|
Plagegeister aller Art und deren Bekämpfung: AVA Soft-VirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
04.04.2013, 20:13 | #1 |
| AVA Soft-Virus Hallo Experten-Team, einer unserer Rechner ist von dem AVA-Soft Virus befallen. Betriebssystem ist Windows XP home. Ich wollte eben schon die ersten log-files mit eine Programm wie Malwarebytes (habe ich in einem aktuelle Thread gelesen) erzeugen und hier gleich posten, allerdings bekomme ich keines der angeführten Programme zum Laufen. Sämtliche Programmaufrufe werden mit "Programm xx durch einen Virus befallen" kommentiert und geschlossen. Ich hoffe Ihr könnt mir helfen! Vielen Dank im Voraus! Tobi |
04.04.2013, 20:30 | #2 |
/// Malwareteam | AVA Soft-Virus Hallo und
__________________Ich bin Christoph alias DerJazzer. Ich werde dich durch die Bereinigung begleiten und bin währenddessen dein Ansprechpartner für dieses Thema. Je nach Art der vorliegenden Infektion kann viel Arbeit und ein großer Zeiteinsatz auf dich (und auf mich) zukommen. Ein Neuaufsetzen ist damit meist als der schnellere, aber immer als der sicherere Weg zu betrachten. Für den Erfolg der Bereinigung gilt: Ich kann dir zu keinem Zeitpunkt garantieren, dass der PC nach der Bereinigung auch wirklich frei von Malware ist! Wenn du das akzeptierst, bitte ich dich, hier so lange mitzuarbeiten, bis ich dir sage, dass der PC aus meiner Sicht malwarefrei ist. Um die Bereinigung so effektiv und nervenschonend wie möglich zu gestalten, bitte ich dich, folgende Punkte ebenfalls zu beachten:
Um mir das Auswerten deiner Logs (Berichte der verwendeten Programme) zu erleichtern, bitte ich dich, diese zwischen Code-Tags zu posten. Dazu drückst du einfach den #-Button im Antwortfenster und fügst dort zwischen den eckigen Klammern dein Log ein. Das sieht dann so aus: [CODE] eingefügtes Log [/CODE] Vista und Win7 User Alle Tools mit Rechtsklick "als Administrator ausführen" starten. Schritt 1 Downloade Dir bitte rKill ( by Grinler ) von einem dieser Downloadspiegel.Dies sind umbenannte Kopienund speichere die Datei auf dem Desktop.
Jetzt solltest du wieder Programme öffnen können, ohne dass die Meldung erscheint. Ist dies der Fall, überspringe bitte den nächsten Schritt un fahre mit Schritt 3 fort. Ist dies nicht der Fall, führe bitte erst Schritt 2 aus, und versuche dann, Schritt 3 auszuführen. Schritt 2 Drucke dir die Anleitung gegebenfalls aus Downloade Dir bitte OTH ( by Oldtimer ) und speichere die Datei auf dem Desktop. Firefox User: Mit Rechtsklick auf OTH und "speichern als" downloaden.
Schritt 3 Downloade dir bitte Rogue Killer von hier.
(Wenn du Schritt 2 überspringen konntest, kannst du RogueKiller natürlich normal per Doppelklick starten) Bitte poste in deiner nächsten Antwort
__________________ |
04.04.2013, 21:48 | #3 |
| AVA Soft-Virus Hallo Christoph,
__________________vielen Dank zuerst für die schnelle Antwort! Ich hoffe ich habe jtzt keinen Fehler gemacht, aber ich habe die Programmschritte im abgesicherten Modus durchgeführt? Habe zuerst versucht die rkill im normalen Modus zu starten und keine der Dateien zum Laufen bekommen. Hier die erhaltenen logs: rkill: Code:
ATTFilter Rkill 2.4.7 by Lawrence Abrams (Grinler) hxxp://www.bleepingcomputer.com/ Copyright 2008-2013 BleepingComputer.com More Information about Rkill can be found at this link: hxxp://www.bleepingcomputer.com/forums/topic308364.html Program started at: 04/04/2013 10:12:30 PM in x86 mode. Windows Version: Microsoft Windows XP Service Pack 3 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * No malware processes found to kill. Possibly Patched Files. * C:\WINDOWS\system32\services.exe * C:\WINDOWS\system32\lsass.exe * C:\WINDOWS\system32\svchost.exe * C:\WINDOWS\system32\svchost.exe * C:\WINDOWS\system32\svchost.exe Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * No issues found. Checking Windows Service Integrity: * AFD (AFD) is not Running. Startup Type set to: System * DHCP-Client (Dhcp) is not Running. Startup Type set to: Automatic * DNS-Client (Dnscache) is not Running. Startup Type set to: Automatic * COM+-Ereignissystem (EventSystem) is not Running. Startup Type set to: Manual * Netzwerkverbindungen (Netman) is not Running. Startup Type set to: Manual * Sicherheitscenter (wscsvc) is not Running. Startup Type set to: Automatic * Automatische Updates (wuauserv) is not Running. Startup Type set to: Automatic * AFD (AFD) is not Running. Startup Type set to: System * IPSEC-Treiber (IPSec) is not Running. Startup Type set to: System * NetBios über TCP/IP (NetBT) is not Running. Startup Type set to: System * TCP/IP-Protokolltreiber (Tcpip) is not Running. Startup Type set to: System Searching for Missing Digital Signatures: * C:\WINDOWS\System32\browser.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2705219\SP3QFE\browser.dll : 78.336 : 07/06/2012 03:58 PM : b2cc8d85d27bf10c5faf5b98c335978e [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\browser.dll : 77.312 : 08/04/2004 02:00 PM : d8653dcd80cf2ebb333fc4fcc43a7def [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2705219$\browser.dll : 77.824 : 04/14/2008 02:22 AM : b42057f06bbb98b31876c0b3f2b54e33 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\browser.dll : 77.824 : 04/14/2008 00:22 AM : b42057f06bbb98b31876c0b3f2b54e33 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\browser.dll : 78.336 : 07/06/2012 03:59 PM : b71549f23736adf83a571061c47777fd [Pos Repl] * C:\WINDOWS\System32\clipsrv.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe : 33.280 : 08/04/2004 02:00 PM : 0461868578d29dc18fb1c79933c5158a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\clipsrv.exe : 33.280 : 04/14/2008 03:22 AM : 778a30ed3c134eb7e406afc407e9997d [Pos Repl] * C:\WINDOWS\System32\comctl32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll : 611.328 : 08/04/2004 02:00 PM : 2cf914215226b3f7fa1ae4a47e4d261c [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2296011$\comctl32.dll : 617.472 : 04/14/2008 02:22 AM : ad28671d1b83a386b070dc451a113c13 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\comctl32.dll : 617.472 : 04/14/2008 03:22 AM : ad28671d1b83a386b070dc451a113c13 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\comctl32.dll : 617.472 : 08/23/2010 06:11 PM : 1438703f3d9ffe111da3869e4f3eee73 [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll : 921.088 : 08/04/2004 02:00 PM : aef3d788dbf40c7c4d204ea45eb0c505 [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll : 1.050.624 : 08/04/2004 02:00 PM : 9d0f57b9c65bf8a07db655a9ed6eb2ee [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll : 1.054.208 : 04/14/2008 02:20 AM : 3c93ce6c6985c55952b7be6673e9fd15 [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll : 1.054.208 : 08/23/2010 06:11 PM : 2b6ade29f8d00eefa5fa2250cbe094ad [Pos Repl] * C:\WINDOWS\System32\comres.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\comres.dll : 846.848 : 08/04/2004 02:00 PM : 4b9d9e2708019763c5a72da776db1158 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\comres.dll : 846.848 : 04/14/2008 06:22 AM : d0de8a2ec95184e5193bb4b3112e29df [Pos Repl] * C:\WINDOWS\System32\cryptsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll : 60.416 : 08/04/2004 02:00 PM : 1a5f9db98df7955b4c7cbdbf2c638238 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll : 62.464 : 04/14/2008 06:22 AM : 611f824e5c703a5a899f84c5f1699e4d [Pos Repl] * C:\WINDOWS\System32\csrss.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\csrss.exe : 6.144 : 08/04/2004 02:00 PM : 219581faf8244984032fdb4f673dc1d5 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\csrss.exe : 6.144 : 04/14/2008 06:22 AM : 9b22aae3566aefee33ce498dbe0d2fd2 [Pos Repl] * C:\WINDOWS\System32\ctfmon.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe : 15.360 : 08/04/2004 02:00 PM : 7ce20569925df6789c31799f0c538f29 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe : 15.360 : 04/14/2008 06:22 AM : 01b4e6e990b6c5ea8856d96c7fd044b2 [Pos Repl] * C:\WINDOWS\System32\d3d8.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll : 1.179.648 : 08/04/2004 02:00 PM : 42f4d97898d8a4889f012f91cc8230b9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\d3d8.dll : 1.179.648 : 04/14/2008 06:22 AM : c889c89eecb2f8ac8916389c0da7aee7 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\d3d8.dll : 1.179.648 : 04/14/2008 06:22 AM : c889c89eecb2f8ac8916389c0da7aee7 [Pos Repl] * C:\WINDOWS\System32\d3d8thk.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll : 8.192 : 08/04/2004 02:00 PM : d0137850930f2fef9bd6a4236674d97e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\d3d8thk.dll : 8.192 : 04/14/2008 06:22 AM : e82a231ab45bb6c73b19aa4247ac931c [Pos Repl] +-> C:\WINDOWS\system32\dllcache\d3d8thk.dll : 8.192 : 04/14/2008 06:22 AM : e82a231ab45bb6c73b19aa4247ac931c [Pos Repl] * C:\WINDOWS\System32\d3d9.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll : 1.689.088 : 08/04/2004 02:00 PM : 20ae7889467887b869f30308eeed9a2a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\d3d9.dll : 1.689.088 : 04/14/2008 06:22 AM : 36969cf86e51ec8ed202b40f2fa80aa6 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\d3d9.dll : 1.689.088 : 04/14/2008 06:22 AM : 36969cf86e51ec8ed202b40f2fa80aa6 [Pos Repl] * C:\WINDOWS\System32\ddraw.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll : 266.240 : 08/04/2004 02:00 PM : cac545a56482de01640e6b791de19944 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ddraw.dll : 279.552 : 04/14/2008 06:22 AM : 4a37188b83b00dd9cfba049687ad0daf [Pos Repl] * C:\WINDOWS\System32\dllhost.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe : 5.120 : 08/04/2004 02:00 PM : bed2c7627ab78ca721efb8b49efb13ee [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dllhost.exe : 5.120 : 04/14/2008 06:22 AM : 8ff0d9c41d3f1f3394fa96177e88488c [Pos Repl] * C:\WINDOWS\System32\drivers\acpiec.sys [NoSig] * C:\WINDOWS\System32\drivers\acpi.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\acpi.sys : 188.800 : 08/04/2004 02:00 PM : 94b4741d2cf9ed38140b831293d1601a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\acpi.sys : 188.800 : 04/14/2008 06:49 AM : ac407f1a62c3a300b4f2b5a9f1d55b2c [Pos Repl] * C:\WINDOWS\System32\drivers\aec.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\aec.sys : 142.464 : 08/03/2004 10:39 PM : 841f385c6cfaf66b58fbd898722bb4f0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\aec.sys : 142.592 : 04/13/2008 06:39 PM : 8bed39e3c35d6a489438b8141717a557 [Pos Repl] * C:\WINDOWS\System32\drivers\afd.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2503665\SP3QFE\afd.sys : 138.496 : 02/16/2011 02:25 PM : 8d499b1276012eb907e7a9e0f4d8fda4 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\afd.sys : 138.496 : 10/16/2008 05:07 PM : 38d7b715504da4741df35e3594fe2099 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2592799\SP3QFE\afd.sys : 138.496 : 08/17/2011 03:41 PM : f6b7b1ecd7b41736bdb6ff4b092bcb79 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys : 138.496 : 06/20/2008 01:48 PM : d6ee6014241d034e63c49a50cb2b442a [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956803\SP3QFE\afd.sys : 138.496 : 08/14/2008 01:34 AM : 4d43e74f2a1239d53929b82600f1971c [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\afd.sys : 138.496 : 08/04/2004 02:00 PM : 5ac495f4cb807b2b98ad2ad591e6d92e [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2503665$\afd.sys : 138.496 : 10/16/2008 04:43 PM : 7618d5218f2a614672ec61a80d854a37 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2509553$\afd.sys : 138.496 : 08/14/2008 04:04 AM : 7e775010ef291da96ad17ca4b17137d7 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2592799$\afd.sys : 138.496 : 02/16/2011 02:22 PM : 355556d9e580915118cd7ef736653a89 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB951748$\afd.sys : 138.112 : 04/13/2008 09:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956803$\afd.sys : 138.496 : 06/20/2008 01:40 PM : e3049b90fe06f3f740b7cfda44995e2c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\afd.sys : 138.112 : 04/13/2008 09:19 PM : 322d0e36693d6e24a2398bee62a268cd [Pos Repl] +-> C:\WINDOWS\system32\dllcache\afd.sys : 138.496 : 08/17/2011 03:49 PM : 1e44bc1e83d8fd2305f8d452db109cf9 [Pos Repl] * C:\WINDOWS\System32\drivers\agp440.sys [NoSig] +-> C:\WINDOWS\ServicePackFiles\i386\agp440.sys : 42.368 : 04/13/2008 08:36 PM : 08fd04aa961bdc77fb983f328334e3d7 [Pos Repl] * C:\WINDOWS\System32\drivers\amdk6.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys : 41.088 : 08/04/2004 02:00 PM : 3c44a7236554a99559d3b549b418bfb9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\amdk6.sys : 41.472 : 04/14/2008 08:50 AM : df2170cc69170e9eef7ae5d2a9ddb16f [Pos Repl] * C:\WINDOWS\System32\drivers\amdk7.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys : 41.472 : 08/04/2004 02:00 PM : fbf9ffb0b638df1448821bd0aceeb780 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\amdk7.sys : 41.856 : 04/14/2008 08:50 AM : 3a0dafac778236559c14c7203fb550eb [Pos Repl] * C:\WINDOWS\System32\drivers\arp1394.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys : 60.800 : 08/04/2004 02:00 PM : f0d692b0bffb46e30eb3cea168bbc49f [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\arp1394.sys : 60.800 : 04/13/2008 08:51 PM : b5b8a80875c1dededa8b02765642c32f [Pos Repl] * C:\WINDOWS\System32\drivers\asyncmac.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys : 14.336 : 08/04/2004 02:00 PM : 02000abf34af4c218c35d257024807d6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys : 14.336 : 04/13/2008 08:57 PM : b153affac761e7f5fcfa822b9c4e97bc [Pos Repl] * C:\WINDOWS\System32\drivers\atapi.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\atapi.sys : 95.360 : 08/04/2004 02:00 PM : cdfe4411a69c224bd1d11b2da92dac51 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\atapi.sys : 96.512 : 04/13/2008 08:40 PM : 9f3a2f5aa6875c72bf062c712cfa2674 [Pos Repl] * C:\WINDOWS\System32\drivers\audstub.sys [NoSig] * C:\WINDOWS\System32\drivers\battc.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\battc.sys : 16.256 : 08/18/2001 02:20 AM : ce0970dd8aaa047e9d7e81722dbfc61c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\battc.sys : 16.384 : 04/14/2008 08:52 AM : e65313b7d5bdfe7ad436cbb8ce9217a6 [Pos Repl] * C:\WINDOWS\System32\drivers\beep.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\beep.sys : 4.224 : 08/04/2004 02:00 PM : da1f27d85e0d1525f6621372e7b685e9 [Pos Repl] * C:\WINDOWS\System32\drivers\bridge.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\bridge.sys : 71.552 : 08/04/2004 02:00 PM : e4e6a0922e3d983728c9ad4e8d466954 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\bridge.sys : 71.552 : 04/13/2008 08:53 PM : f934d1b230f84e1d19dd00ac5a7a83ed [Pos Repl] * C:\WINDOWS\System32\drivers\bthport.