Weergegeven resultaten: 1 t/m 6 van 6
  1. #1
    Erelid   Simply's schermafbeelding
    Geregistreerd
    3 May 2005
    Locatie
    Nijlen
    Berichten
    1.048
    Bedankjes
    313
    Bedankt
    497 keer in 255 posts

    'iets' tast mijn DLL bestanden aan

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:55, on 2009-03-20
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16791)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\system32\nvraidservice.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\carpserv.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\mHotkey.exe
    C:\WINDOWS\CNYHKey.exe
    C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonito r.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
    C:\Program Files\Telemeter 3.0\telemeter3.exe
    C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\WINDOWS\system32\wbem\unsecapp.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Creative\Shared Files\CTSched.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Documents and Settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
    C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Documents and Settings\natte fons.HILDE-5B1D7B00F\Bureaublad\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.megameurigesaait.com/forum/phpBB2/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\DOCUM E~1\NATTEF~1.HIL\LOCALS~1\Temp\init.exe
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\sw g.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BSMediaBar.dll
    O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [NVRaidService] C:\WINDOWS\system32\nvraidservice.exe
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [CARPService] carpserv.exe
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
    O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageWorkstation\TrueImageMonito r.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VER SIO~2.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
    O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
    O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKCU\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
    O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
    O4 - Global Startup: hp psc 1000 series.lnk = ?
    O4 - Global Startup: hpoddt01.exe.lnk = ?
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: ZDWLan Utility.lnk = C:\Program Files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe
    O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.15\AMVConverter\grab.html
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.15\MediaManager\grab.html
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/...x/qtplugin.cab
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/.../GAME_UNO1.cab
    O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
    O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://denburgemiejestervanbwwl.spac...d/MsnPUpld.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab32846.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
    O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    O16 - DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} (Facebook Photo Uploader 4) - http://upload.facebook.com/controls/...ploader4_5.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab31267.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Anti-Spyware Guard - Unknown owner - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe (file missing)
    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    --
    End of file - 18279 bytes
    Grtzzz Simply



  2. #2
    Erelid   jurgenv's schermafbeelding
    Geregistreerd
    10 May 2005
    Locatie
    West-Vlaanderen
    Berichten
    5.887
    Bedankjes
    100
    Bedankt
    901 keer in 829 posts
    * Download Malwarebytes' Anti-Malware via hier of hier.

    Dubbelklik mbam-setup.exe om het programma te installeren.
    • Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Launch Malwarebytes' Anti-Malware, Klik daarna op "finish".
    • Indien een update gevonden werd, zal het die downloaden en de laatste versie installeren.
    • Wanneer het programma volledig up to date is, selecteer "Perform Quick Scan", daarna klik Scan.
    • Het scannen kan een tijdje duren, dus wees geduldig.
    • Wanneer de scan voltooid is, klik OK, daarna "Show Results" om de resultaten te zien.
    • Zorg ervoor dat daar alles aangevinkt is, daarna klik: Remove Selected.
    • Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie extra nota onderaan)
    • De log wordt automatisch bewaard door MBAM die je kan zien door de "Logs" tab te klikken in MBAM.
    • Kopieer en plak de resultaten van de log in je volgend antwoord, samen met een nieuw HijackThislog.

    Extra Nota:
    Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken. Daarna zal het vragen om de Computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

    Member of ASAP

  3. #3
    Erelid   Simply's schermafbeelding
    Geregistreerd
    3 May 2005
    Locatie
    Nijlen
    Berichten
    1.048
    Bedankjes
    313
    Bedankt
    497 keer in 255 posts
    Malwarebytes' Anti-Malware 1.34
    Database versie: 1878
    Windows 5.1.2600 Service Pack 2

    2009-03-20 16:08:04
    mbam-log-2009-03-20 (16-08-04).txt

    Scan type: Volledige Scan (C:\|H:\|)
    Objecten gescand: 401804
    Verstreken tijd: 2 hour(s), 30 minute(s), 38 second(s)

    Geheugenprocessen geïnfecteerd: 0
    Geheugenmodulen geïnfecteerd: 0
    Registersleutels geïnfecteerd: 0
    Registerwaarden geïnfecteerd: 0
    Registerdata bestanden geïnfecteerd: 0
    Mappen geïnfecteerd: 0
    Bestanden geïnfecteerd: 1

    Geheugenprocessen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Registerwaarden geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:
    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:
    C:\WINDOWS\system32\crypts.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    Grtzzz Simply



  4. #4
    Erelid   jurgenv's schermafbeelding
    Geregistreerd
    10 May 2005
    Locatie
    West-Vlaanderen
    Berichten
    5.887
    Bedankjes
    100
    Bedankt
    901 keer in 829 posts
    Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Plaats het op je bureaublad.
    Dubbelklik er op om het programma te starten.
    In het scherm dat verschijnt tik je een 1 in om het cleaning- en analysesproces te laten uitvoeren.
    Volg de instructies op het scherm.
    Als het tooltje klaar is, opent er een logfile (combofix.txt).
    Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

    Member of ASAP

  5. #5
    Erelid   Simply's schermafbeelding
    Geregistreerd
    3 May 2005
    Locatie
    Nijlen
    Berichten
    1.048
    Bedankjes
    313
    Bedankt
    497 keer in 255 posts
    ComboFix 09-03-19.02 - natte fons 2009-03-22 17:35:41.2 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1043.18.1023.421 [GMT 1:00]
    Gestart vanuit: c:\documents and settings\natte fons.HILDE-5B1D7B00F\Mijn documenten\Downloads\ComboFix.exe
    AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
    * Nieuw herstelpunt werd aangemaakt
    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\docume~1\NATTEF~1.HIL\LOCALS~1\Temp\init.exe
    c:\program files\INSTALL.LOG
    c:\windows\patch.exe
    c:\windows\system32\digeste.dll
    c:\windows\wiaserviv.log
    K:\Autorun.inf

    .
    (((((((((((((((((((( Bestanden Gemaakt van 2009-02-22 to 2009-03-22 ))))))))))))))))))))))))))))))
    .

    2009-08-14 12:04 . 2009-08-14 12:24 <DIR> d-------- c:\documents and settings\natte fons.HILDE-5B1D7B00F\.housecall6.6
    2009-08-12 14:42 . 2008-08-14 16:43 <DIR> d-------- c:\program files\Windows Live
    2009-08-07 14:00 . 2009-03-04 19:48 26,624 --ahs---- C:\Thumbs.db
    2009-08-07 10:40 . 2008-08-14 16:40 <DIR> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\WLInstaller
    2009-08-07 10:37 . 2009-08-07 10:37 <DIR> d-------- c:\program files\Avira
    2009-08-07 10:37 . 2009-08-07 10:37 <DIR> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Avira
    2009-03-21 12:13 . 2009-03-21 12:13 <DIR> d-------- c:\program files\TeamViewer
    2009-03-21 12:13 . 2009-03-21 12:13 <DIR> d-------- c:\documents and settings\natte fons.HILDE-5B1D7B00F\temp
    2009-03-21 12:13 . 2009-03-21 12:47 <DIR> d-------- c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\TeamViewer
    2009-03-18 15:22 . 2009-03-22 16:27 <DIR> dr-h----- c:\documents and settings\natte fons.HILDE-5B1D7B00F\Onlangs geopend
    2009-03-17 20:04 . 2009-03-17 20:04 <DIR> d-------- C:\Nieuwe map
    2009-03-05 17:08 . 2009-03-05 17:07 410,984 --a------ c:\windows\system32\deploytk.dll
    2009-03-05 17:08 . 2009-03-05 17:07 73,728 --a------ c:\windows\system32\javacpl.cpl
    2009-03-04 13:56 . 2009-03-04 13:56 <DIR> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Office Genuine Advantage

