Hijack This Log - My computer keeps freezing

**DazzleFairy** · 02-01-2009

Hey, just wondering what I should do about the Kaspersky scanner? I've tried it again and I still keep getting the same error message

Thanks

**Neal** · 03-01-2009

Try this one:

Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

* Doubleclick the drweb-cureit.exe file and Allow to run the express scan
* This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
* Once the short scan has finished, mark the drives that you want to scan.
* Select all drives. A red dot shows which drives have been chosen.
* Click the green arrow at the right, and the scan will start.
* Click 'Yes to all' if it asks if you want to cure/move the file.
* When the scan has finished, look if you can click next icon next to the files found:

* If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:

This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
* After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
* Save the report to your desktop. The report will be called DrWeb.csv
* Close Dr.Web Cureit.
* Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
* After reboot, post the contents of the log from Dr.Web you saved previously in your next reply. You can use Notepad to open the DrWeb.cvs report.

**DazzleFairy** · 29-01-2009

Thanks;

A0277998.bat;C:\System Volume Information\_restore{4812E16C-3D1D-4029-B9E4-214A27700633}\RP901;Probably BATCH.Virus;Incurable.Moved.;
A0278059.bat;C:\System Volume Information\_restore{4812E16C-3D1D-4029-B9E4-214A27700633}\RP902;Probably BATCH.Virus;Incurable.Moved.;
A0278113.bat;C:\System Volume Information\_restore{4812E16C-3D1D-4029-B9E4-214A27700633}\RP903;Probably BATCH.Virus;Incurable.Moved.;
A0278120.EXE;C:\System Volume Information\_restore{4812E16C-3D1D-4029-B9E4-214A27700633}\RP903;Program.PsExec.170;Incurable.M oved.;

**Neal** · 30-01-2009

Long time no see.

What is going on with your computer these days?

**DazzleFairy** · 05-02-2009

Yeah sorry about that, I've lost my patience with the computer so I only come on here now when it's essential. It seems to be acting the same, although it's hard to tell because I'm not on here much.

**Neal** · 06-02-2009

Delete the version of combofix you have and let's do one more scan and see what shows up.

Visit this page below to familiarize yourself to the tool below and download from one of the links provided.

A guide and tutorial on using ComboFix

If you have previously downloaded ComboFix,please delete that version now.

It is IMPORTANT that it is saved directly to your desktop

Close any open browsers.

Disconnect from the Internet.

Please do not re-connect your machine back to the Internet until Combofix has completely finished.

Disable your antivirus program and any realtime malware scanners and script blockers now

How To Disable

Double click on combofix.exe and follow the prompts.

When it's finished it will produce a log.
Post the entire contents of C:\ComboFix.txt into your next reply.

Note:
Do not mouseclick combofix's window while it's running.

That may cause the program to freeze/hang.

Do NOT post the ComboFix-quarantined-files.txt unless I ask.

Re-enable your anti-virus and re-connect back to the internet and post the combofix log.

*Note*
In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.
Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.

ComboFix SHOULD NOT be used unless requested by a forum helper.

**DazzleFairy** · 17-02-2009

ComboFix 09-02-15.01 - Karl Dunnage 2009-02-17 18:24:19.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1024.543 [GMT 0:00]
Running from: c:\documents and settings\Karl Dunnage.KARL\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2009-01-17 to 2009-02-17 )))))))))))))))))))))))))))))))
.

No new files created in this timespan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-02-05 16:11 --------- d-----w c:\documents and settings\All Users\Application Data\avg8
2009-02-05 16:09 325,128 ----a-w c:\windows\system32\drivers\avgldx86.sys
2009-02-05 16:09 10,520 ----a-w c:\windows\system32\avgrsstx.dll
2009-02-05 16:08 107,272 ----a-w c:\windows\system32\drivers\avgtdix.sys
2009-01-03 14:52 --------- d-----w c:\program files\DVDVideoSoft
2009-01-03 14:52 --------- d-----w c:\program files\Common Files\DVDVideoSoft
2009-01-02 12:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-02 11:13 --------- d-----w c:\program files\NCH Swift Sound
2009-01-02 10:46 --------- d-----w c:\documents and settings\All Users\Application Data\DriverScanner
2008-12-30 23:11 --------- d-----w c:\program files\Sony Ericsson
2008-12-25 14:42 --------- d-----w c:\program files\Avanquest update
2008-12-25 14:23 --------- d-----w c:\documents and settings\All Users\Application Data\BVRP Software
2008-12-25 14:20 --------- d-----w c:\documents and settings\All Users\Application Data\Sony Ericsson
2008-12-20 23:15 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-18 16:48 --------- d-----w c:\program files\Java
2001-09-19 07:10 61,440 ----a-w c:\windows\inf\i386\onetUSD.dll
2001-09-10 08:00 139,264 ----a-w c:\windows\inf\i386\Rtscan.dll
2001-08-17 17:43 32,768 ----a-w c:\windows\inf\i386\Wiamicro.dll
2001-06-29 07:10 163,840 ----a-w c:\windows\inf\i386\viceo.dll
2008-05-19 13:56 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008051920080 520\index.dat
.

