Help
Page 1 of 6 123 ... LastLast
Results 1 to 15 of 87

Thread: Help

  1. #1
    Join Date
    Jun 2009
    Posts
    97

    Help

    A few days ago i went to switch my comp on and all that came up was a black screen with just the cursor moving about
    I did some research and managed to get into the operating system after ntldr is compressed dialogue kept coming up
    anyhow i have the system working (xp) but i have no start toolbar and i cannot access the internet or anything
    Have i an infection
    Please could you help
    Thanks

  2. #2
    Join Date
    Dec 2007
    Location
    Daly City, CA
    Posts
    22,550
    Using the computer, you're posting from and USB flash drive, download, transfer and run following tools on bad computer...

    Please download and run the below tool named Rkill (courtesy of BleepingComputer.com) which may help allow other programs to run.

    There are 4 different versions. If one of them won't run then download and try to run the other one.

    Vista and Win7 users need to right click Rkill and choose Run as Administrator

    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    * Rkill.com
    * Rkill.scr
    * Rkill.pif
    * Rkill.exe

    • * Double-click on the Rkill desktop icon to run the tool.
      * If using Vista or Windows 7 right-click on it and choose Run As Administrator.
      * A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
      * If not, delete the file, then download and use the one provided in Link 2.
      * If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
      * Do not reboot until instructed.
      * If the tool does not run from any of the links provided, please let me know.


    Once you've gotten one of them to run then try to immediately run the following.

    Now download and run exeHelper.

    • * Please download exeHelper from Raktor to your desktop.
      * Double-click on exeHelper.com to run the fix.
      * A black window should pop up, press any key to close once the fix is completed.
      * A log file named log.txt will be created in the directory where you ran exeHelper.com
      * Attach the log.txt file to your next message.


    Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

    ===============================================================

    Please download ComboFix from Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"

    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

  3. #3
    Join Date
    Jun 2009
    Posts
    97
    The logs as directed

    This log file is located at C:\rkill.log.
    Please post this only if requested to by the person helping you.
    Otherwise you can close this log when you wish.
    Ran as User on 20/07/2010 at 20:31:14.


    Processes terminated by Rkill or while it was running:


    C:\Documents and Settings\All Users\Application Data\Zwangie\zwangie134.exe


    Rkill completed on 20/07/2010 at 20:31:16.

  4. #4
    Join Date
    Jun 2009
    Posts
    97
    The logs as directed

    exeHelper by Raktor
    Build 20100414
    Run at 20:33:13 on 07/20/10
    Now searching...
    Checking for numerical processes...
    Checking for sysguard processes...
    Checking for bad processes...
    Checking for bad files...
    Checking for bad registry entries...
    Resetting filetype association for .exe
    Resetting filetype association for .com
    Resetting userinit and shell values...
    Resetting policies...
    --Finished--

  5. #5
    Join Date
    Jun 2009
    Posts
    97
    Combo fix log

    ComboFix 10-07-24.01 - User 25/07/2010 11:56:26.2.1 - NTFSx86
    Running from: c:\documents and settings\User\Desktop\ComboFix.exe
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Application Data\814b789
    c:\documents and settings\All Users\Application Data\814b789\775.mof
    c:\documents and settings\All Users\Application Data\814b789\BackUp\hpoddt01.exe.lnk
    c:\documents and settings\All Users\Application Data\814b789\SystemFeed\vd952342.bd
    c:\documents and settings\All Users\Application Data\Zwangie
    c:\documents and settings\All Users\Application Data\Zwangie\zwangie134.exe
    c:\documents and settings\User\Application Data\Microsoft\dtPaper
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\1.html
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\cfg.msg
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\tmp.bmp
    c:\documents and settings\User\Local Settings\Application Data\ibaqfkiab
    c:\documents and settings\User\Local Settings\Application Data\ibaqfkiab\wtgwnpctssd.exe
    c:\documents and settings\User\Local Settings\Application Data\uvxxmeotw
    c:\documents and settings\User\Local Settings\Application Data\uvxxmeotw\yfxmhmutssd.exe
    c:\documents and settings\User\My Documents\DPE.DUS
    c:\program files\WinPCap
    c:\program files\WinPCap\daemon_mgm.exe
    c:\program files\WinPCap\INSTALL.LOG
    c:\program files\WinPCap\NetMonInstaller.exe
    c:\program files\WinPCap\npf_mgm.exe
    c:\program files\WinPCap\rpcapd.exe
    c:\program files\WinPCap\Uninstall.exe
    c:\program files\Zwangie
    c:\program files\Zwangie\uninstall.exe
    c:\program files\Zwangie\zwangie.dll
    c:\program files\Zwangie\zwangie.exe
    c:\windows\system32\Chip.dll
    c:\windows\system32\drivers\npf.sys
    c:\windows\system32\Packet.dll
    c:\windows\system32\pthreadVC.dll
    c:\windows\system32\WanPacket.dll
    c:\windows\system32\wpcap.dll

    c:\windows\system32\qmgr.dll . . . is infected!! . . .Failed to restore. Attempting to replace on reboot

    Infected copy of c:\windows\system32\qmgr.dll was found and disinfected
    Restored copy from - c:\system volume information\_restore{4E4144CD-9D04-4E0D-BD67-CC74AA9FB4C6}\RP319\A0238643.dll
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_NPF
    -------\Service_NPF
    -------\Legacy_Zwangie_Service
    -------\Legacy_Zwangie_Service
    -------\Service_Zwangie Service
    -------\Service_Zwangie Service


    ((((((((((((((((((((((((( Files Created from 2010-06-25 to 2010-07-25 )))))))))))))))))))))))))))))))
    .

    2102-01-04 02:08 . 2102-01-04 02:08 253688 -c--a-w- c:\windows\system32\cssdll32.dll
    2102-01-04 02:07 . 2009-11-20 08:12 -------- dc----w- c:\program files\COMODO
    2102-01-03 13:32 . 2102-01-03 13:32 -------- dc----w- c:\program files\Trend Micro
    2102-01-02 01:39 . 2102-01-02 01:39 -------- dc----w- c:\documents and settings\User\Application Data\Malwarebytes
    2102-01-02 01:33 . 2009-06-17 11:27 38160 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2102-01-02 01:33 . 2102-01-02 01:39 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
    2102-01-02 01:33 . 2102-01-02 01:33 -------- dc----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2102-01-02 01:33 . 2009-06-17 11:27 19096 -c--a-w- c:\windows\system32\drivers\mbam.sys
    2102-01-01 14:50 . 2102-01-01 14:50 -------- dc----w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:50 . 2102-01-01 14:50 -------- dcsh--w- c:\documents and settings\Administrator\IETldCache
    2102-01-01 14:44 . 2102-01-01 14:44 -------- dc----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:40 . 2102-01-03 18:55 -------- dc----w- c:\program files\SUPERAntiSpyware
    2102-01-01 14:40 . 2102-01-01 14:40 -------- dc----w- c:\documents and settings\User\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:39 . 2102-01-01 14:39 -------- dc----w- c:\program files\Common Files\Wise Installation Wizard
    2010-07-20 12:25 . 2010-07-20 12:25 8 -c--a-w- c:\windows\crpf.bin
    2010-07-20 12:25 . 2010-07-20 12:25 4 -c--a-w- c:\windows\crpf_sdum.bin
    2010-07-19 14:08 . 2010-07-19 15:31 60 -c--a-w- c:\windows\system32\SYSDRV.DAT
    2010-07-19 14:04 . 2002-08-29 12:00 89600 -c--a-w- c:\windows\system32\slbiop.dll
    2010-07-19 14:03 . 2002-08-29 12:00 774144 -c--a-w- c:\windows\system32\mmc.exe
    2010-07-19 14:02 . 2002-08-29 12:00 9216 -c--a-w- c:\windows\system32\icaapi.dll
    2010-07-19 14:01 . 2002-08-29 12:00 50620 -c--a-w- c:\windows\system32\command.com
    2010-07-07 05:55 . 2010-07-07 05:55 168792 -c--a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
    2010-06-25 16:21 . 2010-06-25 16:25 -------- dc----w- c:\program files\Gran Diccionario Oxford

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2102-01-03 19:47 . 2009-06-15 02:17 -------- dc----w- c:\documents and settings\All Users\Application Data\avg8
    2102-01-03 15:06 . 2102-01-01 14:51 117760 -c--a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
    2010-07-20 12:39 . 2008-11-18 12:53 -------- dc----w- c:\program files\Vuze
    2010-07-20 12:39 . 2008-11-18 12:53 -------- dc----w- c:\documents and settings\User\Application Data\Azureus
    2010-07-19 05:38 . 2009-06-20 20:57 1474832 -c--a-w- c:\windows\system32\drivers\sfi.dat
    2010-07-18 19:33 . 2010-07-18 19:33 7970816 -c--a-w- c:\documents and settings\User\ntuser.tmp
    2010-07-13 08:15 . 2008-11-21 13:27 -------- dc----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2010-07-12 17:37 . 2008-11-24 05:43 44780 -c--a-w- c:\documents and settings\User\Application Data\wklnhst.dat
    2010-07-10 07:12 . 2009-11-30 11:50 -------- dc----w- c:\documents and settings\User\Application Data\vlc
    2010-07-01 11:42 . 2010-07-01 11:42 503808 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\msvcp71.dll
    2010-07-01 11:42 . 2010-07-01 11:42 499712 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\jmc.dll
    2010-07-01 11:42 . 2010-07-01 11:42 348160 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\msvcr71.dll
    2010-07-01 11:07 . 2010-07-01 11:07 434176 -c--a-w- c:\documents and settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\17053\RapportMS.dll
    2010-06-24 20:38 . 2009-05-29 06:43 17659 -c--a-w- c:\windows\system32\drivers\InetLock.sys
    2010-06-24 17:14 . 2010-06-24 17:11 -------- dc----w- c:\program files\Atomic Alarm Clock
    2010-06-19 10:26 . 2010-06-19 10:25 -------- dc----w- c:\program files\WorldUnlock Codes Calculator
    2010-05-15 10:20 . 2008-11-18 10:33 75088 -c--a-w- c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2002-04-16 11:27 . 2002-04-16 11:27 5 -csha-w- c:\windows\system32\CdI5T.drv
    .

    ------- Sigcheck -------

    Cryptography Services Error !!
    .
    ((((((((((((((((((((((((((((( SnapShot@2102-01-04_01.19.19 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2003-03-26 23:32 . 2002-08-29 19:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcirt.dll
    + 2003-03-27 06:28 . 2002-08-29 19:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    - 2008-11-17 16:02 . 2004-08-04 12:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    + 2009-07-11 18:41 . 2009-07-11 18:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
    + 2003-03-27 06:28 . 2002-08-29 19:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    - 2008-11-17 16:02 . 2004-08-04 12:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\vmmreg32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\vmmreg32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\twunk_32.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 25600 c:\windows\twunk_32.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 49680 c:\windows\twunk_16.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 49680 c:\windows\twunk_16.exe
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0C0A\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0816\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0809\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0422\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0419\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0413\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0410\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\040C\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0409\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0407\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\estwm.exe
    + 2010-03-20 14:59 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0C0A\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0816\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0809\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0422\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0419\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0413\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0410\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\040C\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0409\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0407\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epmtfres.dll

  6. #6
    Join Date
    Jun 2009
    Posts
    97
    having trouble posting all the combo log as it is 70000 characters

  7. #7
    Join Date
    Apr 2000
    Location
    Sheboygan, WI
    Posts
    53,391
    Split across a couple, three posts then