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys : 273.024 : 06/14/2008 07:37 PM : f55bfd05892c321fb7470d334d6b44e1 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys : 273.920 : 04/14/2008 02:52 AM : 27d6108cfeba7ef5aa976fc66ec77bbd [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\bthport.sys : 273.024 : 06/14/2008 07:32 PM : 592e1cedbe314d0ef184dc6f46141e76 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\bthport.sys : 273.920 : 04/14/2008 07:52 AM : 27d6108cfeba7ef5aa976fc66ec77bbd [Pos Repl] +-> C:\WINDOWS\system32\dllcache\bthport.sys : 273.024 : 06/14/2008 07:32 PM : 592e1cedbe314d0ef184dc6f46141e76 [Pos Repl] * C:\WINDOWS\System32\drivers\cbidf2k.sys [NoSig] * C:\WINDOWS\System32\drivers\cdaudio.sys [NoSig] * C:\WINDOWS\System32\drivers\cdfs.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys : 63.744 : 08/04/2004 02:00 PM : cd7d5152df32b47f4e36f710b35aae02 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\cdfs.sys : 63.744 : 04/13/2008 09:14 PM : c885b02847f5d2fd45a24e219ed93b32 [Pos Repl] * C:\WINDOWS\System32\drivers\cdrom.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys : 49.536 : 08/04/2004 02:00 PM : af9c19b3100fe010496b1a27181fbf72 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\cdrom.sys : 62.976 : 04/13/2008 08:40 PM : 1f4260cc5b42272d71f79e570a27a4fe [Pos Repl] * C:\WINDOWS\System32\drivers\classpnp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys : 49.664 : 08/04/2004 02:00 PM : d86173b401470f06d9810f7962969ddf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\classpnp.sys : 49.536 : 04/13/2008 09:16 PM : fe47dd8fe6d7768ff94ebec6c74b2719 [Pos Repl] * C:\WINDOWS\System32\drivers\CmBatt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\cmbatt.sys : 14.080 : 08/04/2004 02:07 AM : 4266be808f85826aedf3c64c1e240203 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\cmbatt.sys : 13.952 : 04/13/2008 08:36 PM : 0f6c187d38d98f8df904589a5f94d411 [Pos Repl] * C:\WINDOWS\System32\drivers\compbatt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\compbatt.sys : 9.344 : 08/17/2001 02:58 PM : df1b1a24bf52d0ebc01ed4ece8979f50 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\compbatt.sys : 10.240 : 04/13/2008 08:36 PM : 6e4c9f21f0fae8940661144f41b13203 [Pos Repl] * C:\WINDOWS\System32\drivers\cpqdap01.sys [NoSig] * C:\WINDOWS\System32\drivers\crusoe.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys : 40.576 : 08/04/2004 02:00 PM : 92611997d1973da8d3e4e932400d4569 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\crusoe.sys : 40.832 : 04/14/2008 08:56 AM : bc50ce012b2d0498ca1e4adda6870fb5 [Pos Repl] * C:\WINDOWS\System32\drivers\diskdump.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys : 14.208 : 08/04/2004 02:00 PM : d16c81677a9be399c63cd2ea486472a5 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\diskdump.sys : 14.208 : 04/13/2008 08:40 PM : e65e2353a5d74ea89971cb918eeeb2f6 [Pos Repl] * C:\WINDOWS\System32\drivers\disk.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\disk.sys : 36.352 : 08/04/2004 02:00 PM : 00ca44e4534865f8a3b64f7c0984bff0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\disk.sys : 36.352 : 04/13/2008 08:40 PM : 044452051f3e02e7963599fc8f4f3e25 [Pos Repl] * C:\WINDOWS\System32\drivers\dmboot.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys : 800.384 : 08/04/2004 02:00 PM : 5789b83ba87fc84c3568cf86cacef8ce [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dmboot.sys : 800.384 : 04/14/2008 08:58 AM : 0dcfc8395a99fecbb1ef771cec7fe4ea [Pos Repl] * C:\WINDOWS\System32\drivers\dmio.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dmio.sys : 154.112 : 08/04/2004 02:00 PM : 084eb0a50a4f7b4705c8a57f234e5291 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dmio.sys : 154.112 : 04/14/2008 08:58 AM : 53720ab12b48719d00e327da470a619a [Pos Repl] * C:\WINDOWS\System32\drivers\dmload.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\dmload.sys : 5.888 : 08/04/2004 02:00 PM : e9317282a63ca4d188c0df5e09c6ac5f [Pos Repl] * C:\WINDOWS\System32\drivers\DMusic.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys : 52.864 : 08/03/2004 11:07 PM : a6f881284ac1150e37d9ae47ff601267 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dmusic.sys : 52.864 : 04/13/2008 08:45 PM : 8a208dfcf89792a484e76c40e5f50b45 [Pos Repl] * C:\WINDOWS\System32\drivers\drmkaud.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys : 2.944 : 08/03/2004 11:07 PM : 1ed4dbbae9f5d558dbba4cc450e3eb2e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\drmkaud.sys : 2.944 : 04/13/2008 08:45 PM : 8f5fcff8e8848afac920905fbd9d33c8 [Pos Repl] * C:\WINDOWS\System32\drivers\drmk.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\drmk.sys : 60.288 : 08/03/2004 11:08 PM : ff86422268de771d571e123eb7092c6a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\drmk.sys : 60.160 : 04/13/2008 08:45 PM : 6cb08593487f5701d2d2254e693eafce [Pos Repl] * C:\WINDOWS\System32\drivers\dxapi.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\dxapi.sys : 10.496 : 08/04/2004 02:00 PM : fe97d0343acfdebdd578fc67cc91fa87 [Pos Repl] * C:\WINDOWS\System32\drivers\dxg.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dxg.sys : 71.040 : 08/04/2004 02:00 PM : d3dac8432110aad0b02a58b4459ab835 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dxg.sys : 71.168 : 04/13/2008 08:38 PM : ac7280566a7bb85cb3291f04ddc1198e [Pos Repl] * C:\WINDOWS\System32\drivers\dxgthk.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\dxgthk.sys : 3.328 : 08/04/2004 02:00 PM : a73f5d6705b1d820c19b18782e176efd [Pos Repl] * C:\WINDOWS\System32\drivers\fastfat.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys : 143.360 : 08/04/2004 02:00 PM : 3117f595e9615e04f05a54fc15a03b20 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\fastfat.sys : 143.744 : 04/13/2008 09:14 PM : 38d332a6d56af32635675f132548343e [Pos Repl] * C:\WINDOWS\System32\drivers\fdc.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\fdc.sys : 27.392 : 08/04/2004 02:00 PM : ced2e8396a8838e59d8fd529c680e02c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\fdc.sys : 27.392 : 04/13/2008 08:40 PM : 92cdd60b6730b9f50f6a1a0c1f8cdc81 [Pos Repl] * C:\WINDOWS\System32\drivers\fips.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\fips.sys : 35.072 : 08/04/2004 02:00 PM : 9e9af89f9b14aa6249065c309ce73bd8 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\fips.sys : 44.672 : 04/14/2008 08:52 AM : b0678a548587c5f1967b0d70bacad6c1 [Pos Repl] * C:\WINDOWS\System32\drivers\flpydisk.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys : 20.480 : 08/04/2004 02:00 PM : 0dd1de43115b93f4d85e889d7a86f548 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\flpydisk.sys : 20.480 : 04/13/2008 08:40 PM : 9d27e7b80bfcdf1cdd9b555862d5e7f0 [Pos Repl] * C:\WINDOWS\System32\drivers\fltMgr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\fltmgr.sys : 124.800 : 08/04/2004 02:00 PM : 157754f0df355a9e0a6f54721914f9c6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\fltmgr.sys : 129.792 : 04/13/2008 08:32 PM : b2cf4b0786f8212cb92ed2b50c6db6b0 [Pos Repl] * C:\WINDOWS\System32\drivers\fs_rec.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\fs_rec.sys : 7.936 : 08/04/2004 02:00 PM : 3e1e2bd4f39b0e2b7dc4f4d2bcc2779a [Pos Repl] * C:\WINDOWS\System32\drivers\fsvga.sys [NoSig] * C:\WINDOWS\System32\drivers\ftdisk.sys [NoSig] * C:\WINDOWS\System32\drivers\hidclass.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys : 36.224 : 08/04/2004 02:00 PM : 378055ab8dda86228683c697c4e11685 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\hidclass.sys : 36.864 : 04/13/2008 08:45 PM : 1af592532532a402ed7c060f6954004f [Pos Repl] +-> C:\WINDOWS\system32\dllcache\hidclass.sys : 36.864 : 04/13/2008 09:45 PM : 1af592532532a402ed7c060f6954004f [Pos Repl] * C:\WINDOWS\System32\drivers\hidparse.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys : 24.960 : 08/04/2004 02:00 PM : 5fff41cd5108e9051d255c37825af697 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\hidparse.sys : 24.960 : 04/13/2008 08:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl] +-> C:\WINDOWS\system32\dllcache\hidparse.sys : 24.960 : 04/13/2008 09:45 PM : 96eccf28fdbf1b2cc12725818a63628d [Pos Repl] * C:\WINDOWS\System32\drivers\hidusb.sys [NoSig] +-> C:\WINDOWS\ServicePackFiles\i386\hidusb.sys : 10.368 : 04/13/2008 08:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\hidusb.sys : 10.368 : 04/13/2008 09:45 PM : ccf82c5ec8a7326c3066de870c06daf1 [Pos Repl] * C:\WINDOWS\System32\drivers\http.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB970430\SP3QFE\http.sys : 265.728 : 10/20/2009 05:21 PM : 937031c085718c1c04a9c0864625ec6b [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\http.sys : 263.040 : 08/04/2004 02:00 PM : c19b522a9ae0bbc3293397f3055e80a1 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB970430$\http.sys : 264.832 : 04/13/2008 08:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\http.sys : 265.728 : 10/20/2009 06:20 PM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\http.sys : 264.832 : 04/13/2008 08:53 PM : f6aacf5bce2893e0c1754afeb672e5c9 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\http.sys : 265.728 : 10/20/2009 06:20 PM : f80a415ef82cd06ffaf0d971528ead38 [Pos Repl] * C:\WINDOWS\System32\drivers\i8042prt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys : 53.248 : 08/04/2004 02:00 PM : 7c575018d0413440d75432a78b88c899 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\i8042prt.sys : 52.992 : 04/14/2008 06:55 AM : e283b97cfbeb86c1d86baed5f7846a92 [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\i8042prt.sys : 53.248 : 08/04/2004 02:00 PM : 7c575018d0413440d75432a78b88c899 [Pos Repl] * C:\WINDOWS\System32\drivers\imapi.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\imapi.sys : 41.856 : 08/04/2004 02:00 PM : f8aa320c6a0409c0380e5d8a99d76ec6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\imapi.sys : 42.112 : 04/13/2008 08:40 PM : 083a052659f5310dd8b6a6cb05edcf8e [Pos Repl] * C:\WINDOWS\System32\drivers\intelide.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\intelide.sys : 5.504 : 08/04/2004 02:44 AM : d63c33f65f6ebc732116403d88883b2d [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\intelide.sys : 5.504 : 04/14/2008 08:57 AM : 69c4e3c9e67a1f103b94e14fdd5f3213 [Pos Repl] * C:\WINDOWS\System32\drivers\intelppm.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\intelppm.sys : 40.192 : 08/04/2004 02:00 PM : c1c2cc1da79c5ee10457ef0a3b8568c7 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\intelppm.sys : 40.448 : 04/14/2008 08:57 AM : 4c7d2750158ed6e7ad642d97bffae351 [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\intelppm.sys : 40.192 : 08/04/2004 02:00 PM : c1c2cc1da79c5ee10457ef0a3b8568c7 [Pos Repl] * C:\WINDOWS\System32\drivers\ip6fw.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ip6fw.sys : 29.056 : 08/04/2004 02:00 PM : 4448006b6bc60e6c027932cfc38d6855 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys : 36.608 : 04/13/2008 08:53 PM : 3bb22519a194418d5fec05d800a19ad0 [Pos Repl] * C:\WINDOWS\System32\drivers\ipfltdrv.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\ipfltdrv.sys : 32.896 : 08/04/2004 02:00 PM : 731f22ba402ee4b62748adaf6363c182 [Pos Repl] * C:\WINDOWS\System32\drivers\ipinip.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys : 20.992 : 08/04/2004 02:00 PM : e1ec7f5da720b640cd8fb8424f1b14bb [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ipinip.sys : 20.864 : 04/13/2008 08:57 PM : b87ab476dcf76e72010632b5550955f5 [Pos Repl] * C:\WINDOWS\System32\drivers\ipnat.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys : 134.912 : 08/04/2004 02:00 PM : b5a8e215ac29d24d60b4d1250ef05ace [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ipnat.sys : 152.832 : 04/13/2008 08:57 PM : cc748ea12c6effde940ee98098bf96bb [Pos Repl] * C:\WINDOWS\System32\drivers\ipsec.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys : 74.752 : 08/04/2004 02:00 PM : 64537aa5c003a6afeee1df819062d0d1 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ipsec.sys : 75.264 : 04/13/2008 09:19 PM : 23c74d75e36e7158768dd63d92789a91 [Pos Repl] * C:\WINDOWS\System32\drivers\irenum.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\irenum.sys : 11.264 : 08/04/2004 02:00 PM : 50708daa1b1cbb7d6ac1cf8f56a24410 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\irenum.sys : 11.264 : 04/13/2008 08:54 PM : c93c9ff7b04d772627a3646d89f7bf89 [Pos Repl] * C:\WINDOWS\System32\drivers\isapnp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys : 36.224 : 08/04/2004 02:00 PM : ce9b7afdf0a3d7dd8d1487262316b959 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\isapnp.sys : 37.632 : 04/14/2008 08:58 AM : 6dfb88f64135c525433e87648bda30de [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\isapnp.sys : 36.224 : 08/04/2004 02:00 PM : ce9b7afdf0a3d7dd8d1487262316b959 [Pos Repl] * C:\WINDOWS\System32\drivers\kbdclass.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys : 25.216 : 08/04/2004 02:00 PM : b128fc0a5cd83f669d5de4b58f77c7d6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys : 25.216 : 04/14/2008 08:58 AM : 1704d8c4c8807b889e43c649b478a452 [Pos Repl] * C:\WINDOWS\System32\drivers\kmixer.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys : 171.776 : 08/03/2004 11:07 PM : d93cad07c5683db066b0b2d2d3790ead [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\kmixer.sys : 172.416 : 04/13/2008 08:45 PM : 692bcf44383d056aed41b045a323d378 [Pos Repl] * C:\WINDOWS\System32\drivers\ksecdd.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\ksecdd.sys : 92.928 : 06/24/2009 05:28 AM : c6ebf1d6ad71df30db49b8d3287e1368 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys : 92.032 : 08/04/2004 02:00 PM : eb7ffe87fd367ea8fca0506f74a87fbb [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB968389$\ksecdd.sys : 92.288 : 04/13/2008 08:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ksecdd.sys : 92.288 : 04/13/2008 08:31 PM : 1705745d900dabf2d89f90ebaddc7517 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ksecdd.sys : 92.928 : 06/24/2009 01:18 PM : b467646c54cc746128904e1654c750c1 [Pos Repl] * C:\WINDOWS\System32\drivers\ks.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ks.sys : 140.928 : 08/03/2004 11:15 PM : b9540e258f952650de8dec68719a5c97 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ks.sys : 141.056 : 04/13/2008 09:16 PM : 0753515f78df7f271a5e61c20bcd36a1 [Pos Repl] * C:\WINDOWS\System32\drivers\mcd.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\mcd.sys : 7.680 : 08/04/2004 02:00 PM : d1f8be91ed4ddb671d42e473e3fe71ab [Pos Repl] * C:\WINDOWS\System32\drivers\mf.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mf.sys : 63.744 : 08/04/2004 02:00 PM : 729d83e56c29c510258a6e9e79ffddc3 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mf.sys : 63.744 : 04/13/2008 08:36 PM : a7da20ab18a1bdae28b0f349e57da0d1 [Pos Repl] * C:\WINDOWS\System32\drivers\mnmdd.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\mnmdd.sys : 4.224 : 08/04/2004 02:00 PM : 4ae068242760a1fb6e1a44bf4e16afa6 [Pos Repl] * C:\WINDOWS\System32\drivers\modem.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\modem.sys : 30.336 : 08/04/2004 02:00 PM : 91a3da4b12f6f1d760463a7f7857f748 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\modem.sys : 30.336 : 04/14/2008 02:49 AM : 6fb74ebd4ec57a6f1781de3852cc3362 [Pos Repl] * C:\WINDOWS\System32\drivers\mouclass.