((((((((((((((((((((((((((((( snapshot@2008-10-21_16.55.48.81 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-10 01:10:56 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
+ 2008-10-03 09:49:31 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
+ 2008-09-04 17:12:27 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
+ 2008-07-09 13:08:38 382,840 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
+ 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
+ 2008-10-23 12:43:42 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2008-07-09 07:38:29 755,576 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2008-07-09 07:38:37 382,840 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
+ 2008-07-08 13:02:01 17,272 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
+ 2008-07-08 13:02:02 231,288 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
+ 2008-07-08 13:02:01 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
+ 2008-07-08 13:02:04 755,576 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
+ 2008-07-08 13:02:12 382,840 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
+ 2008-10-16 20:24:09 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
+ 2008-10-16 20:24:09 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
+ 2008-10-16 20:24:09 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
+ 2008-10-16 20:24:09 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
+ 2008-10-16 20:24:09 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
+ 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
+ 2008-10-16 20:24:09 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
+ 2008-10-16 20:24:09 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
+ 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
+ 2008-10-16 20:24:09 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
+ 2008-10-16 20:24:09 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-16 20:24:09 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
+ 2008-10-16 20:24:09 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
+ 2008-10-16 20:24:09 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
+ 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
+ 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
+ 2008-10-16 20:24:10 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
+ 2008-10-16 20:24:10 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
+ 2008-10-16 20:24:10 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
+ 2008-10-16 20:24:10 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
+ 2008-10-16 20:24:10 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
+ 2008-10-16 20:24:10 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
+ 2008-10-16 20:24:10 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
+ 2008-10-16 20:24:10 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
+ 2008-10-16 20:24:10 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
+ 2008-10-16 20:24:10 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
+ 2008-10-16 20:24:11 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
+ 2008-10-16 20:24:11 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
+ 2008-10-16 20:24:11 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
+ 2007-03-06 01:23:51 371,424 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
+ 2008-10-15 16:25:53 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
+ 2007-11-30 11:18:51 17,272 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
+ 2007-11-30 11:18:51 231,288 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
+ 2007-11-30 11:18:51 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
+ 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
+ 2007-11-30 12:39:22 17,272 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
+ 2007-11-30 11:18:51 382,840 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
+ 2008-12-13 06:26:56 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
+ 2007-03-06 01:22:33 14,048 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
+ 2007-03-06 01:22:39 213,216 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
+ 2007-03-06 01:22:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
+ 2007-03-06 01:23:47 371,424 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
+ 2006-10-18 19:03:58 100,864 -c----w c:\windows\$NtUninstallKB952069_WM9$\logagent.exe
+ 2007-07-27 09:41:48 231,288 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\spun inst.exe
+ 2007-07-27 09:41:48 382,840 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\upds papi.dll
+ 2006-10-18 20:47:20 937,984 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmnetmgr.dll
+ 2006-10-18 20:47:22 2,450,944 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmvcore.dll
+ 2008-04-14 04:42:02 1,306,624 -c----w c:\windows\$NtUninstallKB954459$\msxml6.dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954459$\spuninst\spuninst .exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB954459$\spuninst\updspapi .dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB954600$\spuninst\spuninst .exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB954600$\spuninst\updspapi .dll
+ 2008-04-14 04:42:08 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
+ 2008-04-14 04:42:02 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst .exe
+ 2008-07-09 13:08:38 382,840 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi .dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB955839$\spuninst\spuninst .exe
+ 2007-11-30 12:39:22 382,840 -c----w c:\windows\$NtUninstallKB955839$\spuninst\updspapi .dll
+ 2008-07-11 12:42:28 62,976 -c----w c:\windows\$NtUninstallKB955839$\tzchange.exe
+ 2008-04-14 04:41:56 285,184 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
+ 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB956802$\spuninst\spuninst .exe
+ 2008-07-09 07:38:37 382,840 -c----w c:\windows\$NtUninstallKB956802$\spuninst\updspapi .dll
+ 2008-04-13 23:47:02 456,576 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
+ 2008-07-08 13:02:02 231,288 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst .exe
+ 2008-07-08 13:02:12 382,840 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi .dll
+ 2008-04-14 04:42:02 337,408 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
+ 2007-11-30 11:18:51 231,288 -c----w c:\windows\$NtUninstallKB958644$\spuninst\spuninst .exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958644$\spuninst\updspapi .dll
+ 2007-11-30 12:39:22 231,288 -c----w c:\windows\$NtUninstallKB958687$\spuninst\spuninst .exe
+ 2007-11-30 11:18:51 382,840 -c----w c:\windows\$NtUninstallKB958687$\spuninst\updspapi .dll
+ 2008-09-08 10:41:42 333,824 -c----w c:\windows\$NtUninstallKB958687$\srv.sys
+ 2008-11-13 20:04:44 7,729,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\App Common\a2f538843da3e857e8598fdfcc50047d\AppCommon. ni.dll
+ 2008-12-30 23:13:34 7,651,328 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\App Common\f3e069061b2b952353e8c1872906c713\AppCommon. ni.dll
+ 2008-11-13 20:05:13 77,824 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AxI nterop.QTOContro#\def75499c1843ab785dd3c8bde8111f9 \AxInterop.QTOControlLib.ni.dll
+ 2008-12-30 23:13:49 143,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AxI nterop.SHDocVw\70b950a142f162a0ab2c43c84fe339b7\Ax Interop.SHDocVw.ni.dll
+ 2008-11-13 20:04:58 143,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AxI nterop.SHDocVw\9e4274164e9464025cb839ca52bc5b82\Ax Interop.SHDocVw.ni.dll
+ 2008-11-13 20:05:10 184,320 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AxI nterop.WMPLib\7568ecbf03e371077733049ae0593a0c\AxI nterop.WMPLib.ni.dll
+ 2009-01-02 11:37:05 2,560,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Dri versHQ.DriverDet#\8fb3745d12ab171515a61ae6aa484c27 \DriversHQ.DriverDetective.Client.ni.exe
+ 2009-01-02 11:37:07 253,952 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Dri versHQ.DriverDet#\a04d8bfc8ff97c6602085b51ed5de77c \DriversHQ.DriverDetective.Client.Communication.ni .dll
+ 2009-01-02 11:37:08 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Dri versHQ.DriverDet#\c2c69466a308cfb8dd2f685f0f30e12b \DriversHQ.DriverDetective.Common.ni.dll
+ 2009-01-02 11:37:09 57,856 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Dri versHQ.DriverDet#\e75256139c23673a3bfad5bf9bc0630b \DriversHQ.DriverDetective.ExceptionLogging.ni.dll
+ 2008-11-13 20:05:05 221,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\GCP layer\84f6c613e93f71adc6e6f916545cdec3\GCPlayer.ni .dll
+ 2008-12-30 23:13:42 221,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\GCP layer\b1bc4f62319b3dfa406d694fcf576c4d\GCPlayer.ni .dll
+ 2008-12-30 23:13:52 28,672 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erfaces\0a4b264c6f32ca26121e8c61cf2aae31\Interfaces.ni.dll
+ 2008-11-13 20:05:03 32,768 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erfaces\561516147e2d633c5c6cc20e846df29a\Interface s.ni.dll
+ 2008-11-13 20:05:04 389,120 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBCONTROL#\881866bcbbf90b71169abc356f865b3c \Interop.CDDBCONTROLLibSMS.ni.dll
+ 2008-12-30 23:13:53 389,120 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBCONTROL#\daa6f5f547eabfe6caed5e63d912cd1b \Interop.CDDBCONTROLLibSMS.ni.dll
+ 2008-12-30 23:13:54 41,984 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBLINKLib#\6d33b0b4840deb4bf8e27cf9b00bdc25 \Interop.CDDBLINKLibSMS.ni.dll
+ 2008-11-13 20:05:09 86,016 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBLINKLib#\bdba10f7daecebb3dad5884a3bd74bf5 \Interop.CDDBLINKLibSMS.ni.dll
+ 2008-12-30 23:13:55 35,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBUICONTR#\2f0a2100d6953ca6e09c41d1263afe8e \Interop.CDDBUICONTROLLibSMS.ni.dll
+ 2008-11-13 20:05:17 35,840 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.CDDBUICONTR#\6c8a75ff0fe8a9ec2372a772253e56a5 \Interop.CDDBUICONTROLLibSMS.ni.dll
+ 2008-12-30 23:13:52 118,784 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.IWshRuntime#\5822221fb8bfafb193664f6dc969b320 \Interop.IWshRuntimeLibrary.ni.dll
+ 2008-11-13 20:05:02 118,784 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.IWshRuntime#\641e40e1746a126eed5fa3f480535008 \Interop.IWshRuntimeLibrary.ni.dll
+ 2008-11-13 20:05:03 90,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.PortableDev#\2a8cf856ec7a5a14685e931b8d35101f \Interop.PortableDeviceApiLib.ni.dll
+ 2008-12-30 23:13:53 90,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.PortableDev#\8524d04c4db5238f8b1f93141f158eb5 \Interop.PortableDeviceApiLib.ni.dll
+ 2008-11-13 20:05:16 90,112 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.PortableDev#\98caeca0b208ce972e0adf79f9283f56 \Interop.PortableDeviceTypesLib.ni.dll
+ 2008-11-13 20:05:14 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.QTOControlL#\ca33a0c1b5e70e24837c4e8e0facd7f5 \Interop.QTOControlLib.ni.dll
+ 2008-11-13 20:05:15 221,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.QTOLibrary\f72d4843493264fbc05248cd95f1ec1a\I nterop.QTOLibrary.ni.dll
+ 2008-11-13 20:04:59 344,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.SHDocVw\c156f007da0dca797f361da0c46ccf50\Inte rop.SHDocVw.ni.dll
+ 2008-12-30 23:13:50 344,064 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.SHDocVw\d22251df12bd587e0bf831a6f32ddb0b\Inte rop.SHDocVw.ni.dll
+ 2008-11-13 20:05:12 847,872 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Int erop.WMPLib\cb9067b434f6aa2621b8e0fd7e6b6a38\Inter op.WMPLib.ni.dll
+ 2008-11-13 20:04:53 712,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\log 4net\c214dffd2c15fedb78004903ebe143ef\log4net.ni.d ll
+ 2008-11-13 20:05:07 884,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Luc ene.Net\b367e4694dcafc89ec4a3560cc007306\Lucene.Ne t.ni.dll
+ 2008-11-13 20:04:50 970,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.GUI\294061a2f0ae1d7e7bb19165c480f3b0\Med iaManager.GUI.ni.dll
+ 2008-12-30 23:13:48 970,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.GUI\e5d39cd2af4d196391d02514937f6c41\Med iaManager.GUI.ni.dll
+ 2008-12-30 23:13:55 282,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.Splash#\00728a5d60f774502f989372ffa152de\MediaManager.Splas hScreen.ni.dll
+ 2008-11-13 20:05:18 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.Splash#\208886c7c0d29492a99a01892d4c6ab8 \MediaManager.SplashScreen.ni.dll
+ 2008-11-13 20:05:01 282,624 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.Utils\33e03d1cfeac3be1275e9fd85f0157ae\M ediaManager.Utils.ni.dll
+ 2008-12-30 23:13:51 147,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager.Utils\9ec198448ed0a67d7440773d5e963344\M ediaManager.Utils.ni.dll
+ 2008-12-30 23:13:19 1,728,512 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager\43ff5e82a6f924cbe2229b985fd47b8a\MediaMa nager.ni.exe
+ 2008-11-13 20:04:27 1,835,008 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Med iaManager\62559bf5119d1316c0df00f194d71076\MediaMa nager.ni.exe
+ 2009-01-02 11:37:10 258,048 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Applicati#\99303686c5439e8c96709ab95ba34d4e \Microsoft.ApplicationBlocks.Updater.ni.dll
+ 2009-01-02 11:37:13 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Practices#\19850f730d99a85ec4ee3f5ff0140b34 \Microsoft.Practices.EnterpriseLibrary.Security.Cr yptography.ni.dll
+ 2009-01-02 11:37:12 356,352 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Practices#\56f99b6d689912748672bf25d8d9d353 \Microsoft.Practices.ObjectBuilder.ni.dll
+ 2009-01-02 11:37:11 368,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.Practices#\dd935e23b88c65aad42c483332cc2302 \Microsoft.Practices.EnterpriseLibrary.Common.ni.d ll
+ 2008-12-30 23:13:44 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Per stNET\6d4a2ca948373e86875d9484abade8e8\PerstNET.ni .dll
+ 2008-11-13 20:04:47 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Per stNET\9c45419409182e4f87eda97bb7b7afb3\PerstNET.ni .dll
+ 2008-11-13 20:05:09 30,720 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\SFM ARKETLib\9eb969e20b8c21551b1d86ad18d6839c\SFMARKET Lib.ni.dll
+ 2008-12-30 23:13:40 1,036,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Son y.MediaSoftware.#\2566f7aca261d1ac3e3e491644039301 \Sony.MediaSoftware.clrshared.ni.dll
+ 2008-11-13 20:04:56 1,036,288 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Son y.MediaSoftware.#\4e41bb2349151ae8b688de9941a3f7c7 \Sony.MediaSoftware.clrshared.ni.dll
+ 2008-11-13 20:05:14 44,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\std ole\5eef2f32e44870fde9f65d34d523ef3e\stdole.ni.dll
+ 2008-10-24 11

09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
- 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-20 20:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2008-08-26 07:24:28 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
+ 2008-08-26 07:24:28 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
+ 2008-08-26 07:24:28 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
+ 2008-08-26 07:24:28 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
+ 2008-08-26 07:24:28 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
+ 2008-08-25 08:37:59 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
+ 2008-08-26 07:24:28 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
+ 2008-08-26 07:24:28 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
+ 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
+ 2008-08-26 07:24:28 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
+ 2008-08-26 07:24:29 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
+ 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
+ 2008-08-26 07:24:29 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
+ 2008-08-26 07:24:29 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
+ 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
+ 2008-08-23 05

15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
+ 2008-08-26 07:24:30 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
+ 2008-08-26 07:24:30 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
+ 2008-08-26 07:24:30 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
+ 2008-08-27 08:24:32 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
+ 2008-08-26 07:24:30 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
+ 2008-08-26 07:24:30 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
+ 2008-08-26 07:24:30 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
+ 2008-08-26 07:24:30 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
+ 2008-08-26 07:24:30 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
+ 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
+ 2008-08-26 07:24:30 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
+ 2008-08-26 07:24:31 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
+ 2008-08-26 07:24:31 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
+ 2008-08-26 07:24:31 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
+ 2008-10-17 02:08:40 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
+ 2007-03-06 01:22:39 213,216 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:47 371,424 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
+ 2008-10-16 20:38:34 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
+ 2008-10-16 20:38:34 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
+ 2008-10-16 20:38:34 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
+ 2008-10-16 20:38:35 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
+ 2008-10-16 20:38:35 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
+ 2008-10-16 13:11:09 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
+ 2008-10-16 20:38:35 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
+ 2008-10-16 20:38:35 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
+ 2008-10-15 07:04:53 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
+ 2008-10-16 20:38:35 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
+ 2008-10-16 20:38:35 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
+ 2008-10-16 20:38:37 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
+ 2008-10-16 20:38:37 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
+ 2008-10-16 20:38:37 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
+ 2008-10-16 13:11:09 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
+ 2008-10-15 07:06:26 633,632 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
+ 2008-10-16 20:38:37 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
+ 2008-10-16 20:38:37 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
+ 2008-10-16 20:38:37 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
+ 2008-12-13 06:40:02 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
+ 2008-10-16 20:38:38 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
+ 2008-10-16 20:38:38 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
+ 2008-10-16 20:38:39 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
+ 2008-10-16 20:38:39 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
+ 2008-10-16 20:38:39 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
+ 2007-03-06 01:22:41 213,216 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
+ 2008-10-16 20:38:39 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
+ 2008-10-16 20:38:39 1,160,192 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
+ 2008-10-16 20:38:39 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
+ 2008-10-16 20:38:40 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
+ 2008-11-13 19:55:13 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2008-11-14 19:20:42 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
- 2008-10-16 20:29:56 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-02-14 13:50:53 593,920 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-10-16 20:29:56 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-02-14 13:50:53 12,288 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-10-16 20:29:56 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-02-14 13:50:53 86,016 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2008-10-16 20:29:56 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-02-14 13:50:53 135,168 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-10-16 20:29:56 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-02-14 13:50:53 11,264 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2008-10-16 20:29:56 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-02-14 13:50:54 27,136 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2008-10-16 20:29:56 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-02-14 13:50:54 4,096 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-10-16 20:29:56 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-02-14 13:50:54 794,624 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2008-10-16 20:29:56 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-02-14 13:50:53 249,856 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2008-10-16 20:29:56 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-02-14 13:50:53 61,440 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2008-10-16 20:29:56 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-02-14 13:50:54 23,040 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2008-10-16 20:29:56 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-02-14 13:50:52 286,720 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2008-10-16 20:29:55 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-02-14 13:50:52 409,600 ----a-r c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2007-12-12 15:06:42 295,606 ----a-r c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\SC_Reader.exe
+ 2008-10-22 16:39:49 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\_SHCT_Sprint.exe.exe
+ 2008-10-22 16:39:49 69,632 ----a-r c:\windows\Installer\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}\ARPPRODUCTICON.exe
- 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
+ 2000-08-31 08:00:00 29,696 ----a-w c:\windows\NIRCMD.exe
- 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe
+ 2000-08-31 08:00:00 161,792 ----a-w c:\windows\SWREG.exe
- 2008-08-26 07:24:28 124,928 ----a-w c:\windows\system32\advpack.dll
+ 2008-12-20 23:15:11 124,928 ----a-w c:\windows\system32\advpack.dll
- 2008-07-18 21:10:48 94,920 ----a-w c:\windows\system32\cdm.dll
+ 2008-10-16 14:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
- 2008-05-19 13

