Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Need help, ran %temp% ran, copied AdwCleaner


  • This topic is locked This topic is locked
10 replies to this topic

#1 sonnyz

sonnyz

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 04 April 2014 - 08:36 PM

  Can somebody send me the links I need to remove the other components ? 

# AdwCleaner v3.023 - Report created 03/04/2014 at 21:16:31
# Updated 01/04/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Administrator - ONE-70FAAFBE801
# Running from : C:\Documents and Settings\Administrator\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : CltMngSvc
Service Deleted : Level Quality Watcher
[#] Service Deleted : RetroGamer_4wService
Service Deleted : sbmntr

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\All Users\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\All Users\Application Data\PC Optimizer Pro
Folder Deleted : C:\Documents and Settings\All Users\Application Data\SaveSenseLive
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia
Folder Deleted : C:\Documents and Settings\All Users\Application Data\w3i
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Coupon Savings
Folder Deleted : C:\Program Files\AVG SafeGuard toolbar
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\BrowserSafeguard
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\DefaultTab
Folder Deleted : C:\Program Files\Free Offers from Freeze.com
Folder Deleted : C:\Program Files\Free Ride Games
Folder Deleted : C:\Program Files\HDvidCodec.com
Folder Deleted : C:\Program Files\iLivid
Folder Deleted : C:\Program Files\IminentToolbar
Folder Deleted : C:\Program Files\Level Quality Watcher
Folder Deleted : C:\Program Files\MediaPlayerV1
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\ParetoLogic
Folder Deleted : C:\Program Files\QueryExplorer
Folder Deleted : C:\Program Files\SaveSenseLive
Folder Deleted : C:\Program Files\SavingsBull
Folder Deleted : C:\Program Files\Searchqu Toolbar
Folder Deleted : C:\Program Files\Shop To Win
Folder Deleted : C:\Program Files\ShopperReports3
Folder Deleted : C:\Program Files\TidyNetwork
Folder Deleted : C:\Program Files\VideoPlayerV3
Folder Deleted : C:\Program Files\w3i
Folder Deleted : C:\Program Files\WebexpEnhancedV1
Folder Deleted : C:\Program Files\Windows iLivid Toolbar
Folder Deleted : C:\Program Files\Information
Folder Deleted : C:\Program Files\Plus-HD-7.7
Folder Deleted : C:\Program Files\Coupon Savings
Folder Deleted : C:\Program Files\SweetPacks_A11
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files\Common Files\ParetoLogic
Folder Deleted : C:\WINDOWS\system32\AI_RecycleBin
Folder Deleted : C:\Documents and Settings\LocalService\Local Settings\Application Data\SearchProtect
Folder Deleted : C:\Documents and Settings\NetworkService\Local Settings\Application Data\SearchProtect
Folder Deleted : C:\Documents and Settings\NetworkService\Application Data\FoxTab
Folder Deleted : C:\Documents and Settings\NetworkService\Application Data\SaveSense
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\BrowserSafeguard
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\CrashRpt
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\DefineExt
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\emaze
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\iac
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Ilivid Player
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\NativeMessaging
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\OpenCandy
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\PackageAware
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\SaveSenseLive
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\SearchProtect
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\TidyNetwork
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\VisualBeeClient
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\visualbeeexe
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\WhiteListing
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Information
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\SweetPacks_A11
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\BabSolution
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\BabylonToolbar
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\DefaultTab
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\DriverCure
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\DSite
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\FoxTab
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\IminentToolbar
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\pdfforge
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\PriceGong
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\SaveSense
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Search Settings
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\searchquband
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Searchqutoolbar
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\SwvUpdater
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Systweak
Folder Deleted : C:\Documents and Settings\Administrator\Start Menu\Programs\BitGuard
Folder Deleted : C:\Documents and Settings\Administrator\Start Menu\Programs\HDvidCodec.com
Folder Deleted : C:\Documents and Settings\Administrator\My Documents\Optimizer Pro
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mgacjdfplhakjfljpbbagagjcbccpmnl
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\opfedmikikmahmpaimpfelmikhaigobp
File Deleted : C:\END
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\Documents and Settings\Administrator\Desktop\HDVidCodec.lnk
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_fastcontent.conduit.com_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_fastcontent.conduit.com_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\user data\default\local storage\hxxp_pricegong.conduitapps.com_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\user data\default\local storage\hxxp_pricegong.conduitapps.com_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage-journal
File Deleted : C:\WINDOWS\Tasks\BitGuard.job
File Deleted : C:\WINDOWS\Tasks\EPUpdater.job
File Deleted : C:\WINDOWS\Tasks\filecure startup.job
File Deleted : C:\WINDOWS\Tasks\paretologic registration3.job
File Deleted : C:\WINDOWS\Tasks\paretologic update version3.job
File Deleted : C:\WINDOWS\Tasks\Information-chromeinstaller.job
File Deleted : C:\WINDOWS\Tasks\Information-codedownloader.job
File Deleted : C:\WINDOWS\Tasks\Information-enabler.job
File Deleted : C:\WINDOWS\Tasks\Information-firefoxinstaller.job
File Deleted : C:\WINDOWS\Tasks\Information-updater.job
File Deleted : C:\WINDOWS\Tasks\Plus-HD-7.7-codedownloader.job
File Deleted : C:\WINDOWS\Tasks\Plus-HD-7.7-enabler.job
File Deleted : C:\WINDOWS\Tasks\Plus-HD-7.7-firefoxinstaller.job
File Deleted : C:\WINDOWS\Tasks\Plus-HD-7.7-updater.job

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKCU\Software\Google\Chrome\Extensions\opfedmikikmahmpaimpfelmikhaigobp
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\opfedmikikmahmpaimpfelmikhaigobp
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\BrowserProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\ilivid
Key Deleted : HKLM\SOFTWARE\Classes\Iminent
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Key Deleted : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050368.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050368.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050368.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050368.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050780.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050780.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050780.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0050780.Sandbox.1
Key Deleted : HKCU\Software\a2ddd1b169e810
Key Deleted : HKLM\SOFTWARE\a2ddd1b169e810
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100685.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100685.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100685.JSOptionsImpl
Key Deleted : HKLM\SOFTWARE\Classes\FCTB000100685.JSOptionsImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3239904
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298566
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3316071
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D94B53EB-4F19-43C9-80CB-0645C447694C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511031168}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511071180}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522032268}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522072280}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555035568}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555075580}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566036668}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566076680}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544034468}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544074480}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511031168}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511071180}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03123BB6-A811-407E-B323-66CF0BE510B1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{112BA211-334C-4A90-90EC-2AD1CDAB287C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{148DCAEC-C91D-441D-A0E7-519A0673E7F5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FAFD711-ABF9-4F6A-8130-5166C7371427}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21608B66-026F-4DCB-9244-0DACA328DCED}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27488090-768A-4D20-A938-F223F71C344C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3033124F-06BF-4829-873A-310A125B4D4C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3392CFEC-56F8-41EE-BDB4-4E301EFD2C93}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3775AFD7-5921-4571-968F-85A631203D1C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4CFF1016-C2E2-4FDD-9C67-E32200C25FF9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FDB0CD8-5760-44D1-8D13-A78BF558C3C7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7736C7FA-512D-11E2-B871-DEC36088709B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9359DA42-06FB-46F2-9E4A-05C05B98A5EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC2E2B99-14D3-4516-883C-9EA147F594EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D757DBFC-1494-4647-A8B3-ABD654988DD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBD24BD3-E272-4FA3-A8BA-C5D709757CAB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F464A68D-1CF2-4991-93AB-A84351D7F676}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D94B53EB-4F19-43C9-80CB-0645C447694C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511031168}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511071180}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03123BB6-A811-407E-B323-66CF0BE510B1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0F21B1E5-5AFC-43C9-9C66-515046E92EC2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{112BA211-334C-4A90-90EC-2AD1CDAB287C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FAFD711-ABF9-4F6A-8130-5166C7371427}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21608B66-026F-4DCB-9244-0DACA328DCED}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{27488090-768A-4D20-A938-F223F71C344C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3033124F-06BF-4829-873A-310A125B4D4C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3392CFEC-56F8-41EE-BDB4-4E301EFD2C93}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3775AFD7-5921-4571-968F-85A631203D1C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9359DA42-06FB-46F2-9E4A-05C05B98A5EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D757DBFC-1494-4647-A8B3-ABD654988DD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E8DAAA30-6CAA-4B58-9603-8E54238219E2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F464A68D-1CF2-4991-93AB-A84351D7F676}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D94B53EB-4F19-43C9-80CB-0645C447694C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1268aa5f-a5ba-412e-b231-8fb1fdbb005f}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7054e672-778c-4582-94e9-56a07b85591c}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a37804e0-4c35-486f-9197-5b486daf6aa6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b353d28d-147e-47c1-9a5c-07a62dd50861}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1d237ab1-9b71-4ad2-bbae-6fe386f5be8a}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{627d7df0-c779-4011-a395-483f2772b8c6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D660A43-5E77-4365-A978-BAB7206384A5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D36505FC-BBD3-4EEC-8BD2-FC38A450B7AD}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{707DCA12-3F99-4D94-AFEA-06DCC0AE0108}]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Shop to Win 37\TroubleShooter.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\WINDOWS\system32\ARFC\wrtc.exe]
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\Crossrider
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\lyrixeeker
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\pc optimizer pro
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\SaveSenseLive
Key Deleted : HKCU\Software\searchqutoolbar
Key Deleted : HKCU\Software\ShopToWin
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\visualbee
Key Deleted : HKCU\Software\wecarereminder
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKCU\Software\Information
Key Deleted : HKCU\Software\Plus-HD-7.7
Key Deleted : HKCU\Software\SweetPacks_A11
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\Freecause
Key Deleted : HKCU\Software\AppDataLow\Software\Savings Bull
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\ilivid
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SaveSenseLive
Key Deleted : HKLM\Software\Savings Bull
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SearchquMediabarTb
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\visualbee
Key Deleted : HKLM\Software\Information
Key Deleted : HKLM\Software\Plus-HD-7.7
Key Deleted : HKLM\Software\SweetPacks_A11
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Information
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-7.7
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Zip Opener Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3CBF3EBB-235D-4c29-A68B-2BB1F428586E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Iminent
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PlaySushi
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Information
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Plus-HD-7.7
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~1\searchprotect\searchprotect\bin\spvc32loader.dll

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs]

-\\ Google Chrome v33.0.1750.154

[ File : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

Deleted : search_url
Deleted : suggest_url

*************************

AdwCleaner[R0].txt - [38833 octets] - [03/04/2014 20:59:19]
AdwCleaner[R1].txt - [38894 octets] - [03/04/2014 21:05:51]
AdwCleaner[S0].txt - [39212 octets] - [03/04/2014 21:16:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [39273 octets] ##########



BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,587 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:02 PM

Posted 06 April 2014 - 05:41 AM

Please download and use the following tools (in the order listed) which will search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, extensions, add-ons and other junkware as well as related registry entries (values, keys) and remnants.

RKill created by Grinler (aka Lawrence Abrams), the site owner of BleepingComputer.
Junkware Removal Tool created by thisisu.

1. Double-click on RKill to launch the tool. A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully. A log file will be created and saved to the root directory, C:\RKill.log. Copy and paste the contents of RKill.log in your next reply.

Important: Do not reboot your computer until you complete the next step.

2. Double-click on JRT.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log file named JRT.txt will automatically open and be saved to your Desktop.
  • Copy and paste the contents of JRT.txt in your next reply.
.
3. As a final step, download and scan with Malwarebytes Anti-Malware 2.0.
When done, please post the complete results of your Malwarebytes scan for review.

To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 1)
  • Open Malwarebytes Anti-Malware.
  • Click the History Tab at the top and select Application Logs.
  • Select (check) the box next to Scan Log. Choose the most current scan.
  • Click the View button.
To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 2)
  • Open Malwarebytes Anti-Malware.
  • Click the Scan Tab at the top.
  • Click the View detailed log link on the right..
Click Copy to Clipboard at the bottom...come back to this thread, click Add Reply, then right-click and choose Paste.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 sonnyz

sonnyz
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 06 April 2014 - 06:26 PM

Quietman7, firstly, thank you for your time and please be patient with me concerning this transactions, I feel like I am fumbling through these steps. I was able to run Rkill and copied the results which seem to be rather lengthy...did you want me to continue on with the next 2 or 3 steps before I submitted these results? I wasn't too sure, yet after viewing the length of Rkill I didn't want to overwhelm with too much data, thanks again and here are the results...

 

 

 

Rkill 2.6.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 04/06/2014 06:37:56 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\WINDOWS\system32\LxrSII1s.exe (PID: 132) [WD-HEUR]
* C:\WINDOWS\System32\alg.exe (PID: 732) [WD-HEUR]
* C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe (PID: 252) [WD-HEUR]
* C:\Documents and Settings\Administrator\Local Settings\Application Data\Lexar Media\LxrAutorun.exe (PID: 2208) [UP-HEUR]

4 proccesses terminated!

Possibly Patched Files.

* C:\WINDOWS\system32\services.exe
* C:\WINDOWS\system32\lsass.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\System32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\spoolsv.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\system32\svchost.exe
* C:\WINDOWS\Explorer.EXE
* C:\WINDOWS\system32\ctfmon.exe
* C:\WINDOWS\System32\svchost.exe

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Reparse Point/Junctions Found (Most likely legitimate)!

* C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* C:\WINDOWS\System32\appmgmts.dll : 167,936 : 04/13/2008 08:11 PM : d8849f77c0b66226335a59d26cb4edc6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll : 167,936 : 08/04/2004 06:00 AM : 9c3c12975c97119412802b181fbeeffe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll : 167,936 : 04/13/2008 08:11 PM : d8849f77c0b66226335a59d26cb4edc6 [Pos Repl]

* C:\WINDOWS\System32\browser.dll : 78,336 : 07/06/2012 09:58 AM : cfd4e51402da9838b5a04ae680af54a0 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2705219\SP3QFE\browser.dll : 78,336 : 07/06/2012 09:58 AM : fc6d1d80588d371f0321e15a75b2f8f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\browser.dll : 77,312 : 08/04/2004 06:00 AM : e3cfccdda4edd1d0dc9168b2e18f27b8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2705219$\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\browser.dll : 77,824 : 04/13/2008 08:11 PM : a06ce3399d16db864f55faeb1f1927a9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\browser.dll : 78,336 : 07/06/2012 09:58 AM : cfd4e51402da9838b5a04ae680af54a0 [Pos Repl]

* C:\WINDOWS\System32\clipsrv.exe : 33,280 : 04/13/2008 08:12 PM : 34cbe729f38138217f9c80212a2a0c82 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe : 33,280 : 08/04/2004 06:00 AM : c8dec22c4137d7a90f8bdf41ca4b82ae [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe : 33,280 : 04/13/2008 08:12 PM : 34cbe729f38138217f9c80212a2a0c82 [Pos Repl]

* C:\WINDOWS\System32\comctl32.dll : 617,472 : 08/23/2010 12:12 AM : 93afb83fbc1f9443cac722fca63d73bf [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll : 611,328 : 08/04/2004 06:00 AM : a77dfb85faee49d66c74da6024ebc69b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comctl32.dll : 617,472 : 04/13/2008 08:11 PM : 06f247492bc786ce5c24a23e178c711a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\comctl32.dll : 617,472 : 08/23/2010 12:12 AM : 93afb83fbc1f9443cac722fca63d73bf [Pos Repl]
+-> C:\WINDOWS\WinSxS\InstallTemp\51689\comctl32.dll : 921,088 : 08/04/2004 08:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921,088 : 08/04/2004 06:00 AM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll : 1,050,624 : 08/04/2004 06:00 AM : 5af68a5e44734a082442668e9c787743 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1,054,208 : 04/13/2008 08:12 PM : bd38d1ebe24a46bd3eda059560afba12 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1,054,208 : 08/23/2010 12:12 AM : 736b12b725aeb2b07f0241a9f680cb10 [Pos Repl]

* C:\WINDOWS\System32\comres.dll : 792,064 : 04/13/2008 08:11 PM : 1280a158c722fa95a80fb7aebe78fa7d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\comres.dll : 792,064 : 08/04/2004 06:00 AM : 6728270cb7dbb776ed086f5ac4c82310 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\comres.dll : 792,064 : 04/13/2008 08:11 PM : 1280a158c722fa95a80fb7aebe78fa7d [Pos Repl]

* C:\WINDOWS\System32\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll : 60,416 : 08/04/2004 06:00 AM : 10654f9ddcea9c46cfb77554231be73b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll : 62,464 : 04/13/2008 08:11 PM : 3d4e199942e29207970e04315d02ad3b [Pos Repl]

* C:\WINDOWS\System32\csrss.exe : 6,144 : 04/13/2008 08:12 PM : 44f275c64738ea2056e3d9580c23b60f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\csrss.exe : 6,144 : 08/04/2004 06:00 AM : f12b178b1678d778cfd3ff1fc38c71fb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\csrss.exe : 6,144 : 04/13/2008 08:12 PM : 44f275c64738ea2056e3d9580c23b60f [Pos Repl]

* C:\WINDOWS\System32\ctfmon.exe : 15,360 : 04/13/2008 08:12 PM : 5f1d5f88303d4a4dbc8e5f97ba967cc3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe : 15,360 : 08/04/2004 06:00 AM : 24232996a38c0b0cf151c2140ae29fc8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe : 15,360 : 04/13/2008 08:12 PM : 5f1d5f88303d4a4dbc8e5f97ba967cc3 [Pos Repl]

* C:\WINDOWS\System32\d3d8.dll : 1,179,648 : 04/13/2008 08:11 PM : f099b129022170f2df9e1c0185c9bcfb [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll : 1,179,648 : 08/04/2004 06:00 AM : 42803ec60803c1a0754671e9183458f1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8.dll : 1,179,648 : 04/13/2008 08:11 PM : f099b129022170f2df9e1c0185c9bcfb [Pos Repl]

* C:\WINDOWS\System32\d3d8thk.dll : 8,192 : 04/13/2008 08:11 PM : 31b067c412fa1a9bad3ca2a63d7da440 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll : 8,192 : 08/04/2004 06:00 AM : 8d9210e9858d525646251dfa1fe37ebe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll : 8,192 : 04/13/2008 08:11 PM : 31b067c412fa1a9bad3ca2a63d7da440 [Pos Repl]

* C:\WINDOWS\System32\d3d9.dll : 1,689,088 : 04/13/2008 08:11 PM : 0607cbc6fa20114cb491efe4b2f9efad [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll : 1,689,088 : 08/04/2004 06:00 AM : d67bdbbda86cc9aeebbaf3217c1717d8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\d3d9.dll : 1,689,088 : 04/13/2008 08:11 PM : 0607cbc6fa20114cb491efe4b2f9efad [Pos Repl]

* C:\WINDOWS\System32\ddraw.dll : 279,552 : 04/13/2008 08:11 PM : a340cd71eb535a3dd751b5f28723e50c [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll : 266,240 : 08/04/2004 06:00 AM : 7ed462f353b3d915a418a689fa881f96 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ddraw.dll : 279,552 : 04/13/2008 08:11 PM : a340cd71eb535a3dd751b5f28723e50c [Pos Repl]

* C:\WINDOWS\System32\dllhost.exe : 5,120 : 04/13/2008 08:12 PM : 0a9ba6af531afe7fa5e4fb973852d863 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe : 5,120 : 08/04/2004 06:00 AM : dd87db7387b9eb441c5674888a0d840c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dllhost.exe : 5,120 : 04/13/2008 08:12 PM : 0a9ba6af531afe7fa5e4fb973852d863 [Pos Repl]

* C:\WINDOWS\System32\dsound.dll : 367,616 : 04/13/2008 08:11 PM : 4d83ed8bddec431fc8ad907b47cfb6e3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dsound.dll : 367,616 : 08/04/2004 06:00 AM : 55e148c01296696588eafa425782c3e8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dsound.dll : 367,616 : 04/13/2008 08:11 PM : 4d83ed8bddec431fc8ad907b47cfb6e3 [Pos Repl]

* C:\WINDOWS\System32\dssenh.dll : 138,752 : 04/13/2008 01:37 PM : fede68bf80052bad393afd5c2e60dcb0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll : 137,216 : 08/04/2004 06:00 AM : cacd2c63a79268d131ea37e85524cc44 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dssenh.dll : 138,752 : 04/13/2008 01:37 PM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl]

* C:\WINDOWS\System32\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll : 253,952 : 07/07/2008 04:06 PM : a4ab3dca4a383f0df4988abdeb84f9a4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253,952 : 07/07/2008 04:23 PM : f17f6226bdc0cd5f0bef0daf84d29bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\es.dll : 253,952 : 07/07/2008 04:32 PM : 60d1a6342238378bfb7545c81ee3606c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950974_0$\es.dll : 243,200 : 08/04/2004 06:00 AM : acd36a2dd7d1e9d8a060aa651dc07e63 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\es.dll : 246,272 : 04/13/2008 08:11 PM : 19a799805b24990867b00c120d300c3a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\es.dll : 253,952 : 07/07/2008 04:26 PM : d4991d98f2db73c60d042f1aef79efae [Pos Repl]

