Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possibly Patched Files. Trojan agent? Windows XP


  • This topic is locked This topic is locked
3 replies to this topic

#1 NoiroAvecu

NoiroAvecu

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Guadalajara, Jalisco, Mexico
  • Local time:10:35 PM

Posted 28 January 2014 - 11:02 PM

I got this malware trojan agent last week, when downloading a fake smartdraw program, whit the following perceptible damage:

 

Google chrome (my default browser) got its star-up page and searche engine changed, again and again.

             Unable to open google, facebook, or any AV page

              slow performance

 

Pc Slow performance

 

Trying to come whit a solution I`ve tried (following various forums advices) iobit malware figther, cclean, malwarebytes, panda, avast, eset online, Rkill, hijackthis, all this aloud me to use chrome, but I got have the Rkill running

 

I've tried combofix (now I know I shouldn`t) but it always got frozen.

 

 

Lately I have run Rogue Killer, whit no results, 

 

Im afraid its getting worst, today I had to run the Rkill just to get my pc connected to the wireles lan.

 

 

So tanks for your time and help, 

 

Not sure to post the Rkill log but I'm going cracy!

 

Program started at: 01/28/2014 08:41:41 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * C:\WINDOWS\System32\alg.exe (PID: 2092) [WD-HEUR]
 
1 proccess terminated!
 
Possibly Patched Files.
 
 * C:\WINDOWS\system32\services.exe
 * C:\WINDOWS\system32\lsass.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\System32\svchost.exe
 * C:\WINDOWS\system32\spoolsv.exe
 * C:\WINDOWS\System32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\wscntfy.exe
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * Reparse Point/Junctions Found (Most likely legitimate)!
 
     * C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]
 
Checking Windows Service Integrity: 
 
 * Servicio de restauración de sistema (srservice) is not Running.
   Startup Type set to: Automatic
 
 * Controlador de filtro de Restaurar sistema (sr) is not Running.
   Startup Type set to: Disabled
 
Searching for Missing Digital Signatures: 
 
 * C:\WINDOWS\System32\appmgmts.dll : 175,104 : 04/14/2008 06:00 AM : 30cd42bfcdafefe8567b9e527dd3ae08 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\appmgmts.dll : 175,104 : 04/14/2008 06:00 AM : 30cd42bfcdafefe8567b9e527dd3ae08 [Pos Repl]
 
 * C:\WINDOWS\System32\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2705219-v2\SP3QFE\browser.dll : 78,336 : 07/06/2012 07:58 AM : 88f61096edaf97f86128ed9007802709 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2705219-v2$\browser.dll : 77,824 : 04/14/2008 06:00 AM : e28818bd591f8af8fbe9897472b9665e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\dbff1612eddd17847741606385847a4e\sp3gdr\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\dbff1612eddd17847741606385847a4e\sp3qfe\browser.dll : 78,336 : 07/06/2012 07:58 AM : 88f61096edaf97f86128ed9007802709 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [Pos Repl]
 
 * C:\WINDOWS\System32\clipsrv.exe : 33,280 : 04/14/2008 06:00 AM : 0c3bf68ab94cefd64b333b326f84510e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\clipsrv.exe : 33,280 : 04/14/2008 06:00 AM : 0c3bf68ab94cefd64b333b326f84510e [Pos Repl]
 
 * C:\WINDOWS\System32\comctl32.dll : 617,472 : 08/23/2010 10:12 AM : 3ddec846e57f668c07407f3ac3b66220 [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617,472 : 04/14/2008 06:00 AM : 618a4c7a7c0ca86da884c8c0facad8c2 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\comctl32.dll : 617,472 : 08/23/2010 10:12 AM : 3ddec846e57f668c07407f3ac3b66220 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921,088 : 04/14/2008 06:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1,054,208 : 04/14/2008 06:00 AM : 08d17a982cd6191b34d1b8c8a2e694b6 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1,054,208 : 08/23/2010 10:12 AM : 24b09ed0c5b019a5198a74504179eeb0 [Pos Repl]
 
 * C:\WINDOWS\System32\comres.dll : 837,120 : 04/14/2008 06:00 AM : 93f4e612c695e81512110956454e6e25 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\comres.dll : 837,120 : 04/14/2008 06:00 AM : 93f4e612c695e81512110956454e6e25 [Pos Repl]
 
 * C:\WINDOWS\System32\cryptsvc.dll : 62,464 : 04/14/2008 06:00 AM : e423c9c1946c656e0e4840210a0a8681 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\cryptsvc.dll : 62,464 : 04/14/2008 06:00 AM : e423c9c1946c656e0e4840210a0a8681 [Pos Repl]
 
 * C:\WINDOWS\System32\csrss.exe : 6,144 : 04/14/2008 06:00 AM : 485f449f57b0f8d306db884fc2f7ad45 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\csrss.exe : 6,144 : 04/14/2008 06:00 AM : 485f449f57b0f8d306db884fc2f7ad45 [Pos Repl]
 
 * C:\WINDOWS\System32\ctfmon.exe : 15,360 : 04/14/2008 06:00 AM : daae1cb1b1875b760496e7d3336da1ad [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ctfmon.exe : 15,360 : 04/14/2008 06:00 AM : daae1cb1b1875b760496e7d3336da1ad [Pos Repl]
 
 * C:\WINDOWS\System32\d3d8.dll : 1,179,648 : 04/14/2008 06:00 AM : 5e2386c25cee0dbd0efc37333a1c8cca [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d8.dll : 1,179,648 : 04/14/2008 06:00 AM : 5e2386c25cee0dbd0efc37333a1c8cca [Pos Repl]
 
 * C:\WINDOWS\System32\d3d8thk.dll : 8,192 : 04/14/2008 06:00 AM : 6df3da5705861ce9da8da72e663ae052 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d8thk.dll : 8,192 : 04/14/2008 06:00 AM : 6df3da5705861ce9da8da72e663ae052 [Pos Repl]
 
 * C:\WINDOWS\System32\d3d9.dll : 1,689,088 : 04/14/2008 06:00 AM : ae5dd931efab3687ba4df0671f4ce078 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d9.dll : 1,689,088 : 04/14/2008 06:00 AM : ae5dd931efab3687ba4df0671f4ce078 [Pos Repl]
 
 * C:\WINDOWS\System32\ddraw.dll : 279,552 : 04/14/2008 06:00 AM : 28d0d87445f4add6614155ec13f042dd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ddraw.dll : 279,552 : 04/14/2008 06:00 AM : 28d0d87445f4add6614155ec13f042dd [Pos Repl]
 
 * C:\WINDOWS\System32\dllhost.exe : 5,120 : 04/14/2008 06:00 AM : 0f886de058726bb6323bfd98773fad26 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dllhost.exe : 5,120 : 04/14/2008 06:00 AM : 0f886de058726bb6323bfd98773fad26 [Pos Repl]
 
 * C:\WINDOWS\System32\dsound.dll : 367,616 : 04/14/2008 06:00 AM : 9ef059a2c76bce8db9b0dd95efe23a48 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dsound.dll : 367,616 : 04/14/2008 06:00 AM : 9ef059a2c76bce8db9b0dd95efe23a48 [Pos Repl]
 
 * C:\WINDOWS\System32\dssenh.dll : 138,752 : 04/14/2008 06:00 AM : fede68bf80052bad393afd5c2e60dcb0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dssenh.dll : 138,752 : 04/14/2008 06:00 AM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]
 
 * C:\WINDOWS\System32\es.dll : 253,952 : 07/07/2008 02:27 PM : a225dd0d0489bd580781d19524a10b19 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253,952 : 07/07/2008 02:25 PM : 6ec3c2a5cea41b78bb55b30444292cb8 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246,272 : 04/14/2008 06:00 AM : 76abf3bb5a6d684641ec92b28240811d [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\es.dll : 253,952 : 07/07/2008 02:27 PM : a225dd0d0489bd580781d19524a10b19 [Pos Repl]
 
 * C:\WINDOWS\System32\eventlog.dll : 56,320 : 04/14/2008 06:00 AM : 2744c713f0217bd8ffd13e2ef731371c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\eventlog.dll : 56,320 : 04/14/2008 06:00 AM : 2744c713f0217bd8ffd13e2ef731371c [Pos Repl]
 
 * C:\WINDOWS\System32\hid.dll : 20,992 : 04/14/2008 06:00 AM : d3e333d2883647b600a51a3526c60760 [NoSig]
 
 * C:\WINDOWS\System32\hnetcfg.dll : 347,136 : 04/14/2008 06:00 AM : 54b34da91eaf52a8eac654ced8977980 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\hnetcfg.dll : 347,136 : 04/14/2008 06:00 AM : 54b34da91eaf52a8eac654ced8977980 [Pos Repl]
 
 * C:\WINDOWS\System32\imm32.dll : 110,080 : 04/14/2008 06:00 AM : 95df6a7520912b1040f748a287ea382a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\imm32.dll : 110,080 : 04/14/2008 06:00 AM : 95df6a7520912b1040f748a287ea382a [Pos Repl]
 
 * C:\WINDOWS\System32\ipsecsvc.dll : 184,832 : 04/14/2008 06:00 AM : 6ed80775cbc24bb4a3900d6fd3b1b971 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipsecsvc.dll : 184,832 : 04/14/2008 06:00 AM : 6ed80775cbc24bb4a3900d6fd3b1b971 [Pos Repl]
 
