320 : 06/20/2008 03:45 AM : 2a5554fc5b1e04e131230e3ce035c3f9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys : 359,040 : 08/04/2004 03:00 AM : 9f4b36614a0fc234525ba224957de55c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys : 359,808 : 04/20/2006 03:51 AM : 1dbf125862891817f374f407626967f4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys : 360,064 : 10/30/2007 01:20 PM : 90caff4b094573449a0872a0f919b178 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\tcpip.sys : 361,600 : 06/20/2008 03:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\tcpip.sys : 361,600 : 06/20/2008 03:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]

* C:\WINDOWS\System32\drivers\tdi.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdi.sys : 18,560 : 08/04/2004 01:00 AM : 6891b74ab9a016064e82a419388d0601 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdi.sys : 19,072 : 04/13/2008 03:00 PM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl]

* C:\WINDOWS\System32\drivers\tdpipe.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys : 12,040 : 08/04/2004 01:00 AM : 38d437cf2d98965f239b0abcd66dcb0f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys : 12,040 : 04/13/2008 08:13 PM : 6471a66807f5e104e4885f5b67349397 [Pos Repl]

* C:\WINDOWS\System32\drivers\tdtcp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys : 21,896 : 08/04/2004 01:00 AM : ed0580af02502d00ad8c4c066b156be9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys : 21,896 : 04/13/2008 08:13 PM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl]

* C:\WINDOWS\System32\drivers\termdd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termdd.sys : 40,840 : 08/04/2004 01:01 AM : a540a99c281d933f3d69d55e48727f47 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termdd.sys : 40,840 : 04/13/2008 08:13 PM : 88155247177638048422893737429d9e [Pos Repl]

* C:\WINDOWS\System32\drivers\tosdvd.sys [NoSig]

* C:\WINDOWS\System32\drivers\tunmp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys : 12,416 : 08/04/2004 01:00 AM : 87a0e9e18c10a9e454238e3330e2a26d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tunmp.sys : 12,288 : 04/13/2008 02:56 PM : 8f861eda21c05857eb8197300a92501c [Pos Repl]

* C:\WINDOWS\System32\drivers\udfs.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\udfs.sys : 66,176 : 08/04/2004 01:00 AM : 12f70256f140cd7d52c58c7048fde657 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\udfs.sys : 66,048 : 04/13/2008 02:32 PM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl]

* C:\WINDOWS\System32\drivers\update.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB936357\SP2QFE\update.sys : 364,160 : 04/23/2007 09:14 AM : 7b2170ee3d858ce8fbe503904cc9b663 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\update.sys : 364,160 : 04/23/2007 01:32 AM : ced744117e91bdc0beb810f7d8608183 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB936357$\update.sys : 209,408 : 08/04/2004 01:00 AM : aff2e5045961bbc0a602bb6f95eb1345 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\update.sys : 384,768 : 04/13/2008 02:39 PM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl]

* C:\WINDOWS\System32\drivers\usb8023.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys : 12,672 : 08/04/2004 01:00 AM : af090265ec388bab320f1ff7e7a7d5ea [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usb8023.sys : 12,800 : 04/13/2008 02:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd2.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd2.sys : 23,936 : 08/04/2004 01:00 AM : 61018ba9df6b63e51d9753c980e73ec2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys : 25,728 : 04/13/2008 02:45 PM : ce97845d2e3f0d274b8bac1ed07c6149 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd.sys : 23,808 : 08/04/2004 01:00 AM : 2654eecc6fb13603ebddcd5c8ea943d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys : 25,600 : 04/13/2008 02:45 PM : 1c1a47b40c23358245aa8d0443b6935e [Pos Repl]

* C:\WINDOWS\System32\drivers\usbccgp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbccgp.sys : 31,616 : 08/04/2004 01:08 AM : bffd9f120cc63bcbaa3d840f3eef9f79 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys : 32,128 : 04/13/2008 02:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbd.sys [NoSig]

* C:\WINDOWS\System32\drivers\usbehci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys : 27,264 : 10/25/2005 07:39 PM : 708579b01fed227aadb393cb0c3b4a2c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbehci.sys : 30,208 : 04/13/2008 02:45 PM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\usbehci.sys : 26,624 : 08/04/2004 02:00 AM : 15e993ba2f6946b2bfbbfcd30398621e [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbehci.sys : 26,624 : 08/04/2004 02:00 AM : 15e993ba2f6946b2bfbbfcd30398621e [Pos Repl]

* C:\WINDOWS\System32\drivers\usbhub.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys : 57,600 : 08/04/2004 07:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbhub.sys : 59,520 : 04/13/2008 02:45 PM : 1ab3cdde553b6e064d2e754efe20285c [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:00 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbhub.sys : 57,600 : 08/04/2004 02:08 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbintel.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys : 16,000 : 08/04/2004 07:00 AM : 2853fd4c4489e0f8bfcf78efcdb7e998 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbintel.sys : 15,872 : 04/13/2008 02:45 PM : 290913dc4f1125e5a82de52579a44c43 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbport.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbport.sys : 143,104 : 10/25/2005 07:39 PM : a6df50ba7534b13c5a34d0d22cfebe0c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbport.sys : 143,872 : 04/13/2008 02:45 PM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:00 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\usbport.sys : 142,976 : 08/04/2004 02:08 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]

* C:\WINDOWS\System32\drivers\USBSTOR.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys : 26,496 : 08/04/2004 07:08 AM : 6cd7b22193718f1d17a47a1cd6d37e75 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbstor.sys : 26,368 : 04/13/2008 02:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usbstor.sys : 26,368 : 04/13/2008 02:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0026\DriverFiles\i386\USBSTOR.SYS : 26,368 : 04/13/2008 02:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbuhci.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys : 20,480 : 08/04/2004 07:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys : 20,608 : 04/13/2008 02:45 PM : 26496f9dee2d787fc3e61ad54821ffe6 [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\usbuhci.sys : 20,480 : 08/04/2004 02:00 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\usbuhci.sys : 20,480 : 08/04/2004 02:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\usbuhci.sys : 20,480 : 08/04/2004 02:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\usbuhci.sys : 20,480 : 08/04/2004 02:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\usbuhci.sys : 20,480 : 08/04/2004 02:08 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]

* C:\WINDOWS\System32\drivers\vga.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\vga.sys : 20,992 : 08/04/2004 07:00 AM : 8a60edd72b4ea5aea8202daf0e427925 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\vga.sys : 20,992 : 04/13/2008 02:44 PM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl]

* C:\WINDOWS\System32\drivers\videoprt.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys : 79,744 : 08/04/2004 07:00 AM : d5a9d123f5ed7c9965a481bd20cf66d8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\videoprt.sys : 81,664 : 04/13/2008 02:44 PM : e28726b72c46821a28830e077d39a55b [Pos Repl]

* C:\WINDOWS\System32\drivers\volsnap.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys : 52,352 : 08/04/2004 07:00 AM : ee4660083deba849ff6c485d944b379b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\volsnap.sys : 52,352 : 04/13/2008 02:41 PM : 4c8fcb5cc53aab716d810740fe59d025 [Pos Repl]

* C:\WINDOWS\System32\drivers\wanarp.sys [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys : 34,560 : 08/04/2004 07:00 AM : 984ef0b9788abf89974cfed4bfbaacbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wanarp.sys : 34,560 : 04/13/2008 02:57 PM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\wdmaud.sys [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys : 82,944 : 06/14/2006 09:17 AM : 0bfa8203b8148fb4e54bc212c41ce497 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys : 82,944 : 06/14/2006 07:00 AM : efd235ca22b57c81118c1aeb4798f1c1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB920872$\wdmaud.sys : 82,944 : 08/04/2004 07:15 AM : 2797f33ebf50466020c430ee4f037933 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys : 83,072 : 04/13/2008 03:17 PM : 6768acf64b18196494413695f0c3a00f [Pos Repl]

* C:\WINDOWS\System32\drivers\wmilib.sys [NoSig]

* C:\WINDOWS\System32\drivers\ws2ifsl.sys [NoSig]

* C:\WINDOWS\System32\dsound.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dsound.dll : 367,616 : 08/04/2004 07:00 AM : 55e148c01296696588eafa425782c3e8 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\dsound.dll : 367,616 : 04/13/2008 08:11 PM : 4d83ed8bddec431fc8ad907b47cfb6e3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dsound.dll : 367,616 : 04/13/2008 08:11 PM : 4d83ed8bddec431fc8ad907b47cfb6e3 [Pos Repl]

* C:\WINDOWS\System32\dssenh.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll : 137,216 : 08/04/2004 07:00 AM : cacd2c63a79268d131ea37e85524cc44 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dssenh.dll : 138,752 : 04/13/2008 01:37 PM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\dssenh.dll : 138,752 : 04/13/2008 01:37 PM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]

* C:\WINDOWS\System32\es.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll : 243,200 : 07/26/2005 09:20 AM : 95f5fea4c6de2c3f28784d0dcc8f0dd3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll : 253,952 : 07/07/2008 04:06 PM : a4ab3dca4a383f0df4988abdeb84f9a4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253,952 : 07/07/2008 04:23 PM : f17f6226bdc0cd5f0bef0daf84d29bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\es.dll : 253,952 : 07/07/2008 04:32 PM : 60d1a6342238378bfb7545c81ee3606c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\es.dll : 243,200 : 08/04/2004 04:00 AM : acd36a2dd7d1e9d8a060aa651dc07e63 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950974_0$\es.dll : 243,200 : 07/26/2005 08:39 AM : 34bbd9acc1538818f2c878898c64e793 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [Pos Repl]