* C:\WINDOWS\System32\eventlog.dll : 56,320 : 04/13/2008 08:11 PM : 6d4feb43ee538fc5428cc7f0565aa656 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll : 55,808 : 08/04/2004 06:00 AM : 82b24cb70e5944e6e34662205a2a5b78 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\eventlog.dll : 56,320 : 04/13/2008 08:11 PM : 6d4feb43ee538fc5428cc7f0565aa656 [Pos Repl]

* C:\WINDOWS\System32\hid.dll : 20,992 : 04/13/2008 08:11 PM : 8973122796e3b5d6b5900fc186e55fea [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hid.dll : 20,992 : 08/04/2004 06:00 AM : 18afee0ede045b6255408d634372dc29 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hid.dll : 20,992 : 04/13/2008 08:11 PM : 8973122796e3b5d6b5900fc186e55fea [Pos Repl]

* C:\WINDOWS\System32\hnetcfg.dll : 344,064 : 04/13/2008 08:11 PM : 3cb32d3b8cbe79899d63280bb7a83cd9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll : 344,064 : 08/04/2004 06:00 AM : 765b30c776a1780b46b479fe614f707c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll : 344,064 : 04/13/2008 08:11 PM : 3cb32d3b8cbe79899d63280bb7a83cd9 [Pos Repl]

* C:\WINDOWS\System32\imm32.dll : 110,080 : 04/13/2008 08:11 PM : 0da85218e92526972a821587e6a8bf8f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imm32.dll : 110,080 : 08/04/2004 06:00 AM : 87ca7ce6469577f059297b9d6556d66d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imm32.dll : 110,080 : 04/13/2008 08:11 PM : 0da85218e92526972a821587e6a8bf8f [Pos Repl]

* C:\WINDOWS\System32\ipsecsvc.dll : 183,808 : 04/13/2008 08:11 PM : 332760fba1655fcfd35bd6f4fd871300 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll : 182,784 : 08/04/2004 06:00 AM : d1e299962b5956005113ec4ab1e0d9b7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll : 183,808 : 04/13/2008 08:11 PM : 332760fba1655fcfd35bd6f4fd871300 [Pos Repl]

* C:\WINDOWS\System32\kernel32.dll : 990,208 : 10/03/2012 00:58 AM : 6fe42512ab1b89f32a7407f261b1d2d0 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2758857\SP3QFE\kernel32.dll : 991,744 : 10/03/2012 00:57 AM : 6cbfeeb384f04681af75f495aa48dd32 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB959426\SP2QFE\kernel32.dll : 989,184 : 03/21/2009 09:54 AM : 80202858d245ff07daa1739c57a3e19b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB959426\SP3GDR\kernel32.dll : 989,696 : 03/21/2009 10:06 AM : b921fb870c9ac0d509b2ccabbbbe95f3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 991,744 : 03/21/2009 09:59 AM : da11d9d6ecbdf0f93436a4b7c13f7bec [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll : 986,112 : 03/21/2009 10:18 AM : b6acaed7588295129791e0e6a2b0fade [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2758857$\kernel32.dll : 989,696 : 03/21/2009 10:06 AM : b921fb870c9ac0d509b2ccabbbbe95f3 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 983,552 : 08/04/2004 06:00 AM : 888190e31455fad793312f8d087146eb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kernel32.dll : 989,696 : 04/13/2008 08:11 PM : c24b983d211c34da8fcc1ac38477971d [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\kernel32.dll : 990,208 : 10/03/2012 00:58 AM : 6fe42512ab1b89f32a7407f261b1d2d0 [Pos Repl]

* C:\WINDOWS\System32\ksuser.dll : 4,096 : 04/13/2008 08:11 PM : 9b9f1c38d559047b8ac0dba2d5febde9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll : 4,096 : 08/04/2004 03:56 AM : cbcd254547689bff80c9f547b20911e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksuser.dll : 4,096 : 04/13/2008 08:11 PM : 9b9f1c38d559047b8ac0dba2d5febde9 [Pos Repl]

* C:\WINDOWS\System32\linkinfo.dll : 19,968 : 04/13/2008 08:11 PM : 2dc5a8019e2387987905f77c664e4be2 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll : 18,944 : 08/04/2004 06:00 AM : c2bbd044c741ea4292016c36f718d2e4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll : 19,968 : 04/13/2008 08:11 PM : 2dc5a8019e2387987905f77c664e4be2 [Pos Repl]

* C:\WINDOWS\System32\lpk.dll : 22,016 : 04/13/2008 08:11 PM : 012df358cebaa23acb26d82077820817 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lpk.dll : 22,016 : 08/04/2004 06:00 AM : 74d66b3de265e8789153414e75175f26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lpk.dll : 22,016 : 04/13/2008 08:11 PM : 012df358cebaa23acb26d82077820817 [Pos Repl]

* C:\WINDOWS\System32\lsass.exe : 13,312 : 04/13/2008 08:12 PM : bf2466b3e18e970d8a976fb95fc1ca85 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\lsass.exe : 13,312 : 08/04/2004 06:00 AM : 84885f9b82f4d55c6146ebf6065d75d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\lsass.exe : 13,312 : 04/13/2008 08:12 PM : bf2466b3e18e970d8a976fb95fc1ca85 [Pos Repl]

* C:\WINDOWS\System32\mfc40u.dll : 953,856 : 09/18/2010 02:53 AM : e76a5c202e68af5a322d16b5a78f48b9 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953,856 : 09/18/2010 03:18 AM : 842900dedbc8e3e8dbcccb298fd88f65 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll : 924,432 : 08/04/2004 06:00 AM : ddf8d47acf8fc3fe5f7f2b95c4d4d136 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll : 927,504 : 04/13/2008 08:11 PM : cddd4416b2b4c7295fe3fdb6dde57e4e [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mfc40u.dll : 953,856 : 09/18/2010 02:53 AM : e76a5c202e68af5a322d16b5a78f48b9 [Pos Repl]

* C:\WINDOWS\System32\midimap.dll : 18,944 : 04/13/2008 08:11 PM : 5c12660a97822f6e61576943b49aaad6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\midimap.dll : 18,944 : 08/04/2004 06:00 AM : 3b4702155bb2ae9dc00c06a68834bdfa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\midimap.dll : 18,944 : 04/13/2008 08:11 PM : 5c12660a97822f6e61576943b49aaad6 [Pos Repl]

* C:\WINDOWS\System32\msgsvc.dll : 33,792 : 04/13/2008 08:11 PM : 986b1ff5814366d71e0ac5755c88f2d3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll : 33,792 : 08/04/2004 06:00 AM : 95fd808e4ac22aba025a7b3eac0375d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll : 33,792 : 04/13/2008 08:11 PM : 986b1ff5814366d71e0ac5755c88f2d3 [Pos Repl]

* C:\WINDOWS\System32\mshtml.dll : 6,022,144 : 02/24/2014 07:46 AM : 427c63c2075abf62faa897bbd3de44f4 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll : 5,954,560 : 06/24/2010 08:24 AM : 94dc7e938c57f3c3d1bc4a0f68fc5830 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll : 5,958,656 : 09/10/2010 01:57 AM : 8a03cc037e6b7d1796192815231b0c3f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll : 5,960,704 : 11/05/2010 08:27 PM : 864e69f32656a7121444ba0193d7b64b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll : 5,962,240 : 12/20/2010 07:58 PM : 2a2c070ec691ce410533a1da7aa3cd86 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll : 5,964,800 : 02/22/2011 07:27 PM : 3422847aa07e37076a87d0b7d5044dc6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll : 5,967,360 : 05/30/2011 06:17 PM : d0b1db576941cb0b6669b8752ffac79a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll : 5,971,456 : 07/25/2011 11:15 AM : bce7ccebad6c8955d2b4c3b246bd0e57 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll : 5,972,992 : 10/03/2011 04:34 AM : 1240a6b7b470bed0aa6c9fec7ab0ea26 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5,978,624 : 11/04/2011 03:19 PM : 699421e2e1313c18671a703953cae14b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll : 5,980,160 : 12/17/2011 03:45 PM : 49b88a833eca99efbffc5aae5cc998ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\mshtml.dll : 5,980,672 : 03/01/2012 06:58 AM : 5dbb0c997ad276bce9d30cd609bdbf67 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\mshtml.dll : 6,009,344 : 05/11/2012 10:41 AM : 55f148b94246a77fb4ac33346671cac8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\mshtml.dll : 6,010,368 : 07/02/2012 01:48 PM : df599ac52b62de001e42d36f92b45e68 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\mshtml.dll : 6,010,368 : 08/28/2012 11:13 AM : cf6b381c3518ab328382429cae206d64 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2761465-IE8\SP3QFE\mshtml.dll : 6,010,880 : 11/13/2012 02:23 AM : 02d8509e2362d777debffc05c022cbf2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2792100-IE8\SP3QFE\mshtml.dll : 6,011,904 : 01/09/2013 03:03 AM : 99e9e2606fb13adb711935fe8e8e29c1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2799329-IE8\SP3QFE\mshtml.dll : 6,011,392 : 01/06/2013 01:33 AM : 14fd1caefb6d2749019ac2f54859568c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2809289-IE8\SP3QFE\mshtml.dll : 6,012,928 : 02/28/2013 10:31 PM : ae3a26c04c794e5451adf6872f7d48f4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2817183-IE8\SP3QFE\mshtml.dll : 6,013,440 : 03/01/2013 10:05 PM : 990f4518e1607f445969c12f014e4e29 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\mshtml.dll : 3,055,616 : 03/23/2006 04:31 PM : abcd123f888e4e97c8751378cccc4f26 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP2QFE\mshtml.dll : 3,070,976 : 09/25/2009 01:49 AM : 431d4c38e47ae0cac1a52a185395a5f5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3GDR\mshtml.dll : 3,070,976 : 09/25/2009 01:37 AM : 601e18a9a8f0d0ed39692b593212378f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\mshtml.dll : 3,072,512 : 09/25/2009 01:32 AM : 37f578776552fa076ea6085f0365209c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP2QFE\mshtml.dll : 3,070,976 : 10/29/2009 01:04 AM : f3a9e882df2f155c9395979ff9d7b0a7 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3GDR\mshtml.dll : 3,070,976 : 10/29/2009 03:08 PM : d1cf72c34baf70c52797d1cb78d6ee92 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\mshtml.dll : 3,073,024 : 10/29/2009 01:23 AM : da551bfec150760a38a9ad0c95a8a71c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll : 5,944,320 : 10/29/2009 03:45 AM : c0f9ac6fab2c788ffee3e69585a0e93f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976749\SP2QFE\mshtml.dll : 3,070,976 : 10/19/2009 08:00 PM : 57b9895b3720587de96b70fd0f15270a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976749\SP3GDR\mshtml.dll : 3,070,976 : 10/19/2009 07:53 PM : 4d1eaa7e0b845d1b2e8d711ae754d0f2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976749\SP3QFE\mshtml.dll : 3,072,512 : 10/19/2009 07:44 PM : 6c1b3294bcd1a38fde6d965a96612756 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP2QFE\mshtml.dll : 3,071,488 : 12/22/2009 01:35 AM : 5747867041c33e26da5cc893c9532db8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP3GDR\mshtml.dll : 3,071,488 : 12/22/2009 01:21 AM : a758f0891a87ee005848a0bc740a5b96 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP3QFE\mshtml.dll : 3,073,536 : 12/22/2009 01:05 AM : ad17006339c1934d86449f335c241ff1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll : 5,945,856 : 12/21/2009 03:09 PM : e6b64c6c729bbc38ab7cc92ce33f97a5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll : 5,946,880 : 02/25/2010 02:19 AM : 974772c74da7c7a8e7c813a9908a845f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll : 5,953,024 : 05/06/2010 06:36 AM : 9be28f749a7fe7f8f177c6aa2e9da609 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978207$\mshtml.dll : 3,053,568 : 03/23/2006 01:32 PM : deaa438ea31095e14a196ff647e38d13 [Pos Repl]
+-> C:\WINDOWS\ie8\mshtml.dll : 3,063,808 : 12/22/2009 01:42 AM : bd1365d9400c3db84d76ae77318e1a8d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll : 5,950,976 : 05/06/2010 06:41 AM : c7b7a88cc7d7aba5c395145bf92f46f7 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll : 5,951,488 : 06/24/2010 08:22 AM : 4d7ef94795384cd2bbaab078b7929fea [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll : 5,957,120 : 09/10/2010 01:58 AM : de41132da8e5a3cd57201c6f2175ec05 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll : 5,959,168 : 11/05/2010 08:26 PM : d7cca87057901c87ed8cc40ddcc7fa1b [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll : 5,961,216 : 12/20/2010 07:59 PM : 1edcec5d649dbac37ed9ffb5a14ceb0c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll : 5,962,240 : 02/22/2011 07:06 PM : c2ef2335f1b6c2be20a67d9098f6c9a1 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\mshtml.dll : 5,964,800 : 05/30/2011 06:19 PM : 22ba5235ea846eda87f68a1dcc2bfcf9 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\mshtml.dll : 5,969,920 : 07/25/2011 11:17 AM : 23b3c8e9f3f280180573569253ce98ab [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5,971,456 : 10/03/2011 04:35 AM : 4963cb503600fc3bcbdbfba51fba1fac [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\mshtml.dll : 5,978,112 : 11/04/2011 03:20 PM : dd8d655e1881b70a5259a23a6018a6c2 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\mshtml.dll : 5,979,136 : 12/17/2011 03:46 PM : a9259cd226283cd4f798c00909754a94 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\mshtml.dll : 5,978,624 : 03/01/2012 07:01 AM : dade53318d8e5335ee2e1745f1c3fc4d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\mshtml.dll : 6,007,808 : 05/11/2012 10:42 AM : 886b62a906b3967cbbf0fd2c833a30bf [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2744842-IE8\mshtml.dll : 6,008,320 : 07/02/2012 01:49 PM : 13d2e016b784730a98f24d6e5beed22f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2761465-IE8\mshtml.dll : 6,008,832 : 08/28/2012 11:14 AM : df3c3ca94cbc9de07ac3eb49440a8d45 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2792100-IE8\mshtml.dll : 6,009,856 : 01/06/2013 01:34 AM : bdf6cc938c0644fe3643bc0d6a678e26 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2799329-IE8\mshtml.dll : 6,008,832 : 11/12/2012 03:57 PM : 9c46e5c82f94d9aedd2ce798f0df1158 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2809289-IE8\mshtml.dll : 6,010,368 : 01/08/2013 04:34 PM : 727c9e97cb26879c17a30484c2c76e98 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2817183-IE8\mshtml.dll : 6,011,392 : 02/28/2013 10:33 PM : 937091e40652c6b1b6c1a71eb90c08e1 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2838727-IE8\mshtml.dll : 6,015,488 : 05/07/2013 00:27 AM : 6dd9251c4d427de5eb828e0bffb95c5a [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2846071-IE8\mshtml.dll : 6,014,976 : 05/17/2013 06:07 PM : 05cf1926e4e7b6d91d66bd5cd54fc1f0 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2847204-IE8\mshtml.dll : 6,012,416 : 03/01/2013 10:06 PM : 85fe43a44239e406d7bb9513569d4d00 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2862772-IE8\mshtml.dll : 6,017,536 : 06/07/2013 05:56 PM : 76a0cf7f71b56cf9ccf46536affe3e26 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2870699-IE8\mshtml.dll : 6,017,536 : 07/25/2013 10:47 PM : 17965d48033d1a6e6320aa867351cc21 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2879017-IE8\mshtml.dll : 6,017,536 : 08/08/2013 02:05 AM : 4c9afe1ae4112d260a3e7846c60c774d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2888505-IE8\mshtml.dll : 6,017,536 : 09/23/2013 02:33 PM : 579017cf9c919429188190dae79bb8fc [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2898785-IE8\mshtml.dll : 6,021,120 : 10/13/2013 03:25 AM : 0794cd09be3d1e7a966c95e76fc86f47 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2909921-IE8\mshtml.dll : 6,020,608 : 10/29/2013 03:57 AM : 680bd97ba5c817bce79162496d51528d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2925418-IE8\mshtml.dll : 6,021,120 : 02/05/2014 07:26 PM : 516e371cc348141277a73eb9d3c25951 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll : 5,937,152 : 03/08/2009 04:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll : 5,940,736 : 10/29/2009 03:45 AM : cbb1ef54b86edb78649909dd1699e5ca [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll : 5,942,784 : 12/21/2009 03:14 PM : be6eebef636773a8e7a82214e81c563a [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll : 5,944,832 : 02/25/2010 02:24 AM : 7054f6adc9b670887659f1561603b0d0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mshtml.dll : 3,066,880 : 04/13/2008 08:11 PM : a706e122b398fe1ab85cb9b75d044223 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3GDR\mshtml.dll : 5,940,736 : 10/29/2009 03:45 AM : cbb1ef54b86edb78649909dd1699e5ca [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3QFE\mshtml.dll : 5,944,320 : 10/29/2009 03:45 AM : c0f9ac6fab2c788ffee3e69585a0e93f [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f1062d4e51d6818acdde68ea67673088\SP3GDR\mshtml.dll : 5,942,784 : 12/21/2009 03:14 PM : be6eebef636773a8e7a82214e81c563a [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f1062d4e51d6818acdde68ea67673088\SP3QFE\mshtml.dll : 5,945,856 : 12/21/2009 03:09 PM : e6b64c6c729bbc38ab7cc92ce33f97a5 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f5ce3558cdad2d0de1884dee71734a4a\SP3GDR\mshtml.dll : 5,940,224 : 08/29/2009 04:08 AM : 0e49677ee57a928765fc47ffbacd5326 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f5ce3558cdad2d0de1884dee71734a4a\SP3QFE\mshtml.dll : 5,942,272 : 08/29/2009 04:01 AM : b68f6e6c66d17d9edabf3d5da71046da [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mshtml.dll : 6,022,144 : 02/24/2014 07:46 AM : 427c63c2075abf62faa897bbd3de44f4 [Pos Repl]

* C:\WINDOWS\System32\msimg32.dll : 4,608 : 04/13/2008 08:11 PM : affc87e2501fce8f09d4c10ba6421ccf [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll : 4,608 : 08/04/2004 06:00 AM : b5331f2b6f37c66c29c847f3b94ff900 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msimg32.dll : 4,608 : 04/13/2008 08:11 PM : affc87e2501fce8f09d4c10ba6421ccf [Pos Repl]

* C:\WINDOWS\System32\mspmsnsv.dll : 27,136 : 10/18/2006 08:47 PM : c51b4a5c05a5475708e3c81c7765b71d [NoSig]
+-> C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll : 25,088 : 01/28/2005 04:44 PM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll : 25,088 : 01/28/2005 04:44 PM : 140ef97b64f560fd78643cae2cdad838 [Pos Repl]
+-> C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll : 52,224 : 08/04/2004 08:00 AM : c086483e3dba8c1c0a687ec8d5b3d4c1 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mspmsnsv.dll : 27,136 : 10/18/2006 08:47 PM : c51b4a5c05a5475708e3c81c7765b71d [Pos Repl]

* C:\WINDOWS\System32\msprivs.dll : 48,128 : 04/13/2008 12:23 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msprivs.dll : 48,128 : 08/04/2004 06:00 AM : 6bec17053284e847cf1fbb8c9a181e1e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msprivs.dll : 48,128 : 04/13/2008 12:23 AM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl]

* C:\WINDOWS\System32\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll : 343,040 : 08/04/2004 06:00 AM : b0fefa816d61ec66aa765ddf534eab5e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : 355edbb4d412b01f1740c17e3f50fa00 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322,560 : 08/04/2004 06:00 AM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll : 343,040 : 08/04/2004 06:00 AM : 98ec447e00229afd88d5161a25d065da [Pos Repl]
+-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343,040 : 04/13/2008 08:12 PM : d7075e95aa599ee77b7a89d39296bd3d [Pos Repl]

* C:\WINDOWS\System32\mswsock.dll : 245,248 : 06/20/2008 12:02 AM : 943337d786a56729263071623bbb9de5 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll : 245,248 : 06/20/2008 01:36 PM : 1dfca7713ea5a70d5d93b436aea0317a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll : 245,248 : 06/20/2008 01:43 PM : fcee5fcb99f7c724593365c706d28388 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll : 245,248 : 06/20/2008 01:41 PM : 097722f235a1fb698bf9234e01b52637 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 245,248 : 06/20/2008 01:46 PM : 832e4dd8964ab7acc880b2837cb1ed20 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\mswsock.dll : 245,248 : 08/04/2004 06:00 AM : 4e74af063c3271fbea20dd940cfd1184 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mswsock.dll : 245,248 : 04/13/2008 08:12 PM : b4138e99236f0f57d4cf49bae98a0746 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mswsock.dll : 245,248 : 06/20/2008 12:02 AM : 943337d786a56729263071623bbb9de5 [Pos Repl]