    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
    .
    2009-08-14 11:04 102,664 ----a-w c:\windows\system32\drivers\tmcomm.sys
    2009-08-07 12:05 --------- d-----w c:\program files\Easy DVD Player
    2009-08-07 09:33 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\avg7
    2009-03-22 16:46 --------- d-----w c:\program files\Steam
    2009-03-22 16:37 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\Google Updater
    2009-03-20 12:30 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
    2009-03-20 11:05 --------- d-----w c:\program files\Free Music Zilla
    2009-03-20 04:13 50,950 ----a-w c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\wklnhst.dat
    2009-03-11 02:01 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft Help
    2009-03-05 16:07 --------- d-----w c:\program files\Java
    2009-03-02 09:10 --------- d-----w c:\program files\Microsoft Silverlight
    2009-02-11 09:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2009-02-11 09:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2009-02-07 19:34 --------- d-----w c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\FMZilla
    2009-02-07 19:29 --------- d-----w c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\gtk-2.0
    2009-01-29 18:44 --------- d-----w c:\program files\GPLGS
    2009-01-29 17:43 --------- d-----w c:\program files\Acro Software
    2009-01-26 22:57 --------- d-----w c:\program files\SendBlaster
    2009-01-26 22:48 --------- d-----w c:\program files\4Musics Multiformat Converter
    2009-01-24 20:11 --------- d-----w c:\program files\AtomPark
    2009-01-24 20:11 --------- d-----w c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\AtomPark
    2008-02-15 19:38 14,290 ----a-w c:\program files\settings.dat
    2007-07-29 21:38 6,036 ----a-w c:\documents and settings\hilde.HILDE-5B1D7B00F\Application Data\wklnhst.dat
    2007-05-25 00:32 2,240 ---ha-w c:\documents and settings\natte fons.HILDE-5B1D7B00F\hpothb07.dat
    2006-10-12 09:23 59,440 ----a-w c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\GDIPFONTCACHEV1.DAT
    2005-11-30 17:40 178 ---ha-w c:\documents and settings\hilde.HILDE-5B1D7B00F\hpothb07.dat
    2005-11-30 17:40 164 ---ha-w c:\documents and settings\All Users\hpothb07.dat
    2005-11-19 09:33 58,280 ----a-w c:\documents and settings\hilde.HILDE-5B1D7B00F\Application Data\GDIPFONTCACHEV1.DAT
    2005-06-16 17:43 0 ---ha-w c:\documents and settings\NetworkService\hpothb07.dat
    2005-06-12 19:47 198 ----a-w c:\documents and settings\Tim\Application Data\wklnhst.dat
    2005-03-20 04:12 0 ----a-w c:\documents and settings\tom.HILDE-5B1D7B00F\Application Data\wklnhst.dat
    2005-03-14 21:04 180 ----a-w c:\documents and settings\Tom\Application Data\wklnhst.dat
    2003-01-13 10:12 278,528 ----a-w c:\program files\internet explorer\plugins\PanoViewer.dll
    1999-04-30 15:00 98,304 ----a-w c:\program files\internet explorer\plugins\UPjpeg.dll
    2008-11-18 14:49 122,880 ----a-w c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
    2007-07-05 14:06 88 --sh--r c:\windows\system32\CF77F2C6C2.sys
    2008-11-10 15:28 88 --sh--r c:\windows\system32\CF89214EDF.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-08-14_17.33.12.57 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
    + 2008-05-02 13:42:09 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
    + 2008-05-02 14:05:59 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
    + 2008-05-02 13:46:26 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
    + 2008-07-07 20:23:19 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
    + 2008-07-07 20:30:07 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
    + 2008-07-07 20:26:08 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
    + 2007-11-30 12:39:44 765,304 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
    + 2007-11-30 12:39:44 401,272 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
    + 2008-04-11 18:41:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
    + 2008-04-11 19:06:47 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
    + 2008-04-11 22:24:00 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
    + 2007-12-03 15:25:59 765,304 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
    + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
    + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
    + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
    + 2008-05-01 15:05:37 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
    + 2008-05-01 14:37:01 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
    + 2008-05-01 14:41:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
    + 2007-11-30 11:19:44 401,272 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
    + 2008-06-24 16:31:05 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
    + 2008-06-24 16:46:42 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
    + 2008-06-24 16:54:31 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
    + 2008-06-23 15:42:10 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll
    + 2008-06-23 15:42:11 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll
    + 2008-06-23 15:42:11 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll
    + 2008-06-23 15:42:11 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll
    + 2008-06-23 15:42:11 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll
    + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe
    + 2008-06-23 15:42:12 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll
    + 2008-06-23 15:42:12 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll
    + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat
    + 2008-06-23 15:42:12 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll
    + 2008-06-23 15:42:12 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll
    + 2008-06-23 15:42:14 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll
    + 2008-06-23 15:42:14 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll
    + 2008-06-23 15:42:14 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll
    + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe
    + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
    + 2008-06-23 15:42:14 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll
    + 2008-06-23 15:42:15 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll
    + 2008-06-23 15:42:15 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll
    + 2008-06-23 15:42:16 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
    + 2008-06-23 15:42:17 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll
    + 2008-06-23 15:42:17 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll
    + 2008-06-23 15:42:18 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll
    + 2008-06-23 15:42:18 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll
    + 2008-06-23 15:42:18 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll
    + 2008-06-23 15:42:18 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll
    + 2008-06-23 15:42:18 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll
    + 2008-06-23 15:42:18 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll
    + 2008-06-23 15:42:19 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:58:22 15,584 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll
    + 2007-03-06 01:58:27 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe
    + 2007-03-06 01:58:21 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll
    + 2007-03-06 01:58:46 725,728 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe
    + 2007-03-06 01:59:37 389,856 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
    + 2008-09-15 15:17:01 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP2QFE\win32k.sys
    + 2008-09-15 15:28:42 1,846,528 ----a-w c:\windows\$hf_mig$\KB954211\SP3GDR\win32k.sys
    + 2008-09-15 15:22:07 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
    + 2008-07-09 07:44:11 765,304 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
    + 2008-10-03 10:01:32 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP2QFE\strmdll.dll
    + 2008-10-03 10:05:08 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3GDR\strmdll.dll
    + 2008-10-03 09:51:00 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
    + 2008-09-04 16:35:13 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP2QFE\msxml3.dll
    + 2008-09-04 17:17:14 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3GDR\msxml3.dll
    + 2008-09-04 17:13:48 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
    + 2008-07-09 12:14:20 401,272 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
    + 2008-10-22 09:47:25 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP2QFE\tzchange.exe
    + 2008-10-23 10:06:59 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3GDR\tzchange.exe
    + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
    + 2008-08-26 09:12:14 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
    + 2008-08-26 09:12:15 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
    + 2008-08-26 09:12:15 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
    + 2008-08-26 09:12:15 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
    + 2008-08-26 09:12:15 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
    + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
    + 2008-08-26 09:12:15 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
    + 2008-08-26 09:12:15 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
    + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
    + 2008-08-26 09:12:15 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
    + 2008-08-26 09:12:15 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-03 16:42:25 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
    + 2008-08-26 09:12:16 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
    + 2008-08-26 09:12:16 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
    + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
    + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
    + 2008-08-26 09:12:17 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
    + 2008-08-26 09:12:17 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
    + 2008-08-26 09:12:17 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
    + 2008-08-26 09:12:18 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
    + 2008-08-26 09:12:18 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
    + 2008-08-26 09:12:18 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
    + 2008-08-26 09:12:18 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
    + 2008-08-26 09:12:18 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
    + 2008-08-26 09:12:18 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
    + 2008-08-26 09:12:18 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
    + 2008-08-26 09:12:18 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
    + 2008-08-26 09:12:18 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
    + 2008-08-26 09:12:19 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:58:22 15,584 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
    + 2007-03-06 01:58:28 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
    + 2007-03-06 01:58:21 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
    + 2007-03-06 01:58:46 725,728 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
    + 2007-03-06 01:59:37 389,856 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
    + 2008-10-23 12:52:53 284,160 ----a-w c:\windows\$hf_mig$\KB956802\SP2QFE\gdi32.dll
    + 2008-10-23 12:43:45 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3GDR\gdi32.dll
    + 2008-10-23 12:45:14 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
    + 2008-07-08 13:07:36 18,808 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
    + 2008-07-08 13:07:36 234,872 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
    + 2008-07-08 13:07:36 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
    + 2008-07-09 07:44:11 765,304 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
    + 2008-07-09 07:44:19 401,272 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
    + 2008-08-14 09:48:52 138,368 ----a-w c:\windows\$hf_mig$\KB956803\SP2QFE\afd.sys
    + 2008-08-14 10:04:36 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3GDR\afd.sys
    + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
    + 2007-11-30 11:19:44 401,272 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
    + 2008-08-14 13:41:01 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlmp.exe
    + 2008-08-14 13:41:05 2,067,328 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrnlpa.exe
    + 2008-08-14 13:41:01 2,025,472 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntkrpamp.exe
    + 2008-08-14 13:41:05 2,190,336 ----a-w c:\windows\$hf_mig$\KB956841\SP2QFE\ntoskrnl.exe
    + 2008-08-14 13:27:30 2,149,888 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlmp.exe
    + 2008-08-14 13:27:33 2,070,400 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrnlpa.exe
    + 2008-08-14 13:27:28 2,028,544 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntkrpamp.exe
    + 2008-08-14 13:27:31 2,193,536 ----a-w c:\windows\$hf_mig$\KB956841\SP3GDR\ntoskrnl.exe
    + 2008-08-14 13:58:08 2,149,888 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
    + 2008-08-14 17:28:12 2,070,400 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
    + 2008-08-14 13:58:06 2,028,544 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
    + 2008-08-14 17:28:12 2,193,536 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
    + 2008-07-09 07:44:19 401,272 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
    + 2008-08-28 10:35:33 333,056 ----a-w c:\windows\$hf_mig$\KB957095\SP2QFE\srv.sys
    + 2008-09-08 10:41:42 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3GDR\srv.sys
    + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
    + 2007-11-30 11:19:44 401,272 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
    + 2008-10-24 11:25:29 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP2QFE\mrxsmb.sys
    + 2008-10-24 11:21:09 455,296 ----a-w c:\windows\$hf_mig$\KB957097\SP3GDR\mrxsmb.sys
    + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
    + 2008-07-08 13:07:36 18,808 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
    + 2008-07-08 13:07:36 234,872 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
    + 2008-07-08 13:07:36 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
    + 2008-07-08 13:07:39 765,304 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
    + 2008-07-08 13:07:47 401,272 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
    + 2008-10-16 19:50:08 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
    + 2008-10-16 19:50:08 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
    + 2008-10-16 19:50:08 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
    + 2008-10-16 19:50:08 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
    + 2008-10-16 19:50:08 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
    + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
    + 2008-10-16 19:50:08 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
    + 2008-10-16 19:50:09 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
    + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
    + 2008-10-16 19:50:09 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
    + 2008-10-16 19:50:09 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
    + 2008-10-16 19:50:12 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
    + 2008-10-16 19:50:12 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
    + 2008-10-16 19:50:12 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
    + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
    + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
    + 2008-10-16 19:50:13 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
    + 2008-10-16 19:50:13 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
    + 2008-10-16 19:50:13 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
    + 2008-10-16 19:50:14 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
    + 2008-10-16 19:50:15 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
    + 2008-10-16 19:50:15 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
    + 2008-10-16 19:50:16 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
    + 2008-10-16 19:50:16 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
    + 2008-10-16 19:50:16 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
    + 2008-10-16 19:50:16 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
    + 2008-10-16 19:50:16 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
    + 2008-10-16 19:50:16 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
    + 2008-10-16 19:50:17 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:58:22 15,584 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
    + 2007-03-06 01:58:27 216,800 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
    + 2007-03-06 01:58:21 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
    + 2007-03-06 01:58:46 725,728 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
    + 2007-03-06 01:59:37 389,856 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
    + 2008-10-15 16:56:02 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP2QFE\netapi32.dll
    + 2008-10-15 16:37:40 337,408 ----a-w c:\windows\$hf_mig$\KB958644\SP3GDR\netapi32.dll
    + 2008-10-15 16:32:29 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
    + 2007-11-30 11:19:43 18,808 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
    + 2007-11-30 11:19:43 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
    + 2007-11-30 11:19:43 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
    + 2007-11-30 11:19:43 765,304 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
    + 2007-11-30 11:19:44 401,272 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
    + 2008-12-11 10:24:44 333,184 ----a-w c:\windows\$hf_mig$\KB958687\SP2QFE\srv.sys
    + 2008-12-11 10:57:09 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3GDR\srv.sys
    + 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
    + 2007-11-30 12:39:46 18,808 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
    + 2007-11-30 12:39:46 234,872 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
    + 2007-11-30 12:39:46 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
    + 2007-11-30 12:39:46 765,304 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
    + 2007-11-30 12:39:47 401,272 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
    + 2008-12-13 06:28:45 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
    + 2007-03-06 01:58:22 15,584 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
    + 2007-03-06 01:58:27 216,800 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
    + 2007-03-06 01:58:21 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
    + 2007-03-06 01:58:45 725,728 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
    + 2007-03-06 01:59:37 389,856 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
    + 2008-07-09 07:44:08 18,808 ----a-w c:\windows\$hf_mig$\KB960715\spmsg.dll
    + 2008-07-09 07:44:09 234,872 ----a-w c:\windows\$hf_mig$\KB960715\spuninst.exe
    + 2008-07-09 07:44:08 26,488 ----a-w c:\windows\$hf_mig$\KB960715\update\spcustom.dll
    + 2008-11-15 17:18:30 765,304 ----a-w c:\windows\$hf_mig$\KB960715\update\update.exe
    + 2008-07-09 07:44:19 401,272 ----a-w c:\windows\$hf_mig$\KB960715\update\updspapi.dll
    + 2008-12-20 23:49:27 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
    + 2008-12-20 23:49:27 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
    + 2008-12-20 23:49:27 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
    + 2008-12-20 23:49:28 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
    + 2008-12-20 23:49:28 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
    + 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
    + 2008-12-20 23:49:28 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
    + 2008-12-20 23:49:28 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
    + 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
    + 2008-12-20 23:49:29 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
    + 2008-12-20 23:49:29 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
    + 2008-12-20 23:49:34 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
    + 2008-12-20 23:49:34 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
    + 2008-12-20 23:49:35 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
    + 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
    + 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
    + 2008-12-20 23:49:36 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
    + 2008-12-20 23:49:36 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
    + 2008-12-20 23:49:36 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
    + 2009-01-16 16:22:27 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
    + 2008-12-20 23:49:40 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
    + 2008-12-20 23:49:40 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
    + 2008-12-20 23:49:41 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
    + 2008-12-20 23:49:41 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
    + 2008-12-20 23:49:41 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
    + 2008-12-20 23:49:41 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