* C:\WINDOWS\System32\eventlog.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll : 55,808 : 08/04/2004 08:00 AM : 82b24cb70e5944e6e34662205a2a5b78 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\eventlog.dll : 56,320 : 04/13/2008 08:11 PM : 6d4feb43ee538fc5428cc7f0565aa656 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\eventlog.dll : 56,320 : 04/13/2008 08:11 PM : 6d4feb43ee538fc5428cc7f0565aa656 [Pos Repl]

* C:\WINDOWS\System32\hid.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hid.dll : 20,992 : 08/04/2004 08:00 AM : 18afee0ede045b6255408d634372dc29 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hid.dll : 20,992 : 04/13/2008 08:11 PM : 8973122796e3b5d6b5900fc186e55fea [Pos Repl]

* C:\WINDOWS\System32\hnetcfg.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll : 344,064 : 08/04/2004 08:00 AM : 765b30c776a1780b46b479fe614f707c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll : 344,064 : 04/13/2008 08:11 PM : 3cb32d3b8cbe79899d63280bb7a83cd9 [Pos Repl]

* C:\WINDOWS\System32\imm32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imm32.dll : 110,080 : 08/04/2004 08:00 AM : 87ca7ce6469577f059297b9d6556d66d [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\imm32.dll : 110,080 : 04/13/2008 08:11 PM : 0da85218e92526972a821587e6a8bf8f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imm32.dll : 110,080 : 04/13/2008 08:11 PM : 0da85218e92526972a821587e6a8bf8f [Pos Repl]

* C:\WINDOWS\System32\ipsecsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll : 182,784 : 08/04/2004 08:00 AM : d1e299962b5956005113ec4ab1e0d9b7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll : 183,808 : 04/13/2008 08:11 PM : 332760fba1655fcfd35bd6f4fd871300 [Pos Repl]

* C:\WINDOWS\System32\kernel32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll : 985,088 : 07/05/2006 04:57 AM : 0fdd84928a5dde2510761b7ec76ccec9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll : 986,112 : 04/16/2007 04:07 AM : 09f7cb3687f86edaa4ca081f7ab66c03 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 991,744 : 03/21/2009 04:59 AM : da11d9d6ecbdf0f93436a4b7c13f7bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll : 984,576 : 04/16/2007 08:52 AM : a01f9ca902a88f7ced06884174d6419d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB917422$\kernel32.dll : 983,552 : 08/04/2004 08:00 AM : 888190e31455fad793312f8d087146eb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll : 984,064 : 07/05/2006 08:55 AM : d8db5397de07577c1cb50ba6d23b3ad4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 989,696 : 04/13/2008 08:11 PM : c24b983d211c34da8fcc1ac38477971d [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\kernel32.dll : 989,696 : 03/21/2009 08:06 AM : b921fb870c9ac0d509b2ccabbbbe95f3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kernel32.dll : 989,696 : 04/13/2008 08:11 PM : c24b983d211c34da8fcc1ac38477971d [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\kernel32.dll : 989,696 : 03/21/2009 08:06 AM : b921fb870c9ac0d509b2ccabbbbe95f3 [Pos Repl]

* C:\WINDOWS\System32\ksuser.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll : 4,096 : 08/04/2004 08:56 AM : cbcd254547689bff80c9f547b20911e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksuser.dll : 4,096 : 04/13/2008 08:11 PM : 9b9f1c38d559047b8ac0dba2d5febde9 [Pos Repl]

* C:\WINDOWS\System32\linkinfo.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll : 19,968 : 08/31/2005 09:44 PM : 648bf0b4dde4f7a1156dae7174d36efa [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll : 19,968 : 08/31/2005 09:41 PM : a1a688ee56cf3bbd24edeb815d48e9ba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB900725$\linkinfo.dll : 18,944 : 08/04/2004 09:00 AM : c2bbd044c741ea4292016c36f718d2e4 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\linkinfo.dll : 19,968 : 04/13/2008 08:11 PM : 2dc5a8019e2387987905f77c664e4be2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll : 19,968 : 04/13/2008 08:11 PM : 2dc5a8019e2387987905f77c664e4be2 [Pos Repl]

* C:\WINDOWS\System32\lpk.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lpk.dll : 22,016 : 08/04/2004 09:00 AM : 74d66b3de265e8789153414e75175f26 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\lpk.dll : 22,016 : 04/13/2008 08:11 PM : 012df358cebaa23acb26d82077820817 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lpk.dll : 22,016 : 04/13/2008 08:11 PM : 012df358cebaa23acb26d82077820817 [Pos Repl]

* C:\WINDOWS\System32\lsass.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lsass.exe : 13,312 : 08/04/2004 09:00 AM : 84885f9b82f4d55c6146ebf6065d75d2 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\lsass.exe : 13,312 : 04/13/2008 08:12 PM : bf2466b3e18e970d8a976fb95fc1ca85 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lsass.exe : 13,312 : 04/13/2008 08:12 PM : bf2466b3e18e970d8a976fb95fc1ca85 [Pos Repl]

* C:\WINDOWS\System32\mfc40u.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953,856 : 09/18/2010 09:18 AM : 842900dedbc8e3e8dbcccb298fd88f65 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll : 927,504 : 11/01/2006 02:17 PM : 925f8b61ed301a317ba850ebeecbdaa0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB924667$\mfc40u.dll : 924,432 : 08/04/2004 08:00 AM : ddf8d47acf8fc3fe5f7f2b95c4d4d136 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mfc40u.dll : 953,856 : 09/18/2010 08:53 AM : e76a5c202e68af5a322d16b5a78f48b9 [Pos Repl]

* C:\WINDOWS\System32\midimap.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\midimap.dll : 18,944 : 08/04/2004 08:00 AM : 3b4702155bb2ae9dc00c06a68834bdfa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\midimap.dll : 18,944 : 04/13/2008 08:11 PM : 5c12660a97822f6e61576943b49aaad6 [Pos Repl]

* C:\WINDOWS\System32\msgsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll : 33,792 : 08/04/2004 08:00 AM : 95fd808e4ac22aba025a7b3eac0375d2 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\msgsvc.dll : 33,792 : 04/13/2008 08:11 PM : 986b1ff5814366d71e0ac5755c88f2d3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll : 33,792 : 04/13/2008 08:11 PM : 986b1ff5814366d71e0ac5755c88f2d3 [Pos Repl]

