Archief - system32 opent bij opstarten

Hallo allemaal,

het volgende probleem plaats ik hier omdat mij dit werd aangeraden door Juisterr:

System32 opent bij opstarten

Ik hoop dat iemand mij verder kan helpen?

Alvast bedankt,

groeten Guido

post eens een nieuwe logje ook
want als ik uw log checked zit daar een niddle.exe bestandje dat een spyware/virus zou zijn
is dat met de laatste scan ook weg?

Het nieuwe logje:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:19:49, on 14-3-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Customize Your Settings
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [nidle] "C:\Documents and Settings\Sarah\Application Data\nidle\nidle.exe" 61A847B5BBF72813329B385772FF01F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD7/JS...2/&filename=jinstall-6u12-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

--
End of file - 6201 bytes

Nidle (met 1 'd' ) zit er dus nog wel in, verwijderen?
En zo ja op welke manier?

NIDLE.EXE, Prevx

ge zit dus met dit virus:
C:\Documents and Settings\Administrator\Application Data\nidle\nidle.exe Infected: Virus.Win32.Virut.ce 1
C:\Documents and Settings\Administrator\Application Data\nidle\nidle.exe8o5 Infected: Trojan.Win32.Agent2.ewk 1

volgens aantal logs/sites dat ik gechecked heb:
in hijackthis die niddle wissen en dan nog eens scannen met malwarebytes
post dan eens een nieuw logje ...
zal ook hjt admins er ook eens op de hoogte van stellen.

edit:
blijkbaar wordt die virus gewist met de kaspersky scanner.
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Kaspersky Online Scanner 7.0
--------------------------------------------------------------------------------

of dan die system32 niet meer geopent wordt weet ik niet, dat zal moeten uitwijzen.

Poef , gemist.

Goed gevonden Exit.


Als het echt virut blijkt is het enige juiste advies formateren. Tegen virut is geen oplossing helaas.
Hier kan je lezen waarom.
miekiemoes' Blog: Virut and other File infectors - Throwing in the Towel?


Maar proberen kan geen kwaad natuurlijk.

O4 - HKCU\..\Run: [nidle] "C:\Documents and Settings\Sarah\Application Data\nidle\nidle.exe" 61A847B5BBF72813329B385772FF01F0B3E35B6638993F4661 AA4EBD86D67C56389B284534F310

Info,

NIDLE.EXE, Prevx
nidle.exe MD5:b3015aac8bdb800e000eeb1811b519ce - VirSCAN.org 59% Scanner(22/37) found malware!

Je hebt combofix nog >??


Proberen maar.



Open Kladblok, kopieer en plak het volgende (vetgedrukte, blauwe tekst) in een leeg venster:


Folder::
c:\documents and settings\Sarah\Application Data\nidle\nidle.exe
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"nidle"=-




Sla dit op op je Bureaublad als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe zoals getoond in onderstaand voorbeeld :




Dit zal ComboFix doen herstarten.

Na het herstarten van je computer, (indien het vraagt om te herstarten), kopieer en plak de inhoud van log.txt in je volgende antwoord.

Plaats ook een HJT logje.

hardnekkig ding precies.
maarja, proberen maar ...

en np, kan gebeuren dat er over gekeken wordt met zoveel logs dagelijks.
ik probeer ook wel hier en daar logs te checken op oneregelmatigheden maar komt er weinig van.

hopelijk raakt die virus opgelost en lost dat ook die system32 fout op ....

Hallo,

om te beginnen moet ik er even bij zeggen dat ik voor dat ik deze 2 logjes maakte het bestandje nidle.exe uit de map applicationdata heb gegooid en het openen van de system32 map bij opstart toen voorbij was!!!

Ik begrijp dat het of een virus dan niet automatisch weg hoeft te zij dus ter controle nog even het logje van combofix

ComboFix 09-03-13.02 - Sarah 2009-03-14 17:27:21.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1043.18.3070.2608 [GMT 1:00]
Gestart vanuit: C:\Documents and Settings\Sarah\Bureaublad\ComboFix.exe
gebruikte Opdracht switches :: C:\Documents and Settings\Sarah\Bureaublad\CFScript.txt
AV: avast! antivirus 4.7.1335 [VPS 090313-0] *On-access scanning disabled* (Updated)
* Nieuw herstelpunt werd aangemaakt

WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!
.

(((((((((((((((((((( Bestanden Gemaakt van 2009-02-14 to 2009-03-14 ))))))))))))))))))))))))))))))
.

2009-03-14 15:08 . 2009-03-14 15:08 64 --a------ C:\WINDOWS\wininit.ini
2009-03-12 19:57 . 2009-03-14 16:03 <DIR> d-------- C:\Program Files\NeoSmart Technologies
2009-03-09 18:50 . 2001-08-17 21:28 794,654 --a--c--- C:\WINDOWS\system32\dllcache\usr1801.sys
2009-03-09 18:49 . 2001-09-06 20:29 899,594 --a--c--- C:\WINDOWS\system32\dllcache\r2mdkxga.sys
2009-03-09 18:48 . 2008-04-14 22:32 1,737,856 --a--c--- C:\WINDOWS\system32\dllcache\mtxparhd.dll
2009-03-09 18:47 . 2001-08-17 21:28 802,683 --a--c--- C:\WINDOWS\system32\dllcache\ltsm.sys
2009-03-09 18:46 . 2008-04-13 23:53 1,041,536 --a--c--- C:\WINDOWS\system32\dllcache\hsfdpsp2.sys
2009-03-09 18:45 . 2001-09-06 21:26 1,733,120 --a--c--- C:\WINDOWS\system32\dllcache\g400d.dll
2009-03-09 18:44 . 2001-09-06 18:59 980,034 --a--c--- C:\WINDOWS\system32\dllcache\cicap.sys
2009-03-09 18:43 . 2008-04-14 22:32 1,888,992 --a--c--- C:\WINDOWS\system32\dllcache\ati3duag.dll
2009-03-09 18:42 . 2001-09-06 21:26 66,048 --a--c--- C:\WINDOWS\system32\dllcache\s3legacy.dll
2009-03-08 14:25 . 2009-03-08 14:25 268 --ah----- C:\sqmdata19.sqm
2009-03-08 14:25 . 2009-03-08 14:25 244 --ah----- C:\sqmnoopt19.sqm
2009-03-07 21:23 . 2009-03-07 21:23 268 --ah----- C:\sqmdata18.sqm
2009-03-07 21:23 . 2009-03-07 21:23 244 --ah----- C:\sqmnoopt18.sqm
2009-03-06 22:09 . 2009-03-06 22:09 <DIR> d-------- C:\Program Files\MSXML 4.0
2009-03-06 22:09 . 2008-04-14 20:32 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2009-03-06 14:42 . 2009-03-06 14:42 <DIR> d-------- C:\Program Files\Trend Micro
2009-03-06 00:29 . 2009-03-06 00:29 <DIR> d-------- C:\Program Files\Sygate
2009-03-06 00:29 . 2009-03-06 00:29 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2009-03-06 00:29 . 2004-06-30 15:06 83,096 --a------ C:\WINDOWS\system32\SSSensor.dll
2009-03-06 00:29 . 2004-06-30 14:49 59,472 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2009-03-06 00:29 . 2004-06-30 14:51 21,075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2009-03-06 00:29 . 2004-06-30 15:06 14,320 --a------ C:\WINDOWS\system32\drivers\wg6n.sys
2009-03-06 00:29 . 2004-06-30 15:06 14,320 --a------ C:\WINDOWS\system32\drivers\wg5n.sys
2009-03-06 00:29 . 2004-06-30 15:06 14,320 --a------ C:\WINDOWS\system32\drivers\wg4n.sys
2009-03-06 00:29 . 2004-06-30 15:06 14,320 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2009-03-05 19:53 . 2009-03-05 19:53 <DIR> d-------- C:\Documents and Settings\Sarah\.housecall6.6
2009-03-05 19:51 . 2009-03-05 19:51 <DIR> d-------- C:\Program Files\Lavasoft
2009-03-05 19:22 . 2009-03-05 19:34 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2009-03-05 19:22 . 2009-03-05 19:22 <DIR> d-------- C:\Documents and Settings\Sarah\Application Data\Malwarebytes
2009-03-05 19:22 . 2009-03-05 19:22 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-03-05 19:22 . 2009-02-11 10:19 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2009-03-05 19:22 . 2009-02-11 10:19 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2009-03-05 19:21 . 2007-04-09 13:23 28,040 --a------ C:\WINDOWS\system32\mdimon.dll
2009-03-05 19:21 . 2009-03-05 19:21 395 --a------ C:\WINDOWS\ODBC.INI
2009-03-05 19:20 . 2009-03-05 19:21 <DIR> d-------- C:\WINDOWS\SHELLNEW
2009-03-05 19:20 . 2009-03-05 19:20 <DIR> d-------- C:\Program Files\Microsoft.NET
2009-03-05 19:15 . 2001-09-06 19:04 12,288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2009-03-05 19:15 . 2001-09-06 19:04 12,288 --a--c--- C:\WINDOWS\system32\dllcache\mouhid.sys
2009-03-05 19:15 . 2008-04-14 00:15 10,368 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2009-03-05 19:15 . 2008-04-14 00:15 10,368 --a--c--- C:\WINDOWS\system32\dllcache\hidusb.sys
2009-03-05 18:48 . 2009-03-05 18:48 <DIR> d-------- C:\Program Files\Alwil Software
2009-03-05 18:48 . 2003-03-18 21:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2009-03-05 18:48 . 2003-03-18 20:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2009-03-05 17:20 . 2009-03-05 17:20 244 --ah----- C:\sqmnoopt17.sqm
2009-03-05 17:20 . 2009-03-05 17:20 232 --ah----- C:\sqmdata17.sqm
2009-03-05 17:06 . 2009-03-05 17:06 <DIR> d-------- C:\WINDOWS\system32\MR
2009-03-05 17:06 . 2009-03-06 13:30 <DIR> d-------- C:\WINDOWS\system32\aNI02
2009-03-05 17:06 . 2009-03-05 17:06 <DIR> d-------- C:\Temp\atmp8
2009-03-05 17:06 . 2009-03-06 22:00 <DIR> d-------- C:\Temp
2009-03-05 16:56 . 2009-03-05 16:56 244 --ah----- C:\sqmnoopt16.sqm
2009-03-05 16:56 . 2009-03-05 16:56 232 --ah----- C:\sqmdata16.sqm
2009-03-05 16:44 . 2009-03-05 16:44 244 --ah----- C:\sqmnoopt15.sqm
2009-03-05 16:44 . 2009-03-05 16:44 232 --ah----- C:\sqmdata15.sqm
2009-03-05 16:42 . 2009-03-05 16:42 244 --ah----- C:\sqmnoopt14.sqm
2009-03-05 16:42 . 2009-03-05 16:42 232 --ah----- C:\sqmdata14.sqm
2009-03-05 16:29 . 2009-03-05 16:29 244 --ah----- C:\sqmnoopt13.sqm
2009-03-05 16:29 . 2009-03-05 16:29 232 --ah----- C:\sqmdata13.sqm
2009-03-05 16:21 . 2009-03-05 16:21 244 --ah----- C:\sqmnoopt12.sqm
2009-03-05 16:21 . 2009-03-05 16:21 244 --ah----- C:\sqmnoopt11.sqm
2009-03-05 16:21 . 2009-03-05 16:21 232 --ah----- C:\sqmdata12.sqm
2009-03-05 16:21 . 2009-03-05 16:21 232 --ah----- C:\sqmdata11.sqm
2009-03-05 16:15 . 2009-03-05 16:15 244 --ah----- C:\sqmnoopt10.sqm
2009-03-05 16:15 . 2009-03-05 16:15 232 --ah----- C:\sqmdata10.sqm
2009-03-05 16:04 . 2009-03-05 16:04 244 --ah----- C:\sqmnoopt09.sqm
2009-03-05 16:04 . 2009-03-05 16:04 232 --ah----- C:\sqmdata09.sqm
2009-03-05 16:01 . 2009-03-05 16:01 <DIR> d-------- C:\Program Files\MSECache
2009-03-05 15:42 . 2009-03-05 15:42 244 --ah----- C:\sqmnoopt08.sqm
2009-03-05 15:42 . 2009-03-05 15:42 232 --ah----- C:\sqmdata08.sqm
2009-03-05 14:53 . 2009-03-05 14:53 244 --ah----- C:\sqmnoopt07.sqm
2009-03-05 14:53 . 2009-03-05 14:53 244 --ah----- C:\sqmnoopt06.sqm
2009-03-05 14:53 . 2009-03-05 14:53 232 --ah----- C:\sqmdata07.sqm
2009-03-05 14:53 . 2009-03-05 14:53 232 --ah----- C:\sqmdata06.sqm
2009-03-05 14:33 . 2009-03-05 17:24 <DIR> d-------- C:\Documents and Settings\Sarah\Application Data\LimeWire
2009-03-05 14:32 . 2009-03-05 14:32 <DIR> d-------- C:\WINDOWS\Sun
2009-03-05 14:32 . 2009-03-05 14:32 <DIR> d-------- C:\Program Files\Java
2009-03-05 14:32 . 2009-03-05 14:32 410,984 --a------ C:\WINDOWS\system32\deploytk.dll
2009-03-05 14:32 . 2009-03-05 14:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2009-03-05 14:28 . 2008-08-14 14:27 2,193,536 --a--c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2009-03-05 14:28 . 2008-08-14 14:27 2,070,400 --a--c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2009-03-05 14:28 . 2008-06-14 18:36 272,640 --------- C:\WINDOWS\system32\drivers\bthport.sys
2009-03-05 14:28 . 2008-06-14 18:36 272,640 --a--c--- C:\WINDOWS\system32\dllcache\bthport.sys
2009-03-05 14:27 . 2009-03-05 14:27 244 --ah----- C:\sqmnoopt05.sqm
2009-03-05 14:27 . 2009-03-05 14:27 232 --ah----- C:\sqmdata05.sqm
2009-03-04 22:54 . 2009-03-04 22:54 <DIR> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
2009-03-04 22:54 . 2009-03-04 22:54 <DIR> d-------- C:\Program Files\Samsung
2009-03-04 22:54 . 2009-03-04 22:54 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2009-03-04 22:54 . 2003-02-21 18:42 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2009-03-04 22:54 . 2006-05-03 22:53 174,592 --a------ C:\WINDOWS\system32\framedyn.dll
2009-03-04 22:54 . 2006-07-24 16:05 5,632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys
2009-03-04 22:54 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico
2009-03-04 22:53 . 2009-03-04 22:53 <DIR> d-------- C:\Program Files\Common Files\InstallShield
2009-03-04 22:53 . 2009-03-04 22:53 <DIR> d-------- C:\Program Files\Common Files\Adobe
2009-03-04 16:18 . 2009-03-04 16:18 244 --ah----- C:\sqmnoopt04.sqm
2009-03-04 16:18 . 2009-03-04 16:18 244 --ah----- C:\sqmnoopt03.sqm
2009-03-04 16:18 . 2009-03-04 16:18 232 --ah----- C:\sqmdata04.sqm
2009-03-04 16:18 . 2009-03-04 16:18 232 --ah----- C:\sqmdata03.sqm
2009-03-04 16:17 . 2009-03-04 16:17 244 --ah----- C:\sqmnoopt02.sqm
2009-03-04 16:17 . 2009-03-04 16:17 232 --ah----- C:\sqmdata02.sqm
2009-03-04 15:53 . 2009-03-04 15:53 244 --ah----- C:\sqmnoopt01.sqm
2009-03-04 15:53 . 2009-03-04 15:53 232 --ah----- C:\sqmdata01.sqm
2009-03-04 15:52 . 2008-10-16 14:06 268,648 --a------ C:\WINDOWS\system32\mucltui.dll
2009-03-04 15:52 . 2008-10-16 14:06 208,744 --a------ C:\WINDOWS\system32\muweb.dll
2009-03-04 15:52 . 2008-10-16 14:06 27,496 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2009-03-04 00:19 . 2009-03-04 00:19 268 --ah----- C:\sqmdata00.sqm
2009-03-04 00:19 . 2009-03-04 00:19 244 --ah----- C:\sqmnoopt00.sqm
2009-03-03 13:53 . 2009-03-03 13:53 <DIR> d-------- C:\Documents and Settings\Sarah\Contacts
2009-03-03 13:50 . 2009-03-03 13:53 <DIR> d-------- C:\Program Files\Windows Live
2009-03-03 13:50 . 2009-03-03 13:52 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2009-03-03 13:50 . 2009-03-03 13:50 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2009-03-02 22:50 . 2007-05-23 22:26 49,904 -ra------ C:\WINDOWS\system32\drivers\BVRPMPR5.SYS
2009-03-02 22:49 . 2009-03-03 14:08 <DIR> d-------- C:\Netgear
2009-02-28 01:49 . 2009-02-28 01:49 <DIR> d-------- C:\WINDOWS\system32\Lang
2009-02-28 01:49 . 2009-02-28 01:49 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2009-02-28 01:49 . 2009-02-28 01:49 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2009-02-28 01:27 . 2009-02-28 01:27 <DIR> d--hs---- C:\$RECYCLE.BIN
2009-02-28 01:16 . 2009-02-28 01:16 <DIR> d--hs---- C:\Boot
2009-02-28 01:16 . 2006-11-02 10:53 438,840 -rahs---- C:\bootmgr
2009-02-28 01:16 . 2009-02-28 01:16 8,192 -ra-s---- C:\BOOTSECT.BAK

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-05 14:56 --------- d-----w C:\Program Files\microsoft frontpage
2009-02-26 23:08 376,832 ----a-w C:\WINDOWS\system32\AegisI5Installer.exe
2009-02-26 23:08 21,361 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2009-02-26 23:08 21,361 ----a-w C:\WINDOWS\AegisP.sys
2009-02-26 23:08 --------- d-----w C:\WINDOWS\system32\config\systemprofile\Application Data\Intel
2009-02-26 23:08 --------- d-----w C:\Program Files\Intel
2009-02-26 23:08 --------- d-----w C:\Documents and Settings\Sarah\Application Data\Intel
2009-02-26 23:08 --------- d-----w C:\Documents and Settings\NetworkService\Application Data\Intel
2009-02-26 23:08 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Intel
2009-02-26 23:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Intel
2009-02-26 23:06 --------- d-----w C:\Program Files\Fingerprint Sensor
2009-02-26 22:37 --------- d-----w C:\Program Files\Reference Assemblies
2009-02-26 22:37 --------- d-----w C:\Program Files\MSBuild
2009-02-26 22:32 --------- d-----w C:\Program Files\Windows Media Connect 2
2009-02-26 21:10 308,248 ----a-w C:\WINDOWS\system32\drivers\iaStor.sys
2009-02-26 21:10 1,571,840 ----a-w C:\WINDOWS\system32\sfcfiles.dll
2009-02-09 14:08 1,846,912 ----a-w C:\WINDOWS\system32\win32k.sys
.

