Napsal: stř 2. dub 2008, 20:57
od kuzma
Přidávámještě log z combofixComboFix 08-04-01.2 - Jiří 2008-04-02 20:30:56.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1250.1.1029.18.813 [GMT 2:00]
Running from: C:\Users\Jiří\Desktop\ComboFix.exe
* Created a new restore point
.
((((((((((((((((((((((((( Files Created from 2008-03-02 to 2008-04-02 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-02 18:35 2,359,296 ----a-w C:\Users\Jiří\NTUSER.DAT
2008-04-02 18:35 2,359,296 ----a-w C:\Users\Jiří\NTUSER.DAT
2008-04-02 18:35 --------- d-----w C:\Users\Jiří\AppData\Roaming\Skype
2008-04-02 18:31 --------- d-----w C:\Users\Jiří\AppData\Roaming\skypePM
2008-04-01 18:35 --------- d-----w C:\Users\Jitka\AppData\Roaming\Skype
2008-04-01 18:34 --------- d-----w C:\Users\Jitka\AppData\Roaming\skypePM
2008-03-30 14:19 32 ----a-w C:\Users\All Users\ezsid.dat
2008-03-30 14:19 32 ----a-w C:\ProgramData\ezsid.dat
2008-03-30 14:18 --------- d-----w C:\Program Files\Common Files\Skype
2008-03-12 14:19 --------- d-----w C:\Program Files\Windows Mail
2008-03-12 13:31 --------- d-----w C:\ProgramData\Microsoft Help
2008-03-05 10:08 --------- d-----w C:\Program Files\Alwil Software
2008-03-05 08:22 --------- d-----w C:\Users\Jitka\AppData\Roaming\ESET
2008-03-05 08:18 --------- d-----w C:\ProgramData\ESET
2008-03-04 13:27 --------- d-----w C:\Program Files\ICQ6
2008-03-01 15:59 --------- d-----w C:\Program Files\Corel
2008-02-19 19:25 --------- d-----w C:\Program Files\totalcmd
2008-02-15 08:23 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
2008-02-13 18:40 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-13 18:40 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-13 18:38 613,888 ----a-w C:\Windows\System32\wpd_ci.dll
2008-02-13 18:38 224,824 ----a-w C:\Windows\System32\clfs.sys
2008-02-13 18:35 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-02-13 18:35 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-02-13 18:35 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-02-13 18:35 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-02-13 18:35 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-02-13 18:35 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-02-13 18:35 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-02-13 18:34 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-02-13 18:34 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-02-13 18:34 217,144 ----a-w C:\Windows\system32\drivers\netio.sys
2008-02-13 18:34 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-02-13 18:33 806,400 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-13 18:33 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-02-13 18:33 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-02-13 18:33 4,247,552 ----a-w C:\Windows\System32\GameUXLegacyGDFs.dll
2008-02-13 18:33 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-02-13 18:33 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-02-13 18:33 1,686,528 ----a-w C:\Windows\System32\gameux.dll
2008-02-13 18:30 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-13 18:30 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-13 18:30 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-13 18:30 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-11 19:15 --------- d-----w C:\Program Files\ICQToolbar
2008-02-11 18:46 --------- d-----w C:\Users\Jiří\AppData\Roaming\Mozilla
2008-02-11 18:40 --------- d-----w C:\Users\Jiří\AppData\Roaming\InstallShield
2008-02-10 08:57 --------- d-----w C:\Program Files\Common Files\Adobe
2008-02-04 12:42 737,280 ----a-w C:\Windows\iun6002.exe
2008-02-04 12:42 --------- d-----w C:\Program Files\Codec Pack - All In 1
2008-01-10 07:45 66,872 ----a-w C:\Windows\System32\PnkBstrA.exe
2008-01-10 07:45 103,736 ----a-w C:\Windows\System32\PnkBstrB.exe
2008-01-09 10:46 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2007-11-01 18:41 174 --sha-w C:\Program Files\desktop.ini
.
((((((((((((((((((((((((((((( snapshot@2007-12-21_ 0.23.55.75 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-11-18 08:21:15 864,256 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
+ 2008-02-15 08:24:20 864,256 ----a-w C:\Windows\assembly\GAC_MSIL\ehepg\6.0.6000.0__31bf3856ad364e35\ehepg.dll
- 2007-11-18 08:20:50 135,168 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
+ 2008-02-15 08:23:56 135,168 ----a-w C:\Windows\assembly\GAC_MSIL\ehexthost\6.0.6000.0__31bf3856ad364e35\ehexthost.exe
- 2007-11-18 08:21:14 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
+ 2008-02-15 08:24:20 77,824 ----a-w C:\Windows\assembly\GAC_MSIL\ehiExtens\6.0.6000.0__31bf3856ad364e35\ehiExtens.dll
- 2007-11-18 08:20:47 4,370,432 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
+ 2008-02-15 08:23:55 4,370,432 ----a-w C:\Windows\assembly\GAC_MSIL\ehshell\6.0.6000.0__31bf3856ad364e35\ehshell.dll
- 2007-11-18 08:20:50 1,196,032 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
+ 2008-02-15 08:23:56 1,196,032 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.Shell\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.Shell.dll
- 2007-11-18 08:20:49 2,342,912 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
+ 2008-02-15 08:23:56 2,342,912 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter.UI\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.UI.dll
- 2007-11-18 08:20:52 217,088 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
+ 2008-02-15 08:23:57 217,088 ----a-w C:\Windows\assembly\GAC_MSIL\Microsoft.MediaCenter\6.0.6000.0__31bf3856ad364e35\Microsoft.MediaCenter.dll
+ 2008-02-15 09:31:01 2,469,888 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepg\1afde72407799d9eeabf83ee2f207553\ehepg.ni.dll
+ 2008-02-15 09:31:40 360,448 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\cabf0b7d3a2f0da9fb7affe14c205946\ehepgdat.ni.dll
+ 2008-02-15 09:32:04 45,056 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\312fa4ba9d289a5e93352fd8d2f3d133\ehExtCOM.ni.dll
+ 2008-02-15 09:31:10 274,432 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\55c55aebb34a3016c5da9f07c5e9d0f3\ehExtHost.ni.exe
+ 2008-02-15 09:31:13 192,512 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\3962f224cb0911b1dfc294a943181a20\ehiExtens.ni.dll
+ 2008-02-15 09:31:36 843,776 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\92175f3ed32a80310b82b5f075b56cf5\ehiVidCtl.ni.dll
+ 2008-02-15 09:31:39 1,941,504 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\111f1e8bdfb0903873ed47696d41c2b6\ehRecObj.ni.dll
+ 2008-02-15 09:31:35 12,963,840 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\ehshell\c08bbbf0bdeb40379226644a0854c946\ehshell.ni.dll
