Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Issues after malware removal, no scanning programs work


  • Please log in to reply
15 replies to this topic

#1 oldmuttonhead

oldmuttonhead

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 18 August 2009 - 03:08 PM

Hello!

My issue is very similar to this one: http://www.bleepingcomputer.com/forums/t/248235/hijackthis-and-mbam-disappear-when-scanning/

However I am unable to resolve the problem in the same manner.

I scanned with AVG, Spybot, and SuperAntispyware from within a PE environment. I then booted the computer into Windows (this computer has Vista SP1) and installed MBAM. It installed and updated but ran for just a few seconds before it closed. I tried to run it again but I was met with an error that said "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." If I uninstall then reinstall, I can run it again for a few seconds with the same result. This is also true of HiJack This, RootReveal, and others I have tried.

The original issue with the computer was that it wouldn't run exe files. A DOS box would pop up with a message "Program too big to fit in memory" for a split second. This issue was solved with the above mentioned scans and a registry fix to correct exe file associations.

I have a DDS log, but I cannot run RootReveal to get a log from it. It fails on the "Files" section as MBAM does above.

Here's my DDS log:


DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 13:59:57.77 on Tue 08/18/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2941.1721 [GMT -5:00]

AV: Trend Micro AntiVirus *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\USERS\OWNER\APPDATA\LOCAL\TEMP\A2FREE\a2service.exe
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Flip Video\FlipShare\FlipShareService.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Toshiba\IVP\ISM\pinger.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
c:\Toshiba\IVP\swupdate\swupdtmr.exe
C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\alg.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Toshiba\TRCMan\TRCMan.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe
C:\Program Files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Windows\System32\mobsync.exe
C:\Users\Owner\AppData\Local\Yahoo!\Messenger for Vista\Yahoo.Messenger.YmApp.exe
C:\Users\Owner\AppData\Roaming\Smilebox\SmileboxTray.exe
C:\Program Files\SightSpeed\SightSpeed.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\logitech\quickcam\lu\lulnchr.exe
C:\program files\logitech\quickcam\lu\LogitechUpdate.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Owner\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
BHO: MRI_DISABLED - No File
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - No File
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Veoh Browser Plug-in: {d0943516-5076-4020-a3b5-aefaf26ab263} - c:\program files\veoh networks\veoh\plugins\reg\VeohToolbar.dll
uRun: [Sidebar] "c:\program files\windows sidebar\Sidebar.exe" /autorun
uRun: [RunSpySweeperScheduleAtStartup] "c:\windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{8C7EDD21-1F4B-463E-983B-457D8CF60B97}
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Veoh] "c:\program files\veoh networks\veoh\VeohClient.exe" /VeohHide
uRun: [WMPNSCFG] "c:\program files\windows media player\WMPNSCFG.exe"
uRun: [Yahoo!MessengerForVista] "c:\users\owner\appdata\local\yahoo!\messenger for vista\Yahoo.Messenger.YmApp.exe" -startup
uRun: [SmileboxTray] "c:\users\owner\appdata\roaming\smilebox\SmileboxTray.exe"
uRun: [SightSpeed] "c:\program files\sightspeed\SightSpeed.exe" -bootmode
uRun: [Google Update] "c:\users\owner\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [TRCMan] "c:\program files\toshiba\trcman\TRCMan.exe"
mRun: [Camera Assistant Software] "c:\program files\camera assistant software for toshiba\traybar.exe" /start
mRun: [TPwrMain] "c:\program files\toshiba\power saver\TPwrMain.EXE"
mRun: [HSON] "c:\program files\toshiba\tbs\HSON.exe"
mRun: [SmoothView] "c:\program files\toshiba\smoothview\SmoothView.exe"
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [ITSecMng] "c:\program files\toshiba\bluetooth toshiba stack\ItSecMng.exe" /START
mRun: [SynTPEnh] "c:\program files\synaptics\syntp\SynTPEnh.exe"
mRun: [PCMAgent] "c:\program files\cyberlink\powercinema for toshiba\PCMAgent.exe"
mRun: [CLMLServer] "c:\program files\cyberlink\powercinema for toshiba\kernel\clml\CLMLSvc.exe"
mRun: [UfSeAgnt.exe] "c:\program files\trend micro\internet security\UfSeAgnt.exe"
mRun: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide
mRun: [AppleSyncNotifier] "c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\desktop messenger\8876480\program\LogitechDesktopMessenger.exe
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_03\bin\ssv.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL

============= SERVICES / DRIVERS ===============

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2009-7-29 130936]
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\system32\drivers\jswpslwf.sys [2008-6-16 20352]
R2 ConfigFree Service;ConfigFree Service;c:\program files\toshiba\configfree\CFSvcs.exe [2007-12-25 40960]
R2 FlipShare Service;FlipShare Service;c:\program files\flip video\flipshare\FlipShareService.exe [2009-6-4 451904]
R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2009-7-15 36368]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\toshiba\smartlogservice\TosIPCSrv.exe [2007-12-3 126976]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-2-13 7168]
S2 gupdate1c9b8bdb9b84200;Google Update Service (gupdate1c9b8bdb9b84200);c:\program files\google\update\GoogleUpdate.exe [2009-4-8 133104]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2008-2-15 52624]
S3 ATTRcAppSvc;AT&T RcAppSvc;"c:\program files\at&t\communication manager\rcappsvc.exe" /n "attrcappsvc" --> c:\program files\at&t\communication manager\RcAppSvc.exe [?]
S3 CAATT;AT&T Con App Svc;"c:\program files\at&t\communication manager\conappssvc.exe" /n "caatt" --> c:\program files\at&t\communication manager\ConAppsSvc.exe [?]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\jumpstart\jswpsapi.exe [2008-6-16 937984]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-7-29 348752]
S3 SWNC8U56;Sierra Wireless MUX NDIS Driver (UMTS56);c:\windows\system32\drivers\swnc8u56.sys [2007-6-27 101248]
S3 SWUMX56;Sierra Wireless USB MUX Driver (UMTS56);c:\windows\system32\drivers\swumx56.sys [2007-6-27 73856]
S3 tmproxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2008-7-26 648456]
S4 AntipPro2009_12;AntipyPro_12;c:\windows\svchast.exe --> c:\windows\svchast.exe [?]

=============== Created Last 30 ================

2009-08-18 11:57 4,596 a------- c:\windows\system32\tmp.reg
2009-08-18 09:47 6,144 -------- c:\windows\system32\58ED.tmp
2009-08-18 09:47 6,144 -------- c:\windows\system32\4260.tmp
2009-08-18 09:47 --d----- c:\program files\Sophos
2009-08-17 11:55 --d----- C:\!KillBox
2009-08-17 11:53 --d----- c:\windows\Recent
2009-08-17 11:49 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-17 11:49 19,096 a------- c:\windows\system32\drivers\mbam.sys
2009-08-17 11:49 --d----- c:\program files\Malwarebytes' Anti-Malware
2009-08-13 18:55 313,344 a------- c:\windows\system32\wmpdxm.dll
2009-08-13 18:55 7,680 a------- c:\windows\system32\spwmp.dll
2009-08-13 18:55 4,096 a------- c:\windows\system32\msdxm.ocx
2009-08-13 18:55 4,096 a------- c:\windows\system32\dxmasf.dll
2009-08-13 18:55 8,147,456 a------- c:\windows\system32\wmploc.DLL
2009-08-13 18:55 43,520 a------- c:\windows\system32\msdxm.tlb
2009-08-13 18:55 18,432 a------- c:\windows\system32\amcompat.tlb
2009-08-12 12:52 --dsh--- C:\$RECYCLE.BIN
2009-08-12 12:29 --ds---- C:\ComboFix
2009-08-12 12:29 318,976 a------- c:\windows\system32\CF24409.exe
2009-08-12 12:08 0 a---h--- C:\ProgramData.LOG2
2009-08-12 12:08 0 a---h--- C:\ProgramData.LOG1
2009-08-06 13:58 219,648 a------- c:\windows\PEV.exe
2009-08-06 13:58 161,792 a------- c:\windows\SWREG.exe
2009-08-06 13:58 98,816 a------- c:\windows\sed.exe
2009-08-06 13:53 --d----- c:\users\owner\appdata\roaming\Malwarebytes
2009-08-06 13:52 --d----- c:\programdata\Malwarebytes
2009-08-06 13:52 --d----- c:\progra~2\Malwarebytes
2009-07-30 08:20 --d----- C:\upd7bin
2009-07-30 08:20 --d----- C:\avg7upd
2009-07-29 02:30 --d----- c:\program files\xxxx.exe
2009-07-29 02:19 396,288 a------- c:\program files\HijackThis.exe
2009-07-29 01:48 159,600 a------- c:\windows\system32\drivers\pctgntdi.sys
2009-07-29 01:48 130,936 a------- c:\windows\system32\drivers\PCTCore.sys
2009-07-29 01:48 73,840 a------- c:\windows\system32\drivers\PCTAppEvent.sys
2009-07-29 01:48 a-d----- c:\programdata\TEMP
2009-07-29 01:48 --d----- c:\program files\common files\PC Tools
2009-07-29 01:48 64,392 a------- c:\windows\system32\drivers\pctplsg.sys
2009-07-29 01:48 --d----- c:\users\owner\appdata\roaming\PC Tools
2009-07-29 01:48 --d----- c:\programdata\PC Tools
2009-07-29 01:48 --d----- c:\program files\Spyware Doctor
2009-07-29 01:48 --d----- c:\progra~2\PC Tools
2009-07-29 01:48 506,368 a------- c:\windows\system32\msxml.dll
2009-07-28 23:43 --d----- c:\users\owner\appdata\roaming\AVG8
2009-07-28 01:26 726,054 a------- c:\windows\system32\PerfStringBackup.INI
2009-07-27 19:39 4 a------- c:\windows\system32\bincd32.dat
2009-07-27 17:58 1,382 a------- c:\windows\system32\onhelp.htm
2009-07-27 17:46 a-d----- c:\windows\system32\images
2009-07-27 17:45 36 a------- c:\windows\system32\sysnet.dat
2009-07-27 17:45 9 a------- c:\windows\system32\bennuar.old
2009-07-27 17:45 98 a------- c:\windows\system32\sonhelp.htm

==================== Find3M ====================

2009-08-17 10:49 143,360 a------- c:\windows\inf\infstrng.dat
2009-08-17 10:49 143,360 a------- c:\windows\inf\infstor.dat
2009-08-17 10:49 86,016 a------- c:\windows\inf\infpub.dat
2009-08-16 09:08 0 a------- c:\windows\system32\drivers\lvuvc.hs
2009-07-18 11:06 827,904 a------- c:\windows\system32\wininet.dll
2009-07-18 11:01 78,336 a------- c:\windows\system32\ieencode.dll
2009-07-18 04:46 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-07-17 09:35 71,680 a------- c:\windows\system32\atl.dll
2009-06-15 10:24 156,672 a------- c:\windows\system32\t2embed.dll
2009-06-15 10:20 72,704 a------- c:\windows\system32\fontsub.dll
2009-06-15 10:20 10,240 a------- c:\windows\system32\dciman32.dll
2009-06-15 07:52 289,792 a------- c:\windows\system32\atmfd.dll
2009-06-10 07:12 160,256 a------- c:\windows\system32\wkssvc.dll
2009-06-10 07:07 91,136 a------- c:\windows\system32\avifil32.dll
2009-06-05 11:42 2,060,288 a------- c:\windows\system32\usbaaplrc.dll
2009-06-04 07:34 2,066,432 a------- c:\windows\system32\mstscax.dll
2008-08-26 22:13 56 a---h--- c:\programdata\ezsidmv.dat
2008-08-26 22:13 56 a---h--- c:\progra~2\ezsidmv.dat
2008-07-25 17:51 665,600 a------- c:\windows\inf\drvindex.dat
2008-01-20 21:43 174 a--sh--- c:\program files\desktop.ini
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 14:00:22.95 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 19 August 2009 - 12:29 PM

Please download the Win32kDiag.exe tool from the following location and save it to your desktop:

http://download.bleepingcomputer.com/rootr.../Win32kDiag.exe

Once downloaded, double-click on the program and let it finish. When it states Finished! Press any key to exit..., you can press any key on your keyboard to close the program. On your desktop should now be a file called Win32kDiag.txt.

Double-click on this file and post the contents as a reply to this topic.

#3 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 19 August 2009 - 01:05 PM

Thanks, Grinler!

Here's the contents of the file you requested:

Searching 'C:\Windows'...



Found mount point : C:\Windows\AppPatch\{29F8DDC1-9487-49b8-B27E-3E0C3C1298FF}

Mount point destination : \Device\__max++>\^

Cannot access: C:\Windows\bthservsdp.dat

[1] 2009-08-17 10:52:30 12 C:\Windows\bthservsdp.dat ()



Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl

[1] 2009-08-18 09:48:39 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl ()



Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl

[1] 2009-08-18 09:48:15 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl ()



Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl

[1] 2009-08-18 09:48:21 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl ()



Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl

[1] 2009-08-18 09:48:21 64 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl ()



Cannot access: C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl

[1] 2009-08-18 09:49:29 0 C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl ()



Cannot access: C:\Windows\System32\mrt.exe

[1] 2009-07-07 08:10:58 24539592 C:\Windows\System32\mrt.exe ()

[1] 2008-01-20 21:24:53 52696 C:\Windows\winsxs\x86_microsoft-windows-malwareremovaltool_31bf3856ad364e35_6.0.6001.18000_none_d3909ca1dd6bb475\mrt.exe (Microsoft Corporation)



Cannot access: C:\Windows\System32\netlogon.dll

[1] 2008-01-20 21:24:05 60416 C:\Windows\System32\netlogon.dll ()

[1] 2008-01-20 21:24:05 592384 C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll (Microsoft Corporation)



Cannot access: C:\Windows\System32\WerFault.exe

[1] 2008-01-20 21:24:06 217088 C:\Windows\System32\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe ()

[1] 2008-09-19 23:00:16 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.22271_none_70460c29561ecb18\WerFault.exe (Microsoft Corporation)



Cannot access: C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe

[1] 2008-01-20 21:24:06 217088 C:\Windows\System32\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe ()

[1] 2008-09-19 23:00:16 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.22271_none_70460c29561ecb18\WerFault.exe (Microsoft Corporation)



Cannot access: C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe

[1] 2008-01-20 21:24:06 217088 C:\Windows\System32\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18000_none_70071ca23cc95139\WerFault.exe ()

[1] 2008-01-20 21:24:06 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.18145_none_6fe0e04a3ce53cd7\WerFault.exe ()

[1] 2008-09-19 23:00:16 217088 C:\Windows\winsxs\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_6.0.6001.22271_none_70460c29561ecb18\WerFault.exe (Microsoft Corporation)





Finished!

#4 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 19 August 2009 - 04:09 PM

Also please download the following file to your desktop and then double-click on it.

http://download.bleepingcomputer.com/bats/peek.bat

Please post the contents of the resulting notepad window as a reply to this topic.

#5 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 19 August 2009 - 04:16 PM

Here it is:

Volume in drive C is SQ004666V05
Volume Serial Number is A418-A3CC

Directory of C:\WINDOWS\System32

01/20/2008 21:24 177,152 scecli.dll

Directory of C:\WINDOWS\System32

01/20/2008 21:24 60,416 netlogon.dll

Directory of C:\WINDOWS\System32

11/02/2006 04:46 11,776 cngaudit.dll
3 File(s) 249,344 bytes

Directory of C:\WINDOWS\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6

11/02/2006 04:46 11,776 cngaudit.dll
1 File(s) 11,776 bytes

Directory of C:\WINDOWS\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12

01/20/2008 21:24 177,152 scecli.dll
1 File(s) 177,152 bytes

Directory of C:\WINDOWS\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857

01/20/2008 21:24 592,384 netlogon.dll
1 File(s) 592,384 bytes

Total Files Listed:
6 File(s) 1,030,656 bytes
0 Dir(s) 153,871,687,680 bytes free

#6 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 19 August 2009 - 04:44 PM

Ok, lets get started.