55 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\i ndex.dat
+ 2008-11-03 19:01:01 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\i ndex.dat
- 2008-05-19 13

55 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-11-03 19:01:01 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-11-10 05:43:30 410,984 ----a-w c:\windows\system32\deploytk.dll
- 2008-08-26 07:24:28 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
+ 2008-12-20 23:15:11 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
- 2008-07-18 21:10:48 94,920 -c--a-w c:\windows\system32\dllcache\cdm.dll
+ 2008-10-16 14:09:44 92,696 -c--a-w c:\windows\system32\dllcache\cdm.dll
- 2008-08-26 07:24:28 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-12-20 23:15:12 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-08-26 07:24:28 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-12-20 23:15:13 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
- 2008-08-26 07:24:28 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-12-20 23:15:13 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-10-23 12:36:14 286,720 -c----w c:\windows\system32\dllcache\gdi32.dll
- 2008-08-26 07:24:28 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
+ 2008-12-20 23:15:13 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
- 2008-08-25 08:37:59 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
+ 2008-12-19 09:10:15 70,656 -c----w c:\windows\system32\dllcache\ie4uinit.exe
- 2008-08-26 07:24:28 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
+ 2008-12-20 23:15:14 153,088 -c----w c:\windows\system32\dllcache\ieakeng.dll
- 2008-08-26 07:24:28 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
+ 2008-12-20 23:15:14 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
- 2008-08-23 05:54:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
+ 2008-12-19 05:23:56 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
- 2008-08-26 07:24:28 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
+ 2008-12-20 23:15:15 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
- 2008-08-26 07:24:29 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-12-20 23:15:16 384,512 -c----w c:\windows\system32\dllcache\iedkcs32.dll
- 2008-10-03 17:41:15 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
+ 2008-12-20 23:15:21 6,066,688 -c----w c:\windows\system32\dllcache\ieframe.dll
- 2008-08-26 07:24:29 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
+ 2008-12-20 23:15:21 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
- 2008-08-26 07:24:29 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
+ 2008-12-20 23:15:22 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
- 2008-08-25 08:38:00 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
+ 2008-12-19 09:10:15 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
- 2008-08-23 05

15 635,848 -c----w c:\windows\system32\dllcache\iexplore.exe
+ 2008-12-19 05:25:25 634,024 -c----w c:\windows\system32\dllcache\iexplore.exe
- 2008-08-26 07:24:30 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-12-20 23:15:23 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
- 2006-10-18 19:03:58 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
+ 2008-06-18 01:09:22 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
+ 2008-10-24 11

09 455,296 -c----w c:\windows\system32\dllcache\mrxsmb.sys
- 2008-08-26 07:24:30 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
+ 2008-12-20 23:15:23 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
- 2008-08-26 07:24:30 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
+ 2008-12-20 23:15:24 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
- 2008-08-27 08:24:32 3,593,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2009-01-16 21:35:14 3,594,752 -c--a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-08-26 07:24:30 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-12-20 23:15:30 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
- 2008-08-26 07:24:30 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-12-20 23:15:31 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
- 2008-08-26 07:24:30 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-12-20 23:15:32 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-09-04 17:15:04 1,106,944 -c----w c:\windows\system32\dllcache\msxml3.dll
- 2008-04-14 04:42:02 1,306,624 -c----w c:\windows\system32\dllcache\msxml6.dll
+ 2008-09-10 01:14:56 1,307,648 -c----w c:\windows\system32\dllcache\msxml6.dll
- 2008-04-14 04:42:02 337,408 -c--a-w c:\windows\system32\dllcache\netapi32.dll
+ 2008-10-15 16:34:24 337,408 -c--a-w c:\windows\system32\dllcache\netapi32.dll
- 2008-08-26 07:24:30 102,912 -c----w c:\windows\system32\dllcache\occache.dll
+ 2008-12-20 23:15:38 102,912 -c----w c:\windows\system32\dllcache\occache.dll
- 2008-08-26 07:24:30 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-12-20 23:15:38 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
- 2008-09-08 10:41:42 333,824 -c----w c:\windows\system32\dllcache\srv.sys
+ 2008-12-11 10:57:09 333,952 -c----w c:\windows\system32\dllcache\srv.sys
- 2008-04-14 04:42:08 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
+ 2008-10-03 10:02:42 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll
- 2008-08-26 07:24:30 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
+ 2008-12-20 23:15:39 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
- 2008-08-26 07:24:31 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-12-20 23:15:40 1,160,192 -c--a-w c:\windows\system32\dllcache\urlmon.dll
- 2008-08-26 07:24:31 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
+ 2008-12-20 23:15:40 233,472 -c----w c:\windows\system32\dllcache\webcheck.dll
- 2008-08-26 07:24:31 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-12-20 23:15:41 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
- 2006-10-18 20:47:20 937,984 -c--a-w c:\windows\system32\dllcache\WMNetMgr.dll
+ 2008-06-18 05:03:08 938,496 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll
- 2006-10-18 20:47:22 2,450,944 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
+ 2008-06-18 05:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll
- 2008-07-18 21:09:44 563,912 -c--a-w c:\windows\system32\dllcache\wuapi.dll
+ 2008-10-16 14:12:20 561,688 -c--a-w c:\windows\system32\dllcache\wuapi.dll
- 2008-07-18 21:10:42 53,448 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
+ 2008-10-16 14:09:44 51,224 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
- 2008-07-18 21:09:42 1,811,656 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-16 14:13:40 1,809,944 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
- 2008-07-18 21:09:46 325,832 -c--a-w c:\windows\system32\dllcache\wucltui.dll
+ 2008-10-16 14:12:22 323,608 -c--a-w c:\windows\system32\dllcache\wucltui.dll
- 2008-07-18 21:10:20 36,552 -c--a-w c:\windows\system32\dllcache\wups.dll
+ 2008-10-16 14:08:58 34,328 -c--a-w c:\windows\system32\dllcache\wups.dll
- 2008-07-18 21:09:44 205,000 -c--a-w c:\windows\system32\dllcache\wuweb.dll
+ 2008-10-16 14:13:40 202,776 -c--a-w c:\windows\system32\dllcache\wuweb.dll
- 2008-07-13 16:11:21 26,824 ----a-w c:\windows\system32\drivers\avgmfx86.sys
+ 2009-02-05 16:09:10 27,656 ----a-w c:\windows\system32\drivers\avgmfx86.sys
- 2008-04-13 23:47:02 456,576 ----a-w c:\windows\system32\drivers\mrxsmb.sys
+ 2008-10-24 11

09 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
+ 2007-11-02 10:47:38 83,496 ----a-w c:\windows\system32\drivers\s916bus.sys
+ 2007-11-02 10:47:38 12,200 ----a-w c:\windows\system32\drivers\s916cm.sys
+ 2007-11-02 10:47:38 12,200 ----a-w c:\windows\system32\drivers\s916cmnt.sys
+ 2007-11-02 10:47:38 15,016 ----a-w c:\windows\system32\drivers\s916mdfl.sys
+ 2007-11-02 10:47:38 109,992 ----a-w c:\windows\system32\drivers\s916mdm.sys
+ 2007-11-02 10:47:38 103,976 ----a-w c:\windows\system32\drivers\s916mgmt.sys
+ 2007-11-02 10:47:38 100,008 ----a-w c:\windows\system32\drivers\s916obex.sys
+ 2007-11-02 10:47:38 12,200 ----a-w c:\windows\system32\drivers\s916wh.sys
+ 2007-11-02 10:47:38 12,200 ----a-w c:\windows\system32\drivers\s916whnt.sys
- 2008-09-08 10:41:42 333,824 ----a-w c:\windows\system32\drivers\srv.sys
+ 2008-12-11 10:57:09 333,952 ----a-w c:\windows\system32\drivers\srv.sys
+ 2008-01-18 14:16:22 83,880 -c--a-w c:\windows\system32\DRVSTORE\a016bus_DFCCFF5CDE2FA BCF26C68FAA7371A787F2CF5BB9\i386\a016bus.sys
+ 2008-01-18 14:16:28 12,200 -c--a-w c:\windows\system32\DRVSTORE\a016bus_DFCCFF5CDE2FA BCF26C68FAA7371A787F2CF5BB9\i386\a016whnt.sys
+ 2008-01-18 14:16:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B29 24C4F9CE55A0CA993E1DEF07D5BB\i386\a016cmnt.sys
+ 2008-01-18 14:16:24 15,016 -c--a-w c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B29 24C4F9CE55A0CA993E1DEF07D5BB\i386\a016mdfl.sys
+ 2008-01-18 14:16:26 110,504 -c--a-w c:\windows\system32\DRVSTORE\a016mdm2_8FC221937B29 24C4F9CE55A0CA993E1DEF07D5BB\i386\a016mdm.sys
+ 2008-01-18 14:16:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\a016obx2_3839048F455A 46A4FF4033F897B7AAA7BF427B58\i386\a016cmnt.sys
+ 2008-01-18 14:16:28 100,648 -c--a-w c:\windows\system32\DRVSTORE\a016obx2_3839048F455A 46A4FF4033F897B7AAA7BF427B58\i386\a016obex.sys
+ 2008-01-18 14:16:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\a016sdm2_9FBFF1EEEB00 15F5CA2F0634B300C450FF556BA3\i386\a016cmnt.sys
+ 2008-01-18 14:16:26 104,488 -c--a-w c:\windows\system32\DRVSTORE\a016sdm2_9FBFF1EEEB00 15F5CA2F0634B300C450FF556BA3\i386\a016mgmt.sys
+ 2007-08-31 09:32:46 49,825 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DARE D1.DLL
+ 2006-11-13 01:00:00 12,334 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DAUD F1.DLL
+ 2007-04-10 01:06:00 3,707 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DCIN ST.DLL
+ 2008-02-25 04:02:00 169,820 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DCON 04.DLL
+ 2008-01-16 05:00:00 49,036 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DDSP 30.DLL
+ 2007-12-06 01:02:00 7,289 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DGE3 21.DLL
+ 2005-11-30 04:20:00 87,332 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DHA7 30.DLL
+ 2007-03-09 04:20:00 283,458 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DHMM 6A.DLL
+ 2008-01-28 08:01:00 29,921 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DI0E EE.DLL
+ 2007-12-21 08:01:00 483,112 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DI1E EE.DLL
+ 2006-11-02 07