* C:\WINDOWS\System32\mshtml.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll : 5,954,560 : 06/24/2010 09:24 AM : 94dc7e938c57f3c3d1bc4a0f68fc5830 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll : 5,958,656 : 09/10/2010 09:57 AM : 8a03cc037e6b7d1796192815231b0c3f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll : 5,960,704 : 11/05/2010 08:27 PM : 864e69f32656a7121444ba0193d7b64b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll : 5,962,240 : 12/20/2010 06:58 PM : 2a2c070ec691ce410533a1da7aa3cd86 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll : 5,964,800 : 02/22/2011 06:27 PM : 3422847aa07e37076a87d0b7d5044dc6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll : 5,967,360 : 05/30/2011 06:17 PM : d0b1db576941cb0b6669b8752ffac79a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll : 5,971,456 : 07/25/2011 06:15 AM : bce7ccebad6c8955d2b4c3b246bd0e57 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll : 5,972,992 : 10/03/2011 06:34 AM : 1240a6b7b470bed0aa6c9fec7ab0ea26 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 03:19 PM : 699421e2e1313c18671a703953cae14b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll : 5,980,160 : 12/17/2011 02:45 PM : 49b88a833eca99efbffc5aae5cc998ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\mshtml.dll : 5,980,672 : 03/01/2012 02:58 AM : 5dbb0c997ad276bce9d30cd609bdbf67 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\mshtml.dll : 6,009,344 : 05/11/2012 02:41 AM : 55f148b94246a77fb4ac33346671cac8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\mshtml.dll : 6,010,368 : 07/02/2012 01:48 PM : df599ac52b62de001e42d36f92b45e68 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 01:13 AM : cf6b381c3518ab328382429cae206d64 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB912945\SP2QFE\mshtml.dll : 3,073,024 : 01/31/2006 09:59 PM : 51c91ac189321a320fc4bc90b56255a3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtml.dll : 3,058,176 : 07/28/2006 09:30 AM : d251679bd9ef0250201fb899ec40fd32 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll : 3,066,880 : 04/21/2008 09:44 AM : fe406de0651c9e8201dcb0460609d739 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll : 3,067,392 : 04/21/2008 09:24 AM : 46a61ba430110f00dd990d058aa3d054 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll : 3,067,392 : 06/23/2008 09:09 AM : f433136c23d13b120412b300d1324a7e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll : 3,067,904 : 06/25/2008 09:24 AM : 04eec0ff4dd3c7041628973ca6832c33 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\mshtml.dll : 3,067,904 : 08/20/2008 09:30 AM : 507bda42f7db8209c0f0b3556a043491 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\mshtml.dll : 3,067,904 : 08/20/2008 09:58 AM : bd45470b132a0f98596277323d9f2e5a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3GDR\mshtml.dll : 3,067,904 : 10/15/2008 09:00 PM : b846c2de341cf32b42ad297437233742 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\mshtml.dll : 3,067,904 : 10/16/2008 09:34 AM : cc5a2205d37ae67ce23ab7fd3e1fdaca [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960714\SP3GDR\mshtml.dll : 3,067,904 : 12/12/2008 09:01 AM : c828aa1c5469e72251f3d367005e589f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960714\SP3QFE\mshtml.dll : 3,067,904 : 12/12/2008 09:14 AM : b6daa74e2ed36c71b502945589a683ae [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB963027\SP3QFE\mshtml.dll : 3,068,416 : 02/20/2009 09:50 AM : 1618a4a2c5dd8164b8295190c8ea6544 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB969897\SP3QFE\mshtml.dll : 3,069,440 : 04/29/2009 09:21 AM : 06cf679e3d24c3df270556456a0f1eda [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB972260\SP3QFE\mshtml.dll : 3,069,952 : 07/18/2009 09:31 AM : f3ee47f296295d08a97cb50ef57244d9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\mshtml.dll : 3,072,512 : 09/25/2009 09:32 AM : 37f578776552fa076ea6085f0365209c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\mshtml.dll : 3,073,024 : 10/29/2009 09:23 AM : da551bfec150760a38a9ad0c95a8a71c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll : 5,944,320 : 10/29/2009 09:45 AM : c0f9ac6fab2c788ffee3e69585a0e93f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976749\SP3QFE\mshtml.dll : 3,072,512 : 10/19/2009 07:44 PM : 6c1b3294bcd1a38fde6d965a96612756 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll : 5,945,856 : 12/21/2009 02:09 PM : e6b64c6c729bbc38ab7cc92ce33f97a5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll : 5,946,880 : 02/25/2010 02:19 AM : 974772c74da7c7a8e7c813a9908a845f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 02:36 AM : 9be28f749a7fe7f8f177c6aa2e9da609 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll : 3,067,392 : 12/12/2008 08:27 AM : 6d1d493622ea050dbaabd0c4c1dfadb5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB918899$\mshtml.dll : 3,054,080 : 07/28/2006 08:28 AM : c7074da3d8f8c0f6c03874ba0b05069c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922760$\mshtml.dll : 3,058,176 : 07/28/2006 08:30 AM : d251679bd9ef0250201fb899ec40fd32 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925454$\mshtml.dll : 3,058,688 : 09/14/2006 08:31 AM : cefea1c301139a817931be132f0359fe [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928090$\mshtml.dll : 3,061,248 : 10/23/2006 08:34 AM : 88e1c15bb1a9ed3cba4d6f2f408d5010 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931768$\mshtml.dll : 3,062,272 : 01/04/2007 08:05 AM : 1c45525574ef206346fbafcaac7cc4a5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB933566$\mshtml.dll : 3,063,296 : 02/20/2007 08:52 AM : 2991727809c7ac3a33e4178cc73244d8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB937143$\mshtml.dll : 3,064,320 : 05/04/2007 08:59 AM : 00adcb32832a10ed9419493bcea97526 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB939653$\mshtml.dll : 3,064,320 : 06/15/2007 08:12 AM : 53f3fd772c010622346c39284c4a863b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB942615$\mshtml.dll : 3,064,832 : 08/22/2007 08:55 AM : 885e3bf99ea4b2213901ebc35b34cf12 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB944533$\mshtml.dll : 3,065,856 : 10/30/2007 08:55 AM : 79314a0a6b0da78afe491ff2d8b117ba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB947864$\mshtml.dll : 3,066,368 : 12/06/2007 07:44 PM : 8a4dd074dec1b0c063c8493abf654cbc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759$\mshtml.dll : 3,066,880 : 04/13/2008 08:11 PM : a706e122b398fe1ab85cb9b75d044223 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759_0$\mshtml.dll : 3,066,880 : 02/16/2008 08:32 AM : 701a6798ddf875caa3a5099ee75fd57f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838$\mshtml.dll : 3,066,880 : 04/21/2008 08:44 AM : fe406de0651c9e8201dcb0460609d739 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838_0$\mshtml.dll : 3,066,880 : 04/21/2008 08:56 AM : 083b967e6b0b2bb539ce6b08d45d631f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390$\mshtml.dll : 3,067,392 : 06/23/2008 08:09 AM : f433136c23d13b120412b300d1324a7e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390_0$\mshtml.dll : 3,067,392 : 06/23/2008 08:11 AM : 1fc693a4ee1d9d9cd78dda6c87232f6f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215$\mshtml.dll : 3,067,904 : 08/20/2008 08:30 AM : 507bda42f7db8209c0f0b3556a043491 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215_0$\mshtml.dll : 3,067,392 : 08/20/2008 08:33 AM : 20d44d1a5a406cd8e129d3d4f0b5717c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960714$\mshtml.dll : 3,067,904 : 10/15/2008 09:00 PM : b846c2de341cf32b42ad297437233742 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960714_0$\mshtml.dll : 3,067,392 : 10/16/2008 09:20 AM : c99d8b48fc245d98e1a2bab6594458c9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB963027$\mshtml.dll : 3,067,904 : 12/12/2008 09:01 AM : c828aa1c5469e72251f3d367005e589f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB969897$\mshtml.dll : 3,068,416 : 02/20/2009 09:11 AM : 2f70f2f74c40397d031016fa162981c2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB972260$\mshtml.dll : 3,068,928 : 04/29/2009 09:46 AM : abd8093e43e53aea5898d2214b92e9ba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB974455$\mshtml.dll : 3,069,440 : 07/18/2009 09:05 AM : 7467941be64dfc5f8e9f3dc1de920806 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB976325$\mshtml.dll : 3,070,976 : 10/19/2009 07:53 PM : 4d1eaa7e0b845d1b2e8d711ae754d0f2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB976749$\mshtml.dll : 3,070,976 : 09/25/2009 07:37 AM : 601e18a9a8f0d0ed39692b593212378f [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\mshtml.dll : 5,950,976 : 05/06/2010 08:41 AM : c7b7a88cc7d7aba5c395145bf92f46f7 [Pos Repl]
+-> C:\WINDOWS\ie8\mshtml.dll : 3,070,976 : 10/29/2009 03:08 PM : d1cf72c34baf70c52797d1cb78d6ee92 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll : 5,950,976 : 05/06/2010 08:41 AM : c7b7a88cc7d7aba5c395145bf92f46f7 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll : 5,951,488 : 06/24/2010 08:22 AM : 4d7ef94795384cd2bbaab078b7929fea [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll : 5,957,120 : 09/10/2010 08:58 AM : de41132da8e5a3cd57201c6f2175ec05 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll : 5,959,168 : 11/05/2010 08:26 PM : d7cca87057901c87ed8cc40ddcc7fa1b [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll : 5,961,216 : 12/20/2010 06:59 PM : 1edcec5d649dbac37ed9ffb5a14ceb0c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll : 5,962,240 : 02/22/2011 06:06 PM : c2ef2335f1b6c2be20a67d9098f6c9a1 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\mshtml.dll : 5,964,800 : 05/30/2011 06:19 PM : 22ba5235ea846eda87f68a1dcc2bfcf9 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\mshtml.dll : 5,969,920 : 07/25/2011 06:17 AM : 23b3c8e9f3f280180573569253ce98ab [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5,971,456 : 10/03/2011 06:35 AM : 4963cb503600fc3bcbdbfba51fba1fac [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\mshtml.dll : 5,978,112 : 11/04/2011 03:20 PM : dd8d655e1881b70a5259a23a6018a6c2 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\mshtml.dll : 5,979,136 : 12/17/2011 02:46 PM : a9259cd226283cd4f798c00909754a94 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\mshtml.dll : 5,978,624 : 03/01/2012 02:01 AM : dade53318d8e5335ee2e1745f1c3fc4d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\mshtml.dll : 6,007,808 : 05/11/2012 02:42 AM : 886b62a906b3967cbbf0fd2c833a30bf [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2744842-IE8\mshtml.dll : 6,008,320 : 07/02/2012 01:49 PM : 13d2e016b784730a98f24d6e5beed22f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll : 5,937,152 : 03/08/2009 01:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll : 5,940,736 : 10/29/2009 01:45 AM : cbb1ef54b86edb78649909dd1699e5ca [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll : 5,942,784 : 12/21/2009 02:14 PM : be6eebef636773a8e7a82214e81c563a [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll : 5,944,832 : 02/25/2010 02:24 AM : 7054f6adc9b670887659f1561603b0d0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mshtml.dll : 3,066,880 : 04/13/2008 08:11 PM : a706e122b398fe1ab85cb9b75d044223 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3GDR\mshtml.dll : 5,940,736 : 10/29/2009 00:45 AM : cbb1ef54b86edb78649909dd1699e5ca [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3QFE\mshtml.dll : 5,944,320 : 10/29/2009 00:45 AM : c0f9ac6fab2c788ffee3e69585a0e93f [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mshtml.dll : 6,008,832 : 08/28/2012 08:14 AM : df3c3ca94cbc9de07ac3eb49440a8d45 [Pos Repl]

* C:\WINDOWS\System32\msimg32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll : 4,608 : 08/04/2004 03:00 AM : b5331f2b6f37c66c29c847f3b94ff900 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msimg32.dll : 4,608 : 04/13/2008 08:11 PM : affc87e2501fce8f09d4c10ba6421ccf [Pos Repl]

* C:\WINDOWS\System32\mspmsnsv.dll [NoSig]
+-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 25,088 : 01/28/2005 03:44 AM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\mspmsnsv.dll : 27,136 : 10/18/2006 10:47 PM : c51b4a5c05a5475708e3c81c7765b71d [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll : 25,088 : 01/28/2005 10:44 AM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll : 52,224 : 08/04/2004 02:00 AM : c086483e3dba8c1c0a687ec8d5b3d4c1 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mspmsnsv.dll : 27,136 : 10/18/2006 10:47 PM : c51b4a5c05a5475708e3c81c7765b71d [Pos Repl]

* C:\WINDOWS\System32\msprivs.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msprivs.dll : 48,128 : 08/04/2004 03:00 AM : 6bec17053284e847cf1fbb8c9a181e1e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msprivs.dll : 48,128 : 04/13/2008 10:23 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl]

* C:\WINDOWS\System32\msvcrt.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll : 343,040 : 08/04/2004 03:00 AM : b0fefa816d61ec66aa765ddf534eab5e [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322,560 : 08/04/2004 08:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll : 343,040 : 08/04/2004 08:00 AM : 98ec447e00229afd88d5161a25d065da [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : d7075e95aa599ee77b7a89d39296bd3d [Pos Repl]

* C:\WINDOWS\System32\mswsock.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll : 245,248 : 06/20/2008 01:36 PM : 1dfca7713ea5a70d5d93b436aea0317a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll : 245,248 : 06/20/2008 01:41 PM : 097722f235a1fb698bf9234e01b52637 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll : 245,248 : 08/04/2004 08:00 AM : 4e74af063c3271fbea20dd940cfd1184 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mswsock.dll : 245,248 : 06/20/2008 08:02 AM : 943337d786a56729263071623bbb9de5 [Pos Repl]

* C:\WINDOWS\System32\netlogon.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll : 407,040 : 08/04/2004 08:00 AM : 96353fcecba774bb8da74a1c6507015a [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\netlogon.dll : 407,040 : 04/13/2008 08:12 PM : 1b7f071c51b77c272875c3a23e1e4550 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netlogon.dll : 407,040 : 04/13/2008 08:12 PM : 1b7f071c51b77c272875c3a23e1e4550 [Pos Repl]

* C:\WINDOWS\System32\netman.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll : 197,632 : 08/22/2005 02:24 PM : 3516d8a18b36784b1005b950b84232e1 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\netman.dll : 197,632 : 08/22/2005 02:29 PM : 36739b39267914ba69ad0610a0299732 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB905414$\netman.dll : 198,144 : 08/04/2004 02:00 AM : dab9e6c7105d2ef49876fe92c524f565 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\netman.dll : 198,144 : 04/13/2008 08:12 PM : 13e67b55b3abd7bf3fe7aae5a0f9a9de [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netman.dll : 198,144 : 04/13/2008 08:12 PM : 13e67b55b3abd7bf3fe7aae5a0f9a9de [Pos Repl]

* C:\WINDOWS\System32\ntkrnlpa.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2,069,376 : 12/09/2010 06:39 PM : f67cd97282e0abfaf91a9a1359b16f2d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe : 2,069,376 : 10/25/2011 06:52 AM : db19fff0c805664cb95062c027b11fe9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2,069,120 : 04/11/2012 06:42 AM : 063a0f8a90d8e2b802e5243fe9aabcf3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe : 2,069,120 : 05/04/2012 06:41 AM : 8e99a0ce02c1beda6c0935a4dde9ceaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntkrnlpa.exe : 2,069,632 : 08/21/2012 06:05 AM : b326d5e256d2f32b23e64f49debce31b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe : 2,056,832 : 03/01/2005 07:36 PM : d8aba3eab509627e707a3b14f00fbb6b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2,066,176 : 02/06/2009 07:30 AM : 607352b9cb3d708c67f6039097801b5a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe : 2,066,048 : 08/14/2008 07:33 AM : 4ac58f03eb94a72809949d757fc39d80 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe : 2,066,048 : 08/14/2008 03:39 PM : a25e9b86effb2af33bf51e676b68bfb0 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe : 2,066,176 : 08/04/2009 06:47 PM : 363b2bbee0aedc9e5433616d0ad0236a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe : 2,066,176 : 12/08/2009 11:10 PM : ffdce1eea79c678c40237d4e031e5b51 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe : 2,066,944 : 02/16/2010 11:12 AM : ded8b5a89b085284634502e9d75ac78c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe : 2,066,944 : 04/28/2010 11:14 AM : 756362706de8bc92f11e197c98a73844 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe : 2,020,864 : 08/14/2008 02:18 AM : 501fde895f35df1dae49fd54bbf9d396 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2,024,448 : 04/27/2010 02:05 AM : 49e936e1398d1a536e84cd5d068f0f09 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntkrnlpa.exe : 2,027,008 : 12/09/2010 02:07 AM : 9ed77e2307f6ec6f174c063c15aa3b8c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2,027,008 : 10/25/2011 02:52 AM : 36cac3c8c4c10f4e21bfeabbfe7acffc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntkrnlpa.exe : 2,026,496 : 04/11/2012 02:35 AM : 61cce48f7bd00e0e4d5cde206f2ddc1b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2724197$\ntkrnlpa.exe : 2,026,496 : 05/04/2012 02:32 AM : 87763bb6c95901818050e52c378c9e15 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB929338$\ntkrnlpa.exe : 2,015,744 : 06/22/2005 08:05 PM : 65f4b29a0793adb5d924fb3f47f1bca4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe : 2,017,280 : 12/19/2006 08:12 AM : fa64f313f5237c53a909906113acae7d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2,023,936 : 08/14/2008 08:33 AM : 8206b5f94a6a9450e934029420c1693f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841$\ntkrnlpa.exe : 2,023,936 : 04/13/2008 02:31 PM : 7f653a89f6e89e3ae0d49830eece35d4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841_0$\ntkrnlpa.exe : 2,017,280 : 02/28/2007 02:15 AM : 2dfb215e291e3d9b1cf9a6739b3bf16c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntkrnlpa.exe : 2,023,936 : 02/06/2009 02:32 AM : 65d4220799e6fc2cb079070a6393cc0e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntkrnlpa.exe : 2,023,936 : 08/04/2009 02:20 AM : 32b1a971183ec22dd91eeda61c499e7c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntkrnlpa.exe : 2,023,936 : 12/08/2009 01:43 PM : 089f1e207b067a4ddeb2eec37bbb1aa7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntkrnlpa.exe : 2,024,448 : 02/16/2010 01:25 AM : e8b8801de921912ebdeefc76662f7ead [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2,069,632 : 08/21/2012 08:58 AM : b2d4fd49ddef6def6900daac5730f425 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ntkrnlpa.exe : 2,024,448 : 02/16/2010 08:25 AM : e8b8801de921912ebdeefc76662f7ead [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe : 2,065,792 : 04/13/2008 02:31 PM : 109f8e3e3c82e337bb71b6bc9b895d61 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ntkrnlpa.exe : 2,069,632 : 08/21/2012 02:58 AM : b2d4fd49ddef6def6900daac5730f425 [Pos Repl]

* C:\WINDOWS\System32\ntmssvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll : 435,200 : 08/04/2004 01:00 AM : b62f29c00ac55a761b2e45877d85ea0f [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ntmssvc.dll : 435,200 : 04/13/2008 08:12 PM : 156f64a3345bd23c600655fb4d10bc08 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll : 435,200 : 04/13/2008 08:12 PM : 156f64a3345bd23c600655fb4d10bc08 [Pos Repl]