1. Please download The Avenger by Swandog46 to your Desktop.
  • Right click on the Avenger.zip folder and select "Extract All..."
  • Follow the prompts and extract the avenger folder to your desktop
2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):

Files to move:
C:\WINDOWS\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll | C:\WINDOWS\system32\netlogon.dll

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
[/i]

3. Now, open the avenger folder and start The Avenger program by clicking on its icon.
  • Right click on the window under Input script here:, and select Paste.
  • You can also click on this window and press (Ctrl+V) to paste the contents of the clipboard.
  • Click on Execute
  • Answer "Yes" twice when prompted.
4. The Avenger will automatically do the following:
  • It will Restart your computer. ( In cases where the code to execute contains "Drivers to Delete", The Avenger will actually restart your system twice.)
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh RootRepeal log .

If you are still getting permission denied when you try and RootRepeal, you can download the following program:

http://download.bleepingcomputer.com/sUBs/...xes/Inherit.exe

Then drag the RootRepeal.exe file onto it and let it go.

The program will then be able to run after you do this.

#7 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 20 August 2009 - 03:33 PM

The Avenger log follows. However, RootRepeal is still not running. It runs longer than before, but fails during the "Files" portion of the scan. The last path I saw was C:\windows\winsxs\Manifests but right before it failed it had moved to a much longer path in the Windows directory but I couldn't see what it was before it failed. When it failed, I heard the Windows Critical Error notification and when I looked over at it (Not Responding) was in the title bar and after a few seconds it closed automatically. This is NOT the same error I was getting before. I can immediately rerun RootRepeal, but it fails in exactly the same spot.

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File move operation "C:\WINDOWS\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll|C:\WINDOWS\system32\netlogon.dll" completed successfully.

Completed script processing.

*******************

Finished! Terminate.

#8 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 20 August 2009 - 08:54 PM

Thats fine. Let's try some more traditional tools now.

Please visit the following link and use the instructions there to post a ComboFix log as a reply to this topic:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

After running ComboFix, please post the ComboFix log as a reply to this

#9 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 21 August 2009 - 11:18 AM

Here it is:

ComboFix 09-08-20.07 - Owner 08/21/2009 11:31.3.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2941.1927 [GMT -4:00]
Running from: c:\users\Owner\Desktop\ComboFix.exe
AV: Trend Micro AntiVirus *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\bennuar.old
c:\windows\system32\bincd32.dat
c:\windows\system32\images
c:\windows\system32\images\i1.gif
c:\windows\system32\images\i2.gif
c:\windows\system32\images\i3.gif
c:\windows\system32\images\j1.gif
c:\windows\system32\images\j2.gif
c:\windows\system32\images\j3.gif
c:\windows\system32\images\jj1.gif
c:\windows\system32\images\jj2.gif
c:\windows\system32\images\jj3.gif
c:\windows\system32\images\l1.gif
c:\windows\system32\images\l2.gif
c:\windows\system32\images\l3.gif
c:\windows\system32\images\pix.gif
c:\windows\system32\images\t1.gif
c:\windows\system32\images\t2.gif
c:\windows\system32\images\up1.gif
c:\windows\system32\images\up2.gif
c:\windows\system32\images\w1.gif
c:\windows\system32\images\w11.gif
c:\windows\system32\images\w2.gif
c:\windows\system32\images\w3.gif
c:\windows\system32\images\w3.jpg
c:\windows\system32\images\wt1.gif
c:\windows\system32\images\wt2.gif
c:\windows\system32\images\wt3.gif
c:\windows\system32\sonhelp.htm
c:\windows\system32\sysnet.dat
c:\windows\system32\tmp.reg
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
---- Previous Run -------
.
c:\windows\TEMP\logishrd\LVPrcInj01.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}
-------\Legacy_ANTIPPRO2009_12
-------\Legacy_ESQULserv.sys
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226ED}
-------\Legacy_{79007602-0CDB-4405-9DBF-1257BB3226EE}
-------\Service_AntipPro2009_12
-------\Service_ESQULserv.sys


((((((((((((((((((((((((( Files Created from 2009-07-21 to 2009-08-21 )))))))))))))))))))))))))))))))
.

2009-08-21 15:41 . 2009-08-21 15:41 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-08-21 15:41 . 2009-08-21 15:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-08-18 15:58 . 2009-08-18 15:58 -------- d-----w- C:\rsit
2009-08-18 14:47 . 2009-08-18 14:47 -------- d-----w- c:\program files\Sophos
2009-08-17 16:55 . 2009-08-17 16:55 -------- d-----w- C:\!KillBox
2009-08-17 16:53 . 2009-08-17 16:53 -------- d-----w- c:\windows\Recent
2009-08-17 16:53 . 2009-08-17 16:53 -------- d-----w- c:\users\Recent
2009-08-17 16:53 . 2009-08-17 20:47 262144 ----a-w- c:\users\NtUser.dat
2009-08-17 16:49 . 2009-08-03 18:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-17 16:49 . 2009-08-17 16:49 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-17 16:49 . 2009-08-03 18:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-13 23:55 . 2009-07-14 13:00 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-08-13 23:55 . 2009-07-14 12:58 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-08-13 23:55 . 2009-07-14 12:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-08-13 23:55 . 2009-07-14 10:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-08-13 19:17 . 2009-08-13 19:19 -------- d-----w- c:\program files\Common Files\Adobe
2009-08-06 18:53 . 2009-08-06 18:53 -------- d-----w- c:\users\Owner\AppData\Roaming\Malwarebytes
2009-08-06 18:52 . 2009-08-06 18:52 -------- d-----w- c:\programdata\Malwarebytes
2009-08-06 15:40 . 2009-08-06 15:40 -------- d-----w- c:\users\Owner\AppData\Local\Mozilla
2009-07-30 13:20 . 2009-07-30 13:20 -------- d-----w- C:\upd7bin
2009-07-30 13:20 . 2009-07-30 13:20 -------- d-----w- C:\avg7upd
2009-07-29 07:30 . 2009-07-29 07:30 -------- d-----w- c:\program files\xxxx.exe
2009-07-29 07:19 . 2009-07-29 07:19 396288 ----a-w- c:\program files\HijackThis.exe
2009-07-29 06:48 . 2008-12-11 13:38 159600 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2009-07-29 06:48 . 2009-04-03 15:18 130936 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2009-07-29 06:48 . 2008-12-18 16:16 73840 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\program files\Common Files\PC Tools
2009-07-29 06:48 . 2008-12-10 16:36 64392 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2009-07-29 06:48 . 2009-08-13 19:12 -------- d-----w- c:\program files\Spyware Doctor
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\users\Owner\AppData\Roaming\PC Tools
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\programdata\PC Tools
2009-07-29 06:48 . 2004-08-04 12:00 506368 ----a-w- c:\windows\system32\msxml.dll
2009-07-29 04:43 . 2009-07-29 04:43 -------- d-----w- c:\users\Owner\AppData\Roaming\AVG8
2009-07-26 03:46 . 2009-07-26 03:46 713992 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-21 15:43 . 2008-07-28 13:47 12 ----a-w- c:\windows\bthservsdp.dat
2009-08-21 15:36 . 2008-08-27 03:10 -------- d-----w- c:\users\Owner\AppData\Roaming\Skype
2009-08-21 13:07 . 2008-08-27 03:13 -------- d-----w- c:\users\Owner\AppData\Roaming\skypePM
2009-08-20 18:53 . 2009-04-09 02:47 -------- d-----w- c:\programdata\Google Updater
2009-08-18 15:58 . 2008-07-26 21:30 -------- d-----w- c:\program files\Trend Micro
2009-08-17 15:49 . 2008-09-26 22:41 -------- d-----w- c:\programdata\AT&T
2009-08-16 14:08 . 2009-01-06 00:00 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs
2009-08-14 08:54 . 2008-07-25 21:59 112408 ----a-w- c:\users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT
2009-08-14 08:37 . 2008-06-16 16:49 -------- d-----w- c:\programdata\Microsoft Help
2009-08-14 08:33 . 2008-06-16 16:52 -------- d-----w- c:\program files\Microsoft Works
2009-08-14 08:15 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-07-29 01:51 . 2008-07-28 03:36 7944 ----a-w- c:\users\Owner\AppData\Local\d3d9caps.dat
2009-07-18 16:06 . 2009-08-13 23:56 827904 ----a-w- c:\windows\system32\wininet.dll
2009-07-18 16:01 . 2009-08-13 23:56 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 09:46 . 2009-08-13 23:56 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-17 14:35 . 2009-08-13 23:56 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-08 03:12 . 2009-07-08 03:12 -------- d-----w- c:\program files\Flip Video
2009-06-27 04:12 . 2009-06-27 04:12 -------- d-----w- c:\programdata\Flip Video
2009-06-26 22:56 . 2009-06-26 22:56 -------- d-----w- c:\program files\3ivx
2009-06-18 17:54 . 2009-08-18 14:47 6144 ------w- c:\windows\system32\58ED.tmp
2009-06-18 17:54 . 2009-08-18 14:47 6144 ------w- c:\windows\system32\4260.tmp
2009-06-15 15:24 . 2009-07-15 14:50 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 15:20 . 2009-07-15 14:50 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 15:20 . 2009-07-15 14:50 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-06-15 12:52 . 2009-07-15 14:50 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-06-13 01:57 . 2009-06-13 01:57 75048 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-10 12:12 . 2009-08-13 23:56 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-10 12:07 . 2009-08-13 23:56 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-06-05 16:42 . 2009-06-05 16:42 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-06-05 16:42 . 2009-06-05 16:42 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-06-04 22:37 . 2009-06-04 22:37 4732800 ----a-w- c:\programdata\Flip Video\FlipShare\Updates\FirmwareExec_Windows_en-US_83.06_83.07\FlipVideoFWUpdate.exe
2009-06-04 12:34 . 2009-08-13 23:56 2066432 ----a-w- c:\windows\system32\mstscax.dll
2008-07-25 21:58 . 2008-07-25 21:58 13 --sh--r- c:\windows\System32\drivers\fbd.sys
2008-07-25 21:58 . 2008-07-25 21:58 4 --sh--r- c:\windows\System32\drivers\taishop.sys
.