+ 2008-02-15 09:31:16 765,952 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstore\3caed6ae4ba19bef23762dc0366ee424\mcstore.ni.dll
+ 2008-02-15 09:32:05 266,240 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\mcupdate\ac7ace304f2374bd3e3598e10b89c41d\mcupdate.ni.exe
+ 2008-02-15 09:31:18 712,704 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\011074e317df811a6fdb61722463b119\Microsoft.MediaCenter.Sports.ni.dll
+ 2008-02-15 09:31:12 634,880 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5df93064947b3d80d7e8ef4d34891284\Microsoft.MediaCenter.ni.dll
+ 2008-02-15 09:31:14 282,624 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\696943dfc3e1ff90cbb83eb9653d2052\Microsoft.MediaCenter.Shell.ni.dll
+ 2008-02-15 09:31:09 6,115,328 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\6fec21636f1e02fb9630f9b7db186bf1\Microsoft.MediaCenter.UI.ni.dll
+ 2008-02-15 09:31:01 44,544 ----a-w C:\Windows\assembly\NativeImages_v2.0.50727_32\stdole\36a64cc5b81038e116b0b95266557415\stdole.ni.dll
- 2007-12-20 23:21:24 67,584 --s-a-w C:\Windows\bootstat.dat
+ 2008-04-02 14:12:11 67,584 --s-a-w C:\Windows\bootstat.dat
- 2007-11-18 08:21:08 21,504 ----a-w C:\Windows\ehome\ehdebug.dll
+ 2008-02-15 08:24:13 21,504 ----a-w C:\Windows\ehome\ehdebug.dll
- 2007-11-18 08:21:15 864,256 ----a-w C:\Windows\ehome\ehepg.dll
+ 2008-02-15 08:24:20 864,256 ----a-w C:\Windows\ehome\ehepg.dll
- 2007-11-18 08:20:50 135,168 ----a-w C:\Windows\ehome\ehexthost.exe
+ 2008-02-15 08:23:56 135,168 ----a-w C:\Windows\ehome\ehexthost.exe
- 2007-11-18 08:21:14 77,824 ----a-w C:\Windows\ehome\ehiExtens.dll
+ 2008-02-15 08:24:20 77,824 ----a-w C:\Windows\ehome\ehiExtens.dll
- 2007-11-18 08:20:49 103,936 ----a-w C:\Windows\ehome\ehPresenter.dll
+ 2008-02-15 08:23:56 103,936 ----a-w C:\Windows\ehome\ehPresenter.dll
- 2007-11-18 08:21:14 252,416 ----a-w C:\Windows\ehome\ehReplay.dll
+ 2008-02-15 08:24:20 252,416 ----a-w C:\Windows\ehome\ehReplay.dll
- 2007-11-18 08:21:06 10,094,080 ----a-w C:\Windows\ehome\ehres.dll
+ 2008-02-15 08:24:10 10,094,080 ----a-w C:\Windows\ehome\ehres.dll
- 2007-11-18 08:20:47 4,370,432 ----a-w C:\Windows\ehome\ehshell.dll
+ 2008-02-15 08:23:55 4,370,432 ----a-w C:\Windows\ehome\ehshell.dll
- 2007-11-18 08:20:52 18,944 ----a-w C:\Windows\ehome\ehtrace.dll
+ 2008-02-15 08:23:57 18,944 ----a-w C:\Windows\ehome\ehtrace.dll
- 2007-11-18 08:20:51 517,120 ----a-w C:\Windows\ehome\ehui.dll
+ 2008-02-15 08:23:57 517,120 ----a-w C:\Windows\ehome\ehui.dll
- 2007-11-18 08:20:46 1,497,600 ----a-w C:\Windows\ehome\ehuihlp.dll
+ 2008-02-15 08:23:53 1,497,600 ----a-w C:\Windows\ehome\ehuihlp.dll
- 2007-11-18 08:21:13 6,656 ----a-w C:\Windows\ehome\McrMgr.dll
+ 2008-02-15 08:24:20 6,656 ----a-w C:\Windows\ehome\McrMgr.dll
- 2007-11-18 08:21:13 173,056 ----a-w C:\Windows\ehome\McrMgr.exe
+ 2008-02-15 08:24:20 173,056 ----a-w C:\Windows\ehome\McrMgr.exe
- 2007-11-18 08:20:52 217,088 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.dll
+ 2008-02-15 08:23:57 217,088 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.dll
- 2007-11-18 08:20:50 1,196,032 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.Shell.dll
+ 2008-02-15 08:23:56 1,196,032 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.Shell.dll
- 2007-11-18 08:20:49 2,342,912 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.UI.dll
+ 2008-02-15 08:23:56 2,342,912 ----a-w C:\Windows\ehome\Microsoft.MediaCenter.UI.dll
+ 2000-08-31 06:00:00 163,328 ----a-w C:\Windows\erdnt\Hiv-backup\ERDNT.EXE
+ 2008-04-02 18:30:28 6,123,520 ----a-w C:\Windows\erdnt\Hiv-backup\schema.dat
- 2007-11-15 20:10:24 665,600 ----a-w C:\Windows\inf\drvindex.dat
+ 2008-03-12 14:19:15 665,600 ----a-w C:\Windows\inf\drvindex.dat
- 2007-12-25 22:36:11 51,200 ----a-w C:\Windows\inf\infpub.dat
+ 2008-03-12 14:19:17 51,200 ----a-w C:\Windows\inf\infpub.dat
- 2007-12-25 22:36:11 86,016 ----a-w C:\Windows\inf\infstor.dat
+ 2008-03-12 14:19:14 86,016 ----a-w C:\Windows\inf\infstor.dat
- 2007-12-25 22:36:11 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2008-03-12 14:19:13 86,016 ----a-w C:\Windows\inf\infstrng.dat
+ 2007-08-28 22:19:32 136,064 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CONTAB32.DLL
+ 2007-08-24 03:49:12 89,976 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DLGSETP.DLL
+ 2007-10-05 19:37:38 17,927,192 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\EXCEL.EXE
+ 2007-08-24 03:49:40 342,888 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MIMEDIR.DLL
+ 2007-08-28 22:20:20 2,949,512 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OLMAPI32.DLL
+ 2007-08-24 04:42:40 663,432 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OMSMAIN.DLL
+ 2007-08-24 04:42:44 195,480 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OMSXP32.DLL
+ 2007-08-28 22:20:44 600,992 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLMIME.DLL
+ 2007-09-06 17:01:10 12,836,728 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLOOK.EXE
+ 2007-08-28 22:22:04 180,128 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLPH.DLL
+ 2007-08-24 03:51:48 416,112 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PSTPRX32.DLL
+ 2007-08-24 03:52:08 266,160 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SCNPST32.DLL
+ 2007-08-24 03:52:10 275,896 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SCNPST64.DLL
+ 2007-10-02 19:00:06 14,708,760 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XL12CNV.EXE
+ 2007-08-24 04:14:14 13,712 ----a-r C:\Windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XLCALL32.DLL
- 2007-12-15 12:15:55 1,165,584 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-03-12 13:31:45 1,165,584 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2007-12-15 12:15:56 20,240 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-03-12 13:31:48 20,240 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2007-12-15 12:15:55 159,504 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-03-12 13:31:46 159,504 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2007-12-15 12:15:56 184,080 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-03-12 13:31:46 184,080 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2007-12-15 12:15:56 217,864 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2008-03-12 13:31:47 217,864 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2007-12-15 12:15:57 18,704 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-03-12 13:31:48 18,704 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2007-12-15 12:15:57 35,088 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-03-12 13:31:49 35,088 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2007-12-15 12:15:56 845,584 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-03-12 13:31:47 845,584 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2007-12-15 12:15:56 922,384 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-03-12 13:31:47 922,384 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2007-12-15 12:15:56 272,648 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-03-12 13:31:48 272,648 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2007-12-15 12:15:57 888,080 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-03-12 13:31:48 888,080 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2007-12-15 12:15:55 1,172,240 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-03-12 13:31:46 1,172,240 ----a-r C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-02-10 08:58:23 295,606 ----a-r C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
