Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Started as U-Cash, now BSOD ...


  • This topic is locked This topic is locked
71 replies to this topic

#1 Tiger-Heli

Tiger-Heli

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 12 August 2015 - 06:13 AM

See http://www.bleepingcomputer.com/forums/t/585927/police-report-u-cash/ for background.

 

This problem first started on 6 August 2015.

 

It should be easy to clobber with the 32-bit version of Hitman Pro - but I realized you need an internet connection to create the Kickstart USB drive.

 

The healthy computer has never had internet access.  I connected my network adapter and had to move the drivers over from the sick computer and logged into the network.  Network connections shows decent connectivity, but neither Hitman nor Firefox can connect to the internet.  (Working now - I reset the services on the healthy computer, but I didn’t bother with Hitman after the rest of what happened below …0

 

The sick computer could not connect to the internet when I plugged in the wireless network adapter using F-Secure Rescue CD, but I don’t know Linux well enough to know where to input the wireless network key.

 

I could get a co-worker to create a Kickstart USB key for me (or now I could do it myself), but I have three concerns:

  • He might not have a 32-bit computer, and I’m not sure it would work if he tried to create the kickstart key using the 32-bit program and a 64-bit computer.  (Not an issue)
  • The software appears to be cloud based, so since the sick computer doesn’t seem to be able to connect to the internet (and at this point, I might not want it to), I’m not sure if it would work anyway.
  • Avira wiped out most of the OS, so it might not be easy to get it back to as broken as it was before and then run Hitman Pro.

 

Other things that I tried:

 

I was able to boot into Safe Mode with Command Prompt and access System Restore, however, restoring the computer to July 29 (well before the problem appeared), still left me at the white screen.

 

I noticed that System Restore said it renamed one of my folders from G:\Portable Apps\Firefox Portable\something\profile\doomed to \same\doomed(2).

 

Doomed didn’t sound like something one of my programs would have created, so when I connected the sick HD to the healthy computer with the Kingwin USB to SATA adapter to get the wireless adapter drivers, I deleted the Firefox Portable directory (I’m pretty sure I have a backup - if not, I can re-install).

 

I still got the white screen, so I tried to restore the computer to July 18, July 15, and August 1.  All of those said they failed to install and no changes were made to the system.

 

I use F-Secure Recovery Disk and scanned only the C:\Programs partition and the master boot records using USB virus definitions from yesterday.  That took 45 minutes, so I didn’t try to scan the 450 MB G:\ Partition. 

 

Nothing was found, but it could not access

C:\Documents and Settings\<user name>\Recent\Desktop.ini (I/O Error)

C:\System Volume Information\_restore{23B26855-47E9-4C00-9 (not sure if that is the full filename

C:\Windows Installer\B91dc.msp (scan timeout)

C:\Windows\Driver cache\i386\driver.cab (scan timeout)

 

I have AntiVir and Kaspersky Rescue CD’s, but since this is not technically a virus (???) I didn’t know if it were worth trying them - later I tried AntiVir and found out it was not.

 

I then tried the steps here:  http://www.bleepingcomputer.com/forums/t/552704/fbi-virus-on-windows-xp-police-report/

 

The CD I used was an NLITE WinXP CD with Sata and Recovery Console - I’m fairly sure but not positive that is what I installed on the sick PC.

 

When I booted with UBCD and tried to enable NetworkSupport, it said that the network adapter could not be configured …

 

I am attaching the FRST scan below - I have no idea what to make of it - I replaced my user name in it, but didn’t change anything else (I didn't know when I ran it that it might make an addition.txt file, so I don't have that).

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-08-2015
Ran by SYSTEM on BARTPE-13569 (11-08-2015 14:26:24)
Running from E:\
Platform: Microsoft Windows XP Service Pack 2 (X86) Language: Georgian
Internet Explorer Version 8
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TrayFactory] => G:\program files\PS Tray Factory\PSTrayFactory.exe /start
HKLM\...\Run: [AutoShutdown] => G:\PROGRA~1\AUTOSH~1\AutoShutdown.exe
HKLM\...\Run: [EvtMgr6] => G:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
HKLM\...\Run: [AvastUI.exe] => "G:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
HKLM\...\Run: [AutoShutdown Pro] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => "G:\Program Files\Common Files\Java\Java Update\jusched.exe"
HKLM\...\Run: [Adobe ARM] => "G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\...\Run: [PowerPanel Personal Edition User Interaction] => G:\Program Files\CyberPower PowerPanel Personal Edition\pppeuser.exe
HKLM\...\RunOnce: [PSTF] => G:\program files\PS Tray Factory\PSTrayFactory.exe /start
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll [2010-05-27] (ATI Technologies Inc.)
Winlogon\Notify\LBTWlgn: g:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKU\Username\...\Run: [DAEMON Tools Lite] => G:\Program Files\DAEMON Tools\DTLite.exe -autorun
HKU\Username\...\Run: [Dekisoft Monitor Off Utility] => G:\program files\MonitorOff\monoff.exe
HKU\Default User\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled [2015-07-09] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Shortcut to startup.brs.lnk [2011-04-29]
ShortcutTarget: Shortcut to startup.brs.lnk -> C:\PROGRAMS\Batchrun\startup.brs (No File)
BootExecute: autocheck autochk /k:F *
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-03-02] ()
S4 Ati HotKey Poller; %SystemRoot%\system32\Ati2evxx.exe [X]
S2 AutoShutdown; G:\PROGRA~1\AUTOSH~1\AS_Service.exe [X]
S2 avast! Antivirus; "G:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X]
S4 CTDevice_Srv; G:\Program Files\Creative\Shared Files\CTDevSrv.exe [X]
S3 CTUPnPSv; G:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [X]
S4 Diskeeper; "G:\Program Files\Executive Software\DiskeeperLite\DKService.exe" [X]
S3 IDriverT; "G:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" [X]
S3 LBTServ; G:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [X]
S2 MBAMService; "G:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe" [X]
S2 PhenomMsrTweaker; "G:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe" [X]
S2 ppped; "G:\Program Files\CyberPower PowerPanel Personal Edition\ppped.exe" [X]
S2 StarWindService; G:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [X]
S3 WMPNetworkSvc; "G:\Program Files\Windows Media Player\WMPNetwk.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [21419 2010-04-23] (Meetinghouse Data Communications)
S0 ahcix86; C:\Windows\System32\DRIVERS\ahcix86.sys [189968 2009-09-03] (Advanced Micro Devices, Inc)
S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative)
S1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [19200 2006-06-09] (SlySoft, Inc.)
S4 AODDriver; C:\Program Files\GIGABYTE\ET6\i386\AODDriver.sys [7168 2009-02-23] ()
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-07-09] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-07-09] (Avast Software s.r.o.)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-07-09] (Avast Software s.r.o.)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49904 2015-07-09] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-07-09] (Avast Software s.r.o.)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-07-09] (Avast Software s.r.o.)
S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-07-09] (Avast Software s.r.o.)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [209048 2015-07-09] ()
S4 BANTExt; C:\Windows\System32\Drivers\BANTExt.sys [3840 2008-03-06] ()
S2 cpuz132; C:\WINDOWS\system32\drivers\cpuz132_x32.sys [12672 2009-03-27] (Windows ® Codename Longhorn DDK provider)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25104 2015-05-07] (Disc Soft Ltd)
S3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [27392 2005-05-03] (SlySoft, Inc.)
S2 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [8064 2006-04-22] (Elaborate Bytes AG)
S3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [4608 2005-04-12] (Elaborate Bytes AG)
S4 etdrv; C:\WINDOWS\etdrv.sys [17488 2009-09-12] (Windows ® 2000 DDK provider)
S4 gdrv; C:\WINDOWS\gdrv.sys [17488 2010-10-13] (Windows ® 2000 DDK provider)
S4 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.)
S3 Pcatip; C:\Windows\System32\DRIVERS\Pcatip.sys [25088 2002-12-12] (VSO Software)
S1 PQNTDrv; C:\Windows\System32\Drivers\PQNTDrv.sys [4228 2004-05-06] (PowerQuest Corporation)
S3 rt2870; C:\Windows\System32\DRIVERS\rt2870.sys [580096 2008-06-11] (Ralink Technology, Corp.)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
S0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows ® 2000 DDK provider)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-05-07] (Duplex Secure Ltd.)
S4 vaxscsi; C:\Windows\System32\Drivers\vaxscsi.sys [223128 2009-09-20] (Alcohol Soft Co., Ltd.)
S4 ALSysIO; \??\C:\DOCUME~1\BROOKS~1\LOCALS~1\Temp\ALSysIO.sys [X]
S4 AmdLLD; system32\DRIVERS\AmdLLD.sys [X]
S5 GVTDrv; C:\WINDOWS\system32\Drivers\GVTDrv.sys [24944 2009-09-11] ()
S4 IntelIde; no ImagePath
S4 MEMSWEEP2; \??\C:\WINDOWS\system32\1.tmp [X]
S3 SANDRA; \??\G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP4\WNt500x86\Sandra.sys [X]
S3 WinRing0_1_2_0; \??\G:\program files\PhenomMsrTweaker\WinRing0.sys [X]
S4 wqepwltm; System32\drivers\aeohtf.sys [X]
S1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 14:26 - 2015-08-11 14:26 - 00000000 ____D C:\FRST
2015-08-01 22:24 - 2015-08-01 22:24 - 00000235 _____ C:\Windows\LkmdfCoInst.log
2015-08-01 22:24 - 2015-08-01 22:24 - 00000075 _____ C:\Windows\setupact.log
2015-08-01 22:24 - 2015-08-01 22:24 - 00000000 _____ C:\Windows\setuperr.log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 16:21 - 2011-09-05 14:25 - 00000000 ____D C:\Documents and Settings\Username\Local Settings\temp
2015-08-11 16:20 - 2009-09-11 12:37 - 00000000 __SHD C:\Windows\CSC
2015-08-11 16:15 - 2015-05-28 17:14 - 00018037 _____ C:\Windows\WindowsUpdate.log
2015-08-11 16:12 - 2010-03-09 02:43 - 00000159 _____ C:\Windows\wiadebug.log
2015-08-11 16:12 - 2010-03-09 02:43 - 00000049 _____ C:\Windows\wiaservc.log
2015-08-11 16:11 - 2009-10-09 15:49 - 00000000 ____D C:\Documents and Settings\Username\Application Data\Mozilla
2015-08-11 16:03 - 2009-09-06 00:30 - 00000178 ___SH C:\Documents and Settings\Username\ntuser.ini
2015-08-11 16:03 - 2009-09-06 00:29 - 00032578 _____ C:\Windows\SchedLgU.Txt
2015-08-11 14:32 - 2015-07-05 01:02 - 00030053 _____ C:\Windows\setupapi.log
2015-08-11 14:28 - 2009-09-06 00:23 - 00000000 ____D C:\Windows\Registration
2015-08-11 14:18 - 2003-06-20 12:00 - 00002206 _____ C:\Windows\System32\wpa.dbl
2015-07-31 20:32 - 2009-09-06 00:56 - 00000000 ____D C:\Documents and Settings\Username\Local Settings\Application Data\Adobe
2015-07-31 20:22 - 2003-06-20 12:00 - 00001452 _____ C:\Windows\win.ini