54 151,161 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DIFX 01.DLL
+ 2007-12-21 08:01:00 10,715 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DIX0 RE.DLL
+ 2008-02-29 04:00:00 352,493 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DJB7 25.DLL
+ 2007-12-07 01:00:00 66,059 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DLMW 01.DLL
+ 2008-02-20 05:00:00 78,799 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DMAI 30.DLL
+ 2007-11-26 04:00:00 100,301 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DPPE 06.EXE
+ 2007-11-14 04:00:00 267,481 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DPUI 07.DLL
+ 2007-11-28 05:00:00 9,461 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DRED 08.DLL
+ 2008-02-06 04:20:00 931,577 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DSE0 DE.DLL
+ 2008-03-03 06:00:00 576,231 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DU3E JE.DLL
+ 2006-05-18 04:20:00 29,073 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DUMW F5.DLL
+ 2008-01-17 13:42:06 145,992 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DUPA 30.EXE
+ 2008-03-18 03:01:02 1,915 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_DUPA 3E.DLL
+ 2008-02-22 01:40:00 77,918 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_H5UI A7.DLL
+ 2008-03-11 01:00:00 124,541 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_H9B0 D5.DLL
+ 2008-03-11 01:00:00 5,920 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_H9E0 D7.DLL
+ 2007-11-15 05:02:00 88,688 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S40M T7.EXE
+ 2008-01-07 05:04:00 83,444 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S40R N7.EXE
+ 2007-01-11 04:02:00 59,293 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S40R P7.EXE
+ 2008-03-18 01:16:00 272,723 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S40S O7.DLL
+ 2007-12-17 04:00:00 74,008 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S40S T7.EXE
+ 2008-03-10 06:00:00 326,143 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S990 D7.DLL
+ 2008-02-05 06:00:00 41,796 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S9B0 D5.DLL
+ 2008-02-29 06:00:00 10,558 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S9E0 D7.DLL
+ 2008-02-05 06:00:00 95,383 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_S9I0 D7.EXE
+ 2006-04-24 02:00:00 49,752 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_SAGS ET.DLL
+ 2007-12-17 01:03:00 83,689 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_SIAC S7.EXE
+ 2007-12-25 05:01:00 68,736 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\E_SKU3 27.DLL
+ 2007-11-28 05:15:00 78,160 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBAPI4 .DLL
+ 2007-11-28 05:15:00 78,160 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBAPI5 .DLL
+ 2007-12-07 06:03:00 20,200 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBAPI6 .DLL
+ 2007-12-07 06:06:00 23,214 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPBID I.DLL
+ 2007-12-07 06:06:00 23,215 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPBID I6.DLL
+ 2000-06-07 01:01:00 13,417 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPCHP .DLL
+ 2007-11-28 05:08:00 89,231 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPLPT 5.DLL
+ 2007-11-28 05:13:00 42,757 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPMON 25.DLL
+ 2007-12-07 02:08:00 39,013 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPMON B.DLL
+ 2006-11-22 01:05:00 37,624 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EBPSHR E4.DLL
+ 2003-05-21 02:27:00 29,535 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\ECBTEG .DLL
+ 2007-12-07 02:01:00 40,850 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\ECBTEG B.DLL
+ 2007-07-12 03:05:00 11,261 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPIPGI 20.DLL
+ 2007-11-28 03:15:00 116,210 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPSET3 2.DLL
+ 2007-12-25 07:02:00 40,517 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPUPDA TE.DAT
+ 2008-03-13 07:05:00 359,143 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPUPDA TE.EXE
+ 2008-02-05 10:23:00 120,250 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPUTY2 87.DLL
+ 2008-02-05 10:23:00 56,322 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EPUTY2 87.EXE
+ 2008-03-18 01:05:00 219,084 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\EREGIS TR.EXE
+ 2007-11-28 01:15:00 58,285 -c--a-r c:\windows\system32\DRVSTORE\E_DF1EDE_E6199A9C9980 8FB8BD6D48EF51BD45B815CF942E\WINVISTA_XP_2K\SAGENT 4.EXE
+ 2007-04-03 11:57:42 83,336 -c--a-w c:\windows\system32\DRVSTORE\s116bus_4EC4340427E77 E921C4CDCCEB4F12918959FBF57\i386\s116bus.sys
+ 2007-04-03 11:57:54 12,424 -c--a-w c:\windows\system32\DRVSTORE\s116bus_4EC4340427E77 E921C4CDCCEB4F12918959FBF57\i386\s116whnt.sys
+ 2007-04-03 11:57:44 12,424 -c--a-w c:\windows\system32\DRVSTORE\s116mdm2_51810A994D48 D04766082ED3F63ABF69BA02EBC5\i386\s116cmnt.sys
+ 2007-04-03 11:57:48 15,112 -c--a-w c:\windows\system32\DRVSTORE\s116mdm2_51810A994D48 D04766082ED3F63ABF69BA02EBC5\i386\s116mdfl.sys
+ 2007-04-03 11:57:48 108,680 -c--a-w c:\windows\system32\DRVSTORE\s116mdm2_51810A994D48 D04766082ED3F63ABF69BA02EBC5\i386\s116mdm.sys
+ 2007-04-03 11:57:50 22,792 -c--a-w c:\windows\system32\DRVSTORE\s116ndis_A53E3A4209E2 289370AAD8AEB452D42DD0A9F77A\i386\s116nd3.sys
+ 2007-04-03 11:57:52 23,176 -c--a-w c:\windows\system32\DRVSTORE\s116ndis_A53E3A4209E2 289370AAD8AEB452D42DD0A9F77A\i386\s116nd5.sys
+ 2007-04-03 11:57:44 12,424 -c--a-w c:\windows\system32\DRVSTORE\s116obx2_E29564B3927F F8E719B6E44AA79ED52B8739FB53\i386\s116cmnt.sys
+ 2007-04-03 11:57:52 98,696 -c--a-w c:\windows\system32\DRVSTORE\s116obx2_E29564B3927F F8E719B6E44AA79ED52B8739FB53\i386\s116obex.sys
+ 2007-04-03 11:57:44 12,424 -c--a-w c:\windows\system32\DRVSTORE\s116sdm2_527B4CB76272 09888419E81981E1A7EBEB05F5F3\i386\s116cmnt.sys
+ 2007-04-03 11:57:50 100,488 -c--a-w c:\windows\system32\DRVSTORE\s116sdm2_527B4CB76272 09888419E81981E1A7EBEB05F5F3\i386\s116mgmt.sys
+ 2007-04-03 11:57:46 11,016 -c--a-w c:\windows\system32\DRVSTORE\s116unic_A53E3A4209E2 289370AAD8AEB452D42DD0A9F77A\i386\s116crnt.sys
+ 2007-04-03 11:57:54 99,080 -c--a-w c:\windows\system32\DRVSTORE\s116unic_A53E3A4209E2 289370AAD8AEB452D42DD0A9F77A\i386\s116unic.sys
+ 2007-04-03 11:57:54 12,424 -c--a-w c:\windows\system32\DRVSTORE\s116unic_A53E3A4209E2 289370AAD8AEB452D42DD0A9F77A\i386\s116whnt.sys
+ 2007-06-25 09:43:22 82,984 -c--a-w c:\windows\system32\DRVSTORE\s117bus_16D31200366D8 B74F92572963E8FE119462C6777\i386\s117bus.sys
+ 2007-06-25 09:43:36 12,200 -c--a-w c:\windows\system32\DRVSTORE\s117bus_16D31200366D8 B74F92572963E8FE119462C6777\i386\s117whnt.sys
+ 2007-06-25 09:43:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\s117mdm2_759AE176E5B7 5A8069BA60132D4833197291761F\i386\s117cmnt.sys
+ 2007-06-25 09:43:26 14,888 -c--a-w c:\windows\system32\DRVSTORE\s117mdm2_759AE176E5B7 5A8069BA60132D4833197291761F\i386\s117mdfl.sys
+ 2007-06-25 09:43:36 108,456 -c--a-w c:\windows\system32\DRVSTORE\s117mdm2_759AE176E5B7 5A8069BA60132D4833197291761F\i386\s117mdm.sys
+ 2007-06-25 09:43:36 22,568 -c--a-w c:\windows\system32\DRVSTORE\s117ndis_7F3C1381791F E8CEC063283034F38F44FC38F4C8\i386\s117nd3.sys
+ 2007-06-25 09:43:36 22,952 -c--a-w c:\windows\system32\DRVSTORE\s117ndis_7F3C1381791F E8CEC063283034F38F44FC38F4C8\i386\s117nd5.sys
+ 2007-06-25 09:43:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\s117obx2_8F1701C72BE1 A59B362B59AA4767678B15CDBB09\i386\s117cmnt.sys
+ 2007-06-25 09:43:38 98,344 -c--a-w c:\windows\system32\DRVSTORE\s117obx2_8F1701C72BE1 A59B362B59AA4767678B15CDBB09\i386\s117obex.sys
+ 2007-06-25 09:43:24 12,200 -c--a-w c:\windows\system32\DRVSTORE\s117sdm2_EFE4F2D86B5F 73018AB3B32F7D76D57914B00869\i386\s117cmnt.sys
+ 2007-06-25 09:43:36 100,264 -c--a-w c:\windows\system32\DRVSTORE\s117sdm2_EFE4F2D86B5F 73018AB3B32F7D76D57914B00869\i386\s117mgmt.sys
+ 2007-06-25 09:43:38 10,792 -c--a-w c:\windows\system32\DRVSTORE\s117unic_7F3C1381791F E8CEC063283034F38F44FC38F4C8\i386\s117crnt.sys
+ 2007-06-25 09:43:36 98,856 -c--a-w c:\windows\system32\DRVSTORE\s117unic_7F3C1381791F E8CEC063283034F38F44FC38F4C8\i386\s117unic.sys
+ 2007-06-25 09:43:36 12,200 -c--a-w c:\windows\system32\DRVSTORE\s117unic_7F3C1381791F E8CEC063283034F38F44FC38F4C8\i386\s117whnt.sys
+ 2007-11-02 13:22:36 83,496 -c--a-w c:\windows\system32\DRVSTORE\s217bus_06F43B975F54D 37C9AB91AE8D297B232FB3E1644\i386\s217bus.sys
+ 2007-11-02 13:22:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s217bus_06F43B975F54D 37C9AB91AE8D297B232FB3E1644\i386\s217whnt.sys
+ 2007-11-02 13:22:36 12,200 -c--a-w c:\windows\system32\DRVSTORE\s217mdm2_5EE1551A22B9 89B57A2D7829CD012ED5D75157D1\i386\s217cmnt.sys
+ 2007-11-02 13:22:36 15,016 -c--a-w c:\windows\system32\DRVSTORE\s217mdm2_5EE1551A22B9 89B57A2D7829CD012ED5D75157D1\i386\s217mdfl.sys
+ 2007-11-02 13:22:36 109,992 -c--a-w c:\windows\system32\DRVSTORE\s217mdm2_5EE1551A22B9 89B57A2D7829CD012ED5D75157D1\i386\s217mdm.sys
+ 2007-11-02 13:22:36 24,360 -c--a-w c:\windows\system32\DRVSTORE\s217ndis_6C9E218D2CA9 42DACF96F27B2842B5864B4AABA5\i386\s217nd3.sys
+ 2007-11-02 13:22:38 24,872 -c--a-w c:\windows\system32\DRVSTORE\s217ndis_6C9E218D2CA9 42DACF96F27B2842B5864B4AABA5\i386\s217nd5.sys
+ 2007-11-02 13:22:36 12,200 -c--a-w c:\windows\system32\DRVSTORE\s217obx2_2799F6FE23D2 28A95BDD62F86761F1E5F21BBBA5\i386\s217cmnt.sys
+ 2007-11-02 13:22:38 100,008 -c--a-w c:\windows\system32\DRVSTORE\s217obx2_2799F6FE23D2 28A95BDD62F86761F1E5F21BBBA5\i386\s217obex.sys
+ 2007-11-02 13:22:36 12,200 -c--a-w c:\windows\system32\DRVSTORE\s217sdm2_5CFF83B6B2C5 487E3BDD4BC186BC63B4430AFE4A\i386\s217cmnt.sys
+ 2007-11-02 13:22:38 103,976 -c--a-w c:\windows\system32\DRVSTORE\s217sdm2_5CFF83B6B2C5 487E3BDD4BC186BC63B4430AFE4A\i386\s217mgmt.sys
+ 2007-11-02 13:22:36 10,792 -c--a-w c:\windows\system32\DRVSTORE\s217unic_6C9E218D2CA9 42DACF96F27B2842B5864B4AABA5\i386\s217crnt.sys
+ 2007-11-02 13:22:38 105,896 -c--a-w c:\windows\system32\DRVSTORE\s217unic_6C9E218D2CA9 42DACF96F27B2842B5864B4AABA5\i386\s217unic.sys
+ 2007-11-02 13:22:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s217unic_6C9E218D2CA9 42DACF96F27B2842B5864B4AABA5\i386\s217whnt.sys
+ 2007-04-03 11:59:30 83,208 -c--a-w c:\windows\system32\DRVSTORE\s616bus_373776A749479 F4EBED57CEEEDA21B8E4DD2C13F\i386\s616bus.sys
+ 2007-04-03 11:59:44 12,424 -c--a-w c:\windows\system32\DRVSTORE\s616bus_373776A749479 F4EBED57CEEEDA21B8E4DD2C13F\i386\s616whnt.sys
+ 2007-04-03 11:59:32 12,424 -c--a-w c:\windows\system32\DRVSTORE\s616mdm2_D8C823689DB3 02D84B2F410C9E1EE27D15660A8B\i386\s616cmnt.sys
+ 2007-04-03 11:59:36 15,112 -c--a-w c:\windows\system32\DRVSTORE\s616mdm2_D8C823689DB3 02D84B2F410C9E1EE27D15660A8B\i386\s616mdfl.sys
+ 2007-04-03 11:59:38 108,680 -c--a-w c:\windows\system32\DRVSTORE\s616mdm2_D8C823689DB3 02D84B2F410C9E1EE27D15660A8B\i386\s616mdm.sys
+ 2007-04-03 11:59:40 22,792 -c--a-w c:\windows\system32\DRVSTORE\s616ndis_BC0951E03296 84A71CAD29F53BF2A61D61BA8A9C\i386\s616nd3.sys
+ 2007-04-03 11:59:42 23,176 -c--a-w c:\windows\system32\DRVSTORE\s616ndis_BC0951E03296 84A71CAD29F53BF2A61D61BA8A9C\i386\s616nd5.sys
+ 2007-04-03 11:59:32 12,424 -c--a-w c:\windows\system32\DRVSTORE\s616obx2_7858FB467BAB AD2EFCC4D10C5CE195423B8A7C6F\i386\s616cmnt.sys
+ 2007-04-03 11:59:42 98,568 -c--a-w c:\windows\system32\DRVSTORE\s616obx2_7858FB467BAB AD2EFCC4D10C5CE195423B8A7C6F\i386\s616obex.sys
+ 2007-04-03 11:59:32 12,424 -c--a-w c:\windows\system32\DRVSTORE\s616sdm2_CE2DBFB2FC30 31E70B49CF54804115A97F8FAB5E\i386\s616cmnt.sys
+ 2007-04-03 11:59:40 100,360 -c--a-w c:\windows\system32\DRVSTORE\s616sdm2_CE2DBFB2FC30 31E70B49CF54804115A97F8FAB5E\i386\s616mgmt.sys
+ 2007-04-03 11:59:36 11,016 -c--a-w c:\windows\system32\DRVSTORE\s616unic_BC0951E03296 84A71CAD29F53BF2A61D61BA8A9C\i386\s616crnt.sys
+ 2007-04-03 11:59:42 99,080 -c--a-w c:\windows\system32\DRVSTORE\s616unic_BC0951E03296 84A71CAD29F53BF2A61D61BA8A9C\i386\s616unic.sys
+ 2007-04-03 11:59:44 12,424 -c--a-w c:\windows\system32\DRVSTORE\s616unic_BC0951E03296 84A71CAD29F53BF2A61D61BA8A9C\i386\s616whnt.sys
+ 2007-04-04 10:43:20 83,208 -c--a-w c:\windows\system32\DRVSTORE\s716bus_570F0922FA561 83024CD2E3A2E7263DED544A027\i386\s716bus.sys
+ 2007-04-04 10:43:38 12,424 -c--a-w c:\windows\system32\DRVSTORE\s716bus_570F0922FA561 83024CD2E3A2E7263DED544A027\i386\s716whnt.sys
+ 2007-04-04 10:43:22 12,424 -c--a-w c:\windows\system32\DRVSTORE\s716mdm2_34EAFBD3F6E5 8B88672FA05A8FAFC348FBE181C1\i386\s716cmnt.sys
+ 2007-04-04 10:43:32 15,112 -c--a-w c:\windows\system32\DRVSTORE\s716mdm2_34EAFBD3F6E5 8B88672FA05A8FAFC348FBE181C1\i386\s716mdfl.sys
+ 2007-04-04 10:43:34 108,552 -c--a-w c:\windows\system32\DRVSTORE\s716mdm2_34EAFBD3F6E5 8B88672FA05A8FAFC348FBE181C1\i386\s716mdm.sys
+ 2007-04-04 10:43:34 22,792 -c--a-w c:\windows\system32\DRVSTORE\s716ndis_DFBBF0C093A3 E74C62E36E25E809DFAB4E562E6C\i386\s716nd3.sys
+ 2007-04-04 10:43:36 23,176 -c--a-w c:\windows\system32\DRVSTORE\s716ndis_DFBBF0C093A3 E74C62E36E25E809DFAB4E562E6C\i386\s716nd5.sys
+ 2007-04-04 10:43:22 12,424 -c--a-w c:\windows\system32\DRVSTORE\s716obx2_DAB4BAF8D8CE 324995EA588248D84BF89F1571AA\i386\s716cmnt.sys
+ 2007-04-04 10:43:36 98,568 -c--a-w c:\windows\system32\DRVSTORE\s716obx2_DAB4BAF8D8CE 324995EA588248D84BF89F1571AA\i386\s716obex.sys
+ 2007-04-04 10:43:22 12,424 -c--a-w c:\windows\system32\DRVSTORE\s716sdm2_80BA2D1EBDD2 C1ADC291BAAF1445FB2BD1C23FB6\i386\s716cmnt.sys
+ 2007-04-04 10:43:34 100,360 -c--a-w c:\windows\system32\DRVSTORE\s716sdm2_80BA2D1EBDD2 C1ADC291BAAF1445FB2BD1C23FB6\i386\s716mgmt.sys
+ 2007-04-04 10:43:32 11,016 -c--a-w c:\windows\system32\DRVSTORE\s716unic_DFBBF0C093A3 E74C62E36E25E809DFAB4E562E6C\i386\s716crnt.sys
+ 2007-04-04 10:43:38 98,952 -c--a-w c:\windows\system32\DRVSTORE\s716unic_DFBBF0C093A3 E74C62E36E25E809DFAB4E562E6C\i386\s716unic.sys
+ 2007-04-04 10:43:38 12,424 -c--a-w c:\windows\system32\DRVSTORE\s716unic_DFBBF0C093A3 E74C62E36E25E809DFAB4E562E6C\i386\s716whnt.sys
+ 2007-06-19 07:51:16 81,832 -c--a-w c:\windows\system32\DRVSTORE\s816bus_CBE0CF0DBEF10 2A4EA8AD658FD4064660751AAF0\i386\s816bus.sys
+ 2007-06-19 07:51:18 11,176 -c--a-w c:\windows\system32\DRVSTORE\s816bus_CBE0CF0DBEF10 2A4EA8AD658FD4064660751AAF0\i386\s816whnt.sys
+ 2007-06-19 07:51:16 11,176 -c--a-w c:\windows\system32\DRVSTORE\s816mdm2_804513129A65 71549C6BC1C482A66F15416AB109\i386\s816cmnt.sys
+ 2007-06-19 07:51:18 13,864 -c--a-w c:\windows\system32\DRVSTORE\s816mdm2_804513129A65 71549C6BC1C482A66F15416AB109\i386\s816mdfl.sys
+ 2007-06-19 07:51:20 107,304 -c--a-w c:\windows\system32\DRVSTORE\s816mdm2_804513129A65 71549C6BC1C482A66F15416AB109\i386\s816mdm.sys
+ 2007-06-19 07:51:18 21,544 -c--a-w c:\windows\system32\DRVSTORE\s816ndis_D7CF9C312922 9D02F512ADFE683E32F539015344\i386\s816nd3.sys
+ 2007-06-19 07:51:18 21,928 -c--a-w c:\windows\system32\DRVSTORE\s816ndis_D7CF9C312922 9D02F512ADFE683E32F539015344\i386\s816nd5.sys
+ 2007-06-19 07:51:16 11,176 -c--a-w c:\windows\system32\DRVSTORE\s816obx2_72A1419001FE BF4D2884EC67C9BA579159F66753\i386\s816cmnt.sys
+ 2007-06-19 07:51:18 97,320 -c--a-w c:\windows\system32\DRVSTORE\s816obx2_72A1419001FE BF4D2884EC67C9BA579159F66753\i386\s816obex.sys
+ 2007-06-19 07:51:16 11,176 -c--a-w c:\windows\system32\DRVSTORE\s816sdm2_B604D7F51935 4D27B76AA9347F0F7D8F7B2101BD\i386\s816cmnt.sys
+ 2007-06-19 07:51:18 99,112 -c--a-w c:\windows\system32\DRVSTORE\s816sdm2_B604D7F51935 4D27B76AA9347F0F7D8F7B2101BD\i386\s816mgmt.sys
+ 2007-06-19 07:51:08 9,768 -c--a-w c:\windows\system32\DRVSTORE\s816unic_D7CF9C312922 9D02F512ADFE683E32F539015344\i386\s816crnt.sys
+ 2007-06-19 07:51:18 97,704 -c--a-w c:\windows\system32\DRVSTORE\s816unic_D7CF9C312922 9D02F512ADFE683E32F539015344\i386\s816unic.sys
+ 2007-06-19 07:51:18 11,176 -c--a-w c:\windows\system32\DRVSTORE\s816unic_D7CF9C312922 9D02F512ADFE683E32F539015344\i386\s816whnt.sys
+ 2007-11-02 10:47:38 83,496 -c--a-w c:\windows\system32\DRVSTORE\s916bus_3395190DF2FB7 82139DB9E18AA83FD42AAB0E78E\i386\s916bus.sys
+ 2007-11-02 10:47:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s916bus_3395190DF2FB7 82139DB9E18AA83FD42AAB0E78E\i386\s916whnt.sys
+ 2007-11-02 10:47:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E 64A6D6F619016E152C56854F40D7\i386\s916cmnt.sys
+ 2007-11-02 10:47:38 15,016 -c--a-w c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E 64A6D6F619016E152C56854F40D7\i386\s916mdfl.sys
+ 2007-11-02 10:47:38 109,992 -c--a-w c:\windows\system32\DRVSTORE\s916mdm2_85F2F98F689E 64A6D6F619016E152C56854F40D7\i386\s916mdm.sys
+ 2007-11-02 10:47:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s916obx2_74455A9D7CF2 BC68446FD3455ABFCCDA93FFD087\i386\s916cmnt.sys
+ 2007-11-02 10:47:38 100,008 -c--a-w c:\windows\system32\DRVSTORE\s916obx2_74455A9D7CF2 BC68446FD3455ABFCCDA93FFD087\i386\s916obex.sys
+ 2007-11-02 10:47:38 12,200 -c--a-w c:\windows\system32\DRVSTORE\s916sdm2_21F85660AA82 023EA111CC6BDFE4E4EF2EDFED63\i386\s916cmnt.sys
+ 2007-11-02 10:47:38 103,976 -c--a-w c:\windows\system32\DRVSTORE\s916sdm2_21F85660AA82 023EA111CC6BDFE4E4EF2EDFED63\i386\s916mgmt.sys
+ 2007-04-10 13:14:02 83,080 -c--a-w c:\windows\system32\DRVSTORE\se3ebus_278301E0E0E32 54933BAAF4F06701023D35DABD9\i386\se3ebus.sys
+ 2007-04-10 13:14:26 12,424 -c--a-w c:\windows\system32\DRVSTORE\se3ebus_278301E0E0E32 54933BAAF4F06701023D35DABD9\i386\se3ewhnt.sys
+ 2007-04-10 13:14:08 12,424 -c--a-w c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3 087EAEC451F69738F8F9B8EAC7FD\i386\se3ecmnt.sys
+ 2007-04-10 13:14:14 15,112 -c--a-w c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3 087EAEC451F69738F8F9B8EAC7FD\i386\se3emdfl.sys
+ 2007-04-10 13:14:14 108,552 -c--a-w c:\windows\system32\DRVSTORE\se3emdm2_B9A80A4AD6A3 087EAEC451F69738F8F9B8EAC7FD\i386\se3emdm.sys
+ 2007-04-10 13:14:08 12,424 -c--a-w c:\windows\system32\DRVSTORE\se3eobx2_4D2AF8EAA7B1 9E8748780FA6098D3AACC5D8D9F9\i386\se3ecmnt.sys
+ 2007-04-10 13:14:18 98,568 -c--a-w c:\windows\system32\DRVSTORE\se3eobx2_4D2AF8EAA7B1 9E8748780FA6098D3AACC5D8D9F9\i386\se3eobex.sys
+ 2007-04-10 13:14:08 12,424 -c--a-w c:\windows\system32\DRVSTORE\se3esdm2_9764AEB0AF92 C101555E353C0F0D3CF5C63F33FA\i386\se3ecmnt.sys
+ 2007-04-10 13:14:16 100,360 -c--a-w c:\windows\system32\DRVSTORE\se3esdm2_9764AEB0AF92 C101555E353C0F0D3CF5C63F33FA\i386\se3emgmt.sys
- 2008-08-26 07:24:28 347,136 ----a-w c:\windows\system32\dxtmsft.dll
+ 2008-12-20 23:15:12 347,136 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-08-26 07:24:28 214,528 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-12-20 23:15:13 214,528 ----a-w c:\windows\system32\dxtrans.dll
- 2004-09-10 20:12:28 49,152 ----a-w c:\windows\system32\E_DCINST.DLL
+ 2007-04-10 01:06:00 8,192 ----a-w c:\windows\system32\E_DCINST.DLL
+ 2007-12-07 02:01:00 78,848 ----a-w c:\windows\system32\E_FD4BEDE.DLL
+ 2007-12-07 02:08:00 86,528 ----a-w c:\windows\system32\E_FLBEDE.DLL
- 2004-03-03 05:10:00 65,536 -c--a-w c:\windows\system32\EPPicMgr.dll
+ 2006-10-30 23:10:00 71,840 ----a-w c:\windows\system32\EPPicMgr.dll
- 2004-03-03 05:10:00 114,688 ----a-w c:\windows\system32\EpPicPrt.dll
+ 2006-10-30 23:10:00 120,992 ----a-w c:\windows\system32\EpPicPrt.dll
- 2005-02-24 23:00:00 29,696 ----a-w c:\windows\system32\escwiad.dll
+ 2007-07-12 23:00:00 71,680 ----a-w c:\windows\system32\escwiad.dll
- 2008-08-26 07:24:28 133,120 ----a-w c:\windows\system32\extmgr.dll
+ 2008-12-20 23:15:13 133,120 ----a-w c:\windows\system32\extmgr.dll
- 2008-10-18 18:02:14 115,768 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2008-12-27 13:12:15 193,776 ----a-w c:\windows\system32\FNTCACHE.DAT
- 2008-04-14 04:41:56 285,184 ----a-w c:\windows\system32\gdi32.dll
+ 2008-10-23 12:36:14 286,720 ----a-w c:\windows\system32\gdi32.dll
- 2008-08-26 07:24:28 63,488 ----a-w c:\windows\system32\icardie.dll
+ 2008-12-20 23:15:13 63,488 ----a-w c:\windows\system32\icardie.dll
- 2008-08-25 08:37:59 70,656 ----a-w c:\windows\system32\ie4uinit.exe
+ 2008-12-19 09:10:15 70,656 ----a-w c:\windows\system32\ie4uinit.exe
- 2008-08-26 07:24:28 153,088 ----a-w c:\windows\system32\ieakeng.dll
+ 2008-12-20 23:15:14 153,088 ----a-w c:\windows\system32\ieakeng.dll
- 2008-08-26 07:24:28 230,400 ----a-w c:\windows\system32\ieaksie.dll
+ 2008-12-20 23:15:14 230,400 ----a-w c:\windows\system32\ieaksie.dll
- 2008-08-23 05:54:51 161,792 ----a-w c:\windows\system32\ieakui.dll
+ 2008-12-19 05:23:56 161,792 ----a-w c:\windows\system32\ieakui.dll
- 2008-08-26 07:24:28 383,488 ----a-w c:\windows\system32\ieapfltr.dll
+ 2008-12-20 23:15:15 383,488 ----a-w c:\windows\system32\ieapfltr.dll
- 2008-08-26 07:24:29 384,512 ----a-w c:\windows\system32\iedkcs32.dll
+ 2008-12-20 23:15:16 384,512 ----a-w c:\windows\system32\iedkcs32.dll
- 2008-10-03 17:41:15 6,066,176 ----a-w c:\windows\system32\ieframe.dll
+ 2008-12-20 23:15:21 6,066,688 ----a-w c:\windows\system32\ieframe.dll
- 2008-08-26 07:24:29 44,544 ----a-w c:\windows\system32\iernonce.dll
+ 2008-12-20 23:15:21 44,544 ----a-w c:\windows\system32\iernonce.dll
- 2008-08-26 07:24:29 267,776 ----a-w c:\windows\system32\iertutil.dll
+ 2008-12-20 23:15:22 267,776 ----a-w c:\windows\system32\iertutil.dll
- 2008-08-25 08:38:00 13,824 ----a-w c:\windows\system32\ieudinit.exe
+ 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
- 2008-02-22 00:23:35 135,168 ----a-w c:\windows\system32\java.exe
+ 2008-11-10 05:43:37 144,792 ----a-w c:\windows\system32\java.exe
- 2008-02-22 00:23:39 135,168 ----a-w c:\windows\system32\javaw.exe
+ 2008-11-10 05:43:38 144,792 ----a-w c:\windows\system32\javaw.exe
- 2008-02-22 01:33:32 139,264 ----a-w c:\windows\system32\javaws.exe
+ 2008-11-10 05:43:39 148,888 ----a-w c:\windows\system32\javaws.exe
- 2008-08-26 07:24:30 27,648 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-12-20 23:15:23 27,648 ----a-w c:\windows\system32\jsproxy.dll
- 2006-10-18 19:03:58 100,864 ----a-w c:\windows\system32\logagent.exe
+ 2008-06-18 01:09:22 100,864 ----a-w c:\windows\system32\logagent.exe
+ 2008-10-05 03:16:26 235,936 ----a-r c:\windows\system32\Macromed\Flash\FlashUtil10a.ex e
- 2008-06-18 19:08:48 74,137 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activ eX.exe
+ 2009-01-15 18:47:50 88,590 ----a-w c:\windows\system32\Macromed\Flash\uninstall_activ eX.exe
- 2008-10-07 19:19:40 16,721,856 ----a-w c:\windows\system32\MRT.exe
+ 2009-02-12 04