* C:\WINDOWS\System32\ntoskrnl.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2,192,768 : 12/09/2010 11:43 AM : a531bbd3de13121c1380ed7dc99082db [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe : 2,192,768 : 10/25/2011 11:34 AM : f512c662874d7545e5bd8005e6800a44 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2,192,640 : 04/11/2012 11:22 AM : 8d061bb825bc606c2b1c6f7452d1baaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe : 2,192,640 : 05/04/2012 11:20 AM : 099a0f80a563ebe935f4a9750f96c219 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntoskrnl.exe : 2,193,024 : 08/21/2012 11:48 AM : eca5980e1a78dbf9cb7f49f76791c0d1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe : 2,179,456 : 03/01/2005 08:04 PM : 28187802b7c368c0d3aef7d4c382aabb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2,189,184 : 02/07/2009 06:35 PM : efe8eace83eaad5849a7a548fb75b584 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe : 2,189,184 : 08/14/2008 06:11 AM : eeaf32f8e15a24f62becb1bd403bb5c5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe : 2,189,184 : 08/14/2008 04:11 PM : 31914172342bff330063f343ac6958fe [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe : 2,189,312 : 08/04/2009 04:56 AM : fde779ea1a564ebfe16f4e0f82b61bad [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe : 2,189,312 : 12/08/2009 11:52 PM : 05be3d9a71972223aff6a3c823ba51b1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe : 2,190,080 : 02/16/2010 11:52 AM : e1f653a542449d54fa2d27463d99b6b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe : 2,190,080 : 04/27/2010 11:50 AM : a2abbec40cdb57454645d06b7ebd22f5 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe : 2,142,720 : 08/14/2008 01:55 AM : 60794ea12961b7341ad54c731b50ae15 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2,146,304 : 04/27/2010 01:59 AM : 466a3e1239f4a9428797730e81a7a865 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntoskrnl.exe : 2,148,864 : 12/09/2010 01:42 AM : 60e16152d847d7a7b7d3da4c4b8e2120 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2,148,864 : 10/25/2011 01:37 AM : 3b663b9b193d7e1de39a466020f1fd91 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntoskrnl.exe : 2,148,352 : 04/11/2012 01:14 AM : a144d60b35e6dd14ccb9649b5e0d1092 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2724197$\ntoskrnl.exe : 2,148,352 : 05/04/2012 01:16 AM : ac4b3c4a6dc31867034c66663b9b8a38 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe : 2,136,064 : 06/22/2005 08:30 PM : 5611f453c6d20ab0552956f39bcddb88 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe : 2,137,600 : 12/19/2006 08:49 AM : 57b9d140e1eb8b0ea06df927b63b0eee [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2,145,280 : 08/14/2008 08:09 AM : f6f8245b3a2e9ca834dd318e7ae0c6d0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe : 2,145,280 : 04/13/2008 03:24 PM : 40f8880122a030a7e9e1fedea833b33d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956841_0$\ntoskrnl.exe : 2,137,600 : 02/28/2007 03:53 AM : e6679c3023b17d8b78946bc5df53fa20 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe : 2,145,280 : 02/06/2009 03:06 AM : 0cba44d0938d57f334c0862424148b70 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntoskrnl.exe : 2,145,280 : 08/04/2009 03:13 AM : 78fcc97cd878d4cf5b5d2158a5a7cf92 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntoskrnl.exe : 2,145,280 : 12/08/2009 02:26 PM : 9696c553f994340cd6aa5c5a724c3a19 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntoskrnl.exe : 2,146,304 : 02/16/2010 02:08 AM : 048db3459fab4ca741dcc84e1f374d65 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2,192,896 : 08/21/2012 08:29 AM : 49fb9f4a7ce25b82b1e00c402783f5c5 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ntoskrnl.exe : 2,146,304 : 02/16/2010 08:08 AM : 048db3459fab4ca741dcc84e1f374d65 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe : 2,188,928 : 04/13/2008 03:27 PM : 0c89243c7c3ee199b96fcc16990e0679 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ntoskrnl.exe : 2,192,896 : 08/21/2012 03:29 AM : 49fb9f4a7ce25b82b1e00c402783f5c5 [Pos Repl]

* C:\WINDOWS\System32\oakley.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 270,336 : 10/13/2009 11:38 AM : 7eadba6d371c60cca9e4db57c28c8045 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\oakley.dll : 266,752 : 08/04/2004 02:00 AM : a76128be63eea6a3af521a0576d3ebf7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 270,336 : 04/13/2008 08:12 PM : 33ceb89b62589e8b12aee9e2d523dade [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\oakley.dll : 270,336 : 04/13/2008 08:12 PM : 33ceb89b62589e8b12aee9e2d523dade [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\oakley.dll : 270,336 : 10/13/2009 08:30 AM : c5ff8682eada5b3b27a865f1c3ef9270 [Pos Repl]

* C:\WINDOWS\System32\ole32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1,289,216 : 11/01/2011 11:05 AM : 7d9dde1ab4b00ddb173f5a16e9206517 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll : 1,286,144 : 04/28/2005 03:35 PM : 7440d29f257b7e44329343f944f2142c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll : 1,285,632 : 07/26/2005 03:20 AM : a2f755e237fa2cdd748a80bfbe6657f3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1,289,216 : 07/16/2010 03:04 AM : 8d51fb47062f2a1a9efeccef338a4c46 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ole32.dll : 1,285,120 : 07/26/2005 08:39 AM : ab8231d13692ac5088eb9c226b0c0576 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1,288,192 : 07/16/2010 08:05 AM : 7a6a7900b5e322763430ba6fd9a31224 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB894391$\ole32.dll : 1,281,536 : 08/04/2004 08:00 AM : 4fe9d9fa62d020e35e0ac6d1aeeb96f0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\ole32.dll : 1,285,120 : 04/28/2005 03:31 PM : 5950e4f28fda9d147576bf6798937397 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ole32.dll : 1,288,704 : 11/01/2011 08:07 AM : 6bad1bed9872e62049e487fb91ae2f3a [Pos Repl]

* C:\WINDOWS\System32\olepro32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll : 83,456 : 08/04/2004 08:00 AM : b48d3193dd1474dcbcc32bf4779ac698 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [Pos Repl]

* C:\WINDOWS\System32\perfctrs.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll : 39,936 : 08/04/2004 08:00 AM : 96492c721c6ea517e2bfd5381fef55e3 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\perfctrs.dll : 39,936 : 04/13/2008 08:12 PM : dbe2b62353660ecca0d75ea307a717e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll : 39,936 : 04/13/2008 08:12 PM : dbe2b62353660ecca0d75ea307a717e9 [Pos Repl]

* C:\WINDOWS\System32\powrprof.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll : 17,408 : 08/04/2004 08:00 AM : 1b5f6923abb450692e9fe0672c897aed [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\powrprof.dll : 17,408 : 04/13/2008 08:12 PM : 50a166237a0fa771261275a405646cc0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\powrprof.dll : 17,408 : 04/13/2008 08:12 PM : 50a166237a0fa771261275a405646cc0 [Pos Repl]

* C:\WINDOWS\System32\psbase.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psbase.dll : 96,768 : 08/04/2004 08:00 AM : 4d3ccdf22d2b4bae229ba73b81d13e26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psbase.dll : 96,768 : 04/13/2008 08:12 PM : 22d89d84e8e081cda529dbf8c0255a38 [Pos Repl]

* C:\WINDOWS\System32\pstorsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pstorsvc.dll : 34,304 : 08/04/2004 08:00 AM : 306b30a036db25fcb76b507fede07d58 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll : 34,304 : 04/13/2008 08:12 PM : 853d0d0c6f02d7bfdf1cf99dd7553732 [Pos Repl]

* C:\WINDOWS\System32\qmgr.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll : 382,464 : 08/04/2004 08:00 AM : 2c69ec7e5a311334d10dd95f338fccea [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]
+-> C:\WINDOWS\system32\bits\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]

* C:\WINDOWS\System32\rasadhlp.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll : 7,680 : 06/26/2006 01:45 PM : b5d08c96b2dadaf5171fb69e341b272b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll : 8,192 : 06/26/2006 01:37 PM : 5f098bd2ae6b03044b085decffdf91ec [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll : 7,680 : 04/13/2008 08:12 PM : 6f9bef24c578d5d6740e080bedd6a448 [Pos Repl]

* C:\WINDOWS\System32\regsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll : 59,904 : 08/04/2004 01:00 AM : 3151427db7d87107d1c5be58fac53960 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\regsvc.dll : 59,904 : 04/13/2008 08:12 PM : 5b19b557b0c188210a56a6b699d90b8f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\regsvc.dll : 59,904 : 04/13/2008 08:12 PM : 5b19b557b0c188210a56a6b699d90b8f [Pos Repl]

* C:\WINDOWS\System32\rpcss.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll : 396,288 : 04/28/2005 03:35 PM : da383fb39a6f1c445f3afc94b3eb1248 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll : 398,336 : 07/26/2005 03:20 AM : c369df215d352b6f3a0b8c3469aa34f8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401,408 : 02/09/2009 03:56 AM : 9222562d44021b988b9f9f62207fb6f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll : 397,824 : 07/26/2005 01:39 AM : ce94a2bd25e3e9f4d46a7373ff455c6d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll : 395,776 : 08/04/2004 01:00 AM : 5c83a4408604f737717ab96371201680 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll : 395,776 : 04/28/2005 03:31 PM : c8061f289e000703e7672916b7fe1571 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\rpcss.dll : 401,408 : 02/09/2009 08:10 AM : 6b27a5c03dfb94b4245739065431322c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rpcss.dll : 401,408 : 02/09/2009 08:10 AM : 6b27a5c03dfb94b4245739065431322c [Pos Repl]

* C:\WINDOWS\System32\scecli.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll : 180,224 : 08/04/2004 08:00 AM : 0f78e27f563f2aaf74b91a49e2abf19a [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\scecli.dll : 181,248 : 04/13/2008 08:12 PM : a86bb5e61bf3e39b62ab4c7e7085a084 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scecli.dll : 181,248 : 04/13/2008 08:12 PM : a86bb5e61bf3e39b62ab4c7e7085a084 [Pos Repl]