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mouclass.sys : 23.552 : 08/04/2004 02:00 PM : 71e15ca47fd947552054afb28536268f [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mouclass.sys : 23.552 : 04/14/2008 02:49 AM : b24ce8005deab254c0251e15cb71d802 [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\mouclass.sys : 23.552 : 08/04/2004 02:00 PM : 71e15ca47fd947552054afb28536268f [Pos Repl] * C:\WINDOWS\System32\drivers\mouhid.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\mouhid.sys : 12.288 : 08/18/2001 02:22 AM : 66a6f73c74e1791464160a7065ce711a [Pos Repl] * C:\WINDOWS\System32\drivers\mountmgr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mountmgr.sys : 42.240 : 08/04/2004 02:00 PM : 65653f3b4477f3c63e68a9659f85ee2e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mountmgr.sys : 42.368 : 04/13/2008 08:39 PM : a80b9a0bad1b73637dbcbba7df72d3fd [Pos Repl] * C:\WINDOWS\System32\drivers\mrxdav.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mrxdav.sys : 181.248 : 08/04/2004 02:00 PM : 46edcc8f2db2f322c24f48785cb46366 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mrxdav.sys : 180.608 : 04/13/2008 08:32 PM : 11d42bb6206f33fbb3ba0288d3ef81bd [Pos Repl] * C:\WINDOWS\System32\drivers\mrxsmb.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys : 457.472 : 02/17/2011 02:19 PM : fb7dfd15d760ad339837a470f0e780d3 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys : 457.856 : 04/29/2011 06:47 PM : 8dd801e28eb76fda2a38907882a0036f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys : 457.856 : 07/15/2011 03:29 PM : fb2fccc70f7174c7bf64f48e96d3adf4 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys : 455.936 : 10/24/2008 01:41 PM : 7170ab42b51954def2781a4d1cce65f4 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys : 457.216 : 02/24/2010 01:57 AM : d09b9f0b9960dd41e73127b7814c115f [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys : 451.456 : 08/04/2004 02:00 PM : 1fd607fc67f7f7c633c3da65bfc53d18 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2511455$\mrxsmb.sys : 455.680 : 02/24/2010 02:11 PM : f3aefb11abc521122b67095044169e98 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2536276$\mrxsmb.sys : 455.936 : 02/17/2011 02:18 PM : 0ea4d8ed179b75f8afa7998ba22285ca [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2536276-v2$\mrxsmb.sys : 456.320 : 04/29/2011 06:19 PM : 0dc719e9b15e902346e87e9dcd5751fa [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys : 456.576 : 04/13/2008 09:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB980232$\mrxsmb.sys : 455.296 : 10/24/2008 01:21 PM : 60ae98742484e7ab80c3c1450e708148 [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\mrxsmb.sys : 456.320 : 07/15/2011 03:29 PM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys : 456.576 : 04/13/2008 09:17 PM : 68755f0ff16070178b54674fe5b847b0 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mrxsmb.sys : 456.320 : 07/15/2011 03:29 PM : 7d304a5eb4344ebeeab53a2fe3ffb9f0 [Pos Repl] * C:\WINDOWS\System32\drivers\msfs.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msfs.sys : 19.072 : 08/04/2004 02:00 PM : 561b3a4333ca2dbdba28b5b956822519 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msfs.sys : 19.072 : 04/13/2008 08:32 PM : c941ea2454ba8350021d774daf0f1027 [Pos Repl] * C:\WINDOWS\System32\drivers\msgpc.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msgpc.sys : 35.072 : 08/04/2004 02:00 PM : c0f1d4a21de5a415df8170616703debf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msgpc.sys : 35.072 : 04/13/2008 08:56 PM : 0a02c63c8b144bd8c86b103dee7c86a2 [Pos Repl] * C:\WINDOWS\System32\drivers\MSKSSRV.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mskssrv.sys : 7.552 : 08/03/2004 10:58 PM : ae431a8dd3c1d0d0610cdbac16057ad0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mskssrv.sys : 7.552 : 04/13/2008 08:39 PM : d1575e71568f4d9e14ca56b7b0453bf1 [Pos Repl] * C:\WINDOWS\System32\drivers\MSPCLOCK.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mspclock.sys : 5.376 : 08/03/2004 10:58 PM : 13e75fef9dfeb08eeded9d0246e1f448 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mspclock.sys : 5.376 : 04/13/2008 08:39 PM : 325bb26842fc7ccc1fcce2c457317f3e [Pos Repl] * C:\WINDOWS\System32\drivers\MSPQM.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mspqm.sys : 4.992 : 08/03/2004 10:58 PM : 1988a33ff19242576c3d0ef9ce785da7 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mspqm.sys : 4.992 : 04/13/2008 08:39 PM : bad59648ba099da4a17680b39730cb3d [Pos Repl] * C:\WINDOWS\System32\drivers\mssmbios.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mssmbios.sys : 15.488 : 08/04/2004 02:00 PM : 469541f8bfd2b32659d5d463a6714bce [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mssmbios.sys : 15.488 : 04/13/2008 08:36 PM : af5f4f3f14a8ea2c26de30f7a1e17136 [Pos Repl] * C:\WINDOWS\System32\drivers\mup.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2535512\SP3QFE\mup.sys : 105.472 : 04/21/2011 03:52 PM : f7b1ad991491f02af6da70b00b8bf114 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\mup.sys : 107.904 : 08/04/2004 02:00 PM : 82035e0f41c2dd05ae41d27fe6cf7de1 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2535512$\mup.sys : 105.344 : 04/13/2008 09:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mup.sys : 105.344 : 04/13/2008 09:17 PM : 2f625d11385b1a94360bfc70aaefdee1 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mup.sys : 105.472 : 04/21/2011 03:37 PM : de6a75f5c270e756c5508d94b6cf68f5 [Pos Repl] * C:\WINDOWS\System32\drivers\ndis.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ndis.sys : 182.912 : 08/04/2004 02:00 PM : 558635d3af1c7546d26067d5d9b6959e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ndis.sys : 182.656 : 04/13/2008 09:20 PM : 1df7f42665c94b825322fae71721130d [Pos Repl] * C:\WINDOWS\System32\drivers\ndistapi.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys : 10.496 : 07/08/2011 03:51 PM : 091735a5f20acb1dc147383a905ae002 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ndistapi.sys : 9.600 : 08/04/2004 02:00 PM : 08d43bbdacdf23f34d79e44ed35c1b4c [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2566454$\ndistapi.sys : 10.112 : 04/13/2008 08:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ndistapi.sys : 10.112 : 04/13/2008 08:57 PM : 1ab3d00c991ab086e69db84b6c0ed78f [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ndistapi.sys : 10.496 : 07/08/2011 04:02 PM : 0109c4f3850dfbab279542515386ae22 [Pos Repl] * C:\WINDOWS\System32\drivers\ndisuio.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys : 12.928 : 08/04/2004 02:00 PM : 34d6cd56409da9a7ed573e1c90a308bf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys : 14.592 : 04/13/2008 08:55 PM : f927a4434c5028758a842943ef1a3849 [Pos Repl] * C:\WINDOWS\System32\drivers\ndiswan.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ndiswan.sys : 91.776 : 08/04/2004 02:00 PM : 0b90e255a9490166ab368cd55a529893 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ndiswan.sys : 91.520 : 04/13/2008 09:20 PM : edc1531a49c80614b2cfda43ca8659ab [Pos Repl] * C:\WINDOWS\System32\drivers\ndproxy.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys : 40.960 : 11/03/2010 03:55 AM : 816460bd4b4acd27937d1d0813e2e9e9 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ndproxy.sys : 38.016 : 08/04/2004 02:00 PM : 59fc3fb44d2669bc144fd87826bb571f [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2440591$\ndproxy.sys : 40.576 : 04/13/2008 08:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ndproxy.sys : 40.576 : 04/13/2008 08:57 PM : 6215023940cfd3702b46abc304e1d45a [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ndproxy.sys : 40.960 : 11/02/2010 04:17 PM : 9282bd12dfb069d3889eb3fcc1000a9b [Pos Repl] * C:\WINDOWS\System32\drivers\netbios.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\netbios.sys : 34.560 : 08/04/2004 02:00 PM : 3a2aca8fc1d7786902ca434998d7ceb4 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\netbios.sys : 34.688 : 04/13/2008 08:56 PM : 5d81cf9a2f1a3a756b66cf684911cdf0 [Pos Repl] * C:\WINDOWS\System32\drivers\netbt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\netbt.sys : 162.816 : 08/04/2004 02:00 PM : 0c80e410cd2f47134407ee7dd19cc86b [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\netbt.sys : 162.816 : 04/13/2008 09:21 PM : 74b2b2f5bea5e9a3dc021d685551bd3d [Pos Repl] * C:\WINDOWS\System32\drivers\nic1394.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\nic1394.sys : 61.824 : 08/04/2004 02:00 PM : 5c5c53db4fef16cf87b9911c7e8c6fbc [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\nic1394.sys : 61.824 : 04/13/2008 08:51 PM : e9e47cfb2d461fa0fc75b7a74c6383ea [Pos Repl] * C:\WINDOWS\System32\drivers\nikedrv.sys [NoSig] * C:\WINDOWS\System32\drivers\nmnt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\nmnt.sys : 40.320 : 08/04/2004 02:00 PM : 60cf8c7192b3614f240838ddbaa4a245 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\nmnt.sys : 40.320 : 04/13/2008 08:53 PM : 1e421a6bcf2203cc61b821ada9de878b [Pos Repl] * C:\WINDOWS\System32\drivers\npfs.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\npfs.sys : 30.848 : 08/04/2004 02:00 PM : 4f601bcb8f64ea3ac0994f98fed03f8e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\npfs.sys : 30.848 : 04/13/2008 08:32 PM : 3182d64ae053d6fb034f44b6def8034a [Pos Repl] * C:\WINDOWS\System32\drivers\ntfs.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys : 574.592 : 08/04/2004 02:00 PM : b78be402c3f63dd55521f73876951cdd [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ntfs.sys : 574.976 : 04/13/2008 09:15 PM : 78a08dd6a8d65e697c18e1db01c5cdca [Pos Repl] * C:\WINDOWS\System32\drivers\null.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\null.sys : 2.944 : 08/04/2004 02:00 PM : 73c1e1f395918bc2c6dd67af7591a3ad [Pos Repl] * C:\WINDOWS\System32\drivers\nwlnkflt.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\nwlnkflt.sys : 12.416 : 08/04/2004 02:00 PM : b305f3fad35083837ef46a0bbce2fc57 [Pos Repl] * C:\WINDOWS\System32\drivers\nwlnkfwd.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\nwlnkfwd.sys : 32.512 : 08/04/2004 02:00 PM : c99b3415198d1aab7227f2c88fd664b9 [Pos Repl] * C:\WINDOWS\System32\drivers\nwlnkipx.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys : 88.448 : 08/04/2004 02:00 PM : 79ea3fcda7067977625b3363a2657c80 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys : 88.320 : 04/13/2008 08:56 PM : 8b8b1be2dba4025da6786c645f77f123 [Pos Repl] * C:\WINDOWS\System32\drivers\nwlnknb.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\nwlnknb.sys : 63.232 : 08/04/2004 02:00 PM : 56d34a67c05e94e16377c60609741ff8 [Pos Repl] * C:\WINDOWS\System32\drivers\nwlnkspx.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\nwlnkspx.sys : 55.936 : 08/04/2004 02:00 PM : c0bb7d1615e1acbdc99757f6ceaf8cf0 [Pos Repl] * C:\WINDOWS\System32\drivers\oprghdlr.sys [NoSig] * C:\WINDOWS\System32\drivers\p3.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\p3.sys : 46.592 : 08/04/2004 02:00 PM : 118c1004e38fddb5f832a182e6ef6f40 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\p3.sys : 46.848 : 04/14/2008 02:02 AM : a7af0c0860f1c43fc6581ba8a99eabef [Pos Repl] * C:\WINDOWS\System32\drivers\parport.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\parport.sys : 80.384 : 08/04/2004 02:00 PM : b2f17a2edb5450e61973a037f63a595b [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\parport.sys : 80.384 : 04/14/2008 02:02 AM : f84785660305b9b903fb3bca8ba29837 [Pos Repl] * C:\WINDOWS\System32\drivers\partmgr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\partmgr.sys : 18.688 : 08/04/2004 02:00 PM : 3334430c29dc338092f79c38ef7b4cd0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\partmgr.sys : 19.712 : 04/13/2008 08:40 PM : beb3ba25197665d82ec7065b724171c6 [Pos Repl] * C:\WINDOWS\System32\drivers\parvdm.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\parvdm.sys : 7.040 : 08/04/2004 02:00 PM : c2bf987829099a3eaa2ca6a0a90ecb4f [Pos Repl] * C:\WINDOWS\System32\drivers\pciidex.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\pciidex.sys : 25.088 : 08/04/2004 02:00 PM : 520b91ab011456b940d9b05fc91108ff [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\pciidex.sys : 24.960 : 04/13/2008 08:40 PM : 52e60f29221d0d1ac16737e8dbf7c3e9 [Pos Repl] * C:\WINDOWS\System32\drivers\pci.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\pci.sys : 68.224 : 08/04/2004 02:00 PM : 6fb463e5b243fbd6f3d3c83f914d94fb [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\pci.sys : 68.224 : 04/14/2008 08:02 AM : 387e8dedc343aa2d1efbc30580273acd [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\pci.sys : 68.224 : 08/04/2004 02:00 PM : 6fb463e5b243fbd6f3d3c83f914d94fb [Pos Repl] +-> C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\pci.sys : 68.224 : 08/04/2004 02:00 PM : 6fb463e5b243fbd6f3d3c83f914d94fb [Pos Repl] * C:\WINDOWS\System32\drivers\pcmcia.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\pcmcia.sys : 120.320 : 08/04/2004 02:00 PM : e2363f4c1daff89abee5f593e13d8a05 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\pcmcia.sys : 120.576 : 04/14/2008 08:02 AM : a2a966b77d61847d61a3051df87c8c97 [Pos Repl] * C:\WINDOWS\System32\drivers\portcls.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\portcls.sys : 136.960 : 03/16/2004 02:58 AM : bc6b2bc69c1e009443e8b1fe2db96101 [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\portcls.sys : 136.960 : 03/16/2004 08:58 AM : bc6b2bc69c1e009443e8b1fe2db96101 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\portcls.sys : 146.048 : 04/13/2008 09:19 PM : e82a496c3961efc6828b508c310ce98f [Pos Repl] * C:\WINDOWS\System32\drivers\processr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\processr.sys : 39.424 : 08/04/2004 02:00 PM : 3d7f196e77f986c106e9320b81a5ebbf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\processr.sys : 39.936 : 04/14/2008 09:51 AM : 2cb55427c58679f49ad600fccba76360 [Pos Repl] * C:\WINDOWS\System32\drivers\psched.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\psched.sys : 69.120 : 08/04/2004 02:00 PM : 48671f327553dcf1d27f6197f622a668 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\psched.sys : 69.120 : 04/13/2008 08:56 PM : 09298ec810b07e5d582cb3a3f9255424 [Pos Repl] * C:\WINDOWS\System32\drivers\ptilink.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\ptilink.sys : 17.792 : 08/04/2004 02:00 PM : 80d317bd1c3dbc5d4fe7b1678c60cadd [Pos Repl] * C:\WINDOWS\System32\drivers\rasacd.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\rasacd.sys : 8.832 : 08/04/2004 02:00 PM : fe0d99d6f31e4fad8159f690d68ded9c [Pos Repl] * C:\WINDOWS\System32\drivers\rasl2tp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\rasl2tp.sys : 51.328 : 08/04/2004 02:00 PM : 98faeb4a4dcf812ba1c6fca4aa3e115c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rasl2tp.sys : 51.328 : 04/13/2008 09:19 PM : 11b4a627bc9614b885c4969bfa5ff8a6 [Pos Repl] * C:\WINDOWS\System32\drivers\raspppoe.