17 21,244,872 ----a-w c:\windows\system32\MRT.exe
- 2008-08-26 07:24:30 459,264 ----a-w c:\windows\system32\msfeeds.dll
+ 2008-12-20 23:15:23 459,264 ----a-w c:\windows\system32\msfeeds.dll
- 2008-08-26 07:24:30 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
+ 2008-12-20 23:15:24 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
- 2008-08-27 08:24:32 3,593,216 ----a-w c:\windows\system32\mshtml.dll
+ 2009-01-16 21:35:14 3,594,752 ----a-w c:\windows\system32\mshtml.dll
- 2008-08-26 07:24:30 477,696 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-12-20 23:15:30 477,696 ----a-w c:\windows\system32\mshtmled.dll
- 2008-08-26 07:24:30 193,024 ----a-w c:\windows\system32\msrating.dll
+ 2008-12-20 23:15:31 193,024 ----a-w c:\windows\system32\msrating.dll
- 2008-08-26 07:24:30 671,232 ----a-w c:\windows\system32\mstime.dll
+ 2008-12-20 23:15:32 671,232 ----a-w c:\windows\system32\mstime.dll
- 2008-04-14 04:42:02 1,104,896 ----a-w c:\windows\system32\msxml3.dll
+ 2008-09-04 17:15:04 1,106,944 ----a-w c:\windows\system32\msxml3.dll
- 2007-05-08 14:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll
+ 2008-09-30 16:43:34 1,286,152 ----a-w c:\windows\system32\msxml4.dll
- 2008-04-14 04:42:02 1,306,624 ------w c:\windows\system32\msxml6.dll
+ 2008-09-10 01:14:56 1,307,648 ------w c:\windows\system32\msxml6.dll
- 2008-07-18 21:07:34 270,880 ----a-w c:\windows\system32\mucltui.dll
+ 2008-10-16 14:06:48 268,648 ----a-w c:\windows\system32\mucltui.dll
- 2008-07-18 21:07:32 210,976 ----a-w c:\windows\system32\muweb.dll
+ 2008-10-16 14:06:48 208,744 ----a-w c:\windows\system32\muweb.dll
- 2008-04-14 04:42:02 337,408 ----a-w c:\windows\system32\netapi32.dll
+ 2008-10-15 16:34:24 337,408 ----a-w c:\windows\system32\netapi32.dll
- 2008-08-26 07:24:30 102,912 ----a-w c:\windows\system32\occache.dll
+ 2008-12-20 23:15:38 102,912 ----a-w c:\windows\system32\occache.dll
- 2008-05-19 13:58:32 64,488 ----a-w c:\windows\system32\perfc009.dat
+ 2008-10-26 14:07:15 64,488 ----a-w c:\windows\system32\perfc009.dat
- 2008-05-19 13:58:33 409,540 ----a-w c:\windows\system32\perfh009.dat
+ 2008-10-26 14:07:15 409,540 ----a-w c:\windows\system32\perfh009.dat
- 2005-06-01 02:10:00 77,824 -c--a-w c:\windows\system32\PICEntry.dll
+ 2006-10-19 23:10:00 108,704 ----a-w c:\windows\system32\PICEntry.dll
- 2005-05-31 23:10:00 73,728 ----a-w c:\windows\system32\PICSDK.dll
+ 2006-10-19 23:10:00 80,024 ----a-w c:\windows\system32\PICSDK.dll
- 2005-06-01 03:10:00 495,616 -c--a-w c:\windows\system32\PICSDK2.dll
+ 2007-06-21 23:10:00 501,912 ----a-w c:\windows\system32\PICSDK2.dll
- 2008-08-26 07:24:30 44,544 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-12-20 23:15:38 44,544 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-10-16 14:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups.dll\7.2.6001.788\wups.dll
+ 2008-10-16 14:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups2.dll\7.2.6001.788\wups2.dll
- 2007-11-30 11:18:51 17,272 ------w c:\windows\system32\spmsg.dll
+ 2008-07-09 07:38:24 17,272 ------w c:\windows\system32\spmsg.dll
+ 2008-01-17 13:42:06 305,048 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_DUPA3 0.EXE
+ 2008-03-18 03:01:02 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_DUPA3 E.DLL
+ 2008-02-05 06:00:00 444,928 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FABRE DE.DLL
+ 2008-02-29 06:00:00 3,759 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIFE DE.DAT
+ 2008-02-22 01:40:00 143,872 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAIRE DE.DLL
+ 2007-11-15 05:02:00 175,616 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAMTE DE.EXE
+ 2008-03-10 06:00:00 698,880 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAPRE DE.DLL
+ 2007-08-31 09:32:46 75,776 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAREE DE.DLL
+ 2008-01-07 05:04:00 159,744 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FARNE DE.EXE
+ 2007-12-25 05:01:00 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASKE DE.DLL
+ 2008-03-18 01:16:00 585,728 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASOE DE.DLL
+ 2008-02-29 06:00:00 48,128 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FASRE DE.DLL
+ 2008-02-05 06:00:00 188,928 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FATIE DE.EXE
+ 2006-11-13 01:00:00 23,552 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FAUDE DE.DLL
+ 2007-12-07 06:03:00 42,496 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBA6E DE.DLL
+ 2007-11-28 05:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBAPE DE.DLL
+ 2007-12-17 01:03:00 177,152 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBCSE DE.EXE
+ 2007-12-07 06:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FBL6E DE.DLL
+ 2008-02-25 04:02:00 395,776 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FCONE DE.DLL
+ 2008-01-16 05:00:00 91,136 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FDSPE DE.DLL
+ 2007-12-06 01:02:00 16,384 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FGEPE DE.DLL
+ 2007-07-12 03:05:00 23,040 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FGRCE DE.DLL
+ 2008-03-11 01:00:00 462,336 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHBRE DE.DLL
+ 2007-03-09 04:20:00 328,192 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHM0E DE.DLL
+ 2008-03-11 01:00:00 30,208 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHSRE DE.DLL
+ 2005-11-30 04:20:00 212,992 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHT0E DE.DLL
+ 2008-02-05 10:23:00 229,888 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTE DE.DLL
+ 2008-02-05 10:23:00 105,984 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FHUTE DE.EXE
+ 2007-12-25 07:02:00 237,680 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FINSE DE.DAT
+ 2006-11-02 07