* C:\WINDOWS\System32\netlogon.dll : 407,040 : 04/13/2008 08:12 PM : 1b7f071c51b77c272875c3a23e1e4550 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll : 408,064 : 02/06/2009 02:46 PM : 6c476d33d82f1054849790181e8f7772 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll : 408,064 : 02/06/2009 02:46 PM : 6c476d33d82f1054849790181e8f7772 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll : 407,040 : 08/04/2004 06:00 AM : 96353fcecba774bb8da74a1c6507015a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netlogon.dll : 407,040 : 04/13/2008 08:12 PM : 1b7f071c51b77c272875c3a23e1e4550 [Pos Repl]

* C:\WINDOWS\System32\netman.dll : 198,144 : 04/13/2008 08:12 PM : 13e67b55b3abd7bf3fe7aae5a0f9a9de [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netman.dll : 198,144 : 08/04/2004 06:00 AM : dab9e6c7105d2ef49876fe92c524f565 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netman.dll : 198,144 : 04/13/2008 08:12 PM : 13e67b55b3abd7bf3fe7aae5a0f9a9de [Pos Repl]

* C:\WINDOWS\System32\ntkrnlpa.exe : 2,070,144 : 07/03/2013 10:08 PM : 4c47b37cf351ffeb1227ced0ff4751d5 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2,069,376 : 12/09/2010 06:39 PM : f67cd97282e0abfaf91a9a1359b16f2d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe : 2,069,376 : 10/25/2011 08:52 AM : db19fff0c805664cb95062c027b11fe9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2,069,120 : 04/11/2012 08:42 AM : 063a0f8a90d8e2b802e5243fe9aabcf3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe : 2,069,120 : 05/04/2012 08:41 AM : 8e99a0ce02c1beda6c0935a4dde9ceaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntkrnlpa.exe : 2,069,632 : 08/21/2012 09:05 AM : b326d5e256d2f32b23e64f49debce31b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2799494\SP3QFE\ntkrnlpa.exe : 2,069,760 : 01/06/2013 08:45 PM : 1251d608dfce4b6801ad27a59b74985c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2813170\SP3QFE\ntkrnlpa.exe : 2,070,016 : 03/06/2013 08:53 PM : 9ebeda306e5eabdabcff8b695fcd4cd6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe : 2,062,976 : 02/06/2009 05:49 AM : 9d832af3fd1917db0e1e8b2f000a2e3a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe : 2,066,048 : 02/07/2009 10:02 PM : 5ba7f2141bc6db06100d0e5a732c617a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2,066,176 : 02/06/2009 06:30 AM : 607352b9cb3d708c67f6039097801b5a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP2QFE\ntkrnlpa.exe : 2,062,976 : 08/04/2009 08:02 AM : 97e912e94cced4064f5deee5c25a9278 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3GDR\ntkrnlpa.exe : 2,066,048 : 08/04/2009 10:20 AM : 7437ba6f538e89381a2e3643aed296c7 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe : 2,066,176 : 08/04/2009 09:47 PM : 363b2bbee0aedc9e5433616d0ad0236a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP2QFE\ntkrnlpa.exe : 2,063,104 : 12/08/2009 01:35 PM : bc123d9238a0c9bb3d853e407ee77254 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3GDR\ntkrnlpa.exe : 2,066,048 : 12/08/2009 02:43 PM : a6683e23468776f75eb2d8c6a02aad3b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe : 2,066,176 : 12/08/2009 11:10 PM : ffdce1eea79c678c40237d4e031e5b51 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe : 2,066,944 : 02/16/2010 08:12 AM : ded8b5a89b085284634502e9d75ac78c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe : 2,066,944 : 04/28/2010 06:14 AM : 756362706de8bc92f11e197c98a73844 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe : 2,062,976 : 08/04/2009 08:02 AM : 97e912e94cced4064f5deee5c25a9278 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2,066,816 : 04/27/2010 09:05 AM : dc57abed7bde1487e658968b4423bed7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntkrnlpa.exe : 2,069,376 : 12/09/2010 09:07 AM : 84ff488e249dbd2050eb39ea81c6f5c2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2,069,376 : 10/25/2011 08:52 AM : ce1a2fedbd001ecdc5ad1975afad040a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntkrnlpa.exe : 2,069,120 : 04/11/2012 08:35 AM : 0c9e44d256948fa68ae10d67984862ce [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2724197$\ntkrnlpa.exe : 2,069,120 : 05/04/2012 08:32 AM : 5dd80d56af1cefbff4f25951069b55bb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2799494$\ntkrnlpa.exe : 2,069,632 : 08/21/2012 08:58 AM : b2d4fd49ddef6def6900daac5730f425 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2813170$\ntkrnlpa.exe : 2,069,760 : 01/06/2013 08:36 PM : 864e6f476699c1e3e020ce66462785fe [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2839229$\ntkrnlpa.exe : 2,070,016 : 03/06/2013 08:50 PM : 9c8e896fcf103f943eb3f405a974447d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2859537$\ntkrnlpa.exe : 2,070,144 : 05/02/2013 08:38 PM : e9549ed22ac6a6d8a937de88ea42646c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2,065,792 : 04/13/2008 02:31 PM : 109f8e3e3c82e337bb71b6bc9b895d61 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntkrnlpa.exe : 2,056,832 : 03/29/2005 09:01 PM : 9a06915a29434202e8d39456822b3a12 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntkrnlpa.exe : 2,066,048 : 08/04/2009 10:20 AM : 7437ba6f538e89381a2e3643aed296c7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntkrnlpa.exe : 2,066,048 : 12/08/2009 02:43 PM : a6683e23468776f75eb2d8c6a02aad3b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntkrnlpa.exe : 2,066,816 : 02/16/2010 09:25 AM : a046c627ec20456e2959b7bd628e1fd0 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2,070,144 : 07/03/2013 10:08 PM : 4c47b37cf351ffeb1227ced0ff4751d5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe : 2,065,792 : 04/13/2008 02:31 PM : 109f8e3e3c82e337bb71b6bc9b895d61 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ntkrnlpa.exe : 2,070,144 : 07/03/2013 10:08 PM : 4c47b37cf351ffeb1227ced0ff4751d5 [Pos Repl]

* C:\WINDOWS\System32\ntmssvc.dll : 435,200 : 04/13/2008 08:12 PM : 156f64a3345bd23c600655fb4d10bc08 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll : 435,200 : 08/04/2004 06:00 AM : b62f29c00ac55a761b2e45877d85ea0f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll : 435,200 : 04/13/2008 08:12 PM : 156f64a3345bd23c600655fb4d10bc08 [Pos Repl]

* C:\WINDOWS\System32\ntoskrnl.exe : 2,193,536 : 07/03/2013 10:59 PM : a4a50a53ffbfec545cda85e98af2106b [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2,192,768 : 12/09/2010 09:43 AM : a531bbd3de13121c1380ed7dc99082db [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe : 2,192,768 : 10/25/2011 09:34 AM : f512c662874d7545e5bd8005e6800a44 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2,192,640 : 04/11/2012 09:22 AM : 8d061bb825bc606c2b1c6f7452d1baaa [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe : 2,192,640 : 05/04/2012 09:20 AM : 099a0f80a563ebe935f4a9750f96c219 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntoskrnl.exe : 2,193,024 : 08/21/2012 09:48 AM : eca5980e1a78dbf9cb7f49f76791c0d1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2799494\SP3QFE\ntoskrnl.exe : 2,193,152 : 01/06/2013 09:28 PM : ae2fee63789f5df6b19dd9a39e26d03e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2813170\SP3QFE\ntoskrnl.exe : 2,193,536 : 03/06/2013 09:31 PM : 9fc16e5ebfe88f3c844ffe2e6cb7f1e8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe : 2,186,112 : 02/06/2009 06:32 AM : 6a936e9d7badaf3caaeed1e1966ec1b0 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe : 2,189,056 : 02/06/2009 07:08 AM : 7a95b10a73737ebf24139aaa63f5212b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2,189,184 : 02/07/2009 10:35 PM : efe8eace83eaad5849a7a548fb75b584 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP2QFE\ntoskrnl.exe : 2,185,984 : 08/04/2009 08:51 AM : 8df112c341425f29db4566b8d2a96a7f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3GDR\ntoskrnl.exe : 2,189,184 : 08/04/2009 11:44 PM : 8415d9c7c050e7022aed8abf281be4a6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe : 2,189,312 : 08/04/2009 09:56 AM : fde779ea1a564ebfe16f4e0f82b61bad [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP2QFE\ntoskrnl.exe : 2,185,984 : 12/08/2009 02:14 PM : 128d88b3176e70b2e3088eceb842b673 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3GDR\ntoskrnl.exe : 2,189,184 : 12/08/2009 03:27 PM : 78ec47f9b9a3a1d539262d8834c896ce [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe : 2,189,312 : 12/08/2009 11:52 PM : 05be3d9a71972223aff6a3c823ba51b1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe : 2,190,080 : 02/16/2010 08:52 AM : e1f653a542449d54fa2d27463d99b6b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe : 2,190,080 : 04/27/2010 09:50 AM : a2abbec40cdb57454645d06b7ebd22f5 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe : 2,185,984 : 08/04/2009 08:51 AM : 8df112c341425f29db4566b8d2a96a7f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2,189,952 : 04/27/2010 10:25 PM : 472059774023f80eb7227eaf9a7acda1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2633171$\ntoskrnl.exe : 2,192,768 : 12/09/2010 09:38 AM : 64c1adf6df629f340c5a439fe0ef8ed1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2,192,768 : 10/25/2011 09:33 AM : 892cddff7ef96951b9b0b50974070e47 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2707511$\ntoskrnl.exe : 2,192,640 : 04/11/2012 09:10 AM : 536168936ebf326e36c655ec5ae34b03 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2724197$\ntoskrnl.exe : 2,192,640 : 05/04/2012 09:12 AM : ddf0cb8cd3c6007cdf4ad8f0409ed930 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2799494$\ntoskrnl.exe : 2,192,896 : 08/21/2012 09:29 AM : 49fb9f4a7ce25b82b1e00c402783f5c5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2813170$\ntoskrnl.exe : 2,193,024 : 01/06/2013 09:16 PM : cb8e341afd9042ee70e51715d9a23b1e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2839229$\ntoskrnl.exe : 2,193,408 : 03/06/2013 09:28 PM : 3fd65320312c8411b72e33da8661d36a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2859537$\ntoskrnl.exe : 2,193,536 : 05/02/2013 09:26 PM : c97d686343987eeecb2600c15d4762e4 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2,188,928 : 04/13/2008 03:27 PM : 0c89243c7c3ee199b96fcc16990e0679 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe : 2,179,584 : 03/29/2005 09:23 PM : 255449e7f00e23d9b10ae8cdd5f73e56 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB977165$\ntoskrnl.exe : 2,189,184 : 08/04/2009 08:44 PM : 8415d9c7c050e7022aed8abf281be4a6 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979683$\ntoskrnl.exe : 2,189,184 : 12/08/2009 03:27 PM : 78ec47f9b9a3a1d539262d8834c896ce [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981852$\ntoskrnl.exe : 2,189,952 : 02/17/2010 08:10 AM : d41c3cbad0e1c0728d1cdfd541f60cfa [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2,193,536 : 07/03/2013 10:59 PM : a4a50a53ffbfec545cda85e98af2106b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe : 2,188,928 : 04/13/2008 03:27 PM : 0c89243c7c3ee199b96fcc16990e0679 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ntoskrnl.exe : 2,193,536 : 07/03/2013 10:59 PM : a4a50a53ffbfec545cda85e98af2106b [Pos Repl]

* C:\WINDOWS\System32\oakley.dll : 278,528 : 10/12/2013 11:56 AM : 584c4da856450cb22ebbe7a68cc6250f [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB974392\SP2QFE\oakley.dll : 270,336 : 10/13/2009 06:45 AM : 6bb6599363ce631a7e3c221364e6facc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974392\SP3GDR\oakley.dll : 270,336 : 10/13/2009 06:30 AM : c5ff8682eada5b3b27a865f1c3ef9270 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 270,336 : 10/13/2009 06:38 AM : 7eadba6d371c60cca9e4db57c28c8045 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\oakley.dll : 266,752 : 10/13/2009 06:53 AM : e7e39b9152e6c27e5f608574ea6c5a52 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2862152$\oakley.dll : 270,336 : 10/13/2009 06:30 AM : c5ff8682eada5b3b27a865f1c3ef9270 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 266,752 : 08/04/2004 06:00 AM : a76128be63eea6a3af521a0576d3ebf7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\oakley.dll : 270,336 : 04/13/2008 08:12 PM : 33ceb89b62589e8b12aee9e2d523dade [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\oakley.dll : 278,528 : 10/12/2013 11:56 AM : 584c4da856450cb22ebbe7a68cc6250f [Pos Repl]

* C:\WINDOWS\System32\ole32.dll : 1,289,728 : 08/05/2013 09:30 AM : 59b408e5b8489b0b36a0d783d150edcc [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1,289,216 : 11/01/2011 12:05 AM : 7d9dde1ab4b00ddb173f5a16e9206517 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1,289,216 : 07/16/2010 08:04 AM : 8d51fb47062f2a1a9efeccef338a4c46 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ole32.dll : 1,281,536 : 08/04/2004 06:00 AM : 4fe9d9fa62d020e35e0ac6d1aeeb96f0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1,288,192 : 07/16/2010 08:05 AM : 7a6a7900b5e322763430ba6fd9a31224 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2876217$\ole32.dll : 1,288,704 : 11/01/2011 12:07 AM : 6bad1bed9872e62049e487fb91ae2f3a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ole32.dll : 1,287,168 : 04/13/2008 08:12 PM : ecce74bc6168375016450a86a164d976 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ole32.dll : 1,289,728 : 08/05/2013 09:30 AM : 59b408e5b8489b0b36a0d783d150edcc [Pos Repl]

* C:\WINDOWS\System32\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll : 83,456 : 08/04/2004 06:00 AM : b48d3193dd1474dcbcc32bf4779ac698 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\olepro32.dll : 84,992 : 04/13/2008 08:12 PM : 5652f6ce1d9e9d8068b9d29bc21b5409 [Pos Repl]

* C:\WINDOWS\System32\perfctrs.dll : 39,936 : 04/13/2008 08:12 PM : dbe2b62353660ecca0d75ea307a717e9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll : 39,936 : 08/04/2004 06:00 AM : 96492c721c6ea517e2bfd5381fef55e3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll : 39,936 : 04/13/2008 08:12 PM : dbe2b62353660ecca0d75ea307a717e9 [Pos Repl]

* C:\WINDOWS\System32\powrprof.dll : 17,408 : 04/13/2008 08:12 PM : 50a166237a0fa771261275a405646cc0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll : 17,408 : 08/04/2004 06:00 AM : 1b5f6923abb450692e9fe0672c897aed [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\powrprof.dll : 17,408 : 04/13/2008 08:12 PM : 50a166237a0fa771261275a405646cc0 [Pos Repl]

* C:\WINDOWS\System32\psbase.dll : 96,768 : 04/13/2008 08:12 PM : 22d89d84e8e081cda529dbf8c0255a38 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psbase.dll : 96,768 : 08/04/2004 06:00 AM : 4d3ccdf22d2b4bae229ba73b81d13e26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psbase.dll : 96,768 : 04/13/2008 08:12 PM : 22d89d84e8e081cda529dbf8c0255a38 [Pos Repl]

* C:\WINDOWS\System32\pstorsvc.dll : 34,304 : 04/13/2008 08:12 PM : 853d0d0c6f02d7bfdf1cf99dd7553732 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pstorsvc.dll : 34,304 : 08/04/2004 06:00 AM : 306b30a036db25fcb76b507fede07d58 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll : 34,304 : 04/13/2008 08:12 PM : 853d0d0c6f02d7bfdf1cf99dd7553732 [Pos Repl]

* C:\WINDOWS\System32\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll : 382,464 : 08/04/2004 08:00 AM : 2c69ec7e5a311334d10dd95f338fccea [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]
+-> C:\WINDOWS\system32\bits\qmgr.dll : 409,088 : 04/13/2008 08:12 PM : 574738f61fca2935f5265dc4e5691314 [Pos Repl]

* C:\WINDOWS\System32\rasadhlp.dll : 7,680 : 04/13/2008 08:12 PM : 6f9bef24c578d5d6740e080bedd6a448 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll : 8,192 : 08/04/2004 06:00 AM : 4caec028c1e21c75e17877d4522d3db4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll : 7,680 : 04/13/2008 08:12 PM : 6f9bef24c578d5d6740e080bedd6a448 [Pos Repl]

* C:\WINDOWS\System32\regsvc.dll : 59,904 : 04/13/2008 08:12 PM : 5b19b557b0c188210a56a6b699d90b8f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll : 59,904 : 08/04/2004 06:00 AM : 3151427db7d87107d1c5be58fac53960 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\regsvc.dll : 59,904 : 04/13/2008 08:12 PM : 5b19b557b0c188210a56a6b699d90b8f [Pos Repl]

* C:\WINDOWS\System32\rpcss.dll : 401,408 : 02/09/2009 08:10 AM : 6b27a5c03dfb94b4245739065431322c [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\rpcss.dll : 401,408 : 02/09/2009 06:01 AM : 24b5d53b9accc1e2edcf0a878d6659d4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\rpcss.dll : 401,408 : 02/09/2009 08:10 AM : 6b27a5c03dfb94b4245739065431322c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401,408 : 02/09/2009 06:56 AM : 9222562d44021b988b9f9f62207fb6f2 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll : 399,360 : 02/09/2009 06:20 AM : 01095febf33beea00c2a0730b9b3ec28 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572_0$\rpcss.dll : 395,776 : 08/04/2004 06:00 AM : 5c83a4408604f737717ab96371201680 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rpcss.dll : 399,360 : 04/13/2008 08:12 PM : 2589fe6015a316c0f5d5112b4da7b509 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rpcss.dll : 401,408 : 02/09/2009 08:10 AM : 6b27a5c03dfb94b4245739065431322c [Pos Repl]

* C:\WINDOWS\System32\scecli.dll : 181,248 : 04/13/2008 08:12 PM : a86bb5e61bf3e39b62ab4c7e7085a084 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll : 180,224 : 08/04/2004 06:00 AM : 0f78e27f563f2aaf74b91a49e2abf19a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scecli.dll : 181,248 : 04/13/2008 08:12 PM : a86bb5e61bf3e39b62ab4c7e7085a084 [Pos Repl]

* C:\WINDOWS\System32\schannel.dll : 152,576 : 06/04/2012 00:32 AM : 0f64207b49390c8063c36ae7cbf9c2db [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2541763\SP3QFE\schannel.dll : 151,552 : 04/29/2011 01:23 PM : 6fd5eec3703d7770c9029e774acc2294 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152,064 : 11/16/2011 10:20 AM : d444009f7cd704c89f7f9e62396ed4f1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153,088 : 06/04/2012 00:31 AM : 26f1193092b9ac2586deb38dd1cbb25c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP2QFE\schannel.dll : 144,896 : 12/05/2008 02:41 AM : f63b1a19104e59dd7dc8a79785a16317 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP3GDR\schannel.dll : 144,896 : 12/05/2008 02:54 AM : 636c52fc618acb09ec356e9e82d072e2 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll : 144,896 : 12/05/2008 02:58 AM : 1cdfcf9d0fdc55d76ac3955bd04ac200 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\schannel.dll : 168,448 : 06/25/2009 04:17 AM : 3732492edd6c46454752f9ac78f2539e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3GDR\schannel.dll : 147,456 : 06/25/2009 04:25 AM : bfdece69e293e6db4e25def862418428 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147,456 : 06/25/2009 04:41 AM : e513ba8bc33fd00f35d69659b478b1df [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980436\SP3QFE\schannel.dll : 149,504 : 06/30/2010 08:23 AM : e04b6497b6407d2f444e86b30680dc5a [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\schannel.dll : 168,448 : 06/25/2009 04:44 AM : 7b47c36b4f0170b8ef4f3b4efd371f67 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2541763$\schannel.dll : 149,504 : 06/30/2010 08:31 AM : 30ace70b3c0242f0d1ac3b4fa708710f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 151,552 : 04/29/2011 01:25 PM : abeedd547e939ad827b2e29dec754206 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152,064 : 11/16/2011 10:21 AM : a645a78fcdabad67067324d7e6cd9f79 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144,896 : 08/04/2004 06:00 AM : 29632e787dcfc0085a555c681eb82693 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980436$\schannel.dll : 147,456 : 06/25/2009 04:25 AM : bfdece69e293e6db4e25def862418428 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schannel.dll : 144,384 : 04/13/2008 08:12 PM : c61e8ecffdbf05ff71d079bbd35396b3 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\schannel.dll : 152,576 : 06/04/2012 00:32 AM : 0f64207b49390c8063c36ae7cbf9c2db [Pos Repl]

* C:\WINDOWS\System32\schedsvc.dll : 192,512 : 04/13/2008 08:12 PM : 0a9a7365a1ca4319aa7c1d6cd8e4eafa [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll : 190,976 : 08/04/2004 08:00 AM : 92360854316611f6cc471612213c3d92 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll : 192,512 : 04/13/2008 08:12 PM : 0a9a7365a1ca4319aa7c1d6cd8e4eafa [Pos Repl]

