Virus qui ferme les scans

Bonjour a tous!

Voici mon problème, Jai un virus et je peux pas scanner avec aucun anti spyware/malware.

Jai essayé Spybot, aussitôt que je part le scan, ca crash au desktop. Malwarebytes aussi ca crash après 2 secondes après avoir parti le scan.
Hijackthis crash aussi 1 seconde avant d'avoir fini le scan.

jai scanné avec nod32, ca marche mais il trouve rien.


Jai même enlevé le disquedur et branché sur un autre PC pour runner Malwarebytes. Ca marche mais il trouve rien.

Avez vous des suggestions ? ( je veux pas formater )


Merci


edit:

jai oublié de mentionner, quand le programme crash. Je peux plus l'ouvrir. Le .exe ce transforme en fichier systeme en lecture seule impossible a deleter.

Salut Dca666


On va vérifier cela, télécharge RSIT (de random/random) sur le bureau ici :
http://images.malwareremoval.com/random/RSIT.exe

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenue des deux rapports, log.txt et info.txt(réduit dans la barre des tâches) à la fin de l’analyse

Les rapports sont dans le dossier ici C:\rsit


@++

Salut merci pour la réponse rapide

Cela ne fonctionne pas. Apres avoir fait continue, ca donne un erreur

Autolt Error

Line -1:

Error: Variable used without being declared.

Salut Dca666


Télécharge combofix.exe (de sUBs) sur le bureau :
Faire un clic droit sur ce lien :

http://subs.geekstogo.com/ComboFix.exe

Pour Internet Explorer

- Choisi Enregistrer la cible sous ...

Pour Firefox

- Choisi Enregistrer la cible du lien sous...


- Choisi le bureau comme lieu d'enregistrement

- Donne lui ce nom bibite.exe clique sur Enregistrer

Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


==> Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini. <==

Double clique sur bibite.exe, clique sur OUI et valide par Entrée

Il te sera demandé d’installer la console si elle n’est pas installer, clique sur NON

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\ Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++

Salut, Jai parti Combofix apres avoir désactivé nod32.
Apres une dizaine de minutes, ca ma dit:
Rebooting windows...
Acces refusé.
puis la les idones du desktop on disparue et ca resté la pour un bon 5 minutes. Donc jai redémarré avec le menu démarrer.
Au démarrage, ya un message d'erreur :
C:\windows\system32\CF562.exe

Windows ne parvient pas a accéder au périphérique, au chemin d'acces ou au fichier spécifié. Vous ne disposé peut-etre pas des autorisations appropriées pour avoir acces a l'élément.
( ca dit ca quand un scan crash puis jessaye d'ouvrir le programme a nouveau)

Jai fais OK au message d'erreur. Je n'ai pas trouvé de log dans c:\

Salut Dca666


Supprime Combofix de cette manière, clique sur le bouton démarrer/ Exécuter puis tape la commande où copier/coller : ComboFix /u

Supprime ce qui est en gras si présent :
C:\ComboFix
C:\Qoobox

-----


Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


==> Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini. <==



Télécharge combofix.exe (de sUBs) sur le bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Télécharge DDO (de Anthony5151) sur ton Bureau :
http://sd-1.archive-host.com/membres/up/7739387536519291/DDO.bat

Lance DDO.dat
Lis les informations données et appuie sur une touche pour continuer
Une autre fenêtre va apparaître : tape Combofix.exe et appuie sur Entrée

Combofix doit alors se lancer :

Il te sera demandé d’installer la console si elle n’est pas installer, clique sur NON

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\ Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++

Re-bonjour,

Ca fais la meme chose.
Encore acces refusé puis un message d'erreur : CF4035.exe
Jai toujours pas de log.....

Salut Dca666


Supprime le de nouveau avec la méthode donné plus haut et télécharge de nouveau mais cette fois renomme le dca.exe, essai en mode sans échec avec Combofix renommé.

Redémarre ton PC en mode sans échec :

Au redémarrage de ton PC tapote sur la touche F8 ou F5, sur l'écran suivant déplace toi avec les flèches de direction et choisis Mode sans échec. Choisis ta session habituelle et non la session Administrateur.


@++

bonjour

Dca666, n'utilisez plus le bouton "" Répondre mais le cadre de Réponse

Re-bonjour!!

ca fais exactement la meme chose en mode sans echec

Jai jamais vue une chose pareil O_o

Salut Dca666


Télécharge FindyKill (de Chiquitine29) sur le bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

Fais un clic droit sur ce lien ci haut, pour Internet Explorer
- Choisi Enregistrer la cible sous ...
Pour Firefox
- Choisi Enregistrer la cible du lien sous...

- Et choisi le bureau comme lieu d'enregistrement, double clique sur FindyKill.exe sur le bureau pour lancer l’installation

Branche tous tes supports amovibles (clefs USB, disque dur externe, carte flash etc..).


Double clique sur le raccourci de FindyKill sur le bureau.
Au menu principal, choisis l'option 1 (Recherche).

Poste le rapport a la fin de la recherche, le rapport ce trouve ici C:\ FindyKill.txt


@++

Bonjour! Merci pour la réponse, ca m'ouvre une fenetre de commande pour une demi seconde puis ca referme. Je re-double clic sur Findykill.exe puis ca me donne un message d'erreur: La création de certains fichiers a échoué.

Impossible de créer tools\echoX.exe




Merci

Salut Dca666


Télécharge Gmer et enregistre-le sur ton bureau.

Note : l'application portera un nom aléatoire. Indique-le moi dans ton prochain message.

- Déconnecte toi d'internet si possible et ferme tous les programmes, puis lance l'outil.
- Clique sur le bouton "Scan" sur la droite.

- Lorsque le scan est terminé, clic sur "Copy".
- Ouvre le bloc-note et clic sur le Menu Edition / Coller
- Le rapport doit alors apparaître.

- Enregistre le fichier sur ton bureau et copie/colle le contenu ici.


@++

Salut dédétraqué,

Jai fais scan, apres 5 minutes le programme a fermé tout seul. Il avait quelque ligne d'écrit dans le log d'ont une en rouge.. mais ca s'est fermé...

Salut Dca666


Supprime-le, télécharge de nouveau et refaire un scan, peut-être que cela sera la bonne.


@++

re-bonjour,

Ca referme encore.. rien a faire ca marche pas. Je sais pas si ca existe un programe qui lock un process pour pas qui ce face fermer ?

Salut Dca666


Télécharge Win32kDiag et enregistre-le sur ton bureau.

- Double-clique sur le fichier afin de lancer l'outil.
- Lorsque l'analyse sera terminée (cela peut prendre du temps), un fichier nommé Win32kDiag.txt sera créé sur ton Bureau.
- Ouvre-le puis copie/colle son contenu dans ton prochain message.


@++

Salut,


C'est toujours entrain de scanner.. ca prend beaucoup de temps hehe

Salut Dca666


On croise les doigts


@++

Salut Dédétraqué,

Jlai laissé roulé toute la nuit hehe

voici le log:

Log file is located at: C:\Documents and Settings\Michel Thibodeau\Bureau\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...



Cannot access: C:\WINDOWS\$NtUninstallKB824141$\user32.dll

[1] 2005-03-02 11:20:32 578048 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 08:50:30 579072 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll (Microsoft Corporation)

[1] 2007-03-08 08:37:50 578560 C:\WINDOWS\$NtServicePackUninstall$\user32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 561152 C:\WINDOWS\$NtUninstallKB824141$\user32.dll ()

[1] 2003-09-25 09:57:50 561152 C:\WINDOWS\$NtUninstallKB840987$\user32.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:46 578048 C:\WINDOWS\$NtUninstallKB890859$\user32.dll (Microsoft Corporation)

[1] 2005-03-02 11:10:36 578048 C:\WINDOWS\$NtUninstallKB925902$\user32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 579584 C:\WINDOWS\ServicePackFiles\i386\user32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 579584 C:\WINDOWS\system32\user32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB824141$\win32k.sys

[1] 2005-03-02 11:13:08 1836416 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2005-10-05 20:12:57 1839616 C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2007-03-08 08:45:59 1844096 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2008-03-20 00:56:50 1846016 C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys (Microsoft Corporation)

[1] 2008-09-15 08:20:39 1847040 C:\WINDOWS\$hf_mig$\KB954211\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2009-02-09 06:59:50 1847680 C:\WINDOWS\$hf_mig$\KB958690\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2009-04-19 12:42:34 1847936 C:\WINDOWS\$hf_mig$\KB968537\SP3QFE\win32k.sys (Microsoft Corporation)

[1] 2008-03-20 01:09:22 1845376 C:\WINDOWS\$NtServicePackUninstall$\win32k.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1813888 C:\WINDOWS\$NtUninstallKB824141$\win32k.sys ()

[1] 2003-09-25 09:57:02 1797120 C:\WINDOWS\$NtUninstallKB840987$\win32k.sys (Microsoft Corporation)

[1] 2004-08-19 16:00:55 1836032 C:\WINDOWS\$NtUninstallKB890859$\win32k.sys (Microsoft Corporation)

[1] 2005-03-02 11:07:53 1836416 C:\WINDOWS\$NtUninstallKB896424$\win32k.sys (Microsoft Corporation)

[1] 2005-10-05 20:08:49 1839616 C:\WINDOWS\$NtUninstallKB925902$\win32k.sys (Microsoft Corporation)

[1] 2007-03-08 08:33:58 1843712 C:\WINDOWS\$NtUninstallKB941693$\win32k.sys (Microsoft Corporation)

[1] 2008-04-13 18:58:06 1845760 C:\WINDOWS\$NtUninstallKB954211$\win32k.sys (Microsoft Corporation)

[1] 2008-09-15 08:26:07 1846528 C:\WINDOWS\$NtUninstallKB958690$\win32k.sys (Microsoft Corporation)

[1] 2009-02-09 07:05:54 1846912 C:\WINDOWS\$NtUninstallKB968537$\win32k.sys (Microsoft Corporation)

[1] 2008-04-13 18:58:06 1845760 C:\WINDOWS\ServicePackFiles\i386\win32k.sys (Microsoft Corporation)

[1] 2009-04-19 12:50:30 1847296 C:\WINDOWS\system32\dllcache\win32k.sys (Microsoft Corporation)

[1] 2009-04-19 12:50:30 1847296 C:\WINDOWS\system32\win32k.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe

[1] 2004-08-19 16:09:50 189952 C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 185344 C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe ()

[1] 2008-04-13 19:33:53 190464 C:\WINDOWS\ServicePackFiles\i386\accwiz.exe (Microsoft Corporation)

[1] 2008-04-13 19:33:53 190464 C:\WINDOWS\system32\accwiz.exe (Microsoft Corporation)

[1] 2008-04-13 19:33:53 190464 C:\WINDOWS\system32\dllcache\accwiz.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll

[1] 2004-08-19 16:09:21 604672 C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 564736 C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll ()

[1] 2008-04-13 19:33:21 606208 C:\WINDOWS\ServicePackFiles\i386\crypt32.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:21 604672 C:\WINDOWS\system32\crypt32(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 606208 C:\WINDOWS\system32\crypt32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 606208 C:\WINDOWS\system32\dllcache\crypt32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll

[1] 2004-08-19 16:09:21 60416 C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 53248 C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll ()

[1] 2008-04-13 19:33:21 62464 C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:21 60416 C:\WINDOWS\system32\cryptsvc(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 62464 C:\WINDOWS\system32\cryptsvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 62464 C:\WINDOWS\system32\dllcache\cryptsvc.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\hh.exe

[1] 2005-05-26 16:26:50 10752 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe (Microsoft Corporation)

[1] 2005-05-26 16:22:01 10752 C:\WINDOWS\$NtServicePackUninstall$\hh.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 10752 C:\WINDOWS\$NtUninstallKB826939$\hh.exe ()

