Sysiclog

Time<2011,07.19.
,16:30:17> : start main( __argc, __argv );

Time<2011,07.19.,16:30:17> : enter main function.
Time<2011,07.19.,16:33:35> : start main( __argc, __argv );
Time<2011,07.19.,16:33:35> : Now start services dispatch
Time<2011,07.19.,16:33:35> : Start Pending, before servicestart.
Time<2011,07.19.,16:33:36> : Report Service running in ServiceStart.
Time<2011,07.19.,16:33:36> : OOBE flag has not been set at ..\TvTuMon\Parameters
.Check Setup State Flag
Time<2011,07.19.,16:35:03> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN----------Time<2011,07.19.,16:35:03> : CheckTimeOut_shutdown:Update <0> Reg files
Time<2011,07.19.,16:35:04> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN<C
heckTimeOut_shutdown>-----------Time<2011,07.19.,16:35:04> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN<C
heckTimeOut_shutdown>-----------Time<2011,07.19.,16:39:52> : start main( __argc, __argv );
Time<2011,07.19.,16:41:47> : ------------ServiceStart:SERVICE START-----------Time<2011,07.19.,16:41:48> : ReadLastAutoUpdate32 g_cKerFileDigests.Save() retur
n -100
Time<2011,07.19.,16:41:48> : ReadLastUpdate32:<g_cKerFileDigests.Save> return c
ode = -100
Time<2011,07.19.,16:41:48> : ReadLastUpdate32:<g_UpdatingList.Save> after remove
_all items. return code = 0
heckTimeOut_shutdown>------------

Time<2011,07.19.,17:51:57> :
Time<2011,07.19.,17:51:57> :
g for driver.
Time<2011,07.19.,17:52:19> :
Time<2011,07.19.,17:52:24> :
ndows\system32\netapi32.dll,
OOBE flag has not been set at ..\TvTuMon\Parameters

IMAGE_STATE_COMPLETE has been set. Set the OOBE fla
------------ServiceStart:SERVICE START-----------ReadLastAutoUpdate32 g_cUpdateFileDB.SaveFile:c:\wi
return 0
Time<2011,07.19.,17:52:24> : ReadLastAutoUpdate32 g_cUpdateFileDB.SetDigest:c:\w

indows\system32\netapi32.dll ,return 0, hash(new) is [2de7791a1756d71785eaf73bd7
4bdfb1a79bb0997de95b743643f34664be23d6]
Time<2011,07.19.,17:52:25> : ReadLastAutoUpdate32 g_cUpdateFileDB.SaveFile:c:\wi
ndows\system32\gdi32.dll, return 0
indows\system32\gdi32.dll ,return 0, hash(new) is [ff3bc13ea5450289c33da4658361e
196c11979d96c134381ec64161ed8a6bd8b]
ndows\system32\rpcss.dll, return 0
indows\system32\rpcss.dll ,return 0, hash(new) is [b887b7b8dbb6e3bd86090c1c6e8e5
509d4f8aada312d370622d870662a7c054d]
ndows\system32\secur32.dll, return 0
indows\system32\secur32.dll ,return 0, hash(new) is [cb233b296b7ced21150244a43b6
977189fa271bb160a0d03187cc3862eeed346]
ndows\system32\advpack.dll, return 0
indows\system32\advpack.dll ,return 0, hash(new) is [4ba6c93bfd43baeb852b5cb9129
522c97ddb542d7ef8ee34aecd8cdf1bf0fc38]
ndows\system32\wininet.dll, return 0
indows\system32\wininet.dll ,return 0, hash(new) is [dd10b2cd21301c0056e7dbf41f9

031e802878641480d486f1df5132fb0f65d0d]
ndows\system32\msasn1.dll, return 0
indows\system32\msasn1.dll ,return 0, hash(new) is [b1b45e522baf3c3cc8f7622af51f
1ac1d9698cc3d2554150da0b32b0edcf9f02]
ndows\system32\msv1_0.dll, return 0
indows\system32\msv1_0.dll ,return 0, hash(new) is [ea11710924de94a3316cfd629e9d
b0d7aad0615c78d5b59bc105e42959407d0b]
ndows\system32\shlwapi.dll, return 0
indows\system32\shlwapi.dll ,return 0, hash(new) is [8933951c20312596d1f4a58cd33
a5f679ef747b47c34cb78a4266759910126ce]
ndows\system32\wintrust.dll, return 0
indows\system32\wintrust.dll ,return 0, hash(new) is [5c087dd38e199f8e7da317bb0e
6d47be0e8817bb2f0dea04e98939b4e1942678]
ndows\system32\ole32.dll, return 0
indows\system32\ole32.dll ,return 0, hash(new) is [68753e3c00c38f55b3486b0a87a64
9861db91a63bbe18e6d75a8c3a30e355c35]
ndows\system32\mfc42u.dll, return 0
indows\system32\mfc42u.dll ,return 0, hash(new) is [406e5fa645d8211bc2469de47e07
8aeb7b80fc16fe4ff724743e0965fa860365]
ndows\system32\mfc42.dll, return 0
indows\system32\mfc42.dll ,return 0, hash(new) is [5eda17eec12472b93c01563e5b0a1
237c3d172e97a809963b6a25a5e8a3f4be1]
ndows\system32\rpcrt4.dll, return 0
indows\system32\rpcrt4.dll ,return 0, hash(new) is [aa3415c23edc57398954c5a3d66f
9f970bbc34c81fe16509426a434d3aa67945]
ndows\system32\odbc32.dll, return 0
indows\system32\odbc32.dll ,return 0, hash(new) is [ebd6f444e2fdba4a3fb9b63eadf2
3122b4bd17cdb9d6de82f642cd726b0d8d7c]
ndows\system32\shell32.dll, return 0
indows\system32\shell32.dll ,return 0, hash(new) is [4ff83e105b77e3d804ebeb10cfd
81d4f7343b8f99719ef835d49668429d3a4be]
ndows\system32\shsvcs.dll, return 0
indows\system32\shsvcs.dll ,return 0, hash(new) is [205ac4b8b6c7c67eca66473da38b
e25b4421f0905a1658c7ab71574d9df1a043]
ndows\system32\dnsapi.dll, return 0
indows\system32\dnsapi.dll ,return 0, hash(new) is [ddb25819a126cbd19b8b6d370d9f
9db5a19c7aa71e5c3dfab2168e036865ba20]
ndows\system32\winsrv.dll, return 0
indows\system32\winsrv.dll ,return 0, hash(new) is [172ec032c77e02e5c7d22f3b8d22
84d2c2167afcb9d6ff9be97a2aa691299cd7]
Time<2011,07.19.,17:52:40> : ReadLastAutoUpdate32 g_cKerFileDigests.Save() retur
n 0
ode = 0
Time<2011,07.19.,17:52:45> : FileListen32:receive MSG from driver <Process>c:\1f
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\inf\oem0.inf
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\lastgood\tmp8
.tmp
.tmp
.tmp
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\lastgood\inf\
oem16.inf
.tmp
.tmp
.tmp