+ 2008-01-10 07:17:22 3,262 ----a-r C:\Windows\Installer\{CC419DDC-E0F0-4013-B25A-6FA036516F0D}\nfs_icon.exe
+ 2000-08-31 06:00:00 28,160 ----a-w C:\Windows\Nircmd.exe
- 2007-09-25 11:52:44 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-03-31 07:58:22 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2007-09-25 11:52:44 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-31 07:58:22 32,768 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2007-12-20 23:18:14 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\UsrClass.dat
+ 2008-04-02 17:14:34 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\UsrClass.dat
- 2007-09-25 11:52:44 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-03-31 07:58:22 16,384 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2007-12-20 23:22:41 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-04-02 13:01:35 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-04-02 13:01:35 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
- 2007-12-25 23:02:49 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\UsrClass.dat
+ 2008-04-02 18:29:39 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\UsrClass.dat
- 2007-12-20 23:22:41 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-04-02 13:02:32 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
- 2006-11-02 09:46:02 17,408 ----a-w C:\Windows\servicing\CbsMsg.dll
+ 2008-02-13 18:37:58 18,432 ----a-w C:\Windows\servicing\CbsMsg.dll
- 2006-11-02 09:45:49 26,112 ----a-w C:\Windows\servicing\TrustedInstaller.exe
+ 2008-02-13 18:37:57 27,136 ----a-w C:\Windows\servicing\TrustedInstaller.exe
+ 2006-11-02 12:34:37 73,376 ----a-w C:\Windows\system\mciavi.drv
+ 2006-11-02 12:34:37 25,264 ----a-w C:\Windows\system\mciseq.drv
+ 2006-11-02 12:34:37 28,160 ----a-w C:\Windows\system\mciwave.drv
+ 2006-11-02 07:10:14 3,360 ----a-w C:\Windows\system\system.drv
+ 2006-11-02 07:10:26 4,048 ----a-w C:\Windows\system\TIMER.DRV
+ 2006-11-02 07:10:30 12,704 ----a-w C:\Windows\system\WFWNET.DRV
- 2007-12-12 19:47:12 124,928 ----a-w C:\Windows\System32\advpack.dll
+ 2008-02-13 18:30:43 124,928 ----a-w C:\Windows\System32\advpack.dll
+ 2007-12-04 13:04:28 837,496 ----a-w C:\Windows\System32\aswBoot.exe
+ 2007-12-04 12:54:04 95,608 ----a-w C:\Windows\System32\AvastSS.scr
- 2006-11-02 09:46:02 11,776 ----a-w C:\Windows\System32\batt.dll
+ 2008-02-13 18:37:56 12,800 ----a-w C:\Windows\System32\batt.dll
- 2006-11-02 09:46:02 19,456 ----a-w C:\Windows\System32\cfgmgr32.dll
+ 2008-02-13 18:37:59 19,456 ----a-w C:\Windows\System32\cfgmgr32.dll
+ 2006-11-02 07:10:16 10,544 ----a-w C:\Windows\System32\COMM.drv
- 2007-12-25 22:49:24 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-04-02 17:47:56 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2007-12-25 22:49:24 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-04-02 17:47:56 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2007-12-25 22:49:24 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-04-02 17:47:56 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2005-11-30 23:16:10 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-04-02 18:30:48 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
+ 2008-04-02 18:30:48 262,144 ---ha-w C:\Windows\System32\config\systemprofile\ntuser.dat.LOG1
+ 2007-03-12 15:42:30 1,123,696 ----a-w C:\Windows\System32\D3DCompiler_33.dll
+ 2007-05-16 15:45:16 1,124,720 ----a-w C:\Windows\System32\D3DCompiler_34.dll
+ 2007-03-15 15:57:58 443,752 ----a-w C:\Windows\System32\d3dx10_33.dll
+ 2007-05-16 15:45:16 443,752 ----a-w C:\Windows\System32\d3dx10_34.dll
+ 2007-03-12 15:42:30 3,495,784 ----a-w C:\Windows\System32\d3dx9_33.dll
+ 2007-05-16 15:45:16 3,497,832 ----a-w C:\Windows\System32\d3dx9_34.dll
- 2006-11-02 09:46:03 35,328 ----a-w C:\Windows\System32\dispci.dll
+ 2008-02-13 18:37:56 35,328 ----a-w C:\Windows\System32\dispci.dll
+ 2005-12-07 17:05:48 679,936 ----a-w C:\Windows\System32\divx_xx07.dll
+ 2005-12-07 17:05:48 679,936 ----a-w C:\Windows\System32\divx_xx0c.dll
+ 2005-12-07 17:05:48 663,552 ----a-w C:\Windows\System32\divx_xx11.dll
+ 2005-11-23 04:00:00 778,240 ----a-w C:\Windows\System32\DivXsm.exe
- 2006-11-02 09:46:04 256,512 ----a-w C:\Windows\System32\dpx.dll
+ 2008-02-13 18:37:58 260,096 ----a-w C:\Windows\System32\dpx.dll
+ 2007-12-04 14:52:16 45,648 ----a-w C:\Windows\System32\drivers\aswMonFlt.sys
+ 2007-12-04 14:53:39 23,152 ----a-w C:\Windows\System32\drivers\aswRdr.sys
+ 2007-12-04 14:51:52 42,912 ----a-w C:\Windows\System32\drivers\aswTdi.sys
- 2006-11-02 08:51:13 54,784 ----a-w C:\Windows\System32\drivers\i8042prt.sys
+ 2008-02-13 18:37:55 54,784 ----a-w C:\Windows\System32\drivers\i8042prt.sys
- 2006-11-02 09:49:57 32,872 ----a-w C:\Windows\System32\drivers\kbdclass.sys
+ 2008-02-13 18:37:55 35,384 ----a-w C:\Windows\System32\drivers\kbdclass.sys
- 2006-11-02 08:51:12 15,872 ----a-w C:\Windows\System32\drivers\kbdhid.sys
+ 2008-02-13 18:37:55 15,872 ----a-w C:\Windows\System32\drivers\kbdhid.sys
- 2006-11-02 08:54:05 41,984 ----a-w C:\Windows\System32\drivers\monitor.sys
+ 2007-12-16 09:56:45 41,984 ----a-w C:\Windows\System32\drivers\monitor.sys
- 2006-11-02 09:49:54 31,848 ----a-w C:\Windows\System32\drivers\mouclass.sys
+ 2008-02-13 18:37:56 34,360 ----a-w C:\Windows\System32\drivers\mouclass.sys
- 2006-11-02 08:51:12 15,872 ----a-w C:\Windows\System32\drivers\mouhid.sys
+ 2008-02-13 18:37:55 15,872 ----a-w C:\Windows\System32\drivers\mouhid.sys
- 2006-11-02 09:51:47 1,056,360 ----a-w C:\Windows\System32\drivers\ntfs.sys
+ 2007-12-16 22:50:41 1,060,920 ----a-w C:\Windows\System32\drivers\ntfs.sys
+ 2008-01-10 07:45:24 22,328 ----a-w C:\Windows\System32\drivers\PnkBstrK.sys
- 2006-11-02 08:51:11 19,968 ----a-w C:\Windows\System32\drivers\sermouse.sys