    + 2008-12-20 23:49:42 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
    + 2008-12-20 23:49:42 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
    + 2008-12-20 23:49:42 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:58:22 15,584 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
    + 2007-03-06 01:58:28 216,800 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
    + 2007-03-06 01:58:21 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
    + 2007-03-06 01:58:46 725,728 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
    + 2007-03-06 01:59:37 389,856 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
    + 2008-06-17 19:03:19 8,508,416 ----a-w c:\windows\$hf_mig$\KB967715\SP3GDR\shell32.dll
    + 2008-06-17 19:05:17 8,508,928 ----a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
    + 2008-07-09 07:44:08 18,808 ----a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
    + 2008-07-09 07:44:09 234,872 ----a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
    + 2008-07-09 07:44:08 26,488 ----a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
    + 2008-07-09 07:44:11 765,304 ----a-w c:\windows\$hf_mig$\KB967715\update\update.exe
    + 2008-07-09 07:44:19 401,272 ----a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi .dll
    + 2004-08-04 00:15:40 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi .dll
    + 2005-07-26 04:42:48 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst .exe
    + 2007-11-30 12:39:44 401,272 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi .dll
    + 2007-08-21 06:18:26 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi .dll
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
    + 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
    + 2006-10-18 18:03:58 100,864 -c----w c:\windows\$NtUninstallKB952069_WM9$\logagent.exe
    + 2007-07-27 06:34:54 234,872 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\spun inst.exe
    + 2007-07-27 08:41:48 382,840 -c----w c:\windows\$NtUninstallKB952069_WM9$\spuninst\upds papi.dll
    + 2006-10-18 19:47:20 937,984 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmnetmgr.dll
    + 2006-10-18 19:47:22 2,450,944 -c----w c:\windows\$NtUninstallKB952069_WM9$\wmvcore.dll
    + 2004-08-04 12:00:00 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst .exe
    + 2007-11-30 11:19:44 401,272 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi .dll
    + 2005-06-29 01:53:10 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi .dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi .dll
    + 2007-07-27 06:34:54 234,872 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\spu ninst.exe
    + 2007-07-27 08:41:48 382,840 -c----w c:\windows\$NtUninstallKB954154_WM11$\spuninst\upd spapi.dll
    + 2006-10-18 19:47:20 295,936 -c----w c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.d ll
    + 2007-07-27 06:34:54 234,872 -c----w c:\windows\$NtUninstallKB954156_WM9L$\spuninst\spu ninst.exe
    + 2007-07-27 08:41:48 382,840 -c----w c:\windows\$NtUninstallKB954156_WM9L$\spuninst\upd spapi.dll
    + 2002-12-11 17:38:52 929,280 -c----w c:\windows\$NtUninstallKB954156_WM9L$\wmex.dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB954211$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB954211$\spuninst\updspapi .dll
    + 2008-03-20 08:10:47 1,845,376 -c----w c:\windows\$NtUninstallKB954211$\win32k.sys
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB954600$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB954600$\spuninst\updspapi .dll
    + 2006-08-24 12:19:52 246,814 -c----w c:\windows\$NtUninstallKB954600$\strmdll.dll
    + 2007-06-26 06:10:37 1,104,896 -c----w c:\windows\$NtUninstallKB955069$\msxml3.dll
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB955069$\spuninst\spuninst .exe
    + 2008-07-09 12:14:20 401,272 -c----w c:\windows\$NtUninstallKB955069$\spuninst\updspapi .dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB955839$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB955839$\spuninst\updspapi .dll
    + 2008-07-14 11:09:18 62,976 -c----w c:\windows\$NtUninstallKB955839$\tzchange.exe
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB956391$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB956391$\spuninst\updspapi .dll
    + 2008-02-20 06:51:59 282,624 -c----w c:\windows\$NtUninstallKB956802$\gdi32.dll
    + 2008-07-08 13:07:36 234,872 -c----w c:\windows\$NtUninstallKB956802$\spuninst\spuninst .exe
    + 2008-07-09 07:44:19 401,272 -c----w c:\windows\$NtUninstallKB956802$\spuninst\updspapi .dll
    + 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtUninstallKB956803$\afd.sys
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB956803$\spuninst\spuninst .exe
    + 2007-11-30 11:19:44 401,272 -c----w c:\windows\$NtUninstallKB956803$\spuninst\updspapi .dll
    + 2007-02-28 16:05:05 2,140,672 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlmp.exe
    + 2007-02-28 16:05:16 2,061,952 -c----w c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
    + 2007-02-28 16:05:04 2,020,352 -c----w c:\windows\$NtUninstallKB956841$\ntkrpamp.exe
    + 2007-02-28 16:05:16 2,184,704 -c----w c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB956841$\spuninst\spuninst .exe
    + 2008-07-09 07:44:19 401,272 -c----w c:\windows\$NtUninstallKB956841$\spuninst\updspapi .dll
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB957095$\spuninst\spuninst .exe
    + 2007-11-30 11:19:44 401,272 -c----w c:\windows\$NtUninstallKB957095$\spuninst\updspapi .dll
    + 2006-08-14 10:34:41 332,928 -c----w c:\windows\$NtUninstallKB957095$\srv.sys
    + 2006-05-05 09:41:45 453,120 -c----w c:\windows\$NtUninstallKB957097$\mrxsmb.sys
    + 2008-07-08 13:07:36 234,872 -c----w c:\windows\$NtUninstallKB957097$\spuninst\spuninst .exe
    + 2008-07-08 13:07:47 401,272 -c----w c:\windows\$NtUninstallKB957097$\spuninst\updspapi .dll
    + 2006-08-17 12:30:16 332,288 -c----w c:\windows\$NtUninstallKB958644$\netapi32.dll
    + 2007-11-30 11:19:43 234,872 -c----w c:\windows\$NtUninstallKB958644$\spuninst\spuninst .exe
    + 2007-11-30 11:19:44 401,272 -c----w c:\windows\$NtUninstallKB958644$\spuninst\updspapi .dll
    + 2007-11-30 12:39:46 234,872 -c----w c:\windows\$NtUninstallKB958687$\spuninst\spuninst .exe
    + 2007-11-30 12:39:47 401,272 -c----w c:\windows\$NtUninstallKB958687$\spuninst\updspapi .dll
    + 2008-08-28 10:04:17 333,056 -c----w c:\windows\$NtUninstallKB958687$\srv.sys
    + 2008-07-09 07:44:09 234,872 -c----w c:\windows\$NtUninstallKB960715$\spuninst\spuninst .exe
    + 2008-07-09 07:44:19 401,272 -c----w c:\windows\$NtUninstallKB960715$\spuninst\updspapi .dll
    + 2004-09-16 12:26:40 12,634 ----a-w c:\windows\ADFUUD.SYS
    + 2008-12-08 17:06:05 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVid eoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft. DirectX.AudioVideoPlayback.dll
    + 2008-12-08 17:06:05 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnost ics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .Diagnostics.dll
    + 2008-12-08 17:06:05 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D \1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Di rect3D.dll
    + 2008-12-08 17:06:01 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:01 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:02 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:02 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:02 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:03 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:03 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:03 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:03 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:05 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
    + 2008-12-08 17:06:05 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDr aw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectDraw.dll
    + 2008-12-08 17:06:06 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectIn put\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectInput.dll
    + 2008-12-08 17:06:06 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPl ay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectPlay.dll
    + 2008-12-08 17:06:06 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSo und\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectSound.dll
    + 2008-12-08 17:06:05 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902 .0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2007-01-17 18:09:44 248,632 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.P owerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Off ice.Interop.PowerPoint.dll
    + 2008-08-15 11:23:47 250,928 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.P owerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Off ice.Interop.PowerPoint.dll
    - 2007-01-17 18:09:44 781,104 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.W ord\12.0.0.0__71e9bce111e9429c\Microsoft.Office.In terop.Word.dll
    + 2008-08-19 13:55:12 783,744 ----a-w c:\windows\assembly\GAC\Microsoft.Office.Interop.W ord\12.0.0.0__71e9bce111e9429c\Microsoft.Office.In terop.Word.dll
    - 2006-05-05 09:41:45 453,120 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
    - 2007-02-28 16:05:05 2,140,672 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-08-14 13:47:57 2,140,672 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
    - 2007-02-28 16:05:16 2,061,952 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-08-14 13:48:03 2,062,080 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2007-02-28 16:05:04 2,020,352 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-08-14 13:47:56 2,020,352 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2007-02-28 16:05:16 2,184,704 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-08-14 13:48:00 2,184,704 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
    - 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\subs\ERDNT.EXE
    + 2008-04-23 04:22:14 124,928 -c----w c:\windows\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:22:14 347,136 -c----w c:\windows\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:22:14 214,528 -c----w c:\windows\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:22:14 133,120 -c----w c:\windows\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:22:14 63,488 -c----w c:\windows\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:42:24 70,656 -c----w c:\windows\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:22:14 153,088 -c----w c:\windows\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:22:14 230,400 -c----w c:\windows\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w c:\windows\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:22:14 383,488 -c----w c:\windows\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:22:14 384,512 -c----w c:\windows\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:22:14 6,066,176 -c----w c:\windows\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:22:14 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:22:14 267,776 -c----w c:\windows\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w c:\windows\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:42:38 625,664 -c----w c:\windows\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:22:15 27,648 -c----w c:\windows\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:22:15 459,264 -c----w c:\windows\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:22:15 52,224 -c----w c:\windows\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-23 20:22:16 3,591,680 -c----w c:\windows\ie7updates\KB953838-IE7\mshtml.dll
    + 2008-04-23 04:22:15 478,208 -c----w c:\windows\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:22:15 193,024 -c----w c:\windows\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:22:15 671,232 -c----w c:\windows\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:22:15 102,912 -c----w c:\windows\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:22:15 44,544 -c----w c:\windows\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:58:27 216,800 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:59:37 389,856 -c----w c:\windows\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:22:15 105,984 -c----w c:\windows\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:22:15 1,159,680 -c----w c:\windows\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:22:15 233,472 -c----w c:\windows\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:22:15 826,368 -c----w c:\windows\ie7updates\KB953838-IE7\wininet.dll
    + 2008-06-23 16:43:12 124,928 -c----w c:\windows\ie7updates\KB956390-IE7\advpack.dll
    + 2008-06-23 16:43:12 347,136 -c----w c:\windows\ie7updates\KB956390-IE7\dxtmsft.dll
    + 2008-06-23 16:43:13 214,528 -c----w c:\windows\ie7updates\KB956390-IE7\dxtrans.dll
    + 2008-06-23 16:43:13 133,120 -c----w c:\windows\ie7updates\KB956390-IE7\extmgr.dll
    + 2008-06-23 16:43:13 63,488 -c----w c:\windows\ie7updates\KB956390-IE7\icardie.dll
    + 2008-06-23 09:22:59 70,656 -c----w c:\windows\ie7updates\KB956390-IE7\ie4uinit.exe
    + 2008-06-23 16:43:13 153,088 -c----w c:\windows\ie7updates\KB956390-IE7\ieakeng.dll
    + 2008-06-23 16:43:13 230,400 -c----w c:\windows\ie7updates\KB956390-IE7\ieaksie.dll
    + 2008-06-21 05:23:54 161,792 -c----w c:\windows\ie7updates\KB956390-IE7\ieakui.dll
    + 2008-06-23 16:43:13 383,488 -c----w c:\windows\ie7updates\KB956390-IE7\ieapfltr.dll
    + 2008-06-23 16:43:13 384,512 -c----w c:\windows\ie7updates\KB956390-IE7\iedkcs32.dll
    + 2008-06-23 16:43:15 6,066,176 -c----w c:\windows\ie7updates\KB956390-IE7\ieframe.dll
    + 2008-06-23 16:43:15 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\iernonce.dll
    + 2008-06-23 16:43:15 267,776 -c----w c:\windows\ie7updates\KB956390-IE7\iertutil.dll
    + 2008-06-23 09:20:26 13,824 -c----w c:\windows\ie7updates\KB956390-IE7\ieudinit.exe
    + 2008-06-23 09:23:16 625,664 -c----w c:\windows\ie7updates\KB956390-IE7\iexplore.exe
    + 2008-06-23 16:43:16 27,648 -c----w c:\windows\ie7updates\KB956390-IE7\jsproxy.dll
    + 2008-06-23 16:43:16 459,264 -c----w c:\windows\ie7updates\KB956390-IE7\msfeeds.dll
    + 2008-06-23 16:43:16 52,224 -c----w c:\windows\ie7updates\KB956390-IE7\msfeedsbs.dll
    + 2008-06-24 08:43:20 3,592,192 -c----w c:\windows\ie7updates\KB956390-IE7\mshtml.dll
    + 2008-06-23 16:43:18 477,696 -c----w c:\windows\ie7updates\KB956390-IE7\mshtmled.dll
    + 2008-06-23 16:43:18 193,024 -c----w c:\windows\ie7updates\KB956390-IE7\msrating.dll
    + 2008-06-23 16:43:19 671,232 -c----w c:\windows\ie7updates\KB956390-IE7\mstime.dll
    + 2008-06-23 16:43:19 102,912 -c----w c:\windows\ie7updates\KB956390-IE7\occache.dll
    + 2008-06-23 16:43:19 44,544 -c----w c:\windows\ie7updates\KB956390-IE7\pngfilt.dll
    + 2007-03-06 01:58:28 216,800 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:59:37 389,856 -c----w c:\windows\ie7updates\KB956390-IE7\spuninst\updspapi.dll
    + 2008-06-23 16:43:19 105,984 -c----w c:\windows\ie7updates\KB956390-IE7\url.dll
    + 2008-06-23 16:43:19 1,159,680 -c----w c:\windows\ie7updates\KB956390-IE7\urlmon.dll
    + 2008-06-23 16:43:20 233,472 -c----w c:\windows\ie7updates\KB956390-IE7\webcheck.dll
    + 2008-06-23 16:43:20 826,368 -c----w c:\windows\ie7updates\KB956390-IE7\wininet.dll
    + 2008-08-26 08:27:10 124,928 -c----w c:\windows\ie7updates\KB958215-IE7\advpack.dll
    + 2008-08-26 08:27:10 347,136 -c----w c:\windows\ie7updates\KB958215-IE7\dxtmsft.dll
    + 2008-08-26 08:27:10 214,528 -c----w c:\windows\ie7updates\KB958215-IE7\dxtrans.dll
    + 2008-08-26 08:27:10 133,120 -c----w c:\windows\ie7updates\KB958215-IE7\extmgr.dll
    + 2008-08-26 08:27:10 63,488 -c----w c:\windows\ie7updates\KB958215-IE7\icardie.dll
    + 2008-08-25 08:40:59 70,656 -c----w c:\windows\ie7updates\KB958215-IE7\ie4uinit.exe
    + 2008-08-26 08:27:10 153,088 -c----w c:\windows\ie7updates\KB958215-IE7\ieakeng.dll
    + 2008-08-26 08:27:10 230,400 -c----w c:\windows\ie7updates\KB958215-IE7\ieaksie.dll
    + 2008-08-23 05:54:51 161,792 -c----w c:\windows\ie7updates\KB958215-IE7\ieakui.dll
    + 2008-08-26 08:27:10 383,488 -c----w c:\windows\ie7updates\KB958215-IE7\ieapfltr.dll
    + 2008-08-26 08:27:10 384,512 -c----w c:\windows\ie7updates\KB958215-IE7\iedkcs32.dll
    + 2008-10-03 17:38:28 6,066,176 -c----w c:\windows\ie7updates\KB958215-IE7\ieframe.dll
    + 2008-08-26 08:27:11 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\iernonce.dll
    + 2008-08-26 08:27:11 267,776 -c----w c:\windows\ie7updates\KB958215-IE7\iertutil.dll
    + 2008-08-25 08:38:00 13,824 -c----w c:\windows\ie7updates\KB958215-IE7\ieudinit.exe
    + 2008-08-23 05:56:15 635,848 -c----w c:\windows\ie7updates\KB958215-IE7\iexplore.exe
    + 2008-08-26 08:27:11 27,648 -c----w c:\windows\ie7updates\KB958215-IE7\jsproxy.dll
    + 2008-08-26 08:27:11 459,264 -c----w c:\windows\ie7updates\KB958215-IE7\msfeeds.dll
    + 2008-08-26 08:27:11 52,224 -c----w c:\windows\ie7updates\KB958215-IE7\msfeedsbs.dll
    + 2008-08-27 09:27:14 3,593,216 -c----w c:\windows\ie7updates\KB958215-IE7\mshtml.dll
    + 2008-08-26 08:27:12 477,696 -c----w c:\windows\ie7updates\KB958215-IE7\mshtmled.dll
    + 2008-08-26 08:27:12 193,024 -c----w c:\windows\ie7updates\KB958215-IE7\msrating.dll
    + 2008-08-26 08:27:12 671,232 -c----w c:\windows\ie7updates\KB958215-IE7\mstime.dll
    + 2008-08-26 08:27:12 102,912 -c----w c:\windows\ie7updates\KB958215-IE7\occache.dll
    + 2008-08-26 08:27:12 44,544 -c----w c:\windows\ie7updates\KB958215-IE7\pngfilt.dll
    + 2007-03-06 01:58:27 216,800 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:59:37 389,856 -c----w c:\windows\ie7updates\KB958215-IE7\spuninst\updspapi.dll
    + 2008-08-26 08:27:12 105,984 -c----w c:\windows\ie7updates\KB958215-IE7\url.dll
    + 2008-08-26 08:27:13 1,159,680 -c----w c:\windows\ie7updates\KB958215-IE7\urlmon.dll
    + 2008-08-26 08:27:13 233,472 -c----w c:\windows\ie7updates\KB958215-IE7\webcheck.dll
    + 2008-08-26 08:27:13 826,368 -c----w c:\windows\ie7updates\KB958215-IE7\wininet.dll
    + 2008-10-17 01:03:30 3,593,216 -c----w c:\windows\ie7updates\KB960714-IE7\mshtml.dll
    + 2007-03-06 01:58:27 216,800 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:59:37 389,856 -c----w c:\windows\ie7updates\KB960714-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:33:22 124,928 -c----w c:\windows\ie7updates\KB961260-IE7\advpack.dll
    + 2008-10-16 20:33:22 347,136 -c----w c:\windows\ie7updates\KB961260-IE7\dxtmsft.dll
    + 2008-10-16 20:33:22 214,528 -c----w c:\windows\ie7updates\KB961260-IE7\dxtrans.dll
    + 2008-10-16 20:33:22 133,120 -c----w c:\windows\ie7updates\KB961260-IE7\extmgr.dll
    + 2008-10-16 20:33:22 63,488 -c----w c:\windows\ie7updates\KB961260-IE7\icardie.dll
    + 2008-10-16 13:14:32 70,656 -c----w c:\windows\ie7updates\KB961260-IE7\ie4uinit.exe
    + 2008-10-16 20:33:22 153,088 -c----w c:\windows\ie7updates\KB961260-IE7\ieakeng.dll
    + 2008-10-16 20:33:22 230,400 -c----w c:\windows\ie7updates\KB961260-IE7\ieaksie.dll
    + 2008-10-15 07:04:53 161,792 -c----w c:\windows\ie7updates\KB961260-IE7\ieakui.dll
    + 2008-10-16 20:33:23 383,488 -c----w c:\windows\ie7updates\KB961260-IE7\ieapfltr.dll
    + 2008-10-16 20:33:23 384,512 -c----w c:\windows\ie7updates\KB961260-IE7\iedkcs32.dll
    + 2008-10-16 20:33:25 6,066,176 -c----w c:\windows\ie7updates\KB961260-IE7\ieframe.dll
    + 2008-10-16 20:33:25 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\iernonce.dll
    + 2008-10-16 20:33:25 267,776 -c----w c:\windows\ie7updates\KB961260-IE7\iertutil.dll
    + 2008-10-16 13:11:09 13,824 -c----w c:\windows\ie7updates\KB961260-IE7\ieudinit.exe
    + 2008-10-15 07:06:26 633,632 -c----w c:\windows\ie7updates\KB961260-IE7\iexplore.exe
    + 2008-10-16 20:33:26 27,648 -c----w c:\windows\ie7updates\KB961260-IE7\jsproxy.dll
    + 2008-10-16 20:33:26 459,264 -c----w c:\windows\ie7updates\KB961260-IE7\msfeeds.dll
    + 2008-10-16 20:33:26 52,224 -c----w c:\windows\ie7updates\KB961260-IE7\msfeedsbs.dll
    + 2008-12-13 06:39:18 3,593,216 -c----w c:\windows\ie7updates\KB961260-IE7\mshtml.dll
    + 2008-10-16 20:33:29 477,696 -c----w c:\windows\ie7updates\KB961260-IE7\mshtmled.dll
    + 2008-10-16 20:33:29 193,024 -c----w c:\windows\ie7updates\KB961260-IE7\msrating.dll
    + 2008-10-16 20:33:30 671,232 -c----w c:\windows\ie7updates\KB961260-IE7\mstime.dll
    + 2008-10-16 20:33:30 102,912 -c----w c:\windows\ie7updates\KB961260-IE7\occache.dll
    + 2008-10-16 20:33:30 44,544 -c----w c:\windows\ie7updates\KB961260-IE7\pngfilt.dll
    + 2007-03-06 01:58:28 216,800 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:59:37 389,856 -c----w c:\windows\ie7updates\KB961260-IE7\spuninst\updspapi.dll
    + 2008-10-16 20:33:30 105,984 -c----w c:\windows\ie7updates\KB961260-IE7\url.dll
    + 2008-10-16 20:33:31 1,160,192 -c----w c:\windows\ie7updates\KB961260-IE7\urlmon.dll
    + 2008-10-16 20:33:32 233,472 -c----w c:\windows\ie7updates\KB961260-IE7\webcheck.dll
    + 2008-10-16 20:33:32 826,368 -c----w c:\windows\ie7updates\KB961260-IE7\wininet.dll
    + 2006-10-26 18:49:48 1,011,488 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109010090400000000000F01FEC\12.0.4518\MSDAIPP. DLL
    + 2006-10-26 18:49:46 970,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109010090400000000000F01FEC\12.0.4518\MSONSEXT .DLL
    + 2006-10-27 14:00:10 576,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACACEDAO .DLL
    + 2006-10-26 20:18:12 162,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACCWIZ.D LL
    + 2006-10-27 14:00:12 1,751,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECORE. DLL