54 319,456 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FINSE DE.DLL
+ 2008-03-13 07:05:00 804,784 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FINSE DE.EXE
+ 2008-02-29 04:00:00 717,824 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FJBCE DE.DLL
+ 2007-12-07 01:00:00 134,144 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FLMWE DE.DLL
+ 2008-02-20 05:00:00 141,312 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FMAIE DE.DLL
+ 2006-05-18 04:20:00 49,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FMW0E DE.DLL
+ 2007-11-26 04:00:00 204,800 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPREE DE.EXE
+ 2007-11-14 04:00:00 630,784 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FPRUE DE.DLL
+ 2007-11-28 05:00:00 18,944 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FREDE DE.DLL
+ 2008-02-06 04:20:00 982,528 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FSR0E DE.DLL
+ 2007-12-21 08:01:00 992,256 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUI1E DE.DLL
+ 2008-03-03 06:00:00 1,361,920 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUICE DE.DLL
+ 2008-01-28 08:01:00 207,872 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIRE DE.DLL
+ 2007-12-21 08:01:00 39,424 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_FUIXE DE.DLL
+ 2007-01-11 04:02:00 113,664 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_S40RP 7.EXE
+ 2007-12-17 04:00:00 143,872 ----a-w c:\windows\system32\spool\drivers\w32x86\3\E_S40ST 7.EXE
+ 2007-11-28 05:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EBAPI4. DLL
+ 2007-12-07 06:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EBPBIDI .DLL
- 2005-04-19 01:11:02 86,016 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPSET32 .DLL
+ 2007-11-28 03:15:00 284,160 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EPSET32 .DLL
+ 2008-03-18 01:05:00 471,040 ----a-w c:\windows\system32\spool\drivers\w32x86\3\EREGIST R.EXE
+ 2008-01-17 13:42:06 305,048 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_DUPA30.EXE
+ 2008-03-18 03:01:02 6,656 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_DUPA3E.DLL
+ 2008-02-05 06:00:00 444,928 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FABREDE.DLL
+ 2008-02-29 06:00:00 3,759 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAIFEDE.DAT
+ 2008-02-22 01:40:00 143,872 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAIREDE.DLL
+ 2007-11-15 05:02:00 175,616 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAMTEDE.EXE
+ 2008-03-10 06:00:00 698,880 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAPREDE.DLL
+ 2007-08-31 09:32:46 75,776 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAREEDE.DLL
+ 2008-01-07 05:04:00 159,744 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FARNEDE.EXE
+ 2007-12-25 05:01:00 131,584 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FASKEDE.DLL
+ 2008-03-18 01:16:00 585,728 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FASOEDE.DLL
+ 2008-02-29 06:00:00 48,128 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FASREDE.DLL
+ 2008-02-05 06:00:00 188,928 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FATIEDE.EXE
+ 2006-11-13 01:00:00 23,552 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FAUDEDE.DLL
+ 2007-12-07 06:03:00 42,496 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FBA6EDE.DLL
+ 2007-11-28 05:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FBAPEDE.DLL
+ 2007-12-17 01:03:00 177,152 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FBCSEDE.EXE
+ 2007-12-07 06:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FBL6EDE.DLL
+ 2008-02-25 04:02:00 395,776 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FCONEDE.DLL
+ 2008-01-16 05:00:00 91,136 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FDSPEDE.DLL
+ 2007-12-06 01:02:00 16,384 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FGEPEDE.DLL
+ 2007-07-12 03:05:00 23,040 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FGRCEDE.DLL
+ 2008-03-11 01:00:00 462,336 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHBREDE.DLL
+ 2007-03-09 04:20:00 328,192 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHM0EDE.DLL
+ 2008-03-11 01:00:00 30,208 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHSREDE.DLL
+ 2005-11-30 04:20:00 212,992 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHT0EDE.DLL
+ 2008-02-05 10:23:00 229,888 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHUTEDE.DLL
+ 2008-02-05 10:23:00 105,984 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FHUTEDE.EXE
+ 2007-12-25 07:02:00 237,680 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FINSEDE.DAT
+ 2006-11-02 07