==================== Files in the root of some directories =======

2004-03-06 00:44 - 2004-03-06 00:44 - 0311303 ____R () X:\I386\system32\30.jpg
2010-02-25 00:32 - 2010-02-25 00:32 - 0045056 ____R () X:\I386\system32\3C99X.DLL
2004-03-06 00:44 - 2004-03-06 00:44 - 0458153 ____R () X:\I386\system32\3DBubbles.jpg
2006-01-11 02:51 - 2006-01-11 02:51 - 0074240 ____R (David Finch) X:\I386\system32\3DWORMHOLE.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0068608 ____R (Microsoft Corporation) X:\I386\system32\ACCESS.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0129536 ____R (Microsoft Corporation) X:\I386\system32\ACLEDIT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0115712 ____R (Microsoft Corporation) X:\I386\system32\ACLUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0193536 ____R (Microsoft Corporation) X:\I386\system32\ACTIVEDS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0111104 ____R (Microsoft Corporation) X:\I386\system32\ACTIVEDS.TLB
2008-04-14 09:41 - 2008-04-14 09:41 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\ACTXPRXY.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0143360 ____R (Microsoft Corporation) X:\I386\system32\ADSLDPC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\ADSMSEXT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0263680 ____R (Microsoft Corporation) X:\I386\system32\ADSNT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0617472 ____R (Microsoft Corporation) X:\I386\system32\ADVAPI32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0099840 ____R (Microsoft Corporation) X:\I386\system32\ADVPACK.DLL
2008-04-14 03:02 - 2008-04-14 03:02 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\AGTCTL15.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0044544 ____R (Microsoft Corporation) X:\I386\system32\ALG.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\ALRSVC.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\AMDDLG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\AMDDLGN4.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009029 ____R () X:\I386\system32\ANSI.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0125952 ____R (Microsoft Corporation) X:\I386\system32\APPHELP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0295936 ____R (Microsoft Corporation) X:\I386\system32\APPMGR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0549888 ____R (Microsoft Corporation) X:\I386\system32\APPWIZ.CPL
2008-04-14 09:39 - 2008-04-14 09:39 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\ASCTRLS.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0065024 ____R (Microsoft Corporation) X:\I386\system32\ASYCFILT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0058880 ____R (Microsoft Corporation) X:\I386\system32\ATL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\ATTRIB.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0062464 ____R (Microsoft Corporation) X:\I386\system32\AUTHZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0588800 ____R (Microsoft Corporation) X:\I386\system32\AUTOCHK.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0001688 ____R () X:\I386\system32\AUTOEXEC.NT
2008-04-14 09:42 - 2008-04-14 09:42 - 0580608 ____R (Microsoft Corporation) X:\I386\system32\AUTOFMT.EXE
2006-03-20 22:11 - 2006-03-20 22:11 - 0002041 ____R () X:\I386\system32\AUTORUN.CMD
2005-05-19 21:31 - 2005-05-19 21:31 - 0000134 ____R () X:\I386\system32\AUTORUN1GEOSHELL.CMD
2009-04-16 02:32 - 2009-04-16 02:32 - 0000237 ____R () X:\I386\system32\AUTORUN_FAVORITES.CMD
2006-04-30 01:35 - 2006-04-30 01:35 - 0000077 ____R () X:\I386\system32\AUTORUN_MYINFO.CMD
2004-02-19 17:43 - 2004-02-19 17:43 - 0000122 ____R () X:\I386\system32\AUTORUN_PENETCFG.CMD
2003-06-20 12:00 - 2003-06-20 12:00 - 0069584 ____R (Microsoft Corporation) X:\I386\system32\AVICAP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0109456 ____R (Microsoft Corporation) X:\I386\system32\AVIFILE.DLL
2001-07-21 22:37 - 2001-07-21 22:37 - 0018852 ____R () X:\I386\system32\AVMC20.DLL
2001-07-21 22:37 - 2001-07-21 22:37 - 0018372 ____R () X:\I386\system32\AVMCAPI.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0144384 ____R (AVM GmbH) X:\I386\system32\AVMENUM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0227840 ____R (Microsoft Corporation) X:\I386\system32\AVTAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0233472 ____R (Microsoft Corporation) X:\I386\system32\AZROLES.DLL
2004-12-15 19:03 - 2004-12-15 19:03 - 0960056 ____R () X:\I386\system32\BARTPE.BMP
2004-12-03 18:17 - 2004-12-03 18:17 - 0022016 ____R () X:\I386\system32\BARTPE.EXE
2005-01-03 17:46 - 2005-01-03 17:46 - 0007356 ____R () X:\I386\system32\BARTPE.TXT
2008-04-14 09:41 - 2008-04-14 09:41 - 0052736 ____R (Microsoft Corporation) X:\I386\system32\BASESRV.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0029184 ____R (Microsoft Corporation) X:\I386\system32\BATMETER.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0024576 ____R (Broadcom Corporation) X:\I386\system32\BCM42CTL.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0069632 ____R () X:\I386\system32\BCM42DB0.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0036864 ____R (Broadcom Corporation) X:\I386\system32\BCM42IOA.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0004512 ____R (Broadcom Corporation) X:\I386\system32\BCM42NDI.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0011264 ____R (NVIDIA Corporation) X:\I386\system32\BDCO1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066728 ____R () X:\I386\system32\BIG5.NLS
2008-04-14 01:57 - 2008-04-14 01:57 - 0042141 ____R () X:\I386\system32\BIOSINFO.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0000412 ____R () X:\I386\system32\BLANK.HTM
2003-06-20 12:00 - 2003-06-20 12:00 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\BOOTVID.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0082172 ____R () X:\I386\system32\BOPOMOFO.NLS
2008-04-14 02:33 - 2008-04-14 02:33 - 0063488 ____R (Microsoft Corporation) X:\I386\system32\BROWSELC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0077824 ____R (Microsoft Corporation) X:\I386\system32\BROWSER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1025024 ____R (Microsoft Corporation) X:\I386\system32\BROWSEUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0078336 ____R (Microsoft Corporation) X:\I386\system32\BROWSEWM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0050688 ____R (Microsoft Corporation) X:\I386\system32\BTPANUI.DLL
2001-07-21 22:46 - 2001-07-21 22:46 - 0011296 ____R () X:\I386\system32\C218TNT.COD
2001-07-21 22:46 - 2001-07-21 22:46 - 0019746 ____R () X:\I386\system32\C320TNT.COD
2008-04-14 09:41 - 2008-04-14 09:41 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\CABINET.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\CACLS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\CALC.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0226304 ____R (Microsoft Corporation) X:\I386\system32\CATSRV.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0085504 ____R (Microsoft Corporation) X:\I386\system32\CATSRVPS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0625664 ____R (Microsoft Corporation) X:\I386\system32\CATSRVUT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0151040 ____R (Microsoft Corporation) X:\I386\system32\CDFVIEW.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0194560 ____R (Microsoft Corporation) X:\I386\system32\CERTCLI.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\CFGMGR32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\CHKDSK.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0148480 ____R (Microsoft Corporation) X:\I386\system32\CIC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0010752 ____R (Microsoft Corporation) X:\I386\system32\CLB.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\CLBCATEX.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0498688 ____R (Microsoft Corporation) X:\I386\system32\CLBCATQ.DLL
2006-03-20 22:12 - 2006-03-20 22:12 - 0000299 ____R () X:\I386\system32\CLEAN_RAMDRIVE.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\CLIPSRV.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0058368 ____R (Microsoft Corporation) X:\I386\system32\CLUSAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\CMCFG32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0389120 ____R (Microsoft Corporation) X:\I386\system32\CMD.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0185344 ____R (Microsoft Corporation) X:\I386\system32\CMPROPS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0047104 ____R (Microsoft Corporation) X:\I386\system32\CNBJMON.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0701440 ____R (NVIDIA Corporation) X:\I386\system32\COHELPER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\COLBACT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\COMADDIN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\COMCAT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0617472 ____R (Microsoft Corporation) X:\I386\system32\COMCTL32.DLL
2000-05-21 13:00 - 2000-05-21 13:00 - 0608448 ____R (Microsoft Corporation) X:\I386\system32\COMCTL32.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0276992 ____R (Microsoft Corporation) X:\I386\system32\COMDLG32.DLL
2001-05-21 15:46 - 2001-05-21 15:46 - 0198656 ____R (Microsoft Corporation) X:\I386\system32\COMDLG32.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0010544 ____R (Microsoft Corporation) X:\I386\system32\COMM.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0050620 ____R () X:\I386\system32\COMMAND.COM
2003-06-20 12:00 - 2003-06-20 12:00 - 0032816 ____R (Microsoft Corporation) X:\I386\system32\COMMDLG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\COMP.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\COMPACT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0252928 ____R () X:\I386\system32\COMPATUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0038302 ____R () X:\I386\system32\COMPMGMT.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0030160 ____R (Microsoft Corporation) X:\I386\system32\COMPOBJ.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0097792 ____R (Microsoft Corporation) X:\I386\system32\COMREPL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0792064 ____R (Microsoft Corporation) X:\I386\system32\COMRES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0167424 ____R (Microsoft Corporation) X:\I386\system32\COMSNAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1267200 ____R (Microsoft Corporation) X:\I386\system32\COMSVCS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0539648 ____R (Microsoft Corporation) X:\I386\system32\COMUID.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002577 ____R () X:\I386\system32\CONFIG.NT
2008-04-14 09:41 - 2008-04-14 09:41 - 0357888 ____R (Microsoft Corporation) X:\I386\system32\CONFMSP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\CONSOLE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\CONTROL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\CONVERT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0027097 ____R () X:\I386\system32\COUNTRY.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0163840 ____R (Microsoft Corporation) X:\I386\system32\CREDUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0149019 ____R (Microsoft Corporation) X:\I386\system32\CRTDLL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0599040 ____R (Microsoft Corporation) X:\I386\system32\CRYPT32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\CRYPTDLL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0064512 ____R (Microsoft Corporation) X:\I386\system32\CRYPTNET.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0512512 ____R (Microsoft Corporation) X:\I386\system32\CRYPTUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0101888 ____R (Microsoft Corporation) X:\I386\system32\CSCDLL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0139264 ____R (Microsoft Corporation) X:\I386\system32\CSCRIPT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0326656 ____R (Microsoft Corporation) X:\I386\system32\CSCUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0032256 ____R (Microsoft Corporation) X:\I386\system32\CSRSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\CSRSS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0073728 ____R (Microsoft Corporation) X:\I386\system32\CSSEQCHK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0027200 ____R (Microsoft Corporation) X:\I386\system32\CTL3DV2.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0249856 ____R (Comtrol® Corporation) X:\I386\system32\CTMASETP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012560 ____R (Comtrol® Corporation) X:\I386\system32\CTMRCLAS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008386 ____R () X:\I386\system32\CTYPE.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_037.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10000.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0162850 ____R () X:\I386\system32\C_10001.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0195618 ____R () X:\I386\system32\C_10002.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0177698 ____R () X:\I386\system32\C_10003.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10004.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10005.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10006.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10007.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_10008.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10010.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10017.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10021.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10029.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10079.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10081.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10082.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1026.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1047.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1140.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1141.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1142.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1143.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1144.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1145.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1146.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1147.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1148.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1149.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1250.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1251.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1252.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1253.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1254.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1255.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1256.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1257.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1258.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0189986 ____R () X:\I386\system32\C_1361.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180258 ____R () X:\I386\system32\C_20000.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0186402 ____R () X:\I386\system32\C_20001.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_20002.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0185378 ____R () X:\I386\system32\C_20003.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180258 ____R () X:\I386\system32\C_20004.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0187938 ____R () X:\I386\system32\C_20005.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20105.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20106.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20107.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20108.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20127.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0139810 ____R () X:\I386\system32\C_20261.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20269.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20273.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20277.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20278.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20280.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20284.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20285.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20290.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20297.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20420.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20423.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20424.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20833.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20838.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20871.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20880.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20905.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20924.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20930.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20931.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180770 ____R () X:\I386\system32\C_20932.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0195106 ____R () X:\I386\system32\C_20933.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0160802 ____R () X:\I386\system32\C_20935.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_20936.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0191522 ____R () X:\I386\system32\C_20937.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20939.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0177698 ____R () X:\I386\system32\C_20949.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_20950.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21025.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21027.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28591.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28592.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28593.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28594.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28595.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28596.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28597.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28598.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28599.NLS
2006-12-30 03:24 - 2006-12-30 03:24 - 0066082 ____R () X:\I386\system32\C_28603.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28605.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_437.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_500.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_708.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_720.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_737.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_775.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_850.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_852.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_855.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_857.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_858.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_860.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_861.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_862.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_863.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_864.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_865.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_869.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_870.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_874.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_875.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0162850 ____R () X:\I386\system32\C_932.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_936.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_949.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_950.NLS
2008-04-14 09:41 - 2008-04-14 09:41 - 1179648 ____R (Microsoft Corporation) X:\I386\system32\D3D8.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\D3D8THK.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\DAVCLNT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0847872 ____R (Microsoft Corporation) X:\I386\system32\DBGENG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0640000 ____R (Microsoft Corporation) X:\I386\system32\DBGHELP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0008704 ____R (Microsoft Corporation) X:\I386\system32\DCIMAN32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\DDEML.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0279552 ____R (Microsoft Corporation) X:\I386\system32\DDRAW.DLL
2004-03-05 12:52 - 2004-03-05 12:52 - 0001400 ____R () X:\I386\system32\DEBUGRUN.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DEFRAG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\DESK.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\DESKADP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\DESKMON.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\DESKPERF.DLL
2003-03-25 03:13 - 2003-03-25 03:13 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\DEVCON.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0033079 ____R () X:\I386\system32\DEVMGMT.MSC
2008-04-14 09:41 - 2008-04-14 09:41 - 0282624 ____R (Microsoft Corporation) X:\I386\system32\DEVMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0041397 ____R () X:\I386\system32\DFRG.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0082944 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGFAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0105472 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGNTFS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0051200 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGRES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0039424 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGSNAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0124416 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0023824 ____R (Digi International Inc.) X:\I386\system32\DGCLASS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0111104 ____R (Microsoft) X:\I386\system32\DGNET.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0176157 ____R (Digi International, Inc.) X:\I386\system32\DGRPSETU.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0126976 ____R (Microsoft Corporation) X:\I386\system32\DHCPCSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048640 ____R (Microsoft Corporation) X:\I386\system32\DHCPQEC.DLL
2004-04-24 23:25 - 2004-04-24 23:25 - 0000194 ____R () X:\I386\system32\DIAL_RAS.CMD
2001-07-21 22:38 - 2001-07-21 22:38 - 0013808 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI2.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0031232 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI232.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0032256 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI2NT.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0319456 ____R (Microsoft Corporation) X:\I386\system32\DIFXAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1504256 ____R (Microsoft Corporation) X:\I386\system32\DISKCOPY.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0033673 ____R () X:\I386\system32\DISKMGMT.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0163840 ____R (Microsoft Corporation) X:\I386\system32\DISKPART.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\DISPEX.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0031305 ____R (Eicon Technology) X:\I386\system32\DISRVPP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0038985 ____R (Eicon Technology) X:\I386\system32\DISRVSU.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0236060 ____R (Eicon Technology) X:\I386\system32\DITRACE.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0037962 ____R () X:\I386\system32\DIVAPROP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0029768 ____R () X:\I386\system32\DIVASU.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0163840 ____R (D-Link) X:\I386\system32\DL2XCFG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0018048 ____R (DAVICOM Semiconductor Inc.                                                     ) X:\I386\system32\DM9INST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0224768 ____R (Microsoft Corp., Veritas Software) X:\I386\system32\DMADMIN.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0330752 ____R (Microsoft Corp., Veritas Software) X:\I386\system32\DMCONFIG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0285184 ____R (Microsoft Corp.) X:\I386\system32\DMDLGS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0200704 ____R (Microsoft Corp.) X:\I386\system32\DMDSKMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0118784 ____R (Microsoft Corp.) X:\I386\system32\DMDSKRES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018432 ____R (Microsoft Corp.) X:\I386\system32\DMINTF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0019456 ____R (Microsoft Corporation) X:\I386\system32\DMOCX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0015872 ____R (Microsoft Corp.) X:\I386\system32\DMREMOTE.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0023552 ____R (Microsoft Corp.) X:\I386\system32\DMSERVER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0052224 ____R (Microsoft Corp.) X:\I386\system32\DMUTIL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0061440 ____R (Microsoft Corp.) X:\I386\system32\DMVIEW.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0147968 ____R (Microsoft Corporation) X:\I386\system32\DNSAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0045568 ____R (Microsoft Corporation) X:\I386\system32\DNSRSLVR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0046080 ____R (Microsoft Corporation) X:\I386\system32\DOCPROP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\DOCPROP2.DLL
2008-04-14 02:24 - 2008-04-14 02:24 - 0053840 ____R () X:\I386\system32\DOSX.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\DOT3API.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\DOT3CFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\DOT3DLG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\DOT3MSM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0132096 ____R (Microsoft Corporation) X:\I386\system32\DOT3SVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0650752 ____R (Microsoft Corporation) X:\I386\system32\DOT3UI.DLL
2006-05-23 15:24 - 2006-05-23 15:24 - 0110592 ____R (Noël Danjou) X:\I386\system32\DOWNLOAD.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\DRPROV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0045568 ____R (Microsoft Corporation) X:\I386\system32\DRWTSN32.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0155648 ____R (Microsoft Corporation) X:\I386\system32\DSKQUOUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0142848 ____R (Microsoft Corporation) X:\I386\system32\DSPROP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0051200 ____R (Microsoft Corporation) X:\I386\system32\DSSEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0113152 ____R (Microsoft Corporation) X:\I386\system32\DSUIEXT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0304128 ____R (Microsoft Corporation) X:\I386\system32\DUSER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1227264 ____R (Microsoft Corporation) X:\I386\system32\DX8VB.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0357888 ____R (Microsoft Corporation) X:\I386\system32\DXTMSFT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0205312 ____R (Microsoft Corporation) X:\I386\system32\DXTRANS.DLL
2004-03-06 00:44 - 2004-03-06 00:44 - 0287965 ____R () X:\I386\system32\Dolphin.jpg
2010-02-25 00:32 - 2010-02-25 00:32 - 0179048 ____R (Intel Corporation) X:\I386\system32\E1000MSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0035424 ____R (Intel Corporation) X:\I386\system32\E100BMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0072288 ____R (Intel Corporation) X:\I386\system32\E1KMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060000 ____R (Intel Corporation) X:\I386\system32\E1QMSG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\EAPOLQEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0184832 ____R (Microsoft Corporation) X:\I386\system32\EAPP3HST.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0126976 ____R (Microsoft Corporation) X:\I386\system32\EAPPCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\EAPPGNUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0180224 ____R (Microsoft Corporation) X:\I386\system32\EAPPHOST.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0040960 ____R (Microsoft Corporation) X:\I386\system32\EAPPPRXY.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\EAPQEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0033792 ____R (Microsoft Corporation) X:\I386\system32\EAPSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\EFSADU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0127213 ____R () X:\I386\system32\EGA.CPI
2010-02-25 00:33 - 2010-02-25 00:33 - 0002048 ____R () X:\I386\system32\EH10NDS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061440 ____R ( 3Com Corporation) X:\I386\system32\EL2K_CPP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0183296 ____R (Microsoft Corporation) X:\I386\system32\ELS.DLL
2005-08-10 02:19 - 2005-08-10 02:19 - 0021640 ____R () X:\I386\system32\EMPTYREGDB.DAT
2003-06-20 12:00 - 2003-06-20 12:00 - 0103424 ____R (Equinox Systems Inc.) X:\I386\system32\EQNCLASS.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0053248 ____R (Equinox Systems Inc.) X:\I386\system32\EQNDIAG.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0051200 ____R (Equinox Systems Inc.) X:\I386\system32\EQNLOGR.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0061952 ____R (Equinox Systems Inc.) X:\I386\system32\EQNLOOP.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0246272 ____R (Microsoft Corporation) X:\I386\system32\ES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1082368 ____R (Microsoft Corporation) X:\I386\system32\ESENT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\EVENTLOG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008704 ____R (Microsoft Corporation) X:\I386\system32\EVENTVWR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0056678 ____R () X:\I386\system32\EVENTVWR.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\EXPAND.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\EXTMGR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0080384 ____R (Microsoft Corporation) X:\I386\system32\FAULTREP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\FC.EXE
2010-02-25 00:33 - 2010-02-25 00:33 - 0888832 ____R (NVIDIA Corporation) X:\I386\system32\FDCO1.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0124928 ____R (Microsoft Corporation) X:\I386\system32\FDE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0337920 ____R (Microsoft Corporation) X:\I386\system32\FILEMGMT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\FIND.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027136 ____R (Microsoft Corporation) X:\I386\system32\FINDSTR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\FINGER.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\FLTLIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\FLTMC.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\FMIFS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0382976 ____R (Microsoft Corporation) X:\I386\system32\FONTEXT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\FONTVIEW.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0029696 ____R (Microsoft Corporation) X:\I386\system32\FORMAT.COM
2001-08-17 16:15 - 2001-08-17 16:15 - 0442240 ____R (AVM GmbH) X:\I386\system32\FPNPBASE.SYS
2001-07-21 22:37 - 2001-07-21 22:37 - 0393392 ____R (AVM Berlin) X:\I386\system32\FPNPBASE.USA
2008-04-14 09:39 - 2008-04-14 09:39 - 0009344 ____R (Microsoft Corporation) X:\I386\system32\FRAMEBUF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0032760 ____R () X:\I386\system32\FSMGMT.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\FSUTIL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0042496 ____R (Microsoft Corporation) X:\I386\system32\FTP.EXE
2001-08-17 16:15 - 2001-08-17 16:15 - 0455680 ____R (AVM GmbH) X:\I386\system32\FUS2BASE.SYS
2006-08-29 23:43 - 2006-08-29 23:43 - 0087372 ____R () X:\I386\system32\Flag.jpg
2007-11-11 05:46 - 2007-11-11 05:46 - 0172032 ____R () X:\I386\system32\GBCHECK.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\GDI.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0285184 ____R (Microsoft Corporation) X:\I386\system32\GDI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0024772 ____R () X:\I386\system32\GEO.NLS
1996-04-03 18:33 - 1996-04-03 18:33 - 0005248 ____R () X:\I386\system32\GIVEIO.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0285184 ____R (Microsoft Corporation) X:\I386\system32\GLMF32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0122880 ____R (Microsoft Corporation) X:\I386\system32\GLU32.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0566784 ____R (Microsoft Corporation) X:\I386\system32\GPEDIT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0199680 ____R (Microsoft Corporation) X:\I386\system32\GPTEXT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\GRPCONV.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0265728 ____R (Microsoft Corporation) X:\I386\system32\H323.TSP
2008-04-14 09:41 - 2008-04-14 09:41 - 0614912 ____R (Microsoft Corporation) X:\I386\system32\H323MSP.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0105344 ____R (Microsoft Corporation) X:\I386\system32\HAL.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0131840 ____R (Microsoft Corporation) X:\I386\system32\HALAACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0081152 ____R (Microsoft Corporation) X:\I386\system32\HALACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0150528 ____R (Microsoft Corporation) X:\I386\system32\HALAPIC.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0134400 ____R (Microsoft Corporation) X:\I386\system32\HALMACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0152576 ____R (Microsoft Corporation) X:\I386\system32\HALMPS.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0077696 ____R (Microsoft Corporation) X:\I386\system32\HALSP.DLL
2003-11-04 11:31 - 2003-11-04 11:31 - 0000251 ____R () X:\I386\system32\HANGUP.CMD
2004-04-23 00:30 - 2004-04-23 00:30 - 0000066 ____R () X:\I386\system32\HANGUP_RAS.CMD
2008-04-14 09:41 - 2008-04-14 09:41 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\HCCOIN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\HDWWIZ.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0010752 ____R (Microsoft Corporation) X:\I386\system32\HH.EXE
2004-08-03 21:23 - 2004-08-03 21:23 - 0526848 ____R (Microsoft Corporation) X:\I386\system32\HHCTRL.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0087552 ____R (Microsoft Corporation) X:\I386\system32\HHCTRLUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0041472 ____R (Microsoft Corporation) X:\I386\system32\HHSETUP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\HID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0029696 ____R (Microsoft Corporation) X:\I386\system32\HIDPHONE.TSP
2003-06-20 12:00 - 2003-06-20 12:00 - 0004768 ____R () X:\I386\system32\HIMEM.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0072704 ____R (Microsoft Corporation) X:\I386\system32\HLINK.DLL
2003-11-03 22:43 - 2003-11-03 22:43 - 0001614 ____R () X:\I386\system32\HLK94.PBK
2008-04-14 09:41 - 2008-04-14 09:41 - 0344064 ____R (Microsoft Corporation) X:\I386\system32\HNETCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0330752 ____R (Microsoft Corporation) X:\I386\system32\HNETWIZ.DLL
2008-04-14 01:58 - 2008-04-14 01:58 - 0000844 ____R () X:\I386\system32\HOMEPAGE.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\HOSTNAME.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0144896 ____R (Microsoft Corporation) X:\I386\system32\HOTPLUG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0044544 ____R (Hilgraeve, Inc.) X:\I386\system32\HTICONS.DLL
2006-04-25 03:43 - 2006-04-25 03:43 - 0037888 ____R () X:\I386\system32\HWPnPDLL.dll
2009-01-17 14:16 - 2009-01-17 14:16 - 0070656 ____R () X:\I386\system32\HWPnp.exe
2008-04-14 09:41 - 2008-04-14 09:41 - 0702845 ____R (Intel® Corporation) X:\I386\system32\I81XDNT5.DLL
2004-08-20 20:25 - 2004-08-20 20:25 - 0766576 ____R (Intel Corporation) X:\I386\system32\IALMDD5.DLL
2004-08-20 20:18 - 2004-08-20 20:18 - 0153008 ____R (Intel Corporation) X:\I386\system32\IALMDEV5.DLL
2004-08-20 20:11 - 2004-08-20 20:11 - 0100924 ____R (Intel Corporation) X:\I386\system32\IALMDNT5.DLL
2004-08-20 20:11 - 2004-08-20 20:11 - 0037951 ____R (Intel Corporation) X:\I386\system32\IALMRNT5.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0064096 ____R (Intel Corporation) X:\I386\system32\IANSMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\IASSVCS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0011264 ____R (Microsoft Corporation) X:\I386\system32\ICAAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\ICFGNT5.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\ICMP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0054784 ____R (Microsoft Corporation) X:\I386\system32\ICMUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\IE4UINIT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0323584 ____R (Microsoft Corporation) X:\I386\system32\IEDKCS32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0251904 ____R (Microsoft Corporation) X:\I386\system32\IEPEERS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048640 ____R (Microsoft Corporation) X:\I386\system32\IERNONCE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0062976 ____R (Microsoft Corporation) X:\I386\system32\IESETUP.DLL
2008-04-14 01:58 - 2008-04-14 01:58 - 0020484 ____R () X:\I386\system32\IEUINIT.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0070656 ____R (Microsoft Corporation) X:\I386\system32\IFSUTIL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\IMAGEHLP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\IMGUTIL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0110080 ____R (Microsoft Corporation) X:\I386\system32\IMM32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0274432 ____R (Microsoft Corporation) X:\I386\system32\INETCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0691712 ____R (Microsoft Corporation) X:\I386\system32\INETCOMM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0360960 ____R (Microsoft Corporation) X:\I386\system32\INETCPL.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\INETCPLC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\INETMIB1.DLL
2008-04-14 01:52 - 2008-04-14 01:52 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\INETRES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0450560 ____R (Microsoft Corporation) X:\I386\system32\INFOSOFT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0147456 ____R (Microsoft Corporation) X:\I386\system32\INITPKI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0123392 ____R (Microsoft Corporation) X:\I386\system32\INPUT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0096256 ____R (Microsoft Corporation) X:\I386\system32\INSENG.DLL
2004-06-16 17:10 - 2004-06-16 17:10 - 0000206 ____R () X:\I386\system32\INSTPPPOE.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0129536 ____R (Microsoft Corporation) X:\I386\system32\INTL.CPL
2001-08-18 02:36 - 2001-08-18 02:36 - 0090200 ____R (Perle Systems Ltd. ) X:\I386\system32\IO8PORTS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0305792 ____R (Intel® Corporation) X:\I386\system32\IOATCO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\IOLOGMSG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\IPCONF.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\IPCONFIG.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0094720 ____R (Microsoft Corporation) X:\I386\system32\IPHLPAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0331264 ____R (Microsoft Corporation) X:\I386\system32\IPNATHLP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0349696 ____R (Microsoft Corporation) X:\I386\system32\IPSECSNP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0183808 ____R (Microsoft Corporation) X:\I386\system32\IPSECSVC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\IPXSAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\ITIRCL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0138240 ____R (Microsoft Corporation) X:\I386\system32\ITSS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060072 ____R (Intel Corporation) X:\I386\system32\IXEMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0051808 ____R (Intel Corporation) X:\I386\system32\IXGBMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060072 ____R (Intel Corporation) X:\I386\system32\IXNMSG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0054272 ____R (Microsoft Corporation) X:\I386\system32\IXSSO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047952 ____R (Microsoft Corporation) X:\I386\system32\JOBEXEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0512000 ____R (Microsoft Corporation) X:\I386\system32\JSCRIPT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDBE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDBR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDCA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDCR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\KBDCZ.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDDA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\KBDDV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDGAE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDGR1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDHU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDIC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIT142.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDLA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDMAC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDNE.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\KBDNEC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDNO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDPL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDPL1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDPO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDRU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDSL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDUK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDUS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSX.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0007424 ____R (Microsoft Corporation) X:\I386\system32\KD1394.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007040 ____R (Microsoft Corporation) X:\I386\system32\KDCOM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0299520 ____R (Microsoft Corporation) X:\I386\system32\KERBEROS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0989696 ____R (Microsoft Corporation) X:\I386\system32\KERNEL32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002000 ____R (Microsoft Corporation) X:\I386\system32\KEYBOARD.DRV
2003-12-10 17:52 - 2003-12-10 17:52 - 0046592 ____R () X:\I386\system32\KEYBOARD.EXE
2008-04-14 02:20 - 2008-04-14 02:20 - 0042537 ____R () X:\I386\system32\KEYBOARD.SYS
2004-02-17 19:46 - 2004-02-17 19:46 - 0019456 ____R () X:\I386\system32\KEYDOWN.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\KMDDSP.TSP
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\KMSVC.DLL
2008-04-14 02:23 - 2008-04-14 02:23 - 0092224 ____R (Microsoft Corporation) X:\I386\system32\KRNL386.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0047066 ____R () X:\I386\system32\KSC.NLS
2003-10-08 20:05 - 2003-10-08 20:05 - 0049664 ____R (Karen Kenworthy) X:\I386\system32\KarenWareInet.exe
2003-06-20 12:00 - 2003-06-20 12:00 - 0009728 ____R (Microsoft Corporation) X:\I386\system32\LABEL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0221600 ____R (Microsoft Corporation) X:\I386\system32\LANMAN.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\LICMGR10.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\LINKINFO.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\LMHSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0399872 ____R (Microsoft Corporation) X:\I386\system32\LMRT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0097280 ____R (Microsoft Corporation) X:\I386\system32\LOADPERF.DLL
2008-02-29 18:40 - 2008-02-29 18:40 - 0265948 ____R () X:\I386\system32\LOCALE.NLS
2008-04-14 09:41 - 2008-04-14 09:41 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\LOCALSPL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0075264 ____R (Microsoft Corporation) X:\I386\system32\LOCATOR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\LODCTR.EXE
2008-10-15 21:14 - 2008-10-15 21:14 - 0007536 ____R () X:\I386\system32\LOGMESSAGES.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0220672 ____R (Microsoft Corporation) X:\I386\system32\LOGON.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0514560 ____R (Microsoft Corporation) X:\I386\system32\LOGONUI.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\LPK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\LPQ.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\LPR.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0728064 ____R (Microsoft Corporation) X:\I386\system32\LSASRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\LSASS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002560 ____R (Microsoft Corporation) X:\I386\system32\LZ32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009936 ____R (Microsoft Corporation) X:\I386\system32\LZEXPAND.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000168 ____R () X:\I386\system32\L_EXCEPT.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0007046 ____R () X:\I386\system32\L_INTL.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0187904 ____R (Microsoft Corporation) X:\I386\system32\MAIN.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MAKECAB.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0112128 ____R (Microsoft Corporation) X:\I386\system32\MAPI32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\MCASTMIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0073376 ____R (Microsoft Corporation) X:\I386\system32\MCIAVI.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0025264 ____R (Microsoft Corporation) X:\I386\system32\MCISEQ.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\MCIWAVE.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0118272 ____R (Microsoft Corporation) X:\I386\system32\MDMINST.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0924432 ____R (Microsoft Corporation) X:\I386\system32\MFC40.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0927504 ____R (Microsoft Corporation) X:\I386\system32\MFC40U.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1028096 ____R (Microsoft Corporation) X:\I386\system32\MFC42.DLL
2007-04-03 12:44 - 2007-04-03 12:44 - 0981760 ____R (Microsoft Corporation) X:\I386\system32\MFC42U.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0673088 ____R () X:\I386\system32\MLANG.DAT
2008-04-14 09:41 - 2008-04-14 09:41 - 0586240 ____R (Microsoft Corporation) X:\I386\system32\MLANG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1414656 ____R (Microsoft Corporation) X:\I386\system32\MMC.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0163328 ____R (Microsoft Corporation) X:\I386\system32\MMCBASE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1872896 ____R (Microsoft Corporation) X:\I386\system32\MMCNDMGR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\MMCSHEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0001383 ____R () X:\I386\system32\MMDRIVER.INF
2008-04-14 09:42 - 2008-04-14 09:42 - 0618496 ____R (Microsoft Corporation) X:\I386\system32\MMSYS.CPL
2008-04-14 02:24 - 2008-04-14 02:24 - 0068768 ____R (Microsoft Corporation) X:\I386\system32\MMSYSTEM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0207360 ____R (Microsoft Corporation) X:\I386\system32\MOBSYNC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0153600 ____R (Microsoft Corporation) X:\I386\system32\MODEMUI.DLL
2008-04-14 02:15 - 2008-04-14 02:15 - 0216064 ____R (Microsoft Corporation) X:\I386\system32\MORICONS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\MOUNTVOL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002032 ____R (Microsoft Corporation) X:\I386\system32\MOUSE.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0059904 ____R (Microsoft Corporation) X:\I386\system32\MPR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0087040 ____R (Microsoft Corporation) X:\I386\system32\MPRAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\MPRDDM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0099840 ____R (Microsoft Corporation) X:\I386\system32\MPRMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047104 ____R (Microsoft Corporation) X:\I386\system32\MPRUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0061168 ____R (Microsoft Corporation) X:\I386\system32\MSACM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0071680 ____R (Microsoft Corporation) X:\I386\system32\MSACM32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\MSACM32.DRV
2008-04-14 09:40 - 2008-04-14 09:40 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\MSAFD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MSASN1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\MSCAT32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000817 ____R () X:\I386\system32\MSCDEXNT.EXE
2005-12-18 16:50 - 2005-12-18 16:50 - 0000963 ____R () X:\I386\system32\MSCLIENT.CMD
2004-12-03 19:12 - 2004-12-03 19:12 - 0000110 ____R () X:\I386\system32\MSCLISRV.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0073728 ____R (Microsoft Corporation) X:\I386\system32\MSCMS.DLL
2005-04-15 23:58 - 2005-04-15 23:58 - 1071088 ____R (Microsoft Corporation) X:\I386\system32\MSCOMCTL.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0297984 ____R (Microsoft Corporation) X:\I386\system32\MSCTF.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0177152 ____R (Microsoft Corporation) X:\I386\system32\MSCTFIME.IME
2008-04-14 02:54 - 2008-04-14 02:54 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\MSDATSRC.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0956928 ____R (Microsoft Corporation) X:\I386\system32\MSDTCTM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0161792 ____R (Microsoft Corporation) X:\I386\system32\MSDTCUIU.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0844314 ____R () X:\I386\system32\MSDXM.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0539136 ____R (Microsoft Corporation) X:\I386\system32\MSFTEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0997376 ____R (Microsoft Corporation) X:\I386\system32\MSGINA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0033792 ____R (Microsoft Corporation) X:\I386\system32\MSGSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0029184 ____R (Microsoft Corporation) X:\I386\system32\MSHTA.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 3066880 ____R (Microsoft Corporation) X:\I386\system32\MSHTML.DLL
2008-04-14 01:56 - 2008-04-14 01:56 - 1351168 ____R (Microsoft Corporation) X:\I386\system32\MSHTML.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0449024 ____R (Microsoft Corporation) X:\I386\system32\MSHTMLED.DLL