* C:\WINDOWS\System32\schannel.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2541763\SP3QFE\schannel.dll : 151,552 : 04/29/2011 01:23 PM : 6fd5eec3703d7770c9029e774acc2294 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152,064 : 11/16/2011 01:20 AM : d444009f7cd704c89f7f9e62396ed4f1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153,088 : 06/04/2012 01:31 AM : 26f1193092b9ac2586deb38dd1cbb25c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll : 144,896 : 04/25/2007 04:32 PM : d8b13f0b90de29903cbe044190417f98 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP2QFE\schannel.dll : 144,896 : 12/05/2008 04:41 AM : f63b1a19104e59dd7dc8a79785a16317 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP3GDR\schannel.dll : 144,896 : 12/05/2008 04:54 AM : 636c52fc618acb09ec356e9e82d072e2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll : 144,896 : 12/05/2008 04:58 AM : 1cdfcf9d0fdc55d76ac3955bd04ac200 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147,456 : 06/25/2009 04:41 AM : e513ba8bc33fd00f35d69659b478b1df [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980436\SP3QFE\schannel.dll : 149,504 : 06/30/2010 04:23 AM : e04b6497b6407d2f444e86b30680dc5a [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\schannel.dll : 144,896 : 12/05/2008 08:12 AM : 2b9156e888c2bee2a8c3820268d935df [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2541763$\schannel.dll : 149,504 : 06/30/2010 08:31 AM : 30ace70b3c0242f0d1ac3b4fa708710f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 151,552 : 04/29/2011 01:25 PM : abeedd547e939ad827b2e29dec754206 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152,064 : 11/16/2011 01:21 AM : a645a78fcdabad67067324d7e6cd9f79 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB935840$\schannel.dll : 144,896 : 08/04/2004 01:00 AM : 29632e787dcfc0085a555c681eb82693 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960225$\schannel.dll : 144,384 : 04/13/2008 08:12 PM : c61e8ecffdbf05ff71d079bbd35396b3 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB960225_0$\schannel.dll : 144,896 : 04/25/2007 08:21 AM : 532ea80e9f5452928f8426653215be29 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144,896 : 12/05/2008 08:54 AM : 636c52fc618acb09ec356e9e82d072e2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980436$\schannel.dll : 147,456 : 06/25/2009 08:25 AM : bfdece69e293e6db4e25def862418428 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schannel.dll : 144,384 : 04/13/2008 08:12 PM : c61e8ecffdbf05ff71d079bbd35396b3 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\schannel.dll : 152,576 : 06/04/2012 08:32 AM : 0f64207b49390c8063c36ae7cbf9c2db [Pos Repl]

* C:\WINDOWS\System32\schedsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll : 190,976 : 08/04/2004 08:00 AM : 92360854316611f6cc471612213c3d92 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\schedsvc.dll : 192,512 : 04/13/2008 08:12 PM : 0a9a7365a1ca4319aa7c1d6cd8e4eafa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll : 192,512 : 04/13/2008 08:12 PM : 0a9a7365a1ca4319aa7c1d6cd8e4eafa [Pos Repl]

* C:\WINDOWS\System32\services.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 110,592 : 02/06/2009 04:06 AM : 020ceaaedc8eb655b6506b8c70d53bb6 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\services.exe : 108,032 : 08/04/2004 08:00 AM : c6ce6eec82f187615d1002bb3bb50ed4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\services.exe : 110,592 : 02/06/2009 08:11 AM : 65df52f5b8b6e9bbd183505225c37315 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\services.exe : 110,592 : 02/06/2009 08:11 AM : 65df52f5b8b6e9bbd183505225c37315 [Pos Repl]

* C:\WINDOWS\System32\setupapi.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll : 985,088 : 06/26/2006 08:51 AM : a1abf509b1a1f01fbf52d34a0e1cde3d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\setupapi.dll : 985,088 : 04/14/2008 08:42 AM : 24192246760e0e64435522e246b1d6c2 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\setupapi.dll : 985,088 : 04/14/2008 08:42 AM : 24192246760e0e64435522e246b1d6c2 [Pos Repl]

* C:\WINDOWS\System32\sfc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfc.dll : 5,120 : 08/04/2004 08:00 AM : e8a12a12ea9088b4327d49edca3add3e [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [Pos Repl]

* C:\WINDOWS\System32\sfcfiles.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll : 1,580,544 : 08/04/2004 08:00 AM : 30a609e00bd1d4ffc49d6b5a432be7f2 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [Pos Repl]

* C:\WINDOWS\System32\shsvcs.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll : 135,168 : 12/19/2006 04:50 PM : 53d9184a21c5cbf600d918e51ef3a7e5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135,168 : 07/27/2009 06:13 PM : 888cd7b39c37e13a2419becfaaf0a28c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll : 134,656 : 12/19/2006 04:52 PM : 6815def9b810aefac107eeaf72da6f82 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928255$\shsvcs.dll : 134,656 : 08/04/2004 04:00 AM : e7518dc542d3ebdcb80edd98462c7821 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\shsvcs.dll : 135,168 : 07/27/2009 07:17 PM : 99bc0b50f511924348be19c7c7313bbf [Pos Repl]

* C:\WINDOWS\System32\smss.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\smss.exe : 50,688 : 08/04/2004 08:00 AM : bd7fb0957c716f1a60333aee04de2178 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\smss.exe : 50,688 : 04/13/2008 08:12 PM : 5f816c1f539266d2d4c78694239da0b5 [Pos Repl]

* C:\WINDOWS\System32\spoolsv.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58,880 : 08/17/2010 06:19 AM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe : 57,856 : 06/10/2005 08:17 PM : ad3d9d191aea7b5445fe1d82ffbb4788 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe : 57,856 : 06/10/2005 07:53 PM : da81ec57acd4cdc3d4c51cf3d409af9f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\spoolsv.exe : 58,880 : 08/17/2010 08:17 AM : 60784f891563fb1b767f70117fc2428f [Pos Repl]

* C:\WINDOWS\System32\srsvc.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll : 170,496 : 08/04/2004 08:00 AM : 92bdf74f12d6cbec43c94d4b7f804838 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\srsvc.dll : 171,008 : 04/13/2008 08:12 PM : 3805df0ac4296a34ba4bf93b346cc378 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srsvc.dll : 171,008 : 04/13/2008 08:12 PM : 3805df0ac4296a34ba4bf93b346cc378 [Pos Repl]

* C:\WINDOWS\System32\ssdpsrv.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll : 71,680 : 08/04/2004 08:00 AM : 4b8d61792f7175bed48859cc18ce4e38 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ssdpsrv.dll : 71,680 : 04/13/2008 08:12 PM : 0a5679b3714edab99e357057ee88fca6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll : 71,680 : 04/13/2008 08:12 PM : 0a5679b3714edab99e357057ee88fca6 [Pos Repl]

* C:\WINDOWS\System32\svchost.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\svchost.exe : 14,336 : 08/04/2004 08:00 AM : 8f078ae4ed187aaabc0a305146de6716 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\svchost.exe : 14,336 : 04/13/2008 08:12 PM : 27c6d03bcdb8cfeb96b716f3d8be3e18 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\svchost.exe : 14,336 : 04/13/2008 08:12 PM : 27c6d03bcdb8cfeb96b716f3d8be3e18 [Pos Repl]

* C:\WINDOWS\System32\tapisrv.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll : 249,344 : 07/08/2005 08:28 AM : 1418a3a6e76e5a2e3f5e43866e793a8b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll : 249,344 : 07/08/2005 08:27 AM : fb78839b36025aa286a51289ed28b73e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB893756$\tapisrv.dll : 246,272 : 08/04/2004 08:00 AM : eb4a4187d74a8efdcbea3ea2cb1bdfbd [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\tapisrv.dll : 249,856 : 04/13/2008 08:12 PM : 3cb78c17bb664637787c9a1c98f79c38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll : 249,856 : 04/13/2008 08:12 PM : 3cb78c17bb664637787c9a1c98f79c38 [Pos Repl]

* C:\WINDOWS\System32\termsrv.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll : 295,424 : 08/04/2004 08:00 AM : b60c877d16d9c880b952fda04adf16e6 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\termsrv.dll : 295,424 : 04/13/2008 08:12 PM : ff3477c03be7201c294c35f684b3479f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termsrv.dll : 295,424 : 04/13/2008 08:12 PM : ff3477c03be7201c294c35f684b3479f [Pos Repl]

* C:\WINDOWS\System32\upnphost.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB931261\SP2QFE\upnphost.dll : 185,344 : 02/05/2007 03:19 PM : 36aca6cdc19c95ff468a1426eb7f32f0 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll : 185,344 : 02/05/2007 03:17 PM : aca5d98663d879c6baafcea7e2f1b710 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931261$\upnphost.dll : 185,344 : 08/04/2004 03:00 AM : 0546477bde979e33294fe97f6b3de84a [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\upnphost.dll : 185,856 : 04/13/2008 08:12 PM : 1ebafeb9a3fbdc41b8d9c7f0f687ad91 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\upnphost.dll : 185,856 : 04/13/2008 08:12 PM : 1ebafeb9a3fbdc41b8d9c7f0f687ad91 [Pos Repl]

* C:\WINDOWS\System32\user32.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll : 577,024 : 03/02/2005 01:19 PM : 1800f293bccc8ede8a70e12b88d80036 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll : 578,048 : 03/08/2007 01:48 AM : 7aa4f6c00405dfc4b70ed4214e7d687b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\user32.dll : 577,536 : 03/08/2007 03:36 AM : b409909f6e2e8a7067076ed748abf1e7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB890859$\user32.dll : 577,024 : 08/04/2004 03:00 AM : c72661f8552ace7c5c85e16a3cf505c4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925902$\user32.dll : 577,024 : 03/02/2005 01:09 PM : de2db164bbb35db061af0997e4499054 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\user32.dll : 578,560 : 04/13/2008 08:12 PM : b26b135ff1b9f60c9388b4a7d16f600b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\user32.dll : 578,560 : 04/13/2008 08:12 PM : b26b135ff1b9f60c9388b4a7d16f600b [Pos Repl]