((((((((((((((((((((((((((((( SnapShot@2009-08-06_20.09.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-14 08:16 . 2008-07-27 17:58 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.22230_none_d364a943819c841d\RegSvcs.exe
+ 2009-08-14 08:16 . 2008-07-27 18:03 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6001.18111_none_ea3038a767f70b0a\RegSvcs.exe
+ 2009-08-14 08:16 . 2008-07-27 17:55 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.20883_none_d38d6a958147435c\RegSvcs.exe
+ 2009-08-14 08:16 . 2008-07-27 18:00 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6000.16720_none_ea5553f167a4fe69\RegSvcs.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.22230_none_00497e9d2f298b6d\RegAsm.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6001.18111_none_17150e011584125a\RegAsm.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.20883_none_00723fef2ed44aac\RegAsm.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6000.16720_none_173a294b153205b9\RegAsm.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_5c675395941257b3\WMINet_Utils.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_7332e2f97a6cdea0\WMINet_Utils.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_5c9014e793bd16f2\WMINet_Utils.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 37896 c:\windows\winsxs\x86_netfx-wminet_utils_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_7357fe437a1ad1ff\WMINet_Utils.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_4a46e49b6d8ffc7e\TLBREF.DLL
+ 2009-08-14 08:15 . 2008-07-27 18:03 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_611273ff53ea836b\TLBREF.DLL
+ 2009-08-14 08:15 . 2008-07-27 17:55 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_4a6fa5ed6d3abbbd\TLBREF.DLL
+ 2009-08-14 08:15 . 2008-07-27 18:00 81400 c:\windows\winsxs\x86_netfx-tlbref_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_61378f49539876ca\TLBREF.DLL
+ 2009-08-14 08:15 . 2008-07-27 17:58 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8f45fc5fe5d5bfa9\ShFusRes.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a6118bc3cc304696\ShFusRes.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8f6ebdb1e5807ee8\ShFusRes.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 95232 c:\windows\winsxs\x86_netfx-shfusion_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a636a70dcbde39f5\ShFusRes.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.22230_none_66e098c8804b9951\SharedReg12.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6001.18111_none_666d9c1f671cdafc\SharedReg12.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.20883_none_64c74b64834ae01a\SharedReg12.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6000.16720_none_647b8d4369ff4ca5\SharedReg12.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.22230_none_4dba200b004deb5f\sbscmp20_perfcounter.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6001.18111_none_4d472361e71f2d0a\sbscmp20_perfcounter.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.20883_none_4ba0d2a7034d3228\sbscmp20_perfcounter.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_perfcounter_31bf3856ad364e35_6.0.6000.16720_none_4b551485ea019eb3\sbscmp20_perfcounter.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.22230_none_8017a6625f87cb2b\sbscmp20_mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6001.18111_none_7fa4a9b946590cd6\sbscmp20_mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.20883_none_7dfe58fe628711f4\sbscmp20_mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6000.16720_none_7db29add493b7e7f\sbscmp20_mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.22230_none_3e06e0387a8766d4\sbscmp20_mscorlib.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6001.18111_none_54d26f9c60e1edc1\sbscmp20_mscorlib.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.20883_none_3e2fa18a7a322613\sbscmp20_mscorlib.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6000.16720_none_54f78ae6608fe120\sbscmp20_mscorlib.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.22230_none_756f2f8f1e31ddf9\sbscmp10.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6001.18111_none_74fc32e605031fa4\sbscmp10.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.20883_none_7355e22b213124c2\sbscmp10.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6000.16720_none_730a240a07e5914d\sbscmp10.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.22230_none_010420a69ef36b65\sbs_wminet_utils.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6001.18111_none_009123fd85c4ad10\sbs_wminet_utils.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.20883_none_feead342a1f2b22e\sbs_wminet_utils.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_wminet_utils_dll_31bf3856ad364e35_6.0.6000.16720_none_fe9f152188a71eb9\sbs_wminet_utils.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.22230_none_9418950086c65f54\sbs_VsaVb7rt.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6001.18111_none_93a598576d97a0ff\sbs_VsaVb7rt.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.20883_none_91ff479c89c5a61d\sbs_VsaVb7rt.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_vsavb7rt_dll_31bf3856ad364e35_6.0.6000.16720_none_91b3897b707a12a8\sbs_VsaVb7rt.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f079556\sbs_system.enterpriseservices.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8d701\sbs_system.enterpriseservices.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206dc1f\sbs_system.enterpriseservices.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14376 c:\windows\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb48aa\sbs_system.enterpriseservices.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.22230_none_fef2effa05fca369\sbs_system.data.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6001.18111_none_fe7ff350eccde514\sbs_system.data.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.20883_none_fcd9a29608fbea32\sbs_system.data.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_sys_data_dll_31bf3856ad364e35_6.0.6000.16720_none_fc8de474efb056bd\sbs_system.data.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.22230_none_bfb382834e9d9761\sbs_system.configuration.install.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6001.18111_none_bf4085da356ed90c\sbs_system.configuration.install.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.20883_none_bd9a351f519cde2a\sbs_system.configuration.install.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14384 c:\windows\winsxs\x86_netfx-sbs_sys_config_install_dll_31bf3856ad364e35_6.0.6000.16720_none_bd4e76fe38514ab5\sbs_system.configuration.install.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.22230_none_e666deedf5675f6c\sbs_mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6001.18111_none_e5f3e244dc38a117\sbs_mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.20883_none_e44d9189f866a635\sbs_mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscorsec_dll_31bf3856ad364e35_6.0.6000.16720_none_e401d368df1b12c0\sbs_mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.22230_none_a1c30b4c8684fb9c\sbs_mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6001.18111_none_a1500ea36d563d47\sbs_mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.20883_none_9fa9bde889844265\sbs_mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscorrc_dll_31bf3856ad364e35_6.0.6000.16720_none_9f5dffc77038aef0\sbs_mscorrc.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.22230_none_639928d25085ae4a\sbs_mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6001.18111_none_63262c293756eff5\sbs_mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.20883_none_617fdb6e5384f513\sbs_mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14344 c:\windows\winsxs\x86_netfx-sbs_mscordbi_dll_31bf3856ad364e35_6.0.6000.16720_none_61341d4d3a39619e\sbs_mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.22230_none_f8126c3faf315f4a\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6001.18111_none_f79f6f969602a0f5\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.20883_none_f5f91edbb230a613\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14904 c:\windows\winsxs\x86_netfx-sbs_ms_vsa_vb_codedomproc_31bf3856ad364e35_6.0.6000.16720_none_f5ad60ba98e5129e\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.22230_none_fd402afdaaaea2d1\sbs_microsoft.jscript.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6001.18111_none_fccd2e54917fe47c\sbs_microsoft.jscript.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.20883_none_fb26dd99adade99a\sbs_microsoft.jscript.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14360 c:\windows\winsxs\x86_netfx-sbs_microsoft_jscript_dll_31bf3856ad364e35_6.0.6000.16720_none_fadb1f7894625625\sbs_microsoft.jscript.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.22230_none_1821598f5ba01811\sbs_iehost.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6001.18111_none_17ae5ce6427159bc\sbs_iehost.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.20883_none_16080c2b5e9f5eda\sbs_iehost.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 14336 c:\windows\winsxs\x86_netfx-sbs_iehost_dll_31bf3856ad364e35_6.0.6000.16720_none_15bc4e0a4553cb65\sbs_iehost.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.22230_none_a7185cc2f855ce77\sbs_diasymreader.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6001.18111_none_a6a56019df271022\sbs_diasymreader.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.20883_none_a4ff0f5efb551540\sbs_diasymreader.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 14352 c:\windows\winsxs\x86_netfx-sbs_diasymreader_dll_31bf3856ad364e35_6.0.6000.16720_none_a4b3513de20981cb\sbs_diasymreader.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_130c52e1194d5fbe\PerfCounter.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_29d7e244ffa7e6ab\PerfCounter.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1335143318f81efd\PerfCounter.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 88584 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_29fcfd8eff55da0a\PerfCounter.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c565cc64474bc4ea\normalization.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dc315bc82da64bd7\normalization.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c58e8db646f68429\normalization.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 24584 c:\windows\winsxs\x86_netfx-normalization_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dc5677122d543f36\normalization.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.22230_none_3bf81e61c72a5b9c\NETFXSBS10.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6001.18111_none_3b8521b8adfb9d47\NETFXSBS10.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.20883_none_39ded0fdca29a265\NETFXSBS10.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 82944 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6000.16720_none_399312dcb0de0ef0\NETFXSBS10.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b7d330597e7f786d\mscortim.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ce9ebfbd64d9ff5a\mscortim.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b7fbf1ab7e2a37ac\mscortim.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 19456 c:\windows\winsxs\x86_netfx-mscortim_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cec3db076487f2b9\mscortim.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_092b8008021d8703\mscorsvw.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1ff70f6be8780df0\mscorsvw.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_0954415a01c84642\mscorsvw.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 69632 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_201c2ab5e826014f\mscorsvw.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7f8e04aa7abe635a\mscorsn.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9659940e6118ea47\mscorsn.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_7fb6c5fc7a692299\mscorsn.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 18944 c:\windows\winsxs\x86_netfx-mscorsn_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_967eaf5860c6dda6\mscorsn.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_8ecad3ca082b2720\mscorsecr.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_a596632dee85ae0d\mscorsecr.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_8ef3951c07d5e65f\mscorsecr.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 31744 c:\windows\winsxs\x86_netfx-mscorsecr_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_a5bb7e77ee33a16c\mscorsecr.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fae6aedc0e6b4e7e\mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_11b23e3ff4c5d56b\mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fb0f702e0e160dbd\mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 77312 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_11d75989f473c8ca\mscorsec.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.22230_none_a7ebd3ffe29b30fd\mscormmc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6001.18111_none_a778d756c96c72a8\mscormmc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.20883_none_a5d2869be59a77c6\mscormmc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 96768 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6000.16720_none_a586c87acc4ee451\mscormmc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ac146deb63538815\mscorld.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_c2dffd4f49ae0f02\mscorld.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ac3d2f3d62fe4754\mscorld.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 94208 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_c3051899495c0261\mscorld.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.22230_none_be8c4c4f0b009af1\mscories.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6001.18111_none_be194fa5f1d1dc9c\mscories.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.20883_none_bc72feeb0dffe1ba\mscories.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 83968 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6000.16720_none_bc2740c9f4b44e45\mscories.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d3cbdc1189d08299\mscorie.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ea976b75702b0986\mscorie.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d3f49d63897b41d8\mscorie.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 46592 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_eabc86bf6fd8fce5\mscorie.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.22230_none_19c2b92ea4636075\mscorees.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6001.18111_none_194fbc858b34a220\mscorees.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.20883_none_17a96bcaa762a73e\mscorees.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 15360 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.0.6000.16720_none_175dada98e1713c9\mscorees.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_56252df9df5d309a\mscordbc.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_6cf0bd5dc5b7b787\mscordbc.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_564def4bdf07efd9\mscordbc.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 83456 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_6d15d8a7c565aae6\mscordbc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9febc1e7f22703d7\InstallUtilLib.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b6b7514bd8818ac4\InstallUtilLib.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a0148339f1d1c316\InstallUtilLib.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 65032 c:\windows\winsxs\x86_netfx-installutillib_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_b6dc6c95d82f7e23\InstallUtilLib.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.22230_none_94fcd76f946eff94\netfxperf.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6001.18111_none_9489dac67b40413f\netfxperf.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.20883_none_92e38a0b976e465d\netfxperf.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 41984 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.0.6000.16720_none_9297cbea7e22b2e8\netfxperf.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_ec06bddd243f001b\fusion.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_02d24d410a998708\fusion.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_ec2f7f2f23e9bf5a\fusion.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 18936 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_02f7688b0a477a67\fusion.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.22230_none_b6d1c8d334ddd99f\dw20.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6001.18111_none_cd9d58371b38608c\dw20.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.20883_none_b6fa8a25348898de\dw20.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 36344 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6000.16720_none_cdc273811ae653eb\dw20.exe
+ 2009-08-14 08:16 . 2008-07-27 17:58 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.22230_none_78e9255d762fdbb1\dfshim.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6001.18111_none_787628b45d011d5c\dfshim.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.20883_none_76cfd7f9792f227a\dfshim.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 96760 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6000.16720_none_768419d85fe38f05\dfshim.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_7185974a6e32de81\dfdll.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_885126ae548d656e\dfdll.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_71ae589c6ddd9dc0\dfdll.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 62968 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_887641f8543b58cd\dfdll.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_bacd10f23217d582\CvtResUI.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d198a05618725c6f\CvtResUI.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_baf5d24431c294c1\CvtResUI.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 13824 c:\windows\winsxs\x86_netfx-cvtresui_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_d1bdbba018204fce\CvtResUI.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.22230_none_cef5751c4db35cea\cvtres.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6001.18111_none_e5c10480340de3d7\cvtres.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.20883_none_cf1e366e4d5e1c29\cvtres.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 35320 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6000.16720_none_e5e61fca33bbd736\cvtres.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c3e32d9c69e154e1\Culture.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_daaebd00503bdbce\Culture.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_c40beeee698c1420\Culture.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 27136 c:\windows\winsxs\x86_netfx-culture_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_dad3d84a4fe9cf2d\Culture.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.22230_none_e7adfd7046bf26c1\csc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6001.18111_none_fe798cd42d19adae\csc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.20883_none_e7d6bec24669e600\csc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 80376 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6000.16720_none_fe9ea81e2cc7a10d\csc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_9c1cec65dc98c049\CORPerfMonExt.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 89608 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_b2e87bc9c2f34736\CORPerfMonExt.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d17f0dbf\System.EnterpriseServices.Thunk.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 57392 c:\windows\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7d994ac\System.EnterpriseServices.Thunk.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae1e30daa5ede838\aspnet_wp.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 33792 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c4e9c03e8c486f25\aspnet_wp.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_6a52465fdc80f89e\aspnet_state.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 34312 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_811dd5c3c2db7f8b\aspnet_state.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_fb5d16613b9f1c00\aspnet_regiis.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 33288 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_1228a5c521f9a2ed\aspnet_regiis.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.22230_none_194f3800176a22e3\aspnet_rc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 84480 c:\windows\winsxs\x86_netfx-aspnet_rc_dll_res_b03f5f7f11d50a3a_6.0.6001.18111_none_301ac763fdc4a9d0\aspnet_rc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6dfa1ad165d9fc6\Aspnet_perf.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 33800 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_ddab3110fcb826b3\Aspnet_perf.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_79f7f7a1ecc8b0e1\MmcAspExt.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 97792 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_90c38705d32337ce\MmcAspExt.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_c6b2c95782a8d4ef\aspnet_isapi.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 17416 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_dd7e58bb69035bdc\aspnet_isapi.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_be85852d718763f1\aspnet_filter.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 22024 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_d551149157e1eade\aspnet_filter.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ae6c18ea84987f1f\AppLaunch.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 58880 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_c537a84e6af3060c\AppLaunch.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.22230_none_4e662f92bea93024\alinkui.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 28672 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_messages_b03f5f7f11d50a3a_6.0.6001.18111_none_6531bef6a503b711\alinkui.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_22314a8c053513e8\alink.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 98808 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_38fcd9efeb8f9ad5\alink.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.22230_none_6a687297cadcd9e6\MSBuild.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6001.18111_none_813401fbb13760d3\MSBuild.exe
+ 2009-08-14 08:14 . 2009-08-14 08:14 97280 c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.dll
+ 2009-08-13 23:56 . 2009-06-10 11:44 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msvidc32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:44 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msrle32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:44 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:42 91136 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\avifil32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:42 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\avicap32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msvidc32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msrle32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:38 91136 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\avifil32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\avicap32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:58 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msvidc32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:57 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msrle32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:56 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:52 91136 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\avifil32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:52 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\avicap32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvidc32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msrle32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:07 91136 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\avifil32.dll
+ 2006-11-02 09:03 . 2006-11-02 09:46 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\avicap32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:03 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msvidc32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:03 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msrle32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:00 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:57 88576 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\avifil32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:57 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\avicap32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:10 31232 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msvidc32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:09 12800 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msrle32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:07 82944 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\mciavi32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:04 88576 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\avifil32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:04 65024 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\avicap32.dll
+ 2009-08-13 23:56 . 2009-06-04 10:52 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\tsgqec.dll
+ 2009-08-13 23:56 . 2009-04-11 06:28 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\tsgqec.dll
+ 2009-08-13 23:56 . 2009-06-04 12:35 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\tsgqec.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\tsgqec.dll
+ 2009-08-13 23:56 . 2009-06-04 12:34 36352 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\tsgqec.dll
+ 2009-08-13 23:56 . 2009-06-04 12:47 36352 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\tsgqec.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.21089_none_2a4b88e181591ecb\iebrshim.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 52736 c:\windows\winsxs\x86_microsoft-windows-iebrshim_31bf3856ad364e35_6.0.6000.16890_none_29ae416e684b83a1\iebrshim.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21089_none_c42672717aa9496e\iesetup.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21089_none_c42672717aa9496e\iernonce.dll
+ 2009-08-13 23:56 . 2009-07-18 10:02 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.21089_none_c42672717aa9496e\ie4uinit.exe
+ 2009-08-13 23:56 . 2009-07-18 12:10 56320 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16890_none_c3892afe619bae44\iesetup.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 44544 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16890_none_c3892afe619bae44\iernonce.dll
+ 2009-08-13 23:56 . 2009-07-18 10:00 70656 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_6.0.6000.16890_none_c3892afe619bae44\ie4uinit.exe
+ 2009-08-13 23:56 . 2009-07-18 09:52 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22475_none_2fa4f48433505a52\ieUnatt.exe
+ 2009-08-13 23:56 . 2009-07-18 09:46 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18294_none_2f04b5b11a43dbec\ieUnatt.exe
+ 2009-08-13 23:56 . 2009-07-18 10:02 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21089_none_2db7bd56362e80c9\ieUnatt.exe
+ 2009-08-13 23:56 . 2009-07-18 10:00 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16890_none_2d1a75e31d20e59f\ieUnatt.exe
+ 2009-08-13 23:56 . 2009-07-18 12:09 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.21089_none_58f13cb3806e0725\icardie.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 63488 c:\windows\winsxs\x86_microsoft-windows-ie-infocard_31bf3856ad364e35_6.0.6000.16890_none_5853f54067606bfb\icardie.dll
+ 2009-08-13 23:56 . 2009-07-18 09:51 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22475_none_f3b07afbd37875ca\mshtmler.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22475_none_f3b07afbd37875ca\ieencode.dll
+ 2006-11-02 07:33 . 2006-11-02 07:33 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18294_none_f3103c28ba6bf764\mshtmler.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18294_none_f3103c28ba6bf764\ieencode.dll
+ 2009-08-13 23:56 . 2009-07-18 08:42 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21089_none_f1c343cdd6569c41\mshtmler.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.21089_none_f1c343cdd6569c41\ieencode.dll
+ 2009-08-13 23:56 . 2009-07-18 08:34 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16890_none_f125fc5abd490117\mshtmler.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6000.16890_none_f125fc5abd490117\ieencode.dll
+ 2009-08-13 23:56 . 2009-07-18 11:50 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22475_none_ae7516482017c315\admparse.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18294_none_add4d775070b44af\admparse.dll
+ 2009-08-13 23:56 . 2009-07-18 12:06 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21089_none_ac87df1a22f5e98c\admparse.dll
+ 2009-08-13 23:56 . 2009-07-18 12:07 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16890_none_abea97a709e84e62\admparse.dll
+ 2009-08-13 23:56 . 2009-07-18 09:36 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22180_none_04028882b857ddd1\WininetPlugin.dll
+ 2009-08-13 23:56 . 2009-07-18 11:45 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22180_none_04028882b857ddd1\jsproxy.dll
+ 2009-06-11 04:52 . 2009-04-11 06:28 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18071_none_0384bbed9f313b6d\WininetPlugin.dll
+ 2009-06-11 04:52 . 2009-04-11 06:28 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18071_none_0384bbed9f313b6d\jsproxy.dll
+ 2009-08-13 23:56 . 2009-07-18 11:56 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22475_none_022be7f8bb24eb6f\WininetPlugin.dll
+ 2009-08-13 23:56 . 2009-07-18 11:53 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22475_none_022be7f8bb24eb6f\jsproxy.dll
+ 2008-10-16 19:09 . 2008-02-22 05:01 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18294_none_018ba925a2186d09\WininetPlugin.dll
+ 2009-08-13 23:56 . 2009-07-18 16:02 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18294_none_018ba925a2186d09\jsproxy.dll
+ 2009-08-13 23:56 . 2009-07-18 12:16 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21089_none_003eb0cabe0311e6\WininetPlugin.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21089_none_003eb0cabe0311e6\jsproxy.dll