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\raspppoe.sys : 41.472 : 08/04/2004 02:00 PM : 7306eeed8895454cbed4669be9f79faa [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\raspppoe.sys : 41.472 : 04/13/2008 08:57 PM : 5bc962f2654137c9909c3d4603587dee [Pos Repl] * C:\WINDOWS\System32\drivers\raspptp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys : 48.384 : 08/04/2004 02:00 PM : 1c5cc65aac0783c344f16353e60b72ac [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\raspptp.sys : 48.384 : 04/13/2008 09:19 PM : efeec01b1d3cf84f16ddd24d9d9d8f99 [Pos Repl] * C:\WINDOWS\System32\drivers\raspti.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\raspti.sys : 16.512 : 08/04/2004 02:00 PM : fdbb1d60066fcfbb7452fd8f9829b242 [Pos Repl] * C:\WINDOWS\System32\drivers\rawwan.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\rawwan.sys : 34.432 : 08/04/2004 02:00 PM : 01524cd237223b18adbb48f70083f101 [Pos Repl] * C:\WINDOWS\System32\drivers\rdbss.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\rdbss.sys : 176.512 : 08/04/2004 02:00 PM : 29d66245adba878fff574cd66abd2884 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rdbss.sys : 175.744 : 04/13/2008 09:28 PM : 7ad224ad1a1437fe28d89cf22b17780a [Pos Repl] * C:\WINDOWS\System32\drivers\rdpcdd.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\rdpcdd.sys : 4.224 : 08/04/2004 02:00 PM : 4912d5b403614ce99c28420f75353332 [Pos Repl] * C:\WINDOWS\System32\drivers\rdpdr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\rdpdr.sys : 196.864 : 08/03/2004 11:01 PM : a2cae2c60bc37e0751ef9dda7ceaf4ad [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rdpdr.sys : 196.224 : 04/13/2008 08:32 PM : 15cabd0f7c00c47c70124907916af3f1 [Pos Repl] * C:\WINDOWS\System32\drivers\rdpwd.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys : 139.656 : 06/24/2011 04:09 PM : 3348e61a78ba4f79c795aad6565d3b6f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys : 139.784 : 01/09/2012 05:19 PM : 2d293b720c206473a05950ce007db12a [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2685939\SP3QFE\rdpwd.sys : 139.656 : 05/02/2012 03:45 PM : 997c59b9955f911ec460241dd9e01b04 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2723135\SP3QFE\rdpwd.sys : 139.784 : 07/04/2012 03:59 PM : c7d9bc54354b8c706abf172d48313f1b [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\rdpwd.sys : 139.400 : 08/04/2004 02:00 PM : d4f5643d7714ef499ae9527fdcd50894 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2570222$\rdpwd.sys : 139.656 : 04/14/2008 02:23 AM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2621440$\rdpwd.sys : 139.656 : 06/24/2011 04:10 PM : fc105dd312ed64eb66bff111e8ec6eac [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2685939$\rdpwd.sys : 139.784 : 01/09/2012 05:20 PM : 5b3055daa788bd688594d2f5981f2a83 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2723135$\rdpwd.sys : 139.656 : 05/02/2012 03:46 PM : 6589db6e5969f8eee594cf71171c5028 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rdpwd.sys : 139.656 : 04/14/2008 08:23 AM : 6728e45b66f93c08f11de2e316fc70dd [Pos Repl] +-> C:\WINDOWS\system32\dllcache\rdpwd.sys : 139.784 : 07/04/2012 04:05 PM : 43af5212bd8fb5ba6eed9754358bd8f7 [Pos Repl] * C:\WINDOWS\System32\drivers\redbook.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\redbook.sys : 57.600 : 08/04/2004 03:40 AM : aa56702e230860565cb8d43680f57f33 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\redbook.sys : 57.728 : 04/14/2008 04:52 AM : ed761d453856f795a7fe056e42c36365 [Pos Repl] * C:\WINDOWS\System32\drivers\rmcast.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys : 203.136 : 05/08/2008 03:58 PM : c711645c76b8ed87c021bf6165e52795 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\rmcast.sys : 200.064 : 08/04/2004 02:00 PM : 35e81b908ae4e97fc7bdf4607c516ff4 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys : 202.624 : 04/13/2008 08:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rmcast.sys : 202.624 : 04/13/2008 08:55 PM : ecff394d65671efde5a872eb9ef4f2d5 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\rmcast.sys : 203.136 : 05/08/2008 04:02 PM : 96f7a9a7bf0c9c0440a967440065d33c [Pos Repl] * C:\WINDOWS\System32\drivers\rndismp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\rndismp.sys : 30.080 : 08/04/2004 02:00 PM : 7ce8b277f3207ea82d7d22ad348befc6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rndismp.sys : 30.592 : 04/13/2008 08:56 PM : 601844cbcf617ff8c868130ca5b2039d [Pos Repl] * C:\WINDOWS\System32\drivers\rootmdm.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\rootmdm.sys : 5.888 : 08/04/2004 02:00 PM : d8b0b4ade32574b2d9c5cc34dc0dbbe7 [Pos Repl] * C:\WINDOWS\System32\drivers\scsiport.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\scsiport.sys : 96.256 : 08/04/2004 02:00 PM : d7fd0ff761e28ac0ea35ad71e0cd67e9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\scsiport.sys : 96.384 : 04/13/2008 08:40 PM : 76c465f570e90c28942d52ccb2580a10 [Pos Repl] * C:\WINDOWS\System32\drivers\sdbus.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sdbus.sys : 67.584 : 08/04/2004 02:00 PM : 02fc71b020ec8700ee8a46c58bc6f276 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sdbus.sys : 79.232 : 04/13/2008 08:36 PM : 8d04819a3ce51b9eb47e5689b44d43c4 [Pos Repl] * C:\WINDOWS\System32\drivers\serenum.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\serenum.sys : 15.488 : 08/04/2004 02:00 PM : a2d868aeeff612e70e213c451a70cafb [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\serenum.sys : 15.744 : 04/13/2008 08:40 PM : 0f29512ccd6bead730039fb4bd2c85ce [Pos Repl] * C:\WINDOWS\System32\drivers\serial.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\serial.sys : 65.920 : 08/04/2004 02:00 PM : cd5b9995afcdb466c9efc048d167e3be [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\serial.sys : 65.536 : 04/14/2008 08:54 AM : cf24eb4f0412c82bcd1f4f35a025e31d [Pos Repl] * C:\WINDOWS\System32\drivers\sffdisk.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sffdisk.sys : 11.136 : 08/04/2004 02:00 PM : 1d9f1bec651815741f088a8fb88e17ee [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sffdisk.sys : 11.904 : 04/13/2008 08:40 PM : 0fa803c64df0914b41f807ea276bf2a6 [Pos Repl] * C:\WINDOWS\System32\drivers\sffp_sd.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sffp_sd.sys : 10.240 : 08/04/2004 02:00 PM : 586499fd312ffd7f78553f408e71682e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sffp_sd.sys : 11.008 : 04/13/2008 08:40 PM : c17c331e435ed8737525c86a7557b3ac [Pos Repl] * C:\WINDOWS\System32\drivers\sfloppy.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sfloppy.sys : 11.392 : 08/04/2004 02:00 PM : 0d13b6df6e9e101013a7afb0ce629fe0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sfloppy.sys : 11.392 : 04/13/2008 08:40 PM : 8e6b8c671615d126fdc553d1e2de5562 [Pos Repl] * C:\WINDOWS\System32\drivers\smclib.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\smclib.sys : 14.592 : 08/04/2004 02:00 PM : 017daecf0ed3aa731313433601ec40fa [Pos Repl] * C:\WINDOWS\System32\drivers\sonydcam.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys : 25.472 : 08/04/2004 02:00 PM : addc9e4757a68ab60562ad3cb9c288d6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sonydcam.sys : 25.344 : 04/13/2008 08:46 PM : 489703624dac94ed943c2abda022a1cd [Pos Repl] * C:\WINDOWS\System32\drivers\splitter.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\splitter.sys : 6.400 : 08/03/2004 11:07 PM : 8e186b8f23295d1e42c573b82b80d548 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\splitter.sys : 6.272 : 04/13/2008 08:45 PM : ab8b92451ecb048a4d1de7c3ffcb4a9f [Pos Repl] * C:\WINDOWS\System32\drivers\sr.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sr.sys : 73.472 : 08/04/2004 02:00 PM : e4200cb2f418d8fc4acdd7e38c419d6a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sr.sys : 73.472 : 04/14/2008 08:02 AM : 50fa898f8c032796d3b1b9951bb5a90f [Pos Repl] * C:\WINDOWS\System32\drivers\srv.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2345886\SP3QFE\srv.sys : 357.248 : 08/26/2010 03:37 PM : 70cd8b8dd2a680b128617c19eb0ab94f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2508429\SP3QFE\srv.sys : 357.888 : 02/17/2011 02:19 PM : 9b390283569ea58d43d2586032b892f5 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB957095\SP3QFE\srv.sys : 333.824 : 09/08/2008 01:37 PM : ae4d13b572399b206b43d65da4d9983d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys : 333.952 : 12/11/2008 01:33 PM : e89b42b216bc86ada4345908284519cb [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB982214\SP3QFE\srv.sys : 354.304 : 06/21/2010 04:18 PM : 422e4508508015c7d12f40bf9763f158 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\srv.sys : 336.256 : 08/04/2004 02:00 PM : 20b7e396720353e4117d64d9dcb926ca [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2345886$\srv.sys : 333.952 : 12/11/2008 02:57 AM : 3bb03f2ba89d2be417206c373d2af17c [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2508429$\srv.sys : 357.248 : 08/26/2010 03:39 PM : 0f6aefad3641a657e18081f52d0c15af [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB957095$\srv.sys : 334.848 : 04/13/2008 09:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB958687$\srv.sys : 333.824 : 09/08/2008 09:41 AM : 4f8a43adef66f135564085a9dca96a26 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\srv.sys : 334.848 : 04/13/2008 09:15 PM : 5252605079810904e31c332e241cd59b [Pos Repl] +-> C:\WINDOWS\system32\dllcache\srv.sys : 357.888 : 02/17/2011 02:18 PM : 47ddfc2f003f7f9f0592c6874962a2e7 [Pos Repl] * C:\WINDOWS\System32\drivers\stream.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\stream.sys : 48.640 : 08/03/2004 11:08 PM : c43356072eb3e88cd62958db10cead47 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\stream.sys : 49.408 : 04/13/2008 08:45 PM : 3e5d89099ded9e86e5639f411693218f [Pos Repl] * C:\WINDOWS\System32\drivers\swenum.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\swenum.sys : 4.352 : 08/04/2004 02:00 PM : 03c1bae4766e2450219d20b993d6e046 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\swenum.sys : 4.352 : 04/13/2008 08:39 PM : 3941d127aef12e93addf6fe6ee027e0f [Pos Repl] * C:\WINDOWS\System32\drivers\swmidi.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\swmidi.sys : 54.272 : 08/17/2001 02:00 PM : 94abc808fc4b6d7d2bbf42b85e25bb4d [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\swmidi.sys : 56.576 : 04/13/2008 08:45 PM : 8ce882bcc6cf8a62f2b2323d95cb3d01 [Pos Repl] * C:\WINDOWS\System32\drivers\sysaudio.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys : 60.800 : 08/03/2004 11:15 PM : 650ad082d46bac0e64c9c0e0928492fd [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sysaudio.sys : 60.800 : 04/13/2008 09:15 PM : 8b83f3ed0f1688b4958f77cd6d2bf290 [Pos Repl] * C:\WINDOWS\System32\drivers\tape.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tape.sys : 14.976 : 08/04/2004 02:00 PM : a2a9ca0d1a9ac1ff54220aa0789fe5cf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tape.sys : 14.976 : 04/13/2008 08:40 PM : fd6093e3decd925f1cffc8a0dd539d72 [Pos Repl] * C:\WINDOWS\System32\drivers\tcpip6.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys : 225.856 : 06/20/2008 01:16 PM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys : 225.856 : 06/20/2008 01:16 PM : 026a94e4eb2960fdc96a447b5391d56a [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB978338\SP3QFE\tcpip6.sys : 226.880 : 02/11/2010 01:36 AM : f4a3c6abe7818b1b53f58fa1adb605cd [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys : 223.616 : 08/04/2004 02:00 PM : 4d58bb1ae8841aafd8790ad7e1e3b8ea [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys : 225.664 : 04/13/2008 09:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB978338$\tcpip6.sys : 225.856 : 06/20/2008 01:08 PM : fb9f32acc1d3ad523f7ec900b66fc1bb [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tcpip6.sys : 225.664 : 04/13/2008 09:00 PM : aa7a55536096d646dc7ab0ac5641e9e8 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\tcpip6.sys : 226.880 : 02/11/2010 01:02 PM : 4e53bbcc4be37d7a4bd6ef1098c89ff7 [Pos Repl] * C:\WINDOWS\System32\Drivers\tcpip.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys : 361.600 : 06/20/2008 01:59 PM : ad978a1b783b5719720cff204b666c8e [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys : 361.600 : 06/20/2008 01:59 PM : ad978a1b783b5719720cff204b666c8e [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys : 359.040 : 08/04/2004 02:00 PM : 9f4b36614a0fc234525ba224957de55c [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys : 361.344 : 04/13/2008 09:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tcpip.sys : 361.344 : 04/13/2008 09:20 PM : 93ea8d04ec73a85db02eb8805988f733 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\tcpip.sys : 361.600 : 06/20/2008 01:51 PM : 9aefa14bd6b182d61e3119fa5f436d3d [Pos Repl] * C:\WINDOWS\System32\drivers\tdi.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tdi.sys : 18.560 : 08/04/2004 02:00 PM : 6891b74ab9a016064e82a419388d0601 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tdi.sys : 19.072 : 04/13/2008 09:00 PM : 0539d5e53587f82d1b4fd74c5be205cf [Pos Repl] * C:\WINDOWS\System32\drivers\tdpipe.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys : 12.040 : 08/04/2004 02:00 PM : 38d437cf2d98965f239b0abcd66dcb0f [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tdpipe.sys : 12.040 : 04/14/2008 09:23 AM : 6471a66807f5e104e4885f5b67349397 [Pos Repl] * C:\WINDOWS\System32\drivers\tdtcp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys : 21.896 : 08/04/2004 02:00 PM : ed0580af02502d00ad8c4c066b156be9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tdtcp.sys : 21.896 : 04/14/2008 09:23 AM : c56b6d0402371cf3700eb322ef3aaf61 [Pos Repl] * C:\WINDOWS\System32\drivers\termdd.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\termdd.sys : 40.840 : 08/04/2004 02:58 AM : a540a99c281d933f3d69d55e48727f47 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\termdd.sys : 40.840 : 04/14/2008 09:23 AM : 88155247177638048422893737429d9e [Pos Repl] * C:\WINDOWS\System32\drivers\tosdvd.sys [NoSig] * C:\WINDOWS\System32\drivers\tunmp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys : 12.416 : 08/04/2004 02:00 PM : 87a0e9e18c10a9e454238e3330e2a26d [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tunmp.sys : 12.288 : 04/13/2008 08:56 PM : 8f861eda21c05857eb8197300a92501c [Pos Repl] * C:\WINDOWS\System32\drivers\udfs.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\udfs.sys : 66.176 : 08/04/2004 02:00 PM : 12f70256f140cd7d52c58c7048fde657 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\udfs.sys : 66.048 : 04/13/2008 08:32 PM : 5787b80c2e3c5e2f56c2a233d91fa2c9 [Pos Repl] * C:\WINDOWS\System32\drivers\update.