* C:\WINDOWS\System32\userinit.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\userinit.exe : 24,576 : 08/04/2004 01:00 AM : 39b1ffb03c2296323832acbae50d2aff [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\userinit.exe : 26,112 : 04/13/2008 08:12 PM : a93aee1928a9d7ce3e16d24ec7380f89 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\userinit.exe : 26,112 : 04/13/2008 08:12 PM : a93aee1928a9d7ce3e16d24ec7380f89 [Pos Repl]

* C:\WINDOWS\System32\usp10.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406,016 : 04/16/2010 01:29 AM : f8894bcc961d461674002b4bae7aecc1 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\usp10.dll : 406,528 : 08/04/2004 01:00 AM : 2eb58f9dcd6ab320b46744a4ea48b2d2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usp10.dll : 406,016 : 04/16/2010 08:36 AM : 9e03dc5ab51cfd0190541ce2038d819d [Pos Repl]

* C:\WINDOWS\System32\UxTheme.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll : 218,624 : 08/04/2004 08:00 AM : 2cde496666a975a2ce8f969f3042c8db [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll : 218,624 : 04/13/2008 08:12 PM : 7a2cc3719b255e6b5d74396183b7715b [Pos Repl]

* C:\WINDOWS\System32\version.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\version.dll : 18,944 : 08/04/2004 08:00 AM : d38408967be738d0c1b47005bce8ceeb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\version.dll : 18,944 : 04/13/2008 08:12 PM : c7ce131408739b0b3a318be2d0032719 [Pos Repl]

* C:\WINDOWS\System32\w32time.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\w32time.dll : 174,592 : 08/04/2004 08:00 AM : 2b281958f5d0cf99ed626e3ef39d5c8d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\w32time.dll : 175,104 : 04/13/2008 08:12 PM : 54af4b1d5459500ef0937f6d33b1914f [Pos Repl]

* C:\WINDOWS\System32\wbem\wmiprvse.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227,840 : 02/06/2009 01:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe : 218,112 : 08/04/2004 08:00 AM : 075ea6c849ab0fe416a3d6dd65c3cf41 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wmiprvse.exe : 227,840 : 02/06/2009 08:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl]

* C:\WINDOWS\System32\wdigest.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54,272 : 06/25/2009 01:41 AM : d9dcec3fa1b27689fc56e34c38d3f148 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll : 49,152 : 08/04/2004 08:00 AM : a8b82c5d30b7ab937e164ab349478fba [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49,152 : 04/13/2008 08:12 PM : cefcc6a64983eb8119f3a07a0c1ede30 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdigest.dll : 49,152 : 04/13/2008 08:12 PM : cefcc6a64983eb8119f3a07a0c1ede30 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wdigest.dll : 54,272 : 06/25/2009 08:25 AM : 3aaf9b35939ff9e58ccd18d41655c2fc [Pos Repl]

* C:\WINDOWS\System32\wiaservc.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll : 333,824 : 12/19/2006 01:47 PM : d9f097aa3b97034d3358a01b43e635b2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll : 333,824 : 12/19/2006 01:16 PM : b6763f8534ac547cf1af98afdff2edc8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB927802$\wiaservc.dll : 333,312 : 08/04/2004 01:00 AM : d9f6c4f6b1e188adafc42b561d9bc2e6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll : 333,824 : 04/13/2008 08:12 PM : 8bad69cbac032d4bbacfce0306174c30 [Pos Repl]

* C:\WINDOWS\System32\wininet.dll [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll : 919,040 : 06/24/2010 01:24 AM : 60237e50d575fba9bec9bc043f157149 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll : 919,552 : 09/10/2010 01:57 AM : 0555e190dcd06b8998e6ddca42daeb82 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll : 919,552 : 11/05/2010 08:27 PM : 9357c4249f4810fb0e49c13387a8a77c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll : 919,552 : 12/20/2010 06:58 PM : 5504b4ecce892eb82cd2c5fa71940ac1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll : 919,552 : 02/22/2011 06:27 PM : a9fa95f0d7f511959ac721e4843e5967 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll : 919,552 : 04/25/2011 06:09 AM : 7f4f1697001b9e9a7924d219dc215903 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll : 919,552 : 06/23/2011 02:33 PM : 509cf67ae762a38e23a5455a0053853c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll : 919,552 : 08/22/2011 07:47 PM : 19630aebbfaeb06984cab91848270aaf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919,552 : 11/04/2011 03:19 PM : 4e4716caf514717814d07113ad0425b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll : 919,552 : 12/17/2011 02:45 PM : 84a48e9818e8440ddbfd8eec37c8a937 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\wininet.dll : 919,552 : 03/01/2012 02:58 AM : 4ec67fab39f37626ad6d9895fc094abf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\wininet.dll : 920,064 : 05/16/2012 02:06 AM : 553ad35768cd27959391dd5aa82cef6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\wininet.dll : 920,064 : 07/02/2012 01:48 PM : efb2241de3aa6480521a16d0cb67b0ec [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\wininet.dll : 920,064 : 08/28/2012 01:13 AM : dcea3b3193b7181cf818ecc4eab30a66 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB912945\SP2QFE\wininet.dll : 662,016 : 01/09/2006 01:02 PM : dde9597a3311748c1519444e2bc147bd [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\wininet.dll : 664,576 : 06/23/2006 01:25 AM : 64ce26db72810b30f7855ea51e1df836 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll : 666,112 : 04/21/2008 01:44 AM : 2b0c24aa747a93a28987b6d65a4a74bc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll : 666,624 : 04/21/2008 01:24 AM : 26f240c250e5b4b395cb4b178ba75437 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll : 666,112 : 06/23/2008 01:09 AM : f12fbb673de9cc802c5dc518fe99aa2f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll : 666,624 : 06/23/2008 01:54 AM : 972299b7241ec325d8c7e5638c884925 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\wininet.dll : 666,112 : 08/20/2008 01:30 AM : 9af5f25124fbdc36e2b510729cba2674 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\wininet.dll : 666,624 : 08/20/2008 01:58 AM : 94418f53d2612c26dbadc04dafbc197c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3GDR\wininet.dll : 666,112 : 10/15/2008 09:00 PM : 1576318bf08d28cc61d1278114ad8d5b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\wininet.dll : 667,136 : 10/15/2008 09:04 PM : e8fce58a470999350f64c591557f9e42 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB963027\SP3QFE\wininet.dll : 667,648 : 02/20/2009 09:50 AM : 711feabed387b29ff7ed61bc6806a06c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB969897\SP3QFE\wininet.dll : 668,160 : 04/29/2009 09:21 AM : 04bcb4f87b35502568f6cf33433543a5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB972260\SP3QFE\wininet.dll : 668,160 : 06/26/2009 09:42 AM : 8553e6d4ec1563277323e6b2d6fbb954 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\wininet.dll : 668,672 : 09/25/2009 09:32 AM : 406d33f9b30ffc0eefc7c55562839931 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\wininet.dll : 668,672 : 10/29/2009 09:23 AM : 6ac4aa42cc9aaefab1d5e4e2af2e3d2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll : 916,480 : 10/29/2009 09:45 AM : 6af52998b90f72ff2325d84d90eda1cc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll : 916,480 : 12/21/2009 02:09 PM : 5e1f666b8955fd77e65d65c4c4d882a3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll : 919,040 : 02/25/2010 02:19 AM : 4458d59f2b0369f4d3b137541d284041 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll : 919,040 : 05/06/2010 02:36 AM : c1490f68b44af8b781f52f12f564625d [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wininet.dll : 667,648 : 10/16/2008 01:20 AM : 93c9d0a216498ee14eb9b26119bb95ee [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB918899$\wininet.dll : 658,944 : 06/23/2006 01:02 AM : 2b4db890936430c71419037039502752 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB922760$\wininet.dll : 664,576 : 06/23/2006 01:25 AM : 64ce26db72810b30f7855ea51e1df836 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB925454$\wininet.dll : 664,576 : 09/14/2006 01:31 AM : d207370287cf769aebebf03837784963 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB928090$\wininet.dll : 664,576 : 10/23/2006 01:34 AM : 231ef4179acabe486376b5ca893f1076 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB931768$\wininet.dll : 665,088 : 01/04/2007 01:05 AM : 3ffa1573fc274e5aa7467d03941c45ee [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB933566$\wininet.dll : 665,600 : 02/20/2007 01:52 AM : b258c922d22deec880b60720531d7627 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB937143$\wininet.dll : 665,600 : 04/18/2007 01:46 AM : 4261ba03afd659de04f0a17dfbdd454d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB939653$\wininet.dll : 665,600 : 06/26/2007 01:35 AM : e1a3dd68b5380b360a7310a64d9bb188 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB942615$\wininet.dll : 665,600 : 08/22/2007 01:55 AM : a1bc17eb3758d73c3938b2318820f5b4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB944533$\wininet.dll : 666,112 : 10/11/2007 01:57 AM : 80d660a49e0d118144423099b2a9f5da [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB947864$\wininet.dll : 666,112 : 12/06/2007 07:44 PM : 085a7c37f9c6ede1ba870b7dbec06399 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759$\wininet.dll : 666,112 : 04/13/2008 08:12 PM : 7a4f775abb2f1c97def3e73afa2faedd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950759_0$\wininet.dll : 666,112 : 02/16/2008 08:32 AM : bb1eacd6ab47e78ebca02eb781550d55 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838$\wininet.dll : 666,112 : 04/21/2008 08:44 AM : 2b0c24aa747a93a28987b6d65a4a74bc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB953838_0$\wininet.dll : 666,624 : 04/21/2008 08:56 AM : 2e7de1bf9418b071799eb53de8cc22f5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390$\wininet.dll : 666,112 : 06/23/2008 08:09 AM : f12fbb673de9cc802c5dc518fe99aa2f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956390_0$\wininet.dll : 667,136 : 06/23/2008 08:12 AM : 611ace3f4201e9610af8452f7c268995 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215$\wininet.dll : 666,112 : 08/20/2008 08:30 AM : 9af5f25124fbdc36e2b510729cba2674 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB958215_0$\wininet.dll : 667,648 : 08/20/2008 08:33 AM : c91e3a6ef094202f6b5ca8960dfcf243 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB963027$\wininet.dll : 666,112 : 10/15/2008 09:00 PM : 1576318bf08d28cc61d1278114ad8d5b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB969897$\wininet.dll : 666,112 : 02/20/2009 09:10 AM : 5b6a3eb7bb2f338bc2cb9f2fa4aaea9e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB972260$\wininet.dll : 666,624 : 04/29/2009 09:46 AM : 6002073519fa478bf89977369cdfd156 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB974455$\wininet.dll : 666,624 : 06/26/2009 09:50 AM : 70ffea4793d7139a447b169cb0e500bc [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB976325$\wininet.dll : 667,136 : 09/25/2009 09:37 AM : 178cf0f58c9907633aab633860b68973 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\wininet.dll : 916,480 : 05/06/2010 08:41 AM : 2d9c7b010409372c34f725da5cced083 [Pos Repl]
+-> C:\WINDOWS\ie8\wininet.dll : 667,136 : 10/29/2009 09:38 AM : 3839bd07f2c693efe995f96baab7f4bf [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll : 916,480 : 05/06/2010 08:41 AM : 2d9c7b010409372c34f725da5cced083 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll : 916,480 : 06/24/2010 08:22 AM : d3deb6b2b424ac93de3801eaeb21a9a5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll : 916,480 : 09/10/2010 08:58 AM : 36fe8abc59aafbe20cbe54bc372f9429 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll : 916,480 : 11/05/2010 08:26 PM : 306a2b05ea9846278113964dc6e2c940 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll : 916,480 : 12/20/2010 06:59 PM : 88014d62b5e3cdb0ac67948d86c926c8 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll : 916,480 : 02/22/2011 06:06 PM : f192d49eefe297fa858b2c774ba2291d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\wininet.dll : 916,480 : 04/25/2011 06:11 AM : cc951c2212a200475a587a440e0aa804 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\wininet.dll : 916,480 : 06/23/2011 02:36 PM : af4eddc6c0446fce5681b5ded52b8f0e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916,480 : 08/22/2011 07:48 PM : 1a377838b4b468e37c3eeb5baa24f925 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\wininet.dll : 916,992 : 11/04/2011 03:20 PM : 552263502ea8c24d301a0c43ff90b3ed [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\wininet.dll : 916,992 : 12/17/2011 02:46 PM : f362d50fbdc6e34918df41bde1770e5c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\wininet.dll : 916,992 : 03/01/2012 02:01 AM : 009e7b4c284f080608d7286484015ee5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\wininet.dll : 916,992 : 05/16/2012 02:08 AM : 6b1774334e2975aa60596e54f5ea1430 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2744842-IE8\wininet.dll : 916,992 : 07/02/2012 01:49 PM : c4300cb4d20b1159dc77e01e8a2525ec [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll : 914,944 : 03/08/2009 01:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll : 916,480 : 10/29/2009 01:45 AM : 75240f6edbce7b85df66874407d38a4f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll : 916,480 : 12/21/2009 02:14 PM : ff4241c74e0c0a5afffe05f584213ecb [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll : 916,480 : 02/25/2010 02:24 AM : 7a42cfed96cda7f2fb1a26d1f9f65775 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wininet.dll : 666,112 : 04/13/2008 08:12 PM : 7a4f775abb2f1c97def3e73afa2faedd [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3GDR\wininet.dll : 916,480 : 10/29/2009 00:45 AM : 75240f6edbce7b85df66874407d38a4f [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3QFE\wininet.dll : 916,480 : 10/29/2009 00:45 AM : 6af52998b90f72ff2325d84d90eda1cc [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wininet.dll : 916,992 : 08/28/2012 08:14 AM : ff1c14bca1a797ce45dd359fa2c9eda8 [Pos Repl]