+ 2009-08-13 23:56 . 2009-07-18 12:17 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16890_none_ffa16957a4f576bc\WininetPlugin.dll
+ 2009-08-13 23:56 . 2009-07-18 12:11 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16890_none_ffa16957a4f576bc\jsproxy.dll
+ 2009-08-13 23:56 . 2009-07-18 12:15 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.21089_none_ec1c2c762f9973ef\pngfilt.dll
+ 2009-08-13 23:56 . 2009-07-18 12:15 44544 c:\windows\winsxs\x86_microsoft-windows-i..ablenetworkgraphics_31bf3856ad364e35_6.0.6000.16890_none_eb7ee503168bd8c5\pngfilt.dll
+ 2009-08-13 23:56 . 2009-07-17 14:15 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6002.22179_none_ad4da751702700f0\atl.dll
+ 2009-08-13 23:56 . 2009-07-17 13:54 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6002.18070_none_acbb07ec57117d17\atl.dll
+ 2009-08-13 23:56 . 2009-07-17 14:24 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.22474_none_ab6233f773052d19\atl.dll
+ 2009-08-13 23:56 . 2009-07-17 14:35 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.18293_none_aac1f52459f8aeb3\atl.dll
+ 2009-08-13 23:56 . 2009-07-17 14:39 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6000.21088_none_a974fcc975e35390\atl.dll
+ 2009-08-13 23:56 . 2009-07-17 14:52 71680 c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6000.16889_none_a8ec88265cc499db\atl.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.22230_none_f190f5ef2cc517e1\ISymWrapper.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 72192 c:\windows\winsxs\x86_isymwrapper_b03f5f7f11d50a3a_6.0.6001.18111_none_085c8553131f9ece\ISymWrapper.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.22230_none_64acf3553ac5a0c9\InstallUtil.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 28672 c:\windows\winsxs\x86_installutil_b03f5f7f11d50a3a_6.0.6001.18111_none_7b7882b9212027b6\InstallUtil.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.22230_none_5b747583ab60c1bf\CustomMarshalers.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 69120 c:\windows\winsxs\x86_custommarshalers_b03f5f7f11d50a3a_6.0.6001.18111_none_724004e791bb48ac\CustomMarshalers.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.22230_none_f29d5fad32b759c9\aspnet_regbrowsers.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 24576 c:\windows\winsxs\x86_aspnet_regbrowsers_b03f5f7f11d50a3a_6.0.6001.18111_none_0968ef111911e0b6\aspnet_regbrowsers.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_01fc77a472358303\aspnet_compiler.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 36864 c:\windows\winsxs\x86_aspnet_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_18c80708589009f0\aspnet_compiler.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.22230_none_36c0279e3824ba1d\System.Web.RegularExpressions.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_system.web.regularexpressions_b03f5f7f11d50a3a_6.0.6001.18111_none_4d8bb7021e7f410a\System.Web.RegularExpressions.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.22230_none_053d7dceca0e50f6\System.Drawing.Design.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 81920 c:\windows\winsxs\msil_system.drawing.design_b03f5f7f11d50a3a_6.0.6001.18111_none_1c090d32b068d7e3\System.Drawing.Design.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.22230_none_74f6b119924b1b75\System.Configuration.Install.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 81920 c:\windows\winsxs\msil_system.configuration.install_b03f5f7f11d50a3a_6.0.6001.18111_none_8bc2407d78a5a262\System.Configuration.Install.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_5184820053c60f93\Microsoft.Vsa.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 32768 c:\windows\winsxs\msil_microsoft.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_685011643a209680\Microsoft.Vsa.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.22230_none_2db156f10c3d89a8\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 12800 c:\windows\winsxs\msil_microsoft.vsa.vb.codedomprocessor_b03f5f7f11d50a3a_6.0.6001.18111_none_447ce654f2981095\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.22230_none_dc0dbeaf661f6557\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 28672 c:\windows\winsxs\msil_microsoft.visualbasic.vsa_b03f5f7f11d50a3a_6.0.6001.18111_none_f2d94e134c79ec44\Microsoft.VisualBasic.Vsa.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.22230_none_cb3ecf4cbea98a6d\Microsoft.Build.Utilities.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_microsoft.build.utilities_b03f5f7f11d50a3a_6.0.6001.18111_none_e20a5eb0a504115a\Microsoft.Build.Utilities.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.22230_none_abfd81959d3a459f\Microsoft.Build.Framework.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 36864 c:\windows\winsxs\msil_microsoft.build.framework_b03f5f7f11d50a3a_6.0.6001.18111_none_c2c910f98394cc8c\Microsoft.Build.Framework.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.22230_none_9109522ef11c4db7\jsc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 40960 c:\windows\winsxs\msil_jsc_b03f5f7f11d50a3a_6.0.6001.18111_none_a7d4e192d776d4a4\jsc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.22230_none_678eeb1221b47c69\IEHost.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 77824 c:\windows\winsxs\msil_iehost_b03f5f7f11d50a3a_6.0.6001.18111_none_7e5a7a76080f0356\IEHost.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.22230_none_01ccc492c3ad5c5c\cscompmgd.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 13312 c:\windows\winsxs\msil_cscompmgd_b03f5f7f11d50a3a_6.0.6001.18111_none_189853f6aa07e349\cscompmgd.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.22230_none_36e03523aca1773f\Accessibility.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 10752 c:\windows\winsxs\msil_accessibility_b03f5f7f11d50a3a_6.0.6001.18111_none_4dabc48792fbfe2c\Accessibility.dll
+ 2008-01-21 01:58 . 2009-08-20 18:34 66808 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2009-08-21 15:46 84722 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-08-13 23:56 . 2009-07-18 16:02 28160 c:\windows\System32\jsproxy.dll
- 2009-06-11 04:52 . 2009-04-24 16:02 28160 c:\windows\System32\jsproxy.dll
- 2008-02-13 05:27 . 2009-08-06 20:07 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-02-13 05:27 . 2009-08-21 15:30 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-08-18 14:50 . 2009-08-21 15:30 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-08-18 14:50 . 2009-08-21 15:30 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-06-16 16:53 . 2009-07-17 08:02 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2006-07-24 17:50 . 2006-07-24 17:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 17:50 . 2006-07-24 17:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WORDPOL.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 12080 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 64288 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL
+ 2006-10-27 02:59 . 2006-10-27 02:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-27 02:49 . 2006-10-27 02:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-27 03:12 . 2006-10-27 03:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 12112 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPTPOL.DLL
+ 2006-10-27 02:59 . 2006-10-27 02:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OSETUPPS.DLL
+ 2006-10-27 02:59 . 2006-10-27 02:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-27 03:00 . 2006-10-27 03:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 22:11 . 2006-10-27 22:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 11544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFICEPL.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 12104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 20280 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL
+ 2006-10-27 02:59 . 2006-10-27 02:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-27 22:26 . 2006-10-27 22:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-27 02:52 . 2006-10-27 02:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-27 03:12 . 2006-10-27 03:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 22:01 . 2006-10-27 22:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-27 02:59 . 2006-10-27 02:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-27 02:52 . 2006-10-27 02:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-27 03:12 . 2006-10-27 03:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL
+ 2008-06-16 16:51 . 2008-06-16 16:51 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXCELPOL.DLL
+ 2006-10-27 03:12 . 2006-10-27 03:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-27 04:18 . 2006-10-27 04:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACCOLK.DLL
- 2006-11-02 10:25 . 2009-06-13 02:05 86016 c:\windows\inf\infpub.dat
+ 2006-11-02 10:25 . 2009-08-17 15:49 86016 c:\windows\inf\infpub.dat
+ 2009-08-14 08:33 . 2009-08-14 08:33 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2009-08-14 08:34 . 2009-08-14 08:34 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2009-08-14 08:34 . 2009-08-14 08:34 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2009-08-14 08:34 . 2009-08-14 08:34 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-08-13 23:55 . 2009-07-15 12:46 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-15 12:46 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\dxmasf.dll
+ 2009-08-13 23:55 . 2009-07-15 12:39 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-15 12:39 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\dxmasf.dll
+ 2009-08-13 23:55 . 2009-07-15 14:51 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-15 14:51 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\dxmasf.dll
+ 2009-08-13 23:55 . 2009-07-14 12:58 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-14 12:59 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\dxmasf.dll
+ 2009-08-13 23:55 . 2009-07-15 14:42 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-15 14:43 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\dxmasf.dll
+ 2009-08-13 23:55 . 2009-07-14 13:00 7680 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\spwmp.dll
+ 2009-08-13 23:55 . 2009-07-14 13:01 4096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\dxmasf.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.22230_none_50329e8ce7943d1c\Microsoft_VsaVb.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 7168 c:\windows\winsxs\msil_microsoft_vsavb_b03f5f7f11d50a3a_6.0.6001.18111_none_66fe2df0cdeec409\Microsoft_VsaVb.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.22230_none_6e2733a0cb7d3e16\Microsoft.VisualC.Dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 5632 c:\windows\winsxs\msil_microsoft.visualc_b03f5f7f11d50a3a_6.0.6001.18111_none_84f2c304b1d7c503\Microsoft.VisualC.Dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.22230_none_6abe1794a5113128\IIEHost.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 6656 c:\windows\winsxs\msil_iiehost_b03f5f7f11d50a3a_6.0.6001.18111_none_8189a6f88b6bb815\IIEHost.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.22230_none_d8a42d85dedbb6ac\IEExecRemote.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 8192 c:\windows\winsxs\msil_ieexecremote_b03f5f7f11d50a3a_6.0.6001.18111_none_ef6fbce9c5363d99\IEExecRemote.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.22230_none_68159a7e2151dff0\IEExec.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 9728 c:\windows\winsxs\msil_ieexec_b03f5f7f11d50a3a_6.0.6001.18111_none_7ee129e207ac66dd\IEExec.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.22230_none_4f02a0c0a2a3299b\dfsvc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 5120 c:\windows\winsxs\msil_dfsvc_b03f5f7f11d50a3a_6.0.6001.18111_none_65ce302488fdb088\dfsvc.exe
+ 2008-07-25 22:00 . 2009-08-21 15:46 9376 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-185379766-2671556060-1075924701-1000_UserData.bin
+ 2009-08-13 18:52 . 2009-08-13 18:52 9560 c:\windows\System32\networklist\icons\{468588DE-C29A-4D09-BF54-FF3D93683E4F}_48.bin
+ 2009-08-13 18:52 . 2009-08-13 18:52 4280 c:\windows\System32\networklist\icons\{468588DE-C29A-4D09-BF54-FF3D93683E4F}_32.bin
+ 2009-08-13 18:52 . 2009-08-13 18:52 2456 c:\windows\System32\networklist\icons\{468588DE-C29A-4D09-BF54-FF3D93683E4F}_24.bin
+ 2009-08-21 15:44 . 2009-08-21 15:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-08-06 20:06 . 2009-08-06 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-08-21 15:44 . 2009-08-21 15:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-08-06 20:06 . 2009-08-06 20:06 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-08-14 08:15 . 2008-07-27 17:58 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.22230_none_fcc00dc68232b3ca\System.Transactions.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6001.18111_none_138b9d2a688d3ab7\System.Transactions.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.20883_none_fce8cf1881dd7309\System.Transactions.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 261632 c:\windows\winsxs\x86_system.transactions_b77a5c561934e089_6.0.6000.16720_none_13b0b874683b2e16\System.Transactions.dll
+ 2009-08-14 08:15 . 2008-07-27 18:19 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.Wrapper.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91dc7bc3c9c\System.EnterpriseServices.dll
+ 2009-08-14 08:15 . 2008-07-27 18:22 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.Wrapper.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881ae16c389\System.EnterpriseServices.dll
+ 2009-08-14 08:15 . 2008-07-27 18:15 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.Wrapper.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6fc766fbdb\System.EnterpriseServices.dll
+ 2009-08-14 08:15 . 2008-07-27 18:19 113664 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.Wrapper.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 258048 c:\windows\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cbadc4b6e8\System.EnterpriseServices.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.22230_none_dc6b35ddf6cce234\System.Data.OracleClient.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6001.18111_none_f336c541dd276921\System.Data.OracleClient.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.20883_none_dc93f72ff677a173\System.Data.OracleClient.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 486400 c:\windows\winsxs\x86_system.data.oracleclient_b77a5c561934e089_6.0.6000.16720_none_f35be08bdcd55c80\System.Data.OracleClient.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1fd49b5551906ebe\webengine.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_36a02ab937eaf5ab\webengine.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1ffd5ca7513b2dfd\webengine.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 438272 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_36c546033798e90a\webengine.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.22230_none_8475eaedc42b16ed\vbc7ui.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6001.18111_none_9b417a51aa859dda\vbc7ui.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.20883_none_849eac3fc3d5d62c\vbc7ui.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 193016 c:\windows\winsxs\x86_netfx-vb_compiler_ui_b03f5f7f11d50a3a_6.0.6000.16720_none_9b66959baa339139\vbc7ui.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_fd2518f6147d7134\SOS.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_13f0a859fad7f821\SOS.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_fd4dda4814283073\SOS.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 392184 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_1415c3a3fa85eb80\SOS.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_440dac83e5e384b2\shfusion.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5ad93be7cc3e0b9f\shfusion.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_44366dd5e58e43f1\shfusion.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 118784 c:\windows\winsxs\x86_netfx-shfusion_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5afe5731cbebfefe\shfusion.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_85cbd290637bad17\peverify.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_9c9761f449d63404\peverify.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_85f493e263266c56\peverify.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 143360 c:\windows\winsxs\x86_netfx-peverify_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_9cbc7d3e49842763\peverify.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_60f23c76644878ad\ngen.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_77bdcbda4aa2ff9a\ngen.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.20883_none_611afdc863f337ec\ngen.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 100856 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6000.16720_none_77e2e7244a50f2f9\ngen.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.22230_none_44257d261dae3692\mscorsvc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5af10c8a0408bd7f\mscorsvc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.20883_none_444e3e781d58f5d1\mscorsvc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 230912 c:\windows\winsxs\x86_netfx-mscorsvc__dll_b03f5f7f11d50a3a_6.0.6000.16720_none_5b1627d403b6b0de\mscorsvc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_d95c84d7b5ee3d09\mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f028143b9c48c3f6\mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_d9854629b598fc48\mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 345600 c:\windows\winsxs\x86_netfx-mscorrc_res_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f04d2f859bf6b755\mscorrc.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_e119214775dc9ac8\mscorpe.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_f7e4b0ab5c3721b5\mscorpe.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_e141e29975875a07\mscorpe.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 114176 c:\windows\winsxs\x86_netfx-mscorpe_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_f809cbf55be51514\mscorpe.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_a89203c94ad42152\mscorjit.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_bf5d932d312ea83f\mscorjit.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_a8bac51b4a7ee091\mscorjit.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 367104 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_bf82ae7730dc9b9e\mscorjit.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.22230_none_7cfb3a7ef4453276\mscorier.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6001.18111_none_7c883dd5db167421\mscorier.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.20883_none_7ae1ed1af744793f\mscorier.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 158720 c:\windows\winsxs\x86_netfx-mscorier_dll_non_mui_31bf3856ad364e35_6.0.6000.16720_none_7a962ef9ddf8e5ca\mscorier.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.22230_none_b5c92b126f5f98c8\mscoree.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6001.18111_none_b5562e695630da73\mscoree.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.20883_none_b3afddae725edf91\mscoree.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 282112 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.0.6000.16720_none_b3641f8d59134c1c\mscoree.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_595b9b3876129b10\mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_70272a9c5c6d21fd\mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 17:55 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_59845c8a75bd5a4f\mscordbi.dll
+ 2009-08-14 08:16 . 2008-07-27 18:00 308224 c:\windows\winsxs\x86_netfx-mscordbi_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_704c45e65c1b155c\mscordbi.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.22230_none_1456d1352088951f\mscordacwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6001.18111_none_2b22609906e31c0c\mscordacwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.20883_none_147f92872033545e\mscordacwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 998408 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6000.16720_none_2b477be306910f6b\mscordacwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_b899b6bd0c9e11ab\EventLogMessages.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_cf654620f2f89898\EventLogMessages.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_b8c2780f0c48d0ea\EventLogMessages.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 798224 c:\windows\winsxs\x86_netfx-eventlogmessages_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_cf8a616af2a68bf7\EventLogMessages.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.22230_none_ba13981d2e5a5238\diasymreader.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6001.18111_none_d0df278114b4d925\diasymreader.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.20883_none_ba3c596f2e051177\diasymreader.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 575496 c:\windows\winsxs\x86_netfx-debugging_msdia70_b03f5f7f11d50a3a_6.0.6000.16720_none_d10442cb1462cc84\diasymreader.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.22230_none_5a09847e047c0319\cscompui.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6001.18111_none_70d513e1ead68a06\cscompui.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.20883_none_5a3245d00426c258\cscompui.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 145408 c:\windows\winsxs\x86_netfx-csharpcompilermsg_b03f5f7f11d50a3a_6.0.6000.16720_none_70fa2f2bea847d65\cscompui.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.22230_none_0a006df812af4c45\clrgc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 105464 c:\windows\winsxs\x86_netfx-clrgc_b03f5f7f11d50a3a_6.0.6001.18111_none_20cbfd5bf909d332\clrgc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.22230_none_ec457fefa7731d07\ilasm.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 230904 c:\windows\winsxs\x86_netfx-clr_ilasm_exe_b03f5f7f11d50a3a_6.0.6001.18111_none_03110f538dcda3f4\ilasm.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.22230_none_569074c9018f7402\AdoNetDiag.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 147968 c:\windows\winsxs\x86_netfx-ado_net_diag_b03f5f7f11d50a3a_6.0.6001.18111_none_6d5c042ce7e9faef\AdoNetDiag.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.22230_none_3994b52044ddfb3e\Vsavb7rtUI.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 218112 c:\windows\winsxs\x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_6.0.6001.18111_none_506044842b38822b\Vsavb7rtUI.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 635904 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcr80.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 558080 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcp80.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 479232 c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.3053_none_d08d7bba442a9b36\msvcm80.dll
+ 2009-08-13 23:56 . 2009-06-10 11:46 160256 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6002.22150_none_ce741cb6ed3e398c\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 11:42 160256 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6002.18049_none_cdfe5271d41061e0\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 12:00 160256 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6001.22447_none_cc9f7cc0f00979d8\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 12:12 160256 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6001.18270_none_cbee6c45d70a7f59\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 12:06 158208 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6000.21065_none_caa173eaf2f52436\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 12:16 156160 c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6000.16868_none_ca1affdbd9d49d2f\wkssvc.dll
+ 2009-08-13 23:56 . 2009-06-10 11:44 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msvfw32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msvfw32.dll
+ 2009-08-13 23:56 . 2009-06-10 11:58 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msvfw32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvfw32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:03 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msvfw32.dll
+ 2009-08-13 23:56 . 2009-06-10 12:10 123904 c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msvfw32.dll
+ 2009-08-13 23:56 . 2009-06-04 12:54 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\aaclient.dll
+ 2009-08-13 23:56 . 2009-04-11 06:28 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\aaclient.dll
+ 2009-08-13 23:56 . 2009-06-04 12:29 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\aaclient.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\aaclient.dll
+ 2009-08-13 23:56 . 2009-06-04 12:25 116736 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\aaclient.dll
+ 2009-08-13 23:56 . 2009-06-04 12:36 116736 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\aaclient.dll
+ 2009-08-13 23:55 . 2009-07-15 12:46 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6002.22172_none_a65e88df3e466bbf\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-15 12:39 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6002.18065_none_a5e2bcde251dfc09\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-15 14:52 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6001.22470_none_a47616634121e3ed\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-14 13:00 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6001.18289_none_a3eaaa60280446fc\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-15 14:44 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6000.21083_none_a287deeb4400f10d\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-14 13:02 313344 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6000.16885_none_a2006a922ae150af\wmpdxm.dll
+ 2009-08-13 23:55 . 2009-07-15 12:45 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-15 12:46 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-15 12:46 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmpconfig.exe
+ 2009-08-13 23:55 . 2009-07-15 12:39 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-15 12:39 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-15 12:39 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmpconfig.exe
+ 2009-08-13 23:55 . 2009-07-15 13:05 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-15 13:06 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-15 13:06 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmpconfig.exe
+ 2009-08-13 23:55 . 2009-07-14 10:58 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-14 10:59 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-14 10:59 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmpconfig.exe
+ 2009-08-13 23:55 . 2009-07-15 12:53 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-15 12:53 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-15 12:53 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmpconfig.exe
+ 2009-08-13 23:55 . 2009-07-14 11:10 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmpshare.exe
+ 2009-08-13 23:55 . 2009-07-14 11:10 168960 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmplayer.exe
+ 2009-08-13 23:55 . 2009-07-14 11:11 107520 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmpconfig.exe
+ 2009-08-13 23:56 . 2009-07-18 10:02 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.21089_none_0b99cb87f04d1d33\ieuser.exe
+ 2009-08-13 23:56 . 2009-07-18 10:01 301568 c:\windows\winsxs\x86_microsoft-windows-ieuser_31bf3856ad364e35_6.0.6000.16890_none_0afc8414d73f8209\ieuser.exe
+ 2009-08-13 23:56 . 2009-07-18 10:02 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.21089_none_e6f1966badd25d81\ieinstal.exe
+ 2009-08-13 23:56 . 2009-07-18 10:01 263168 c:\windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_6.0.6000.16890_none_e6544ef894c4c257\ieinstal.exe
+ 2009-08-13 23:56 . 2009-07-18 09:24 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22180_none_66bc01a4c4a3d534\ieui.dll
+ 2009-08-13 23:56 . 2009-07-18 09:20 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18071_none_663e350fab7d32d0\ieui.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22475_none_64e5611ac770e2d2\ieui.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18294_none_64452247ae64646c\ieui.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21089_none_62f829ecca4f0949\ieui.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16890_none_625ae279b1416e1f\ieui.dll
+ 2009-08-13 23:56 . 2009-07-18 11:56 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22475_none_47e69ed4a5d609cc\sqmapi.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 271360 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22475_none_47e69ed4a5d609cc\iertutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18294_none_474660018cc98b66\sqmapi.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 270848 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18294_none_474660018cc98b66\iertutil.dll
+ 2009-08-13 23:56 . 2009-07-18 12:15 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21089_none_45f967a6a8b43043\sqmapi.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.21089_none_45f967a6a8b43043\iertutil.dll
+ 2009-08-13 23:56 . 2009-07-18 12:16 134144 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16890_none_455c20338fa69519\sqmapi.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 268288 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6000.16890_none_455c20338fa69519\iertutil.dll
+ 2009-08-13 23:56 . 2009-07-18 11:55 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22475_none_37695ca72d74ef3a\occache.dll
+ 2009-08-13 23:56 . 2009-07-18 16:04 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18294_none_36c91dd4146870d4\occache.dll
+ 2009-08-13 23:56 . 2009-07-18 12:14 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.21089_none_357c2579305315b1\occache.dll
+ 2009-08-13 23:56 . 2009-07-18 12:15 102912 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6000.16890_none_34dede0617457a87\occache.dll
+ 2009-08-13 23:56 . 2009-07-18 11:55 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22475_none_2fa4f48433505a52\iexplore.exe
+ 2009-08-13 23:56 . 2009-07-18 21:39 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18294_none_2f04b5b11a43dbec\iexplore.exe
+ 2009-08-13 23:56 . 2009-07-18 12:16 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21089_none_2db7bd56362e80c9\iexplore.exe
+ 2009-08-13 23:56 . 2009-07-18 12:16 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16890_none_2d1a75e31d20e59f\iexplore.exe
+ 2009-08-13 23:56 . 2009-07-18 12:12 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.21089_none_467ea6b45f94c4f4\mshtmled.dll