2008-04-14 01:56 - 2008-04-14 01:56 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\MSHTMLER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 2843136 ____R (Microsoft Corporation) X:\I386\system32\MSI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0051712 ____R (Microsoft Corporation) X:\I386\system32\MSIDENT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\MSIDNTLD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0248832 ____R (Microsoft Corporation) X:\I386\system32\MSIEFTP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0004608 ____R (Microsoft Corporation) X:\I386\system32\MSIMG32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0159232 ____R (Microsoft Corporation) X:\I386\system32\MSIMTF.DLL
2007-10-22 19:00 - 2007-10-22 19:00 - 1516568 ____R (Microsoft Corporation) X:\I386\system32\MSJET40.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\MSLS31.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0105984 ____R (Microsoft Corporation) X:\I386\system32\MSOERT2.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\MSPAINT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0041984 ____R (Microsoft Corporation) X:\I386\system32\MSPORTS.DLL
2008-04-14 01:53 - 2008-04-14 01:53 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\MSPRIVS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069632 ____R (Microsoft Corporation) X:\I386\system32\MSR2C.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\MSRATING.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\MSSCRIPT.OCX
2004-12-17 16:16 - 2004-12-17 16:16 - 0001405 ____R () X:\I386\system32\MSSERVER.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\MSSHA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\MSSIGN32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004608 ____R (Microsoft Corporation) X:\I386\system32\MSSIP32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\MSSWCH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\MSSWCHX.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0274944 ____R (Microsoft Corporation) X:\I386\system32\MSTASK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0532480 ____R (Microsoft Corporation) X:\I386\system32\MSTIME.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0116224 ____R (Microsoft Corporation) X:\I386\system32\MSTLSAPI.DLL
2004-08-04 05:59 - 2004-08-04 05:59 - 0407552 ____R (Microsoft Corporation) X:\I386\system32\MSTSC.EXE
2004-08-04 05:59 - 2004-08-04 05:59 - 0655360 ____R (Microsoft Corporation) X:\I386\system32\MSTSCAX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0132608 ____R (Microsoft Corporation) X:\I386\system32\MSV1_0.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 1355776 ____R (Microsoft Corporation) X:\I386\system32\MSVBVM50.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1384479 ____R (Microsoft Corporation) X:\I386\system32\MSVBVM60.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MSVCIRT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0413696 ____R (Microsoft Corporation) X:\I386\system32\MSVCP60.DLL
2005-05-07 23:59 - 2005-05-07 23:59 - 0348160 ____R (Microsoft Corporation) X:\I386\system32\MSVCR71.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0253952 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT20.DLL
2008-04-14 04:00 - 2008-04-14 04:00 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT40.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0121344 ____R (Microsoft Corporation) X:\I386\system32\MSVFW32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0126912 ____R (Microsoft Corporation) X:\I386\system32\MSVIDEO.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0203776 ____R (Microsoft Corporation) X:\I386\system32\MSWEBDVD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0245248 ____R (Microsoft Corporation) X:\I386\system32\MSWSOCK.DLL
2007-04-02 22:21 - 2007-04-02 22:21 - 0621344 ____R (Microsoft Corporation) X:\I386\system32\MSWSTR10.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0506368 ____R (Microsoft Corporation) X:\I386\system32\MSXML.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0701440 ____R (Microsoft Corporation) X:\I386\system32\MSXML2.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0037916 ____R (Microsoft Corporation) X:\I386\system32\MSXML2R.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1104896 ____R (Microsoft Corporation) X:\I386\system32\MSXML3.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\MSXML3R.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\MSXMLR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\MTXCLU.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\MTXDM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0004096 ____R (Microsoft Corporation) X:\I386\system32\MTXEX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\MTXLEGIH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0090112 ____R (Microsoft Corporation) X:\I386\system32\MYCOMPUT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0090624 ____R (Microsoft Corporation) X:\I386\system32\MYDOCS.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0061788 ____R (Microsoft Corporation) X:\I386\system32\MYNDI.DLL
2003-11-03 22:45 - 2003-11-03 22:45 - 0000069 ____R () X:\I386\system32\MYPBK.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0030208 ____R (Microsoft Corporation) X:\I386\system32\NAPIPSEC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0193024 ____R (Microsoft Corporation) X:\I386\system32\NAPMONTR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0176640 ____R (Microsoft Corporation) X:\I386\system32\NAPSTAT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\NBTSTAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0036352 ____R (Microsoft Corporation) X:\I386\system32\NCOBJAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\NCPA.CPL
2010-02-25 00:32 - 2010-02-25 00:32 - 0184320 ____R (Intel® Corporation) X:\I386\system32\NCS2SETP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\NCXPNT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\NDDEAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\NDPTSP.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0042496 ____R (Microsoft Corporation) X:\I386\system32\NET.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0102446 ____R () X:\I386\system32\NET.HLP
2008-04-14 09:42 - 2008-04-14 09:42 - 0124928 ____R (Microsoft Corporation) X:\I386\system32\NET1.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0108464 ____R (Microsoft Corporation) X:\I386\system32\NETAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0337408 ____R (Microsoft Corporation) X:\I386\system32\NETAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0622592 ____R (Microsoft Corporation) X:\I386\system32\NETCFGX.DLL
2004-12-03 14:32 - 2004-12-03 14:32 - 0077824 ____R () X:\I386\system32\NETCONFIG.EXE
2004-12-03 02:05 - 2004-12-03 02:05 - 0006444 ____R () X:\I386\system32\NETCONFIG.TXT
2003-06-20 12:00 - 2003-06-20 12:00 - 0214016 ____R (Microsoft Corporation) X:\I386\system32\NETEVENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0139264 ____R (Microsoft Corporation) X:\I386\system32\NETID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0407040 ____R (Microsoft Corporation) X:\I386\system32\NETLOGON.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0198144 ____R (Microsoft Corporation) X:\I386\system32\NETMAN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0171008 ____R (Microsoft Corporation) X:\I386\system32\NETMSG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0875008 ____R (Microsoft Corporation) X:\I386\system32\NETPLWIZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\NETRAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025600 ____R (Microsoft Corporation) X:\I386\system32\NETSETUP.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 1703936 ____R (Microsoft Corporation) X:\I386\system32\NETSHELL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0036864 ____R (Microsoft Corporation) X:\I386\system32\NETSTAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0080896 ____R (Microsoft Corporation) X:\I386\system32\NETUI0.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0245760 ____R (Microsoft Corporation) X:\I386\system32\NETUI1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0308224 ____R (Microsoft Corporation) X:\I386\system32\NETUI2.DLL
2008-01-13 22:49 - 2008-01-13 22:49 - 0184320 ____R (http://www.ezpcfix.net) X:\I386\system32\NETWORK.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0247808 ____R (Microsoft Corporation) X:\I386\system32\NEWDEV.DLL
2003-11-02 14:25 - 2003-11-02 14:25 - 0000055 ____R () X:\I386\system32\NEWPBK.CMD
2010-02-25 00:33 - 2010-02-25 00:33 - 0028536 ____R (Intel Corporation) X:\I386\system32\NICCO.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028272 ____R (Intel Corporation) X:\I386\system32\NICCO2.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028272 ____R (Intel Corporation) X:\I386\system32\NICCO26.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028792 ____R (Intel Corporation) X:\I386\system32\NICCO36.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0063352 ____R (Intel Corporation) X:\I386\system32\NICETCO.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0066424 ____R (Intel Corporation) X:\I386\system32\NICETCOE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0044664 ____R (Intel Corporation) X:\I386\system32\NICIN100.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061624 ____R (Intel Corporation) X:\I386\system32\NICINE6.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0062656 ____R (Intel Corporation) X:\I386\system32\NICINIXE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINIXN.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0035704 ____R (Intel Corporation) X:\I386\system32\NICINST.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0040056 ____R (Intel Corporation) X:\I386\system32\NICINST6.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0062840 ____R (Intel Corporation) X:\I386\system32\NICINSTE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0041080 ____R (Intel Corporation) X:\I386\system32\NICINSTG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0062656 ____R (Intel Corporation) X:\I386\system32\NICINSTK.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINSTQ.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINSTY.DLL
2006-02-18 19:14 - 2006-02-18 19:14 - 0025600 ____R (NirSoft) X:\I386\system32\NIRCMD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\NLHTML.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\NOTEPAD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0076800 ____R (Microsoft Corporation) X:\I386\system32\NSLOOKUP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 1200640 ____R (Microsoft Corporation) X:\I386\system32\NTBACKUP.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0706048 ____R (Microsoft Corporation) X:\I386\system32\NTDLL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0027866 ____R () X:\I386\system32\NTDOS.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029146 ____R () X:\I386\system32\NTDOS404.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029370 ____R () X:\I386\system32\NTDOS411.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029274 ____R () X:\I386\system32\NTDOS412.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029146 ____R () X:\I386\system32\NTDOS804.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0067072 ____R (Microsoft Corporation) X:\I386\system32\NTDSAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\NTDSBCLI.DLL
2008-04-14 02:19 - 2008-04-14 02:19 - 0033840 ____R () X:\I386\system32\NTIO.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0034560 ____R () X:\I386\system32\NTIO404.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0035648 ____R () X:\I386\system32\NTIO411.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0035424 ____R () X:\I386\system32\NTIO412.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0034560 ____R () X:\I386\system32\NTIO804.SYS
2008-04-14 04:54 - 2008-04-14 04:54 - 2145280 ____R (Microsoft Corporation) X:\I386\system32\NTKRNLMP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\NTLANMAN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\NTLANUI2.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\NTLSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0118784 ____R (Microsoft Corporation) X:\I386\system32\NTMARTA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0040960 ____R (Microsoft Corporation) X:\I386\system32\NTMSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0179200 ____R (Microsoft Corporation) X:\I386\system32\NTMSDBA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0036864 ____R (Microsoft Corporation) X:\I386\system32\NTMSEVT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0488448 ____R (Microsoft Corporation) X:\I386\system32\NTMSMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026209 ____R () X:\I386\system32\NTMSMGR.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0032968 ____R () X:\I386\system32\NTMSOPRQ.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0435200 ____R (Microsoft Corporation) X:\I386\system32\NTMSSVC.DLL
2008-04-14 04:57 - 2008-04-14 04:57 - 2188928 ____R (Microsoft Corporation) X:\I386\system32\NTOSKRNL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0031744 ____R (Microsoft Corporation) X:\I386\system32\NTSD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0143360 ____R (Microsoft Corporation) X:\I386\system32\NTSHRUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0420864 ____R (Microsoft Corporation) X:\I386\system32\NTVDM.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0015360 ____R (Microsoft Corporation) X:\I386\system32\NTVDMD.DLL
2004-03-18 01:34 - 2004-03-18 01:34 - 0059392 ____R () X:\I386\system32\NU2MENUMSG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0257024 ____R (Microsoft Corporation) X:\I386\system32\NUSRMGR.CPL
2010-02-25 00:33 - 2010-02-25 00:33 - 0031744 ____R (NVIDIA Corporation) X:\I386\system32\NVCOE.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0151552 ____R (NVIDIA Corporation) X:\I386\system32\NVCONRM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0064000 ____R (Microsoft Corporation) X:\I386\system32\NWAPI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\NWCFG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\NWEVENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0142336 ____R (Microsoft Corporation) X:\I386\system32\NWPROVAU.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\NWWKS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0270336 ____R (Microsoft Corporation) X:\I386\system32\OAKLEY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0286208 ____R (Microsoft Corporation) X:\I386\system32\OBJSEL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0096256 ____R (Microsoft Corporation) X:\I386\system32\OCCACHE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0067584 ____R (Microsoft Corporation) X:\I386\system32\OCMANAGE.DLL
2007-04-02 23:35 - 2007-04-02 23:35 - 0026224 ____R (Microsoft Corporation) X:\I386\system32\ODBC16GT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0249856 ____R (Microsoft Corporation) X:\I386\system32\ODBC32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\ODBC32GT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\ODBCAD32.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\ODBCBCP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\ODBCCONF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0069632 ____R (Microsoft Corporation) X:\I386\system32\ODBCCONF.EXE
2008-04-14 02:56 - 2008-04-14 02:56 - 0004310 ____R () X:\I386\system32\ODBCCONF.RSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\ODBCCP32.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0106496 ____R (Microsoft Corporation) X:\I386\system32\ODBCCP32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\ODBCCR32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\ODBCCU32.DLL
2008-04-14 02:56 - 2008-04-14 02:56 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\ODBCINT.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0053279 ____R (Microsoft Corporation) X:\I386\system32\ODBCJI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0278559 ____R (Microsoft Corporation) X:\I386\system32\ODBCJT32.DLL
2008-04-14 02:56 - 2008-04-14 02:56 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\ODBCP32R.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0147456 ____R (Microsoft Corporation) X:\I386\system32\ODBCTRAC.DLL
2009-08-28 18:28 - 2009-08-28 18:28 - 0001095 ____R () X:\I386\system32\OEMINFO.INI
2005-12-15 00:06 - 2005-12-15 00:06 - 0051130 ____R () X:\I386\system32\OEMLOGO.BMP
2003-06-20 12:00 - 2003-06-20 12:00 - 0039744 ____R (Microsoft Corporation) X:\I386\system32\OLE2.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0169520 ____R (Microsoft Corporation) X:\I386\system32\OLE2DISP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0153008 ____R (Microsoft Corporation) X:\I386\system32\OLE2NLS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1287168 ____R (Microsoft Corporation) X:\I386\system32\OLE32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0163328 ____R (Microsoft Corporation) X:\I386\system32\OLEACC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\OLEACCRC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0551936 ____R (Microsoft Corporation) X:\I386\system32\OLEAUT32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0082944 ____R (Microsoft Corporation) X:\I386\system32\OLECLI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074752 ____R (Microsoft Corporation) X:\I386\system32\OLECLI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0037376 ____R (Microsoft Corporation) X:\I386\system32\OLECNV32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0122880 ____R (Microsoft Corporation) X:\I386\system32\OLEDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0107008 ____R (Microsoft Corporation) X:\I386\system32\OLEPRN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0084992 ____R (Microsoft Corporation) X:\I386\system32\OLEPRO32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0024064 ____R (Microsoft Corporation) X:\I386\system32\OLESVR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\OLESVR32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\OLETHK32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\ONEX.DLL
2007-06-09 05:21 - 2007-06-09 05:21 - 0005957 ____R () X:\I386\system32\ONEX_V1.XSD
2008-04-14 09:42 - 2008-04-14 09:42 - 0713728 ____R (Microsoft Corporation) X:\I386\system32\OPENGL32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0215552 ____R (Microsoft Corporation) X:\I386\system32\OSK.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0067584 ____R (Microsoft Corporation) X:\I386\system32\OSUNINST.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0021504 ____R (Microsoft Corporation) X:\I386\system32\PATHPING.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0284160 ____R (Microsoft Corporation) X:\I386\system32\PDH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0108057 ____R (Comtrol® Corporation) X:\I386\system32\PEER.EXE
2009-07-27 22:19 - 2009-07-27 22:19 - 0383488 ____R (TheTruth) X:\I386\system32\PENETCFG.EXE
2009-04-17 04:09 - 2009-04-17 04:09 - 0000526 ____R () X:\I386\system32\PENETCFG.INI
2009-07-27 22:08 - 2009-07-27 22:08 - 0002531 ____R () X:\I386\system32\PENETCFG.LIC
2009-08-29 16:58 - 2009-08-29 16:58 - 0024389 ____R () X:\I386\system32\PENETCFG.TXT
2009-04-17 01:33 - 2009-04-17 01:33 - 0000171 ____R () X:\I386\system32\PENETCFG-DHCP.INI
2004-02-19 19:23 - 2004-02-19 19:23 - 0000221 ____R () X:\I386\system32\PENETCFG-STATIC.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0015360 ____R (Microsoft Corporation) X:\I386\system32\PENTNT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002837 ____R () X:\I386\system32\PERFCI.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0039936 ____R (Microsoft Corporation) X:\I386\system32\PERFCTRS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\PERFDISK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000140 ____R () X:\I386\system32\PERFFILT.H
2003-06-20 12:00 - 2003-06-20 12:00 - 0001128 ____R () X:\I386\system32\PERFFILT.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\PERFMON.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0058273 ____R () X:\I386\system32\PERFMON.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\PERFNET.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\PERFNW.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\PERFOS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034816 ____R (Microsoft Corporation) X:\I386\system32\PERFPROC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\PERFTS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002682 ____R () X:\I386\system32\PERFWCI.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0176128 ____R (Microsoft Corporation) X:\I386\system32\PHOTOWIZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0035328 ____R (Microsoft Corporation) X:\I386\system32\PID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\PING.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0068608 ____R (Microsoft Corporation) X:\I386\system32\PLUGIN.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0046592 ____R (Microsoft Corporation) X:\I386\system32\PMSPL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\PNGFILT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0105472 ____R (Microsoft Corporation) X:\I386\system32\POLSTORE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0149020 ____R (Comtrol® Corporation) X:\I386\system32\PORTMON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\POWERCFG.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\POWRPROF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0083748 ____R () X:\I386\system32\PRC.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0083748 ____R () X:\I386\system32\PRCP.NLS
2007-05-17 21:33 - 2007-05-17 21:33 - 0098304 ____R (DCS-Computer, 32839 Steinheim) X:\I386\system32\PRELOGON.EXE
2009-08-28 18:29 - 2009-08-28 18:29 - 0000299 ____R () X:\I386\system32\PRELOGON.INI
2007-05-17 22:39 - 2007-05-17 22:39 - 0000245 ____R () X:\I386\system32\PRELOGONLANGUAGE.LNG
2008-11-12 04:48 - 2008-11-12 04:48 - 0221184 ____R (DCS-Computer: www.drowaelder.de) X:\I386\system32\PRESHELL.EXE
2010-06-09 02:25 - 2010-06-09 02:25 - 0008415 ____R () X:\I386\system32\PRESHELL.INI
2007-03-18 23:13 - 2007-03-18 23:13 - 0003177 ____R () X:\I386\system32\PRESHELLLANGUAGE.LNG
2015-08-11 17:53 - 2015-08-11 17:53 - 0001266 ____R () X:\I386\system32\PRFLDRS.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\PRINT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0560640 ____R (Microsoft Corporation) X:\I386\system32\PRINTUI.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0081920 ____R (Intel Corporation) X:\I386\system32\PROCTEXE.OCX
2005-12-05 01:15 - 2005-12-05 01:15 - 0125908 ____R () X:\I386\system32\PROFILES.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027648 ____R (Microsoft Corporation) X:\I386\system32\PROFMAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0109568 ____R (Microsoft Corporation) X:\I386\system32\PROGMAN.EXE
2010-02-25 00:32 - 2010-02-25 00:32 - 0244312 ____R (Intel Corporation) X:\I386\system32\PRONTOBJ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\PSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0043520 ____R (Microsoft Corporation) X:\I386\system32\PSTOREC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\PSTORSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0150528 ____R (Microsoft Corporation) X:\I386\system32\QAGENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0291328 ____R (Microsoft Corporation) X:\I386\system32\QAGENTRT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0062464 ____R (Microsoft Corporation) X:\I386\system32\QCLIPROV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0279040 ____R () X:\I386\system32\QDV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0562176 ____R () X:\I386\system32\QEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1288192 ____R () X:\I386\system32\QUARTZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1435648 ____R (Microsoft Corporation) X:\I386\system32\QUERY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0076800 ____R (Microsoft Corporation) X:\I386\system32\QUTIL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\RASADHLP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0237056 ____R (Microsoft Corporation) X:\I386\system32\RASAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0088576 ____R (Microsoft Corporation) X:\I386\system32\RASAUTO.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0079872 ____R (Microsoft Corporation) X:\I386\system32\RASCHAP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\RASCTRS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003368 ____R () X:\I386\system32\RASCTRS.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0011264 ____R (Microsoft Corporation) X:\I386\system32\RASDIAL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0658432 ____R (Microsoft Corporation) X:\I386\system32\RASDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\RASMAN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0186368 ____R (Microsoft Corporation) X:\I386\system32\RASMANS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022528 ____R (Microsoft Corporation) X:\I386\system32\RASMXS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\RASPHONE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0210944 ____R (Microsoft Corporation) X:\I386\system32\RASPPP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0061952 ____R (Microsoft Corporation) X:\I386\system32\RASQEC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0023552 ____R (Microsoft Corporation) X:\I386\system32\RASRAD.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012800 ____R (Microsoft Corporation) X:\I386\system32\RASSER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0058368 ____R (Microsoft Corporation) X:\I386\system32\RASTAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0150016 ____R (Microsoft Corporation) X:\I386\system32\RASTLS.DLL
2008-04-14 02:22 - 2008-04-14 02:22 - 0003338 ____R () X:\I386\system32\REDIR.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0050176 ____R (Microsoft Corporation) X:\I386\system32\REG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0049664 ____R (Microsoft Corporation) X:\I386\system32\REGAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\REGEDIT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\REGEDT32.EXE
2004-04-27 17:44 - 2004-04-27 17:44 - 0010240 ____R () X:\I386\system32\REGEXPANDER.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\REGSVR32.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0012800 ____R (Microsoft Corporation) X:\I386\system32\REPLACE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0058880 ____R (Microsoft Corporation) X:\I386\system32\RESUTILS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0433664 ____R (Microsoft Corporation) X:\I386\system32\RICHED20.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\RICHED32.DLL
2000-10-09 13:47 - 2000-10-09 13:47 - 0204296 ____R (Microsoft Corporation) X:\I386\system32\RICHTX32.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0003072 ____R (Microsoft Corporation) X:\I386\system32\RNR20.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\ROUTE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0584704 ____R (Microsoft Corporation) X:\I386\system32\RPCRT4.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0399360 ____R (Microsoft Corporation) X:\I386\system32\RPCSS.DLL
2008-04-14 03:07 - 2008-04-14 03:07 - 0208384 ____R (Microsoft Corporation) X:\I386\system32\RSAENH.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039936 ____R (Microsoft Corporation) X:\I386\system32\RSHX32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0132608 ____R (Microsoft Corporation) X:\I386\system32\RSVP.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0023552 ____R (Microsoft Corporation) X:\I386\system32\RSVPMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009728 ____R (Microsoft Corporation) X:\I386\system32\RSVPPERF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0092672 ____R (Microsoft Corporation) X:\I386\system32\RSVPSP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0031744 ____R (Microsoft Corporation) X:\I386\system32\RTIPXMIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\RTM.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0073728 ____R () X:\I386\system32\RTNICPROP32.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0073728 ____R (Realtek Semiconductor Corporation) X:\I386\system32\RTNUNINST32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\RTUTILS.DLL
2004-12-03 19:06 - 2004-12-03 19:06 - 0000236 ____R () X:\I386\system32\RUN.CMD
2006-02-15 02:19 - 2006-02-15 02:19 - 0036864 ____R (DCS-Computer) X:\I386\system32\RUN-ONCE-EX.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\RUNDLL32.EXE
2009-03-16 02:15 - 2009-03-16 02:15 - 0020480 ____R () X:\I386\system32\RUNHIDE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\RUNONCE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0064000 ____R (Microsoft Corporation) X:\I386\system32\SAMLIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0415744 ____R (Microsoft Corporation) X:\I386\system32\SAMSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0270848 ____R () X:\I386\system32\SBE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0181248 ____R (Microsoft Corporation) X:\I386\system32\SCECLI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0314880 ____R (Microsoft Corporation) X:\I386\system32\SCESRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\SCHANNEL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0180224 ____R (Microsoft Corporation) X:\I386\system32\SCROBJ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0172032 ____R (Microsoft Corporation) X:\I386\system32\SCRRUN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0130048 ____R (Microsoft Corporation) X:\I386\system32\SDPBLB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\SECUR32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\SECURITY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0054784 ____R (Microsoft Corporation) X:\I386\system32\SENDMAIL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\SENS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\SENSAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\SENSCFG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SERIALUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0108544 ____R (Microsoft Corporation) X:\I386\system32\SERVICES.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0033464 ____R () X:\I386\system32\SERVICES.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\SERWVDRV.DLL
2008-04-19 17:33 - 2008-04-19 17:33 - 0000231 ____R () X:\I386\system32\SETMAXRES.CMD
2008-04-01 23:41 - 2008-04-01 23:41 - 0033280 ____R () X:\I386\system32\SETMAXRES.EXE
2005-07-04 13:48 - 2005-07-04 13:48 - 0040448 ____R () X:\I386\system32\SETPAGEFILE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\SETUP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0985088 ____R (Microsoft Corporation) X:\I386\system32\SETUPAPI.DLL
2015-08-11 17:49 - 2015-08-11 17:49 - 0339968 ____R () X:\I386\system32\SETUPREG.HIV
2008-04-14 09:42 - 2008-04-14 09:42 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\SFC.DLL
2009-09-03 01:39 - 2009-09-03 01:39 - 1614848 ____R (Microsoft Corporation) X:\I386\system32\SFCFILES.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0140288 ____R (Microsoft Corporation) X:\I386\system32\SFC_OS.DLL
2008-04-14 02:33 - 2008-04-14 02:33 - 0549376 ____R (Microsoft Corporation) X:\I386\system32\SHDOCLC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1499136 ____R (Microsoft Corporation) X:\I386\system32\SHDOCVW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\SHELL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 8461312 ____R (Microsoft Corporation) X:\I386\system32\SHELL32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0435712 ____R (Microsoft Corporation) X:\I386\system32\SHELLSTYLE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\SHFOLDER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\SHGINA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0438272 ____R (Microsoft Corporation) X:\I386\system32\SHIMGVW.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0474112 ____R (Microsoft Corporation) X:\I386\system32\SHLWAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0045056 ____R (Microsoft Corporation) X:\I386\system32\SHMGRATE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027648 ____R (Microsoft Corporation) X:\I386\system32\SHSCRAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\SHSVCS.DLL
2005-10-06 01:08 - 2005-10-06 01:08 - 0097280 ____R () X:\I386\system32\SHUTDOWN.EXE
2004-12-04 16:04 - 2004-12-04 16:04 - 0048128 ____R () X:\I386\system32\SHUTDOWNP.EXE
2004-12-04 16:08 - 2004-12-04 16:08 - 0048128 ____R () X:\I386\system32\SHUTDOWNS.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\SIGTAB.DLL
2008-04-14 02:54 - 2008-04-14 02:54 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\SIMPDATA.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\SLAYERXP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0050688 ____R (Microsoft Corporation) X:\I386\system32\SMSS.EXE
2003-02-28 16:32 - 2003-02-28 16:32 - 0011776 ____R (Windows ® 2000 DDK provider) X:\I386\system32\SNETCFG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\SNMPAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\SOFTPUB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\SORT.EXE
2006-12-30 03:38 - 2006-12-30 03:38 - 0262148 ____R () X:\I386\system32\SORTKEY.NLS
2006-12-30 03:38 - 2006-12-30 03:38 - 0023044 ____R () X:\I386\system32\SORTTBLS.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0001744 ____R (Microsoft Corporation) X:\I386\system32\SOUND.DRV
2001-08-18 02:36 - 2001-08-18 02:36 - 0106584 ____R (Perle Systems Ltd.) X:\I386\system32\SPDPORTS.DLL
2007-02-07 17:27 - 2007-02-07 17:27 - 0014104 ____R (Windows ® Server 2003 DDK provider) X:\I386\system32\SPEEDFAN.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0075264 ____R (Microsoft Corporation) X:\I386\system32\SPOOLSS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\SPOOLSV.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0024661 ____R (Perle Systems Ltd.) X:\I386\system32\SPXCOINS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0659485 ____R (Specialix International Ltd.) X:\I386\system32\SPXPORTS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0726078 ____R (Microsoft Corporation) X:\I386\system32\SRCHUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0096768 ____R (Microsoft Corporation) X:\I386\system32\SRVSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0704512 ____R (Microsoft Corporation) X:\I386\system32\SS3DFO.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\SSBEZIER.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0034816 ____R (Microsoft Corporation) X:\I386\system32\SSDPAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0071680 ____R (Microsoft Corporation) X:\I386\system32\SSDPSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0393216 ____R (Microsoft Corporation) X:\I386\system32\SSFLWBOX.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\SSMARQUE.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\SSMYST.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0610304 ____R (Microsoft Corporation) X:\I386\system32\SSPIPES.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SSSTARS.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0679936 ____R (Microsoft Corporation) X:\I386\system32\SSTEXT3D.SCR
2006-01-11 03:37 - 2006-01-11 03:37 - 0092160 ____R (Matthias Huebner) X:\I386\system32\STARFLIGHT.SCR
2006-01-18 20:50 - 2006-01-18 20:50 - 0000195 ____R () X:\I386\system32\START_COOLMON.CMD
2007-01-03 18:17 - 2007-01-03 18:17 - 0000094 ____R () X:\I386\system32\START_GBCHECK.CMD
2006-04-03 00:08 - 2006-04-03 00:08 - 0001553 ____R () X:\I386\system32\START_NETSERVICES.CMD
2004-04-24 23:01 - 2004-04-24 23:01 - 0001207 ____R () X:\I386\system32\START_RAS.CMD
2005-12-11 04:35 - 2005-12-11 04:35 - 0000091 ____R () X:\I386\system32\START_ROCKETDOCK.CMD
2003-11-28 21:34 - 2003-11-28 21:34 - 0000118 ____R () X:\I386\system32\START_VNCNBHOOD.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\STCLIENT.DLL
2008-04-14 01:12 - 2008-04-14 01:12 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\STDOLE2.TLB
2006-12-29 22:34 - 2006-12-29 22:34 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\STDOLE32.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\STI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\STIMON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0136704 ____R (Microsoft Corporation) X:\I386\system32\STI_CI.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0155648 ____R (Stallion Technologies) X:\I386\system32\STLNPROP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0121856 ____R (Microsoft Corporation) X:\I386\system32\STOBJECT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004208 ____R (Microsoft Corporation) X:\I386\system32\STORAGE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074752 ____R (Microsoft Corporation) X:\I386\system32\STORPROP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\STREAMCI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\SUBST.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SVCHOST.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0138752 ____R (Microsoft Corporation) X:\I386\system32\SWPRV.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0094293 ____R (Perle Systems Ltd. ) X:\I386\system32\SXPORTS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0713216 ____R (Microsoft Corporation) X:\I386\system32\SXS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\SYNCENG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0191488 ____R (Microsoft Corporation) X:\I386\system32\SYNCUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0300544 ____R (Microsoft Corporation) X:\I386\system32\SYSDM.CPL
2008-04-14 09:40 - 2008-04-14 09:40 - 0218624 ____R (Microsoft Corporation) X:\I386\system32\SYSMON.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0106496 ____R (Microsoft Corporation) X:\I386\system32\SYSOCMGR.EXE
2009-09-03 01:39 - 2009-09-03 01:39 - 0990208 ____R (Microsoft Corporation) X:\I386\system32\SYSSETUP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003360 ____R (Microsoft Corporation) X:\I386\system32\SYSTEM.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0019200 ____R (Microsoft Corporation) X:\I386\system32\TAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0858624 ____R (Microsoft Corporation) X:\I386\system32\TAPI3.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0181760 ____R (Microsoft Corporation) X:\I386\system32\TAPI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\TAPIPERF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0249856 ____R (Microsoft Corporation) X:\I386\system32\TAPISRV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0078848 ____R (Microsoft Corporation) X:\I386\system32\TAPIUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135680 ____R (Microsoft Corporation) X:\I386\system32\TASKMGR.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\TDC.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\TELEPHON.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0075776 ____R (Microsoft Corporation) X:\I386\system32\TELNET.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0358400 ____R (Microsoft Corporation) X:\I386\system32\TERMMGR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0295424 ____R (Microsoft Corporation) X:\I386\system32\TERMSRV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\TFTP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0385536 ____R (Microsoft Corporation) X:\I386\system32\THEMEUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\TIMEDATE.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004048 ____R (Microsoft Corporation) X:\I386\system32\TIMER.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0013888 ____R (Microsoft Corporation) X:\I386\system32\TOOLHELP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\TRACERT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0031232 ____R (Microsoft Corporation) X:\I386\system32\TRAFFIC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\TWEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0177856 ____R (Microsoft Corporation) X:\I386\system32\TYPELIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\TZCHANGE.EXE
2008-01-20 17:37 - 2008-01-20 17:37 - 0052006 ____R () X:\I386\system32\UBCD4WIN.jpg
2006-04-06 03:14 - 2006-04-06 03:14 - 0000198 ____R () X:\I386\system32\UBCD4WIN-NU2MENU.CMD
2007-11-18 14:52 - 2007-11-18 14:52 - 0010136 ____R () X:\I386\system32\UBCD4WIN310.jpg
2006-02-24 00:15 - 2006-02-24 00:15 - 0000183 ____R () X:\I386\system32\UBCD4WINSTART.CMD
2007-09-26 14:01 - 2007-09-26 14:01 - 0001591 ____R () X:\I386\system32\UB_CHKDSK.CMD
2003-06-20 12:00 - 2003-06-20 12:00 - 0082432 ____R (Microsoft Corporation) X:\I386\system32\UFAT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0275456 ____R (Microsoft Corporation) X:\I386\system32\ULIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\UMDMXFRM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0123392 ____R (Microsoft Corporation) X:\I386\system32\UMPNPMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0089588 ____R () X:\I386\system32\UNICODE.NLS
2008-04-14 09:42 - 2008-04-14 09:42 - 0206848 ____R (Microsoft Corporation) X:\I386\system32\UNIMDM.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0074240 ____R (Microsoft Corporation) X:\I386\system32\UNIMDMAT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\UNIPLAT.DLL
2006-11-23 19:49 - 2006-11-23 19:49 - 0106496 ____R () X:\I386\system32\UNISOFS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0004096 ____R (Microsoft Corporation) X:\I386\system32\UNLODCTR.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0316416 ____R (Microsoft Corporation) X:\I386\system32\UNTFS.DLL
2004-05-26 23:31 - 2004-05-26 23:31 - 0163840 ____R () X:\I386\system32\UNZIP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0133632 ____R (Microsoft Corporation) X:\I386\system32\UPNP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\UPNPCONT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0185856 ____R (Microsoft Corporation) X:\I386\system32\UPNPHOST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0239616 ____R (Microsoft Corporation) X:\I386\system32\UPNPUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\UREG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0037888 ____R (Microsoft Corporation) X:\I386\system32\URL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0619520 ____R (Microsoft Corporation) X:\I386\system32\URLMON.DLL
2005-04-04 15:08 - 2005-04-04 15:08 - 0233803 ____R () X:\I386\system32\USB1394.REG
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\USBMON.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074240 ____R (Microsoft Corporation) X:\I386\system32\USBUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047872 ____R (Microsoft Corporation) X:\I386\system32\USER.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0578560 ____R (Microsoft Corporation) X:\I386\system32\USER32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0727040 ____R (Microsoft Corporation) X:\I386\system32\USERENV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\USERINIT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0406016 ____R (Microsoft Corporation) X:\I386\system32\USP10.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0025600 ____R (Microsoft Corporation) X:\I386\system32\UTILDLL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0218624 ____R (Microsoft Corporation) X:\I386\system32\UXTHEME.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0434176 ____R (Microsoft Corporation) X:\I386\system32\VBSCRIPT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\VCDEX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\VDMDBG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009008 ____R (Microsoft Corporation) X:\I386\system32\VER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0028672 ____R (Microsoft Corporation) X:\I386\system32\VERCLSID.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\VERSION.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009344 ____R (Microsoft Corporation) X:\I386\system32\VGA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002176 ____R (Microsoft Corporation) X:\I386\system32\VGA.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0051456 ____R (Microsoft Corporation) X:\I386\system32\VGA256.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018176 ____R (Microsoft Corporation) X:\I386\system32\VGA64K.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005232 ____R (Microsoft Corporation) X:\I386\system32\VGA850.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA860.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA861.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005200 ____R (Microsoft Corporation) X:\I386\system32\VGA863.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA865.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005168 ____R (Microsoft Corporation) X:\I386\system32\VGAOEM.FON
2008-04-14 09:42 - 2008-04-14 09:42 - 0430592 ____R (Microsoft Corporation) X:\I386\system32\VSSAPI.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0069632 ____R () X:\I386\system32\VUINS32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0175104 ____R (Microsoft Corporation) X:\I386\system32\W32TIME.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\W32TOPL.DLL
2008-04-14 04:15 - 2008-04-14 04:15 - 0017664 ____R (Microsoft Corporation) X:\I386\system32\WATCHDOG.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0049152 ____R (Microsoft Corporation) X:\I386\system32\WDIGEST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0276480 ____R (Microsoft Corporation) X:\I386\system32\WEBCHECK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135680 ____R (Microsoft Corporation) X:\I386\system32\WEBVW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013600 ____R (Microsoft Corporation) X:\I386\system32\WFWNET.DRV
2008-04-14 09:42 - 2008-04-14 09:42 - 0075776 ____R (Microsoft Corporation) X:\I386\system32\WIASCR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0589312 ____R (Microsoft Corporation) X:\I386\system32\WIASHEXT.DLL
2008-04-14 05:00 - 2008-04-14 05:00 - 1845632 ____R (Microsoft Corporation) X:\I386\system32\WIN32K.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0102400 ____R (Microsoft Corporation) X:\I386\system32\WIN32SPL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R () X:\I386\system32\WIN87EM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0354304 ____R (Microsoft Corporation) X:\I386\system32\WINHTTP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0666112 ____R (Microsoft Corporation) X:\I386\system32\WININET.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0032256 ____R (Microsoft Corporation) X:\I386\system32\WINIPSEC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0507904 ____R (Microsoft Corporation) X:\I386\system32\WINLOGON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0176128 ____R (Microsoft Corporation) X:\I386\system32\WINMM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002080 ____R (Microsoft Corporation) X:\I386\system32\WINOLDAP.MOD
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\WINRNR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0099328 ____R (Microsoft Corporation) X:\I386\system32\WINSCARD.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002864 ____R (Microsoft Corporation) X:\I386\system32\WINSOCK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\WINSPOOL.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0002112 ____R (Microsoft Corporation) X:\I386\system32\WINSPOOL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0293376 ____R (Microsoft Corporation) X:\I386\system32\WINSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0053760 ____R (Microsoft Corporation) X:\I386\system32\WINSTA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0176640 ____R (Microsoft Corporation) X:\I386\system32\WINTRUST.DLL
2009-04-17 03:53 - 2009-04-17 03:53 - 0000247 ____R () X:\I386\system32\WIRELESS-DHCP.INI
2009-04-17 03:52 - 2009-04-17 03:52 - 0000297 ____R () X:\I386\system32\WIRELESS-STATIC.INI
2005-05-12 12:08 - 2005-05-12 12:08 - 0083968 ____R (Dion Nicolaas) X:\I386\system32\WIZAPP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0132096 ____R (Microsoft Corporation) X:\I386\system32\WKSSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0172032 ____R (Microsoft Corporation) X:\I386\system32\WLDAP32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0092672 ____R (Microsoft Corporation) X:\I386\system32\WLNOTIFY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0027136 ____R (Microsoft Corporation) X:\I386\system32\WMDMLOG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\WMI.DLL
2008-10-15 21:14 - 2008-10-15 21:14 - 0044384 ____R (RealVNC Ltd.) X:\I386\system32\WM_HOOKS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0214528 ____R (Microsoft Corporation) X:\I386\system32\WORDPAD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0264192 ____R (Microsoft Corporation) X:\I386\system32\WOW32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002736 ____R (Microsoft Corporation) X:\I386\system32\WOWDEB.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0010368 ____R (Microsoft Corporation) X:\I386\system32\WOWEXEC.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0003200 ____R (Microsoft Corporation) X:\I386\system32\WOWFAX.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\WOWFAXUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\WS2HELP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0082432 ____R (Microsoft Corporation) X:\I386\system32\WS2_32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0155648 ____R (Microsoft Corporation) X:\I386\system32\WSCRIPT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0604160 ____R (Microsoft Corporation) X:\I386\system32\WSECEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0090112 ____R (Microsoft Corporation) X:\I386\system32\WSHEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\WSHISN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\WSHNETBS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\WSHOM.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0019456 ____R (Microsoft Corporation) X:\I386\system32\WSHTCPIP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0022528 ____R (Microsoft Corporation) X:\I386\system32\WSOCK32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\WTSAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0383488 ____R (Microsoft Corporation) X:\I386\system32\WZCDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0052736 ____R (Microsoft Corporation) X:\I386\system32\WZCSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0483840 ____R (Microsoft Corporation) X:\I386\system32\WZCSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\XCOPY.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0028288 ____R () X:\I386\system32\XJIS.NLS
2001-08-18 02:37 - 2001-08-18 02:37 - 0099865 ____R (Eicon Technology) X:\I386\system32\XLOG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0129024 ____R (Microsoft Corporation) X:\I386\system32\XMLPROV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0050176 ____R (Microsoft Corporation) X:\I386\system32\XMLPROVI.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0438784 ____R (Microsoft Corporation) X:\I386\system32\XPOB2RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0187392 ____R (Microsoft Corporation) X:\I386\system32\XPSP1RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 2897920 ____R (Microsoft Corporation) X:\I386\system32\XPSP2RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0689152 ____R (Microsoft Corporation) X:\I386\system32\XPSP3RES.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK50X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK51X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK60X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK62X86.DLL
2006-11-25 21:13 - 2006-11-25 21:13 - 0074201 ____R () X:\I386\system32\world.jpg