+ 2008-02-13 18:37:56 19,968 ----a-w C:\Windows\System32\drivers\sermouse.sys
- 2006-11-02 09:51:18 208,488 ----a-w C:\Windows\System32\drivers\volsnap.sys
+ 2008-01-09 10:47:13 211,000 ----a-w C:\Windows\System32\drivers\volsnap.sys
- 2006-11-02 09:51:41 492,648 ----a-w C:\Windows\System32\drivers\Wdf01000.sys
+ 2008-02-13 18:37:57 495,160 ----a-w C:\Windows\System32\drivers\Wdf01000.sys
- 2006-11-02 09:49:59 32,872 ----a-w C:\Windows\System32\drivers\WdfLdr.sys
+ 2008-02-13 18:37:57 35,384 ----a-w C:\Windows\System32\drivers\WdfLdr.sys
+ 2008-02-13 18:37:55 54,784 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\i8042prt.sys
+ 2008-02-13 18:37:55 6,656 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbd106.dll
+ 2008-02-13 18:37:55 35,384 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbdclass.sys
+ 2008-02-13 18:37:55 15,872 ----a-w C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_a81145df\kbdhid.sys
+ 2007-12-16 09:56:45 41,984 ----a-w C:\Windows\System32\DriverStore\FileRepository\monitor.inf_1a316eff\monitor.sys
+ 2008-02-13 18:35:11 17,464 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\aliide.sys
+ 2008-02-13 18:35:11 17,976 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\amdide.sys
+ 2008-02-13 18:35:11 21,560 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
+ 2008-02-13 18:35:11 109,624 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\ataport.sys
+ 2008-02-13 18:35:10 19,000 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\cmdide.sys
+ 2008-02-13 18:35:10 17,464 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\intelide.sys
+ 2008-02-13 18:35:10 25,656 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\msahci.sys
+ 2008-02-13 18:35:11 15,928 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\pciide.sys
+ 2008-02-13 18:35:11 45,112 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\pciidex.sys
+ 2008-02-13 18:35:11 20,024 ----a-w C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\viaide.sys
+ 2008-02-13 18:37:55 54,784 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\i8042prt.sys
+ 2008-02-13 18:37:56 34,360 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\mouclass.sys
+ 2008-02-13 18:37:55 15,872 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\mouhid.sys
+ 2008-02-13 18:37:56 19,968 ----a-w C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_f4514c17\sermouse.sys
+ 2008-01-09 10:47:13 211,000 ----a-w C:\Windows\System32\DriverStore\FileRepository\volume.inf_f47b2c78\volsnap.sys
- 2006-11-02 09:45:03 100,864 ----a-w C:\Windows\System32\drvinst.exe
+ 2008-02-13 18:37:59 101,888 ----a-w C:\Windows\System32\drvinst.exe
- 2007-12-12 19:47:09 347,136 ----a-w C:\Windows\System32\dxtmsft.dll
+ 2008-02-13 18:30:41 347,136 ----a-w C:\Windows\System32\dxtmsft.dll
- 2007-12-12 19:47:09 214,528 ----a-w C:\Windows\System32\dxtrans.dll
+ 2008-02-13 18:30:41 214,528 ----a-w C:\Windows\System32\dxtrans.dll
- 2006-11-02 09:39:22 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
+ 2008-02-13 18:37:56 7,168 ----a-w C:\Windows\System32\f3ahvoas.dll
+ 2000-08-31 06:00:00 73,728 ----a-w C:\Windows\System32\fdsv.exe
+ 2000-08-31 06:00:00 80,412 ----a-w C:\Windows\System32\grep.exe
- 2007-12-12 19:47:07 63,488 ----a-w C:\Windows\System32\icardie.dll
+ 2008-02-13 18:30:40 63,488 ----a-w C:\Windows\System32\icardie.dll
- 2007-12-12 19:47:04 70,656 ----a-w C:\Windows\System32\ie4uinit.exe
+ 2008-02-13 18:30:35 70,656 ----a-w C:\Windows\System32\ie4uinit.exe
- 2007-12-12 19:47:10 383,488 ----a-w C:\Windows\System32\ieapfltr.dll
+ 2008-02-13 18:30:42 383,488 ----a-w C:\Windows\System32\ieapfltr.dll
- 2007-12-12 19:47:18 6,065,664 ----a-w C:\Windows\System32\ieframe.dll
+ 2008-02-13 18:30:48 6,066,176 ----a-w C:\Windows\System32\ieframe.dll
- 2007-12-12 19:47:04 44,544 ----a-w C:\Windows\System32\iernonce.dll
+ 2008-02-13 18:30:35 44,544 ----a-w C:\Windows\System32\iernonce.dll
- 2007-12-12 19:47:18 180,736 ----a-w C:\Windows\System32\ieui.dll
+ 2008-02-13 18:30:49 180,736 ----a-w C:\Windows\System32\ieui.dll
- 2007-12-12 19:47:11 27,648 ----a-w C:\Windows\System32\jsproxy.dll
+ 2008-02-13 18:30:43 27,648 ----a-w C:\Windows\System32\jsproxy.dll
- 2006-11-02 09:39:43 6,656 ----a-w C:\Windows\System32\kbd106n.dll
+ 2008-02-13 18:37:58 6,656 ----a-w C:\Windows\System32\kbd106n.dll
+ 2006-09-18 21:43:37 221,600 ----a-w C:\Windows\System32\lanman.drv
+ 2007-07-27 14:49:02 196,683 ----a-w C:\Windows\System32\lnod32apiA.dll
+ 2007-07-27 14:49:02 225,355 ----a-w C:\Windows\System32\lnod32apiW.dll
+ 2005-12-05 19:25:22 139,264 ----a-w C:\Windows\System32\lnod32umc.dll
+ 2005-12-05 12:37:10 106,496 ----a-w C:\Windows\System32\lnod32upd.dll
- 2006-11-02 09:46:05 113,664 ----a-w C:\Windows\System32\loadperf.dll
+ 2008-02-13 18:37:53 115,200 ----a-w C:\Windows\System32\loadperf.dll
- 2006-11-02 09:45:21 38,912 ----a-w C:\Windows\System32\lodctr.exe
+ 2008-02-13 18:37:53 39,424 ----a-w C:\Windows\System32\lodctr.exe
+ 2006-11-02 12:34:37 73,376 ----a-w C:\Windows\System32\mciavi.drv
+ 2006-11-02 12:34:37 25,264 ----a-w C:\Windows\System32\mciseq.drv
+ 2006-11-02 12:34:37 28,160 ----a-w C:\Windows\System32\mciwave.drv
- 2006-11-02 09:46:13 120,320 ----a-w C:\Windows\System32\migration\CntrtextMig.dll
+ 2008-02-13 18:37:52 120,320 ----a-w C:\Windows\System32\migration\CntrtextMig.dll
- 2007-09-24 09:48:07 49,152 ----a-w C:\Windows\System32\migration\netiomig.dll
+ 2008-02-13 18:34:00 49,152 ----a-w C:\Windows\System32\migration\netiomig.dll
- 2007-12-12 19:47:12 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
+ 2008-02-13 18:30:43 64,512 ----a-w C:\Windows\System32\migration\WininetPlugin.dll
- 2007-12-02 23:00:05 18,684,536 ----a-w C:\Windows\System32\mrt.exe
+ 2008-03-05 16:30:54 19,148,408 ----a-w C:\Windows\System32\mrt.exe
+ 2006-11-02 09:44:42 21,504 ----a-w C:\Windows\System32\msacm32.drv
- 2007-12-12 19:47:15 3,590,656 ----a-w C:\Windows\System32\mshtml.dll
+ 2008-02-13 18:30:46 3,592,192 ----a-w C:\Windows\System32\mshtml.dll
- 2007-12-12 19:47:15 478,208 ----a-w C:\Windows\System32\mshtmled.dll
+ 2008-02-13 18:30:47 478,208 ----a-w C:\Windows\System32\mshtmled.dll
- 2007-12-12 19:47:08 671,232 ----a-w C:\Windows\System32\mstime.dll
+ 2008-02-13 18:30:40 671,232 ----a-w C:\Windows\System32\mstime.dll
- 2006-11-02 09:46:12 23,040 ----a-w C:\Windows\System32\nshhttp.dll
+ 2008-02-13 18:37:53 23,552 ----a-w C:\Windows\System32\nshhttp.dll
+ 2002-10-04 22:04:18 45,056 ----a-w C:\Windows\System32\ogg.dll
+ 2002-10-06 17:42:58 237,568 ----a-w C:\Windows\System32\OggDS.dll
- 2006-11-02 09:46:12 558,080 ----a-w C:\Windows\System32\oleaut32.dll
+ 2008-02-13 18:37:58 558,080 ----a-w C:\Windows\System32\oleaut32.dll