  8. #8
    Join Date
    Jun 2009
    Posts
    97

    Question

    ComboFix 10-07-24.01 - User 25/07/2010 11:56:26.2.1 - NTFSx86
    Running from: c:\documents and settings\User\Desktop\ComboFix.exe
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Application Data\814b789
    c:\documents and settings\All Users\Application Data\814b789\775.mof
    c:\documents and settings\All Users\Application Data\814b789\BackUp\hpoddt01.exe.lnk
    c:\documents and settings\All Users\Application Data\814b789\SystemFeed\vd952342.bd
    c:\documents and settings\All Users\Application Data\Zwangie
    c:\documents and settings\All Users\Application Data\Zwangie\zwangie134.exe
    c:\documents and settings\User\Application Data\Microsoft\dtPaper
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\1.html
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\cfg.msg
    c:\documents and settings\User\Application Data\Microsoft\dtPaper\tmp.bmp
    c:\documents and settings\User\Local Settings\Application Data\ibaqfkiab
    c:\documents and settings\User\Local Settings\Application Data\ibaqfkiab\wtgwnpctssd.exe
    c:\documents and settings\User\Local Settings\Application Data\uvxxmeotw
    c:\documents and settings\User\Local Settings\Application Data\uvxxmeotw\yfxmhmutssd.exe
    c:\documents and settings\User\My Documents\DPE.DUS
    c:\program files\WinPCap
    c:\program files\WinPCap\daemon_mgm.exe
    c:\program files\WinPCap\INSTALL.LOG
    c:\program files\WinPCap\NetMonInstaller.exe
    c:\program files\WinPCap\npf_mgm.exe
    c:\program files\WinPCap\rpcapd.exe
    c:\program files\WinPCap\Uninstall.exe
    c:\program files\Zwangie
    c:\program files\Zwangie\uninstall.exe
    c:\program files\Zwangie\zwangie.dll
    c:\program files\Zwangie\zwangie.exe
    c:\windows\system32\Chip.dll
    c:\windows\system32\drivers\npf.sys
    c:\windows\system32\Packet.dll
    c:\windows\system32\pthreadVC.dll
    c:\windows\system32\WanPacket.dll
    c:\windows\system32\wpcap.dll

    c:\windows\system32\qmgr.dll . . . is infected!! . . .Failed to restore. Attempting to replace on reboot

    Infected copy of c:\windows\system32\qmgr.dll was found and disinfected
    Restored copy from - c:\system volume information\_restore{4E4144CD-9D04-4E0D-BD67-CC74AA9FB4C6}\RP319\A0238643.dll
    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_NPF
    -------\Service_NPF
    -------\Legacy_Zwangie_Service
    -------\Legacy_Zwangie_Service
    -------\Service_Zwangie Service
    -------\Service_Zwangie Service


    ((((((((((((((((((((((((( Files Created from 2010-06-25 to 2010-07-25 )))))))))))))))))))))))))))))))
    .

    2102-01-04 02:08 . 2102-01-04 02:08 253688 -c--a-w- c:\windows\system32\cssdll32.dll
    2102-01-04 02:07 . 2009-11-20 08:12 -------- dc----w- c:\program files\COMODO
    2102-01-03 13:32 . 2102-01-03 13:32 -------- dc----w- c:\program files\Trend Micro
    2102-01-02 01:39 . 2102-01-02 01:39 -------- dc----w- c:\documents and settings\User\Application Data\Malwarebytes
    2102-01-02 01:33 . 2009-06-17 11:27 38160 -c--a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2102-01-02 01:33 . 2102-01-02 01:39 -------- dc----w- c:\program files\Malwarebytes' Anti-Malware
    2102-01-02 01:33 . 2102-01-02 01:33 -------- dc----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2102-01-02 01:33 . 2009-06-17 11:27 19096 -c--a-w- c:\windows\system32\drivers\mbam.sys
    2102-01-01 14:50 . 2102-01-01 14:50 -------- dc----w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:50 . 2102-01-01 14:50 -------- dcsh--w- c:\documents and settings\Administrator\IETldCache
    2102-01-01 14:44 . 2102-01-01 14:44 -------- dc----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:40 . 2102-01-03 18:55 -------- dc----w- c:\program files\SUPERAntiSpyware
    2102-01-01 14:40 . 2102-01-01 14:40 -------- dc----w- c:\documents and settings\User\Application Data\SUPERAntiSpyware.com
    2102-01-01 14:39 . 2102-01-01 14:39 -------- dc----w- c:\program files\Common Files\Wise Installation Wizard
    2010-07-20 12:25 . 2010-07-20 12:25 8 -c--a-w- c:\windows\crpf.bin
    2010-07-20 12:25 . 2010-07-20 12:25 4 -c--a-w- c:\windows\crpf_sdum.bin
    2010-07-19 14:08 . 2010-07-19 15:31 60 -c--a-w- c:\windows\system32\SYSDRV.DAT
    2010-07-19 14:04 . 2002-08-29 12:00 89600 -c--a-w- c:\windows\system32\slbiop.dll
    2010-07-19 14:03 . 2002-08-29 12:00 774144 -c--a-w- c:\windows\system32\mmc.exe
    2010-07-19 14:02 . 2002-08-29 12:00 9216 -c--a-w- c:\windows\system32\icaapi.dll
    2010-07-19 14:01 . 2002-08-29 12:00 50620 -c--a-w- c:\windows\system32\command.com
    2010-07-07 05:55 . 2010-07-07 05:55 168792 -c--a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
    2010-06-25 16:21 . 2010-06-25 16:25 -------- dc----w- c:\program files\Gran Diccionario Oxford

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2102-01-03 19:47 . 2009-06-15 02:17 -------- dc----w- c:\documents and settings\All Users\Application Data\avg8
    2102-01-03 15:06 . 2102-01-01 14:51 117760 -c--a-w- c:\documents and settings\Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
    2010-07-20 12:39 . 2008-11-18 12:53 -------- dc----w- c:\program files\Vuze
    2010-07-20 12:39 . 2008-11-18 12:53 -------- dc----w- c:\documents and settings\User\Application Data\Azureus
    2010-07-19 05:38 . 2009-06-20 20:57 1474832 -c--a-w- c:\windows\system32\drivers\sfi.dat
    2010-07-18 19:33 . 2010-07-18 19:33 7970816 -c--a-w- c:\documents and settings\User\ntuser.tmp
    2010-07-13 08:15 . 2008-11-21 13:27 -------- dc----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2010-07-12 17:37 . 2008-11-24 05:43 44780 -c--a-w- c:\documents and settings\User\Application Data\wklnhst.dat
    2010-07-10 07:12 . 2009-11-30 11:50 -------- dc----w- c:\documents and settings\User\Application Data\vlc
    2010-07-01 11:42 . 2010-07-01 11:42 503808 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\msvcp71.dll
    2010-07-01 11:42 . 2010-07-01 11:42 499712 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\jmc.dll
    2010-07-01 11:42 . 2010-07-01 11:42 348160 -c--a-w- c:\documents and settings\User\Application Data\Sun\Java\Deployment\cache\6.0\46\f84c6ae-28c81b44-n\msvcr71.dll
    2010-07-01 11:07 . 2010-07-01 11:07 434176 -c--a-w- c:\documents and settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\17053\RapportMS.dll
    2010-06-24 20:38 . 2009-05-29 06:43 17659 -c--a-w- c:\windows\system32\drivers\InetLock.sys
    2010-06-24 17:14 . 2010-06-24 17:11 -------- dc----w- c:\program files\Atomic Alarm Clock
    2010-06-19 10:26 . 2010-06-19 10:25 -------- dc----w- c:\program files\WorldUnlock Codes Calculator
    2010-05-15 10:20 . 2008-11-18 10:33 75088 -c--a-w- c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2002-04-16 11:27 . 2002-04-16 11:27 5 -csha-w- c:\windows\system32\CdI5T.drv
    .

    ------- Sigcheck -------

    Cryptography Services Error !!
    .
    ((((((((((((((((((((((((((((( SnapShot@2102-01-04_01.19.19 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2003-03-26 23:32 . 2002-08-29 19:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcirt.dll
    + 2003-03-27 06:28 . 2002-08-29 19:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    - 2008-11-17 16:02 . 2004-08-04 12:00 50688 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcirt.dll
    + 2009-07-11 18:41 . 2009-07-11 18:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
    + 2003-03-27 06:28 . 2002-08-29 19:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    - 2008-11-17 16:02 . 2004-08-04 12:00 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\atl.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\vmmreg32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\vmmreg32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\twunk_32.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 25600 c:\windows\twunk_32.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 49680 c:\windows\twunk_16.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 49680 c:\windows\twunk_16.exe
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0C0A\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0816\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0809\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0422\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0419\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0413\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0410\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\040C\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0409\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\local\0407\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\estwm.exe
    + 2010-03-20 14:59 . 2008-11-30 00:00 32768 c:\windows\twain_32\escndv\escndvrs.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0C0A\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0816\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0809\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0422\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0419\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0413\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0410\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\040C\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0409\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\local\0407\esmpsres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppdfres.dll