[1] 2004-08-19 16:09:54 10752 C:\WINDOWS\$NtUninstallKB896358$\hh.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:06 10752 C:\WINDOWS\hh.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:06 10752 C:\WINDOWS\ServicePackFiles\i386\hh.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\hhctrl.ocx

[1] 2004-12-02 11:35:33 539648 C:\WINDOWS\$hf_mig$\KB890175\SP2QFE\hhctrl.ocx ()

[1] 2005-05-26 19:11:04 546304 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhctrl.ocx ()

[1] 2006-07-14 08:38:59 546304 C:\WINDOWS\$hf_mig$\KB922616\SP2QFE\hhctrl.ocx ()

[1] 2007-01-23 12:29:01 546304 C:\WINDOWS\$hf_mig$\KB928843\SP2QFE\hhctrl.ocx ()

[1] 2007-01-23 12:31:20 546304 C:\WINDOWS\$NtServicePackUninstall$\hhctrl.ocx ()

[1] 2003-04-23 19:00:00 511560 C:\WINDOWS\$NtUninstallKB826939$\hhctrl.ocx ()

[1] 2004-08-03 22:22:58 526848 C:\WINDOWS\$NtUninstallKB890175$\hhctrl.ocx ()

[1] 2004-11-30 22:19:54 539648 C:\WINDOWS\$NtUninstallKB896358$\hhctrl.ocx ()

[1] 2005-05-26 19:08:06 546304 C:\WINDOWS\$NtUninstallKB922616$\hhctrl.ocx ()

[1] 2006-07-14 08:27:53 546304 C:\WINDOWS\$NtUninstallKB928843$\hhctrl.ocx ()

[1] 2008-04-13 19:31:27 545280 C:\WINDOWS\ServicePackFiles\i386\hhctrl.ocx ()

[1] 2008-04-13 19:31:27 545280 C:\WINDOWS\system32\hhctrl.ocx ()

[2] 2003-04-23 19:00:00 92160 C:\WINDOWS\system32\mui\000C\hhctrlui.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll

[1] 2005-05-26 19:11:03 41472 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll (Microsoft Corporation)

[1] 2005-05-26 19:08:06 41472 C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 37888 C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll ()

[1] 2004-08-19 16:09:27 38912 C:\WINDOWS\$NtUninstallKB896358$\hhsetup.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:26 41472 C:\WINDOWS\ServicePackFiles\i386\hhsetup.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:26 41472 C:\WINDOWS\system32\hhsetup.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\html32.cnv

[1] 2003-04-23 19:00:00 401437 C:\WINDOWS\$NtUninstallKB826939$\html32.cnv ()

[1] 2004-07-17 11:42:16 311864 C:\WINDOWS\ServicePackFiles\i386\html32.cnv ()



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\itss.dll

[1] 2005-05-26 19:11:03 137216 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll (Microsoft Corporation)

[1] 2005-05-26 19:08:06 137216 C:\WINDOWS\$NtServicePackUninstall$\itss.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 122368 C:\WINDOWS\$NtUninstallKB826939$\itss.dll ()

[1] 2004-08-19 16:09:30 134144 C:\WINDOWS\$NtUninstallKB896358$\itss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:27 138240 C:\WINDOWS\ServicePackFiles\i386\itss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:27 138240 C:\WINDOWS\system32\dllcache\itss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:27 138240 C:\WINDOWS\system32\itss.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\locator.exe

[1] 2004-08-19 16:09:54 75264 C:\WINDOWS\$NtServicePackUninstall$\locator.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 68096 C:\WINDOWS\$NtUninstallKB826939$\locator.exe ()

[1] 2008-04-13 19:34:09 75264 C:\WINDOWS\ServicePackFiles\i386\locator.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:09 75264 C:\WINDOWS\system32\locator.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\magnify.exe

[1] 2004-08-19 16:09:54 73216 C:\WINDOWS\$NtServicePackUninstall$\magnify.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 68096 C:\WINDOWS\$NtUninstallKB826939$\magnify.exe ()

[1] 2008-04-13 19:34:10 73216 C:\WINDOWS\ServicePackFiles\i386\magnify.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:10 73216 C:\WINDOWS\system32\magnify.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe

[1] 2004-08-19 16:09:54 246784 C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 237056 C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe ()

[1] 2008-04-13 19:34:11 251904 C:\WINDOWS\ServicePackFiles\i386\migwiz.exe (Microsoft Corporation)

[2] 2008-04-13 19:34:11 247808 C:\WINDOWS\ServicePackFiles\i386\migwiza.exe (Microsoft Corporation)

[2] 2004-08-19 16:09:55 242688 C:\WINDOWS\ServicePackFiles\i386\migwiz_a.exe (Microsoft Corporation)

[2] 2008-04-13 19:34:11 247808 C:\WINDOWS\system32\dllcache\migwiza.exe (Microsoft Corporation)

[2] 2004-08-19 16:09:55 242688 C:\WINDOWS\system32\dllcache\migwiz_a.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:11 251904 C:\WINDOWS\system32\usmt\migwiz.exe (Microsoft Corporation)

[2] 2008-04-13 19:34:11 247808 C:\WINDOWS\system32\usmt\migwiza.exe (Microsoft Corporation)

[2] 2004-08-19 16:09:55 242688 C:\WINDOWS\system32\usmt\migwiz_a.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys

[1] 2005-01-18 20:51:57 451584 C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2004-10-27 18:15:16 448128 C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2006-05-05 03:16:39 454400 C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 04:41:11 455936 C:\WINDOWS\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys (Microsoft Corporation)

[1] 2006-05-05 02:41:45 453120 C:\WINDOWS\$NtServicePackUninstall$\mrxsmb.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 407552 C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys ()

[1] 2004-10-27 18:14:18 448128 C:\WINDOWS\$NtUninstallKB885250$\mrxsmb.sys (Microsoft Corporation)

[1] 2004-08-03 23:15:16 451456 C:\WINDOWS\$NtUninstallKB885835$\mrxsmb.sys (Microsoft Corporation)

[1] 2005-01-18 21:26:52 451584 C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys (Microsoft Corporation)

[1] 2008-04-13 12:17:02 456576 C:\WINDOWS\$NtUninstallKB957097$\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 04:21:09 455296 C:\WINDOWS\Driver Cache\i386\mrxsmb.sys (Microsoft Corporation)

[1] 2008-04-13 12:17:02 456576 C:\WINDOWS\ServicePackFiles\i386\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 04:21:09 455296 C:\WINDOWS\system32\dllcache\mrxsmb.sys (Microsoft Corporation)

[1] 2008-10-24 04:21:09 455296 C:\WINDOWS\system32\drivers\mrxsmb.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll

[1] 2003-04-23 19:00:00 143434 C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll ()

[1] 2003-07-15 06:51:50 116288 C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSCONV97.DLL (Microsoft Corporation)

[1] 2004-07-17 11:42:18 116288 C:\WINDOWS\ServicePackFiles\i386\msconv97.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\narrator.exe

[1] 2004-08-19 16:09:59 55296 C:\WINDOWS\$NtServicePackUninstall$\narrator.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 52736 C:\WINDOWS\$NtUninstallKB826939$\narrator.exe ()

[1] 2008-04-13 19:34:14 55296 C:\WINDOWS\ServicePackFiles\i386\narrator.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:14 55296 C:\WINDOWS\system32\narrator.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\newdev.dll

[1] 2004-08-19 16:09:36 251392 C:\WINDOWS\$NtServicePackUninstall$\newdev.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 241152 C:\WINDOWS\$NtUninstallKB826939$\newdev.dll ()

[1] 2008-04-13 19:33:35 250880 C:\WINDOWS\ServicePackFiles\i386\newdev.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:36 251392 C:\WINDOWS\system32\newdev(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:35 250880 C:\WINDOWS\system32\newdev.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll

[1] 2009-02-09 03:56:34 740352 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntdll.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:14 733184 C:\WINDOWS\$NtServicePackUninstall$\ntdll.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 693760 C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll ()

[1] 2008-04-13 19:33:02 731136 C:\WINDOWS\$NtUninstallKB956572$\ntdll.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:02 731136 C:\WINDOWS\ServicePackFiles\i386\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:20:30 739840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:03:39 740352 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 739840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:34 740352 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 739840 C:\WINDOWS\system32\dllcache\ntdll.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 739840 C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntkrnlpa.exe

[1] 2005-03-02 11:13:12 2059008 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2006-12-19 11:45:35 2061440 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2007-02-28 09:08:25 2061440 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-09 04:17:00 2068224 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-08-14 19:26:00 2068096 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2007-02-28 09:02:36 2059648 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1951488 C:\WINDOWS\$NtUninstallKB826939$\ntkrnlpa.exe ()

[1] 2003-04-24 10:16:48 1953024 C:\WINDOWS\$NtUninstallKB840987$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2004-08-19 16:04:18 2058880 C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2005-03-02 11:07:56 2058880 C:\WINDOWS\$NtUninstallKB929338$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2006-12-19 11:22:38 2059648 C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-08-14 06:23:49 2068096 C:\WINDOWS\$NtUninstallKB956572$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-04-13 19:07:26 2067968 C:\WINDOWS\$NtUninstallKB956841$\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-10 19:06:30 2068096 C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe (Microsoft Corporation)

[1] 2008-04-13 19:07:26 2067968 C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-09 04:50:13 2059776 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-09 04:42:35 2065024 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-10 19:06:30 2068096 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-09 04:17:00 2068224 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-10 19:06:30 2068096 C:\WINDOWS\system32\dllcache\ntkrnlpa.exe (Microsoft Corporation)

[1] 2009-02-10 19:06:30 2068096 C:\WINDOWS\system32\ntkrnlpa.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ntoskrnl.exe

[1] 2005-03-02 11:13:23 2181632 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2006-12-19 11:45:29 2184064 C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2007-02-28 09:08:21 2184192 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-08-14 19:26:02 2191232 C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2007-02-28 09:02:36 2182400 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 2045824 C:\WINDOWS\$NtUninstallKB826939$\ntoskrnl.exe ()

[1] 2003-04-24 10:16:52 1929344 C:\WINDOWS\$NtUninstallKB840987$\ntoskrnl.exe (Microsoft Corporation)

[1] 2004-08-19 16:04:35 2183040 C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe (Microsoft Corporation)

[1] 2005-03-02 11:08:06 2181376 C:\WINDOWS\$NtUninstallKB929338$\ntoskrnl.exe (Microsoft Corporation)

[1] 2006-12-19 11:22:38 2182400 C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-08-14 06:23:49 2191232 C:\WINDOWS\$NtUninstallKB956572$\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-04-13 19:08:04 2191104 C:\WINDOWS\$NtUninstallKB956841$\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:24:03 2191104 C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe (Microsoft Corporation)

[1] 2008-04-13 19:08:04 2191104 C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:50:10 2182528 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:43:13 2188160 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:24:03 2191104 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-10 19:16:44 2191232 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:24:03 2191104 C:\WINDOWS\system32\dllcache\ntoskrnl.exe (Microsoft Corporation)

[1] 2009-02-09 04:24:03 2191104 C:\WINDOWS\system32\ntoskrnl.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\ole32.dll

[1] 2005-01-13 22:08:27 1284608 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 12:36:10 1286144 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-25 21:29:37 1285632 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-25 21:40:00 1284608 C:\WINDOWS\$NtServicePackUninstall$\ole32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1169920 C:\WINDOWS\$NtUninstallKB826939$\ole32.dll ()

[1] 2003-08-25 13:18:10 1172992 C:\WINDOWS\$NtUninstallKB828741$\ole32.dll ()

[1] 2004-08-19 16:09:36 1281024 C:\WINDOWS\$NtUninstallKB873333$\ole32.dll (Microsoft Corporation)