+ 2007-08-02 17:11:28 253,952 ----a-w C:\Windows\System32\OnlineScannerDLLA.dll
+ 2007-08-02 17:11:14 241,664 ----a-w C:\Windows\System32\OnlineScannerDLLW.dll
+ 2007-08-08 15:30:12 19,456 ----a-w C:\Windows\System32\OnlineScannerLang.dll
+ 2007-06-13 10:10:34 77,824 ----a-w C:\Windows\System32\OnlineScannerUninstaller.exe
- 2005-11-30 23:14:49 81,404 ----a-w C:\Windows\System32\perfc005.dat
+ 2008-04-02 13:06:06 81,404 ----a-w C:\Windows\System32\perfc005.dat
- 2005-11-30 23:14:49 103,924 ----a-w C:\Windows\System32\perfc009.dat
+ 2008-04-02 13:06:06 103,924 ----a-w C:\Windows\System32\perfc009.dat
- 2005-11-30 23:14:49 473,598 ----a-w C:\Windows\System32\perfh005.dat
+ 2008-04-02 13:06:06 473,598 ----a-w C:\Windows\System32\perfh005.dat
- 2005-11-30 23:14:49 610,142 ----a-w C:\Windows\System32\perfh009.dat
+ 2008-04-02 13:06:06 610,142 ----a-w C:\Windows\System32\perfh009.dat
- 2006-11-02 09:46:12 44,544 ----a-w C:\Windows\System32\pngfilt.dll
+ 2008-02-13 18:30:44 44,544 ----a-w C:\Windows\System32\pngfilt.dll
- 2006-11-02 09:42:44 17,408 ----a-w C:\Windows\System32\prflbmsg.dll
+ 2008-02-13 18:37:52 17,408 ----a-w C:\Windows\System32\prflbmsg.dll
+ 2005-08-09 22:12:28 3,596,288 ----a-w C:\Windows\System32\qt-dx331.dll
+ 2000-08-31 06:00:00 98,816 ----a-w C:\Windows\System32\sed.exe
- 2006-11-02 09:46:13 1,584,128 ----a-w C:\Windows\System32\setupapi.dll
+ 2008-02-13 18:37:57 1,585,664 ----a-w C:\Windows\System32\setupapi.dll
- 2006-11-02 09:46:12 595,456 ----a-w C:\Windows\System32\schedsvc.dll
+ 2008-02-13 18:37:51 595,456 ----a-w C:\Windows\System32\schedsvc.dll
- 2007-12-15 17:01:21 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\schema.dat
+ 2008-04-02 14:42:08 6,291,456 ----a-w C:\Windows\System32\SMI\Store\Machine\schema.dat
- 2007-12-13 20:26:50 156,160 ----a-w C:\Windows\System32\swreg.exe
+ 2000-08-31 06:00:00 161,792 ----a-w C:\Windows\System32\swreg.exe
+ 2006-11-02 07:10:14 3,360 ----a-w C:\Windows\System32\system.drv
+ 2006-11-02 07:10:26 4,048 ----a-w C:\Windows\System32\TIMER.DRV
- 2006-11-02 09:46:13 221,184 ----a-w C:\Windows\System32\umpnpmgr.dll
+ 2008-02-13 18:37:59 221,696 ----a-w C:\Windows\System32\umpnpmgr.dll
+ 2004-12-07 10:11:34 258,352 ----a-w C:\Windows\System32\unicows.dll
- 2006-11-02 09:45:50 32,256 ----a-w C:\Windows\System32\unlodctr.exe
+ 2008-02-13 18:37:53 32,256 ----a-w C:\Windows\System32\unlodctr.exe
+ 2003-04-29 09:13:26 155,136 ----a-w C:\Windows\System32\unrar.dll
- 2007-12-12 19:47:11 1,159,680 ----a-w C:\Windows\System32\urlmon.dll
+ 2008-02-13 18:30:43 1,159,680 ----a-w C:\Windows\System32\urlmon.dll
+ 2002-10-04 22:04:26 188,416 ----a-w C:\Windows\System32\vorbis.dll
+ 2002-10-04 22:04:26 921,600 ----a-w C:\Windows\System32\VorbisEnc.dll
- 2007-12-25 23:01:30 8,838 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1356726824-370429263-3832968548-1000_UserData.bin
+ 2008-04-02 13:01:52 11,596 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1356726824-370429263-3832968548-1000_UserData.bin
- 2007-12-21 15:41:07 5,394 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1356726824-370429263-3832968548-1001_UserData.bin
+ 2008-04-02 07:17:05 10,022 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1356726824-370429263-3832968548-1001_UserData.bin
- 2007-12-25 23:01:30 78,554 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-04-02 13:01:52 93,742 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-03-28 19:22:18 4,528 ----a-w C:\Windows\System32\WDI\ERCQueuedResolutions.dat
- 2007-12-25 23:01:29 43,908 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-04-02 12:28:03 49,124 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2007-12-23 15:50:44 293,608 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2008-03-30 14:12:23 359,082 ----a-w C:\Windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 09:44:42 168,448 ----a-w C:\Windows\System32\wdmaud.drv
+ 2006-11-02 07:10:30 12,704 ----a-w C:\Windows\System32\WFWNET.DRV
- 2006-11-02 09:52:01 940,648 ----a-w C:\Windows\System32\winload.exe
+ 2008-02-13 18:37:54 943,800 ----a-w C:\Windows\System32\winload.exe
- 2006-11-02 09:52:02 902,248 ----a-w C:\Windows\System32\winresume.exe
+ 2008-02-13 18:37:54 905,400 ----a-w C:\Windows\System32\winresume.exe
+ 2006-11-02 09:44:42 255,488 ----a-w C:\Windows\System32\winspool.drv
+ 2007-03-05 11:42:18 15,128 ----a-w C:\Windows\System32\x3daudio1_1.dll
+ 2007-06-20 19:45:20 18,280 ----a-w C:\Windows\System32\x3daudio1_2.dll
+ 2007-01-24 14:27:30 255,848 ----a-w C:\Windows\System32\xactengine2_6.dll
+ 2007-04-04 17:55:00 261,480 ----a-w C:\Windows\System32\xactengine2_7.dll
+ 2007-06-20 19:46:04 266,088 ----a-w C:\Windows\System32\xactengine2_8.dll
+ 2007-04-04 17:53:42 81,768 ----a-w C:\Windows\System32\xinput1_3.dll
+ 2004-02-10 10:15:36 344,064 ----a-w C:\Windows\System32\xvid.dll
+ 2005-12-30 19:10:30 761,856 ----a-w C:\Windows\System32\xvidcore.dll
+ 2000-08-31 06:00:00 68,096 ----a-w C:\Windows\System32\zip.exe
+ 2008-04-02 13:59:10 2,111,631 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-02-15 08:24:20 864,256 ----a-w C:\Windows\winsxs\msil_ehepg_31bf3856ad364e35_6.0.6000.16625_none_d9ac5ba2d1cd93c1\ehepg.dll
+ 2008-02-15 08:24:20 864,256 ----a-w C:\Windows\winsxs\msil_ehepg_31bf3856ad364e35_6.0.6000.20750_none_da108737eb0808ab\ehepg.dll
+ 2008-02-15 08:23:56 135,168 ----a-w C:\Windows\winsxs\msil_ehexthost_31bf3856ad364e35_6.0.6000.16625_none_bcf1d858c1bcf70c\ehexthost.exe
+ 2008-02-15 08:23:51 135,168 ----a-w C:\Windows\winsxs\msil_ehexthost_31bf3856ad364e35_6.0.6000.20750_none_bd5603eddaf76bf6\ehexthost.exe
+ 2008-02-15 08:24:20 77,824 ----a-w C:\Windows\winsxs\msil_ehiextens_31bf3856ad364e35_6.0.6000.16625_none_fbd4df3d09c25501\ehiExtens.dll
+ 2008-02-15 08:24:20 77,824 ----a-w C:\Windows\winsxs\msil_ehiextens_31bf3856ad364e35_6.0.6000.20750_none_fc390ad222fcc9eb\ehiExtens.dll
+ 2008-02-15 08:23:55 4,370,432 ----a-w C:\Windows\winsxs\msil_ehshell_31bf3856ad364e35_6.0.6000.16625_none_899f76e344812213\ehshell.dll
+ 2008-02-15 08:23:49 4,382,720 ----a-w C:\Windows\winsxs\msil_ehshell_31bf3856ad364e35_6.0.6000.20750_none_8a03a2785dbb96fd\ehshell.dll
+ 2008-02-15 08:23:56 1,196,032 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.16625_none_4e9d1a9a98c598a9\Microsoft.MediaCenter.Shell.dll
+ 2008-02-15 08:23:51 1,269,760 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.shell_31bf3856ad364e35_6.0.6000.20750_none_4f01462fb2000d93\Microsoft.MediaCenter.Shell.dll
+ 2008-02-15 08:23:56 2,342,912 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.16625_none_312b694a5a1995c3\Microsoft.MediaCenter.UI.dll