* C:\WINDOWS\System32\services.exe : 110,592 : 02/06/2009 07:11 AM : 65df52f5b8b6e9bbd183505225c37315 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe : 110,592 : 02/06/2009 06:22 AM : 4712531ab7a01b7ee059853ca17d39bd [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe : 110,592 : 02/06/2009 07:11 AM : 65df52f5b8b6e9bbd183505225c37315 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 110,592 : 02/06/2009 07:06 AM : 020ceaaedc8eb655b6506b8c70d53bb6 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\services.exe : 110,592 : 02/06/2009 01:14 PM : 37561f8d4160d62da86d24ae41fae8de [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572_0$\services.exe : 108,032 : 08/04/2004 06:00 AM : c6ce6eec82f187615d1002bb3bb50ed4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\services.exe : 108,544 : 04/13/2008 08:12 PM : 0e776ed5f7cc9f94299e70461b7b8185 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\services.exe : 110,592 : 02/06/2009 07:11 AM : 65df52f5b8b6e9bbd183505225c37315 [Pos Repl]

* C:\WINDOWS\System32\setupapi.dll : 985,088 : 04/14/2008 08:42 AM : 24192246760e0e64435522e246b1d6c2 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll : 983,552 : 08/04/2004 06:00 AM : 7808313cbc634ee08346d5ddfef1cc5f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\setupapi.dll : 985,088 : 04/14/2008 08:42 AM : 24192246760e0e64435522e246b1d6c2 [Pos Repl]

* C:\WINDOWS\System32\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfc.dll : 5,120 : 08/04/2004 06:00 AM : e8a12a12ea9088b4327d49edca3add3e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfc.dll : 5,120 : 04/13/2008 08:12 PM : 96e1c926f22ee1bfbae82901a35f6bf3 [Pos Repl]

* C:\WINDOWS\System32\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll : 1,580,544 : 08/04/2004 06:00 AM : 30a609e00bd1d4ffc49d6b5a432be7f2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll : 1,614,848 : 04/13/2008 08:12 PM : 9dd07af82244867ca36681ea2d29ce79 [Pos Repl]

* C:\WINDOWS\System32\shsvcs.dll : 135,168 : 07/27/2009 07:17 PM : 99bc0b50f511924348be19c7c7313bbf [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135,168 : 07/27/2009 06:13 PM : 888cd7b39c37e13a2419becfaaf0a28c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll : 134,656 : 08/04/2004 06:00 AM : e7518dc542d3ebdcb80edd98462c7821 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll : 135,168 : 04/13/2008 08:12 PM : 1926899bf9ffe2602b63074971700412 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\shsvcs.dll : 135,168 : 07/27/2009 07:17 PM : 99bc0b50f511924348be19c7c7313bbf [Pos Repl]

* C:\WINDOWS\System32\smss.exe : 50,688 : 04/13/2008 08:12 PM : 5f816c1f539266d2d4c78694239da0b5 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\smss.exe : 50,688 : 08/04/2004 06:00 AM : bd7fb0957c716f1a60333aee04de2178 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\smss.exe : 50,688 : 04/13/2008 08:12 PM : 5f816c1f539266d2d4c78694239da0b5 [Pos Repl]

* C:\WINDOWS\System32\spoolsv.exe : 58,880 : 08/17/2010 09:17 AM : 60784f891563fb1b767f70117fc2428f [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58,880 : 08/17/2010 09:19 AM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe : 57,856 : 08/04/2004 06:00 AM : 7435b108b935e42ea92ca94f59c8e717 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe : 57,856 : 04/13/2008 08:12 PM : d8e14a61acc1d4a6cd0d38aebac7fa3b [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\spoolsv.exe : 58,880 : 08/17/2010 09:17 AM : 60784f891563fb1b767f70117fc2428f [Pos Repl]

* C:\WINDOWS\System32\srsvc.dll : 171,008 : 04/13/2008 08:12 PM : 3805df0ac4296a34ba4bf93b346cc378 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll : 170,496 : 08/04/2004 08:00 AM : 92bdf74f12d6cbec43c94d4b7f804838 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srsvc.dll : 171,008 : 04/13/2008 08:12 PM : 3805df0ac4296a34ba4bf93b346cc378 [Pos Repl]

* C:\WINDOWS\System32\ssdpsrv.dll : 71,680 : 04/13/2008 08:12 PM : 0a5679b3714edab99e357057ee88fca6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll : 71,680 : 08/04/2004 06:00 AM : 4b8d61792f7175bed48859cc18ce4e38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll : 71,680 : 04/13/2008 08:12 PM : 0a5679b3714edab99e357057ee88fca6 [Pos Repl]

* C:\WINDOWS\System32\svchost.exe : 14,336 : 04/13/2008 08:12 PM : 27c6d03bcdb8cfeb96b716f3d8be3e18 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\svchost.exe : 14,336 : 08/04/2004 06:00 AM : 8f078ae4ed187aaabc0a305146de6716 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\svchost.exe : 14,336 : 04/13/2008 08:12 PM : 27c6d03bcdb8cfeb96b716f3d8be3e18 [Pos Repl]

* C:\WINDOWS\System32\tapisrv.dll : 249,856 : 04/13/2008 08:12 PM : 3cb78c17bb664637787c9a1c98f79c38 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll : 246,272 : 08/04/2004 06:00 AM : eb4a4187d74a8efdcbea3ea2cb1bdfbd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll : 249,856 : 04/13/2008 08:12 PM : 3cb78c17bb664637787c9a1c98f79c38 [Pos Repl]

* C:\WINDOWS\System32\termsrv.dll : 295,424 : 04/13/2008 08:12 PM : ff3477c03be7201c294c35f684b3479f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll : 295,424 : 08/04/2004 08:00 AM : b60c877d16d9c880b952fda04adf16e6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termsrv.dll : 295,424 : 04/13/2008 08:12 PM : ff3477c03be7201c294c35f684b3479f [Pos Repl]

* C:\WINDOWS\System32\upnphost.dll : 185,856 : 04/13/2008 08:12 PM : 1ebafeb9a3fbdc41b8d9c7f0f687ad91 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll : 185,344 : 08/04/2004 06:00 AM : 0546477bde979e33294fe97f6b3de84a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\upnphost.dll : 185,856 : 04/13/2008 08:12 PM : 1ebafeb9a3fbdc41b8d9c7f0f687ad91 [Pos Repl]

* C:\WINDOWS\System32\user32.dll : 578,560 : 04/13/2008 08:12 PM : b26b135ff1b9f60c9388b4a7d16f600b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\user32.dll : 577,024 : 08/04/2004 06:00 AM : c72661f8552ace7c5c85e16a3cf505c4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\user32.dll : 578,560 : 04/13/2008 08:12 PM : b26b135ff1b9f60c9388b4a7d16f600b [Pos Repl]

* C:\WINDOWS\System32\userinit.exe : 26,112 : 04/13/2008 08:12 PM : a93aee1928a9d7ce3e16d24ec7380f89 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\userinit.exe : 24,576 : 08/04/2004 06:00 AM : 39b1ffb03c2296323832acbae50d2aff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\userinit.exe : 26,112 : 04/13/2008 08:12 PM : a93aee1928a9d7ce3e16d24ec7380f89 [Pos Repl]

* C:\WINDOWS\System32\usp10.dll : 406,016 : 07/10/2013 06:37 AM : 1d845821f5adb076831de4c2818f858b [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406,016 : 04/16/2010 11:29 AM : f8894bcc961d461674002b4bae7aecc1 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\usp10.dll : 406,528 : 08/04/2004 06:00 AM : 2eb58f9dcd6ab320b46744a4ea48b2d2 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2850869$\usp10.dll : 406,016 : 04/16/2010 11:36 AM : 9e03dc5ab51cfd0190541ce2038d819d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usp10.dll : 406,016 : 04/13/2008 08:12 PM : 7d7d8501f3cb45d0408cdefa08cdaeff [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usp10.dll : 406,016 : 07/10/2013 06:37 AM : 1d845821f5adb076831de4c2818f858b [Pos Repl]

* C:\WINDOWS\System32\UxTheme.dll : 218,624 : 04/13/2008 08:12 PM : 7a2cc3719b255e6b5d74396183b7715b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll : 218,624 : 08/04/2004 06:00 AM : 2cde496666a975a2ce8f969f3042c8db [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll : 218,624 : 04/13/2008 08:12 PM : 7a2cc3719b255e6b5d74396183b7715b [Pos Repl]

* C:\WINDOWS\System32\version.dll : 18,944 : 04/13/2008 08:12 PM : c7ce131408739b0b3a318be2d0032719 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\version.dll : 18,944 : 08/04/2004 06:00 AM : d38408967be738d0c1b47005bce8ceeb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\version.dll : 18,944 : 04/13/2008 08:12 PM : c7ce131408739b0b3a318be2d0032719 [Pos Repl]

* C:\WINDOWS\System32\w32time.dll : 175,104 : 04/13/2008 08:12 PM : 54af4b1d5459500ef0937f6d33b1914f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\w32time.dll : 174,592 : 08/04/2004 06:00 AM : 2b281958f5d0cf99ed626e3ef39d5c8d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\w32time.dll : 175,104 : 04/13/2008 08:12 PM : 54af4b1d5459500ef0937f6d33b1914f [Pos Repl]

* C:\WINDOWS\System32\wbem\wmiprvse.exe : 227,840 : 02/06/2009 06:10 AM : 798a9e6828997eef4517ada8a2259831 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\wmiprvse.exe : 227,840 : 02/06/2009 05:41 AM : 51a548a604aec2c362ca503b0cb03831 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\wmiprvse.exe : 227,840 : 02/06/2009 06:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227,840 : 02/06/2009 06:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe : 227,840 : 02/06/2009 12:39 AM : 31fa172657e941e7cb15c5ccfe36a03e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956572_0$\wmiprvse.exe : 218,112 : 08/04/2004 06:00 AM : 075ea6c849ab0fe416a3d6dd65c3cf41 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe : 218,112 : 04/13/2008 08:12 PM : 0ffae66e6d5b1c87cbd22d1f3b6079fd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wmiprvse.exe : 227,840 : 02/06/2009 06:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl]

* C:\WINDOWS\System32\wdigest.dll : 54,272 : 06/25/2009 04:25 AM : 3aaf9b35939ff9e58ccd18d41655c2fc [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\wdigest.dll : 59,392 : 06/25/2009 04:17 AM : 6e2aba80e627a6b2caccc6d0c60874b1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3GDR\wdigest.dll : 54,272 : 06/25/2009 04:25 AM : 3aaf9b35939ff9e58ccd18d41655c2fc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54,272 : 06/25/2009 04:41 AM : d9dcec3fa1b27689fc56e34c38d3f148 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll : 59,392 : 06/25/2009 04:44 AM : dbb2e47723a164b178836668a6ca4c1b [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49,152 : 08/04/2004 06:00 AM : a8b82c5d30b7ab937e164ab349478fba [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdigest.dll : 49,152 : 04/13/2008 08:12 PM : cefcc6a64983eb8119f3a07a0c1ede30 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wdigest.dll : 54,272 : 06/25/2009 04:25 AM : 3aaf9b35939ff9e58ccd18d41655c2fc [Pos Repl]

* C:\WINDOWS\System32\wiaservc.dll : 333,824 : 04/13/2008 08:12 PM : 8bad69cbac032d4bbacfce0306174c30 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll : 333,312 : 08/04/2004 06:00 AM : d9f6c4f6b1e188adafc42b561d9bc2e6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll : 333,824 : 04/13/2008 08:12 PM : 8bad69cbac032d4bbacfce0306174c30 [Pos Repl]

* C:\WINDOWS\System32\wininet.dll : 920,064 : 02/24/2014 07:46 AM : c29c1990c6ca8d7b098318f5887c3bdc [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll : 919,040 : 06/24/2010 08:24 AM : 60237e50d575fba9bec9bc043f157149 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll : 919,552 : 09/10/2010 01:57 AM : 0555e190dcd06b8998e6ddca42daeb82 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll : 919,552 : 11/05/2010 08:27 PM : 9357c4249f4810fb0e49c13387a8a77c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll : 919,552 : 12/20/2010 07:58 PM : 5504b4ecce892eb82cd2c5fa71940ac1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll : 919,552 : 02/22/2011 07:27 PM : a9fa95f0d7f511959ac721e4843e5967 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll : 919,552 : 04/25/2011 12:09 AM : 7f4f1697001b9e9a7924d219dc215903 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll : 919,552 : 06/23/2011 02:33 PM : 509cf67ae762a38e23a5455a0053853c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll : 919,552 : 08/22/2011 07:47 PM : 19630aebbfaeb06984cab91848270aaf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919,552 : 11/04/2011 03:19 PM : 4e4716caf514717814d07113ad0425b6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll : 919,552 : 12/17/2011 03:45 PM : 84a48e9818e8440ddbfd8eec37c8a937 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\wininet.dll : 919,552 : 03/01/2012 06:58 AM : 4ec67fab39f37626ad6d9895fc094abf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\wininet.dll : 920,064 : 05/16/2012 11:06 AM : 553ad35768cd27959391dd5aa82cef6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\wininet.dll : 920,064 : 07/02/2012 01:48 PM : efb2241de3aa6480521a16d0cb67b0ec [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\wininet.dll : 920,064 : 08/28/2012 11:13 AM : dcea3b3193b7181cf818ecc4eab30a66 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2761465-IE8\SP3QFE\wininet.dll : 920,064 : 11/01/2012 08:15 AM : acc92628cfff9bb6f8886329888014a8 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2792100-IE8\SP3QFE\wininet.dll : 920,064 : 12/26/2012 04:15 PM : b8bef9519a1b124deaf94081f6c5a767 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2809289-IE8\SP3QFE\wininet.dll : 920,064 : 02/05/2013 04:04 PM : be30bef4c13065d09772f9895fcb9d22 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2817183-IE8\SP3QFE\wininet.dll : 920,064 : 03/01/2013 10:05 PM : 43eadba9f3cd2a5f01b189bd95fcde95 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\wininet.dll : 663,552 : 03/03/2006 11:58 PM : c0845ecbf4f9164e618ee381b79c9032 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP2QFE\wininet.dll : 668,672 : 09/25/2009 01:49 AM : ae710be3f4a9f9b0948c3183d49717a0 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3GDR\wininet.dll : 667,136 : 09/25/2009 01:37 AM : 178cf0f58c9907633aab633860b68973 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\wininet.dll : 668,672 : 09/25/2009 01:32 AM : 406d33f9b30ffc0eefc7c55562839931 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP2QFE\wininet.dll : 668,672 : 10/29/2009 01:04 AM : df1f2953b7983f9630cd658899826344 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3GDR\wininet.dll : 667,136 : 10/29/2009 01:38 AM : 3839bd07f2c693efe995f96baab7f4bf [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\wininet.dll : 668,672 : 10/29/2009 01:23 AM : 6ac4aa42cc9aaefab1d5e4e2af2e3d2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll : 916,480 : 10/29/2009 03:45 AM : 6af52998b90f72ff2325d84d90eda1cc [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP2QFE\wininet.dll : 668,672 : 12/22/2009 01:35 AM : 3e617a36a895363fbbe6d1d0405d7e12 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP3GDR\wininet.dll : 667,136 : 12/22/2009 01:21 AM : 814c265012ed921443c515a591d5bfe1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207\SP3QFE\wininet.dll : 668,672 : 12/22/2009 01:05 AM : bd27af5c72d2fbfe491d3a3a8429b974 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll : 916,480 : 12/21/2009 03:09 PM : 5e1f666b8955fd77e65d65c4c4d882a3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll : 919,040 : 02/25/2010 02:19 AM : 4458d59f2b0369f4d3b137541d284041 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll : 919,040 : 05/06/2010 06:36 AM : c1490f68b44af8b781f52f12f564625d [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978207$\wininet.dll : 658,432 : 03/03/2006 11:33 PM : 1c0979c7a489bee573cd0bf4ad94bb06 [Pos Repl]
+-> C:\WINDOWS\ie8\wininet.dll : 662,016 : 12/22/2009 01:42 AM : a59054653a2da13132be377a650971c9 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll : 916,480 : 05/06/2010 06:41 AM : 2d9c7b010409372c34f725da5cced083 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll : 916,480 : 06/24/2010 08:22 AM : d3deb6b2b424ac93de3801eaeb21a9a5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll : 916,480 : 09/10/2010 01:58 AM : 36fe8abc59aafbe20cbe54bc372f9429 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll : 916,480 : 11/05/2010 08:26 PM : 306a2b05ea9846278113964dc6e2c940 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll : 916,480 : 12/20/2010 07:59 PM : 88014d62b5e3cdb0ac67948d86c926c8 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll : 916,480 : 02/22/2011 07:06 PM : f192d49eefe297fa858b2c774ba2291d [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2559049-IE8\wininet.dll : 916,480 : 04/25/2011 12:11 AM : cc951c2212a200475a587a440e0aa804 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2586448-IE8\wininet.dll : 916,480 : 06/23/2011 02:36 PM : af4eddc6c0446fce5681b5ded52b8f0e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916,480 : 08/22/2011 07:48 PM : 1a377838b4b468e37c3eeb5baa24f925 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2647516-IE8\wininet.dll : 916,992 : 11/04/2011 03:20 PM : 552263502ea8c24d301a0c43ff90b3ed [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2675157-IE8\wininet.dll : 916,992 : 12/17/2011 03:46 PM : f362d50fbdc6e34918df41bde1770e5c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2699988-IE8\wininet.dll : 916,992 : 03/01/2012 07:01 AM : 009e7b4c284f080608d7286484015ee5 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2722913-IE8\wininet.dll : 916,992 : 05/16/2012 11:08 AM : 6b1774334e2975aa60596e54f5ea1430 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2744842-IE8\wininet.dll : 916,992 : 07/02/2012 01:49 PM : c4300cb4d20b1159dc77e01e8a2525ec [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2761465-IE8\wininet.dll : 916,992 : 08/28/2012 11:14 AM : ff1c14bca1a797ce45dd359fa2c9eda8 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2792100-IE8\wininet.dll : 916,992 : 11/01/2012 08:17 AM : 9ad88ea663124336e88eb031f917ce20 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2809289-IE8\wininet.dll : 916,480 : 12/26/2012 04:16 PM : d175f91a4c98b8848818c9b5089f88a2 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2817183-IE8\wininet.dll : 916,480 : 02/05/2013 04:05 PM : 5aacf4b4dee1972b7952e8a747122232 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2829530-IE8\wininet.dll : 916,480 : 03/01/2013 10:06 PM : da5b96a293b006572209e5eac9f3a045 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2838727-IE8\wininet.dll : 920,064 : 04/16/2013 06:17 PM : 5c4aac5a91422c95522ecc6c26fb93c8 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2846071-IE8\wininet.dll : 920,064 : 05/07/2013 06:30 PM : ce5ba470204a3176e60721c4b63b8df3 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2862772-IE8\wininet.dll : 920,064 : 06/07/2013 05:56 PM : c087cc88d7cd554409cbb5ebc29e8e38 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2870699-IE8\wininet.dll : 920,064 : 07/25/2013 10:47 PM : d46e195d0c76d430d73576cdac763f78 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2879017-IE8\wininet.dll : 920,064 : 08/08/2013 02:05 AM : f1bd516a4446b737baefb9fbaa92f01a [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2888505-IE8\wininet.dll : 920,064 : 09/23/2013 02:33 PM : d73f1be00684e675571015b3a5880f5b [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2898785-IE8\wininet.dll : 920,064 : 10/13/2013 03:25 AM : c5acab147f9697f40ecebb4bc0247ebf [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2909921-IE8\wininet.dll : 920,064 : 10/29/2013 03:57 AM : fbf173582874c30ec5faf8f8a67d873e [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB2925418-IE8\wininet.dll : 920,064 : 02/05/2014 07:26 PM : e09551776d365bca891bbffb31ee4b4c [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll : 914,944 : 03/08/2009 04:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll : 916,480 : 10/29/2009 03:45 AM : 75240f6edbce7b85df66874407d38a4f [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll : 916,480 : 12/21/2009 03:14 PM : ff4241c74e0c0a5afffe05f584213ecb [Pos Repl]
+-> C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll : 916,480 : 02/25/2010 02:24 AM : 7a42cfed96cda7f2fb1a26d1f9f65775 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wininet.dll : 666,112 : 04/13/2008 08:12 PM : 7a4f775abb2f1c97def3e73afa2faedd [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3GDR\wininet.dll : 916,480 : 10/29/2009 03:45 AM : 75240f6edbce7b85df66874407d38a4f [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\73e29923811a3a72ca5380ec0acd4745\SP3QFE\wininet.dll : 916,480 : 10/29/2009 03:45 AM : 6af52998b90f72ff2325d84d90eda1cc [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f1062d4e51d6818acdde68ea67673088\SP3GDR\wininet.dll : 916,480 : 12/21/2009 03:14 PM : ff4241c74e0c0a5afffe05f584213ecb [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f1062d4e51d6818acdde68ea67673088\SP3QFE\wininet.dll : 916,480 : 12/21/2009 03:09 PM : 5e1f666b8955fd77e65d65c4c4d882a3 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f5ce3558cdad2d0de1884dee71734a4a\SP3GDR\wininet.dll : 916,480 : 08/29/2009 04:08 AM : cf0a5fe05bf614c24950d8faec1bc309 [Pos Repl]
+-> C:\WINDOWS\SoftwareDistribution\Download\f5ce3558cdad2d0de1884dee71734a4a\SP3QFE\wininet.dll : 916,480 : 08/29/2009 04:01 AM : 972b226bdad71c55f3cc9a72bbf8f1c1 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\wininet.dll : 920,064 : 02/24/2014 07:46 AM : c29c1990c6ca8d7b098318f5887c3bdc [Pos Repl]