((((((((((((((((((((((((((((( SnapShot_2009-03-07_17.28.15,43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-02-09 14:02:14 1,847,680 ----a-w C:\WINDOWS\$hf_mig$\KB958690\SP3QFE\win32k.sys
+ 2008-07-09 07:44:08 18,808 ----a-w C:\WINDOWS\$hf_mig$\KB958690\spmsg.dll
+ 2008-07-09 07:44:09 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB958690\spuninst.exe
+ 2008-07-09 07:44:08 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB958690\update\spcustom.dll
+ 2008-07-09 07:44:11 765,304 ----a-w C:\WINDOWS\$hf_mig$\KB958690\update\update.exe
+ 2008-07-09 07:44:19 401,272 ----a-w C:\WINDOWS\$hf_mig$\KB958690\update\updspapi.dll
+ 2008-12-05 07:00:52 144,896 ----a-w C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll
+ 2007-11-30 11:19:43 18,808 ----a-w C:\WINDOWS\$hf_mig$\KB960225\spmsg.dll
+ 2007-11-30 11:19:43 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB960225\spuninst.exe
+ 2007-11-30 11:19:43 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB960225\update\spcustom.dll
+ 2007-11-30 12:39:46 765,304 ----a-w C:\WINDOWS\$hf_mig$\KB960225\update\update.exe
+ 2007-11-30 12:39:47 401,272 ----a-w C:\WINDOWS\$hf_mig$\KB960225\update\updspapi.dll
+ 2009-03-12 18:58:04 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\msfeeds\1.0.0.0__7df935e7b230192c\msfeeds.dll
+ 2007-05-31 12:41:06 10,352,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\EXCEL.EXE
+ 2007-04-19 13:09:30 167,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
+ 2007-06-18 16:16:32 12,259,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\MSO.DLL
+ 2007-05-31 12:35:22 6,420,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
+ 2007-05-09 16:19:48 2,585,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\VBE6.DLL
+ 2007-05-31 12:37:40 12,310,368 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\3140110900063D11C8EF10054038389C\11.0.8173\WINWORD.EXE
- 2009-03-07 16:20:23 593,920 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-03-14 00:20:33 593,920 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2009-03-07 16:20:23 12,288 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-03-14 00:20:33 12,288 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-03-07 16:20:23 86,016 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-03-14 00:20:33 86,016 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2009-03-07 16:20:23 135,168 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-03-14 00:20:33 135,168 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-03-07 16:20:23 11,264 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-03-14 00:20:33 11,264 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-03-07 16:20:23 27,136 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-03-14 00:20:33 27,136 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-03-07 16:20:23 4,096 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-03-14 00:20:33 4,096 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-03-07 16:20:23 794,624 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-03-14 00:20:33 794,624 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-03-07 16:20:23 249,856 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-03-14 00:20:33 249,856 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-03-07 16:20:23 61,440 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-03-14 00:20:33 61,440 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-03-07 16:20:23 23,040 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-03-14 00:20:33 23,040 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-03-07 16:20:23 286,720 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-03-14 00:20:33 286,720 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-03-07 16:20:23 409,600 ----a-r C:\windows\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-03-14 00:20:33 409,600 ----a-r C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2008-04-13 23:16:20 53,376 -c--a-w C:\WINDOWS\system32\dllcache\1394bus.sys
+ 2001-08-17 21:06:48 11,264 -c--a-w C:\WINDOWS\system32\dllcache\1394vdbg.sys
+ 2001-08-17 20:28:00 762,780 -c--a-w C:\WINDOWS\system32\dllcache\3cwmcru.sys
+ 2001-09-06 20:26:38 689,216 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvs.dll
+ 2001-08-17 19:48:32 148,352 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvsm.sys
+ 2008-04-13 23:10:52 12,288 -c--a-w C:\WINDOWS\system32\dllcache\4mmdat.sys
+ 2008-04-13 23:16:22 48,128 -c--a-w C:\WINDOWS\system32\dllcache\61883.sys
+ 2001-09-06 20:26:38 38,400 -c--a-w C:\WINDOWS\system32\dllcache\8514a.dll
+ 2001-09-06 20:26:48 98,304 -c--a-w C:\WINDOWS\system32\dllcache\a3d.dll
+ 2001-09-06 20:26:48 462,848 -c--a-w C:\WINDOWS\system32\dllcache\a3dapi.dll
+ 2001-08-17 20:52:00 23,552 -c--a-w C:\WINDOWS\system32\dllcache\abp480n5.sys
+ 2008-04-13 21:06:02 231,552 -c--a-w C:\WINDOWS\system32\dllcache\ac97ali.sys
+ 2001-08-17 19:20:04 96,256 -c--a-w C:\WINDOWS\system32\dllcache\ac97intc.sys
+ 2001-08-17 19:20:16 297,728 -c--a-w C:\WINDOWS\system32\dllcache\ac97sis.sys
+ 2008-04-13 21:06:08 84,480 -c--a-w C:\WINDOWS\system32\dllcache\ac97via.sys
+ 2001-09-06 20:26:48 61,952 -c--a-w C:\WINDOWS\system32\dllcache\acerscad.dll
+ 2008-04-14 19:00:42 188,544 -c--a-w C:\WINDOWS\system32\dllcache\acpi.sys
+ 2001-09-07 13:00:00 12,032 -c--a-w C:\WINDOWS\system32\dllcache\acpiec.sys
+ 2001-08-17 20:53:02 7,424 -c--a-w C:\WINDOWS\system32\dllcache\adicvls.sys
+ 2001-08-17 19:11:18 20,160 -c--a-w C:\WINDOWS\system32\dllcache\adm8511.sys
+ 2001-08-17 19:19:10 584,448 -c--a-w C:\WINDOWS\system32\dllcache\adm8810.sys
+ 2001-08-17 19:19:14 553,984 -c--a-w C:\WINDOWS\system32\dllcache\adm8820.sys
+ 2001-08-17 19:19:14 747,392 -c--a-w C:\WINDOWS\system32\dllcache\adm8830.sys
+ 2008-04-13 21:06:02 10,880 -c--a-w C:\WINDOWS\system32\dllcache\admjoy.sys
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\admxprox.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\admxprox.dll
+ 2001-08-17 19:11:16 46,112 -c--a-w C:\WINDOWS\system32\dllcache\adptsf50.sys
+ 2001-08-17 21:07:32 101,888 -c--a-w C:\WINDOWS\system32\dllcache\adpu160m.sys
- 2001-09-07 13:00:00 50,176 -c--a-w C:\windows\system32\dllcache\adrot.dll
+ 2001-09-07 11:00:00 50,176 -c--a-w C:\WINDOWS\system32\dllcache\adrot.dll
+ 2008-04-14 21:32:22 4,255 -c--a-w C:\WINDOWS\system32\dllcache\adv01nt5.dll
+ 2008-04-14 21:32:22 3,967 -c--a-w C:\WINDOWS\system32\dllcache\adv02nt5.dll
+ 2008-04-14 21:32:22 3,615 -c--a-w C:\WINDOWS\system32\dllcache\adv05nt5.dll
+ 2008-04-14 21:32:22 3,647 -c--a-w C:\WINDOWS\system32\dllcache\adv07nt5.dll
+ 2008-04-14 21:32:22 3,135 -c--a-w C:\WINDOWS\system32\dllcache\adv08nt5.dll
+ 2008-04-14 21:32:22 3,711 -c--a-w C:\WINDOWS\system32\dllcache\adv09nt5.dll
+ 2008-04-14 21:32:22 3,775 -c--a-w C:\WINDOWS\system32\dllcache\adv11nt5.dll
+ 2008-04-13 23:06:40 42,368 -c--a-w C:\WINDOWS\system32\dllcache\agp440.sys
+ 2008-04-13 23:06:40 44,928 -c--a-w C:\WINDOWS\system32\dllcache\agpcpq.sys
+ 2001-08-17 20:52:02 12,800 -c--a-w C:\WINDOWS\system32\dllcache\aha154x.sys
+ 2001-08-17 21:07:36 55,168 -c--a-w C:\WINDOWS\system32\dllcache\aic78u2.sys
+ 2001-08-17 21:07:38 56,960 -c--a-w C:\WINDOWS\system32\dllcache\aic78xx.sys
+ 2001-08-17 19:11:18 27,678 -c--a-w C:\WINDOWS\system32\dllcache\ali5261.sys
+ 2001-08-17 20:49:02 26,624 -c--a-w C:\WINDOWS\system32\dllcache\alifir.sys
+ 2001-08-17 20:51:56 5,248 -c--a-w C:\WINDOWS\system32\dllcache\aliide.sys
+ 2008-04-13 23:06:40 42,752 -c--a-w C:\WINDOWS\system32\dllcache\alim1541.sys
+ 2001-08-17 19:11:20 16,969 -c--a-w C:\WINDOWS\system32\dllcache\amb8002.sys
+ 2008-04-13 23:06:40 43,008 -c--a-w C:\WINDOWS\system32\dllcache\amdagp.sys
+ 2008-04-14 19:46:08 41,472 -c--a-w C:\WINDOWS\system32\dllcache\amdk6.sys
+ 2008-04-14 19:46:08 41,856 -c--a-w C:\WINDOWS\system32\dllcache\amdk7.sys
+ 2001-08-17 20:52:04 12,032 -c--a-w C:\WINDOWS\system32\dllcache\amsint.sys
+ 2008-04-13 21:05:30 36,224 -c--a-w C:\WINDOWS\system32\dllcache\an983.sys
+ 2001-08-17 20:47:22 6,272 -c--a-w C:\WINDOWS\system32\dllcache\apmbatt.sys
+ 2008-04-14 19:46:08 60,800 -c--a-w C:\WINDOWS\system32\dllcache\arp1394.sys
+ 2001-08-17 20:52:00 26,496 -c--a-w C:\WINDOWS\system32\dllcache\asc.sys
+ 2001-08-17 20:52:04 22,400 -c--a-w C:\WINDOWS\system32\dllcache\asc3350p.sys
+ 2001-08-17 20:51:58 14,848 -c--a-w C:\WINDOWS\system32\dllcache\asc3550.sys
+ 2001-08-17 19:12:34 97,354 -c--a-w C:\WINDOWS\system32\dllcache\aspndis3.sys
- 2001-09-07 13:00:00 10,240 -c--a-w C:\windows\system32\dllcache\aspperf.dll
+ 2001-09-07 11:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\aspperf.dll
- 2001-09-07 13:00:00 29,184 -c--a-w C:\windows\system32\dllcache\asptxn.dll
+ 2001-09-07 11:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\asptxn.dll
+ 2008-04-14 00:10:32 96,512 -c--a-w C:\WINDOWS\system32\dllcache\atapi.sys
+ 2001-09-06 20:26:38 96,128 -c--a-w C:\WINDOWS\system32\dllcache\ati.dll
+ 2001-09-06 17:30:16 77,824 -c--a-w C:\WINDOWS\system32\dllcache\ati.sys
+ 2008-04-13 21:04:18 56,623 -c--a-w C:\WINDOWS\system32\dllcache\ati1btxx.sys
+ 2008-04-13 21:04:18 11,615 -c--a-w C:\WINDOWS\system32\dllcache\ati1mdxx.sys
+ 2008-04-13 21:04:18 12,047 -c--a-w C:\WINDOWS\system32\dllcache\ati1pdxx.sys
+ 2008-04-13 21:04:18 30,671 -c--a-w C:\WINDOWS\system32\dllcache\ati1raxx.sys
+ 2008-04-13 21:04:18 63,663 -c--a-w C:\WINDOWS\system32\dllcache\ati1rvxx.sys
+ 2008-04-13 21:04:18 26,367 -c--a-w C:\WINDOWS\system32\dllcache\ati1snxx.sys
+ 2008-04-13 21:04:18 21,343 -c--a-w C:\WINDOWS\system32\dllcache\ati1ttxx.sys
+ 2008-04-13 21:04:18 36,463 -c--a-w C:\WINDOWS\system32\dllcache\ati1tuxx.sys
+ 2008-04-13 21:04:20 29,455 -c--a-w C:\WINDOWS\system32\dllcache\ati1xbxx.sys
+ 2008-04-13 21:04:20 34,735 -c--a-w C:\WINDOWS\system32\dllcache\ati1xsxx.sys
+ 2008-04-14 21:32:24 229,376 -c--a-w C:\WINDOWS\system32\dllcache\ati2cqag.dll
+ 2008-04-14 21:32:24 377,984 -c--a-w C:\WINDOWS\system32\dllcache\ati2dvaa.dll
+ 2008-04-14 21:32:24 201,728 -c--a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll
+ 2008-04-14 21:02:46 327,168 -c--a-w C:\WINDOWS\system32\dllcache\ati2mtaa.sys
+ 2008-04-14 21:02:50 701,440 -c--a-w C:\WINDOWS\system32\dllcache\ati2mtag.sys
+ 2008-04-14 21:32:24 870,784 -c--a-w C:\WINDOWS\system32\dllcache\ati3d1ag.dll
+ 2001-08-17 19:49:04 46,464 -c--a-w C:\WINDOWS\system32\dllcache\atibt829.sys
+ 2001-09-06 20:26:38 382,592 -c--a-w C:\WINDOWS\system32\dllcache\atidrab.dll
+ 2001-09-06 20:26:38 137,216 -c--a-w C:\WINDOWS\system32\dllcache\atidrae.dll
+ 2001-09-06 20:26:38 268,160 -c--a-w C:\WINDOWS\system32\dllcache\atidvai.dll
+ 2001-09-06 20:27:08 37,376 -c--a-w C:\WINDOWS\system32\dllcache\atievxx.exe
+ 2001-09-06 17:30:42 289,920 -c--a-w C:\WINDOWS\system32\dllcache\atimpab.sys
+ 2001-09-06 17:30:44 75,392 -c--a-w C:\WINDOWS\system32\dllcache\atimpae.sys
+ 2001-09-06 17:30:44 281,728 -c--a-w C:\WINDOWS\system32\dllcache\atimtai.sys
+ 2008-04-13 21:04:18 57,856 -c--a-w C:\WINDOWS\system32\dllcache\atinbtxx.sys
+ 2008-04-13 21:04:18 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinmdxx.sys
+ 2008-04-13 21:04:18 14,336 -c--a-w C:\WINDOWS\system32\dllcache\atinpdxx.sys
+ 2008-04-13 21:04:18 52,224 -c--a-w C:\WINDOWS\system32\dllcache\atinraxx.sys
+ 2008-04-13 21:04:18 104,960 -c--a-w C:\WINDOWS\system32\dllcache\atinrvxx.sys
+ 2008-04-13 21:04:18 28,672 -c--a-w C:\WINDOWS\system32\dllcache\atinsnxx.sys
+ 2008-04-13 21:04:18 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinttxx.sys
+ 2008-04-13 21:04:18 73,216 -c--a-w C:\WINDOWS\system32\dllcache\atintuxx.sys
+ 2008-04-13 21:04:20 31,744 -c--a-w C:\WINDOWS\system32\dllcache\atinxbxx.sys
+ 2008-04-13 21:04:20 63,488 -c--a-w C:\WINDOWS\system32\dllcache\atinxsxx.sys
+ 2001-08-17 19:49:36 10,240 -c--a-w C:\WINDOWS\system32\dllcache\atipcxxx.sys
+ 2001-09-06 20:26:40 104,832 -c--a-w C:\WINDOWS\system32\dllcache\atiraged.dll
+ 2001-09-06 17:30:54 70,784 -c--a-w C:\WINDOWS\system32\dllcache\atiragem.sys
+ 2001-08-17 19:49:12 49,920 -c--a-w C:\WINDOWS\system32\dllcache\atirtcap.sys
+ 2001-08-17 19:49:18 26,880 -c--a-w C:\WINDOWS\system32\dllcache\atirtsnd.sys
+ 2001-08-17 19:49:22 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitunep.sys
+ 2001-08-17 19:49:28 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitvsnd.sys
+ 2001-08-17 19:49:38 9,472 -c--a-w C:\WINDOWS\system32\dllcache\ativmdcd.sys
+ 2008-04-14 21:32:24 32,768 -c--a-w C:\WINDOWS\system32\dllcache\ativtmxx.dll
+ 2001-08-17 19:49:44 19,456 -c--a-w C:\WINDOWS\system32\dllcache\ativttxx.sys
+ 2008-04-14 21:32:24 516,768 -c--a-w C:\WINDOWS\system32\dllcache\ativvaxx.dll
+ 2001-08-17 19:49:48 26,624 -c--a-w C:\WINDOWS\system32\dllcache\ativxbar.sys
+ 2001-08-17 19:49:34 23,552 -c--a-w C:\WINDOWS\system32\dllcache\atixbar.sys
+ 2008-04-14 21:32:24 21,183 -c--a-w C:\WINDOWS\system32\dllcache\atv01nt5.dll
+ 2008-04-14 21:32:24 11,359 -c--a-w C:\WINDOWS\system32\dllcache\atv02nt5.dll
+ 2008-04-14 21:32:24 25,471 -c--a-w C:\WINDOWS\system32\dllcache\atv04nt5.dll
+ 2008-04-14 21:32:24 14,143 -c--a-w C:\WINDOWS\system32\dllcache\atv06nt5.dll
+ 2008-04-14 21:32:24 17,279 -c--a-w C:\WINDOWS\system32\dllcache\atv10nt5.dll
+ 2001-08-17 21:59:44 3,072 -c--a-w C:\WINDOWS\system32\dllcache\audstub.sys
- 2001-09-07 13:00:00 9,216 -c--a-w C:\windows\system32\dllcache\authfilt.dll
+ 2001-09-07 11:00:00 9,216 -c--a-w C:\WINDOWS\system32\dllcache\authfilt.dll
+ 2008-04-13 23:16:22 38,912 -c--a-w C:\WINDOWS\system32\dllcache\avc.sys
+ 2001-08-17 21:01:12 36,096 -c--a-w C:\WINDOWS\system32\dllcache\avcaudio.sys
+ 2008-04-13 23:16:08 13,696 -c--a-w C:\WINDOWS\system32\dllcache\avcstrm.sys
+ 2001-09-06 20:26:48 87,552 -c--a-w C:\WINDOWS\system32\dllcache\avmcoxp.dll
+ 2001-09-06 20:26:48 144,384 -c--a-w C:\WINDOWS\system32\dllcache\avmenum.dll
+ 2001-08-17 19:13:48 37,568 -c--a-w C:\WINDOWS\system32\dllcache\avmwan.sys
+ 2001-08-17 19:19:16 36,992 -c--a-w C:\WINDOWS\system32\dllcache\aztw2320.sys
+ 2001-08-17 19:13:56 89,952 -c--a-w C:\WINDOWS\system32\dllcache\b1cbase.sys
+ 2001-09-06 17:33:30 97,376 -c--a-w C:\WINDOWS\system32\dllcache\b57xp32.sys
+ 2001-09-06 20:26:40 342,336 -c--a-w C:\WINDOWS\system32\dllcache\banshee.dll
+ 2001-08-17 19:48:28 36,128 -c--a-w C:\WINDOWS\system32\dllcache\banshee.sys
+ 2008-04-14 00:06:34 14,208 -c--a-w C:\WINDOWS\system32\dllcache\battc.sys
+ 2001-08-17 19:11:28 66,557 -c--a-w C:\WINDOWS\system32\dllcache\bcm42u.sys