54 319,456 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FINSEDE.DLL
+ 2008-03-13 07:05:00 804,784 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FINSEDE.EXE
+ 2008-02-29 04:00:00 717,824 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FJBCEDE.DLL
+ 2007-12-07 01:00:00 134,144 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FLMWEDE.DLL
+ 2008-02-20 05:00:00 141,312 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FMAIEDE.DLL
+ 2006-05-18 04:20:00 49,664 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FMW0EDE.DLL
+ 2007-11-26 04:00:00 204,800 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FPREEDE.EXE
+ 2007-11-14 04:00:00 630,784 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FPRUEDE.DLL
+ 2007-11-28 05:00:00 18,944 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FREDEDE.DLL
+ 2008-02-06 04:20:00 982,528 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FSR0EDE.DLL
+ 2007-12-21 08:01:00 992,256 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FUI1EDE.DLL
+ 2008-03-03 06:00:00 1,361,920 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FUICEDE.DLL
+ 2008-01-28 08:01:00 207,872 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FUIREDE.DLL
+ 2007-12-21 08:01:00 39,424 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_FUIXEDE.DLL
+ 2007-01-11 04:02:00 113,664 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_S40RP7.EXE
+ 2007-12-17 04:00:00 143,872 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\E_S40ST7.EXE
+ 2007-11-28 05:15:00 172,032 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\EBAPI4.DLL
+ 2007-12-07 06:06:00 45,056 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\EBPBIDI.DLL
+ 2007-11-28 03:15:00 284,160 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\EPSET32.DLL
+ 2008-03-18 01:05:00 471,040 ----a-w c:\windows\system32\spool\drivers\w32x86\epsonstyl us_sx1007daf\EREGISTR.EXE
- 2008-04-14 04:42:08 246,814 ----a-w c:\windows\system32\strmdll.dll
+ 2008-10-03 10:02:42 247,326 ----a-w c:\windows\system32\strmdll.dll
- 2008-07-11 12:42:28 62,976 ----a-w c:\windows\system32\tzchange.exe
+ 2008-10-23 10:06:59 62,976 ----a-w c:\windows\system32\tzchange.exe
- 2008-08-26 07:24:30 105,984 ----a-w c:\windows\system32\url.dll
+ 2008-12-20 23:15:39 105,984 ----a-w c:\windows\system32\url.dll
- 2008-08-26 07:24:31 1,159,680 ----a-w c:\windows\system32\urlmon.dll
+ 2008-12-20 23:15:40 1,160,192 ----a-w c:\windows\system32\urlmon.dll
- 2008-08-26 07:24:31 233,472 ----a-w c:\windows\system32\webcheck.dll
+ 2008-12-20 23:15:40 233,472 ----a-w c:\windows\system32\webcheck.dll
- 2006-10-18 20:47:20 937,984 ----a-w c:\windows\system32\WMNetMgr.dll
+ 2008-06-18 05:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
- 2006-10-18 20:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
+ 2008-06-18 05:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
- 2008-07-18 21:09:44 563,912 ----a-w c:\windows\system32\wuapi.dll
+ 2008-10-16 14:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
- 2008-07-18 21:10:42 53,448 ----a-w c:\windows\system32\wuauclt.exe
+ 2008-10-16 14:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
- 2008-07-18 21:09:42 1,811,656 ----a-w c:\windows\system32\wuaueng.dll
+ 2008-10-16 14:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
- 2008-07-18 21:09:46 325,832 ----a-w c:\windows\system32\wucltui.dll
+ 2008-10-16 14:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
- 2008-07-18 21:10:20 36,552 ----a-w c:\windows\system32\wups.dll
+ 2008-10-16 14:08:58 34,328 ----a-w c:\windows\system32\wups.dll
- 2008-07-18 21:10:40 45,768 ----a-w c:\windows\system32\wups2.dll
+ 2008-10-16 14:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
- 2008-07-18 21:09:44 205,000 ----a-w c:\windows\system32\wuweb.dll
+ 2008-10-16 14:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
+ 2009-02-17 16:45:35 16,384 ----atw c:\windows\temp\Perflib_Perfdata_738.dat
+ 2008-02-24 23:00:00 3,588,096 ----a-w c:\windows\twain_32\escndv\es0093\escires.dll
+ 2006-11-01 23:00:00 90,112 ----a-w c:\windows\twain_32\escndv\es0093\esddc.dll
+ 2007-09-06 23:00:00 77,824 ----a-w c:\windows\twain_32\escndv\es0093\esdde.dll
+ 2008-02-24 23:00:00 196,608 ----a-w c:\windows\twain_32\escndv\es0093\esdevcl.dll
+ 2008-02-24 23:00:00 135,168 ----a-w c:\windows\twain_32\escndv\es0093\esdevif.dll
+ 2008-02-24 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\esdscl.dll
+ 2007-11-27 23:00:00 425,984 ----a-w c:\windows\twain_32\escndv\es0093\esdtr.dll
+ 2007-11-27 23:00:00 454,656 ----a-w c:\windows\twain_32\escndv\es0093\esdtr2.dll
+ 2007-09-06 23:00:00 188,416 ----a-w c:\windows\twain_32\escndv\es0093\esfit.dll
+ 2005-09-26 23:00:00 53,248 ----a-w c:\windows\twain_32\escndv\es0093\esicm.dll
+ 2007-12-04 23:00:00 614,400 ----a-w c:\windows\twain_32\escndv\es0093\esimfl.dll
+ 2008-02-24 23:00:00 229,376 ----a-w c:\windows\twain_32\escndv\es0093\esimgctl.dll
+ 2006-07-31 23:00:00 1,658,880 ----a-w c:\windows\twain_32\escndv\es0093\esimgdet.dll
+ 2008-01-28 23:00:00 368,719 ----a-w c:\windows\twain_32\escndv\es0093\esmps.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\esmpsres.dll
+ 2008-01-28 23:00:00 139,264 ----a-w c:\windows\twain_32\escndv\es0093\esres.dll
+ 2008-02-24 23:00:00 438,272 ----a-w c:\windows\twain_32\escndv\es0093\esscncl.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\estwm.exe
+ 2008-02-24 23:00:00 270,336 ----a-w c:\windows\twain_32\escndv\es0093\estwpmg.dll
+ 2008-02-25 23:00:00 1,044,480 ----a-w c:\windows\twain_32\escndv\es0093\esui.dll
+ 2008-02-24 23:00:00 131,072 ----a-w c:\windows\twain_32\escndv\es0093\esutwb.dll
+ 2008-01-28 23:00:00 90,112 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epbmp.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epbmpres.dl l
+ 2008-01-28 23:00:00 159,744 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epjpg.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epjpgres.dl l
+ 2008-01-28 23:00:00 106,496 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epmtf.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\epmtfres.dl l
+ 2008-02-25 23:00:00 126,976 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppdf.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppdfres.dl l
+ 2008-01-28 23:00:00 106,496 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppij.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppijres.dl l
+ 2008-01-28 23:00:00 102,400 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppit.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eppitres.dl l
+ 2008-01-28 23:00:00 106,496 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eptif.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\eptifres.dl l
+ 2005-08-28 23:00:00 143,360 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\esexf.dll
+ 2005-08-28 23:00:00 98,304 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\espimtif.dl l
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\epmtfres.dll
+ 2008-01-28 23:00:00 53,248 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0407\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\epmtfres.dll
+ 2008-01-28 23:00:00 53,248 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\040C\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\epmtfres.dll
+ 2008-01-28 23:00:00 53,248 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0410\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\epmtfres.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0413\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\epmtfres.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0419\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\epmtfres.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0422\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\epmtfres.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0809\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\epmtfres.dll
+ 2008-01-28 23:00:00 49,152 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0816\eptifres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\epbmpres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\epjpgres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\epmtfres.dll
+ 2008-01-28 23:00:00 53,248 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\eppdfres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\eppijres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\eppitres.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\local\0C0A\eptifres.dll
+ 2007-12-09 23:00:00 151,552 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\pdffile.dll
+ 2008-03-09 23:00:00 614,400 ----a-w c:\windows\twain_32\escndv\es0093\ffmt\pdflib.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0407\esmpsres.dll
+ 2008-01-28 23:00:00 155,648 ----a-w c:\windows\twain_32\escndv\es0093\local\0407\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\040C\esmpsres.dll
+ 2008-01-28 23:00:00 151,552 ----a-w c:\windows\twain_32\escndv\es0093\local\040C\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0410\esmpsres.dll
+ 2008-01-28 23:00:00 147,456 ----a-w c:\windows\twain_32\escndv\es0093\local\0410\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0413\esmpsres.dll
+ 2008-01-28 23:00:00 147,456 ----a-w c:\windows\twain_32\escndv\es0093\local\0413\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0419\esmpsres.dll
+ 2008-01-28 23:00:00 147,456 ----a-w c:\windows\twain_32\escndv\es0093\local\0419\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0422\esmpsres.dll
+ 2008-01-28 23:00:00 143,360 ----a-w c:\windows\twain_32\escndv\es0093\local\0422\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0809\esmpsres.dll
+ 2008-01-28 23:00:00 139,264 ----a-w c:\windows\twain_32\escndv\es0093\local\0809\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0816\esmpsres.dll
+ 2008-01-28 23:00:00 151,552 ----a-w c:\windows\twain_32\escndv\es0093\local\0816\esres.dll
+ 2008-01-28 23:00:00 86,016 ----a-w c:\windows\twain_32\escndv\es0093\local\0C0A\esmpsres.dll
+ 2008-01-28 23:00:00 147,456 ----a-w c:\windows\twain_32\escndv\es0093\local\0C0A\esres.dll
- 2005-02-21 23:00:00 114,688 ----a-w c:\windows\twain_32\escndv\escndv.exe
+ 2008-02-24 23:00:00 118,784 ----a-w c:\windows\twain_32\escndv\escndv.exe
- 2005-03-03 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\escndvrs.dll
- 2005-02-21 23:00:00 40,960 -c--a-w c:\windows\twain_32\escndv\estwm.exe
+ 2008-01-28 23:00:00 49,152 -c--a-w c:\windows\twain_32\escndv\estwm.exe
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0407\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\040C\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0410\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0413\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0419\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0422\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0809\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0816\escndvrs.dll
+ 2008-01-28 23:00:00 45,056 ----a-w c:\windows\twain_32\escndv\local\0C0A\escndvrs.dll
+ 2008-09-30 16:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf34 5378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2008-09-30 16:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf3 45378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
- 2005-09-22 22:49:12 95,744 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2007-12-12 14:40:54 95,744 ----a-w c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"EPSON SX100 Series"="c:\windows\System32\spool\DRIVERS\W32X86\ 3\E_FATIEDE.EXE" [2008-02-05 188928]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-02-20 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"EPSON Stylus Photo RX640 Series"="c:\windows\System32\spool\DRIVERS\W32X86\ 3\E_FATIAME.EXE" [2005-07-14 98304]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-05 1601304]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2008-05-16 86016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"nwiz"="nwiz.exe" [2008-05-16 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Belkin Wireless USB Utility.lnk - c:\program files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe [2005-10-28 1404928]

