ComboFix 08-10-08.02 - Mr.White 2008-10-09 20:57:20.3 - NTFSx86 Microsoft® Windows Vista™ Ultimate 6.0.6000.0.1252.1.1044.18.1364 [GMT 2:00] Running from: C:\Users\Mr.White\Downloads\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2008-09-09 to 2008-10-09 ))))))))))))))))))))))))))))))) . 2008-10-09 20:56 . 2008-10-09 20:56 d-------- C:\32788R22FWJFW 2008-10-08 21:30 . 2008-10-08 21:30 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-10-08 21:02 . 2008-08-17 12:33 678,408 --a------ C:\Windows\System32\gpprefcl.dll 2008-10-08 21:01 . 2006-12-20 08:03 229,888 --a------ C:\Windows\System32\msshsq.dll 2008-10-08 20:17 . 2008-10-08 20:17 d-------- C:\Users\All Users\MailFrontier 2008-10-08 20:17 . 2008-10-08 20:17 d-------- C:\ProgramData\MailFrontier 2008-10-08 20:12 . 2008-10-08 20:12 d-------- C:\Users\All Users\CheckPoint 2008-10-08 20:12 . 2008-10-08 20:12 d-------- C:\ProgramData\CheckPoint 2008-10-08 20:11 . 2008-10-08 21:14 d-------- C:\Windows\Internet Logs 2008-10-08 19:46 . 2008-10-08 19:46 d-------- C:\Users\All Users\Avg8 2008-10-08 19:46 . 2008-10-08 19:46 d-------- C:\ProgramData\Avg8 2008-10-08 10:59 . 2008-10-08 10:59 d-------- C:\Program Files\Alwil Software 2008-10-08 10:53 . 2008-10-08 10:53 d-------- C:\Users\Mr.White\.housecall6.6 2008-10-08 08:53 . 2007-12-06 06:09 1,585,664 --a------ C:\Windows\System32\setupapi.dll 2008-10-07 19:01 . 2008-10-07 19:20 d-------- C:\Users\Mr.White\amsn 2008-10-07 15:07 . 2008-10-07 15:07 268,800 --a------ C:\Windows\System32\es.dll 2008-10-07 14:40 . 2008-10-07 14:41 d-------- C:\Program Files\aMSN 2008-10-07 12:44 . 2008-10-07 12:44 d-------- C:\Program Files\Microsoft Works 2008-10-07 12:41 . 2008-10-07 12:41 d-------- C:\Program Files\Microsoft.NET 2008-10-07 12:37 . 2008-10-07 12:47 d-------- C:\Users\All Users\Microsoft Help 2008-10-07 12:37 . 2008-10-07 12:47 d-------- C:\ProgramData\Microsoft Help 2008-10-07 12:36 . 2008-10-07 12:36 dr-h----- C:\MSOCache 2008-10-07 12:29 . 2008-10-07 12:29 d-------- C:\Program Files\DAEMON Tools Lite 2008-10-07 12:21 . 2008-10-07 12:21 81 --a------ C:\Windows\wininit.ini 2008-10-07 12:13 . 2008-10-07 12:13 717,296 --a------ C:\Windows\System32\drivers\sptd.sys 2008-10-07 12:12 . 2008-10-07 12:12 d-------- C:\Users\Mr.White\AppData\Roaming\DAEMON Tools 2008-10-07 11:44 . 2008-10-07 11:47 d-------- C:\Program Files\Screamer Radio 2008-10-07 11:39 . 2008-10-07 11:39 d-------- C:\Windows\PCHEALTH 2008-10-07 11:02 . 2008-10-07 11:02 d--h----- C:\Program Files\InstallShield Installation Information 2008-10-07 11:00 . 2008-10-07 13:00 d-------- C:\Program Files\Logitech 2008-10-06 23:58 . 2008-10-08 18:19 d-------- C:\Users\Mr.White\AppData\Roaming\Comodo 2008-10-06 23:58 . 2008-10-08 18:19 d-------- C:\Program Files\COMODO 2008-10-06 23:57 . 2008-10-09 00:17 d-------- C:\Users\All Users\Spybot - Search & Destroy 2008-10-06 23:57 . 2008-10-09 00:17 d-------- C:\ProgramData\Spybot - Search & Destroy 2008-10-06 23:57 . 2008-10-09 00:17 d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-06 22:28 . 2008-10-06 22:28 d-------- C:\Program Files\uTorrent 2008-10-06 22:27 . 2008-10-09 00:06 d-------- C:\Users\Mr.White\AppData\Roaming\uTorrent 2008-10-06 19:49 . 2008-10-06 19:49 361,984 --a------ C:\Windows\System32\IPSECSVC.DLL 2008-10-06 19:49 . 2008-10-06 19:49 272,896 --a------ C:\Windows\System32\polstore.dll 2008-10-06 19:49 . 2008-10-06 19:49 61,440 --a------ C:\Windows\System32\winipsec.dll 2008-10-06 19:49 . 2008-10-06 19:49 28,672 --a------ C:\Windows\System32\FwRemoteSvr.dll 2008-10-06 19:45 . 2008-10-06 19:45 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll 2008-10-06 19:45 . 2008-10-06 19:45 1,686,528 --a------ C:\Windows\System32\gameux.dll 2008-10-06 19:45 . 2008-10-06 19:45 28,160 --a------ C:\Windows\System32\Apphlpdm.dll 2008-10-06 19:43 . 2008-10-06 19:43 205,824 --a------ C:\Windows\System32\msoeacct.dll 2008-10-06 19:43 . 2008-10-06 19:43 87,040 --a------ C:\Windows\System32\msoert2.dll 2008-10-06 19:43 . 2008-10-06 19:43 39,424 --a------ C:\Windows\System32\ACCTRES.dll 2008-10-06 19:41 . 2008-10-06 19:41 194,560 --a------ C:\Windows\System32\WebClnt.dll 2008-10-06 19:41 . 2008-10-06 19:41 110,080 --a------ C:\Windows\System32\drivers\mrxdav.sys 2008-10-06 19:39 . 2008-10-06 19:39 376,320 --a------ C:\Windows\System32\winsrv.dll 2008-10-06 19:39 . 2008-10-06 19:39 49,664 --a------ C:\Windows\System32\csrsrv.dll 2008-10-06 19:33 . 2008-10-06 19:33 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys 2008-10-06 19:33 . 2008-10-06 19:33 41,984 --a------ C:\Windows\System32\drivers\monitor.sys 2008-10-06 19:32 . 2008-10-06 19:32 2,048 --a------ C:\Windows\System32\tzres.dll 2008-10-06 19:31 . 2008-10-06 19:31 303,616 --a------ C:\Windows\System32\wmpeffects.dll 2008-10-06 19:30 . 2008-10-06 19:30 414,208 --a------ C:\Windows\System32\msscp.dll 2008-10-06 19:29 . 2008-10-06 19:29 8,147,968 --a------ C:\Windows\System32\wmploc.DLL 2008-10-06 19:29 . 2008-10-06 19:29 356,864 --a------ C:\Windows\System32\MediaMetadataHandler.dll 2008-10-06 19:29 . 2008-10-06 19:29 7,680 --a------ C:\Windows\System32\spwmp.dll 2008-10-06 19:29 . 2008-10-06 19:29 4,096 --a------ C:\Windows\System32\msdxm.ocx 2008-10-06 19:29 . 2008-10-06 19:29 4,096 --a------ C:\Windows\System32\dxmasf.dll 2008-10-06 19:28 . 2008-10-06 19:28 396,800 --a------ C:\Windows\System32\MPSSVC.dll 2008-10-06 19:28 . 2008-10-06 19:28 392,192 --a------ C:\Windows\System32\FirewallAPI.dll 2008-10-06 19:28 . 2008-10-06 19:28 178,688 --a------ C:\Windows\System32\iphlpsvc.dll 2008-10-06 19:28 . 2008-10-06 19:28 86,016 --a------ C:\Windows\System32\icfupgd.dll 2008-10-06 19:28 . 2008-10-06 19:28 63,488 --a------ C:\Windows\System32\drivers\mpsdrv.sys 2008-10-06 19:28 . 2008-10-06 19:28 61,952 --a------ C:\Windows\System32\cmifw.dll 2008-10-06 19:28 . 2008-10-06 19:28 23,040 --a------ C:\Windows\System32\drivers\tunnel.sys 2008-10-06 19:28 . 2008-10-06 19:28 16,896 --a------ C:\Windows\System32\wfapigp.dll 2008-10-06 19:28 . 2008-10-06 19:28 15,360 --a------ C:\Windows\System32\drivers\TUNMP.SYS 2008-10-06 19:25 . 2008-10-06 19:25 3,504,696 --a------ C:\Windows\System32\ntkrnlpa.exe 2008-10-06 19:25 . 2008-10-06 19:25 3,470,392 --a------ C:\Windows\System32\ntoskrnl.exe 2008-10-06 19:25 . 2008-10-06 19:25 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys 2008-10-06 19:25 . 2008-10-06 19:25 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys 2008-10-06 19:25 . 2008-10-06 19:25 109,624 --a------ C:\Windows\System32\drivers\ataport.sys 2008-10-06 19:25 . 2008-10-06 19:25 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys 2008-10-06 19:25 . 2008-10-06 19:25 21,560 --a------ C:\Windows\System32\drivers\atapi.sys 2008-10-06 19:25 . 2008-10-06 19:25 20,024 --a------ C:\Windows\System32\drivers\viaide.sys 2008-10-06 19:24 . 2008-10-06 19:24 104,448 --a------ C:\Windows\System32\DWWIN.EXE 2008-10-06 19:23 . 2008-10-06 19:23 1,191,936 --a------ C:\Windows\System32\msxml3.dll 2008-10-06 19:23 . 2008-10-06 19:23 2,048 --a------ C:\Windows\System32\msxml3r.dll 2008-10-06 19:22 . 2008-10-06 19:22 337,408 --a------ C:\Windows\System32\intl.cpl 2008-10-06 19:22 . 2008-10-06 19:22 166,912 --a------ C:\Windows\System32\lpksetup.exe 2008-10-06 19:22 . 2008-10-06 19:22 25,600 --a------ C:\Windows\System32\LangCleanupSysprepAction.dll 2008-10-06 19:22 . 2008-10-06 19:22 23,552 --a------ C:\Windows\System32\lpremove.exe 2008-10-06 19:22 . 2008-10-06 19:22 10,240 --a------ C:\Windows\System32\MUILanguageCleanup.dll 2008-10-06 19:21 . 2008-10-06 19:21 224,768 --a------ C:\Windows\System32\drivers\usbport.sys 2008-10-06 19:21 . 2008-10-06 19:21 192,000 --a------ C:\Windows\System32\drivers\usbhub.sys 2008-10-06 19:21 . 2008-10-06 19:21 73,216 --a------ C:\Windows\System32\drivers\usbccgp.sys 2008-10-06 19:21 . 2008-10-06 19:21 38,400 --a------ C:\Windows\System32\drivers\usbehci.sys 2008-10-06 19:21 . 2008-10-06 19:21 23,040 --a------ C:\Windows\System32\drivers\usbuhci.sys 2008-10-06 19:21 . 2008-10-06 19:21 8,704 --a------ C:\Windows\System32\hcrstco.dll 2008-10-06 19:21 . 2008-10-06 19:21 8,704 --a------ C:\Windows\System32\hccoin.dll 2008-10-06 19:21 . 2008-10-06 19:21 5,888 --a------ C:\Windows\System32\drivers\usbd.sys 2008-10-06 19:20 . 2008-10-06 19:20 806,400 --a------ C:\Windows\System32\drivers\tcpip.sys 2008-10-06 19:20 . 2008-10-06 19:20 217,144 --a------ C:\Windows\System32\drivers\netio.sys 2008-10-06 19:20 . 2008-10-06 19:20 167,424 --a------ C:\Windows\System32\tcpipcfg.dll 2008-10-06 19:20 . 2008-10-06 19:20 24,064 --a------ C:\Windows\System32\netcfg.exe 2008-10-06 19:20 . 2008-10-06 19:20 22,016 --a------ C:\Windows\System32\netiougc.exe 2008-10-06 19:18 . 2008-10-06 19:18 12,240,896 --a------ C:\Windows\System32\NlsLexicons0007.dll 2008-10-06 19:12 . 2008-10-06 19:12 2,027,008 --a------ C:\Windows\System32\win32k.sys 2008-10-06 19:11 . 2008-10-06 19:11 296,448 --a------ C:\Windows\System32\gdi32.dll 2008-10-06 19:11 . 2008-10-06 19:11 223,232 --a------ C:\Windows\System32\WMASF.DLL 2008-10-06 19:11 . 2008-10-06 19:11 9,728 --a------ C:\Windows\System32\LAPRXY.DLL 2008-10-06 19:11 . 2008-10-06 19:11 2,048 --a------ C:\Windows\System32\asferror.dll 2008-10-06 19:10 . 2008-10-06 19:10 2,605,568 --a------ C:\Windows\System32\SLsvc.exe 2008-10-06 19:10 . 2008-10-06 19:10 566,784 --a------ C:\Windows\System32\SLCommDlg.dll 2008-10-06 19:10 . 2008-10-06 19:10 351,232 --a------ C:\Windows\System32\SLUI.exe 2008-10-06 19:10 . 2008-10-06 19:10 268,288 --a------ C:\Windows\System32\mcbuilder.exe 2008-10-06 19:10 . 2008-10-06 19:10 223,232 --a------ C:\Windows\System32\SLC.dll 2008-10-06 19:10 . 2008-10-06 19:10 186,368 --a------ C:\Windows\System32\SLLUA.exe 2008-10-06 19:10 . 2008-10-06 19:10 57,856 --a------ C:\Windows\System32\SLUINotify.dll 2008-10-06 19:10 . 2008-10-06 19:10 39,936 --a------ C:\Windows\System32\slcinst.dll 2008-10-06 19:10 . 2008-10-06 19:10 33,280 --a------ C:\Windows\System32\slwmi.dll 2008-10-06 19:09 . 2008-10-06 19:09 1,335,296 --a------ C:\Windows\System32\msxml6.dll 2008-10-06 19:09 . 2008-10-06 19:09 2,048 --a------ C:\Windows\System32\msxml6r.dll 2008-10-06 19:06 . 2008-10-06 19:06 113,664 --a------ C:\Windows\System32\drivers\rmcast.sys 2008-10-06 19:06 . 2008-10-06 19:06 14,848 --a------ C:\Windows\System32\wshrm.dll 2008-10-06 19:06 . 2008-10-06 19:06 11,776 --a------ C:\Windows\System32\sbunattend.exe 2008-10-06 19:05 . 2008-10-06 19:05 83,968 --a------ C:\Windows\System32\dnsrslvr.dll 2008-10-06 19:05 . 2008-10-06 19:05 24,576 --a------ C:\Windows\System32\dnscacheugc.exe 2008-10-06 19:04 . 2008-10-06 19:04 788,992 --a------ C:\Windows\System32\rpcrt4.dll 2008-10-06 19:04 . 2008-10-06 19:04 737,792 --a------ C:\Windows\System32\inetcomm.dll 2008-10-06 19:04 . 2008-10-06 19:04 130,048 --a------ C:\Windows\System32\drivers\srv2.sys 2008-10-06 19:04 . 2008-10-06 19:04 101,888 --a------ C:\Windows\System32\drivers\mrxsmb.sys . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-06 18:32 174 --sha-w C:\Program Files\desktop.ini 2008-10-06 18:24 --------- d-----w C:\Program Files\Windows Sidebar 2008-10-06 18:24 --------- d-----w C:\Program Files\Windows Mail 2008-10-06 18:24 --------- d-----w C:\Program Files\Windows Defender 2008-10-06 18:24 --------- d-----w C:\Program Files\Windows Calendar 2008-10-06 17:45 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll 2008-10-06 17:45 449,536 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-10-06 17:45 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll 2008-10-06 17:45 2,144,256 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-10-06 17:45 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-10-06 17:42 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr 2008-10-06 17:42 67,584 ----a-w C:\Windows\System32\wlanhlp.dll 2008-10-06 17:42 542,720 ----a-w C:\Windows\System32\sysmain.dll 2008-10-06 17:42 502,784 ----a-w C:\Windows\System32\wlansvc.dll 2008-10-06 17:42 47,104 ----a-w C:\Windows\System32\wlanapi.dll 2008-10-06 17:42 297,984 ----a-w C:\Windows\System32\wlansec.dll 2008-10-06 17:42 290,816 ----a-w C:\Windows\System32\wlanmsm.dll 2008-10-06 17:42 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys 2008-10-06 17:42 24,064 ----a-w C:\Windows\System32\wtsapi32.dll 2008-10-06 17:42 2,923,520 ----a-w C:\Windows\explorer.exe 2008-10-06 17:18 9,892,864 ----a-w C:\Windows\System32\NlsLexicons000a.dll 2008-10-06 17:15 826,368 ----a-w C:\Windows\System32\wininet.dll 2008-10-06 17:15 56,320 ----a-w C:\Windows\System32\iesetup.dll 2008-10-06 17:15 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll 2008-10-06 17:15 26,624 ----a-w C:\Windows\System32\ieUnatt.exe 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Start-meny 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Skrivebord 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Programdata 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Maler 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Favoritter 2008-09-26 08:34 --------- d-sh--w C:\ProgramData\Dokumenter 2008-09-26 08:34 --------- d-sh--w C:\Program Files\Fellesfiler 2008-08-09 06:30 1,007,616 ----a-w C:\Windows\System32\VSFilter.dll . ((((((((((((((((((((((((((((( snapshot@2008-10-09_ 0.13.45.29 ))))))))))))))))))))))))))))))))))))))))) . - 2008-10-08 19:14:22 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2008-10-09 18:50:32 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2008-10-08 19:14:22 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2008-10-09 18:50:32 2,048 --sha-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2008-10-08 19:15:03 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT + 2008-10-09 18:51:11 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT + 2008-10-09 18:51:11 262,144 ---ha-w C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1 - 2008-10-08 19:14:58 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT + 2008-10-09 18:51:16 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT + 2008-10-09 18:51:16 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1 - 2008-10-08 19:12:07 3,114 ----a-w C:\Windows\SoftwareDistribution\EventCache\{1F565D9A-D944-4E45-B5E7-1768D5805AB9}.bin + 2008-10-09 18:43:47 3,004 ----a-w C:\Windows\SoftwareDistribution\EventCache\{1F565D9A-D944-4E45-B5E7-1768D5805AB9}.bin - 2008-10-08 19:20:34 103,726 ----a-w C:\Windows\System32\perfc009.dat + 2008-10-09 18:57:27 103,726 ----a-w C:\Windows\System32\perfc009.dat - 2008-10-08 19:20:34 79,202 ----a-w C:\Windows\System32\perfc014.dat + 2008-10-09 18:57:27 79,202 ----a-w C:\Windows\System32\perfc014.dat - 2008-10-08 19:20:34 609,944 ----a-w C:\Windows\System32\perfh009.dat + 2008-10-09 18:57:27 609,944 ----a-w C:\Windows\System32\perfh009.dat - 2008-10-08 19:20:34 476,620 ----a-w C:\Windows\System32\perfh014.dat + 2008-10-09 18:57:28 476,620 ----a-w C:\Windows\System32\perfh014.dat - 2008-10-08 19:04:42 6,553,600 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT + 2008-10-09 18:48:08 6,553,600 ----a-w C:\Windows\System32\SMI\Store\Machine\SCHEMA.DAT - 2008-10-08 19:16:46 5,714 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1005887003-1467983617-1678125536-1000_UserData.bin + 2008-10-09 18:26:56 5,802 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1005887003-1467983617-1678125536-1000_UserData.bin - 2008-10-08 19:16:46 52,632 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-10-09 18:26:44 52,860 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin - 2008-10-08 19:10:44 27,540 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2008-10-09 18:53:13 27,712 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin - 2008-10-08 19:02:42 7,637,934 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2008-10-09 18:31:11 114,763,362 ----a-w C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin + 2006-11-02 12:34:13 77,824 ----a-w C:\Windows\winsxs\msil_ehiextens_31bf3856ad364e35_6.0.6001.18000_none_fdcbbc4906dd2f5d\ehiExtens.dll + 2006-11-21 05:12:40 8,704 ----a-w C:\Windows\winsxs\msil_eventviewer.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_84f907913dacb8f5\EventViewer.resources.dll + 2006-11-21 05:14:38 73,728 ----a-w C:\Windows\winsxs\msil_microsoft.tpm.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_529ba615f34a8488\microsoft.tpm.resources.dll + 2006-11-21 05:14:37 4,096 ----a-w C:\Windows\winsxs\msil_mmcfxcommon.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_0de1fba9f2d7a38b\MMCFxCommon.Resources.dll + 2008-10-06 17:13:48 19,456 ----a-w C:\Windows\winsxs\x86_bth.inf_31bf3856ad364e35_6.0.6001.18000_none_7244c43bbb913795\bthenum.sys + 2006-11-02 09:46:02 24,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_d51103be4cb9d6c3\aelupsvc.dll + 2006-11-02 09:45:39 20,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_d51103be4cb9d6c3\sdbinst.exe + 2006-11-02 09:46:13 111,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_d51103be4cb9d6c3\shimeng.dll + 2006-11-02 07:11:38 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18000_none_0c223829f24c6bcd\AcRes.dll + 2006-11-02 09:46:02 38,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6001.18000_none_94ca2703a87213b1\acppage.dll + 2006-11-02 07:11:39 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6001.18000_none_94ca2703a87213b1\acprgwiz.dll + 2006-11-02 09:45:32 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6001.18000_none_94ca2703a87213b1\pcaelv.exe + 2006-11-02 09:45:32 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6001.18000_none_94ca2703a87213b1\pcalua.exe + 2006-11-02 09:45:32 14,336 ----a-w C:\Windows\winsxs\x86_microsoft-windows-a..on-experience-tools_31bf3856ad364e35_6.0.6001.18000_none_94ca2703a87213b1\pcaui.exe + 2006-11-02 12:32:26 30,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6001.18000_none_45f41bf18fa2cf5a\dmband.dll + 2006-11-02 12:32:26 62,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6001.18000_none_45f41bf18fa2cf5a\dmcompos.dll + 2006-11-02 12:32:26 105,472 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6001.18000_none_45f41bf18fa2cf5a\dmstyle.dll + 2006-11-02 12:32:26 20,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.0.6001.18000_none_45f41bf18fa2cf5a\dswave.dll + 2006-11-02 09:46:05 52,224 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6001.18000_none_8cfdc804108fe1a6\mmci.dll + 2006-11-02 09:46:05 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-mmecore-other_31bf3856ad364e35_6.0.6001.18000_none_8cfdc804108fe1a6\mmcico.dll + 2006-11-02 09:46:13 185,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-audio-volumecontrol_31bf3856ad364e35_6.0.6001.18000_none_c62871670779ffa4\SndVolSSO.dll + 2006-11-02 12:34:36 57,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-axinstallservice_31bf3856ad364e35_6.0.6001.18000_none_d7054ee570ed4a57\AxInstUI.exe + 2006-11-02 09:41:17 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77\netmsg.dll + 2006-11-02 09:46:11 