+ 2009-08-13 23:56 . 2009-07-18 12:13 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6000.16890_none_45e15f41468729ca\mshtmled.dll
+ 2009-08-13 23:56 . 2009-07-18 11:54 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22475_none_60297ec753c83e27\msfeeds.dll
+ 2009-08-13 23:56 . 2009-07-18 16:02 458240 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18294_none_5f893ff43abbbfc1\msfeeds.dll
+ 2009-08-13 23:56 . 2009-07-18 12:12 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.21089_none_5e3c479956a6649e\msfeeds.dll
+ 2009-08-13 23:56 . 2009-07-18 12:13 459264 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6000.16890_none_5d9f00263d98c974\msfeeds.dll
+ 2009-08-13 23:56 . 2009-07-18 12:08 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21089_none_961c0c5c9dd41267\dxtrans.dll
+ 2009-08-13 23:56 . 2009-07-18 12:08 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.21089_none_961c0c5c9dd41267\dxtmsft.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 214528 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16890_none_957ec4e984c6773d\dxtrans.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 347136 c:\windows\winsxs\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16890_none_957ec4e984c6773d\dxtmsft.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21089_none_f9e7d3a487ee8c39\ieapfltr.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16890_none_f94a8c316ee0f10f\ieapfltr.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22475_none_ae7516482017c315\ieakui.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22475_none_ae7516482017c315\ieaksie.dll
+ 2006-11-02 07:27 . 2006-11-02 09:39 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18294_none_add4d775070b44af\ieakui.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18294_none_add4d775070b44af\ieaksie.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21089_none_ac87df1a22f5e98c\ieakui.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.21089_none_ac87df1a22f5e98c\ieaksie.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16890_none_abea97a709e84e62\ieakui.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6000.16890_none_abea97a709e84e62\ieaksie.dll
+ 2009-08-13 23:56 . 2009-07-18 11:52 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22475_none_749360f470cf0c36\iedkcs32.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18294_none_73f3222157c28dd0\iedkcs32.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 388608 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.21089_none_72a629c673ad32ad\iedkcs32.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 385024 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6000.16890_none_7208e2535a9f9783\iedkcs32.dll
+ 2009-08-13 23:56 . 2009-07-18 11:47 828928 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22180_none_04028882b857ddd1\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 11:35 828416 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18071_none_0384bbed9f313b6d\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 11:56 828416 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22475_none_022be7f8bb24eb6f\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 16:06 827904 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18294_none_018ba925a2186d09\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 12:16 828928 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.21089_none_003eb0cabe0311e6\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 12:17 827392 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16890_none_ffa16957a4f576bc\wininet.dll
+ 2009-08-13 23:56 . 2009-07-18 11:54 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22475_none_e1089b1f95c4844b\mstime.dll
+ 2009-08-13 23:56 . 2009-07-18 16:03 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18294_none_e0685c4c7cb805e5\mstime.dll
+ 2009-08-13 23:56 . 2009-07-18 12:13 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.21089_none_df1b63f198a2aac2\mstime.dll
+ 2009-08-13 23:56 . 2009-07-18 12:13 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6000.16890_none_de7e1c7e7f950f98\mstime.dll
+ 2009-08-13 23:56 . 2009-07-18 12:06 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.21089_none_aa2122c70f008df0\advpack.dll
+ 2009-08-13 23:56 . 2009-07-18 12:07 124928 c:\windows\winsxs\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16890_none_a983db53f5f2f2c6\advpack.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.22230_none_550c05fb0983f4e2\CasPol.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 106496 c:\windows\winsxs\x86_caspol_b03f5f7f11d50a3a_6.0.6001.18111_none_6bd7955eefde7bcf\CasPol.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.22230_none_390f7133d5d912da\aspnet_regsql.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 106496 c:\windows\winsxs\x86_aspnet_regsql_b03f5f7f11d50a3a_6.0.6001.18111_none_4fdb0097bc3399c7\aspnet_regsql.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_none_dbfaf781cbbdcb4c\System.Web.Services.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 839680 c:\windows\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_none_f2c686e5b2185239\System.Web.Services.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.22230_none_c125c64be9be119e\System.Web.Mobile.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 835584 c:\windows\winsxs\msil_system.web.mobile_b03f5f7f11d50a3a_6.0.6001.18111_none_d7f155afd018988b\System.Web.Mobile.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.22230_none_3e3334ff9639896a\System.ServiceProcess.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 114688 c:\windows\winsxs\msil_system.serviceprocess_b03f5f7f11d50a3a_6.0.6001.18111_none_54fec4637c941057\System.ServiceProcess.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.22230_none_853c6897e7e5de42\System.Security.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6001.18111_none_9c07f7fbce40652f\System.Security.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.22230_none_31484a573d7508d0\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 131072 c:\windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.0.6001.18111_none_4813d9bb23cf8fbd\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.22230_none_aec9c7865ed754f1\System.Runtime.Remoting.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 303104 c:\windows\winsxs\msil_system.runtime.remoting_b77a5c561934e089_6.0.6001.18111_none_c59556ea4531dbde\System.Runtime.Remoting.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.22230_none_16e7a1313d46b35e\System.Messaging.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 258048 c:\windows\winsxs\msil_system.messaging_b03f5f7f11d50a3a_6.0.6001.18111_none_2db3309523a13a4b\System.Messaging.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.22230_none_086acb90261100e7\System.Management.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 372736 c:\windows\winsxs\msil_system.management_b03f5f7f11d50a3a_6.0.6001.18111_none_1f365af40c6b87d4\System.Management.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.22230_none_78c88abc0a794204\System.Drawing.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 626688 c:\windows\winsxs\msil_system.drawing_b03f5f7f11d50a3a_6.0.6001.18111_none_8f941a1ff0d3c8f1\System.Drawing.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.22230_none_3fd39f054b175321\System.DirectoryServices.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 401408 c:\windows\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18111_none_569f2e693171da0e\System.DirectoryServices.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.22230_none_984faa616e032a6c\System.DirectoryServices.Protocols.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 188416 c:\windows\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18111_none_af1b39c5545db159\System.DirectoryServices.Protocols.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.22230_none_493066b54a95ec67\System.Deployment.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 970752 c:\windows\winsxs\msil_system.deployment_b03f5f7f11d50a3a_6.0.6001.18111_none_5ffbf61930f07354\System.Deployment.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.22230_none_1aad946bbea480c9\System.Data.SqlXml.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 745472 c:\windows\winsxs\msil_system.data.sqlxml_b77a5c561934e089_6.0.6001.18111_none_317923cfa4ff07b6\System.Data.SqlXml.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.22230_none_1459c4f45060681a\System.configuration.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 425984 c:\windows\winsxs\msil_system.configuration_b03f5f7f11d50a3a_6.0.6001.18111_none_2b25545836baef07\System.configuration.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.22230_none_be153e99a3cc472a\sysglobl.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 110592 c:\windows\winsxs\msil_sysglobl_b03f5f7f11d50a3a_6.0.6001.18111_none_d4e0cdfd8a26ce17\sysglobl.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.22230_none_96c2ddfc1ad9e381\Microsoft.VisualBasic.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 659456 c:\windows\winsxs\msil_microsoft.visualbasic_b03f5f7f11d50a3a_6.0.6001.18111_none_ad8e6d6001346a6e\Microsoft.VisualBasic.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.22230_none_d69a058aaeddfb69\Microsoft.VisualBasic.Compatibility.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 372736 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility_b03f5f7f11d50a3a_6.0.6001.18111_none_ed6594ee95388256\Microsoft.VisualBasic.Compatibility.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.22230_none_4871d19d3674c77b\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 110592 c:\windows\winsxs\msil_microsoft.visualbasic.compatibility.data_b03f5f7f11d50a3a_6.0.6001.18111_none_5f3d61011ccf4e68\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.22230_none_bb6258cf9cb3d84c\Microsoft.JScript.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 749568 c:\windows\winsxs\msil_microsoft.jscript_b03f5f7f11d50a3a_6.0.6001.18111_none_d22de833830e5f39\Microsoft.JScript.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.22230_none_869676dea6d3dc61\Microsoft.Build.Tasks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 655360 c:\windows\winsxs\msil_microsoft.build.tasks_b03f5f7f11d50a3a_6.0.6001.18111_none_9d6206428d2e634e\Microsoft.Build.Tasks.dll
+ 2009-08-14 08:16 . 2008-07-27 17:58 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.22230_none_21d6660a2825921b\Microsoft.Build.Engine.dll
+ 2009-08-14 08:16 . 2008-07-27 18:03 348160 c:\windows\winsxs\msil_microsoft.build.engine_b03f5f7f11d50a3a_6.0.6001.18111_none_38a1f56e0e801908\Microsoft.Build.Engine.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.22230_none_69ade9eab036966e\AspNetMMCExt.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 507904 c:\windows\winsxs\msil_aspnetmmcext_b03f5f7f11d50a3a_6.0.6001.18111_none_8079794e96911d5b\AspNetMMCExt.dll
+ 2008-07-27 01:21 . 2009-08-20 18:25 359564 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2006-11-02 10:33 . 2009-08-06 18:21 621354 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-08-20 18:39 621354 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-06 18:21 110046 c:\windows\System32\perfc009.dat
+ 2006-11-02 10:33 . 2009-08-20 18:39 110046 c:\windows\System32\perfc009.dat
+ 2009-08-13 23:56 . 2009-07-18 16:04 146432 c:\windows\System32\occache.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 592384 c:\windows\System32\netlogon.dll
+ 2009-08-13 23:56 . 2009-07-18 16:03 671232 c:\windows\System32\mstime.dll
- 2009-06-11 04:52 . 2009-04-24 16:03 671232 c:\windows\System32\mstime.dll
- 2009-06-11 04:52 . 2009-04-24 16:03 458240 c:\windows\System32\msfeeds.dll
+ 2009-08-13 23:56 . 2009-07-18 16:02 458240 c:\windows\System32\msfeeds.dll
- 2009-06-11 04:52 . 2009-04-24 16:02 270848 c:\windows\System32\iertutil.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 270848 c:\windows\System32\iertutil.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 389120 c:\windows\System32\iedkcs32.dll
- 2009-06-11 04:52 . 2009-04-24 16:02 389120 c:\windows\System32\iedkcs32.dll
- 2009-06-11 04:52 . 2009-04-24 16:02 230400 c:\windows\System32\ieaksie.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 230400 c:\windows\System32\ieaksie.dll
+ 2006-11-02 12:47 . 2009-08-14 08:45 391528 c:\windows\System32\FNTCACHE.DAT
+ 2009-08-18 14:52 . 2009-08-20 18:31 262144 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\UsrClass.dat
+ 2008-07-25 22:36 . 2009-08-21 15:43 688112 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2009-08-14 08:14 . 2009-08-14 08:14 248832 c:\windows\Installer\2e37773.msi
+ 2009-08-13 19:21 . 2009-08-13 19:21 532992 c:\windows\Installer\16c8af.msi
+ 2009-08-13 19:21 . 2009-08-13 19:21 295606 c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2009-08-14 08:30 . 2009-08-14 08:30 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
- 2009-05-01 08:02 . 2009-05-01 08:02 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2007-06-08 00:51 . 2007-06-08 00:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2007-06-08 00:51 . 2007-06-08 00:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2006-07-24 17:50 . 2006-07-24 17:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\MSSTDFMT.DLL
+ 2006-10-27 03:49 . 2006-10-27 03:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-27 04:07 . 2006-10-27 04:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-20 15:37 . 2006-10-20 15:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 416544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFICE.DLL
+ 2006-10-27 02:55 . 2006-10-27 02:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 21:47 . 2006-10-26 21:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 20:58 . 2006-10-26 20:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-27 02:52 . 2006-10-27 02:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-27 03:00 . 2006-10-27 03:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 150320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL
+ 2006-10-27 03:12 . 2006-10-27 03:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DSSM.EXE
- 2006-11-02 10:25 . 2009-06-13 02:05 143360 c:\windows\inf\infstrng.dat
+ 2006-11-02 10:25 . 2009-08-17 15:49 143360 c:\windows\inf\infstrng.dat
- 2006-11-02 10:25 . 2009-06-13 02:05 143360 c:\windows\inf\infstor.dat
+ 2006-11-02 10:25 . 2009-08-17 15:49 143360 c:\windows\inf\infstor.dat
+ 2009-08-14 08:33 . 2009-08-14 08:33 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-08-14 08:34 . 2009-08-14 08:34 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-08-14 08:33 . 2009-08-14 08:33 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.22230_none_e05d060d3028766b\System.Web.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6001.18111_none_f72895711682fd58\System.Web.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.20883_none_e085c75f2fd335aa\System.Web.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 5238784 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6000.16720_none_f74db0bb1630f0b7\System.Web.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.22230_none_7dcbba6dcdd50d1d\System.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6001.18111_none_949749d1b42f940a\System.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.20883_none_7df47bbfcd7fcc5c\System.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 2933248 c:\windows\winsxs\x86_system.data_b77a5c561934e089_6.0.6000.16720_none_94bc651bb3dd8769\System.Data.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.22230_none_292469e5bfe5fdea\vbc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:03 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6001.18111_none_3feff949a64084d7\vbc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:55 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.20883_none_294d2b37bf90bd29\vbc.exe
+ 2009-08-14 08:15 . 2008-07-27 18:00 1172472 c:\windows\winsxs\x86_netfx-vb_compiler_b03f5f7f11d50a3a_6.0.6000.16720_none_40151493a5ee7836\vbc.exe
+ 2009-08-14 08:15 . 2008-07-27 17:58 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_1b92ae4e4887894c\mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_325e3db22ee21039\mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_1bbb6fa04832488b\mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 5815296 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_328358fc2e900398\mscorwks.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.22230_none_12a27c4beb875181\cscomp.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6001.18111_none_296e0bafd1e1d86e\cscomp.dll
+ 2009-08-14 08:15 . 2008-07-27 17:55 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.20883_none_12cb3d9deb3210c0\cscomp.dll
+ 2009-08-14 08:15 . 2008-07-27 18:00 1163768 c:\windows\winsxs\x86_netfx-csharp_compiler_cscomp_b03f5f7f11d50a3a_6.0.6000.16720_none_299326f9d18fcbcd\cscomp.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.22230_none_68458e13d277fbea\VsaVb7rt.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 1344000 c:\windows\winsxs\x86_netfx-_vsavb7rt_b03f5f7f11d50a3a_6.0.6001.18111_none_7f111d77b8d282d7\VsaVb7rt.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.22230_none_b0ebdf60db0024c7\mscorlib.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 4546560 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6001.18111_none_c7b76ec4c15aabb4\mscorlib.dll
+ 2009-08-13 23:56 . 2009-06-04 12:56 2067968 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\mstscax.dll
+ 2009-08-13 23:56 . 2009-06-04 12:07 2066432 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\mstscax.dll
+ 2009-08-13 23:56 . 2009-06-04 12:33 2067968 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\mstscax.dll
+ 2009-08-13 23:56 . 2009-06-04 12:34 2066432 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\mstscax.dll
+ 2009-08-13 23:56 . 2009-06-04 12:31 1874432 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\mstscax.dll
+ 2009-08-13 23:56 . 2009-06-04 12:43 1871872 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\mstscax.dll
+ 2009-08-13 23:55 . 2009-07-02 07:47 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22179_none_f4b581af81eee730\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-02 07:48 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18070_none_f422e24a68d96357\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-02 07:47 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22474_none_f2ca0e5584cd1359\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-02 07:47 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18293_none_f229cf826bc094f3\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-02 07:47 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21088_none_f0dcd72787ab39d0\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-02 07:48 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16889_none_f05462846e8c801b\OESpamFilter.dat
+ 2009-08-13 23:55 . 2009-07-15 12:47 8147456 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmploc.DLL
+ 2009-08-13 23:55 . 2009-07-15 12:40 8147456 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmploc.DLL
+ 2009-08-13 23:55 . 2009-07-15 13:07 8147456 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmploc.DLL
+ 2009-08-13 23:55 . 2009-07-14 10:59 8147456 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmploc.DLL
+ 2009-08-13 23:55 . 2009-07-15 12:53 8147968 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmploc.DLL
+ 2009-08-13 23:55 . 2009-07-14 11:11 8147968 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmploc.DLL
+ 2009-08-13 23:56 . 2009-07-18 11:45 6081024 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22180_none_66bc01a4c4a3d534\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 11:32 6079488 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18071_none_663e350fab7d32d0\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 09:55 6072832 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22475_none_64e5611ac770e2d2\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 6069248 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18294_none_64452247ae64646c\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 12:09 6070784 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.21089_none_62f829ecca4f0949\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 12:10 6067200 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16890_none_625ae279b1416e1f\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 11:45 3600384 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.22180_none_155ca7a138ae4707\mshtml.dll
+ 2009-08-13 23:56 . 2009-07-18 11:33 3599360 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.18071_none_14dedb0c1f87a4a3\mshtml.dll
+ 2009-08-13 23:56 . 2009-07-18 11:54 3584512 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22475_none_138607173b7b54a5\mshtml.dll
+ 2009-08-13 23:56 . 2009-07-18 16:02 3583488 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18294_none_12e5c844226ed63f\mshtml.dll
+ 2009-08-13 23:56 . 2009-07-18 12:12 3600384 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.21089_none_1198cfe93e597b1c\mshtml.dll
+ 2009-08-13 23:56 . 2009-07-18 12:13 3597824 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16890_none_10fb8876254bdff2\mshtml.dll
+ 2009-08-13 23:56 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.21089_none_f9e7d3a487ee8c39\ieapfltr.dat
+ 2009-08-13 23:56 . 2009-06-18 06:57 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6000.16890_none_f94a8c316ee0f10f\ieapfltr.dat
+ 2009-08-13 23:56 . 2009-07-18 11:47 1167872 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22180_none_b6fcace0ed4eb73e\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 11:34 1167872 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18071_none_b67ee04bd42814da\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 11:56 1166848 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22475_none_b5260c56f01bc4dc\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 16:06 1166336 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18294_none_b485cd83d70f4676\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 12:16 1163264 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.21089_none_b338d528f2f9eb53\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 12:16 1159680 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16890_none_b29b8db5d9ec5029\urlmon.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.22230_none_c3c5260b759cdf04\System.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 3149824 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6001.18111_none_da90b56f5bf765f1\System.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.22230_none_6ad5803162f79551\System.XML.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 2048000 c:\windows\winsxs\msil_system.xml_b77a5c561934e089_6.0.6001.18111_none_81a10f9549521c3e\System.XML.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.22230_none_1a2132e45d2f30fc\System.Windows.Forms.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 5025792 c:\windows\winsxs\msil_system.windows.forms_b77a5c561934e089_6.0.6001.18111_none_30ecc2484389b7e9\System.Windows.Forms.dll
+ 2009-08-14 08:15 . 2008-07-27 17:58 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.22230_none_9e7f5b011cc41ad8\System.Design.dll
+ 2009-08-14 08:15 . 2008-07-27 18:03 5062656 c:\windows\winsxs\msil_system.design_b03f5f7f11d50a3a_6.0.6001.18111_none_b54aea65031ea1c5\System.Design.dll
- 2009-06-11 04:52 . 2009-04-24 16:05 1166336 c:\windows\System32\urlmon.dll
+ 2009-08-13 23:56 . 2009-07-18 16:06 1166336 c:\windows\System32\urlmon.dll
- 2006-11-02 10:22 . 2009-07-27 23:46 6291456 c:\windows\System32\SMI\Store\Machine\schema.dat
+ 2006-11-02 10:22 . 2009-08-14 19:35 6291456 c:\windows\System32\SMI\Store\Machine\schema.dat
+ 2009-08-13 23:56 . 2009-07-18 16:02 3583488 c:\windows\System32\mshtml.dll
- 2009-06-11 04:52 . 2009-04-24 16:02 6069248 c:\windows\System32\ieframe.dll
+ 2009-08-13 23:56 . 2009-07-18 16:01 6069248 c:\windows\System32\ieframe.dll
+ 2008-11-21 04:06 . 2008-11-21 04:06 1194848 c:\windows\System32\FM20.DLL
- 2006-11-02 12:47 . 2009-03-11 08:10 2637299 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2006-11-02 12:47 . 2009-08-14 08:54 2637299 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2009-07-27 09:32 . 2009-07-27 09:32 5028352 c:\windows\Installer\2f425cc.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 1282560 c:\windows\Installer\2f425b9.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 7888384 c:\windows\Installer\2f425b2.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 9926144 c:\windows\Installer\2f425a9.msp
+ 2009-04-04 15:14 . 2009-04-04 15:14 1094656 c:\windows\Installer\2f42488.msp
+ 2009-08-13 19:21 . 2009-08-13 19:21 3620864 c:\windows\Installer\16c8a9.msi
+ 2008-06-16 16:53 . 2009-08-14 08:37 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-06-16 16:53 . 2009-08-14 08:37 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2008-06-16 16:53 . 2009-07-17 08:02 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2006-10-26 21:47 . 2006-10-26 21:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2008-06-16 16:52 . 2008-06-16 16:52 1276720 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXCELPIA.DLL
+ 2009-08-14 08:34 . 2009-08-14 08:34 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-08-13 23:55 . 2009-07-15 14:36 10628096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmp.dll
+ 2009-08-13 23:55 . 2009-07-15 14:30 10628096 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmp.dll
+ 2009-08-13 23:55 . 2009-07-15 14:52 10627584 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmp.dll
+ 2009-08-13 23:55 . 2009-07-14 13:00 10626048 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmp.dll
+ 2009-08-13 23:55 . 2009-07-15 14:44 10622464 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmp.dll
+ 2009-08-13 23:55 . 2009-07-14 13:02 10621952 c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmp.dll
+ 2009-08-13 23:55 . 2009-07-14 13:00 10626048 c:\windows\System32\wmp.dll
+ 2009-04-04 22:09 . 2009-04-04 22:09 15190016 c:\windows\Installer\2f424a7.msp
+ 2009-04-04 16:36 . 2009-04-04 16:36 21390848 c:\windows\Installer\2f42489.msp
+ 2009-05-21 08:02 . 2009-08-14 08:21 105114362 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
+ 2009-04-04 22:08 . 2009-04-04 22:08 343058432 c:\windows\Installer\2f4259f.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\Sidebar.exe" [2008-01-21 1233920]
"RunSpySweeperScheduleAtStartup"="c:\windows\system32\msfeedssync.exe" [2008-01-21 12800]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Veoh"="c:\program files\Veoh Networks\Veoh\VeohClient.exe" [2008-06-19 3664944]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Yahoo!MessengerForVista"="c:\users\Owner\AppData\Local\Yahoo!\Messenger for Vista\Yahoo.Messenger.YmApp.exe" [2008-06-30 204800]
"SmileboxTray"="c:\users\Owner\AppData\Roaming\Smilebox\SmileboxTray.exe" [2009-02-24 254600]
"SightSpeed"="c:\program files\SightSpeed\SightSpeed.exe" [2008-11-03 4789048]
"Google Update"="c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-05-05 133104]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-04-16 24264488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TRCMan"="c:\program files\TOSHIBA\TRCMan\TRCMan.exe" [2008-01-11 692224]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-26 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-11-01 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-06-16 448080]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-29 75136]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-07 1029416]
"PCMAgent"="c:\program files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe" [2007-12-14 143360]
"CLMLServer"="c:\program files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe" [2008-02-14 184320]
"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-07-29 1398024]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-08-14 2407184]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-05-14 177472]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-06-05 292136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-12 39792]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-30 4911104]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-1-5 66864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux5"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiSpywareOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{26933D98-10C6-44B7-8E36-10EB7EAC010A}c:\\program files\\sightspeed\\sightspeed.exe"= UDP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"UDP Query User{213F9975-059B-4235-AF47-B53E0DFA1F6B}c:\\program files\\sightspeed\\sightspeed.exe"= TCP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"TCP Query User{9EA19E15-1D33-4F5A-B57B-12F915183C44}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype
"UDP Query User{91165E5D-7129-4846-BB2D-9478FE4D0F21}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype
"TCP Query User{A997AC4F-1695-461F-8398-610B904AA9DF}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= UDP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"UDP Query User{AA6D06D1-4FAE-4DC2-BD1B-851B4641EB4D}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= TCP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"TCP Query User{0DA6CFDD-9F9F-4105-B7B7-B15625ED3742}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"UDP Query User{D43DDBE5-1EF0-4E9C-AEB5-2C6009D0ACE6}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"TCP Query User{25B094EC-4AF3-4BAA-9740-D335F0890C18}c:\\program files\\sightspeed\\sightspeed.exe"= UDP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"UDP Query User{1D142CCB-4C18-4D34-8D15-8E8D252AF6CE}c:\\program files\\sightspeed\\sightspeed.exe"= TCP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"TCP Query User{E2BAEFF7-3E3F-4552-A5C0-44C92411E1AB}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= UDP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"UDP Query User{A4D238E3-F98C-4B2D-AD97-C0580FA45F5F}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= TCP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"TCP Query User{13675CC9-55C2-4342-996C-34126BA8D15B}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype
"UDP Query User{45BD2099-947C-451D-8ACA-D845C8BC4A02}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\TOSHIBA\\ivp\\NetInt\\Netint.exe"= c:\toshiba\ivp\NetInt\Netint.exe:*:Enabled:NIE - Toshiba Software Upgrades Engine
"c:\\TOSHIBA\\Ivp\\ISM\\pinger.exe"= c:\toshiba\Ivp\ISM\pinger.exe:*:Enabled:Toshiba Software Upgrades Pinger
"c:\\ufxa.exe"= c:\ufxa.exe:*:enabled:Windows update