[1] 2005-01-14 01:56:43 1284608 C:\WINDOWS\$NtUninstallKB894391$\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 12:32:30 1284608 C:\WINDOWS\$NtUninstallKB902400$\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\ServicePackFiles\i386\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\system32\dllcache\ole32.dll (Microsoft Corporation)

[2] 2005-07-25 21:40:00 1284608 C:\WINDOWS\system32\ole32(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\osk.exe

[1] 2004-08-19 16:10:00 216576 C:\WINDOWS\$NtServicePackUninstall$\osk.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 213504 C:\WINDOWS\$NtUninstallKB826939$\osk.exe ()

[1] 2008-04-13 19:34:17 216576 C:\WINDOWS\ServicePackFiles\i386\osk.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:17 216576 C:\WINDOWS\system32\osk.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll

[1] 2004-08-19 16:09:37 102400 C:\WINDOWS\$NtServicePackUninstall$\pchshell.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 97792 C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll ()

[1] 2008-04-13 19:33:38 102912 C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchshell.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 102912 C:\WINDOWS\ServicePackFiles\i386\pchshell.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys

[1] 2004-08-03 23:14:26 48384 C:\WINDOWS\$NtServicePackUninstall$\raspptp.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 46336 C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys ()

[1] 2008-04-13 12:19:48 48384 C:\WINDOWS\ServicePackFiles\i386\raspptp.sys (Microsoft Corporation)

[1] 2008-04-13 12:19:48 48384 C:\WINDOWS\system32\drivers\raspptp.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll

[1] 2007-07-09 06:19:28 582656 C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 08:25:43 585216 C:\WINDOWS\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll (Microsoft Corporation)

[1] 2007-07-09 06:11:46 584192 C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 530432 C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll ()

[1] 2003-08-25 13:18:10 532480 C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll ()

[1] 2004-08-19 16:09:39 581120 C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 584704 C:\WINDOWS\$NtUninstallKB970238$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 584704 C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 07:53:29 585216 C:\WINDOWS\system32\dllcache\rpcrt4.dll (Microsoft Corporation)

[2] 2007-07-09 06:11:46 584192 C:\WINDOWS\system32\rpcrt4(2).dll (Microsoft Corporation)

[1] 2009-04-15 07:53:29 585216 C:\WINDOWS\system32\rpcrt4.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll

[1] 2005-01-13 22:08:27 395776 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 12:36:09 396288 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-25 21:29:39 398336 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:34 401408 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-25 21:40:00 397824 C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 260608 C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll ()

[1] 2003-08-25 13:17:51 260608 C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll ()

[1] 2004-08-19 16:09:39 395776 C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll (Microsoft Corporation)

[1] 2005-01-14 01:56:44 395776 C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 12:32:30 395776 C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 399360 C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 399360 C:\WINDOWS\ServicePackFiles\i386\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:20:31 399360 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:03:39 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:34 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\system32\dllcache\rpcss.dll (Microsoft Corporation)

[2] 2005-07-25 21:40:00 397824 C:\WINDOWS\system32\rpcss(2).dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\system32\rpcss.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\shdocvw.dll

[1] 2004-09-29 11:47:03 1483776 C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-01-27 10:12:53 1484800 C:\WINDOWS\$hf_mig$\KB867282\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-05-02 13:58:35 1485312 C:\WINDOWS\$hf_mig$\KB883939\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-03-10 00:48:25 1484800 C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-09-02 17:08:21 1486336 C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-07-02 19:10:51 1485824 C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2005-11-30 21:06:57 1495040 C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-03-30 02:29:27 1495040 C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-05-29 08:34:15 1496576 C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-06-23 04:25:42 1497088 C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-09-03 23:14:50 1497088 C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-09-03 23:14:50 1497088 C:\WINDOWS\$hf_mig$\KB924496\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2006-10-23 08:34:38 1497600 C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-01-04 07:02:16 1498624 C:\WINDOWS\$hf_mig$\KB928090\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-02-19 08:23:02 1498624 C:\WINDOWS\$hf_mig$\KB931768\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-04-18 05:44:42 1498624 C:\WINDOWS\$hf_mig$\KB933566\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-06-15 01:12:45 1498624 C:\WINDOWS\$hf_mig$\KB937143\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-08-22 05:57:29 1498624 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-10-10 22:59:28 1498624 C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2007-12-06 17:47:20 1499648 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2008-02-16 02:32:00 1499648 C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2008-04-20 23:57:25 1499648 C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2008-06-23 09:15:42 1499648 C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shdocvw.dll (Microsoft Corporation)

[1] 2008-06-26 01:13:32 1499648 C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll (Microsoft Corporation)

[1] 2008-06-26 01:00:28 1499648 C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll (Microsoft Corporation)

[2] 2004-08-19 16:08:50 572416 C:\WINDOWS\$NtServicePackUninstall$\shdoclc.dll (Microsoft Corporation)

[1] 2008-06-23 08:40:05 1495040 C:\WINDOWS\$NtServicePackUninstall$\shdocvw.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1341440 C:\WINDOWS\$NtUninstallKB826939$\shdocvw.dll ()

[1] 2004-08-19 16:09:40 1483776 C:\WINDOWS\$NtUninstallKB834707$\shdocvw.dll (Microsoft Corporation)

[1] 2004-01-21 18:27:02 1339904 C:\WINDOWS\$NtUninstallKB834707-IE6SP1-20040929.091901$\shdocvw.dll (Microsoft Corporation)

[1] 2004-09-29 11:49:14 1483776 C:\WINDOWS\$NtUninstallKB867282$\shdocvw.dll (Microsoft Corporation)

[1] 2005-03-10 01:04:12 1483776 C:\WINDOWS\$NtUninstallKB883939$\shdocvw.dll (Microsoft Corporation)

[1] 2005-01-27 10:14:20 1483776 C:\WINDOWS\$NtUninstallKB890923$\shdocvw.dll (Microsoft Corporation)

[1] 2005-07-02 19:16:41 1484288 C:\WINDOWS\$NtUninstallKB896688$\shdocvw.dll (Microsoft Corporation)

[1] 2005-05-02 13:57:12 1484288 C:\WINDOWS\$NtUninstallKB896727$\shdocvw.dll (Microsoft Corporation)

[1] 2005-09-02 17:06:11 1484288 C:\WINDOWS\$NtUninstallKB905915$\shdocvw.dll (Microsoft Corporation)

[1] 2005-11-30 21:01:16 1492992 C:\WINDOWS\$NtUninstallKB912812$\shdocvw.dll (Microsoft Corporation)

[1] 2006-03-30 02:26:11 1492992 C:\WINDOWS\$NtUninstallKB916281$\shdocvw.dll (Microsoft Corporation)

[1] 2006-05-29 08:29:14 1494528 C:\WINDOWS\$NtUninstallKB918899$\shdocvw.dll (Microsoft Corporation)

[1] 2006-06-23 04:11:45 1494528 C:\WINDOWS\$NtUninstallKB924496$\shdocvw.dll (Microsoft Corporation)

[1] 2006-09-03 23:12:53 1494528 C:\WINDOWS\$NtUninstallKB925454$\shdocvw.dll (Microsoft Corporation)

[1] 2006-10-23 08:18:47 1495040 C:\WINDOWS\$NtUninstallKB928090$\shdocvw.dll (Microsoft Corporation)

[1] 2007-01-04 06:55:13 1495040 C:\WINDOWS\$NtUninstallKB931768$\shdocvw.dll (Microsoft Corporation)

[1] 2007-02-19 08:04:12 1495040 C:\WINDOWS\$NtUninstallKB933566$\shdocvw.dll (Microsoft Corporation)

[1] 2007-04-18 05:32:01 1495040 C:\WINDOWS\$NtUninstallKB937143$\shdocvw.dll (Microsoft Corporation)

[1] 2007-06-14 11:10:04 1495040 C:\WINDOWS\$NtUninstallKB939653$\shdocvw.dll (Microsoft Corporation)

[1] 2007-08-22 06:13:08 1495040 C:\WINDOWS\$NtUninstallKB942615$\shdocvw.dll (Microsoft Corporation)

[1] 2007-10-10 23:13:40 1495040 C:\WINDOWS\$NtUninstallKB944533$\shdocvw.dll (Microsoft Corporation)

[1] 2007-12-06 18:07:05 1495040 C:\WINDOWS\$NtUninstallKB947864$\shdocvw.dll (Microsoft Corporation)

[1] 2008-02-16 02:02:38 1495040 C:\WINDOWS\$NtUninstallKB950759$\shdocvw.dll (Microsoft Corporation)

[1] 2008-04-21 00:02:37 1495040 C:\WINDOWS\$NtUninstallKB953838$\shdocvw.dll (Microsoft Corporation)

[2] 2008-04-13 19:00:59 572416 C:\WINDOWS\ServicePackFiles\i386\shdoclc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:41 1499136 C:\WINDOWS\ServicePackFiles\i386\shdocvw.dll (Microsoft Corporation)

[1] 2009-01-07 18:21:08 1497088 C:\WINDOWS\system32\dllcache\shdocvw.dll (Microsoft Corporation)

[2] 2004-08-19 16:08:50 572416 C:\WINDOWS\system32\shdoclc(2).dll (Microsoft Corporation)

[2] 2008-04-13 19:00:59 572416 C:\WINDOWS\system32\shdoclc.dll (Microsoft Corporation)

[2] 2008-04-21 00:02:37 1495040 C:\WINDOWS\system32\shdocvw(2)(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:41 1499136 C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\shell32.dll

[1] 2004-12-21 12:46:25 8507392 C:\WINDOWS\$hf_mig$\KB890047\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2005-02-28 16:10:59 8507904 C:\WINDOWS\$hf_mig$\KB893086\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2005-09-22 20:26:14 8508928 C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-03-16 21:49:25 8510976 C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-07-13 07:04:38 8514048 C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2006-12-19 14:48:29 8515072 C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2007-10-25 09:43:25 8516608 C:\WINDOWS\$hf_mig$\KB943460\SP2QFE\shell32.dll (Microsoft Corporation)

[1] 2008-06-17 12:04:03 8518144 C:\WINDOWS\$hf_mig$\KB967715\SP3QFE\shell32.dll (Microsoft Corporation)

[1] 2007-10-25 09:56:24 8510976 C:\WINDOWS\$NtServicePackUninstall$\shell32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 8393216 C:\WINDOWS\$NtUninstallKB826939$\shell32.dll ()

[1] 2004-08-19 16:09:40 8440320 C:\WINDOWS\$NtUninstallKB890047$\shell32.dll (Microsoft Corporation)

[1] 2004-12-21 12:59:07 8506368 C:\WINDOWS\$NtUninstallKB893086$\shell32.dll (Microsoft Corporation)

[1] 2005-02-28 16:12:24 8506368 C:\WINDOWS\$NtUninstallKB900725$\shell32.dll (Microsoft Corporation)

[1] 2005-09-22 20:06:59 8506880 C:\WINDOWS\$NtUninstallKB908531$\shell32.dll (Microsoft Corporation)

[1] 2006-03-16 21:07:40 8508416 C:\WINDOWS\$NtUninstallKB921398$\shell32.dll (Microsoft Corporation)

[1] 2006-07-13 06:36:01 8509952 C:\WINDOWS\$NtUninstallKB928255$\shell32.dll (Microsoft Corporation)

[1] 2006-12-19 14:49:47 8509952 C:\WINDOWS\$NtUninstallKB943460$\shell32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:41 8517632 C:\WINDOWS\$NtUninstallKB967715$\shell32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:41 8517632 C:\WINDOWS\ServicePackFiles\i386\shell32.dll (Microsoft Corporation)