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-basic-misc-tools_31bf3856ad364e35_6.0.6001.18000_none_175cb770bf6b8f77\netrap.dll + 2006-11-02 12:34:35 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-blb-engine-proxy-main_31bf3856ad364e35_6.0.6001.18000_none_a4a2c6e033411dfc\blbres.dll + 2006-11-02 09:44:52 34,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.0.6001.18000_none_65193febd52e137a\bthudtask.exe + 2006-11-02 09:46:14 34,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-bth-user_31bf3856ad364e35_6.0.6001.18000_none_65193febd52e137a\wshbth.dll + 2006-11-02 09:46:02 41,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-certutil_31bf3856ad364e35_6.0.6001.18000_none_b58507ed335c92cc\certenc.dll + 2006-11-02 09:46:03 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43\comcat.dll + 2006-11-02 07:28:57 22,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-base_31bf3856ad364e35_6.0.6001.18000_none_0dee367726857e43\oleres.dll + 2006-11-02 09:46:02 23,552 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-complus-runtime_31bf3856ad364e35_6.0.6001.18000_none_59cabf11d4b18d8a\catsrvps.dll + 2006-09-18 21:27:45 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-complus-runtime_31bf3856ad364e35_6.0.6001.18000_none_59cabf11d4b18d8a\comempty.dat + 2006-11-02 09:46:11 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-complus-runtime_31bf3856ad364e35_6.0.6001.18000_none_59cabf11d4b18d8a\mtxex.dll + 2006-11-02 09:45:00 8,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-complus-ui_31bf3856ad364e35_6.0.6001.18000_none_b0a7c3b54838915e\dcomcnfg.exe + 2006-09-18 21:27:12 19,429 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-dtc-tracing_31bf3856ad364e35_6.0.6001.18000_none_17df4ac2f2cf5440\msdtcvtr.bat + 2006-09-18 21:35:10 27,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\compobj.dll + 2006-11-02 09:39:39 3,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\iprop.dll + 2006-09-18 21:35:13 42,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\ole2.dll + 2006-09-18 21:35:14 169,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\ole2disp.dll + 2006-09-18 21:35:15 153,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\ole2nls.dll + 2006-09-18 21:35:15 4,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\storage.dll + 2006-09-18 21:35:15 177,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-com-legacyole_31bf3856ad364e35_6.0.6001.18000_none_3f1ba507d2463833\typelib.dll + 2006-11-02 09:46:03 31,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-convert_31bf3856ad364e35_6.0.6001.18000_none_9cd54abba85233ff\cnvfat.dll + 2006-11-02 09:44:15 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-coreos_31bf3856ad364e35_6.0.6001.18000_none_255246473e514737\wmi.dll + 2006-11-02 09:44:59 19,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-corruptedfilerecovery_31bf3856ad364e35_6.0.6001.18000_none_87b9b7e028c74e65\cofire.exe + 2006-11-02 09:45:20 36,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..-japanese-utilities_31bf3856ad364e35_6.0.6001.18000_none_ed313ee5721aa9bc\IMJPUEX.EXE + 2006-11-02 09:46:05 11,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6001.18000_none_3a8c422a9f3101c4\padrs404.dll + 2006-11-02 09:46:05 11,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..ime-eashared-imepad_31bf3856ad364e35_6.0.6001.18000_none_3a8c422a9f3101c4\padrs804.dll + 2006-11-02 09:46:13 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7\w32topl.dll + 2006-11-02 09:46:05 4,608 ----a-w C:\Windows\winsxs\x86_microsoft-windows-d..tshow-kernelsupport_31bf3856ad364e35_6.0.6001.18000_none_e8019c5c974c4491\ksuser.dll + 2006-11-02 12:34:30 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dfsr-core-clientonly_31bf3856ad364e35_6.0.6001.18000_none_b6798caa9a04157b\dfsrres.dll + 2006-11-02 09:46:03 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dhcp-client-dll_31bf3856ad364e35_6.0.6001.18000_none_d75a29a02e8fcf7a\dhcpcmonitor.dll + 2006-11-02 09:46:05 36,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directshow-other_31bf3856ad364e35_6.0.6001.18000_none_0d5187f9e0ba9013\mciqtz32.dll + 2006-11-02 09:46:03 593,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-direct3d_31bf3856ad364e35_6.0.6001.18000_none_eb4e0e435578fd76\d3dramp.dll + 2006-11-02 09:46:03 11,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-direct3d9_31bf3856ad364e35_6.0.6001.18000_none_c24d6ca560c635f9\d3d8thk.dll + 2006-11-02 09:46:03 30,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directdraw_31bf3856ad364e35_6.0.6001.18000_none_0505a2ecc0013ebd\ddrawex.dll + 2006-11-02 12:32:23 136,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.0.6001.18000_none_1d981a3c0baebdc7\dinput.dll + 2006-11-02 12:32:23 120,832 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.0.6001.18000_none_1d981a3c0baebdc7\gcdef.dll + 2006-11-02 12:32:23 36,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directinput_31bf3856ad364e35_6.0.6001.18000_none_1d981a3c0baebdc7\pid.dll + 2006-11-02 09:03:41 3,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnaddr.dll + 2006-11-02 09:46:04 56,832 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnathlp.dll + 2006-11-02 09:46:04 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnhpast.dll + 2006-11-02 09:46:04 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnhupnp.dll + 2006-11-02 09:03:41 3,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnlobby.dll + 2006-11-02 09:45:03 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-directx-directplay8_31bf3856ad364e35_6.0.6001.18000_none_78d68814bebf2d3b\dpnsvr.exe + 2006-11-02 09:39:16 536,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-diskmanagement_31bf3856ad364e35_6.0.6001.18000_none_0197b5b76fbd3f60\dmdskres.dll + 2006-11-02 09:46:03 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-diskmanagement_31bf3856ad364e35_6.0.6001.18000_none_0197b5b76fbd3f60\dmintf.dll + 2006-09-18 21:39:30 215,943 ----a-w C:\Windows\winsxs\x86_microsoft-windows-dssec_31bf3856ad364e35_6.0.6001.18000_none_5a65d782fc87d29e\dssec.dat + 2006-11-02 12:34:20 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehdebug_31bf3856ad364e35_6.0.6001.18000_none_2fddb7218242099b\ehdebug.dll + 2006-11-02 12:34:22 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ehome-ehssetup_31bf3856ad364e35_6.0.6001.18000_none_91c1b8b7b69b880e\ehssetup.dll + 2006-11-02 12:33:56 34,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.0.6001.18000_none_78f9ac67286664e1\FXSCOMPOSERES.dll + 2006-11-02 12:33:56 755,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-f..client-applications_31bf3856ad364e35_6.0.6001.18000_none_78f9ac67286664e1\WFSR.dll + 2006-11-02 12:33:57 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-fax-service_31bf3856ad364e35_6.0.6001.18000_none_ad2399bd80496c71\FXSEVENT.dll + 2006-11-02 09:46:11 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-font-registrysettings_31bf3856ad364e35_6.0.6001.18000_none_95b1533bb11caa04\muifontsetup.dll + 2006-11-02 09:46:02 34,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18000_none_a9d318785a865d4c\atmlib.dll + 2006-11-02 09:46:03 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18000_none_a9d318785a865d4c\dciman32.dll + 2006-11-02 09:46:05 158,208 ----a-w C:\Windows\winsxs\x86_microsoft-windows-htmlhelp-infotech_31bf3856ad364e35_6.0.6001.18000_none_f6a3ed1413ba3d1f\itircl.dll + 2006-11-02 09:45:13 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-htmlhelp_31bf3856ad364e35_6.0.6001.18000_none_c855f6b284bc7b14\hh.exe + 2006-11-02 09:46:05 43,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-htmlhelp_31bf3856ad364e35_6.0.6001.18000_none_c855f6b284bc7b14\hhsetup.dll + 2006-11-02 09:46:05 58,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.0.6001.18000_none_fb2914a7fb7f05d4\IMTCDIC.dll + 2006-11-02 07:33:43 19,991,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..hinese-imepadapplet_31bf3856ad364e35_6.0.6001.18000_none_fb2914a7fb7f05d4\MSHWCHTR.dll + 2006-11-02 09:45:17 144,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_6.0.6001.18000_none_da73ab3e1517f045\iscsicli.exe + 2006-11-02 09:46:05 49,152 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..i_initiator_service_31bf3856ad364e35_6.0.6001.18000_none_da73ab3e1517f045\iscsidsc.dll + 2006-11-02 12:34:30 120,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..integration-support_31bf3856ad364e35_6.0.6001.18000_none_2834ca37a387d4a3\idq.dll + 2006-11-02 06:58:59 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3\tzres.dll + 2008-10-06 17:32:39 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18000_none_15475676099210e3\tzupd.exe + 2006-11-02 09:46:13 32,256 ----a-w C:\Windows\winsxs\x86_microsoft-windows-icm-base_31bf3856ad364e35_6.0.6001.18000_none_22c7ea5489633945\WcsPlugInService.dll + 2006-11-02 09:44:59 84,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-icm-ui_31bf3856ad364e35_6.0.6001.18000_none_3a58b76aa0cf669e\colorcpl.exe + 2006-11-02 09:46:05 21,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-icm-ui_31bf3856ad364e35_6.0.6001.18000_none_3a58b76aa0cf669e\icmui.dll + 2006-11-02 12:32:24 15,616 ----a-w C:\Windows\winsxs\x86_microsoft-windows-identitycrl_31bf3856ad364e35_6.0.6001.18000_none_518dd3eb3e5e6f23\ppcrlconfig.dll + 2006-11-02 12:32:24 254,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-identitycrl_31bf3856ad364e35_6.0.6001.18000_none_518dd3eb3e5e6f23\ppcrlui.dll + 2006-11-02 09:39:30 161,792 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18000_none_ae3221cd06c5e98c\ieakui.dll + 2008-10-06 17:15:20 2,455,488 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18000_none_fb9216576bbe8c39\ieapfltr.dat + 2006-11-02 07:33:30 48,128 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18000_none_f36d8680ba269c41\mshtmler.dll + 2006-11-02 09:45:13 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_2f62000919fe80c9\ieUnatt.exe + 2006-11-02 09:46:05 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ie-runoncessetup_31bf3856ad364e35_6.0.6001.18000_none_88eec871cb19b965\iessetup.dll + 2008-10-06 17:15:02 180,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18000_none_64a26c9fae1f0949\ieui.dll + 2006-11-02 12:33:32 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-ftpserver_31bf3856ad364e35_6.0.6001.18000_none_fd4f62c0bd7b76d3\ftpctrs2.dll + 2006-11-02 12:33:33 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-ftpserver_31bf3856ad364e35_6.0.6001.18000_none_fd4f62c0bd7b76d3\ftpmib.dll + 2006-11-02 12:33:30 98,133 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\adsutil.vbs + 2006-11-02 12:33:30 4,346 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\clusftp.vbs + 2006-11-02 12:33:30 4,341 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\clusweb.vbs + 2006-11-02 12:33:30 41,401 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacyscripts_31bf3856ad364e35_6.0.6001.18000_none_7e466ce97736febd\IIsExt.vbs + 2006-11-02 12:33:30 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6001.18000_none_8120d407b205fdca\iismui.dll + 2006-11-02 12:33:30 22,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-legacysnapin_31bf3856ad364e35_6.0.6001.18000_none_8120d407b205fdca\InetMgr6.exe + 2006-11-02 12:33:28 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6001.18000_none_3931f7d521f321a6\infoadmn.dll + 2006-11-02 12:33:28 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6001.18000_none_3931f7d521f321a6\infoctrs.dll + 2006-11-02 12:33:27 19,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6001.18000_none_3931f7d521f321a6\iscomlog.dll + 2006-11-02 12:33:28 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-metabase_31bf3856ad364e35_6.0.6001.18000_none_3931f7d521f321a6\rpcref.dll + 2006-11-02 12:33:26 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\iisrstap.dll + 2006-11-02 12:33:27 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-iis-sharedlibraries_31bf3856ad364e35_6.0.6001.18000_none_10e972c4b4d2574c\wamregps.dll + 2006-11-02 07:15:56 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-installer-engine_31bf3856ad364e35_6.0.6001.18000_none_037a7e2bb384bf01\msimsg.dll + 2006-11-02 08:33:06 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-international-core_31bf3856ad364e35_6.0.6001.18000_none_e9aa6488d9c10036\normaliz.dll + 2006-11-02 09:46:11 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-lpksetup_31bf3856ad364e35_6.0.6001.18000_none_215961096c78771c\MUILanguageCleanup.dll + 2006-11-02 09:46:09 323,584 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..-components-jet2x3x_31bf3856ad364e35_6.0.6001.18000_none_e79f2d93ba6ffee6\msrd2x40.dll + 2006-11-02 12:33:57 8,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..essagingcoreservice_31bf3856ad364e35_6.0.6001.18000_none_e309c7bbe82e39d1\mqsvc.exe + 2006-11-02 09:46:06 413,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..onents-jetexchlotus_31bf3856ad364e35_6.0.6001.18000_none_c33bb5404d731490\msexch40.dll + 2006-11-02 12:33:02 3,295,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.0.6001.18000_none_ba7b16e99455464b\MIGUIImg.dll + 2006-11-02 12:33:02 82,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-m..onwizardapplication_31bf3856ad364e35_6.0.6001.18000_none_ba7b16e99455464b\MIGUIRes.dll + 2006-11-02 12:32:29 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.0.6001.18000_none_f1582d884fb532fb\DirectDB.dll + 2008-10-06 17:04:02 84,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18000_none_79b12a6a588ca469\INETRES.dll + 2006-11-02 12:32:29 2,836,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core-dll_31bf3856ad364e35_6.0.6001.18000_none_587ec186254a22ac\MSOERES.dll + 2006-11-02 07:28:10 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mail-core_31bf3856ad364e35_6.0.6001.18000_none_e9286d318a269033\ACCTRES.dll + 2006-11-02 12:33:33 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6001.18000_none_9c5f2f3c0cc1aa83\mferror.dll + 2006-11-02 12:33:35 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-ssetup_31bf3856ad364e35_6.0.6001.18000_none_13b1244660e5fd4e\wmssetup.dll + 2006-11-02 12:33:39 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6001.18000_none_a7b5f0a040680d4c\asferror.dll + 2006-11-02 12:33:39 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mediaplayer-wmasf_31bf3856ad364e35_6.0.6001.18000_none_a7b5f0a040680d4c\LAPRXY.DLL + 2006-11-02 12:33:02 9,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-migrationengine_31bf3856ad364e35_6.0.6001.18000_none_58a7d7b2db3ffcd4\migres.dll + 2006-09-18 21:33:22 673,088 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mlang_31bf3856ad364e35_6.0.6001.18000_none_56df4b78e3fe4e3f\mlang.dat + 2006-11-02 12:33:46 150,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18000_none_f261ec400d1da6d8\MOVIEMK.exe + 2006-11-02 12:33:46 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-moviemaker_31bf3856ad364e35_6.0.6001.18000_none_f261ec400d1da6d8\WMM2EXT.dll + 2006-11-02 09:40:16 145,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msauditevtlog_31bf3856ad364e35_6.0.6001.18000_none_c7427a4e786d74bc\msaudite.dll + 2006-11-02 12:33:57 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msmq-admin_31bf3856ad364e35_6.0.6001.18000_none_b74e019e3d6c64b6\mqcertui.dll + 2006-11-02 09:41:09 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.18000_none_886e409a96d6223c\msxml3r.dll + 2006-11-02 09:41:09 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.18000_none_886dfc4296d66f1f\msxml6r.dll + 2006-11-02 09:46:10 34,304 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mulanttsvoicecommon_31bf3856ad364e35_6.0.6001.18000_none_e1e971f061eb63bb\MSTTSCommon.dll + 2006-11-02 09:46:10 47,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mulanttsvoicecommon_31bf3856ad364e35_6.0.6001.18000_none_e1e971f061eb63bb\MSTTSDecWrp.dll + 2006-11-02 09:46:10 8,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-mulanttsvoicecommon_31bf3856ad364e35_6.0.6001.18000_none_e1e971f061eb63bb\MSTTSLoc.dll + 2008-10-06 17:49:37 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\FwRemoteSvr.dll + 2008-10-06 17:49:37 272,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\polstore.dll + 2008-10-06 17:49:37 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..-domain-clients-svc_31bf3856ad364e35_6.0.6001.18000_none_440e77d1ec053e6c\winipsec.dll + 2006-11-02 09:46:11 11,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..iagnosticsframework_31bf3856ad364e35_6.0.6001.18000_none_dc5ac24ae0ca36fc\ndproxystub.dll + 2006-11-21 05:12:24 20,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_be4f5c701a2c61ae\alinkui.dll + 2006-11-21 05:12:20 140,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_be4f5c701a2c61ae\cscompui.dll + 2006-11-21 05:12:23 4,608 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_be4f5c701a2c61ae\CvtResUI.dll + 2006-11-21 05:12:19 6,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_be4f5c701a2c61ae\mscorees.dll + 2006-11-21 05:12:22 185,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_be4f5c701a2c61ae\vbc7ui.dll + 2006-11-02 12:32:24 268,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-nap-oobsha_31bf3856ad364e35_6.0.6001.18000_none_93e3b78243a9d8c2\msshavmsg.dll + 2008-10-06 17:17:31 1,523,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0000.dll + 2008-10-06 17:17:30 2,599,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0001.dll + 2008-10-06 17:17:30 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0002.dll + 2008-10-06 17:17:30 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0003.dll + 2008-10-06 17:17:29 2,243,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0007.dll + 2008-10-06 17:17:29 4,875,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0009.dll + 2008-10-06 17:17:26 9,847,296 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData000a.dll + 2008-10-06 17:17:25 2,643,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData000c.dll + 2008-10-06 17:17:25 2,342,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData000d.dll + 2008-10-06 17:17:24 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData000f.dll + 2008-10-06 17:17:32 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0010.dll + 2008-10-06 17:17:32 2,657,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0011.dll + 2008-10-06 17:17:31 3,466,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0013.dll + 2008-10-06 17:17:31 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0018.dll + 2008-10-06 17:17:31 4,497,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0019.dll + 2008-10-06 17:17:27 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData001a.dll + 2008-10-06 17:17:26 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData001b.dll + 2008-10-06 17:17:26 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData001d.dll + 2008-10-06 17:17:34 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0020.dll + 2008-10-06 17:17:33 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0021.dll + 2008-10-06 17:17:33 