* C:\WINDOWS\System32\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe : 502,272 : 08/04/2004 06:00 AM : 01c3346c241652f43aed8e2149881bfe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : 507,904 : 04/13/2008 08:12 PM : ed0ef0a136dec83df69f04118870003e [Pos Repl]

* C:\WINDOWS\System32\ws2_32.dll : 82,432 : 04/13/2008 08:12 PM : 2ccc474eb85ceaa3e1fa1726580a3e5a [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll : 82,944 : 08/04/2004 06:00 AM : 2ed0b7f12a60f90092081c50fa0ec2b2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll : 82,432 : 04/13/2008 08:12 PM : 2ccc474eb85ceaa3e1fa1726580a3e5a [Pos Repl]

* C:\WINDOWS\System32\ws2help.dll : 19,968 : 04/13/2008 08:12 PM : 9789e95e1d88eeb4b922bf3ea7779c28 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll : 19,968 : 08/04/2004 06:00 AM : 9beacb911ca61e5881102188ab7fb431 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ws2help.dll : 19,968 : 04/13/2008 08:12 PM : 9789e95e1d88eeb4b922bf3ea7779c28 [Pos Repl]

* C:\WINDOWS\System32\wscntfy.exe : 13,824 : 04/13/2008 08:12 PM : f92e1076c42fcd6db3d72d8cfe9816d5 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe : 13,824 : 08/04/2004 06:00 AM : 49911dd39e023bb6c45e4e436cfbd297 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe : 13,824 : 04/13/2008 08:12 PM : f92e1076c42fcd6db3d72d8cfe9816d5 [Pos Repl]

* C:\WINDOWS\System32\xmlprov.dll : 129,024 : 04/13/2008 08:12 PM : 295d21f14c335b53cb8154e5b1f892b9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll : 129,536 : 08/04/2004 06:00 AM : eef46dab68229a14da3d8e73c99e2959 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll : 129,024 : 04/13/2008 08:12 PM : 295d21f14c335b53cb8154e5b1f892b9 [Pos Repl]

* C:\WINDOWS\explorer.exe : 1,033,728 : 04/13/2008 08:12 PM : 12896823fb95bfb3dc9b46bcaedc9923 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\explorer.exe : 1,032,192 : 08/04/2004 06:00 AM : a0732187050030ae399b241436565e64 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\explorer.exe : 1,033,728 : 04/13/2008 08:12 PM : 12896823fb95bfb3dc9b46bcaedc9923 [Pos Repl]

* C:\WINDOWS\System32\drivers\acpiec.sys : 11,648 : 08/04/2004 06:00 AM : 9859c0f6936e723e4892d7141b1327d5 [NoSig]

* C:\WINDOWS\System32\drivers\acpi.sys : 187,776 : 04/13/2008 02:36 PM : 8fd99680a539792a30e97944fdaecf17 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\acpi.sys : 187,776 : 08/04/2004 06:00 AM : a10c7534f7223f4a73a948967d00e69b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\acpi.sys : 187,776 : 04/13/2008 02:36 PM : 8fd99680a539792a30e97944fdaecf17 [Pos Repl]

* C:\WINDOWS\System32\drivers\aec.sys : 142,592 : 04/13/2008 12:39 AM : 8bed39e3c35d6a489438b8141717a557 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\aec.sys : 142,464 : 08/04/2004 06:00 AM : 841f385c6cfaf66b58fbd898722bb4f0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\aec.sys : 142,592 : 04/13/2008 12:39 AM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl]

* C:\WINDOWS\System32\drivers\afd.sys : 138,496 : 08/17/2011 09:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys : 138,496 : 02/16/2011 09:25 AM : 8d499b1276012eb907e7a9e0f4d8fda4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138,496 : 10/16/2008 11:07 AM : 38d7b715504da4741df35e3594fe2099 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138,496 : 08/17/2011 09:41 AM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys : 138,368 : 06/20/2008 06:44 AM : d99ddffb33deacdcf20717cb520379f6 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys : 138,496 : 06/20/2008 07:40 AM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys : 138,496 : 06/20/2008 07:48 AM : d6ee6014241d034e63c49a50cb2b442a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP2QFE\afd.sys : 138,368 : 08/14/2008 05:48 AM : 6a0397376853e604de8e1e7a87fc08ac [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP3GDR\afd.sys : 138,496 : 08/14/2008 06:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys : 138,496 : 08/14/2008 06:34 AM : 4d43e74f2a1239d53929b82600f1971c [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\afd.sys : 138,368 : 08/14/2008 05:51 AM : 55e6e1c51b6d30e54335750955453702 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2503665$\afd.sys : 138,496 : 10/16/2008 10:43 AM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138,496 : 08/14/2008 06:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138,496 : 02/16/2011 09:22 AM : 355556d9e580915118cd7ef736653a89 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\afd.sys : 138,496 : 08/04/2004 06:00 AM : 5ac495f4cb807b2b98ad2ad591e6d92e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956803$\afd.sys : 138,496 : 06/20/2008 07:40 AM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB956803_0$\afd.sys : 138,368 : 06/20/2008 06:44 AM : 944ca435bfcfc82cc1ed9e3a7d731aa9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\afd.sys : 138,112 : 04/13/2008 03:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\afd.sys : 138,496 : 08/17/2011 09:49 AM : 1e44bc1e83d8fd2305f8d452db109cf9 [Pos Repl]

* C:\WINDOWS\System32\drivers\agp440.sys : 42,368 : 04/13/2008 02:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\agp440.sys : 42,368 : 08/04/2004 06:00 AM : 2c428fa0c3e3a01ed93c9b2a27d8d4bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\agp440.sys : 42,368 : 04/13/2008 02:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk6.sys : 37,376 : 04/13/2008 02:31 PM : d7701d7e72243286cc88c9973d891057 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys : 36,992 : 08/04/2004 06:00 AM : dad16a9d5c873e7219e6b43802ed316a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk6.sys : 37,376 : 04/13/2008 02:31 PM : d7701d7e72243286cc88c9973d891057 [Pos Repl]

* C:\WINDOWS\System32\drivers\amdk7.sys : 37,760 : 04/13/2008 02:31 PM : 8fce268cdbdd83b23419d1f35f42c7b1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys : 37,376 : 08/04/2004 06:00 AM : 680ad1c1bb16239e28d8f33a54a7a3c7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\amdk7.sys : 37,760 : 04/13/2008 02:31 PM : 8fce268cdbdd83b23419d1f35f42c7b1 [Pos Repl]

* C:\WINDOWS\System32\drivers\arp1394.sys : 60,800 : 04/13/2008 02:51 PM : b5b8a80875c1dededa8b02765642c32f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys : 60,800 : 08/04/2004 06:00 AM : f0d692b0bffb46e30eb3cea168bbc49f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\arp1394.sys : 60,800 : 04/13/2008 02:51 PM : b5b8a80875c1dededa8b02765642c32f [Pos Repl]

* C:\WINDOWS\System32\drivers\asyncmac.sys : 14,336 : 04/13/2008 02:57 PM : b153affac761e7f5fcfa822b9c4e97bc [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys : 14,336 : 08/04/2004 06:00 AM : 02000abf34af4c218c35d257024807d6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys : 14,336 : 04/13/2008 02:57 PM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl]

* C:\WINDOWS\System32\drivers\atapi.sys : 96,512 : 04/13/2008 02:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys : 95,360 : 08/04/2004 06:00 AM : cdfe4411a69c224bd1d11b2da92dac51 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\atapi.sys : 96,512 : 04/13/2008 02:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [Pos Repl]

* C:\WINDOWS\System32\drivers\audstub.sys : 3,072 : 08/17/2001 09:59 AM : d9f724aa26c010a217c97606b160ed68 [NoSig]

* C:\WINDOWS\System32\drivers\beep.sys : 4,224 : 08/04/2004 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [NoSig]
+-> C:\WINDOWS\system32\dllcache\beep.sys : 4,224 : 08/04/2004 06:00 AM : da1f27d85e0d1525f6621372e7b685e9 [Pos Repl]

* C:\WINDOWS\System32\drivers\bridge.sys : 71,552 : 04/13/2008 02:53 PM : f934d1b230f84e1d19dd00ac5a7a83ed [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\bridge.sys : 71,552 : 08/04/2004 06:00 AM : e4e6a0922e3d983728c9ad4e8d466954 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bridge.sys : 71,552 : 04/13/2008 02:53 PM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl]

* C:\WINDOWS\System32\drivers\bthport.sys : 272,128 : 06/13/2008 07:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys : 272,128 : 06/13/2008 05:52 AM : 956e7e86bb00e792c8ff3afb2f8e460d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys : 272,128 : 06/13/2008 07:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 272,128 : 06/13/2008 07:27 AM : 51d05d5a8a7d93ab0b1a8d6a38db3ca4 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\bthport.sys : 272,128 : 06/13/2008 09:10 AM : 95ef6f3f386d93ee1e4d9ca45a50252a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951376-v2_0$\bthport.sys : 274,304 : 08/04/2004 06:00 AM : 30b76ec553b202890e90a93a4e1a27b5 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 272,128 : 06/13/2008 07:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\bthport.sys : 273,024 : 04/13/2008 02:46 PM : 10b85171b90c449f8da71c2640b797e9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\bthport.sys : 272,128 : 06/13/2008 07:05 AM : 662bfd909447dd9cc15b1a1c366583b4 [Pos Repl]

* C:\WINDOWS\System32\drivers\cbidf2k.sys : 13,952 : 08/04/2004 06:00 AM : 90a673fc8e12a79afbed2576f6a7aaf9 [NoSig]

* C:\WINDOWS\System32\drivers\cdaudio.sys : 18,688 : 08/04/2004 06:00 AM : c1b486a7658353d33a10cc15211a873b [NoSig]

* C:\WINDOWS\System32\drivers\cdfs.sys : 63,744 : 04/13/2008 03:14 PM : c885b02847f5d2fd45a24e219ed93b32 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys : 63,744 : 08/04/2004 06:00 AM : cd7d5152df32b47f4e36f710b35aae02 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdfs.sys : 63,744 : 04/13/2008 03:14 PM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl]

* C:\WINDOWS\System32\drivers\cdrom.sys : 62,976 : 04/13/2008 02:40 PM : 1f4260cc5b42272d71f79e570a27a4fe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys : 49,536 : 08/04/2004 06:00 AM : af9c19b3100fe010496b1a27181fbf72 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\cdrom.sys : 62,976 : 04/13/2008 02:40 PM : 1f4260cc5b42272d71f79e570a27a4fe [Pos Repl]

* C:\WINDOWS\System32\drivers\classpnp.sys : 49,536 : 04/13/2008 03:16 PM : fe47dd8fe6d7768ff94ebec6c74b2719 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys : 49,664 : 08/04/2004 06:00 AM : d86173b401470f06d9810f7962969ddf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\classpnp.sys : 49,536 : 04/13/2008 03:16 PM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl]

* C:\WINDOWS\System32\drivers\cpqdap01.sys : 11,776 : 08/04/2004 06:00 AM : 9624293e55ad405415862b504ca95b73 [NoSig]

* C:\WINDOWS\System32\drivers\crusoe.sys : 36,736 : 04/13/2008 02:31 PM : f50d9bdbb25cce075e514dc07472a22f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys : 36,480 : 08/04/2004 06:00 AM : 6af1684ccaac3f7ef4ee9ba65eb0677a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\crusoe.sys : 36,736 : 04/13/2008 02:31 PM : f50d9bdbb25cce075e514dc07472a22f [Pos Repl]

* C:\WINDOWS\System32\drivers\diskdump.sys : 14,208 : 04/13/2008 02:40 PM : e65e2353a5d74ea89971cb918eeeb2f6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys : 14,208 : 08/04/2004 06:00 AM : d16c81677a9be399c63cd2ea486472a5 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\diskdump.sys : 14,208 : 04/13/2008 02:40 PM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\disk.sys : 36,352 : 04/13/2008 02:40 PM : 044452051f3e02e7963599fc8f4f3e25 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\disk.sys : 36,352 : 08/04/2004 06:00 AM : 00ca44e4534865f8a3b64f7c0984bff0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\disk.sys : 36,352 : 04/13/2008 02:40 PM : 044452051f3e02e7963599fc8f4f3e25 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmboot.sys : 799,744 : 04/13/2008 02:44 PM : d992fe1274bde0f84ad826acae022a41 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys : 799,744 : 08/04/2004 06:00 AM : c0fbb516e06e243f0cf31f597e7ebf7d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmboot.sys : 799,744 : 04/13/2008 02:44 PM : d992fe1274bde0f84ad826acae022a41 [Pos Repl]

* C:\WINDOWS\System32\drivers\dmio.sys : 153,344 : 04/13/2008 02:44 PM : 7c824cf7bbde77d95c08005717a95f6f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmio.sys : 153,344 : 08/04/2004 06:00 AM : f5e7b358a732d09f4bcf2824b88b9e28 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmio.sys : 153,344 : 04/13/2008 02:44 PM : 7c824cf7bbde77d95c08005717a95f6f [Pos Repl]

* C:\WINDOWS\System32\drivers\dmload.sys : 5,888 : 08/04/2004 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [NoSig]
+-> C:\WINDOWS\system32\dllcache\dmload.sys : 5,888 : 08/04/2004 06:00 AM : e9317282a63ca4d188c0df5e09c6ac5f [Pos Repl]

* C:\WINDOWS\System32\drivers\DMusic.sys : 52,864 : 04/13/2008 02:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys : 52,864 : 08/04/2004 02:07 AM : a6f881284ac1150e37d9ae47ff601267 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dmusic.sys : 52,864 : 04/13/2008 02:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmkaud.sys : 2,944 : 04/13/2008 02:45 PM : 8f5fcff8e8848afac920905fbd9d33c8 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys : 2,944 : 08/04/2004 06:00 AM : 1ed4dbbae9f5d558dbba4cc450e3eb2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys : 2,944 : 04/13/2008 02:45 PM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl]

* C:\WINDOWS\System32\drivers\drmk.sys : 60,160 : 04/13/2008 02:45 PM : 6cb08593487f5701d2d2254e693eafce [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\drmk.sys : 60,288 : 08/04/2004 06:00 AM : ff86422268de771d571e123eb7092c6a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\drmk.sys : 60,160 : 04/13/2008 02:45 PM : 6cb08593487f5701d2d2254e693eafce [Pos Repl]

* C:\WINDOWS\System32\drivers\dxapi.sys : 10,496 : 08/04/2004 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [NoSig]
+-> C:\WINDOWS\system32\dllcache\dxapi.sys : 10,496 : 08/04/2004 06:00 AM : fe97d0343acfdebdd578fc67cc91fa87 [Pos Repl]

* C:\WINDOWS\System32\drivers\dxg.sys : 71,168 : 04/13/2008 02:38 PM : ac7280566a7bb85cb3291f04ddc1198e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\dxg.sys : 71,040 : 08/04/2004 06:00 AM : d3dac8432110aad0b02a58b4459ab835 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\dxg.sys : 71,168 : 04/13/2008 02:38 PM : ac7280566a7bb85cb3291f04ddc1198e [Pos Repl]

* C:\WINDOWS\System32\drivers\dxgthk.sys : 3,328 : 08/04/2004 06:00 AM : a73f5d6705b1d820c19b18782e176efd [NoSig]
+-> C:\WINDOWS\system32\dllcache\dxgthk.sys : 3,328 : 08/04/2004 06:00 AM : a73f5d6705b1d820c19b18782e176efd [Pos Repl]

* C:\WINDOWS\System32\drivers\fastfat.sys : 143,744 : 04/13/2008 03:14 PM : 38d332a6d56af32635675f132548343e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys : 143,360 : 08/04/2004 06:00 AM : 3117f595e9615e04f05a54fc15a03b20 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fastfat.sys : 143,744 : 04/13/2008 03:14 PM : 38d332a6d56af32635675f132548343e [Pos Repl]

* C:\WINDOWS\System32\drivers\fdc.sys : 27,392 : 04/13/2008 02:40 PM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fdc.sys : 27,392 : 08/04/2004 06:00 AM : ced2e8396a8838e59d8fd529c680e02c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fdc.sys : 27,392 : 04/13/2008 02:40 PM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [Pos Repl]

* C:\WINDOWS\System32\drivers\fips.sys : 44,544 : 04/13/2008 02:33 PM : d45926117eb9fa946a6af572fbe1caa3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fips.sys : 34,944 : 08/04/2004 06:00 AM : e153ab8a11de5452bcf5ac7652dbf3ed [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fips.sys : 44,544 : 04/13/2008 02:33 PM : d45926117eb9fa946a6af572fbe1caa3 [Pos Repl]

* C:\WINDOWS\System32\drivers\flpydisk.sys : 20,480 : 04/13/2008 02:40 PM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys : 20,480 : 08/04/2004 06:00 AM : 0dd1de43115b93f4d85e889d7a86f548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys : 20,480 : 04/13/2008 02:40 PM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fltMgr.sys : 129,792 : 04/13/2008 02:32 PM : b2cf4b0786f8212cb92ed2b50c6db6b0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys : 124,800 : 08/04/2004 08:00 AM : 157754f0df355a9e0a6f54721914f9c6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys : 129,792 : 04/13/2008 02:32 PM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl]

* C:\WINDOWS\System32\drivers\fs_rec.sys : 7,936 : 08/04/2004 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [NoSig]
+-> C:\WINDOWS\system32\dllcache\fs_rec.sys : 7,936 : 08/04/2004 06:00 AM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [Pos Repl]

* C:\WINDOWS\System32\drivers\fsvga.sys : 12,160 : 08/04/2004 06:00 AM : 455f778ee14368468560bd7cb8c854d0 [NoSig]

* C:\WINDOWS\System32\drivers\ftdisk.sys : 125,056 : 08/04/2004 06:00 AM : 6ac26732762483366c3969c9e4d2259d [NoSig]

* C:\WINDOWS\System32\drivers\hidclass.sys : 36,864 : 04/13/2008 02:45 PM : 1af592532532a402ed7c060f6954004f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys : 36,224 : 08/04/2004 06:00 AM : 378055ab8dda86228683c697c4e11685 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidclass.sys : 36,864 : 04/13/2008 02:45 PM : 1af592532532a402ed7c060f6954004f [Pos Repl]

* C:\WINDOWS\System32\drivers\hidparse.sys : 25,088 : 07/02/2013 10:12 PM : c569ef030b11f896e123a30ac92678db [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys : 24,960 : 08/04/2004 06:00 AM : 5fff41cd5108e9051d255c37825af697 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2862335$\hidparse.sys : 24,960 : 04/13/2008 02:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\hidparse.sys : 25,088 : 07/02/2013 10:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidparse.sys : 24,960 : 04/13/2008 02:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\hidparse.sys : 25,088 : 07/02/2013 10:12 PM : c569ef030b11f896e123a30ac92678db [Pos Repl]

* C:\WINDOWS\System32\drivers\hidusb.sys : 10,368 : 04/13/2008 02:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\hidusb.sys : 9,600 : 08/04/2004 06:00 AM : 1de6783b918f540149aa69943bdfeba8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\hidusb.sys : 10,368 : 04/13/2008 02:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\http.sys : 265,728 : 10/20/2009 12:20 AM : f80a415ef82cd06ffaf0d971528ead38 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB970430\SP2QFE\http.sys : 265,728 : 10/20/2009 10:41 AM : 261bf53e1d1c21f04b4e748a6ed3d055 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB970430\SP3GDR\http.sys : 265,728 : 10/20/2009 12:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265,728 : 10/20/2009 11:21 AM : 937031c085718c1c04a9c0864625ec6b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\http.sys : 263,040 : 08/04/2004 06:00 AM : c19b522a9ae0bbc3293397f3055e80a1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\http.sys : 265,728 : 10/20/2009 12:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\http.sys : 264,832 : 04/13/2008 02:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\http.sys : 265,728 : 10/20/2009 12:20 AM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl]

* C:\WINDOWS\System32\drivers\i8042prt.sys : 52,480 : 04/13/2008 03:18 PM : 4a0b06aa8943c1e332520f7440c0aa30 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys : 52,736 : 08/04/2004 06:00 AM : 5502b58eef7486ee6f93f3f164dcb808 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys : 52,480 : 04/13/2008 03:18 PM : 4a0b06aa8943c1e332520f7440c0aa30 [Pos Repl]

* C:\WINDOWS\System32\drivers\imapi.sys : 42,112 : 04/13/2008 02:40 PM : 083a052659f5310dd8b6a6cb05edcf8e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\imapi.sys : 41,856 : 08/04/2004 06:00 AM : f8aa320c6a0409c0380e5d8a99d76ec6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\imapi.sys : 42,112 : 04/13/2008 02:40 PM : 083a052659f5310dd8b6a6cb05edcf8e [Pos Repl]