* C:\WINDOWS\System32\winlogon.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe : 502,272 : 08/04/2004 09:00 AM : 01c3346c241652f43aed8e2149881bfe [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [Pos Repl]

* C:\WINDOWS\System32\ws2_32.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll : 82,944 : 08/04/2004 09:00 AM : 2ed0b7f12a60f90092081c50fa0ec2b2 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ws2_32.dll : 82,432 : 04/13/2008 08:12 PM : 2ccc474eb85ceaa3e1fa1726580a3e5a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll : 82,432 : 04/13/2008 08:12 PM : 2ccc474eb85ceaa3e1fa1726580a3e5a [Pos Repl]

* C:\WINDOWS\System32\ws2help.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll : 19,968 : 08/04/2004 09:00 AM : 9beacb911ca61e5881102188ab7fb431 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\ws2help.dll : 19,968 : 04/13/2008 08:12 PM : 9789e95e1d88eeb4b922bf3ea7779c28 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2help.dll : 19,968 : 04/13/2008 08:12 PM : 9789e95e1d88eeb4b922bf3ea7779c28 [Pos Repl]

* C:\WINDOWS\System32\wscntfy.exe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe : 13,824 : 08/04/2004 09:00 AM : 49911dd39e023bb6c45e4e436cfbd297 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\wscntfy.exe : 13,824 : 04/13/2008 08:12 PM : f92e1076c42fcd6db3d72d8cfe9816d5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe : 13,824 : 04/13/2008 08:12 PM : f92e1076c42fcd6db3d72d8cfe9816d5 [Pos Repl]

* C:\WINDOWS\System32\xmlprov.dll [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll : 129,536 : 08/04/2004 09:00 AM : eef46dab68229a14da3d8e73c99e2959 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\xmlprov.dll : 129,024 : 04/13/2008 08:12 PM : 295d21f14c335b53cb8154e5b1f892b9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll : 129,024 : 04/13/2008 08:12 PM : 295d21f14c335b53cb8154e5b1f892b9 [Pos Repl]

* C:\WINDOWS\explorer.exe [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe : 1,033,216 : 06/13/2007 02:26 AM : 7712df0cdde3a5ac89843e61cd5b3658 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\explorer.exe : 1,033,216 : 06/13/2007 09:23 AM : 97bd6515465659ff8f3b7be375b2ea87 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB938828$\explorer.exe : 1,032,192 : 08/04/2004 09:00 AM : a0732187050030ae399b241436565e64 [Pos Repl]
+-> C:\WINDOWS\ERDNT\cache\explorer.exe : 1,033,728 : 04/13/2008 08:12 PM : 12896823fb95bfb3dc9b46bcaedc9923 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\explorer.exe : 1,033,728 : 04/13/2008 08:12 PM : 12896823fb95bfb3dc9b46bcaedc9923 [Pos Repl]

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 10/28/2012 01:38:31 PM
Execution time: 1 hours(s), 12 minute(s), and 27 seconds(s)

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 03:09 PM

Ok, I take that Malwarebytes is installed on here.

Rerun TDSS and change the option on these to Cure or Delete.

14:33:41.0739 3432 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
14:33:41.0739 3432 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip


Now run......download the following program to your desktop:

Unhide.exe

Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.


Please download Rkill by Grinler and save it to your desktop.Link 1
Link 2
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
Do not reboot the computer, you will need to run the application again.


Update and run SAS.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 03:17 PM

SAS was removed a few days ago becuase it was slowing machine down. Do you want it re-installed prior to running the new scans?

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 03:33 PM

Then update and run MBAM
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 04:17 PM

Did as instructed. Can not open web browser. Can not update mbam as update box is grated out. White screen of death.

Suggestions?

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 04:34 PM

you are stuck at a white screen, nothing else opens?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 04:37 PM

No.. Error message now when attempting "the application failed to initialize properly (0xcoooo12d) click on ok to terminate application.. Rkrill just opened up and is running? 2 ie boxes still open with white screens

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 04:42 PM

Can you close those 2 thru Task Manager (press CTRL+SHIFT+ESC)
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 04:44 PM

Task manager error is same as above error

#12 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 04:46 PM

Rkill still running?

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 04:55 PM

Can you stop RKill
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 5Cape5

5Cape5
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:09:02 AM

Posted 28 October 2012 - 04:56 PM

Stopped Rkill

#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,534 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:02 AM

Posted 28 October 2012 - 04:57 PM

Can you reboot
this is a strange occurance


If asked use last known good configuration.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users