Deel 2

+ 2001-08-17 19:11:26 54,271 -c--a-w C:\WINDOWS\system32\dllcache\bcm42xx5.sys
+ 2001-08-17 19:11:30 26,568 -c--a-w C:\WINDOWS\system32\dllcache\bcm4e5.sys
+ 2001-08-17 20:28:00 871,388 -c--a-w C:\WINDOWS\system32\dllcache\bcmdm.sys
+ 2008-04-13 23:16:22 11,776 -c--a-w C:\WINDOWS\system32\dllcache\bdasup.sys
+ 2001-09-06 20:26:48 103,936 -c--a-w C:\WINDOWS\system32\dllcache\binlsvc.dll
+ 2001-09-06 20:26:48 19,456 -c--a-w C:\WINDOWS\system32\dllcache\brbidiif.dll
+ 2001-09-06 20:26:48 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brcoinst.dll
+ 2001-09-06 20:26:48 12,800 -c--a-w C:\WINDOWS\system32\dllcache\brevif.dll
+ 2001-08-17 20:12:12 2,944 -c--a-w C:\WINDOWS\system32\dllcache\brfilt.sys
+ 2001-08-17 20:12:22 12,160 -c--a-w C:\WINDOWS\system32\dllcache\brfiltlo.sys
+ 2001-08-17 20:12:24 3,968 -c--a-w C:\WINDOWS\system32\dllcache\brfiltup.sys
+ 2001-09-06 20:26:48 15,360 -c--a-w C:\WINDOWS\system32\dllcache\brmfbidi.dll
+ 2001-09-06 20:26:48 81,920 -c--a-w C:\WINDOWS\system32\dllcache\brmfcwia.dll
+ 2001-09-06 20:26:48 29,696 -c--a-w C:\WINDOWS\system32\dllcache\brmflpt.dll
+ 2001-09-06 20:27:10 32,256 -c--a-w C:\WINDOWS\system32\dllcache\brmfrsmg.exe
+ 2001-09-06 20:26:48 41,472 -c--a-w C:\WINDOWS\system32\dllcache\brmfusb.dll
- 2001-09-07 13:00:00 45,568 -c--a-w C:\windows\system32\dllcache\browscap.dll
+ 2001-09-07 11:00:00 45,568 -c--a-w C:\WINDOWS\system32\dllcache\browscap.dll
+ 2001-08-17 20:12:24 3,168 -c--a-w C:\WINDOWS\system32\dllcache\brparimg.sys
+ 2001-09-06 17:46:22 39,808 -c--a-w C:\WINDOWS\system32\dllcache\brparwdm.sys
+ 2001-09-06 20:26:48 5,120 -c--a-w C:\WINDOWS\system32\dllcache\brscnrsm.dll
+ 2001-09-06 20:26:48 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brserif.dll
+ 2001-08-17 20:12:20 60,416 -c--a-w C:\WINDOWS\system32\dllcache\brserwdm.sys
+ 2001-08-17 20:12:20 11,008 -c--a-w C:\WINDOWS\system32\dllcache\brusbmdm.sys
+ 2001-08-17 20:12:22 10,368 -c--a-w C:\WINDOWS\system32\dllcache\brusbscn.sys
+ 2001-08-17 19:11:24 31,529 -c--a-w C:\WINDOWS\system32\dllcache\brzwlan.sys
+ 2008-04-14 22:32:24 20,992 -c--a-w C:\WINDOWS\system32\dllcache\bthci.dll
+ 2008-04-13 23:16:34 17,024 -c--a-w C:\WINDOWS\system32\dllcache\bthenum.sys
+ 2008-04-13 23:16:34 37,888 -c--a-w C:\WINDOWS\system32\dllcache\bthmodem.sys
+ 2008-04-13 23:21:36 101,120 -c--a-w C:\WINDOWS\system32\dllcache\bthpan.sys
+ 2008-04-13 23:16:32 36,480 -c--a-w C:\WINDOWS\system32\dllcache\bthprint.sys
+ 2008-04-14 22:32:24 30,208 -c--a-w C:\WINDOWS\system32\dllcache\bthserv.dll
+ 2008-04-13 23:16:30 18,944 -c--a-w C:\WINDOWS\system32\dllcache\bthusb.sys
+ 2001-09-06 17:47:08 13,952 -c--a-w C:\WINDOWS\system32\dllcache\bulltlp3.sys
- 2001-09-07 13:00:00 6,656 -c--a-w C:\windows\system32\dllcache\c_is2022.dll
+ 2001-09-07 11:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\c_is2022.dll
- 2001-09-07 13:00:00 10,752 -c--a-w C:\windows\system32\dllcache\c_iscii.dll
+ 2001-09-07 11:00:00 10,752 -c--a-w C:\WINDOWS\system32\dllcache\c_iscii.dll
+ 2001-08-17 21:05:48 314,752 -c--a-w C:\WINDOWS\system32\dllcache\camdro21.sys
+ 2001-08-17 21:04:46 223,232 -c--a-w C:\WINDOWS\system32\dllcache\camdrv21.sys
+ 2001-08-17 21:04:48 171,264 -c--a-w C:\WINDOWS\system32\dllcache\camdrv30.sys
+ 2001-09-06 20:26:48 74,240 -c--a-w C:\WINDOWS\system32\dllcache\camexo20.dll
+ 2001-09-06 20:26:48 236,032 -c--a-w C:\WINDOWS\system32\dllcache\camext20.dll
+ 2008-04-14 21:32:24 121,856 -c--a-w C:\WINDOWS\system32\dllcache\camext30.dll
- 2001-09-07 13:00:00 54,528 -c--a-w C:\windows\system32\dllcache\cap7146.sys
+ 2001-09-07 11:00:00 54,528 -c--a-w C:\WINDOWS\system32\dllcache\cap7146.sys
+ 2001-08-17 19:12:16 37,916 -c--a-w C:\WINDOWS\system32\dllcache\cb102.sys
+ 2001-08-17 19:12:42 39,680 -c--a-w C:\WINDOWS\system32\dllcache\cb325.sys
+ 2001-08-17 19:13:14 46,108 -c--a-w C:\WINDOWS\system32\dllcache\cben5.sys
+ 2001-09-07 13:00:00 13,952 -c--a-w C:\WINDOWS\system32\dllcache\cbidf2k.sys
+ 2001-09-06 17:55:24 715,146 -c--a-w C:\WINDOWS\system32\dllcache\cbmdmkxx.sys
+ 2008-04-14 00:16:24 17,024 -c--a-w C:\WINDOWS\system32\dllcache\ccdecode.sys
+ 2001-08-17 20:52:06 7,680 -c--a-w C:\WINDOWS\system32\dllcache\cd20xrnt.sys
+ 2001-09-07 13:00:00 18,688 -c--a-w C:\WINDOWS\system32\dllcache\cdaudio.sys
+ 2008-04-13 21:10:48 62,976 -c--a-w C:\WINDOWS\system32\dllcache\cdrom.sys
+ 2001-09-06 17:56:04 21,530 -c--a-w C:\WINDOWS\system32\dllcache\ce2n5.sys
+ 2001-09-06 17:56:06 27,164 -c--a-w C:\WINDOWS\system32\dllcache\ce3n5.sys
+ 2001-09-06 17:56:06 22,044 -c--a-w C:\WINDOWS\system32\dllcache\cem28n5.sys
+ 2001-09-06 17:56:06 22,044 -c--a-w C:\WINDOWS\system32\dllcache\cem33n5.sys
+ 2001-09-06 17:56:06 49,182 -c--a-w C:\WINDOWS\system32\dllcache\cem56n5.sys
+ 2008-04-14 21:32:24 15,423 -c--a-w C:\WINDOWS\system32\dllcache\ch7xxnt5.dll
- 2001-09-07 13:00:00 9,728 -c--a-w C:\windows\system32\dllcache\change.exe
+ 2001-09-07 11:00:00 9,728 -c--a-w C:\WINDOWS\system32\dllcache\change.exe
+ 2008-04-13 23:11:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\changer.sys
- 2001-09-07 13:00:00 13,824 -c--a-w C:\windows\system32\dllcache\chglogon.exe
+ 2001-09-07 11:00:00 13,824 -c--a-w C:\WINDOWS\system32\dllcache\chglogon.exe
- 2001-09-07 13:00:00 15,872 -c--a-w C:\windows\system32\dllcache\chgport.exe
+ 2001-09-07 11:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\chgport.exe
- 2001-09-07 13:00:00 14,848 -c--a-w C:\windows\system32\dllcache\chgusr.exe
+ 2001-09-07 11:00:00 14,848 -c--a-w C:\WINDOWS\system32\dllcache\chgusr.exe
- 2001-09-07 13:00:00 1,677,824 -c--a-w C:\windows\system32\dllcache\chsbrkr.dll
+ 2001-09-07 11:00:00 1,677,824 -c--a-w C:\WINDOWS\system32\dllcache\chsbrkr.dll
- 2001-09-07 13:00:00 838,144 -c--a-w C:\windows\system32\dllcache\chtbrkr.dll
+ 2001-09-07 11:00:00 838,144 -c--a-w C:\WINDOWS\system32\dllcache\chtbrkr.dll
+ 2001-09-06 17:59:54 272,640 -c--a-w C:\WINDOWS\system32\dllcache\cinemclc.sys
+ 2001-09-07 13:00:00 262,528 -c--a-w C:\WINDOWS\system32\dllcache\cinemst2.sys
- 2008-04-13 19:13:40 480,256 -c--a-w C:\windows\system32\dllcache\cintsetp.exe
+ 2004-08-03 22:31:56 480,256 -c--a-w C:\WINDOWS\system32\dllcache\cintsetp.exe
+ 2001-09-06 20:26:40 91,264 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.dll
+ 2001-08-17 20:57:16 45,696 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.sys
+ 2001-09-06 20:26:40 111,232 -c--a-w C:\WINDOWS\system32\dllcache\cl5465.dll
+ 2001-09-06 20:26:40 170,880 -c--a-w C:\WINDOWS\system32\dllcache\cl546x.dll
+ 2001-08-17 20:57:36 248,064 -c--a-w C:\WINDOWS\system32\dllcache\cl546xm.sys
+ 2008-04-14 00:06:38 13,952 -c--a-w C:\WINDOWS\system32\dllcache\cmbatt.sys
+ 2001-09-06 18:02:44 20,864 -c--a-w C:\WINDOWS\system32\dllcache\cmbp0wdm.sys
+ 2001-09-06 18:02:58 6,656 -c--a-w C:\WINDOWS\system32\dllcache\cmdide.sys
+ 2008-04-14 19:46:08 49,152 -c--a-w C:\WINDOWS\system32\dllcache\cnbjmon.dll
+ 2001-09-06 20:26:50 44,544 -c--a-w C:\WINDOWS\system32\dllcache\cnusd.dll
+ 2001-08-17 19:11:42 39,936 -c--a-w C:\WINDOWS\system32\dllcache\cnxt1803.sys
+ 2008-04-14 00:06:38 10,240 -c--a-w C:\WINDOWS\system32\dllcache\compbatt.sys
- 2001-09-07 13:00:00 33,792 -c--a-w C:\windows\system32\dllcache\controt.dll
+ 2001-09-07 11:00:00 33,792 -c--a-w C:\WINDOWS\system32\dllcache\controt.dll
- 2001-09-07 13:00:00 56,832 -c--a-w C:\windows\system32\dllcache\convlog.exe
+ 2001-09-07 11:00:00 56,832 -c--a-w C:\WINDOWS\system32\dllcache\convlog.exe
- 2001-09-07 13:00:00 20,480 -c--a-w C:\windows\system32\dllcache\counters.dll
+ 2001-09-07 11:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\counters.dll
- 2008-04-13 19:13:34 57,399 -c--a-w C:\windows\system32\dllcache\cplexe.exe
+ 2004-08-03 22:31:40 57,399 -c--a-w C:\WINDOWS\system32\dllcache\cplexe.exe
+ 2001-08-17 20:52:06 14,976 -c--a-w C:\WINDOWS\system32\dllcache\cpqarray.sys
+ 2001-09-07 13:00:00 11,776 -c--a-w C:\WINDOWS\system32\dllcache\cpqdap01.sys
+ 2001-09-06 18:20:32 21,533 -c--a-w C:\WINDOWS\system32\dllcache\cpqndis5.sys
+ 2001-09-06 18:20:34 61,354 -c--a-w C:\WINDOWS\system32\dllcache\cpqtrnd5.sys
- 2001-09-07 13:00:00 19,456 -c--a-w C:\windows\system32\dllcache\cprofile.exe
+ 2001-09-07 11:00:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\cprofile.exe
+ 2001-09-06 20:26:50 216,576 -c--a-w C:\WINDOWS\system32\dllcache\cpscan.dll
+ 2001-08-17 19:19:18 42,112 -c--a-w C:\WINDOWS\system32\dllcache\crtaud.sys
+ 2008-04-14 19:46:08 40,832 -c--a-w C:\WINDOWS\system32\dllcache\crusoe.sys
+ 2001-09-06 20:26:50 175,104 -c--a-w C:\WINDOWS\system32\dllcache\csamsp.dll
+ 2001-08-17 19:19:28 6,912 -c--a-w C:\WINDOWS\system32\dllcache\ctlfacem.sys
+ 2001-08-17 19:19:20 3,712 -c--a-w C:\WINDOWS\system32\dllcache\ctljystk.sys
+ 2001-08-17 19:19:20 96,256 -c--a-w C:\WINDOWS\system32\dllcache\ctlsb16.sys
+ 2008-04-14 21:32:24 251,904 -c--a-w C:\WINDOWS\system32\dllcache\ctmasetp.dll
+ 2001-09-06 20:26:50 4,096 -c--a-w C:\WINDOWS\system32\dllcache\ctwdm32.dll
+ 2001-08-17 19:19:24 3,072 -c--a-w C:\WINDOWS\system32\dllcache\cwbase.sys
+ 2001-08-17 19:19:26 3,072 -c--a-w C:\WINDOWS\system32\dllcache\cwbmidi.sys
+ 2001-08-17 19:19:28 72,832 -c--a-w C:\WINDOWS\system32\dllcache\cwbwdm.sys
+ 2001-08-17 19:19:30 3,584 -c--a-w C:\WINDOWS\system32\dllcache\cwcosnt5.sys
+ 2001-08-17 19:19:36 111,872 -c--a-w C:\WINDOWS\system32\dllcache\cwcspud.sys
+ 2001-08-17 19:19:48 93,952 -c--a-w C:\WINDOWS\system32\dllcache\cwcwdm.sys
+ 2008-04-13 21:06:04 48,640 -c--a-w C:\WINDOWS\system32\dllcache\cwrwdm.sys
+ 2001-09-06 18:27:46 17,408 -c--a-w C:\WINDOWS\system32\dllcache\cyclad-z.sys
+ 2001-09-06 18:27:48 14,848 -c--a-w C:\WINDOWS\system32\dllcache\cyclom-y.sys
+ 2001-09-06 20:26:50 29,184 -c--a-w C:\WINDOWS\system32\dllcache\cyycoins.dll
+ 2001-09-06 18:27:58 50,688 -c--a-w C:\WINDOWS\system32\dllcache\cyyport.sys
+ 2001-09-06 20:26:50 28,160 -c--a-w C:\WINDOWS\system32\dllcache\cyyports.dll
+ 2001-09-06 20:26:50 27,648 -c--a-w C:\WINDOWS\system32\dllcache\cyzcoins.dll
+ 2001-09-06 18:28:04 50,688 -c--a-w C:\WINDOWS\system32\dllcache\cyzport.sys
+ 2001-09-06 20:26:50 28,160 -c--a-w C:\WINDOWS\system32\dllcache\cyzports.dll
+ 2001-09-06 18:28:04 117,760 -c--a-w C:\WINDOWS\system32\dllcache\d100ib5.sys
+ 2001-08-17 20:52:16 179,584 -c--a-w C:\WINDOWS\system32\dllcache\dac2w2k.sys
+ 2001-08-17 20:52:16 14,720 -c--a-w C:\WINDOWS\system32\dllcache\dac960nt.sys
+ 2001-09-06 20:26:50 25,600 -c--a-w C:\WINDOWS\system32\dllcache\dc210_32.dll
+ 2001-09-06 20:26:50 82,432 -c--a-w C:\WINDOWS\system32\dllcache\dc210usd.dll
+ 2001-08-17 19:12:02 63,208 -c--a-w C:\WINDOWS\system32\dllcache\dc21x4.sys
+ 2001-09-06 20:26:50 87,552 -c--a-w C:\WINDOWS\system32\dllcache\dc240usd.dll
+ 2001-09-06 20:26:50 112,128 -c--a-w C:\WINDOWS\system32\dllcache\dc260usd.dll
+ 2001-08-17 20:52:58 7,424 -c--a-w C:\WINDOWS\system32\dllcache\ddsmc.sys
+ 2001-08-17 19:11:44 20,928 -c--a-w C:\WINDOWS\system32\dllcache\defpa.sys
+ 2001-09-06 20:26:50 256,512 -c--a-w C:\WINDOWS\system32\dllcache\devcon32.dll
+ 2001-09-06 20:27:14 24,064 -c--a-w C:\WINDOWS\system32\dllcache\devldr32.exe
+ 2001-08-17 19:11:48 24,648 -c--a-w C:\WINDOWS\system32\dllcache\dfe650.sys
+ 2001-08-17 19:11:48 24,649 -c--a-w C:\WINDOWS\system32\dllcache\dfe650d.sys
+ 2001-09-06 18:34:46 29,755 -c--a-w C:\WINDOWS\system32\dllcache\dgapci.sys
+ 2001-09-06 20:26:50 422,941 -c--a-w C:\WINDOWS\system32\dllcache\dgconfig.dll
+ 2001-08-17 19:13:48 164,923 -c--a-w C:\WINDOWS\system32\dllcache\diapi2.sys
+ 2001-09-06 20:26:50 32,256 -c--a-w C:\WINDOWS\system32\dllcache\diapi2NT.dll
+ 2001-09-06 20:26:50 65,622 -c--a-w C:\WINDOWS\system32\dllcache\digiasyn.dll
+ 2001-09-06 18:36:24 38,023 -c--a-w C:\WINDOWS\system32\dllcache\digiasyn.sys
+ 2001-09-06 20:26:50 131,156 -c--a-w C:\WINDOWS\system32\dllcache\digidbp.dll
+ 2001-09-06 18:36:26 103,396 -c--a-w C:\WINDOWS\system32\dllcache\digidxb.sys
+ 2001-09-06 18:36:26 90,653 -c--a-w C:\WINDOWS\system32\dllcache\digifep5.sys
+ 2001-09-06 20:26:50 229,462 -c--a-w C:\WINDOWS\system32\dllcache\digifwrk.dll
+ 2001-09-06 20:26:50 159,828 -c--a-w C:\WINDOWS\system32\dllcache\digihlc.dll
+ 2001-09-06 20:26:50 102,484 -c--a-w C:\WINDOWS\system32\dllcache\digiinf.dll
+ 2001-09-06 20:26:50 41,046 -c--a-w C:\WINDOWS\system32\dllcache\digiisdn.dll
+ 2001-08-17 19:14:44 21,606 -c--a-w C:\WINDOWS\system32\dllcache\digiisdn.sys
+ 2001-09-06 20:26:50 110,621 -c--a-w C:\WINDOWS\system32\dllcache\digirlpt.dll
+ 2001-09-06 18:36:42 42,656 -c--a-w C:\WINDOWS\system32\dllcache\digirlpt.sys
+ 2001-09-06 20:27:14 622,621 -c--a-w C:\WINDOWS\system32\dllcache\digiview.exe
+ 2001-08-17 19:13:52 91,305 -c--a-w C:\WINDOWS\system32\dllcache\dimaint.sys
+ 2008-04-13 21:10:48 36,352 -c--a-w C:\WINDOWS\system32\dllcache\disk.sys
+ 2001-09-06 20:26:50 6,729 -c--a-w C:\WINDOWS\system32\dllcache\disrvci.dll
+ 2001-09-06 20:26:50 31,817 -c--a-w C:\WINDOWS\system32\dllcache\disrvpp.dll
+ 2001-09-06 20:26:50 38,985 -c--a-w C:\WINDOWS\system32\dllcache\disrvsu.dll
+ 2001-09-06 20:27:16 236,060 -c--a-w C:\WINDOWS\system32\dllcache\ditrace.exe
+ 2001-09-06 20:26:50 6,216 -c--a-w C:\WINDOWS\system32\dllcache\divaci.dll
+ 2001-09-06 20:26:50 37,962 -c--a-w C:\WINDOWS\system32\dllcache\divaprop.dll
+ 2001-09-06 20:26:50 29,768 -c--a-w C:\WINDOWS\system32\dllcache\divasu.dll
+ 2001-08-17 19:14:52 952,007 -c--a-w C:\WINDOWS\system32\dllcache\diwan.sys
+ 2001-08-17 19:11:44 26,698 -c--a-w C:\WINDOWS\system32\dllcache\dlh5xnd5.sys
+ 2008-04-13 23:10:52 8,320 -c--a-w C:\WINDOWS\system32\dllcache\dlttape.sys
+ 2001-08-17 19:11:42 29,696 -c--a-w C:\WINDOWS\system32\dllcache\dm9pci5.sys
+ 2008-04-14 19:46:08 55,296 -c--a-w C:\WINDOWS\system32\dllcache\dmutil.dll
+ 2008-04-13 23:09:48 206,976 -c--a-w C:\WINDOWS\system32\dllcache\dot4.sys
+ 2001-08-17 20:47:32 12,928 -c--a-w C:\WINDOWS\system32\dllcache\dot4prt.sys
+ 2001-08-17 20:47:32 8,704 -c--a-w C:\WINDOWS\system32\dllcache\dot4scan.sys
+ 2001-09-06 18:40:56 23,936 -c--a-w C:\WINDOWS\system32\dllcache\dot4usb.sys
+ 2001-08-17 19:12:32 28,062 -c--a-w C:\WINDOWS\system32\dllcache\dp83820.sys
+ 2001-08-17 21:07:44 20,192 -c--a-w C:\WINDOWS\system32\dllcache\dpti2o.sys
+ 2001-08-17 19:20:18 334,208 -c--a-w C:\WINDOWS\system32\dllcache\ds1wdm.sys