  9. #9
    Join Date
    Jun 2009
    Posts
    97
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppdfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epjpgres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epbmpres.dll
    + 2010-03-20 14:44 . 2005-08-29 00:00 98304 c:\windows\twain_32\escndv\es0099\ffmt\espimtif.dll
    + 2010-03-20 14:59 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eptifres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\eptif.dll
    + 2010-03-20 14:59 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eppitres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 90112 c:\windows\twain_32\escndv\es0099\ffmt\eppit.dll
    + 2010-03-20 14:59 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eppijres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\eppij.dll
    + 2010-03-20 14:58 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\eppdfres.dll
    + 2010-03-20 14:58 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epmtfres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\epmtf.dll
    + 2010-03-20 14:58 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epjpgres.dll
    + 2010-03-20 14:58 . 2008-11-27 00:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epbmpres.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 77824 c:\windows\twain_32\escndv\es0099\ffmt\epbmp.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\estwm.exe
    + 2010-03-20 14:59 . 2008-11-27 00:00 73728 c:\windows\twain_32\escndv\es0099\esmpsres.dll
    + 2010-03-20 14:44 . 2008-04-11 00:00 53248 c:\windows\twain_32\escndv\es0099\esicm.dll
    + 2010-03-20 14:44 . 2008-11-27 00:00 36864 c:\windows\twain_32\escndv\es0099\esdscl.dll
    + 2010-03-20 14:44 . 2008-07-16 00:00 94208 c:\windows\twain_32\escndv\es0099\esdde.dll
    + 2010-03-20 14:44 . 2006-11-02 00:00 90112 c:\windows\twain_32\escndv\es0099\esddc.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 46592 c:\windows\twain_32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 94784 c:\windows\twain.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 94784 c:\windows\twain.dll
    + 2010-07-25 11:52 . 2010-07-25 11:52 16384 c:\windows\Temp\Perflib_Perfdata_7d4.dat
    + 2010-07-19 14:05 . 2002-08-29 12:00 15360 c:\windows\TASKMAN.EXE
    - 2008-11-17 16:03 . 2004-08-04 12:00 15360 c:\windows\TASKMAN.EXE
    + 2008-05-26 21:18 . 2008-05-26 21:18 56320 c:\windows\system32\xmlfilter.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 28160 c:\windows\system32\xcopy.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 86016 c:\windows\system32\xactsrv.dll
    + 2002-08-29 10:41 . 2002-08-29 19:00 23552 c:\windows\system32\wzcsapi.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 56832 c:\windows\system32\wzcdlg.dll
    + 2007-07-30 19:19 . 2009-08-06 19:24 44768 c:\windows\system32\wups2.dll
    + 2008-11-17 16:17 . 2009-08-06 19:24 35552 c:\windows\system32\wups.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 32256 c:\windows\system32\wupdmgr.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\wupdmgr.exe
    + 2006-09-28 18:56 . 2008-01-18 23:37 55296 c:\windows\system32\WudfSvc.dll
    + 2006-09-28 20:13 . 2008-01-18 23:37 87552 c:\windows\system32\WUDFCoinstaller.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 17408 c:\windows\system32\wtsapi32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 46080 c:\windows\system32\wstdecod.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 21504 c:\windows\system32\wsock32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 38912 c:\windows\system32\wsnmp32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 17408 c:\windows\system32\wshtcpip.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 10240 c:\windows\system32\WshRm.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 11776 c:\windows\system32\wshisn.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\wshisn.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\wship6.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 65585 c:\windows\system32\wshext.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 28721 c:\windows\system32\wshcon.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\system32\ws2help.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 75264 c:\windows\system32\ws2_32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 29184 c:\windows\system32\wpnpinst.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 31232 c:\windows\system32\wpabaln.exe
    - 2001-08-17 22:36 . 2004-08-04 12:00 13824 c:\windows\system32\wowfaxui.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 13824 c:\windows\system32\wowfaxui.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 10368 c:\windows\system32\wowexec.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 10368 c:\windows\system32\wowexec.exe
    + 2009-07-07 08:42 . 2008-05-06 06:01 45056 c:\windows\system32\WNASPI32.DLL
    + 2003-03-27 08:19 . 2002-12-12 06:09 20480 c:\windows\system32\wmpui.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 20480 c:\windows\system32\wmpui.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 77824 c:\windows\system32\wmpstub.exe
    + 2003-03-27 08:19 . 2002-12-12 08:34 98304 c:\windows\system32\wmpshell.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 20480 c:\windows\system32\wmpcore.dll
    + 2003-03-27 08:19 . 2002-12-12 06:09 20480 c:\windows\system32\wmpcore.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 20480 c:\windows\system32\wmpcd.dll
    + 2003-03-27 08:19 . 2002-12-12 06:09 20480 c:\windows\system32\wmpcd.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\wmiprop.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\system32\wmiprop.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 51200 c:\windows\system32\wmerrenu.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\wmerrenu.dll
    + 2003-03-27 08:19 . 2002-11-27 10:03 23552 c:\windows\system32\wmdmps.dll
    + 2003-03-27 08:19 . 2002-11-27 10:03 27136 c:\windows\system32\wmdmlog.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 86528 c:\windows\system32\wlnotify.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18944 c:\windows\system32\winstrm.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\system32\winstrm.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 48128 c:\windows\system32\winsta.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 93184 c:\windows\system32\winscard.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 14848 c:\windows\system32\winrnr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\winmsd.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 11776 c:\windows\system32\winmsd.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 25600 c:\windows\system32\winipsec.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 35328 c:\windows\system32\winchat.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 35328 c:\windows\system32\winchat.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\win87em.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\win87em.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 99328 c:\windows\system32\win32spl.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18432 c:\windows\system32\win.com
    - 2004-08-04 12:00 . 2004-08-04 12:00 18432 c:\windows\system32\win.com
    + 2010-07-19 14:05 . 2002-08-29 12:00 70656 c:\windows\system32\wiascr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13600 c:\windows\system32\wfwnet.drv
    + 2010-07-19 14:05 . 2002-08-29 12:00 13600 c:\windows\system32\wfwnet.drv
    + 2010-07-19 14:05 . 2002-08-29 12:00 60416 c:\windows\system32\wextract.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 40448 c:\windows\system32\webhits.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\webhits.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 61952 c:\windows\system32\webclnt.dll
    + 2001-08-18 05:37 . 2002-08-29 19:00 22016 c:\windows\system32\wdmaud.drv
    + 2010-07-19 14:05 . 2002-08-29 12:00 46592 c:\windows\system32\wdigest.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 45568 c:\windows\system32\wbem\xml\wmi2xml.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 45568 c:\windows\system32\wbem\xml\wmi2xml.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 96256 c:\windows\system32\wbem\wmiutils.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 52224 c:\windows\system32\wbem\wmitimep.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 52224 c:\windows\system32\wbem\wmitimep.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 38912 c:\windows\system32\wbem\wmipsess.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 59904 c:\windows\system32\wbem\wmipjobj.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 58880 c:\windows\system32\wbem\wmipiprt.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 75264 c:\windows\system32\wbem\wmipicmp.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 75264 c:\windows\system32\wbem\wmipicmp.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 61440 c:\windows\system32\wbem\wmimsg.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 61440 c:\windows\system32\wbem\wmimsg.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 55808 c:\windows\system32\wbem\wmicookr.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 82432 c:\windows\system32\wbem\wmiaprpl.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 16384 c:\windows\system32\wbem\winmgmtr.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16384 c:\windows\system32\wbem\winmgmtr.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\wbem\winmgmt.exe
    - 2008-11-17 16:14 . 2004-08-04 12:00 13312 c:\windows\system32\wbem\winmgmt.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 48128 c:\windows\system32\wbem\wbemsvc.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 28160 c:\windows\system32\wbem\wbemprox.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 38400 c:\windows\system32\wbem\wbemperf.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 66048 c:\windows\system32\wbem\wbemcons.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 12288 c:\windows\system32\wbem\wbemads.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 12288 c:\windows\system32\wbem\wbemads.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16896 c:\windows\system32\wbem\unsecapp.exe
    - 2008-11-17 16:14 . 2004-08-04 12:00 16896 c:\windows\system32\wbem\unsecapp.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 59904 c:\windows\system32\wbem\trnsprov.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 59904 c:\windows\system32\wbem\trnsprov.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 61952 c:\windows\system32\wbem\tmplprov.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 61952 c:\windows\system32\wbem\tmplprov.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 80896 c:\windows\system32\wbem\stdprov.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 40960 c:\windows\system32\wbem\smtpcons.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 40960 c:\windows\system32\wbem\smtpcons.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 33792 c:\windows\system32\wbem\scrcons.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 60416 c:\windows\system32\wbem\ncprov.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 15360 c:\windows\system32\wbem\mofcomp.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 23552 c:\windows\system32\wbem\krnlprov.dll
    - 2008-11-17 16:14 . 2004-08-04 12:00 53248 c:\windows\system32\wbem\fwdprov.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 53248 c:\windows\system32\wbem\fwdprov.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 19456 c:\windows\system32\wbem\evntrprv.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16384 c:\windows\system32\watchdog.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\w32topl.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 22016 c:\windows\system32\w32topl.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 49664 c:\windows\system32\w32tm.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 49664 c:\windows\system32\w32tm.exe
    + 2009-06-27 09:12 . 2008-08-20 17:59 96752 c:\windows\system32\vxblock.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 33792 c:\windows\system32\vssadmin.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 33792 c:\windows\system32\vssadmin.exe

  10. #10
    Join Date
    Jun 2009
    Posts
    97
    - 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\vss_ps.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16896 c:\windows\system32\vss_ps.dll
    + 1997-11-17 16:13 . 1997-11-17 16:13 10240 c:\windows\system32\vidx16.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18176 c:\windows\system32\vga64k.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18176 c:\windows\system32\vga64k.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 51456 c:\windows\system32\vga256.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 51456 c:\windows\system32\vga256.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 20535 c:\windows\system32\vfpodbc.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 20535 c:\windows\system32\vfpodbc.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16384 c:\windows\system32\version.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 98304 c:\windows\system32\verifier.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\verifier.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\verifier.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 48640 c:\windows\system32\vdmredir.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 24064 c:\windows\system32\vdmdbg.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 30992 c:\windows\system32\vbajet32.dll
    + 1998-06-18 08:00 . 1998-06-18 09:00 89360 c:\windows\system32\VB5DB.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 47616 c:\windows\system32\utilman.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\utildll.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 25600 c:\windows\system32\utildll.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 49211 c:\windows\system32\usrvpa.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 49211 c:\windows\system32\usrvpa.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 45116 c:\windows\system32\usrvoica.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 45116 c:\windows\system32\usrvoica.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 49209 c:\windows\system32\usrv80a.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 49209 c:\windows\system32\usrv80a.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 41019 c:\windows\system32\usrsvpia.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 41019 c:\windows\system32\usrsvpia.dll
    - 2001-08-17 22:37 . 2004-08-04 12:00 69700 c:\windows\system32\usrshuta.exe
    + 2001-08-18 05:37 . 2002-08-29 19:00 69700 c:\windows\system32\usrshuta.exe
    - 2001-08-17 22:36 . 2004-08-04 12:00 49211 c:\windows\system32\usrsdpia.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 49211 c:\windows\system32\usrsdpia.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 77883 c:\windows\system32\usrrtosa.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 77883 c:\windows\system32\usrrtosa.dll
    - 2001-08-17 22:37 . 2004-08-04 12:00 61508 c:\windows\system32\usrprbda.exe
    + 2001-08-18 05:37 . 2002-08-29 19:00 61508 c:\windows\system32\usrprbda.exe
    - 2001-08-17 22:37 . 2004-08-04 12:00 77891 c:\windows\system32\usrmlnka.exe
    + 2001-08-18 05:37 . 2002-08-29 19:00 77891 c:\windows\system32\usrmlnka.exe
    + 2001-08-18 05:36 . 2002-08-29 19:00 53305 c:\windows\system32\usrlbva.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 53305 c:\windows\system32\usrlbva.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 86073 c:\windows\system32\usrfaxa.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 86073 c:\windows\system32\usrfaxa.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 77890 c:\windows\system32\usrdpa.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 77890 c:\windows\system32\usrdpa.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 69699 c:\windows\system32\usrcoina.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 69699 c:\windows\system32\usrcoina.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 61500 c:\windows\system32\usrcntra.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 61500 c:\windows\system32\usrcntra.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 98816 c:\windows\system32\usmt\migload.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 17408 c:\windows\system32\usmt\log.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 22016 c:\windows\system32\userinit.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 47872 c:\windows\system32\user.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 47872 c:\windows\system32\user.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 14848 c:\windows\system32\usbmon.dll
    + 2003-03-27 08:10 . 2002-01-05 12:32 65536 c:\windows\system32\URTTemp\mscorsn.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 17920 c:\windows\system32\ureg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\ureg.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16384 c:\windows\system32\ups.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 14848 c:\windows\system32\upnpcont.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 13824 c:\windows\system32\uniplat.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 13824 c:\windows\system32\uniplat.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 69120 c:\windows\system32\unimdmat.dll
    + 2008-05-26 21:19 . 2008-05-26 21:19 97792 c:\windows\system32\UncCplExt.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\umdmxfrm.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\umdmxfrm.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 32256 c:\windows\system32\umandlg.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 82432 c:\windows\system32\ufat.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 82432 c:\windows\system32\ufat.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 22016 c:\windows\system32\udhisapi.dll
    + 2008-04-14 04:42 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 90624 c:\windows\system32\txflog.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16896 c:\windows\system32\tsshutdn.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 16896 c:\windows\system32\tsshutdn.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 16384 c:\windows\system32\tskill.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 16384 c:\windows\system32\tskill.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 14848 c:\windows\system32\tsdiscon.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 14848 c:\windows\system32\tsdiscon.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\tsd32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 15360 c:\windows\system32\tsd32.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 40960 c:\windows\system32\tscupgrd.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 14848 c:\windows\system32\tscon.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 14848 c:\windows\system32\tscon.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 88064 c:\windows\system32\tscfgwmi.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 52224 c:\windows\system32\tsappcmp.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 52224 c:\windows\system32\tsappcmp.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 81920 c:\windows\system32\trkwks.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 11264 c:\windows\system32\tree.com
    + 2010-07-19 14:05 . 2002-08-29 12:00 31232 c:\windows\system32\traffic.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 31232 c:\windows\system32\traffic.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 31744 c:\windows\system32\tracert6.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\tracert6.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 10752 c:\windows\system32\tracert.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 13888 c:\windows\system32\toolhelp.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13888 c:\windows\system32\toolhelp.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16896 c:\windows\system32\tftp.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\tftp.exe
    + 2003-03-27 06:27 . 2002-08-29 19:00 71168 c:\windows\system32\telnet.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\tcpsvcs.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 19456 c:\windows\system32\tcpsvcs.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 40960 c:\windows\system32\tcpmonui.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 40448 c:\windows\system32\tcpmon.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\tcpmib.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\tcmsetup.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 12288 c:\windows\system32\tcmsetup.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 15360 c:\windows\system32\taskman.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\taskman.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 78848 c:\windows\system32\tapiui.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 78848 c:\windows\system32\tapiui.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 19200 c:\windows\system32\tapi.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 19200 c:\windows\system32\tapi.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 36864 c:\windows\system32\syskey.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\syskey.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 15872 c:\windows\system32\sysinv.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\sysinv.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 18896 c:\windows\system32\sysedit.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 18896 c:\windows\system32\sysedit.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 51712 c:\windows\system32\synceng.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 51200 c:\windows\system32\syncapp.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 51200 c:\windows\system32\syncapp.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 12800 c:\windows\system32\svchost.exe
    + 2008-05-26 20:59 . 2008-05-26 20:59 18904 c:\windows\system32\structuredqueryschematrivial.bin
    + 2008-04-14 04:42 . 2009-10-21 05:38 75776 c:\windows\system32\strmfilt.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 75776 c:\windows\system32\strmfilt.dll
    + 2003-03-27 08:50 . 2002-08-29 18:41 71168 c:\windows\system32\storprop.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 20480 c:\windows\system32\stimon.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 61952 c:\windows\system32\sti.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 54272 c:\windows\system32\stclient.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 13312 c:\windows\system32\ssstars.scr
    + 2010-07-19 14:05 . 2002-08-29 12:00 17408 c:\windows\system32\ssmyst.scr
    + 2010-07-19 14:05 . 2002-08-29 12:00 43008 c:\windows\system32\ssmypics.scr
    + 2010-07-19 14:05 . 2002-08-29 12:00 19456 c:\windows\system32\ssmarque.scr
    + 2010-07-19 14:05 . 2002-08-29 12:00 43008 c:\windows\system32\ssdpsrv.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 27136 c:\windows\system32\ssdpapi.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 18944 c:\windows\system32\ssbezier.scr
    + 2010-07-19 14:05 . 2002-08-29 12:00 87040 c:\windows\system32\srvsvc.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 63488 c:\windows\system32\srclient.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 49179 c:\windows\system32\sqlwoa.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 49179 c:\windows\system32\sqlwoa.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 24603 c:\windows\system32\sqlwid.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 24603 c:\windows\system32\sqlwid.dll
    - 2008-11-17 16:03 . 2004-08-04 12:00 24661 c:\windows\system32\spxcoins.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 24661 c:\windows\system32\spxcoins.dll
    - 2008-11-17 16:27 . 2009-01-07 17:21 26144 c:\windows\system32\spupdsvc.exe
    + 2008-11-17 16:27 . 2009-05-12 14:12 26144 c:\windows\system32\spupdsvc.exe
    + 2001-08-18 05:36 . 2002-08-29 19:00 72192 c:\windows\system32\sprio800.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 72192 c:\windows\system32\sprio800.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 70656 c:\windows\system32\sprio600.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 70656 c:\windows\system32\sprio600.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 51200 c:\windows\system32\spoolsv.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 66560 c:\windows\system32\spoolss.dll
    + 2010-03-20 14:59 . 2007-12-07 23:06 45056 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\EBPBIDI.DLL
    + 2010-03-20 14:59 . 2008-03-05 22:00 19456 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FREDFBE.DLL
    + 2010-03-20 14:59 . 2006-05-18 21:20 49664 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FMW0FBE.DLL
    + 2010-03-20 14:59 . 2008-11-12 18:00 33280 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FHSRFBE.DLL
    + 2010-03-20 14:59 . 2008-04-24 20:06 23040 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FGRCFBE.DLL
    + 2010-03-20 14:59 . 2008-10-23 18:03 16384 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FGEPFBE.DLL
    + 2010-03-20 14:59 . 2008-07-28 22:00 94208 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FDSPFBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 23:06 45056 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FBL6FBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 23:03 42496 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FBA6FBE.DLL
    + 2010-03-20 14:59 . 2006-11-13 18:00 23552 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FAUDFBE.DLL
    + 2010-03-20 14:59 . 2008-12-03 23:00 49664 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FASRFBE.DLL
    + 2010-03-20 14:59 . 2007-09-01 02:32 75776 c:\windows\system32\spool\drivers\w32x86\epsonepson_stylus_sx89ab\E_FAREFBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 23:06 45056 c:\windows\system32\spool\drivers\w32x86\3\EBPBIDI.DLL
    + 2010-03-20 14:59 . 2008-03-05 22:00 19456 c:\windows\system32\spool\drivers\w32x86\3\E_FREDFBE.DLL
    + 2010-03-20 14:59 . 2006-05-18 21:20 49664 c:\windows\system32\spool\drivers\w32x86\3\E_FMW0FBE.DLL
    + 2010-03-20 14:59 . 2008-11-12 18:00 33280 c:\windows\system32\spool\drivers\w32x86\3\E_FHSRFBE.DLL
    + 2010-03-20 14:59 . 2008-04-24 20:06 23040 c:\windows\system32\spool\drivers\w32x86\3\E_FGRCFBE.DLL
    + 2010-03-20 14:59 . 2008-10-23 18:03 16384 c:\windows\system32\spool\drivers\w32x86\3\E_FGEPFBE.DLL
    + 2010-03-20 14:59 . 2008-07-28 22:00 94208 c:\windows\system32\spool\drivers\w32x86\3\E_FDSPFBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 23:06 45056 c:\windows\system32\spool\drivers\w32x86\3\E_FBL6FBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 23:03 42496 c:\windows\system32\spool\drivers\w32x86\3\E_FBA6FBE.DLL
    + 2010-03-20 14:59 . 2006-11-13 18:00 23552 c:\windows\system32\spool\drivers\w32x86\3\E_FAUDFBE.DLL
    + 2010-03-20 14:59 . 2008-12-03 23:00 49664 c:\windows\system32\spool\drivers\w32x86\3\E_FASRFBE.DLL
    + 2010-03-20 14:59 . 2007-09-01 02:32 75776 c:\windows\system32\spool\drivers\w32x86\3\E_FAREFBE.DLL
    + 2001-08-18 05:36 . 2002-08-29 19:00 69632 c:\windows\system32\spnike.dll
    - 2001-08-17 22:36 . 2004-08-04 12:00 69632 c:\windows\system32\spnike.dll
    + 2009-08-02 08:03 . 2008-03-21 12:57 14640 c:\windows\system32\spmsgXP_2k3.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 23552 c:\windows\system32\sort.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 56832 c:\windows\system32\sol.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 56832 c:\windows\system32\sol.exe
    + 2009-10-27 10:54 . 2009-08-06 19:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
    + 2009-10-27 10:54 . 2009-08-06 19:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 16896 c:\windows\system32\snmpapi.dll
    + 2010-07-19 14:05 . 2002-08-29 12:00 45568 c:\windows\system32\smss.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 82944 c:\windows\system32\smlogsvc.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\slbrccsp.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\slbrccsp.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 22528 c:\windows\system32\slayerxp.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 24064 c:\windows\system32\skeys.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 13824 c:\windows\system32\sisbkup.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\sisbkup.dll
    + 2009-07-26 16:44 . 2009-07-26 16:44 48448 c:\windows\system32\sirenacm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 66048 c:\windows\system32\sigverif.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 11776 c:\windows\system32\sigtab.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 17920 c:\windows\system32\shutdown.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 23040 c:\windows\system32\shscrap.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 69632 c:\windows\system32\shrpubw.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 33280 c:\windows\system32\shmgrate.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 60416 c:\windows\system32\shimeng.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 62976 c:\windows\system32\shgina.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 22528 c:\windows\system32\shfolder.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\shadow.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 14848 c:\windows\system32\shadow.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\sfmapi.dll