[1] 2008-06-17 12:02:15 8517632 C:\WINDOWS\system32\dllcache\shell32.dll (Microsoft Corporation)

[2] 2007-10-25 09:56:24 8510976 C:\WINDOWS\system32\shell32(2).dll (Microsoft Corporation)

[1] 2008-06-17 12:02:15 8517632 C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll

[1] 2004-08-19 16:09:40 153088 C:\WINDOWS\$NtServicePackUninstall$\shmedia.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 127488 C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll ()

[1] 2004-08-19 16:09:40 153088 C:\WINDOWS\ServicePackFiles\i386\shmedia.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:41 153600 C:\WINDOWS\system32\shmedia.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll

[1] 2004-08-19 16:09:44 241664 C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 228864 C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll ()

[1] 2008-04-13 19:33:46 241664 C:\WINDOWS\ServicePackFiles\i386\srrstr.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:46 241664 C:\WINDOWS\system32\srrstr.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\srv.sys

[1] 2005-05-09 17:22:21 332544 C:\WINDOWS\$hf_mig$\KB896422\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2006-04-20 23:46:15 332800 C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2006-08-14 05:00:42 332928 C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys (Microsoft Corporation)

[1] 2008-09-08 04:37:19 333824 C:\WINDOWS\$hf_mig$\KB957095\SP3QFE\srv.sys (Microsoft Corporation)

[1] 2008-12-11 05:33:59 333952 C:\WINDOWS\$hf_mig$\KB958687\SP3QFE\srv.sys (Microsoft Corporation)

[1] 2006-08-14 03:34:41 332928 C:\WINDOWS\$NtServicePackUninstall$\srv.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 330368 C:\WINDOWS\$NtUninstallKB826939$\srv.sys ()

[1] 2004-08-03 23:14:45 336256 C:\WINDOWS\$NtUninstallKB896422$\srv.sys (Microsoft Corporation)

[1] 2005-05-09 17:17:51 332544 C:\WINDOWS\$NtUninstallKB917159$\srv.sys (Microsoft Corporation)

[1] 2006-04-20 23:12:27 332800 C:\WINDOWS\$NtUninstallKB923414$\srv.sys (Microsoft Corporation)

[1] 2008-04-13 12:15:11 334848 C:\WINDOWS\$NtUninstallKB957095$\srv.sys (Microsoft Corporation)

[1] 2008-09-08 03:41:42 333824 C:\WINDOWS\$NtUninstallKB958687$\srv.sys (Microsoft Corporation)

[1] 2008-04-13 12:15:11 334848 C:\WINDOWS\ServicePackFiles\i386\srv.sys (Microsoft Corporation)

[1] 2008-12-11 03:57:09 333952 C:\WINDOWS\system32\dllcache\srv.sys (Microsoft Corporation)

[1] 2008-12-11 03:57:09 333952 C:\WINDOWS\system32\drivers\srv.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\urlmon.dll

[1] 2004-09-29 11:47:04 604672 C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-01-27 10:12:53 605696 C:\WINDOWS\$hf_mig$\KB867282\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-05-02 13:58:35 606208 C:\WINDOWS\$hf_mig$\KB883939\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-03-10 00:48:25 605696 C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-09-02 17:08:21 606208 C:\WINDOWS\$hf_mig$\KB896688\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-07-02 19:10:53 606208 C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2005-11-04 20:35:42 607232 C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2006-03-18 04:07:51 616448 C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2006-05-09 22:26:50 617472 C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2006-07-25 13:43:19 617472 C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2006-09-14 01:38:06 617984 C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2006-10-23 08:34:38 617984 C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-01-25 05:28:12 619008 C:\WINDOWS\$hf_mig$\KB928090\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-02-19 08:23:02 619008 C:\WINDOWS\$hf_mig$\KB931768\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-04-18 05:44:43 619008 C:\WINDOWS\$hf_mig$\KB933566\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-06-15 01:12:45 619008 C:\WINDOWS\$hf_mig$\KB937143\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-08-22 05:57:30 620032 C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-10-10 22:59:29 620032 C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-12-06 17:47:21 620032 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-02-16 02:32:00 620544 C:\WINDOWS\$hf_mig$\KB947864\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-04-20 23:57:26 620544 C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-06-23 09:15:43 620544 C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-06-26 01:13:32 620544 C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll (Microsoft Corporation)

[1] 2008-06-26 01:00:28 620544 C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-06-23 08:40:08 1162752 C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-08-26 02:10:29 1162752 C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-10-16 12:33:21 1163264 C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2008-12-20 16:47:35 1163264 C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2009-02-20 10:18:52 1163264 C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\urlmon.dll (Microsoft Corporation)

[1] 2009-04-30 14:19:04 1207808 C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\urlmon.dll (Microsoft Corporation)

[1] 2009-07-03 10:01:30 1208832 C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\urlmon.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:46 603136 C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 457216 C:\WINDOWS\$NtUninstallKB826939$\urlmon.dll ()

[1] 2004-08-19 16:09:46 603136 C:\WINDOWS\$NtUninstallKB834707$\urlmon.dll (Microsoft Corporation)

[1] 2004-01-21 18:27:04 486400 C:\WINDOWS\$NtUninstallKB834707-IE6SP1-20040929.091901$\urlmon.dll (Microsoft Corporation)

[1] 2004-09-29 11:49:14 604672 C:\WINDOWS\$NtUninstallKB867282$\urlmon.dll (Microsoft Corporation)

[1] 2005-03-10 01:04:13 605696 C:\WINDOWS\$NtUninstallKB883939$\urlmon.dll (Microsoft Corporation)

[1] 2005-01-27 10:14:20 605696 C:\WINDOWS\$NtUninstallKB890923$\urlmon.dll (Microsoft Corporation)

[1] 2005-07-02 19:16:41 605696 C:\WINDOWS\$NtUninstallKB896688$\urlmon.dll (Microsoft Corporation)

[1] 2005-05-02 13:57:12 605696 C:\WINDOWS\$NtUninstallKB896727$\urlmon.dll (Microsoft Corporation)

[1] 2005-09-02 17:06:12 605696 C:\WINDOWS\$NtUninstallKB905915$\urlmon.dll (Microsoft Corporation)

[1] 2005-11-04 20:17:25 606208 C:\WINDOWS\$NtUninstallKB912812$\urlmon.dll (Microsoft Corporation)

[1] 2006-03-18 04:09:53 615424 C:\WINDOWS\$NtUninstallKB916281$\urlmon.dll (Microsoft Corporation)

[1] 2006-05-09 22:24:39 615936 C:\WINDOWS\$NtUninstallKB918899$\urlmon.dll (Microsoft Corporation)

[1] 2006-07-25 13:41:01 615936 C:\WINDOWS\$NtUninstallKB922760$\urlmon.dll (Microsoft Corporation)

[1] 2006-09-14 01:40:05 615936 C:\WINDOWS\$NtUninstallKB925454$\urlmon.dll (Microsoft Corporation)

[1] 2006-10-23 08:18:48 615936 C:\WINDOWS\$NtUninstallKB928090$\urlmon.dll (Microsoft Corporation)

[1] 2007-01-25 05:49:12 617472 C:\WINDOWS\$NtUninstallKB931768$\urlmon.dll (Microsoft Corporation)

[1] 2007-02-19 08:04:13 617472 C:\WINDOWS\$NtUninstallKB933566$\urlmon.dll (Microsoft Corporation)

[1] 2007-04-18 05:32:01 617472 C:\WINDOWS\$NtUninstallKB937143$\urlmon.dll (Microsoft Corporation)

[1] 2007-06-14 11:10:05 617472 C:\WINDOWS\$NtUninstallKB939653$\urlmon.dll (Microsoft Corporation)

[1] 2007-08-22 06:13:08 617472 C:\WINDOWS\$NtUninstallKB942615$\urlmon.dll (Microsoft Corporation)

[1] 2007-10-10 23:13:41 617472 C:\WINDOWS\$NtUninstallKB944533$\urlmon.dll (Microsoft Corporation)

[1] 2007-12-06 18:07:05 617472 C:\WINDOWS\$NtUninstallKB947864$\urlmon.dll (Microsoft Corporation)

[1] 2008-02-16 02:02:39 617984 C:\WINDOWS\$NtUninstallKB950759$\urlmon.dll (Microsoft Corporation)

[1] 2008-04-21 00:02:39 617984 C:\WINDOWS\$NtUninstallKB953838$\urlmon.dll (Microsoft Corporation)

[1] 2008-06-23 08:40:06 617984 C:\WINDOWS\ie7\urlmon.dll (Microsoft Corporation)

[1] 2007-08-13 18:54:10 1162240 C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll (Microsoft Corporation)

[1] 2008-06-23 09:28:23 1159680 C:\WINDOWS\ie7updates\KB956390-IE7\urlmon.dll (Microsoft Corporation)

[1] 2008-08-26 01:11:53 1159680 C:\WINDOWS\ie7updates\KB958215-IE7\urlmon.dll (Microsoft Corporation)

[1] 2008-10-16 13:18:42 1160192 C:\WINDOWS\ie7updates\KB961260-IE7\urlmon.dll (Microsoft Corporation)

[1] 2008-12-20 15:47:03 1160192 C:\WINDOWS\ie7updates\KB963027-IE7\urlmon.dll (Microsoft Corporation)

[1] 2009-02-20 10:10:56 1160192 C:\WINDOWS\ie8\urlmon.dll (Microsoft Corporation)

[1] 2009-03-08 04:34:56 1206784 C:\WINDOWS\ie8updates\KB969897-IE8\urlmon.dll (Microsoft Corporation)

[1] 2009-04-30 14:16:11 1207808 C:\WINDOWS\ie8updates\KB972260-IE8\urlmon.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 621568 C:\WINDOWS\ServicePackFiles\i386\urlmon.dll (Microsoft Corporation)

[1] 2007-10-10 16:49:45 1159680 C:\WINDOWS\SoftwareDistribution\Download\3da5fb25f9bca1c53dde30405d5bbc6e\SP2GDR\urlmon.dll (Microsoft Corporation)

[1] 2007-10-10 16:22:19 1162240 C:\WINDOWS\SoftwareDistribution\Download\3da5fb25f9bca1c53dde30405d5bbc6e\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2007-12-06 19:08:34 1159680 C:\WINDOWS\SoftwareDistribution\Download\d2a86e41f655ff4548759e4137a0944d\SP2GDR\urlmon.dll (Microsoft Corporation)

[1] 2007-12-06 18:42:22 1162752 C:\WINDOWS\SoftwareDistribution\Download\d2a86e41f655ff4548759e4137a0944d\SP2QFE\urlmon.dll (Microsoft Corporation)

[1] 2009-07-03 09:57:50 1208832 C:\WINDOWS\system32\dllcache\urlmon.dll (Microsoft Corporation)

[2] 2008-04-21 00:02:39 617984 C:\WINDOWS\system32\urlmon(2)(2).dll (Microsoft Corporation)

[2] 2007-12-06 18:07:05 617472 C:\WINDOWS\system32\urlmon(3).dll (Microsoft Corporation)

[2] 2007-12-06 18:07:05 617472 C:\WINDOWS\system32\urlmon(4).dll (Microsoft Corporation)

[2] 2008-02-16 02:02:39 617984 C:\WINDOWS\system32\urlmon(7).dll (Microsoft Corporation)

[1] 2009-07-03 09:57:50 1208832 C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll

[1] 2005-03-02 11:20:32 291840 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2005-08-31 18:46:31 292352 C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2007-03-17 06:47:04 293376 C:\WINDOWS\$hf_mig$\KB930178\SP2QFE\winsrv.dll (Microsoft Corporation)

[1] 2007-03-17 06:44:47 293376 C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 276992 C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll ()

[1] 2002-11-22 12:29:36 273408 C:\WINDOWS\$NtUninstallKB840987$\winsrv.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:47 291328 C:\WINDOWS\$NtUninstallKB890859$\winsrv.dll (Microsoft Corporation)

[1] 2005-03-02 11:10:36 291840 C:\WINDOWS\$NtUninstallKB900725$\winsrv.dll (Microsoft Corporation)

[1] 2005-08-31 18:43:37 292352 C:\WINDOWS\$NtUninstallKB930178$\winsrv.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 293888 C:\WINDOWS\ServicePackFiles\i386\winsrv.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 293888 C:\WINDOWS\system32\winsrv.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll

[1] 2004-08-19 16:09:49 340480 C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 318976 C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll ()

[1] 2008-04-13 19:33:52 340992 C:\WINDOWS\ServicePackFiles\i386\zipfldr.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:52 340992 C:\WINDOWS\system32\zipfldr.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\dhcpcsvc.dll

[1] 2006-05-19 07:16:50 112640 C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll (Microsoft Corporation)

[1] 2006-05-19 06:23:35 112128 C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 100352 C:\WINDOWS\$NtUninstallKB826942$\dhcpcsvc.dll ()

[1] 2004-08-19 16:09:22 111616 C:\WINDOWS\$NtUninstallKB914388$\dhcpcsvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:22 127488 C:\WINDOWS\ServicePackFiles\i386\dhcpcsvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:22 127488 C:\WINDOWS\system32\dhcpcsvc.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\ndis.sys

[1] 2004-08-03 23:14:28 182912 C:\WINDOWS\$NtServicePackUninstall$\ndis.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 167552 C:\WINDOWS\$NtUninstallKB826942$\ndis.sys ()

[1] 2008-04-13 12:20:37 182656 C:\WINDOWS\ServicePackFiles\i386\ndis.sys (Microsoft Corporation)

[1] 2008-04-13 12:20:37 182656 C:\WINDOWS\system32\drivers\ndis.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\ndisuio.sys

[1] 2004-08-03 23:03:12 12928 C:\WINDOWS\$NtServicePackUninstall$\ndisuio.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 12288 C:\WINDOWS\$NtUninstallKB826942$\ndisuio.sys ()

[1] 2008-04-13 11:55:58 14592 C:\WINDOWS\ServicePackFiles\i386\ndisuio.sys (Microsoft Corporation)

[1] 2008-04-13 11:55:58 14592 C:\WINDOWS\system32\drivers\ndisuio.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\netshell.dll

[1] 2004-08-19 16:09:36 1723904 C:\WINDOWS\$NtServicePackUninstall$\netshell.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1638400 C:\WINDOWS\$NtUninstallKB826942$\netshell.dll ()

[1] 2008-04-13 19:33:35 1719808 C:\WINDOWS\ServicePackFiles\i386\netshell.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:36 1723904 C:\WINDOWS\system32\netshell(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:35 1719808 C:\WINDOWS\system32\netshell.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\nwlnkipx.sys

[1] 2004-08-03 23:03:35 88448 C:\WINDOWS\$NtServicePackUninstall$\nwlnkipx.sys (Microsoft Corporation)

[1] 2003-04-23 19:00:00 84864 C:\WINDOWS\$NtUninstallKB826942$\nwlnkipx.sys ()

[1] 2008-04-13 11:56:06 88320 C:\WINDOWS\ServicePackFiles\i386\nwlnkipx.sys (Microsoft Corporation)

[1] 2008-04-13 11:56:06 88320 C:\WINDOWS\system32\drivers\nwlnkipx.sys (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\wzcdlg.dll

[1] 2004-08-19 16:09:49 378880 C:\WINDOWS\$NtServicePackUninstall$\wzcdlg.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 57344 C:\WINDOWS\$NtUninstallKB826942$\wzcdlg.dll ()

[1] 2008-04-13 19:33:51 384000 C:\WINDOWS\ServicePackFiles\i386\wzcdlg.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:49 378880 C:\WINDOWS\system32\wzcdlg(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:51 384000 C:\WINDOWS\system32\wzcdlg.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\wzcsapi.dll

[1] 2004-08-19 16:09:49 51712 C:\WINDOWS\$NtServicePackUninstall$\wzcsapi.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 23552 C:\WINDOWS\$NtUninstallKB826942$\wzcsapi.dll ()

[1] 2008-04-13 19:33:52 52736 C:\WINDOWS\ServicePackFiles\i386\wzcsapi.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:49 51712 C:\WINDOWS\system32\wzcsapi(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:52 52736 C:\WINDOWS\system32\wzcsapi.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB826942$\wzcsvc.dll

[1] 2004-08-19 16:09:49 359936 C:\WINDOWS\$NtServicePackUninstall$\wzcsvc.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 264704 C:\WINDOWS\$NtUninstallKB826942$\wzcsvc.dll ()

[1] 2008-04-13 19:33:52 483840 C:\WINDOWS\ServicePackFiles\i386\wzcsvc.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:49 359936 C:\WINDOWS\system32\wzcsvc(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:52 483840 C:\WINDOWS\system32\wzcsvc.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll

[1] 2004-08-19 16:09:33 57344 C:\WINDOWS\$NtServicePackUninstall$\msasn1.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 51200 C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll ()

[1] 2003-09-19 10:56:42 51712 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll ()

[1] 2008-04-13 19:33:30 57344 C:\WINDOWS\ServicePackFiles\i386\msasn1.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:33 57344 C:\WINDOWS\system32\msasn1(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:30 57344 C:\WINDOWS\system32\msasn1.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll

[1] 2004-08-19 16:09:33 33792 C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 34304 C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll ()

[1] 2008-04-13 19:33:31 33792 C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 33792 C:\WINDOWS\system32\msgsvc.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll

[1] 2006-08-17 05:43:04 132096 C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\wkssvc.dll (Microsoft Corporation)

[1] 2009-06-09 23:17:47 134144 C:\WINDOWS\$hf_mig$\KB971657\SP3QFE\wkssvc.dll (Microsoft Corporation)

[1] 2006-08-17 05:29:49 132096 C:\WINDOWS\$NtServicePackUninstall$\wkssvc.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 120832 C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll ()

[1] 2004-08-19 16:09:47 132096 C:\WINDOWS\$NtUninstallKB924270$\wkssvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 132096 C:\WINDOWS\$NtUninstallKB971657$\wkssvc.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:48 132096 C:\WINDOWS\ServicePackFiles\i386\wkssvc.dll (Microsoft Corporation)

[1] 2009-06-09 23:15:17 132096 C:\WINDOWS\system32\dllcache\wkssvc.dll (Microsoft Corporation)

[1] 2009-06-09 23:15:17 132096 C:\WINDOWS\system32\wkssvc.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll

[1] 2005-07-25 21:29:18 225792 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:54 225792 C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 215040 C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll ()

[1] 2004-08-19 16:09:20 229888 C:\WINDOWS\$NtUninstallKB902400$\catsrv.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:20 226304 C:\WINDOWS\ServicePackFiles\i386\catsrv.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:54 225792 C:\WINDOWS\system32\catsrv(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:20 226304 C:\WINDOWS\system32\catsrv.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll

[1] 2005-07-25 21:29:19 625152 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:54 625152 C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 582656 C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll ()

[1] 2004-08-19 16:09:20 628224 C:\WINDOWS\$NtUninstallKB902400$\catsrvut.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:20 625664 C:\WINDOWS\ServicePackFiles\i386\catsrvut.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:54 625152 C:\WINDOWS\system32\catsrvut(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:20 625664 C:\WINDOWS\system32\catsrvut.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll

[1] 2005-07-25 21:29:20 110080 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:55 110080 C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 100864 C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll ()

[1] 2004-08-19 16:09:20 110080 C:\WINDOWS\$NtUninstallKB902400$\clbcatex.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 110592 C:\WINDOWS\ServicePackFiles\i386\clbcatex.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 110592 C:\WINDOWS\system32\clbcatex.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll

[1] 2005-07-25 21:29:21 498688 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:55 498688 C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 468480 C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll ()

[1] 2004-08-19 16:09:20 501248 C:\WINDOWS\$NtUninstallKB902400$\clbcatq.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 498688 C:\WINDOWS\ServicePackFiles\i386\clbcatq.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:55 498688 C:\WINDOWS\system32\clbcatq(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 498688 C:\WINDOWS\system32\clbcatq.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\colbact.dll

[1] 2005-07-25 21:29:21 60416 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:55 60416 C:\WINDOWS\$NtServicePackUninstall$\colbact.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 56832 C:\WINDOWS\$NtUninstallKB828741$\colbact.dll ()

[1] 2004-08-19 16:09:20 62464 C:\WINDOWS\$NtUninstallKB902400$\colbact.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 60416 C:\WINDOWS\ServicePackFiles\i386\colbact.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:55 60416 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\colbact.dll (Microsoft Corporation)

[1] 2005-07-25 21:29:21 60416 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\colbact.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:55 60416 C:\WINDOWS\system32\colbact(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 60416 C:\WINDOWS\system32\colbact.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll

[1] 2005-07-25 21:29:22 195072 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:56 195072 C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 186880 C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll ()

[1] 2004-08-19 16:09:20 195584 C:\WINDOWS\$NtUninstallKB902400$\comadmin.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 195072 C:\WINDOWS\ServicePackFiles\i386\comadmin.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 195072 C:\WINDOWS\system32\Com\comadmin.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe

[1] 2004-08-19 16:09:51 9728 C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 8192 C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe ()

[1] 2008-04-13 19:33:57 9728 C:\WINDOWS\ServicePackFiles\i386\comrepl.exe (Microsoft Corporation)

[1] 2008-04-13 19:33:57 9728 C:\WINDOWS\system32\Com\comrepl.exe (Microsoft Corporation)

[1] 2008-04-13 19:33:57 9728 C:\WINDOWS\system32\dllcache\comrepl.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll

[1] 2005-07-25 21:29:25 1267200 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:57 1267200 C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1172992 C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll ()

[1] 2004-08-19 16:09:21 1251840 C:\WINDOWS\$NtUninstallKB902400$\comsvcs.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 1267200 C:\WINDOWS\ServicePackFiles\i386\comsvcs.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:57 1267200 C:\WINDOWS\system32\comsvcs(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 1267200 C:\WINDOWS\system32\comsvcs.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\comuid.dll

[1] 2005-07-25 21:29:27 540160 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:57 540160 C:\WINDOWS\$NtServicePackUninstall$\comuid.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 495616 C:\WINDOWS\$NtUninstallKB828741$\comuid.dll ()

[1] 2004-08-19 16:09:21 540160 C:\WINDOWS\$NtUninstallKB902400$\comuid.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 539648 C:\WINDOWS\ServicePackFiles\i386\comuid.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:21 539648 C:\WINDOWS\system32\comuid.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\es.dll

[1] 2005-07-25 21:29:28 243200 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 13:18:27 253952 C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 13:28:20 253952 C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll (Microsoft Corporation)

[1] 2008-07-07 13:24:11 253952 C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll (Microsoft Corporation)

[1] 2008-07-07 13:31:48 253952 C:\WINDOWS\$NtServicePackUninstall$\es.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 225280 C:\WINDOWS\$NtUninstallKB828741$\es.dll ()

[1] 2004-08-19 16:09:25 243200 C:\WINDOWS\$NtUninstallKB902400$\es.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:24 246272 C:\WINDOWS\$NtUninstallKB950974$\es.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:57 243200 C:\WINDOWS\$NtUninstallKB950974_0$\es.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:24 246272 C:\WINDOWS\ServicePackFiles\i386\es.dll (Microsoft Corporation)

[1] 2008-07-07 13:28:20 253952 C:\WINDOWS\system32\dllcache\es.dll (Microsoft Corporation)

[3] 2005-07-25 21:39:57 243200 C:\WINDOWS\system32\es(2).dll (Microsoft Corporation)

[1] 2008-07-07 13:28:20 253952 C:\WINDOWS\system32\es.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll

[1] 2005-07-25 21:29:29 425472 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2006-03-01 12:42:12 426496 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 07:10:23 428032 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtcprx.dll (Microsoft Corporation)

[1] 2006-03-01 12:43:50 426496 C:\WINDOWS\$NtServicePackUninstall$\msdtcprx.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 359936 C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll ()

[1] 2004-08-19 16:09:33 425472 C:\WINDOWS\$NtUninstallKB902400$\msdtcprx.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:58 425472 C:\WINDOWS\$NtUninstallKB913580$\msdtcprx.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 427008 C:\WINDOWS\$NtUninstallKB952004$\msdtcprx.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 427008 C:\WINDOWS\ServicePackFiles\i386\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 428032 C:\WINDOWS\system32\dllcache\msdtcprx.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 428032 C:\WINDOWS\system32\msdtcprx.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll

[1] 2005-07-25 21:29:31 945152 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll (Microsoft Corporation)

[1] 2006-03-01 12:42:12 956416 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 07:10:23 956928 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtctm.dll (Microsoft Corporation)

[1] 2006-03-01 12:43:50 956416 C:\WINDOWS\$NtServicePackUninstall$\msdtctm.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 869376 C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll ()

[1] 2004-08-19 16:09:33 949248 C:\WINDOWS\$NtUninstallKB902400$\msdtctm.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:59 945152 C:\WINDOWS\$NtUninstallKB913580$\msdtctm.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 956928 C:\WINDOWS\$NtUninstallKB952004$\msdtctm.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 956928 C:\WINDOWS\ServicePackFiles\i386\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 956928 C:\WINDOWS\system32\dllcache\msdtctm.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 956928 C:\WINDOWS\system32\msdtctm.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll

[1] 2005-07-25 21:29:32 161280 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2006-03-01 12:42:12 161280 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 07:10:23 161792 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\msdtcuiu.dll (Microsoft Corporation)

[1] 2006-03-01 12:43:51 161280 C:\WINDOWS\$NtServicePackUninstall$\msdtcuiu.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 151040 C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll ()

[1] 2004-08-19 16:09:33 161280 C:\WINDOWS\$NtUninstallKB902400$\msdtcuiu.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:59 161280 C:\WINDOWS\$NtUninstallKB913580$\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 161792 C:\WINDOWS\$NtUninstallKB952004$\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 161792 C:\WINDOWS\ServicePackFiles\i386\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 161792 C:\WINDOWS\system32\dllcache\msdtcuiu.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 161792 C:\WINDOWS\system32\msdtcuiu.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll

[1] 2005-07-25 21:29:32 66560 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll (Microsoft Corporation)

[1] 2006-03-01 12:42:12 66560 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll (Microsoft Corporation)

[1] 2008-06-12 07:10:23 66560 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\mtxclu.dll (Microsoft Corporation)

[1] 2006-03-01 12:43:51 66560 C:\WINDOWS\$NtServicePackUninstall$\mtxclu.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 61440 C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll ()

[1] 2004-08-19 16:09:35 66560 C:\WINDOWS\$NtUninstallKB902400$\mtxclu.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:59 66560 C:\WINDOWS\$NtUninstallKB913580$\mtxclu.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:34 66560 C:\WINDOWS\$NtUninstallKB952004$\mtxclu.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:34 66560 C:\WINDOWS\ServicePackFiles\i386\mtxclu.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 66560 C:\WINDOWS\system32\dllcache\mtxclu.dll (Microsoft Corporation)

[3] 2006-03-01 12:43:51 66560 C:\WINDOWS\system32\mtxclu(2).dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 66560 C:\WINDOWS\system32\mtxclu.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll

[1] 2005-07-25 21:29:32 91136 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll (Microsoft Corporation)

[1] 2006-03-01 12:42:12 91136 C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 07:10:23 91648 C:\WINDOWS\$hf_mig$\KB952004\SP3QFE\mtxoci.dll (Microsoft Corporation)

[1] 2006-03-01 12:43:51 91136 C:\WINDOWS\$NtServicePackUninstall$\mtxoci.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 83968 C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll ()

[1] 2004-08-19 16:09:35 90112 C:\WINDOWS\$NtUninstallKB902400$\mtxoci.dll (Microsoft Corporation)

[1] 2005-07-25 21:39:59 91136 C:\WINDOWS\$NtUninstallKB913580$\mtxoci.dll (Microsoft Corporation)

... suite

.. suite ..



[1] 2008-04-13 19:33:34 91648 C:\WINDOWS\$NtUninstallKB952004$\mtxoci.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:34 91648 C:\WINDOWS\ServicePackFiles\i386\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 91648 C:\WINDOWS\system32\dllcache\mtxoci.dll (Microsoft Corporation)

[1] 2008-06-12 07:22:23 91648 C:\WINDOWS\system32\mtxoci.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\ole32.dll

[1] 2005-01-13 22:08:27 1284608 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 12:36:10 1286144 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-25 21:29:37 1285632 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll (Microsoft Corporation)

[1] 2005-07-25 21:40:00 1284608 C:\WINDOWS\$NtServicePackUninstall$\ole32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1169920 C:\WINDOWS\$NtUninstallKB826939$\ole32.dll ()

[1] 2003-08-25 13:18:10 1172992 C:\WINDOWS\$NtUninstallKB828741$\ole32.dll ()

[1] 2004-08-19 16:09:36 1281024 C:\WINDOWS\$NtUninstallKB873333$\ole32.dll (Microsoft Corporation)

[1] 2005-01-14 01:56:43 1284608 C:\WINDOWS\$NtUninstallKB894391$\ole32.dll (Microsoft Corporation)

[1] 2005-04-28 12:32:30 1284608 C:\WINDOWS\$NtUninstallKB902400$\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\ServicePackFiles\i386\ole32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\system32\dllcache\ole32.dll (Microsoft Corporation)

[2] 2005-07-25 21:40:00 1284608 C:\WINDOWS\system32\ole32(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:38 1287168 C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll

[1] 2007-07-09 06:19:28 582656 C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 08:25:43 585216 C:\WINDOWS\$hf_mig$\KB970238\SP3QFE\rpcrt4.dll (Microsoft Corporation)

[1] 2007-07-09 06:11:46 584192 C:\WINDOWS\$NtServicePackUninstall$\rpcrt4.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 530432 C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll ()

[1] 2003-08-25 13:18:10 532480 C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll ()

[1] 2004-08-19 16:09:39 581120 C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 584704 C:\WINDOWS\$NtUninstallKB970238$\rpcrt4.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 584704 C:\WINDOWS\ServicePackFiles\i386\rpcrt4.dll (Microsoft Corporation)

[1] 2009-04-15 07:53:29 585216 C:\WINDOWS\system32\dllcache\rpcrt4.dll (Microsoft Corporation)

[2] 2007-07-09 06:11:46 584192 C:\WINDOWS\system32\rpcrt4(2).dll (Microsoft Corporation)

[1] 2009-04-15 07:53:29 585216 C:\WINDOWS\system32\rpcrt4.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll

[1] 2005-01-13 22:08:27 395776 C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 12:36:09 396288 C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-25 21:29:39 398336 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:34 401408 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll (Microsoft Corporation)

[1] 2005-07-25 21:40:00 397824 C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 260608 C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll ()

[1] 2003-08-25 13:17:51 260608 C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll ()

[1] 2004-08-19 16:09:39 395776 C:\WINDOWS\$NtUninstallKB873333$\rpcss.dll (Microsoft Corporation)

[1] 2005-01-14 01:56:44 395776 C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll (Microsoft Corporation)

[1] 2005-04-28 12:32:30 395776 C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 399360 C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:39 399360 C:\WINDOWS\ServicePackFiles\i386\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:20:31 399360 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:03:39 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:34 401408 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\rpcss.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\system32\dllcache\rpcss.dll (Microsoft Corporation)

[2] 2005-07-25 21:40:00 397824 C:\WINDOWS\system32\rpcss(2).dll (Microsoft Corporation)

[1] 2009-02-09 03:53:55 401408 C:\WINDOWS\system32\rpcss.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB828741$\txflog.dll

[1] 2005-07-25 21:29:40 101376 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll (Microsoft Corporation)

[1] 2005-07-25 21:40:00 101376 C:\WINDOWS\$NtServicePackUninstall$\txflog.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 90624 C:\WINDOWS\$NtUninstallKB828741$\txflog.dll ()

[1] 2004-08-19 16:09:46 101376 C:\WINDOWS\$NtUninstallKB902400$\txflog.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:47 101376 C:\WINDOWS\ServicePackFiles\i386\txflog.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:47 101376 C:\WINDOWS\system32\txflog.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\callcont.dll

[1] 2004-08-19 16:09:20 385024 C:\WINDOWS\$NtServicePackUninstall$\callcont.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 360448 C:\WINDOWS\$NtUninstallKB835732$\callcont.dll ()

[1] 2008-04-13 19:33:20 385024 C:\WINDOWS\ServicePackFiles\i386\callcont.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:20 385024 C:\WINDOWS\system32\dllcache\callcont.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll

[1] 2005-10-05 20:19:52 280064 C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2005-12-28 20:08:43 280064 C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2007-03-08 08:50:30 282112 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2007-06-19 06:41:12 282112 C:\WINDOWS\$hf_mig$\KB938829\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-02-19 23:52:42 282624 C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 05:44:51 286720 C:\WINDOWS\$hf_mig$\KB956802\SP3QFE\gdi32.dll (Microsoft Corporation)

[1] 2008-02-19 23:51:00 282624 C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 250368 C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll ()

[1] 2004-03-29 18:49:43 257536 C:\WINDOWS\$NtUninstallKB840987$\gdi32.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:27 278016 C:\WINDOWS\$NtUninstallKB896424$\gdi32.dll (Microsoft Corporation)

[1] 2005-10-05 20:18:11 280064 C:\WINDOWS\$NtUninstallKB912919$\gdi32.dll (Microsoft Corporation)

[1] 2005-12-28 19:56:04 280064 C:\WINDOWS\$NtUninstallKB925902$\gdi32.dll (Microsoft Corporation)

[1] 2007-03-08 08:37:50 281600 C:\WINDOWS\$NtUninstallKB938829$\gdi32.dll (Microsoft Corporation)

[1] 2007-06-19 06:32:25 282112 C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:25 285184 C:\WINDOWS\$NtUninstallKB956802$\gdi32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:25 285184 C:\WINDOWS\ServicePackFiles\i386\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 05:36:51 286720 C:\WINDOWS\system32\dllcache\gdi32.dll (Microsoft Corporation)

[1] 2008-10-23 05:36:51 286720 C:\WINDOWS\system32\gdi32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\h323.tsp

[1] 2004-08-19 16:10:07 266752 C:\WINDOWS\$NtServicePackUninstall$\h323.tsp ()

[1] 2003-04-23 19:00:00 253952 C:\WINDOWS\$NtUninstallKB835732$\h323.tsp ()

[1] 2008-04-13 19:34:33 266752 C:\WINDOWS\ServicePackFiles\i386\h323.tsp ()

[1] 2008-04-13 19:34:33 266752 C:\WINDOWS\system32\h323.tsp ()



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll

[1] 2004-08-19 16:09:27 614912 C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 592896 C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll ()

[1] 2008-04-13 19:33:26 614912 C:\WINDOWS\ServicePackFiles\i386\h323msp.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:26 614912 C:\WINDOWS\system32\h323msp.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe

[1] 2004-08-19 16:09:54 768512 C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe (Microsoft Corporation)

[1] 2003-04-23 19:00:00 742400 C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe ()

[1] 2008-04-13 19:34:06 769024 C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:06 769024 C:\WINDOWS\ServicePackFiles\i386\helpctr.exe (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll

[1] 2004-08-19 16:09:30 332800 C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 436736 C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll ()

[1] 2008-04-13 19:33:27 332800 C:\WINDOWS\ServicePackFiles\i386\ipnathlp.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:30 332800 C:\WINDOWS\system32\ipnathlp(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:27 332800 C:\WINDOWS\system32\ipnathlp.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll

[1] 2004-10-27 18:29:47 728576 C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2006-08-17 05:43:04 733184 C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2007-11-07 02:50:06 733696 C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:35 735744 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-26 02:41:46 736768 C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\lsasrv.dll (Microsoft Corporation)

[1] 2007-11-07 02:28:31 728576 C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 678400 C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll ()

[1] 2004-08-19 16:09:30 728576 C:\WINDOWS\$NtUninstallKB885835$\lsasrv.dll (Microsoft Corporation)

[1] 2004-10-27 18:23:59 728576 C:\WINDOWS\$NtUninstallKB924270$\lsasrv.dll (Microsoft Corporation)

[1] 2006-08-17 05:29:49 728576 C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:28 734720 C:\WINDOWS\$NtUninstallKB956572$\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:56 735744 C:\WINDOWS\$NtUninstallKB968389$\lsasrv.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:28 734720 C:\WINDOWS\ServicePackFiles\i386\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:20:32 730112 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:03:39 735232 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:53:56 735744 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\lsasrv.dll (Microsoft Corporation)

[1] 2009-02-09 03:56:35 735744 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-25 01:26:32 736768 C:\WINDOWS\system32\dllcache\lsasrv.dll (Microsoft Corporation)

[1] 2009-06-25 01:26:32 736768 C:\WINDOWS\system32\lsasrv.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll

[1] 2007-03-08 08:50:30 40960 C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\mf3216.dll (Microsoft Corporation)

[1] 2007-03-08 08:37:50 40960 C:\WINDOWS\$NtServicePackUninstall$\mf3216.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 35328 C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll ()

[1] 2004-08-19 16:09:30 39936 C:\WINDOWS\$NtUninstallKB925902$\mf3216.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:28 40960 C:\WINDOWS\ServicePackFiles\i386\mf3216.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:28 40960 C:\WINDOWS\system32\mf3216.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll

[1] 2004-08-19 16:09:33 57344 C:\WINDOWS\$NtServicePackUninstall$\msasn1.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 51200 C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll ()

[1] 2003-09-19 10:56:42 51712 C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll ()

[1] 2008-04-13 19:33:30 57344 C:\WINDOWS\ServicePackFiles\i386\msasn1.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:33 57344 C:\WINDOWS\system32\msasn1(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:30 57344 C:\WINDOWS\system32\msasn1.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\msgina.dll

[1] 2004-08-19 16:09:33 1004032 C:\WINDOWS\$NtServicePackUninstall$\msgina.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 977920 C:\WINDOWS\$NtUninstallKB835732$\msgina.dll ()

[1] 2008-04-13 19:33:31 1007104 C:\WINDOWS\ServicePackFiles\i386\msgina.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:31 1007104 C:\WINDOWS\system32\msgina.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\mst120.dll

[1] 2004-08-19 16:09:33 274432 C:\WINDOWS\$NtServicePackUninstall$\mst120.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 249856 C:\WINDOWS\$NtUninstallKB835732$\mst120.dll ()

[1] 2008-04-13 19:33:32 274432 C:\WINDOWS\ServicePackFiles\i386\mst120.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:32 274432 C:\WINDOWS\system32\dllcache\mst120.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll

[1] 2006-07-14 08:42:01 336896 C:\WINDOWS\$hf_mig$\KB921883\SP2QFE\netapi32.dll (Microsoft Corporation)

[1] 2006-08-17 05:43:04 337408 C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll (Microsoft Corporation)

[1] 2008-10-15 09:31:32 339456 C:\WINDOWS\$hf_mig$\KB958644\SP3QFE\netapi32.dll (Microsoft Corporation)

[1] 2006-08-17 05:29:49 332288 C:\WINDOWS\$NtServicePackUninstall$\netapi32.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 309248 C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll ()

[1] 2004-08-19 16:09:35 332288 C:\WINDOWS\$NtUninstallKB921883$\netapi32.dll (Microsoft Corporation)

[1] 2006-07-14 08:41:05 332288 C:\WINDOWS\$NtUninstallKB924270$\netapi32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:34 337408 C:\WINDOWS\$NtUninstallKB958644$\netapi32.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:34 337408 C:\WINDOWS\ServicePackFiles\i386\netapi32.dll (Microsoft Corporation)

[1] 2008-10-15 09:35:43 337408 C:\WINDOWS\system32\dllcache\netapi32.dll (Microsoft Corporation)

[2] 2006-08-17 05:29:49 332288 C:\WINDOWS\system32\netapi32(2).dll (Microsoft Corporation)

[1] 2008-10-15 09:35:43 337408 C:\WINDOWS\system32\netapi32.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll

[1] 2004-08-19 16:09:36 77824 C:\WINDOWS\$NtServicePackUninstall$\nmcom.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 69632 C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll ()

[1] 2008-04-13 19:33:36 77824 C:\WINDOWS\ServicePackFiles\i386\nmcom.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:36 77824 C:\WINDOWS\system32\dllcache\nmcom.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll

[1] 2003-04-23 19:00:00 552960 C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll ()

[1] 2008-04-13 19:30:54 994816 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB835732$\schannel.dll

[1] 2007-04-25 13:32:29 144896 C:\WINDOWS\$hf_mig$\KB935840\SP2QFE\schannel.dll (Microsoft Corporation)

[1] 2008-12-04 23:59:36 144896 C:\WINDOWS\$hf_mig$\KB960225\SP3QFE\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 01:41:45 147456 C:\WINDOWS\$hf_mig$\KB968389\SP3QFE\schannel.dll (Microsoft Corporation)

[1] 2007-04-25 07:22:35 144896 C:\WINDOWS\$NtServicePackUninstall$\schannel.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 136704 C:\WINDOWS\$NtUninstallKB835732$\schannel.dll ()

[1] 2004-08-19 16:09:39 144896 C:\WINDOWS\$NtUninstallKB935840$\schannel.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:40 144384 C:\WINDOWS\$NtUninstallKB960225$\schannel.dll (Microsoft Corporation)

[1] 2008-12-04 23:57:24 144896 C:\WINDOWS\$NtUninstallKB968389$\schannel.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:40 144384 C:\WINDOWS\ServicePackFiles\i386\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 01:26:32 147456 C:\WINDOWS\system32\dllcache\schannel.dll (Microsoft Corporation)

[1] 2009-06-25 01:26:32 147456 C:\WINDOWS\system32\schannel.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\dao360.dll

[1] 2008-01-22 21:56:21 554008 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:22 561179 C:\WINDOWS\$NtServicePackUninstall$\dao360.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 557128 C:\WINDOWS\$NtUninstallKB282010$\dao360.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:16 561179 C:\WINDOWS\$NtUninstallKB837001$\dao360.dll ()

[1] 2004-08-19 16:09:22 561179 C:\WINDOWS\$NtUninstallKB950749$\dao360.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:25 554008 C:\WINDOWS\ServicePackFiles\i386\dao360.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:25 554008 C:\WINDOWS\system32\dllcache\dao360.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll

[1] 2007-12-10 05:41:11 326432 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:33 319517 C:\WINDOWS\$NtServicePackUninstall$\msexcl40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 319519 C:\WINDOWS\$NtUninstallKB282010$\msexcl40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:18 319517 C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll ()

[1] 2004-08-19 16:09:33 319517 C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:30 326432 C:\WINDOWS\ServicePackFiles\i386\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:30 326432 C:\WINDOWS\system32\dllcache\msexcl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:30 326432 C:\WINDOWS\system32\msexcl40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll

[1] 2007-12-10 05:41:11 1516568 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:33 1507356 C:\WINDOWS\$NtServicePackUninstall$\msjet40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 1503262 C:\WINDOWS\$NtUninstallKB282010$\msjet40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:18 1507358 C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll ()

[1] 2004-08-19 16:09:33 1507356 C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:34 1516568 C:\WINDOWS\ServicePackFiles\i386\msjet40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:34 1516568 C:\WINDOWS\system32\dllcache\msjet40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:34 1516568 C:\WINDOWS\system32\msjet40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll

[2] 2004-03-01 11:52:15 358976 C:\WINDOWS\$NtServicePackUninstall$\msjetol1.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 348195 C:\WINDOWS\$NtUninstallKB282010$\msjetoledb40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:20 348193 C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll ()

[2] 2004-03-01 11:52:15 358976 C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll (Microsoft Corporation)

[1] 2004-03-01 11:52:15 358976 C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:40 355112 C:\WINDOWS\system32\msjetoledb40.dll ()



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll

[1] 2007-12-10 05:41:12 248608 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:33 241693 C:\WINDOWS\$NtServicePackUninstall$\msjtes40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 241695 C:\WINDOWS\$NtUninstallKB282010$\msjtes40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:22 241695 C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll ()

[1] 2004-08-19 16:09:33 241693 C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:42 248608 C:\WINDOWS\ServicePackFiles\i386\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:42 248608 C:\WINDOWS\system32\dllcache\msjtes40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:42 248608 C:\WINDOWS\system32\msjtes40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll

[1] 2007-12-10 05:41:12 355104 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:33 348189 C:\WINDOWS\$NtServicePackUninstall$\mspbde40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 348191 C:\WINDOWS\$NtUninstallKB282010$\mspbde40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:22 348189 C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll ()

[1] 2004-08-19 16:09:33 348189 C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:45 355104 C:\WINDOWS\ServicePackFiles\i386\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:45 355104 C:\WINDOWS\system32\dllcache\mspbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:45 355104 C:\WINDOWS\system32\mspbde40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll

[1] 2007-12-10 05:41:13 559904 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:33 552989 C:\WINDOWS\$NtServicePackUninstall$\msrepl40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 552991 C:\WINDOWS\$NtUninstallKB282010$\msrepl40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:26 552989 C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll ()

[1] 2004-08-19 16:09:33 552989 C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:52 559904 C:\WINDOWS\ServicePackFiles\i386\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:52 559904 C:\WINDOWS\system32\dllcache\msrepl40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:52 559904 C:\WINDOWS\system32\msrepl40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll

[1] 2007-12-10 05:41:13 264992 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:34 258077 C:\WINDOWS\$NtServicePackUninstall$\mstext40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 253983 C:\WINDOWS\$NtUninstallKB282010$\mstext40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:26 258079 C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll ()

[1] 2004-08-19 16:09:34 258077 C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:55 264992 C:\WINDOWS\ServicePackFiles\i386\mstext40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:55 264992 C:\WINDOWS\system32\dllcache\mstext40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:55 264992 C:\WINDOWS\system32\mstext40.dll (Microsoft Corporation)



Cannot access: C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll

[1] 2007-12-10 05:41:14 355104 C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll (Microsoft Corporation)

[1] 2004-08-19 16:09:34 348189 C:\WINDOWS\$NtServicePackUninstall$\msxbde40.dll (Microsoft Corporation)

[1] 2003-04-23 19:00:00 344095 C:\WINDOWS\$NtUninstallKB282010$\msxbde40.dll (Microsoft Corporation)

[1] 2003-05-11 20:35:28 348189 C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll ()

[1] 2004-08-19 16:09:34 348189 C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:58 355104 C:\WINDOWS\ServicePackFiles\i386\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:58 355104 C:\WINDOWS\system32\dllcache\msxbde40.dll (Microsoft Corporation)