+ 2001-09-07 13:00:00 58,368 -c--a-w C:\WINDOWS\system32\dllcache\dvdplay.exe
+ 2008-04-13 21:08:30 71,168 -c--a-w C:\WINDOWS\system32\dllcache\dxg.sys
+ 2001-09-06 18:49:42 51,743 -c--a-w C:\WINDOWS\system32\dllcache\e1000nt5.sys
+ 2001-09-06 18:49:42 117,760 -c--a-w C:\WINDOWS\system32\dllcache\e100b325.sys
+ 2001-08-17 19:12:12 19,594 -c--a-w C:\WINDOWS\system32\dllcache\e100isa4.sys
- 2001-09-07 13:00:00 514,587 -c--a-w C:\windows\system32\dllcache\edb500.dll
+ 2001-09-07 11:00:00 514,587 -c--a-w C:\WINDOWS\system32\dllcache\edb500.dll
+ 2001-09-06 18:54:08 44,103 -c--a-w C:\WINDOWS\system32\dllcache\el515.sys
+ 2001-08-17 19:10:56 55,999 -c--a-w C:\WINDOWS\system32\dllcache\el556nd5.sys
+ 2001-08-17 19:10:56 24,653 -c--a-w C:\WINDOWS\system32\dllcache\el574nd4.sys
+ 2001-08-17 19:10:58 69,692 -c--a-w C:\WINDOWS\system32\dllcache\el575nd5.sys
+ 2001-08-17 19:10:52 26,141 -c--a-w C:\WINDOWS\system32\dllcache\el589nd5.sys
+ 2001-08-17 19:11:00 69,194 -c--a-w C:\WINDOWS\system32\dllcache\el656cd5.sys
+ 2001-09-06 18:54:22 634,198 -c--a-w C:\WINDOWS\system32\dllcache\el656ct5.sys
+ 2001-08-17 19:11:00 77,386 -c--a-w C:\WINDOWS\system32\dllcache\el656nd5.sys
+ 2001-09-06 18:54:26 241,238 -c--a-w C:\WINDOWS\system32\dllcache\el656se5.sys
+ 2001-08-17 19:11:06 66,591 -c--a-w C:\WINDOWS\system32\dllcache\el90xbc5.sys
+ 2001-09-06 18:54:28 153,631 -c--a-w C:\WINDOWS\system32\dllcache\el90xnd5.sys
+ 2001-09-06 18:54:30 455,711 -c--a-w C:\WINDOWS\system32\dllcache\el985n51.sys
+ 2001-08-17 19:11:04 70,174 -c--a-w C:\WINDOWS\system32\dllcache\el98xn5.sys
+ 2001-09-06 18:54:32 175,104 -c--a-w C:\WINDOWS\system32\dllcache\el99xn51.sys
+ 2001-08-17 20:53:02 7,296 -c--a-w C:\WINDOWS\system32\dllcache\elmsmc.sys
+ 2001-08-17 19:10:52 25,159 -c--a-w C:\WINDOWS\system32\dllcache\elnk3.sys
+ 2001-08-17 19:10:54 19,996 -c--a-w C:\WINDOWS\system32\dllcache\em556n4.sys
+ 2001-08-17 19:19:26 283,904 -c--a-w C:\WINDOWS\system32\dllcache\emu10k1m.sys
+ 2001-08-17 20:46:40 6,400 -c--a-w C:\WINDOWS\system32\dllcache\enum1394.sys
+ 2001-08-17 20:50:20 144,896 -c--a-w C:\WINDOWS\system32\dllcache\epcfw2k.sys
+ 2001-08-17 19:12:08 18,503 -c--a-w C:\WINDOWS\system32\dllcache\epro4.sys
+ 2001-08-17 20:50:20 114,944 -c--a-w C:\WINDOWS\system32\dllcache\epstw2k.sys
+ 2001-09-06 19:14:34 630,016 -c--a-w C:\WINDOWS\system32\dllcache\eqn.sys
+ 2001-09-06 20:27:16 53,248 -c--a-w C:\WINDOWS\system32\dllcache\eqndiag.exe
+ 2001-09-06 20:27:16 51,712 -c--a-w C:\WINDOWS\system32\dllcache\eqnlogr.exe
+ 2001-09-06 20:27:16 62,464 -c--a-w C:\WINDOWS\system32\dllcache\eqnloop.exe
+ 2001-08-17 19:19:38 37,120 -c--a-w C:\WINDOWS\system32\dllcache\es1370mp.sys
+ 2001-08-17 19:19:34 40,704 -c--a-w C:\WINDOWS\system32\dllcache\es1371mp.sys
+ 2001-08-17 19:19:58 72,192 -c--a-w C:\WINDOWS\system32\dllcache\es1969.sys
+ 2001-08-17 19:19:48 174,464 -c--a-w C:\WINDOWS\system32\dllcache\es198x.sys
+ 2001-09-06 19:15:00 596,063 -c--a-w C:\WINDOWS\system32\dllcache\es56cvmp.sys
+ 2001-09-06 19:15:02 594,622 -c--a-w C:\WINDOWS\system32\dllcache\es56hpi.sys
+ 2001-09-06 19:15:02 347,934 -c--a-w C:\WINDOWS\system32\dllcache\es56tpi.sys
+ 2001-08-17 19:19:56 63,360 -c--a-w C:\WINDOWS\system32\dllcache\ess.sys
+ 2008-04-13 21:06:06 137,088 -c--a-w C:\WINDOWS\system32\dllcache\essm2e.sys
+ 2001-09-06 20:26:52 43,008 -c--a-w C:\WINDOWS\system32\dllcache\esucm.dll
- 2001-09-07 13:00:00 31,744 -c--a-w C:\windows\system32\dllcache\esucmd.dll
+ 2001-09-07 11:00:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\esucmd.dll
+ 2001-09-06 20:26:52 34,816 -c--a-w C:\WINDOWS\system32\dllcache\esuimg.dll
- 2001-09-07 13:00:00 57,856 -c--a-w C:\windows\system32\dllcache\esuimgd.dll
+ 2001-09-07 11:00:00 57,856 -c--a-w C:\WINDOWS\system32\dllcache\esuimgd.dll
+ 2001-09-06 20:26:52 46,080 -c--a-w C:\WINDOWS\system32\dllcache\esuni.dll
+ 2001-09-06 20:26:52 46,080 -c--a-w C:\WINDOWS\system32\dllcache\esunib.dll
- 2001-09-07 13:00:00 45,568 -c--a-w C:\windows\system32\dllcache\esunid.dll
+ 2001-09-07 11:00:00 45,568 -c--a-w C:\WINDOWS\system32\dllcache\esunid.dll
- 2001-09-07 13:00:00 25,856 -c--a-w C:\windows\system32\dllcache\et4000.sys
+ 2001-09-07 11:00:00 25,856 -c--a-w C:\WINDOWS\system32\dllcache\et4000.sys
+ 2001-08-17 19:12:08 16,998 -c--a-w C:\WINDOWS\system32\dllcache\ex10.sys
+ 2001-08-17 20:52:48 7,040 -c--a-w C:\WINDOWS\system32\dllcache\exabyte2.sys
+ 2001-08-17 19:11:54 12,362 -c--a-w C:\WINDOWS\system32\dllcache\f3ab18xi.sys
+ 2001-08-17 19:11:56 11,850 -c--a-w C:\WINDOWS\system32\dllcache\f3ab18xj.sys
+ 2001-08-17 19:12:32 16,074 -c--a-w C:\WINDOWS\system32\dllcache\fa312nd5.sys
+ 2001-08-17 19:12:32 24,618 -c--a-w C:\WINDOWS\system32\dllcache\fa410nd5.sys
+ 2008-04-13 21:10:26 27,392 -c--a-w C:\WINDOWS\system32\dllcache\fdc.sys
+ 2001-08-17 19:10:54 22,090 -c--a-w C:\WINDOWS\system32\dllcache\fem556n5.sys
+ 2001-08-17 19:13:08 27,165 -c--a-w C:\WINDOWS\system32\dllcache\fetnd5.sys
- 2001-09-07 13:00:00 14,848 -c--a-w C:\windows\system32\dllcache\flattemp.exe
+ 2001-09-07 11:00:00 14,848 -c--a-w C:\WINDOWS\system32\dllcache\flattemp.exe
+ 2008-04-13 21:10:26 20,480 -c--a-w C:\WINDOWS\system32\dllcache\flpydisk.sys
+ 2001-09-06 20:26:52 72,192 -c--a-w C:\WINDOWS\system32\dllcache\fnfilter.dll
+ 2008-04-13 21:05:32 34,173 -c--a-w C:\WINDOWS\system32\dllcache\forehe.sys
+ 2001-08-17 19:14:24 444,416 -c--a-w C:\WINDOWS\system32\dllcache\fpcibase.sys
+ 2001-08-17 19:14:44 441,728 -c--a-w C:\WINDOWS\system32\dllcache\fpcmbase.sys
+ 2001-08-17 19:15:02 442,240 -c--a-w C:\WINDOWS\system32\dllcache\fpnpbase.sys
+ 2008-04-14 19:33:00 193,024 -c--a-w C:\WINDOWS\system32\dllcache\fsquirt.exe
+ 2001-09-07 13:00:00 12,288 -c--a-w C:\WINDOWS\system32\dllcache\fsvga.sys
+ 2001-09-07 13:00:00 125,696 -c--a-w C:\WINDOWS\system32\dllcache\ftdisk.sys
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\ftlx041e.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\ftlx041e.dll
- 2001-09-07 13:00:00 7,680 -c--a-w C:\windows\system32\dllcache\ftpctrs2.dll
+ 2001-09-07 11:00:00 7,680 -c--a-w C:\WINDOWS\system32\dllcache\ftpctrs2.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\ftpsapi2.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\ftpsapi2.dll
+ 2001-08-17 19:15:22 455,680 -c--a-w C:\WINDOWS\system32\dllcache\fus2base.sys
+ 2001-08-17 19:15:38 455,296 -c--a-w C:\WINDOWS\system32\dllcache\fusbbase.sys
+ 2001-09-06 20:26:52 92,672 -c--a-w C:\WINDOWS\system32\dllcache\fuusd.dll
- 2001-09-07 13:00:00 112,128 -c--a-w C:\windows\system32\dllcache\fxscfgwz.dll
+ 2001-09-07 11:00:00 112,128 -c--a-w C:\WINDOWS\system32\dllcache\fxscfgwz.dll
- 2001-09-07 13:00:00 139,264 -c--a-w C:\windows\system32\dllcache\fxsclntr.dll
+ 2001-09-07 11:00:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\fxsclntr.dll
- 2001-09-07 13:00:00 31,744 -c--a-w C:\windows\system32\dllcache\fxsroute.dll
+ 2001-09-07 11:00:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\fxsroute.dll
- 2001-09-07 13:00:00 11,264 -c--a-w C:\windows\system32\dllcache\fxssend.exe
+ 2001-09-07 11:00:00 11,264 -c--a-w C:\WINDOWS\system32\dllcache\fxssend.exe
+ 2001-08-17 19:15:56 454,912 -c--a-w C:\WINDOWS\system32\dllcache\fxusbase.sys
+ 2001-09-06 20:26:40 470,144 -c--a-w C:\WINDOWS\system32\dllcache\g200d.dll
+ 2001-09-06 19:27:18 320,512 -c--a-w C:\WINDOWS\system32\dllcache\g200m.sys
+ 2001-09-06 19:27:26 322,560 -c--a-w C:\WINDOWS\system32\dllcache\g400m.sys
+ 2008-04-13 23:06:42 46,464 -c--a-w C:\WINDOWS\system32\dllcache\gagp30kx.sys
+ 2008-04-13 23:15:30 10,624 -c--a-w C:\WINDOWS\system32\dllcache\gameenum.sys
+ 2008-04-13 23:15:34 59,136 -c--a-w C:\WINDOWS\system32\dllcache\gckernel.sys
+ 2001-09-06 19:30:26 17,536 -c--a-w C:\WINDOWS\system32\dllcache\gpr400.sys
+ 2001-09-06 19:31:00 82,560 -c--a-w C:\WINDOWS\system32\dllcache\grclass.sys
+ 2008-04-14 21:04:14 28,544 -c--a-w C:\WINDOWS\system32\dllcache\grserial.sys
- 2001-09-07 13:00:00 36,864 -c--a-w C:\windows\system32\dllcache\hanjadic.dll
+ 2001-09-07 11:00:00 36,864 -c--a-w C:\WINDOWS\system32\dllcache\hanjadic.dll
+ 2008-04-14 19:32:28 7,168 -c--a-w C:\WINDOWS\system32\dllcache\hccoin.dll
+ 2001-09-06 19:34:08 907,552 -c--a-w C:\WINDOWS\system32\dllcache\hcf_msft.sys
+ 2008-04-14 19:46:08 20,992 -c--a-w C:\WINDOWS\system32\dllcache\hid.dll
+ 2008-04-13 23:06:40 20,352 -c--a-w C:\WINDOWS\system32\dllcache\hidbatt.sys
+ 2008-04-14 21:04:54 25,728 -c--a-w C:\WINDOWS\system32\dllcache\hidbth.sys
+ 2008-04-13 21:15:28 36,864 -c--a-w C:\WINDOWS\system32\dllcache\hidclass.sys
+ 2001-08-17 21:02:32 8,576 -c--a-w C:\WINDOWS\system32\dllcache\hidgame.sys
+ 2008-04-13 23:15:28 19,200 -c--a-w C:\WINDOWS\system32\dllcache\hidir.sys
+ 2008-04-13 21:15:24 24,960 -c--a-w C:\WINDOWS\system32\dllcache\hidparse.sys
+ 2008-04-14 21:32:28 21,504 -c--a-w C:\WINDOWS\system32\dllcache\hidserv.dll
+ 2001-08-17 21:02:50 2,688 -c--a-w C:\WINDOWS\system32\dllcache\hidswvd.sys
+ 2001-09-06 20:26:52 119,296 -c--a-w C:\WINDOWS\system32\dllcache\hpdigwia.dll
+ 2001-09-06 20:26:52 83,968 -c--a-w C:\WINDOWS\system32\dllcache\hpgt21.dll
+ 2001-09-06 20:26:52 123,392 -c--a-w C:\WINDOWS\system32\dllcache\hpgt21tk.dll
+ 2001-09-06 20:26:52 89,088 -c--a-w C:\WINDOWS\system32\dllcache\hpgt33.dll
+ 2001-09-06 20:26:52 48,128 -c--a-w C:\WINDOWS\system32\dllcache\hpgt33tk.dll
+ 2001-09-06 20:26:52 101,376 -c--a-w C:\WINDOWS\system32\dllcache\hpgt34.dll
+ 2001-09-06 20:26:52 126,976 -c--a-w C:\WINDOWS\system32\dllcache\hpgt34tk.dll
+ 2001-09-06 20:26:52 93,696 -c--a-w C:\WINDOWS\system32\dllcache\hpgt42.dll
+ 2001-09-06 20:26:52 31,232 -c--a-w C:\WINDOWS\system32\dllcache\hpgt42tk.dll
+ 2001-09-06 20:26:52 165,888 -c--a-w C:\WINDOWS\system32\dllcache\hpgt53.dll
+ 2001-09-06 20:26:52 68,608 -c--a-w C:\WINDOWS\system32\dllcache\hpgt53tk.dll
+ 2001-09-06 20:26:52 32,768 -c--a-w C:\WINDOWS\system32\dllcache\hpgtmcro.dll
+ 2001-08-17 21:07:44 25,952 -c--a-w C:\WINDOWS\system32\dllcache\hpn.sys
+ 2001-09-06 20:26:52 324,608 -c--a-w C:\WINDOWS\system32\dllcache\hpojwia.dll
+ 2001-09-06 20:26:52 13,312 -c--a-w C:\WINDOWS\system32\dllcache\hpsjmcro.dll
+ 2001-08-17 20:52:50 5,760 -c--a-w C:\WINDOWS\system32\dllcache\hpt4qic.sys
+ 2001-09-06 20:26:54 19,456 -c--a-w C:\WINDOWS\system32\dllcache\hr1w.dll
+ 2001-08-17 20:28:04 150,239 -c--a-w C:\WINDOWS\system32\dllcache\hsf_amos.sys
+ 2001-08-17 20:28:04 67,167 -c--a-w C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
+ 2001-08-17 20:28:06 289,887 -c--a-w C:\WINDOWS\system32\dllcache\hsf_fall.sys
+ 2001-08-17 20:28:06 199,711 -c--a-w C:\WINDOWS\system32\dllcache\hsf_faxx.sys
+ 2001-08-17 20:28:06 115,807 -c--a-w C:\WINDOWS\system32\dllcache\hsf_fsks.sys
+ 2001-09-06 20:26:54 9,759 -c--a-w C:\WINDOWS\system32\dllcache\hsf_inst.dll
+ 2001-08-17 20:28:08 391,199 -c--a-w C:\WINDOWS\system32\dllcache\hsf_k56k.sys
+ 2001-08-17 20:28:10 542,879 -c--a-w C:\WINDOWS\system32\dllcache\hsf_msft.sys
+ 2001-08-17 20:28:10 57,471 -c--a-w C:\WINDOWS\system32\dllcache\hsf_samp.sys
+ 2001-08-17 20:28:10 44,863 -c--a-w C:\WINDOWS\system32\dllcache\hsf_soar.sys
+ 2001-08-17 20:28:10 73,279 -c--a-w C:\WINDOWS\system32\dllcache\hsf_spkp.sys
+ 2001-08-17 20:28:12 50,751 -c--a-w C:\WINDOWS\system32\dllcache\hsf_tone.sys
+ 2001-08-17 20:28:12 488,383 -c--a-w C:\WINDOWS\system32\dllcache\hsf_v124.sys
+ 2008-04-13 22:53:50 220,032 -c--a-w C:\WINDOWS\system32\dllcache\hsfbs2s2.sys
+ 2008-04-14 21:32:28 32,285 -c--a-w C:\WINDOWS\system32\dllcache\hsfcisp2.dll
+ 2008-04-13 22:53:52 685,056 -c--a-w C:\WINDOWS\system32\dllcache\hsfcxts2.sys
+ 2008-04-13 21:23:54 264,832 -c--a-w C:\WINDOWS\system32\dllcache\http.sys
- 2001-09-07 13:00:00 10,096,640 -c--a-w C:\windows\system32\dllcache\hwxcht.dll
+ 2001-09-07 11:00:00 10,096,640 -c--a-w C:\WINDOWS\system32\dllcache\hwxcht.dll
- 2001-09-07 13:00:00 10,129,408 -c--a-w C:\windows\system32\dllcache\hwxkor.dll
+ 2001-09-07 11:00:00 10,129,408 -c--a-w C:\WINDOWS\system32\dllcache\hwxkor.dll
+ 2008-04-13 23:11:24 8,576 -c--a-w C:\WINDOWS\system32\dllcache\i2omgmt.sys
+ 2008-04-13 23:11:24 18,560 -c--a-w C:\WINDOWS\system32\dllcache\i2omp.sys
+ 2001-09-06 20:26:40 353,184 -c--a-w C:\WINDOWS\system32\dllcache\i740dnt5.dll
+ 2001-08-17 19:49:06 58,592 -c--a-w C:\WINDOWS\system32\dllcache\i740nt5.sys
+ 2008-04-14 19:05:52 53,504 -c--a-w C:\WINDOWS\system32\dllcache\i8042prt.sys
+ 2008-04-14 21:32:28 702,845 -c--a-w C:\WINDOWS\system32\dllcache\i81xdnt5.dll
+ 2008-04-13 21:04:28 161,020 -c--a-w C:\WINDOWS\system32\dllcache\i81xnt5.sys
+ 2001-08-17 19:11:58 28,700 -c--a-w C:\WINDOWS\system32\dllcache\ibmexmp.sys
+ 2001-09-06 20:25:18 10,240 -c--a-w C:\WINDOWS\system32\dllcache\ibmsgnet.dll
+ 2001-08-17 19:12:00 100,936 -c--a-w C:\WINDOWS\system32\dllcache\ibmtok.sys
+ 2001-08-17 19:12:02 109,085 -c--a-w C:\WINDOWS\system32\dllcache\ibmtrp.sys
+ 2001-08-17 21:06:46 38,528 -c--a-w C:\WINDOWS\system32\dllcache\ibmvcap.sys
+ 2001-08-17 21:05:44 141,056 -c--a-w C:\WINDOWS\system32\dllcache\icam3.sys
+ 2001-09-06 20:26:54 26,624 -c--a-w C:\WINDOWS\system32\dllcache\icam3ext.dll
+ 2001-09-06 20:26:54 91,648 -c--a-w C:\WINDOWS\system32\dllcache\icam4com.dll
+ 2001-09-06 20:26:54 62,976 -c--a-w C:\WINDOWS\system32\dllcache\icam4ext.dll
+ 2001-08-17 21:06:02 154,496 -c--a-w C:\WINDOWS\system32\dllcache\icam4usb.sys
+ 2001-09-06 20:26:54 45,056 -c--a-w C:\WINDOWS\system32\dllcache\icam5com.dll
+ 2001-09-06 20:26:54 20,992 -c--a-w C:\WINDOWS\system32\dllcache\icam5ext.dll
+ 2001-08-17 21:06:20 100,992 -c--a-w C:\WINDOWS\system32\dllcache\icam5usb.sys
+ 2001-09-06 20:26:54 372,824 -c--a-w C:\WINDOWS\system32\dllcache\iconf32.dll
- 2001-09-07 13:00:00 60,928 -c--a-w C:\windows\system32\dllcache\iisclex4.dll
+ 2001-09-07 11:00:00 60,928 -c--a-w C:\WINDOWS\system32\dllcache\iisclex4.dll
- 2001-09-07 13:00:00 19,456 -c--a-w C:\windows\system32\dllcache\iiscrmap.dll
+ 2001-09-07 11:00:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\iiscrmap.dll
- 2001-09-07 13:00:00 3,584 -c--a-w C:\windows\system32\dllcache\iismui.dll
+ 2001-09-07 11:00:00 3,584 -c--a-w C:\WINDOWS\system32\dllcache\iismui.dll
- 2001-09-07 13:00:00 15,360 -c--a-w C:\windows\system32\dllcache\iisreset.exe
+ 2001-09-07 11:00:00 15,360 -c--a-w C:\WINDOWS\system32\dllcache\iisreset.exe