  11. #11
    Join Date
    Jun 2009
    Posts
    97
    + 2010-07-19 14:04 . 2002-08-29 12:00 23552 c:\windows\system32\sfmapi.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 11753 c:\windows\system32\setver.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 11753 c:\windows\system32\setver.exe
    + 2003-03-27 07:45 . 2001-08-18 03:57 22528 c:\windows\system32\setupcl.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 99328 c:\windows\system32\Setup\setupqry.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 40960 c:\windows\system32\Setup\ocmsn.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 12800 c:\windows\system32\Setup\ocgen.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 61440 c:\windows\system32\Setup\ntoc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 71168 c:\windows\system32\Setup\netoc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 57374 c:\windows\system32\Setup\msgrocm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 82432 c:\windows\system32\Setup\msdtcstp.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 32828 c:\windows\system32\Setup\fp40ext.dll
    - 2008-04-14 04:41 . 2008-04-14 04:41 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20992 c:\windows\system32\setup.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 28672 c:\windows\system32\sethc.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\serwvdrv.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\serwvdrv.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53248 c:\windows\system32\servdeps.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14336 c:\windows\system32\serialui.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\serialui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13824 c:\windows\system32\senscfg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13824 c:\windows\system32\senscfg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 36352 c:\windows\system32\sens.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53248 c:\windows\system32\sendmail.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 27136 c:\windows\system32\sendcmsg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 52224 c:\windows\system32\secur32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20992 c:\windows\system32\seclogon.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 87552 c:\windows\system32\searchfilterhost.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 71168 c:\windows\system32\sdbinst.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 57856 c:\windows\system32\scripto.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 26624 c:\windows\system32\scredir.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\scredir.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 18432 c:\windows\system32\sclgntfy.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 93184 c:\windows\system32\scardsvr.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 66560 c:\windows\system32\scarddlg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 31232 c:\windows\system32\sc.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 19456 c:\windows\system32\savedump.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 54784 c:\windows\system32\samlib.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 40960 c:\windows\system32\safrslv.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 26624 c:\windows\system32\safrdm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 39424 c:\windows\system32\safrcdlg.dll
    - 2008-11-17 16:15 . 2004-08-04 12:00 15872 c:\windows\system32\rwinsta.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 15872 c:\windows\system32\rwinsta.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 12800 c:\windows\system32\runonce.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 31744 c:\windows\system32\rundll32.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\runas.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16384 c:\windows\system32\runas.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 39936 c:\windows\system32\rtutils.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 98304 c:\windows\system32\rtm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 98304 c:\windows\system32\rtm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 29696 c:\windows\system32\rtipxmib.dll
    + 2008-05-26 21:18 . 2008-05-26 21:18 38400 c:\windows\system32\rtffilt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 74240 c:\windows\system32\rtcshare.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 90112 c:\windows\system32\rsvpsp.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 23552 c:\windows\system32\rsvpmsg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\rsvpmsg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\rsmui.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 49152 c:\windows\system32\rsmui.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 24576 c:\windows\system32\rsmsink.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\rsmsink.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 18432 c:\windows\system32\rsmps.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 49152 c:\windows\system32\rsm.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 49152 c:\windows\system32\rsm.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 36352 c:\windows\system32\rshx32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13312 c:\windows\system32\rsh.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 22016 c:\windows\system32\rpcns4.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\rpcns4.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\routemon.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 25600 c:\windows\system32\routemon.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 19968 c:\windows\system32\route.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 19968 c:\windows\system32\route.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 11776 c:\windows\system32\rexec.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 54784 c:\windows\system32\resutils.dll
    - 2008-11-17 16:17 . 2004-08-04 12:00 47104 c:\windows\system32\Restore\srdiag.exe
    + 2010-07-19 14:05 . 2002-08-29 12:00 47104 c:\windows\system32\Restore\srdiag.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 12800 c:\windows\system32\replace.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\replace.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 56320 c:\windows\system32\remotepg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 51712 c:\windows\system32\regsvc.dll
    - 2008-11-17 16:15 . 2004-08-04 12:00 33792 c:\windows\system32\regini.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 33792 c:\windows\system32\regini.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 44032 c:\windows\system32\regapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 48128 c:\windows\system32\reg.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 61952 c:\windows\system32\rdshost.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 12288 c:\windows\system32\rdsaddin.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 75912 c:\windows\system32\rdpwsx.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\rdpsnd.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 87304 c:\windows\system32\rdpdd.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 44032 c:\windows\system32\rdpclip.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 19968 c:\windows\system32\rcp.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 34304 c:\windows\system32\rcimlby.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 96256 c:\windows\system32\rcbdyctl.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 91136 c:\windows\system32\rastls.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 54272 c:\windows\system32\rastapi.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\rasser.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 12800 c:\windows\system32\rasser.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13824 c:\windows\system32\rassapi.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\rasrad.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 23552 c:\windows\system32\rasrad.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 54272 c:\windows\system32\rasphone.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 22528 c:\windows\system32\rasmxs.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 22528 c:\windows\system32\rasmxs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 55808 c:\windows\system32\rasman.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 11264 c:\windows\system32\rasdial.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 11264 c:\windows\system32\rasdial.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\rasctrs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 11776 c:\windows\system32\rasctrs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 57856 c:\windows\system32\raschap.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 11776 c:\windows\system32\rasautou.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 11776 c:\windows\system32\rasautou.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 82944 c:\windows\system32\rasauto.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 33280 c:\windows\system32\racpldlg.dll
    - 2008-11-17 16:15 . 2004-08-04 12:00 22016 c:\windows\system32\qwinsta.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 22016 c:\windows\system32\qwinsta.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 18432 c:\windows\system32\qprocess.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 17408 c:\windows\system32\qmgrprxy.dll
    - 2008-11-17 16:15 . 2004-08-04 12:00 16896 c:\windows\system32\qappsrv.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16896 c:\windows\system32\qappsrv.exe
    + 2009-06-27 09:12 . 2008-08-20 17:58 66032 c:\windows\system32\pxinsa64.exe
    + 2009-06-27 09:12 . 2008-08-20 17:58 72176 c:\windows\system32\pxhpinst.exe
    + 2009-06-27 09:12 . 2008-08-20 17:58 66544 c:\windows\system32\pxcpya64.exe
    + 1998-02-07 02:35 . 1998-02-07 02:35 48640 c:\windows\system32\purgedxm.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 25600 c:\windows\system32\pstorsvc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 37888 c:\windows\system32\pstorec.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 10752 c:\windows\system32\pschdprf.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\pschdprf.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 82944 c:\windows\system32\psbase.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 17408 c:\windows\system32\psapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 45056 c:\windows\system32\proquota.exe
    + 2008-05-26 21:18 . 2008-05-26 21:18 71680 c:\windows\system32\propdefs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 28672 c:\windows\system32\profmap.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\prflbmsg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 16384 c:\windows\system32\prflbmsg.dll
    + 2010-03-30 23:16 . 2010-03-30 23:16 99176 c:\windows\system32\PresentationHostProxy.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\powrprof.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 87552 c:\windows\system32\polstore.dll
    + 2009-08-29 16:26 . 2009-08-29 16:27 75064 c:\windows\system32\PnkBstrA.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 34304 c:\windows\system32\pngfilt.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 46592 c:\windows\system32\pmspl.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 46592 c:\windows\system32\pmspl.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 30720 c:\windows\system32\plustab.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\plustab.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 12800 c:\windows\system32\pjlmon.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 33280 c:\windows\system32\ping6.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\ping6.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16384 c:\windows\system32\ping.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 35328 c:\windows\system32\pifmgr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 35328 c:\windows\system32\pifmgr.dll
    + 2003-03-27 06:27 . 2002-08-29 19:00 27648 c:\windows\system32\pidgen.dll
    + 2002-08-29 10:41 . 2002-08-29 19:00 31744 c:\windows\system32\pid.dll
    + 2010-03-20 14:48 . 2006-10-20 00:10 80024 c:\windows\system32\PICSDK.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 12288 c:\windows\system32\perfts.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\perfts.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 32256 c:\windows\system32\perfproc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 23040 c:\windows\system32\perfos.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 16896 c:\windows\system32\perfnet.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14336 c:\windows\system32\perfmon.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 23552 c:\windows\system32\perfdisk.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 28626 c:\windows\system32\perfd009.dat
    - 2004-08-04 12:00 . 2004-08-04 12:00 28626 c:\windows\system32\perfd009.dat
    + 2010-07-19 14:04 . 2002-08-29 12:00 37376 c:\windows\system32\perfctrs.dll
    + 2003-03-27 06:27 . 2003-03-27 08:14 45612 c:\windows\system32\perfc009.dat
    - 2004-08-04 12:00 . 2004-08-04 12:00 15360 c:\windows\system32\pentnt.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 15360 c:\windows\system32\pentnt.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 58880 c:\windows\system32\pautoenr.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 21504 c:\windows\system32\pathping.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\pathping.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\panmap.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 10240 c:\windows\system32\panmap.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53248 c:\windows\system32\packager.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 40448 c:\windows\system32\osuninst.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 40448 c:\windows\system32\osuninst.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 61952 c:\windows\system32\osuninst.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 49664 c:\windows\system32\oobe\oobebaln.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 28160 c:\windows\system32\oobe\msoobe.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16896 c:\windows\system32\oobe\msobweb.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 28160 c:\windows\system32\oobe\msobshel.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14336 c:\windows\system32\oobe\msobdl.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 69120 c:\windows\system32\olethk32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\olethk32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 22016 c:\windows\system32\olesvr32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\olesvr32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 24064 c:\windows\system32\olesvr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 24064 c:\windows\system32\olesvr.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 98304 c:\windows\system32\oleprn.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 34304 c:\windows\system32\olecnv32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 68608 c:\windows\system32\olecli32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 82944 c:\windows\system32\olecli.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 82944 c:\windows\system32\olecli.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 16896 c:\windows\system32\oleaccrc.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 16896 c:\windows\system32\oleaccrc.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 39744 c:\windows\system32\ole2.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 39744 c:\windows\system32\ole2.dll
    + 2008-05-26 21:19 . 2008-05-26 21:19 11264 c:\windows\system32\oephRes.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20554 c:\windows\system32\odtext32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20553 c:\windows\system32\odpdx32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20553 c:\windows\system32\odfox32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20553 c:\windows\system32\odexl32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20554 c:\windows\system32\oddbse32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 12288 c:\windows\system32\odbcp32r.dll
    - 2008-04-13 21:56 . 2008-04-13 21:56 12288 c:\windows\system32\odbcp32r.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53279 c:\windows\system32\odbcji32.dll
    - 2008-04-14 04:40 . 2008-04-14 04:40 53279 c:\windows\system32\odbcji32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 90112 c:\windows\system32\odbcint.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 61440 c:\windows\system32\odbccu32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 61440 c:\windows\system32\odbccr32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 94208 c:\windows\system32\odbccp32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53248 c:\windows\system32\odbcconf.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 24576 c:\windows\system32\odbcbcp.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 24576 c:\windows\system32\odbcbcp.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 32768 c:\windows\system32\odbcad32.exe
    - 2008-04-14 04:42 . 2008-04-14 04:42 32768 c:\windows\system32\odbcad32.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16384 c:\windows\system32\odbc32gt.dll
    - 2008-04-14 04:42 . 2008-04-14 04:42 16384 c:\windows\system32\odbc32gt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 26224 c:\windows\system32\odbc16gt.dll
    - 2007-04-02 18:35 . 2007-04-02 18:35 26224 c:\windows\system32\odbc16gt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 60928 c:\windows\system32\ocmanage.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 87552 c:\windows\system32\occache.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13312 c:\windows\system32\ntvdmd.dll
    + 2003-03-27 06:27 . 2002-08-29 19:00 36864 c:\windows\system32\ntsdexts.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\ntsdexts.dll