110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\lastgood\inf\
oem16.pnf
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\_000000_.cat
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\catr
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\_000000_.tmp.
dll
dll
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\conf
ig\system
ig\system
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\wganotify.cat
ig\system
ig\system
ig\system
ig\system
ig\system
ig\system
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
dll
dll
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\sete
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\legi
tcheckcontrol.dll
.tmp
.tmp
tcheckcontrol.dll
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\setf
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\wgal
ogon.dll
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\set1
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
0.tmp
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\wgat
ray.exe
110fbeed24b3f51996cadeb794ba68\update\update.exe <File>c:\windows\system32\dllc
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\set11.tmp
ache\wgalogon.dll
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\set12.tmp
ache\wgatray.exe
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
3.tmp
tcheckcontrol.dll
3.tmp
3.tmp
tcheckcontrol.dll
3.tmp
3.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
ogon.dll
4.tmp
4.tmp
ogon.dll
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
5.tmp
ray.exe
5.tmp
ray.exe
5.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\set16.tmp
ache\wgalogon.dll
ache\set16.tmp
ache\set16.tmp
ache\wgalogon.dll
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\set17.tmp
ache\wgatray.exe
ache\set17.tmp
ache\wgatray.exe
ache\set17.tmp
Time<2011,07.19.,18:09:06> : FileListen32:receive MSG from driver <Process>c:\3e
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\docume~1\javier\config~
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\inf\oem0.inf
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\catroo
t2\dberr.txt
t2\dberr.txt
t2\dberr.txt
t2\dberr.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\inf\oem16.pnf

1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\config
\system
\system
\system
\system
\system

t2\dberr.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\_000000_.tmp.dl
l
t2\dberr.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\_000000_.tmp.dl
l
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\kb954550-v5.cat
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
t2\dberr.txt
t2\dberr.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\3e6909fe814ac76306ba1e9
672ad09\amd64\set1a6.tmp




672ad09\amd64\xpssvcs.dll
1\temp\dd_xps.txt

672ad09\amd64\mxdwdrv.dll
1\temp\dd_xps.txt
672ad09\amd64\msxpsinc.ppd

1\temp\dd_xps.txt
672ad09\amd64\msxpsinc.gpd
1\temp\dd_xps.txt
672ad09\amd64\set1aa.tmp

672ad09\amd64\msxpsdrv.inf
1\temp\dd_xps.txt
672ad09\amd64\set1ab.tmp
672ad09\amd64\msxpsdrv.cat
1\temp\dd_xps.txt
672ad09\amd64\set1ac.tmp

672ad09\amd64\filterpipelineprintproc.dll
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\spool\
prtprocs\w32x86\set1ad.tmp

prtprocs\w32x86\printfilterpipelinesvc.exe
1\temp\dd_xps.txt
672ad09\i386\set1ae.tmp


672ad09\i386\xpssvcs.dll
1\temp\dd_xps.txt
672ad09\i386\set1af.tmp

672ad09\i386\mxdwdrv.dll
1\temp\dd_xps.txt
672ad09\i386\set1b0.tmp

672ad09\i386\msxpsinc.ppd
1\temp\dd_xps.txt
672ad09\i386\msxpsinc.gpd
1\temp\dd_xps.txt

672ad09\i386\msxpsdrv.inf
1\temp\dd_xps.txt
672ad09\i386\msxpsdrv.cat

1\temp\dd_xps.txt
672ad09\i386\filterpipelineprintproc.dll
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\set1b5
.tmp
.tmp
.tmp
.tmp
.tmp

.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp

.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\xpssvc
s.dll
.tmp
.tmp
1\temp\dd_xps.txt
.tmp
.tmp

.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\xpsshh
dr.dll
1\temp\dd_xps.txt
.tmp

.tmp
.tmp
.tmp
.tmp
.tmp
.tmp
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\prntvp
t.dll
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\driver cache\i3
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp

86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\set1b8.tmp
86\unires.dll
86\set1b8.tmp
1\temp\dd_xps.txt
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp

86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\set1b9.tmp
86\unidrvui.dll

1\temp\dd_xps.txt
86\set1ba.tmp
86\set1ba.tmp
86\set1ba.tmp
86\set1ba.tmp
86\set1ba.tmp
86\set1ba.tmp
86\unidrv.hlp
1\temp\dd_xps.txt
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp

86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\set1bb.tmp
86\unidrv.dll
1\temp\dd_xps.txt
86\set1bc.tmp
86\set1bc.tmp
86\set1bc.tmp
86\set1bc.tmp
86\set1bc.tmp
86\set1bc.tmp
86\stdschmx.gdl
1\temp\dd_xps.txt

86\set1bd.tmp
86\set1bd.tmp
86\set1bd.tmp
86\set1bd.tmp
86\set1bd.tmp
86\set1bd.tmp
86\stdschem.gdl
1\temp\dd_xps.txt
86\set1be.tmp
86\set1be.tmp
86\set1be.tmp
86\set1be.tmp
86\set1be.tmp
86\set1be.tmp
86\stdnames.gpd

1\temp\dd_xps.txt
86\set1bf.tmp
86\set1bf.tmp
86\set1bf.tmp
86\set1bf.tmp
86\set1bf.tmp
86\set1bf.tmp
86\stddtype.gdl
1\temp\dd_xps.txt
86\set1c0.tmp
86\set1c0.tmp
86\set1c0.tmp
86\set1c0.tmp
86\set1c0.tmp
86\set1c0.tmp

86\mxdwdui.ini
1\temp\dd_xps.txt
86\set1c1.tmp
86\set1c1.tmp
86\set1c1.tmp
86\set1c1.tmp
86\set1c1.tmp
86\set1c1.tmp
86\set1c1.tmp
86\mxdwdui.gpd
1\temp\dd_xps.txt
86\set1c2.tmp
86\set1c2.tmp
86\set1c2.tmp
86\set1c2.tmp

86\set1c2.tmp
86\set1c2.tmp
86\set1c2.tmp
86\set1c2.tmp
86\set1c2.tmp
86\mxdwdui.dll
1\temp\dd_xps.txt
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp

86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\set1c3.tmp
86\mxdwdrv.dll
1\temp\dd_xps.txt
86\set1c4.tmp
86\set1c4.tmp
86\set1c4.tmp
86\set1c4.tmp

86\set1c4.tmp
86\set1c4.tmp
86\msxpsinc.ppd
1\temp\dd_xps.txt
86\set1c5.tmp
86\set1c5.tmp
86\set1c5.tmp
86\set1c5.tmp
86\set1c5.tmp
86\set1c5.tmp
86\msxpsinc.gpd
1\temp\dd_xps.txt
86\set1c6.tmp
86\set1c6.tmp
86\set1c6.tmp

86\set1c6.tmp
86\set1c6.tmp
86\set1c6.tmp
86\msxpsdrv.inf
1\temp\dd_xps.txt
86\set1c7.tmp
86\set1c7.tmp
86\set1c7.tmp
86\set1c7.tmp
86\set1c7.tmp
86\set1c7.tmp
86\set1c7.tmp
86\filterpipelineprintproc.dll
1\temp\dd_xps.txt
6909fe814ac76306ba1e9672ad09\update\update.exe <File>c:\windows\system32\dllcac
he\set1c8.tmp

he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp

he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\set1c8.tmp
he\xpssvcs.dll

he\set1c8.tmp
1\temp\dd_xps.txt
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp
he\set1c9.tmp

he\set1c9.tmp
he\xpsshhdr.dll
1\temp\dd_xps.txt
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp

he\set1ca.tmp
he\set1ca.tmp
he\set1ca.tmp
he\printfilterpipelinesvc.exe
1\temp\dd_xps.txt
he\set1cb.tmp
he\set1cb.tmp
he\set1cb.tmp
he\set1cb.tmp
he\set1cb.tmp
he\set1cb.tmp
he\set1cb.tmp
he\filterpipelineprintproc.dll
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt

1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
1\temp\dd_xps.txt
Time<2011,07.19.,18:12:06> : ------------service_ctrl:SERVICE
---------Time<2011,07.19.,18:12:06> : CheckTimeOut_shutdown:Update <1>
heckTimeOut_shutdown>-----------Time<2011,07.19.,18:12:07> : ------------service_ctrl:SERVICE
CONTROL SHUTDOWN-Reg files

CONTROL SHUTDOWN<C
CONTROL SHUTDOWN<C

Time<2011,07.19.,18:13:07> : OOBE flag has already been set at ..\TvTuMon\Parame
ters.
n -100
ode = -100

ters.
n -100
ode = -100
ters.
n -100
ode = -100

ters.
n -100
ode = -100
ters.
n -100
Time<2011,07.19.,12:36:49> :
ode = -100
Time<2011,07.19.,12:36:49> :
Time<2011,07.19.,12:38:09> :
Time<2011,07.19.,12:38:09> :
---------Time<2011,07.19.,12:38:09> :
Time<2011,07.19.,12:38:10> :
ReadLastUpdate32:<g_cKerFileDigests.Save> return c
ReadLastUpdate32:<g_UpdatingList.Save> after remove
ReadLastUpdate32:<g_UpdatingList.Save> after remove
------------service_ctrl:SERVICE CONTROL SHUTDOWN-CheckTimeOut_shutdown:Update <0> Reg files
------------service_ctrl:SERVICE CONTROL SHUTDOWN<C

ters.
n -100
ode = -100
ters.
Time<2011,07.19.,19:04:46> : ------------ServiceStart:SERVICE START-----------Time<2011,07.19.,19:04:49> : ReadLastAutoUpdate32 g_cUpdateFileDB.SaveFile:c:\wi
ndows\system32\drivers\http.sys, return 0
indows\system32\drivers\http.sys ,return 0, hash(new) is [524d9e9201572929522f68
05011783711b7c0f76308b924c89cf75f4b7a1fdf3]

n 0
ode = 0
Time<2011,07.19.,19:12:45> : FileListen32:receive MSG from driver <Process>c:\e8
e70b08d984fa42fc\update\update.exe <File>c:\windows\inf\oem0.inf
e70b08d984fa42fc\update\update.exe <File>c:\windows\lastgood\tmp1cd.tmp

e70b08d984fa42fc\update\update.exe <File>c:\windows\lastgood\inf\oem16.inf
e70b08d984fa42fc\update\update.exe <File>c:\windows\lastgood\tmp1ce.tmp
e70b08d984fa42fc\update\update.exe <File>c:\windows\lastgood\inf\oem16.pnf
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\catroot2\dberr.txt
e70b08d984fa42fc\update\update.exe <File>c:\windows\inf\oem16.pnf

e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\config\system

e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\set1cf.tmp
e70b08d984fa42fc\update\update.exe <File>c:\windows\wudf01000.cat
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\set1d0.tmp

e70b08d984fa42fc\update\update.exe <File>c:\windows\_000003_.tmp.dll
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\wudfhost.exe
e70b08d984fa42fc\update\update.exe <File>c:\windows\_000003_.tmp.dll
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\wudfcoinstaller.dl
l
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\wudfplatform.dll
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\wudfsvc.dll
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\wudfx.dll
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\drivers\set1d4.tmp
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\drivers\wudfpf.sys
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\drivers\wudfrd.sys
e70b08d984fa42fc\update\update.exe <File>c:\windows\imsins.bak
e70b08d984fa42fc\update\update.exe <File>c:\windows\imsins.bak
e70b08d984fa42fc\update\update.exe <File>c:\windows\system32\drivers\umdf\msftw
df_user_01_00_00.wdf

Time<2011,07.19.,19:13:07> : FileListen32:receive MSG from driver <Process>c:\80
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\oem0.inf
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\catroot2\dberr.txt

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\oem16.pnf

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\spmsg.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\spmsg.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\_000048_.tmp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\_000048_.tmp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\wmfdist11.cat

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\_000049_.tmp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\_000049_.tmp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1d7.tm
p
p
p
p
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\blackbox.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\blackbox.
dll
p
p
p
p
p
p
p
p
p
p
p
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\drmv2clt.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\drmv2clt.
dll
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\laprxy.dl
l
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\laprxy.dl
l
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1da.tm
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\logagent.
exe
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\logagent.
exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1db.tm
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mp4sdmod.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mp4sdmod.
dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1dc.tm
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\msnetobj.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\msnetobj.
dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1dd.tm
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\qasf.dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\qasf.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1de.tm
p

p
p
p
p
p
p
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmadmod.d
ll

p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmadmod.d
ll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1df.tm
p
p
p
p
p
p
p
p
p
p
p
p

p
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmadmoe.d
ll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmadmoe.d
ll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1e0.tm
p
p

p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmasf.dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmasf.dll
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmidx.dll

p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmidx.dll
p
p
p
p
p
p
p
p
p
p
p
p

p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmnetmgr.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmnetmgr.
dll
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmsdmod.d
ll

p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmsdmod.d
ll
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmsdmoe2.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmsdmoe2.
dll
p
p
p
p

p
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmspdmod.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmspdmod.
dll
p
p

p
p
p
p
p
p
p
p
p
p
p
p
p
p
p

p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmspdmoe.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmspdmoe.
dll
p
p
p
p

p
p
p
p
p
p
p
p
p
p
p
p
p
p
p

p
p
p
p
p
p
p
p
p
p
p
p
p
p
p

p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvcore.d
ll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvcore.d
ll
p
p
p
p

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvdmod.d
ll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvdmod.d
ll
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvdmoe2.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmvdmoe2.
dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1ea.tm
p
p
p

p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\msscp.dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\msscp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1eb.tm
p
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mswmdm.dl
l
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mswmdm.dl
l
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1ec.tm
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmdmlog.d
ll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmdmlog.d
ll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1ed.tm
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmdmps.dl
l
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\wmdmps.dl
l
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1ee.tm
p
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\cewmdm.dl
l
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\cewmdm.dl
l
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1ef.tm
p
p
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mspmsp.dl
l
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mspmsp.dl
l
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\set1f0.tm
p
p
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mspmsnsv.
dll
p
p
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\dllcache\mspmsnsv.
dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1f1.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mspmsnsv.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\blackbox.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\blackbox.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drmupgds.exe

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drmv2clt.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drmv2clt.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\laprxy.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\laprxy.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\logagent.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\logagent.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mfplat.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp43decd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp43dmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp43dmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1fa.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp4sdecd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1fb.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp4sdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mp4sdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1fc.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mpg4decd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1fd.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mpg4dmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mpg4dmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1fe.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\msnetobj.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\msnetobj.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set1ff.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\qasf.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\qasf.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set200.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmadmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmadmod.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmadmoe.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmadmoe.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmasf.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmasf.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdrmdev.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdrmdev.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdrmnet.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdrmnet.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdrmsdk.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmidx.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmidx.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmnetmgr.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmnetmgr.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmsdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmsdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmsdmoe2.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmsdmoe2.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20a.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmspdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmspdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20b.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmspdmoe.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmspdmoe.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20c.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvadvd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvadvd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20d.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvadve.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvadve.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20e.tmp


f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvcore.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvcore.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\set20f.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvdecod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvdmod.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvdmod.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvdmoe2.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvdmoe2.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvencod.dll


f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvsdecd.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvsencd.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmvxencd.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\msscp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\msscp.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mswmdm.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mswmdm.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdmlog.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdmlog.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdmps.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wmdmps.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\cewmdm.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\cewmdm.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\audiodev.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\audiodev.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mspmsp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\mspmsp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\archivos de programa\windows media
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp

player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp

player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\wmsetsdk.exe
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\set21d.tmp
player\wmsetsdk.exe

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\portabledeviceapi.
dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\portabledeviceclas
sextension.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\portabledevicetype
s.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\portabledevicewiac
ompat.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\portabledevicewmdr
m.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drivers\umdf\set22
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
4.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drivers\umdf\wpdmt
pdr.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drivers\set225.tmp

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drivers\wpdusb.sys
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\drivers\wpdusb.sys
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\set226.tmp
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\wpdmtp.inf
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\wpdmtp.inf

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\inf\wpdmtphw.inf
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\uwdf.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\uwdf.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wdfapi.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wdfapi.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wdfmgr.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wdfmgr.exe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpd_ci.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpd_ci.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdconns.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdconns.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdmtp.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdmtp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdmtpus.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdmtpus.dll


f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdshext.dll

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdshextautoplay.e
xe
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdshserviceobj.dl
l

f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdsp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdsp.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\system32\wpdshextres.dll
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\imsins.bak
f81d52d2ad0c4f24\update\update.exe <File>c:\windows\imsins.bak
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\oem0.inf

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\catr
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\oem16.pnf

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\wmp11.cat
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\_000085_.tmp.
dll
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\_000085_.tmp.
dll
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\dllc
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\set238.tmp
ache\wmp.dll
ache\set238.tmp
ache\set238.tmp
ache\wmp.dll
ache\set239.tmp
ache\set239.tmp
ache\set239.tmp
ache\set239.tmp
ache\wmplayer.exe
ache\set239.tmp
ache\set239.tmp
ache\wmplayer.exe
ache\set23a.tmp
ache\set23a.tmp
ache\set23a.tmp
ache\set23a.tmp
ache\asferror.dll
ache\set23a.tmp
ache\set23a.tmp
ache\asferror.dll
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\set23b.tmp
ache\wmpdxm.dll
ache\set23b.tmp
ache\set23b.tmp
ache\wmpdxm.dll
ache\set23c.tmp
ache\set23c.tmp
ache\set23c.tmp
ache\set23c.tmp
ache\set23c.tmp
ache\set23c.tmp
ache\set23c.tmp
ache\wmpasf.dll
ache\set23c.tmp
ache\set23c.tmp
ache\wmpasf.dll
ache\set23d.tmp
ache\set23d.tmp
ache\set23d.tmp
ache\set23d.tmp
ache\set23d.tmp
ache\wmpshell.dll
ache\set23d.tmp
ache\set23d.tmp
ache\wmpshell.dll
ache\set23e.tmp
ache\set23e.tmp
ache\set23e.tmp
ache\set23e.tmp
ache\set23e.tmp
ache\set23e.tmp
ache\set23e.tmp
ache\mpvis.dll
ache\set23e.tmp
ache\set23e.tmp
ache\mpvis.dll
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\wmploc.dll
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\set23f.tmp
ache\wmploc.dll
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\set240.tmp
ache\wmerror.dll
ache\set240.tmp
ache\set240.tmp
ache\wmerror.dll
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\set241.tmp
ache\unregmp2.exe
ache\set241.tmp
ache\set241.tmp
ache\unregmp2.exe
ache\set242.tmp
ache\set242.tmp
ache\set242.tmp
ache\set242.tmp
ache\set242.tmp
ache\wmpband.dll
ache\set242.tmp
ache\set242.tmp
ache\wmpband.dll
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\set243.tmp
ache\setup_wm.exe
ache\set243.tmp
ache\set243.tmp
ache\setup_wm.exe
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\help\set244.t
mp
mp
mp
mp
mp
mp
mp
mp
mp
mp
mp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\help\wmp11.ch
m
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\set245.tm
p
p
p
p
p
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\wmplayer.
adm
p
p
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\wmplayer.
adm
p
p
p
p
p
p
p
p
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\unregmp2.
exe
p
p
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\unregmp2.
exe
p
p
p
p
p
p
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\inf\wmp11.inf
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\archivos de programa\
windows media player\set248.tmp
windows media player\wmplayer.exe

windows media player\wmplayer.exe

windows media player\setup_wm.exe

windows media player\setup_wm.exe
windows media player\set24a.tmp
windows media player\wmlaunch.exe

windows media player\wmlaunch.exe
windows media player\set24b.tmp
windows media player\mpvis.dll
windows media player\mpvis.dll
windows media player\set24c.tmp

windows media player\wmpband.dll
windows media player\wmpband.dll
windows media player\set24d.tmp
windows media player\wmpenc.exe
windows media player\wmpenc.exe
windows media player\set24e.tmp

windows media player\eula.txt
windows media player\set24f.tmp

windows media player\wmdbexport.exe
windows media player\wmpshare.exe

windows media player\legitlibm.dll
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\set2
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmp.
dll
52.tmp
52.tmp
52.tmp
52.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmp.
dll
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp
52.tmp

52.tmp
52.tmp
52.tmp
53.tmp
53.tmp
53.tmp
53.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\asfe
rror.dll
53.tmp
53.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\asfe
rror.dll
54.tmp
54.tmp
54.tmp
54.tmp

54.tmp
54.tmp
54.tmp
54.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpd
xm.dll
54.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpd
xm.dll
54.tmp
55.tmp
55.tmp
55.tmp
55.tmp
55.tmp
55.tmp
55.tmp

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpa
sf.dll
55.tmp
55.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpa
sf.dll
56.tmp
56.tmp
56.tmp
56.tmp
56.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmps
hell.dll
56.tmp
56.tmp
hell.dll
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpl
oc.dll
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp

57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
57.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpl
oc.dll
58.tmp
58.tmp
58.tmp

58.tmp
58.tmp
58.tmp
58.tmp
58.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmer
ror.dll
58.tmp
58.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmer
ror.dll
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp

59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp

59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
59.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpe
ncen.dll
59.tmp
59.tmp
ncen.dll
5a.tmp
5a.tmp
5a.tmp

5a.tmp
5a.tmp
5a.tmp
5a.tmp
rcwp.dll
5a.tmp
5a.tmp
rcwp.dll
5b.tmp
5b.tmp
5b.tmp
5b.tmp
5b.tmp
5b.tmp
5b.tmp

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\l3co
decp.acm
5b.tmp
5b.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\l3co
decp.acm
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
5c.tmp
ffects.dll

5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp
5d.tmp

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpm
de.dll
5e.tmp
5e.tmp
5e.tmp
5e.tmp
5e.tmp
5e.tmp
5e.tmp
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\system32\wmpp
s.dll

windows media player\wmpnetwk.exe

windows media player\wmpnscfg.exe

windows media player\wmpnssci.dll
windows media player\network sharing\set262.tmp
windows media player\network sharing\connectionmanager.xml

windows media player\network sharing\contentdirectory.xml
windows media player\network sharing\mediareceiverregistrar.xml

windows media player\network sharing\wmpnss_bw120.jpg
windows media player\network sharing\wmpnss_bw120.png

windows media player\network sharing\wmpnss_bw32.bmp
windows media player\network sharing\wmpnss_bw48.bmp

windows media player\network sharing\set26a.tmp
windows media player\network sharing\set26b.tmp
windows media player\network sharing\wmpnss_bw48.png
windows media player\network sharing\set26c.tmp

windows media player\network sharing\wmpnss_color120.jpg
windows media player\network sharing\set26d.tmp
windows media player\network sharing\wmpnss_color120.png
windows media player\network sharing\set26e.tmp

windows media player\network sharing\wmpnss_color32.bmp
windows media player\network sharing\set26f.tmp

windows media player\network sharing\wmpnss_color48.bmp

windows media player\network sharing\wmpnss_color48.png
windows media connect 2\set273.tmp
windows media connect 2\wmccds.exe
windows media connect 2\wmccds.exe

windows media connect 2\wmccfg.exe
windows media connect 2\wmccfg.exe
windows media connect 2\wmccpl.dll
windows media connect 2\wmccpl.dll

windows media connect 2\wmcsci.dll
windows media connect 2\wmcsci.dll
windows media connect 2\connectionmanager.xml
windows media connect 2\connectionmanager.xml

windows media connect 2\contentdirectory.xml
windows media connect 2\contentdirectory.xml
windows media connect 2\mediareceiverregistrar.xml
windows media connect 2\mediareceiverregistrar.xml
windows media connect 2\set27a.tmp

windows media connect 2\wmc_bw120.jpg
windows media connect 2\set27b.tmp

windows media connect 2\set27c.tmp
windows media connect 2\set27d.tmp
windows media connect 2\wmc_color120.jpg

windows media connect 2\set27e.tmp
windows media connect 2\set27f.tmp

windows media connect 2\wmc_bw120.png

windows media connect 2\wmc_color120.png


windows media connect 2\wmc_bw32.bmp



windows media connect 2\wmc_color32.bmp

92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\imsins.bak
92a5f80e68ef99e8205d22a10419c6\update\update.exe <File>c:\windows\imsins.bak
Time<2011,07.19.,19:14:10> : FileListen32:receive MSG from driver <Process>c:\ce
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\inf\oem0.inf
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\catroo
t2\dberr.txt

t2\dberr.txt
t2\dberr.txt
t2\dberr.txt
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\inf\oem16.pnf

f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\spmsg.
dll
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\spmsg.
dll
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\config
\system
\system

\system
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\mscomppackv1.ca
t
t
\system
t2\dberr.txt
t2\dberr.txt
\system
t2\dberr.txt
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\_000002_.tmp.dl
l
t2\dberr.txt
t
t
\system
\system
\system

f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\set28c
.tmp
\system
\system
.tmp
.tmp
\system
.tmp
.tmp
.tmp
.tmp
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\system32\msdelt
a.dll
.tmp
.tmp
.tmp
\system

\system
\system
\system
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\_000002_.tmp.dl
l
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\imsins.bak
f949dc9a0bbc0c7dc9ee2892e55e\update\update.exe <File>c:\windows\imsins.bak
Time<2011,07.19.,19:14:21> : FileListen32:receive MSG from driver <Process>c:\d8
11f768406438f518\update\update.exe <File>c:\windows\inf\oem0.inf
11f768406438f518\update\update.exe <File>c:\windows\system32\catroot2\dberr.txt
11f768406438f518\update\update.exe <File>c:\windows\inf\oem16.pnf
11f768406438f518\update\update.exe <File>c:\windows\inf\hfx28e.tmp
11f768406438f518\update\update.exe <File>c:\windows\inf\branches.inf
11f768406438f518\update\update.exe <File>c:\windows\inf\_000000_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\inf\_000000_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\spmsg.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\_000006_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\_000006_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\kb915800-v4.cat
11f768406438f518\update\update.exe <File>c:\windows\_000007_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\_000007_.tmp.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\set28f.tmp
11f768406438f518\update\update.exe <File>c:\windows\system32\offfilt.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\offfilt.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\set290.tmp
11f768406438f518\update\update.exe <File>c:\windows\system32\nlhtml.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\nlhtml.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\mimefilt.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\mimefilt.dll
11f768406438f518\update\update.exe <File>c:\windows\system32\dllcache\set292.tm
p
p
p
p
p
p
p
p
11f768406438f518\update\update.exe <File>c:\windows\system32\dllcache\offfilt.d
ll
p
p
p
p
p
p
p
11f768406438f518\update\update.exe <File>c:\windows\system32\dllcache\nlhtml.dl
l
p
p
p
p
p
p
11f768406438f518\update\update.exe <File>c:\windows\system32\dllcache\mimefilt.
dll
11f768406438f518\update\update.exe <File>c:\windows\imsins.bak
11f768406438f518\update\update.exe <File>c:\windows\imsins.bak
Time<2011,07.19.,19:14:47> : FileListen32:receive MSG from driver <Process>c:\ba
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\inf\oem0.inf
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\catroot2\dberr
.txt
.txt
.txt
.txt
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\inf\oem16.pnf


f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\kb940157.cat
.txt
.txt
.txt
.txt
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\_000064_.tmp.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\_000064_.tmp.dll

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set295.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\msscntrs.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\mssitlb.dll

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\searchprotocol
host.exe
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\searchfilterho
st.exe

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\searchindexer.
exe
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29a.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\mssph.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29b.tmp

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\mssphtb.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29c.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\mssprxy.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29d.tmp


f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\mssrch.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29e.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\msstrc.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set29f.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\propdefs.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2a0.tmp


f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\tquery.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\msscb.dll

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\gsrvctr.h
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\gsrvctr.ini
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\gthrctr.h

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\gthrctr.ini
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\idxcntrs.h
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\idxcntrs.ini

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\msshooks.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\msshsq.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2aa.tmp

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\structuredquer
yschema.bin
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2ab.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\structuredquer
yschematrivial.bin
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2ac.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\xmlfilter.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2ad.tmp

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\rtffilt.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2ae.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\srchadmin.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2af.tmp

f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\propsys.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\wbem\set2b0.tm
p
p
p
p
p
p
p
p
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\wbem\windowsse
archengine.mof
p
p
p
p
p
p
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\wbem\windowsse
archengine_uninst.mof
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\grouppolicy\ad
m\set2b2.tmp
m\set2b2.tmp
m\set2b2.tmp
m\set2b2.tmp
m\set2b2.tmp
m\set2b2.tmp
m\set2b2.tmp
m\search.adm
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\inf\set2b3.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\inf\search.adm
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\set2b4.t
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\searchin
dexer.exe.mui
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\mssrch.d
ll.mui
mp
mp
mp
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\tquery.d
ll.mui
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\mssphtb.
dll.mui
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\mssph.dl
l.mui
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\srchadmi
n.dll.mui
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\set2ba.t
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\propsys.
dll.mui
f822b5dd99873c17f6c3\update\update.exe <File>c:\archivos de programa\windows de
sktop search\set2bb.tmp
sktop search\msnlred.dll
sktop search\set2bc.tmp
sktop search\wdsmkttools.dll
sktop search\set2bd.tmp
sktop search\windowssearchres.dll
sktop search\set2be.tmp
sktop search\windowssearch.exe
sktop search\set2bf.tmp
sktop search\deskbar.dll
sktop search\set2c0.tmp
sktop search\dbsetup.dll
sktop search\dbres.dll
sktop search\wordwheel.dll
sktop search\wwres.dll
sktop search\msnlext.dll
sktop search\msnlextres.dll
sktop search\msnldl.dll
sktop search\msnldlps.dll
sktop search\msnlnamespacemgr.dll
sktop search\wdsshell.dll
sktop search\set2ca.tmp
sktop search\wdsview.dll
sktop search\set2cb.tmp
sktop search\mapine.dll
sktop search\set2cc.tmp
sktop search\mapineres.dll
sktop search\set2cd.tmp
sktop search\xppreviewproxy.dll
sktop search\es-es\set2ce.tmp
sktop search\es-es\msnlextres.dll.mui
sktop search\es-es\set2cf.tmp
sktop search\es-es\dbres.dll.mui
sktop search\es-es\set2d0.tmp
sktop search\es-es\wwres.dll.mui
sktop search\es-es\marketstrings.cfg
sktop search\es-es\deskbar.cfg
sktop search\es-es\dsksrch.chm
sktop search\es-es\mapineres.dll.mui
sktop search\es-es\windowssearchres.dll.mui
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2d6.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\oeph.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\oephres.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\uncph.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\uncres.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2da.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\unccplext.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2db.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\uncne.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\set2dc.tmp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\uncdms.dll
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\set2dd.t
mp
mp
mp
mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\oephres.
dll.mui
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\set2de.t
mp
mp
mp

mp
mp
mp
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\system32\es-es\uncres.d
ll.mui
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\imsins.bak
f822b5dd99873c17f6c3\update\update.exe <File>c:\windows\imsins.bak
f822b5dd99873c17f6c3\update\update.exe <File>c:\documents and settings\all user
s\men inicio\programas\windows search.lnk
s\men inicio\programas\windows search.lnk
s\men inicio\programas\inicio\windows search.lnk
s\men inicio\programas\inicio\windows search.lnk

CONTROL SHUTDOWN<C
CONTROL SHUTDOWN<C

Time<2011,07.19.,19:24:12>
ters.
Time<2011,07.19.,19:24:26>
Time<2011,07.19.,19:24:29>
ndows\system32\oleacc.dll,
: OOBE flag has already been set at ..\TvTuMon\Parame

: ------------ServiceStart:SERVICE START-----------: ReadLastAutoUpdate32 g_cUpdateFileDB.SaveFile:c:\wi
return 0

indows\system32\oleacc.dll ,return 0, hash(new) is [ffd634a8c8d0ea117259788a16bf
e5b950a1c4a83d265b181c05270febbb25e7]
ndows\system32\oleaccrc.dll, return 0
indows\system32\oleaccrc.dll ,return 0, hash(new) is [dc473cb275078d47b9bbbde853
a996083dc90138f5833830402963ae10069766]
n 0
ode = 0
ters.
n -100

ode = -100
ters.
n -100
ode = -100
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\docume~1\javier\confi
g~1\temp\dd_xps_lp.txt
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\inf\oem0.inf
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\lastgood\tmp1
e8.tmp

e8.tmp
e8.tmp
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\lastgood\inf\
oem16.inf
e9.tmp
e9.tmp
e9.tmp
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\lastgood\inf\
oem16.pnf
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\system32\catr
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\inf\oem16.pnf


87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\system32\spms
g2.dll
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\system32\spms
g2.dll
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\system32\conf
ig\system
ig\system
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\system32\spoo
l\drivers\w32x86\3\es-es\set1ea.tmp
ig\system
ig\system
ig\system
ig\system
ig\system
ig\system
ig\system
ig\system
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\xpsepsclp.cat

oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
oot2\dberr.txt
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\_000002_.tmp.
dll
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\_000002_.tmp.
dll
l\drivers\w32x86\3\es-es\mxdwdui.dll.mui
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\imsins.bak
87c4acb04a5f3ea16814e3c232f16b\update\update.exe <File>c:\windows\imsins.bak

CONTROL SHUTDOWN<C
CONTROL SHUTDOWN<C

ters.
n -100
ode = -100
ters.
n -100
ode = -100
Time<2011,07.20.,09:48:51> : FileListen32:receive MSG from driver <Process>c:\wi
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\imsins.bak
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\imsins.bak
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\archivos de programa
\windows desktop search\dbres.dll

\windows desktop search\dbsetup.dll
\windows desktop search\deskbar.dll
\windows desktop search\mapine.dll
\windows desktop search\mapineres.dll
\windows desktop search\msnldl.dll
\windows desktop search\msnldlps.dll
\windows desktop search\msnlext.dll
\windows desktop search\msnlextres.dll
\windows desktop search\msnlnamespacemgr.dll
\windows desktop search\msnlred.dll
\windows desktop search\wdsmkttools.dll
\windows desktop search\wdsshell.dll
\windows desktop search\wdsview.dll
\windows desktop search\windowssearch.exe
\windows desktop search\windowssearchres.dll

\windows desktop search\wordwheel.dll
\windows desktop search\wwres.dll
\windows desktop search\xppreviewproxy.dll
\windows desktop search\es-es\dbres.dll.mui
\windows desktop search\es-es\deskbar.cfg
\windows desktop search\es-es\dsksrch.chm
\windows desktop search\es-es\mapineres.dll.mui
\windows desktop search\es-es\marketstrings.cfg
\windows desktop search\es-es\msnlextres.dll.mui
\windows desktop search\es-es\windowssearchres.dll.mui
\windows desktop search\es-es\wwres.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\inf\search.a
dm
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\gsr
vctr.h
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\gsr
vctr.ini
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\gth
rctr.h

ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\gth
rctr.ini
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\idx
cntrs.h
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\idx
cntrs.ini
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\mss
cb.dll
cntrs.dll
hooks.dll
hsq.dll
itlb.dll
ph.dll
phtb.dll
prxy.dll
rch.dll
trc.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\oep
h.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\oep
hres.dll

ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\pro
pdefs.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\pro
psys.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\rtf
filt.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\sea
rchfilterhost.exe
rchindexer.exe
rchprotocolhost.exe
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\src
hadmin.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\str
ucturedqueryschema.bin
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\str
ucturedqueryschematrivial.bin
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\tqu
ery.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\unc
cplext.dll
dms.dll
ne.dll
ph.dll
res.dll

ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\xml
filter.dll
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\mssph.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\mssphtb.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\mssrch.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\propsys.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\srchadmin.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\tquery.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\oephres.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\searchindexer.exe.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\eses\uncres.dll.mui
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\gro
uppolicy\adm\search.adm
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\wbe
m\windowssearchengine.mof
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\windows\system32\wbe
m\windowssearchengine_uninst.mof
ndows\$ntuninstallkb940157$\spuninst\spuninst.exe <File>c:\documents and settin
gs\all users\men inicio\programas\windows search.lnk
gs\all users\men inicio\programas\inicio\windows search.lnk

gs\all users\datos de programa\microsoft\search\data\temp
gs\all users\datos de programa\microsoft\search\data\applications\windows\mss.ch
k
gs\all users\datos de programa\microsoft\search\data\applications\windows\window
s.edb
gs\all users\datos de programa\microsoft\search\data\applications\windows\projec
ts\systemindex\systemindex.chk1.gthr
ts\systemindex\systemindex.chk2.gthr
ts\systemindex\systemindex.ntfy2.gthr
ts\systemindex\secstore\cist0000.000
ts\systemindex\secstore
ts\systemindex\save
ts\systemindex\propmap\cipt0000.000

ts\systemindex\propmap\used0000.001
ts\systemindex\propmap
ts\systemindex\indexer\cifiles\00010001.ci
ts\systemindex\indexer\cifiles\00010001.dir
ts\systemindex\indexer\cifiles\00010001.wid

ts\systemindex\indexer\cifiles\00010005.wsb

ts\systemindex\indexer\cifiles\0001000a.ci
ts\systemindex\indexer\cifiles\0001000a.dir

ts\systemindex\indexer\cifiles\0001000a.wid
ts\systemindex\indexer\cifiles\0001000b.dir
ts\systemindex\indexer\cifiles\0001000b.ci
ts\systemindex\indexer\cifiles\0001000b.wid
ts\systemindex\indexer\cifiles\0001000c.ci
ts\systemindex\indexer\cifiles\0001000c.dir
ts\systemindex\indexer\cifiles\0001000c.wid
ts\systemindex\indexer\cifiles\0001000d.ci
ts\systemindex\indexer\cifiles\0001000d.dir
ts\systemindex\indexer\cifiles\0001000d.wid
ts\systemindex\indexer\cifiles\ciab0001.000

ts\systemindex\indexer\cifiles\ciad0002.002
ts\systemindex\indexer\cifiles\index.002
ts\systemindex\indexer\cifiles
ts\systemindex\indexer
ts\systemindex

ts\systemindex\indexer\cifiles\settings.dia
ts
gs\all users\datos de programa\microsoft\search\data\applications\windows\gather
logs\systemindex\systemindex.1.crwl
logs\systemindex\systemindex.1.gthr
logs\systemindex
logs
logs\systemindex\systemindex.2.crwl
logs\systemindex\systemindex.2.gthr
gs\all users\datos de programa\microsoft\search\data\applications\windows\config
gs\all users\datos de programa\microsoft\search\data\applications\windows
gs\all users\datos de programa\microsoft\search\data\applications
gs\all users\datos de programa\microsoft\search\data

gs\all users\datos de programa\microsoft\search
gs\javier\datos de programa\windows desktop search\windowsdesktopshortcuts.ini
gs\javier\datos de programa\windows desktop search
gs\administrador\ntuser.dat
gs\administrador\ntuser.dat