[1] 2008-03-24 21:50:58 355104 C:\WINDOWS\system32\msxbde40.dll (Microsoft Corporation)



Found mount point : C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\System.EnterpriseServices

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\IEExecRemote

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP15F.tmp\ZAP15F.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP20F.tmp\ZAP20F.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2F6.tmp\ZAP2F6.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP320.tmp\ZAP320.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP32B.tmp\ZAP32B.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP3ED.tmp\ZAP3ED.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP47A.tmp\ZAP47A.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7E.tmp\ZAP7E.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d1\d1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d2\d2

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d3\d3

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d4\d4

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d5\d5

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d6\d6

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d7\d7

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\CSC\d8\d8

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ftpcache\ftpcache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\chsime\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\shared\res\res

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\89538DB0FE2C343348B7D7E248951982\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\CC35DA270CCC75734808E91E6768A6C7\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\{C17C6A3C-3695-4A08-A3A0-4D3DCE4E4130}\{C17C6A3C-3695-4A08-A3A0-4D3DCE4E4130}

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Internet Logs\Internet Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msdownld.tmp\msdownld.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\mui\mui

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Options\Install\Install

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\ERRORREP\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe

[1] 2004-08-19 16:09:54 743936 C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:06 744448 C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpsvc.exe ()

[1] 2008-04-13 19:34:06 744448 C:\WINDOWS\ServicePackFiles\i386\helpsvc.exe (Microsoft Corporation)



Found mount point : C:\WINDOWS\PCHealth\HelpCtr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PCHealth\HelpCtr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\security\logs\logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\011cdeb527c0ded3735dde8070aaf659\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\1622015267fbf2ec4306f169bef0e298\1622015267fbf2ec4306f169bef0e298

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\2e3ca815e0add68c217cb5803ec109dd\2e3ca815e0add68c217cb5803ec109dd

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\32a68038cbc8e2f304034165d1cab2e1\32a68038cbc8e2f304034165d1cab2e1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\6e9db3ae2149df3d0e191e2c3c62f2e0\6e9db3ae2149df3d0e191e2c3c62f2e0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\743d2b15f77fe959a0315b201635ca64\743d2b15f77fe959a0315b201635ca64

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\9b3389feaa4b1cc28c41602293d5d0a8\9b3389feaa4b1cc28c41602293d5d0a8

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\a6991febce2e09c0b9e5a8c4702c0781\a6991febce2e09c0b9e5a8c4702c0781

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\b6d9b5c6f7aca2a8c316c06d5e3d7582\b6d9b5c6f7aca2a8c316c06d5e3d7582

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\d0b7d114924fd9227b6a2e211971a752\d0b7d114924fd9227b6a2e211971a752

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\ddb5a4bc745d6c9417878e1c725abb66\ddb5a4bc745d6c9417878e1c725abb66

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\fefadc649fc57605016f03697a56e630\fefadc649fc57605016f03697a56e630

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1025\1025

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1028\1028

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1031\1031

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1037\1037

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1041\1041

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1042\1042

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1054\1054

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\2052\2052

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3076\3076

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TempDir\TempDir

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\CF17608.exe

[1] 2009-09-05 15:52:37 401408 C:\WINDOWS\system32\CF17608.exe ()



Cannot access: C:\WINDOWS\system32\CF19001.exe

[1] 2009-09-05 11:34:27 401408 C:\WINDOWS\system32\CF19001.exe ()



Cannot access: C:\WINDOWS\system32\CF4035.exe

[1] 2009-09-05 15:11:05 401408 C:\WINDOWS\system32\CF4035.exe ()



Cannot access: C:\WINDOWS\system32\CF4115.exe

[1] 2009-09-06 11:31:15 401408 C:\WINDOWS\system32\CF4115.exe ()



Cannot access: C:\WINDOWS\system32\CF562.exe

[1] 2009-09-05 14:25:27 401408 C:\WINDOWS\system32\CF562.exe ()



Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Identities\{460DE967-20DE-4CA5-A36D-CC2FBAA42CAC}\{460DE967-20DE-4CA5-A36D-CC2FBAA42CAC}

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Crypto\RSA\RSA

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Real\Msg\Msg

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Sun\Java\Deployment\javaws\cache\cache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Bureau\Bureau

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\OFFICE\OFFICE

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Voisinage d'impression\Voisinage d'impression

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Voisinage réseau\Voisinage réseau

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\dhcp\dhcp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\dumprep.exe

[1] 2004-08-19 16:09:51 10752 C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:01 10752 C:\WINDOWS\ServicePackFiles\i386\dumprep.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:01 10752 C:\WINDOWS\system32\dumprep.exe ()



Cannot access: C:\WINDOWS\system32\eventlog.dll

[1] 2004-08-19 16:09:25 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)

[1] 2008-04-13 19:33:24 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)

[2] 2004-08-19 16:09:25 55808 C:\WINDOWS\system32\eventlog(2).dll (Microsoft Corporation)

[1] 2008-04-13 19:33:24 61952 C:\WINDOWS\system32\eventlog.dll ()

[2] 2008-04-13 19:33:24 56320 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)



Found mount point : C:\WINDOWS\system32\export\export

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\FxsTmp\FxsTmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\CINTLGNT\CINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\PINTLGNT\PINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\TINTLGNT\TINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\inetsrv\inetsrv

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\LogFiles\WMI\WMI

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\ispsgnup\ispsgnup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemcust\oemcust

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemhw\oemhw

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemreg\oemreg

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\sample\sample

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\spool\drivers\w32x86\3\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\mof\good\good

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\wbem\SET6.tmp

[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\system32\wbem\SET6.tmp ()



Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\wbem\wmiprvse.exe

[1] 2009-02-06 03:15:13 227840 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe (Microsoft Corporation)

[1] 2004-08-19 16:10:05 218112 C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:28 218112 C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe (Microsoft Corporation)

[1] 2008-04-13 19:34:28 218112 C:\WINDOWS\ServicePackFiles\i386\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 09:39:29 227840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2GDR\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 02:41:05 227840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP2QFE\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3GDR\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 03:15:13 227840 C:\WINDOWS\SoftwareDistribution\Download\284fbcf1e8e0b40c0953d6b85a551eae\SP3QFE\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\system32\dllcache\wmiprvse.exe (Microsoft Corporation)

[1] 2009-02-06 03:10:02 227840 C:\WINDOWS\system32\wbem\wmiprvse.exe ()



Found mount point : C:\WINDOWS\system32\wins\wins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\xircom\xircom

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\AskBarDis\RSS\RSS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\Cookies\Cookies

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\Google Toolbar\Google Toolbar

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\_avast4_\_avast4_

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2

Mount point destination : \Device\__max++>\^



Finished!

Salut Dca666


Important Désactive ton Antivirus et antispyware avant le scan avec DiagHelp :
http://forum.pcastuces.com/desactiver_les_protections_residentes-f31s4.htm


Télécharge DiagHelp sur le bureau ici :

http://www.malekal.com/download/DiagHelp.zip

Lire et suivre attentivement le tutoriel ici :

http://www.malekal.com/DiagHelp/DiagHelp.php


- Choisi l'option 1 (Lister Fichiers), enregistre-le sur le bureau.

---

Utilise ensuite cjoint.com http://cjoint.com/ pour poster en lien ton rapport

- Clique sur Parcourir pour aller chercher le rapport
- Clique sur Ouvrir ensuite sur Créer le lien Cjoint

- Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.


@++

Salut,


Ca marche pas, la fenêtre ce ferme tout seul 5 sec après avoir fait enter.

Salut Dca666


Je t'envoie un MP


@++

Bonsoir,

Je remplace dédétraqué pour ce poste.
Tu es infecté par une infection très complexe. La désinfection n'est pas assurée à 100%

Il est nécessaire que Win32kDiag se trouve sur le bureau pour que l’opération se déroule correctement.
Désactive tes logiciels de sécurité durant la procédure.

1) Rends-toi dans le menu Démarrer >> Exécuter > Copie/colle la commande ci-dessous dans la boite de dialogue, puis appuie sur la touche ENTER :

- Win32kDiag va se lancer. Il est normal que le scan prenne du temps.
- Une fois l’opération terminée, un nouveau fichier Win32kDiag.txt sera créé sur le bureau.


2) Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :
Dans le menu du bloc notes, clic sur "Fichier" >> Enregistrer sous.
Choisis le bureau comme lieu d'enregistrement, puis dans:

Type -> choisis "tous les fichiers"
Nom du fichier -> tape cfiles.bat.
Clic sur enregistrer.

- Sur ton bureau tu auras maintenant un fichier nommé cfiles.bat.
- Double clic sur le fichier pour le lancer. Une fenêtre noir doit apparaître durant un court un instant.


3) Télécharge The Avenger by Swandog46 et enregistre-le sur ton bureau.

- Dézippe le sur ton bureau
- Lance l'outil en double-cliquant sur l'icône placée sur ton bureau.
- Accepte les termes d'utilisations en cliquant sur OK
- Vérifie que les cases situés à côté de "Scan for rootkit" et "Automatically disable any rootkits found" ne soient pas cochées avant de poursuivre.

- Sélectionne cette liste dans le cadre :

--> Clic droit > copier

- Dans The Avenger >> Load Script > Paste from Clipboard
- Clique sur "Execute" pour lancer l'outil et confirme avec "OUI/YES"

- L'ordinateur va redémarrer.
- Un rapport va s’ouvir. Si il ne s’ouvre pas automatiquement, tu peux le trouver ici C:\avenger.txt .


4) Télécharge Combofix de sUBs : combofix.exe et sauvegarde-le sur ton bureau.

- Connecte tous tes supports amovibles (clés USB, disques, lecteurs MP3, etc.).
- Double-clic sur combofix, accepte la licence d'utilisation et laisse toi guider.
- Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.


Si tu n'as plus accès à Internet après l'utilisation de ComboFix :
Suis cette procédure :

1. Cliquez sur le bouton Démarrer.
2. Cliquez sur l'option de menu Paramètres.
3. Cliquez sur l'option Panneau de configuration.
4. Après l'ouverture du Panneau de configuration, faites un double clic sur l'icône Connexions réseau. Si votre Panneau de configuration est paramétré pour un affichage en catégories, faites un double clic sur Connexions réseau et Internet puis cliquez sur Connexions réseau tout en bas.
5. Vous verrez alors une liste de toutes les connexions réseau disponibles. Repérez la connexion vers votre adaptateur Sans Fil ou Réseau local et faites un clic droit dessus.
6. Vous verrez alors un menu similaire à celui de l'image ci-dessous. Cliquez simplement sur l'option de menu Réparer.


7. Laissez le processus de réparation se dérouler, et lorsqu'il a terminé, votre connexion Internet devrait être de nouveau opérationnelle.

Sinon, si une icône de votre réseau apparaît aussi dans la barre des tâches Windows, vous pouvez la réparer en faisant un clic droit sur l'icône et en choisissant Réparer comme le montre l'image ci-dessous:



En résumé, poste le contenu des rapports ci-dessous :

C:\Documents and Settings\Michel Thibodeau\Bureau\Win32kDiag.txt
C:\avenger.txt
C:\ComboFix.txt


Comment se comporte le système ?


Cordialement.

Salut Dédétraqué et Curson,


Merci bcp pour votre aide!!
Ca fais 5 jours que j'essaie d'enlever ce virus, hehe jai trop d'orgueil. Y faut pas qui gagne!

Sauf que ma cliente ne pense pas comme ca.. heh
Donc jai fais un backup des fichiers et formaté.
Le laptop va super bien.
Je trouve ca quand meme bizarre que Nod32 et Malwarebytes aille rien trouvé quand jai scanné le disquedur a partir d'un autre ordi......
Pas mal weird..
Merci encore pour votre aide!