    + 2006-10-27 14:00:10 576,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEDAO.D LL
    + 2006-10-27 14:00:06 47,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEERR.D LL
    + 2006-10-27 14:00:08 191,360 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEES.DL L
    + 2006-10-26 19:13:34 338,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEEXCH. DLL
    + 2006-10-26 19:13:44 629,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEEXCL. DLL
    + 2006-10-26 19:13:28 207,736 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACELTS.D LL
    + 2006-10-26 19:13:32 279,352 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODBC. DLL
    + 2006-10-26 19:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODDBS .DLL
    + 2006-10-26 19:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODEXL .DLL
    + 2006-10-26 19:13:08 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODPDX .DLL
    + 2006-10-26 19:13:12 15,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEODTXT .DLL
    + 2006-10-27 14:00:06 387,960 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEOLEDB .DLL
    + 2006-10-26 19:13:38 392,048 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEPDE.D LL
    + 2006-10-26 19:13:30 260,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACER2X.D LL
    + 2006-10-26 19:13:32 289,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACER3X.D LL
    + 2006-10-26 19:13:20 56,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACERCLR. DLL
    + 2006-10-26 19:13:38 551,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEREP.D LL
    + 2006-10-26 19:13:30 224,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACETXT.D LL
    + 2006-10-27 14:40:34 208,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEWSS.D LL
    + 2006-10-26 19:13:34 371,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACEXBE.D LL
    + 2006-10-27 14:41:04 399,640 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CDLMSO.D LL
    + 2006-10-26 18:59:24 205,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CLVIEW.E XE
    + 2006-10-26 20:30:42 65,312 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\COLLIMP. DLL
    + 2006-10-26 19:12:52 189,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CONTACTP ICKER.DLL
    + 2006-10-26 23:48:08 234,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DRAT.EXE
    + 2006-10-26 18:48:14 439,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DWDCW20. DLL
    + 2006-10-26 13:10:08 1,190,688 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FM20.DLL
    + 2006-10-26 13:04:58 75,576 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FORM.DLL
    + 2006-10-26 18:21:24 1,682,232 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FPSRVUTL .DLL
    + 2006-10-27 14:09:36 983,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FPWEC.DL L
    + 2006-10-26 19:02:12 2,526,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPH.EX E
    + 2006-10-27 14:37:44 338,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVE.E XE
    + 2006-10-27 14:38:02 6,191,400 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAC COUNTMGR.DLL
    + 2006-10-27 14:37:44 284,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAU DIO.DLL
    + 2006-10-26 23:47:54 65,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAU DITSERVICE.EXE
    + 2006-10-27 14:37:40 34,088 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEAU TOPROXY.DLL
    + 2006-10-27 14:37:44 300,336 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECA LENDARTOOL.DLL
    + 2006-10-26 23:47:44 33,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECL EAN.EXE
    + 2006-10-27 14:37:56 2,689,336 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECO MMONCOMPONENTS.DLL
    + 2006-10-27 14:38:00 3,508,544 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECO MMUNICATIONSSERVICES.DLL
    + 2006-10-27 14:37:40 117,584 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECO MMUNICATIONSSTATUSANDCONTROL.DLL
    + 2006-10-27 14:37:50 768,304 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECO MPONENTMGR.DLL
    + 2006-10-27 14:37:52 1,359,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVECR YPTO.DLL
    + 2006-10-26 23:48:24 377,136 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEDA TAVIEWERTOOL.DLL
    + 2006-10-27 14:37:58 3,071,288 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEDO CUMENTSHARETOOL.DLL
    + 2006-10-27 14:37:44 284,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEFE TCHSERVICES.DLL
    + 2006-10-26 23:48:00 197,920 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEGA MES.DLL
    + 2006-10-26 23:48:18 317,736 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMI GRATOR.EXE
    + 2006-10-26 23:48:40 1,555,232 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMI SC.DLL
    + 2006-10-26 23:47:42 31,016 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMO NITOR.EXE
    + 2006-10-26 23:47:40 22,808 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVENE W.DLL
    + 2006-10-26 23:48:02 224,048 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEPR OJECTTOOLSET.DLL
    + 2006-10-27 14:38:04 7,053,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVERE SOURCE.DLL
    + 2006-10-26 23:48:42 2,210,608 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESH ELLEXTENSIONS.DLL
    + 2006-10-26 23:48:18 363,304 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESK ETCHTOOL.DLL
    + 2006-10-26 23:47:40 16,688 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEST DURLLAUNCHER.EXE
    + 2006-10-27 14:37:56 2,738,472 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEST ORAGEMGR.DLL
    + 2006-10-27 14:37:38 35,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESY STEMMODE.DLL
    + 2006-10-26 23:48:02 222,512 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVESY STEMSERVICES.DLL
    + 2006-10-27 14:37:50 1,163,048 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVETE XTTOOLS.DLL
    + 2006-10-27 14:38:00 4,746,536 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVETR ANSCEIVER.DLL
    + 2006-10-27 14:37:54 1,396,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEUI FRAMEWORK.DLL
    + 2006-10-26 23:48:34 955,680 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEUT IL.DLL
    + 2006-10-27 14:37:40 268,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWE BBROWSERTOOL2.DLL
    + 2006-10-26 23:48:26 572,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWE BPLATFORMSERVICES.DLL
    + 2006-10-27 14:37:48 631,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEWE BSERVICES.DLL
    + 2006-10-26 19:12:52 173,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IEAWSDC. DLL
    + 2006-10-27 14:10:08 1,439,032 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\INFOPATH .EXE
    + 2006-10-27 14:10:10 5,456,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPDESIGN .DLL
    + 2006-10-27 14:10:10 5,281,592 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPEDITOR .DLL
    + 2006-10-26 20:42:00 176,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IPOLK.DL L
    + 2006-10-26 18:55:10 828,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MEDCAT.D LL
    + 2006-10-27 14:01:34 10,371,880 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSACCESS .EXE
    + 2006-10-26 20:18:06 66,880 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSAEXP30 .DLL
    + 2006-10-26 12:58:14 117,552 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSCONV97 .DLL
    + 2006-10-27 13:59:06 161,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOCF.DL L
    + 2006-10-26 18:48:12 14,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOCFU.D LL
    + 2006-10-26 19:12:58 428,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSODCW.D LL
    + 2006-10-26 20:13:36 26,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOEURO. DLL
    + 2006-10-26 19:00:08 6,635,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSORES.D LL
    + 2006-10-26 12:56:36 436,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSORUN.D LL
    + 2006-10-26 18:50:04 672,024 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSQRY32. EXE
    + 2006-10-26 12:56:40 505,136 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSOAP30 .DLL
    + 2006-10-26 18:55:12 832,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORDB. EXE
    + 2006-10-26 18:55:06 538,904 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORES. DLL
    + 2006-10-26 19:12:30 65,824 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NAME.DLL
    + 2006-10-27 14:14:34 14,151,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OART.DLL
    + 2006-10-26 19:06:54 232,816 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ODEPLOY. EXE
    + 2006-10-26 19:14:06 7,033,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFOWC.D LL
    + 2006-10-27 14:18:36 1,658,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGL.DLL
    + 2006-10-26 19:00:08 274,744 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OIS.EXE
    + 2006-10-26 19:00:12 998,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISAPP.D LL
    + 2006-10-26 19:00:10 285,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISGRAPH .DLL
    + 2006-10-26 19:32:42 604,000 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNIE .DLL
    + 2006-10-27 14:39:36 687,432 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONBTTNOL .DLL
    + 2006-10-27 14:03:04 1,018,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTE. EXE
    + 2006-10-26 19:24:54 98,632 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONENOTEM .EXE
    + 2006-10-26 19:24:50 72,504 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONFILTER .DLL
    + 2006-10-26 19:24:58 1,165,112 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONLIBS.D LL
    + 2006-10-27 14:03:06 6,579,512 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONMAIN.D LL
    + 2006-10-26 19:23:00 782,720 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONSYNCPC .DLL
    + 2006-10-26 19:07:04 6,536,992 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OSETUP.D LL
    + 2006-07-26 17:53:56 459,080 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLFLTR .DLL
    + 2006-10-26 20:30:44 482,088 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PORTCONN .DLL
    + 2006-10-27 14:04:06 465,200 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\POWERPNT .EXE
    + 2006-10-27 14:04:06 7,980,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPCORE.D LL
    + 2007-01-17 18:09:44 248,632 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPIA.D LL
    + 2006-10-26 18:52:10 2,012,480 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTVIEW. EXE
    + 2006-10-26 13:05:00 77,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PSOM.DLL
    + 2006-10-26 20:13:38 38,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFEDIT. DLL
    + 2006-10-26 20:42:12 744,808 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REGFORM. EXE
    + 2006-10-26 13:04:44 19,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REVERSE. DLL
    + 2006-10-26 19:13:00 503,624 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SELFCERT .EXE
    + 2006-10-26 19:06:58 439,600 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETUP.EX E
    + 2006-10-26 20:18:16 502,608 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SOA.DLL
    + 2006-07-28 14:21:58 277,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SSGEN.DL L
    + 2006-10-27 13:57:08 2,330,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\STSLIST. DLL
    + 2006-10-26 13:04:48 29,976 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\THOCRAPI .DLL
    + 2006-10-26 13:05:04 126,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTCHR .DLL
    + 2006-10-26 13:05:02 86,840 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWCUTLIN .DLL
    + 2006-10-26 13:04:56 58,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWLAY32. DLL
    + 2006-10-26 13:04:48 27,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWORIENT .DLL
    + 2006-10-26 13:04:54 51,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECE.D LL
    + 2006-10-26 13:04:44 19,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWRECS.D LL
    + 2006-10-26 13:04:58 76,624 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\TWSTRUCT .DLL
    + 2006-09-29 23:42:56 2,583,344 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBE6.DLL
    + 2006-10-26 21:58:38 3,732,792 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VVIEWER. DLL
    + 2007-01-17 18:09:44 781,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WORDPIA. DLL
    + 2006-10-26 13:05:08 1,181,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XIMAGE3B .DLL
    + 2006-10-26 13:05:08 530,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XPAGE3C. DLL
    + 2007-08-28 21:22:36 579,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACACEDAO .DLL
    + 2007-08-24 03:17:04 165,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACCWIZ.D LL
    + 2007-08-28 21:22:30 1,754,536 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACECORE. DLL
    + 2007-08-28 21:22:36 579,008 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEDAO.D LL
    + 2007-08-28 21:22:38 50,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEERR.D LL
    + 2007-08-28 21:22:40 193,992 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEES.DL L
    + 2007-08-24 01:46:10 341,440 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEEXCH. DLL
    + 2007-08-24 01:46:14 632,248 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEEXCL. DLL
    + 2007-08-24 01:46:16 210,368 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACELTS.D LL
    + 2007-08-24 01:46:18 281,992 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODBC. DLL
    + 2007-08-24 01:46:20 17,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODDBS .DLL
    + 2007-08-24 01:46:22 17,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODEXL .DLL
    + 2007-08-24 01:46:22 17,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODPDX .DLL
    + 2007-08-24 01:46:22 17,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEODTXT .DLL
    + 2007-08-28 21:22:44 390,600 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEOLEDB .DLL
    + 2007-08-24 01:46:28 394,688 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEPDE.D LL
    + 2007-08-24 01:46:30 263,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACER2X.D LL
    + 2007-08-24 01:46:32 292,288 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACER3X.D LL
    + 2007-08-24 01:46:34 58,760 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACERCLR. DLL
    + 2007-08-24 01:46:38 554,440 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEREP.D LL
    + 2007-08-24 01:46:40 226,744 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACETXT.D LL
    + 2007-08-28 22:52:12 201,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEWSS.D LL
    + 2007-08-24 01:46:44 374,200 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ACEXBE.D LL
    + 2007-08-28 22:53:12 402,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CDLMSO.D LL
    + 2007-08-24 01:45:50 208,256 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CLVIEW.E XE
    + 2007-08-24 03:38:36 67,952 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\COLLIMP. DLL
    + 2007-08-24 01:36:26 192,400 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\CONTACTP ICKER.DLL
    + 2007-08-24 04:58:50 237,424 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DRAT.EXE
    + 2007-08-24 01:18:14 442,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DWDCW20. DLL
    + 2007-08-24 01:18:18 437,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\DWTRIG20 .EXE
    + 2007-08-22 23:03:38 1,195,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FM20.DLL
    + 2007-08-22 23:19:06 78,728 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FORM.DLL
    + 2007-08-25 17:11:44 1,685,896 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FPSRVUTL .DLL
    + 2007-08-28 21:45:00 985,496 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\FPWEC.DL L
    + 2007-10-02 17:45:34 2,530,864 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GRAPH.EX E
    + 2007-08-28 22:23:36 340,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVE.E XE
    + 2007-08-28 22:23:52 6,192,504 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEAC COUNTMGR.DLL
    + 2007-08-28 22:24:06 286,064 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEAU DIO.DLL
    + 2007-08-24 04:59:20 68,464 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEAU DITSERVICE.EXE
    + 2007-08-28 22:24:08 36,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEAU TOPROXY.DLL
    + 2007-08-28 22:24:10 301,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECA LENDARTOOL.DLL
    + 2007-08-24 04:59:26 36,208 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECL EAN.EXE
    + 2007-08-28 22:24:24 2,690,944 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECO MMONCOMPONENTS.DLL
    + 2007-08-28 22:24:52 3,514,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECO MMUNICATIONSSERVICES.DLL
    + 2007-08-28 22:25:00 118,688 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECO MMUNICATIONSSTATUSANDCONTROL.DLL
    + 2007-08-28 22:25:02 769,400 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECO MPONENTMGR.DLL
    + 2007-08-28 22:25:10 1,362,288 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVECR YPTO.DLL
    + 2007-08-24 05:00:16 378,752 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEDA TAVIEWERTOOL.DLL
    + 2007-08-28 22:25:22 3,073,928 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEDO CUMENTSHARETOOL.DLL
    + 2007-08-28 22:25:32 287,104 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEFE TCHSERVICES.DLL
    + 2007-08-24 05:00:36 200,048 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEGA MES.DLL
    + 2007-08-24 05:00:40 320,376 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEMI GRATOR.EXE
    + 2007-08-24 05:00:46 1,562,472 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEMI SC.DLL
    + 2007-08-24 05:00:48 33,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEMO NITOR.EXE
    + 2007-08-24 05:00:50 25,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVENE W.DLL
    + 2007-08-24 05:00:52 225,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEPR OJECTTOOLSET.DLL
    + 2007-08-28 22:25:54 7,053,680 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVERE SOURCE.DLL
    + 2007-08-24 05:01:22 2,212,224 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVESH ELLEXTENSIONS.DLL
    + 2007-08-24 05:01:28 364,920 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVESK ETCHTOOL.DLL
    + 2007-08-24 05:01:30 19,328 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEST DURLLAUNCHER.EXE
    + 2007-08-28 22:26:12 2,740,600 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEST ORAGEMGR.DLL
    + 2007-08-28 22:26:18 36,216 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVESY STEMMODE.DLL
    + 2007-08-24 05:01:46 224,128 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVESY STEMSERVICES.DLL
    + 2007-08-28 22:26:22 1,165,176 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVETE XTTOOLS.DLL
    + 2007-08-28 22:26:34 4,747,128 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVETR ANSCEIVER.DLL
    + 2007-08-28 22:26:44 1,398,136 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEUI FRAMEWORK.DLL
    + 2007-08-24 05:02:24 959,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEUT IL.DLL
    + 2007-08-28 22:26:48 269,184 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEWE BBROWSERTOOL2.DLL
    + 2007-08-24 05:02:34 573,832 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEWE BPLATFORMSERVICES.DLL
    + 2007-08-28 22:26:54 632,696 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\GROOVEWE BSERVICES.DLL
    + 2007-08-24 01:36:58 175,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IEAWSDC. DLL
    + 2007-10-05 18:30:22 1,443,880 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\INFOPATH .EXE
    + 2007-10-05 18:30:40 5,460,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IPDESIGN .DLL
    + 2007-10-05 18:31:06 5,287,984 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IPEDITOR .DLL
    + 2007-08-24 03:43:06 179,616 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\IPOLK.DL L
    + 2007-08-28 22:45:54 831,856 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MEDCAT.D LL
    + 2007-08-28 21:13:52 10,367,352 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSACCESS .EXE
    + 2007-08-24 03:17:48 69,520 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSAEXP30 .DLL
    + 2007-08-28 22:52:02 120,704 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSCONV97 .DLL
    + 2007-09-14 19:45:58 16,901,168 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSO.DLL
    + 2007-08-28 21:20:06 163,712 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOCF.DL L
    + 2007-08-28 21:20:12 17,304 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOCFU.D LL
    + 2007-09-06 15:55:08 431,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSODCW.D LL
    + 2007-08-24 03:50:10 29,576 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSOEURO. DLL
    + 2007-08-27 18:20:14 6,637,960 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSORES.D LL
    + 2007-08-28 22:18:20 439,160 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSORUN.D LL
    + 2007-08-24 01:40:16 674,664 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSQRY32. EXE
    + 2007-08-22 23:12:20 507,768 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSSOAP30 .DLL
    + 2007-08-28 22:45:58 835,952 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSTORDB. EXE
    + 2007-08-28 22:46:06 542,568 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\MSTORES. DLL