Some files in TEMP:
====================
C:\Documents and Settings\Username\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfamcc00002.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfamcc00003.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfamcc00004.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfareca00001.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfareca00002.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfareca00003.dll
C:\Documents and Settings\Username\Local Settings\Temp\sfareca00004.dll

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points (XP) =====================

RP: -> 2015-08-11 14:24 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1505

RP: -> 2015-08-06 23:38 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1504

RP: -> 2015-08-05 23:29 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1503

RP: -> 2015-08-03 23:42 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1502

RP: -> 2015-08-02 23:38 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1501

RP: -> 2015-08-01 22:40 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1500

RP: -> 2015-07-31 18:28 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1499

RP: -> 2015-07-30 01:10 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1498

RP: -> 2015-07-29 01:02 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1497

RP: -> 2015-07-28 00:30 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1496

RP: -> 2015-07-26 23:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1495

RP: -> 2015-07-25 22:58 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1494

RP: -> 2015-07-24 00:43 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1493

RP: -> 2015-07-23 00:23 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1492

RP: -> 2015-07-21 23:59 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1491

RP: -> 2015-07-20 23:05 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1490

RP: -> 2015-07-19 01:59 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1489

RP: -> 2015-07-17 21:13 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1488

RP: -> 2015-07-15 23:25 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1487

RP: -> 2015-07-14 23:18 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1486

RP: -> 2015-07-13 00:23 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1485

RP: -> 2015-07-11 23:48 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1484

RP: -> 2015-07-10 23:26 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1483

RP: -> 2015-07-10 22:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1482

RP: -> 2015-07-09 22:54 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1481

RP: -> 2015-07-09 22:32 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1480

RP: -> 2015-07-09 22:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1479

RP: -> 2015-07-09 22:29 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1478

RP: -> 2015-07-08 00:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1477

RP: -> 2015-07-06 23:03 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1476

RP: -> 2015-07-05 23:52 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1475

RP: -> 2015-07-04 14:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1474

RP: -> 2015-07-03 14:28 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1473

RP: -> 2015-07-02 02:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1472

RP: -> 2015-07-01 00:54 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1471

RP: -> 2015-06-29 23:43 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1470

RP: -> 2015-06-28 23:42 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1469

RP: -> 2015-06-26 22:24 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1468

RP: -> 2015-06-25 01:14 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1467

RP: -> 2015-06-23 00:02 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1466


==================== Memory info ===========================

Percentage of memory in use: 37%
Total physical RAM: 1790.42 MB
Available physical RAM: 1127.25 MB
Total Virtual: 1622.27 MB
Available Virtual: 1153.02 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:0.44 GB) (Free:0.43 GB) FAT
Drive c: (Windows) (Fixed) (Total:29.29 GB) (Free:9.19 GB) NTFS ==>[drive with boot components (Windows XP)]
Drive d: (Programs) (Fixed) (Total:436.46 GB) (Free:22.21 GB) NTFS
Drive e: (USB DISK) (Removable) (Total:3.73 GB) (Free:3.73 GB) FAT32
Drive x: (UBCD4Windows) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 95CB95CB)
Partition 1: (Active) - (Size=29.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=436.5 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: 69FC7055)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C)

==================== End of log ============================

 

Impressive ultimate boot CD - lots of useful programs.  I have the option of re-formatting the partition and installing my C:\ Drive image, but if the problem is on the G:\ Partition, I will just get infected again.

 

After running FRST, I tried the AVIRA Rescue Disk - It scanned the C:\ Drive in about 15 minutes and detected twelve infections:

 

I am attaching the log file.

 

I thought I was making progress, but now the system gives me a BSOD with:

 

STOP:  C000021A Fatal System Error

The windows Logon Process System terminated unexpectedly with a status of 0XC000135.  (0x000000 0x000000) the system has been shut down.

 

For background - I used to tweak a lot of registry settings and customizations in Windows.  I’ve gotten out of that habit.  Now, where possible I tend to install everything to G:\ instead of C:\ (b/c viruses ultimately make you wipe out C:\), I use Portable apps where possible so I don’t have to worry about losing registry keys,  and I load most startup programs from Batchrun so that they aren’t lost with Windows.  I have somewhat limited expertise, but I think I have the following three options - not sure which is best:

  • Replace the files and fix the computer like it was before all this happened.  (I thought that would be fairly simple, but as you can see - not so much.
  • Format the C:\ partition and install the clone image from 2011 (when I had the last major issue - yes, I know, I should have imaged more often).  Actually - this isn’t that terrible - I haven’t installed a lot of new programs and everything installed should work - there are a few things I probably want to backup first like my Start menu and maybe application data, but I can do that beforehand with UBCD.
  • Install Windows over the existing installation.  As I understand it - I wouldn’t lose any start menu items - but some files would have to be re-installed since their registry keys would be deleted.  (For that matter, I have ERUNT registry backups - maybe not newer than six months ago and not sure where they are stored, but …)

           

It might take me a while to fix this as it is inconvenient to have to setup and run two computers.

 

As always, all help is appreciated!!!



BC AdBot (Login to Remove)

 


#2 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,741 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:41 AM

Posted 17 August 2015 - 06:15 AM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

step1.gif In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/586174 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

step2.gifIf you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new FRST log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download FRST by Farbar from the following link if you no longer have it available and save it to your destop.

    FRST Download Link

  • When you go to the above page, there will be 32-bit and 64-bit downloads available. Please click on the appropriate one for your version of Windows. If you are unsure as to whether your Windows is 32-bit or 64-bit, please see this tutorial.
  • Double click on the FRST icon and allow it to run.
  • Agree to the usage agreement and FRST will open. Do not make any changes and click on the Scan button.
  • Notepad will open with the results.
  • Post the new logs as explained in the prep guide.
  • Close the program window, and delete the program from your desktop.


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#3 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 19 August 2015 - 03:18 PM

I still need help - I was expecting a reply notification and didn't get one.

 

I'm running WinXP SP3, 32-bit.

 

I have the installation CD and a clone of the C:\Drive, but I'm not sure if the installation CD is the same one used on the PC, but I think so.

 

I'm also re-attaching the Avira log file which was included in my original post

 

 

Attached Files


Edited by Tiger-Heli, 19 August 2015 - 03:26 PM.


#4 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,737 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:02:41 AM

Posted 20 August 2015 - 09:25 AM

Greetings Tiger-Heli and :welcome: to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.

My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.

If you would allow me to call you by your first name I would prefer to do that.

===================================================

Ground Rules:
  • First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. :)
  • Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.
  • Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.
  • Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter problems simply stop and tell me.
  • When you post your reply, use the Replytopic.jpg button instead.
  • In the upper right hand corner of the topic you will see the Followtopic.jpg button. Click on this then choose Immediate E-Mail notification and then Proceed and you will be sent an email once I have posted a response.
  • If you do not reply to your topic after 5 days we assume it has been abandoned and I will close it.
  • When your computer is clean I will alert you of such. I will also provide for you detailed information about how you can combat future infections.
  • I would like to remind you to make no further changes to your computer unless I direct you to do so.
  • Now let's get started :thumbup2:
===================================================

Now that I am assisting you, you can expect that I will be very responsive to your situation. If you are able, I would request you check this thread at least once per day so that we can try to resolve your issues effectively and efficiently. If you are going to be delayed please be considerate and post that information so that I know you are still with me. Unfortunately, there are many people waiting to be assisted and not enough of us at BleepingComputer to go around. I appreciate your understanding and diligence.

Thank you for your patience thus far. I am not sure how much help I will be able to offer but I would like you to post a fres FRST report. In addition, describe exactly what you are currently seeing during the boot process. What do you see and what is the last thing you see, if anything, before it goes to white screen.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#5 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 20 August 2015 - 11:09 AM

I'll try to get you a new FRST report.

 

To clarify - the computer was booting up properly and then going to the white screen.

 

It is no longer doing that since I ran the Avira Rescue disk - it now gives me a fatal system error (BSOD).  I don't remember when that comes up - I see the Bios screen and I think (but not sure) I see the WinXP logo with the green progress bar below it and then the BSOD.

 

I'm thinking what I might need to do is re-named back the files that Avira changed (which would probably get to the white screen) and then clobber that - but I will leave the next steps up to you.



#6 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,737 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:02:41 AM

Posted 20 August 2015 - 02:09 PM

Greetings,

Does the same thing happen when you try to boot into Safe Mode? If so, please do this.

===================================================

Diagnose Blue Screen of Death (BSOD) Errors by Disabling Automatic Restart

--------------------
  • When you boot your machine, press F8 to list the startup options, exactly as you would if you were trying to enter Safe Mode
  • Select Disable Automatic Restart on System Failure, as shown here:

advancedoptions.png

  • When your system BSODs, write down the STOP error code, as well as any written out error message back here. The STOP error will always appear, but the message may not.

bsod_c.jpg

  • Please include this information in your reply.
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Safe Mode?
  • BSOD information

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#7 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 20 August 2015 - 03:36 PM

BSOD info in normal mode is above.

 

I didn't try booting into safe mode, but when I was getting the white screen ransomware, that happened in safe mode also, but safe mode with command prompt would work.

 

Will try to get you more info by tomorrow.



#8 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 21 August 2015 - 05:44 AM

I didn't get a chance to setup the sick computer last night ...



#9 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 22 August 2015 - 05:58 AM

I get the same BSOD and error in safe mode and in Disable Automatic Restart (and in normal mode, since it is the same error I posted previously):

 

STOP:  C000021A {Fatal System Error}

The logon terminated unexpectedly with a status of 0XC000135.  (0x00000000 0x00000000) the system has been shut down.

 

BTW - I use a USB network adapter to connect to the home internet and don't know how to do that from Linux or UBCD - if it matters.