  12. #12
    Join Date
    Jun 2009
    Posts
    97
    + 2003-03-27 06:27 . 2002-08-29 19:00 31744 c:\windows\system32\ntsd.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 31744 c:\windows\system32\ntsd.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 80896 c:\windows\system32\ntprint.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 36864 c:\windows\system32\ntmsevt.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 36864 c:\windows\system32\ntmsevt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 38400 c:\windows\system32\ntmsapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 14336 c:\windows\system32\ntlanui2.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14336 c:\windows\system32\ntlanui2.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 57856 c:\windows\system32\ntlanui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 57856 c:\windows\system32\ntlanui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 38400 c:\windows\system32\ntlanman.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 34528 c:\windows\system32\ntio804.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 35392 c:\windows\system32\ntio412.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 35632 c:\windows\system32\ntio411.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 34528 c:\windows\system32\ntio404.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 33808 c:\windows\system32\ntio.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 64512 c:\windows\system32\ntdsapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 29146 c:\windows\system32\ntdos804.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\ntdos804.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 29274 c:\windows\system32\ntdos412.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 29274 c:\windows\system32\ntdos412.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 29370 c:\windows\system32\ntdos411.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 29370 c:\windows\system32\ntdos411.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 29146 c:\windows\system32\ntdos404.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 29146 c:\windows\system32\ntdos404.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 27866 c:\windows\system32\ntdos.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 27866 c:\windows\system32\ntdos.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 71680 c:\windows\system32\nslookup.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 49152 c:\windows\system32\npptools.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13824 c:\windows\system32\npp\nppagent.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 54272 c:\windows\system32\npp\ndisnpp.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 66048 c:\windows\system32\notepad.exe
    + 2009-08-02 07:43 . 2009-02-09 07:37 91136 c:\windows\system32\nmwcdcls.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 24576 c:\windows\system32\nmmkcert.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 12288 c:\windows\system32\nmevtmsg.dll
    - 2008-11-17 16:17 . 2004-08-04 12:00 12288 c:\windows\system32\nmevtmsg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 95744 c:\windows\system32\nlhtml.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 74752 c:\windows\system32\netui0.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 30720 c:\windows\system32\netstat.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 82944 c:\windows\system32\netsh.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 10752 c:\windows\system32\netrap.dll
    + 2002-01-05 12:40 . 2002-01-05 12:40 16384 c:\windows\system32\netfxperf.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 39424 c:\windows\system32\net.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 16384 c:\windows\system32\nddenb32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 15360 c:\windows\system32\nddeapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 42496 c:\windows\system32\ncobjapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20480 c:\windows\system32\nbtstat.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\system32\nbtstat.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 35840 c:\windows\system32\narrhook.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\narrhook.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 51200 c:\windows\system32\narrator.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 88064 c:\windows\system32\mydocs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 90112 c:\windows\system32\mycomput.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 90112 c:\windows\system32\mycomput.dll
    + 2009-11-05 21:17 . 2009-11-05 21:17 11600 c:\windows\system32\mui\0409\mscorees.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 87552 c:\windows\system32\mui\0009\hhctrlui.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 87552 c:\windows\system32\mui\0009\hhctrlui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 83968 c:\windows\system32\mtxoci.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 25088 c:\windows\system32\mtxlegih.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20480 c:\windows\system32\mtxdm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 61440 c:\windows\system32\mtxclu.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 16384 c:\windows\system32\msyuv.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 26624 c:\windows\system32\msxmlr.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 26624 c:\windows\system32\msxmlr.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 44032 c:\windows\system32\msxml3r.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\msxml3r.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 37916 c:\windows\system32\msxml2r.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 37916 c:\windows\system32\msxml2r.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 66048 c:\windows\system32\msw3prt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 25600 c:\windows\system32\msvidc32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 25600 c:\windows\system32\msvidc32.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 65024 c:\windows\system32\msvcrt40.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 50688 c:\windows\system32\msvcirt.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 13312 c:\windows\system32\msswch.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 13312 c:\windows\system32\msswch.dll
    + 2008-05-26 21:18 . 2008-05-26 21:18 44032 c:\windows\system32\msstrc.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 32768 c:\windows\system32\mssprxy.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 87552 c:\windows\system32\mssitlb.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 35840 c:\windows\system32\mssign32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\mssign32.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 11776 c:\windows\system32\msshooks.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 60416 c:\windows\system32\msscntrs.dll
    + 2008-05-26 21:17 . 2008-05-26 21:17 34816 c:\windows\system32\msscb.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 10240 c:\windows\system32\msrle32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 28746 c:\windows\system32\msrecr40.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 28746 c:\windows\system32\msrecr40.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 73802 c:\windows\system32\msrclr40.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 73802 c:\windows\system32\msrclr40.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 60416 c:\windows\system32\msratelc.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 60416 c:\windows\system32\msratelc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 69632 c:\windows\system32\msr2c.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 69632 c:\windows\system32\msr2c.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 45056 c:\windows\system32\msprivs.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 41984 c:\windows\system32\msports.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 41984 c:\windows\system32\msports.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 47104 c:\windows\system32\mspmspsv.dll
    + 2003-03-27 08:19 . 2002-11-27 10:03 52224 c:\windows\system32\mspmsnsv.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 27136 c:\windows\system32\mspatcha.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20480 c:\windows\system32\msorc32r.dll
    - 2008-04-13 21:54 . 2008-04-13 21:54 20480 c:\windows\system32\msorc32r.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 81408 c:\windows\system32\msoert2.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\msobjs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 33280 c:\windows\system32\msobjs.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 22528 c:\windows\system32\mslbui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 53322 c:\windows\system32\msjter40.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 21023 c:\windows\system32\msjdbc10.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 39936 c:\windows\system32\msisip.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 64512 c:\windows\system32\msiexec.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 14848 c:\windows\system32\msidntld.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\msidntld.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 44032 c:\windows\system32\msident.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 56320 c:\windows\system32\mshtmler.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 24064 c:\windows\system32\mshta.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 34304 c:\windows\system32\msgsvc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20992 c:\windows\system32\msg.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 20992 c:\windows\system32\msg.exe
    + 2007-08-13 18:54 . 2010-05-06 10:41 55296 c:\windows\system32\msfeedsbs.dll
    - 2007-08-13 18:54 . 2009-03-08 03:31 55296 c:\windows\system32\msfeedsbs.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 94282 c:\windows\system32\msencode.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 94282 c:\windows\system32\msencode.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 54784 c:\windows\system32\msdtclog.dll
    + 2003-03-27 07:36 . 2002-08-29 19:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
    - 2008-11-17 16:15 . 2004-08-04 12:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
    + 2010-07-19 14:04 . 2002-08-29 12:00 11264 c:\windows\system32\msdmo.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 67584 c:\windows\system32\MSCTFP.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 36864 c:\windows\system32\mscpxl32.dLL
    - 2008-04-14 04:42 . 2008-04-14 04:42 36864 c:\windows\system32\mscpxl32.dLL
    - 2008-04-13 21:56 . 2008-04-13 21:56 12288 c:\windows\system32\mscpx32r.dLL
    + 2010-07-19 14:04 . 2002-08-29 12:00 12288 c:\windows\system32\mscpx32r.dLL
    + 2010-07-19 14:04 . 2002-08-29 12:00 65536 c:\windows\system32\msconf.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 68096 c:\windows\system32\mscms.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 65024 c:\windows\system32\msaudite.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 65024 c:\windows\system32\msaudite.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 51200 c:\windows\system32\msasn1.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 80128 c:\windows\system32\msapsspc.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 20480 c:\windows\system32\msacm32.drv
    - 2004-08-04 12:00 . 2004-08-04 12:00 20480 c:\windows\system32\msacm32.drv
    + 2010-07-19 14:04 . 2002-08-29 12:00 67072 c:\windows\system32\msacm32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 61168 c:\windows\system32\msacm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 61168 c:\windows\system32\msacm.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 12800 c:\windows\system32\mrinfo.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 12800 c:\windows\system32\mrinfo.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 47104 c:\windows\system32\mprui.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 47104 c:\windows\system32\mprui.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 99840 c:\windows\system32\mprmsg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 99840 c:\windows\system32\mprmsg.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 49152 c:\windows\system32\mprdim.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\mprddm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 69120 c:\windows\system32\mprddm.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 79360 c:\windows\system32\mprapi.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 55808 c:\windows\system32\mpr.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 22016 c:\windows\system32\mpnotify.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 22016 c:\windows\system32\mpnotify.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 15872 c:\windows\system32\more.com
    - 2004-08-04 12:00 . 2004-08-04 12:00 10112 c:\windows\system32\modex.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 10112 c:\windows\system32\modex.dll