    + 2007-08-24 01:37:50 68,464 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\NAME.DLL
    + 2007-10-05 18:44:24 14,168,600 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OART.DLL
    + 2007-10-02 17:51:22 8,436,776 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OARTCONV .DLL
    + 2007-09-01 23:55:16 235,456 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ODEPLOY. EXE
    + 2007-08-28 22:37:40 7,039,888 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OFFOWC.D LL
    + 2007-08-28 22:19:24 1,654,648 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OGL.DLL
    + 2007-08-24 02:06:28 277,384 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OIS.EXE
    + 2007-08-24 02:06:32 1,000,848 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OISAPP.D LL
    + 2007-08-24 02:06:38 288,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OISGRAPH .DLL
    + 2007-08-28 22:49:28 606,120 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONBTTNIE .DLL
    + 2007-08-28 22:49:34 667,544 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONBTTNOL .DLL
    + 2007-08-28 21:43:30 1,022,840 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONENOTE. EXE
    + 2007-08-24 02:45:42 101,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONENOTEM .EXE
    + 2007-08-24 02:45:42 75,144 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONFILTER .DLL
    + 2007-08-24 02:45:46 1,167,744 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONLIBS.D LL
    + 2007-10-12 19:08:52 6,588,968 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONMAIN.D LL
    + 2007-08-28 22:31:42 785,352 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\ONSYNCPC .DLL
    + 2007-09-01 23:55:54 6,540,656 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OSETUP.D LL
    + 2007-06-07 17:51:00 465,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\OUTLFLTR .DLL
    + 2007-09-06 15:50:34 485,232 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PORTCONN .DLL
    + 2007-08-28 22:38:22 2,016,656 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PPTVIEW. EXE
    + 2007-08-22 23:19:06 79,784 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\PSOM.DLL
    + 2007-08-24 03:50:10 41,832 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\REFEDIT. DLL
    + 2007-08-24 03:43:20 747,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\REGFORM. EXE
    + 2007-08-22 23:19:08 22,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\REVERSE. DLL
    + 2007-09-06 15:55:22 505,752 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SELFCERT .EXE
    + 2007-09-01 23:55:34 442,240 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SETUP.EX E
    + 2007-08-24 03:17:54 505,240 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SOA.DLL
    + 2007-06-07 17:51:00 125,320 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\SSGEN.DL L
    + 2007-08-28 21:28:26 2,330,024 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\STSLIST. DLL
    + 2007-08-22 23:19:08 32,608 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\THOCRAPI .DLL
    + 2007-08-22 23:19:08 129,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWCUTCHR .DLL
    + 2007-08-22 23:19:10 90,504 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWCUTLIN .DLL
    + 2007-08-22 23:19:10 60,800 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWLAY32. DLL
    + 2007-08-22 23:19:12 30,096 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWORIENT .DLL
    + 2007-08-22 23:19:14 54,152 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWRECE.D LL
    + 2007-08-22 23:19:14 22,416 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWRECS.D LL
    + 2007-08-22 23:19:16 79,776 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\TWSTRUCT .DLL
    + 2007-06-27 18:58:12 2,585,936 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\VBE6.DLL
    + 2007-08-24 05:10:28 3,735,424 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\VVIEWER. DLL
    + 2007-08-22 23:19:18 1,198,496 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XIMAGE3B .DLL
    + 2007-08-22 23:19:20 535,448 ----a-r c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6215\XPAGE3C. DLL
    + 2008-12-08 16:52:10 27,648 ----a-r c:\windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}\Icon048298C91.exe
    + 2008-10-01 20:18:29 102,400 ----a-r c:\windows\Installer\{41B9E2CF-0B3F-442A-B5B3-592A4A355634}\iTunesIco.exe
    + 2008-08-27 18:08:46 27,136 ----a-r c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
    + 2009-01-26 22:55:00 10,134 ----a-r c:\windows\Installer\{6C6E880E-FFD4-47C4-A5CE-DFE225662995}\ARPPRODUCTICON.exe
    + 2009-01-26 22:55:01 65,536 ----a-r c:\windows\Installer\{6C6E880E-FFD4-47C4-A5CE-DFE225662995}\NewShortcut1_87081C521AB9485382449D7 B131ECAFC.exe
    + 2009-01-26 22:55:01 65,536 ----a-r c:\windows\Installer\{6C6E880E-FFD4-47C4-A5CE-DFE225662995}\NewShortcut2_87081C521AB9485382449D7 B131ECAFC.exe
    + 2008-11-12 19:18:36 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    + 2008-10-01 20:16:34 86,016 ----a-r c:\windows\Installer\{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}\PrntWzrdIco.exe
    - 2008-07-19 03:42:22 1,165,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-03-11 02:01:19 1,165,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    - 2008-07-19 03:42:23 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-03-11 02:01:20 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    - 2008-07-19 03:42:22 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-03-11 02:01:19 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    - 2008-07-19 03:42:22 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-03-11 02:01:19 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    - 2008-07-19 03:42:23 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    + 2009-03-11 02:01:20 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    - 2008-07-19 03:42:23 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-03-11 02:01:20 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2008-07-19 03:42:23 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-03-11 02:01:20 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    - 2008-07-19 03:42:22 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-03-11 02:01:19 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    - 2008-07-19 03:42:23 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    + 2009-03-11 02:01:20 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    - 2008-07-19 03:42:23 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-03-11 02:01:20 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    - 2008-07-19 03:42:23 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-03-11 02:01:20 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    - 2008-07-19 03:42:22 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    + 2009-03-11 02:01:19 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    - 2007-01-17 18:16:00 217,864 ----a-r c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
    + 2008-10-29 20:02:31 217,864 ----a-r c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
    + 2008-08-14 15:42:54 29,926 ----a-r c:\windows\Installer\{A0C978B8-B82B-4FAD-8C31-EBEE8E57468A}\MsblIco.Exe
    - 2009-08-08 16:16:41 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe
    + 2009-01-05 19:55:03 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe
    - 2009-08-08 16:16:42 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat_3D.exe
    + 2009-01-05 19:55:05 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat_3D.exe
    - 2009-08-08 16:16:42 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat_Standard.exe
    + 2009-01-05 19:55:04 295,606 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat_Standard.exe
    - 2009-08-08 16:16:42 25,214 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Distiller.exe
    + 2009-01-05 19:55:04 25,214 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Distiller.exe
    - 2009-08-08 16:16:42 7,278 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_ELEMENTS_DT.exe
    + 2009-01-05 19:55:04 7,278 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_ELEMENTS_DT.exe
    - 2009-08-08 16:16:40 23,558 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\SC_Designer_PFM.70DBED24_B579_40CB_A B0B_F1221A3E9EC5.exe
    + 2009-01-05 19:55:03 23,558 ----a-r c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\SC_Designer_PFM.70DBED24_B579_40CB_A B0B_F1221A3E9EC5.exe
    + 2008-08-27 18:09:56 307,200 ----a-r c:\windows\Installer\{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}\SafariIco.exe
    + 2005-03-18 15:23:10 53,248 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayba ck.dll
    + 2005-03-18 15:23:10 12,800 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll
    + 2005-03-18 15:23:14 473,600 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll
    + 2004-09-29 11:38:58 2,676,224 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-03-18 15:23:10 145,920 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll
    + 2005-03-18 15:23:10 159,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll
    + 2005-03-18 15:23:14 364,544 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll
    + 2005-03-18 15:23:12 178,176 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll
    + 2005-03-18 15:23:14 223,232 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll
    + 2004-12-01 14:53:06 2,846,720 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-02-05 18:32:54 563,712 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-03-18 16:23:14 567,296 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-05-26 14:15:56 576,000 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-07-22 16:21:34 577,024 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-09-28 13:11:52 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
    + 2005-12-05 16:20:50 577,536 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
    + 2006-02-03 06:40:48 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
    + 2006-03-31 10:27:50 578,560 ----a-w c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
    - 2000-08-31 06:00:00 28,672 ----a-w c:\windows\Nircmd.exe
    + 2000-08-31 07:00:00 29,696 ----a-w c:\windows\Nircmd.exe
    - 2000-08-31 06:00:00 161,792 ----a-w c:\windows\swreg.exe
    + 2000-08-31 07:00:00 161,792 ----a-w c:\windows\swreg.exe
    - 2008-04-23 04:22:14 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2008-12-20 23:03:39 124,928 ----a-w c:\windows\system32\advpack.dll
    + 2006-03-06 09:41:02 73,728 ----a-w c:\windows\system32\AMV_DecDLL.dll
    - 2007-07-30 17:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
    + 2008-10-16 13:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
    - 2008-06-03 18:58:30 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\i ndex.dat
    + 2009-03-10 18:24:32 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\i ndex.dat
    - 2008-06-03 18:58:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    + 2009-03-10 18:24:32 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\index.dat
    - 2008-06-03 18:58:30 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2009-03-10 18:24:32 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2007-07-12 21:33:58 87,552 ----a-w c:\windows\system32\cpwmon2k.dll
    + 2007-03-12 15:42:30 1,123,696 ----a-w c:\windows\system32\D3DCompiler_33.dll
    + 2007-05-16 15:45:16 1,124,720 ----a-w c:\windows\system32\D3DCompiler_34.dll
    + 2007-07-19 17:14:42 1,358,192 ----a-w c:\windows\system32\D3DCompiler_35.dll
    + 2007-10-12 14:14:00 1,374,232 ----a-w c:\windows\system32\D3DCompiler_36.dll
    + 2008-03-05 14:56:58 1,420,824 ----a-w c:\windows\system32\D3DCompiler_37.dll
    + 2008-05-30 13:11:46 1,491,992 ----a-w c:\windows\system32\D3DCompiler_38.dll
    + 2007-03-15 15:57:58 443,752 ----a-w c:\windows\system32\d3dx10_33.dll
    + 2007-05-16 15:45:16 443,752 ----a-w c:\windows\system32\d3dx10_34.dll
    + 2007-07-19 17:14:42 444,776 ----a-w c:\windows\system32\d3dx10_35.dll
    + 2007-10-02 08:56:34 444,776 ----a-w c:\windows\system32\d3dx10_36.dll
    + 2008-02-05 22:07:36 462,864 ----a-w c:\windows\system32\d3dx10_37.dll
    + 2008-05-30 13:11:46 467,984 ----a-w c:\windows\system32\d3dx10_38.dll
    + 2005-02-05 18:45:26 2,222,800 ----a-w c:\windows\system32\d3dx9_24.dll
    + 2005-03-18 16:19:58 2,337,488 ----a-w c:\windows\system32\d3dx9_25.dll
    + 2005-05-26 14:34:52 2,297,552 ----a-w c:\windows\system32\d3dx9_26.dll
    + 2005-07-22 18:59:04 2,319,568 ----a-w c:\windows\system32\d3dx9_27.dll
    + 2005-12-05 17:09:18 2,323,664 ----a-w c:\windows\system32\d3dx9_28.dll
    + 2006-02-03 07:43:16 2,332,368 ----a-w c:\windows\system32\d3dx9_29.dll
    + 2006-03-31 11:40:58 2,388,176 ----a-w c:\windows\system32\d3dx9_30.dll
    + 2006-09-28 15:05:20 2,414,360 ----a-w c:\windows\system32\d3dx9_31.dll
    + 2006-11-29 12:06:18 3,426,072 ----a-w c:\windows\system32\d3dx9_32.dll
    + 2007-03-12 15:42:30 3,495,784 ----a-w c:\windows\system32\d3dx9_33.dll
    + 2007-05-16 15:45:16 3,497,832 ----a-w c:\windows\system32\d3dx9_34.dll
    + 2007-07-19 17:14:42 3,727,720 ----a-w c:\windows\system32\d3dx9_35.dll
    + 2007-10-12 14:14:00 3,734,536 ----a-w c:\windows\system32\d3dx9_36.dll
    + 2008-03-05 14:56:58 3,786,760 ----a-w c:\windows\system32\D3DX9_37.dll
    + 2008-05-30 13:11:46 3,850,760 ----a-w c:\windows\system32\D3DX9_38.dll
    - 2008-04-23 04:22:14 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
    + 2008-12-20 23:03:39 124,928 -c--a-w c:\windows\system32\dllcache\advpack.dll
    - 2008-06-20 10:44:38 138,368 -c--a-w c:\windows\system32\dllcache\afd.sys
    + 2008-08-14 09:51:43 138,368 -c--a-w c:\windows\system32\dllcache\afd.sys
    - 2007-07-30 17:19:20 92,504 -c--a-w c:\windows\system32\dllcache\cdm.dll
    + 2008-10-16 13:09:44 92,696 -c--a-w c:\windows\system32\dllcache\cdm.dll
    - 2008-04-23 04:22:14 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
    + 2008-12-20 23:03:39 347,136 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
    - 2008-04-23 04:22:14 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
    + 2008-12-20 23:03:40 214,528 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
    - 2005-07-26 04:42:48 243,200 -c--a-w c:\windows\system32\dllcache\es.dll
    + 2008-07-07 20:32:55 253,952 -c--a-w c:\windows\system32\dllcache\es.dll
    - 2008-04-23 04:22:14 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
    + 2008-12-20 23:03:40 133,120 -c--a-w c:\windows\system32\dllcache\extmgr.dll
    - 2008-02-20 06:51:59 282,624 -c--a-w c:\windows\system32\dllcache\gdi32.dll
    + 2008-10-23 13:02:04 283,648 -c--a-w c:\windows\system32\dllcache\gdi32.dll
    - 2008-04-23 04:22:14 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
    + 2008-12-20 23:03:40 63,488 -c----w c:\windows\system32\dllcache\icardie.dll
    - 2008-04-22 07:42:24 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
    + 2008-12-19 09:13:43 70,656 -c--a-w c:\windows\system32\dllcache\ie4uinit.exe
    - 2008-04-23 04:22:14 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
    + 2008-12-20 23:03:40 153,088 -c--a-w c:\windows\system32\dllcache\ieakeng.dll
    - 2008-04-23 04:22:14 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
    + 2008-12-20 23:03:40 230,400 -c--a-w c:\windows\system32\dllcache\ieaksie.dll
    - 2008-04-20 05:07:51 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
    + 2008-12-19 05:23:56 161,792 -c--a-w c:\windows\system32\dllcache\ieakui.dll
    - 2008-04-23 04:22:14 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
    + 2008-12-20 23:03:41 383,488 -c----w c:\windows\system32\dllcache\ieapfltr.dll
    - 2008-04-23 04:22:14 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
    + 2008-12-20 23:03:41 384,512 -c--a-w c:\windows\system32\dllcache\iedkcs32.dll
    - 2008-04-23 04:22:14 6,066,176 -c----w c:\windows\system32\dllcache\ieframe.dll
    + 2008-12-20 23:03:45 6,066,688 -c----w c:\windows\system32\dllcache\ieframe.dll
    - 2008-04-23 04:22:14 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
    + 2008-12-20 23:03:45 44,544 -c--a-w c:\windows\system32\dllcache\iernonce.dll
    - 2008-04-23 04:22:14 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
    + 2008-12-20 23:03:46 267,776 -c----w c:\windows\system32\dllcache\iertutil.dll
    - 2008-04-22 07:39:58 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
    + 2008-12-19 09:10:15 13,824 -c----w c:\windows\system32\dllcache\ieudinit.exe
    - 2008-04-22 07:42:38 625,664 -c--a-w c:\windows\system32\dllcache\iexplore.exe
    + 2008-12-19 05:25:25 634,024 -c--a-w c:\windows\system32\dllcache\iexplore.exe
    - 2007-08-21 06:18:26 683,520 -c--a-w c:\windows\system32\dllcache\inetcomm.dll
    + 2008-04-11 18:51:56 683,520 -c--a-w c:\windows\system32\dllcache\inetcomm.dll
    - 2008-04-23 04:22:15 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
    + 2008-12-20 23:03:47 27,648 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
    - 2006-10-18 18:03:58 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
    + 2008-06-18 00:09:22 100,864 -c--a-w c:\windows\system32\dllcache\logagent.exe
    - 2006-05-05 09:41:45 453,120 -c----w c:\windows\system32\dllcache\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 -c----w c:\windows\system32\dllcache\mrxsmb.sys
    - 2004-08-04 12:00:00 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
    + 2008-05-01 14:33:36 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
    - 2005-06-29 01:53:10 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll
    + 2008-06-24 16:24:49 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll
    - 2008-04-23 04:22:15 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
    + 2008-12-20 23:03:48 459,264 -c----w c:\windows\system32\dllcache\msfeeds.dll
    - 2008-04-23 04:22:15 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
    + 2008-12-20 23:03:48 52,224 -c----w c:\windows\system32\dllcache\msfeedsbs.dll
    - 2008-04-23 20:22:16 3,591,680 -c--a-w c:\windows\system32\dllcache\mshtml.dll
    + 2009-01-16 20:31:16 3,594,752 -c--a-w c:\windows\system32\dllcache\mshtml.dll
    - 2008-04-23 04:22:15 478,208 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
    + 2008-12-20 23:03:51 477,696 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
    - 2008-04-23 04:22:15 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
    + 2008-12-20 23:03:51 193,024 -c--a-w c:\windows\system32\dllcache\msrating.dll
    - 2008-04-23 04:22:15 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
    + 2008-12-20 23:03:51 671,232 -c--a-w c:\windows\system32\dllcache\mstime.dll
    - 2007-06-26 06:10:37 1,104,896 -c--a-w c:\windows\system32\dllcache\msxml3.dll
    + 2008-09-04 16:46:31 1,106,944 -c--a-w c:\windows\system32\dllcache\msxml3.dll
    - 2006-08-17 12:30:16 332,288 -c--a-w c:\windows\system32\dllcache\netapi32.dll
    + 2008-10-15 17:01:37 332,800 -c--a-w c:\windows\system32\dllcache\netapi32.dll
    - 2007-02-28 16:05:05 2,140,672 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2008-08-14 13:47:57 2,140,672 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
    - 2007-02-28 16:05:16 2,061,952 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-08-14 13:48:03 2,062,080 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe
    - 2007-02-28 16:05:04 2,020,352 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-08-14 13:47:56 2,020,352 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
    - 2007-02-28 16:05:16 2,184,704 -c--a-w c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-08-14 13:48:00 2,184,704 -c--a-w c:\windows\system32\dllcache\ntoskrnl.exe
    - 2008-04-23 04:22:15 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
    + 2008-12-20 23:03:51 102,912 -c--a-w c:\windows\system32\dllcache\occache.dll
    - 2008-04-23 04:22:15 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
    + 2008-12-20 23:03:51 44,544 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
    - 2007-04-25 14:22:52 144,896 -c--a-w c:\windows\system32\dllcache\schannel.dll
    + 2008-12-05 07:14:22 144,896 -c--a-w c:\windows\system32\dllcache\schannel.dll
    - 2007-10-25 16:44:49 8,507,392 -c--a-w c:\windows\system32\dllcache\shell32.dll
    + 2008-07-03 13:11:16 8,507,904 -c--a-w c:\windows\system32\dllcache\shell32.dll
    - 2006-08-14 10:34:41 332,928 -c--a-w c:\windows\system32\dllcache\srv.sys
    + 2008-12-11 11:57:21 333,184 -c--a-w c:\windows\system32\dllcache\srv.sys
    - 2006-08-24 12:19:52 246,814 -c--a-w c:\windows\system32\dllcache\strmdll.dll
    + 2008-10-03 10:17:56 247,326 -c--a-w c:\windows\system32\dllcache\strmdll.dll
    - 2008-04-23 04:22:15 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
    + 2008-12-20 23:03:52 105,984 -c--a-w c:\windows\system32\dllcache\url.dll
    - 2008-04-23 04:22:15 1,159,680 -c--a-w c:\windows\system32\dllcache\urlmon.dll
    + 2008-12-20 23:03:52 1,160,192 -c--a-w c:\windows\system32\dllcache\urlmon.dll
    - 2008-04-23 04:22:15 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
    + 2008-12-20 23:03:52 233,472 -c--a-w c:\windows\system32\dllcache\webcheck.dll
    - 2008-03-20 08:10:47 1,845,376 -c--a-w c:\windows\system32\dllcache\win32k.sys
    + 2009-02-09 14:19:36 1,846,400 -c--a-w c:\windows\system32\dllcache\win32k.sys
    - 2008-04-23 04:22:15 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
    + 2008-12-20 23:03:53 826,368 -c--a-w c:\windows\system32\dllcache\wininet.dll
    - 2006-10-18 19:47:20 937,984 -c--a-w c:\windows\system32\dllcache\WMNetMgr.dll
    + 2008-06-18 04:03:08 938,496 -c--a-w c:\windows\system32\dllcache\WMNetmgr.dll