Deel 3

- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\iisrstap.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\iisrstap.dll
- 2001-09-07 13:00:00 6,656 -c--a-w C:\windows\system32\dllcache\iissync.exe
+ 2001-09-07 11:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\iissync.exe
- 2001-09-07 13:00:00 171,520 -c--a-w C:\windows\system32\dllcache\iisui.dll
+ 2001-09-07 11:00:00 171,520 -c--a-w C:\WINDOWS\system32\dllcache\iisui.dll
+ 2008-04-13 21:11:00 42,112 -c--a-w C:\WINDOWS\system32\dllcache\imapi.sys
- 2001-09-07 13:00:00 44,032 -c--a-w C:\windows\system32\dllcache\imekrmig.exe
+ 2001-09-07 11:00:00 44,032 -c--a-w C:\WINDOWS\system32\dllcache\imekrmig.exe
- 2001-09-07 13:00:00 102,463 -c--a-w C:\windows\system32\dllcache\imepadsm.dll
+ 2001-09-07 11:00:00 102,463 -c--a-w C:\WINDOWS\system32\dllcache\imepadsm.dll
- 2001-09-07 13:00:00 311,359 -c--a-w C:\windows\system32\dllcache\imepadsv.exe
+ 2001-09-07 11:00:00 311,359 -c--a-w C:\WINDOWS\system32\dllcache\imepadsv.exe
- 2001-09-07 13:00:00 57,398 -c--a-w C:\windows\system32\dllcache\imjpdadm.exe
+ 2001-09-07 11:00:00 57,398 -c--a-w C:\WINDOWS\system32\dllcache\imjpdadm.exe
- 2008-04-13 19:13:46 307,257 -c--a-w C:\windows\system32\dllcache\imjpdct.exe
+ 2004-08-03 22:31:54 307,257 -c--a-w C:\WINDOWS\system32\dllcache\imjpdct.exe
- 2008-04-13 19:13:48 155,705 -c--a-w C:\windows\system32\dllcache\imjpdsvr.exe
+ 2004-08-03 22:31:56 155,705 -c--a-w C:\WINDOWS\system32\dllcache\imjpdsvr.exe
- 2008-04-13 19:13:50 196,665 -c--a-w C:\windows\system32\dllcache\imjpinst.exe
+ 2004-08-03 22:31:58 196,665 -c--a-w C:\WINDOWS\system32\dllcache\imjpinst.exe
- 2008-04-13 19:13:52 208,952 -c--a-w C:\windows\system32\dllcache\imjpmig.exe
+ 2004-08-03 22:32:00 208,952 -c--a-w C:\WINDOWS\system32\dllcache\imjpmig.exe
- 2008-04-13 19:14:00 233,527 -c--a-w C:\windows\system32\dllcache\imjprw.exe
+ 2004-08-03 22:32:12 233,527 -c--a-w C:\WINDOWS\system32\dllcache\imjprw.exe
- 2001-09-07 13:00:00 45,109 -c--a-w C:\windows\system32\dllcache\imjpuex.exe
+ 2001-09-07 11:00:00 45,109 -c--a-w C:\WINDOWS\system32\dllcache\imjpuex.exe
- 2008-04-13 19:14:02 262,200 -c--a-w C:\windows\system32\dllcache\imjputy.exe
+ 2004-08-03 22:32:16 262,200 -c--a-w C:\WINDOWS\system32\dllcache\imjputy.exe
- 2001-09-07 13:00:00 59,904 -c--a-w C:\windows\system32\dllcache\imkrinst.exe

+ 2001-09-07 11:00:00 59,904 -c--a-w C:\WINDOWS\system32\dllcache\imkrinst.exe
- 2008-04-13 19:13:38 59,392 -c--a-w C:\windows\system32\dllcache\imscinst.exe
+ 2004-08-03 22:31:50 59,392 -c--a-w C:\WINDOWS\system32\dllcache\imscinst.exe
- 2001-09-07 13:00:00 471,102 -c--a-w C:\windows\system32\dllcache\imskdic.dll
+ 2001-09-07 11:00:00 471,102 -c--a-w C:\WINDOWS\system32\dllcache\imskdic.dll
- 2001-09-07 13:00:00 7,680 -c--a-w C:\windows\system32\dllcache\inetmgr.exe
+ 2001-09-07 11:00:00 7,680 -c--a-w C:\WINDOWS\system32\dllcache\inetmgr.exe
- 2001-09-07 13:00:00 19,968 -c--a-w C:\windows\system32\dllcache\inetsloc.dll
+ 2001-09-07 11:00:00 19,968 -c--a-w C:\WINDOWS\system32\dllcache\inetsloc.dll
- 2001-09-07 13:00:00 8,704 -c--a-w C:\windows\system32\dllcache\infoctrs.dll
+ 2001-09-07 11:00:00 8,704 -c--a-w C:\WINDOWS\system32\dllcache\infoctrs.dll
+ 2001-08-17 20:52:08 16,000 -c--a-w C:\WINDOWS\system32\dllcache\ini910u.sys
+ 2001-09-06 17:16:12 13,568 -c--a-w C:\WINDOWS\system32\dllcache\inport.sys
+ 2008-04-14 21:07:34 5,504 -c--a-w C:\WINDOWS\system32\dllcache\intelide.sys
+ 2008-04-14 19:07:34 40,448 -c--a-w C:\WINDOWS\system32\dllcache\intelppm.sys
+ 2001-08-17 20:50:56 38,784 -c--a-w C:\WINDOWS\system32\dllcache\io8.sys
+ 2001-09-06 20:26:54 90,200 -c--a-w C:\WINDOWS\system32\dllcache\io8ports.dll
+ 2001-08-17 19:12:12 45,632 -c--a-w C:\WINDOWS\system32\dllcache\ip5515.sys
+ 2008-04-13 23:15:36 46,592 -c--a-w C:\WINDOWS\system32\dllcache\irbus.sys
+ 2008-04-13 23:24:38 88,192 -c--a-w C:\WINDOWS\system32\dllcache\irda.sys
+ 2008-04-14 21:33:04 153,088 -c--a-w C:\WINDOWS\system32\dllcache\irftp.exe
+ 2001-08-17 20:49:04 23,552 -c--a-w C:\WINDOWS\system32\dllcache\irmk7.sys
+ 2008-04-14 21:32:30 29,184 -c--a-w C:\WINDOWS\system32\dllcache\irmon.dll
+ 2001-08-17 20:51:32 18,688 -c--a-w C:\WINDOWS\system32\dllcache\irsir.sys
+ 2001-08-17 20:49:10 26,624 -c--a-w C:\WINDOWS\system32\dllcache\irstusb.sys
- 2001-09-07 13:00:00 7,168 -c--a-w C:\windows\system32\dllcache\isapips.dll
+ 2001-09-07 11:00:00 7,168 -c--a-w C:\WINDOWS\system32\dllcache\isapips.dll
+ 2008-04-14 19:08:32 37,760 -c--a-w C:\WINDOWS\system32\dllcache\isapnp.sys
- 2001-09-07 13:00:00 9,216 -c--a-w C:\windows\system32\dllcache\iwrps.dll
+ 2001-09-07 11:00:00 9,216 -c--a-w C:\WINDOWS\system32\dllcache\iwrps.dll
+ 2008-04-14 19:46:08 47,616 -c--a-w C:\WINDOWS\system32\dllcache\iyuv_32.dll
- 2001-09-07 13:00:00 18,432 -c--a-w C:\windows\system32\dllcache\jupiw.dll
+ 2001-09-07 11:00:00 18,432 -c--a-w C:\WINDOWS\system32\dllcache\jupiw.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\kbd101a.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101a.dll
+ 2001-08-17 21:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101b.dll
+ 2001-08-17 21:55:56 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd101c.dll
+ 2001-08-17 21:55:56 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbd103.dll
+ 2008-04-14 21:31:02 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbd106.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbda1.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbda1.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbda2.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbda2.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbda3.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbda3.dll
- 2001-09-07 13:00:00 5,120 -c--a-w C:\windows\system32\dllcache\kbdarme.dll
+ 2001-09-07 11:00:00 5,120 -c--a-w C:\WINDOWS\system32\dllcache\kbdarme.dll
- 2001-09-07 13:00:00 5,120 -c--a-w C:\windows\system32\dllcache\kbdarmw.dll
+ 2001-09-07 11:00:00 5,120 -c--a-w C:\WINDOWS\system32\dllcache\kbdarmw.dll
+ 2008-04-14 19:09:04 25,088 -c--a-w C:\WINDOWS\system32\dllcache\kbdclass.sys
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbddiv1.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbddiv1.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbddiv2.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbddiv2.dll

- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdfa.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdfa.dll
- 2001-09-07 13:00:00 5,120 -c--a-w C:\windows\system32\dllcache\kbdgeo.dll
+ 2001-09-07 11:00:00 5,120 -c--a-w C:\WINDOWS\system32\dllcache\kbdgeo.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdheb.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdheb.dll
+ 2008-04-14 21:09:04 14,720 -c--a-w C:\WINDOWS\system32\dllcache\kbdhid.sys
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdindev.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdindev.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdinguj.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdinguj.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdinhin.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdinhin.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdinkan.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdinkan.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdinmar.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdinmar.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\kbdinpun.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbdinpun.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdintam.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdintam.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdintel.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdintel.dll
+ 2001-09-06 20:26:54 8,704 -c--a-w C:\WINDOWS\system32\dllcache\kbdjpn.dll
+ 2001-09-06 20:26:54 8,192 -c--a-w C:\WINDOWS\system32\dllcache\kbdkor.dll
- 2001-09-07 13:00:00 7,168 -c--a-w C:\windows\system32\dllcache\kbdnec95.dll
+ 2001-09-07 11:00:00 7,168 -c--a-w C:\WINDOWS\system32\dllcache\kbdnec95.dll
- 2001-09-07 13:00:00 9,216 -c--a-w C:\windows\system32\dllcache\kbdnecat.dll
+ 2001-09-07 11:00:00 9,216 -c--a-w C:\WINDOWS\system32\dllcache\kbdnecat.dll
- 2001-09-07 13:00:00 7,680 -c--a-w C:\windows\system32\dllcache\kbdnecnt.dll
+ 2001-09-07 11:00:00 7,680 -c--a-w C:\WINDOWS\system32\dllcache\kbdnecnt.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdsyr1.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdsyr1.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdsyr2.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdsyr2.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdth0.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdth0.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdth1.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdth1.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\kbdth2.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbdth2.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\kbdth3.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\kbdth3.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdurdu.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdurdu.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdusa.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdusa.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\kbdvntc.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\kbdvntc.dll
+ 2008-04-14 21:32:30 48,640 -c--a-w C:\WINDOWS\system32\dllcache\kdsui.dll
+ 2008-04-14 21:32:30 254,464 -c--a-w C:\WINDOWS\system32\dllcache\kdsusd.dll
- 2001-09-07 13:00:00 70,656 -c--a-w C:\windows\system32\dllcache\korwbrkr.dll
+ 2001-09-07 11:00:00 70,656 -c--a-w C:\WINDOWS\system32\dllcache\korwbrkr.dll
+ 2001-09-06 20:26:54 37,888 -c--a-w C:\WINDOWS\system32\dllcache\kousd.dll
+ 2001-08-17 19:12:14 19,016 -c--a-w C:\WINDOWS\system32\dllcache\ktc111.sys
+ 2001-09-06 17:32:56 26,922 -c--a-w C:\WINDOWS\system32\dllcache\lanepic5.sys
+ 2008-04-13 23:10:28 34,688 -c--a-w C:\WINDOWS\system32\dllcache\lbrtfdc.sys
+ 2001-09-06 17:35:42 15,872 -c--a-w C:\WINDOWS\system32\dllcache\lit220p.sys
+ 2001-08-17 19:11:52 25,065 -c--a-w C:\WINDOWS\system32\dllcache\lmndis3.sys
+ 2001-08-17 19:12:20 20,573 -c--a-w C:\WINDOWS\system32\dllcache\lne100.sys
+ 2001-08-17 19:12:24 70,730 -c--a-w C:\WINDOWS\system32\dllcache\lne100tx.sys
- 2001-09-07 13:00:00 22,016 -c--a-w C:\windows\system32\dllcache\logscrpt.dll
+ 2001-09-07 11:00:00 22,016 -c--a-w C:\WINDOWS\system32\dllcache\logscrpt.dll
+ 2001-08-17 20:53:42 4,992 -c--a-w C:\WINDOWS\system32\dllcache\loop.sys
+ 2001-09-06 17:39:08 728,234 -c--a-w C:\WINDOWS\system32\dllcache\ltck000c.sys
+ 2008-04-14 21:10:24 607,132 -c--a-w C:\WINDOWS\system32\dllcache\ltmdmnt.sys
+ 2001-09-06 17:39:10 577,194 -c--a-w C:\WINDOWS\system32\dllcache\ltmdmntl.sys
+ 2008-04-14 21:10:24 421,888 -c--a-w C:\WINDOWS\system32\dllcache\ltmdmntt.sys
+ 2008-04-13 23:10:54 7,040 -c--a-w C:\WINDOWS\system32\dllcache\ltotape.sys
+ 2001-08-17 20:28:12 797,500 -c--a-w C:\WINDOWS\system32\dllcache\ltsmt.sys
+ 2008-04-13 21:09:14 20,864 -c--a-w C:\WINDOWS\system32\dllcache\lwadihid.sys
+ 2001-08-17 19:49:20 22,848 -c--a-w C:\WINDOWS\system32\dllcache\lwusbhid.sys
+ 2001-09-06 20:26:54 58,880 -c--a-w C:\WINDOWS\system32\dllcache\m3091dc.dll
+ 2001-09-06 20:26:54 59,392 -c--a-w C:\WINDOWS\system32\dllcache\m3092dc.dll
+ 2001-08-17 19:19:58 48,768 -c--a-w C:\WINDOWS\system32\dllcache\maestro.sys
+ 2001-08-17 20:52:50 7,424 -c--a-w C:\WINDOWS\system32\dllcache\mammoth.sys
+ 2001-09-06 17:48:34 165,162 -c--a-w C:\WINDOWS\system32\dllcache\mdgndis5.sys
- 2001-09-07 13:00:00 26,624 -c--a-w C:\windows\system32\dllcache\mdsync.dll
+ 2001-09-07 11:00:00 26,624 -c--a-w C:\WINDOWS\system32\dllcache\mdsync.dll
+ 2001-09-07 13:00:00 147,968 -c--a-w C:\WINDOWS\system32\dllcache\mdwmdmsp.dll
+ 2001-08-17 20:58:04 8,320 -c--a-w C:\WINDOWS\system32\dllcache\memcard.sys
+ 2001-09-06 20:26:56 47,616 -c--a-w C:\WINDOWS\system32\dllcache\memgrp.dll
+ 2008-04-13 23:11:22 26,112 -c--a-w C:\WINDOWS\system32\dllcache\memstpci.sys
+ 2008-04-14 19:46:08 63,744 -c--a-w C:\WINDOWS\system32\dllcache\mf.sys
- 2001-09-07 13:00:00 92,032 -c--a-w C:\windows\system32\dllcache\mga.dll
+ 2001-09-07 11:00:00 92,032 -c--a-w C:\WINDOWS\system32\dllcache\mga.dll
- 2001-09-07 13:00:00 92,416 -c--a-w C:\windows\system32\dllcache\mga.sys
+ 2001-09-07 11:00:00 92,416 -c--a-w C:\WINDOWS\system32\dllcache\mga.sys
+ 2001-09-06 20:26:40 235,648 -c--a-w C:\WINDOWS\system32\dllcache\mgaud.dll
+ 2001-09-06 17:59:14 320,384 -c--a-w C:\WINDOWS\system32\dllcache\mgaum.sys
- 2001-09-07 13:00:00 34,816 -c--a-w C:\windows\system32\dllcache\migisol.exe
+ 2001-09-07 11:00:00 34,816 -c--a-w C:\WINDOWS\system32\dllcache\migisol.exe
+ 2001-08-17 20:52:50 6,528 -c--a-w C:\WINDOWS\system32\dllcache\miniqic.sys
+ 2008-04-14 19:46:08 30,336 -c--a-w C:\WINDOWS\system32\dllcache\modem.sys
+ 2001-08-17 20:57:38 16,128 -c--a-w C:\WINDOWS\system32\dllcache\modemcsa.sys
+ 2008-04-14 19:46:08 23,552 -c--a-w C:\WINDOWS\system32\dllcache\mouclass.sys
+ 2008-04-13 23:16:24 15,232 -c--a-w C:\WINDOWS\system32\dllcache\mpe.sys
+ 2001-08-17 20:52:12 17,280 -c--a-w C:\WINDOWS\system32\dllcache\mraid35x.sys
+ 2008-04-13 23:16:10 51,200 -c--a-w C:\WINDOWS\system32\dllcache\msdv.sys
+ 2001-08-17 20:48:36 6,016 -c--a-w C:\WINDOWS\system32\dllcache\msfsio.sys
+ 2001-08-17 21:02:40 35,200 -c--a-w C:\WINDOWS\system32\dllcache\msgame.sys
- 2001-09-07 13:00:00 98,304 -c--a-w C:\windows\system32\dllcache\msir3jp.dll
+ 2001-09-07 11:00:00 98,304 -c--a-w C:\WINDOWS\system32\dllcache\msir3jp.dll
+ 2008-04-13 23:24:30 22,016 -c--a-w C:\WINDOWS\system32\dllcache\msircomm.sys
+ 2008-04-14 00:09:54 7,552 -c--a-w C:\WINDOWS\system32\dllcache\mskssrv.sys
+ 2001-08-17 21:00:04 2,944 -c--a-w C:\WINDOWS\system32\dllcache\msmpu401.sys
+ 2008-04-14 00:09:52 5,376 -c--a-w C:\WINDOWS\system32\dllcache\mspclock.sys
+ 2008-04-14 00:09:52 4,992 -c--a-w C:\WINDOWS\system32\dllcache\mspqm.sys
+ 2001-08-17 20:48:50 12,416 -c--a-w C:\WINDOWS\system32\dllcache\msriffwv.sys
+ 2008-04-14 19:46:08 15,488 -c--a-w C:\WINDOWS\system32\dllcache\mssmbios.sys
+ 2008-04-13 23:16:10 49,024 -c--a-w C:\WINDOWS\system32\dllcache\mstape.sys
+ 2008-04-14 00:09:52 5,504 -c--a-w C:\WINDOWS\system32\dllcache\mstee.sys
+ 2008-04-14 19:46:08 16,896 -c--a-w C:\WINDOWS\system32\dllcache\msyuv.dll
+ 2008-04-13 22:53:42 126,686 -c--a-w C:\WINDOWS\system32\dllcache\mtlmnt5.sys
+ 2008-04-13 22:53:40 1,309,184 -c--a-w C:\WINDOWS\system32\dllcache\mtlstrm.sys
+ 2008-04-13 21:04:28 452,736 -c--a-w C:\WINDOWS\system32\dllcache\mtxparhm.sys
+ 2001-08-17 19:50:04 103,296 -c--a-w C:\WINDOWS\system32\dllcache\mtxvideo.sys
- 2001-09-07 13:00:00 229,439 -c--a-w C:\windows\system32\dllcache\multibox.dll
+ 2001-09-07 11:00:00 229,439 -c--a-w C:\WINDOWS\system32\dllcache\multibox.dll
+ 2008-04-13 23:13:56 12,672 -c--a-w C:\WINDOWS\system32\dllcache\mutohpen.sys
+ 2001-09-06 18:31:28 22,016 -c--a-w C:\WINDOWS\system32\dllcache\mxcard.sys
+ 2001-09-06 20:27:00 19,968 -c--a-w C:\WINDOWS\system32\dllcache\mxicfg.dll
+ 2001-08-17 20:49:32 19,968 -c--a-w C:\WINDOWS\system32\dllcache\mxnic.sys
+ 2001-09-06 20:27:00 7,168 -c--a-w C:\WINDOWS\system32\dllcache\mxport.dll
+ 2001-09-06 18:31:36 76,416 -c--a-w C:\WINDOWS\system32\dllcache\mxport.sys
+ 2001-09-06 18:31:42 53,279 -c--a-w C:\WINDOWS\system32\dllcache\n1000nt5.sys
+ 2001-09-06 18:31:44 131,072 -c--a-w C:\WINDOWS\system32\dllcache\n100325.sys
+ 2001-09-06 20:26:40 35,392 -c--a-w C:\WINDOWS\system32\dllcache\n9i128.dll
+ 2001-08-17 19:50:06 13,664 -c--a-w C:\WINDOWS\system32\dllcache\n9i128.sys
+ 2001-09-06 20:26:40 59,104 -c--a-w C:\WINDOWS\system32\dllcache\n9i128v2.dll
+ 2001-08-17 19:50:08 33,088 -c--a-w C:\WINDOWS\system32\dllcache\n9i128v2.sys
+ 2001-08-17 19:50:10 27,936 -c--a-w C:\WINDOWS\system32\dllcache\n9i3d.sys
+ 2001-09-06 20:26:40 91,488 -c--a-w C:\WINDOWS\system32\dllcache\n9i3disp.dll
+ 2008-04-14 00:16:26 85,248 -c--a-w C:\WINDOWS\system32\dllcache\nabtsfec.sys
+ 2008-04-14 00:16:24 10,880 -c--a-w C:\WINDOWS\system32\dllcache\ndisip.sys
+ 2008-04-14 19:46:08 14,592 -c--a-w C:\WINDOWS\system32\dllcache\ndisuio.sys
+ 2001-08-17 20:49:14 15,872 -c--a-w C:\WINDOWS\system32\dllcache\ne2000.sys
+ 2001-09-06 20:26:40 60,480 -c--a-w C:\WINDOWS\system32\dllcache\neo20xx.dll
+ 2001-08-17 19:50:04 39,264 -c--a-w C:\WINDOWS\system32\dllcache\neo20xx.sys
+ 2001-09-06 18:39:38 66,334 -c--a-w C:\WINDOWS\system32\dllcache\netflx3.sys
+ 2008-04-14 21:10:26 132,695 -c--a-w C:\WINDOWS\system32\dllcache\netwlan5.sys
- 2001-09-07 13:00:00 53,248 -c--a-w C:\windows\system32\dllcache\nextlink.dll
+ 2001-09-07 11:00:00 53,248 -c--a-w C:\WINDOWS\system32\dllcache\nextlink.dll
+ 2001-08-17 19:12:20 32,840 -c--a-w C:\WINDOWS\system32\dllcache\ngrpci.sys
+ 2008-04-14 19:46:08 61,824 -c--a-w C:\WINDOWS\system32\dllcache\nic1394.sys
+ 2001-09-07 13:00:00 12,032 -c--a-w C:\WINDOWS\system32\dllcache\nikedrv.sys
+ 2001-08-17 19:20:08 126,080 -c--a-w C:\WINDOWS\system32\dllcache\nm5a2wdm.sys
+ 2001-08-17 19:20:08 87,040 -c--a-w C:\WINDOWS\system32\dllcache\nm6wdm.sys
+ 2008-04-13 23:24:38 28,672 -c--a-w C:\WINDOWS\system32\dllcache\nscirda.sys
+ 2001-08-17 20:53:02 7,552 -c--a-w C:\WINDOWS\system32\dllcache\nsmmc.sys
+ 2001-09-06 18:49:36 9,472 -c--a-w C:\WINDOWS\system32\dllcache\ntapm.sys
+ 2001-08-17 19:49:04 51,552 -c--a-w C:\WINDOWS\system32\dllcache\ntgrip.sys
+ 2008-04-13 22:53:42 180,360 -c--a-w C:\WINDOWS\system32\dllcache\ntmtlfax.sys
+ 2001-09-06 20:26:40 123,776 -c--a-w C:\WINDOWS\system32\dllcache\nv3.dll
+ 2001-08-17 19:50:18 198,144 -c--a-w C:\WINDOWS\system32\dllcache\nv3.sys
+ 2008-04-13 23:16:20 61,696 -c--a-w C:\WINDOWS\system32\dllcache\ohci1394.sys
+ 2001-08-17 19:20:16 54,528 -c--a-w C:\WINDOWS\system32\dllcache\opl3sax.sys
+ 2001-09-07 13:00:00 3,456 -c--a-w C:\WINDOWS\system32\dllcache\oprghdlr.sys
+ 2001-08-17 19:12:36 27,209 -c--a-w C:\WINDOWS\system32\dllcache\otc06x5.sys
+ 2001-09-06 19:09:36 43,785 -c--a-w C:\WINDOWS\system32\dllcache\otceth5.sys
+ 2001-09-06 19:09:38 54,666 -c--a-w C:\WINDOWS\system32\dllcache\otcsercb.sys
+ 2001-08-17 21:05:04 25,088 -c--a-w C:\WINDOWS\system32\dllcache\ovca.sys
+ 2001-08-17 21:05:12 48,000 -c--a-w C:\WINDOWS\system32\dllcache\ovcam2.sys
+ 2001-08-17 21:05:16 28,032 -c--a-w C:\WINDOWS\system32\dllcache\ovcd.sys
+ 2001-08-17 21:05:20 31,872 -c--a-w C:\WINDOWS\system32\dllcache\ovce.sys
+ 2001-09-06 20:27:00 116,736 -c--a-w C:\WINDOWS\system32\dllcache\ovcodec2.dll
+ 2001-08-17 21:05:12 351,616 -c--a-w C:\WINDOWS\system32\dllcache\ovcodek2.sys
+ 2001-09-06 20:27:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\ovcomc.dll
+ 2001-09-06 20:27:24 39,424 -c--a-w C:\WINDOWS\system32\dllcache\ovcoms.exe
+ 2001-08-17 21:05:06 25,216 -c--a-w C:\WINDOWS\system32\dllcache\ovsound2.sys
+ 2001-09-06 20:27:00 44,544 -c--a-w C:\WINDOWS\system32\dllcache\ovui2.dll
+ 2001-09-06 20:27:00 42,496 -c--a-w C:\WINDOWS\system32\dllcache\ovui2rc.dll
+ 2008-04-14 19:46:08 46,848 -c--a-w C:\WINDOWS\system32\dllcache\p3.sys
- 2001-09-07 13:00:00 36,927 -c--a-w C:\windows\system32\dllcache\padrs411.dll
+ 2001-09-07 11:00:00 36,927 -c--a-w C:\WINDOWS\system32\dllcache\padrs411.dll
- 2001-09-07 13:00:00 14,336 -c--a-w C:\windows\system32\dllcache\padrs412.dll
+ 2001-09-07 11:00:00 14,336 -c--a-w C:\WINDOWS\system32\dllcache\padrs412.dll
- 2001-09-07 13:00:00 31,744 -c--a-w C:\windows\system32\dllcache\pagecnt.dll
+ 2001-09-07 11:00:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\pagecnt.dll
+ 2001-09-07 13:00:00 157,696 -c--a-w C:\WINDOWS\system32\dllcache\paqsp.dll
+ 2008-04-14 19:46:08 80,256 -c--a-w C:\WINDOWS\system32\dllcache\parport.sys
+ 2001-08-17 19:12:18 30,495 -c--a-w C:\WINDOWS\system32\dllcache\pc100nds.sys
+ 2008-04-13 21:05:34 29,502 -c--a-w C:\WINDOWS\system32\dllcache\pca200e.sys
+ 2008-04-14 19:13:24 68,224 -c--a-w C:\WINDOWS\system32\dllcache\pci.sys
+ 2001-09-06 20:14:20 3,328 -c--a-w C:\WINDOWS\system32\dllcache\pciide.sys
+ 2008-04-14 00:10:30 24,960 -c--a-w C:\WINDOWS\system32\dllcache\pciidex.sys
+ 2008-04-14 19:13:26 120,448 -c--a-w C:\WINDOWS\system32\dllcache\pcmcia.sys
+ 2001-08-17 19:12:18 26,153 -c--a-w C:\WINDOWS\system32\dllcache\pcmlm56.sys
+ 2001-08-17 19:11:22 30,282 -c--a-w C:\WINDOWS\system32\dllcache\pcntn5hl.sys
+ 2001-08-17 19:11:20 29,769 -c--a-w C:\WINDOWS\system32\dllcache\pcntn5m.sys
+ 2001-08-17 19:11:22 35,328 -c--a-w C:\WINDOWS\system32\dllcache\pcntpci5.sys
+ 2001-09-06 20:27:24 86,016 -c--a-w C:\WINDOWS\system32\dllcache\pctspk.exe
+ 2008-04-13 20:42:44 169,984 -c--a-w C:\WINDOWS\system32\dllcache\pcx500.sys
+ 2001-08-17 21:07:40 27,296 -c--a-w C:\WINDOWS\system32\dllcache\perc2.sys
+ 2001-08-17 21:07:42 5,504 -c--a-w C:\WINDOWS\system32\dllcache\perc2hib.sys
+ 2008-04-13 23:14:30 27,904 -c--a-w C:\WINDOWS\system32\dllcache\perm2.sys
+ 2008-04-14 21:31:32 211,584 -c--a-w C:\WINDOWS\system32\dllcache\perm2dll.dll
+ 2008-04-13 23:14:32 28,032 -c--a-w C:\WINDOWS\system32\dllcache\perm3.sys
+ 2008-04-14 21:31:32 259,328 -c--a-w C:\WINDOWS\system32\dllcache\perm3dd.dll
- 2001-09-07 13:00:00 20,992 -c--a-w C:\windows\system32\dllcache\permchk.dll
+ 2001-09-07 11:00:00 20,992 -c--a-w C:\WINDOWS\system32\dllcache\permchk.dll
+ 2001-09-06 20:27:00 16,896 -c--a-w C:\WINDOWS\system32\dllcache\philcam1.dll
+ 2001-08-17 21:04:50 75,776 -c--a-w C:\WINDOWS\system32\dllcache\philcam1.sys
+ 2001-08-17 21:04:08 173,696 -c--a-w C:\WINDOWS\system32\dllcache\philcam2.sys
+ 2001-08-17 21:04:04 92,416 -c--a-w C:\WINDOWS\system32\dllcache\phildec.sys
+ 2001-08-17 21:07:20 19,840 -c--a-w C:\WINDOWS\system32\dllcache\philtune.sys
+ 2001-09-06 20:27:00 121,344 -c--a-w C:\WINDOWS\system32\dllcache\phvfwext.dll
+ 2008-04-14 19:46:08 35,328 -c--a-w C:\WINDOWS\system32\dllcache\pid.dll
+ 2008-04-14 19:46:08 15,360 -c--a-w C:\WINDOWS\system32\dllcache\pjlmon.dll
- 2001-09-07 13:00:00 6,144 -c--a-w C:\windows\system32\dllcache\pmxgl.dll
+ 2001-09-07 11:00:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\pmxgl.dll
- 2001-09-07 13:00:00 11,264 -c--a-w C:\windows\system32\dllcache\pmxmcro.dll
+ 2001-09-07 11:00:00 11,264 -c--a-w C:\WINDOWS\system32\dllcache\pmxmcro.dll
- 2001-09-07 13:00:00 131,584 -c--a-w C:\windows\system32\dllcache\pmxviceo.dll
+ 2001-09-07 11:00:00 131,584 -c--a-w C:\WINDOWS\system32\dllcache\pmxviceo.dll
+ 2001-08-17 20:53:04 7,168 -c--a-w C:\WINDOWS\system32\dllcache\pnrmc.sys
+ 2008-04-13 23:10:58 8,832 -c--a-w C:\WINDOWS\system32\dllcache\powerfil.sys
+ 2001-08-17 20:53:22 17,792 -c--a-w C:\WINDOWS\system32\dllcache\ppa.sys
+ 2008-04-13 23:11:02 17,664 -c--a-w C:\WINDOWS\system32\dllcache\ppa3.sys
+ 2008-04-14 19:46:08 39,936 -c--a-w C:\WINDOWS\system32\dllcache\processr.sys
+ 2001-09-06 19:24:10 16,128 -c--a-w C:\WINDOWS\system32\dllcache\pscr.sys
+ 2008-04-14 21:32:40 363,520 -c--a-w C:\WINDOWS\system32\dllcache\psisdecd.dll
+ 2001-09-06 20:27:00 35,328 -c--a-w C:\WINDOWS\system32\dllcache\psisload.dll
+ 2001-09-06 20:27:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\ptpusb.dll
+ 2008-04-14 21:32:40 159,232 -c--a-w C:\WINDOWS\system32\dllcache\ptpusd.dll
+ 2001-08-17 20:28:12 128,286 -c--a-w C:\WINDOWS\system32\dllcache\ptserli.sys
+ 2001-08-17 20:28:14 112,574 -c--a-w C:\WINDOWS\system32\dllcache\ptserlp.sys
+ 2001-08-17 20:28:14 130,942 -c--a-w C:\WINDOWS\system32\dllcache\ptserlv.sys
+ 2008-04-13 23:10:54 6,016 -c--a-w C:\WINDOWS\system32\dllcache\qic157.sys
+ 2001-08-17 20:52:20 40,320 -c--a-w C:\WINDOWS\system32\dllcache\ql1080.sys
+ 2001-08-17 20:52:16 33,152 -c--a-w C:\WINDOWS\system32\dllcache\ql10wnt.sys
+ 2001-08-17 20:52:20 45,312 -c--a-w C:\WINDOWS\system32\dllcache\ql12160.sys
+ 2001-08-17 20:52:16 40,448 -c--a-w C:\WINDOWS\system32\dllcache\ql1240.sys
+ 2001-08-17 20:52:18 49,024 -c--a-w C:\WINDOWS\system32\dllcache\ql1280.sys
- 2001-09-07 13:00:00 9,728 -c--a-w C:\windows\system32\dllcache\query.exe
+ 2001-09-07 11:00:00 9,728 -c--a-w C:\WINDOWS\system32\dllcache\query.exe
- 2001-09-07 13:00:00 16,896 -c--a-w C:\windows\system32\dllcache\quser.exe
+ 2001-09-07 11:00:00 16,896 -c--a-w C:\WINDOWS\system32\dllcache\quser.exe
+ 2001-08-17 20:53:32 3,328 -c--a-w C:\WINDOWS\system32\dllcache\qv2kux.sys
+ 2001-09-06 20:27:02 41,984 -c--a-w C:\WINDOWS\system32\dllcache\qvusd.dll
+ 2001-09-06 19:29:30 715,210 -c--a-w C:\WINDOWS\system32\dllcache\r2mdmkxx.sys
+ 2001-08-17 20:51:32 19,584 -c--a-w C:\WINDOWS\system32\dllcache\rasirda.sys
+ 2008-04-13 23:02:52 196,224 -c--a-w C:\WINDOWS\system32\dllcache\rdpdr.sys
+ 2008-04-13 22:53:44 13,776 -c--a-w C:\WINDOWS\system32\dllcache\recagent.sys
+ 2008-04-14 22:04:04 58,112 -c--a-w C:\WINDOWS\system32\dllcache\redbook.sys
- 2001-09-07 13:00:00 14,848 -c--a-w C:\windows\system32\dllcache\register.exe
+ 2001-09-07 11:00:00 14,848 -c--a-w C:\WINDOWS\system32\dllcache\register.exe
+ 2001-09-06 20:27:02 86,097 -c--a-w C:\WINDOWS\system32\dllcache\reslog32.dll
+ 2008-04-13 23:16:34 59,136 -c--a-w C:\WINDOWS\system32\dllcache\rfcomm.sys
+ 2001-09-07 13:00:00 12,032 -c--a-w C:\WINDOWS\system32\dllcache\rio8drv.sys
+ 2001-09-07 13:00:00 12,032 -c--a-w C:\WINDOWS\system32\dllcache\riodrv.sys
+ 2001-08-17 19:12:36 37,563 -c--a-w C:\WINDOWS\system32\dllcache\rlnet5.sys
+ 2008-04-13 23:26:50 30,592 -c--a-w C:\WINDOWS\system32\dllcache\rndismpx.sys
+ 2008-04-14 21:04:54 79,360 -c--a-w C:\WINDOWS\system32\dllcache\rocket.sys
+ 2001-08-17 19:19:20 3,840 -c--a-w C:\WINDOWS\system32\dllcache\rpfun.sys
+ 2001-09-06 20:27:02 10,240 -c--a-w C:\WINDOWS\system32\dllcache\rsmgrstr.dll
+ 2001-08-17 19:19:22 30,720 -c--a-w C:\WINDOWS\system32\dllcache\rthwcls.sys
+ 2001-08-17 19:12:40 19,017 -c--a-w C:\WINDOWS\system32\dllcache\rtl8029.sys
+ 2008-04-13 21:05:40 20,992 -c--a-w C:\WINDOWS\system32\dllcache\rtl8139.sys
+ 2008-04-14 21:32:40 28,160 -c--a-w C:\WINDOWS\system32\dllcache\rw430ext.dll
+ 2008-04-14 21:32:40 29,696 -c--a-w C:\WINDOWS\system32\dllcache\rw450ext.dll
- 2001-09-07 13:00:00 80,896 -c--a-w C:\windows\system32\dllcache\rwia001.dll
+ 2001-09-07 11:00:00 80,896 -c--a-w C:\WINDOWS\system32\dllcache\rwia001.dll
- 2001-09-07 13:00:00 80,896 -c--a-w C:\windows\system32\dllcache\rwia330.dll
+ 2001-09-07 11:00:00 80,896 -c--a-w C:\WINDOWS\system32\dllcache\rwia330.dll
+ 2001-09-06 20:27:02 80,896 -c--a-w C:\WINDOWS\system32\dllcache\rwia430.dll
+ 2001-09-06 20:27:02 83,456 -c--a-w C:\WINDOWS\system32\dllcache\rwia450.dll