R0 PCTCore;PCTools KDS;c:\windows\System32\drivers\PCTCore.sys [7/29/2009 02:48 130936]
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\System32\drivers\jswpslwf.sys [6/16/2008 13:36 20352]
R2 ConfigFree Service;ConfigFree Service;c:\program files\Toshiba\ConfigFree\CFSvcs.exe [12/25/2007 17:07 40960]
R2 FlipShare Service;FlipShare Service;c:\program files\Flip Video\FlipShare\FlipShareService.exe [6/4/2009 18:41 451904]
R2 tmevtmgr;tmevtmgr;c:\windows\System32\drivers\tmevtmgr.sys [2/16/2008 00:34 52624]
R2 tmpreflt;tmpreflt;c:\windows\System32\drivers\tmpreflt.sys [7/15/2009 22:22 36368]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\Toshiba\SMARTLogService\TosIPCSrv.exe [12/3/2007 20:03 126976]
R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [2/13/2008 01:46 7168]
R3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [7/26/2008 17:31 648456]
S2 gupdate1c9b8bdb9b84200;Google Update Service (gupdate1c9b8bdb9b84200);c:\program files\Google\Update\GoogleUpdate.exe [4/8/2009 22:48 133104]
S3 ATTRcAppSvc;AT&T RcAppSvc;"c:\program files\AT&T\Communication Manager\RcAppSvc.exe" /n "ATTRcAppSvc" --> c:\program files\AT&T\Communication Manager\RcAppSvc.exe [?]
S3 CAATT;AT&T Con App Svc;"c:\program files\AT&T\Communication Manager\ConAppsSvc.exe" /n "CAATT" --> c:\program files\AT&T\Communication Manager\ConAppsSvc.exe [?]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\Jumpstart\jswpsapi.exe [6/16/2008 13:36 937984]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [7/29/2009 02:48 348752]
S3 SWNC8U56;Sierra Wireless MUX NDIS Driver (UMTS56);c:\windows\System32\drivers\swnc8u56.sys [6/27/2007 11:41 101248]
S3 SWUMX56;Sierra Wireless USB MUX Driver (UMTS56);c:\windows\System32\drivers\swumx56.sys [6/27/2007 11:42 73856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
bthsvcs REG_MULTI_SZ BthServ
.
Contents of the 'Scheduled Tasks' folder