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\update.sys : 209.408 : 08/04/2004 02:00 PM : aff2e5045961bbc0a602bb6f95eb1345 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\update.sys : 384.768 : 04/13/2008 08:39 PM : 402ddc88356b1bac0ee3dd1580c76a31 [Pos Repl] * C:\WINDOWS\System32\drivers\usb8023.sys [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2807986\SP3QFE\usb8023.sys : 12.928 : 02/12/2013 01:43 AM : c74f25c77d6c3edf58221e4060d8cd16 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys : 12.672 : 08/04/2004 02:00 PM : af090265ec388bab320f1ff7e7a7d5ea [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2807986$\usb8023.sys : 12.800 : 04/13/2008 08:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usb8023.sys : 12.800 : 04/13/2008 08:56 PM : bee793d4a059caea55d6ac20e19b3a8f [Pos Repl] +-> C:\WINDOWS\system32\dllcache\usb8023.sys : 12.928 : 02/12/2013 08:32 AM : 2a7a8ad9d39a2faf9d9293b5daff3a4b [Pos Repl] * C:\WINDOWS\System32\drivers\usbcamd2.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd2.sys : 23.936 : 08/04/2004 02:00 PM : 61018ba9df6b63e51d9753c980e73ec2 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbcamd2.sys : 25.728 : 04/13/2008 08:45 PM : ce97845d2e3f0d274b8bac1ed07c6149 [Pos Repl] * C:\WINDOWS\System32\drivers\usbcamd.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbcamd.sys : 23.808 : 08/04/2004 02:00 PM : 2654eecc6fb13603ebddcd5c8ea943d1 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbcamd.sys : 25.600 : 04/13/2008 08:45 PM : 1c1a47b40c23358245aa8d0443b6935e [Pos Repl] * C:\WINDOWS\System32\drivers\usbccgp.sys [NoSig] +-> C:\WINDOWS\ServicePackFiles\i386\usbccgp.sys : 32.128 : 04/13/2008 08:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\usbccgp.sys : 32.128 : 04/13/2008 08:45 PM : 173f317ce0db8e21322e71b7e60a27e8 [Pos Repl] * C:\WINDOWS\System32\drivers\usbd.sys [NoSig] * C:\WINDOWS\System32\drivers\usbehci.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys : 26.624 : 08/04/2004 02:00 PM : 15e993ba2f6946b2bfbbfcd30398621e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbehci.sys : 30.208 : 04/13/2008 08:45 PM : 65dcf09d0e37d4c6b11b5b0b76d470a7 [Pos Repl] * C:\WINDOWS\System32\drivers\usbhub.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys : 57.600 : 08/04/2004 02:00 PM : c72f40947f92cea56a8fb532edf025f1 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbhub.sys : 59.520 : 04/13/2008 08:45 PM : 1ab3cdde553b6e064d2e754efe20285c [Pos Repl] * C:\WINDOWS\System32\drivers\usbintel.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys : 16.000 : 08/04/2004 02:00 PM : 2853fd4c4489e0f8bfcf78efcdb7e998 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbintel.sys : 15.872 : 04/13/2008 08:45 PM : 290913dc4f1125e5a82de52579a44c43 [Pos Repl] * C:\WINDOWS\System32\drivers\usbport.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbport.sys : 142.976 : 08/04/2004 02:00 PM : 2034ca78f9c6e787b4b76d81ac888351 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbport.sys : 143.872 : 04/13/2008 08:45 PM : 791912e524cc2cc6f50b5f2b52d1eb71 [Pos Repl] * C:\WINDOWS\System32\drivers\USBSTOR.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys : 26.496 : 08/03/2004 11:08 PM : 6cd7b22193718f1d17a47a1cd6d37e75 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbstor.sys : 26.368 : 04/13/2008 08:45 PM : a32426d9b14a089eaa1d922e0c5801a9 [Pos Repl] * C:\WINDOWS\System32\drivers\usbuhci.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys : 20.480 : 08/04/2004 02:00 PM : f8fd1400092e23c8f2f31406ef06167b [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usbuhci.sys : 20.608 : 04/13/2008 08:45 PM : 26496f9dee2d787fc3e61ad54821ffe6 [Pos Repl] * C:\WINDOWS\System32\drivers\vga.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\vga.sys : 20.992 : 08/04/2004 02:00 PM : 8a60edd72b4ea5aea8202daf0e427925 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\vga.sys : 20.992 : 04/13/2008 08:44 PM : 0d3a8fafceacd8b7625cd549757a7df1 [Pos Repl] * C:\WINDOWS\System32\drivers\videoprt.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys : 79.744 : 08/04/2004 02:00 PM : d5a9d123f5ed7c9965a481bd20cf66d8 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\videoprt.sys : 81.664 : 04/13/2008 08:44 PM : e28726b72c46821a28830e077d39a55b [Pos Repl] * C:\WINDOWS\System32\drivers\volsnap.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys : 53.760 : 08/04/2004 02:00 PM : d6888520ff56d72a50437e371ca25fc9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\volsnap.sys : 53.760 : 04/14/2008 08:52 AM : a5a712f4e880874a477af790b5186e1d [Pos Repl] * C:\WINDOWS\System32\drivers\wanarp.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys : 34.560 : 08/04/2004 02:00 PM : 984ef0b9788abf89974cfed4bfbaacbc [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wanarp.sys : 34.560 : 04/13/2008 08:57 PM : e20b95baedb550f32dd489265c1da1f6 [Pos Repl] * C:\WINDOWS\System32\drivers\wdmaud.sys [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys : 82.944 : 08/03/2004 11:15 PM : 2797f33ebf50466020c430ee4f037933 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wdmaud.sys : 83.072 : 04/13/2008 09:17 PM : 6768acf64b18196494413695f0c3a00f [Pos Repl] * C:\WINDOWS\System32\drivers\wmilib.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\wmilib.sys : 4.352 : 08/04/2004 02:00 PM : 2f31b7f954bed437f2c75026c65caf7b [Pos Repl] * C:\WINDOWS\System32\drivers\ws2ifsl.sys [NoSig] +-> C:\WINDOWS\system32\dllcache\ws2ifsl.sys : 12.032 : 08/04/2004 02:00 PM : 6abe6e225adb5a751622a9cc3bc19ce8 [Pos Repl] * C:\WINDOWS\System32\dsound.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dsound.dll : 367.616 : 08/04/2004 02:00 PM : 7db3393f98e4211f5ce8f003de0615cf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dsound.dll : 367.616 : 04/14/2008 02:22 AM : 9236e736edb57be7d1ef6274410e3bac [Pos Repl] * C:\WINDOWS\System32\dssenh.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll : 137.216 : 08/04/2004 02:00 PM : cacd2c63a79268d131ea37e85524cc44 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\dssenh.dll : 138.752 : 04/13/2008 07:37 PM : fede68bf80052bad393afd5c2e60dcb0 [Pos Repl] * C:\WINDOWS\System32\es.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll : 253.952 : 07/07/2008 10:23 PM : ada7241c16f3f42c7f210539fad5f3aa [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\es.dll : 243.200 : 08/04/2004 02:00 PM : 4e1a8645ee77cb9454ffe53c59620a25 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB950974$\es.dll : 246.272 : 04/14/2008 02:22 AM : 0f3edaee1ef97cf3db2be23a7289b78c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\es.dll : 246.272 : 04/14/2008 07:22 AM : 0f3edaee1ef97cf3db2be23a7289b78c [Pos Repl] +-> C:\WINDOWS\system32\dllcache\es.dll : 253.952 : 07/07/2008 10:26 PM : af4f6b5739d18ca7972ab53e091cbc74 [Pos Repl] * C:\WINDOWS\System32\eventlog.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll : 55.808 : 08/04/2004 02:00 PM : b932c077d5a65b71b4512544ac404cb4 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\eventlog.dll : 56.320 : 04/14/2008 10:22 AM : 04955aa695448c181b367d964af158aa [Pos Repl] * C:\WINDOWS\System32\hid.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\hid.dll : 20.992 : 08/04/2004 02:00 PM : 14d8eb080b74e7afa41bab8d89f6eba4 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\hid.dll : 20.992 : 04/14/2008 10:22 AM : 8e1714fc6103f585f00cf2fa883eb33a [Pos Repl] * C:\WINDOWS\System32\hnetcfg.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll : 348.672 : 08/04/2004 02:00 PM : ae93e415220a4c0112768a0dee36d28d [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll : 348.672 : 04/14/2008 10:22 AM : 0daf0705d7b39c94e287913226688804 [Pos Repl] * C:\WINDOWS\System32\imm32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\imm32.dll : 110.080 : 08/04/2004 02:00 PM : 94101d13a1818a9d08337eec12ed277a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\imm32.dll : 110.080 : 04/14/2008 10:22 AM : f9954695d246b33a5bf105029a4c6ab6 [Pos Repl] * C:\WINDOWS\System32\ipsecsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll : 184.320 : 08/04/2004 02:00 PM : 33a92e3bc2ded2a66201d19fe3716656 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ipsecsvc.dll : 185.344 : 04/14/2008 10:22 AM : 72dc0afc9bdcfeb18f390b937a24e32c [Pos Repl] * C:\WINDOWS\System32\kernel32.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2758857\SP3QFE\kernel32.dll : 1.065.472 : 10/03/2012 10:57 AM : a9d5caf09abd70f1ca28891eced7b9e4 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll : 1.065.472 : 03/21/2009 02:59 PM : 3eb703bfc2ed26a3d8acb8626ab2c006 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll : 1.057.280 : 08/04/2004 02:00 PM : e6cd85d0d37416cf138f01f4bb0fc872 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2758857$\kernel32.dll : 1.063.424 : 03/21/2009 03:06 PM : b055c64aabc1a3e3de57ec8025cad283 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll : 1.063.424 : 04/14/2008 03:22 AM : 4c897c69754d88f496339b1a666907c1 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\kernel32.dll : 1.063.424 : 04/14/2008 10:22 AM : 4c897c69754d88f496339b1a666907c1 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\kernel32.dll : 1.063.936 : 10/03/2012 10:58 AM : 8214d49147fbb2cd5cf896cbe021d339 [Pos Repl] * C:\WINDOWS\System32\ksuser.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll : 4.096 : 08/04/2004 03:57 AM : 4721744ce11f385073f6f9f7831752c7 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ksuser.dll : 4.096 : 04/14/2008 10:22 AM : 671abb33c712b1585a5bf7add36ad96e [Pos Repl] * C:\WINDOWS\System32\linkinfo.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll : 18.944 : 08/04/2004 02:00 PM : 3898fff548e2968cb3ac5a71d7f4e425 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll : 19.968 : 04/14/2008 10:22 AM : 5543a9d4a1d0f9f84092482a9373a024 [Pos Repl] * C:\WINDOWS\System32\lpk.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\lpk.dll : 22.016 : 08/04/2004 02:00 PM : b4ad65c79f85c61d32c015b11e03caad [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\lpk.dll : 22.016 : 04/14/2008 10:22 AM : f38f3c47bbffd748c1359ab171c3a630 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\lpk.dll : 22.016 : 04/14/2008 10:22 AM : f38f3c47bbffd748c1359ab171c3a630 [Pos Repl] * C:\WINDOWS\System32\lsass.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\lsass.exe : 13.312 : 08/04/2004 02:00 PM : 183805eb05bca5a1e4aaaed4d2be3690 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\lsass.exe : 13.312 : 04/14/2008 10:22 AM : afb8261b56cba0d86aeb6df682af9785 [Pos Repl] * C:\WINDOWS\System32\mfc40u.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll : 953.856 : 09/18/2010 02:18 AM : 4891fcdae77486bfb56999aa217651fa [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll : 924.432 : 08/04/2004 02:00 PM : 31dd27ab47f62d383505f35ca972748b [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2387149$\mfc40u.dll : 927.504 : 04/14/2008 02:22 AM : acc19ba6876af18768ee87931cad14e2 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll : 927.504 : 04/14/2008 10:22 AM : acc19ba6876af18768ee87931cad14e2 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mfc40u.dll : 953.856 : 09/18/2010 10:52 AM : 1614669828a32bcd06e1be6f334bb888 [Pos Repl] * C:\WINDOWS\System32\midimap.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\midimap.dll : 18.944 : 08/04/2004 02:00 PM : 32641ae4d340c1ac2d9b3a3bd71f5c47 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\midimap.dll : 18.944 : 04/14/2008 10:22 AM : 2cf969b9bf1ef069075dcdce309faae1 [Pos Repl] * C:\WINDOWS\System32\msgsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll : 33.792 : 08/04/2004 02:00 PM : e5215ab942c5ac5f7eb0e54871d7a27c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll : 33.792 : 04/14/2008 10:22 AM : b7550a7107281d170ce85524b1488c98 [Pos Repl] * C:\WINDOWS\System32\mshtml.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll : 5.962.240 : 12/21/2010 02:51 AM : be8a4c7bff06dc3bccbce689fac751f7 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll : 5.964.800 : 02/23/2011 02:25 AM : 581142e0b30a2457893edcf11479bb6c [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll : 5.967.360 : 05/31/2011 02:11 AM : f439589bf8c2b1b07daed345cd2f710d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll : 5.971.456 : 07/25/2011 05:08 PM : 1d96c20a4b27e16481c3e774efc87e09 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll : 5.972.992 : 10/03/2011 05:33 AM : cc43ab1b8e1c5244b7f354307a3c9a77 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll : 5.978.624 : 11/04/2011 08:12 PM : cd31b8fa968485999c4b02802d8c482c [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll : 5.980.160 : 12/17/2011 08:42 PM : 384d5cd1286ca3364ee2daa991cf4726 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\mshtml.dll : 5.980.672 : 03/01/2012 08:57 AM : aff12544647103f756962f43bf60c238 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\mshtml.dll : 6.009.344 : 05/11/2012 04:39 PM : e3c9c5f75f06cecd02e0be32e0be7463 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\mshtml.dll : 6.010.368 : 07/02/2012 07:38 PM : 4d2499e11d9f907acd817ca76dd78024 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\mshtml.dll : 6.010.368 : 08/28/2012 05:04 PM : 871c7e18bc56164496ce97de5c95e569 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2761465-IE8\SP3QFE\mshtml.dll : 6.010.880 : 11/13/2012 05:24 AM : 9ee11942f73a9ceb7af2ec2316488f1e [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2792100-IE8\SP3QFE\mshtml.dll : 6.011.904 : 01/09/2013 05:55 AM : d20f3ca24ecc9fcd03311b4614596d80 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2799329-IE8\SP3QFE\mshtml.dll : 6.011.392 : 01/06/2013 05:32 AM : 7e7ad1122829366abffd99282aa5e387 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2809289-IE8\SP3QFE\mshtml.dll : 6.012.928 : 03/01/2013 05:26 AM : d0044b80aab6e8cf061dbff2a0d10916 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll : 3.088.384 : 04/21/2008 05:24 AM : 031ff37b530d76c23bcc2e21b709db7f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll : 3.593.728 : 04/23/2008 05:19 AM : 60942cb0b5cadf130fc1795f5feee8f5 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll : 3.594.240 : 06/23/2008 05:37 PM : 209a03c0eef909dfcdcbb56c2bbf91cd [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll : 3.594.752 : 08/26/2008 05:08 AM : 21b2247d24c8a61c12cd3be8f3c30ac8 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll : 3.595.264 : 10/16/2008 09:30 PM : c998b6d5e64e11ce8ea8bb22a51ca570 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll : 3.594.752 : 12/13/2008 09:27 AM : e0825d1bc0f0c2b5ca434f7e9ccf10ae [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll : 3.596.288 : 01/16/2009 05:12 PM : b44ac6a49da4a5baa7afea0aa6e5b967 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll : 3.596.800 : 02/21/2009 05:47 AM : 77605bda8141e1f7d3b1321e31ca482b [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll : 3.598.336 : 04/29/2009 05:34 AM : 6770b436928e450f5b4866bdc59549cc [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll : 5.936.128 : 05/13/2009 05:07 AM : cf58dca3ed911c4c942b941d4ecf6862 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll : 5.938.176 : 07/19/2009 02:42 PM : 165056346e0a00566a442287daa7575f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll : 5.942.272 : 08/29/2009 02:49 AM : d8aec29bd4f4c5a9d85f3ade9b7f8c3f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll : 5.944.320 : 10/29/2009 02:36 AM : 430315d0caa115ea42efdf31a93ab5d0 