en deel 4

+ 2008-04-14 21:32:40 397,056 -c--a-w C:\WINDOWS\system32\dllcache\s3gnb.dll
+ 2008-04-13 21:04:34 166,912 -c--a-w C:\WINDOWS\system32\dllcache\s3gnbm.sys
+ 2001-08-17 20:57:46 65,664 -c--a-w C:\WINDOWS\system32\dllcache\s3legacy.sys
+ 2001-08-17 19:50:34 166,720 -c--a-w C:\WINDOWS\system32\dllcache\s3m.sys
+ 2001-09-06 20:26:40 182,272 -c--a-w C:\WINDOWS\system32\dllcache\s3mt3d.dll
+ 2001-08-17 19:50:40 41,216 -c--a-w C:\WINDOWS\system32\dllcache\s3mt3d.sys
+ 2001-09-06 20:26:40 62,496 -c--a-w C:\WINDOWS\system32\dllcache\s3mtrio.dll
+ 2001-09-06 20:26:40 210,496 -c--a-w C:\WINDOWS\system32\dllcache\s3mvirge.dll
+ 2001-09-06 20:26:40 179,264 -c--a-w C:\WINDOWS\system32\dllcache\s3sav3d.dll
+ 2001-08-17 19:50:22 61,504 -c--a-w C:\WINDOWS\system32\dllcache\s3sav3dm.sys
+ 2001-09-06 20:26:42 198,400 -c--a-w C:\WINDOWS\system32\dllcache\s3sav4.dll
+ 2001-08-17 19:50:28 77,824 -c--a-w C:\WINDOWS\system32\dllcache\s3sav4m.sys
+ 2001-09-06 20:26:42 245,632 -c--a-w C:\WINDOWS\system32\dllcache\s3savmx.dll
+ 2001-08-17 19:50:34 75,392 -c--a-w C:\WINDOWS\system32\dllcache\s3savmxm.sys
+ 2001-09-06 20:27:02 495,616 -c--a-w C:\WINDOWS\system32\dllcache\sblfx.dll
+ 2008-04-13 23:10:50 43,904 -c--a-w C:\WINDOWS\system32\dllcache\sbp2port.sys
+ 2001-09-06 19:42:52 23,936 -c--a-w C:\WINDOWS\system32\dllcache\sccmn50m.sys
+ 2001-08-17 20:51:14 23,936 -c--a-w C:\WINDOWS\system32\dllcache\sccmusbm.sys
- 2008-04-14 19:32:40 144,384 -c--a-w C:\windows\system32\dllcache\schannel.dll
+ 2008-12-05 06:58:53 144,896 -c--a-w C:\WINDOWS\system32\dllcache\schannel.dll
+ 2001-09-06 19:44:08 16,768 -c--a-w C:\WINDOWS\system32\dllcache\scmstcs.sys
+ 2001-09-06 19:44:18 17,536 -c--a-w C:\WINDOWS\system32\dllcache\scr111.sys
+ 2008-04-13 21:10:32 96,384 -c--a-w C:\WINDOWS\system32\dllcache\scsiport.sys
+ 2001-08-17 20:52:34 11,648 -c--a-w C:\WINDOWS\system32\dllcache\scsiprnt.sys
+ 2008-04-13 23:15:34 11,520 -c--a-w C:\WINDOWS\system32\dllcache\scsiscan.sys
+ 2008-04-13 21:06:46 79,232 -c--a-w C:\WINDOWS\system32\dllcache\sdbus.sys
+ 2008-04-14 22:32:40 29,184 -c--a-w C:\WINDOWS\system32\dllcache\sdhcinst.dll
+ 2001-08-17 20:53:10 6,912 -c--a-w C:\WINDOWS\system32\dllcache\seaddsmc.sys
+ 2008-04-13 21:10:14 15,744 -c--a-w C:\WINDOWS\system32\dllcache\serenum.sys
+ 2008-04-14 19:06:26 65,536 -c--a-w C:\WINDOWS\system32\dllcache\serial.sys
+ 2001-09-06 19:47:16 18,176 -c--a-w C:\WINDOWS\system32\dllcache\sermouse.sys
+ 2001-09-06 19:47:18 6,912 -c--a-w C:\WINDOWS\system32\dllcache\serscan.sys
+ 2008-04-13 21:10:48 11,904 -c--a-w C:\WINDOWS\system32\dllcache\sffdisk.sys
+ 2008-04-13 21:10:48 11,008 -c--a-w C:\WINDOWS\system32\dllcache\sffp_sd.sys
+ 2008-04-13 21:10:50 11,392 -c--a-w C:\WINDOWS\system32\dllcache\sfloppy.sys
+ 2001-08-17 19:19:34 36,480 -c--a-w C:\WINDOWS\system32\dllcache\sfmanm.sys
+ 2001-09-06 20:26:42 386,560 -c--a-w C:\WINDOWS\system32\dllcache\sgiul50.dll
+ 2001-08-17 19:51:04 98,080 -c--a-w C:\WINDOWS\system32\dllcache\sgiulnt5.sys
+ 2001-07-21 21:29:20 18,400 -c--a-w C:\WINDOWS\system32\dllcache\sgsmld.sys
+ 2001-09-06 19:49:48 161,760 -c--a-w C:\WINDOWS\system32\dllcache\sgsmusb.sys
+ 2008-04-14 21:32:40 3,901 -c--a-w C:\WINDOWS\system32\dllcache\siint5.dll
- 2001-09-07 13:00:00 18,944 -c--a-w C:\windows\system32\dllcache\simptcp.dll
+ 2001-09-07 11:00:00 18,944 -c--a-w C:\WINDOWS\system32\dllcache\simptcp.dll
+ 2001-08-17 19:50:46 101,760 -c--a-w C:\WINDOWS\system32\dllcache\sis300ip.sys
+ 2001-09-06 20:26:42 252,032 -c--a-w C:\WINDOWS\system32\dllcache\sis300iv.dll
+ 2001-08-17 19:50:56 68,608 -c--a-w C:\WINDOWS\system32\dllcache\sis6306p.sys
+ 2001-09-06 20:26:42 150,144 -c--a-w C:\WINDOWS\system32\dllcache\sis6306v.dll
+ 2008-04-13 23:06:40 40,960 -c--a-w C:\WINDOWS\system32\dllcache\sisagp.sys
+ 2001-08-17 19:50:48 104,064 -c--a-w C:\WINDOWS\system32\dllcache\sisgrp.sys
+ 2001-09-06 20:27:04 238,592 -c--a-w C:\WINDOWS\system32\dllcache\sisgrv.dll
+ 2008-04-13 21:05:40 32,768 -c--a-w C:\WINDOWS\system32\dllcache\sisnic.sys
+ 2001-08-17 19:50:56 50,432 -c--a-w C:\WINDOWS\system32\dllcache\sisv.sys
+ 2001-09-06 20:26:42 157,696 -c--a-w C:\WINDOWS\system32\dllcache\sisv256.dll
+ 2001-09-06 19:53:46 95,146 -c--a-w C:\WINDOWS\system32\dllcache\sk98xwin.sys
+ 2001-08-17 19:12:52 91,294 -c--a-w C:\WINDOWS\system32\dllcache\skfpwin.sys
+ 2008-04-13 21:05:40 63,547 -c--a-w C:\WINDOWS\system32\dllcache\sla30nd5.sys
+ 2008-04-14 21:32:40 73,832 -c--a-w C:\WINDOWS\system32\dllcache\slcoinst.dll
+ 2008-04-14 21:32:40 286,792 -c--a-w C:\WINDOWS\system32\dllcache\slextspk.dll
+ 2008-04-14 21:32:40 188,508 -c--a-w C:\WINDOWS\system32\dllcache\slgen.dll
+ 2008-04-14 00:16:24 11,136 -c--a-w C:\WINDOWS\system32\dllcache\slip.sys
+ 2008-04-13 22:53:44 129,535 -c--a-w C:\WINDOWS\system32\dllcache\slnt7554.sys
+ 2008-04-13 22:53:46 404,990 -c--a-w C:\WINDOWS\system32\dllcache\slntamr.sys
+ 2008-04-13 22:53:48 95,424 -c--a-w C:\WINDOWS\system32\dllcache\slnthal.sys
+ 2008-04-14 21:33:16 32,866 -c--a-w C:\WINDOWS\system32\dllcache\slrundll.exe
+ 2008-04-14 21:33:16 73,796 -c--a-w C:\WINDOWS\system32\dllcache\slserv.exe
+ 2008-04-13 22:53:48 13,240 -c--a-w C:\WINDOWS\system32\dllcache\slwdmsup.sys
- 2001-09-07 13:00:00 25,088 -c--a-w C:\windows\system32\dllcache\sm59w.dll
+ 2001-09-07 11:00:00 25,088 -c--a-w C:\WINDOWS\system32\dllcache\sm59w.dll
- 2001-09-07 13:00:00 30,208 -c--a-w C:\windows\system32\dllcache\sm81w.dll
+ 2001-09-07 11:00:00 30,208 -c--a-w C:\WINDOWS\system32\dllcache\sm81w.dll
- 2001-09-07 13:00:00 30,208 -c--a-w C:\windows\system32\dllcache\sm87w.dll
+ 2001-09-07 11:00:00 30,208 -c--a-w C:\WINDOWS\system32\dllcache\sm87w.dll
- 2001-09-07 13:00:00 26,112 -c--a-w C:\windows\system32\dllcache\sm89w.dll
+ 2001-09-07 11:00:00 26,112 -c--a-w C:\WINDOWS\system32\dllcache\sm89w.dll
- 2001-09-07 13:00:00 26,112 -c--a-w C:\windows\system32\dllcache\sm8aw.dll
+ 2001-09-07 11:00:00 26,112 -c--a-w C:\WINDOWS\system32\dllcache\sm8aw.dll
- 2001-09-07 13:00:00 29,184 -c--a-w C:\windows\system32\dllcache\sm8cw.dll
+ 2001-09-07 11:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\sm8cw.dll
- 2001-09-07 13:00:00 26,112 -c--a-w C:\windows\system32\dllcache\sm8dw.dll
+ 2001-09-07 11:00:00 26,112 -c--a-w C:\WINDOWS\system32\dllcache\sm8dw.dll
- 2001-09-07 13:00:00 26,112 -c--a-w C:\windows\system32\dllcache\sm90w.dll
+ 2001-09-07 11:00:00 26,112 -c--a-w C:\WINDOWS\system32\dllcache\sm90w.dll
+ 2001-09-06 20:27:04 28,160 -c--a-w C:\WINDOWS\system32\dllcache\sm91w.dll
- 2001-09-07 13:00:00 26,624 -c--a-w C:\windows\system32\dllcache\sm92w.dll
+ 2001-09-07 11:00:00 26,624 -c--a-w C:\WINDOWS\system32\dllcache\sm92w.dll
- 2001-09-07 13:00:00 26,624 -c--a-w C:\windows\system32\dllcache\sm93w.dll
+ 2001-09-07 11:00:00 26,624 -c--a-w C:\WINDOWS\system32\dllcache\sm93w.dll
- 2001-09-07 13:00:00 38,912 -c--a-w C:\windows\system32\dllcache\sm9aw.dll
+ 2001-09-07 11:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\sm9aw.dll
+ 2001-09-06 20:27:04 28,672 -c--a-w C:\WINDOWS\system32\dllcache\sma0w.dll
- 2001-09-07 13:00:00 31,744 -c--a-w C:\windows\system32\dllcache\sma3w.dll
+ 2001-09-07 11:00:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\sma3w.dll
+ 2001-09-06 20:27:04 33,792 -c--a-w C:\WINDOWS\system32\dllcache\smb0w.dll
+ 2001-09-06 20:27:04 45,568 -c--a-w C:\WINDOWS\system32\dllcache\smb3w.dll
- 2001-09-07 13:00:00 31,744 -c--a-w C:\windows\system32\dllcache\smb6w.dll
+ 2001-09-07 11:00:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\smb6w.dll
+ 2008-04-13 23:06:36 5,888 -c--a-w C:\WINDOWS\system32\dllcache\smbali.sys
+ 2008-04-13 23:06:34 16,000 -c--a-w C:\WINDOWS\system32\dllcache\smbbatt.sys
+ 2008-04-13 23:06:34 6,912 -c--a-w C:\WINDOWS\system32\dllcache\smbclass.sys
+ 2001-08-17 20:57:56 6,784 -c--a-w C:\WINDOWS\system32\dllcache\smbhc.sys
+ 2001-08-17 19:12:46 24,576 -c--a-w C:\WINDOWS\system32\dllcache\smc8000n.sys
+ 2001-09-06 19:56:14 36,425 -c--a-w C:\WINDOWS\system32\dllcache\smcirda.sys
+ 2001-08-17 19:12:48 25,034 -c--a-w C:\WINDOWS\system32\dllcache\smcpwr2n.sys
+ 2001-09-06 20:26:42 147,200 -c--a-w C:\WINDOWS\system32\dllcache\smidispb.dll
- 2001-09-07 13:00:00 15,872 -c--a-w C:\windows\system32\dllcache\smierrsm.dll
+ 2001-09-07 11:00:00 15,872 -c--a-w C:\WINDOWS\system32\dllcache\smierrsm.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\smierrsy.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\smierrsy.dll
+ 2001-08-17 19:51:00 58,368 -c--a-w C:\WINDOWS\system32\dllcache\smiminib.sys
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\smimsgif.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\smimsgif.dll
- 2001-09-07 13:00:00 10,240 -c--a-w C:\windows\system32\dllcache\snmpstup.dll
+ 2001-09-07 11:00:00 10,240 -c--a-w C:\WINDOWS\system32\dllcache\snmpstup.dll
+ 2001-08-17 20:53:14 7,040 -c--a-w C:\WINDOWS\system32\dllcache\snyaitmc.sys
- 2001-09-07 13:00:00 143,422 -c--a-w C:\windows\system32\dllcache\softkey.dll
+ 2001-09-07 11:00:00 143,422 -c--a-w C:\WINDOWS\system32\dllcache\softkey.dll
+ 2008-04-13 23:10:54 7,552 -c--a-w C:\WINDOWS\system32\dllcache\sonyait.sys
+ 2008-04-14 19:46:08 25,344 -c--a-w C:\WINDOWS\system32\dllcache\sonydcam.sys
+ 2001-08-17 20:53:04 9,600 -c--a-w C:\WINDOWS\system32\dllcache\sonymc.sys
+ 2001-08-17 19:51:20 20,752 -c--a-w C:\WINDOWS\system32\dllcache\sonync.sys
+ 2001-09-06 20:27:04 114,688 -c--a-w C:\WINDOWS\system32\dllcache\sonypi.dll
+ 2001-08-17 19:51:22 37,040 -c--a-w C:\WINDOWS\system32\dllcache\sonypi.sys
+ 2001-08-17 20:56:16 7,552 -c--a-w C:\WINDOWS\system32\dllcache\sonypvu1.sys
+ 2001-08-17 21:07:44 19,072 -c--a-w C:\WINDOWS\system32\dllcache\sparrow.sys
+ 2001-09-06 20:27:04 106,584 -c--a-w C:\WINDOWS\system32\dllcache\spdports.dll
+ 2001-08-17 20:51:00 61,824 -c--a-w C:\WINDOWS\system32\dllcache\speed.sys
+ 2001-09-07 13:00:00 69,632 -c--a-w C:\WINDOWS\system32\dllcache\spnike.dll
+ 2001-09-07 13:00:00 70,656 -c--a-w C:\WINDOWS\system32\dllcache\sprio600.dll
+ 2001-09-07 13:00:00 72,192 -c--a-w C:\WINDOWS\system32\dllcache\sprio800.dll
+ 2001-09-06 20:27:04 24,660 -c--a-w C:\WINDOWS\system32\dllcache\spxupchk.dll
- 2001-09-07 13:00:00 101,888 -c--a-w C:\windows\system32\dllcache\srusbusd.dll
+ 2001-09-07 11:00:00 101,888 -c--a-w C:\WINDOWS\system32\dllcache\srusbusd.dll
+ 2001-09-06 20:27:04 99,840 -c--a-w C:\WINDOWS\system32\dllcache\srusd.dll
+ 2001-08-17 19:11:08 48,736 -c--a-w C:\WINDOWS\system32\dllcache\srwlnd5.sys
- 2001-09-07 13:00:00 16,896 -c--a-w C:\windows\system32\dllcache\status.dll
+ 2001-09-07 11:00:00 16,896 -c--a-w C:\WINDOWS\system32\dllcache\status.dll
+ 2001-09-06 17:19:08 16,896 -c--a-w C:\WINDOWS\system32\dllcache\stcusb.sys
+ 2001-09-06 17:20:32 286,432 -c--a-w C:\WINDOWS\system32\dllcache\stlnata.sys
+ 2001-09-06 20:27:04 53,248 -c--a-w C:\WINDOWS\system32\dllcache\stlncoin.dll
+ 2001-09-06 20:27:04 155,648 -c--a-w C:\WINDOWS\system32\dllcache\stlnprop.dll
+ 2008-04-14 22:32:46 76,288 -c--a-w C:\WINDOWS\system32\dllcache\storprop.dll
+ 2001-09-07 13:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\streamci.dll
+ 2008-04-14 00:16:22 15,232 -c--a-w C:\WINDOWS\system32\dllcache\streamip.sys
+ 2001-09-06 20:27:04 41,472 -c--a-w C:\WINDOWS\system32\dllcache\sw_effct.dll
+ 2001-09-06 20:27:04 53,760 -c--a-w C:\WINDOWS\system32\dllcache\sw_wheel.dll
+ 2008-04-14 19:46:08 4,352 -c--a-w C:\WINDOWS\system32\dllcache\swenum.sys
+ 2001-09-06 20:27:04 10,240 -c--a-w C:\WINDOWS\system32\dllcache\swpdflt2.dll
+ 2001-09-06 20:27:04 10,240 -c--a-w C:\WINDOWS\system32\dllcache\swpidflt.dll
+ 2001-08-17 21:02:56 3,968 -c--a-w C:\WINDOWS\system32\dllcache\swusbflt.sys
+ 2001-08-17 20:50:58 103,936 -c--a-w C:\WINDOWS\system32\dllcache\sx.sys
+ 2001-09-06 20:27:04 94,293 -c--a-w C:\WINDOWS\system32\dllcache\sxports.dll
+ 2001-08-17 21:07:40 28,384 -c--a-w C:\WINDOWS\system32\dllcache\sym_hi.sys
+ 2001-08-17 21:07:42 30,688 -c--a-w C:\WINDOWS\system32\dllcache\sym_u3.sys
+ 2001-08-17 21:07:34 16,256 -c--a-w C:\WINDOWS\system32\dllcache\symc810.sys
+ 2001-08-17 21:07:36 32,640 -c--a-w C:\WINDOWS\system32\dllcache\symc8xx.sys
+ 2001-09-06 20:26:42 172,768 -c--a-w C:\WINDOWS\system32\dllcache\t2r4disp.dll
+ 2001-08-17 19:50:12 36,640 -c--a-w C:\WINDOWS\system32\dllcache\t2r4mini.sys
+ 2001-08-17 20:52:54 7,040 -c--a-w C:\WINDOWS\system32\dllcache\tandqic.sys
+ 2001-08-17 20:49:46 30,464 -c--a-w C:\WINDOWS\system32\dllcache\tbatm155.sys
- 2001-09-07 13:00:00 13,192 -c--a-w C:\windows\system32\dllcache\tdasync.sys
+ 2001-09-07 11:00:00 13,192 -c--a-w C:\WINDOWS\system32\dllcache\tdasync.sys
- 2001-09-07 13:00:00 21,896 -c--a-w C:\windows\system32\dllcache\tdipx.sys
+ 2001-09-07 11:00:00 21,896 -c--a-w C:\WINDOWS\system32\dllcache\tdipx.sys
+ 2001-08-17 19:13:00 37,961 -c--a-w C:\WINDOWS\system32\dllcache\tdk100b.sys
+ 2001-08-17 19:13:00 17,129 -c--a-w C:\WINDOWS\system32\dllcache\tdkcd31.sys
- 2001-09-07 13:00:00 19,464 -c--a-w C:\windows\system32\dllcache\tdspx.sys
+ 2001-09-07 11:00:00 19,464 -c--a-w C:\WINDOWS\system32\dllcache\tdspx.sys
+ 2008-04-14 21:33:46 40,840 -c--a-w C:\WINDOWS\system32\dllcache\termdd.sys
+ 2008-04-13 23:10:52 149,376 -c--a-w C:\WINDOWS\system32\dllcache\tffsport.sys
+ 2001-09-06 20:26:42 81,408 -c--a-w C:\WINDOWS\system32\dllcache\tgiul50.dll
+ 2001-08-17 19:51:10 138,528 -c--a-w C:\WINDOWS\system32\dllcache\tgiulnt5.sys
- 2001-09-07 13:00:00 185,344 -c--a-w C:\windows\system32\dllcache\thawbrkr.dll
+ 2001-09-07 11:00:00 185,344 -c--a-w C:\WINDOWS\system32\dllcache\thawbrkr.dll
- 2008-04-13 19:13:52 44,032 -c--a-w C:\windows\system32\dllcache\tintlphr.exe
+ 2004-08-03 22:32:16 44,032 -c--a-w C:\WINDOWS\system32\dllcache\tintlphr.exe
- 2008-04-13 19:13:54 455,168 -c--a-w C:\windows\system32\dllcache\tintsetp.exe
+ 2004-08-03 22:32:16 455,168 -c--a-w C:\WINDOWS\system32\dllcache\tintsetp.exe
+ 2001-08-17 19:14:26 123,995 -c--a-w C:\WINDOWS\system32\dllcache\tjisdn.sys
- 2008-04-14 19:32:46 33,792 -c--a-w C:\windows\system32\dllcache\tools.dll
+ 2001-09-07 11:00:00 31,232 -c--a-w C:\WINDOWS\system32\dllcache\tools.dll
+ 2001-08-17 19:10:26 28,232 -c--a-w C:\WINDOWS\system32\dllcache\tos4mo.sys
+ 2001-09-07 13:00:00 51,712 -c--a-w C:\WINDOWS\system32\dllcache\tosdvd.sys
+ 2001-08-17 21:01:52 241,664 -c--a-w C:\WINDOWS\system32\dllcache\tosdvd02.sys
+ 2001-08-17 21:02:00 230,912 -c--a-w C:\WINDOWS\system32\dllcache\tosdvd03.sys
+ 2001-09-06 17:37:58 4,992 -c--a-w C:\WINDOWS\system32\dllcache\toside.sys
+ 2001-09-06 20:27:04 31,744 -c--a-w C:\WINDOWS\system32\dllcache\tp4.dll
+ 2008-04-14 21:33:18 82,944 -c--a-w C:\WINDOWS\system32\dllcache\tp4mon.exe
+ 2001-09-06 20:26:16 43,008 -c--a-w C:\WINDOWS\system32\dllcache\tp4res.dll
+ 2001-08-17 19:12:12 34,375 -c--a-w C:\WINDOWS\system32\dllcache\tpro4.sys
+ 2001-09-06 20:26:42 315,520 -c--a-w C:\WINDOWS\system32\dllcache\trid3d.dll
+ 2001-08-17 19:51:16 222,336 -c--a-w C:\WINDOWS\system32\dllcache\trid3dm.sys
+ 2001-09-06 20:26:42 440,576 -c--a-w C:\WINDOWS\system32\dllcache\tridkb.dll
+ 2001-08-17 19:51:16 159,232 -c--a-w C:\WINDOWS\system32\dllcache\tridkbm.sys
+ 2001-09-06 20:27:04 525,568 -c--a-w C:\WINDOWS\system32\dllcache\tridxp.dll
+ 2001-08-17 19:51:22 166,784 -c--a-w C:\WINDOWS\system32\dllcache\tridxpm.sys
+ 2001-09-07 13:00:00 21,376 -c--a-w C:\WINDOWS\system32\dllcache\tsbvcap.sys
+ 2001-09-07 13:00:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\tsbyuv.dll
- 2001-09-07 13:00:00 14,336 -c--a-w C:\windows\system32\dllcache\tsprof.exe
+ 2001-09-07 11:00:00 14,336 -c--a-w C:\WINDOWS\system32\dllcache\tsprof.exe
+ 2008-04-14 19:46:08 12,288 -c--a-w C:\WINDOWS\system32\dllcache\tunmp.sys
+ 2001-08-17 20:48:14 11,520 -c--a-w C:\WINDOWS\system32\dllcache\twotrack.sys
+ 2008-04-13 23:06:42 44,672 -c--a-w C:\WINDOWS\system32\dllcache\uagp35.sys
+ 2001-08-17 20:52:22 36,736 -c--a-w C:\WINDOWS\system32\dllcache\ultra.sys
+ 2001-09-06 20:27:04 216,576 -c--a-w C:\WINDOWS\system32\dllcache\um34scan.dll
+ 2001-09-06 20:27:04 212,480 -c--a-w C:\WINDOWS\system32\dllcache\um54scan.dll
+ 2001-09-06 20:27:04 47,616 -c--a-w C:\WINDOWS\system32\dllcache\umaxcam.dll
+ 2001-09-06 20:27:04 50,176 -c--a-w C:\WINDOWS\system32\dllcache\umaxp60.dll
+ 2001-08-17 20:58:12 22,912 -c--a-w C:\WINDOWS\system32\dllcache\umaxpcls.sys
+ 2001-09-06 20:27:04 50,688 -c--a-w C:\WINDOWS\system32\dllcache\umaxscan.dll
+ 2001-09-06 20:27:04 69,632 -c--a-w C:\WINDOWS\system32\dllcache\umaxu12.dll
+ 2001-09-06 20:27:04 26,624 -c--a-w C:\WINDOWS\system32\dllcache\umaxu22.dll
+ 2001-09-06 20:27:04 28,160 -c--a-w C:\WINDOWS\system32\dllcache\umaxu40.dll
+ 2001-09-06 20:27:04 94,720 -c--a-w C:\WINDOWS\system32\dllcache\umaxud32.dll
+ 2008-04-14 21:02:40 32,384 -c--a-w C:\WINDOWS\system32\dllcache\usb101et.sys
+ 2008-04-13 23:26:50 12,800 -c--a-w C:\WINDOWS\system32\dllcache\usb8023x.sys
+ 2008-04-13 23:15:14 60,032 -c--a-w C:\WINDOWS\system32\dllcache\usbaudio.sys
+ 2008-04-14 19:46:08 25,600 -c--a-w C:\WINDOWS\system32\dllcache\usbcamd.sys
+ 2008-04-14 19:46:08 25,728 -c--a-w C:\WINDOWS\system32\dllcache\usbcamd2.sys
+ 2008-04-13 21:15:40 32,128 -c--a-w C:\WINDOWS\system32\dllcache\usbccgp.sys
+ 2001-09-07 13:00:00 4,736 -c--a-w C:\WINDOWS\system32\dllcache\usbd.sys
+ 2008-04-13 21:15:36 30,208 -c--a-w C:\WINDOWS\system32\dllcache\usbehci.sys
+ 2008-04-13 21:15:38 59,520 -c--a-w C:\WINDOWS\system32\dllcache\usbhub.sys
+ 2008-04-14 19:46:08 15,872 -c--a-w C:\WINDOWS\system32\dllcache\usbintel.sys
+ 2008-04-13 23:15:36 17,152 -c--a-w C:\WINDOWS\system32\dllcache\usbohci.sys
+ 2008-04-13 21:15:38 143,872 -c--a-w C:\WINDOWS\system32\dllcache\usbport.sys
+ 2008-04-13 23:17:38 25,856 -c--a-w C:\WINDOWS\system32\dllcache\usbprint.sys
+ 2008-04-13 23:15:36 15,104 -c--a-w C:\WINDOWS\system32\dllcache\usbscan.sys
+ 2008-04-13 23:15:38 26,112 -c--a-w C:\WINDOWS\system32\dllcache\usbser.sys
+ 2008-04-13 21:15:40 26,368 -c--a-w C:\WINDOWS\system32\dllcache\usbstor.sys
+ 2008-04-13 21:15:36 20,608 -c--a-w C:\WINDOWS\system32\dllcache\usbuhci.sys
+ 2008-04-14 22:32:46 76,288 -c--a-w C:\WINDOWS\system32\dllcache\usbui.dll
+ 2008-04-14 00:16:22 121,984 -c--a-w C:\WINDOWS\system32\dllcache\usbvideo.sys
+ 2001-08-17 20:28:16 793,598 -c--a-w C:\WINDOWS\system32\dllcache\usr1806.sys
+ 2001-08-17 20:28:18 794,399 -c--a-w C:\WINDOWS\system32\dllcache\usr1806v.sys
+ 2001-08-17 20:28:24 224,802 -c--a-w C:\WINDOWS\system32\dllcache\usr1807a.sys
+ 2001-09-07 13:00:00 61,500 -c--a-w C:\WINDOWS\system32\dllcache\usrcntra.dll
+ 2001-09-07 13:00:00 69,699 -c--a-w C:\WINDOWS\system32\dllcache\usrcoina.dll
+ 2001-09-07 13:00:00 77,890 -c--a-w C:\WINDOWS\system32\dllcache\usrdpa.dll
+ 2001-09-07 13:00:00 323,641 -c--a-w C:\WINDOWS\system32\dllcache\usrdtea.dll
+ 2001-09-07 13:00:00 86,073 -c--a-w C:\WINDOWS\system32\dllcache\usrfaxa.dll
+ 2001-09-07 13:00:00 53,305 -c--a-w C:\WINDOWS\system32\dllcache\usrlbva.dll
+ 2001-09-07 13:00:00 77,891 -c--a-w C:\WINDOWS\system32\dllcache\usrmlnka.exe
+ 2001-08-17 20:28:24 7,556 -c--a-w C:\WINDOWS\system32\dllcache\usroslba.sys
+ 2001-08-17 20:28:26 113,762 -c--a-w C:\WINDOWS\system32\dllcache\usrpda.sys
+ 2001-09-07 13:00:00 61,508 -c--a-w C:\WINDOWS\system32\dllcache\usrprbda.exe
+ 2001-09-07 13:00:00 77,883 -c--a-w C:\WINDOWS\system32\dllcache\usrrtosa.dll
+ 2001-09-07 13:00:00 49,211 -c--a-w C:\WINDOWS\system32\dllcache\usrsdpia.dll
+ 2001-09-07 13:00:00 69,700 -c--a-w C:\WINDOWS\system32\dllcache\usrshuta.exe
+ 2001-09-07 13:00:00 41,019 -c--a-w C:\WINDOWS\system32\dllcache\usrsvpia.dll
+ 2001-08-17 20:28:14 765,884 -c--a-w C:\WINDOWS\system32\dllcache\usrti.sys
+ 2001-09-07 13:00:00 102,457 -c--a-w C:\WINDOWS\system32\dllcache\usrv42a.dll
+ 2001-09-07 13:00:00 49,209 -c--a-w C:\WINDOWS\system32\dllcache\usrv80a.dll
+ 2001-09-07 13:00:00 45,116 -c--a-w C:\WINDOWS\system32\dllcache\usrvoica.dll
+ 2001-09-07 13:00:00 49,211 -c--a-w C:\WINDOWS\system32\dllcache\usrvpa.dll
+ 2001-08-17 20:28:26 687,999 -c--a-w C:\WINDOWS\system32\dllcache\usrwdxjs.sys
+ 2008-04-14 21:32:46 11,325 -c--a-w C:\WINDOWS\system32\dllcache\vchnt5.dll
+ 2001-09-07 13:00:00 58,112 -c--a-w C:\WINDOWS\system32\dllcache\vdmindvd.sys
+ 2008-04-14 22:32:46 54,272 -c--a-w C:\WINDOWS\system32\dllcache\vfwwdm32.dll
+ 2008-04-13 23:06:42 42,240 -c--a-w C:\WINDOWS\system32\dllcache\viaagp.sys
+ 2008-04-13 23:10:32 5,376 -c--a-w C:\WINDOWS\system32\dllcache\viaide.sys
+ 2001-08-17 20:49:04 24,576 -c--a-w C:\WINDOWS\system32\dllcache\viairda.sys
+ 2001-08-17 19:14:12 249,402 -c--a-w C:\WINDOWS\system32\dllcache\vinwm.sys
+ 2001-08-17 20:28:14 604,253 -c--a-w C:\WINDOWS\system32\dllcache\vmodem.sys
+ 2001-08-17 20:28:16 397,502 -c--a-w C:\WINDOWS\system32\dllcache\vpctcom.sys
+ 2001-08-17 20:28:16 64,605 -c--a-w C:\WINDOWS\system32\dllcache\vvoice.sys
- 2001-09-07 13:00:00 48,256 -c--a-w C:\windows\system32\dllcache\w32.dll
+ 2001-09-07 11:00:00 48,256 -c--a-w C:\WINDOWS\system32\dllcache\w32.dll
- 2001-09-07 13:00:00 4,608 -c--a-w C:\windows\system32\dllcache\w3ctrs51.dll
+ 2001-09-07 11:00:00 4,608 -c--a-w C:\WINDOWS\system32\dllcache\w3ctrs51.dll
- 2001-09-07 13:00:00 73,728 -c--a-w C:\windows\system32\dllcache\w3ext.dll
+ 2001-09-07 11:00:00 73,728 -c--a-w C:\WINDOWS\system32\dllcache\w3ext.dll
- 2001-09-07 13:00:00 5,632 -c--a-w C:\windows\system32\dllcache\w3svapi.dll
+ 2001-09-07 11:00:00 5,632 -c--a-w C:\WINDOWS\system32\dllcache\w3svapi.dll
+ 2001-08-17 19:13:08 19,528 -c--a-w C:\WINDOWS\system32\dllcache\w840nd.sys
+ 2001-08-17 19:13:08 19,016 -c--a-w C:\WINDOWS\system32\dllcache\w926nd.sys
+ 2001-08-17 19:13:12 16,925 -c--a-w C:\WINDOWS\system32\dllcache\w940nd.sys
+ 2008-04-13 23:13:56 14,208 -c--a-w C:\WINDOWS\system32\dllcache\wacompen.sys
+ 2008-04-13 21:04:28 12,415 -c--a-w C:\WINDOWS\system32\dllcache\wadv01nt.sys
+ 2008-04-13 21:04:28 12,127 -c--a-w C:\WINDOWS\system32\dllcache\wadv02nt.sys
+ 2008-04-13 21:04:28 11,775 -c--a-w C:\WINDOWS\system32\dllcache\wadv05nt.sys
+ 2008-04-13 21:04:28 11,807 -c--a-w C:\WINDOWS\system32\dllcache\wadv07nt.sys
+ 2008-04-13 21:04:28 11,295 -c--a-w C:\WINDOWS\system32\dllcache\wadv08nt.sys
+ 2008-04-13 21:04:28 11,871 -c--a-w C:\WINDOWS\system32\dllcache\wadv09nt.sys
+ 2008-04-13 21:04:30 11,935 -c--a-w C:\WINDOWS\system32\dllcache\wadv11nt.sys
- 2001-09-07 13:00:00 9,216 -c--a-w C:\windows\system32\dllcache\wamps51.dll
+ 2001-09-07 11:00:00 9,216 -c--a-w C:\WINDOWS\system32\dllcache\wamps51.dll
- 2001-09-07 13:00:00 7,168 -c--a-w C:\windows\system32\dllcache\wamregps.dll
+ 2001-09-07 11:00:00 7,168 -c--a-w C:\WINDOWS\system32\dllcache\wamregps.dll
+ 2008-04-13 21:04:30 29,311 -c--a-w C:\WINDOWS\system32\dllcache\watv01nt.sys
+ 2008-04-13 21:04:30 19,551 -c--a-w C:\WINDOWS\system32\dllcache\watv02nt.sys
+ 2008-04-13 21:04:30 33,599 -c--a-w C:\WINDOWS\system32\dllcache\watv04nt.sys
+ 2008-04-13 21:04:30 22,271 -c--a-w C:\WINDOWS\system32\dllcache\watv06nt.sys
+ 2008-04-13 21:04:30 25,471 -c--a-w C:\WINDOWS\system32\dllcache\watv10nt.sys
+ 2001-08-17 19:10:30 35,871 -c--a-w C:\WINDOWS\system32\dllcache\wbfirdma.sys
+ 2008-04-14 21:04:30 32,000 -c--a-w C:\WINDOWS\system32\dllcache\wceusbsh.sys
+ 2008-04-13 21:04:30 23,615 -c--a-w C:\WINDOWS\system32\dllcache\wch7xxnt.sys
+ 2001-08-17 20:28:02 701,386 -c--a-w C:\WINDOWS\system32\dllcache\wdhaalba.sys
- 2001-09-07 13:00:00 41,600 -c--a-w C:\windows\system32\dllcache\weitekp9.dll
+ 2001-09-07 11:00:00 41,600 -c--a-w C:\WINDOWS\system32\dllcache\weitekp9.dll
- 2001-09-07 13:00:00 31,488 -c--a-w C:\windows\system32\dllcache\weitekp9.sys
+ 2001-09-07 11:00:00 31,488 -c--a-w C:\WINDOWS\system32\dllcache\weitekp9.sys
+ 2001-09-06 20:27:06 87,040 -c--a-w C:\WINDOWS\system32\dllcache\wiafbdrv.dll
+ 2001-09-06 20:27:06 54,272 -c--a-w C:\WINDOWS\system32\dllcache\wiamsmud.dll
- 2008-09-15 15:28:42 1,846,528 -c--a-w C:\windows\system32\dllcache\win32k.sys
+ 2009-02-09 14:08:47 1,846,912 -c--a-w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2001-08-17 20:28:14 771,581 -c--a-w C:\WINDOWS\system32\dllcache\winacisa.sys
+ 2001-09-06 18:08:20 34,890 -c--a-w C:\WINDOWS\system32\dllcache\wlandrv2.sys
+ 2008-04-13 21:05:36 154,624 -c--a-w C:\WINDOWS\system32\dllcache\wlluc48.sys
+ 2008-04-14 00:06:40 8,832 -c--a-w C:\WINDOWS\system32\dllcache\wmiacpi.sys
- 2007-06-11 22:51:12 10,834,944 -c--a-w C:\windows\system32\dllcache\wmp.dll
+ 2008-11-11 17:34:42 10,838,016 -c--a-w C:\WINDOWS\system32\dllcache\wmp.dll
+ 2001-09-07 13:00:00 3,200 -c--a-w C:\WINDOWS\system32\dllcache\wowfax.dll
+ 2001-09-07 13:00:00 14,336 -c--a-w C:\WINDOWS\system32\dllcache\wowfaxui.dll
+ 2008-04-14 19:32:46 108,032 -c--a-w C:\WINDOWS\system32\dllcache\wshbth.dll
+ 2008-04-14 21:32:46 8,192 -c--a-w C:\WINDOWS\system32\dllcache\wshirda.dll
+ 2008-04-13 21:04:32 12,063 -c--a-w C:\WINDOWS\system32\dllcache\wsiintxx.sys
+ 2008-04-14 00:16:26 19,200 -c--a-w C:\WINDOWS\system32\dllcache\wstcodec.sys
+ 2008-04-13 21:04:34 19,455 -c--a-w C:\WINDOWS\system32\dllcache\wvchntxx.sys
+ 2008-04-14 19:46:08 52,736 -c--a-w C:\WINDOWS\system32\dllcache\wzcsapi.dll
+ 2008-04-14 19:46:08 483,840 -c--a-w C:\WINDOWS\system32\dllcache\wzcsvc.dll
+ 2001-08-17 19:11:14 16,970 -c--a-w C:\WINDOWS\system32\dllcache\xem336n5.sys
+ 2001-09-06 20:27:30 99,865 -c--a-w C:\WINDOWS\system32\dllcache\xlog.exe
+ 2001-09-06 20:27:30 4,608 -c--a-w C:\WINDOWS\system32\dllcache\xrxflnch.exe
+ 2001-09-06 20:27:30 27,648 -c--a-w C:\WINDOWS\system32\dllcache\xrxftplt.exe
+ 2008-04-14 21:32:48 18,944 -c--a-w C:\WINDOWS\system32\dllcache\xrxscnui.dll
+ 2001-09-06 20:27:06 23,040 -c--a-w C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
+ 2008-04-14 21:32:48 116,736 -c--a-w C:\WINDOWS\system32\dllcache\xrxwiadr.dll
- 2009-03-06 21:15:36 133,280 ----a-w C:\windows\system32\FNTCACHE.DAT
+ 2009-03-14 12:41:46 133,280 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2009-03-07 16:20:35 71,584 ----a-w C:\windows\system32\perfc009.dat
+ 2009-03-14 16:18:32 71,584 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2009-03-07 16:20:35 91,494 ----a-w C:\windows\system32\perfc013.dat
+ 2009-03-14 16:18:32 91,494 ----a-w C:\WINDOWS\system32\perfc013.dat
- 2009-03-07 16:20:35 441,518 ----a-w C:\windows\system32\perfh009.dat
+ 2009-03-14 16:18:32 441,518 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2009-03-07 16:20:35 509,666 ----a-w C:\windows\system32\perfh013.dat
+ 2009-03-14 16:18:32 509,666 ----a-w C:\WINDOWS\system32\perfh013.dat
- 2008-04-14 19:32:40 144,384 ----a-w C:\windows\system32\schannel.dll
+ 2008-12-05 06:58:53 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
- 2005-06-28 09:21:34 22,752 ----a-w C:\windows\system32\spupdsvc.exe
+ 2007-07-27 08:41:38 26,488 ----a-w C:\WINDOWS\system32\spupdsvc.exe
- 2007-06-11 22:51:12 10,834,944 ----a-w C:\windows\system32\wmp.dll
+ 2008-11-11 17:34:42 10,838,016 ----a-w C:\WINDOWS\system32\wmp.dll
+ 2009-03-14 16:14:28 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_6b8.dat
+ 2009-03-14 16:14:17 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_7d0.dat
.
-- Snapshot teruggezet naar huidige datum --
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 20:32 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-07-11 04:08 13537280]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2008-07-11 04:08 86016]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2008-03-04 14:46 999424]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2008-03-04 14:41 1101824]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-03-05 14:32 148888]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2004-06-30 16:56 2376928]
"SkyTel"="SkyTel.EXE" [2007-11-20 17:15 1826816 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-03 15:51 16876032 C:\WINDOWS\RTHDCPL.EXE]
"SoundMan"="SOUNDMAN.EXE" [2008-06-18 17:01 77824 C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2008-06-19 15:42 2808832 C:\WINDOWS\ALCWZRD.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 20:32 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R0 Si3531;SiI-3531 SATA Controller;C:\WINDOWS\system32\drivers\Si3531.sys [2009-02-26 23:48:09 210736]
R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2009-03-05 19:35:12 114768]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [2009-03-05 19:35:12 20560]
.
Inhoud van de 'Gedeelde Taken' map