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0022.dll + 2008-10-06 17:17:33 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0024.dll + 2008-10-06 17:17:33 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0026.dll + 2008-10-06 17:17:32 1,966,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0027.dll + 2008-10-06 17:17:27 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData002a.dll + 2008-10-06 17:17:34 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0039.dll + 2008-10-06 17:17:27 1,801,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData003e.dll + 2008-10-06 17:17:36 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0045.dll + 2008-10-06 17:17:36 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0046.dll + 2008-10-06 17:17:35 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0047.dll + 2008-10-06 17:17:34 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0049.dll + 2008-10-06 17:17:28 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData004a.dll + 2008-10-06 17:17:28 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData004b.dll + 2008-10-06 17:17:28 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData004c.dll + 2008-10-06 17:17:27 3,104,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData004e.dll + 2008-10-06 17:17:24 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0414.dll + 2008-10-06 17:17:24 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0416.dll + 2008-10-06 17:17:23 4,495,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0816.dll + 2008-10-06 17:17:23 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData081a.dll + 2008-10-06 17:17:22 1,965,056 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsData0c1a.dll + 2006-11-02 08:21:55 11,722,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0001.dll + 2006-11-02 08:22:34 4,164,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0002.dll + 2006-11-02 08:22:13 1,452,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0003.dll + 2006-11-02 08:22:07 12,038,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0007.dll + 2006-11-02 08:22:05 2,628,608 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0009.dll + 2006-11-02 08:22:11 9,892,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons000a.dll + 2006-11-02 08:22:06 6,237,696 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons000c.dll + 2006-11-02 08:22:09 1,722,368 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons000d.dll + 2006-11-02 08:22:17 5,654,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons000f.dll + 2006-11-02 08:22:18 4,175,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0010.dll + 2006-11-02 08:22:10 2,466,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0011.dll + 2006-11-02 08:21:58 4,981,248 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0013.dll + 2006-11-02 08:22:25 3,331,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0018.dll + 2006-11-02 08:22:26 6,781,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0019.dll + 2006-11-02 08:22:14 6,014,976 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons001a.dll + 2006-11-02 08:22:47 6,585,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons001b.dll + 2006-11-02 08:22:31 6,346,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons001d.dll + 2006-11-02 08:22:45 1,236,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0020.dll + 2006-11-02 08:22:12 2,136,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0021.dll + 2006-11-02 08:22:44 5,499,904 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0022.dll + 2006-11-02 08:22:49 7,964,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0024.dll + 2006-11-02 08:22:42 5,791,232 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0026.dll + 2006-11-02 08:22:19 6,224,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0027.dll + 2006-11-02 08:22:41 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons002a.dll + 2006-11-02 08:22:16 1,782,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0039.dll + 2006-11-02 08:22:20 4,045,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons003e.dll + 2006-11-02 08:22:33 1,793,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0045.dll + 2006-11-02 08:22:25 1,808,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0046.dll + 2006-11-02 08:22:15 1,411,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0047.dll + 2006-11-02 08:22:39 1,558,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0049.dll + 2006-11-02 08:22:39 3,419,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons004a.dll + 2006-11-02 08:22:36 1,702,912 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons004b.dll + 2006-11-02 08:22:46 4,093,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons004c.dll + 2006-11-02 08:22:37 1,972,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons004e.dll + 2006-11-02 08:22:21 4,616,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0414.dll + 2006-11-02 08:22:24 5,090,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0416.dll + 2006-11-02 08:22:22 5,031,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0816.dll + 2006-11-02 08:22:29 7,042,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons081a.dll + 2006-11-02 08:22:27 6,917,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsLexicons0c1a.dll + 2006-11-02 08:21:54 5,071,872 ----a-w C:\Windows\winsxs\x86_microsoft-windows-naturallanguage6_31bf3856ad364e35_6.0.6001.18000_none_9ddad43a2abbd52d\NlsModels0011.dll + 2006-11-02 09:41:16 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-net-command-line-tool_31bf3856ad364e35_6.0.6001.18000_none_5232518072770fdb\neth.dll + 2006-11-02 09:46:14 11,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netbios_31bf3856ad364e35_6.0.6001.18000_none_59e1b82a6b1f4ec0\wshnetbs.dll + 2006-09-19 11:41:49 2,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\bench_24.bin + 2006-09-19 11:41:49 4,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\bench_32.bin + 2006-09-19 11:41:49 9,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\bench_48.bin + 2006-09-19 11:41:49 2,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\house_24.bin + 2006-09-19 11:41:49 4,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\house_32.bin + 2006-09-19 11:41:49 9,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\house_48.bin + 2006-09-19 11:41:49 2,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\office_24.bin + 2006-09-19 11:41:49 4,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\office_32.bin + 2006-09-19 11:41:49 9,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-netshell_31bf3856ad364e35_6.0.6001.18000_none_d5836ad30e0ac92d\office_48.bin + 2006-11-02 09:46:02 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6001.18000_none_07e9f0db06159927\brdgcfg.dll + 2006-11-02 07:38:48 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkbridge_31bf3856ad364e35_6.0.6001.18000_none_07e9f0db06159927\bridgeres.dll + 2006-11-02 09:46:11 11,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkprofile_31bf3856ad364e35_6.0.6001.18000_none_789b515a7625c7d5\nlmsprep.dll + 2006-11-02 09:46:12 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkprofile_31bf3856ad364e35_6.0.6001.18000_none_789b515a7625c7d5\npmproxy.dll + 2006-11-02 12:34:13 51,712 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.0.6001.18000_none_e3c78331f0bd2d51\CRPPresentation.dll + 2006-11-02 12:34:13 89,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networkprojection_31bf3856ad364e35_6.0.6001.18000_none_e3c78331f0bd2d51\NetProj.exe + 2006-11-02 07:38:59 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-networktopology_31bf3856ad364e35_6.0.6001.18000_none_d155f734fa7d6b4f\lltdres.dll + 2006-11-02 09:45:30 74,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.0.6001.18000_none_11764b5450a917b3\newdev.exe + 2006-11-02 07:09:42 9,029 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ANSI.SYS + 2006-11-02 07:09:49 12,498 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\append.exe + 2006-11-02 07:10:16 10,544 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\COMM.drv + 2006-11-02 07:09:49 50,648 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\COMMAND.COM + 2006-11-02 07:10:28 32,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\COMMDLG.DLL + 2006-11-02 07:09:45 27,097 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\country.sys + 2006-09-18 21:43:37 27,200 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ctl3dv2.dll + 2006-11-02 07:10:32 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\DDEML.DLL + 2006-11-02 07:09:52 20,634 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\debug.exe + 2006-11-02 07:10:37 53,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\dosx.exe + 2006-11-02 07:10:29 28,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\DRWATSON.EXE + 2006-09-18 21:43:40 69,886 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\edit.com + 2006-11-02 07:09:50 12,642 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\edlin.exe + 2006-11-02 07:09:51 8,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\exe2bin.exe + 2006-11-02 07:10:13 24,576 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\GDI.EXE + 2006-11-02 07:09:59 19,694 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\GRAPHICS.COM + 2006-11-02 07:09:41 4,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\HIMEM.SYS + 2006-11-02 07:09:57 14,710 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KB16.COM + 2006-11-02 07:09:44 42,809 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KEY01.SYS + 2006-11-02 07:10:15 2,000 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\keyboard.drv + 2006-11-02 07:09:44 42,537 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\KEYBOARD.SYS + 2006-11-02 07:10:07 92,320 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\krnl386.exe + 2006-09-18 21:43:37 221,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\lanman.drv + 2006-09-18 21:43:37 9,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\lzexpand.dll + 2006-11-02 07:09:55 39,274 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\mem.exe + 2006-11-02 07:10:21 68,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\MMSYSTEM.DLL + 2006-11-02 07:10:18 2,032 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\mouse.drv + 2006-09-18 21:43:37 108,464 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\netapi.dll + 2006-11-02 07:09:56 7,052 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\nlsfunc.exe + 2006-11-02 07:09:29 27,866 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS.SYS + 2006-11-02 07:09:35 29,146 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS404.SYS + 2006-11-02 07:09:38 29,370 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS411.SYS + 2006-11-02 07:09:40 29,274 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS412.SYS + 2006-11-02 07:09:31 29,146 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTDOS804.SYS + 2006-11-02 07:09:20 33,952 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO.SYS + 2006-11-02 07:09:23 34,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO404.SYS + 2006-11-02 07:09:24 35,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO411.SYS + 2006-11-02 07:09:26 35,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO412.SYS + 2006-11-02 07:09:22 34,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\NTIO804.SYS + 2006-11-02 09:46:12 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ntvdmd.dll + 2006-09-18 21:43:37 82,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\olecli.dll + 2006-11-02 07:10:34 24,064 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\OLESVR.DLL + 2006-09-18 21:43:37 46,592 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\pmspl.dll + 2006-11-02 07:10:00 2,842 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\redir.exe + 2006-11-02 07:09:53 11,753 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\setver.exe + 2006-11-02 07:10:14 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\SHELL.DLL + 2006-11-02 07:10:16 1,744 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\sound.drv + 2006-09-18 21:43:37 18,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\sysedit.exe + 2006-11-02 07:10:14 3,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\system.drv + 2006-11-02 07:10:26 4,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\TIMER.DRV + 2006-11-02 07:10:25 13,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\TOOLHELP.DLL + 2006-11-02 07:10:12 47,840 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\USER.EXE + 2006-09-18 21:43:37 9,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\ver.dll + 2006-11-02 07:10:17 2,176 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\vga.drv + 2006-11-02 07:10:30 12,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WFWNET.DRV + 2006-11-02 07:10:35 9,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WIFEMAN.DLL + 2006-11-02 08:35:53 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\win.com + 2006-09-18 21:43:37 13,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\win87em.dll + 2006-09-18 21:43:37 256,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\winhelp.exe + 2006-11-02 07:10:35 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WINNLS.DLL + 2006-11-02 07:10:22 2,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WINSOCK.DLL + 2006-11-02 07:10:18 2,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WINSPOOL.EXE + 2006-11-02 07:10:27 2,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WOWDEB.EXE + 2006-11-02 07:10:24 8,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6001.18000_none_fe0d791a728dd79c\WOWEXEC.EXE + 2006-11-02 09:45:33 60,416 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6001.18000_none_d6543f9ff5ec4aec\printui.exe + 2006-11-02 09:45:02 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6001.18000_none_61237ad0fed51e58\diskperf.exe + 2006-11-02 09:45:35 37,376 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6001.18000_none_61237ad0fed51e58\relog.exe + 2006-11-02 09:45:49 39,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6001.18000_none_61237ad0fed51e58\typeperf.exe + 2006-11-02 09:46:12 39,424 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6001.18000_none_31733dc35d19d298\perfctrs.dll + 2006-11-02 09:46:12 31,744 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6001.18000_none_31733dc35d19d298\perfdisk.dll + 2006-11-02 09:46:12 28,672 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6001.18000_none_31733dc35d19d298\perfos.dll + 2006-11-02 09:46:12 35,840 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6001.18000_none_31733dc35d19d298\perfproc.dll + 2006-11-02 09:45:31 61,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6001.18000_none_f0037a3c7d6c36a4\ntprint.exe + 2006-11-02 09:45:32 7,680 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6001.18000_none_b3dc8e9f30720cdd\plasrv.exe + 2006-11-02 12:34:29 20,992 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ting-lprportmonitor_31bf3856ad364e35_6.0.6001.18000_none_b403a1813dce9905\lprmon.dll + 2006-11-02 12:34:29 11,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..ting-lprportmonitor_31bf3856ad364e35_6.0.6001.18000_none_b403a1813dce9905\lprmonui.dll + 2006-11-02 12:33:18 1,486,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6001.18000_none_aa47d5c4002219b8\WinCollabRes.dll + 2007-12-06 03:37:02 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\perfc.dat + 2007-12-06 03:37:02 30,674 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\perfd.dat + 2007-12-06 03:37:05 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\perfh.dat + 2007-12-06 03:37:05 287,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\perfi.dat + 2006-11-02 09:42:44 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6001.18000_none_7185fd57fee6c971\prflbmsg.dll + 2006-11-02 12:33:18 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-peertopeerpnrp_31bf3856ad364e35_6.0.6001.18000_none_717f15b322749509\pnrpperf.dll + 2006-11-02 09:45:32 13,312 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.0.6001.18000_none_a931a5078fdac855\PATHPING.EXE + 2006-11-02 09:45:49 12,288 ----a-w C:\Windows\winsxs\x86_microsoft-windows-ping-utilities_31bf3856ad364e35_6.0.6001.18000_none_a931a5078fdac855\TRACERT.EXE + 2006-11-02 09:46:12 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6001.18000_none_ae4b689057a4a1e3\pacerprf.dll + 2006-11-02 09:46:13 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6001.18000_none_ae4b689057a4a1e3\traffic.dll + 2006-11-02 09:46:14 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6001.18000_none_ae4b689057a4a1e3\wshqos.dll + 2006-11-02 12:34:31 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\mll_hp.dll + 2006-11-02 12:34:31 17,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\ntmsevt.dll + 2006-11-02 12:34:30 43,008 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\rsm.exe + 2006-11-02 12:34:30 26,624 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\rsmmllsv.exe + 2006-11-02 12:34:30 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\rsmsink.exe + 2006-11-02 12:34:30 54,272 ----a-w C:\Windows\winsxs\x86_microsoft-windows-r..emanagement-service_31bf3856ad364e35_6.0.6001.18000_none_0e3e31f00e12b007\rsmui.exe + 2006-11-02 09:46:12 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.0.6001.18000_none_0fd9feb665531f63\rasadhlp.dll + 2006-11-02 09:45:34 16,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasautodial_31bf3856ad364e35_6.0.6001.18000_none_0fd9feb665531f63\rasautou.exe + 2006-11-02 09:46:12 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6001.18000_none_0de067e17a6f4519\rasmxs.dll + 2006-11-02 09:46:12 22,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6001.18000_none_0de067e17a6f4519\rasser.dll + 2006-11-02 09:45:34 16,896 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6001.18000_none_6f46cfc8a8b142a0\rasdial.exe + 2006-11-02 09:46:12 36,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6001.18000_none_0d159410ea7a8f9d\rtutils.dll + 2006-11-02 09:46:02 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\clb.dll + 2006-11-02 09:45:35 9,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\regedt32.exe + 2006-11-02 12:33:17 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-remoteassistance-exe_31bf3856ad364e35_6.0.6001.18000_none_3758172c01e5ce47\racpldlg.dll + 2006-11-02 09:45:37 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-restartmanager_31bf3856ad364e35_6.0.6001.18000_none_803567cb241e9c20\RmClient.exe + 2008-10-06 17:06:58 14,848 ----a-w C:\Windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6001.18000_none_547dcc3187eaff70\wshrm.dll + 2006-11-02 09:46:03 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..gevolumewmiprovider_31bf3856ad364e35_6.0.6001.18000_none_17d3c60709ecb009\dfrgifps.dll + 2006-11-02 12:33:25 12,555,776 