    - 2007-06-11 21:51:12 10,834,944 -c--a-w c:\windows\system32\dllcache\wmp.dll
    + 2008-11-11 17:34:42 10,838,016 -c--a-w c:\windows\system32\dllcache\wmp.dll
    - 2006-10-18 19:47:22 2,450,944 -c--a-w c:\windows\system32\dllcache\wmvcore.dll
    + 2008-06-18 04:03:14 2,458,112 -c--a-w c:\windows\system32\dllcache\WMVCore.dll
    - 2007-07-30 17:19:36 549,720 -c--a-w c:\windows\system32\dllcache\wuapi.dll
    + 2008-10-16 13:12:20 561,688 -c--a-w c:\windows\system32\dllcache\wuapi.dll
    - 2007-07-30 17:19:16 53,080 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
    + 2008-10-16 13:09:44 51,224 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
    - 2007-07-30 17:19:42 1,712,984 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
    + 2008-10-16 13:13:40 1,809,944 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
    - 2007-07-30 17:19:32 325,976 -c--a-w c:\windows\system32\dllcache\wucltui.dll
    + 2008-10-16 13:12:22 323,608 -c--a-w c:\windows\system32\dllcache\wucltui.dll
    - 2007-07-30 17:18:40 33,624 -c--a-w c:\windows\system32\dllcache\wups.dll
    + 2008-10-16 13:08:58 34,328 -c--a-w c:\windows\system32\dllcache\wups.dll
    - 2007-07-30 17:19:28 203,096 -c--a-w c:\windows\system32\dllcache\wuweb.dll
    + 2008-10-16 13:13:40 202,776 -c--a-w c:\windows\system32\dllcache\wuweb.dll
    - 2006-02-28 10:41:34 61,440 ----a-w c:\windows\system32\dns-sd.exe
    + 2008-08-29 08:18:58 87,336 ----a-w c:\windows\system32\dns-sd.exe
    - 2006-02-28 10:41:22 53,248 ----a-w c:\windows\system32\dnssd.dll
    + 2008-08-29 07:53:50 61,440 ----a-w c:\windows\system32\dnssd.dll
    + 2004-09-16 12:26:40 12,634 ----a-w c:\windows\system32\drivers\ADFUUD.SYS
    - 2008-06-20 10:44:38 138,368 ----a-w c:\windows\system32\drivers\afd.sys
    + 2008-08-14 09:51:43 138,368 ----a-w c:\windows\system32\drivers\afd.sys
    + 2002-07-17 07:05:10 16,512 ----a-w c:\windows\system32\drivers\ASPI32.SYS
    - 2008-06-27 13:03:55 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
    + 2008-11-25 18:59:51 75,072 ----a-w c:\windows\system32\drivers\avipbb.sys
    - 2006-09-19 13:44:04 15,664 ----a-w c:\windows\system32\drivers\GEARAspiWDM.sys
    + 2008-04-17 11:12:54 15,464 ----a-w c:\windows\system32\drivers\GEARAspiWDM.sys
    - 2006-05-05 09:41:45 453,120 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    + 2008-10-24 11:10:42 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    - 2006-08-14 10:34:41 332,928 ----a-w c:\windows\system32\drivers\srv.sys
    + 2008-12-11 11:57:21 333,184 ----a-w c:\windows\system32\drivers\srv.sys
    - 2007-10-31 13:09:14 30,464 ----a-w c:\windows\system32\drivers\usbaapl.sys
    + 2008-07-22 18:32:44 32,000 ----a-w c:\windows\system32\drivers\usbaapl.sys
    + 2007-11-01 16:53:20 42,880 ----a-w c:\windows\system32\drivers\vacs2xkd.sys
    + 2008-04-17 11:12:54 107,368 -c--a-w c:\windows\system32\DRVSTORE\GEARAspiWD_D213663B63 81F01E45A131159A9DEFE018321CB3\x86\GEARAspi.dll
    + 2008-04-17 11:12:54 15,464 -c--a-w c:\windows\system32\DRVSTORE\GEARAspiWD_D213663B63 81F01E45A131159A9DEFE018321CB3\x86\GEARAspiWDM.sys
    + 2008-07-22 18:32:44 32,000 -c--a-w c:\windows\system32\DRVSTORE\usbaapl_97B931EF204A3 188AFFD15A9A5337268E8B6F312\usbaapl.sys
    - 2008-04-23 04:22:14 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    + 2008-12-20 23:03:39 347,136 ----a-w c:\windows\system32\dxtmsft.dll
    - 2008-04-23 04:22:14 214,528 ----a-w c:\windows\system32\dxtrans.dll
    + 2008-12-20 23:03:40 214,528 ----a-w c:\windows\system32\dxtrans.dll
    - 2005-07-26 04:42:48 243,200 ----a-w c:\windows\system32\es.dll
    + 2008-07-07 20:32:55 253,952 ----a-w c:\windows\system32\es.dll
    - 2008-04-23 04:22:14 133,120 ----a-w c:\windows\system32\extmgr.dll
    + 2008-12-20 23:03:40 133,120 ----a-w c:\windows\system32\extmgr.dll
    - 2006-10-26 13:10:08 1,190,688 ----a-w c:\windows\system32\FM20.DLL
    + 2007-08-22 23:03:38 1,195,888 ----a-w c:\windows\system32\FM20.DLL
    - 2008-05-07 05:29:43 1,610,592 ----a-w c:\windows\system32\FNTCACHE.DAT
    + 2009-03-13 10:48:13 1,618,280 ----a-w c:\windows\system32\FNTCACHE.DAT
    - 2008-02-20 06:51:59 282,624 ----a-w c:\windows\system32\gdi32.dll
    + 2008-10-23 13:02:04 283,648 ----a-w c:\windows\system32\gdi32.dll
    - 2006-10-03 18:47:52 109,360 ----a-w c:\windows\system32\GEARAspi.dll
    + 2008-04-17 11:12:54 107,368 ----a-w c:\windows\system32\GEARAspi.dll
    - 2008-04-23 04:22:14 63,488 ----a-w c:\windows\system32\icardie.dll
    + 2008-12-20 23:03:40 63,488 ----a-w c:\windows\system32\icardie.dll
    - 2008-04-22 07:42:24 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    + 2008-12-19 09:13:43 70,656 ----a-w c:\windows\system32\ie4uinit.exe
    - 2008-04-23 04:22:14 153,088 ----a-w c:\windows\system32\ieakeng.dll
    + 2008-12-20 23:03:40 153,088 ----a-w c:\windows\system32\ieakeng.dll
    - 2008-04-23 04:22:14 230,400 ----a-w c:\windows\system32\ieaksie.dll
    + 2008-12-20 23:03:40 230,400 ----a-w c:\windows\system32\ieaksie.dll
    - 2008-04-20 05:07:51 161,792 ----a-w c:\windows\system32\ieakui.dll
    + 2008-12-19 05:23:56 161,792 ----a-w c:\windows\system32\ieakui.dll
    - 2008-04-23 04:22:14 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    + 2008-12-20 23:03:41 383,488 ----a-w c:\windows\system32\ieapfltr.dll
    - 2008-04-23 04:22:14 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    + 2008-12-20 23:03:41 384,512 ----a-w c:\windows\system32\iedkcs32.dll
    - 2008-04-23 04:22:14 6,066,176 ----a-w c:\windows\system32\ieframe.dll
    + 2008-12-20 23:03:45 6,066,688 ----a-w c:\windows\system32\ieframe.dll
    - 2008-04-23 04:22:14 44,544 ----a-w c:\windows\system32\iernonce.dll
    + 2008-12-20 23:03:45 44,544 ----a-w c:\windows\system32\iernonce.dll
    - 2008-04-23 04:22:14 267,776 ----a-w c:\windows\system32\iertutil.dll
    + 2008-12-20 23:03:46 267,776 ----a-w c:\windows\system32\iertutil.dll
    - 2008-04-22 07:39:58 13,824 ----a-w c:\windows\system32\ieudinit.exe
    + 2008-12-19 09:10:15 13,824 ----a-w c:\windows\system32\ieudinit.exe
    - 2007-08-21 06:18:26 683,520 ----a-w c:\windows\system32\inetcomm.dll
    + 2008-04-11 18:51:56 683,520 ----a-w c:\windows\system32\inetcomm.dll
    - 2007-01-04 19:28:22 49,245 ----a-w c:\windows\system32\java.exe
    + 2009-03-05 16:07:45 144,792 ----a-w c:\windows\system32\java.exe
    - 2007-01-04 19:28:22 49,247 ----a-w c:\windows\system32\javaw.exe
    + 2009-03-05 16:07:45 144,792 ----a-w c:\windows\system32\javaw.exe
    - 2007-01-04 19:28:22 127,075 ----a-w c:\windows\system32\javaws.exe
    + 2009-03-05 16:07:46 148,888 ----a-w c:\windows\system32\javaws.exe
    + 2000-04-26 12:34:56 39,424 ----a-w c:\windows\system32\JETCOMP.exe
    - 2008-04-23 04:22:15 27,648 ----a-w c:\windows\system32\jsproxy.dll
    + 2008-12-20 23:03:47 27,648 ----a-w c:\windows\system32\jsproxy.dll
    - 2008-08-02 13:18:53 3,350 --sha-w c:\windows\system32\KGyGaAvL.sys
    + 2009-01-10 16:28:24 3,350 --sha-w c:\windows\system32\KGyGaAvL.sys
    + 2008-03-20 17:06:36 1,480,232 ------w c:\windows\system32\LegitCheckControl.dll
    - 2006-10-18 18:03:58 100,864 ----a-w c:\windows\system32\logagent.exe
    + 2008-06-18 00:09:22 100,864 ----a-w c:\windows\system32\logagent.exe
    + 2008-10-26 15:06:04 53,248 ----a-w c:\windows\system32\Macromed\Shockwave 8\PostUpdate.exe
    + 2007-05-11 20:37:02 614,400 ----a-w c:\windows\system32\MailBee.dll
    - 2008-06-25 16:15:46 17,972,344 ----a-w c:\windows\system32\MRT.exe
    + 2009-02-25 11:55:00 24,768,960 ----a-w c:\windows\system32\MRT.exe
    - 2005-06-29 01:53:10 74,240 ----a-w c:\windows\system32\mscms.dll
    + 2008-06-24 16:24:49 74,240 ----a-w c:\windows\system32\mscms.dll
    + 2000-04-26 12:34:44 344,064 ----a-w c:\windows\system32\msexch35.dll
    + 2000-04-26 12:34:46 252,688 ----a-w c:\windows\system32\msexcl35.dll
    - 2008-04-23 04:22:15 459,264 ----a-w c:\windows\system32\msfeeds.dll
    + 2008-12-20 23:03:48 459,264 ----a-w c:\windows\system32\msfeeds.dll
    - 2008-04-23 04:22:15 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    + 2008-12-20 23:03:48 52,224 ----a-w c:\windows\system32\msfeedsbs.dll
    - 2008-04-23 20:22:16 3,591,680 ----a-w c:\windows\system32\mshtml.dll
    + 2009-01-16 20:31:16 3,594,752 ----a-w c:\windows\system32\mshtml.dll
    - 2008-04-23 04:22:15 478,208 ----a-w c:\windows\system32\mshtmled.dll
    + 2008-12-20 23:03:51 477,696 ----a-w c:\windows\system32\mshtmled.dll
    + 2000-04-26 12:34:48 1,050,896 ----a-w c:\windows\system32\msjet35.dll
    + 2000-04-26 12:35:02 139,264 ----a-w c:\windows\system32\msjint35.dll
    + 2000-04-26 12:34:48 1,238,288 ----a-w c:\windows\system32\msjt4jlt.dll
    + 2000-04-26 12:34:56 24,848 ----a-w c:\windows\system32\msjter35.dll
    + 2000-04-26 12:34:50 168,720 ----a-w c:\windows\system32\msltus35.dll
    + 2000-04-26 12:34:50 250,128 ----a-w c:\windows\system32\mspdox35.dll
    - 2008-04-23 04:22:15 193,024 ----a-w c:\windows\system32\msrating.dll
    + 2008-12-20 23:03:51 193,024 ----a-w c:\windows\system32\msrating.dll
    + 2000-04-26 12:34:50 262,144 ----a-w c:\windows\system32\msrd2x35.dll
    + 2000-04-26 12:34:56 415,504 ----a-w c:\windows\system32\msrepl35.dll
    + 2000-04-26 12:34:58 44,304 ----a-w c:\windows\system32\msrpfs35.dll
    + 2000-04-26 12:34:52 166,672 ----a-w c:\windows\system32\mstext35.dll
    - 2008-04-23 04:22:15 671,232 ----a-w c:\windows\system32\mstime.dll
    + 2008-12-20 23:03:51 671,232 ----a-w c:\windows\system32\mstime.dll
    + 2002-01-05 17:16:10 536,576 ----a-w c:\windows\system32\msvcr70d.dll
    + 2000-04-26 12:34:52 294,912 ----a-w c:\windows\system32\msxbse35.dll
    - 2007-06-26 06:10:37 1,104,896 ----a-w c:\windows\system32\msxml3.dll
    + 2008-09-04 16:46:31 1,106,944 ----a-w c:\windows\system32\msxml3.dll
    - 2007-05-08 13:03:04 1,275,392 ----a-w c:\windows\system32\msxml4.dll
    + 2008-09-30 15:43:34 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    - 2007-07-30 17:19:10 271,224 ----a-w c:\windows\system32\mucltui.dll
    + 2008-10-16 13:06:48 268,648 ----a-w c:\windows\system32\mucltui.dll
    - 2007-07-30 17:19:04 207,736 ----a-w c:\windows\system32\muweb.dll
    + 2008-10-16 13:06:48 208,744 ----a-w c:\windows\system32\muweb.dll
    - 2006-08-17 12:30:16 332,288 ----a-w c:\windows\system32\netapi32.dll
    + 2008-10-15 17:01:37 332,800 ----a-w c:\windows\system32\netapi32.dll
    + 2004-11-18 09:16:42 69,632 ----a-w c:\windows\system32\nktwab.dll
    - 2007-02-28 16:05:16 2,061,952 ----a-w c:\windows\system32\ntkrnlpa.exe
    + 2008-08-14 13:48:03 2,062,080 ----a-w c:\windows\system32\ntkrnlpa.exe
    - 2007-02-28 16:05:16 2,184,704 ----a-w c:\windows\system32\ntoskrnl.exe
    + 2008-08-14 13:48:00 2,184,704 ----a-w c:\windows\system32\ntoskrnl.exe
    - 2008-04-23 04:22:15 102,912 ----a-w c:\windows\system32\occache.dll
    + 2008-12-20 23:03:51 102,912 ----a-w c:\windows\system32\occache.dll
    - 2008-04-12 11:00:55 64,508 ----a-w c:\windows\system32\perfc009.dat
    + 2008-10-29 19:02:33 64,508 ----a-w c:\windows\system32\perfc009.dat
    - 2008-04-12 11:00:55 84,274 ----a-w c:\windows\system32\perfc013.dat
    + 2008-10-29 19:02:33 84,274 ----a-w c:\windows\system32\perfc013.dat
    - 2008-04-12 11:00:55 409,368 ----a-w c:\windows\system32\perfh009.dat
    + 2008-10-29 19:02:33 409,368 ----a-w c:\windows\system32\perfh009.dat
    - 2008-04-12 11:00:55 475,066 ----a-w c:\windows\system32\perfh013.dat
    + 2008-10-29 19:02:33 475,066 ----a-w c:\windows\system32\perfh013.dat
    - 2008-04-23 04:22:15 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-12-20 23:03:51 44,544 ----a-w c:\windows\system32\pngfilt.dll
    + 2008-07-22 18:32:44 32,000 ----a-w c:\windows\system32\ReinstallBackups\0012\DriverFiles\usbaapl.sys
    - 2007-04-25 14:22:52 144,896 ----a-w c:\windows\system32\schannel.dll
    + 2008-12-05 07:14:22 144,896 ----a-w c:\windows\system32\schannel.dll
    - 1998-03-25 04:54:08 15,872 ----a-w c:\windows\system32\SCP32.DLL
    + 2006-07-24 09:50:40 39,728 ----a-w c:\windows\system32\SCP32.DLL
    - 2007-10-25 16:44:49 8,507,392 ----a-w c:\windows\system32\shell32.dll
    + 2008-07-03 13:11:16 8,507,904 ----a-w c:\windows\system32\shell32.dll
    + 2008-07-09 10:58:44 301,056 ----a-w c:\windows\system32\ShellExt\GMailFS.dll
    + 2007-10-18 09:31:46 51,224 ----a-w c:\windows\system32\sirenacm.dll
    + 2008-07-18 20:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups.dll\7.2.6001.784\wups.dll
    + 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups.dll\7.2.6001.788\wups.dll
    + 2008-07-18 20:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups2.dll\7.2.6001.784\wups2.dll
    + 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\Ser viceStartup\wups2.dll\7.2.6001.788\wups2.dll
    - 2007-11-30 12:39:46 18,808 ------w c:\windows\system32\spmsg.dll
    + 2007-11-30 11:19:43 18,808 ------w c:\windows\system32\spmsg.dll
    - 2006-09-25 15:58:48 23,856 ----a-w c:\windows\system32\spupdsvc.exe
    + 2007-07-27 08:41:38 26,488 ----a-w c:\windows\system32\spupdsvc.exe
    + 2003-01-26 12:41:24 40,960 ----a-w c:\windows\system32\SSubTmr6.dll
    - 2006-08-24 12:19:52 246,814 ----a-w c:\windows\system32\strmdll.dll
    + 2008-10-03 10:17:56 247,326 ----a-w c:\windows\system32\strmdll.dll
    - 2007-11-13 11:31:11 60,416 ------w c:\windows\system32\tzchange.exe
    + 2008-10-22 09:47:07 62,976 ------w c:\windows\system32\tzchange.exe
    + 2008-09-23 15:46:32 245,408 ----a-w c:\windows\system32\unicows.dll
    - 2008-04-23 04:22:15 105,984 ----a-w c:\windows\system32\url.dll
    + 2008-12-20 23:03:52 105,984 ----a-w c:\windows\system32\url.dll
    - 2008-04-23 04:22:15 1,159,680 ----a-w c:\windows\system32\urlmon.dll
    + 2008-12-20 23:03:52 1,160,192 ----a-w c:\windows\system32\urlmon.dll
    + 1998-06-17 23:00:00 89,360 ----a-w c:\windows\system32\VB5DB.DLL
    + 2000-04-26 12:34:58 368,912 ----a-w c:\windows\system32\VBAR332.DLL
    + 2003-10-19 13:51:16 299,008 ----a-w c:\windows\system32\vbwFunctionsVB6.dll
    - 2008-04-23 04:22:15 233,472 ----a-w c:\windows\system32\webcheck.dll
    + 2008-12-20 23:03:52 233,472 ----a-w c:\windows\system32\webcheck.dll
    - 2008-03-20 08:10:47 1,845,376 ----a-w c:\windows\system32\win32k.sys
    + 2009-02-09 14:19:36 1,846,400 ----a-w c:\windows\system32\win32k.sys
    - 2008-04-23 04:22:15 826,368 ----a-w c:\windows\system32\wininet.dll
    + 2008-12-20 23:03:53 826,368 ----a-w c:\windows\system32\wininet.dll
    - 2006-10-18 19:47:20 937,984 ----a-w c:\windows\system32\wmnetmgr.dll
    + 2008-06-18 04:03:08 938,496 ----a-w c:\windows\system32\WMNetmgr.dll
    - 2007-06-11 21:51:12 10,834,944 ----a-w c:\windows\system32\wmp.dll
    + 2008-11-11 17:34:42 10,838,016 ----a-w c:\windows\system32\wmp.dll
    - 2006-10-18 19:47:20 295,936 ------w c:\windows\system32\wmpeffects.dll
    + 2008-06-24 16:12:58 295,936 ----a-w c:\windows\system32\wmpeffects.dll
    - 2006-10-18 19:47:22 2,450,944 ----a-w c:\windows\system32\wmvcore.dll
    + 2008-06-18 04:03:14 2,458,112 ----a-w c:\windows\system32\WMVCore.dll
    + 2001-03-17 20:34:12 22,528 ----a-w c:\windows\system32\WNASPI32.DLL
    + 2007-02-11 22:24:06 733,464 ----a-w c:\windows\system32\wodPop3.dll
    + 2007-02-11 22:15:44 753,944 ----a-w c:\windows\system32\wodSmtp.dll
    - 2007-07-30 17:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
    + 2008-10-16 13:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll
    - 2007-07-30 17:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
    + 2008-10-16 13:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe
    - 2007-07-30 17:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
    + 2008-10-16 13:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    - 2007-07-30 17:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll
    + 2008-10-16 13:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll
    - 2007-07-30 17:18:40 33,624 ----a-w c:\windows\system32\wups.dll
    + 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\wups.dll
    - 2007-07-30 17:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
    + 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\wups2.dll
    - 2007-07-30 17:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll
    + 2008-10-16 13:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll
    + 2006-02-03 07:41:26 14,032 ----a-w c:\windows\system32\x3daudio1_0.dll
    + 2007-03-05 11:42:18 15,128 ----a-w c:\windows\system32\x3daudio1_1.dll
    + 2007-10-22 02:37:16 17,928 ----a-w c:\windows\system32\X3DAudio1_2.dll
    + 2008-03-05 15:00:06 25,608 ----a-w c:\windows\system32\X3DAudio1_3.dll
    + 2008-05-30 13:17:00 25,608 ----a-w c:\windows\system32\X3DAudio1_4.dll
    + 2006-02-03 07:42:06 230,096 ----a-w c:\windows\system32\xactengine2_0.dll
    + 2006-03-31 11:39:48 229,584 ----a-w c:\windows\system32\xactengine2_1.dll
    + 2007-10-22 02:39:54 267,272 ----a-w c:\windows\system32\xactengine2_10.dll
    + 2006-05-31 06:24:16 230,168 ----a-w c:\windows\system32\xactengine2_2.dll
    + 2006-07-28 08:30:32 236,824 ----a-w c:\windows\system32\xactengine2_3.dll
    + 2006-09-28 15:05:56 237,848 ----a-w c:\windows\system32\xactengine2_4.dll
    + 2006-12-08 11:02:00 251,672 ----a-w c:\windows\system32\xactengine2_5.dll
    + 2007-01-24 14:27:30 255,848 ----a-w c:\windows\system32\xactengine2_6.dll
    + 2007-04-04 17:55:00 261,480 ----a-w c:\windows\system32\xactengine2_7.dll
    + 2007-06-20 19:46:04 266,088 ----a-w c:\windows\system32\xactengine2_8.dll
    + 2007-07-19 23:57:12 267,112 ----a-w c:\windows\system32\xactengine2_9.dll
    + 2008-03-05 15:03:20 238,088 ----a-w c:\windows\system32\xactengine3_0.dll
    + 2008-05-30 13:18:52 238,088 ----a-w c:\windows\system32\xactengine3_1.dll
    + 2008-05-30 13:17:30 65,032 ----a-w c:\windows\system32\XAPOFX1_0.dll
    + 2008-03-05 15:03:54 479,752 ----a-w c:\windows\system32\XAudio2_0.dll
    + 2008-05-30 13:19:18 507,400 ----a-w c:\windows\system32\XAudio2_1.dll
    + 2006-03-31 11:39:24 62,672 ----a-w c:\windows\system32\xinput1_1.dll
    + 2006-07-28 08:30:14 62,744 ----a-w c:\windows\system32\xinput1_2.dll
    + 2007-04-04 17:53:42 81,768 ----a-w c:\windows\system32\xinput1_3.dll
    + 2005-12-05 17:07:30 61,136 ----a-w c:\windows\system32\xinput9_1_0.dll
    - 2007-10-29 15:07:26 369,664 ----a-w c:\windows\system32\xpsp3res.dll
    + 2008-02-15 22:03:22 370,176 ----a-w c:\windows\system32\xpsp3res.dll
    + 2009-03-22 16:44:52 16,384 ----atw c:\windows\temp\Perflib_Perfdata_1d0.dat
    + 2008-09-30 15:42:08 1,286,152 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf34 5378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2008-09-30 15:45:12 91,656 ----a-w c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf3 45378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    + 2008-04-15 18:01:43 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll
    .
    -- Snapshot teruggezet naar huidige datum --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
    "ccleaner"="c:\program files\CCleaner\ccleaner.exe" [2008-07-29 1213680]
    "WhatPulse"="c:\progra~1\WHATPU~1\WHATPU~1.EXE " [2004-12-05 543744]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2007-06-17 68856]
    "AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2007-02-28 2321600]
    "DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-08-16 167368]
    "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-05-30 868352]
    "CreativeTaskScheduler"="c:\program files\Creative\Shared Files\CTSched.exe" [2006-11-17 53341]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
    "MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2008-04-18 9117696]
    "Google Update"="c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-06 133104]
    "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
    "Steam"="c:\program files\Steam\Steam.exe" [2008-12-08 1410296]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "NVRaidService"="c:\windows\system32\nvraidservice .exe" [2004-12-07 84480]
    "NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2004-12-15 86016]
    "TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageWorkstation\TrueImageMonito r.exe" [2005-03-09 785048]
    "Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2005-03-09 98304]
    "Telemeter 3.0"="c:\program files\Telemeter 3.0\telemeter3.exe" [2006-02-25 1245184]
    "SunJavaUpdateSched"="c:\program files\Java\jre1.5.0\bin\jusched.exe" [2007-01-04 36972]
    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
    "Adobe_ID0EYTHM"="c:\progra~1\COMMON~1\Adobe\ADOBE V~1\Server\bin\VERSIO~2.EXE" [2007-03-20 1884160]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2004-12-15 5513216]
    "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]
    "avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
    "QuickTime Task"="c:\program files\K-Lite Codec Pack\QuickTime\QTTask.exe" [2008-09-06 413696]
    "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-09-03 111936]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-10 289576]
    "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-11-18 29744]
    "Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
    "nwiz"="nwiz.exe" [2004-12-15 c:\windows\system32\nwiz.exe]
    "CARPService"="carpserv.exe" [2003-03-19 c:\windows\system32\carpserv.exe]
    "CHotkey"="mHotkey.exe" [2003-07-29 c:\windows\mHotkey.exe]
    "ledpointer"="CNYHKey.exe" [2004-03-03 c:\windows\CNYHKey.exe]
    "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 c:\windows\system32\bthprops.cpl]
    "SoundMan"="SOUNDMAN.EXE" [2007-04-16 c:\windows\soundman.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
    "MySpaceIM"="c:\program files\MySpace\IM\MySpaceIM.exe" [2008-04-18 9117696]