2009-03-14 C:\WINDOWS\Tasks\User_Feed_Synchronization-{6378CFE3-FC2B-43E8-ADA8-8B0D128D74D4}.job
- C:\WINDOWS\system32\msfeedssync.exe [2008-05-05 20:32]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://www.google.nl/
IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.

En hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:31, on 2009-03-14
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Customize Your Settings
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD7/JS...2/&filename=jinstall-6u12-windows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

--
End of file - 5943 bytes


Ik ben benieuwd !

enkel deze regels vall nu op:
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

maar 2 ervan is enkel runonce (dus na reboot zijn die weg) en de 3de is voor de default gebruiker dus verdwijnt ook dan.

ik vermoed dat die regels van combofix zijn ...
Juisterr zal die wel mss wel kennen ...

maar het begin probleem is dus weg (die map die telkens naar voor kwam ...)
verder is de log wel goed
virusscanner zeker updaten en de pc eens volledig scannen om te zien of effectief alles weg is

edit:
zal deze maar terug op hijackthis plaatsen omdat het nog enkel over de logs gaat en het hoofdprobleem weg is.

Hallo,

heb malwarebyts, avast en ad-aware gedaraait en niks gevonden alles draait nu zoals het hoort!

Jongens heel erg bedankt voor jullie tijd en hulp!!!

Fijn weekend verder!

Je mag alle gebruikte tools en aangemaakte mappen terug verwijderen.

Verwijder ComboFix via Start > Uitvoeren, kopiëer en plak Combofix /U
Klik op OK of toets Enter.
Dit verwijdert zowel ComboFix, als je oude systeemherstelpunten (met eventuele restanten van malware), en maakt een nieuw systeemherstelpunt aan.

Done, Thanx !!!