2009-08-21 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-13 02:47]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-09 02:48]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-09 02:48]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-185379766-2671556060-1075924701-1000Core.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-07 23:08]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-185379766-2671556060-1075924701-1000UA.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-07 23:08]

2009-08-20 c:\windows\Tasks\User_Feed_Synchronization-{8C7EDD21-1F4B-463E-983B-457D8CF60B97}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-21 11:47
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\C80F.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(1924)
c:\program files\Google\Google Desktop Search\GoogleDesktopCommon.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\System32\Ati2evxx.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\Ati2evxx.exe
c:\windows\System32\agrsmsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\toshiba\IVP\ISM\pinger.exe
c:\program files\Trend Micro\Internet Security\SfCtlCom.exe
c:\toshiba\IVP\swupdate\swupdtmr.exe
c:\program files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
c:\windows\System32\TODDSrv.exe
c:\program files\Toshiba\Power Saver\TosCoSrv.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Trend Micro\BM\TMBMSRV.exe
c:\windows\System32\wbem\unsecapp.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2009-08-21 11:58 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-21 15:58
ComboFix2.txt 2009-08-06 20:29

Pre-Run: 154,776,612,864 bytes free
Post-Run: 154,817,310,720 bytes free

Current=3 Default=3 Failed=1 LastKnownGood=8 Sets=1,2,3,4,5,6,7,8
1148 --- E O F --- 2009-08-21 08:00

#10 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 21 August 2009 - 01:54 PM

Ok looking much better. I assume the computer is running better too.

I can see that you have User Access Control disabled in Vista. Is this intentional?

* Open notepad - don't use any other texteditor than notepad or the script will fail.
Copy/paste the text in the quotebox below into notepad:

Dirlook::
c:\program files\xxxx.exe

Registry::
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\ufxa.exe"=-


RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]


Save this as the txtfile CFScript

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

Posted Image

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply[/b].

#11 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 21 August 2009 - 02:25 PM

I'm not sure on UAC. This actually isn't my computer, I'm just helping someone clean it up. I'm usually good at that sort of thing, but this had me baffled!! I'll check with him and see if he turned it off.

Here's the log:

ComboFix 09-08-20.07 - Owner 08/21/2009 15:04.4.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2941.1869 [GMT -4:00]
Running from: c:\users\Owner\Desktop\ComboFix.exe
Command switches used :: c:\users\Owner\Desktop\CFScript.txt
AV: Trend Micro AntiVirus *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Created from 2009-07-21 to 2009-08-21 )))))))))))))))))))))))))))))))
.

2009-08-21 19:16 . 2009-08-21 19:16 -------- d-----w- c:\users\Recent\AppData\Local\temp
2009-08-21 19:16 . 2009-08-21 19:16 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-08-21 19:16 . 2009-08-21 19:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-08-18 15:58 . 2009-08-18 15:58 -------- d-----w- C:\rsit
2009-08-18 14:47 . 2009-08-18 14:47 -------- d-----w- c:\program files\Sophos
2009-08-17 16:55 . 2009-08-17 16:55 -------- d-----w- C:\!KillBox
2009-08-17 16:53 . 2009-08-21 15:58 -------- d-----w- c:\users\Recent
2009-08-17 16:53 . 2009-08-17 16:53 -------- d-----w- c:\windows\Recent
2009-08-17 16:53 . 2009-08-17 20:47 262144 ----a-w- c:\users\NtUser.dat
2009-08-17 16:49 . 2009-08-03 18:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-17 16:49 . 2009-08-17 16:49 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-17 16:49 . 2009-08-03 18:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-13 23:55 . 2009-07-14 13:00 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-08-13 23:55 . 2009-07-14 12:58 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-08-13 23:55 . 2009-07-14 12:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-08-13 23:55 . 2009-07-14 10:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-08-13 19:17 . 2009-08-13 19:19 -------- d-----w- c:\program files\Common Files\Adobe
2009-08-06 18:53 . 2009-08-06 18:53 -------- d-----w- c:\users\Owner\AppData\Roaming\Malwarebytes
2009-08-06 18:52 . 2009-08-06 18:52 -------- d-----w- c:\programdata\Malwarebytes
2009-08-06 15:40 . 2009-08-06 15:40 -------- d-----w- c:\users\Owner\AppData\Local\Mozilla
2009-07-30 13:20 . 2009-07-30 13:20 -------- d-----w- C:\upd7bin
2009-07-30 13:20 . 2009-07-30 13:20 -------- d-----w- C:\avg7upd
2009-07-29 07:30 . 2009-07-29 07:30 -------- d-----w- c:\program files\xxxx.exe
2009-07-29 07:19 . 2009-07-29 07:19 396288 ----a-w- c:\program files\HijackThis.exe
2009-07-29 06:48 . 2008-12-11 13:38 159600 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2009-07-29 06:48 . 2009-04-03 15:18 130936 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2009-07-29 06:48 . 2008-12-18 16:16 73840 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\program files\Common Files\PC Tools
2009-07-29 06:48 . 2008-12-10 16:36 64392 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2009-07-29 06:48 . 2009-08-13 19:12 -------- d-----w- c:\program files\Spyware Doctor
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\users\Owner\AppData\Roaming\PC Tools
2009-07-29 06:48 . 2009-07-29 06:48 -------- d-----w- c:\programdata\PC Tools
2009-07-29 06:48 . 2004-08-04 12:00 506368 ----a-w- c:\windows\system32\msxml.dll
2009-07-29 04:43 . 2009-07-29 04:43 -------- d-----w- c:\users\Owner\AppData\Roaming\AVG8
2009-07-26 03:46 . 2009-07-26 03:46 713992 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-21 15:43 . 2008-07-28 13:47 12 ----a-w- c:\windows\bthservsdp.dat
2009-08-21 15:36 . 2008-08-27 03:10 -------- d-----w- c:\users\Owner\AppData\Roaming\Skype
2009-08-21 13:07 . 2008-08-27 03:13 -------- d-----w- c:\users\Owner\AppData\Roaming\skypePM
2009-08-20 18:53 . 2009-04-09 02:47 -------- d-----w- c:\programdata\Google Updater
2009-08-18 15:58 . 2008-07-26 21:30 -------- d-----w- c:\program files\Trend Micro
2009-08-17 15:49 . 2008-09-26 22:41 -------- d-----w- c:\programdata\AT&T
2009-08-16 14:08 . 2009-01-06 00:00 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs
2009-08-14 08:54 . 2008-07-25 21:59 112408 ----a-w- c:\users\Owner\AppData\Local\GDIPFONTCACHEV1.DAT
2009-08-14 08:37 . 2008-06-16 16:49 -------- d-----w- c:\programdata\Microsoft Help
2009-08-14 08:33 . 2008-06-16 16:52 -------- d-----w- c:\program files\Microsoft Works
2009-08-14 08:15 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-07-29 01:51 . 2008-07-28 03:36 7944 ----a-w- c:\users\Owner\AppData\Local\d3d9caps.dat
2009-07-18 16:06 . 2009-08-13 23:56 827904 ----a-w- c:\windows\system32\wininet.dll
2009-07-18 16:01 . 2009-08-13 23:56 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-07-18 09:46 . 2009-08-13 23:56 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-17 14:35 . 2009-08-13 23:56 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-08 03:12 . 2009-07-08 03:12 -------- d-----w- c:\program files\Flip Video
2009-06-27 04:12 . 2009-06-27 04:12 -------- d-----w- c:\programdata\Flip Video
2009-06-26 22:56 . 2009-06-26 22:56 -------- d-----w- c:\program files\3ivx
2009-06-18 17:54 . 2009-08-18 14:47 6144 ------w- c:\windows\system32\58ED.tmp
2009-06-18 17:54 . 2009-08-18 14:47 6144 ------w- c:\windows\system32\4260.tmp
2009-06-15 15:24 . 2009-07-15 14:50 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 15:20 . 2009-07-15 14:50 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 15:20 . 2009-07-15 14:50 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-06-15 12:52 . 2009-07-15 14:50 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-06-13 01:57 . 2009-06-13 01:57 75048 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-10 12:12 . 2009-08-13 23:56 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-10 12:07 . 2009-08-13 23:56 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-06-05 16:42 . 2009-06-05 16:42 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-06-05 16:42 . 2009-06-05 16:42 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-06-04 22:37 . 2009-06-04 22:37 4732800 ----a-w- c:\programdata\Flip Video\FlipShare\Updates\FirmwareExec_Windows_en-US_83.06_83.07\FlipVideoFWUpdate.exe
2009-06-04 12:34 . 2009-08-13 23:56 2066432 ----a-w- c:\windows\system32\mstscax.dll
2008-07-25 21:58 . 2008-07-25 21:58 13 --sh--r- c:\windows\System32\drivers\fbd.sys
2008-07-25 21:58 . 2008-07-25 21:58 4 --sh--r- c:\windows\System32\drivers\taishop.sys
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\program files\xxxx.exe ----