+ 2008-02-15 08:23:50 2,351,104 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter.ui_31bf3856ad364e35_6.0.6000.20750_none_318f94df73540aad\Microsoft.MediaCenter.UI.dll
+ 2008-02-15 08:23:57 217,088 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.16625_none_2386c23dcf3201d9\Microsoft.MediaCenter.dll
+ 2008-02-15 08:23:53 217,088 ----a-w C:\Windows\winsxs\msil_microsoft.mediacenter_31bf3856ad364e35_6.0.6000.20750_none_23eaedd2e86c76c3\Microsoft.MediaCenter.dll
+ 2008-02-13 18:37:55 54,784 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\i8042prt.sys
+ 2008-02-13 18:37:55 6,656 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbd106.dll
+ 2008-02-13 18:37:55 35,384 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbdclass.sys
+ 2008-02-13 18:37:55 15,872 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.16609_none_957131ccdbca3f9c\kbdhid.sys
+ 2008-02-13 18:37:54 54,784 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\i8042prt.sys
+ 2008-02-13 18:37:55 6,656 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbd106.dll
+ 2008-02-13 18:37:54 35,384 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbdclass.sys
+ 2008-02-13 18:37:54 15,872 ----a-w C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.0.6000.20734_none_95d55d61f504b486\kbdhid.sys
+ 2008-02-13 18:33:25 2,144,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.16633_none_0a208b31f539ad62\AcGenral.dll
+ 2008-02-13 18:33:25 2,144,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6000.20762_none_0a88b7ef0e7087a8\AcGenral.dll
+ 2008-02-13 18:33:25 449,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.16633_none_0a218b7bf538c6b9\AcSpecfc.dll
+ 2008-02-13 18:33:24 450,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6000.20762_none_0a89b8390e6fa0ff\AcSpecfc.dll
+ 2008-02-13 18:33:24 537,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16633_none_0a228bc5f537e010\AcLayers.dll
+ 2008-02-13 18:33:24 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.16633_none_0a228bc5f537e010\AcXtrnal.dll
+ 2008-02-13 18:33:23 537,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.20762_none_0a8ab8830e6eba56\AcLayers.dll
+ 2008-02-13 18:33:23 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6000.20762_none_0a8ab8830e6eba56\AcXtrnal.dll
+ 2006-11-02 09:44:42 168,448 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..o-mmecore-wdm-audio_31bf3856ad364e35_6.0.6000.16386_none_48178a2ae8c70f33\wdmaud.drv
+ 2008-02-13 18:30:43 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e\advpack.dll
+ 2008-02-13 18:30:43 124,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.20734_none_aa5255030edc55f8\advpack.dll
+ 2006-11-02 09:44:42 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6000.16386_none_8ac7060813a4d0d2\msacm32.drv
+ 2008-02-13 18:37:54 943,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366\winload.exe
+ 2008-02-13 18:37:54 905,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366\winresume.exe
+ 2008-02-13 18:37:54 943,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.20734_none_59ada9bb88b2a850\winload.exe
+ 2008-02-13 18:37:54 905,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.20734_none_59ada9bb88b2a850\winresume.exe
+ 2008-02-13 18:38:00 224,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913\clfs.sys
+ 2008-02-13 18:37:59 224,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.20734_none_7d098a364397cdfd\clfs.sys
+ 2008-02-13 18:37:59 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\cfgmgr32.dll
+ 2008-02-13 18:37:59 101,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\drvinst.exe
+ 2008-02-13 18:37:59 221,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23\umpnpmgr.dll
+ 2008-02-13 18:37:59 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\cfgmgr32.dll
+ 2008-02-13 18:37:59 101,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\drvinst.exe
+ 2008-02-13 18:37:58 221,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.20734_none_75889abf48f7c10d\umpnpmgr.dll
+ 2008-02-13 18:37:58 260,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-deltapackageexpander_31bf3856ad364e35_6.0.6000.16609_none_68015a2337d92e69\dpx.dll
+ 2008-02-13 18:37:58 260,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-deltapackageexpander_31bf3856ad364e35_6.0.6000.20734_none_686585b85113a353\dpx.dll
+ 2008-02-15 08:24:20 252,416 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6000.16625_none_12c09b07a297f371\ehReplay.dll
+ 2008-02-15 08:24:20 254,464 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-ehreplay_31bf3856ad364e35_6.0.6000.20750_none_1324c69cbbd2685b\ehReplay.dll
+ 2008-02-15 08:24:20 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.16625_none_32330b5ddcdf57cf\McrMgr.dll
+ 2008-02-15 08:24:20 173,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.16625_none_32330b5ddcdf57cf\McrMgr.exe
+ 2008-02-15 08:24:19 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.20750_none_329736f2f619ccb9\McrMgr.dll
+ 2008-02-15 08:24:19 172,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-devices-mcrmgr_31bf3856ad364e35_6.0.6000.20750_none_329736f2f619ccb9\McrMgr.exe
+ 2008-02-15 08:24:13 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.16625_none_2de6da1585272f3f\ehdebug.dll
+ 2008-02-15 08:24:13 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6000.20750_none_2e4b05aa9e61a429\ehdebug.dll
+ 2008-02-15 08:23:56 103,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6000.16625_none_24d1ba8c64df4a0e\ehPresenter.dll
+ 2008-02-15 08:23:50 103,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehpresenter_31bf3856ad364e35_6.0.6000.20750_none_2535e6217e19bef8\ehPresenter.dll
+ 2008-02-15 08:24:10 10,094,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.16625_none_501526e9535d51c0\ehres.dll
+ 2008-02-15 08:24:02 10,103,808 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehres_31bf3856ad364e35_6.0.6000.20750_none_5079527e6c97c6aa\ehres.dll
+ 2008-02-15 08:23:57 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.16625_none_36c5ec1516c514d5\ehtrace.dll
+ 2008-02-15 08:23:57 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehtrace_31bf3856ad364e35_6.0.6000.20750_none_372a17aa2fff89bf\ehtrace.dll
+ 2008-02-15 08:23:57 517,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.16625_none_cccd3f3fcc4ce7da\ehui.dll
+ 2008-02-15 08:23:53 521,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehui_31bf3856ad364e35_6.0.6000.20750_none_cd316ad4e5875cc4\ehui.dll
+ 2008-02-15 08:23:53 1,497,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.16625_none_3a1431762e229c7c\ehuihlp.dll
+ 2008-02-15 08:23:49 1,498,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehuihlp_31bf3856ad364e35_6.0.6000.20750_none_3a785d0b475d1166\ehuihlp.dll
+ 2008-02-13 18:33:22 1,686,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16633_none_3ffca182c42c1062\gameux.dll
+ 2008-02-13 18:33:23 4,247,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16633_none_3ffca182c42c1062\GameUXLegacyGDFs.dll
+ 2008-02-13 18:33:22 1,686,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20762_none_4064ce3fdd62eaa8\gameux.dll
+ 2008-02-13 18:33:22 4,247,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.20762_none_4064ce3fdd62eaa8\GameUXLegacyGDFs.dll
+ 2008-02-13 18:30:44 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16623_none_ebcd9189165066e5\pngfilt.dll
+ 2008-02-13 18:30:43 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.20748_none_ec468fee2f79bd44\pngfilt.dll
+ 2008-02-13 18:30:43 1,159,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71\urlmon.dll
+ 2008-02-13 18:30:42 1,162,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20734_none_b36a0764f2d5b35b\urlmon.dll
+ 2008-02-13 18:37:56 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..humb-shift_keyboard_31bf3856ad364e35_6.0.6000.16609_none_ebe42f5492cf0cfd\f3ahvoas.dll
+ 2008-02-13 18:37:56 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..humb-shift_keyboard_31bf3856ad364e35_6.0.6000.20734_none_ec485ae9ac0981e7\f3ahvoas.dll
+ 2008-02-13 18:30:40 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16609_none_dee86a987f43fde0\mstime.dll
+ 2008-02-13 18:30:40 671,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.20734_none_df4c962d987e72ca\mstime.dll
+ 2008-02-13 18:37:58 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rd-japanese_106_key_31bf3856ad364e35_6.0.6000.16609_none_db2a2e67166cc2c4\kbd106n.dll
+ 2008-02-13 18:37:58 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rd-japanese_106_key_31bf3856ad364e35_6.0.6000.20734_none_db8e59fc2fa737ae\kbd106n.dll
+ 2008-02-13 18:30:43 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504\jsproxy.dll
+ 2008-02-13 18:30:43 824,832 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504\wininet.dll
+ 2008-02-13 18:30:43 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504\WininetPlugin.dll
+ 2008-02-13 18:30:43 27,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20734_none_006fe306bdded9ee\jsproxy.dll
+ 2008-02-13 18:30:43 825,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20734_none_006fe306bdded9ee\wininet.dll
+ 2008-02-13 18:30:43 64,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.20734_none_006fe306bdded9ee\WininetPlugin.dll
+ 2008-02-13 18:30:42 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16609_none_f9b4da4b6e8fdf57\ieapfltr.dat
+ 2008-02-13 18:30:42 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16609_none_f9b4da4b6e8fdf57\ieapfltr.dll
+ 2008-02-13 18:30:42 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20734_none_fa1905e087ca5441\ieapfltr.dat
+ 2008-02-13 18:30:42 383,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.20734_none_fa1905e087ca5441\ieapfltr.dll
+ 2008-02-13 18:30:41 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585\dxtmsft.dll
+ 2008-02-13 18:30:41 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585\dxtrans.dll
+ 2008-02-13 18:30:41 347,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20734_none_964d3e989dafda6f\dxtmsft.dll
+ 2008-02-13 18:30:41 214,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.20734_none_964d3e989dafda6f\dxtrans.dll
+ 2008-02-13 18:30:47 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16609_none_464bad5b46361812\mshtmled.dll
+ 2008-02-13 18:30:47 478,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.20734_none_46afd8f05f708cfc\mshtmled.dll
+ 2008-02-13 18:30:46 3,592,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a\mshtml.dll
+ 2008-02-13 18:30:45 3,593,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.20734_none_11ca02253e354324\mshtml.dll
+ 2008-02-13 18:30:40 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16609_none_58be435a670f5a43\icardie.dll
+ 2008-02-13 18:30:40 63,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.20734_none_59226eef8049cf2d\icardie.dll
+ 2008-02-13 18:30:36 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16609_none_2d84c3fd1ccfd3e7\ieUnatt.exe
+ 2008-02-13 18:30:36 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16609_none_2d84c3fd1ccfd3e7\iexplore.exe
+ 2008-02-13 18:30:35 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20734_none_2de8ef92360a48d1\ieUnatt.exe
+ 2008-02-13 18:30:35 625,664 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20734_none_2de8ef92360a48d1\iexplore.exe
+ 2008-02-13 18:30:35 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16609_none_c3f37918614a9c8c\ie4uinit.exe
+ 2008-02-13 18:30:35 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16609_none_c3f37918614a9c8c\iernonce.dll
+ 2008-02-13 18:30:34 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16609_none_c3f37918614a9c8c\iesetup.dll
+ 2008-02-13 18:30:34 70,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20734_none_c457a4ad7a851176\ie4uinit.exe
+ 2008-02-13 18:30:34 44,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20734_none_c457a4ad7a851176\iernonce.dll
+ 2008-02-13 18:30:34 56,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.20734_none_c457a4ad7a851176\iesetup.dll
+ 2008-02-13 18:30:42 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16609_none_2a188f8867fa71e9\iebrshim.dll
+ 2008-02-13 18:30:42 52,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.20734_none_2a7cbb1d8134e6d3\iebrshim.dll
+ 2008-02-13 18:30:48 6,066,176 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67\ieframe.dll
+ 2008-02-13 18:30:49 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67\ieui.dll
+ 2008-02-13 18:30:47 6,067,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20734_none_63295c28ca2ad151\ieframe.dll
+ 2008-02-13 18:30:48 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.20734_none_63295c28ca2ad151\ieui.dll
+ 2008-02-13 18:30:40 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16609_none_e6be9d129473b09f\ieinstal.exe
+ 2008-02-13 18:30:39 263,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.20734_none_e722c8a7adae2589\ieinstal.exe
+ 2008-02-13 18:30:34 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16609_none_0b66d22ed6ee7051\ieuser.exe
+ 2008-02-13 18:30:34 301,568 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.20734_none_0bcafdc3f028e53b\ieuser.exe
+ 2008-02-15 08:23:48 1,244,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..mediadeliveryengine_31bf3856ad364e35_6.0.6000.16625_none_3d338c3162694f64\mcmde.dll