    c:\documents and settings\Hilde\Menu Start\Programma's\Opstarten\
    OpenOffice.org 1.1.4.lnk - c:\program files\OpenOffice.org1.1.4\program\quickstart.exe [2004-12-03 61440]

    c:\documents and settings\natte fons.HILDE-5B1D7B00F\Menu Start\Programma's\Opstarten\
    SpywareGuard.lnk - c:\program files\SpywareGuard\sgmain.exe [2003-08-29 360448]

    c:\documents and settings\All Users.WINDOWS\Menu Start\Programma's\Opstarten\
    Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe [2007-05-10 295606]
    Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-22 734872]
    hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-04-06 147456]
    hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-04-06 28672]
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
    ZDWLan Utility.lnk - c:\program files\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe [2005-02-01 401408]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.3iv2"= 3ivxVfWCodec.dll
    "VIDC.VP31"= vp31vfw.dll
    "msacm.l3fhg"= mp3fhg.acm
    "msacm.ac3filter"= ac3filter.acm

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\WINDOWS\\system32\\rtcshare.exe"=
    "c:\\Program Files\\Sports Interactive\\Football Manager 2006\\fm.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "c:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=
    "c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
    "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
    "c:\\Program Files\\Sports Interactive\\Football Manager 2008\\fm.exe"=
    "c:\\Program Files\\FlashFXP\\FlashFXP.exe"=
    "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr .exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\BearShare\\BearShare.exe"=
    "c:\\Program Files\\AtomPark\\Atomic Mail Sender\\AtomicMailSender.exe"=
    "c:\\Program Files\\Free Music Zilla\\FMZilla.exe"=
    "c:\\Program Files\\Steam\\SteamApps\\common\\football manager 2009\\fm.exe"=
    "c:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
    "3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server
    "3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server
    "50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server
    "50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server