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll : 5.943.296 : 10/22/2009 02:13 AM : efb718c1cd9dd453dee529df4f25dbca [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll : 3.003.392 : 08/04/2004 02:00 PM : cac51ad576713e5f0ce2251ed3a7fe82 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB950759$\mshtml.dll : 3.066.880 : 04/14/2008 02:22 AM : 72ae55a9ffbc60650339cb12e35c7dd5 [Pos Repl] +-> C:\WINDOWS\ie7\mshtml.dll : 3.087.872 : 04/21/2008 02:42 AM : 324308768813c0518f677ddd631a94a0 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll : 3.578.368 : 08/13/2007 06:54 PM : c6ec2493346ed8888a549f59210a8ed3 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll : 3.591.680 : 04/23/2008 10:16 PM : 8c70efe0c266bdbd654531900a753236 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB956390-IE7\mshtml.dll : 3.592.192 : 06/24/2008 10:14 AM : 69ab1ce0e82b8f028ea1dbfd18948da0 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB958215-IE7\mshtml.dll : 3.593.216 : 08/27/2008 10:57 AM : 4872c0da25f551a3e869501833754494 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB960714-IE7\mshtml.dll : 3.593.216 : 10/17/2008 10:34 AM : ab864b71df01cc98eae726df4baf73d2 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB961260-IE7\mshtml.dll : 3.593.216 : 12/13/2008 10:36 AM : 6c8d1cf85533a3792dcddaae42dbb161 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB963027-IE7\mshtml.dll : 3.594.752 : 01/16/2009 09:01 PM : a76eeda793c9bfc0c1b8c5f3439d8a39 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB969897-IE7\mshtml.dll : 3.595.264 : 02/20/2009 05:49 PM : ee15ce7504eb54258f361ad7595e9077 [Pos Repl] +-> C:\WINDOWS\ie8\mshtml.dll : 3.596.288 : 04/29/2009 02:42 AM : a0236d46efcef98d6703dd5a76aa1cb2 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll : 5.940.736 : 10/29/2009 05:40 AM : 686e3fb68e8e41cd6b2970e6d49f1e14 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll : 5.961.216 : 12/21/2010 05:52 AM : 10669cf45fbca6774260726d6d62282c [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2530548-IE8\mshtml.dll : 5.962.240 : 02/23/2011 05:05 AM : c37fc01cc7347aa073ea7ac3c70d7c7e [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2559049-IE8\mshtml.dll : 5.964.800 : 05/31/2011 05:12 AM : 930a3ed33cd772ea8a2c4bb226a81caf [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2586448-IE8\mshtml.dll : 5.969.920 : 07/25/2011 05:09 PM : 9316af4e14dc9c85a86a1a14a675f160 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2618444-IE8\mshtml.dll : 5.971.456 : 10/03/2011 05:34 AM : f591c3c571e547dded6624eb3dcab7c9 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2647516-IE8\mshtml.dll : 5.978.112 : 11/04/2011 08:13 PM : 4823271e3a5f3a3d2229eaca01d849f1 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2675157-IE8\mshtml.dll : 5.979.136 : 12/17/2011 08:43 PM : ed2a6223a232e6463e6168a0a7a6ea93 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2699988-IE8\mshtml.dll : 5.978.624 : 03/01/2012 08:00 AM : c34fc3162fe56d908a7285b5983d03ff [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2722913-IE8\mshtml.dll : 6.007.808 : 05/11/2012 04:40 PM : 610afc1d924512eeb7797add9e5f9455 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2744842-IE8\mshtml.dll : 6.008.320 : 07/02/2012 07:39 PM : a73ef51cb4d047ac0831d3bdb9036149 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2761465-IE8\mshtml.dll : 6.008.832 : 08/28/2012 05:05 PM : 685ac6f538b3d4ebe03f19877187b4df [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2792100-IE8\mshtml.dll : 6.009.856 : 01/06/2013 05:33 AM : 736266d91ba396ee6d17f4da20b35317 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2799329-IE8\mshtml.dll : 6.008.832 : 11/12/2012 08:55 PM : 8382463ad283ed95c83436988a5467e8 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2809289-IE8\mshtml.dll : 6.010.368 : 01/08/2013 09:26 PM : 4e791aff01e8b2673706b0e3d926b8b8 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB969897-IE8\mshtml.dll : 5.937.152 : 03/08/2009 09:41 AM : d469a0eba2ef5c6bee8065b7e3196e5e [Pos Repl] +-> C:\WINDOWS\ie8updates\KB972260-IE8\mshtml.dll : 5.936.128 : 05/13/2009 09:02 AM : c671f2c4655b3eb04a07cf04c961dd2d [Pos Repl] +-> C:\WINDOWS\ie8updates\KB974455-IE8\mshtml.dll : 5.937.152 : 07/19/2009 03:11 PM : 5267eceac80a826f6fc8f092022140db [Pos Repl] +-> C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll : 5.939.712 : 10/22/2009 03:16 AM : 6fff8d10d0ef5dbe46b7d035fa4119e4 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB976749-IE8\mshtml.dll : 5.940.224 : 08/29/2009 03:54 AM : 877ec4221f6af1f51e24110e064cc71e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mshtml.dll : 3.066.880 : 04/14/2008 03:22 AM : 72ae55a9ffbc60650339cb12e35c7dd5 [Pos Repl] +-> C:\WINDOWS\SoftwareDistribution\Download\6288fd9db6b86408ce7baea2379e011e\SP3GDR\mshtml.dll : 5.936.128 : 05/13/2009 00:02 AM : c671f2c4655b3eb04a07cf04c961dd2d [Pos Repl] +-> C:\WINDOWS\SoftwareDistribution\Download\6288fd9db6b86408ce7baea2379e011e\SP3QFE\mshtml.dll : 5.936.128 : 05/13/2009 00:07 AM : cf58dca3ed911c4c942b941d4ecf6862 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mshtml.dll : 6.011.392 : 03/01/2013 03:28 AM : e30201393d0444eafba113bf929c3a84 [Pos Repl] * C:\WINDOWS\System32\msimg32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msimg32.dll : 4.608 : 08/04/2004 02:00 PM : 3b8a9c87027bf8d6d156be5fa6e8ebc6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msimg32.dll : 4.608 : 04/14/2008 03:22 AM : dc4e223f5813150073fb5cc63d13293b [Pos Repl] * C:\WINDOWS\System32\mspmsnsv.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\mspmsnsv.dll : 52.736 : 08/04/2004 02:00 PM : d68cc4ebf7b03fd770d5962295ad814e [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mspmsnsv.dll : 52.736 : 04/14/2008 03:22 AM : 6e18978b749f0696a774de3f2cb142dd [Pos Repl] * C:\WINDOWS\System32\msprivs.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msprivs.dll : 48.128 : 08/04/2004 02:00 PM : 7e349cadc5b20024dbfa60973ef617cc [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msprivs.dll : 48.128 : 04/13/2008 06:23 PM : c6bb1d1500db4a0e224cb65e6c7e8a80 [Pos Repl] * C:\WINDOWS\System32\msvcrt.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll : 343.040 : 08/04/2004 02:00 PM : b30baa48e5063e71c76280e34e7e4802 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll : 343.040 : 04/14/2008 06:22 AM : c6a6e53a0c34ec87883137a6cb87ae5e [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll : 322.560 : 08/04/2004 02:00 PM : 4200be3808f6406dbe45a7b88dae5035 [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll : 343.040 : 08/04/2004 02:00 PM : 365b3c43810e1cf41b3be1e7180f583b [Pos Repl] +-> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll : 343.040 : 04/14/2008 02:20 AM : c536aad8a71608fe33cd956214edd366 [Pos Repl] * C:\WINDOWS\System32\mswsock.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll : 247.296 : 06/20/2008 07:43 PM : 4aa50627b01c0e9c6b4c6bd3af648f12 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll : 247.296 : 06/20/2008 07:43 PM : 4aa50627b01c0e9c6b4c6bd3af648f12 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll : 247.296 : 08/04/2004 02:00 PM : b36e08f680bae4dfc5c24d00a2dfc9e7 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2509553$\mswsock.dll : 247.296 : 06/20/2008 07:46 PM : acd8bd448a74f344d46fcaf21bab92af [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll : 247.296 : 04/14/2008 07:22 AM : f12b9d9a069331877d006cc81b4735f9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mswsock.dll : 247.296 : 04/14/2008 02:22 AM : f12b9d9a069331877d006cc81b4735f9 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mswsock.dll : 247.296 : 06/20/2008 06:02 PM : f1b67b6b0751ae0e6e964b02821206a3 [Pos Repl] * C:\WINDOWS\System32\netlogon.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll : 407.040 : 08/04/2004 02:00 PM : d27395edcd3416afd125a9370dcb585c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\netlogon.dll : 407.040 : 04/14/2008 06:22 AM : 0098d35f91deab9c127360a877f2cf84 [Pos Repl] * C:\WINDOWS\System32\netman.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\netman.dll : 198.144 : 08/04/2004 02:00 PM : cdf4da6b518105343fe9e8afbbf8fbf4 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\netman.dll : 198.144 : 04/14/2008 06:22 AM : e6d88f1f6745bf00b57e7855a2ab696c [Pos Repl] * C:\WINDOWS\System32\ntkrnlpa.exe [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe : 2.071.680 : 12/09/2010 08:44 PM : 7b1ca0a6c042e4b90a18b49ed73cba76 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe : 2.071.680 : 10/26/2011 08:49 AM : add968b4d4a095407fd5b915f89ba8b5 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe : 2.071.424 : 04/11/2012 03:50 PM : c3124524eddda49504ae558352440f65 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe : 2.071.424 : 05/05/2012 03:14 AM : 339d9da45f631c9d9d7132d9f6957943 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntkrnlpa.exe : 2.071.936 : 08/23/2012 03:26 AM : 3e6f700819774fd290fa8a79465e41da [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2799494\SP3QFE\ntkrnlpa.exe : 2.072.064 : 01/07/2013 03:23 AM : 02cfd7c5e7f3ec63d6754d6b259a3bb6 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe : 2.068.480 : 02/09/2009 03:14 AM : 1f9da92672b8b5720c5fb1e87d8f249f [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe : 2.068.352 : 08/14/2008 07:22 PM : c789b5aea9ab71c5bef6dd568f744842 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe : 2.068.480 : 08/04/2009 10:50 PM : c50ed62bb5cdc5ad4f3985ed39c6ae87 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe : 2.059.136 : 08/04/2004 02:00 PM : ce41fc4c06499a389d39b301879535fb [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2393802$\ntkrnlpa.exe : 2.068.352 : 08/04/2009 07:26 PM : 602a85b23e5d9e6402d7205afbe6feb4 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2633171$\ntkrnlpa.exe : 2.071.680 : 12/09/2010 04:13 PM : 59bcd807f5fc0ab291e9ea1e2cb598b1 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2676562$\ntkrnlpa.exe : 2.071.680 : 10/26/2011 04:49 AM : 525c18123e6faf032e3853a4b9d8f255 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2707511$\ntkrnlpa.exe : 2.071.424 : 04/11/2012 03:51 PM : fcdfee91e13e7a2433b053a53645eb39 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2724197$\ntkrnlpa.exe : 2.071.424 : 05/05/2012 03:14 AM : 0a7bfa15d9f9432db882cd2a174e7f7f [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2799494$\ntkrnlpa.exe : 2.071.936 : 08/23/2012 03:26 AM : 683cceef613ab24d24c9a764c79a80f2 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe : 2.068.352 : 08/14/2008 03:19 PM : 326c258774eb791e78fea8a9e14d5c3e [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956841$\ntkrnlpa.exe : 2.068.224 : 04/14/2008 03:00 AM : e51980ef65ced4490a7395a06c08da34 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB971486$\ntkrnlpa.exe : 2.068.352 : 02/10/2009 06:03 PM : 321917cff934663c48c1e91a930e5d71 [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe : 2.072.064 : 01/07/2013 06:24 AM : 45e18f3fda02b6138048e6049f480ee8 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe : 2.068.224 : 04/14/2008 06:00 AM : e51980ef65ced4490a7395a06c08da34 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ntkrnlpa.exe : 2.072.064 : 01/07/2013 06:24 AM : 45e18f3fda02b6138048e6049f480ee8 [Pos Repl] * C:\WINDOWS\System32\ntmssvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll : 438.272 : 08/04/2004 02:00 PM : 428aa946a8d9f32dbb4260c8e6e13377 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll : 438.272 : 04/14/2008 06:22 AM : 56af4064996fa5bac9c449b1514b4770 [Pos Repl] * C:\WINDOWS\System32\ntoskrnl.exe [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe : 2.195.072 : 12/09/2010 04:14 PM : 2a5a8be47e1f8e55520fb4031e21d129 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe : 2.195.072 : 10/26/2011 04:49 AM : 43ba9f58fd87bbf57f958c06241f2c9c [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe : 2.194.944 : 04/11/2012 03:50 PM : 35bec26067274ccfe4be16ca22e54557 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe : 2.194.944 : 05/05/2012 03:14 AM : c11516e90f6d8c45329a070429392a04 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2724197\SP3QFE\ntoskrnl.exe : 2.195.328 : 08/23/2012 03:26 AM : def6103237bb417d4082db5077837853 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2799494\SP3QFE\ntoskrnl.exe : 2.195.456 : 01/07/2013 03:23 AM : e3c3a9f90c77aee8f70650109963e52d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe : 2.191.488 : 02/10/2009 06:12 PM : d3453310fc92736e674ffdc6e3f455b7 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe : 2.191.488 : 08/14/2008 07:22 PM : 59282efe7147c011530e51ff92ba86ac [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe : 2.191.616 : 08/04/2009 07:20 PM : 4b86421f2d85d9a4ecb06885c40b8eeb [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe : 2.183.296 : 08/04/2004 02:00 PM : dc888c9c4ca0eea7a3cb7e6b610f75c7 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2393802$\ntoskrnl.exe : 2.191.488 : 08/04/2009 10:56 PM : 121aedce2f5a65d63c9d51b9198fa7b3 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2633171$\ntoskrnl.exe : 2.195.072 : 12/09/2010 04:13 PM : b7ef0123c501ffd1b47a86b44e710fd2 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2676562$\ntoskrnl.exe : 2.195.072 : 10/26/2011 04:49 AM : 8b4fc0bca12cabfde8c2e49b1b9a65e6 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2707511$\ntoskrnl.exe : 2.194.944 : 04/11/2012 03:51 PM : 0d7dd9f68fa1b5d4a5571b0d53a8df48 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2724197$\ntoskrnl.exe : 2.194.944 : 05/05/2012 03:14 AM : 6005b4877e0e9afb992615a0d5130d11 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2799494$\ntoskrnl.exe : 2.195.200 : 08/23/2012 03:26 AM : 777ac14497340cdcfc12438904528e67 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe : 2.191.488 : 08/14/2008 03:19 PM : 934fbea25f8de017abfc6169b8446d94 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe : 2.191.360 : 04/14/2008 03:00 AM : 354c9291513bce4d0ed6b0c6a15470f8 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB971486$\ntoskrnl.exe : 2.191.360 : 02/09/2009 03:21 AM : fee1600b76b196d9993cd468da7524f7 [Pos Repl] +-> C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe : 2.195.328 : 01/07/2013 06:24 AM : f08d9da24db0c21cf8d9c0e2c6cf5241 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe : 2.191.360 : 04/14/2008 06:00 AM : 354c9291513bce4d0ed6b0c6a15470f8 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ntoskrnl.exe : 2.195.328 : 01/07/2013 06:24 AM : f08d9da24db0c21cf8d9c0e2c6cf5241 [Pos Repl] * C:\WINDOWS\System32\oakley.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB974392\SP3QFE\oakley.dll : 271.360 : 10/13/2009 07:38 AM : 2f0ccafa73557d60f472b9c253efe556 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\oakley.dll : 267.776 : 08/04/2004 02:00 PM : 8511c2e6d57af8ef7dfc7e5bda09ffe4 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB974392$\oakley.dll : 271.360 : 04/14/2008 02:22 AM : a3101c65133f0e3fcff3aba073bba89c [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\oakley.dll : 271.360 : 04/14/2008 06:22 AM : a3101c65133f0e3fcff3aba073bba89c [Pos Repl] +-> C:\WINDOWS\system32\dllcache\oakley.dll : 271.360 : 10/13/2009 06:32 AM : d8fe1a413745c0677d9ab7211675089d [Pos Repl] * C:\WINDOWS\System32\ole32.