+ 2008-02-15 08:23:48 1,244,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..mediadeliveryengine_31bf3856ad364e35_6.0.6000.20750_none_3d97b7c67ba3c44e\mcmde.dll
+ 2008-02-13 18:35:09 154,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-native-80211_31bf3856ad364e35_6.0.6000.16632_none_4d03fb3a91e27bd0\nwifi.sys
+ 2008-02-13 18:35:09 154,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-native-80211_31bf3856ad364e35_6.0.6000.20757_none_4d7cf99fab0bd22f\nwifi.sys
+ 2008-01-09 10:48:52 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.16615_none_0e42ce98545690c8\netcfg.exe
+ 2008-02-13 18:34:01 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.16627_none_0e39ff40545cdf67\netcfg.exe
+ 2008-01-09 10:48:52 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.20739_none_0ebaccb36d80cdd0\netcfg.exe
+ 2008-02-13 18:34:01 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netcfg_31bf3856ad364e35_6.0.6000.20752_none_0e9e2ad56d975451\netcfg.exe
+ 2008-01-09 10:48:52 216,760 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16567_none_547b4ec7b851524e\netio.sys
+ 2008-02-13 18:34:01 216,632 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1\netio.sys
+ 2008-01-09 10:48:51 217,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.20689_none_54f14c4ed17d5ca8\netio.sys
+ 2008-02-13 18:34:00 217,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.20752_none_550abbf2d16b549b\netio.sys
+ 2008-02-13 18:37:53 23,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.16609_none_71cfead8774bc0d7\nshhttp.dll
+ 2008-02-13 18:37:53 23,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-nshhttp_31bf3856ad364e35_6.0.6000.20734_none_7234166d908635c1\nshhttp.dll
+ 2008-01-09 10:47:14 1,060,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16586_none_a43a6b8d2000830d\ntfs.sys
+ 2007-12-16 22:50:41 1,060,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346\ntfs.sys
+ 2008-01-09 10:47:14 1,061,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.20709_none_a51d8a7c38da8c7b\ntfs.sys
+ 2007-12-16 22:52:59 1,061,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.20740_none_a4e9483239031830\ntfs.sys
+ 2006-11-02 07:10:14 3,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\system.drv
+ 2006-11-02 07:10:26 4,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\TIMER.DRV
+ 2006-11-02 07:10:30 12,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system_31bf3856ad364e35_6.0.6000.16386_none_1e1753ed2313c813\WFWNET.DRV
+ 2006-11-02 07:10:16 10,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\COMM.drv
+ 2006-09-18 21:43:37 221,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\lanman.drv
+ 2006-11-02 07:10:14 3,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\system.drv
+ 2006-11-02 07:10:26 4,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\TIMER.DRV
+ 2006-11-02 07:10:30 12,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6000.16386_none_fbd6b71e75a2c6c8\WFWNET.DRV
+ 2008-01-15 00:00:51 2,414,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16643_none_f0799cac6e717dff\OESpamFilter.dat
+ 2008-01-15 00:00:38 2,414,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.20778_none_f0e7cb2587a2f04f\OESpamFilter.dat
+ 2008-02-13 18:35:13 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16588_none_bacb6cf1fe8d4f50\oleaut32.dll
+ 2008-02-13 18:32:56 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16607_none_bb20ededfe4d5398\oleaut32.dll
+ 2008-02-13 18:37:58 558,080 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646\oleaut32.dll
+ 2008-02-13 18:35:13 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20711_none_bb99b91117787749\oleaut32.dll
+ 2008-02-13 18:32:56 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20732_none_bb8519831787c882\oleaut32.dll
+ 2008-02-13 18:37:58 559,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.20734_none_bb871a171785fb30\oleaut32.dll
+ 2008-02-13 18:35:12 3,504,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934\ntkrnlpa.exe
+ 2008-02-13 18:35:12 3,470,392 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934\ntoskrnl.exe
+ 2008-02-13 18:35:11 3,505,720 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20707_none_6adac1cbd013d2a2\ntkrnlpa.exe
+ 2008-02-13 18:35:11 3,471,928 ----a-w C:\Windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.20707_none_6adac1cbd013d2a2\ntoskrnl.exe
+ 2006-11-02 09:44:42 255,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_6.0.6000.16386_none_90f734231bc2bfb2\winspool.drv
+ 2008-02-13 18:37:52 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\CntrtextMig.dll
+ 2008-02-13 18:37:53 115,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\loadperf.dll
+ 2008-02-13 18:37:53 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\lodctr.exe
+ 2008-02-13 18:37:53 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfc.dat
+ 2008-02-13 18:37:53 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfd.dat
+ 2008-02-13 18:37:53 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfh.dat
+ 2008-02-13 18:37:53 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\perfi.dat
+ 2008-02-13 18:37:52 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\prflbmsg.dll
+ 2008-02-13 18:37:53 32,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f\unlodctr.exe
+ 2008-02-13 18:37:52 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\CntrtextMig.dll
+ 2008-02-13 18:37:52 115,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\loadperf.dll
+ 2008-02-13 18:37:52 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\lodctr.exe
+ 2008-02-13 18:37:52 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfc.dat
+ 2008-02-13 18:37:52 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfd.dat
+ 2008-02-13 18:37:52 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfh.dat
+ 2008-02-13 18:37:52 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\perfi.dat
+ 2008-02-13 18:37:52 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\prflbmsg.dll
+ 2008-02-13 18:37:52 32,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.20734_none_700cece11af29179\unlodctr.exe
+ 2008-02-13 18:37:58 18,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.16609_none_3cc22de72dd8baa4\CbsMsg.dll
+ 2008-02-13 18:37:58 18,432 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack-msg_31bf3856ad364e35_6.0.6000.20734_none_3d26597c47132f8e\CbsMsg.dll
+ 2008-02-15 09:14:50 1,744,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\apds.dll
+ 2008-02-15 09:14:53 222,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\apircl.dll
+ 2008-02-15 09:14:50 199,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6001.18000_none_095f6148c74a7a64\apss.dll
+ 2008-02-15 09:14:53 534,528 ----a-w C:\Windows\winsxs\x86_microsoft