* C:\WINDOWS\System32\drivers\intelide.sys : 5,504 : 04/13/2008 02:40 PM : b5466a9250342a7aa0cd1fba13420678 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelide.sys : 5,504 : 08/04/2004 06:00 AM : 2d722b2b54ab55b2fa475eb58d7b2aad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelide.sys : 5,504 : 04/13/2008 02:40 PM : b5466a9250342a7aa0cd1fba13420678 [Pos Repl]

* C:\WINDOWS\System32\drivers\intelppm.sys : 36,352 : 04/13/2008 02:31 PM : 8c953733d8f36eb2133f5bb58808b66b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys : 36,096 : 08/04/2004 06:00 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\intelppm.sys : 36,352 : 04/13/2008 02:31 PM : 8c953733d8f36eb2133f5bb58808b66b [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0011\DriverFiles\i386\intelppm.sys : 36,096 : 08/04/2004 06:00 AM : 279fb78702454dff2bb445f238c048d2 [Pos Repl]

* C:\WINDOWS\System32\drivers\ip6fw.sys : 36,608 : 04/13/2008 02:53 PM : 3bb22519a194418d5fec05d800a19ad0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys : 29,056 : 08/04/2004 06:00 AM : 4448006b6bc60e6c027932cfc38d6855 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys : 36,608 : 04/13/2008 02:53 PM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipfltdrv.sys : 32,896 : 08/04/2004 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [NoSig]
+-> C:\WINDOWS\system32\dllcache\ipfltdrv.sys : 32,896 : 08/04/2004 06:00 AM : 731f22ba402ee4b62748adaf6363c182 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipinip.sys : 20,864 : 04/13/2008 02:57 PM : b87ab476dcf76e72010632b5550955f5 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys : 20,992 : 08/04/2004 06:00 AM : e1ec7f5da720b640cd8fb8424f1b14bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipinip.sys : 20,864 : 04/13/2008 02:57 PM : b87ab476dcf76e72010632b5550955f5 [Pos Repl]

* C:\WINDOWS\System32\drivers\ipnat.sys : 152,832 : 04/13/2008 02:57 PM : cc748ea12c6effde940ee98098bf96bb [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys : 134,912 : 08/04/2004 06:00 AM : b5a8e215ac29d24d60b4d1250ef05ace [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipnat.sys : 152,832 : 04/13/2008 02:57 PM : cc748ea12c6effde940ee98098bf96bb [Pos Repl]

* C:\WINDOWS\System32\drivers\ipsec.sys : 75,264 : 04/13/2008 03:19 PM : 23c74d75e36e7158768dd63d92789a91 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys : 74,752 : 08/04/2004 06:00 AM : 64537aa5c003a6afeee1df819062d0d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ipsec.sys : 75,264 : 04/13/2008 03:19 PM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl]

* C:\WINDOWS\System32\drivers\irenum.sys : 11,264 : 04/13/2008 02:54 PM : c93c9ff7b04d772627a3646d89f7bf89 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\irenum.sys : 11,264 : 08/04/2004 08:00 AM : 50708daa1b1cbb7d6ac1cf8f56a24410 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\irenum.sys : 11,264 : 04/13/2008 02:54 PM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl]

* C:\WINDOWS\System32\drivers\isapnp.sys : 37,248 : 04/13/2008 02:36 PM : 05a299ec56e52649b1cf2fc52d20f2d7 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys : 35,840 : 08/04/2004 06:00 AM : e504f706ccb699c2596e9a3da1596e87 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\isapnp.sys : 37,248 : 04/13/2008 02:36 PM : 05a299ec56e52649b1cf2fc52d20f2d7 [Pos Repl]

* C:\WINDOWS\System32\drivers\kbdclass.sys : 24,576 : 04/13/2008 02:39 PM : 463c1ec80cd17420a542b7f36a36f128 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys : 24,576 : 08/04/2004 06:00 AM : ebdee8a2ee5393890a1acee971c4c246 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys : 24,576 : 04/13/2008 02:39 PM : 463c1ec80cd17420a542b7f36a36f128 [Pos Repl]

* C:\WINDOWS\System32\drivers\kmixer.sys : 172,416 : 04/13/2008 02:45 PM : 692bcf44383d056aed41b045a323d378 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys : 171,776 : 08/04/2004 06:00 AM : d93cad07c5683db066b0b2d2d3790ead [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\kmixer.sys : 172,416 : 04/13/2008 02:45 PM : 692bcf44383d056aed41b045a323d378 [Pos Repl]

* C:\WINDOWS\System32\drivers\ksecdd.sys : 92,928 : 06/24/2009 07:18 AM : b467646c54cc746128904e1654c750c1 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\ksecdd.sys : 92,544 : 06/22/2009 07:35 AM : 1be7cc2535d760ae4d481576eb789f24 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3GDR\ksecdd.sys : 92,928 : 06/24/2009 07:18 AM : b467646c54cc746128904e1654c750c1 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92,928 : 06/24/2009 06:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys : 92,544 : 06/22/2009 07:34 AM : 674d3e5a593475915dc6643317192403 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92,032 : 08/04/2004 06:00 AM : eb7ffe87fd367ea8fca0506f74a87fbb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys : 92,288 : 04/13/2008 02:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ksecdd.sys : 92,928 : 06/24/2009 07:18 AM : b467646c54cc746128904e1654c750c1 [Pos Repl]

* C:\WINDOWS\System32\drivers\ks.sys : 141,056 : 04/13/2008 03:16 PM : 0753515f78df7f271a5e61c20bcd36a1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ks.sys : 140,928 : 08/04/2004 06:00 AM : b9540e258f952650de8dec68719a5c97 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ks.sys : 141,056 : 04/13/2008 03:16 PM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mcd.sys : 7,680 : 08/04/2004 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [NoSig]
+-> C:\WINDOWS\system32\dllcache\mcd.sys : 7,680 : 08/04/2004 06:00 AM : d1f8be91ed4ddb671d42e473e3fe71ab [Pos Repl]

* C:\WINDOWS\System32\drivers\mf.sys : 63,744 : 04/13/2008 02:36 PM : a7da20ab18a1bdae28b0f349e57da0d1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mf.sys : 63,744 : 08/04/2004 06:00 AM : 729d83e56c29c510258a6e9e79ffddc3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mf.sys : 63,744 : 04/13/2008 02:36 PM : a7da20ab18a1bdae28b0f349e57da0d1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mnmdd.sys : 4,224 : 08/04/2004 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [NoSig]
+-> C:\WINDOWS\system32\dllcache\mnmdd.sys : 4,224 : 08/04/2004 06:00 AM : 4ae068242760a1fb6e1a44bf4e16afa6 [Pos Repl]

* C:\WINDOWS\System32\drivers\modem.sys : 30,080 : 04/13/2008 03:00 PM : dfcbad3cec1c5f964962ae10e0bcc8e1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\modem.sys : 30,080 : 08/04/2004 06:00 AM : 6fc6f9d7acc36dca9b914565a3aeda05 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\modem.sys : 30,080 : 04/13/2008 03:00 PM : dfcbad3cec1c5f964962ae10e0bcc8e1 [Pos Repl]

* C:\WINDOWS\System32\drivers\mouclass.sys : 23,040 : 04/13/2008 02:39 PM : 35c9e97194c8cfb8430125f8dbc34d04 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys : 23,040 : 08/04/2004 06:00 AM : 34e1f0031153e491910e12551400192c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mouclass.sys : 23,040 : 04/13/2008 02:39 PM : 35c9e97194c8cfb8430125f8dbc34d04 [Pos Repl]

* C:\WINDOWS\System32\drivers\mouhid.sys : 12,160 : 08/04/2004 06:00 AM : b1c303e17fb9d46e87a98e4ba6769685 [NoSig]

* C:\WINDOWS\System32\drivers\mountmgr.sys : 42,368 : 04/13/2008 02:39 PM : a80b9a0bad1b73637dbcbba7df72d3fd [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys : 42,240 : 08/04/2004 06:00 AM : 65653f3b4477f3c63e68a9659f85ee2e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys : 42,368 : 04/13/2008 02:39 PM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl]

* C:\WINDOWS\System32\drivers\mqac.sys : 91,776 : 06/22/2009 07:48 AM : eee50bf24caeedb515a8f3b22756d3bb [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB971032\SP2QFE\mqac.sys : 91,776 : 06/22/2009 07:30 AM : 9229e191fe206628be17d1e67a5faed9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971032$\mqac.sys : 72,960 : 08/04/2004 06:00 AM : db07b0088cdfd20c2a22e675120ede34 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mqac.sys : 92,544 : 04/13/2008 02:39 PM : 70c14f5cca5cf73f8a645c73a01d8726 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mqac.sys : 91,776 : 06/22/2009 07:48 AM : eee50bf24caeedb515a8f3b22756d3bb [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxdav.sys : 180,608 : 04/13/2008 02:32 PM : 11d42bb6206f33fbb3ba0288d3ef81bd [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxdav.sys : 181,248 : 08/04/2004 06:00 AM : 46edcc8f2db2f322c24f48785cb46366 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys : 180,608 : 04/13/2008 02:32 PM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl]

* C:\WINDOWS\System32\drivers\mrxsmb.sys : 456,320 : 07/15/2011 09:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys : 457,472 : 02/17/2011 09:19 AM : fb7dfd15d760ad339837a470f0e780d3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys : 457,856 : 04/29/2011 12:47 AM : 8dd801e28eb76fda2a38907882a0036f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457,856 : 07/15/2011 09:29 AM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP2QFE\mrxsmb.sys : 455,936 : 10/24/2008 07:25 AM : d07da410091143336dae419a921aae2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP3GDR\mrxsmb.sys : 455,296 : 10/24/2008 07:21 AM : 60ae98742484e7ab80c3c1450e708148 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys : 455,936 : 10/24/2008 07:41 AM : 7170ab42b51954def2781a4d1cce65f4 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978251\SP2QFE\mrxsmb.sys : 456,832 : 12/04/2009 09:37 AM : 31422f271b5f3e257339541e76569a00 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978251\SP3GDR\mrxsmb.sys : 455,424 : 12/04/2009 02:22 PM : 421f7b922cec5a5f340e7574a98f7b7c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys : 456,832 : 12/04/2009 01:25 PM : 602549d1e8a622e5746991f6c56b21ca [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys : 457,216 : 02/24/2010 07:57 AM : d09b9f0b9960dd41e73127b7814c115f [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys : 453,760 : 12/04/2009 10:41 AM : f9692be777822ab3f1a91c34728786da [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2511455$\mrxsmb.sys : 455,680 : 02/24/2010 09:11 AM : f3aefb11abc521122b67095044169e98 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276$\mrxsmb.sys : 455,936 : 02/17/2011 09:18 AM : 0ea4d8ed179b75f8afa7998ba22285ca [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456,320 : 04/29/2011 12:19 AM : 0dc719e9b15e902346e87e9dcd5751fa [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978251$\mrxsmb.sys : 451,456 : 08/04/2004 06:00 AM : 1fd607fc67f7f7c633c3da65bfc53d18 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB980232$\mrxsmb.sys : 455,424 : 12/04/2009 02:22 PM : 421f7b922cec5a5f340e7574a98f7b7c [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456,320 : 07/15/2011 09:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys : 456,576 : 04/13/2008 03:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mrxsmb.sys : 456,320 : 07/15/2011 09:29 AM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl]

* C:\WINDOWS\System32\drivers\msfs.sys : 19,072 : 04/13/2008 02:32 PM : c941ea2454ba8350021d774daf0f1027 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msfs.sys : 19,072 : 08/04/2004 06:00 AM : 561b3a4333ca2dbdba28b5b956822519 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msfs.sys : 19,072 : 04/13/2008 02:32 PM : c941ea2454ba8350021d774daf0f1027 [Pos Repl]

* C:\WINDOWS\System32\drivers\msgpc.sys : 35,072 : 04/13/2008 02:56 PM : 0a02c63c8b144bd8c86b103dee7c86a2 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\msgpc.sys : 35,072 : 08/04/2004 06:00 AM : c0f1d4a21de5a415df8170616703debf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\msgpc.sys : 35,072 : 04/13/2008 02:56 PM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSKSSRV.sys : 7,552 : 04/13/2008 02:39 PM : d1575e71568f4d9e14ca56b7b0453bf1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys : 7,552 : 08/04/2004 06:00 AM : ae431a8dd3c1d0d0610cdbac16057ad0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys : 7,552 : 04/13/2008 02:39 PM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPCLOCK.sys : 5,376 : 04/13/2008 02:39 PM : 325bb26842fc7ccc1fcce2c457317f3e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspclock.sys : 5,376 : 08/04/2004 06:00 AM : 13e75fef9dfeb08eeded9d0246e1f448 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspclock.sys : 5,376 : 04/13/2008 02:39 PM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl]

* C:\WINDOWS\System32\drivers\MSPQM.sys : 4,992 : 04/13/2008 02:39 PM : bad59648ba099da4a17680b39730cb3d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mspqm.sys : 4,992 : 08/04/2004 06:00 AM : 1988a33ff19242576c3d0ef9ce785da7 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mspqm.sys : 4,992 : 04/13/2008 02:39 PM : bad59648ba099da4a17680b39730cb3d [Pos Repl]

* C:\WINDOWS\System32\drivers\mssmbios.sys : 15,488 : 04/13/2008 02:36 PM : af5f4f3f14a8ea2c26de30f7a1e17136 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\mssmbios.sys : 15,488 : 08/04/2004 06:00 AM : 469541f8bfd2b32659d5d463a6714bce [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys : 15,488 : 04/13/2008 02:36 PM : af5f4f3f14a8ea2c26de30f7a1e17136 [Pos Repl]

* C:\WINDOWS\System32\drivers\mup.sys : 105,472 : 04/21/2011 09:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105,472 : 04/21/2011 09:52 AM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\mup.sys : 107,904 : 08/04/2004 06:00 AM : 82035e0f41c2dd05ae41d27fe6cf7de1 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\mup.sys : 105,344 : 04/13/2008 03:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\mup.sys : 105,472 : 04/21/2011 09:37 AM : de6a75f5c270e756c5508d94b6cf68f5 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndis.sys : 182,656 : 04/13/2008 03:20 PM : 1df7f42665c94b825322fae71721130d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndis.sys : 182,912 : 08/04/2004 06:00 AM : 558635d3af1c7546d26067d5d9b6959e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndis.sys : 182,656 : 04/13/2008 03:20 PM : 1df7f42665c94b825322fae71721130d [Pos Repl]

* C:\WINDOWS\System32\drivers\ndistapi.sys : 10,496 : 07/08/2011 10:02 AM : 0109c4f3850dfbab279542515386ae22 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10,496 : 07/08/2011 09:51 AM : 091735a5f20acb1dc147383a905ae002 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndistapi.sys : 9,600 : 08/04/2004 06:00 AM : 08d43bbdacdf23f34d79e44ed35c1b4c [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndistapi.sys : 10,112 : 04/13/2008 02:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ndistapi.sys : 10,496 : 07/08/2011 10:02 AM : 0109c4f3850dfbab279542515386ae22 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndisuio.sys : 14,592 : 04/13/2008 02:55 PM : f927a4434c5028758a842943ef1a3849 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys : 12,928 : 08/04/2004 06:00 AM : 34d6cd56409da9a7ed573e1c90a308bf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys : 14,592 : 04/13/2008 02:55 PM : f927a4434c5028758a842943ef1a3849 [Pos Repl]

* C:\WINDOWS\System32\drivers\ndiswan.sys : 91,520 : 04/13/2008 03:20 PM : edc1531a49c80614b2cfda43ca8659ab [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys : 91,776 : 08/04/2004 06:00 AM : 0b90e255a9490166ab368cd55a529893 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys : 91,520 : 04/13/2008 03:20 PM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl]

* C:\WINDOWS\System32\drivers\ndproxy.sys : 40,960 : 11/27/2013 04:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40,960 : 11/03/2010 01:55 AM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\ndproxy.sys : 38,016 : 08/04/2004 06:00 AM : 59fc3fb44d2669bc144fd87826bb571f [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2914368$\ndproxy.sys : 40,960 : 11/02/2010 11:17 AM : 9282bd12dfb069d3889eb3fcc1000a9b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ndproxy.sys : 40,576 : 04/13/2008 02:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\ndproxy.sys : 40,960 : 11/27/2013 04:21 PM : 2f597bb467e05b1fe3830eabd821b8e0 [Pos Repl]

* C:\WINDOWS\System32\drivers\netbios.sys : 34,688 : 04/13/2008 02:56 PM : 5d81cf9a2f1a3a756b66cf684911cdf0 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbios.sys : 34,560 : 08/04/2004 06:00 AM : 3a2aca8fc1d7786902ca434998d7ceb4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbios.sys : 34,688 : 04/13/2008 02:56 PM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl]

* C:\WINDOWS\System32\drivers\netbt.sys : 162,816 : 04/13/2008 03:21 PM : 74b2b2f5bea5e9a3dc021d685551bd3d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\netbt.sys : 162,816 : 08/04/2004 06:00 AM : 0c80e410cd2f47134407ee7dd19cc86b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\netbt.sys : 162,816 : 04/13/2008 03:21 PM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl]

* C:\WINDOWS\System32\drivers\nic1394.sys : 61,824 : 04/13/2008 02:51 PM : e9e47cfb2d461fa0fc75b7a74c6383ea [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys : 61,824 : 08/04/2004 06:00 AM : 5c5c53db4fef16cf87b9911c7e8c6fbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nic1394.sys : 61,824 : 04/13/2008 02:51 PM : e9e47cfb2d461fa0fc75b7a74c6383ea [Pos Repl]

* C:\WINDOWS\System32\drivers\nikedrv.sys : 12,032 : 08/04/2004 06:00 AM : be984d604d91c217355cdd3737aad25d [NoSig]

* C:\WINDOWS\System32\drivers\nmnt.sys : 40,320 : 04/13/2008 02:53 PM : 1e421a6bcf2203cc61b821ada9de878b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys : 40,320 : 08/04/2004 06:00 AM : 60cf8c7192b3614f240838ddbaa4a245 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nmnt.sys : 40,320 : 04/13/2008 02:53 PM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl]

* C:\WINDOWS\System32\drivers\npfs.sys : 30,848 : 04/13/2008 02:32 PM : 3182d64ae053d6fb034f44b6def8034a [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\npfs.sys : 30,848 : 08/04/2004 06:00 AM : 4f601bcb8f64ea3ac0994f98fed03f8e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\npfs.sys : 30,848 : 04/13/2008 02:32 PM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl]

* C:\WINDOWS\System32\drivers\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys : 574,592 : 08/04/2004 06:00 AM : b78be402c3f63dd55521f73876951cdd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\ntfs.sys : 574,976 : 04/13/2008 03:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl]

* C:\WINDOWS\System32\drivers\null.sys : 2,944 : 08/04/2004 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [NoSig]
+-> C:\WINDOWS\system32\dllcache\null.sys : 2,944 : 08/04/2004 06:00 AM : 73c1e1f395918bc2c6dd67af7591a3ad [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnkflt.sys : 12,416 : 08/04/2004 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [NoSig]
+-> C:\WINDOWS\system32\dllcache\nwlnkflt.sys : 12,416 : 08/04/2004 06:00 AM : b305f3fad35083837ef46a0bbce2fc57 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnkfwd.sys : 32,512 : 08/04/2004 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [NoSig]
+-> C:\WINDOWS\system32\dllcache\nwlnkfwd.sys : 32,512 : 08/04/2004 06:00 AM : c99b3415198d1aab7227f2c88fd664b9 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnkipx.sys : 88,320 : 04/13/2008 02:56 PM : 8b8b1be2dba4025da6786c645f77f123 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys : 88,448 : 08/04/2004 06:00 AM : 79ea3fcda7067977625b3363a2657c80 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys : 88,320 : 04/13/2008 02:56 PM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnknb.sys : 63,232 : 08/04/2004 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [NoSig]
+-> C:\WINDOWS\system32\dllcache\nwlnknb.sys : 63,232 : 08/04/2004 06:00 AM : 56d34a67c05e94e16377c60609741ff8 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwlnkspx.sys : 55,936 : 08/04/2004 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [NoSig]
+-> C:\WINDOWS\system32\dllcache\nwlnkspx.sys : 55,936 : 08/04/2004 06:00 AM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [Pos Repl]

* C:\WINDOWS\System32\drivers\nwrdr.sys : 163,584 : 04/13/2008 02:34 PM : 36b9b950e3d2e100970a48d8bad86740 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\nwrdr.sys : 163,584 : 08/04/2004 06:00 AM : 03373a79440473062c6f3aedec6a49c8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\nwrdr.sys : 163,584 : 04/13/2008 02:34 PM : 36b9b950e3d2e100970a48d8bad86740 [Pos Repl]

* C:\WINDOWS\System32\drivers\oprghdlr.sys : 3,456 : 08/04/2004 06:00 AM : 4bb30ddc53ebc76895e38694580cdfe9 [NoSig]