 

New FRST scan:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-08-2015
Ran by SYSTEM on BARTPE-19012 (21-08-2015 17:17:31)
Running from E:\
Platform: Microsoft Windows XP Service Pack 2 (X86) Language: Georgian
Internet Explorer Version 8
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [TrayFactory] => G:\program files\PS Tray Factory\PSTrayFactory.exe /start
HKLM\...\Run: [AutoShutdown] => G:\PROGRA~1\AUTOSH~1\AutoShutdown.exe
HKLM\...\Run: [EvtMgr6] => G:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
HKLM\...\Run: [AvastUI.exe] => "G:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
HKLM\...\Run: [AutoShutdown Pro] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => "G:\Program Files\Common Files\Java\Java Update\jusched.exe"
HKLM\...\Run: [Adobe ARM] => "G:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\...\Run: [PowerPanel Personal Edition User Interaction] => G:\Program Files\CyberPower PowerPanel Personal Edition\pppeuser.exe
HKLM\...\RunOnce: [PSTF] => G:\program files\PS Tray Factory\PSTrayFactory.exe /start
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll [2010-05-27] (ATI Technologies Inc.)
Winlogon\Notify\LBTWlgn: g:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKU\username\...\Run: [DAEMON Tools Lite] => G:\Program Files\DAEMON Tools\DTLite.exe -autorun
HKU\username\...\Run: [Dekisoft Monitor Off Utility] => G:\program files\MonitorOff\monoff.exe
HKU\Default User\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\LocalService.NT AUTHORITY\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\NetworkService.NT AUTHORITY\...\RunOnce: [_nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled [2015-07-09] ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Shortcut to startup.brs.lnk [2011-04-29]
ShortcutTarget: Shortcut to startup.brs.lnk -> C:\PROGRAMS\Batchrun\startup.brs (No File)
BootExecute: autocheck autochk /k:F *
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-03-02] ()
S4 Ati HotKey Poller; %SystemRoot%\system32\Ati2evxx.exe [X]
S2 AutoShutdown; G:\PROGRA~1\AUTOSH~1\AS_Service.exe [X]
S2 avast! Antivirus; "G:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X]
S4 CTDevice_Srv; G:\Program Files\Creative\Shared Files\CTDevSrv.exe [X]
S3 CTUPnPSv; G:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe [X]
S4 Diskeeper; "G:\Program Files\Executive Software\DiskeeperLite\DKService.exe" [X]
S3 IDriverT; "G:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" [X]
S3 LBTServ; G:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [X]
S2 MBAMService; "G:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe" [X]
S2 PhenomMsrTweaker; "G:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe" [X]
S2 ppped; "G:\Program Files\CyberPower PowerPanel Personal Edition\ppped.exe" [X]
S2 StarWindService; G:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [X]
S3 WMPNetworkSvc; "G:\Program Files\Windows Media Player\WMPNetwk.exe" [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [21419 2010-04-23] (Meetinghouse Data Communications)
S0 ahcix86; C:\Windows\System32\DRIVERS\ahcix86.sys [189968 2009-09-03] (Advanced Micro Devices, Inc)
S3 Ambfilt; C:\Windows\System32\drivers\Ambfilt.sys [1684736 2008-08-05] (Creative)
S1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [19200 2006-06-09] (SlySoft, Inc.)
S4 AODDriver; C:\Program Files\GIGABYTE\ET6\i386\AODDriver.sys [7168 2009-02-23] ()
S2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-07-09] ()
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-07-09] (Avast Software s.r.o.)
S1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-07-09] (Avast Software s.r.o.)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49904 2015-07-09] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-07-09] (Avast Software s.r.o.)
S1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-07-09] (Avast Software s.r.o.)
S1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-07-09] (Avast Software s.r.o.)
S0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [209048 2015-07-09] ()
S4 BANTExt; C:\Windows\System32\Drivers\BANTExt.sys [3840 2008-03-06] ()
S2 cpuz132; C:\WINDOWS\system32\drivers\cpuz132_x32.sys [12672 2009-03-27] (Windows ® Codename Longhorn DDK provider)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25104 2015-05-07] (Disc Soft Ltd)
S3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [27392 2005-05-03] (SlySoft, Inc.)
S2 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [8064 2006-04-22] (Elaborate Bytes AG)
S3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [4608 2005-04-12] (Elaborate Bytes AG)
S4 etdrv; C:\WINDOWS\etdrv.sys [17488 2009-09-12] (Windows ® 2000 DDK provider)
S4 gdrv; C:\WINDOWS\gdrv.sys [17488 2010-10-13] (Windows ® 2000 DDK provider)
S4 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 Monfilt; C:\Windows\System32\drivers\Monfilt.sys [1389056 2006-01-04] (Creative Technology Ltd.)
S3 Pcatip; C:\Windows\System32\DRIVERS\Pcatip.sys [25088 2002-12-12] (VSO Software)
S1 PQNTDrv; C:\Windows\System32\Drivers\PQNTDrv.sys [4228 2004-05-06] (PowerQuest Corporation)
S3 rt2870; C:\Windows\System32\DRIVERS\rt2870.sys [580096 2008-06-11] (Ralink Technology, Corp.)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtKHDMI.sys [3734976 2009-06-25] (Realtek Semiconductor Corp.)
S0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows ® 2000 DDK provider)
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-05-07] (Duplex Secure Ltd.)
S4 vaxscsi; C:\Windows\System32\Drivers\vaxscsi.sys [223128 2009-09-20] (Alcohol Soft Co., Ltd.)
S4 ALSysIO; \??\C:\DOCUME~1\userna~1\LOCALS~1\Temp\ALSysIO.sys [X]
S4 AmdLLD; system32\DRIVERS\AmdLLD.sys [X]
S5 GVTDrv; C:\WINDOWS\system32\Drivers\GVTDrv.sys [24944 2009-09-11] ()
S4 IntelIde; no ImagePath
S4 MEMSWEEP2; \??\C:\WINDOWS\system32\1.tmp [X]
S3 SANDRA; \??\G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP4\WNt500x86\Sandra.sys [X]
S3 WinRing0_1_2_0; \??\G:\program files\PhenomMsrTweaker\WinRing0.sys [X]
S4 wqepwltm; System32\drivers\aeohtf.sys [X]
S1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 14:26 - 2015-08-11 14:28 - 00000000 ____D C:\FRST
2015-08-01 22:24 - 2015-08-01 22:24 - 00000235 _____ C:\Windows\LkmdfCoInst.log
2015-08-01 22:24 - 2015-08-01 22:24 - 00000075 _____ C:\Windows\setupact.log
2015-08-01 22:24 - 2015-08-01 22:24 - 00000000 _____ C:\Windows\setuperr.log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-08-11 16:21 - 2011-09-05 14:25 - 00000000 ____D C:\Documents and Settings\username\Local Settings\temp
2015-08-11 16:20 - 2009-09-11 12:37 - 00000000 __SHD C:\Windows\CSC
2015-08-11 16:15 - 2015-05-28 17:14 - 00018037 _____ C:\Windows\WindowsUpdate.log
2015-08-11 16:12 - 2010-03-09 02:43 - 00000159 _____ C:\Windows\wiadebug.log
2015-08-11 16:12 - 2010-03-09 02:43 - 00000049 _____ C:\Windows\wiaservc.log
2015-08-11 16:11 - 2009-10-09 15:49 - 00000000 ____D C:\Documents and Settings\username\Application Data\Mozilla
2015-08-11 16:03 - 2009-09-06 00:30 - 00000178 ___SH C:\Documents and Settings\username\ntuser.ini
2015-08-11 16:03 - 2009-09-06 00:29 - 00032578 _____ C:\Windows\SchedLgU.Txt
2015-08-11 14:32 - 2015-07-05 01:02 - 00030053 _____ C:\Windows\setupapi.log
2015-08-11 14:28 - 2009-09-06 00:23 - 00000000 ____D C:\Windows\Registration
2015-08-11 14:18 - 2003-06-20 12:00 - 00002206 _____ C:\Windows\System32\wpa.dbl
2015-07-31 20:32 - 2009-09-06 00:56 - 00000000 ____D C:\Documents and Settings\username\Local Settings\Application Data\Adobe
2015-07-31 20:22 - 2003-06-20 12:00 - 00001452 _____ C:\Windows\win.ini