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..inboxgames-shanghai_31bf3856ad364e35_6.0.6001.18000_none_c0a3fbb5ef29fe27\Mahjong.dll + 2006-11-02 12:33:24 29,001,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..iuminboxgames-chess_31bf3856ad364e35_6.0.6001.18000_none_74d4a1cd7e673a2e\Chess.dll + 2006-11-02 12:33:22 4,305,408 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-minesweeper_31bf3856ad364e35_6.0.6001.18000_none_a2611d5c392f48a1\MineSweeper.dll + 2006-11-02 12:33:23 28,665,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.0.6001.18000_none_062b7e7afe71e492\PurblePlace.dll + 2006-11-02 12:33:22 8,384,512 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..oxgames-purbleplace_31bf3856ad364e35_6.0.6001.18000_none_062b7e7afe71e492\PurblePlace2.dll + 2006-11-02 09:46:12 42,496 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.0.6001.18000_none_4849149a305ec4a4\pstorec.dll + 2006-11-02 09:46:12 23,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-s..ty-protectedstorage_31bf3856ad364e35_6.0.6001.18000_none_4849149a305ec4a4\pstorsvc.dll + 2006-11-02 12:34:23 34,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-securestartup-cpl_31bf3856ad364e35_6.0.6001.18000_none_578657548b185fae\BitLockerWizard.exe + 2006-11-02 09:46:14 8,192 ----a-w C:\Windows\winsxs\x86_microsoft-windows-session0viewer_31bf3856ad364e35_6.0.6001.18000_none_e1e6e80246adfe72\WlS0WndH.dll + 2006-11-02 09:43:11 2,928,640 ----a-w C:\Windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6001.18000_none_322c7e4ead424897\W32UIImg.dll + 2006-11-02 09:46:13 4,608 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sfc_31bf3856ad364e35_6.0.6001.18000_none_a735c34c5c31a578\sfc.dll + 2006-11-02 12:33:08 66,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6001.18000_none_cedcabbd26a81ad6\sbdrop.dll + 2006-11-02 09:46:12 66,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6001.18000_none_17fd3fa469f2e862\SCardDlg.dll + 2006-11-02 09:46:13 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-smbserver_31bf3856ad364e35_6.0.6001.18000_none_f8f4e8f8eadb7d91\sscore.dll + 2006-11-02 09:45:46 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-snmp-trap-service_31bf3856ad364e35_6.0.6001.18000_none_cf8afedd3f67da88\snmptrap.exe + 2006-11-02 12:32:25 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6001.18000_none_1c09f00b4bcc9fbc\SpeechUXPS.DLL + 2006-11-02 09:46:13 151,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-sqlliteoledb_31bf3856ad364e35_6.0.6001.18000_none_be7f06c980d3ea88\sqlceoledb30.dll + 2006-11-02 09:39:30 3,072 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..-platform-libraries_31bf3856ad364e35_6.0.6001.18000_none_ea70eae59b4e2b12\icmp.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\penchs.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\pencht.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\penjpn.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\penkor.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\penusa.dll + 2006-11-02 09:45:32 6,656 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\pipanel.exe + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\pipres.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\skchobj.dll + 2006-11-02 07:39:56 1,536 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..acyinkingcomponents_31bf3856ad364e35_6.0.6001.18000_none_41f1cbcb89954931\skchui.dll + 2006-11-02 12:34:09 19,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.0.6001.18000_none_4264ef6a4d057d2c\jnwmon.dll + 2006-11-02 12:34:09 22,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.0.6001.18000_none_4264ef6a4d057d2c\jnwppr.dll + 2006-11-02 12:34:09 47,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..c-journalnotewriter_31bf3856ad364e35_6.0.6001.18000_none_4264ef6a4d057d2c\PDIALOG.exe + 2006-11-02 12:34:05 1,495,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-chs_31bf3856ad364e35_6.0.6001.18000_none_fd484d54658ae209\chslm.lex.bin + 2006-11-02 12:34:05 10,335,843 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-chs_31bf3856ad364e35_6.0.6001.18000_none_fd484d54658ae209\chslm.wdic2.bin + 2006-11-02 12:34:05 21,963,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-chs_31bf3856ad364e35_6.0.6001.18000_none_fd484d54658ae209\mshwchsr.dll + 2006-11-02 12:34:06 2,187,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-cht_31bf3856ad364e35_6.0.6001.18000_none_fd48368c658afbaa\chtlm.lex.bin + 2006-11-02 12:34:06 11,300,913 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-cht_31bf3856ad364e35_6.0.6001.18000_none_fd48368c658afbaa\chtlm.wdic2.bin + 2006-11-02 12:34:06 19,991,040 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..krecognition.zh-cht_31bf3856ad364e35_6.0.6001.18000_none_fd48368c658afbaa\mshwchtr.dll + 2006-11-02 12:34:08 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6001.18000_none_3fac12f5c6543548\IPSEventLogMsg.dll + 2006-11-02 12:34:08 19,456 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6001.18000_none_3fac12f5c6543548\TabIpsps.dll + 2006-11-02 12:34:09 19,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.0.6001.18000_none_4d983a117ea4cea6\jnwmon.dll + 2006-11-02 12:34:09 22,528 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..ournalnotewriterqfe_31bf3856ad364e35_6.0.6001.18000_none_4d983a117ea4cea6\jnwppr.dll + 2006-11-02 12:33:17 68,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6001.18000_none_d1104c78dccde5fe\TabSvc.dll + 2006-11-02 12:33:17 2,073,600 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6001.18000_none_d1104c78dccde5fe\TouchX.dll + 2006-11-02 12:33:59 13,577,657 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..reinkrecognition.ja_31bf3856ad364e35_6.0.6001.18000_none_03ed68ae2c4994ef\dicjp.bin + 2006-11-02 12:33:59 8,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..reinkrecognition.ja_31bf3856ad364e35_6.0.6001.18000_none_03ed68ae2c4994ef\dicjp.dll + 2006-11-02 12:33:58 21,462,016 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..reinkrecognition.ja_31bf3856ad364e35_6.0.6001.18000_none_03ed68ae2c4994ef\mshwjpnr.dll + 2006-11-02 12:34:00 21,827,584 ----a-w C:\Windows\winsxs\x86_microsoft-windows-t..reinkrecognition.ko_31bf3856ad364e35_6.0.6001.18000_none_03ed2a082c4a1514\mshwkorr.dll + 2006-11-02 12:34:08 114,688 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.0.6001.18000_none_118f15c677824d1e\TipBand.dll + 2006-11-02 12:34:07 1,149,440 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.0.6001.18000_none_118f15c677824d1e\TipRes.dll + 2006-11-02 12:34:09 47,104 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6001.18000_none_17b18851a49835e5\NBMapTIP.dll + 2006-11-02 12:34:04 149,504 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tabletpc-softkeyboard_31bf3856ad364e35_6.0.6001.18000_none_d1b1affa515cd235\tabskb.dll + 2006-11-02 09:46:13 858,112 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tapi3_31bf3856ad364e35_6.0.6001.18000_none_6148b1ca8f906dbb\tapi3.dll + 2006-11-02 09:46:13 9,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tapisetup_31bf3856ad364e35_6.0.6001.18000_none_69f32ac39b2a05e1\TapiSysprep.dll + 2006-11-02 09:45:48 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tapisetup_31bf3856ad364e35_6.0.6001.18000_none_69f32ac39b2a05e1\TapiUnattend.exe + 2006-11-02 09:44:50 19,968 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\ARP.EXE + 2006-11-02 09:45:07 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\finger.exe + 2006-11-02 09:45:13 8,704 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\HOSTNAME.EXE + 2006-11-02 09:45:25 11,264 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\MRINFO.EXE + 2006-11-02 09:45:30 27,136 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\NETSTAT.EXE + 2006-11-02 09:45:49 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6001.18000_none_32c6f3aa4ede22b3\TCPSVCS.EXE + 2006-11-02 12:33:18 57,856 ----a-w C:\Windows\winsxs\x86_microsoft-windows-telnet-server_31bf3856ad364e35_6.0.6001.18000_none_9307dcf14f15ce10\tlntadmn.exe + 2006-11-02 09:46:13 40,960 ----a-w C:\Windows\winsxs\x86_microsoft-windows-tpm-adminsnapin_31bf3856ad364e35_6.0.6001.18000_none_777d16eedf412426\tpmcompc.dll + 2006-11-02 09:46:13 34,816 ----a-w C:\Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6001.18000_none_f501a18e1eaabcb9\uicom.dll + 2006-11-02 09:46:13 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-unimodem-core_31bf3856ad364e35_6.0.6001.18000_none_949832cbd48def6a\uniplat.dll + 2006-11-02 09:46:13 41,472 ----a-w C:\Windows\winsxs\x86_microsoft-windows-upnpdevicehost_31bf3856ad364e35_6.0.6001.18000_none_c1e834753483fdcf\udhisapi.dll + 2006-11-02 09:46:13 37,888 ----a-w C:\Windows\winsxs\x86_microsoft-windows-upnpssdp_31bf3856ad364e35_6.0.6001.18000_none_7fc972ebd13849b5\ssdpapi.dll + 2006-11-02 09:46:02 65,024 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\avicap32.dll + 2006-11-02 09:46:05 82,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\mciavi32.dll + 2006-11-02 09:46:10 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18000_none_9231f0ab88c213e9\msrle32.dll + 2006-11-02 12:32:34 198,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6001.18000_none_32943b11b3535c07\sti.dll + 2006-11-02 12:32:34 12,800 ----a-w C:\Windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6001.18000_none_32943b11b3535c07\wiatrace.dll + 2006-11-02 09:45:51 516,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6001.18000_none_42a95d80d7929e62\wab.exe + 2006-11-02 09:46:13 33,280 