  13. #13
    Join Date
    Jun 2009
    Posts
    97
    - 2004-08-04 12:00 . 2004-08-04 12:00 19456 c:\windows\system32\mode.com
    + 2010-07-19 14:04 . 2002-08-29 12:00 19456 c:\windows\system32\mode.com
    + 2010-07-19 14:04 . 2002-08-29 12:00 32768 c:\windows\system32\mnmsrvc.exe
    - 2008-11-17 16:16 . 2008-04-14 04:42 32768 c:\windows\system32\mnmsrvc.exe
    + 2010-07-19 14:04 . 2002-08-29 12:00 32256 c:\windows\system32\mnmdd.dll
    + 2010-07-19 14:04 . 2002-08-29 12:00 68928 c:\windows\system32\mmsystem.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 16384 c:\windows\system32\mmfutil.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 12288 c:\windows\system32\mmdrv.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 12288 c:\windows\system32\mmdrv.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 46592 c:\windows\system32\mmcshext.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 66560 c:\windows\system32\mmcbase.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 18944 c:\windows\system32\mimefilt.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 51712 c:\windows\system32\migpwd.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 51712 c:\windows\system32\migpwd.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 56320 c:\windows\system32\miglibnt.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 17920 c:\windows\system32\midimap.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 46258 c:\windows\system32\mib.bin
    - 2004-08-04 12:00 . 2004-08-04 12:00 46258 c:\windows\system32\mib.bin
    + 2010-07-19 14:03 . 2002-08-29 12:00 12800 c:\windows\system32\mgmtapi.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 20992 c:\windows\system32\mfcsubs.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 35328 c:\windows\system32\mf3216.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 39274 c:\windows\system32\mem.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 39274 c:\windows\system32\mem.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\mdhcp.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 50176 c:\windows\system32\mdhcp.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 28160 c:\windows\system32\mciwave.drv
    - 2004-08-04 12:00 . 2004-08-04 12:00 28160 c:\windows\system32\mciwave.drv
    + 2010-07-19 14:03 . 2002-08-29 12:00 22016 c:\windows\system32\mciwave.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 25264 c:\windows\system32\mciseq.drv
    - 2004-08-04 12:00 . 2004-08-04 12:00 25264 c:\windows\system32\mciseq.drv
    + 2010-07-19 14:03 . 2002-08-29 12:00 20992 c:\windows\system32\mciseq.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 33280 c:\windows\system32\mciqtz32.dll
    + 1997-11-17 16:13 . 1997-11-17 16:13 11776 c:\windows\system32\mciqtz.drv
    + 2010-07-19 14:03 . 2002-08-29 12:00 17408 c:\windows\system32\mcicda.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\mcicda.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 80384 c:\windows\system32\mciavi32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 73376 c:\windows\system32\mciavi.drv
    + 2010-07-19 14:03 . 2002-08-29 12:00 73376 c:\windows\system32\mciavi.drv
    + 2010-07-19 14:03 . 2002-08-29 12:00 10496 c:\windows\system32\mcdsrv32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\mcdsrv32.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 10240 c:\windows\system32\mcd32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 10240 c:\windows\system32\mcd32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 12800 c:\windows\system32\mcastmib.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 79360 c:\windows\system32\makecab.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 67584 c:\windows\system32\magnify.exe
    + 2009-07-15 13:35 . 2009-07-15 13:35 88590 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    - 2008-11-18 12:16 . 2009-01-23 22:39 88590 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 11776 c:\windows\system32\lsass.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 18944 c:\windows\system32\lpk.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 15360 c:\windows\system32\logoff.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 15360 c:\windows\system32\logoff.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 50176 c:\windows\system32\loghours.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 50176 c:\windows\system32\loghours.dll
    + 2003-03-27 08:18 . 2002-12-12 06:04 81408 c:\windows\system32\logagent.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 68096 c:\windows\system32\locator.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 10240 c:\windows\system32\localui.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 91648 c:\windows\system32\loadperf.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 25088 c:\windows\system32\lnkstub.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 25088 c:\windows\system32\lnkstub.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 12288 c:\windows\system32\lmhsvc.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 15360 c:\windows\system32\linkinfo.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 29696 c:\windows\system32\lights.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 29696 c:\windows\system32\lights.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 57856 c:\windows\system32\licwmi.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 19456 c:\windows\system32\licmgr10.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 89600 c:\windows\system32\langwrbk.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 89600 c:\windows\system32\langwrbk.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 92160 c:\windows\system32\krnl386.exe
    - 2008-04-13 21:20 . 2008-04-13 21:20 42537 c:\windows\system32\keyboard.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 42537 c:\windows\system32\keyboard.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 42809 c:\windows\system32\key01.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 42809 c:\windows\system32\key01.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 14710 c:\windows\system32\kb16.com
    - 2004-08-04 12:00 . 2004-08-04 12:00 14710 c:\windows\system32\kb16.com
    + 2010-07-19 14:03 . 2002-08-29 12:00 12288 c:\windows\system32\jsproxy.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 47952 c:\windows\system32\jobexec.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 47952 c:\windows\system32\jobexec.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 65536 c:\windows\system32\jgsh400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 65536 c:\windows\system32\jgsh400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 45568 c:\windows\system32\jgsd400.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\jgsd400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 42496 c:\windows\system32\jgpl400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 35840 c:\windows\system32\jgmd400.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 35840 c:\windows\system32\jgmd400.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 44544 c:\windows\system32\jgaw400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 44544 c:\windows\system32\jgaw400.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 14878 c:\windows\system32\jdbgmgr.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 63007 c:\windows\system32\javaprxy.dll
    + 2001-08-18 05:36 . 2002-08-29 19:00 45568 c:\windows\system32\iyuv_32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 49664 c:\windows\system32\ixsso.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 91648 c:\windows\system32\iuctl.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 28672 c:\windows\system32\isrdbg32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 77824 c:\windows\system32\isign32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 13312 c:\windows\system32\irclass.dll
    - 2008-11-17 16:03 . 2004-08-04 12:00 13312 c:\windows\system32\irclass.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 20992 c:\windows\system32\ipxwan.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 66560 c:\windows\system32\ipxsap.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 66560 c:\windows\system32\ipxsap.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 39936 c:\windows\system32\ipxrtmgr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 39936 c:\windows\system32\ipxrtmgr.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 22016 c:\windows\system32\ipxroute.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 21504 c:\windows\system32\ipxrip.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 21504 c:\windows\system32\ipxrip.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 69120 c:\windows\system32\ipxpromn.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 69120 c:\windows\system32\ipxpromn.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 83968 c:\windows\system32\ipxmontr.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 83968 c:\windows\system32\ipxmontr.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 60928 c:\windows\system32\ipv6.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 44032 c:\windows\system32\ipsec6.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 44032 c:\windows\system32\ipsec6.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 82944 c:\windows\system32\iphlpapi.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 51712 c:\windows\system32\ipconfig.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 30720 c:\windows\system32\iologmsg.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 30720 c:\windows\system32\iologmsg.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 69632 c:\windows\system32\inseng.dll
    + 2009-08-05 20:15 . 1999-01-28 12:44 49152 c:\windows\system32\INETWH32.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 47616 c:\windows\system32\inetres.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 14336 c:\windows\system32\inetppui.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 68096 c:\windows\system32\inetpp.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 31232 c:\windows\system32\inetmib1.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 30208 c:\windows\system32\imgutil.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 36922 c:\windows\system32\imeshare.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 73728 c:\windows\system32\ils.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 70656 c:\windows\system32\ifsutil.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 70656 c:\windows\system32\ifsutil.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 99840 c:\windows\system32\iexpress.exe
    + 2010-07-19 14:03 . 2002-08-29 12:00 59392 c:\windows\system32\iesetup.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 23040 c:\windows\system32\iernonce.dll
    + 2010-07-19 14:03 . 2002-08-29 12:00 28672 c:\windows\system32\ie4uinit.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 61440 c:\windows\system32\icwphbk.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 69632 c:\windows\system32\icwdial.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 54784 c:\windows\system32\icmui.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 54784 c:\windows\system32\icmui.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 16384 c:\windows\system32\icfgnt5.dll
    - 2008-11-17 16:17 . 2004-08-04 12:00 16384 c:\windows\system32\icfgnt5.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 59392 c:\windows\system32\iassvcs.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 59392 c:\windows\system32\iassvcs.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 86528 c:\windows\system32\iassam.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 86528 c:\windows\system32\iassam.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 17920 c:\windows\system32\iaspolcy.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 17920 c:\windows\system32\iaspolcy.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\iasnap.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 62464 c:\windows\system32\iasnap.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 32256 c:\windows\system32\iashlpr.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 32256 c:\windows\system32\iashlpr.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 41472 c:\windows\system32\iasads.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 41472 c:\windows\system32\iasads.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 23552 c:\windows\system32\iasacct.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 23552 c:\windows\system32\iasacct.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 39936 c:\windows\system32\htui.dll
    + 2008-04-14 04:41 . 2009-10-21 05:38 25088 c:\windows\system32\httpapi.dll
    + 2009-08-05 20:15 . 1998-10-15 15:28 85504 c:\windows\system32\HtmlWH.dll
    - 2008-11-17 16:15 . 2004-08-04 12:00 44544 c:\windows\system32\hticons.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 44544 c:\windows\system32\hticons.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 14848 c:\windows\system32\hnetmon.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\hnetmon.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 77850 c:\windows\system32\hlink.dll