==================== Files in the root of some directories =======

2004-03-06 00:44 - 2004-03-06 00:44 - 0311303 ____R () X:\I386\system32\30.jpg
2010-02-25 00:32 - 2010-02-25 00:32 - 0045056 ____R () X:\I386\system32\3C99X.DLL
2004-03-06 00:44 - 2004-03-06 00:44 - 0458153 ____R () X:\I386\system32\3DBubbles.jpg
2006-01-11 02:51 - 2006-01-11 02:51 - 0074240 ____R (David Finch) X:\I386\system32\3DWORMHOLE.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0068608 ____R (Microsoft Corporation) X:\I386\system32\ACCESS.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0129536 ____R (Microsoft Corporation) X:\I386\system32\ACLEDIT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0115712 ____R (Microsoft Corporation) X:\I386\system32\ACLUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0193536 ____R (Microsoft Corporation) X:\I386\system32\ACTIVEDS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0111104 ____R (Microsoft Corporation) X:\I386\system32\ACTIVEDS.TLB
2008-04-14 09:41 - 2008-04-14 09:41 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\ACTXPRXY.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0143360 ____R (Microsoft Corporation) X:\I386\system32\ADSLDPC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\ADSMSEXT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0263680 ____R (Microsoft Corporation) X:\I386\system32\ADSNT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0617472 ____R (Microsoft Corporation) X:\I386\system32\ADVAPI32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0099840 ____R (Microsoft Corporation) X:\I386\system32\ADVPACK.DLL
2008-04-14 03:02 - 2008-04-14 03:02 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\AGTCTL15.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0044544 ____R (Microsoft Corporation) X:\I386\system32\ALG.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\ALRSVC.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\AMDDLG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\AMDDLGN4.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009029 ____R () X:\I386\system32\ANSI.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0125952 ____R (Microsoft Corporation) X:\I386\system32\APPHELP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0295936 ____R (Microsoft Corporation) X:\I386\system32\APPMGR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0549888 ____R (Microsoft Corporation) X:\I386\system32\APPWIZ.CPL
2008-04-14 09:39 - 2008-04-14 09:39 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\ASCTRLS.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0065024 ____R (Microsoft Corporation) X:\I386\system32\ASYCFILT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0058880 ____R (Microsoft Corporation) X:\I386\system32\ATL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\ATTRIB.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0062464 ____R (Microsoft Corporation) X:\I386\system32\AUTHZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0588800 ____R (Microsoft Corporation) X:\I386\system32\AUTOCHK.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0001688 ____R () X:\I386\system32\AUTOEXEC.NT
2008-04-14 09:42 - 2008-04-14 09:42 - 0580608 ____R (Microsoft Corporation) X:\I386\system32\AUTOFMT.EXE
2006-03-20 22:11 - 2006-03-20 22:11 - 0002041 ____R () X:\I386\system32\AUTORUN.CMD
2005-05-19 21:31 - 2005-05-19 21:31 - 0000134 ____R () X:\I386\system32\AUTORUN1GEOSHELL.CMD
2009-04-16 02:32 - 2009-04-16 02:32 - 0000237 ____R () X:\I386\system32\AUTORUN_FAVORITES.CMD
2006-04-30 01:35 - 2006-04-30 01:35 - 0000077 ____R () X:\I386\system32\AUTORUN_MYINFO.CMD
2004-02-19 17:43 - 2004-02-19 17:43 - 0000122 ____R () X:\I386\system32\AUTORUN_PENETCFG.CMD
2003-06-20 12:00 - 2003-06-20 12:00 - 0069584 ____R (Microsoft Corporation) X:\I386\system32\AVICAP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0109456 ____R (Microsoft Corporation) X:\I386\system32\AVIFILE.DLL
2001-07-21 22:37 - 2001-07-21 22:37 - 0018852 ____R () X:\I386\system32\AVMC20.DLL
2001-07-21 22:37 - 2001-07-21 22:37 - 0018372 ____R () X:\I386\system32\AVMCAPI.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0144384 ____R (AVM GmbH) X:\I386\system32\AVMENUM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0227840 ____R (Microsoft Corporation) X:\I386\system32\AVTAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0233472 ____R (Microsoft Corporation) X:\I386\system32\AZROLES.DLL
2004-12-15 19:03 - 2004-12-15 19:03 - 0960056 ____R () X:\I386\system32\BARTPE.BMP
2004-12-03 18:17 - 2004-12-03 18:17 - 0022016 ____R () X:\I386\system32\BARTPE.EXE
2005-01-03 17:46 - 2005-01-03 17:46 - 0007356 ____R () X:\I386\system32\BARTPE.TXT
2008-04-14 09:41 - 2008-04-14 09:41 - 0052736 ____R (Microsoft Corporation) X:\I386\system32\BASESRV.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0029184 ____R (Microsoft Corporation) X:\I386\system32\BATMETER.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0024576 ____R (Broadcom Corporation) X:\I386\system32\BCM42CTL.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0069632 ____R () X:\I386\system32\BCM42DB0.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0036864 ____R (Broadcom Corporation) X:\I386\system32\BCM42IOA.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0004512 ____R (Broadcom Corporation) X:\I386\system32\BCM42NDI.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0011264 ____R (NVIDIA Corporation) X:\I386\system32\BDCO1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066728 ____R () X:\I386\system32\BIG5.NLS
2008-04-14 01:57 - 2008-04-14 01:57 - 0042141 ____R () X:\I386\system32\BIOSINFO.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0000412 ____R () X:\I386\system32\BLANK.HTM
2003-06-20 12:00 - 2003-06-20 12:00 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\BOOTVID.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0082172 ____R () X:\I386\system32\BOPOMOFO.NLS
2008-04-14 02:33 - 2008-04-14 02:33 - 0063488 ____R (Microsoft Corporation) X:\I386\system32\BROWSELC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0077824 ____R (Microsoft Corporation) X:\I386\system32\BROWSER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1025024 ____R (Microsoft Corporation) X:\I386\system32\BROWSEUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0078336 ____R (Microsoft Corporation) X:\I386\system32\BROWSEWM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0050688 ____R (Microsoft Corporation) X:\I386\system32\BTPANUI.DLL
2001-07-21 22:46 - 2001-07-21 22:46 - 0011296 ____R () X:\I386\system32\C218TNT.COD
2001-07-21 22:46 - 2001-07-21 22:46 - 0019746 ____R () X:\I386\system32\C320TNT.COD
2008-04-14 09:41 - 2008-04-14 09:41 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\CABINET.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\CACLS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\CALC.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0226304 ____R (Microsoft Corporation) X:\I386\system32\CATSRV.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0085504 ____R (Microsoft Corporation) X:\I386\system32\CATSRVPS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0625664 ____R (Microsoft Corporation) X:\I386\system32\CATSRVUT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0151040 ____R (Microsoft Corporation) X:\I386\system32\CDFVIEW.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0194560 ____R (Microsoft Corporation) X:\I386\system32\CERTCLI.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\CFGMGR32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\CHKDSK.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0148480 ____R (Microsoft Corporation) X:\I386\system32\CIC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0010752 ____R (Microsoft Corporation) X:\I386\system32\CLB.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\CLBCATEX.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0498688 ____R (Microsoft Corporation) X:\I386\system32\CLBCATQ.DLL
2006-03-20 22:12 - 2006-03-20 22:12 - 0000299 ____R () X:\I386\system32\CLEAN_RAMDRIVE.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\CLIPSRV.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0058368 ____R (Microsoft Corporation) X:\I386\system32\CLUSAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\CMCFG32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0389120 ____R (Microsoft Corporation) X:\I386\system32\CMD.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0185344 ____R (Microsoft Corporation) X:\I386\system32\CMPROPS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0047104 ____R (Microsoft Corporation) X:\I386\system32\CNBJMON.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0701440 ____R (NVIDIA Corporation) X:\I386\system32\COHELPER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\COLBACT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\COMADDIN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\COMCAT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0617472 ____R (Microsoft Corporation) X:\I386\system32\COMCTL32.DLL
2000-05-21 13:00 - 2000-05-21 13:00 - 0608448 ____R (Microsoft Corporation) X:\I386\system32\COMCTL32.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0276992 ____R (Microsoft Corporation) X:\I386\system32\COMDLG32.DLL
2001-05-21 15:46 - 2001-05-21 15:46 - 0198656 ____R (Microsoft Corporation) X:\I386\system32\COMDLG32.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0010544 ____R (Microsoft Corporation) X:\I386\system32\COMM.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0050620 ____R () X:\I386\system32\COMMAND.COM
2003-06-20 12:00 - 2003-06-20 12:00 - 0032816 ____R (Microsoft Corporation) X:\I386\system32\COMMDLG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\COMP.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\COMPACT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0252928 ____R () X:\I386\system32\COMPATUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0038302 ____R () X:\I386\system32\COMPMGMT.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0030160 ____R (Microsoft Corporation) X:\I386\system32\COMPOBJ.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0097792 ____R (Microsoft Corporation) X:\I386\system32\COMREPL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0792064 ____R (Microsoft Corporation) X:\I386\system32\COMRES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0167424 ____R (Microsoft Corporation) X:\I386\system32\COMSNAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1267200 ____R (Microsoft Corporation) X:\I386\system32\COMSVCS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0539648 ____R (Microsoft Corporation) X:\I386\system32\COMUID.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002577 ____R () X:\I386\system32\CONFIG.NT
2008-04-14 09:41 - 2008-04-14 09:41 - 0357888 ____R (Microsoft Corporation) X:\I386\system32\CONFMSP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\CONSOLE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\CONTROL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\CONVERT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0027097 ____R () X:\I386\system32\COUNTRY.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0163840 ____R (Microsoft Corporation) X:\I386\system32\CREDUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0149019 ____R (Microsoft Corporation) X:\I386\system32\CRTDLL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0599040 ____R (Microsoft Corporation) X:\I386\system32\CRYPT32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\CRYPTDLL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0064512 ____R (Microsoft Corporation) X:\I386\system32\CRYPTNET.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0512512 ____R (Microsoft Corporation) X:\I386\system32\CRYPTUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0101888 ____R (Microsoft Corporation) X:\I386\system32\CSCDLL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0139264 ____R (Microsoft Corporation) X:\I386\system32\CSCRIPT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0326656 ____R (Microsoft Corporation) X:\I386\system32\CSCUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0032256 ____R (Microsoft Corporation) X:\I386\system32\CSRSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\CSRSS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0073728 ____R (Microsoft Corporation) X:\I386\system32\CSSEQCHK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0027200 ____R (Microsoft Corporation) X:\I386\system32\CTL3DV2.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0249856 ____R (Comtrol® Corporation) X:\I386\system32\CTMASETP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012560 ____R (Comtrol® Corporation) X:\I386\system32\CTMRCLAS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008386 ____R () X:\I386\system32\CTYPE.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_037.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10000.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0162850 ____R () X:\I386\system32\C_10001.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0195618 ____R () X:\I386\system32\C_10002.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0177698 ____R () X:\I386\system32\C_10003.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10004.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10005.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10006.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10007.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_10008.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10010.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10017.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10021.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10029.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10079.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10081.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_10082.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1026.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1047.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1140.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1141.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1142.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1143.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1144.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1145.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1146.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1147.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1148.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1149.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1250.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1251.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1252.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1253.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1254.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1255.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1256.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1257.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_1258.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0189986 ____R () X:\I386\system32\C_1361.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180258 ____R () X:\I386\system32\C_20000.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0186402 ____R () X:\I386\system32\C_20001.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_20002.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0185378 ____R () X:\I386\system32\C_20003.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180258 ____R () X:\I386\system32\C_20004.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0187938 ____R () X:\I386\system32\C_20005.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20105.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20106.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20107.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20108.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20127.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0139810 ____R () X:\I386\system32\C_20261.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20269.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20273.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20277.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20278.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20280.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20284.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20285.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20290.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20297.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20420.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20423.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20424.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20833.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20838.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20871.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20880.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20905.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_20924.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20930.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20931.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0180770 ____R () X:\I386\system32\C_20932.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0195106 ____R () X:\I386\system32\C_20933.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0160802 ____R () X:\I386\system32\C_20935.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0173602 ____R () X:\I386\system32\C_20936.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0191522 ____R () X:\I386\system32\C_20937.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0165410 ____R () X:\I386\system32\C_20939.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0177698 ____R () X:\I386\system32\C_20949.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_20950.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21025.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21027.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_21866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28591.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28592.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28593.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28594.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28595.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28596.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28597.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28598.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28599.NLS
2006-12-30 03:24 - 2006-12-30 03:24 - 0066082 ____R () X:\I386\system32\C_28603.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_28605.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_437.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_500.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_708.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_720.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_737.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_775.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_850.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_852.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_855.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_857.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_858.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_860.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_861.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_862.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_863.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_864.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_865.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_866.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_869.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_870.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066594 ____R () X:\I386\system32\C_874.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0066082 ____R () X:\I386\system32\C_875.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0162850 ____R () X:\I386\system32\C_932.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_936.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_949.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0196642 ____R () X:\I386\system32\C_950.NLS
2008-04-14 09:41 - 2008-04-14 09:41 - 1179648 ____R (Microsoft Corporation) X:\I386\system32\D3D8.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\D3D8THK.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\DAVCLNT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0847872 ____R (Microsoft Corporation) X:\I386\system32\DBGENG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0640000 ____R (Microsoft Corporation) X:\I386\system32\DBGHELP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0008704 ____R (Microsoft Corporation) X:\I386\system32\DCIMAN32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\DDEML.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0279552 ____R (Microsoft Corporation) X:\I386\system32\DDRAW.DLL
2004-03-05 12:52 - 2004-03-05 12:52 - 0001400 ____R () X:\I386\system32\DEBUGRUN.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DEFRAG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\DESK.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\DESKADP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\DESKMON.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\DESKPERF.DLL
2003-03-25 03:13 - 2003-03-25 03:13 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\DEVCON.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0033079 ____R () X:\I386\system32\DEVMGMT.MSC
2008-04-14 09:41 - 2008-04-14 09:41 - 0282624 ____R (Microsoft Corporation) X:\I386\system32\DEVMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0041397 ____R () X:\I386\system32\DFRG.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0082944 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGFAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0105472 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGNTFS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0051200 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGRES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0039424 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGSNAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0124416 ____R (Microsoft Corp. and Executive Software International, Inc.) X:\I386\system32\DFRGUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0023824 ____R (Digi International Inc.) X:\I386\system32\DGCLASS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0111104 ____R (Microsoft) X:\I386\system32\DGNET.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0176157 ____R (Digi International, Inc.) X:\I386\system32\DGRPSETU.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0126976 ____R (Microsoft Corporation) X:\I386\system32\DHCPCSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048640 ____R (Microsoft Corporation) X:\I386\system32\DHCPQEC.DLL
2004-04-24 23:25 - 2004-04-24 23:25 - 0000194 ____R () X:\I386\system32\DIAL_RAS.CMD
2001-07-21 22:38 - 2001-07-21 22:38 - 0013808 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI2.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0031232 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI232.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0032256 ____R (Eicon Technology Corporation) X:\I386\system32\DIAPI2NT.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0319456 ____R (Microsoft Corporation) X:\I386\system32\DIFXAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1504256 ____R (Microsoft Corporation) X:\I386\system32\DISKCOPY.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0033673 ____R () X:\I386\system32\DISKMGMT.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0163840 ____R (Microsoft Corporation) X:\I386\system32\DISKPART.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\DISPEX.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0031305 ____R (Eicon Technology) X:\I386\system32\DISRVPP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0038985 ____R (Eicon Technology) X:\I386\system32\DISRVSU.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0236060 ____R (Eicon Technology) X:\I386\system32\DITRACE.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0037962 ____R () X:\I386\system32\DIVAPROP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0029768 ____R () X:\I386\system32\DIVASU.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0163840 ____R (D-Link) X:\I386\system32\DL2XCFG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0018048 ____R (DAVICOM Semiconductor Inc.                                                     ) X:\I386\system32\DM9INST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0224768 ____R (Microsoft Corp., Veritas Software) X:\I386\system32\DMADMIN.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0330752 ____R (Microsoft Corp., Veritas Software) X:\I386\system32\DMCONFIG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0285184 ____R (Microsoft Corp.) X:\I386\system32\DMDLGS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0200704 ____R (Microsoft Corp.) X:\I386\system32\DMDSKMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0118784 ____R (Microsoft Corp.) X:\I386\system32\DMDSKRES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018432 ____R (Microsoft Corp.) X:\I386\system32\DMINTF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0019456 ____R (Microsoft Corporation) X:\I386\system32\DMOCX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0015872 ____R (Microsoft Corp.) X:\I386\system32\DMREMOTE.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0023552 ____R (Microsoft Corp.) X:\I386\system32\DMSERVER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0052224 ____R (Microsoft Corp.) X:\I386\system32\DMUTIL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0061440 ____R (Microsoft Corp.) X:\I386\system32\DMVIEW.OCX
2008-04-14 09:41 - 2008-04-14 09:41 - 0147968 ____R (Microsoft Corporation) X:\I386\system32\DNSAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0045568 ____R (Microsoft Corporation) X:\I386\system32\DNSRSLVR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0046080 ____R (Microsoft Corporation) X:\I386\system32\DOCPROP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\DOCPROP2.DLL
2008-04-14 02:24 - 2008-04-14 02:24 - 0053840 ____R () X:\I386\system32\DOSX.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\DOT3API.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\DOT3CFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\DOT3DLG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\DOT3MSM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0132096 ____R (Microsoft Corporation) X:\I386\system32\DOT3SVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0650752 ____R (Microsoft Corporation) X:\I386\system32\DOT3UI.DLL
2006-05-23 15:24 - 2006-05-23 15:24 - 0110592 ____R (Noël Danjou) X:\I386\system32\DOWNLOAD.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\DRPROV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0045568 ____R (Microsoft Corporation) X:\I386\system32\DRWTSN32.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0155648 ____R (Microsoft Corporation) X:\I386\system32\DSKQUOUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0142848 ____R (Microsoft Corporation) X:\I386\system32\DSPROP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0051200 ____R (Microsoft Corporation) X:\I386\system32\DSSEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0113152 ____R (Microsoft Corporation) X:\I386\system32\DSUIEXT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0304128 ____R (Microsoft Corporation) X:\I386\system32\DUSER.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1227264 ____R (Microsoft Corporation) X:\I386\system32\DX8VB.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0357888 ____R (Microsoft Corporation) X:\I386\system32\DXTMSFT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0205312 ____R (Microsoft Corporation) X:\I386\system32\DXTRANS.DLL
2004-03-06 00:44 - 2004-03-06 00:44 - 0287965 ____R () X:\I386\system32\Dolphin.jpg
2010-02-25 00:32 - 2010-02-25 00:32 - 0179048 ____R (Intel Corporation) X:\I386\system32\E1000MSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0035424 ____R (Intel Corporation) X:\I386\system32\E100BMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0072288 ____R (Intel Corporation) X:\I386\system32\E1KMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060000 ____R (Intel Corporation) X:\I386\system32\E1QMSG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\EAPOLQEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0184832 ____R (Microsoft Corporation) X:\I386\system32\EAPP3HST.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0126976 ____R (Microsoft Corporation) X:\I386\system32\EAPPCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\EAPPGNUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0180224 ____R (Microsoft Corporation) X:\I386\system32\EAPPHOST.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0040960 ____R (Microsoft Corporation) X:\I386\system32\EAPPPRXY.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\EAPQEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0033792 ____R (Microsoft Corporation) X:\I386\system32\EAPSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\EFSADU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0127213 ____R () X:\I386\system32\EGA.CPI
2010-02-25 00:33 - 2010-02-25 00:33 - 0002048 ____R () X:\I386\system32\EH10NDS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061440 ____R ( 3Com Corporation) X:\I386\system32\EL2K_CPP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0183296 ____R (Microsoft Corporation) X:\I386\system32\ELS.DLL
2005-08-10 02:19 - 2005-08-10 02:19 - 0021640 ____R () X:\I386\system32\EMPTYREGDB.DAT
2003-06-20 12:00 - 2003-06-20 12:00 - 0103424 ____R (Equinox Systems Inc.) X:\I386\system32\EQNCLASS.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0053248 ____R (Equinox Systems Inc.) X:\I386\system32\EQNDIAG.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0051200 ____R (Equinox Systems Inc.) X:\I386\system32\EQNLOGR.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0061952 ____R (Equinox Systems Inc.) X:\I386\system32\EQNLOOP.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0246272 ____R (Microsoft Corporation) X:\I386\system32\ES.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1082368 ____R (Microsoft Corporation) X:\I386\system32\ESENT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\EVENTLOG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008704 ____R (Microsoft Corporation) X:\I386\system32\EVENTVWR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0056678 ____R () X:\I386\system32\EVENTVWR.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\EXPAND.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\EXTMGR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0080384 ____R (Microsoft Corporation) X:\I386\system32\FAULTREP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\FC.EXE
2010-02-25 00:33 - 2010-02-25 00:33 - 0888832 ____R (NVIDIA Corporation) X:\I386\system32\FDCO1.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0124928 ____R (Microsoft Corporation) X:\I386\system32\FDE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0337920 ____R (Microsoft Corporation) X:\I386\system32\FILEMGMT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\FIND.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027136 ____R (Microsoft Corporation) X:\I386\system32\FINDSTR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\FINGER.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\FLTLIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\FLTMC.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\FMIFS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0382976 ____R (Microsoft Corporation) X:\I386\system32\FONTEXT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\FONTVIEW.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0029696 ____R (Microsoft Corporation) X:\I386\system32\FORMAT.COM
2001-08-17 16:15 - 2001-08-17 16:15 - 0442240 ____R (AVM GmbH) X:\I386\system32\FPNPBASE.SYS
2001-07-21 22:37 - 2001-07-21 22:37 - 0393392 ____R (AVM Berlin) X:\I386\system32\FPNPBASE.USA
2008-04-14 09:39 - 2008-04-14 09:39 - 0009344 ____R (Microsoft Corporation) X:\I386\system32\FRAMEBUF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0032760 ____R () X:\I386\system32\FSMGMT.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\FSUTIL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0042496 ____R (Microsoft Corporation) X:\I386\system32\FTP.EXE
2001-08-17 16:15 - 2001-08-17 16:15 - 0455680 ____R (AVM GmbH) X:\I386\system32\FUS2BASE.SYS
2006-08-29 23:43 - 2006-08-29 23:43 - 0087372 ____R () X:\I386\system32\Flag.jpg
2007-11-11 05:46 - 2007-11-11 05:46 - 0172032 ____R () X:\I386\system32\GBCHECK.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\GDI.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0285184 ____R (Microsoft Corporation) X:\I386\system32\GDI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0024772 ____R () X:\I386\system32\GEO.NLS
1996-04-03 18:33 - 1996-04-03 18:33 - 0005248 ____R () X:\I386\system32\GIVEIO.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0285184 ____R (Microsoft Corporation) X:\I386\system32\GLMF32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0122880 ____R (Microsoft Corporation) X:\I386\system32\GLU32.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0566784 ____R (Microsoft Corporation) X:\I386\system32\GPEDIT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0199680 ____R (Microsoft Corporation) X:\I386\system32\GPTEXT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\GRPCONV.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0265728 ____R (Microsoft Corporation) X:\I386\system32\H323.TSP
2008-04-14 09:41 - 2008-04-14 09:41 - 0614912 ____R (Microsoft Corporation) X:\I386\system32\H323MSP.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0105344 ____R (Microsoft Corporation) X:\I386\system32\HAL.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0131840 ____R (Microsoft Corporation) X:\I386\system32\HALAACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0081152 ____R (Microsoft Corporation) X:\I386\system32\HALACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0150528 ____R (Microsoft Corporation) X:\I386\system32\HALAPIC.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0134400 ____R (Microsoft Corporation) X:\I386\system32\HALMACPI.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0152576 ____R (Microsoft Corporation) X:\I386\system32\HALMPS.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0077696 ____R (Microsoft Corporation) X:\I386\system32\HALSP.DLL
2003-11-04 11:31 - 2003-11-04 11:31 - 0000251 ____R () X:\I386\system32\HANGUP.CMD
2004-04-23 00:30 - 2004-04-23 00:30 - 0000066 ____R () X:\I386\system32\HANGUP_RAS.CMD
2008-04-14 09:41 - 2008-04-14 09:41 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\HCCOIN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\HDWWIZ.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0010752 ____R (Microsoft Corporation) X:\I386\system32\HH.EXE
2004-08-03 21:23 - 2004-08-03 21:23 - 0526848 ____R (Microsoft Corporation) X:\I386\system32\HHCTRL.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0087552 ____R (Microsoft Corporation) X:\I386\system32\HHCTRLUI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0041472 ____R (Microsoft Corporation) X:\I386\system32\HHSETUP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\HID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0029696 ____R (Microsoft Corporation) X:\I386\system32\HIDPHONE.TSP
2003-06-20 12:00 - 2003-06-20 12:00 - 0004768 ____R () X:\I386\system32\HIMEM.SYS
2008-04-14 09:41 - 2008-04-14 09:41 - 0072704 ____R (Microsoft Corporation) X:\I386\system32\HLINK.DLL
2003-11-03 22:43 - 2003-11-03 22:43 - 0001614 ____R () X:\I386\system32\HLK94.PBK
2008-04-14 09:41 - 2008-04-14 09:41 - 0344064 ____R (Microsoft Corporation) X:\I386\system32\HNETCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0330752 ____R (Microsoft Corporation) X:\I386\system32\HNETWIZ.DLL
2008-04-14 01:58 - 2008-04-14 01:58 - 0000844 ____R () X:\I386\system32\HOMEPAGE.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\HOSTNAME.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0144896 ____R (Microsoft Corporation) X:\I386\system32\HOTPLUG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0044544 ____R (Hilgraeve, Inc.) X:\I386\system32\HTICONS.DLL
2006-04-25 03:43 - 2006-04-25 03:43 - 0037888 ____R () X:\I386\system32\HWPnPDLL.dll
2009-01-17 14:16 - 2009-01-17 14:16 - 0070656 ____R () X:\I386\system32\HWPnp.exe
2008-04-14 09:41 - 2008-04-14 09:41 - 0702845 ____R (Intel® Corporation) X:\I386\system32\I81XDNT5.DLL
2004-08-20 20:25 - 2004-08-20 20:25 - 0766576 ____R (Intel Corporation) X:\I386\system32\IALMDD5.DLL
2004-08-20 20:18 - 2004-08-20 20:18 - 0153008 ____R (Intel Corporation) X:\I386\system32\IALMDEV5.DLL
2004-08-20 20:11 - 2004-08-20 20:11 - 0100924 ____R (Intel Corporation) X:\I386\system32\IALMDNT5.DLL
2004-08-20 20:11 - 2004-08-20 20:11 - 0037951 ____R (Intel Corporation) X:\I386\system32\IALMRNT5.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0064096 ____R (Intel Corporation) X:\I386\system32\IANSMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\IASSVCS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0011264 ____R (Microsoft Corporation) X:\I386\system32\ICAAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\ICFGNT5.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\ICMP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0054784 ____R (Microsoft Corporation) X:\I386\system32\ICMUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\IE4UINIT.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0323584 ____R (Microsoft Corporation) X:\I386\system32\IEDKCS32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0251904 ____R (Microsoft Corporation) X:\I386\system32\IEPEERS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0048640 ____R (Microsoft Corporation) X:\I386\system32\IERNONCE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0062976 ____R (Microsoft Corporation) X:\I386\system32\IESETUP.DLL
2008-04-14 01:58 - 2008-04-14 01:58 - 0020484 ____R () X:\I386\system32\IEUINIT.INF
2003-06-20 12:00 - 2003-06-20 12:00 - 0070656 ____R (Microsoft Corporation) X:\I386\system32\IFSUTIL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\IMAGEHLP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\IMGUTIL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0110080 ____R (Microsoft Corporation) X:\I386\system32\IMM32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0274432 ____R (Microsoft Corporation) X:\I386\system32\INETCFG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0691712 ____R (Microsoft Corporation) X:\I386\system32\INETCOMM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0360960 ____R (Microsoft Corporation) X:\I386\system32\INETCPL.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\INETCPLC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\INETMIB1.DLL
2008-04-14 01:52 - 2008-04-14 01:52 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\INETRES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0450560 ____R (Microsoft Corporation) X:\I386\system32\INFOSOFT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0147456 ____R (Microsoft Corporation) X:\I386\system32\INITPKI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0123392 ____R (Microsoft Corporation) X:\I386\system32\INPUT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0096256 ____R (Microsoft Corporation) X:\I386\system32\INSENG.DLL
2004-06-16 17:10 - 2004-06-16 17:10 - 0000206 ____R () X:\I386\system32\INSTPPPOE.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0129536 ____R (Microsoft Corporation) X:\I386\system32\INTL.CPL
2001-08-18 02:36 - 2001-08-18 02:36 - 0090200 ____R (Perle Systems Ltd. ) X:\I386\system32\IO8PORTS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0305792 ____R (Intel® Corporation) X:\I386\system32\IOATCO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\IOLOGMSG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\IPCONF.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0055808 ____R (Microsoft Corporation) X:\I386\system32\IPCONFIG.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0094720 ____R (Microsoft Corporation) X:\I386\system32\IPHLPAPI.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0331264 ____R (Microsoft Corporation) X:\I386\system32\IPNATHLP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0349696 ____R (Microsoft Corporation) X:\I386\system32\IPSECSNP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0183808 ____R (Microsoft Corporation) X:\I386\system32\IPSECSVC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\IPXSAP.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\ITIRCL.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0138240 ____R (Microsoft Corporation) X:\I386\system32\ITSS.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060072 ____R (Intel Corporation) X:\I386\system32\IXEMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0051808 ____R (Intel Corporation) X:\I386\system32\IXGBMSG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0060072 ____R (Intel Corporation) X:\I386\system32\IXNMSG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0054272 ____R (Microsoft Corporation) X:\I386\system32\IXSSO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047952 ____R (Microsoft Corporation) X:\I386\system32\JOBEXEC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0512000 ____R (Microsoft Corporation) X:\I386\system32\JSCRIPT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDBE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDBR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDCA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDCR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\KBDCZ.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDDA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\KBDDV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDES.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDFR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDGAE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDGR1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDHU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDIC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDIT142.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDLA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDMAC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDNE.DLL
2008-04-14 09:39 - 2008-04-14 09:39 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\KBDNEC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDNO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDPL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDPL1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDPO.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDRU.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\KBDSL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDSW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDUK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\KBDUS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\KBDUSX.DLL
2008-04-14 04:01 - 2008-04-14 04:01 - 0007424 ____R (Microsoft Corporation) X:\I386\system32\KD1394.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007040 ____R (Microsoft Corporation) X:\I386\system32\KDCOM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0299520 ____R (Microsoft Corporation) X:\I386\system32\KERBEROS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0989696 ____R (Microsoft Corporation) X:\I386\system32\KERNEL32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002000 ____R (Microsoft Corporation) X:\I386\system32\KEYBOARD.DRV
2003-12-10 17:52 - 2003-12-10 17:52 - 0046592 ____R () X:\I386\system32\KEYBOARD.EXE
2008-04-14 02:20 - 2008-04-14 02:20 - 0042537 ____R () X:\I386\system32\KEYBOARD.SYS
2004-02-17 19:46 - 2004-02-17 19:46 - 0019456 ____R () X:\I386\system32\KEYDOWN.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\KMDDSP.TSP
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\KMSVC.DLL
2008-04-14 02:23 - 2008-04-14 02:23 - 0092224 ____R (Microsoft Corporation) X:\I386\system32\KRNL386.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0047066 ____R () X:\I386\system32\KSC.NLS
2003-10-08 20:05 - 2003-10-08 20:05 - 0049664 ____R (Karen Kenworthy) X:\I386\system32\KarenWareInet.exe
2003-06-20 12:00 - 2003-06-20 12:00 - 0009728 ____R (Microsoft Corporation) X:\I386\system32\LABEL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0221600 ____R (Microsoft Corporation) X:\I386\system32\LANMAN.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\LICMGR10.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\LINKINFO.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\LMHSVC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0399872 ____R (Microsoft Corporation) X:\I386\system32\LMRT.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0097280 ____R (Microsoft Corporation) X:\I386\system32\LOADPERF.DLL
2008-02-29 18:40 - 2008-02-29 18:40 - 0265948 ____R () X:\I386\system32\LOCALE.NLS
2008-04-14 09:41 - 2008-04-14 09:41 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\LOCALSPL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0075264 ____R (Microsoft Corporation) X:\I386\system32\LOCATOR.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\LODCTR.EXE
2008-10-15 21:14 - 2008-10-15 21:14 - 0007536 ____R () X:\I386\system32\LOGMESSAGES.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0220672 ____R (Microsoft Corporation) X:\I386\system32\LOGON.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0514560 ____R (Microsoft Corporation) X:\I386\system32\LOGONUI.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\LPK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\LPQ.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\LPR.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0728064 ____R (Microsoft Corporation) X:\I386\system32\LSASRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\LSASS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002560 ____R (Microsoft Corporation) X:\I386\system32\LZ32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009936 ____R (Microsoft Corporation) X:\I386\system32\LZEXPAND.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000168 ____R () X:\I386\system32\L_EXCEPT.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0007046 ____R () X:\I386\system32\L_INTL.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0187904 ____R (Microsoft Corporation) X:\I386\system32\MAIN.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MAKECAB.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0112128 ____R (Microsoft Corporation) X:\I386\system32\MAPI32.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\MCASTMIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0073376 ____R (Microsoft Corporation) X:\I386\system32\MCIAVI.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0025264 ____R (Microsoft Corporation) X:\I386\system32\MCISEQ.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\MCIWAVE.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0118272 ____R (Microsoft Corporation) X:\I386\system32\MDMINST.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0924432 ____R (Microsoft Corporation) X:\I386\system32\MFC40.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0927504 ____R (Microsoft Corporation) X:\I386\system32\MFC40U.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1028096 ____R (Microsoft Corporation) X:\I386\system32\MFC42.DLL
2007-04-03 12:44 - 2007-04-03 12:44 - 0981760 ____R (Microsoft Corporation) X:\I386\system32\MFC42U.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0673088 ____R () X:\I386\system32\MLANG.DAT
2008-04-14 09:41 - 2008-04-14 09:41 - 0586240 ____R (Microsoft Corporation) X:\I386\system32\MLANG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1414656 ____R (Microsoft Corporation) X:\I386\system32\MMC.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0163328 ____R (Microsoft Corporation) X:\I386\system32\MMCBASE.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 1872896 ____R (Microsoft Corporation) X:\I386\system32\MMCNDMGR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\MMCSHEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0001383 ____R () X:\I386\system32\MMDRIVER.INF
2008-04-14 09:42 - 2008-04-14 09:42 - 0618496 ____R (Microsoft Corporation) X:\I386\system32\MMSYS.CPL
2008-04-14 02:24 - 2008-04-14 02:24 - 0068768 ____R (Microsoft Corporation) X:\I386\system32\MMSYSTEM.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0207360 ____R (Microsoft Corporation) X:\I386\system32\MOBSYNC.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0153600 ____R (Microsoft Corporation) X:\I386\system32\MODEMUI.DLL
2008-04-14 02:15 - 2008-04-14 02:15 - 0216064 ____R (Microsoft Corporation) X:\I386\system32\MORICONS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\MOUNTVOL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002032 ____R (Microsoft Corporation) X:\I386\system32\MOUSE.DRV
2008-04-14 09:41 - 2008-04-14 09:41 - 0059904 ____R (Microsoft Corporation) X:\I386\system32\MPR.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0087040 ____R (Microsoft Corporation) X:\I386\system32\MPRAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\MPRDDM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0099840 ____R (Microsoft Corporation) X:\I386\system32\MPRMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047104 ____R (Microsoft Corporation) X:\I386\system32\MPRUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0061168 ____R (Microsoft Corporation) X:\I386\system32\MSACM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0071680 ____R (Microsoft Corporation) X:\I386\system32\MSACM32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\MSACM32.DRV
2008-04-14 09:40 - 2008-04-14 09:40 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\MSAFD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MSASN1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\MSCAT32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000817 ____R () X:\I386\system32\MSCDEXNT.EXE
2005-12-18 16:50 - 2005-12-18 16:50 - 0000963 ____R () X:\I386\system32\MSCLIENT.CMD
2004-12-03 19:12 - 2004-12-03 19:12 - 0000110 ____R () X:\I386\system32\MSCLISRV.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0073728 ____R (Microsoft Corporation) X:\I386\system32\MSCMS.DLL
2005-04-15 23:58 - 2005-04-15 23:58 - 1071088 ____R (Microsoft Corporation) X:\I386\system32\MSCOMCTL.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0297984 ____R (Microsoft Corporation) X:\I386\system32\MSCTF.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0177152 ____R (Microsoft Corporation) X:\I386\system32\MSCTFIME.IME
2008-04-14 02:54 - 2008-04-14 02:54 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\MSDATSRC.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0956928 ____R (Microsoft Corporation) X:\I386\system32\MSDTCTM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0161792 ____R (Microsoft Corporation) X:\I386\system32\MSDTCUIU.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0844314 ____R () X:\I386\system32\MSDXM.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0539136 ____R (Microsoft Corporation) X:\I386\system32\MSFTEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0997376 ____R (Microsoft Corporation) X:\I386\system32\MSGINA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0033792 ____R (Microsoft Corporation) X:\I386\system32\MSGSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0029184 ____R (Microsoft Corporation) X:\I386\system32\MSHTA.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 3066880 ____R (Microsoft Corporation) X:\I386\system32\MSHTML.DLL
2008-04-14 01:56 - 2008-04-14 01:56 - 1351168 ____R (Microsoft Corporation) X:\I386\system32\MSHTML.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0449024 ____R (Microsoft Corporation) X:\I386\system32\MSHTMLED.DLL
2008-04-14 01:56 - 2008-04-14 01:56 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\MSHTMLER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 2843136 ____R (Microsoft Corporation) X:\I386\system32\MSI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0051712 ____R (Microsoft Corporation) X:\I386\system32\MSIDENT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\MSIDNTLD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0248832 ____R (Microsoft Corporation) X:\I386\system32\MSIEFTP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0004608 ____R (Microsoft Corporation) X:\I386\system32\MSIMG32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0159232 ____R (Microsoft Corporation) X:\I386\system32\MSIMTF.DLL
2007-10-22 19:00 - 2007-10-22 19:00 - 1516568 ____R (Microsoft Corporation) X:\I386\system32\MSJET40.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\MSLS31.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0105984 ____R (Microsoft Corporation) X:\I386\system32\MSOERT2.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\MSPAINT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0041984 ____R (Microsoft Corporation) X:\I386\system32\MSPORTS.DLL
2008-04-14 01:53 - 2008-04-14 01:53 - 0048128 ____R (Microsoft Corporation) X:\I386\system32\MSPRIVS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069632 ____R (Microsoft Corporation) X:\I386\system32\MSR2C.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\MSRATING.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0110592 ____R (Microsoft Corporation) X:\I386\system32\MSSCRIPT.OCX