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2624667\SP3QFE\ole32.dll : 1.289.216 : 11/01/2011 05:05 PM : d684c601ec79d9543d50eb2db124fe78 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll : 1.289.216 : 07/16/2010 02:03 PM : b3d7633cf83b09042a49810a7a72aded [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\ole32.dll : 1.281.536 : 08/04/2004 02:00 PM : d700449ad3045e81680c25a79620a171 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2624667$\ole32.dll : 1.288.192 : 07/16/2010 02:05 PM : b28af7976f2d8109c0dc2cf2460bedc2 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB979687$\ole32.dll : 1.287.680 : 04/14/2008 02:22 AM : e08d638ba3d3dd6df6e31216ab66ae0b [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ole32.dll : 1.287.680 : 04/14/2008 06:22 AM : e08d638ba3d3dd6df6e31216ab66ae0b [Pos Repl] +-> C:\WINDOWS\system32\dllcache\ole32.dll : 1.288.704 : 11/01/2011 05:07 PM : 6ad6619e7523e27b771569c26f408f0a [Pos Repl] * C:\WINDOWS\System32\olepro32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll : 83.456 : 08/04/2004 02:00 PM : 1404d3dd4ed4f5e2a938b43794049a81 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\olepro32.dll : 84.992 : 04/14/2008 05:22 AM : 5d7f5a46975d2e59a6fecb6c231d200f [Pos Repl] * C:\WINDOWS\System32\perfctrs.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll : 41.984 : 08/04/2004 02:00 PM : 007bfd01772b5202c5ce4f208a2f3f46 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll : 41.984 : 04/14/2008 05:22 AM : c47fd93010649ac0d79022d9b69adbe4 [Pos Repl] * C:\WINDOWS\System32\powrprof.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll : 17.408 : 08/04/2004 02:00 PM : 5604574d490b798bd9a946b021a766ad [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\powrprof.dll : 17.408 : 04/14/2008 05:22 AM : c8c0bdabc966b6c24d337df0a0a399e1 [Pos Repl] * C:\WINDOWS\System32\psbase.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\psbase.dll : 99.328 : 08/04/2004 02:00 PM : 30abb9b8ec600ed7d6e437475d310e40 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\psbase.dll : 99.328 : 04/14/2008 05:22 AM : ab0b97a27aa94ab681f0b0dd7c1b5e89 [Pos Repl] * C:\WINDOWS\System32\pstorsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\pstorsvc.dll : 34.816 : 08/04/2004 02:00 PM : d4c9d1f94087a1fb574319c62953a2a8 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\pstorsvc.dll : 34.816 : 04/14/2008 05:22 AM : 1f975474a91306beff9a2314a88db3bf [Pos Repl] * C:\WINDOWS\System32\qmgr.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll : 382.464 : 08/04/2004 02:00 PM : 3a5e54a9ab96ef2d273b58136fb58efe [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\qmgr.dll : 409.088 : 04/14/2008 05:22 AM : d6f603772a789bb3228f310d650b8bd1 [Pos Repl] +-> C:\WINDOWS\system32\bits\qmgr.dll : 409.088 : 04/14/2008 05:22 AM : d6f603772a789bb3228f310d650b8bd1 [Pos Repl] * C:\WINDOWS\System32\rasadhlp.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll : 8.192 : 08/04/2004 02:00 PM : 84028e2ebe7a25494766673a5ff4b304 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll : 7.680 : 04/14/2008 05:22 AM : 469fed8597896db77b49384be90e2e0a [Pos Repl] * C:\WINDOWS\System32\regsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll : 59.904 : 08/04/2004 02:00 PM : ae81cf7d7cfa79cd03e8fb99788a7e09 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\regsvc.dll : 59.904 : 04/14/2008 05:22 AM : e4cd1f3d84e1c2ca0b8cf7501e201593 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\regsvc.dll : 59.904 : 04/14/2008 05:22 AM : e4cd1f3d84e1c2ca0b8cf7501e201593 [Pos Repl] * C:\WINDOWS\System32\rpcss.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll : 401.408 : 02/09/2009 02:54 AM : d3d765e8455a961ae567b408f767d4f9 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll : 395.776 : 08/04/2004 02:00 PM : 9f28ff58d6d67b123272869d89d14004 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll : 399.360 : 04/14/2008 02:22 AM : e970c2296916bf4a2f958680016fe312 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\rpcss.dll : 399.360 : 04/14/2008 05:22 AM : e970c2296916bf4a2f958680016fe312 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\rpcss.dll : 401.408 : 02/09/2009 05:51 AM : 3127afbf2c1ed0ab14a1bbb7aaecb85b [Pos Repl] * C:\WINDOWS\System32\scecli.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\scecli.dll : 186.880 : 08/04/2004 02:00 PM : 64dc26b3cf7bccad431ce360a4c625d5 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\scecli.dll : 187.904 : 04/14/2008 05:22 AM : 5132443df6fc3771a17ab4ae55dcbc28 [Pos Repl] * C:\WINDOWS\System32\schannel.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2541763\SP3QFE\schannel.dll : 151.552 : 04/29/2011 07:23 PM : 7306bce0c8e3c7e9765361942fd75041 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2585542\SP3QFE\schannel.dll : 152.064 : 11/16/2011 03:20 PM : 8ed2745e8df99a6cf78cd5d0c26fa664 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2655992\SP3QFE\schannel.dll : 153.088 : 06/04/2012 03:31 AM : ea14be912e25cc1b78565c44c7975bd3 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll : 144.896 : 12/05/2008 03:58 AM : 86e0abfe201cab3646cdafaa5e15926c [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll : 147.456 : 06/25/2009 03:41 AM : 6e062e339a1fe5b91f5d2bb20b2dcdfb [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB980436\SP3QFE\schannel.dll : 149.504 : 06/30/2010 02:23 PM : ec0771160f2c762f05b1bc738e5fc9ec [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\schannel.dll : 144.896 : 08/04/2004 02:00 PM : aabe5c4ca82b854185dca397c884c852 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2541763$\schannel.dll : 149.504 : 06/30/2010 02:28 PM : c6ba366788f1879bac6f989d515b3c73 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2585542$\schannel.dll : 151.552 : 04/29/2011 07:25 PM : b0de299c84c520fa0bf7fc65c6968648 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2655992$\schannel.dll : 152.064 : 11/16/2011 03:21 PM : ec091af0563f9a8fa4106ab88b42e796 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB960225$\schannel.dll : 144.384 : 04/14/2008 03:22 AM : fea07ef8de796b6956ed23933675cbe8 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB968389$\schannel.dll : 144.896 : 12/05/2008 03:55 AM : d96eda09679186b9dc3398af2a4f95f7 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB980436$\schannel.dll : 147.456 : 06/25/2009 03:25 AM : bcea567e33138fcd13f938f3d5b535a0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\schannel.dll : 144.384 : 04/14/2008 05:22 AM : fea07ef8de796b6956ed23933675cbe8 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\schannel.dll : 152.576 : 06/04/2012 05:32 AM : 3eb54e4861aa41989bd60fc934025cff [Pos Repl] * C:\WINDOWS\System32\schedsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll : 192.000 : 08/04/2004 02:00 PM : d5e73842f38e24457c63fef8ceffbe19 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll : 193.536 : 04/14/2008 05:22 AM : a050194a44d7fa8d7186ed2f4e8367ae [Pos Repl] * C:\WINDOWS\System32\services.exe [NoSig] +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe : 111.104 : 02/09/2009 02:14 AM : f0a7d59af279326528715b206669b86c [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\services.exe : 108.544 : 08/04/2004 02:00 PM : edb6b81761bd60f32f740bbc40afb676 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956572$\services.exe : 109.056 : 04/14/2008 02:22 AM : 4bb6a83640f1d1792ad21ce767b621c6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\services.exe : 109.056 : 04/14/2008 05:22 AM : 4bb6a83640f1d1792ad21ce767b621c6 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\services.exe : 111.104 : 02/09/2009 05:21 AM : a3edbe9053889fb24ab22492472b39dc [Pos Repl] * C:\WINDOWS\System32\setupapi.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\setupapi.dll : 988.672 : 08/04/2004 02:00 PM : 3b911a86802438953db6f0a94425c572 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\setupapi.dll : 989.696 : 04/14/2008 05:52 AM : 5b04bc7c5af0e2a0a8ec402b2fcbd9e5 [Pos Repl] * C:\WINDOWS\System32\sfc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sfc.dll : 5.120 : 08/04/2004 02:00 PM : f62934bc94299083ebfc8810242d8640 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sfc.dll : 5.120 : 04/14/2008 05:22 AM : 44161a59dc33ac2ea9c95438adfffb7f [Pos Repl] * C:\WINDOWS\System32\sfcfiles.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll : 1.548.288 : 08/04/2004 02:00 PM : 80f7b7198b869c07c98627af812d68b6 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll : 1.571.840 : 04/14/2008 05:22 AM : 5251425b86ea4a3532b8bb8d14044e61 [Pos Repl] * C:\WINDOWS\System32\shsvcs.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll : 135.680 : 07/28/2009 02:09 AM : 927666f4228e3fbbc3d1171581dc8bdc [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll : 135.168 : 08/04/2004 02:00 PM : bac5f7f0c2b8c1b9832594851e0f9914 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB971029$\shsvcs.dll : 135.168 : 04/14/2008 02:22 AM : 40602ebfbe06aa075c8e4560743f6883 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll : 135.168 : 04/14/2008 05:22 AM : 40602ebfbe06aa075c8e4560743f6883 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\shsvcs.dll : 135.680 : 07/28/2009 05:16 AM : 2db7d303c36ddd055215052f118e8e75 [Pos Repl] * C:\WINDOWS\System32\smss.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\smss.exe : 50.688 : 08/04/2004 02:00 PM : f529c489bf4a8921dfed80638ecda656 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\smss.exe : 50.688 : 04/14/2008 05:23 AM : b3efde4b2cc3ac949bcde7a89712afcf [Pos Repl] * C:\WINDOWS\System32\spoolsv.exe [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe : 58.880 : 08/17/2010 03:19 PM : 258dd5d4283fd9f9a7166be9ae45ce73 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe : 57.856 : 08/04/2004 02:00 PM : 54e7113a4bd696e430919bcaf5c65e06 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB2347290$\spoolsv.exe : 57.856 : 04/14/2008 02:23 AM : 39356a9cdb6753a6d13a4072a9f5a4bb [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe : 57.856 : 04/14/2008 05:23 AM : 39356a9cdb6753a6d13a4072a9f5a4bb [Pos Repl] +-> C:\WINDOWS\system32\dllcache\spoolsv.exe : 58.880 : 08/17/2010 03:17 PM : 60784f891563fb1b767f70117fc2428f [Pos Repl] * C:\WINDOWS\System32\srsvc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll : 171.008 : 08/04/2004 02:00 PM : 015f302c4cf961f20c3f98f3a7ca7917 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\srsvc.dll : 171.520 : 04/14/2008 03:22 AM : fe77a85495065f3ad59c5c65b6c54182 [Pos Repl] * C:\WINDOWS\System32\ssdpsrv.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll : 71.680 : 08/04/2004 02:00 PM : 6fa03b462b2fffe2627171b7fe73ee29 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll : 71.680 : 04/14/2008 03:22 AM : 4df5b05dfaec29e13e1ed6f6ee12c500 [Pos Repl] * C:\WINDOWS\System32\svchost.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\svchost.exe : 14.336 : 08/04/2004 02:00 PM : 65a819b121eb6fdab4400ea42bdffe64 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\svchost.exe : 14.336 : 04/14/2008 03:23 AM : 4fbc75b74479c7a6f829e0ca19df3366 [Pos Repl] * C:\WINDOWS\System32\tapisrv.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll : 246.272 : 08/04/2004 02:00 PM : 4584e2a5fe662ab3e7c32936e1449043 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll : 249.856 : 04/14/2008 03:22 AM : 05903cac4b98908d55ea5774775b382e [Pos Repl] * C:\WINDOWS\System32\termsrv.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll : 297.472 : 08/04/2004 02:00 PM : 1850bc10de5dcccede063fc2d0f2ceda [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\termsrv.dll : 297.472 : 04/14/2008 03:22 AM : b7de02c863d8f5a005a7bf375375a6a4 [Pos Repl] * C:\WINDOWS\System32\upnphost.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll : 185.856 : 08/04/2004 02:00 PM : 09d4a2d7c5a8abec227d118765faaddf [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\upnphost.dll : 186.880 : 04/14/2008 03:22 AM : 1dfd8975d8c89214b98d9387c1125b49 [Pos Repl] * C:\WINDOWS\System32\user32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\user32.dll : 578.560 : 08/04/2004 02:00 PM : 56785fd5236d7b22cf471a6da9db46d8 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\user32.dll : 580.096 : 04/14/2008 03:22 AM : b0050cc5340e3a0760dd8b417ff7aebd [Pos Repl] * C:\WINDOWS\System32\userinit.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\userinit.exe : 25.088 : 08/04/2004 02:00 PM : d1e53dc57143f2584b1dd53b036c0633 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\userinit.exe : 26.624 : 04/14/2008 03:23 AM : 788f95312e26389d596c0fa55834e106 [Pos Repl] * C:\WINDOWS\System32\usp10.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll : 406.016 : 04/16/2010 05:29 PM : eb2ad9c7dade6c63f5f933881ba2a430 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\usp10.dll : 406.528 : 08/04/2004 02:00 PM : e4e40eaff464ebe7752bad3d82af1715 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB981322$\usp10.dll : 406.016 : 04/14/2008 02:22 AM : 052f968390a85d37d5ee8be3ab2a83a2 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\usp10.dll : 406.016 : 04/14/2008 03:22 AM : 052f968390a85d37d5ee8be3ab2a83a2 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\usp10.dll : 406.016 : 04/16/2010 05:36 PM : 45954afb7ae6e29b23c56b830c820a11 [Pos Repl] * C:\WINDOWS\System32\UxTheme.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll : 219.648 : 08/04/2004 02:00 PM : c18e221634400c608209a123f2a10283 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\uxtheme.dll : 219.136 : 04/14/2008 05:22 AM : a00674b8acb5f8726e5ad35202e091d4 [Pos Repl] * C:\WINDOWS\System32\version.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\version.dll : 18.944 : 08/04/2004 02:00 PM : 4ef2fdc0a085c8339ed4d9c59ce8fc60 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\version.dll : 18.944 : 04/14/2008 05:22 AM : f86000634319f71535bce6b06995ee99 [Pos Repl] * C:\WINDOWS\System32\w32time.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\w32time.dll : 176.640 : 08/04/2004 02:00 PM : c6d874cd2a5b83cd11cdebd28a638584 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\w32time.dll : 177.152 : 04/14/2008 05:22 AM : 7b353059e665f8b7ad2bbeaef597cf45 [Pos Repl] * C:\WINDOWS\System32\wbem\wmiprvse.exe [NoSig] +-> C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe : 227.840 : 02/06/2009 05:15 AM : f520ab392d58c0a1070268032d809382 [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe : 218.112 : 08/04/2004 02:00 PM : 971132068954f67ff53d4b82fcad844c [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe : 218.112 : 04/14/2008 02:23 AM : f3a045bc55e307705665c263d91e8c88 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe : 218.112 : 04/14/2008 05:23 AM : f3a045bc55e307705665c263d91e8c88 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\wmiprvse.exe : 227.840 : 02/06/2009 05:10 AM : 798a9e6828997eef4517ada8a2259831 [Pos Repl] * C:\WINDOWS\System32\wdigest.