 * C:\WINDOWS\System32\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2758857\SP3QFE\kernel32.dll : 1,044,992 : 10/02/2012 10:57 PM : 34a51de07eb51d7f0a8eea573f58fc31 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 1,044,992 : 03/21/2009 06:30 PM : 97d5372816ec546bd035edaedb5e6918 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2758857$\kernel32.dll : 1,042,944 : 03/21/2009 08:08 AM : 7dc06bf4cbc3fcd7557d8d69dfbd49f5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 1,042,944 : 04/14/2008 06:00 AM : f43fe49cf77ec1cef9db9e67bddb970f [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f289ad28c8ed2ec4b4cd8e334d790b89\sp3gdr\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f289ad28c8ed2ec4b4cd8e334d790b89\sp3qfe\kernel32.dll : 1,044,992 : 10/02/2012 10:57 PM : 34a51de07eb51d7f0a8eea573f58fc31 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [Pos Repl]
 
 * C:\WINDOWS\System32\ksuser.dll : 4,096 : 04/14/2008 07:48 AM : d9a84134776399f6bd244bc456076575 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ksuser.dll : 4,096 : 04/14/2008 07:48 AM : d9a84134776399f6bd244bc456076575 [Pos Repl]
 
 * C:\WINDOWS\System32\linkinfo.dll : 19,968 : 04/14/2008 06:00 AM : fb67f1e092ab9967d0cd17300d751874 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\linkinfo.dll : 19,968 : 04/14/2008 06:00 AM : fb67f1e092ab9967d0cd17300d751874 [Pos Repl]
 
 * C:\WINDOWS\System32\lpk.dll : 22,016 : 04/14/2008 06:00 AM : 87f15a88aa3376b48f75d7d176b312a0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\lpk.dll : 22,016 : 04/14/2008 06:00 AM : 87f15a88aa3376b48f75d7d176b312a0 [Pos Repl]
 
 * C:\WINDOWS\System32\lsass.exe : 13,312 : 04/14/2008 06:00 AM : 671aca589da3733fac878a751c5bf0ed [NoSig]
 +-> C:\WINDOWS\system32\dllcache\lsass.exe : 13,312 : 04/14/2008 06:00 AM : 671aca589da3733fac878a751c5bf0ed [Pos Repl]
 
 * C:\WINDOWS\System32\mfc40u.dll : 953,856 : 09/18/2010 00:53 AM : 46ef24bcfaf0f7ab46b1a80ccc5bcc71 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953,856 : 09/18/2010 01:18 AM : c7d2de04eea71d72eb0a8793fa6e9fc1 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927,504 : 04/14/2008 06:00 AM : 27415ceeb58c8c2f92aff8cfe2517a3c [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mfc40u.dll : 953,856 : 09/18/2010 00:53 AM : 46ef24bcfaf0f7ab46b1a80ccc5bcc71 [Pos Repl]
 
 * C:\WINDOWS\System32\midimap.dll : 18,944 : 04/14/2008 06:00 AM : d94ff77931d467ac3ed916f767fa7e1f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\midimap.dll : 18,944 : 04/14/2008 06:00 AM : d94ff77931d467ac3ed916f767fa7e1f [Pos Repl]
 
 * C:\WINDOWS\System32\msgsvc.dll : 33,792 : 04/14/2008 06:00 AM : 047e70b04b288439245ddc8dd1a31982 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msgsvc.dll : 33,792 : 04/14/2008 06:00 AM : 047e70b04b288439245ddc8dd1a31982 [Pos Repl]
 
 * C:\WINDOWS\System32\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 01:12 PM : 4bb3b66ccbd71bcf84fdfef9a4955d63 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 09:17 AM : eb44f76332080fd115b8589d6dd8072f [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 04:27 AM : 5d7062aa7bbc8a5ff8ed8109325984e1 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2898785$\mshtml.dll : 3,066,880 : 04/14/2008 06:00 AM : 85b88c504d1527978f1c2fbe6a41e799 [Pos Repl]
 +-> C:\WINDOWS\ie8\mshtml.dll : 3,115,008 : 10/24/2013 06:52 PM : 8e781ad1e8634e447f44d7097561a409 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5,950,976 : 05/06/2010 04:33 AM : 4b1bb5db92df08aca55ea93b29f4bcf5 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2744842-IE8\mshtml.dll : 5,978,112 : 11/04/2011 01:13 PM : 289a867941db68c289315a680d8ce395 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2862772-IE8\mshtml.dll : 6,008,832 : 08/28/2012 09:18 AM : 1206a54ad9b011118ea975d17baf1541 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2898785-IE8\mshtml.dll : 6,017,536 : 07/25/2013 08:48 PM : d0b16611be7e6f6928bf8acc6a5671b8 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll : 5,937,152 : 03/08/2009 04:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\0e61ee957d652351f5a5d0e9abed293c\SP3QFE\mshtml.dll : 6,017,536 : 07/25/2013 08:48 PM : d0b16611be7e6f6928bf8acc6a5671b8 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4708fcee345fa37d587411628f0d1b32\sp3qfe\mshtml.dll : 3,115,008 : 10/24/2013 06:52 PM : 8e781ad1e8634e447f44d7097561a409 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\mshtml.dll : 5,950,976 : 05/06/2010 04:33 AM : 4b1bb5db92df08aca55ea93b29f4bcf5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 04:27 AM : 5d7062aa7bbc8a5ff8ed8109325984e1 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3GDR\mshtml.dll : 5,978,112 : 11/04/2011 01:13 PM : 289a867941db68c289315a680d8ce395 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 01:12 PM : 4bb3b66ccbd71bcf84fdfef9a4955d63 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\778eaeaa2835445423a5cd62d51cc9ec\SP3QFE\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3GDR\mshtml.dll : 6,008,832 : 08/28/2012 09:18 AM : 1206a54ad9b011118ea975d17baf1541 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 09:17 AM : eb44f76332080fd115b8589d6dd8072f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [Pos Repl]
 
 * C:\WINDOWS\System32\msimg32.dll : 4,608 : 04/14/2008 06:00 AM : b5d9efebe404a9a2c74ef27e1823a78b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msimg32.dll : 4,608 : 04/14/2008 06:00 AM : b5d9efebe404a9a2c74ef27e1823a78b [Pos Repl]
 
 * C:\WINDOWS\System32\mspmsnsv.dll : 26,112 : 05/09/2006 10:26 PM : f4db1f1417ff329e8ff217d5c474d5d7 [NoSig]
 +-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 52,736 : 04/14/2008 06:00 AM : 57cf215b0250de0c4ae36abc8ae31be4 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\MsPMSNSv.dll : 26,112 : 05/09/2006 10:26 PM : f4db1f1417ff329e8ff217d5c474d5d7 [Pos Repl]
 
 * C:\WINDOWS\System32\msprivs.dll : 48,128 : 04/14/2008 06:00 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msprivs.dll : 48,128 : 04/14/2008 06:00 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl]
 
 * C:\WINDOWS\System32\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : 0f021b29e0c2c9d897258399fb2149cd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : 0f021b29e0c2c9d897258399fb2149cd [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322,560 : 04/14/2008 06:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : b1cb86d70023988360da136b317d8546 [Pos Repl]
 
 * C:\WINDOWS\System32\mswsock.dll : 248,320 : 06/20/2008 10:03 AM : 5e11d375c92a0dda7ac4d487fc4e1978 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 248,320 : 06/20/2008 11:44 AM : dc10b07f256c8edf6642015e380c741e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 248,320 : 04/14/2008 06:00 AM : ad893c9d3a09081d55a4bdfbc66ad592 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mswsock.dll : 248,320 : 06/20/2008 10:03 AM : 5e11d375c92a0dda7ac4d487fc4e1978 [Pos Repl]
 
 * C:\WINDOWS\System32\netlogon.dll : 407,040 : 04/14/2008 06:00 AM : cd2bbb52dfaab666b812a51b1e96f2a0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netlogon.dll : 407,040 : 04/14/2008 06:00 AM : cd2bbb52dfaab666b812a51b1e96f2a0 [Pos Repl]
 
 * C:\WINDOWS\System32\netman.dll : 198,144 : 04/14/2008 06:00 AM : a48884c9359ee9f1fc8f3f0d93fb1d95 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netman.dll : 198,144 : 04/14/2008 06:00 AM : a48884c9359ee9f1fc8f3f0d93fb1d95 [Pos Repl]
 
 * C:\WINDOWS\System32\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2,071,808 : 12/09/2010 07:44 PM : 9f35605bc629f27aa34423b9de652284 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:51 AM : f3364f7432d706f7550fba400dec258e [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2,068,608 : 02/09/2009 05:17 AM : 9b5e5d325cedbb10a9a86679634a38cc [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2,068,480 : 02/10/2009 06:06 PM : 2050c3bab913974643d43c1a414cacb5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2,071,808 : 12/09/2010 09:13 AM : a09f7aae3b9d189f5f9fc16590df4a2d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2859537$\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:53 AM : 8a943e5db9bc152aff0d26f9e9a68eff [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2,068,224 : 04/14/2008 06:00 AM : 2e2931a58b112cdf2a99b00b5dacdbe4 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a252031a244addf5bac2b19c3105e2be\sp3qfe\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:53 AM : 8a943e5db9bc152aff0d26f9e9a68eff [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:51 AM : f3364f7432d706f7550fba400dec258e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 
 * C:\WINDOWS\System32\ntmssvc.dll : 437,760 : 04/14/2008 06:00 AM : d60c40d71a4d874c903255e4827afa0c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ntmssvc.dll : 437,760 : 04/14/2008 06:00 AM : d60c40d71a4d874c903255e4827afa0c [Pos Repl]
 
 * C:\WINDOWS\System32\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2,195,200 : 12/09/2010 09:14 AM : 4f2053b8b0d20f4b398a95bdd1905893 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:50 AM : 90eb3afd0833502e05d1d7a4b6f238a5 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2,191,616 : 02/10/2009 06:15 PM : 6bc8e4aafc98b556b8fb616ad30cd5a3 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2,191,488 : 02/09/2009 05:24 AM : 0a413fffe5c2fc00d5f8f6ff4b3f6889 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2,195,200 : 12/09/2010 09:13 AM : 5e8f8bbeac46044a99c1edce00e96b01 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2859537$\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:52 AM : ec6e69bcbf5cf5eac92626b82648a96e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2,191,360 : 04/14/2008 06:00 AM : 6468827016fa22cae81d7059f1a974c0 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a252031a244addf5bac2b19c3105e2be\sp3qfe\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:52 AM : ec6e69bcbf5cf5eac92626b82648a96e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:50 AM : 90eb3afd0833502e05d1d7a4b6f238a5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 
 * C:\WINDOWS\System32\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 271,360 : 10/13/2009 04:39 AM : 264586e0b00abf80b862c216be075c4d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2862152$\oakley.dll : 271,360 : 10/13/2009 04:33 AM : 3d85117c1907baf3fc164c987e98bfc2 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 271,360 : 04/14/2008 06:00 AM : 4526fd371e434d45e14102328a025637 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\17497e6ba3e7f2f989f0c6051974bb91\sp3qfe\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [Pos Repl]
 
 * C:\WINDOWS\System32\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1,288,704 : 11/01/2011 10:05 AM : e8c2fa9ac16c25c0ab0677ba12d74bc1 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1,288,704 : 07/16/2010 05:59 AM : bcfea258277fb42dd7f447eb61c34d06 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1,287,680 : 07/16/2010 06:00 AM : 448fe53c1b2671db712c8e8838e4263f [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2876217$\ole32.dll : 1,288,192 : 11/01/2011 10:07 AM : 494276cfe71555ae0f3234c1b227e67a [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1,287,168 : 04/14/2008 06:00 AM : 463d57bf9fe5871208ff99399360a57d [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\c511efad6d013f61ef8d93c160a4e698\sp3qfe\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [Pos Repl]
 
 * C:\WINDOWS\System32\olepro32.dll : 84,992 : 04/14/2008 06:00 AM : f71cb6064dfc10dfb767b537bfa33d61 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\olepro32.dll : 84,992 : 04/14/2008 06:00 AM : f71cb6064dfc10dfb767b537bfa33d61 [Pos Repl]
 
 * C:\WINDOWS\System32\perfctrs.dll : 41,984 : 04/14/2008 06:00 AM : 91c2a139745f2af17e4685a1e54b4fda [NoSig]
 +-> C:\WINDOWS\system32\dllcache\perfctrs.dll : 41,984 : 04/14/2008 06:00 AM : 91c2a139745f2af17e4685a1e54b4fda [Pos Repl]
 
 * C:\WINDOWS\System32\powrprof.dll : 17,408 : 04/14/2008 06:00 AM : 56de6fd410b277c4345d7a2c3414db64 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\powrprof.dll : 17,408 : 04/14/2008 06:00 AM : 56de6fd410b277c4345d7a2c3414db64 [Pos Repl]
 
 * C:\WINDOWS\System32\psbase.dll : 98,304 : 04/14/2008 06:00 AM : 57e1639a24bc44f1d4ea3f9950f0e5f3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\psbase.dll : 98,304 : 04/14/2008 06:00 AM : 57e1639a24bc44f1d4ea3f9950f0e5f3 [Pos Repl]
 
 * C:\WINDOWS\System32\pstorsvc.dll : 34,304 : 04/14/2008 06:00 AM : 44caff1d5b89f94180984c80995f6ae6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\pstorsvc.dll : 34,304 : 04/14/2008 06:00 AM : 44caff1d5b89f94180984c80995f6ae6 [Pos Repl]
 
 * C:\WINDOWS\System32\qmgr.dll : 409,088 : 04/14/2008 06:00 AM : 8ee9639c01b92490e09638caa1b16c3c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\qmgr.dll : 409,088 : 04/14/2008 06:00 AM : 8ee9639c01b92490e09638caa1b16c3c [Pos Repl]
 
 * C:\WINDOWS\System32\rasadhlp.dll : 7,680 : 04/14/2008 06:00 AM : 73eca7b33eb3f7262d92ea80b61708cd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasadhlp.dll : 7,680 : 04/14/2008 06:00 AM : 73eca7b33eb3f7262d92ea80b61708cd [Pos Repl]
 
 * C:\WINDOWS\System32\regsvc.dll : 59,904 : 04/14/2008 06:00 AM : e424f05b07ac4357dc08d06218d76c7c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\regsvc.dll : 59,904 : 04/14/2008 06:00 AM : e424f05b07ac4357dc08d06218d76c7c [Pos Repl]
 
 * C:\WINDOWS\System32\rpcss.dll : 401,408 : 02/09/2009 04:52 AM : 97869c55f562b777987100ea30ad8108 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401,408 : 02/09/2009 04:56 AM : aef41fc6f108cc4f94f9b4e96afa9c70 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399,360 : 04/14/2008 06:00 AM : 53d02effa72ca5c57687bee20610aba6 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rpcss.dll : 401,408 : 02/09/2009 04:52 AM : 97869c55f562b777987100ea30ad8108 [Pos Repl]
 
 * C:\WINDOWS\System32\scecli.dll : 185,856 : 04/14/2008 06:00 AM : b6be3c96cd33336a551db3f2299a8e69 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\scecli.dll : 185,856 : 04/14/2008 06:00 AM : b6be3c96cd33336a551db3f2299a8e69 [Pos Repl]
 
 * C:\WINDOWS\System32\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152,064 : 11/16/2011 08:20 AM : 81ac64a666ceafa03c63bbd9d1e3b583 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153,088 : 06/03/2012 10:31 PM : d16b219bf4e3229d7aa64c0bcbf5ef83 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147,456 : 06/25/2009 02:42 AM : 3786e1c77df16c1c177a294164386161 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 147,456 : 06/25/2009 02:26 AM : 8ebc52bf79c1e893f9634caaa83fb334 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152,064 : 11/16/2011 08:21 AM : e37105172f7d22ea488cecc744c63a90 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144,384 : 04/14/2008 06:00 AM : c0bcc6807b66368f37d0e7d0b717fe27 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\09f2e0545c6d5d1ea4caf138925a9b02\sp3gdr\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\09f2e0545c6d5d1ea4caf138925a9b02\sp3qfe\schannel.dll : 153,088 : 06/03/2012 10:31 PM : d16b219bf4e3229d7aa64c0bcbf5ef83 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [Pos Repl]
 
 * C:\WINDOWS\System32\schedsvc.dll : 193,536 : 04/14/2008 06:00 AM : 51be25c404d3dd344c6079de715e4977 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\schedsvc.dll : 193,536 : 04/14/2008 06:00 AM : 51be25c404d3dd344c6079de715e4977 [Pos Repl]
 
 * C:\WINDOWS\System32\services.exe : 111,104 : 02/09/2009 05:23 AM : 953df7327510df0de048b8e80e504ef9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 111,104 : 02/09/2009 05:16 AM : aa6e1769469f9d15603a619fc1fb9e18 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 109,056 : 04/14/2008 06:00 AM : d658a8c2fc7b2ad53d1259741a09ee04 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\services.exe : 111,104 : 02/09/2009 05:23 AM : 953df7327510df0de048b8e80e504ef9 [Pos Repl]
 
 * C:\WINDOWS\System32\setupapi.dll : 1,000,960 : 04/14/2008 06:00 AM : 7fbd75db6aeb0768c41299da7034c249 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\setupapi.dll : 1,000,960 : 04/14/2008 06:00 AM : 7fbd75db6aeb0768c41299da7034c249 [Pos Repl]
 
 * C:\WINDOWS\System32\sfc.dll : 5,120 : 04/14/2008 06:00 AM : d5ac9fa63ebefd7aaccb14ba0db1bac3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sfc.dll : 5,120 : 04/14/2008 06:00 AM : d5ac9fa63ebefd7aaccb14ba0db1bac3 [Pos Repl]
 
 * C:\WINDOWS\System32\sfcfiles.dll : 1,572,352 : 04/14/2008 06:00 AM : 2a1e1df559b291583903d2f9cc504522 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sfcfiles.dll : 1,572,352 : 04/14/2008 06:00 AM : 2a1e1df559b291583903d2f9cc504522 [Pos Repl]
 
 * C:\WINDOWS\System32\shsvcs.dll : 135,168 : 07/27/2009 05:17 PM : 1f617c5a76215c380478d750ce92cc73 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135,168 : 07/27/2009 04:14 PM : 8a34f9730a2206726b1be4dc4209cab9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135,168 : 04/14/2008 06:00 AM : ca70edbf32032ea53f114cb930741cb5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\shsvcs.dll : 135,168 : 07/27/2009 05:17 PM : 1f617c5a76215c380478d750ce92cc73 [Pos Repl]
 
 * C:\WINDOWS\System32\smss.exe : 50,688 : 04/14/2008 06:00 AM : 4a3baa168ad14f39e599772e8e020a6c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\smss.exe : 50,688 : 04/14/2008 06:00 AM : 4a3baa168ad14f39e599772e8e020a6c [Pos Repl]
 
 * C:\WINDOWS\System32\spoolsv.exe : 58,880 : 08/17/2010 07:17 AM : 60784f891563fb1b767f70117fc2428f [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58,880 : 08/17/2010 07:19 AM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57,856 : 04/14/2008 06:00 AM : cdd2dc6ae65084481e723e746c20539a [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\spoolsv.exe : 58,880 : 08/17/2010 07:17 AM : 60784f891563fb1b767f70117fc2428f [Pos Repl]
 
 * C:\WINDOWS\System32\srsvc.dll : 171,520 : 04/14/2008 06:00 AM : 0f30eec6013fcf76693405ec4a7df899 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\srsvc.dll : 171,520 : 04/14/2008 06:00 AM : 0f30eec6013fcf76693405ec4a7df899 [Pos Repl]
 
 * C:\WINDOWS\System32\ssdpsrv.dll : 71,680 : 04/14/2008 06:00 AM : b622a432ef02895de4aa38ac8b85fa4c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ssdpsrv.dll : 71,680 : 04/14/2008 06:00 AM : b622a432ef02895de4aa38ac8b85fa4c [Pos Repl]
 
 * C:\WINDOWS\System32\svchost.exe : 14,336 : 04/14/2008 06:00 AM : 4f2340f0bd5b6365c38e74dd391919a8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\svchost.exe : 14,336 : 04/14/2008 06:00 AM : 4f2340f0bd5b6365c38e74dd391919a8 [Pos Repl]
 
 * C:\WINDOWS\System32\tapisrv.dll : 249,856 : 04/14/2008 06:00 AM : 04a5b8ea326951db27df60a14f2999ff [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tapisrv.dll : 249,856 : 04/14/2008 06:00 AM : 04a5b8ea326951db27df60a14f2999ff [Pos Repl]
 
 * C:\WINDOWS\System32\termsrv.dll : 296,960 : 04/14/2008 06:00 AM : 288b20d56d5f0ec4bcc77fbfa5a81740 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\termsrv.dll : 296,960 : 04/14/2008 06:00 AM : 288b20d56d5f0ec4bcc77fbfa5a81740 [Pos Repl]
 
 * C:\WINDOWS\System32\upnphost.dll : 186,368 : 04/14/2008 06:00 AM : 7594203f459abdb5fe53c08d6b1bd53b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\upnphost.dll : 186,368 : 04/14/2008 06:00 AM : 7594203f459abdb5fe53c08d6b1bd53b [Pos Repl]
 
 * C:\WINDOWS\System32\user32.dll : 579,584 : 04/14/2008 06:00 AM : da8898129e0075c7de4dee457514a73c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\user32.dll : 579,584 : 04/14/2008 06:00 AM : da8898129e0075c7de4dee457514a73c [Pos Repl]
 
 * C:\WINDOWS\System32\userinit.exe : 26,624 : 04/14/2008 06:00 AM : f5b8745b9a90eaf17e30c0574e049aa3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\userinit.exe : 26,624 : 04/14/2008 06:00 AM : f5b8745b9a90eaf17e30c0574e049aa3 [Pos Repl]
 
 * C:\WINDOWS\System32\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406,016 : 04/16/2010 09:30 AM : 964d29711065a944e1bec7fd676e61d9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2850869$\usp10.dll : 406,016 : 04/16/2010 09:38 AM : a8374ff31ac6edebb806d2b61d44618d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406,016 : 04/14/2008 06:00 AM : d2abeb6af76da414d1fff8b409f00635 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\eb7d7bebde3412e1a06b9b33039fe4c9\sp3qfe\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [Pos Repl]
 
 * C:\WINDOWS\System32\UxTheme.dll : 220,160 : 04/14/2008 06:00 AM : 34321a47803793b293296c2165f15690 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\uxtheme.dll : 220,160 : 04/14/2008 06:00 AM : 34321a47803793b293296c2165f15690 [Pos Repl]
 
 * C:\WINDOWS\System32\version.dll : 18,944 : 04/14/2008 06:00 AM : f4968d88123785bcf95a31e0225c5592 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\version.dll : 18,944 : 04/14/2008 06:00 AM : f4968d88123785bcf95a31e0225c5592 [Pos Repl]
 
 * C:\WINDOWS\System32\w32time.dll : 177,152 : 04/14/2008 06:00 AM : c71cfacdbfadd819736f61f5738bddc1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\w32time.dll : 177,152 : 04/14/2008 06:00 AM : c71cfacdbfadd819736f61f5738bddc1 [Pos Repl]
 
 * C:\WINDOWS\System32\wbem\wmiprvse.exe : 227,840 : 02/06/2009 04:10 AM : 798a9e6828997eef4517ada8a2259831 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227,840 : 02/06/2009 04:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218,112 : 04/14/2008 06:00 AM : 3d47902bd4be157f89b469f5cc7b5fa2 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wmiprvse.exe : 227,840 : 02/06/2009 04:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl]
 
 * C:\WINDOWS\System32\wdigest.dll : 54,272 : 06/25/2009 02:26 AM : 0d134ff16f57ac7bb6fab42237f38ca3 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54,272 : 06/25/2009 02:42 AM : f5a46222d555489958d85aa6f16499aa [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49,152 : 04/14/2008 06:00 AM : 31ea4ef7f106c7b2d28fc50d9e75d60e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wdigest.dll : 54,272 : 06/25/2009 02:26 AM : 0d134ff16f57ac7bb6fab42237f38ca3 [Pos Repl]
 
 * C:\WINDOWS\System32\wiaservc.dll : 334,336 : 04/14/2008 06:00 AM : 7226422c95fdf8aa6092ee964912b0df [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wiaservc.dll : 334,336 : 04/14/2008 06:00 AM : 7226422c95fdf8aa6092ee964912b0df [Pos Repl]
 
 * C:\WINDOWS\System32\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919,552 : 11/04/2011 01:12 PM : b6716dc84cae442957e40875d012f183 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\wininet.dll : 920,064 : 08/28/2012 09:17 AM : f503cfa1863ee2745677b6d5302454ef [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll : 919,040 : 05/06/2010 04:28 AM : 9acfbee8e9573ee39cb93c636df36f78 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2898785$\wininet.dll : 668,672 : 04/14/2008 06:00 AM : a9a84cfc20d5f4c609e9cbf9491b8df6 [Pos Repl]
 +-> C:\WINDOWS\ie8\wininet.dll : 671,232 : 10/24/2013 06:52 PM : 9d4b94ffb519cfc0f35fd3576cefb86d [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916,480 : 05/06/2010 04:33 AM : 26412d06783e47eac7667569bf6962d3 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2744842-IE8\wininet.dll : 916,992 : 11/04/2011 01:13 PM : e23dca6f31b9a97714f334b67b412fbd [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2862772-IE8\wininet.dll : 916,992 : 08/28/2012 09:18 AM : 93e89539bc12e61b31a20edc41da8ff4 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2898785-IE8\wininet.dll : 920,064 : 07/25/2013 08:49 PM : 0beadf3b853739f0951787090a791a53 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll : 914,944 : 03/08/2009 04:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\0e61ee957d652351f5a5d0e9abed293c\SP3QFE\wininet.dll : 920,064 : 07/25/2013 08:49 PM : 0beadf3b853739f0951787090a791a53 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4708fcee345fa37d587411628f0d1b32\sp3qfe\wininet.dll : 671,232 : 10/24/2013 06:52 PM : 9d4b94ffb519cfc0f35fd3576cefb86d [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\wininet.dll : 916,480 : 05/06/2010 04:33 AM : 26412d06783e47eac7667569bf6962d3 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\wininet.dll : 919,040 : 05/06/2010 04:28 AM : 9acfbee8e9573ee39cb93c636df36f78 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3GDR\wininet.dll : 916,992 : 11/04/2011 01:13 PM : e23dca6f31b9a97714f334b67b412fbd [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3QFE\wininet.dll : 919,552 : 11/04/2011 01:12 PM : b6716dc84cae442957e40875d012f183 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\778eaeaa2835445423a5cd62d51cc9ec\SP3QFE\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3GDR\wininet.dll : 916,992 : 08/28/2012 09:18 AM : 93e89539bc12e61b31a20edc41da8ff4 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3QFE\wininet.dll : 920,064 : 08/28/2012 09:17 AM : f503cfa1863ee2745677b6d5302454ef [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [Pos Repl]
 
 * C:\WINDOWS\System32\winlogon.exe : 510,976 : 04/14/2008 06:00 AM : 213c80d912880bbf04453d09ffccb28c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\winlogon.exe : 510,976 : 04/14/2008 06:00 AM : 213c80d912880bbf04453d09ffccb28c [Pos Repl]
 
 * C:\WINDOWS\System32\ws2_32.dll : 82,432 : 04/14/2008 06:00 AM : 22db5b3da7005c6472d35bef3ffda5ec [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2_32.dll : 82,432 : 04/14/2008 06:00 AM : 22db5b3da7005c6472d35bef3ffda5ec [Pos Repl]
 
 * C:\WINDOWS\System32\ws2help.dll : 19,968 : 04/14/2008 06:00 AM : f7ee4bbfb48437edc6f7f061de1e8f2f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2help.dll : 19,968 : 04/14/2008 06:00 AM : f7ee4bbfb48437edc6f7f061de1e8f2f [Pos Repl]
 
 * C:\WINDOWS\System32\wscntfy.exe : 13,824 : 04/14/2008 06:00 AM : b2718ec9dc738e915d4177498e92bc4d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wscntfy.exe : 13,824 : 04/14/2008 06:00 AM : b2718ec9dc738e915d4177498e92bc4d [Pos Repl]
 
 * C:\WINDOWS\System32\xmlprov.dll : 129,024 : 04/14/2008 06:00 AM : 14fdadcf05a37582399daf1da1de1c7b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\xmlprov.dll : 129,024 : 04/14/2008 06:00 AM : 14fdadcf05a37582399daf1da1de1c7b [Pos Repl]
 
 * C:\WINDOWS\explorer.exe : 1,036,288 : 04/14/2008 06:00 AM : 7522f548a84abad8fa516de5ab3931ef [NoSig]
 +-> C:\WINDOWS\system32\dllcache\explorer.exe : 1,036,288 : 04/14/2008 06:00 AM : 7522f548a84abad8fa516de5ab3931ef [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\acpiec.sys : 12,032 : 04/14/2008 06:00 AM : 1c905333c0b9f3d7c68ddf25e54b00f9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\acpi.sys : 189,056 : 04/14/2008 06:00 AM : cf2a07e1751a2d612d7e13aa431ab057 [NoSig]
 
 * C:\WINDOWS\System32\drivers\aec.sys : 142,592 : 04/13/2008 10:09 PM : 8bed39e3c35d6a489438b8141717a557 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\aec.sys : 142,592 : 04/13/2008 10:09 PM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\afd.sys : 138,496 : 08/17/2011 07:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138,496 : 10/16/2008 09:07 AM : 38d7b715504da4741df35e3594fe2099 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138,496 : 08/17/2011 07:41 AM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138,112 : 04/14/2008 06:00 AM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138,496 : 10/16/2008 08:43 AM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\afd.sys : 138,496 : 08/17/2011 07:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\amdk6.sys : 41,600 : 04/14/2008 06:00 AM : 12f1871712934ff2df8b8099d7286b41 [NoSig]
 
 * C:\WINDOWS\System32\drivers\amdk7.sys : 41,984 : 04/14/2008 06:00 AM : fbce64d4a59befd5565845d82e1cfbeb [NoSig]
 
 * C:\WINDOWS\System32\drivers\arp1394.sys : 60,800 : 04/14/2008 06:00 AM : b5b8a80875c1dededa8b02765642c32f [NoSig]
 
 * C:\WINDOWS\System32\drivers\asyncmac.sys : 14,336 : 04/14/2008 06:00 AM : b153affac761e7f5fcfa822b9c4e97bc [NoSig]
 +-> C:\WINDOWS\system32\dllcache\asyncmac.sys : 14,336 : 04/14/2008 06:00 AM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\atapi.sys : 96,512 : 04/14/2008 06:00 AM : 9f3a2f5aa6875c72bf062c712cfa2674 [NoSig]
 
 * C:\WINDOWS\System32\drivers\audstub.sys : 3,072 : 08/17/2001 02:59 PM : d9f724aa26c010a217c97606b160ed68 [NoSig]
 
 * C:\WINDOWS\System32\drivers\beep.sys : 4,224 : 04/14/2008 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\beep.sys : 4,224 : 04/14/2008 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\bridge.sys : 71,552 : 04/14/2008 06:00 AM : f934d1b230f84e1d19dd00ac5a7a83ed [NoSig]
 +-> C:\WINDOWS\system32\dllcache\bridge.sys : 71,552 : 04/14/2008 06:00 AM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 272,512 : 06/14/2008 11:40 AM : 5206c872ffc17a0fd95a6255422605cd [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cbidf2k.sys : 13,952 : 04/14/2008 06:00 AM : 90a673fc8e12a79afbed2576f6a7aaf9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\cdaudio.sys : 18,688 : 04/14/2008 06:00 AM : c1b486a7658353d33a10cc15211a873b [NoSig]
 
 * C:\WINDOWS\System32\drivers\cdfs.sys : 63,744 : 04/14/2008 06:00 AM : c885b02847f5d2fd45a24e219ed93b32 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\cdfs.sys : 63,744 : 04/14/2008 06:00 AM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cdrom.sys : 62,976 : 04/14/2008 06:00 AM : 1f4260cc5b42272d71f79e570a27a4fe [NoSig]
 
 * C:\WINDOWS\System32\drivers\classpnp.sys : 49,536 : 04/14/2008 06:00 AM : fe47dd8fe6d7768ff94ebec6c74b2719 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\classpnp.sys : 49,536 : 04/14/2008 06:00 AM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cpqdap01.sys : 11,776 : 04/14/2008 06:00 AM : 9624293e55ad405415862b504ca95b73 [NoSig]
 
 * C:\WINDOWS\System32\drivers\crusoe.sys : 40,960 : 04/14/2008 06:00 AM : 7a55910555493821144e6ee587890b4f [NoSig]
 
 * C:\WINDOWS\System32\drivers\diskdump.sys : 14,208 : 04/14/2008 06:00 AM : e65e2353a5d74ea89971cb918eeeb2f6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\diskdump.sys : 14,208 : 04/14/2008 06:00 AM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\disk.sys : 36,352 : 04/14/2008 06:00 AM : 044452051f3e02e7963599fc8f4f3e25 [NoSig]
 
 * C:\WINDOWS\System32\drivers\dmboot.sys : 800,256 : 04/14/2008 06:00 AM : c252a99c0a78b39faa2e2d1d048b1050 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmboot.sys : 800,256 : 04/14/2008 06:00 AM : c252a99c0a78b39faa2e2d1d048b1050 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dmio.sys : 154,240 : 04/14/2008 06:00 AM : 33b4d4039cd2cb25351a7bf13b2988d9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmio.sys : 154,240 : 04/14/2008 06:00 AM : 33b4d4039cd2cb25351a7bf13b2988d9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dmload.sys : 5,888 : 04/14/2008 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmload.sys : 5,888 : 04/14/2008 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\DMusic.sys : 52,864 : 04/14/2008 00:15 AM : 8a208dfcf89792a484e76c40e5f50b45 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmusic.sys : 52,864 : 04/14/2008 00:15 AM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\drmkaud.sys : 2,944 : 04/14/2008 00:15 AM : 8f5fcff8e8848afac920905fbd9d33c8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\drmkaud.sys : 2,944 : 04/14/2008 00:15 AM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\drmk.sys : 60,160 : 04/14/2008 00:15 AM : 6cb08593487f5701d2d2254e693eafce [NoSig]
 +-> C:\WINDOWS\system32\dllcache\drmk.sys : 60,160 : 04/14/2008 00:15 AM : 6cb08593487f5701d2d2254e693eafce [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dxapi.sys : 10,496 : 04/14/2008 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dxapi.sys : 10,496 : 04/14/2008 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dxg.sys : 71,168 : 04/14/2008 06:00 AM : ac7280566a7bb85cb3291f04ddc1198e [NoSig]
 
 * C:\WINDOWS\System32\drivers\dxgthk.sys : 3,328 : 04/14/2008 06:00 AM : a73f5d6705b1d820c19b18782e176efd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dxgthk.sys : 3,328 : 04/14/2008 06:00 AM : a73f5d6705b1d820c19b18782e176efd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fastfat.sys : 143,744 : 04/14/2008 06:00 AM : 38d332a6d56af32635675f132548343e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fastfat.sys : 143,744 : 04/14/2008 06:00 AM : 38d332a6d56af32635675f132548343e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fdc.sys : 27,392 : 04/14/2008 06:00 AM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [NoSig]
 
 * C:\WINDOWS\System32\drivers\fips.sys : 44,672 : 04/14/2008 06:00 AM : e5e61f2c07344e91dbfb7eafde549ab4 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fips.sys : 44,672 : 04/14/2008 06:00 AM : e5e61f2c07344e91dbfb7eafde549ab4 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\flpydisk.sys : 20,480 : 04/14/2008 06:00 AM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [NoSig]
 
 * C:\WINDOWS\System32\drivers\fltMgr.sys : 129,792 : 04/14/2008 06:00 AM : b2cf4b0786f8212cb92ed2b50c6db6b0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fltmgr.sys : 129,792 : 04/14/2008 06:00 AM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fs_rec.sys : 7,936 : 04/14/2008 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fs_rec.sys : 7,936 : 04/14/2008 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fsvga.sys : 12,416 : 04/14/2008 06:00 AM : c759e01d37a12081d3aafb67dee2522c [NoSig]
 
 * C:\WINDOWS\System32\drivers\ftdisk.sys : 125,952 : 04/14/2008 06:00 AM : cc5f3af5711a1c7c8fa1d43bb16b401a [NoSig]
 
 * C:\WINDOWS\System32\drivers\hidclass.sys : 36,864 : 04/14/2008 06:00 AM : 1af592532532a402ed7c060f6954004f [NoSig]
 
 * C:\WINDOWS\System32\drivers\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862335$\hidparse.sys : 24,960 : 04/14/2008 06:00 AM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2227a887c38c28a77c29dfaf3fadd4a1\SP3QFE\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\hidusb.sys : 10,368 : 04/14/2008 00:15 AM : ccf82c5ec8a7326c3066de870c06daf1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\hidusb.sys : 10,368 : 04/14/2008 00:15 AM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265,728 : 10/20/2009 09:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264,832 : 04/14/2008 06:00 AM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\628a67f9090228b20746f6ff98390e01\sp3gdr\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\628a67f9090228b20746f6ff98390e01\sp3qfe\http.sys : 265,728 : 10/20/2009 09:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\i8042prt.sys : 53,504 : 04/14/2008 06:00 AM : 4a2490a66e8271901e89dd5fb79748ae [NoSig]
 
 * C:\WINDOWS\System32\drivers\imapi.sys : 42,112 : 04/14/2008 06:00 AM : 083a052659f5310dd8b6a6cb05edcf8e [NoSig]
 
 * C:\WINDOWS\System32\drivers\intelide.sys : 5,632 : 04/14/2008 00:24 AM : cdc98c84965ac816b3f76ec388e24078 [NoSig]
 
 * C:\WINDOWS\System32\drivers\intelppm.sys : 40,576 : 04/14/2008 06:00 AM : 49a060498c09db18c3ea9939789005ab [NoSig]
 
 * C:\WINDOWS\System32\drivers\ip6fw.sys : 36,608 : 04/14/2008 06:00 AM : 3bb22519a194418d5fec05d800a19ad0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ip6fw.sys : 36,608 : 04/14/2008 06:00 AM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipfltdrv.sys : 32,896 : 04/14/2008 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipfltdrv.sys : 32,896 : 04/14/2008 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipinip.sys : 20,864 : 04/14/2008 06:00 AM : b87ab476dcf76e72010632b5550955f5 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipinip.sys : 20,864 : 04/14/2008 06:00 AM : b87ab476dcf76e72010632b5550955f5 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipnat.sys : 152,832 : 04/14/2008 06:00 AM : cc748ea12c6effde940ee98098bf96bb [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipnat.sys : 152,832 : 04/14/2008 06:00 AM : cc748ea12c6effde940ee98098bf96bb [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipsec.sys : 75,264 : 04/14/2008 06:00 AM : 23c74d75e36e7158768dd63d92789a91 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipsec.sys : 75,264 : 04/14/2008 06:00 AM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\irenum.sys : 11,264 : 04/14/2008 06:00 AM : c93c9ff7b04d772627a3646d89f7bf89 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\irenum.sys : 11,264 : 04/14/2008 06:00 AM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\isapnp.sys : 37,760 : 04/14/2008 06:00 AM : 0f3d281b0410fe5d482aada37d20524b [NoSig]
 
 * C:\WINDOWS\System32\drivers\kbdclass.sys : 25,088 : 04/14/2008 06:00 AM : 188ddd286bc0daea6984858c6a4d7bbf [NoSig]
 
 * C:\WINDOWS\System32\drivers\kmixer.sys : 172,416 : 04/14/2008 00:15 AM : 692bcf44383d056aed41b045a323d378 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\kmixer.sys : 172,416 : 04/14/2008 00:15 AM : 692bcf44383d056aed41b045a323d378 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ksecdd.sys : 92,928 : 06/24/2009 05:18 AM : b467646c54cc746128904e1654c750c1 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92,928 : 06/24/2009 04:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92,288 : 04/14/2008 06:00 AM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ksecdd.sys : 92,928 : 06/24/2009 05:18 AM : b467646c54cc746128904e1654c750c1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ks.sys : 141,056 : 04/14/2008 00:46 AM : 0753515f78df7f271a5e61c20bcd36a1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ks.sys : 141,056 : 04/14/2008 00:46 AM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mcd.sys : 7,680 : 04/14/2008 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mcd.sys : 7,680 : 04/14/2008 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mf.sys : 63,744 : 04/14/2008 06:00 AM : a7da20ab18a1bdae28b0f349e57da0d1 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mnmdd.sys : 4,224 : 04/14/2008 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mnmdd.sys : 4,224 : 04/14/2008 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\modem.sys : 30,336 : 04/14/2008 06:00 AM : 9024556e739b8469d2b8f5f0e4c9bc9f [NoSig]
 
 * C:\WINDOWS\System32\drivers\mouclass.sys : 23,552 : 04/14/2008 06:00 AM : 6fd36b4994a2363659a65c9f970cfdb7 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mouhid.sys : 12,416 : 08/22/2001 09:34 PM : 8ee532e516b2d23d686cfc1cc0a15c25 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mouhid.sys : 12,416 : 08/22/2001 09:34 PM : 8ee532e516b2d23d686cfc1cc0a15c25 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mountmgr.sys : 42,368 : 04/14/2008 06:00 AM : a80b9a0bad1b73637dbcbba7df72d3fd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mountmgr.sys : 42,368 : 04/14/2008 06:00 AM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mqac.sys : 92,544 : 04/14/2008 06:00 AM : 70c14f5cca5cf73f8a645c73a01d8726 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mqac.sys : 92,544 : 04/14/2008 06:00 AM : 70c14f5cca5cf73f8a645c73a01d8726 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mrxdav.sys : 180,608 : 04/14/2008 06:00 AM : 11d42bb6206f33fbb3ba0288d3ef81bd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mrxdav.sys : 180,608 : 04/14/2008 06:00 AM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457,856 : 07/15/2011 07:29 AM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456,576 : 04/14/2008 06:00 AM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\msfs.sys : 19,072 : 04/14/2008 06:00 AM : c941ea2454ba8350021d774daf0f1027 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msfs.sys : 19,072 : 04/14/2008 06:00 AM : c941ea2454ba8350021d774daf0f1027 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\msgpc.sys : 35,072 : 04/14/2008 06:00 AM : 0a02c63c8b144bd8c86b103dee7c86a2 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msgpc.sys : 35,072 : 04/14/2008 06:00 AM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSKSSRV.sys : 7,552 : 04/14/2008 00:09 AM : d1575e71568f4d9e14ca56b7b0453bf1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mskssrv.sys : 7,552 : 04/14/2008 00:09 AM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSPCLOCK.sys : 5,376 : 04/14/2008 00:09 AM : 325bb26842fc7ccc1fcce2c457317f3e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mspclock.sys : 5,376 : 04/14/2008 00:09 AM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSPQM.sys : 4,992 : 04/14/2008 00:09 AM : bad59648ba099da4a17680b39730cb3d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mspqm.sys : 4,992 : 04/14/2008 00:09 AM : bad59648ba099da4a17680b39730cb3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mssmbios.sys : 15,488 : 04/14/2008 06:00 AM : af5f4f3f14a8ea2c26de30f7a1e17136 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mup.sys : 105,472 : 04/21/2011 07:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105,472 : 04/21/2011 07:52 AM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105,344 : 04/14/2008 06:00 AM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mup.sys : 105,472 : 04/21/2011 07:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndis.sys : 182,656 : 04/14/2008 06:00 AM : 1df7f42665c94b825322fae71721130d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ndis.sys : 182,656 : 04/14/2008 06:00 AM : 1df7f42665c94b825322fae71721130d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndistapi.sys : 10,496 : 07/08/2011 08:02 AM : 0109c4f3850dfbab279542515386ae22 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10,496 : 07/08/2011 07:51 AM : 091735a5f20acb1dc147383a905ae002 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10,112 : 04/14/2008 06:00 AM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ndistapi.sys : 10,496 : 07/08/2011 08:02 AM : 0109c4f3850dfbab279542515386ae22 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndisuio.sys : 14,592 : 04/14/2008 06:00 AM : f927a4434c5028758a842943ef1a3849 [NoSig]
 
 * C:\WINDOWS\System32\drivers\ndiswan.sys : 91,520 : 04/14/2008 06:00 AM : edc1531a49c80614b2cfda43ca8659ab [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ndiswan.sys : 91,520 : 04/14/2008 06:00 AM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40,960 : 11/02/2010 11:55 PM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40,576 : 04/14/2008 06:00 AM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2914368$\ndproxy.sys : 40,960 : 11/02/2010 09:17 AM : 9282bd12dfb069d3889eb3fcc1000a9b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5a432b0ff5c4b0c5a7a3c221dbf1c340\SP3QFE\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\netbios.sys : 34,688 : 04/14/2008 06:00 AM : 5d81cf9a2f1a3a756b66cf684911cdf0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netbios.sys : 34,688 : 04/14/2008 06:00 AM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\netbt.sys : 162,816 : 04/14/2008 06:00 AM : 74b2b2f5bea5e9a3dc021d685551bd3d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netbt.sys : 162,816 : 04/14/2008 06:00 AM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nic1394.sys : 61,824 : 04/14/2008 06:00 AM : e9e47cfb2d461fa0fc75b7a74c6383ea [NoSig]
 
 * C:\WINDOWS\System32\drivers\nikedrv.sys : 12,032 : 04/14/2008 06:00 AM : be984d604d91c217355cdd3737aad25d [NoSig]
 
 * C:\WINDOWS\System32\drivers\nmnt.sys : 40,320 : 04/14/2008 06:00 AM : 1e421a6bcf2203cc61b821ada9de878b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nmnt.sys : 40,320 : 04/14/2008 06:00 AM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\npfs.sys : 30,848 : 04/14/2008 06:00 AM : 3182d64ae053d6fb034f44b6def8034a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\npfs.sys : 30,848 : 04/14/2008 06:00 AM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ntfs.sys : 574,976 : 04/14/2008 06:00 AM : 78a08dd6a8d65e697c18e1db01c5cdca [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ntfs.sys : 574,976 : 04/14/2008 06:00 AM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\null.sys : 2,944 : 04/14/2008 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [NoSig]
 +-> C:\WINDOWS\system32\dllcache\null.sys : 2,944 : 04/14/2008 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkflt.sys : 12,416 : 04/14/2008 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkflt.sys : 12,416 : 04/14/2008 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkfwd.sys : 32,512 : 04/14/2008 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkfwd.sys : 32,512 : 04/14/2008 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkipx.sys : 88,320 : 04/14/2008 06:00 AM : 8b8b1be2dba4025da6786c645f77f123 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkipx.sys : 88,320 : 04/14/2008 06:00 AM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnknb.sys : 63,232 : 04/14/2008 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnknb.sys : 63,232 : 04/14/2008 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkspx.sys : 55,936 : 04/14/2008 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkspx.sys : 55,936 : 04/14/2008 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwrdr.sys : 163,584 : 04/14/2008 06:00 AM : 36b9b950e3d2e100970a48d8bad86740 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwrdr.sys : 163,584 : 04/14/2008 06:00 AM : 36b9b950e3d2e100970a48d8bad86740 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\oprghdlr.sys : 3,456 : 04/14/2008 06:00 AM : 4bb30ddc53ebc76895e38694580cdfe9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\p3.sys : 46,976 : 04/14/2008 06:00 AM : 8b6d4d24bfe373f989ff91d0960166de [NoSig]
 
 * C:\WINDOWS\System32\drivers\parport.sys : 80,256 : 04/14/2008 06:00 AM : e7855cbd8bd1fda085a3f92cff7906e2 [NoSig]
 
 * C:\WINDOWS\System32\drivers\partmgr.sys : 19,712 : 04/14/2008 06:00 AM : beb3ba25197665d82ec7065b724171c6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\partmgr.sys : 19,712 : 04/14/2008 06:00 AM : beb3ba25197665d82ec7065b724171c6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\parvdm.sys : 7,040 : 04/14/2008 06:00 AM : fad44d704ecd7d39ad01415b8bb34204 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\parvdm.sys : 7,040 : 04/14/2008 06:00 AM : fad44d704ecd7d39ad01415b8bb34204 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\pciidex.sys : 24,960 : 04/14/2008 06:00 AM : 52e60f29221d0d1ac16737e8dbf7c3e9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\pci.sys : 68,992 : 04/14/2008 06:00 AM : f11bc84ae6c7b003b5e0c8eeb4a1f444 [NoSig]
 
 * C:\WINDOWS\System32\drivers\pcmcia.sys : 120,448 : 04/14/2008 06:00 AM : f50c27cca56dc97b3a45e7f0059bd2ba [NoSig]
 
 * C:\WINDOWS\System32\drivers\portcls.sys : 146,048 : 04/14/2008 00:49 AM : e82a496c3961efc6828b508c310ce98f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\portcls.sys : 146,048 : 04/14/2008 00:49 AM : e82a496c3961efc6828b508c310ce98f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\processr.sys : 40,064 : 04/14/2008 06:00 AM : d4d8634dfdae3eca83620ee4088f7aa9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\psched.sys : 69,120 : 04/14/2008 06:00 AM : 09298ec810b07e5d582cb3a3f9255424 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\psched.sys : 69,120 : 04/14/2008 06:00 AM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ptilink.sys : 17,792 : 04/14/2008 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ptilink.sys : 17,792 : 04/14/2008 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rasacd.sys : 8,832 : 04/14/2008 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasacd.sys : 8,832 : 04/14/2008 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rasl2tp.sys : 51,328 : 04/14/2008 06:00 AM : 11b4a627bc9614b885c4969bfa5ff8a6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasl2tp.sys : 51,328 : 04/14/2008 06:00 AM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspppoe.sys : 41,472 : 04/14/2008 06:00 AM : 5bc962f2654137c9909c3d4603587dee [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspppoe.sys : 41,472 : 04/14/2008 06:00 AM : 5bc962f2654137c9909c3d4603587dee [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspptp.sys : 48,384 : 04/14/2008 06:00 AM : efeec01b1d3cf84f16ddd24d9d9d8f99 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspptp.sys : 48,384 : 04/14/2008 06:00 AM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspti.sys : 16,512 : 04/14/2008 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspti.sys : 16,512 : 04/14/2008 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rawwan.sys : 34,432 : 04/14/2008 06:00 AM : 01524cd237223b18adbb48f70083f101 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rawwan.sys : 34,432 : 04/14/2008 06:00 AM : 01524cd237223b18adbb48f70083f101 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdbss.sys : 175,744 : 04/14/2008 06:00 AM : 7ad224ad1a1437fe28d89cf22b17780a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rdbss.sys : 175,744 : 04/14/2008 06:00 AM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdpcdd.sys : 4,224 : 04/14/2008 06:00 AM : 4912d5b403614ce99c28420f75353332 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rdpcdd.sys : 4,224 : 04/14/2008 06:00 AM : 4912d5b403614ce99c28420f75353332 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdpdr.sys : 196,224 : 04/14/2008 00:02 AM : 15cabd0f7c00c47c70124907916af3f1 [NoSig]
 
 * C:\WINDOWS\System32\drivers\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 10:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2723135-v2\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 07:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139,656 : 04/14/2008 06:00 AM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2723135-v2$\rdpwd.sys : 139,784 : 01/09/2012 10:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2af9909b37fcd3acf51a7c824cbf7611\SP3GDR\rdpwd.sys : 139,784 : 01/09/2012 10:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2af9909b37fcd3acf51a7c824cbf7611\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 10:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5f5ac8dc2249e62afbed2bf126b93816\SP3GDR\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5f5ac8dc2249e62afbed2bf126b93816\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 07:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\redbook.sys : 58,880 : 04/14/2008 00:21 AM : 20950948970a0ea329b4254052bcf093 [NoSig]
 
 * C:\WINDOWS\System32\drivers\rmcast.sys : 203,136 : 05/08/2008 08:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203,136 : 05/08/2008 07:58 AM : c711645c76b8ed87c021bf6165e52795 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202,624 : 04/14/2008 06:00 AM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rmcast.sys : 203,136 : 05/08/2008 08:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rndismp.sys : 30,592 : 04/14/2008 06:00 AM : 601844cbcf617ff8c868130ca5b2039d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rndismp.sys : 30,592 : 04/14/2008 06:00 AM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rootmdm.sys : 5,888 : 04/14/2008 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rootmdm.sys : 5,888 : 04/14/2008 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\scsiport.sys : 96,384 : 04/14/2008 06:00 AM : 76c465f570e90c28942d52ccb2580a10 [NoSig]
 
 * C:\WINDOWS\System32\drivers\sdbus.sys : 79,232 : 04/14/2008 06:00 AM : 8d04819a3ce51b9eb47e5689b44d43c4 [NoSig]
 
 * C:\WINDOWS\System32\drivers\serenum.sys : 15,744 : 04/14/2008 06:00 AM : 0f29512ccd6bead730039fb4bd2c85ce [NoSig]
 
 * C:\WINDOWS\System32\drivers\serial.sys : 65,792 : 04/14/2008 06:00 AM : f41b42b92ae9c1191858c3f80cc24a9c [NoSig]
 
 * C:\WINDOWS\System32\drivers\sffdisk.sys : 11,904 : 04/14/2008 06:00 AM : 0fa803c64df0914b41f807ea276bf2a6 [NoSig]
 
 * C:\WINDOWS\System32\drivers\sffp_sd.sys : 11,008 : 04/14/2008 06:00 AM : c17c331e435ed8737525c86a7557b3ac [NoSig]
 
 * C:\WINDOWS\System32\drivers\sfloppy.sys : 11,392 : 04/14/2008 06:00 AM : 8e6b8c671615d126fdc553d1e2de5562 [NoSig]
 
 * C:\WINDOWS\System32\drivers\smclib.sys : 14,592 : 04/14/2008 06:00 AM : 017daecf0ed3aa731313433601ec40fa [NoSig]
 +-> C:\WINDOWS\system32\dllcache\smclib.sys : 14,592 : 04/14/2008 06:00 AM : 017daecf0ed3aa731313433601ec40fa [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sonydcam.sys : 25,344 : 04/14/2008 06:00 AM : 489703624dac94ed943c2abda022a1cd [NoSig]
 