  14. #14
    Join Date
    Jun 2009
    Posts
    97
    + 2001-08-18 05:36 . 2002-08-29 19:00 22528 c:\windows\system32\hid.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 37888 c:\windows\system32\hhsetup.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 14848 c:\windows\system32\help.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 37888 c:\windows\system32\grpconv.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 19694 c:\windows\system32\graphics.com
    - 2004-08-04 12:00 . 2004-08-04 12:00 19694 c:\windows\system32\graphics.com
    + 2010-07-19 14:02 . 2002-08-29 12:00 26112 c:\windows\system32\graftabl.com
    - 2004-08-04 12:00 . 2004-08-04 12:00 26112 c:\windows\system32\graftabl.com
    + 2010-07-19 14:02 . 2002-08-29 12:00 24576 c:\windows\system32\gdi.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 24576 c:\windows\system32\gdi.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 76800 c:\windows\system32\gcdef.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 76800 c:\windows\system32\gcdef.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 40448 c:\windows\system32\ftp.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 56320 c:\windows\system32\fsutil.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 56320 c:\windows\system32\fsutil.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 81408 c:\windows\system32\fsusd.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 81408 c:\windows\system32\fsusd.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 55296 c:\windows\system32\freecell.exe
    - 2008-11-17 16:15 . 2004-08-04 12:00 55296 c:\windows\system32\freecell.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 25600 c:\windows\system32\format.com
    + 2010-07-19 14:02 . 2002-08-29 12:00 19456 c:\windows\system32\fontview.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 79360 c:\windows\system32\fontsub.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 16384 c:\windows\system32\fmifs.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 16384 c:\windows\system32\fmifs.dll
    + 2010-02-20 16:20 . 2010-02-20 16:20 31616 c:\windows\system32\FM20ENU.DLL
    + 2010-07-19 14:02 . 2002-08-29 12:00 82432 c:\windows\system32\fldrclnr.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 25088 c:\windows\system32\findstr.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 18432 c:\windows\system32\feclient.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 14848 c:\windows\system32\fc.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 14848 c:\windows\system32\fc.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 66560 c:\windows\system32\faultrep.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 40960 c:\windows\system32\extrac32.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 15872 c:\windows\system32\expand.exe
    + 2003-03-27 06:26 . 2002-08-29 19:00 15872 c:\windows\system32\expand.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 49152 c:\windows\system32\eventlog.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 33280 c:\windows\system32\eventcls.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 33280 c:\windows\system32\eventcls.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 39424 c:\windows\system32\esentutl.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 39424 c:\windows\system32\esentutl.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 17408 c:\windows\system32\esentprf.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 17408 c:\windows\system32\esentprf.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 19456 c:\windows\system32\ersvc.dll
    + 2010-03-20 14:48 . 2004-03-03 06:10 21390 c:\windows\system32\EPPICPattern5.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 11811 c:\windows\system32\EPPICPattern4.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 24903 c:\windows\system32\EPPICPattern3.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 20148 c:\windows\system32\EPPICPattern2.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 31053 c:\windows\system32\EPPICPattern131.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 27417 c:\windows\system32\EPPICPattern121.dat
    + 2010-03-20 14:48 . 2004-03-03 06:10 26154 c:\windows\system32\EPPICPattern1.dat
    + 2010-03-20 14:48 . 2006-10-31 00:10 71840 c:\windows\system32\EPPicMgr.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 12288 c:\windows\system32\encapi.dll
    - 2008-11-17 16:16 . 2008-11-17 16:16 21640 c:\windows\system32\emptyregdb.dat
    + 2003-03-27 07:38 . 2003-03-27 07:38 21640 c:\windows\system32\emptyregdb.dat
    - 2004-08-04 12:00 . 2004-08-04 12:00 12642 c:\windows\system32\edlin.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 12642 c:\windows\system32\edlin.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 69886 c:\windows\system32\edit.com
    + 2010-07-19 14:02 . 2002-08-29 12:00 69886 c:\windows\system32\edit.com
    + 2010-03-20 14:59 . 2008-08-08 19:09 86528 c:\windows\system32\E_FLBFBE.DLL
    + 2010-03-20 14:59 . 2007-12-07 19:01 78848 c:\windows\system32\E_FD4BFBE.DLL
    + 2010-07-19 14:02 . 2002-08-29 12:00 15872 c:\windows\system32\dvdupgrd.exe
    + 2001-08-18 05:36 . 2002-08-29 19:00 55296 c:\windows\system32\dvdplay.exe
    - 2001-08-17 22:36 . 2004-08-04 12:00 55296 c:\windows\system32\dvdplay.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 16896 c:\windows\system32\dswave.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 47104 c:\windows\system32\dssec.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 84992 c:\windows\system32\dskquota.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 66560 c:\windows\system32\dsdmoprp.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 62976 c:\windows\system32\dsauth.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 62976 c:\windows\system32\dsauth.dll
    - 2008-04-14 04:41 . 2008-04-14 04:41 16384 c:\windows\system32\ds32gt.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 16384 c:\windows\system32\ds32gt.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 45568 c:\windows\system32\drwtsn32.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 45568 c:\windows\system32\drwtsn32.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 28112 c:\windows\system32\drwatson.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 28112 c:\windows\system32\drwatson.exe
    + 2009-11-19 10:16 . 2009-08-28 19:42 40448 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys
    + 2009-08-02 07:52 . 2008-08-26 09:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2009-11-19 10:16 . 2009-08-28 19:42 17408 c:\windows\system32\DRVSTORE\netaapl_F433E854B3FF3BEE74986FDE8E16A64162342BFF\netaapl.sys
    + 2010-03-20 14:47 . 2007-11-28 18:15 58285 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\SAGENT4.EXE
    + 2010-03-20 14:47 . 2008-10-18 03:50 64928 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EPUTY287.EXE
    + 2010-03-20 14:47 . 2008-12-12 17:00 52066 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EPUPDATE.DAT
    + 2010-03-20 14:47 . 2008-04-24 20:06 11281 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EPIPGI20.DLL
    + 2010-03-20 14:47 . 2007-12-07 19:01 40850 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\ECBTEGB.DLL
    + 2010-03-20 14:47 . 2003-05-21 19:27 29535 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\ECBTEG.DLL
    + 2010-03-20 14:47 . 2006-11-22 18:05 37624 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPSHRE4.DLL
    + 2010-03-20 14:47 . 2008-08-08 19:09 38997 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPMONB.DLL
    + 2010-03-20 14:47 . 2007-11-28 22:13 42757 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPMON25.DLL
    + 2010-03-20 14:47 . 2007-11-28 22:08 89231 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPLPT5.DLL
    + 2010-03-20 14:47 . 2000-06-07 18:01 13417 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPCHP.DLL
    + 2010-03-20 14:47 . 2007-12-07 23:06 23215 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPBIDI6.DLL
    + 2010-03-20 14:47 . 2007-12-07 23:06 23214 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBPBIDI.DLL
    + 2010-03-20 14:47 . 2007-12-07 23:03 20200 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBAPI6.DLL
    + 2010-03-20 14:47 . 2007-11-28 22:15 78160 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBAPI5.DLL
    + 2010-03-20 14:47 . 2007-11-28 22:15 78160 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\EBAPI4.DLL
    + 2010-03-20 14:47 . 2008-09-12 22:02 68830 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_SKU327.DLL
    + 2010-03-20 14:47 . 2007-12-17 18:03 83689 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_SIACS7.EXE
    + 2010-03-20 14:47 . 2008-12-03 23:00 11044 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_SBE0B7.DLL
    + 2010-03-20 14:47 . 2008-11-12 23:00 43441 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_SBB0B5.DLL
    + 2010-03-20 14:47 . 2006-04-24 19:00 49752 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_SAGSET.DLL
    + 2010-03-20 14:47 . 2007-12-17 21:00 74008 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_S40ST7.EXE
    + 2010-03-20 14:47 . 2007-01-11 21:02 59293 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_S40RP7.EXE
    + 2010-03-20 14:47 . 2008-10-27 22:05 88778 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_S40RN7.EXE
    + 2010-03-20 14:47 . 2007-11-15 22:02 88688 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_S40MT7.EXE
    + 2010-03-20 14:47 . 2008-09-30 18:00 89462 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_H5UIR7.DLL
    + 2010-03-20 14:47 . 2006-05-18 21:20 29073 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DUMWF5.DLL
    + 2010-03-20 14:47 . 2008-09-08 22:00 79529 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DMAI30.DLL
    + 2010-03-20 14:47 . 2008-09-29 18:00 68364 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DLMW01.DLL
    + 2010-03-20 14:47 . 2008-10-30 01:01 70173 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DIX0RE.DLL
    + 2010-03-20 14:47 . 2008-12-20 01:01 30335 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DI0FBE.DLL
    + 2010-03-20 14:47 . 2005-11-30 21:20 87332 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DHA730.DLL
    + 2010-03-20 14:47 . 2008-07-28 22:00 50124 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DDSP30.DLL
    + 2010-03-20 14:47 . 2006-11-13 18:00 12334 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DAUDF1.DLL
    + 2010-03-20 14:47 . 2007-09-01 02:32 49825 c:\windows\system32\DRVSTORE\E_DF1FBE_6F6526A63F718619507CA479B9F6E8384D3223C1\WINVISTA_XP_2K\E_DARED1.DLL
    + 2009-08-02 07:51 . 2009-02-09 07:37 22016 c:\windows\system32\DRVSTORE\ccdcmbo_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmbo.sys
    + 2009-08-02 07:51 . 2009-02-09 07:37 91136 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcls.dll
    + 2009-08-02 07:51 . 2009-02-09 07:37 17664 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmb.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 11776 c:\windows\system32\drprov.dll
    + 2003-03-27 08:18 . 2002-12-12 08:34 82432 c:\windows\system32\drmstor.dll
    + 2006-09-28 19:00 . 2008-01-18 21:53 83328 c:\windows\system32\drivers\WudfRd.sys
    + 2006-09-28 18:55 . 2008-01-18 21:52 77696 c:\windows\system32\drivers\WudfPf.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 12032 c:\windows\system32\drivers\ws2ifsl.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 12032 c:\windows\system32\drivers\ws2ifsl.sys
    + 2008-03-27 15:27 . 2008-03-27 15:27 35040 c:\windows\system32\drivers\wdfldr.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 33280 c:\windows\system32\drivers\wanarp.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 49152 c:\windows\system32\drivers\volsnap.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 70912 c:\windows\system32\drivers\videoprt.sys
    + 2003-03-27 08:43 . 2001-08-18 04:58 27392 c:\windows\system32\drivers\VIAAGP.SYS
    + 2010-07-19 14:05 . 2002-08-29 12:00 19712 c:\windows\system32\drivers\vga.sys
    + 2001-08-17 21:02 . 2002-08-29 19:00 58112 c:\windows\system32\drivers\vdmindvd.sys
    - 2001-08-17 14:02 . 2004-08-04 12:00 58112 c:\windows\system32\drivers\vdmindvd.sys
    + 2009-08-02 08:04 . 2008-04-13 23:15 26112 c:\windows\system32\drivers\usbser.sys
    + 2002-08-29 08:32 . 2002-08-29 19:00 15232 c:\windows\system32\drivers\usbintel.sys
    + 2001-08-17 21:03 . 2002-08-29 19:00 23936 c:\windows\system32\drivers\usbcamd2.sys
    + 2001-08-17 21:03 . 2002-08-29 19:00 23808 c:\windows\system32\drivers\usbcamd.sys