CONTROL SHUTDOWN<C
CONTROL SHUTDOWN<C

ters.
n -100
ode = -100
heckTimeOut_shutdown>------------

ters.
n -100
ode = -100
Time<2011,08.19.,08:13:28> : ------------service_ctrl:SERVICE_CONTROL_INTERROGAT
E-----------Time<2011,08.19.,08:13:28> : ------------service_ctrl:SERVICE_CONTROL_INTERROGAT
E-----------Time<2011,08.19.,08:14:11> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN----------Time<2011,08.19.,08:14:11> : CheckTimeOut_shutdown:Update <0> Reg files
ters.
n -100
ode = -100
ters.
n -100
ode = -100
ters.
n -100
ode = -100
ters.
n -100
ode = -100
Time<2011,08.24.,08:30:23> : FileListen32:receive MSG from driver <Process>c:\do
cume~1\javier\config~1\temp\flashplayerupdate.exe <File>c:\docume~1\javier\conf
ig~1\temp\9.tmp
ig~1\temp\9.tmp
ig~1\temp\a.tmp
ig~1\temp\a.tmp
ig~1\temp\a.tmp
ig~1\temp\a.tmp
ig~1\temp\9.tmp
ig~1\temp\9.tmp
ig~1\temp\a.tmp
cume~1\javier\config~1\temp\flashplayerupdate.exe <File>c:\windows\system32\mac
romed\flash\uninstall_activex.exe
romed\flash\flash10a.ocx
romed\flash\flash10v.ocx
romed\flash\flash10v.ocx
romed\flash\flashutil10v_activex.exe
romed\flash\flashutil10v_activex.exe
romed\flash\flashutil10v_activex.dll
romed\flash\flashutil10v_activex.dll
cume~1\javier\config~1\temp\flashplayerupdate.exe <File>c:\windows\system32\fla
shplayercplapp.cpl
cume~1\javier\config~1\temp\flashplayerupdate.exe <File>c:\windows\system32\fla
shplayercplapp.cpl
ig~1\temp\9.tmp
ig~1\temp\9.tmp

CONTROL SHUTDOWN<C
CONTROL SHUTDOWN<C

ters.
n -100
ode = -100
ters.
n -100
ode = -100

ters.
n -100
ode = -100
ters.
Time<2011,08.24.,14:12:16> : ------------ServiceStart:SERVICE START------------

ndows\system32\drivers\ndistapi.sys, return 0
indows\system32\drivers\ndistapi.sys ,return 0, hash(new) is [4f6db1e499ac853fd3
6fd603fbb6d3ac9bdceb298c7fe1fb59a9236cb46729b2]
indows\system32\wininet.dll ,return 0, hash(new) is [7cb21b43e9062ae65bcb060d59f
3e0677b56253a353daf3b37a1cfd3229c7e6f]
ndows\system32\drivers\rdpwd.sys, return 0
indows\system32\drivers\rdpwd.sys ,return 0, hash(new) is [1b29d928ddd43a1929d5a
788648536603ea60af6d4ec9bf0b20ad7f71bd88acb]
ndows\system32\drivers\mrxsmb.sys, return 0
indows\system32\drivers\mrxsmb.sys ,return 0, hash(new) is [db9b186f7076d7b94f45
041af7b77c1ad2cab504d683b459c6cb1c22840ed170]
indows\system32\wininet.dll ,return 0, hash(new) is [7cb21b43e9062ae65bcb060d59f
3e0677b56253a353daf3b37a1cfd3229c7e6f]
ndows\system32\winsrv.dll, return 0
indows\system32\winsrv.dll ,return 0, hash(new) is [699c8cdbdd1f06805ed41923639d
401affa7d1615edfe2f4a0a32e5a991a4b4c]
n 0
ode = 0

ters.
n -100
ode = -100
ters.
ters.
n -100
ode = -100

ters.
n -100
ode = -100
ters.

n -100
ode = -100

Sysiclog

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Sysiclog

Uploaded by

Copyright:

Available Formats

Time<2011,07.19.

,16:30:17> : start main( __argc, __argv );

Time<2011,07.19.,17:50:02> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN<C

OOBE flag has not been set at ..\TvTuMon\Parameters

Time<2011,07.19.,17:52:24> : ReadLastAutoUpdate32 g_cUpdateFileDB.SetDigest:c:\w

indows\system32\wininet.dll ,return 0, hash(new) is [dd10b2cd21301c0056e7dbf41f9

Time<2011,07.19.,17:52:46> : FileListen32:receive MSG from driver <Process>c:\1f

Time<2011,07.19.,18:09:06> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:07> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:07> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:07> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:07> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:07> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:08> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:09> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:11> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:11> : FileListen32:receive MSG from driver <Process>c:\3e

Time<2011,07.19.,18:09:11> : FileListen32:receive MSG from driver <Process>c:\3e

CONTROL SHUTDOWN-Reg files

Time<2011,07.19.,18:13:07> : enter main function.

Time<2011,07.19.,18:38:14> : Report Service running in ServiceStart.

Time<2011,07.19.,12:17:19> : Now start services dispatch

heckTimeOut_shutdown>-----------Time<2011,07.19.,12:38:10> : ------------service_ctrl:SERVICE CONTROL SHUTDOWN<C

Time<2011,07.19.,19:04:49> : ReadLastAutoUpdate32 g_cKerFileDigests.Save() retur

Time<2011,07.19.,19:12:46> : FileListen32:receive MSG from driver <Process>c:\e8

Time<2011,07.19.,19:12:46> : FileListen32:receive MSG from driver <Process>c:\e8

Time<2011,07.19.,19:12:58> : FileListen32:receive MSG from driver <Process>c:\e8

,16:30:17> : start main( argc, argv );