2004-12-17 16:16 - 2004-12-17 16:16 - 0001405 ____R () X:\I386\system32\MSSERVER.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0155136 ____R (Microsoft Corporation) X:\I386\system32\MSSHA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\MSSIGN32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004608 ____R (Microsoft Corporation) X:\I386\system32\MSSIP32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\MSSWCH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006656 ____R (Microsoft Corporation) X:\I386\system32\MSSWCHX.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0274944 ____R (Microsoft Corporation) X:\I386\system32\MSTASK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0532480 ____R (Microsoft Corporation) X:\I386\system32\MSTIME.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0116224 ____R (Microsoft Corporation) X:\I386\system32\MSTLSAPI.DLL
2004-08-04 05:59 - 2004-08-04 05:59 - 0407552 ____R (Microsoft Corporation) X:\I386\system32\MSTSC.EXE
2004-08-04 05:59 - 2004-08-04 05:59 - 0655360 ____R (Microsoft Corporation) X:\I386\system32\MSTSCAX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0132608 ____R (Microsoft Corporation) X:\I386\system32\MSV1_0.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 1355776 ____R (Microsoft Corporation) X:\I386\system32\MSVBVM50.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1384479 ____R (Microsoft Corporation) X:\I386\system32\MSVBVM60.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057344 ____R (Microsoft Corporation) X:\I386\system32\MSVCIRT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0413696 ____R (Microsoft Corporation) X:\I386\system32\MSVCP60.DLL
2005-05-07 23:59 - 2005-05-07 23:59 - 0348160 ____R (Microsoft Corporation) X:\I386\system32\MSVCR71.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0343040 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0253952 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT20.DLL
2008-04-14 04:00 - 2008-04-14 04:00 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\MSVCRT40.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0121344 ____R (Microsoft Corporation) X:\I386\system32\MSVFW32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0126912 ____R (Microsoft Corporation) X:\I386\system32\MSVIDEO.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0203776 ____R (Microsoft Corporation) X:\I386\system32\MSWEBDVD.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0245248 ____R (Microsoft Corporation) X:\I386\system32\MSWSOCK.DLL
2007-04-02 22:21 - 2007-04-02 22:21 - 0621344 ____R (Microsoft Corporation) X:\I386\system32\MSWSTR10.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0506368 ____R (Microsoft Corporation) X:\I386\system32\MSXML.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0701440 ____R (Microsoft Corporation) X:\I386\system32\MSXML2.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0037916 ____R (Microsoft Corporation) X:\I386\system32\MSXML2R.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1104896 ____R (Microsoft Corporation) X:\I386\system32\MSXML3.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\MSXML3R.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\MSXMLR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0066560 ____R (Microsoft Corporation) X:\I386\system32\MTXCLU.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\MTXDM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0004096 ____R (Microsoft Corporation) X:\I386\system32\MTXEX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\MTXLEGIH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0090112 ____R (Microsoft Corporation) X:\I386\system32\MYCOMPUT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0090624 ____R (Microsoft Corporation) X:\I386\system32\MYDOCS.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0061788 ____R (Microsoft Corporation) X:\I386\system32\MYNDI.DLL
2003-11-03 22:45 - 2003-11-03 22:45 - 0000069 ____R () X:\I386\system32\MYPBK.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0030208 ____R (Microsoft Corporation) X:\I386\system32\NAPIPSEC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0193024 ____R (Microsoft Corporation) X:\I386\system32\NAPMONTR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0176640 ____R (Microsoft Corporation) X:\I386\system32\NAPSTAT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\NBTSTAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0036352 ____R (Microsoft Corporation) X:\I386\system32\NCOBJAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0035840 ____R (Microsoft Corporation) X:\I386\system32\NCPA.CPL
2010-02-25 00:32 - 2010-02-25 00:32 - 0184320 ____R (Intel® Corporation) X:\I386\system32\NCS2SETP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\NCXPNT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\NDDEAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\NDPTSP.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0042496 ____R (Microsoft Corporation) X:\I386\system32\NET.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0102446 ____R () X:\I386\system32\NET.HLP
2008-04-14 09:42 - 2008-04-14 09:42 - 0124928 ____R (Microsoft Corporation) X:\I386\system32\NET1.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0108464 ____R (Microsoft Corporation) X:\I386\system32\NETAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0337408 ____R (Microsoft Corporation) X:\I386\system32\NETAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0622592 ____R (Microsoft Corporation) X:\I386\system32\NETCFGX.DLL
2004-12-03 14:32 - 2004-12-03 14:32 - 0077824 ____R () X:\I386\system32\NETCONFIG.EXE
2004-12-03 02:05 - 2004-12-03 02:05 - 0006444 ____R () X:\I386\system32\NETCONFIG.TXT
2003-06-20 12:00 - 2003-06-20 12:00 - 0214016 ____R (Microsoft Corporation) X:\I386\system32\NETEVENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0139264 ____R (Microsoft Corporation) X:\I386\system32\NETID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0407040 ____R (Microsoft Corporation) X:\I386\system32\NETLOGON.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0198144 ____R (Microsoft Corporation) X:\I386\system32\NETMAN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0171008 ____R (Microsoft Corporation) X:\I386\system32\NETMSG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0875008 ____R (Microsoft Corporation) X:\I386\system32\NETPLWIZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\NETRAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025600 ____R (Microsoft Corporation) X:\I386\system32\NETSETUP.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 1703936 ____R (Microsoft Corporation) X:\I386\system32\NETSHELL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0036864 ____R (Microsoft Corporation) X:\I386\system32\NETSTAT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0080896 ____R (Microsoft Corporation) X:\I386\system32\NETUI0.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0245760 ____R (Microsoft Corporation) X:\I386\system32\NETUI1.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0308224 ____R (Microsoft Corporation) X:\I386\system32\NETUI2.DLL
2008-01-13 22:49 - 2008-01-13 22:49 - 0184320 ____R (http://www.ezpcfix.net) X:\I386\system32\NETWORK.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0247808 ____R (Microsoft Corporation) X:\I386\system32\NEWDEV.DLL
2003-11-02 14:25 - 2003-11-02 14:25 - 0000055 ____R () X:\I386\system32\NEWPBK.CMD
2010-02-25 00:33 - 2010-02-25 00:33 - 0028536 ____R (Intel Corporation) X:\I386\system32\NICCO.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028272 ____R (Intel Corporation) X:\I386\system32\NICCO2.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028272 ____R (Intel Corporation) X:\I386\system32\NICCO26.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0028792 ____R (Intel Corporation) X:\I386\system32\NICCO36.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0063352 ____R (Intel Corporation) X:\I386\system32\NICETCO.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0066424 ____R (Intel Corporation) X:\I386\system32\NICETCOE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0044664 ____R (Intel Corporation) X:\I386\system32\NICIN100.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061624 ____R (Intel Corporation) X:\I386\system32\NICINE6.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0062656 ____R (Intel Corporation) X:\I386\system32\NICINIXE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINIXN.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0035704 ____R (Intel Corporation) X:\I386\system32\NICINST.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0040056 ____R (Intel Corporation) X:\I386\system32\NICINST6.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0062840 ____R (Intel Corporation) X:\I386\system32\NICINSTE.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0041080 ____R (Intel Corporation) X:\I386\system32\NICINSTG.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0062656 ____R (Intel Corporation) X:\I386\system32\NICINSTK.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINSTQ.DLL
2010-02-25 00:32 - 2010-02-25 00:32 - 0061632 ____R (Intel Corporation) X:\I386\system32\NICINSTY.DLL
2006-02-18 19:14 - 2006-02-18 19:14 - 0025600 ____R (NirSoft) X:\I386\system32\NIRCMD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\NLHTML.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\NOTEPAD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0076800 ____R (Microsoft Corporation) X:\I386\system32\NSLOOKUP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 1200640 ____R (Microsoft Corporation) X:\I386\system32\NTBACKUP.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0706048 ____R (Microsoft Corporation) X:\I386\system32\NTDLL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0027866 ____R () X:\I386\system32\NTDOS.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029146 ____R () X:\I386\system32\NTDOS404.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029370 ____R () X:\I386\system32\NTDOS411.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029274 ____R () X:\I386\system32\NTDOS412.SYS
2003-06-20 12:00 - 2003-06-20 12:00 - 0029146 ____R () X:\I386\system32\NTDOS804.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0067072 ____R (Microsoft Corporation) X:\I386\system32\NTDSAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\NTDSBCLI.DLL
2008-04-14 02:19 - 2008-04-14 02:19 - 0033840 ____R () X:\I386\system32\NTIO.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0034560 ____R () X:\I386\system32\NTIO404.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0035648 ____R () X:\I386\system32\NTIO411.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0035424 ____R () X:\I386\system32\NTIO412.SYS
2008-04-14 02:19 - 2008-04-14 02:19 - 0034560 ____R () X:\I386\system32\NTIO804.SYS
2008-04-14 04:54 - 2008-04-14 04:54 - 2145280 ____R (Microsoft Corporation) X:\I386\system32\NTKRNLMP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\NTLANMAN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\NTLANUI2.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\NTLSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0118784 ____R (Microsoft Corporation) X:\I386\system32\NTMARTA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0040960 ____R (Microsoft Corporation) X:\I386\system32\NTMSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0179200 ____R (Microsoft Corporation) X:\I386\system32\NTMSDBA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0036864 ____R (Microsoft Corporation) X:\I386\system32\NTMSEVT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0488448 ____R (Microsoft Corporation) X:\I386\system32\NTMSMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0026209 ____R () X:\I386\system32\NTMSMGR.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0032968 ____R () X:\I386\system32\NTMSOPRQ.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0435200 ____R (Microsoft Corporation) X:\I386\system32\NTMSSVC.DLL
2008-04-14 04:57 - 2008-04-14 04:57 - 2188928 ____R (Microsoft Corporation) X:\I386\system32\NTOSKRNL.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0031744 ____R (Microsoft Corporation) X:\I386\system32\NTSD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0143360 ____R (Microsoft Corporation) X:\I386\system32\NTSHRUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0420864 ____R (Microsoft Corporation) X:\I386\system32\NTVDM.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0015360 ____R (Microsoft Corporation) X:\I386\system32\NTVDMD.DLL
2004-03-18 01:34 - 2004-03-18 01:34 - 0059392 ____R () X:\I386\system32\NU2MENUMSG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0257024 ____R (Microsoft Corporation) X:\I386\system32\NUSRMGR.CPL
2010-02-25 00:33 - 2010-02-25 00:33 - 0031744 ____R (NVIDIA Corporation) X:\I386\system32\NVCOE.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0151552 ____R (NVIDIA Corporation) X:\I386\system32\NVCONRM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0064000 ____R (Microsoft Corporation) X:\I386\system32\NWAPI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0020480 ____R (Microsoft Corporation) X:\I386\system32\NWCFG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0006144 ____R (Microsoft Corporation) X:\I386\system32\NWEVENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0142336 ____R (Microsoft Corporation) X:\I386\system32\NWPROVAU.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\NWWKS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0270336 ____R (Microsoft Corporation) X:\I386\system32\OAKLEY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0286208 ____R (Microsoft Corporation) X:\I386\system32\OBJSEL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0096256 ____R (Microsoft Corporation) X:\I386\system32\OCCACHE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0067584 ____R (Microsoft Corporation) X:\I386\system32\OCMANAGE.DLL
2007-04-02 23:35 - 2007-04-02 23:35 - 0026224 ____R (Microsoft Corporation) X:\I386\system32\ODBC16GT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0249856 ____R (Microsoft Corporation) X:\I386\system32\ODBC32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\ODBC32GT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\ODBCAD32.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\ODBCBCP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\ODBCCONF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0069632 ____R (Microsoft Corporation) X:\I386\system32\ODBCCONF.EXE
2008-04-14 02:56 - 2008-04-14 02:56 - 0004310 ____R () X:\I386\system32\ODBCCONF.RSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0032768 ____R (Microsoft Corporation) X:\I386\system32\ODBCCP32.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0106496 ____R (Microsoft Corporation) X:\I386\system32\ODBCCP32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\ODBCCR32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0065536 ____R (Microsoft Corporation) X:\I386\system32\ODBCCU32.DLL
2008-04-14 02:56 - 2008-04-14 02:56 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\ODBCINT.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0053279 ____R (Microsoft Corporation) X:\I386\system32\ODBCJI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0278559 ____R (Microsoft Corporation) X:\I386\system32\ODBCJT32.DLL
2008-04-14 02:56 - 2008-04-14 02:56 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\ODBCP32R.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0147456 ____R (Microsoft Corporation) X:\I386\system32\ODBCTRAC.DLL
2009-08-28 18:28 - 2009-08-28 18:28 - 0001095 ____R () X:\I386\system32\OEMINFO.INI
2005-12-15 00:06 - 2005-12-15 00:06 - 0051130 ____R () X:\I386\system32\OEMLOGO.BMP
2003-06-20 12:00 - 2003-06-20 12:00 - 0039744 ____R (Microsoft Corporation) X:\I386\system32\OLE2.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0169520 ____R (Microsoft Corporation) X:\I386\system32\OLE2DISP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0153008 ____R (Microsoft Corporation) X:\I386\system32\OLE2NLS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1287168 ____R (Microsoft Corporation) X:\I386\system32\OLE32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0163328 ____R (Microsoft Corporation) X:\I386\system32\OLEACC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\OLEACCRC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0551936 ____R (Microsoft Corporation) X:\I386\system32\OLEAUT32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0082944 ____R (Microsoft Corporation) X:\I386\system32\OLECLI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074752 ____R (Microsoft Corporation) X:\I386\system32\OLECLI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0037376 ____R (Microsoft Corporation) X:\I386\system32\OLECNV32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0122880 ____R (Microsoft Corporation) X:\I386\system32\OLEDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0107008 ____R (Microsoft Corporation) X:\I386\system32\OLEPRN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0084992 ____R (Microsoft Corporation) X:\I386\system32\OLEPRO32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0024064 ____R (Microsoft Corporation) X:\I386\system32\OLESVR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\OLESVR32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0069120 ____R (Microsoft Corporation) X:\I386\system32\OLETHK32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\ONEX.DLL
2007-06-09 05:21 - 2007-06-09 05:21 - 0005957 ____R () X:\I386\system32\ONEX_V1.XSD
2008-04-14 09:42 - 2008-04-14 09:42 - 0713728 ____R (Microsoft Corporation) X:\I386\system32\OPENGL32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0215552 ____R (Microsoft Corporation) X:\I386\system32\OSK.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0067584 ____R (Microsoft Corporation) X:\I386\system32\OSUNINST.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0021504 ____R (Microsoft Corporation) X:\I386\system32\PATHPING.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0284160 ____R (Microsoft Corporation) X:\I386\system32\PDH.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0108057 ____R (Comtrol® Corporation) X:\I386\system32\PEER.EXE
2009-07-27 22:19 - 2009-07-27 22:19 - 0383488 ____R (TheTruth) X:\I386\system32\PENETCFG.EXE
2009-04-17 04:09 - 2009-04-17 04:09 - 0000526 ____R () X:\I386\system32\PENETCFG.INI
2009-07-27 22:08 - 2009-07-27 22:08 - 0002531 ____R () X:\I386\system32\PENETCFG.LIC
2009-08-29 16:58 - 2009-08-29 16:58 - 0024389 ____R () X:\I386\system32\PENETCFG.TXT
2009-04-17 01:33 - 2009-04-17 01:33 - 0000171 ____R () X:\I386\system32\PENETCFG-DHCP.INI
2004-02-19 19:23 - 2004-02-19 19:23 - 0000221 ____R () X:\I386\system32\PENETCFG-STATIC.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0015360 ____R (Microsoft Corporation) X:\I386\system32\PENTNT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0002837 ____R () X:\I386\system32\PERFCI.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0039936 ____R (Microsoft Corporation) X:\I386\system32\PERFCTRS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026624 ____R (Microsoft Corporation) X:\I386\system32\PERFDISK.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0000140 ____R () X:\I386\system32\PERFFILT.H
2003-06-20 12:00 - 2003-06-20 12:00 - 0001128 ____R () X:\I386\system32\PERFFILT.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0015872 ____R (Microsoft Corporation) X:\I386\system32\PERFMON.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0058273 ____R () X:\I386\system32\PERFMON.MSC
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\PERFNET.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\PERFNW.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\PERFOS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034816 ____R (Microsoft Corporation) X:\I386\system32\PERFPROC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\PERFTS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002682 ____R () X:\I386\system32\PERFWCI.INI
2008-04-14 09:42 - 2008-04-14 09:42 - 0176128 ____R (Microsoft Corporation) X:\I386\system32\PHOTOWIZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0035328 ____R (Microsoft Corporation) X:\I386\system32\PID.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\PING.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0068608 ____R (Microsoft Corporation) X:\I386\system32\PLUGIN.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0046592 ____R (Microsoft Corporation) X:\I386\system32\PMSPL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\PNGFILT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0105472 ____R (Microsoft Corporation) X:\I386\system32\POLSTORE.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0149020 ____R (Comtrol® Corporation) X:\I386\system32\PORTMON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0114688 ____R (Microsoft Corporation) X:\I386\system32\POWERCFG.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0017408 ____R (Microsoft Corporation) X:\I386\system32\POWRPROF.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0083748 ____R () X:\I386\system32\PRC.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0083748 ____R () X:\I386\system32\PRCP.NLS
2007-05-17 21:33 - 2007-05-17 21:33 - 0098304 ____R (DCS-Computer, 32839 Steinheim) X:\I386\system32\PRELOGON.EXE
2009-08-28 18:29 - 2009-08-28 18:29 - 0000299 ____R () X:\I386\system32\PRELOGON.INI
2007-05-17 22:39 - 2007-05-17 22:39 - 0000245 ____R () X:\I386\system32\PRELOGONLANGUAGE.LNG
2008-11-12 04:48 - 2008-11-12 04:48 - 0221184 ____R (DCS-Computer: www.drowaelder.de) X:\I386\system32\PRESHELL.EXE
2010-06-09 02:25 - 2010-06-09 02:25 - 0008415 ____R () X:\I386\system32\PRESHELL.INI
2007-03-18 23:13 - 2007-03-18 23:13 - 0003177 ____R () X:\I386\system32\PRESHELLLANGUAGE.LNG
2015-08-11 17:53 - 2015-08-11 17:53 - 0001266 ____R () X:\I386\system32\PRFLDRS.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\PRINT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0560640 ____R (Microsoft Corporation) X:\I386\system32\PRINTUI.DLL
2008-04-14 09:40 - 2008-04-14 09:40 - 0081920 ____R (Intel Corporation) X:\I386\system32\PROCTEXE.OCX
2005-12-05 01:15 - 2005-12-05 01:15 - 0125908 ____R () X:\I386\system32\PROFILES.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027648 ____R (Microsoft Corporation) X:\I386\system32\PROFMAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0109568 ____R (Microsoft Corporation) X:\I386\system32\PROGMAN.EXE
2010-02-25 00:32 - 2010-02-25 00:32 - 0244312 ____R (Intel Corporation) X:\I386\system32\PRONTOBJ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\PSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0043520 ____R (Microsoft Corporation) X:\I386\system32\PSTOREC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0034304 ____R (Microsoft Corporation) X:\I386\system32\PSTORSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0150528 ____R (Microsoft Corporation) X:\I386\system32\QAGENT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0291328 ____R (Microsoft Corporation) X:\I386\system32\QAGENTRT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0062464 ____R (Microsoft Corporation) X:\I386\system32\QCLIPROV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0279040 ____R () X:\I386\system32\QDV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0562176 ____R () X:\I386\system32\QEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1288192 ____R () X:\I386\system32\QUARTZ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1435648 ____R (Microsoft Corporation) X:\I386\system32\QUERY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0076800 ____R (Microsoft Corporation) X:\I386\system32\QUTIL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\RASADHLP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0237056 ____R (Microsoft Corporation) X:\I386\system32\RASAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0088576 ____R (Microsoft Corporation) X:\I386\system32\RASAUTO.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0079872 ____R (Microsoft Corporation) X:\I386\system32\RASCHAP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\RASCTRS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003368 ____R () X:\I386\system32\RASCTRS.INI
2003-06-20 12:00 - 2003-06-20 12:00 - 0011264 ____R (Microsoft Corporation) X:\I386\system32\RASDIAL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0658432 ____R (Microsoft Corporation) X:\I386\system32\RASDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\RASMAN.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0186368 ____R (Microsoft Corporation) X:\I386\system32\RASMANS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022528 ____R (Microsoft Corporation) X:\I386\system32\RASMXS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056832 ____R (Microsoft Corporation) X:\I386\system32\RASPHONE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0210944 ____R (Microsoft Corporation) X:\I386\system32\RASPPP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0061952 ____R (Microsoft Corporation) X:\I386\system32\RASQEC.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0023552 ____R (Microsoft Corporation) X:\I386\system32\RASRAD.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0012800 ____R (Microsoft Corporation) X:\I386\system32\RASSER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0058368 ____R (Microsoft Corporation) X:\I386\system32\RASTAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0150016 ____R (Microsoft Corporation) X:\I386\system32\RASTLS.DLL
2008-04-14 02:22 - 2008-04-14 02:22 - 0003338 ____R () X:\I386\system32\REDIR.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0050176 ____R (Microsoft Corporation) X:\I386\system32\REG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0049664 ____R (Microsoft Corporation) X:\I386\system32\REGAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\REGEDIT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\REGEDT32.EXE
2004-04-27 17:44 - 2004-04-27 17:44 - 0010240 ____R () X:\I386\system32\REGEXPANDER.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\REGSVR32.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0012800 ____R (Microsoft Corporation) X:\I386\system32\REPLACE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0058880 ____R (Microsoft Corporation) X:\I386\system32\RESUTILS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0433664 ____R (Microsoft Corporation) X:\I386\system32\RICHED20.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003584 ____R (Microsoft Corporation) X:\I386\system32\RICHED32.DLL
2000-10-09 13:47 - 2000-10-09 13:47 - 0204296 ____R (Microsoft Corporation) X:\I386\system32\RICHTX32.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0003072 ____R (Microsoft Corporation) X:\I386\system32\RNR20.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\ROUTE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0584704 ____R (Microsoft Corporation) X:\I386\system32\RPCRT4.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0399360 ____R (Microsoft Corporation) X:\I386\system32\RPCSS.DLL
2008-04-14 03:07 - 2008-04-14 03:07 - 0208384 ____R (Microsoft Corporation) X:\I386\system32\RSAENH.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039936 ____R (Microsoft Corporation) X:\I386\system32\RSHX32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0132608 ____R (Microsoft Corporation) X:\I386\system32\RSVP.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0023552 ____R (Microsoft Corporation) X:\I386\system32\RSVPMSG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009728 ____R (Microsoft Corporation) X:\I386\system32\RSVPPERF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0092672 ____R (Microsoft Corporation) X:\I386\system32\RSVPSP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0031744 ____R (Microsoft Corporation) X:\I386\system32\RTIPXMIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0098304 ____R (Microsoft Corporation) X:\I386\system32\RTM.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0073728 ____R () X:\I386\system32\RTNICPROP32.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0073728 ____R (Realtek Semiconductor Corporation) X:\I386\system32\RTNUNINST32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0044032 ____R (Microsoft Corporation) X:\I386\system32\RTUTILS.DLL
2004-12-03 19:06 - 2004-12-03 19:06 - 0000236 ____R () X:\I386\system32\RUN.CMD
2006-02-15 02:19 - 2006-02-15 02:19 - 0036864 ____R (DCS-Computer) X:\I386\system32\RUN-ONCE-EX.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0033280 ____R (Microsoft Corporation) X:\I386\system32\RUNDLL32.EXE
2009-03-16 02:15 - 2009-03-16 02:15 - 0020480 ____R () X:\I386\system32\RUNHIDE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\RUNONCE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0064000 ____R (Microsoft Corporation) X:\I386\system32\SAMLIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0415744 ____R (Microsoft Corporation) X:\I386\system32\SAMSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0270848 ____R () X:\I386\system32\SBE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0181248 ____R (Microsoft Corporation) X:\I386\system32\SCECLI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0314880 ____R (Microsoft Corporation) X:\I386\system32\SCESRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0144384 ____R (Microsoft Corporation) X:\I386\system32\SCHANNEL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0180224 ____R (Microsoft Corporation) X:\I386\system32\SCROBJ.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0172032 ____R (Microsoft Corporation) X:\I386\system32\SCRRUN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0130048 ____R (Microsoft Corporation) X:\I386\system32\SDPBLB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0056320 ____R (Microsoft Corporation) X:\I386\system32\SECUR32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\SECURITY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0054784 ____R (Microsoft Corporation) X:\I386\system32\SENDMAIL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0039424 ____R (Microsoft Corporation) X:\I386\system32\SENS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\SENSAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\SENSCFG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SERIALUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0108544 ____R (Microsoft Corporation) X:\I386\system32\SERVICES.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0033464 ____R () X:\I386\system32\SERVICES.MSC
2003-06-20 12:00 - 2003-06-20 12:00 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\SERWVDRV.DLL
2008-04-19 17:33 - 2008-04-19 17:33 - 0000231 ____R () X:\I386\system32\SETMAXRES.CMD
2008-04-01 23:41 - 2008-04-01 23:41 - 0033280 ____R () X:\I386\system32\SETMAXRES.EXE
2005-07-04 13:48 - 2005-07-04 13:48 - 0040448 ____R () X:\I386\system32\SETPAGEFILE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0023040 ____R (Microsoft Corporation) X:\I386\system32\SETUP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0985088 ____R (Microsoft Corporation) X:\I386\system32\SETUPAPI.DLL
2015-08-11 17:49 - 2015-08-11 17:49 - 0339968 ____R () X:\I386\system32\SETUPREG.HIV
2008-04-14 09:42 - 2008-04-14 09:42 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\SFC.DLL
2009-09-03 01:39 - 2009-09-03 01:39 - 1614848 ____R (Microsoft Corporation) X:\I386\system32\SFCFILES.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0140288 ____R (Microsoft Corporation) X:\I386\system32\SFC_OS.DLL
2008-04-14 02:33 - 2008-04-14 02:33 - 0549376 ____R (Microsoft Corporation) X:\I386\system32\SHDOCLC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 1499136 ____R (Microsoft Corporation) X:\I386\system32\SHDOCVW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005120 ____R (Microsoft Corporation) X:\I386\system32\SHELL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 8461312 ____R (Microsoft Corporation) X:\I386\system32\SHELL32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0435712 ____R (Microsoft Corporation) X:\I386\system32\SHELLSTYLE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\SHFOLDER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\SHGINA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0438272 ____R (Microsoft Corporation) X:\I386\system32\SHIMGVW.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0474112 ____R (Microsoft Corporation) X:\I386\system32\SHLWAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0045056 ____R (Microsoft Corporation) X:\I386\system32\SHMGRATE.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0027648 ____R (Microsoft Corporation) X:\I386\system32\SHSCRAP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\SHSVCS.DLL
2005-10-06 01:08 - 2005-10-06 01:08 - 0097280 ____R () X:\I386\system32\SHUTDOWN.EXE
2004-12-04 16:04 - 2004-12-04 16:04 - 0048128 ____R () X:\I386\system32\SHUTDOWNP.EXE
2004-12-04 16:08 - 2004-12-04 16:08 - 0048128 ____R () X:\I386\system32\SHUTDOWNS.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\SIGTAB.DLL
2008-04-14 02:54 - 2008-04-14 02:54 - 0016384 ____R (Microsoft Corporation) X:\I386\system32\SIMPDATA.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0025088 ____R (Microsoft Corporation) X:\I386\system32\SLAYERXP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0050688 ____R (Microsoft Corporation) X:\I386\system32\SMSS.EXE
2003-02-28 16:32 - 2003-02-28 16:32 - 0011776 ____R (Windows ® 2000 DDK provider) X:\I386\system32\SNETCFG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\SNMPAPI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\SOFTPUB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0024576 ____R (Microsoft Corporation) X:\I386\system32\SORT.EXE
2006-12-30 03:38 - 2006-12-30 03:38 - 0262148 ____R () X:\I386\system32\SORTKEY.NLS
2006-12-30 03:38 - 2006-12-30 03:38 - 0023044 ____R () X:\I386\system32\SORTTBLS.NLS
2003-06-20 12:00 - 2003-06-20 12:00 - 0001744 ____R (Microsoft Corporation) X:\I386\system32\SOUND.DRV
2001-08-18 02:36 - 2001-08-18 02:36 - 0106584 ____R (Perle Systems Ltd.) X:\I386\system32\SPDPORTS.DLL
2007-02-07 17:27 - 2007-02-07 17:27 - 0014104 ____R (Windows ® Server 2003 DDK provider) X:\I386\system32\SPEEDFAN.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0075264 ____R (Microsoft Corporation) X:\I386\system32\SPOOLSS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\SPOOLSV.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0024661 ____R (Perle Systems Ltd.) X:\I386\system32\SPXCOINS.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0659485 ____R (Specialix International Ltd.) X:\I386\system32\SPXPORTS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0726078 ____R (Microsoft Corporation) X:\I386\system32\SRCHUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0096768 ____R (Microsoft Corporation) X:\I386\system32\SRVSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0704512 ____R (Microsoft Corporation) X:\I386\system32\SS3DFO.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\SSBEZIER.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0034816 ____R (Microsoft Corporation) X:\I386\system32\SSDPAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0071680 ____R (Microsoft Corporation) X:\I386\system32\SSDPSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0393216 ____R (Microsoft Corporation) X:\I386\system32\SSFLWBOX.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0020992 ____R (Microsoft Corporation) X:\I386\system32\SSMARQUE.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\SSMYST.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0610304 ____R (Microsoft Corporation) X:\I386\system32\SSPIPES.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SSSTARS.SCR
2008-04-14 09:42 - 2008-04-14 09:42 - 0679936 ____R (Microsoft Corporation) X:\I386\system32\SSTEXT3D.SCR
2006-01-11 03:37 - 2006-01-11 03:37 - 0092160 ____R (Matthias Huebner) X:\I386\system32\STARFLIGHT.SCR
2006-01-18 20:50 - 2006-01-18 20:50 - 0000195 ____R () X:\I386\system32\START_COOLMON.CMD
2007-01-03 18:17 - 2007-01-03 18:17 - 0000094 ____R () X:\I386\system32\START_GBCHECK.CMD
2006-04-03 00:08 - 2006-04-03 00:08 - 0001553 ____R () X:\I386\system32\START_NETSERVICES.CMD
2004-04-24 23:01 - 2004-04-24 23:01 - 0001207 ____R () X:\I386\system32\START_RAS.CMD
2005-12-11 04:35 - 2005-12-11 04:35 - 0000091 ____R () X:\I386\system32\START_ROCKETDOCK.CMD
2003-11-28 21:34 - 2003-11-28 21:34 - 0000118 ____R () X:\I386\system32\START_VNCNBHOOD.CMD
2008-04-14 09:42 - 2008-04-14 09:42 - 0059392 ____R (Microsoft Corporation) X:\I386\system32\STCLIENT.DLL
2008-04-14 01:12 - 2008-04-14 01:12 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\STDOLE2.TLB
2006-12-29 22:34 - 2006-12-29 22:34 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\STDOLE32.TLB
2008-04-14 09:42 - 2008-04-14 09:42 - 0068096 ____R (Microsoft Corporation) X:\I386\system32\STI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0014848 ____R (Microsoft Corporation) X:\I386\system32\STIMON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0136704 ____R (Microsoft Corporation) X:\I386\system32\STI_CI.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0155648 ____R (Stallion Technologies) X:\I386\system32\STLNPROP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0121856 ____R (Microsoft Corporation) X:\I386\system32\STOBJECT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004208 ____R (Microsoft Corporation) X:\I386\system32\STORAGE.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074752 ____R (Microsoft Corporation) X:\I386\system32\STORPROP.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0008192 ____R (Microsoft Corporation) X:\I386\system32\STREAMCI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009216 ____R (Microsoft Corporation) X:\I386\system32\SUBST.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0014336 ____R (Microsoft Corporation) X:\I386\system32\SVCHOST.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0138752 ____R (Microsoft Corporation) X:\I386\system32\SWPRV.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0094293 ____R (Perle Systems Ltd. ) X:\I386\system32\SXPORTS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0713216 ____R (Microsoft Corporation) X:\I386\system32\SXS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\SYNCENG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0191488 ____R (Microsoft Corporation) X:\I386\system32\SYNCUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0300544 ____R (Microsoft Corporation) X:\I386\system32\SYSDM.CPL
2008-04-14 09:40 - 2008-04-14 09:40 - 0218624 ____R (Microsoft Corporation) X:\I386\system32\SYSMON.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0106496 ____R (Microsoft Corporation) X:\I386\system32\SYSOCMGR.EXE
2009-09-03 01:39 - 2009-09-03 01:39 - 0990208 ____R (Microsoft Corporation) X:\I386\system32\SYSSETUP.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0003360 ____R (Microsoft Corporation) X:\I386\system32\SYSTEM.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0019200 ____R (Microsoft Corporation) X:\I386\system32\TAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0858624 ____R (Microsoft Corporation) X:\I386\system32\TAPI3.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0181760 ____R (Microsoft Corporation) X:\I386\system32\TAPI32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\TAPIPERF.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0249856 ____R (Microsoft Corporation) X:\I386\system32\TAPISRV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0078848 ____R (Microsoft Corporation) X:\I386\system32\TAPIUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135680 ____R (Microsoft Corporation) X:\I386\system32\TASKMGR.EXE
2008-04-14 09:41 - 2008-04-14 09:41 - 0061440 ____R (Microsoft Corporation) X:\I386\system32\TDC.OCX
2003-06-20 12:00 - 2003-06-20 12:00 - 0028160 ____R (Microsoft Corporation) X:\I386\system32\TELEPHON.CPL
2008-04-14 09:42 - 2008-04-14 09:42 - 0075776 ____R (Microsoft Corporation) X:\I386\system32\TELNET.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0358400 ____R (Microsoft Corporation) X:\I386\system32\TERMMGR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0295424 ____R (Microsoft Corporation) X:\I386\system32\TERMSRV.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\TFTP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0385536 ____R (Microsoft Corporation) X:\I386\system32\THEMEUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0094208 ____R (Microsoft Corporation) X:\I386\system32\TIMEDATE.CPL
2003-06-20 12:00 - 2003-06-20 12:00 - 0004048 ____R (Microsoft Corporation) X:\I386\system32\TIMER.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0013888 ____R (Microsoft Corporation) X:\I386\system32\TOOLHELP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0012288 ____R (Microsoft Corporation) X:\I386\system32\TRACERT.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0031232 ____R (Microsoft Corporation) X:\I386\system32\TRAFFIC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0057856 ____R (Microsoft Corporation) X:\I386\system32\TWEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0177856 ____R (Microsoft Corporation) X:\I386\system32\TYPELIB.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0060416 ____R (Microsoft Corporation) X:\I386\system32\TZCHANGE.EXE
2008-01-20 17:37 - 2008-01-20 17:37 - 0052006 ____R () X:\I386\system32\UBCD4WIN.jpg
2006-04-06 03:14 - 2006-04-06 03:14 - 0000198 ____R () X:\I386\system32\UBCD4WIN-NU2MENU.CMD
2007-11-18 14:52 - 2007-11-18 14:52 - 0010136 ____R () X:\I386\system32\UBCD4WIN310.jpg
2006-02-24 00:15 - 2006-02-24 00:15 - 0000183 ____R () X:\I386\system32\UBCD4WINSTART.CMD
2007-09-26 14:01 - 2007-09-26 14:01 - 0001591 ____R () X:\I386\system32\UB_CHKDSK.CMD
2003-06-20 12:00 - 2003-06-20 12:00 - 0082432 ____R (Microsoft Corporation) X:\I386\system32\UFAT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0275456 ____R (Microsoft Corporation) X:\I386\system32\ULIB.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R (Microsoft Corporation) X:\I386\system32\UMDMXFRM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0123392 ____R (Microsoft Corporation) X:\I386\system32\UMPNPMGR.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0089588 ____R () X:\I386\system32\UNICODE.NLS
2008-04-14 09:42 - 2008-04-14 09:42 - 0206848 ____R (Microsoft Corporation) X:\I386\system32\UNIMDM.TSP
2008-04-14 09:42 - 2008-04-14 09:42 - 0074240 ____R (Microsoft Corporation) X:\I386\system32\UNIMDMAT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\UNIPLAT.DLL
2006-11-23 19:49 - 2006-11-23 19:49 - 0106496 ____R () X:\I386\system32\UNISOFS.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0004096 ____R (Microsoft Corporation) X:\I386\system32\UNLODCTR.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0316416 ____R (Microsoft Corporation) X:\I386\system32\UNTFS.DLL
2004-05-26 23:31 - 2004-05-26 23:31 - 0163840 ____R () X:\I386\system32\UNZIP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0133632 ____R (Microsoft Corporation) X:\I386\system32\UPNP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\UPNPCONT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0185856 ____R (Microsoft Corporation) X:\I386\system32\UPNPHOST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0239616 ____R (Microsoft Corporation) X:\I386\system32\UPNPUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0017920 ____R (Microsoft Corporation) X:\I386\system32\UREG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0037888 ____R (Microsoft Corporation) X:\I386\system32\URL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0619520 ____R (Microsoft Corporation) X:\I386\system32\URLMON.DLL
2005-04-04 15:08 - 2005-04-04 15:08 - 0233803 ____R () X:\I386\system32\USB1394.REG
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\USBMON.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0074240 ____R (Microsoft Corporation) X:\I386\system32\USBUI.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0047872 ____R (Microsoft Corporation) X:\I386\system32\USER.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0578560 ____R (Microsoft Corporation) X:\I386\system32\USER32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0727040 ____R (Microsoft Corporation) X:\I386\system32\USERENV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\USERINIT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0406016 ____R (Microsoft Corporation) X:\I386\system32\USP10.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0025600 ____R (Microsoft Corporation) X:\I386\system32\UTILDLL.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0218624 ____R (Microsoft Corporation) X:\I386\system32\UXTHEME.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0434176 ____R (Microsoft Corporation) X:\I386\system32\VBSCRIPT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007680 ____R (Microsoft Corporation) X:\I386\system32\VCDEX.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0026112 ____R (Microsoft Corporation) X:\I386\system32\VDMDBG.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009008 ____R (Microsoft Corporation) X:\I386\system32\VER.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0028672 ____R (Microsoft Corporation) X:\I386\system32\VERCLSID.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0018944 ____R (Microsoft Corporation) X:\I386\system32\VERSION.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0009344 ____R (Microsoft Corporation) X:\I386\system32\VGA.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002176 ____R (Microsoft Corporation) X:\I386\system32\VGA.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0051456 ____R (Microsoft Corporation) X:\I386\system32\VGA256.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0018176 ____R (Microsoft Corporation) X:\I386\system32\VGA64K.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0005232 ____R (Microsoft Corporation) X:\I386\system32\VGA850.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA860.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA861.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005200 ____R (Microsoft Corporation) X:\I386\system32\VGA863.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005184 ____R (Microsoft Corporation) X:\I386\system32\VGA865.FON
2003-06-20 12:00 - 2003-06-20 12:00 - 0005168 ____R (Microsoft Corporation) X:\I386\system32\VGAOEM.FON
2008-04-14 09:42 - 2008-04-14 09:42 - 0430592 ____R (Microsoft Corporation) X:\I386\system32\VSSAPI.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0069632 ____R () X:\I386\system32\VUINS32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0175104 ____R (Microsoft Corporation) X:\I386\system32\W32TIME.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0022016 ____R (Microsoft Corporation) X:\I386\system32\W32TOPL.DLL
2008-04-14 04:15 - 2008-04-14 04:15 - 0017664 ____R (Microsoft Corporation) X:\I386\system32\WATCHDOG.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0049152 ____R (Microsoft Corporation) X:\I386\system32\WDIGEST.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0276480 ____R (Microsoft Corporation) X:\I386\system32\WEBCHECK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0135680 ____R (Microsoft Corporation) X:\I386\system32\WEBVW.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013600 ____R (Microsoft Corporation) X:\I386\system32\WFWNET.DRV
2008-04-14 09:42 - 2008-04-14 09:42 - 0075776 ____R (Microsoft Corporation) X:\I386\system32\WIASCR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0589312 ____R (Microsoft Corporation) X:\I386\system32\WIASHEXT.DLL
2008-04-14 05:00 - 2008-04-14 05:00 - 1845632 ____R (Microsoft Corporation) X:\I386\system32\WIN32K.SYS
2008-04-14 09:42 - 2008-04-14 09:42 - 0102400 ____R (Microsoft Corporation) X:\I386\system32\WIN32SPL.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0013312 ____R () X:\I386\system32\WIN87EM.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0354304 ____R (Microsoft Corporation) X:\I386\system32\WINHTTP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0666112 ____R (Microsoft Corporation) X:\I386\system32\WININET.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0032256 ____R (Microsoft Corporation) X:\I386\system32\WINIPSEC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0507904 ____R (Microsoft Corporation) X:\I386\system32\WINLOGON.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0176128 ____R (Microsoft Corporation) X:\I386\system32\WINMM.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002080 ____R (Microsoft Corporation) X:\I386\system32\WINOLDAP.MOD
2008-04-14 09:42 - 2008-04-14 09:42 - 0016896 ____R (Microsoft Corporation) X:\I386\system32\WINRNR.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0099328 ____R (Microsoft Corporation) X:\I386\system32\WINSCARD.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002864 ____R (Microsoft Corporation) X:\I386\system32\WINSOCK.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0146432 ____R (Microsoft Corporation) X:\I386\system32\WINSPOOL.DRV
2003-06-20 12:00 - 2003-06-20 12:00 - 0002112 ____R (Microsoft Corporation) X:\I386\system32\WINSPOOL.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0293376 ____R (Microsoft Corporation) X:\I386\system32\WINSRV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0053760 ____R (Microsoft Corporation) X:\I386\system32\WINSTA.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0176640 ____R (Microsoft Corporation) X:\I386\system32\WINTRUST.DLL
2009-04-17 03:53 - 2009-04-17 03:53 - 0000247 ____R () X:\I386\system32\WIRELESS-DHCP.INI
2009-04-17 03:52 - 2009-04-17 03:52 - 0000297 ____R () X:\I386\system32\WIRELESS-STATIC.INI
2005-05-12 12:08 - 2005-05-12 12:08 - 0083968 ____R (Dion Nicolaas) X:\I386\system32\WIZAPP.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0132096 ____R (Microsoft Corporation) X:\I386\system32\WKSSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0172032 ____R (Microsoft Corporation) X:\I386\system32\WLDAP32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0092672 ____R (Microsoft Corporation) X:\I386\system32\WLNOTIFY.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0027136 ____R (Microsoft Corporation) X:\I386\system32\WMDMLOG.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0005632 ____R (Microsoft Corporation) X:\I386\system32\WMI.DLL
2008-10-15 21:14 - 2008-10-15 21:14 - 0044384 ____R (RealVNC Ltd.) X:\I386\system32\WM_HOOKS.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0214528 ____R (Microsoft Corporation) X:\I386\system32\WORDPAD.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0264192 ____R (Microsoft Corporation) X:\I386\system32\WOW32.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0002736 ____R (Microsoft Corporation) X:\I386\system32\WOWDEB.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0010368 ____R (Microsoft Corporation) X:\I386\system32\WOWEXEC.EXE
2001-08-18 02:36 - 2001-08-18 02:36 - 0003200 ____R (Microsoft Corporation) X:\I386\system32\WOWFAX.DLL
2001-08-18 02:36 - 2001-08-18 02:36 - 0013824 ____R (Microsoft Corporation) X:\I386\system32\WOWFAXUI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0019968 ____R (Microsoft Corporation) X:\I386\system32\WS2HELP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0082432 ____R (Microsoft Corporation) X:\I386\system32\WS2_32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0155648 ____R (Microsoft Corporation) X:\I386\system32\WSCRIPT.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0604160 ____R (Microsoft Corporation) X:\I386\system32\WSECEDIT.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0090112 ____R (Microsoft Corporation) X:\I386\system32\WSHEXT.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0011776 ____R (Microsoft Corporation) X:\I386\system32\WSHISN.DLL
2003-06-20 12:00 - 2003-06-20 12:00 - 0007168 ____R (Microsoft Corporation) X:\I386\system32\WSHNETBS.DLL
2008-04-14 09:41 - 2008-04-14 09:41 - 0135168 ____R (Microsoft Corporation) X:\I386\system32\WSHOM.OCX
2008-04-14 09:42 - 2008-04-14 09:42 - 0019456 ____R (Microsoft Corporation) X:\I386\system32\WSHTCPIP.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0022528 ____R (Microsoft Corporation) X:\I386\system32\WSOCK32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0018432 ____R (Microsoft Corporation) X:\I386\system32\WTSAPI32.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0383488 ____R (Microsoft Corporation) X:\I386\system32\WZCDLG.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0052736 ____R (Microsoft Corporation) X:\I386\system32\WZCSAPI.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0483840 ____R (Microsoft Corporation) X:\I386\system32\WZCSVC.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0030720 ____R (Microsoft Corporation) X:\I386\system32\XCOPY.EXE
2003-06-20 12:00 - 2003-06-20 12:00 - 0028288 ____R () X:\I386\system32\XJIS.NLS
2001-08-18 02:37 - 2001-08-18 02:37 - 0099865 ____R (Eicon Technology) X:\I386\system32\XLOG.EXE
2008-04-14 09:42 - 2008-04-14 09:42 - 0129024 ____R (Microsoft Corporation) X:\I386\system32\XMLPROV.DLL
2008-04-14 09:42 - 2008-04-14 09:42 - 0050176 ____R (Microsoft Corporation) X:\I386\system32\XMLPROVI.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0438784 ____R (Microsoft Corporation) X:\I386\system32\XPOB2RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0187392 ____R (Microsoft Corporation) X:\I386\system32\XPSP1RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 2897920 ____R (Microsoft Corporation) X:\I386\system32\XPSP2RES.DLL
2008-04-14 03:09 - 2008-04-14 03:09 - 0689152 ____R (Microsoft Corporation) X:\I386\system32\XPSP3RES.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK50X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK51X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK60X86.DLL
2010-02-25 00:33 - 2010-02-25 00:33 - 0364544 ____R (Marvell) X:\I386\system32\YK62X86.DLL
2006-11-25 21:13 - 2006-11-25 21:13 - 0074201 ____R () X:\I386\system32\world.jpg