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6001.18000_none_42a95d80d7929e62\wabfind.dll + 2006-11-02 09:45:51 66,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6001.18000_none_42a95d80d7929e62\wabmig.exe + 2006-11-02 07:28:12 1,098,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6001.18000_none_55236d7549c923f0\wab32res.dll + 2006-11-02 09:46:13 41,984 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6001.18000_none_55236d7549c923f0\wabimp.dll + 2006-11-21 05:15:17 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\ComSvcConfig.resources.dll + 2006-11-21 05:15:17 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\Microsoft.Transactions.Bridge.Dtc.Resources.dll + 2006-11-21 05:15:18 13,824 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\ServiceModelReg.resources.dll + 2006-11-21 05:15:18 5,120 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\SMDiagnostics.resources.dll + 2006-11-21 05:15:17 10,240 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\SMSvcHost.resources.dll + 2006-11-21 05:15:18 20,480 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\System.IO.Log.Resources.dll + 2006-11-21 05:15:17 32,768 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_5b97040dc15527eb\WsatConfig.resources.dll + 2006-11-02 09:46:14 10,752 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wmsgapi.dll + 2006-11-02 09:46:13 15,360 ----a-w C:\Windows\winsxs\x86_microsoft-windows-winlogon-sysntfy_31bf3856ad364e35_6.0.6001.18000_none_5572f3220fb3454e\sysntfy.dll + 2006-11-02 09:46:14 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_6.0.6001.18000_none_1636766731a74faf\winrssrv.dll + 2006-11-02 09:43:00 2,560 ----a-w C:\Windows\winsxs\x86_microsoft-windows-winsock-legacy_31bf3856ad364e35_6.0.6001.18000_none_e36536a91186bed0\rnr20.dll + 2006-11-02 09:46:13 36,352 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-consumers_31bf3856ad364e35_6.0.6001.18000_none_4ad2276858e160c5\SMTPCons.dll + 2006-11-02 07:14:23 6,144 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6001.18000_none_b95403151f989ff3\WinMgmtR.dll + 2006-11-02 07:15:27 2,048 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6001.18000_none_b95403151f989ff3\WmiApRes.dll + 2006-11-02 09:46:05 35,840 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.0.6001.18000_none_e3b0c3fff516edba\KrnlProv.dll + 2006-11-02 09:46:05 18,944 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-management-snapins_31bf3856ad364e35_6.0.6001.18000_none_9be5ddb8baf2bc00\MMFUtil.dll + 2006-11-02 09:46:14 43,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-time-provider_31bf3856ad364e35_6.0.6001.18000_none_ed321ab4287c62df\wmitimep.dll + 2006-11-02 09:46:14 39,936 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.0.6001.18000_none_c6cb05b6765124d9\wmipdfs.dll + 2006-11-02 09:46:14 43,520 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wmi-win32-provider_31bf3856ad364e35_6.0.6001.18000_none_c6cb05b6765124d9\WMIPSESS.dll + 2006-11-02 12:33:40 31,744 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpd-legacywmdmapi_31bf3856ad364e35_6.0.6001.18000_none_59aa91436faa8e2e\wmdmlog.dll + 2006-11-02 12:33:40 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpd-legacywmdmapi_31bf3856ad364e35_6.0.6001.18000_none_59aa91436faa8e2e\wmdmps.dll + 2006-11-21 05:15:14 49,152 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\PresentationBuildTasks.resources.dll + 2006-11-21 05:15:14 102,400 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\PresentationCore.resources.dll + 2006-11-21 05:15:14 233,472 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\PresentationFramework.resources.dll + 2006-11-21 05:15:14 372,736 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\PresentationUI.resources.dll + 2006-11-21 05:15:13 36,864 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\ReachFramework.resources.dll + 2006-11-21 05:15:14 16,384 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\System.Printing.resources.dll + 2006-11-21 05:15:14 57,344 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\System.Speech.resources.dll + 2006-11-21 05:15:14 9,216 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\UIAutomationClient.resources.dll + 2006-11-21 05:15:14 9,728 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\UIAutomationClientsideProviders.resources.dll + 2006-11-21 05:15:14 4,096 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\UIAutomationProvider.resources.dll + 2006-11-21 05:15:14 7,168 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\UIAutomationTypes.resources.dll + 2006-11-21 05:15:14 81,920 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\WindowsBase.resources.dll + 2006-11-21 05:15:14 4,608 ----a-w C:\Windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_6ce09e31182c2656\WindowsFormsIntegration.resources.dll + 2006-11-02 09:46:12 32,768 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h...sdhost-driverclass_31bf3856ad364e35_6.0.6001.18000_none_c2f17878c82f85ef\sdhcinst.dll + 2006-11-02 09:46:02 39,936 ----a-w C:\Windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.0.6001.18000_none_84e4ea4562dcf212\bthserv.dll + 2006-11-21 05:13:32 155,648 ----a-w C:\Windows\winsxs\x86_narrator.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_08808e48ab2b3bd3\Narrator.resources.dll + 2006-11-21 05:12:27 1,327,104 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-admin.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_fbbcc19d1ea589d5\AuthFWSnapIn.Resources.dll + 2006-11-21 05:12:27 172,032 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-admin.resources_31bf3856ad364e35_6.0.6001.18000_nb-no_fbbcc19d1ea589d5\AuthFWWizFwk.Resources.dll + 2006-11-02 09:46:48 274,432 ----a-w C:\Windows\winsxs\x86_networking-mpssvc-admin_31bf3856ad364e35_6.0.6001.18000_none_a5522df381cef60a\AuthFWWizFwk.dll + 2006-11-02 09:45:10 263,680 ----a-w C:\Windows\winsxs\x86_networking-mpssvc_31bf3856ad364e35_6.0.6001.18000_none_0a7986d9b92aa27a\FirewallSettings.exe + 2006-11-02 12:32:25 16,488 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6001.18000_none_57bcb0ca582f18c5\MpAsDesc.dll + 2006-11-02 12:32:25 11,368 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6001.18000_none_57bcb0ca582f18c5\MsMpLics.dll + 2006-11-02 12:32:25 653,928 ----a-w C:\Windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6001.18000_none_57bcb0ca582f18c5\MsMpRes.dll + 2006-11-02 12:34:24 5,632 ----a-w C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.0.6001.18000_none_73e857c5efef9bd9\posixsscom.dll + 2006-11-02 12:34:24 40,960 ----a-w C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.0.6001.18000_none_73e857c5efef9bd9\psxrun.exe + 2006-11-02 12:34:24 7,680 ----a-w C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.0.6001.18000_none_73e857c5efef9bd9\suagc.exe + 2006-11-02 12:34:25 2,048 ----a-w C:\Windows\winsxs\x86_subsystem-for-unix-based-applications_31bf3856ad364e35_6.0.6001.18000_none_73e857c5efef9bd9\suares.dll + 2006-11-02 06:29:53 18,271 ----a-w C:\Windows\winsxs\x86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_6.0.6001.18000_none_9784d4f858e3c74e\StructuredQuerySchemaTrivial.bin . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-10-06 1232896] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 125440] "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-08-08 490952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.divxa32"= divxa32.acm [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{24047CED-3DE8-4855-A531-9716AB7CFAD6}"= %ProgramFiles%\Telenor\Telenorhjelpen\Telenor.exe:Telenorhjelpen "{FEE978BE-99A6-41D6-830E-C7B000102FFD}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (TCP-In) "{2544A6EB-FD5A-4DFB-B56E-DAF54DB37DA7}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent (UDP-In) "{15B05B61-1990-4E9F-80BD-1457FD056FA5}"= C:\Program Files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{29C3D9EC-D1D8-4651-8DF4-C55D61CF705B}"= TCP:6004|C:\Program Files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "TCP Query User{65E05699-5AE2-4888-9C9C-A361684E87AC}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:µTorrent "UDP Query User{8AFEC77F-51C9-4C27-9F6A-1BF848338AE0}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:µTorrent [HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System] "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic| R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2008-06-13 41008] S3 UMPass;Microsoft UMPass Driver;C:\Windows\system32\DRIVERS\umpass.sys [2006-11-02 7168] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1dfc69fd-945a-11dd-9903-0013d3149e6b}] \shell\AutoRun\command - G:\SETUP.EXE \shell\configure\command - G:\SETUP.EXE \shell\install\command - G:\SETUP.EXE . - - - - ORPHANS REMOVED - - - - HKCU-Run-Telenorhjelpen - C:\Program Files\Telenor\Telenorhjelpen\Telenor.exe . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Users\Mr.White\AppData\Roaming\Mozilla\Firefox\Profiles\ll63m52a.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - startsiden.no FF -: plugin - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll FF -: plugin - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-09 21:05:32 Windows 6.0.6000 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-10-09 21:07:21 ComboFix-quarantined-files.txt 2008-10-09 19:07:10 ComboFix2.txt 2008-10-08 22:27:19 ComboFix3.txt 2008-10-08 22:14:37 Pre-Run: 73 499 262 976 byte ledig Post-Run: 72,977,227,776 byte ledig 743 --- E O F --- 2008-10-09 18:42:48