* C:\WINDOWS\System32\drivers\p3.sys : 42,752 : 04/13/2008 02:31 PM : c90018bafdc7098619a4a95b046b30f3 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\p3.sys : 42,496 : 08/04/2004 06:00 AM : 3e16eff2a6fed2d8d7f5a66dfe65d183 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\p3.sys : 42,752 : 04/13/2008 02:31 PM : c90018bafdc7098619a4a95b046b30f3 [Pos Repl]

* C:\WINDOWS\System32\drivers\parport.sys : 80,128 : 04/13/2008 02:40 PM : 5575faf8f97ce5e713d108c2a58d7c7c [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\parport.sys : 80,128 : 08/04/2004 06:00 AM : 29744eb4ce659dfe3b4122deb45bc478 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\parport.sys : 80,128 : 04/13/2008 02:40 PM : 5575faf8f97ce5e713d108c2a58d7c7c [Pos Repl]

* C:\WINDOWS\System32\drivers\partmgr.sys : 19,712 : 04/13/2008 02:40 PM : beb3ba25197665d82ec7065b724171c6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\partmgr.sys : 18,688 : 08/04/2004 06:00 AM : 3334430c29dc338092f79c38ef7b4cd0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\partmgr.sys : 19,712 : 04/13/2008 02:40 PM : beb3ba25197665d82ec7065b724171c6 [Pos Repl]

* C:\WINDOWS\System32\drivers\parvdm.sys : 6,784 : 08/04/2004 06:00 AM : 70e98b3fd8e963a6a46a2e6247e0bea1 [NoSig]
+-> C:\WINDOWS\system32\dllcache\parvdm.sys : 6,784 : 08/04/2004 06:00 AM : 70e98b3fd8e963a6a46a2e6247e0bea1 [Pos Repl]

* C:\WINDOWS\System32\drivers\pciidex.sys : 24,960 : 04/13/2008 02:40 PM : 52e60f29221d0d1ac16737e8dbf7c3e9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys : 25,088 : 08/04/2004 06:00 AM : 520b91ab011456b940d9b05fc91108ff [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pciidex.sys : 24,960 : 04/13/2008 02:40 PM : 52e60f29221d0d1ac16737e8dbf7c3e9 [Pos Repl]

* C:\WINDOWS\System32\drivers\pci.sys : 68,224 : 04/13/2008 02:36 PM : a219903ccf74233761d92bef471a07b1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pci.sys : 68,224 : 08/04/2004 06:00 AM : 8086d9979234b603ad5bc2f5d890b234 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pci.sys : 68,224 : 04/13/2008 02:36 PM : a219903ccf74233761d92bef471a07b1 [Pos Repl]

* C:\WINDOWS\System32\drivers\pcmcia.sys : 120,192 : 04/13/2008 02:36 PM : 9e89ef60e9ee05e3f2eef2da7397f1c1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys : 119,936 : 08/04/2004 06:00 AM : 82a087207decec8456fbe8537947d579 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys : 120,192 : 04/13/2008 02:36 PM : 9e89ef60e9ee05e3f2eef2da7397f1c1 [Pos Repl]

* C:\WINDOWS\System32\drivers\portcls.sys : 146,048 : 04/13/2008 03:19 PM : e82a496c3961efc6828b508c310ce98f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\portcls.sys : 145,792 : 08/04/2004 06:00 AM : 5b0f00e43a7094c0b7e433cb42c79164 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\portcls.sys : 146,048 : 04/13/2008 03:19 PM : e82a496c3961efc6828b508c310ce98f [Pos Repl]

* C:\WINDOWS\System32\drivers\processr.sys : 35,840 : 04/13/2008 02:31 PM : a32bebaf723557681bfc6bd93e98bd26 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\processr.sys : 35,328 : 08/04/2004 06:00 AM : 0d97d88720a4087ec93af7dbb303b30a [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\processr.sys : 35,840 : 04/13/2008 02:31 PM : a32bebaf723557681bfc6bd93e98bd26 [Pos Repl]

* C:\WINDOWS\System32\drivers\psched.sys : 69,120 : 04/13/2008 02:56 PM : 09298ec810b07e5d582cb3a3f9255424 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\psched.sys : 69,120 : 08/04/2004 06:00 AM : 48671f327553dcf1d27f6197f622a668 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\psched.sys : 69,120 : 04/13/2008 02:56 PM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl]

* C:\WINDOWS\System32\drivers\ptilink.sys : 17,792 : 08/04/2004 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [NoSig]
+-> C:\WINDOWS\system32\dllcache\ptilink.sys : 17,792 : 08/04/2004 06:00 AM : 80d317bd1c3dbc5d4fe7b1678c60cadd [Pos Repl]

* C:\WINDOWS\System32\drivers\rasacd.sys : 8,832 : 08/04/2004 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [NoSig]
+-> C:\WINDOWS\system32\dllcache\rasacd.sys : 8,832 : 08/04/2004 06:00 AM : fe0d99d6f31e4fad8159f690d68ded9c [Pos Repl]

* C:\WINDOWS\System32\drivers\rasl2tp.sys : 51,328 : 04/13/2008 03:19 PM : 11b4a627bc9614b885c4969bfa5ff8a6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys : 51,328 : 08/04/2004 06:00 AM : 98faeb4a4dcf812ba1c6fca4aa3e115c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys : 51,328 : 04/13/2008 03:19 PM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspppoe.sys : 41,472 : 04/13/2008 02:57 PM : 5bc962f2654137c9909c3d4603587dee [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspppoe.sys : 41,472 : 08/04/2004 06:00 AM : 7306eeed8895454cbed4669be9f79faa [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys : 41,472 : 04/13/2008 02:57 PM : 5bc962f2654137c9909c3d4603587dee [Pos Repl]

* C:\WINDOWS\System32\drivers\raspptp.sys : 48,384 : 04/13/2008 03:19 PM : efeec01b1d3cf84f16ddd24d9d9d8f99 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys : 48,384 : 08/04/2004 06:00 AM : 1c5cc65aac0783c344f16353e60b72ac [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\raspptp.sys : 48,384 : 04/13/2008 03:19 PM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl]

* C:\WINDOWS\System32\drivers\raspti.sys : 16,512 : 08/04/2004 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [NoSig]
+-> C:\WINDOWS\system32\dllcache\raspti.sys : 16,512 : 08/04/2004 06:00 AM : fdbb1d60066fcfbb7452fd8f9829b242 [Pos Repl]

* C:\WINDOWS\System32\drivers\rawwan.sys : 34,432 : 08/04/2004 06:00 AM : 01524cd237223b18adbb48f70083f101 [NoSig]
+-> C:\WINDOWS\system32\dllcache\rawwan.sys : 34,432 : 08/04/2004 06:00 AM : 01524cd237223b18adbb48f70083f101 [Pos Repl]

* C:\WINDOWS\System32\drivers\rdbss.sys : 175,744 : 04/13/2008 03:28 PM : 7ad224ad1a1437fe28d89cf22b17780a [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys : 176,512 : 08/04/2004 06:00 AM : 29d66245adba878fff574cd66abd2884 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdbss.sys : 175,744 : 04/13/2008 03:28 PM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpcdd.sys : 4,224 : 08/04/2004 06:00 AM : 4912d5b403614ce99c28420f75353332 [NoSig]
+-> C:\WINDOWS\system32\dllcache\rdpcdd.sys : 4,224 : 08/04/2004 06:00 AM : 4912d5b403614ce99c28420f75353332 [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpdr.sys : 196,224 : 04/13/2008 02:32 PM : 15cabd0f7c00c47c70124907916af3f1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys : 196,864 : 08/04/2004 02:01 AM : a2cae2c60bc37e0751ef9dda7ceaf4ad [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys : 196,224 : 04/13/2008 02:32 PM : 15cabd0f7c00c47c70124907916af3f1 [Pos Repl]

* C:\WINDOWS\System32\drivers\rdpwd.sys : 139,784 : 07/04/2012 10:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys : 139,656 : 06/24/2011 10:09 AM : 3348e61a78ba4f79c795aad6565d3b6f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139,784 : 01/09/2012 12:19 AM : 2d293b720c206473a05950ce007db12a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2685939\SP3QFE\rdpwd.sys : 139,656 : 05/02/2012 09:45 AM : 997c59b9955f911ec460241dd9e01b04 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2723135\SP3QFE\rdpwd.sys : 139,784 : 07/04/2012 09:59 AM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys : 139,400 : 08/04/2004 08:00 AM : d4f5643d7714ef499ae9527fdcd50894 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2570222$\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139,656 : 06/24/2011 10:10 AM : fc105dd312ed64eb66bff111e8ec6eac [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2685939$\rdpwd.sys : 139,784 : 01/09/2012 12:20 AM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2723135$\rdpwd.sys : 139,656 : 05/02/2012 09:46 AM : 6589db6e5969f8eee594cf71171c5028 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys : 139,656 : 04/13/2008 08:13 PM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rdpwd.sys : 139,784 : 07/04/2012 10:05 AM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl]

* C:\WINDOWS\System32\drivers\redbook.sys : 57,600 : 04/13/2008 02:40 PM : f828dd7e1419b6653894a8f97a0094c5 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\redbook.sys : 57,472 : 08/03/2004 06:59 PM : b31b4588e4086d8d84adbf9845c2402b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\redbook.sys : 57,600 : 04/13/2008 02:40 PM : f828dd7e1419b6653894a8f97a0094c5 [Pos Repl]

* C:\WINDOWS\System32\drivers\rmcast.sys : 203,136 : 05/08/2008 10:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys : 203,008 : 05/08/2008 08:14 AM : b1f077190ba1cfa0a2a2afae9e7fde2b [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys : 203,136 : 05/08/2008 10:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203,136 : 05/08/2008 09:58 AM : c711645c76b8ed87c021bf6165e52795 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\rmcast.sys : 202,752 : 05/08/2008 08:28 AM : d18208ed6c768663b08c972eaa7a8b60 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB950762_0$\rmcast.sys : 200,064 : 08/04/2004 06:00 AM : 35e81b908ae4e97fc7bdf4607c516ff4 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rmcast.sys : 202,624 : 04/13/2008 02:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\rmcast.sys : 203,136 : 05/08/2008 10:02 AM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl]

* C:\WINDOWS\System32\drivers\rndismp.sys : 30,592 : 04/13/2008 02:56 PM : 601844cbcf617ff8c868130ca5b2039d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\rndismp.sys : 30,080 : 08/04/2004 06:00 AM : 7ce8b277f3207ea82d7d22ad348befc6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\rndismp.sys : 30,592 : 04/13/2008 02:56 PM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl]

* C:\WINDOWS\System32\drivers\rootmdm.sys : 5,888 : 08/04/2004 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [NoSig]
+-> C:\WINDOWS\system32\dllcache\rootmdm.sys : 5,888 : 08/04/2004 06:00 AM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [Pos Repl]

* C:\WINDOWS\System32\drivers\scsiport.sys : 96,384 : 04/13/2008 02:40 PM : 76c465f570e90c28942d52ccb2580a10 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys : 96,256 : 08/04/2004 06:00 AM : d7fd0ff761e28ac0ea35ad71e0cd67e9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\scsiport.sys : 96,384 : 04/13/2008 02:40 PM : 76c465f570e90c28942d52ccb2580a10 [Pos Repl]

* C:\WINDOWS\System32\drivers\sdbus.sys : 79,232 : 04/13/2008 02:36 PM : 8d04819a3ce51b9eb47e5689b44d43c4 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sdbus.sys : 67,584 : 08/04/2004 06:00 AM : 02fc71b020ec8700ee8a46c58bc6f276 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sdbus.sys : 79,232 : 04/13/2008 02:36 PM : 8d04819a3ce51b9eb47e5689b44d43c4 [Pos Repl]

* C:\WINDOWS\System32\drivers\serenum.sys : 15,744 : 04/13/2008 02:40 PM : 0f29512ccd6bead730039fb4bd2c85ce [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serenum.sys : 15,488 : 08/04/2004 06:00 AM : a2d868aeeff612e70e213c451a70cafb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serenum.sys : 15,744 : 04/13/2008 02:40 PM : 0f29512ccd6bead730039fb4bd2c85ce [Pos Repl]

* C:\WINDOWS\System32\drivers\serial.sys : 64,512 : 04/13/2008 03:15 PM : cca207a8896d4c6a0c9ce29a4ae411a7 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\serial.sys : 64,896 : 08/04/2004 06:00 AM : cd9404d115a00d249f70a371b46d5a26 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\serial.sys : 64,512 : 04/13/2008 03:15 PM : cca207a8896d4c6a0c9ce29a4ae411a7 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffdisk.sys : 11,904 : 04/13/2008 02:40 PM : 0fa803c64df0914b41f807ea276bf2a6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffdisk.sys : 11,136 : 08/04/2004 06:00 AM : 1d9f1bec651815741f088a8fb88e17ee [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys : 11,904 : 04/13/2008 02:40 PM : 0fa803c64df0914b41f807ea276bf2a6 [Pos Repl]

* C:\WINDOWS\System32\drivers\sffp_sd.sys : 11,008 : 04/13/2008 02:40 PM : c17c331e435ed8737525c86a7557b3ac [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sffp_sd.sys : 10,240 : 08/04/2004 06:00 AM : 586499fd312ffd7f78553f408e71682e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys : 11,008 : 04/13/2008 02:40 PM : c17c331e435ed8737525c86a7557b3ac [Pos Repl]

* C:\WINDOWS\System32\drivers\sfloppy.sys : 11,392 : 04/13/2008 02:40 PM : 8e6b8c671615d126fdc553d1e2de5562 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys : 11,392 : 08/04/2004 06:00 AM : 0d13b6df6e9e101013a7afb0ce629fe0 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys : 11,392 : 04/13/2008 02:40 PM : 8e6b8c671615d126fdc553d1e2de5562 [Pos Repl]

* C:\WINDOWS\System32\drivers\smclib.sys : 14,592 : 08/04/2004 06:00 AM : 017daecf0ed3aa731313433601ec40fa [NoSig]
+-> C:\WINDOWS\system32\dllcache\smclib.sys : 14,592 : 08/04/2004 06:00 AM : 017daecf0ed3aa731313433601ec40fa [Pos Repl]

* C:\WINDOWS\System32\drivers\sonydcam.sys : 25,344 : 04/13/2008 02:46 PM : 489703624dac94ed943c2abda022a1cd [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys : 25,472 : 08/04/2004 06:00 AM : addc9e4757a68ab60562ad3cb9c288d6 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys : 25,344 : 04/13/2008 02:46 PM : 489703624dac94ed943c2abda022a1cd [Pos Repl]

* C:\WINDOWS\System32\drivers\splitter.sys : 6,272 : 04/13/2008 02:45 PM : ab8b92451ecb048a4d1de7c3ffcb4a9f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\splitter.sys : 6,400 : 08/04/2004 02:07 AM : 8e186b8f23295d1e42c573b82b80d548 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\splitter.sys : 6,272 : 04/13/2008 02:45 PM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl]

* C:\WINDOWS\System32\drivers\sr.sys : 73,472 : 04/13/2008 02:36 PM : 76bb022c2fb6902fd5bdd4f78fc13a5d [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sr.sys : 73,472 : 08/04/2004 08:00 AM : e41b6d037d6cd08461470af04500dc24 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sr.sys : 73,472 : 04/13/2008 02:36 PM : 76bb022c2fb6902fd5bdd4f78fc13a5d [Pos Repl]

* C:\WINDOWS\System32\drivers\srv.sys : 357,888 : 02/17/2011 09:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357,248 : 08/26/2010 09:37 AM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357,888 : 02/17/2011 09:19 AM : 9b390283569ea58d43d2586032b892f5 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP2QFE\srv.sys : 333,184 : 12/11/2008 06:24 AM : 6bfa2b79451f961d4a3dd896659193df [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP3GDR\srv.sys : 333,952 : 12/11/2008 06:57 AM : 3bb03f2ba89d2be417206c373d2af17c [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys : 333,952 : 12/11/2008 08:33 AM : e89b42b216bc86ada4345908284519cb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971468\SP2QFE\srv.sys : 352,640 : 12/31/2009 11:06 AM : d4af9861c3b6a2163d26dc6b9cf05e2a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971468\SP3GDR\srv.sys : 353,792 : 12/31/2009 12:50 AM : 89220b427890aa1dffd1a02648ae51c3 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB971468\SP3QFE\srv.sys : 353,792 : 01/01/2010 03:58 AM : 30efed0c77d59ae0cacb0b5c756767ed [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB982214\SP3QFE\srv.sys : 354,304 : 06/21/2010 10:18 AM : 422e4508508015c7d12f40bf9763f158 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\srv.sys : 352,640 : 12/31/2009 12:14 AM : 7a4f147cc6b133f905f6e65e2f8669fb [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2345886$\srv.sys : 354,304 : 06/21/2010 11:27 AM : da852e3e0bf1cea75d756f9866241e57 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 357,248 : 08/26/2010 09:39 AM : 0f6aefad3641a657e18081f52d0c15af [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB971468$\srv.sys : 336,256 : 08/04/2004 06:00 AM : 20b7e396720353e4117d64d9dcb926ca [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB982214$\srv.sys : 353,792 : 12/31/2009 12:50 AM : 89220b427890aa1dffd1a02648ae51c3 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\srv.sys : 334,848 : 04/13/2008 03:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\srv.sys : 357,888 : 02/17/2011 09:18 AM : 47ddfc2f003f7f9f0592c6874962a2e7 [Pos Repl]

* C:\WINDOWS\System32\drivers\stream.sys : 49,408 : 04/13/2008 02:45 PM : 3e5d89099ded9e86e5639f411693218f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\stream.sys : 48,640 : 08/04/2004 06:00 AM : c43356072eb3e88cd62958db10cead47 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\stream.sys : 49,408 : 04/13/2008 02:45 PM : 3e5d89099ded9e86e5639f411693218f [Pos Repl]

* C:\WINDOWS\System32\drivers\swenum.sys : 4,352 : 04/13/2008 02:39 PM : 3941d127aef12e93addf6fe6ee027e0f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swenum.sys : 4,352 : 08/04/2004 06:00 AM : 03c1bae4766e2450219d20b993d6e046 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swenum.sys : 4,352 : 04/13/2008 02:39 PM : 3941d127aef12e93addf6fe6ee027e0f [Pos Repl]

* C:\WINDOWS\System32\drivers\swmidi.sys : 56,576 : 04/13/2008 02:45 PM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys : 54,272 : 08/04/2004 06:00 AM : 94abc808fc4b6d7d2bbf42b85e25bb4d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\swmidi.sys : 56,576 : 04/13/2008 02:45 PM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl]

* C:\WINDOWS\System32\drivers\sysaudio.sys : 60,800 : 04/13/2008 03:15 PM : 8b83f3ed0f1688b4958f77cd6d2bf290 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys : 60,800 : 08/04/2004 06:00 AM : 650ad082d46bac0e64c9c0e0928492fd [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys : 60,800 : 04/13/2008 03:15 PM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl]

* C:\WINDOWS\System32\drivers\tape.sys : 14,976 : 04/13/2008 02:40 PM : fd6093e3decd925f1cffc8a0dd539d72 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tape.sys : 14,976 : 08/04/2004 06:00 AM : a2a9ca0d1a9ac1ff54220aa0789fe5cf [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tape.sys : 14,976 : 04/13/2008 02:40 PM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl]

* C:\WINDOWS\System32\drivers\tcpip6.sys : 226,880 : 02/11/2010 08:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 07:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys : 225,920 : 06/20/2008 05:32 AM : 7195e0ce397545e657a81ece9dfbc1c9 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys : 225,856 : 06/20/2008 07:08 AM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys : 225,856 : 06/20/2008 07:16 AM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226,880 : 02/11/2010 07:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys : 225,920 : 06/20/2008 05:52 AM : 00586ed87ab564b03870a2a3dcc84b55 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\tcpip6.sys : 223,616 : 08/04/2004 06:00 AM : 4d58bb1ae8841aafd8790ad7e1e3b8ea [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225,856 : 06/20/2008 07:08 AM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys : 225,664 : 04/13/2008 03:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\tcpip6.sys : 226,880 : 02/11/2010 08:02 AM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [Pos Repl]

* C:\WINDOWS\System32\Drivers\tcpip.sys : 361,600 : 06/20/2008 07:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 07:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys : 360,960 : 06/20/2008 06:44 AM : 744e57c99232201ae98c49168b918f48 [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys : 361,600 : 06/20/2008 07:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]
+-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys : 361,600 : 06/20/2008 07:59 AM : ad978a1b783b5719720cff204b666c8e [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys : 360,320 : 06/20/2008 06:45 AM : 2a5554fc5b1e04e131230e3ce035c3f9 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys : 359,040 : 08/04/2004 06:00 AM : 9f4b36614a0fc234525ba224957de55c [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tcpip.sys : 361,344 : 04/13/2008 03:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\tcpip.sys : 361,600 : 06/20/2008 07:51 AM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl]