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\wdigest.dll : 54.272 : 06/25/2009 05:41 AM : 884cdbf0fab65a0d744926909100c46d [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll : 49.152 : 08/04/2004 02:00 PM : 695045eb7b4e09022e860bdab86336c6 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB968389$\wdigest.dll : 49.152 : 04/14/2008 02:22 AM : 22d7e027dd7b81edaa0bcdcc02449b86 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wdigest.dll : 49.152 : 04/14/2008 05:22 AM : 22d7e027dd7b81edaa0bcdcc02449b86 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\wdigest.dll : 54.272 : 06/25/2009 05:25 AM : 279c67c6560943b5d0653a0d14bad4c3 [Pos Repl] * C:\WINDOWS\System32\wiaservc.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll : 333.824 : 08/04/2004 02:00 PM : 7e751068ada60fc77638622e86a7cd9e [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll : 334.336 : 04/14/2008 05:22 AM : bc2c5985611c5356b24aeb370953ded9 [Pos Repl] * C:\WINDOWS\System32\wininet.dll [NoSig] +-> C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll : 919.552 : 12/21/2010 05:51 AM : b5ff24b723725959d6ae0904f53f74bc [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll : 919.552 : 02/23/2011 05:25 AM : 0e05446f197207a173e06a27c70a1df7 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll : 919.552 : 04/25/2011 06:04 PM : 69e2c6e3430c34698f72e735646b346e [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll : 919.552 : 06/23/2011 08:29 PM : 11c398190972b60689ca0e61fec75c42 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll : 919.552 : 08/23/2011 08:40 AM : 15f8399c03b9717ac8f5722649cb017d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll : 919.552 : 11/04/2011 08:12 PM : c87afd199fb2baa77badc2974815a7a4 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll : 919.552 : 12/17/2011 08:42 PM : 48f111bc456924b4f131e9ff11b4925e [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2675157-IE8\SP3QFE\wininet.dll : 919.552 : 03/01/2012 08:57 AM : 4cf6dbf445d93cab7986f8eb90f27dec [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2699988-IE8\SP3QFE\wininet.dll : 920.064 : 05/16/2012 05:04 PM : fa932fb2522c5b8436df9d2290f56a98 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2722913-IE8\SP3QFE\wininet.dll : 920.064 : 07/02/2012 07:38 PM : 002e8799a0d811a9f611ffa72b0a405d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2744842-IE8\SP3QFE\wininet.dll : 920.064 : 08/28/2012 05:04 PM : e51889f140ed2b32e986611e69de148b [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2761465-IE8\SP3QFE\wininet.dll : 920.064 : 11/01/2012 01:15 PM : 55da1f687d28274a8257b78f72907300 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2792100-IE8\SP3QFE\wininet.dll : 920.064 : 12/26/2012 09:05 PM : a852ccaa50a1571e7c05f16856a386c0 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB2809289-IE8\SP3QFE\wininet.dll : 920.064 : 02/05/2013 08:55 PM : 08ae726d7115db2cce2d3c7ce12c5766 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll : 672.256 : 04/21/2008 08:24 AM : 645a4a4884eb5eb8453c01531fcbec3a [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll : 827.392 : 04/23/2008 08:19 AM : 751efbec900cc4e4b41db6e522b67d41 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll : 827.904 : 06/23/2008 05:37 PM : 4f08e6d8c9dda8ed4346a1857849adb3 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll : 827.904 : 08/26/2008 05:08 AM : e1f83bcc84d6223965d35ab06b63bbeb [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll : 827.904 : 10/16/2008 09:30 PM : 5a1f997ec096ef26f3a3880347f5f9d8 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll : 827.904 : 12/21/2008 09:45 AM : 2b5ae9acd86e1b8b86d62e153de130ab [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll : 828.416 : 03/03/2009 09:13 AM : af68c6f857eb438770e86ffee013f04d [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll : 828.928 : 04/29/2009 09:34 AM : f5d59b0b453f8af7adc7afb34d39c441 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll : 915.456 : 05/13/2009 09:07 AM : 13521d5b5a6f1a47459909d32409a369 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll : 915.456 : 07/03/2009 07:00 PM : 3b6d4582fada3948593c56f96964fefa [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll : 916.480 : 08/29/2009 07:49 AM : 11da6b380b94baabcfd0854526afc602 [Pos Repl] +-> C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll : 916.480 : 10/29/2009 07:36 AM : 0a4248e124c88edd1e0a93ae93e4db6a [Pos Repl] +-> C:\WINDOWS\$NtServicePackUninstall$\wininet.dll : 662.016 : 08/04/2004 02:00 PM : b1a1da99c4a6ebfd59f86a453bf02f39 [Pos Repl] +-> C:\WINDOWS\$NtUninstallKB950759$\wininet.dll : 671.744 : 04/14/2008 02:22 AM : b4aee98a48917b274facfb78bbe0bc84 [Pos Repl] +-> C:\WINDOWS\ie7\wininet.dll : 671.744 : 04/21/2008 02:42 AM : 11d26d87e041000ea4c0128cd0010f7a [Pos Repl] +-> C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll : 818.688 : 08/13/2007 06:54 PM : a4a0fc92358f39538a6494c42ef99fe9 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll : 826.368 : 04/23/2008 06:16 AM : a5795741e53f72c4a2736bc51007a5d5 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB956390-IE7\wininet.dll : 826.368 : 06/23/2008 06:14 PM : 7b28d5c8c5c075037f864256e4044b83 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB958215-IE7\wininet.dll : 826.368 : 08/26/2008 06:57 AM : b905f284f45675f3019413dff055c666 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB961260-IE7\wininet.dll : 826.368 : 10/16/2008 10:04 PM : cbaaebdfc6f9291d2d31e36fe1ad19ac [Pos Repl] +-> C:\WINDOWS\ie7updates\KB963027-IE7\wininet.dll : 826.368 : 12/20/2008 11:31 PM : c3d4047626f8cc8ec7dd7558fa5cc2e2 [Pos Repl] +-> C:\WINDOWS\ie7updates\KB969897-IE7\wininet.dll : 826.368 : 03/03/2009 11:03 AM : 9f434e15a82d1322fb6860e317783e57 [Pos Repl] +-> C:\WINDOWS\ie8\wininet.dll : 827.392 : 04/29/2009 02:42 AM : b7e6d6663cb6bc05316feb978217360d [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll : 916.480 : 10/29/2009 11:40 AM : 3426fbe495d1825d5c09c84d1e9361c1 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll : 916.480 : 12/21/2010 11:52 AM : 4e6109d5651fab2d9c7acebfa5e49076 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2530548-IE8\wininet.dll : 916.480 : 02/23/2011 11:05 AM : a2b8733a4fb67717861cf97db1f03053 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2559049-IE8\wininet.dll : 916.480 : 04/25/2011 06:05 PM : 64f49d76dbeddc28c676af86a8613575 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2586448-IE8\wininet.dll : 916.480 : 06/23/2011 08:31 PM : 0bf4985026ef2b7f22b91b3a4a56e222 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2618444-IE8\wininet.dll : 916.480 : 08/23/2011 08:41 AM : 5f841994db0f2b3a3303f8e6adfdb13e [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2647516-IE8\wininet.dll : 916.992 : 11/04/2011 08:13 PM : 0bb4286d73ce2cf106f21c7d38c9f85a [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2675157-IE8\wininet.dll : 916.992 : 12/17/2011 08:43 PM : 4c4fa27d15c83b59b16ced7ded66e33d [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2699988-IE8\wininet.dll : 916.992 : 03/01/2012 08:00 AM : 9c4abc4869fb2eb0e6f38e27a536b325 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2722913-IE8\wininet.dll : 916.992 : 05/16/2012 05:07 PM : cb1b69a4306eae327de46277ca3ba9c9 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2744842-IE8\wininet.dll : 916.992 : 07/02/2012 07:39 PM : 0085d5288271fa641f95a5a1845c6512 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2761465-IE8\wininet.dll : 916.992 : 08/28/2012 05:05 PM : 8da5c02d2ca9c2266c6e1ed1628388ff [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2792100-IE8\wininet.dll : 916.992 : 11/01/2012 01:17 PM : 2edcbebcac154808d4bed260d1cc5b3e [Pos Repl] +-> C:\WINDOWS\ie8updates\KB2809289-IE8\wininet.dll : 916.480 : 12/26/2012 09:06 PM : 660331c8727eefe8fc21a8f028833824 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB969897-IE8\wininet.dll : 914.944 : 03/08/2009 09:34 AM : 6ce32f7778061ccc5814d5e0f282d369 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB972260-IE8\wininet.dll : 915.456 : 05/13/2009 09:02 AM : f85681c65ca3cd5d4b0e4ce88fdf6685 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB974455-IE8\wininet.dll : 915.456 : 07/03/2009 06:55 PM : 6e3e0c6060efc8b855dfcbc7ae18b377 [Pos Repl] +-> C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll : 916.480 : 08/29/2009 06:54 AM : 6b985f8e8ace6a6424be04a90c1e652a [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wininet.dll : 671.744 : 04/14/2008 06:22 AM : b4aee98a48917b274facfb78bbe0bc84 [Pos Repl] +-> C:\WINDOWS\SoftwareDistribution\Download\6288fd9db6b86408ce7baea2379e011e\SP3GDR\wininet.dll : 915.456 : 05/13/2009 00:02 AM : f85681c65ca3cd5d4b0e4ce88fdf6685 [Pos Repl] +-> C:\WINDOWS\SoftwareDistribution\Download\6288fd9db6b86408ce7baea2379e011e\SP3QFE\wininet.dll : 915.456 : 05/13/2009 00:07 AM : 13521d5b5a6f1a47459909d32409a369 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\wininet.dll : 916.480 : 02/05/2013 08:56 PM : a6e0e07c08c7ba620b7a098bbafa4208 [Pos Repl] * C:\WINDOWS\System32\winlogon.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe : 507.392 : 08/04/2004 02:00 PM : 2b6a0baf33a9918f09442d873848ff72 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\winlogon.exe : 513.024 : 04/14/2008 08:23 AM : f09a527b422e25c478e38caa0e44417a [Pos Repl] * C:\WINDOWS\System32\ws2_32.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll : 82.944 : 08/04/2004 02:00 PM : d569240a22421d5f670bb6fb6dd522b5 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll : 82.432 : 04/14/2008 08:22 AM : 6a35e2d6f5f052c84ec2ceb296389439 [Pos Repl] * C:\WINDOWS\System32\ws2help.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll : 19.968 : 08/04/2004 02:00 PM : b3ada72d1e3e10a8f6430669dfc38ed0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\ws2help.dll : 19.968 : 04/14/2008 08:22 AM : c7d8a0517cbf16b84f657de87ebe9d4b [Pos Repl] * C:\WINDOWS\System32\wscntfy.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\wscntfy.exe : 13.824 : 08/04/2004 02:00 PM : 7d3e0beb62799112f5c9ff717d72bf29 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe : 13.824 : 04/14/2008 08:23 AM : edafbe25fb6480ce68f688ba691890dc [Pos Repl] +-> C:\WINDOWS\system32\dllcache\wscntfy.exe : 13.824 : 04/14/2008 08:23 AM : edafbe25fb6480ce68f688ba691890dc [Pos Repl] * C:\WINDOWS\System32\xmlprov.dll [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\xmlprov.dll : 129.536 : 08/04/2004 02:00 PM : 8302de1c64618d72346dd0034dbc5d9b [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll : 129.024 : 04/14/2008 08:22 AM : 0ada34871a2e1cd2caafed1237a47750 [Pos Repl] * C:\WINDOWS\explorer.exe [NoSig] +-> C:\WINDOWS\$NtServicePackUninstall$\explorer.exe : 1.035.264 : 08/04/2004 02:00 PM : 22fe1be02eadde1632e478e4125639e0 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\explorer.exe : 1.036.800 : 04/14/2008 08:22 AM : 418045a93cd87a352098ab7dabe1b53e [Pos Repl] Checking HOSTS File: * HOSTS file entries found: 127.0.0.1 localhost Program finished at: 04/04/2013 10:33:41 PM Execution time: 0 hours(s), 21 minute(s), and 10 seconds(s) Code:
ATTFilter RogueKiller V8.5.4 [Mar 18 2013] durch Tigzy mail: tigzyRK<at>gmail<dot>com mail : tigzyRK<at>gmail<dot>com Kommentare : hxxp://www.geekstogo.com/forum/files/file/413-roguekiller/ Webseite : hxxp://tigzy.geekstogo.com/roguekiller.php Blog : hxxp://tigzyrk.blogspot.com/ Betriebssystem : Windows XP (5.1.2600 Service Pack 3) 32 bits version Gestartet in : Abgesicherter Modus Benutzer : Vrey [Admin Rechte] Funktion : Scannen -- Datum : 04/04/2013 22:42:34 | ARK || FAK || MBR | ¤¤¤ Böswillige Prozesse : 0 ¤¤¤ ¤¤¤ Registry-Einträge : 3 ¤¤¤ [RUN][Rogue.AntiSpy-ST] HKCU\[...]\RunOnce : E05156BC9458D7280000E0507671DCE7 (C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\E05156BC9458D7280000E0507671DCE7\E05156BC9458D7280000E0507671DCE7.exe) [-] -> GEFUNDEN [RUN][Rogue.AntiSpy-ST] HKUS\S-1-5-21-861567501-1844823847-682003330-1004[...]\RunOnce : E05156BC9458D7280000E0507671DCE7 (C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\E05156BC9458D7280000E0507671DCE7\E05156BC9458D7280000E0507671DCE7.exe) [-] -> GEFUNDEN [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> GEFUNDEN ¤¤¤ Bestimmte Dateien / Ordner: ¤¤¤ ¤¤¤ Treiber : [NICHT GELADEN] ¤¤¤ ¤¤¤ Infektion : Rogue.AntiSpy-ST ¤¤¤ ¤¤¤ Hosts-Datei: ¤¤¤ --> C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 localhost ¤¤¤ MBR überprüfen: ¤¤¤ +++++ PhysicalDrive0: WDC WD400VE-75HDT1 +++++ --- User --- [MBR] 78aabcc984a897c15350f4e851cba000 [BSP] ced6c93691bf7e8a28d1e162f6792cb5 : Windows XP MBR Code Partition table: 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 78 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 160650 | Size: 34993 Mo 2 - [XXXXXX] UNKNOWN (0xdb) [VISIBLE] Offset (sectors): 71826615 | Size: 3074 Mo User = LL1 ... OK! User = LL2 ... OK! +++++ PhysicalDrive1: SMI USB Device +++++ --- User --- [MBR] a0601257067ac7800b8a63ee60e5ea34 [BSP] 33a07a59d299ab4ea9f4ab0156f9d86f : Windows XP MBR Code Partition table: 0 - [ACTIVE] FAT32 (0x0b) [VISIBLE] Offset (sectors): 63 | Size: 7727 Mo User = LL1 ... OK! Error reading LL2 MBR! Abgeschlossen : << RKreport[1]_S_04042013_02d2242.txt >> RKreport[1]_S_04042013_02d2242.txt Ich hoffe das passt sowet! Viele Grüße,Tobi |
04.04.2013, 21:51 | #4 |
/// Malwareteam | AVA Soft-Virus Gut gemacht Kannst du jetzt wieder im Normalen Modus starten und Programme ausführen?
__________________ Keep Jazzing! DerJazzer Imperare sibi maximum imperium est. ©Seneca Wenn du uns unterstützen möchtest | http://www.anaesthesist-werden.de/ |
04.04.2013, 22:00 | #5 |
| AVA Soft-Virus Starten funktioniert, allerdings kann ich immernoch kein Programm öffnen. Wird sofort über die AVA-Soft geblockt. Müssen die bei roguekiller gefundenen Daten gelöscht werden? Liegen aktuell in quarantäne Grüße! Tobi |
04.04.2013, 22:16 | #6 |
/// Malwareteam | AVA Soft-Virus Nun, dann müssen wir andere Geschütze auffahren. Erstmal ein Test (sollte schnell gehen): Downloade Dir bitte exehelper von Raktor. Speichere die Datei auf dem Desktop. Doppelklick auf die exeHelper.com um das Tool zu starten. Es sollte ein schwarzes Fenster aufpoppen. Drücke nachdem das Tool fertig ist eine beliebige Taste um es zu schließen. Poste nun den Inhalt der exehelperlog.txt. ( Diese befindet sich dort, wo Du exehelper gespeichert hast. ) Gehts jetzt?
__________________ --> AVA Soft-Virus |
06.04.2013, 13:18 | #7 |
/// Malwareteam | AVA Soft-Virus Hallo, benötigst Du noch weiterhin Hilfe ? Sollte ich innerhalb der nächsten 24 Stunden keine Antwort von dir erhalten, werde ich dein Thema aus meinen Abos nehmen und bekomme dadurch keine Nachricht über neue Antworten. Das Verschwinden der Symptome bedeutet nicht, dass dein System schon sauber ist!
__________________ Keep Jazzing! DerJazzer Imperare sibi maximum imperium est. ©Seneca Wenn du uns unterstützen möchtest | http://www.anaesthesist-werden.de/ |
Themen zu AVA Soft-Virus |
aktuelle, experte, hoffe, laufe, log-files, poste, posten, programm, programme, rechner, thread, virus, windows, windows xp |