Some files in TEMP:
====================
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00002.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00003.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00004.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00001.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00002.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00003.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00004.dll

==================== Known DLLs (Whitelisted) =========================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points (XP) =====================

RP: -> 2015-08-11 14:24 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1505

RP: -> 2015-08-06 23:38 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1504

RP: -> 2015-08-05 23:29 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1503

RP: -> 2015-08-03 23:42 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1502

RP: -> 2015-08-02 23:38 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1501

RP: -> 2015-08-01 22:40 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1500

RP: -> 2015-07-31 18:28 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1499

RP: -> 2015-07-30 01:10 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1498

RP: -> 2015-07-29 01:02 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1497

RP: -> 2015-07-28 00:30 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1496

RP: -> 2015-07-26 23:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1495

RP: -> 2015-07-25 22:58 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1494

RP: -> 2015-07-24 00:43 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1493

RP: -> 2015-07-23 00:23 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1492

RP: -> 2015-07-21 23:59 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1491

RP: -> 2015-07-20 23:05 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1490

RP: -> 2015-07-19 01:59 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1489

RP: -> 2015-07-17 21:13 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1488

RP: -> 2015-07-15 23:25 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1487

RP: -> 2015-07-14 23:18 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1486

RP: -> 2015-07-13 00:23 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1485

RP: -> 2015-07-11 23:48 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1484

RP: -> 2015-07-10 23:26 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1483

RP: -> 2015-07-10 22:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1482

RP: -> 2015-07-09 22:54 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1481

RP: -> 2015-07-09 22:32 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1480

RP: -> 2015-07-09 22:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1479

RP: -> 2015-07-09 22:29 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1478

RP: -> 2015-07-08 00:31 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1477

RP: -> 2015-07-06 23:03 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1476

RP: -> 2015-07-05 23:52 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1475

RP: -> 2015-07-04 14:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1474

RP: -> 2015-07-03 14:28 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1473

RP: -> 2015-07-02 02:34 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1472

RP: -> 2015-07-01 00:54 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1471

RP: -> 2015-06-29 23:43 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1470

RP: -> 2015-06-28 23:42 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1469

RP: -> 2015-06-26 22:24 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1468

RP: -> 2015-06-25 01:14 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1467

RP: -> 2015-06-23 00:02 - 028672 _restore{23B26855-47E9-4C00-997F-70E81EFF3C89}\RP1466


==================== Memory info ===========================

Percentage of memory in use: 37%
Total physical RAM: 1790.42 MB
Available physical RAM: 1126.48 MB
Total Virtual: 1622.27 MB
Available Virtual: 1150.19 MB

==================== Drives ================================

Drive b: (RAMDisk) (Fixed) (Total:0.44 GB) (Free:0.43 GB) FAT
Drive c: (Windows) (Fixed) (Total:29.29 GB) (Free:9.19 GB) NTFS ==>[drive with boot components (Windows XP)]
Drive d: (Programs) (Fixed) (Total:436.46 GB) (Free:22.21 GB) NTFS
Drive e: (USB DISK) (Removable) (Total:3.73 GB) (Free:3.73 GB) FAT32
Drive x: (UBCD4Windows) (CDROM) (Total:0.63 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 95CB95CB)
Partition 1: (Active) - (Size=29.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=436.5 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: 69FC7055)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C)

==================== End of log ============================

 

(It's basically Greek to me ...)


Edited by Tiger-Heli, 22 August 2015 - 06:08 AM.


#10 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,737 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:02:41 AM

Posted 22 August 2015 - 08:01 AM

Greetings,

Please do this.

===================================================

Farbar Recovery Scan Tool (FRST) Registry Fix in Recovery Environment

--------------------

Note: This fix will only work if your USB Device is still considered the E: Drive.

Running from E:\


-----
  • Insert a USB device into a clean computer
  • Download and save to your USB device.
  • Please download and save to your USB drive
  • Insert your USB device into the compromised computer
  • Boot back into the System Recovery Options and select Command Prompt
  • Type Notepad and select Enter
  • Click File, then Open
  • Select Computer and verify the correct Drive letter is indicated above. If you Drive letter is different stop and let me know
  • Run FRST and press the Fix button
  • The tool will create a Fixlog.txt report on your USB device
  • Copy and paste that information in your reply
  • Attempt to boot your computer in Normal or Safe Mode
===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it. :thumbsup2:
  • Fixlog
  • Can you boot?

Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#11 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 22 August 2015 - 09:20 AM

Just to be certain I am clear on this:

 

  • Boot back into the System Recovery Options and select Command Prompt  (so press F8 and select "Safe Mode with command prompt")
  • Type Notepad and select Enter  (I think I might need to go to C:\Windows\System32\ first, and then type Notepad, but I'm pretty sure I know what you mean)
  • Click File, then Open 
  • Select Computer and verify the correct Drive letter is indicated above. If you Drive letter is different stop and let me know - (Should I close Notepad after I verify the USB Drive is E and includes FRST.exe?)


#12 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,737 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:02:41 AM

Posted 22 August 2015 - 09:28 AM

Not Safe Mode with command prompt but boot into the Recovery just as you did to run FRST.
 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:09-08-2015
Ran by SYSTEM on BARTPE-13569 (11-08-2015 14:26:24)
Running from E:\
Platform: Microsoft Windows XP Service Pack 2 (X86) Language: Georgian
Internet Explorer Version 8
Boot Mode: Recovery
Default: ControlSet001

 

 

I think you will automatically have your USB drive as E: so skip the Notepad steps.

 

I am going to be away from my computer until later this afternoon.


Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#13 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 22 August 2015 - 10:23 AM

Okay, so boot up to the Ultimate Boot CD and then run FRST.

 

I think it will be E:\ in that case also - unless I did something really stupid like inserting a different flash drive before inserting the repair one ...

 

Thanks again!!!



#14 Oh My!

Oh My!

    Adware and Spyware and Malware.....


  • Malware Response Instructor
  • 37,737 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:California
  • Local time:02:41 AM

Posted 22 August 2015 - 06:20 PM

Sorry for the delay.

Yes, what you said is what we need to do.
Gary
 
If I do not reply within 24 hours please send me a Personal Message.

"Lord, to whom would we go? You have the words that give eternal life. We believe, and we know you are the Holy One of God."

#15 Tiger-Heli

Tiger-Heli
  • Topic Starter

  • Members
  • 171 posts
  • OFFLINE
  •  
  • Local time:04:41 AM

Posted 23 August 2015 - 06:02 AM

Everything seemed to run okay, but I still can't boot - same BSOD with same error message at same point.  (I only tried normal mode, not safe mode, but I doubt it would boot into Safe Mode either ...)

 

Fixlog:

Fix result of Farbar Recovery Scan Tool (x86) Version:09-08-2015
Ran by SYSTEM (2015-08-22 19:54:40) Run:1
Running from E:\
Boot Mode: Recovery

==============================================

fixlist content:
*****************
HKLM\...\Run: [AutoShutdown Pro] => [X]
Winlogon\Notify\LBTWlgn: g:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION
ShortcutTarget: Shortcut to startup.brs.lnk -> C:\PROGRAMS\Batchrun\startup.brs (No File)
S4 ALSysIO; \??\C:\DOCUME~1\USERNA~1\LOCALS~1\Temp\ALSysIO.sys [X]
S4 AmdLLD; system32\DRIVERS\AmdLLD.sys [X]
S5 GVTDrv; C:\WINDOWS\system32\Drivers\GVTDrv.sys [24944 2009-09-11] ()
S4 IntelIde; no ImagePath
S4 MEMSWEEP2; \??\C:\WINDOWS\system32\1.tmp [X]
S3 SANDRA; \??\G:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP4\WNt500x86\Sandra.sys [X]
S3 WinRing0_1_2_0; \??\G:\program files\PhenomMsrTweaker\WinRing0.sys [X]
S4 wqepwltm; System32\drivers\aeohtf.sys [X]
S1 WS2IFSL; no ImagePath
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00002.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00003.dll
C:\Documents and Settings\username\Local Settings\Temp\sfamcc00004.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00001.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00002.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00003.dll
C:\Documents and Settings\username\Local Settings\Temp\sfareca00004.dll
cmd: regedit /s e:\recovery.reg

*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AutoShutdown Pro => value removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn" => key removed successfully.
C:\Windows\System32\GroupPolicy\User => moved successfully.
C:\Windows\System32\GroupPolicy\GPT.ini => moved successfully.
C:\PROGRAMS\Batchrun\startup.brs not found.
ALSysIO => service removed successfully.
AmdLLD => service removed successfully.
GVTDrv => service removed successfully.
IntelIde => service removed successfully.
MEMSWEEP2 => service removed successfully.
SANDRA => service removed successfully.
WinRing0_1_2_0 => service removed successfully.
wqepwltm => service removed successfully.
WS2IFSL => service removed successfully.
"C:\Documents and Settings\username\Local Settings\Temp\sfamcc00001.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfamcc00002.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfamcc00003.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfamcc00004.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfareca00001.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfareca00002.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfareca00003.dll" => File/Folder not found.
"C:\Documents and Settings\username\Local Settings\Temp\sfareca00004.dll" => File/Folder not found.

=========  regedit /s e:\recovery.reg =========


========= End of CMD: =========


==== End of Fixlog 19:54:42 ====

 

I sent you a PM also ...

 

Thanks again for your help with this!!!






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users