  15. #15
    Join Date
    Jun 2009
    Posts
    97
    + 2009-01-25 16:14 . 2009-08-28 19:42 40448 c:\windows\system32\drivers\usbaapl.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 11136 c:\windows\system32\drivers\usb8023.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 36736 c:\windows\system32\drivers\ultra.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 64000 c:\windows\system32\drivers\udfs.sys
    + 2001-08-17 21:06 . 2002-08-29 19:00 21376 c:\windows\system32\drivers\tsbvcap.sys
    - 2001-08-17 14:06 . 2004-08-04 12:00 21376 c:\windows\system32\drivers\tsbvcap.sys
    - 2001-08-17 14:01 . 2004-08-04 12:00 51712 c:\windows\system32\drivers\tosdvd.sys
    + 2001-08-17 21:01 . 2002-08-29 19:00 51712 c:\windows\system32\drivers\tosdvd.sys
    + 2003-03-27 08:38 . 2002-08-29 18:46 38024 c:\windows\system32\drivers\termdd.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 20232 c:\windows\system32\drivers\tdtcp.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 11144 c:\windows\system32\drivers\tdpipe.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 16256 c:\windows\system32\drivers\tdi.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 13824 c:\windows\system32\drivers\tape.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 32640 c:\windows\system32\drivers\symc8xx.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 16256 c:\windows\system32\drivers\symc810.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 30688 c:\windows\system32\drivers\sym_u3.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 28384 c:\windows\system32\drivers\sym_hi.sys
    + 2002-08-29 08:32 . 2002-08-29 19:00 44416 c:\windows\system32\drivers\stream.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 69248 c:\windows\system32\drivers\sr.sys
    + 2010-07-19 14:05 . 2002-08-29 12:00 19072 c:\windows\system32\drivers\sparrow.sys
    + 2002-08-29 08:33 . 2002-08-29 19:00 24448 c:\windows\system32\drivers\sonydcam.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 14592 c:\windows\system32\drivers\smclib.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 14592 c:\windows\system32\drivers\smclib.sys
    + 2003-03-27 08:42 . 2001-08-18 04:58 26112 c:\windows\system32\drivers\SISAGP.SYS
    + 2010-07-19 14:04 . 2002-08-29 12:00 10496 c:\windows\system32\drivers\sfloppy.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 62464 c:\windows\system32\drivers\serial.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 14976 c:\windows\system32\drivers\serenum.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 27440 c:\windows\system32\drivers\secdrv.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 90240 c:\windows\system32\drivers\scsiport.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 27648 c:\windows\system32\drivers\rndismp.sys
    + 2001-08-17 20:24 . 2002-08-29 19:00 12032 c:\windows\system32\drivers\riodrv.sys
    - 2001-08-17 13:24 . 2004-08-04 12:00 12032 c:\windows\system32\drivers\riodrv.sys
    - 2001-08-17 13:24 . 2004-08-04 12:00 12032 c:\windows\system32\drivers\rio8drv.sys
    + 2001-08-17 20:24 . 2002-08-29 19:00 12032 c:\windows\system32\drivers\rio8drv.sys
    + 2003-03-26 23:35 . 2002-08-29 08:27 56576 c:\windows\system32\drivers\redbook.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 34432 c:\windows\system32\drivers\rawwan.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 34432 c:\windows\system32\drivers\rawwan.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 16512 c:\windows\system32\drivers\raspti.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 16512 c:\windows\system32\drivers\raspti.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 46336 c:\windows\system32\drivers\raspptp.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 38912 c:\windows\system32\drivers\raspppoe.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 48384 c:\windows\system32\drivers\rasl2tp.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 49024 c:\windows\system32\drivers\ql1280.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 40448 c:\windows\system32\drivers\ql1240.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 45312 c:\windows\system32\drivers\ql12160.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 33152 c:\windows\system32\drivers\ql10wnt.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 40320 c:\windows\system32\drivers\ql1080.sys
    + 2009-06-27 09:12 . 2008-08-20 17:58 44944 c:\windows\system32\drivers\PxHelp20.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 17792 c:\windows\system32\drivers\ptilink.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 17792 c:\windows\system32\drivers\ptilink.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 66048 c:\windows\system32\drivers\psched.sys
    + 2002-08-29 08:05 . 2002-08-29 19:00 30592 c:\windows\system32\drivers\processr.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 27296 c:\windows\system32\drivers\perc2.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 23680 c:\windows\system32\drivers\pciidex.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 62976 c:\windows\system32\drivers\pci.sys
    + 2009-08-02 07:52 . 2008-08-26 09:26 18816 c:\windows\system32\drivers\pccsmcfd.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 18688 c:\windows\system32\drivers\partmgr.sys
    + 2002-08-29 08:27 . 2002-08-29 19:00 76032 c:\windows\system32\drivers\parport.sys
    + 2002-08-29 08:05 . 2002-08-29 19:00 37504 c:\windows\system32\drivers\p3.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 55936 c:\windows\system32\drivers\nwlnkspx.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 55936 c:\windows\system32\drivers\nwlnkspx.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 63232 c:\windows\system32\drivers\nwlnknb.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 63232 c:\windows\system32\drivers\nwlnknb.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 84864 c:\windows\system32\drivers\nwlnkipx.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 32512 c:\windows\system32\drivers\nwlnkfwd.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 32512 c:\windows\system32\drivers\nwlnkfwd.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 12416 c:\windows\system32\drivers\nwlnkflt.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 12416 c:\windows\system32\drivers\nwlnkflt.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 29568 c:\windows\system32\drivers\npfs.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 38272 c:\windows\system32\drivers\nmnt.sys
    - 2001-08-17 13:24 . 2004-08-04 12:00 12032 c:\windows\system32\drivers\nikedrv.sys
    + 2001-08-17 20:24 . 2002-08-29 19:00 12032 c:\windows\system32\drivers\nikedrv.sys
    + 2002-08-29 08:33 . 2002-08-29 19:00 57984 c:\windows\system32\drivers\nic1394.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 33152 c:\windows\system32\drivers\netbios.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 38016 c:\windows\system32\drivers\ndproxy.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 87552 c:\windows\system32\drivers\ndiswan.sys
    + 2002-08-29 08:35 . 2002-08-29 19:00 12288 c:\windows\system32\drivers\ndisuio.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 33792 c:\windows\system32\drivers\msgpc.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 18048 c:\windows\system32\drivers\msfs.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 17280 c:\windows\system32\drivers\mraid35x.sys
    + 2010-07-19 14:04 . 2002-08-29 12:00 37504 c:\windows\system32\drivers\mountmgr.sys
    + 2003-03-27 08:38 . 2002-08-29 16:27 22016 c:\windows\system32\drivers\mouclass.sys
    + 2001-08-17 20:57 . 2002-08-29 19:00 28800 c:\windows\system32\drivers\modem.sys
    + 2001-08-17 20:58 . 2002-08-29 19:00 62208 c:\windows\system32\drivers\mf.sys
    + 2003-03-27 06:27 . 2002-08-29 19:00 79744 c:\windows\system32\drivers\ksecdd.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 23424 c:\windows\system32\drivers\kbdclass.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 35840 c:\windows\system32\drivers\isapnp.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 10496 c:\windows\system32\drivers\irenum.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 57984 c:\windows\system32\drivers\ipsec.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 79488 c:\windows\system32\drivers\ipnat.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 19584 c:\windows\system32\drivers\ipinip.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 32896 c:\windows\system32\drivers\ipfltdrv.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 32896 c:\windows\system32\drivers\ipfltdrv.sys
    + 2009-11-20 08:12 . 2010-01-28 11:34 87104 c:\windows\system32\drivers\inspect.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 16000 c:\windows\system32\drivers\ini910u.sys
    + 2010-07-19 14:03 . 2002-08-29 12:00 39808 c:\windows\system32\drivers\imapi.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 51072 c:\windows\system32\drivers\i8042prt.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 17536 c:\windows\system32\drivers\i2omp.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 25952 c:\windows\system32\drivers\hpn.sys
    - 2001-08-17 13:57 . 2004-08-04 12:00 12160 c:\windows\system32\drivers\fsvga.sys
    + 2001-08-17 20:57 . 2002-08-29 19:00 12160 c:\windows\system32\drivers\fsvga.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 19712 c:\windows\system32\drivers\flpydisk.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 34944 c:\windows\system32\drivers\fips.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 26240 c:\windows\system32\drivers\fdc.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 68992 c:\windows\system32\drivers\dxg.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 10496 c:\windows\system32\drivers\dxapi.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 10496 c:\windows\system32\drivers\dxapi.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 20192 c:\windows\system32\drivers\dpti2o.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 13184 c:\windows\system32\drivers\diskdump.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 33792 c:\windows\system32\drivers\disk.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 14720 c:\windows\system32\drivers\dac960nt.sys
    + 2002-08-29 08:05 . 2002-08-29 19:00 31488 c:\windows\system32\drivers\crusoe.sys
    + 2001-08-17 20:24 . 2002-08-29 19:00 11776 c:\windows\system32\drivers\cpqdap01.sys
    - 2001-08-17 13:24 . 2004-08-04 12:00 11776 c:\windows\system32\drivers\cpqdap01.sys
    + 2010-07-19 14:02 . 2002-08-29 12:00 14976 c:\windows\system32\drivers\cpqarray.sys
    + 2009-11-20 08:12 . 2010-01-28 11:34 25160 c:\windows\system32\drivers\cmdhlp.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 46336 c:\windows\system32\drivers\classpnp.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 47488 c:\windows\system32\drivers\cdrom.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 59648 c:\windows\system32\drivers\cdfs.sys
    + 2001-08-17 20:52 . 2002-08-29 19:00 18688 c:\windows\system32\drivers\cdaudio.sys
    - 2001-08-17 13:52 . 2004-08-04 12:00 18688 c:\windows\system32\drivers\cdaudio.sys
    + 2009-08-02 07:51 . 2009-02-09 07:37 22016 c:\windows\system32\drivers\ccdcmbo.sys
    + 2009-08-02 07:51 . 2009-02-09 07:37 17664 c:\windows\system32\drivers\ccdcmb.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 13952 c:\windows\system32\drivers\cbidf2k.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 13952 c:\windows\system32\drivers\cbidf2k.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 68864 c:\windows\system32\drivers\bridge.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 53888 c:\windows\system32\drivers\atmlane.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 31360 c:\windows\system32\drivers\atmepvc.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 31360 c:\windows\system32\drivers\atmepvc.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 57216 c:\windows\system32\drivers\atmarpc.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 86912 c:\windows\system32\drivers\atapi.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 13568 c:\windows\system32\drivers\asyncmac.sys
    + 2009-07-07 08:42 . 2008-05-06 06:01 16512 c:\windows\system32\drivers\ASPI32.SYS
    + 2010-07-19 14:01 . 2002-08-29 12:00 14848 c:\windows\system32\drivers\asc3550.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 22400 c:\windows\system32\drivers\asc3350p.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 26496 c:\windows\system32\drivers\asc.sys
    + 2002-08-29 08:33 . 2002-08-29 19:00 57344 c:\windows\system32\drivers\arp1394.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 12032 c:\windows\system32\drivers\amsint.sys
    + 2002-08-29 08:05 . 2002-08-29 19:00 32512 c:\windows\system32\drivers\amdk7.sys
    + 2002-08-29 08:05 . 2002-08-29 19:00 32000 c:\windows\system32\drivers\amdk6.sys
    + 2003-03-27 08:39 . 2001-08-18 04:58 27648 c:\windows\system32\drivers\AMDAGP.SYS
    + 2003-03-27 08:39 . 2001-08-18 04:58 27648 c:\windows\system32\drivers\ALIM1541.SYS
    + 2010-07-19 14:01 . 2002-08-29 12:00 56960 c:\windows\system32\drivers\aic78xx.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 55168 c:\windows\system32\drivers\aic78u2.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 12800 c:\windows\system32\drivers\aha154x.sys
    + 2003-03-27 08:42 . 2001-08-18 04:58 29056 c:\windows\system32\drivers\AGPCPQ.SYS
    + 2003-03-27 08:42 . 2001-08-18 04:58 25472 c:\windows\system32\drivers\AGP440.SYS
    + 2010-07-19 14:01 . 2002-08-29 12:00 11648 c:\windows\system32\drivers\acpiec.sys
    - 2004-08-04 12:00 . 2004-08-04 12:00 11648 c:\windows\system32\drivers\acpiec.sys
    + 2010-07-19 14:01 . 2002-08-29 12:00 23552 c:\windows\system32\drivers\ABP480N5.SYS
    + 2010-07-19 14:02 . 2002-08-29 12:00 49664 c:\windows\system32\dpwsockx.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 42768 c:\windows\system32\dpwsock.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 42768 c:\windows\system32\dpwsock.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 58368 c:\windows\system32\dpvsetup.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 24064 c:\windows\system32\dpvacm.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 53520 c:\windows\system32\dpserial.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 53520 c:\windows\system32\dpserial.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 61952 c:\windows\system32\dpnwsock.dll
    - 2004-08-04 12:00 . 2004-08-04 12:00 61952 c:\windows\system32\dpnwsock.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 18944 c:\windows\system32\dpnsvr.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 62464 c:\windows\system32\dpnmodem.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 62464 c:\windows\system32\dpnmodem.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 38400 c:\windows\system32\dpnlobby.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 56320 c:\windows\system32\dpnhupnp.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 29696 c:\windows\system32\dpnhpast.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 26112 c:\windows\system32\dpnaddr.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 20992 c:\windows\system32\dpmodemx.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 26112 c:\windows\system32\dplaysvr.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 33040 c:\windows\system32\dplay.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 33040 c:\windows\system32\dplay.dll
    + 2010-07-19 14:02 . 2002-08-29 12:00 53840 c:\windows\system32\dosx.exe
    - 2008-04-13 21:24 . 2008-04-13 21:24 53840 c:\windows\system32\dosx.exe
    - 2004-08-04 12:00 . 2004-08-04 12:00 10752 c:\windows\system32\doskey.exe
    + 2010-07-19 14:02 . 2002-08-29 12:00 10752 c:\windows\system32\doskey.exe

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •