Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Possibly Patched Files. Trojan agent? Windows XP


  • This topic is locked This topic is locked
4 replies to this topic

#1 NoiroAvecu

NoiroAvecu

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Guadalajara, Jalisco, Mexico
  • Local time:09:00 PM

Posted 28 January 2014 - 11:11 PM

 
 
I got this malware trojan agent last week, when downloading a fake smartdraw program, whit the following perceptible damage:
 
Google chrome (my default browser) got its star-up page and searche engine changed, again and again.
             Unable to open google, facebook, or any AV page
              slow performance
 
Pc Slow performance
 
Trying to come whit a solution I`ve tried (following various forums advices) iobit malware figther, cclean, malwarebytes, panda, avast, eset online, Rkill, hijackthis, all this aloud me to use chrome, but I got have the Rkill running
 
I've tried combofix (now I know I shouldn`t) but it always got frozen.
 
 
Lately I have run Rogue Killer, whit no results, 
 
Im afraid its getting worst, today I had to run the Rkill just to get my pc connected to the wireles lan.
 
 
So tanks for your time and help, 
 
Not sure to post the Rkill log but I'm going cracy!
 
Program started at: 01/28/2014 08:41:41 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * C:\WINDOWS\System32\alg.exe (PID: 2092) [WD-HEUR]
 
1 proccess terminated!
 
Possibly Patched Files.
 
 * C:\WINDOWS\system32\services.exe
 * C:\WINDOWS\system32\lsass.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\System32\svchost.exe
 * C:\WINDOWS\system32\spoolsv.exe
 * C:\WINDOWS\System32\svchost.exe
 * C:\WINDOWS\system32\svchost.exe
 * C:\WINDOWS\system32\wscntfy.exe
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * Reparse Point/Junctions Found (Most likely legitimate)!
 
     * C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]
 
Checking Windows Service Integrity: 
 
 * Servicio de restauración de sistema (srservice) is not Running.
   Startup Type set to: Automatic
 
 * Controlador de filtro de Restaurar sistema (sr) is not Running.
   Startup Type set to: Disabled
 
Searching for Missing Digital Signatures: 
 
 * C:\WINDOWS\System32\appmgmts.dll : 175,104 : 04/14/2008 06:00 AM : 30cd42bfcdafefe8567b9e527dd3ae08 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\appmgmts.dll : 175,104 : 04/14/2008 06:00 AM : 30cd42bfcdafefe8567b9e527dd3ae08 [Pos Repl]
 
 * C:\WINDOWS\System32\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2705219-v2\SP3QFE\browser.dll : 78,336 : 07/06/2012 07:58 AM : 88f61096edaf97f86128ed9007802709 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2705219-v2$\browser.dll : 77,824 : 04/14/2008 06:00 AM : e28818bd591f8af8fbe9897472b9665e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\dbff1612eddd17847741606385847a4e\sp3gdr\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\dbff1612eddd17847741606385847a4e\sp3qfe\browser.dll : 78,336 : 07/06/2012 07:58 AM : 88f61096edaf97f86128ed9007802709 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\browser.dll : 78,336 : 07/06/2012 07:58 AM : dca0e43cb14d2390faa5a21b9dc92274 [Pos Repl]
 
 * C:\WINDOWS\System32\clipsrv.exe : 33,280 : 04/14/2008 06:00 AM : 0c3bf68ab94cefd64b333b326f84510e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\clipsrv.exe : 33,280 : 04/14/2008 06:00 AM : 0c3bf68ab94cefd64b333b326f84510e [Pos Repl]
 
 * C:\WINDOWS\System32\comctl32.dll : 617,472 : 08/23/2010 10:12 AM : 3ddec846e57f668c07407f3ac3b66220 [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617,472 : 04/14/2008 06:00 AM : 618a4c7a7c0ca86da884c8c0facad8c2 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\comctl32.dll : 617,472 : 08/23/2010 10:12 AM : 3ddec846e57f668c07407f3ac3b66220 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921,088 : 04/14/2008 06:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1,054,208 : 04/14/2008 06:00 AM : 08d17a982cd6191b34d1b8c8a2e694b6 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1,054,208 : 08/23/2010 10:12 AM : 24b09ed0c5b019a5198a74504179eeb0 [Pos Repl]
 
 * C:\WINDOWS\System32\comres.dll : 837,120 : 04/14/2008 06:00 AM : 93f4e612c695e81512110956454e6e25 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\comres.dll : 837,120 : 04/14/2008 06:00 AM : 93f4e612c695e81512110956454e6e25 [Pos Repl]
 
 * C:\WINDOWS\System32\cryptsvc.dll : 62,464 : 04/14/2008 06:00 AM : e423c9c1946c656e0e4840210a0a8681 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\cryptsvc.dll : 62,464 : 04/14/2008 06:00 AM : e423c9c1946c656e0e4840210a0a8681 [Pos Repl]
 
 * C:\WINDOWS\System32\csrss.exe : 6,144 : 04/14/2008 06:00 AM : 485f449f57b0f8d306db884fc2f7ad45 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\csrss.exe : 6,144 : 04/14/2008 06:00 AM : 485f449f57b0f8d306db884fc2f7ad45 [Pos Repl]
 
 * C:\WINDOWS\System32\ctfmon.exe : 15,360 : 04/14/2008 06:00 AM : daae1cb1b1875b760496e7d3336da1ad [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ctfmon.exe : 15,360 : 04/14/2008 06:00 AM : daae1cb1b1875b760496e7d3336da1ad [Pos Repl]
 
 * C:\WINDOWS\System32\d3d8.dll : 1,179,648 : 04/14/2008 06:00 AM : 5e2386c25cee0dbd0efc37333a1c8cca [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d8.dll : 1,179,648 : 04/14/2008 06:00 AM : 5e2386c25cee0dbd0efc37333a1c8cca [Pos Repl]
 
 * C:\WINDOWS\System32\d3d8thk.dll : 8,192 : 04/14/2008 06:00 AM : 6df3da5705861ce9da8da72e663ae052 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d8thk.dll : 8,192 : 04/14/2008 06:00 AM : 6df3da5705861ce9da8da72e663ae052 [Pos Repl]
 
 * C:\WINDOWS\System32\d3d9.dll : 1,689,088 : 04/14/2008 06:00 AM : ae5dd931efab3687ba4df0671f4ce078 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\d3d9.dll : 1,689,088 : 04/14/2008 06:00 AM : ae5dd931efab3687ba4df0671f4ce078 [Pos Repl]
 
 * C:\WINDOWS\System32\ddraw.dll : 279,552 : 04/14/2008 06:00 AM : 28d0d87445f4add6614155ec13f042dd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ddraw.dll : 279,552 : 04/14/2008 06:00 AM : 28d0d87445f4add6614155ec13f042dd [Pos Repl]
 
 * C:\WINDOWS\System32\dllhost.exe : 5,120 : 04/14/2008 06:00 AM : 0f886de058726bb6323bfd98773fad26 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dllhost.exe : 5,120 : 04/14/2008 06:00 AM : 0f886de058726bb6323bfd98773fad26 [Pos Repl]
 
 * C:\WINDOWS\System32\dsound.dll : 367,616 : 04/14/2008 06:00 AM : 9ef059a2c76bce8db9b0dd95efe23a48 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dsound.dll : 367,616 : 04/14/2008 06:00 AM : 9ef059a2c76bce8db9b0dd95efe23a48 [Pos Repl]
 
 * C:\WINDOWS\System32\dssenh.dll : 138,752 : 04/14/2008 06:00 AM : fede68bf80052bad393afd5c2e60dcb0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dssenh.dll : 138,752 : 04/14/2008 06:00 AM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]
 
 * C:\WINDOWS\System32\es.dll : 253,952 : 07/07/2008 02:27 PM : a225dd0d0489bd580781d19524a10b19 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253,952 : 07/07/2008 02:25 PM : 6ec3c2a5cea41b78bb55b30444292cb8 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246,272 : 04/14/2008 06:00 AM : 76abf3bb5a6d684641ec92b28240811d [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\es.dll : 253,952 : 07/07/2008 02:27 PM : a225dd0d0489bd580781d19524a10b19 [Pos Repl]
 
 * C:\WINDOWS\System32\eventlog.dll : 56,320 : 04/14/2008 06:00 AM : 2744c713f0217bd8ffd13e2ef731371c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\eventlog.dll : 56,320 : 04/14/2008 06:00 AM : 2744c713f0217bd8ffd13e2ef731371c [Pos Repl]
 
 * C:\WINDOWS\System32\hid.dll : 20,992 : 04/14/2008 06:00 AM : d3e333d2883647b600a51a3526c60760 [NoSig]
 
 * C:\WINDOWS\System32\hnetcfg.dll : 347,136 : 04/14/2008 06:00 AM : 54b34da91eaf52a8eac654ced8977980 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\hnetcfg.dll : 347,136 : 04/14/2008 06:00 AM : 54b34da91eaf52a8eac654ced8977980 [Pos Repl]
 
 * C:\WINDOWS\System32\imm32.dll : 110,080 : 04/14/2008 06:00 AM : 95df6a7520912b1040f748a287ea382a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\imm32.dll : 110,080 : 04/14/2008 06:00 AM : 95df6a7520912b1040f748a287ea382a [Pos Repl]
 
 * C:\WINDOWS\System32\ipsecsvc.dll : 184,832 : 04/14/2008 06:00 AM : 6ed80775cbc24bb4a3900d6fd3b1b971 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipsecsvc.dll : 184,832 : 04/14/2008 06:00 AM : 6ed80775cbc24bb4a3900d6fd3b1b971 [Pos Repl]
 
 * C:\WINDOWS\System32\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2758857\SP3QFE\kernel32.dll : 1,044,992 : 10/02/2012 10:57 PM : 34a51de07eb51d7f0a8eea573f58fc31 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 1,044,992 : 03/21/2009 06:30 PM : 97d5372816ec546bd035edaedb5e6918 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2758857$\kernel32.dll : 1,042,944 : 03/21/2009 08:08 AM : 7dc06bf4cbc3fcd7557d8d69dfbd49f5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 1,042,944 : 04/14/2008 06:00 AM : f43fe49cf77ec1cef9db9e67bddb970f [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f289ad28c8ed2ec4b4cd8e334d790b89\sp3gdr\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f289ad28c8ed2ec4b4cd8e334d790b89\sp3qfe\kernel32.dll : 1,044,992 : 10/02/2012 10:57 PM : 34a51de07eb51d7f0a8eea573f58fc31 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\kernel32.dll : 1,043,456 : 10/02/2012 10:58 PM : 32a43970b5b4042d00d7652b89ea838b [Pos Repl]
 
 * C:\WINDOWS\System32\ksuser.dll : 4,096 : 04/14/2008 07:48 AM : d9a84134776399f6bd244bc456076575 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ksuser.dll : 4,096 : 04/14/2008 07:48 AM : d9a84134776399f6bd244bc456076575 [Pos Repl]
 
 * C:\WINDOWS\System32\linkinfo.dll : 19,968 : 04/14/2008 06:00 AM : fb67f1e092ab9967d0cd17300d751874 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\linkinfo.dll : 19,968 : 04/14/2008 06:00 AM : fb67f1e092ab9967d0cd17300d751874 [Pos Repl]
 
 * C:\WINDOWS\System32\lpk.dll : 22,016 : 04/14/2008 06:00 AM : 87f15a88aa3376b48f75d7d176b312a0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\lpk.dll : 22,016 : 04/14/2008 06:00 AM : 87f15a88aa3376b48f75d7d176b312a0 [Pos Repl]
 
 * C:\WINDOWS\System32\lsass.exe : 13,312 : 04/14/2008 06:00 AM : 671aca589da3733fac878a751c5bf0ed [NoSig]
 +-> C:\WINDOWS\system32\dllcache\lsass.exe : 13,312 : 04/14/2008 06:00 AM : 671aca589da3733fac878a751c5bf0ed [Pos Repl]
 
 * C:\WINDOWS\System32\mfc40u.dll : 953,856 : 09/18/2010 00:53 AM : 46ef24bcfaf0f7ab46b1a80ccc5bcc71 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953,856 : 09/18/2010 01:18 AM : c7d2de04eea71d72eb0a8793fa6e9fc1 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927,504 : 04/14/2008 06:00 AM : 27415ceeb58c8c2f92aff8cfe2517a3c [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mfc40u.dll : 953,856 : 09/18/2010 00:53 AM : 46ef24bcfaf0f7ab46b1a80ccc5bcc71 [Pos Repl]
 
 * C:\WINDOWS\System32\midimap.dll : 18,944 : 04/14/2008 06:00 AM : d94ff77931d467ac3ed916f767fa7e1f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\midimap.dll : 18,944 : 04/14/2008 06:00 AM : d94ff77931d467ac3ed916f767fa7e1f [Pos Repl]
 
 * C:\WINDOWS\System32\msgsvc.dll : 33,792 : 04/14/2008 06:00 AM : 047e70b04b288439245ddc8dd1a31982 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msgsvc.dll : 33,792 : 04/14/2008 06:00 AM : 047e70b04b288439245ddc8dd1a31982 [Pos Repl]
 
 * C:\WINDOWS\System32\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 01:12 PM : 4bb3b66ccbd71bcf84fdfef9a4955d63 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 09:17 AM : eb44f76332080fd115b8589d6dd8072f [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 04:27 AM : 5d7062aa7bbc8a5ff8ed8109325984e1 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2898785$\mshtml.dll : 3,066,880 : 04/14/2008 06:00 AM : 85b88c504d1527978f1c2fbe6a41e799 [Pos Repl]
 +-> C:\WINDOWS\ie8\mshtml.dll : 3,115,008 : 10/24/2013 06:52 PM : 8e781ad1e8634e447f44d7097561a409 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5,950,976 : 05/06/2010 04:33 AM : 4b1bb5db92df08aca55ea93b29f4bcf5 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2744842-IE8\mshtml.dll : 5,978,112 : 11/04/2011 01:13 PM : 289a867941db68c289315a680d8ce395 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2862772-IE8\mshtml.dll : 6,008,832 : 08/28/2012 09:18 AM : 1206a54ad9b011118ea975d17baf1541 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2898785-IE8\mshtml.dll : 6,017,536 : 07/25/2013 08:48 PM : d0b16611be7e6f6928bf8acc6a5671b8 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll : 5,937,152 : 03/08/2009 04:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\0e61ee957d652351f5a5d0e9abed293c\SP3QFE\mshtml.dll : 6,017,536 : 07/25/2013 08:48 PM : d0b16611be7e6f6928bf8acc6a5671b8 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4708fcee345fa37d587411628f0d1b32\sp3qfe\mshtml.dll : 3,115,008 : 10/24/2013 06:52 PM : 8e781ad1e8634e447f44d7097561a409 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\mshtml.dll : 5,950,976 : 05/06/2010 04:33 AM : 4b1bb5db92df08aca55ea93b29f4bcf5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 04:27 AM : 5d7062aa7bbc8a5ff8ed8109325984e1 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3GDR\mshtml.dll : 5,978,112 : 11/04/2011 01:13 PM : 289a867941db68c289315a680d8ce395 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 01:12 PM : 4bb3b66ccbd71bcf84fdfef9a4955d63 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\778eaeaa2835445423a5cd62d51cc9ec\SP3QFE\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3GDR\mshtml.dll : 6,008,832 : 08/28/2012 09:18 AM : 1206a54ad9b011118ea975d17baf1541 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 09:17 AM : eb44f76332080fd115b8589d6dd8072f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mshtml.dll : 6,020,608 : 10/29/2013 01:44 AM : 03fc774e914596df9e992da1328d40e1 [Pos Repl]
 
 * C:\WINDOWS\System32\msimg32.dll : 4,608 : 04/14/2008 06:00 AM : b5d9efebe404a9a2c74ef27e1823a78b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msimg32.dll : 4,608 : 04/14/2008 06:00 AM : b5d9efebe404a9a2c74ef27e1823a78b [Pos Repl]
 
 * C:\WINDOWS\System32\mspmsnsv.dll : 26,112 : 05/09/2006 10:26 PM : f4db1f1417ff329e8ff217d5c474d5d7 [NoSig]
 +-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 52,736 : 04/14/2008 06:00 AM : 57cf215b0250de0c4ae36abc8ae31be4 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\MsPMSNSv.dll : 26,112 : 05/09/2006 10:26 PM : f4db1f1417ff329e8ff217d5c474d5d7 [Pos Repl]
 
 * C:\WINDOWS\System32\msprivs.dll : 48,128 : 04/14/2008 06:00 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msprivs.dll : 48,128 : 04/14/2008 06:00 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl]
 
 * C:\WINDOWS\System32\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : 0f021b29e0c2c9d897258399fb2149cd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : 0f021b29e0c2c9d897258399fb2149cd [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322,560 : 04/14/2008 06:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
 +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343,040 : 04/14/2008 06:00 AM : b1cb86d70023988360da136b317d8546 [Pos Repl]
 
 * C:\WINDOWS\System32\mswsock.dll : 248,320 : 06/20/2008 10:03 AM : 5e11d375c92a0dda7ac4d487fc4e1978 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 248,320 : 06/20/2008 11:44 AM : dc10b07f256c8edf6642015e380c741e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 248,320 : 04/14/2008 06:00 AM : ad893c9d3a09081d55a4bdfbc66ad592 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mswsock.dll : 248,320 : 06/20/2008 10:03 AM : 5e11d375c92a0dda7ac4d487fc4e1978 [Pos Repl]
 
 * C:\WINDOWS\System32\netlogon.dll : 407,040 : 04/14/2008 06:00 AM : cd2bbb52dfaab666b812a51b1e96f2a0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netlogon.dll : 407,040 : 04/14/2008 06:00 AM : cd2bbb52dfaab666b812a51b1e96f2a0 [Pos Repl]
 
 * C:\WINDOWS\System32\netman.dll : 198,144 : 04/14/2008 06:00 AM : a48884c9359ee9f1fc8f3f0d93fb1d95 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netman.dll : 198,144 : 04/14/2008 06:00 AM : a48884c9359ee9f1fc8f3f0d93fb1d95 [Pos Repl]
 
 * C:\WINDOWS\System32\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2,071,808 : 12/09/2010 07:44 PM : 9f35605bc629f27aa34423b9de652284 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:51 AM : f3364f7432d706f7550fba400dec258e [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2,068,608 : 02/09/2009 05:17 AM : 9b5e5d325cedbb10a9a86679634a38cc [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2,068,480 : 02/10/2009 06:06 PM : 2050c3bab913974643d43c1a414cacb5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2,071,808 : 12/09/2010 09:13 AM : a09f7aae3b9d189f5f9fc16590df4a2d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2859537$\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:53 AM : 8a943e5db9bc152aff0d26f9e9a68eff [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2,068,224 : 04/14/2008 06:00 AM : 2e2931a58b112cdf2a99b00b5dacdbe4 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a252031a244addf5bac2b19c3105e2be\sp3qfe\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:53 AM : 8a943e5db9bc152aff0d26f9e9a68eff [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntkrnlpa.exe : 2,071,552 : 04/11/2012 07:51 AM : f3364f7432d706f7550fba400dec258e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ntkrnlpa.exe : 2,072,576 : 07/04/2013 01:33 AM : 3f12a9df946b073b8110d29c7966b6b5 [Pos Repl]
 
 * C:\WINDOWS\System32\ntmssvc.dll : 437,760 : 04/14/2008 06:00 AM : d60c40d71a4d874c903255e4827afa0c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ntmssvc.dll : 437,760 : 04/14/2008 06:00 AM : d60c40d71a4d874c903255e4827afa0c [Pos Repl]
 
 * C:\WINDOWS\System32\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2,195,200 : 12/09/2010 09:14 AM : 4f2053b8b0d20f4b398a95bdd1905893 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:50 AM : 90eb3afd0833502e05d1d7a4b6f238a5 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2,191,616 : 02/10/2009 06:15 PM : 6bc8e4aafc98b556b8fb616ad30cd5a3 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2,191,488 : 02/09/2009 05:24 AM : 0a413fffe5c2fc00d5f8f6ff4b3f6889 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2,195,200 : 12/09/2010 09:13 AM : 5e8f8bbeac46044a99c1edce00e96b01 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2859537$\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:52 AM : ec6e69bcbf5cf5eac92626b82648a96e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2,191,360 : 04/14/2008 06:00 AM : 6468827016fa22cae81d7059f1a974c0 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a252031a244addf5bac2b19c3105e2be\sp3qfe\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:52 AM : ec6e69bcbf5cf5eac92626b82648a96e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntoskrnl.exe : 2,195,072 : 04/11/2012 07:50 AM : 90eb3afd0833502e05d1d7a4b6f238a5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ntoskrnl.exe : 2,195,968 : 07/04/2013 01:33 AM : 5066b3e045e04ff464850adcda3749a2 [Pos Repl]
 
 * C:\WINDOWS\System32\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 271,360 : 10/13/2009 04:39 AM : 264586e0b00abf80b862c216be075c4d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2862152$\oakley.dll : 271,360 : 10/13/2009 04:33 AM : 3d85117c1907baf3fc164c987e98bfc2 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 271,360 : 04/14/2008 06:00 AM : 4526fd371e434d45e14102328a025637 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\17497e6ba3e7f2f989f0c6051974bb91\sp3qfe\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\oakley.dll : 279,552 : 10/12/2013 09:57 AM : 0d42ba89947fe2935834c0ef46d7c3b7 [Pos Repl]
 
 * C:\WINDOWS\System32\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1,288,704 : 11/01/2011 10:05 AM : e8c2fa9ac16c25c0ab0677ba12d74bc1 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1,288,704 : 07/16/2010 05:59 AM : bcfea258277fb42dd7f447eb61c34d06 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1,287,680 : 07/16/2010 06:00 AM : 448fe53c1b2671db712c8e8838e4263f [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2876217$\ole32.dll : 1,288,192 : 11/01/2011 10:07 AM : 494276cfe71555ae0f3234c1b227e67a [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1,287,168 : 04/14/2008 06:00 AM : 463d57bf9fe5871208ff99399360a57d [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\c511efad6d013f61ef8d93c160a4e698\sp3qfe\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ole32.dll : 1,289,216 : 08/05/2013 07:30 AM : c5162c367a567a7bd920d1578cf4dec5 [Pos Repl]
 
 * C:\WINDOWS\System32\olepro32.dll : 84,992 : 04/14/2008 06:00 AM : f71cb6064dfc10dfb767b537bfa33d61 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\olepro32.dll : 84,992 : 04/14/2008 06:00 AM : f71cb6064dfc10dfb767b537bfa33d61 [Pos Repl]
 
 * C:\WINDOWS\System32\perfctrs.dll : 41,984 : 04/14/2008 06:00 AM : 91c2a139745f2af17e4685a1e54b4fda [NoSig]
 +-> C:\WINDOWS\system32\dllcache\perfctrs.dll : 41,984 : 04/14/2008 06:00 AM : 91c2a139745f2af17e4685a1e54b4fda [Pos Repl]
 
 * C:\WINDOWS\System32\powrprof.dll : 17,408 : 04/14/2008 06:00 AM : 56de6fd410b277c4345d7a2c3414db64 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\powrprof.dll : 17,408 : 04/14/2008 06:00 AM : 56de6fd410b277c4345d7a2c3414db64 [Pos Repl]
 
 * C:\WINDOWS\System32\psbase.dll : 98,304 : 04/14/2008 06:00 AM : 57e1639a24bc44f1d4ea3f9950f0e5f3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\psbase.dll : 98,304 : 04/14/2008 06:00 AM : 57e1639a24bc44f1d4ea3f9950f0e5f3 [Pos Repl]
 
 * C:\WINDOWS\System32\pstorsvc.dll : 34,304 : 04/14/2008 06:00 AM : 44caff1d5b89f94180984c80995f6ae6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\pstorsvc.dll : 34,304 : 04/14/2008 06:00 AM : 44caff1d5b89f94180984c80995f6ae6 [Pos Repl]
 
 * C:\WINDOWS\System32\qmgr.dll : 409,088 : 04/14/2008 06:00 AM : 8ee9639c01b92490e09638caa1b16c3c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\qmgr.dll : 409,088 : 04/14/2008 06:00 AM : 8ee9639c01b92490e09638caa1b16c3c [Pos Repl]
 
 * C:\WINDOWS\System32\rasadhlp.dll : 7,680 : 04/14/2008 06:00 AM : 73eca7b33eb3f7262d92ea80b61708cd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasadhlp.dll : 7,680 : 04/14/2008 06:00 AM : 73eca7b33eb3f7262d92ea80b61708cd [Pos Repl]
 
 * C:\WINDOWS\System32\regsvc.dll : 59,904 : 04/14/2008 06:00 AM : e424f05b07ac4357dc08d06218d76c7c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\regsvc.dll : 59,904 : 04/14/2008 06:00 AM : e424f05b07ac4357dc08d06218d76c7c [Pos Repl]
 
 * C:\WINDOWS\System32\rpcss.dll : 401,408 : 02/09/2009 04:52 AM : 97869c55f562b777987100ea30ad8108 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401,408 : 02/09/2009 04:56 AM : aef41fc6f108cc4f94f9b4e96afa9c70 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399,360 : 04/14/2008 06:00 AM : 53d02effa72ca5c57687bee20610aba6 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rpcss.dll : 401,408 : 02/09/2009 04:52 AM : 97869c55f562b777987100ea30ad8108 [Pos Repl]
 
 * C:\WINDOWS\System32\scecli.dll : 185,856 : 04/14/2008 06:00 AM : b6be3c96cd33336a551db3f2299a8e69 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\scecli.dll : 185,856 : 04/14/2008 06:00 AM : b6be3c96cd33336a551db3f2299a8e69 [Pos Repl]
 
 * C:\WINDOWS\System32\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152,064 : 11/16/2011 08:20 AM : 81ac64a666ceafa03c63bbd9d1e3b583 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153,088 : 06/03/2012 10:31 PM : d16b219bf4e3229d7aa64c0bcbf5ef83 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147,456 : 06/25/2009 02:42 AM : 3786e1c77df16c1c177a294164386161 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 147,456 : 06/25/2009 02:26 AM : 8ebc52bf79c1e893f9634caaa83fb334 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152,064 : 11/16/2011 08:21 AM : e37105172f7d22ea488cecc744c63a90 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144,384 : 04/14/2008 06:00 AM : c0bcc6807b66368f37d0e7d0b717fe27 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\09f2e0545c6d5d1ea4caf138925a9b02\sp3gdr\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\09f2e0545c6d5d1ea4caf138925a9b02\sp3qfe\schannel.dll : 153,088 : 06/03/2012 10:31 PM : d16b219bf4e3229d7aa64c0bcbf5ef83 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\schannel.dll : 152,576 : 06/03/2012 10:32 PM : bf58c91d4c31ef0451a0415a84eb54a9 [Pos Repl]
 
 * C:\WINDOWS\System32\schedsvc.dll : 193,536 : 04/14/2008 06:00 AM : 51be25c404d3dd344c6079de715e4977 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\schedsvc.dll : 193,536 : 04/14/2008 06:00 AM : 51be25c404d3dd344c6079de715e4977 [Pos Repl]
 
 * C:\WINDOWS\System32\services.exe : 111,104 : 02/09/2009 05:23 AM : 953df7327510df0de048b8e80e504ef9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 111,104 : 02/09/2009 05:16 AM : aa6e1769469f9d15603a619fc1fb9e18 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 109,056 : 04/14/2008 06:00 AM : d658a8c2fc7b2ad53d1259741a09ee04 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\services.exe : 111,104 : 02/09/2009 05:23 AM : 953df7327510df0de048b8e80e504ef9 [Pos Repl]
 
 * C:\WINDOWS\System32\setupapi.dll : 1,000,960 : 04/14/2008 06:00 AM : 7fbd75db6aeb0768c41299da7034c249 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\setupapi.dll : 1,000,960 : 04/14/2008 06:00 AM : 7fbd75db6aeb0768c41299da7034c249 [Pos Repl]
 
 * C:\WINDOWS\System32\sfc.dll : 5,120 : 04/14/2008 06:00 AM : d5ac9fa63ebefd7aaccb14ba0db1bac3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sfc.dll : 5,120 : 04/14/2008 06:00 AM : d5ac9fa63ebefd7aaccb14ba0db1bac3 [Pos Repl]
 
 * C:\WINDOWS\System32\sfcfiles.dll : 1,572,352 : 04/14/2008 06:00 AM : 2a1e1df559b291583903d2f9cc504522 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sfcfiles.dll : 1,572,352 : 04/14/2008 06:00 AM : 2a1e1df559b291583903d2f9cc504522 [Pos Repl]
 
 * C:\WINDOWS\System32\shsvcs.dll : 135,168 : 07/27/2009 05:17 PM : 1f617c5a76215c380478d750ce92cc73 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135,168 : 07/27/2009 04:14 PM : 8a34f9730a2206726b1be4dc4209cab9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135,168 : 04/14/2008 06:00 AM : ca70edbf32032ea53f114cb930741cb5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\shsvcs.dll : 135,168 : 07/27/2009 05:17 PM : 1f617c5a76215c380478d750ce92cc73 [Pos Repl]
 
 * C:\WINDOWS\System32\smss.exe : 50,688 : 04/14/2008 06:00 AM : 4a3baa168ad14f39e599772e8e020a6c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\smss.exe : 50,688 : 04/14/2008 06:00 AM : 4a3baa168ad14f39e599772e8e020a6c [Pos Repl]
 
 * C:\WINDOWS\System32\spoolsv.exe : 58,880 : 08/17/2010 07:17 AM : 60784f891563fb1b767f70117fc2428f [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58,880 : 08/17/2010 07:19 AM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57,856 : 04/14/2008 06:00 AM : cdd2dc6ae65084481e723e746c20539a [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\spoolsv.exe : 58,880 : 08/17/2010 07:17 AM : 60784f891563fb1b767f70117fc2428f [Pos Repl]
 
 * C:\WINDOWS\System32\srsvc.dll : 171,520 : 04/14/2008 06:00 AM : 0f30eec6013fcf76693405ec4a7df899 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\srsvc.dll : 171,520 : 04/14/2008 06:00 AM : 0f30eec6013fcf76693405ec4a7df899 [Pos Repl]
 
 * C:\WINDOWS\System32\ssdpsrv.dll : 71,680 : 04/14/2008 06:00 AM : b622a432ef02895de4aa38ac8b85fa4c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ssdpsrv.dll : 71,680 : 04/14/2008 06:00 AM : b622a432ef02895de4aa38ac8b85fa4c [Pos Repl]
 
 * C:\WINDOWS\System32\svchost.exe : 14,336 : 04/14/2008 06:00 AM : 4f2340f0bd5b6365c38e74dd391919a8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\svchost.exe : 14,336 : 04/14/2008 06:00 AM : 4f2340f0bd5b6365c38e74dd391919a8 [Pos Repl]
 
 * C:\WINDOWS\System32\tapisrv.dll : 249,856 : 04/14/2008 06:00 AM : 04a5b8ea326951db27df60a14f2999ff [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tapisrv.dll : 249,856 : 04/14/2008 06:00 AM : 04a5b8ea326951db27df60a14f2999ff [Pos Repl]
 
 * C:\WINDOWS\System32\termsrv.dll : 296,960 : 04/14/2008 06:00 AM : 288b20d56d5f0ec4bcc77fbfa5a81740 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\termsrv.dll : 296,960 : 04/14/2008 06:00 AM : 288b20d56d5f0ec4bcc77fbfa5a81740 [Pos Repl]
 
 * C:\WINDOWS\System32\upnphost.dll : 186,368 : 04/14/2008 06:00 AM : 7594203f459abdb5fe53c08d6b1bd53b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\upnphost.dll : 186,368 : 04/14/2008 06:00 AM : 7594203f459abdb5fe53c08d6b1bd53b [Pos Repl]
 
 * C:\WINDOWS\System32\user32.dll : 579,584 : 04/14/2008 06:00 AM : da8898129e0075c7de4dee457514a73c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\user32.dll : 579,584 : 04/14/2008 06:00 AM : da8898129e0075c7de4dee457514a73c [Pos Repl]
 
 * C:\WINDOWS\System32\userinit.exe : 26,624 : 04/14/2008 06:00 AM : f5b8745b9a90eaf17e30c0574e049aa3 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\userinit.exe : 26,624 : 04/14/2008 06:00 AM : f5b8745b9a90eaf17e30c0574e049aa3 [Pos Repl]
 
 * C:\WINDOWS\System32\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406,016 : 04/16/2010 09:30 AM : 964d29711065a944e1bec7fd676e61d9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2850869$\usp10.dll : 406,016 : 04/16/2010 09:38 AM : a8374ff31ac6edebb806d2b61d44618d [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406,016 : 04/14/2008 06:00 AM : d2abeb6af76da414d1fff8b409f00635 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\eb7d7bebde3412e1a06b9b33039fe4c9\sp3qfe\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usp10.dll : 406,016 : 07/10/2013 04:37 AM : aff90d0095d9afc4d5b4c06b71188409 [Pos Repl]
 
 * C:\WINDOWS\System32\UxTheme.dll : 220,160 : 04/14/2008 06:00 AM : 34321a47803793b293296c2165f15690 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\uxtheme.dll : 220,160 : 04/14/2008 06:00 AM : 34321a47803793b293296c2165f15690 [Pos Repl]
 
 * C:\WINDOWS\System32\version.dll : 18,944 : 04/14/2008 06:00 AM : f4968d88123785bcf95a31e0225c5592 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\version.dll : 18,944 : 04/14/2008 06:00 AM : f4968d88123785bcf95a31e0225c5592 [Pos Repl]
 
 * C:\WINDOWS\System32\w32time.dll : 177,152 : 04/14/2008 06:00 AM : c71cfacdbfadd819736f61f5738bddc1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\w32time.dll : 177,152 : 04/14/2008 06:00 AM : c71cfacdbfadd819736f61f5738bddc1 [Pos Repl]
 
 * C:\WINDOWS\System32\wbem\wmiprvse.exe : 227,840 : 02/06/2009 04:10 AM : 798a9e6828997eef4517ada8a2259831 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227,840 : 02/06/2009 04:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218,112 : 04/14/2008 06:00 AM : 3d47902bd4be157f89b469f5cc7b5fa2 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wmiprvse.exe : 227,840 : 02/06/2009 04:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl]
 
 * C:\WINDOWS\System32\wdigest.dll : 54,272 : 06/25/2009 02:26 AM : 0d134ff16f57ac7bb6fab42237f38ca3 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54,272 : 06/25/2009 02:42 AM : f5a46222d555489958d85aa6f16499aa [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49,152 : 04/14/2008 06:00 AM : 31ea4ef7f106c7b2d28fc50d9e75d60e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wdigest.dll : 54,272 : 06/25/2009 02:26 AM : 0d134ff16f57ac7bb6fab42237f38ca3 [Pos Repl]
 
 * C:\WINDOWS\System32\wiaservc.dll : 334,336 : 04/14/2008 06:00 AM : 7226422c95fdf8aa6092ee964912b0df [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wiaservc.dll : 334,336 : 04/14/2008 06:00 AM : 7226422c95fdf8aa6092ee964912b0df [Pos Repl]
 
 * C:\WINDOWS\System32\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919,552 : 11/04/2011 01:12 PM : b6716dc84cae442957e40875d012f183 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\wininet.dll : 920,064 : 08/28/2012 09:17 AM : f503cfa1863ee2745677b6d5302454ef [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll : 919,040 : 05/06/2010 04:28 AM : 9acfbee8e9573ee39cb93c636df36f78 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2898785$\wininet.dll : 668,672 : 04/14/2008 06:00 AM : a9a84cfc20d5f4c609e9cbf9491b8df6 [Pos Repl]
 +-> C:\WINDOWS\ie8\wininet.dll : 671,232 : 10/24/2013 06:52 PM : 9d4b94ffb519cfc0f35fd3576cefb86d [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916,480 : 05/06/2010 04:33 AM : 26412d06783e47eac7667569bf6962d3 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2744842-IE8\wininet.dll : 916,992 : 11/04/2011 01:13 PM : e23dca6f31b9a97714f334b67b412fbd [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2862772-IE8\wininet.dll : 916,992 : 08/28/2012 09:18 AM : 93e89539bc12e61b31a20edc41da8ff4 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB2898785-IE8\wininet.dll : 920,064 : 07/25/2013 08:49 PM : 0beadf3b853739f0951787090a791a53 [Pos Repl]
 +-> C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll : 914,944 : 03/08/2009 04:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\0e61ee957d652351f5a5d0e9abed293c\SP3QFE\wininet.dll : 920,064 : 07/25/2013 08:49 PM : 0beadf3b853739f0951787090a791a53 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4708fcee345fa37d587411628f0d1b32\sp3qfe\wininet.dll : 671,232 : 10/24/2013 06:52 PM : 9d4b94ffb519cfc0f35fd3576cefb86d [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\wininet.dll : 916,480 : 05/06/2010 04:33 AM : 26412d06783e47eac7667569bf6962d3 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\wininet.dll : 919,040 : 05/06/2010 04:28 AM : 9acfbee8e9573ee39cb93c636df36f78 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3GDR\wininet.dll : 916,992 : 11/04/2011 01:13 PM : e23dca6f31b9a97714f334b67b412fbd [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\75f327e792d72e3c8ecae4bb4860787b\SP3QFE\wininet.dll : 919,552 : 11/04/2011 01:12 PM : b6716dc84cae442957e40875d012f183 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\778eaeaa2835445423a5cd62d51cc9ec\SP3QFE\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3GDR\wininet.dll : 916,992 : 08/28/2012 09:18 AM : 93e89539bc12e61b31a20edc41da8ff4 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\e1117c9219e2e71da55685060940b606\SP3QFE\wininet.dll : 920,064 : 08/28/2012 09:17 AM : f503cfa1863ee2745677b6d5302454ef [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\wininet.dll : 920,064 : 10/29/2013 01:44 AM : cfa1ee277e067b82c9d9408ee653fd6e [Pos Repl]
 
 * C:\WINDOWS\System32\winlogon.exe : 510,976 : 04/14/2008 06:00 AM : 213c80d912880bbf04453d09ffccb28c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\winlogon.exe : 510,976 : 04/14/2008 06:00 AM : 213c80d912880bbf04453d09ffccb28c [Pos Repl]
 
 * C:\WINDOWS\System32\ws2_32.dll : 82,432 : 04/14/2008 06:00 AM : 22db5b3da7005c6472d35bef3ffda5ec [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2_32.dll : 82,432 : 04/14/2008 06:00 AM : 22db5b3da7005c6472d35bef3ffda5ec [Pos Repl]
 
 * C:\WINDOWS\System32\ws2help.dll : 19,968 : 04/14/2008 06:00 AM : f7ee4bbfb48437edc6f7f061de1e8f2f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2help.dll : 19,968 : 04/14/2008 06:00 AM : f7ee4bbfb48437edc6f7f061de1e8f2f [Pos Repl]
 
 * C:\WINDOWS\System32\wscntfy.exe : 13,824 : 04/14/2008 06:00 AM : b2718ec9dc738e915d4177498e92bc4d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wscntfy.exe : 13,824 : 04/14/2008 06:00 AM : b2718ec9dc738e915d4177498e92bc4d [Pos Repl]
 
 * C:\WINDOWS\System32\xmlprov.dll : 129,024 : 04/14/2008 06:00 AM : 14fdadcf05a37582399daf1da1de1c7b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\xmlprov.dll : 129,024 : 04/14/2008 06:00 AM : 14fdadcf05a37582399daf1da1de1c7b [Pos Repl]
 
 * C:\WINDOWS\explorer.exe : 1,036,288 : 04/14/2008 06:00 AM : 7522f548a84abad8fa516de5ab3931ef [NoSig]
 +-> C:\WINDOWS\system32\dllcache\explorer.exe : 1,036,288 : 04/14/2008 06:00 AM : 7522f548a84abad8fa516de5ab3931ef [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\acpiec.sys : 12,032 : 04/14/2008 06:00 AM : 1c905333c0b9f3d7c68ddf25e54b00f9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\acpi.sys : 189,056 : 04/14/2008 06:00 AM : cf2a07e1751a2d612d7e13aa431ab057 [NoSig]
 
 * C:\WINDOWS\System32\drivers\aec.sys : 142,592 : 04/13/2008 10:09 PM : 8bed39e3c35d6a489438b8141717a557 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\aec.sys : 142,592 : 04/13/2008 10:09 PM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\afd.sys : 138,496 : 08/17/2011 07:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138,496 : 10/16/2008 09:07 AM : 38d7b715504da4741df35e3594fe2099 [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138,496 : 08/17/2011 07:41 AM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138,112 : 04/14/2008 06:00 AM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138,496 : 10/16/2008 08:43 AM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\afd.sys : 138,496 : 08/17/2011 07:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\amdk6.sys : 41,600 : 04/14/2008 06:00 AM : 12f1871712934ff2df8b8099d7286b41 [NoSig]
 
 * C:\WINDOWS\System32\drivers\amdk7.sys : 41,984 : 04/14/2008 06:00 AM : fbce64d4a59befd5565845d82e1cfbeb [NoSig]
 
 * C:\WINDOWS\System32\drivers\arp1394.sys : 60,800 : 04/14/2008 06:00 AM : b5b8a80875c1dededa8b02765642c32f [NoSig]
 
 * C:\WINDOWS\System32\drivers\asyncmac.sys : 14,336 : 04/14/2008 06:00 AM : b153affac761e7f5fcfa822b9c4e97bc [NoSig]
 +-> C:\WINDOWS\system32\dllcache\asyncmac.sys : 14,336 : 04/14/2008 06:00 AM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\atapi.sys : 96,512 : 04/14/2008 06:00 AM : 9f3a2f5aa6875c72bf062c712cfa2674 [NoSig]
 
 * C:\WINDOWS\System32\drivers\audstub.sys : 3,072 : 08/17/2001 02:59 PM : d9f724aa26c010a217c97606b160ed68 [NoSig]
 
 * C:\WINDOWS\System32\drivers\beep.sys : 4,224 : 04/14/2008 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\beep.sys : 4,224 : 04/14/2008 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\bridge.sys : 71,552 : 04/14/2008 06:00 AM : f934d1b230f84e1d19dd00ac5a7a83ed [NoSig]
 +-> C:\WINDOWS\system32\dllcache\bridge.sys : 71,552 : 04/14/2008 06:00 AM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 272,512 : 06/14/2008 11:40 AM : 5206c872ffc17a0fd95a6255422605cd [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\bthport.sys : 272,512 : 06/14/2008 11:33 AM : 53d951bb865ab36b200b1c9429db644c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cbidf2k.sys : 13,952 : 04/14/2008 06:00 AM : 90a673fc8e12a79afbed2576f6a7aaf9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\cdaudio.sys : 18,688 : 04/14/2008 06:00 AM : c1b486a7658353d33a10cc15211a873b [NoSig]
 
 * C:\WINDOWS\System32\drivers\cdfs.sys : 63,744 : 04/14/2008 06:00 AM : c885b02847f5d2fd45a24e219ed93b32 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\cdfs.sys : 63,744 : 04/14/2008 06:00 AM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cdrom.sys : 62,976 : 04/14/2008 06:00 AM : 1f4260cc5b42272d71f79e570a27a4fe [NoSig]
 
 * C:\WINDOWS\System32\drivers\classpnp.sys : 49,536 : 04/14/2008 06:00 AM : fe47dd8fe6d7768ff94ebec6c74b2719 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\classpnp.sys : 49,536 : 04/14/2008 06:00 AM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\cpqdap01.sys : 11,776 : 04/14/2008 06:00 AM : 9624293e55ad405415862b504ca95b73 [NoSig]
 
 * C:\WINDOWS\System32\drivers\crusoe.sys : 40,960 : 04/14/2008 06:00 AM : 7a55910555493821144e6ee587890b4f [NoSig]
 
 * C:\WINDOWS\System32\drivers\diskdump.sys : 14,208 : 04/14/2008 06:00 AM : e65e2353a5d74ea89971cb918eeeb2f6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\diskdump.sys : 14,208 : 04/14/2008 06:00 AM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\disk.sys : 36,352 : 04/14/2008 06:00 AM : 044452051f3e02e7963599fc8f4f3e25 [NoSig]
 
 * C:\WINDOWS\System32\drivers\dmboot.sys : 800,256 : 04/14/2008 06:00 AM : c252a99c0a78b39faa2e2d1d048b1050 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmboot.sys : 800,256 : 04/14/2008 06:00 AM : c252a99c0a78b39faa2e2d1d048b1050 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dmio.sys : 154,240 : 04/14/2008 06:00 AM : 33b4d4039cd2cb25351a7bf13b2988d9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmio.sys : 154,240 : 04/14/2008 06:00 AM : 33b4d4039cd2cb25351a7bf13b2988d9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dmload.sys : 5,888 : 04/14/2008 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmload.sys : 5,888 : 04/14/2008 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\DMusic.sys : 52,864 : 04/14/2008 00:15 AM : 8a208dfcf89792a484e76c40e5f50b45 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dmusic.sys : 52,864 : 04/14/2008 00:15 AM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\drmkaud.sys : 2,944 : 04/14/2008 00:15 AM : 8f5fcff8e8848afac920905fbd9d33c8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\drmkaud.sys : 2,944 : 04/14/2008 00:15 AM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\drmk.sys : 60,160 : 04/14/2008 00:15 AM : 6cb08593487f5701d2d2254e693eafce [NoSig]
 +-> C:\WINDOWS\system32\dllcache\drmk.sys : 60,160 : 04/14/2008 00:15 AM : 6cb08593487f5701d2d2254e693eafce [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dxapi.sys : 10,496 : 04/14/2008 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dxapi.sys : 10,496 : 04/14/2008 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\dxg.sys : 71,168 : 04/14/2008 06:00 AM : ac7280566a7bb85cb3291f04ddc1198e [NoSig]
 
 * C:\WINDOWS\System32\drivers\dxgthk.sys : 3,328 : 04/14/2008 06:00 AM : a73f5d6705b1d820c19b18782e176efd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\dxgthk.sys : 3,328 : 04/14/2008 06:00 AM : a73f5d6705b1d820c19b18782e176efd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fastfat.sys : 143,744 : 04/14/2008 06:00 AM : 38d332a6d56af32635675f132548343e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fastfat.sys : 143,744 : 04/14/2008 06:00 AM : 38d332a6d56af32635675f132548343e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fdc.sys : 27,392 : 04/14/2008 06:00 AM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [NoSig]
 
 * C:\WINDOWS\System32\drivers\fips.sys : 44,672 : 04/14/2008 06:00 AM : e5e61f2c07344e91dbfb7eafde549ab4 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fips.sys : 44,672 : 04/14/2008 06:00 AM : e5e61f2c07344e91dbfb7eafde549ab4 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\flpydisk.sys : 20,480 : 04/14/2008 06:00 AM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [NoSig]
 
 * C:\WINDOWS\System32\drivers\fltMgr.sys : 129,792 : 04/14/2008 06:00 AM : b2cf4b0786f8212cb92ed2b50c6db6b0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fltmgr.sys : 129,792 : 04/14/2008 06:00 AM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fs_rec.sys : 7,936 : 04/14/2008 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\fs_rec.sys : 7,936 : 04/14/2008 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\fsvga.sys : 12,416 : 04/14/2008 06:00 AM : c759e01d37a12081d3aafb67dee2522c [NoSig]
 
 * C:\WINDOWS\System32\drivers\ftdisk.sys : 125,952 : 04/14/2008 06:00 AM : cc5f3af5711a1c7c8fa1d43bb16b401a [NoSig]
 
 * C:\WINDOWS\System32\drivers\hidclass.sys : 36,864 : 04/14/2008 06:00 AM : 1af592532532a402ed7c060f6954004f [NoSig]
 
 * C:\WINDOWS\System32\drivers\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862335$\hidparse.sys : 24,960 : 04/14/2008 06:00 AM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2227a887c38c28a77c29dfaf3fadd4a1\SP3QFE\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\hidparse.sys : 25,088 : 07/02/2013 08:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\hidusb.sys : 10,368 : 04/14/2008 00:15 AM : ccf82c5ec8a7326c3066de870c06daf1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\hidusb.sys : 10,368 : 04/14/2008 00:15 AM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265,728 : 10/20/2009 09:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264,832 : 04/14/2008 06:00 AM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\628a67f9090228b20746f6ff98390e01\sp3gdr\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\628a67f9090228b20746f6ff98390e01\sp3qfe\http.sys : 265,728 : 10/20/2009 09:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\http.sys : 265,728 : 10/20/2009 10:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\i8042prt.sys : 53,504 : 04/14/2008 06:00 AM : 4a2490a66e8271901e89dd5fb79748ae [NoSig]
 
 * C:\WINDOWS\System32\drivers\imapi.sys : 42,112 : 04/14/2008 06:00 AM : 083a052659f5310dd8b6a6cb05edcf8e [NoSig]
 
 * C:\WINDOWS\System32\drivers\intelide.sys : 5,632 : 04/14/2008 00:24 AM : cdc98c84965ac816b3f76ec388e24078 [NoSig]
 
 * C:\WINDOWS\System32\drivers\intelppm.sys : 40,576 : 04/14/2008 06:00 AM : 49a060498c09db18c3ea9939789005ab [NoSig]
 
 * C:\WINDOWS\System32\drivers\ip6fw.sys : 36,608 : 04/14/2008 06:00 AM : 3bb22519a194418d5fec05d800a19ad0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ip6fw.sys : 36,608 : 04/14/2008 06:00 AM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipfltdrv.sys : 32,896 : 04/14/2008 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipfltdrv.sys : 32,896 : 04/14/2008 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipinip.sys : 20,864 : 04/14/2008 06:00 AM : b87ab476dcf76e72010632b5550955f5 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipinip.sys : 20,864 : 04/14/2008 06:00 AM : b87ab476dcf76e72010632b5550955f5 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipnat.sys : 152,832 : 04/14/2008 06:00 AM : cc748ea12c6effde940ee98098bf96bb [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipnat.sys : 152,832 : 04/14/2008 06:00 AM : cc748ea12c6effde940ee98098bf96bb [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ipsec.sys : 75,264 : 04/14/2008 06:00 AM : 23c74d75e36e7158768dd63d92789a91 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ipsec.sys : 75,264 : 04/14/2008 06:00 AM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\irenum.sys : 11,264 : 04/14/2008 06:00 AM : c93c9ff7b04d772627a3646d89f7bf89 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\irenum.sys : 11,264 : 04/14/2008 06:00 AM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\isapnp.sys : 37,760 : 04/14/2008 06:00 AM : 0f3d281b0410fe5d482aada37d20524b [NoSig]
 
 * C:\WINDOWS\System32\drivers\kbdclass.sys : 25,088 : 04/14/2008 06:00 AM : 188ddd286bc0daea6984858c6a4d7bbf [NoSig]
 
 * C:\WINDOWS\System32\drivers\kmixer.sys : 172,416 : 04/14/2008 00:15 AM : 692bcf44383d056aed41b045a323d378 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\kmixer.sys : 172,416 : 04/14/2008 00:15 AM : 692bcf44383d056aed41b045a323d378 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ksecdd.sys : 92,928 : 06/24/2009 05:18 AM : b467646c54cc746128904e1654c750c1 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92,928 : 06/24/2009 04:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92,288 : 04/14/2008 06:00 AM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ksecdd.sys : 92,928 : 06/24/2009 05:18 AM : b467646c54cc746128904e1654c750c1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ks.sys : 141,056 : 04/14/2008 00:46 AM : 0753515f78df7f271a5e61c20bcd36a1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ks.sys : 141,056 : 04/14/2008 00:46 AM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mcd.sys : 7,680 : 04/14/2008 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mcd.sys : 7,680 : 04/14/2008 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mf.sys : 63,744 : 04/14/2008 06:00 AM : a7da20ab18a1bdae28b0f349e57da0d1 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mnmdd.sys : 4,224 : 04/14/2008 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mnmdd.sys : 4,224 : 04/14/2008 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\modem.sys : 30,336 : 04/14/2008 06:00 AM : 9024556e739b8469d2b8f5f0e4c9bc9f [NoSig]
 
 * C:\WINDOWS\System32\drivers\mouclass.sys : 23,552 : 04/14/2008 06:00 AM : 6fd36b4994a2363659a65c9f970cfdb7 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mouhid.sys : 12,416 : 08/22/2001 09:34 PM : 8ee532e516b2d23d686cfc1cc0a15c25 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mouhid.sys : 12,416 : 08/22/2001 09:34 PM : 8ee532e516b2d23d686cfc1cc0a15c25 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mountmgr.sys : 42,368 : 04/14/2008 06:00 AM : a80b9a0bad1b73637dbcbba7df72d3fd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mountmgr.sys : 42,368 : 04/14/2008 06:00 AM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mqac.sys : 92,544 : 04/14/2008 06:00 AM : 70c14f5cca5cf73f8a645c73a01d8726 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mqac.sys : 92,544 : 04/14/2008 06:00 AM : 70c14f5cca5cf73f8a645c73a01d8726 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mrxdav.sys : 180,608 : 04/14/2008 06:00 AM : 11d42bb6206f33fbb3ba0288d3ef81bd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mrxdav.sys : 180,608 : 04/14/2008 06:00 AM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457,856 : 07/15/2011 07:29 AM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456,576 : 04/14/2008 06:00 AM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mrxsmb.sys : 456,320 : 07/15/2011 07:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\msfs.sys : 19,072 : 04/14/2008 06:00 AM : c941ea2454ba8350021d774daf0f1027 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msfs.sys : 19,072 : 04/14/2008 06:00 AM : c941ea2454ba8350021d774daf0f1027 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\msgpc.sys : 35,072 : 04/14/2008 06:00 AM : 0a02c63c8b144bd8c86b103dee7c86a2 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\msgpc.sys : 35,072 : 04/14/2008 06:00 AM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSKSSRV.sys : 7,552 : 04/14/2008 00:09 AM : d1575e71568f4d9e14ca56b7b0453bf1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mskssrv.sys : 7,552 : 04/14/2008 00:09 AM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSPCLOCK.sys : 5,376 : 04/14/2008 00:09 AM : 325bb26842fc7ccc1fcce2c457317f3e [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mspclock.sys : 5,376 : 04/14/2008 00:09 AM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\MSPQM.sys : 4,992 : 04/14/2008 00:09 AM : bad59648ba099da4a17680b39730cb3d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\mspqm.sys : 4,992 : 04/14/2008 00:09 AM : bad59648ba099da4a17680b39730cb3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\mssmbios.sys : 15,488 : 04/14/2008 06:00 AM : af5f4f3f14a8ea2c26de30f7a1e17136 [NoSig]
 
 * C:\WINDOWS\System32\drivers\mup.sys : 105,472 : 04/21/2011 07:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105,472 : 04/21/2011 07:52 AM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105,344 : 04/14/2008 06:00 AM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\mup.sys : 105,472 : 04/21/2011 07:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndis.sys : 182,656 : 04/14/2008 06:00 AM : 1df7f42665c94b825322fae71721130d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ndis.sys : 182,656 : 04/14/2008 06:00 AM : 1df7f42665c94b825322fae71721130d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndistapi.sys : 10,496 : 07/08/2011 08:02 AM : 0109c4f3850dfbab279542515386ae22 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10,496 : 07/08/2011 07:51 AM : 091735a5f20acb1dc147383a905ae002 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10,112 : 04/14/2008 06:00 AM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ndistapi.sys : 10,496 : 07/08/2011 08:02 AM : 0109c4f3850dfbab279542515386ae22 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndisuio.sys : 14,592 : 04/14/2008 06:00 AM : f927a4434c5028758a842943ef1a3849 [NoSig]
 
 * C:\WINDOWS\System32\drivers\ndiswan.sys : 91,520 : 04/14/2008 06:00 AM : edc1531a49c80614b2cfda43ca8659ab [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ndiswan.sys : 91,520 : 04/14/2008 06:00 AM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40,960 : 11/02/2010 11:55 PM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40,576 : 04/14/2008 06:00 AM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2914368$\ndproxy.sys : 40,960 : 11/02/2010 09:17 AM : 9282bd12dfb069d3889eb3fcc1000a9b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5a432b0ff5c4b0c5a7a3c221dbf1c340\SP3QFE\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\ndproxy.sys : 40,960 : 11/27/2013 02:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\netbios.sys : 34,688 : 04/14/2008 06:00 AM : 5d81cf9a2f1a3a756b66cf684911cdf0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netbios.sys : 34,688 : 04/14/2008 06:00 AM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\netbt.sys : 162,816 : 04/14/2008 06:00 AM : 74b2b2f5bea5e9a3dc021d685551bd3d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\netbt.sys : 162,816 : 04/14/2008 06:00 AM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nic1394.sys : 61,824 : 04/14/2008 06:00 AM : e9e47cfb2d461fa0fc75b7a74c6383ea [NoSig]
 
 * C:\WINDOWS\System32\drivers\nikedrv.sys : 12,032 : 04/14/2008 06:00 AM : be984d604d91c217355cdd3737aad25d [NoSig]
 
 * C:\WINDOWS\System32\drivers\nmnt.sys : 40,320 : 04/14/2008 06:00 AM : 1e421a6bcf2203cc61b821ada9de878b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nmnt.sys : 40,320 : 04/14/2008 06:00 AM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\npfs.sys : 30,848 : 04/14/2008 06:00 AM : 3182d64ae053d6fb034f44b6def8034a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\npfs.sys : 30,848 : 04/14/2008 06:00 AM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ntfs.sys : 574,976 : 04/14/2008 06:00 AM : 78a08dd6a8d65e697c18e1db01c5cdca [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ntfs.sys : 574,976 : 04/14/2008 06:00 AM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\null.sys : 2,944 : 04/14/2008 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [NoSig]
 +-> C:\WINDOWS\system32\dllcache\null.sys : 2,944 : 04/14/2008 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkflt.sys : 12,416 : 04/14/2008 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkflt.sys : 12,416 : 04/14/2008 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkfwd.sys : 32,512 : 04/14/2008 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkfwd.sys : 32,512 : 04/14/2008 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkipx.sys : 88,320 : 04/14/2008 06:00 AM : 8b8b1be2dba4025da6786c645f77f123 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkipx.sys : 88,320 : 04/14/2008 06:00 AM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnknb.sys : 63,232 : 04/14/2008 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnknb.sys : 63,232 : 04/14/2008 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwlnkspx.sys : 55,936 : 04/14/2008 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwlnkspx.sys : 55,936 : 04/14/2008 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\nwrdr.sys : 163,584 : 04/14/2008 06:00 AM : 36b9b950e3d2e100970a48d8bad86740 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\nwrdr.sys : 163,584 : 04/14/2008 06:00 AM : 36b9b950e3d2e100970a48d8bad86740 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\oprghdlr.sys : 3,456 : 04/14/2008 06:00 AM : 4bb30ddc53ebc76895e38694580cdfe9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\p3.sys : 46,976 : 04/14/2008 06:00 AM : 8b6d4d24bfe373f989ff91d0960166de [NoSig]
 
 * C:\WINDOWS\System32\drivers\parport.sys : 80,256 : 04/14/2008 06:00 AM : e7855cbd8bd1fda085a3f92cff7906e2 [NoSig]
 
 * C:\WINDOWS\System32\drivers\partmgr.sys : 19,712 : 04/14/2008 06:00 AM : beb3ba25197665d82ec7065b724171c6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\partmgr.sys : 19,712 : 04/14/2008 06:00 AM : beb3ba25197665d82ec7065b724171c6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\parvdm.sys : 7,040 : 04/14/2008 06:00 AM : fad44d704ecd7d39ad01415b8bb34204 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\parvdm.sys : 7,040 : 04/14/2008 06:00 AM : fad44d704ecd7d39ad01415b8bb34204 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\pciidex.sys : 24,960 : 04/14/2008 06:00 AM : 52e60f29221d0d1ac16737e8dbf7c3e9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\pci.sys : 68,992 : 04/14/2008 06:00 AM : f11bc84ae6c7b003b5e0c8eeb4a1f444 [NoSig]
 
 * C:\WINDOWS\System32\drivers\pcmcia.sys : 120,448 : 04/14/2008 06:00 AM : f50c27cca56dc97b3a45e7f0059bd2ba [NoSig]
 
 * C:\WINDOWS\System32\drivers\portcls.sys : 146,048 : 04/14/2008 00:49 AM : e82a496c3961efc6828b508c310ce98f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\portcls.sys : 146,048 : 04/14/2008 00:49 AM : e82a496c3961efc6828b508c310ce98f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\processr.sys : 40,064 : 04/14/2008 06:00 AM : d4d8634dfdae3eca83620ee4088f7aa9 [NoSig]
 
 * C:\WINDOWS\System32\drivers\psched.sys : 69,120 : 04/14/2008 06:00 AM : 09298ec810b07e5d582cb3a3f9255424 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\psched.sys : 69,120 : 04/14/2008 06:00 AM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ptilink.sys : 17,792 : 04/14/2008 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ptilink.sys : 17,792 : 04/14/2008 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rasacd.sys : 8,832 : 04/14/2008 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasacd.sys : 8,832 : 04/14/2008 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rasl2tp.sys : 51,328 : 04/14/2008 06:00 AM : 11b4a627bc9614b885c4969bfa5ff8a6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rasl2tp.sys : 51,328 : 04/14/2008 06:00 AM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspppoe.sys : 41,472 : 04/14/2008 06:00 AM : 5bc962f2654137c9909c3d4603587dee [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspppoe.sys : 41,472 : 04/14/2008 06:00 AM : 5bc962f2654137c9909c3d4603587dee [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspptp.sys : 48,384 : 04/14/2008 06:00 AM : efeec01b1d3cf84f16ddd24d9d9d8f99 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspptp.sys : 48,384 : 04/14/2008 06:00 AM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\raspti.sys : 16,512 : 04/14/2008 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\raspti.sys : 16,512 : 04/14/2008 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rawwan.sys : 34,432 : 04/14/2008 06:00 AM : 01524cd237223b18adbb48f70083f101 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rawwan.sys : 34,432 : 04/14/2008 06:00 AM : 01524cd237223b18adbb48f70083f101 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdbss.sys : 175,744 : 04/14/2008 06:00 AM : 7ad224ad1a1437fe28d89cf22b17780a [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rdbss.sys : 175,744 : 04/14/2008 06:00 AM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdpcdd.sys : 4,224 : 04/14/2008 06:00 AM : 4912d5b403614ce99c28420f75353332 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rdpcdd.sys : 4,224 : 04/14/2008 06:00 AM : 4912d5b403614ce99c28420f75353332 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rdpdr.sys : 196,224 : 04/14/2008 00:02 AM : 15cabd0f7c00c47c70124907916af3f1 [NoSig]
 
 * C:\WINDOWS\System32\drivers\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 10:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2723135-v2\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 07:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139,656 : 04/14/2008 06:00 AM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2723135-v2$\rdpwd.sys : 139,784 : 01/09/2012 10:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2af9909b37fcd3acf51a7c824cbf7611\SP3GDR\rdpwd.sys : 139,784 : 01/09/2012 10:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\2af9909b37fcd3acf51a7c824cbf7611\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 10:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5f5ac8dc2249e62afbed2bf126b93816\SP3GDR\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\5f5ac8dc2249e62afbed2bf126b93816\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 07:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rdpwd.sys : 139,784 : 07/04/2012 08:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\redbook.sys : 58,880 : 04/14/2008 00:21 AM : 20950948970a0ea329b4254052bcf093 [NoSig]
 
 * C:\WINDOWS\System32\drivers\rmcast.sys : 203,136 : 05/08/2008 08:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203,136 : 05/08/2008 07:58 AM : c711645c76b8ed87c021bf6165e52795 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202,624 : 04/14/2008 06:00 AM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\rmcast.sys : 203,136 : 05/08/2008 08:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rndismp.sys : 30,592 : 04/14/2008 06:00 AM : 601844cbcf617ff8c868130ca5b2039d [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rndismp.sys : 30,592 : 04/14/2008 06:00 AM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\rootmdm.sys : 5,888 : 04/14/2008 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\rootmdm.sys : 5,888 : 04/14/2008 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\scsiport.sys : 96,384 : 04/14/2008 06:00 AM : 76c465f570e90c28942d52ccb2580a10 [NoSig]
 
 * C:\WINDOWS\System32\drivers\sdbus.sys : 79,232 : 04/14/2008 06:00 AM : 8d04819a3ce51b9eb47e5689b44d43c4 [NoSig]
 
 * C:\WINDOWS\System32\drivers\serenum.sys : 15,744 : 04/14/2008 06:00 AM : 0f29512ccd6bead730039fb4bd2c85ce [NoSig]
 
 * C:\WINDOWS\System32\drivers\serial.sys : 65,792 : 04/14/2008 06:00 AM : f41b42b92ae9c1191858c3f80cc24a9c [NoSig]
 
 * C:\WINDOWS\System32\drivers\sffdisk.sys : 11,904 : 04/14/2008 06:00 AM : 0fa803c64df0914b41f807ea276bf2a6 [NoSig]
 
 * C:\WINDOWS\System32\drivers\sffp_sd.sys : 11,008 : 04/14/2008 06:00 AM : c17c331e435ed8737525c86a7557b3ac [NoSig]
 
 * C:\WINDOWS\System32\drivers\sfloppy.sys : 11,392 : 04/14/2008 06:00 AM : 8e6b8c671615d126fdc553d1e2de5562 [NoSig]
 
 * C:\WINDOWS\System32\drivers\smclib.sys : 14,592 : 04/14/2008 06:00 AM : 017daecf0ed3aa731313433601ec40fa [NoSig]
 +-> C:\WINDOWS\system32\dllcache\smclib.sys : 14,592 : 04/14/2008 06:00 AM : 017daecf0ed3aa731313433601ec40fa [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sonydcam.sys : 25,344 : 04/14/2008 06:00 AM : 489703624dac94ed943c2abda022a1cd [NoSig]
 
 * C:\WINDOWS\System32\drivers\splitter.sys : 6,272 : 04/14/2008 00:15 AM : ab8b92451ecb048a4d1de7c3ffcb4a9f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\splitter.sys : 6,272 : 04/14/2008 00:15 AM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sr.sys : 73,472 : 04/14/2008 06:00 AM : ccb3065c3ee63a4515fe84af9e78d1dd [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sr.sys : 73,472 : 04/14/2008 06:00 AM : ccb3065c3ee63a4515fe84af9e78d1dd [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\srv.sys : 357,888 : 02/17/2011 07:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357,248 : 08/26/2010 07:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357,888 : 02/17/2011 07:19 AM : 9b390283569ea58d43d2586032b892f5 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 334,848 : 04/14/2008 06:00 AM : 5252605079810904e31c332e241cd59b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\4a585745c27de805fe1be7baae2aca6e\sp3qfe\srv.sys : 357,248 : 08/26/2010 07:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\srv.sys : 357,888 : 02/17/2011 07:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\stream.sys : 49,408 : 04/14/2008 00:15 AM : 3e5d89099ded9e86e5639f411693218f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\stream.sys : 49,408 : 04/14/2008 00:15 AM : 3e5d89099ded9e86e5639f411693218f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\swenum.sys : 4,352 : 04/14/2008 06:00 AM : 3941d127aef12e93addf6fe6ee027e0f [NoSig]
 
 * C:\WINDOWS\System32\drivers\swmidi.sys : 56,576 : 04/14/2008 00:15 AM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\swmidi.sys : 56,576 : 04/14/2008 00:15 AM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\sysaudio.sys : 60,800 : 04/14/2008 00:45 AM : 8b83f3ed0f1688b4958f77cd6d2bf290 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\sysaudio.sys : 60,800 : 04/14/2008 00:45 AM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tape.sys : 14,976 : 04/14/2008 06:00 AM : fd6093e3decd925f1cffc8a0dd539d72 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tape.sys : 14,976 : 04/14/2008 06:00 AM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tcpip6.sys : 226,880 : 02/11/2010 06:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 05:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
 +-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226,880 : 02/11/2010 05:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225,664 : 04/14/2008 06:00 AM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\tcpip6.sys : 226,880 : 02/11/2010 06:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [Pos Repl]
 
 * C:\WINDOWS\System32\Drivers\tcpip.sys : 361,600 : 06/20/2008 05:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 05:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2509553$\tcpip.sys : 361,344 : 04/14/2008 06:00 AM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\tcpip.sys : 361,600 : 06/20/2008 05:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdi.sys : 19,072 : 04/14/2008 06:00 AM : 0539d5e53587f82d1b4fd74c5be205cf [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdi.sys : 19,072 : 04/14/2008 06:00 AM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdpipe.sys : 12,040 : 04/14/2008 06:00 AM : 6471a66807f5e104e4885f5b67349397 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdpipe.sys : 12,040 : 04/14/2008 06:00 AM : 6471a66807f5e104e4885f5b67349397 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\tdtcp.sys : 21,896 : 04/14/2008 06:00 AM : c56b6d0402371cf3700eb322ef3aaf61 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\tdtcp.sys : 21,896 : 04/14/2008 06:00 AM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\termdd.sys : 40,840 : 04/14/2008 07:49 AM : 88155247177638048422893737429d9e [NoSig]
 
 * C:\WINDOWS\System32\drivers\tosdvd.sys : 51,712 : 04/14/2008 06:00 AM : 699450901c5ccfd82357cbc531cedd23 [NoSig]
 
 * C:\WINDOWS\System32\drivers\tunmp.sys : 12,288 : 04/14/2008 06:00 AM : 8f861eda21c05857eb8197300a92501c [NoSig]
 
 * C:\WINDOWS\System32\drivers\udfs.sys : 66,048 : 04/14/2008 06:00 AM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\udfs.sys : 66,048 : 04/14/2008 06:00 AM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\update.sys : 384,768 : 04/14/2008 06:00 AM : 402ddc88356b1bac0ee3dd1580c76a31 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\update.sys : 384,768 : 04/14/2008 06:00 AM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [NoSig]
 +-> C:\WINDOWS\$hf_mig$\KB2807986\SP3QFE\usb8023.sys : 12,928 : 02/11/2013 06:43 PM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl]
 +-> C:\WINDOWS\$NtUninstallKB2807986$\usb8023.sys : 12,800 : 04/14/2008 06:00 AM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\8e4001cc9d3059a10d07026cef4c23d1\SP3GDR\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\8e4001cc9d3059a10d07026cef4c23d1\SP3QFE\usb8023.sys : 12,928 : 02/11/2013 06:43 PM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usb8023.sys : 12,928 : 02/11/2013 06:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbcamd2.sys : 25,728 : 04/14/2008 06:00 AM : ce97845d2e3f0d274b8bac1ed07c6149 [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbcamd.sys : 25,600 : 04/14/2008 06:00 AM : 1c1a47b40c23358245aa8d0443b6935e [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbccgp.sys : 32,128 : 04/13/2008 11:15 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbccgp.sys : 32,384 : 08/08/2013 06:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbd.sys : 4,736 : 04/14/2008 06:00 AM : 596eb39b50d6ebd9b734dc4ae0544693 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbd.sys : 5,376 : 08/08/2013 06:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbehci.sys : 30,208 : 04/14/2008 06:00 AM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbehci.sys : 30,336 : 03/18/2009 05:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbhub.sys : 59,520 : 04/14/2008 06:00 AM : 1ab3cdde553b6e064d2e754efe20285c [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbintel.sys : 15,872 : 04/14/2008 06:00 AM : 290913dc4f1125e5a82de52579a44c43 [NoSig]
 
 * C:\WINDOWS\System32\drivers\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [NoSig]
 +-> C:\WINDOWS\$NtUninstallKB2862330$\usbport.sys : 143,872 : 04/14/2008 06:00 AM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]
 +-> C:\WINDOWS\Driver Cache\i386\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 +-> C:\WINDOWS\SoftwareDistribution\Download\f9d361243cf1f47f10f7f232acab7152\SP3QFE\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 +-> C:\WINDOWS\system32\dllcache\usbport.sys : 144,128 : 08/08/2013 06:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\USBSTOR.sys : 26,368 : 04/14/2008 00:15 AM : a32426d9b14a089eaa1d922e0c5801a9 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\usbstor.sys : 26,368 : 04/14/2008 00:15 AM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\usbuhci.sys : 20,608 : 04/14/2008 06:00 AM : 26496f9dee2d787fc3e61ad54821ffe6 [NoSig]
 
 * C:\WINDOWS\System32\drivers\vga.sys : 20,992 : 04/14/2008 06:00 AM : 0d3a8fafceacd8b7625cd549757a7df1 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\vga.sys : 20,992 : 04/14/2008 06:00 AM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\videoprt.sys : 81,664 : 04/14/2008 06:00 AM : e28726b72c46821a28830e077d39a55b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\videoprt.sys : 81,664 : 04/14/2008 06:00 AM : e28726b72c46821a28830e077d39a55b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\volsnap.sys : 53,248 : 04/14/2008 06:00 AM : c41ffdc191e6c832e2e53c967eae0a16 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\volsnap.sys : 53,248 : 04/14/2008 06:00 AM : c41ffdc191e6c832e2e53c967eae0a16 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wanarp.sys : 34,560 : 04/14/2008 06:00 AM : e20b95baedb550f32dd489265c1da1f6 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wanarp.sys : 34,560 : 04/14/2008 06:00 AM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wdmaud.sys : 83,072 : 04/14/2008 00:47 AM : 6768acf64b18196494413695f0c3a00f [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wdmaud.sys : 83,072 : 04/14/2008 00:47 AM : 6768acf64b18196494413695f0c3a00f [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\wmilib.sys : 4,352 : 04/14/2008 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [NoSig]
 +-> C:\WINDOWS\system32\dllcache\wmilib.sys : 4,352 : 04/14/2008 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [Pos Repl]
 
 * C:\WINDOWS\System32\drivers\ws2ifsl.sys : 12,032 : 04/14/2008 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [NoSig]
 +-> C:\WINDOWS\system32\dllcache\ws2ifsl.sys : 12,032 : 04/14/2008 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [Pos Repl]
 
Checking HOSTS File: 
 
 * HOSTS file entries found: 
 
  127.0.0.1 localhost
 
Program finished at: 01/28/2014 08:48:43 PM
Execution time: 0 hours(s), 7 minute(s), and 2 seconds(s)


BC AdBot (Login to Remove)

 


#2 ProfessorCPU

ProfessorCPU

  • Members
  • 28 posts
  • OFFLINE
  •  
  • Local time:07:00 PM

Posted 28 January 2014 - 11:29 PM

You seem to have done many of the same things I would have done to fix your issue.

 

Another few tools I would try would be ADWCleaner, Junkware Removal Tool and Malwarebytes Anti-Malware.

 

If the PC is still slow I usually run chkdsk /r /f

Just incase there has been any corruption on the hard drive.  Which can be common if your issues in any way have cause the PC to shutdown suddenly or you may have needed to power the system off improperly.

 

I would also check for any junk that can be removed in Add Remove programs.  Uninstall any programs you know you never use.  I tend to like to sort the programs in the order of recently installed.  So I can see any new programs that are on the system that should not be there.  If you don't recognize it or if it is a useless program there probably isn't much of a need for it... and it could possibly be causing the issue.

 

If you still have issues... you can search for updated drivers... or possibly you have a recent driver update that is malfunctioning.

 

Beyond all of these tasks if it is still slow... your next step may be to backup and reinstall the system.

 

If you decide to do a backup and reinstall... I have a free utility called "Gotcha Data Backup" that I created that helps backup all of your important data for you so that you can restore it once you are finished reinstalling the system.  I'm new to the forum... so I won't post a link to it... but you are welcome to search for it on google.  If you decide to use it and need any help you are always welcome to ask me for support. :)

 

Good Luck!!  I hope I was able to help you or put you on a good path to fixing your issue!



#3 xXToffeeXx

xXToffeeXx

    Bleepin' Polar Bear


  • Malware Response Instructor
  • 6,086 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Arctic Circle
  • Local time:04:00 AM

Posted 29 January 2014 - 11:21 AM

Hi,

 

Since you have run Combofix, please follow these instructions (especially since this looks like it might be an ongoing infection):

 

Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.

Once the proper logs are created (make sure to include the combofix log created, probably located at C:\ComboFix.txt), then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.

If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

 
xXToffeeXx~


~If I am helping you and you have not had a reply from me in two days, please send me a PM~

 

logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic] - If we have helped you out and you want to support what we do, you can do so here

 

 ~Twitter~ | ~Malware Analyst at Emsisoft~


#4 NoiroAvecu

NoiroAvecu
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Guadalajara, Jalisco, Mexico
  • Local time:09:00 PM

Posted 29 January 2014 - 11:41 PM

My apologies for mistaken the proper forum, and also I`ve just notice that my topic went public twice (blame on me)! 

 

This is the link to the new post:

 

http://www.bleepingcomputer.com/forums/t/522583/possibly-patched-files-shown-by-rkill-still-infected/

 

I really appreciate you two taking time to help me, tank you xXToffeeXx, and Profesor!

 

Noiro



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,758 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:00 PM

Posted 30 January 2014 - 07:22 AM

Since you posted your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum and the other topics was closed....I am closing this one as well to avoid confusion.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users