    R3 EuMusDesignVirtualAudioCableWdm_s2x;Sound2x Audio Cable (WDM);c:\windows\system32\drivers\vacs2xkd.sys [2008-09-02 42880]
    R3 IMT0521;Inmax USB IMT-0521 Smartcard Reader;c:\windows\system32\drivers\IMT0521.sys [2005-02-01 34825]
    S2 UyfSuka;UyfSuka;c:\windows\System32\svchost.exe -k netsvcs [2004-08-04 14336]
    S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [2008-09-02 16512]
    S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-11-15 29744]
    S3 SCR33X USB Smart Card Reader;SCR33X USB Smart Card Reader;c:\windows\system32\drivers\SCR33X2K.sys [2005-02-01 63608]

    --- Andere Services/Drivers In Geheugen ---

    *NewlyCreated* - UYFSUKA

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    UyfSuka

    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\H]
    \Shell\AutoRun\command - H:\Autorun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{30481e52-9628-11d9-ac81-806d6172696f}]
    \shell\Rip\Command - "c:\program files\Windows Media Player\wmplayer.exe" /prefetch:3 /RipAudioCD "%L"

    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{baa0829e-9389-11dc-9801-000fea868484}]
    \Shell\AutoRun\command - L:\autorun.exe
    .
    Inhoud van de 'Gedeelde Taken' map

    2009-03-18 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    2009-03-22 c:\windows\Tasks\Controleren op updates voor Windows Live Toolbar.job
    - c:\program files\Windows Live Toolbar\MSNTBUP.EXE []

    2009-03-19 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1111093495.job
    - c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 00:52]

    2009-03-20 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1225437577.job
    - c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 00:52]

    2009-02-01 c:\windows\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1225467054.job
    - c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 00:52]

    2009-03-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-448539723-308236825-839522115-1005.job
    - c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-06 13:34]

    2009-08-14 c:\windows\Tasks\User_Feed_Synchronization-{ABFC52C2-5115-41D3-822E-F331BFE72052}.job
    - c:\windows\system32\msfeedssync.exe [2007-08-13 17:36]
    .
    .
    ------- Bijkomende Scan -------
    .
    uStart Page = hxxp://www.megameurigesaait.com/forum/phpBB2/
    uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
    uSearch Bar = hxxp://www.google.com/ie
    uInternet Settings,ProxyOverride = *.local
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
    IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
    FF - ProfilePath - c:\documents and settings\natte fons.HILDE-5B1D7B00F\Application Data\Mozilla\Firefox\Profiles\83zq5g84.default\
    FF - prefs.js: browser.startup.homepage - hxxp://fmz.qiwa.com
    FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
    FF - plugin: c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Update\1.2.141.5\npGoogleOneClick7.dll
    FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin2.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin3.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin4.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\QuickTime\Plugins\npqtplugin5.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\Picasa2\npPicasa2.dll

    ---- FIREFOX POLICIES ----
    FF - user.js: general.useragent.extra.zencast - Creative ZENcast v2.00.08.

    ************************************************** ************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-03-22 17:46:18
    Windows 5.1.2600 Service Pack 2 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond
    verborgen bestanden: 0

    ************************************************** ************************
    .
    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'lsass.exe'(1004)
    c:\windows\system32\relog_ap.dll
    .
    ------------------------ Andere Aktieve Processen ------------------------
    .
    c:\windows\system32\scardsvr.exe
    c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
    c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
    c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\program files\Bonjour\mDNSResponder.exe
    c:\windows\system32\CTSVCCDA.EXE
    c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\windows\system32\nvsvc32.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\rundll32.exe
    c:\windows\system32\wbem\unsecapp.exe
    c:\windows\system32\wscntfy.exe
    c:\program files\iPod\bin\iPodService.exe
    c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    c:\program files\SpywareGuard\sgbhp.exe
    c:\program files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
    c:\program files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
    c:\windows\system32\HPZipm12.exe
    c:\program files\Hewlett-Packard\Digital Imaging\bin\hposts08.exe
    c:\program files\Windows Live\Messenger\usnsvc.exe
    c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    c:\documents and settings\natte fons.HILDE-5B1D7B00F\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    .
    ************************************************** ************************
    .
    Voltooingstijd: 2009-03-22 18:02:41 - machine werd herstart [natte fons]
    ComboFix-quarantined-files.txt 2009-03-22 17:02:37
    ComboFix2.txt 2008-08-14 15:33:58

    Pre-Run: 170,858,819,584 bytes beschikbaar
    Post-Run: 171,363,803,136 bytes beschikbaar

    Current=1 Default=1 Failed=4 LastKnownGood=2 Sets=1,2,3,4
    1564 --- E O F --- 2009-03-22 02:04:22
    Grtzzz Simply



  6. #6
    Erelid   jurgenv's schermafbeelding
    Geregistreerd
    10 May 2005
    Locatie
    West-Vlaanderen
    Berichten
    5.887
    Bedankjes
    100
    Bedankt
    901 keer in 829 posts
    Blijkbaar is deze een dubbel, u wordt al eerder geholpen door Rosty.

    Member of ASAP

Discussie informatie

Users Browsing this Thread

Momenteel bekijken 1 gebruikers deze discussie. (0 leden en 1 gasten)

Soortgelijke discussies

  1. Hoe met SEND knop iets verzenden naar mijn E-mail adres??!
    Door Stuntman Phil in forum Webdevelopment & Programming
    Reacties: 10
    Laatste bericht: 11 October 2008, 21:43
  2. mijn hyjack log. zit er iets geks in?
    Door TwixX in forum HijackThis
    Reacties: 1
    Laatste bericht: 15 March 2007, 17:18
  3. Er moet me even iets van mijn hart.
    Door Kapstertje in forum Feedback
    Reacties: 43
    Laatste bericht: 2 December 2006, 00:10
  4. Iets zuigt mijn upload leeg ?
    Door tarlmars in forum Internet
    Reacties: 16
    Laatste bericht: 25 November 2006, 09:20

Favorieten/bladwijzers

Favorieten/bladwijzers

Regels voor berichten

  • Je mag geen nieuwe discussies starten
  • Je mag niet reageren op berichten
  • Je mag geen bijlagen versturen
  • Je mag niet je berichten bewerken
  •