* C:\WINDOWS\System32\drivers\tdi.sys : 19,072 : 04/13/2008 03:00 PM : 0539d5e53587f82d1b4fd74c5be205cf [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdi.sys : 18,560 : 08/04/2004 06:00 AM : 6891b74ab9a016064e82a419388d0601 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdi.sys : 19,072 : 04/13/2008 03:00 PM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl]

* C:\WINDOWS\System32\drivers\tdpipe.sys : 12,040 : 04/13/2008 08:13 PM : 6471a66807f5e104e4885f5b67349397 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys : 12,040 : 08/04/2004 08:00 AM : 38d437cf2d98965f239b0abcd66dcb0f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys : 12,040 : 04/13/2008 08:13 PM : 6471a66807f5e104e4885f5b67349397 [Pos Repl]

* C:\WINDOWS\System32\drivers\tdtcp.sys : 21,896 : 04/13/2008 08:13 PM : c56b6d0402371cf3700eb322ef3aaf61 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys : 21,896 : 08/04/2004 08:00 AM : ed0580af02502d00ad8c4c066b156be9 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys : 21,896 : 04/13/2008 08:13 PM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl]

* C:\WINDOWS\System32\drivers\termdd.sys : 40,840 : 04/13/2008 08:13 PM : 88155247177638048422893737429d9e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\termdd.sys : 40,840 : 08/04/2004 04:01 AM : a540a99c281d933f3d69d55e48727f47 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\termdd.sys : 40,840 : 04/13/2008 08:13 PM : 88155247177638048422893737429d9e [Pos Repl]

* C:\WINDOWS\System32\drivers\tosdvd.sys : 51,712 : 08/04/2004 06:00 AM : 699450901c5ccfd82357cbc531cedd23 [NoSig]

* C:\WINDOWS\System32\drivers\tunmp.sys : 12,288 : 04/13/2008 02:56 PM : 8f861eda21c05857eb8197300a92501c [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys : 12,416 : 08/04/2004 06:00 AM : 87a0e9e18c10a9e454238e3330e2a26d [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\tunmp.sys : 12,288 : 04/13/2008 02:56 PM : 8f861eda21c05857eb8197300a92501c [Pos Repl]

* C:\WINDOWS\System32\drivers\udfs.sys : 66,048 : 04/13/2008 02:32 PM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\udfs.sys : 66,176 : 08/04/2004 06:00 AM : 12f70256f140cd7d52c58c7048fde657 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\udfs.sys : 66,048 : 04/13/2008 02:32 PM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl]

* C:\WINDOWS\System32\drivers\update.sys : 384,768 : 04/13/2008 02:39 PM : 402ddc88356b1bac0ee3dd1580c76a31 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\update.sys : 209,408 : 08/04/2004 06:00 AM : aff2e5045961bbc0a602bb6f95eb1345 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\update.sys : 384,768 : 04/13/2008 02:39 PM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl]

* C:\WINDOWS\System32\drivers\usb8023.sys : 12,928 : 02/11/2013 08:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [NoSig]
+-> C:\WINDOWS\$hf_mig$\KB2807986\SP3QFE\usb8023.sys : 12,928 : 02/11/2013 08:43 PM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl]
+-> C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys : 12,672 : 08/04/2004 06:00 AM : af090265ec388bab320f1ff7e7a7d5ea [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2807986$\usb8023.sys : 12,800 : 04/13/2008 02:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usb8023.sys : 12,800 : 04/13/2008 02:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usb8023.sys : 12,928 : 02/11/2013 08:32 PM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd2.sys : 25,728 : 04/13/2008 02:45 PM : ce97845d2e3f0d274b8bac1ed07c6149 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd2.sys : 23,936 : 08/04/2004 06:00 AM : 61018ba9df6b63e51d9753c980e73ec2 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys : 25,728 : 04/13/2008 02:45 PM : ce97845d2e3f0d274b8bac1ed07c6149 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbcamd.sys : 25,600 : 04/13/2008 02:45 PM : 1c1a47b40c23358245aa8d0443b6935e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd.sys : 23,808 : 08/04/2004 06:00 AM : 2654eecc6fb13603ebddcd5c8ea943d1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys : 25,600 : 04/13/2008 02:45 PM : 1c1a47b40c23358245aa8d0443b6935e [Pos Repl]

* C:\WINDOWS\System32\drivers\usbccgp.sys : 32,384 : 08/08/2013 08:55 PM : 1b611611c28d2df25bc057d79c6f13fc [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbccgp.sys : 31,616 : 08/04/2004 06:00 AM : bffd9f120cc63bcbaa3d840f3eef9f79 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2862330$\usbccgp.sys : 32,128 : 04/13/2008 02:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\usbccgp.sys : 32,384 : 08/08/2013 08:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys : 32,128 : 04/13/2008 02:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usbccgp.sys : 32,384 : 08/08/2013 08:55 PM : 1b611611c28d2df25bc057d79c6f13fc [Pos Repl]
+-> C:\WINDOWS\system32\ReinstallBackups\0012\DriverFiles\i386\usbccgp.sys : 32,128 : 04/13/2008 02:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbd.sys : 5,376 : 08/08/2013 08:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [NoSig]
+-> C:\WINDOWS\$NtUninstallKB2862330$\usbd.sys : 4,736 : 08/04/2004 06:00 AM : 596eb39b50d6ebd9b734dc4ae0544693 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\usbd.sys : 5,376 : 08/08/2013 08:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usbd.sys : 5,376 : 08/08/2013 08:55 PM : 04fe5ef6ed4818ec4839ea5c611a6310 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbehci.sys : 30,336 : 03/18/2009 07:02 AM : 4bac8df07f1d8434fc640e677a62204e [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys : 26,624 : 08/04/2004 06:00 AM : 15e993ba2f6946b2bfbbfcd30398621e [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2862330$\usbehci.sys : 30,208 : 04/13/2008 02:45 PM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\usbehci.sys : 30,336 : 03/18/2009 07:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbehci.sys : 30,208 : 04/13/2008 02:45 PM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usbehci.sys : 30,336 : 03/18/2009 07:02 AM : 4bac8df07f1d8434fc640e677a62204e [Pos Repl]

* C:\WINDOWS\System32\drivers\usbhub.sys : 59,520 : 04/13/2008 02:45 PM : 1ab3cdde553b6e064d2e754efe20285c [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys : 57,600 : 08/04/2004 06:00 AM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbhub.sys : 59,520 : 04/13/2008 02:45 PM : 1ab3cdde553b6e064d2e754efe20285c [Pos Repl]

* C:\WINDOWS\System32\drivers\usbintel.sys : 15,872 : 04/13/2008 02:45 PM : 290913dc4f1125e5a82de52579a44c43 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys : 16,000 : 08/04/2004 06:00 AM : 2853fd4c4489e0f8bfcf78efcdb7e998 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbintel.sys : 15,872 : 04/13/2008 02:45 PM : 290913dc4f1125e5a82de52579a44c43 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbport.sys : 144,128 : 08/08/2013 08:55 PM : 6df35ca139c3bc15cc74390abb114efe [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbport.sys : 142,976 : 08/04/2004 06:00 AM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl]
+-> C:\WINDOWS\$NtUninstallKB2862330$\usbport.sys : 143,872 : 04/13/2008 02:45 PM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]
+-> C:\WINDOWS\Driver Cache\i386\usbport.sys : 144,128 : 08/08/2013 08:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbport.sys : 143,872 : 04/13/2008 02:45 PM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl]
+-> C:\WINDOWS\system32\dllcache\usbport.sys : 144,128 : 08/08/2013 08:55 PM : 6df35ca139c3bc15cc74390abb114efe [Pos Repl]

* C:\WINDOWS\System32\drivers\USBSTOR.sys : 26,368 : 04/13/2008 02:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys : 26,496 : 08/04/2004 06:00 AM : 6cd7b22193718f1d17a47a1cd6d37e75 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbstor.sys : 26,368 : 04/13/2008 02:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl]

* C:\WINDOWS\System32\drivers\usbuhci.sys : 20,608 : 04/13/2008 02:45 PM : 26496f9dee2d787fc3e61ad54821ffe6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys : 20,480 : 08/04/2004 06:00 AM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys : 20,608 : 04/13/2008 02:45 PM : 26496f9dee2d787fc3e61ad54821ffe6 [Pos Repl]

* C:\WINDOWS\System32\drivers\vga.sys : 20,992 : 04/13/2008 02:44 PM : 0d3a8fafceacd8b7625cd549757a7df1 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\vga.sys : 20,992 : 08/04/2004 06:00 AM : 8a60edd72b4ea5aea8202daf0e427925 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\vga.sys : 20,992 : 04/13/2008 02:44 PM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl]

* C:\WINDOWS\System32\drivers\videoprt.sys : 81,664 : 04/13/2008 02:44 PM : e28726b72c46821a28830e077d39a55b [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys : 79,744 : 08/04/2004 06:00 AM : d5a9d123f5ed7c9965a481bd20cf66d8 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\videoprt.sys : 81,664 : 04/13/2008 02:44 PM : e28726b72c46821a28830e077d39a55b [Pos Repl]

* C:\WINDOWS\System32\drivers\volsnap.sys : 52,352 : 04/13/2008 02:41 PM : 4c8fcb5cc53aab716d810740fe59d025 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys : 52,352 : 08/04/2004 06:00 AM : ee4660083deba849ff6c485d944b379b [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\volsnap.sys : 52,352 : 04/13/2008 02:41 PM : 4c8fcb5cc53aab716d810740fe59d025 [Pos Repl]

* C:\WINDOWS\System32\drivers\wanarp.sys : 34,560 : 04/13/2008 02:57 PM : e20b95baedb550f32dd489265c1da1f6 [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys : 34,560 : 08/04/2004 06:00 AM : 984ef0b9788abf89974cfed4bfbaacbc [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wanarp.sys : 34,560 : 04/13/2008 02:57 PM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl]

* C:\WINDOWS\System32\drivers\wdmaud.sys : 83,072 : 04/13/2008 03:17 PM : 6768acf64b18196494413695f0c3a00f [NoSig]
+-> C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys : 82,944 : 08/04/2004 06:00 AM : 2797f33ebf50466020c430ee4f037933 [Pos Repl]
+-> C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys : 83,072 : 04/13/2008 03:17 PM : 6768acf64b18196494413695f0c3a00f [Pos Repl]

* C:\WINDOWS\System32\drivers\wmilib.sys : 4,352 : 08/04/2004 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [NoSig]
+-> C:\WINDOWS\system32\dllcache\wmilib.sys : 4,352 : 08/04/2004 06:00 AM : 2f31b7f954bed437f2c75026c65caf7b [Pos Repl]

* C:\WINDOWS\System32\drivers\ws2ifsl.sys : 12,032 : 08/04/2004 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [NoSig]
+-> C:\WINDOWS\system32\dllcache\ws2ifsl.sys : 12,032 : 08/04/2004 06:00 AM : 6abe6e225adb5a751622a9cc3bc19ce8 [Pos Repl]

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 04/06/2014 07:01:38 PM
Execution time: 0 hours(s), 23 minute(s), and 42 seconds(s)



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,587 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:02 PM

Posted 07 April 2014 - 06:17 AM

The other scans needed to be performed immediately after running RKill, otherwise you defeat the purpose of using this tool.

However, the RKill log indicates you may be dealing with a serious infection.

Patched detections are usually legitimate (critical) Windows components that have been infected by a malicious application. Malware can add parts of its code to a system component and then patch certain functions of the original file to point to an appended code. In some cases a patched detection can be indicative of a dangerous polymorphic file infector with IRCBot functionality. The difference between file infectors (viruses) and patches is that a patch just changes a few bytes and cannot spread themselves. File infectors infect (patch) the victim file and add a virus body to perform a malicious action and can infect hundreds of other files. See Patch vs File Infector.

Did you perform a full scan with your anti-virus? If not, you need to do so immediately.

You should also get a second opinion for this type of detection. Try performing an Online Virus Scan such as Eset Online Anti-virus Scanner to see if it can provide more specifics about the detected threat without allowing removal.

Another way of confirming the detection is to submit some files for analysis. Go to one of the following online services that analyzes suspicious files:--In the "File to Scan" (Upload or Submit) box, browse to the location of the following file:
C:\WINDOWS\explorer.exe
...and submit (upload) it for scanning/analysis. If you get a message saying "File has already been analyzed", click Reanalyze or Scan again.

Repeat the above steps and submit the following samples:
C:\WINDOWS\System32\services.exe
C:\WINDOWS\System32\lsass.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
-- Post back with the results of the file analysis in your next reply.

Anti-virus and security tools may not attempt to remove these detections as doing so could result in the computer becoming unbootable. It is not advisable to delete, rename or quarantine patched Windows components as doing so may affect system stability. Even though Windows locks its main files while they are active, modifications to the patched components may still affect them. If disinfection fails, you can attempt to restore a recent System Restore point. In many cases, the patched system component will be replaced with clean version from the backup by there is no guarantee this will work.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 sonnyz

sonnyz
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 09 April 2014 - 07:45 AM

Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Microsoft Windows XP x86
Ran by Administrator on Tue 04/08/2014 at 8:24:36.37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ytdownloader
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL
Successfully deleted [Registry Value] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\bProtectTabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{17E58097-6CA5-448B-830F-2A19678248FB}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{17E58097-6CA5-448B-830F-2A19678248FB}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1292428093-1979792683-725345543-500\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110211671166}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311321154}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110211671166}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311321154}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551110}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411591171}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211671166}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{16A08075-E5F9-407D-A7E4-6A30ADB032E4}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{36377DD7-B3EB-42f5-986F-680BAF59BA9D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{521B0E1D-4E11-42CE-A46B-7825E0793BA1}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5a15c091-f3c2-4c8f-8964-e3434a2a4a95}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8fe8d013-c3fd-4802-af48-79274e9f969e}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{974300F6-1B13-468B-BDA9-66DC9EF0374C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AE685F8A-E693-44B6-8643-569A817F3AA3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C87B3755-68D0-B39D-C7B6-1302A12C8A19}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F542B345-04CD-4D8B-81D8-F6EE2EA5A243}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{FA033403-5049-4CCE-81B1-95B975D64D2F}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{5a15c091-f3c2-4c8f-8964-e3434a2a4a95}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{8fe8d013-c3fd-4802-af48-79274e9f969e}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8BA97046-C600-4264-B367-5DEFD9FC505F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{8BA97046-C600-4264-B367-5DEFD9FC505F}



~~~ Files

Successfully deleted: [File] C:\WINDOWS\Tasks\SMupdate1.job
Successfully deleted: [File] C:\WINDOWS\Tasks\SMupdate2.job
Successfully deleted: [File] C:\WINDOWS\Tasks\SMupdate3.job
Successfully deleted: [File] C:\WINDOWS\Tasks\Plus-HD-7.7-validator.job
Successfully deleted: [File] C:\WINDOWS\Tasks\regwork.job
Successfully deleted: [File] "C:\Documents and Settings\Administrator\appdata\locallow\SkwConfig.bin"



~~~ Folders

Successfully deleted: [Folder] C:\Documents and Settings\Administrator\Application Data\FCTB000100685
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\visualbee"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\application data\big fish games"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users\application data\drivergenius"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Application Data\zip opener packages"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Local Settings\Application Data\cre"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Local Settings\Application Data\rivalgaming"
Successfully deleted: [Folder] "C:\Program Files\alot"
Successfully deleted: [Folder] "C:\Program Files\regwork"
Successfully deleted: [Folder] "C:\Program Files\speeditup free"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 04/08/2014 at 8:41:00.18
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

am-log>
<header>
<date>
2014/04/09 03:01:59 -0400
</date>
<log>
MBAMLOG.xml
</log>
<isadmin>
yes
</isadmin>
</header>
<engine>
<version>
2.00.1.1004
</version>
<rules-database>
v2014.04.08.09
</rules-database>
<swissarmy-database>
v2014.03.27.01
</swissarmy-database>
<license>
trial
</license>
<file-protection>
enabled
</file-protection>
<web-protection>
enabled
</web-protection>
<self-protection>
disabled
</self-protection>
</engine>
<system>
<osversion>
Windows XP Service Pack 3
</osversion>
<arch>
x86
</arch>
<username>
Administrator
</username>
<filesys>
NTFS
</filesys>
</system>
<summary>
<type>
threat
</type>
<result>
completed
</result>
<objects>
231917
</objects>
<time>
2340
</time>
<processes>
0
</processes>
<modules>
0
</modules>
<keys>
0
</keys>
<values>
0
</values>
<datas>
0
</datas>
<folders>
0
</folders>
<files>
0
</files>
<sectors>
0
</sectors>
</summary>
<options>
<memory>
enabled
</memory>
<startup>
enabled
</startup>
<filesystem>
enabled
</filesystem>
<archives>
enabled
</archives>
<rootkits>
disabled
</rootkits>
<deeprootkit>
disabled
</deeprootkit>
<shuriken>
enabled
</shuriken>
<pup>
enabled
</pup>
<pum>
enabled
</pum>
</options>
<items>
</items>
</mbam-log>



#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,587 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:02 PM

Posted 09 April 2014 - 01:01 PM

I repeat. You may be dealing with a serious infection due to the number of patched detections.

Did you perform a full scan with your anti-virus? If not, you need to do so immediately.

You should also get a second opinion for this type of detection. Try performing an Online Virus Scan such as Eset Online Anti-virus Scanner to see if it can provide more specifics about the detected threat without allowing removal.

Another way of confirming the detection is to submit some files for analysis. Go to one of the following online services that analyzes suspicious files:

--In the "File to Scan" (Upload or Submit) box, browse to the location of the following file:
C:\WINDOWS\explorer.exe
...and submit (upload) it for scanning/analysis. If you get a message saying "File has already been analyzed", click Reanalyze or Scan again.

Repeat the above steps and submit the following samples:
C:\WINDOWS\System32\services.exe
C:\WINDOWS\System32\lsass.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
-- Post back with the results of the file analysis in your next reply.

Anti-virus and security tools may not attempt to remove these detections as doing so could result in the computer becoming unbootable. It is not advisable to delete, rename or quarantine patched Windows components as doing so may affect system stability. Even though Windows locks its main files while they are active, modifications to the patched components may still affect them. If disinfection fails, you can attempt to restore a recent System Restore point. In many cases, the patched system component will be replaced with clean version from the backup by there is no guarantee this will work.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 sonnyz

sonnyz
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 11 April 2014 - 03:19 PM

Again, please bear with me here, it took me some time but I was able to locate C:\Windows\System32\Services.exe

                                                                                                                                                              \lsass.exe

                                                                                                                                                              \ctfman.exe

                                                                                                                                                              \svchost.exe

There already had been scans performed with each of the above, yet I performed another scan

with 22 different scans ( Adware thru VBA32 ) and the end result was: 0 out of 22 scanners reported

malware.    Nothing Found

 

I also ran ESET Online Scanner Infected 3, I clicked on Quarantine and Uninstall and exited the program.

 

If there are saved files or log files that I must submit, I would have if I only knew where they were located, so again bear with me here, I'm not that swift on computers and it takes me a long time to navigate around and locate things, kind of like walking thru a maze and I keep getting lost....Please let me know what else there is needed. Thank You for your time with this matter...P.S. One other problem that I have encountered since I performed these scans... In order to turn on the computer I start out on that page where is says, " press F1 to reboot or F2 " well F1 gets me right back to the same page, what I end up having to do is goto Cap Lock, Scroll Lock and Num Lock, then AltE, AltM and AltB to get the computer running....



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,587 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:02 PM

Posted 11 April 2014 - 03:24 PM


This issue will require further investigation and a more comprehensive look at your system. Many of the scanning we use in this forum are not capable of detecting (repairing/removing) all malware variants so more advanced tools are needed to investigate. Before that can be done you will need to create and post a DDS log for further investigation.

Please follow the instructions in the Malware Removal and Log Section Preparation Guide starting at Step 6.
  • If you cannot complete a step, then skip it and continue with the next.
  • In Step 6 there are instructions for downloading and running DDS which will create two logs. (Note: Windows 8.1 Users will not be able run DDS and create a log)
When you have done that, post your logs in the Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team.

Start a new topic, give it a relevant title and post your log(s) along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. If you cannot produce any of the required logs, then still start the new topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happened when you tried to create them. A member of the Malware Removal Team will walk you through, step by step, on how to clean your computer.

After doing this, please reply back in this thread with a link to the new topic so we can closed this one.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 sonnyz

sonnyz
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 15 April 2014 - 08:51 AM

New thread started: Malware Antimalware Keeps popping up



#10 sonnyz

sonnyz
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:02 PM

Posted 15 April 2014 - 08:58 AM

Please Close Thread< started new topic, " Malware antimalware Keeps popping up "



#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,587 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:02 PM

Posted 15 April 2014 - 02:26 PM


Your log(s) is posted here.

Now that your log is posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Response Team member...nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show in the log(s) you already posted. Further, any modifications you make on your own may cause confusion for the member assisting you and could complicate the malware removal process or make things worst which would extend the time it takes to clean your computer.

From this point on the Malware Response Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take several days to get a response because the Malware Response Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have posted your log and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the Malware Response Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another Malware Response Team member is already assisting you and not open the thread to respond.

If HelpBot replies to your topic, please follow Step One and CLICK the link so it will report your topic to the team members.

To avoid confusion, I am closing this topic.

Good luck with your log.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users