[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-08-28 12:32 352256 c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-02-05 16:09 10520 c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ExifLauncher2.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk
backup=c:\windows\pss\ExifLauncher2.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^VIA RAID TOOL.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\VIA RAID TOOL.lnk
backup=c:\windows\pss\VIA RAID TOOL.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Karl Dunnage.KARL^Start Menu^Programs^Startup^Check for OneTouch Updates.lnk]
path=c:\documents and settings\Karl Dunnage.KARL\Start Menu\Programs\Startup\Check for OneTouch Updates.lnk
backup=c:\windows\pss\Check for OneTouch Updates.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtcMaestro]
--------- 2005-02-21 12:53 245760 c:\program files\HP Wireless Keyboard\Kmaestro.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
--------- 2005-04-08 13:09 102400 c:\program files\epson\Creativity Suite\Event Manager\EEventManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2007-05-08 15:24 54840 c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
--a------ 2002-03-28 08:53 188416 c:\windows\system32\spool\drivers\w32x86\3\hpztsb0 5.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2008-04-14 04:42 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a--c--- 2001-07-09 12:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2008-05-16 13:01 13529088 c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2008-05-16 13:01 86016 c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OneTouch Monitor]
--a------ 2001-09-19 07:08 86016 c:\progra~1\VISION~1\ONETOU~2.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-09-06 15:09 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\REGSHAVE]
--------- 2002-02-04 22:32 53248 c:\program files\REGSHAVE\REGSHAVE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedTouch USB Diagnostics]
--a------ 2004-01-26 11:38 866816 c:\program files\Thomson\SpeedTouch USB\dragdiag.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-02-22 03:25 144784 c:\program files\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
--a------ 2008-09-05 14:44 1576176 c:\program files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\type32]
--a------ 2004-06-03 08:51 172032 c:\program files\Microsoft IntelliType Pro\type32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
--a------ 2008-05-16 13:01 1630208 c:\windows\system32\nwiz.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--a------ 2007-04-16 14:28 577536 c:\windows\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IEPro\\MiniDM.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Sony\\Media Manager for WALKMAN\\MediaManager.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=

R0 BsStor;InCD Storage Helper Driver;c:\windows\system32\drivers\bsstor.sys [2005-01-11 8040]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [2005-12-06 35328]
R0 viasraid;viasraid;c:\windows\system32\drivers\vias raid.sys [2008-04-12 77312]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-06-16 325128]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2008-06-16 107272]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2008-05-28 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-05-28 55024]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2008-07-13 903960]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-07-13 298264]
R3 ham50;Intel V92 HaM Data Fax Voice;c:\windows\system32\drivers\IntelH51.sys [2002-06-21 469935]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2008-11-03 33752]
S3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\system32\drivers\s916bus.sys [2008-12-25 83496]
S3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;c:\windows\system32\drivers\s916mdfl.sys [2008-12-25 15016]
S3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;c:\windows\system32\drivers\s916mdm.sys [2008-12-25 109992]
S3 s916mgmt;Sony Ericsson Device 916 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s916mgmt.sys [2008-12-25 103976]
S3 s916obex;Sony Ericsson Device 916 USB WMC OBEX Interface;c:\windows\system32\drivers\s916obex.sys [2008-12-25 100008]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-05-28 7408]
S4 BsUDF;InCD UDF Driver;c:\windows\system32\drivers\bsudf.sys [2005-01-11 294784]
.
Contents of the 'Scheduled Tasks' folder

2009-01-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-01-02 c:\windows\Tasks\Schedule Task Weekly.job
- c:\program files\Registry Easy\RE.exe []

2009-02-17 c:\windows\Tasks\User_Feed_Synchronization-{0B9F0B86-4B34-40E6-A94A-EB4C5F83B03D}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 12:58]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-BVRPLiveUpdate - c:\program files\Avanquest update\Engine\Setup.exe
MSConfigStartUp-updateMgr - c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/ig?rls=ig&hl=en&source=iglk
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = localhost
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Download all with Free Download Manager
IE: Download selected with Free Download Manager
IE: Download video with Free Download Manager
IE: Download with Free Download Manager
DPF: {5D80A6D1-B500-47DA-82B8-EB9875F85B4D} - hxxp://dl.google.com/dl/desktop/nv/GoogleGadgetPluginIEWin.cab
DPF: {F09BFD07-20B5-46D8-A6D5-BE4EF22F1F4D} - hxxp://69.57.132.82/DGTx.CAB
.

************************************************** ************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-17 18:29:49
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(636)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
Completion time: 2009-02-17 18:33:06
ComboFix-quarantined-files.txt 2009-02-17 18:32:38
ComboFix2.txt 2008-10-21 15:57:01

Pre-Run: 174,128,513,024 bytes free
Post-Run: 176,618,467,328 bytes free

1123 --- E O F --- 2009-02-15 03:07:16

**Neal** · 21-02-2009

I don't see anything bad there.

Why don't you play with it for awhile and see what happens.

**DazzleFairy** · 26-02-2009

I don't know if this is a coincidence or is the result of something I've done, but it seems to have gotten worse over the past week. A few nights ago the freezing was happening at least double its normal amount, and tonight it seems to be doing it even when I leave it unactive, which only used to rarely happen

**Neal** · 26-02-2009

You may have a heat problem or something like that.

a local shop could better diagnose something in that area better then we can.

Also if you have any IE add-ons you might try disableing one at a time and see if that could be the problem.

Hijack This Log - My computer keeps freezing

Re: Hijack This Log - My computer keeps freezing

Similar Threads

Computer freezing

PC running really slow/ firefox freezing -- Hijack This Log

Computer is freezing

hijack log help, comp freezing