 * C:\WINDOWS\System32\drivers\splitter.sys : 6,272 : 04/14/2008 00:15 AM : ab8b92451ecb048a4d1de7c3ffcb4a9f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\splitter.sys : 6,272 : 04/14/2008 00:15 AM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sr.sys : 73,472 : 04/14/2008 06:00 AM : ccb3065c3ee63a4515fe84af9e78d1dd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sr.sys : 73,472 : 04/14/2008 06:00 AM : ccb3065c3ee63a4515fe84af9e78d1dd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\srv.sys : 357,888 : 02/17/2011 07:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357,248 : 08/26/2010 07:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357,888 : 02/17/2011 07:19 AM : 9b390283569ea58d43d2586032b892f5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 334,848 : 04/14/2008 06:00 AM : 5252605079810904e31c332e241cd59b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4a585745c27de805fe1be7baae2aca6e\sp3qfe\srv.sys : 357,248 : 08/26/2010 07:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\srv.sys : 357,888 : 02/17/2011 07:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\stream.sys : 49,408 : 04/14/2008 00:15 AM : 3e5d89099ded9e86e5639f411693218f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\stream.sys : 49,408 : 04/14/2008 00:15 AM : 3e5d89099ded9e86e5639f411693218f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\swenum.sys : 4,352 : 04/14/2008 06:00 AM : 3941d127aef12e93addf6fe6ee027e0f [NoSig]
 
 * C:\WINDOWS\System32\drivers\swmidi.sys : 56,576 : 04/14/2008 00:15 AM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\swmidi.sys : 56,576 : 04/14/2008 00:15 AM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sysaudio.sys : 60,800 : 04/14/2008 00:45 AM : 8b83f3ed0f1688b4958f77cd6d2bf290 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sysaudio.sys : 60,800 : 04/14/2008 00:45 AM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tape.sys : 14,976 : 04/14/2008 06:00 AM : fd6093e3decd925f1cffc8a0dd539d72 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tape.sys : 14,976 : 04/14/2008 06:00 AM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tcpip6.sys : 226,880 : 02/11/2010 06:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 05:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226,880 : 02/11/2010 05:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225,664 : 04/14/2008 06:00 AM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\tcpip6.sys : 226,880 : 02/11/2010 06:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [Pos Repl]
 
 * C:\WINDOWS\System32\Drivers\tcpip.sys : 361,600 : 06/20/2008 05:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 05:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys : 361,344 : 04/14/2008 06:00 AM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\tcpip.sys : 361,600 : 06/20/2008 05:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdi.sys : 19,072 : 04/14/2008 06:00 AM : 0539d5e53587f82d1b4fd74c5be205cf [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdi.sys : 19,072 : 04/14/2008 06:00 AM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdpipe.sys : 12,040 : 04/14/2008 06:00 AM : 6471a66807f5e104e4885f5b67349397 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdpipe.sys : 12,040 : 04/14/2008 06:00 AM : 6471a66807f5e104e4885f5b67349397 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdtcp.sys : 21,896 : 04/14/2008 06:00 AM : c56b6d0402371cf3700eb322ef3aaf61 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdtcp.sys : 21,896 : 04/14/2008 06:00 AM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\termdd.sys : 40,840 : 04/14/2008 07:49 AM : 88155247177638048422893737429d9e [NoSig]
 
 * C:\WINDOWS\System32\drivers\tosdvd.sys : 51,712 : 04/14/2008 06:00 AM : 699450901c5ccfd82357cbc531cedd23 [NoSig]
 
 * C:\WINDOWS\System32\drivers\tunmp.sys : 12,288 : 04/14/2008 06:00 AM : 8f861eda21c05857eb8197300a92501c [NoSig]
 
 * C:\WINDOWS\System32\drivers\udfs.sys : 66,048 : 04/14/2008 06:00 AM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\udfs.sys : 66,048 : 04/14/2008 06:00 AM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\update.sys : 384,768 : 04/14/2008 06:00 AM : 402ddc88356b1bac0ee3dd1580c76a31 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\update.sys : 384,768 : 04/14/2008 06:00 AM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2807986\SP3QFE\usb8023.sys : 12,928 : 02/11/2013 06:43 PM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2807986$\usb8023.sys : 12,800 : 04/14/2008 06:00 AM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\8e4001cc9d3059a10d07026cef4c23d1\SP3GDR\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\8e4001cc9d3059a10d07026cef4c23d1\SP3QFE\usb8023.sys : 12,928 : 02/11/2013 06:43 PM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbcamd2.sys : 25,728 : 04/14/2008 06:00 AM : ce97845d2e3f0d274b8bac1ed07c6149 [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbcamd.sys : 25,600 : 04/14/2008 06:00 AM : 1c1a47b40c23358245aa8d0443b6935e [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbccgp.sys : 32,128 : 04/13/2008 11:15 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbd.sys : 4,736 : 04/14/2008 06:00 AM : 596eb39b50d6ebd9b734dc4ae0544693 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbehci.sys : 30,208 : 04/14/2008 06:00 AM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbhub.sys : 59,520 : 04/14/2008 06:00 AM : 1ab3cdde553b6e064d2e754efe20285c [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbintel.sys : 15,872 : 04/14/2008 06:00 AM : 290913dc4f1125e5a82de52579a44c43 [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbport.sys : 143,872 : 04/14/2008 06:00 AM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\USBSTOR.sys : 26,368 : 04/14/2008 00:15 AM : a32426d9b14a089eaa1d922e0c5801a9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\usbstor.sys : 26,368 : 04/14/2008 00:15 AM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbuhci.sys : 20,608 : 04/14/2008 06:00 AM : 26496f9dee2d787fc3e61ad54821ffe6 [NoSig]
 
 * C:\WINDOWS\System32\drivers\vga.sys : 20,992 : 04/14/2008 06:00 AM : 0d3a8fafceacd8b7625cd549757a7df1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\vga.sys : 20,992 : 04/14/2008 06:00 AM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\videoprt.sys : 81,664 : 04/14/2008 06:00 AM : e28726b72c46821a28830e077d39a55b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\videoprt.sys : 81,664 : 04/14/2008 06:00 AM : e28726b72c46821a28830e077d39a55b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\volsnap.sys : 53,248 : 04/14/2008 06:00 AM : c41ffdc191e6c832e2e53c967eae0a16 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\volsnap.sys : 53,248 : 04/14/2008 06:00 AM : c41ffdc191e6c832e2e53c967eae0a16 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wanarp.sys : 34,560 : 04/14/2008 06:00 AM : e20b95baedb550f32dd489265c1da1f6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wanarp.sys : 34,560 : 04/14/2008 06:00 AM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wdmaud.sys : 83,072 : 04/14/2008 00:47 AM : 6768acf64b18196494413695f0c3a00f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wdmaud.sys : 83,072 : 04/14/2008 00:47 AM : 6768acf64b18196494413695f0c3a00f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wmilib.sys : 4,352 : 04/14/2008 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wmilib.sys : 4,352 : 04/14/2008 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ws2ifsl.sys : 12,032 : 04/14/2008 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2ifsl.sys : 12,032 : 04/14/2008 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [Pos Repl]
 
Checking HOSTS File: 
 
 * HOSTS file entries found: 
 
  127.0.0.1 localhost
 
Program finished at: 01/28/2014 08:48:43 PM
Execution time: 0 hours(s), 7 minute(s), and 2 seconds(s)
 

 



BC AdBot (Login to Remove)

 


m

#2 DASOS

DASOS

    Malware hunter


  • Security Colleague
  • 1,662 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greece loutraki 6 km from korinth canal
  • Local time:06:35 AM

Posted 29 January 2014 - 08:17 AM

Hi

 

You need elevated help with tools than can’t be used in this section!   

 

Please follow the instructions in the Malware Removal and Log Section Preparation Guide starting at Step 6.

  • If you cannot complete a step, then skip it and continue with the next.
  • In Step 6 there are instructions for downloading and running DDS which will create two logs. (Note: Windows 8.1 Users will not be able run DDS and create a log)

When you have done that, post your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.

Start a new topic, give it a relevant title and post your log(s) along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. If you cannot produce any of the required logs, then still start the new topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happened when you tried to create them. A member of the Malware Removal Team will walk you through, step by step, on how to clean your computer.

After doing this, please reply back in this thread with a link to the new topic 

 

Stelios



#3 NoiroAvecu

NoiroAvecu
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Guadalajara, Jalisco, Mexico
  • Local time:10:35 PM

Posted 29 January 2014 - 11:46 PM

My apologies for mistaken the proper forum, and also I`ve just notice that my topic went public twice (blame on me)! 

 

This is the link to the new post:

 

http://www.bleepingcomputer.com/forums/t/522583/possibly-patched-files-shown-by-rkill-still-infected/

 

I really appreciate your time and Help Stelios, I wasn't able to come whit a better title, honestly it`s not my thing! 

 

Noiro



#4 DASOS

DASOS

    Malware hunter


  • Security Colleague
  • 1,662 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greece loutraki 6 km from korinth canal
  • Local time:06:35 AM

Posted 30 January 2014 - 03:04 AM

No problem Noiro!

 

 

Now that you have posted a log, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

While we understand your frustration at having to wait, please note that BleepingComputer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large, as are those of other comparable sites that help members with malware issues. Athough our MRT staff work on hundreds of requests each day, they are all volunteers who contribute to helping members as time permits. No one is paid by BleepingComputer for their assistance to our members.

New and more devious malware infections are released almost daily. It then takes time for our Team to to investigate, analyze and test removal techniques before we can help members like yourself. Doing that means that we sacrifice speed of response for a quality response that will help remove the malware more effectively.

Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, you wouldn't want someone to assist you who is not familiar with your issue and attempt to fix it, would you?

Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.We have mechanisms in place to prevent logs from being overlooked, so do not worry that you have been forgotten. 






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users