2009-07-29 07:30 . 2009-07-29 07:30 150 ----a-w- c:\program files\xxxx.exe\SUErrorLog.txt
2009-07-29 07:30 . 2009-07-29 07:30 26 ----a-w- c:\program files\xxxx.exe\silentdb.ini
2009-07-29 07:30 . 2009-07-29 07:30 10606 ----a-w- c:\program files\xxxx.exe\unins000.msg
2009-07-29 07:30 . 2009-07-29 07:31 2 ----a-w- c:\program files\xxxx.exe\KDSInterface.txt
2009-07-29 07:30 . 2009-07-29 07:30 48 ----a-w- c:\program files\xxxx.exe\homepage.url
2009-07-29 07:30 . 2008-12-08 18:34 599432 ----a-w- c:\program files\xxxx.exe\SDContextExt.dll
2009-07-29 07:30 . 2009-02-13 19:16 140680 ----a-w- c:\program files\xxxx.exe\PCTGMhk.dll
2009-07-29 07:30 . 2008-12-08 18:33 91528 ----a-w- c:\program files\xxxx.exe\CommLibLite.dll
2009-07-29 07:30 . 2009-04-14 15:58 446856 ----a-w- c:\program files\xxxx.exe\TFEngine\TFExtCli.dll
2009-07-29 07:30 . 2009-04-14 15:58 442760 ----a-w- c:\program files\xxxx.exe\TFEngine\TFExt.dll
2009-07-29 07:30 . 2009-04-28 15:38 430984 ----a-w- c:\program files\xxxx.exe\plugins\Behavior.sdp
2009-07-29 07:30 . 2009-03-31 16:23 39200 ----a-w- c:\program files\xxxx.exe\TFEngine\TfSysMon.sys
2009-07-29 07:30 . 2009-03-31 16:23 33056 ----a-w- c:\program files\xxxx.exe\TFEngine\TfNetMon.sys
2009-07-29 07:30 . 2009-03-31 16:23 12576 ----a-w- c:\program files\xxxx.exe\TFEngine\TfKbMon.sys
2009-07-29 07:30 . 2009-03-31 16:23 51488 ----a-w- c:\program files\xxxx.exe\TFEngine\TfFsMon.sys
2009-07-29 07:30 . 2009-05-21 19:21 1638912 ----a-w- c:\program files\xxxx.exe\TFEngine\MsvcRedist.msi
2009-07-29 07:30 . 2009-03-31 16:23 189728 ----a-w- c:\program files\xxxx.exe\TFEngine\TFWS.dll
2009-07-29 07:30 . 2009-03-31 16:23 255264 ----a-w- c:\program files\xxxx.exe\TFEngine\TFWAH.dll
2009-07-29 07:30 . 2009-03-31 16:23 58656 ----a-w- c:\program files\xxxx.exe\TFEngine\TFUndo.dll
2009-07-29 07:30 . 2009-03-31 16:23 378144 ----a-w- c:\program files\xxxx.exe\TFEngine\TFTM.dll
2009-07-29 07:30 . 2009-03-31 16:23 312608 ----a-w- c:\program files\xxxx.exe\TFEngine\TFSF.dll
2009-07-29 07:30 . 2009-03-31 16:23 70944 ----a-w- c:\program files\xxxx.exe\TFEngine\TFService.exe
2009-07-29 07:30 . 2009-03-31 16:23 62752 ----a-w- c:\program files\xxxx.exe\TFEngine\TFServer.dll
2009-07-29 07:30 . 2009-03-31 16:23 177440 ----a-w- c:\program files\xxxx.exe\TFEngine\TFScan.dll
2009-07-29 07:30 . 2009-03-31 16:23 107808 ----a-w- c:\program files\xxxx.exe\TFEngine\TFRK.dll
2009-07-29 07:30 . 2009-03-31 16:23 300320 ----a-w- c:\program files\xxxx.exe\TFEngine\TFQT.dll
2009-07-29 07:30 . 2009-03-31 16:22 41760 ----a-w- c:\program files\xxxx.exe\TFEngine\TFO.dll
2009-07-29 07:30 . 2009-03-31 16:22 54560 ----a-w- c:\program files\xxxx.exe\TFEngine\TFNI.dll
2009-07-29 07:30 . 2009-03-31 16:22 44832 ----a-w- c:\program files\xxxx.exe\TFEngine\TFMon.dll
2009-07-29 07:30 . 2009-03-31 16:23 754976 ----a-w- c:\program files\xxxx.exe\TFEngine\TFMisc.dll
2009-07-29 07:30 . 2009-03-31 16:22 62752 ----a-w- c:\program files\xxxx.exe\TFEngine\TFLog.dll
2009-07-29 07:30 . 2009-03-31 16:22 742688 ----a-w- c:\program files\xxxx.exe\TFEngine\TFE.dll
2009-07-29 07:30 . 2009-03-31 16:22 66848 ----a-w- c:\program files\xxxx.exe\TFEngine\TFDBM.dll
2009-07-29 07:30 . 2009-03-31 16:22 111904 ----a-w- c:\program files\xxxx.exe\TFEngine\TFCfg.dll
2009-07-29 07:30 . 2009-03-31 16:22 70944 ----a-w- c:\program files\xxxx.exe\TFEngine\TFAPI.dll
2009-07-29 07:30 . 2008-11-10 16:42 1247600 ----a-w- c:\program files\xxxx.exe\SDNetPlugin.dll
2009-07-29 07:30 . 2008-12-08 18:34 559496 ----a-w- c:\program files\xxxx.exe\plugins\SDNET.SDP
2009-07-29 07:30 . 2009-02-13 19:11 100864 ----a-w- c:\program files\xxxx.exe\klg.dat
2009-07-29 07:30 . 2008-12-08 18:34 480136 ----a-w- c:\program files\xxxx.exe\plugins\KLGuard.SDP
2009-07-29 07:30 . 2008-09-10 17:27 2448 ----a-w- c:\program files\xxxx.exe\avdb\vdb.xml
2009-07-29 07:30 . 2008-09-09 20:34 9506 ----a-w- c:\program files\xxxx.exe\avdb\av10-000.vdb
2009-07-29 07:30 . 2009-04-08 20:37 898952 ----a-w- c:\program files\xxxx.exe\avengine\SDAVgate.dll
2009-07-29 07:30 . 2009-01-16 14:23 1087368 ----a-w- c:\program files\xxxx.exe\avengine\PCTAVEng.dll
2009-07-29 07:30 . 2009-06-04 14:31 326536 ----a-w- c:\program files\xxxx.exe\plugins\grAV.sdp
2009-07-29 07:30 . 2008-03-05 16:41 2204 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Turkish.html
2009-07-29 07:30 . 2008-03-05 16:41 2996 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Thai.html
2009-07-29 07:30 . 2008-03-05 16:41 2265 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Swedish.html
2009-07-29 07:30 . 2008-03-05 16:41 2138 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Spanish.html
2009-07-29 07:30 . 2008-03-05 16:41 2019 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Russian.html
2009-07-29 07:30 . 2008-03-05 16:41 2037 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_PortugueseBrazilian.html
2009-07-29 07:30 . 2008-03-05 16:41 2153 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Portuguese.html
2009-07-29 07:30 . 2008-03-12 16:30 2149 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Polski.html
2009-07-29 07:30 . 2008-03-05 16:41 2192 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Norwegian.html
2009-07-29 07:30 . 2008-03-05 16:41 2179 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Korean.html
2009-07-29 07:30 . 2008-03-05 16:41 2430 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Japanese.html
2009-07-29 07:30 . 2008-03-05 16:41 2174 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Italian.html
2009-07-29 07:30 . 2008-03-05 16:41 2948 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Greek.html
2009-07-29 07:30 . 2008-03-05 16:41 2194 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_French.html
2009-07-29 07:30 . 2008-03-05 16:41 2322 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Finnish.html
2009-07-29 07:30 . 2008-03-05 16:41 2000 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_EnglishBritish.html
2009-07-29 07:30 . 2008-03-05 16:41 2000 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_English.html
2009-07-29 07:30 . 2008-03-05 16:41 2095 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Dutch.html
2009-07-29 07:30 . 2008-03-05 16:41 2304 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Deutsch.html
2009-07-29 07:30 . 2008-03-05 16:41 2255 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Danish.html
2009-07-29 07:30 . 2008-03-05 16:41 2242 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_Czech.html
2009-07-29 07:30 . 2008-03-05 16:41 1986 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_ChineseTrad.html
2009-07-29 07:30 . 2008-03-05 16:41 1944 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SD_ChineseSimp.html
2009-07-29 07:30 . 2008-06-26 14:08 1968 ----a-w- c:\program files\xxxx.exe\html\SiteBlockResp_SDR_ChineseSimp.html
2009-07-29 07:30 . 2009-07-23 03:44 402824 ----a-w- c:\program files\xxxx.exe\plugins\Site.sdp
2009-07-29 07:30 . 2008-12-08 18:33 250760 ----a-w- c:\program files\xxxx.exe\PCTMime.dll
2009-07-29 07:30 . 2008-12-08 18:33 375176 ----a-w- c:\program files\xxxx.exe\plugins\email.sdp
2009-07-29 07:30 . 2009-07-23 03:44 372104 ----a-w- c:\program files\xxxx.exe\plugins\cookie.sdp
2009-07-29 07:30 . 2009-02-12 16:49 477064 ----a-w- c:\program files\xxxx.exe\NetworkLayer\PluginDllSG.dll
2009-07-29 07:30 . 2008-12-08 18:33 124808 ----a-w- c:\program files\xxxx.exe\NetworkLayer\InstSGTool.dll
2009-07-29 07:30 . 2006-12-02 02:03 626688 ----a-w- c:\program files\xxxx.exe\NetworkLayer\msvcr80.dll
2009-07-29 07:30 . 2006-12-02 02:03 548864 ----a-w- c:\program files\xxxx.exe\NetworkLayer\msvcp80.dll
2009-07-29 07:30 . 2006-12-02 10:22 479232 ----a-w- c:\program files\xxxx.exe\NetworkLayer\msvcm80.dll
2009-07-29 07:30 . 2006-12-02 02:03 1869 ----a-w- c:\program files\xxxx.exe\NetworkLayer\Microsoft.VC80.CRT.manifest
2009-07-29 07:30 . 2009-04-09 19:47 1696 ----a-w- c:\program files\xxxx.exe\NetworkLayer\blacklistlsp.txt.sig
2009-07-29 07:30 . 2009-04-09 19:47 176 ----a-w- c:\program files\xxxx.exe\NetworkLayer\blacklistlsp.txt
2009-07-29 07:30 . 2009-01-06 15:43 104840 ----a-w- c:\program files\xxxx.exe\NetworkLayer\PCTSecUtility.dll
2009-07-29 07:30 . 2008-12-08 18:33 83848 ----a-w- c:\program files\xxxx.exe\NetworkLayer\PCTCFFix.exe
2009-07-29 07:30 . 2009-02-11 11:30 182152 ----a-w- c:\program files\xxxx.exe\NetworkLayer\PCTLsp.dll
2009-07-29 07:30 . 2008-12-08 18:33 104328 ----a-w- c:\program files\xxxx.exe\NetworkLayer\PCTCFHook.dll
2009-07-29 07:30 . 2008-12-08 18:33 163720 ----a-w- c:\program files\xxxx.exe\plugins\grImmunizer.SDP
2009-07-29 07:30 . 2009-01-16 14:23 444808 ----a-w- c:\program files\xxxx.exe\plugins\StartUp.SDP
2009-07-29 07:30 . 2009-01-16 14:23 498056 ----a-w- c:\program files\xxxx.exe\plugins\ScriptEngine.SDP
2009-07-29 07:30 . 2009-01-29 11:28 444808 ----a-w- c:\program files\xxxx.exe\plugins\Process.SDP
2009-07-29 07:30 . 2009-01-16 14:23 525192 ----a-w- c:\program files\xxxx.exe\plugins\Network.SDP
2009-07-29 07:30 . 2009-01-22 19:52 298376 ----a-w- c:\program files\xxxx.exe\plugins\grregistry.SDP
2009-07-29 07:30 . 2009-01-21 18:08 432520 ----a-w- c:\program files\xxxx.exe\plugins\grfiles.SDP
2009-07-29 07:30 . 2009-07-23 03:44 496520 ----a-w- c:\program files\xxxx.exe\plugins\Browsers.SDP
2009-07-29 07:30 . 2009-05-21 19:22 28952 ----a-w- c:\program files\xxxx.exe\sdSTasks.def
2009-07-29 07:30 . 2009-07-23 03:44 1563016 ----a-w- c:\program files\xxxx.exe\Upgrade.exe
2009-07-29 07:30 . 2008-12-10 11:40 3826 ----a-w- c:\program files\xxxx.exe\ugLng\Ukrainian.lng
2009-07-29 07:30 . 2008-12-16 19:55 3846 ----a-w- c:\program files\xxxx.exe\ugLng\Turkish.lng
2009-07-29 07:30 . 2008-12-16 19:55 3774 ----a-w- c:\program files\xxxx.exe\ugLng\Thai.lng
2009-07-29 07:30 . 2008-12-16 19:55 3816 ----a-w- c:\program files\xxxx.exe\ugLng\Swedish.lng
2009-07-29 07:30 . 2008-12-16 19:55 4264 ----a-w- c:\program files\xxxx.exe\ugLng\Spanish.lng
2009-07-29 07:30 . 2008-12-16 19:55 4180 ----a-w- c:\program files\xxxx.exe\ugLng\Russian.lng
2009-07-29 07:30 . 2008-12-16 19:55 4192 ----a-w- c:\program files\xxxx.exe\ugLng\PortugueseBrazilian.lng
2009-07-29 07:30 . 2008-12-16 19:55 4302 ----a-w- c:\program files\xxxx.exe\ugLng\Portuguese.lng
2009-07-29 07:30 . 2008-12-16 19:55 4224 ----a-w- c:\program files\xxxx.exe\ugLng\Polski.lng
2009-07-29 07:30 . 2008-12-16 19:55 3822 ----a-w- c:\program files\xxxx.exe\ugLng\Norwegian.lng
2009-07-29 07:30 . 2008-12-16 19:55 2930 ----a-w- c:\program files\xxxx.exe\ugLng\Korean.lng
2009-07-29 07:30 . 2008-12-16 19:55 2806 ----a-w- c:\program files\xxxx.exe\ugLng\Japanese.lng
2009-07-29 07:30 . 2008-12-16 19:55 4410 ----a-w- c:\program files\xxxx.exe\ugLng\Italian.lng
2009-07-29 07:30 . 2008-12-16 19:55 3864 ----a-w- c:\program files\xxxx.exe\ugLng\Greek.lng
2009-07-29 07:30 . 2008-12-16 19:55 4738 ----a-w- c:\program files\xxxx.exe\ugLng\French.lng
2009-07-29 07:30 . 2008-12-16 19:55 3822 ----a-w- c:\program files\xxxx.exe\ugLng\Finnish.lng
2009-07-29 07:30 . 2008-12-16 19:55 3812 ----a-w- c:\program files\xxxx.exe\ugLng\EnglishBritish.lng
2009-07-29 07:30 . 2008-10-03 14:21 3812 ----a-w- c:\program files\xxxx.exe\ugLng\English.lng
2009-07-29 07:30 . 2008-12-16 19:55 4184 ----a-w- c:\program files\xxxx.exe\ugLng\Dutch.lng
2009-07-29 07:30 . 2008-12-16 19:55 4488 ----a-w- c:\program files\xxxx.exe\ugLng\Deutsch.lng
2009-07-29 07:30 . 2008-12-16 19:55 3834 ----a-w- c:\program files\xxxx.exe\ugLng\Danish.lng
2009-07-29 07:30 . 2008-12-16 19:55 3872 ----a-w- c:\program files\xxxx.exe\ugLng\Czech.lng
2009-07-29 07:30 . 2008-12-16 19:55 2370 ----a-w- c:\program files\xxxx.exe\ugLng\ChineseTrad.lng
2009-07-29 07:30 . 2008-12-16 19:55 2380 ----a-w- c:\program files\xxxx.exe\ugLng\ChineseSimp.lng
2009-07-29 07:30 . 2009-06-23 18:11 17602 ----a-w- c:\program files\xxxx.exe\LuLng\Turkish.lng
2009-07-29 07:30 . 2009-06-23 18:11 15628 ----a-w- c:\program files\xxxx.exe\LuLng\Thai.lng
2009-07-29 07:30 . 2009-06-23 18:11 17654 ----a-w- c:\program files\xxxx.exe\LuLng\Swedish.lng
2009-07-29 07:30 . 2009-06-23 18:11 17222 ----a-w- c:\program files\xxxx.exe\LuLng\Spanish.lng
2009-07-29 07:30 . 2009-06-23 18:11 16056 ----a-w- c:\program files\xxxx.exe\LuLng\Russian.lng
2009-07-29 07:30 . 2009-06-23 18:11 17070 ----a-w- c:\program files\xxxx.exe\LuLng\PortugueseBrazilian.lng
2009-07-29 07:30 . 2009-06-23 18:11 17126 ----a-w- c:\program files\xxxx.exe\LuLng\Portuguese.lng
2009-07-29 07:30 . 2009-06-23 18:11 17242 ----a-w- c:\program files\xxxx.exe\LuLng\Polski.lng
2009-07-29 07:30 . 2009-06-23 18:11 17066 ----a-w- c:\program files\xxxx.exe\LuLng\Norwegian.lng
2009-07-29 07:30 . 2009-06-23 18:11 11146 ----a-w- c:\program files\xxxx.exe\LuLng\Korean.lng
2009-07-29 07:30 . 2009-06-23 18:11 11020 ----a-w- c:\program files\xxxx.exe\LuLng\Japanese.lng
2009-07-29 07:30 . 2009-06-23 18:11 17696 ----a-w- c:\program files\xxxx.exe\LuLng\Italian.lng
2009-07-29 07:30 . 2009-06-23 18:11 18924 ----a-w- c:\program files\xxxx.exe\LuLng\Greek.lng
2009-07-29 07:30 . 2009-06-23 18:11 18246 ----a-w- c:\program files\xxxx.exe\LuLng\French.lng
2009-07-29 07:30 . 2009-06-23 18:11 17332 ----a-w- c:\program files\xxxx.exe\LuLng\Finnish.lng
2009-07-29 07:30 . 2009-06-23 18:11 15518 ----a-w- c:\program files\xxxx.exe\LuLng\EnglishBritish.lng
2009-07-29 07:30 . 2009-06-23 18:11 15514 ----a-w- c:\program files\xxxx.exe\LuLng\English.lng
2009-07-29 07:30 . 2009-06-23 18:11 16466 ----a-w- c:\program files\xxxx.exe\LuLng\Dutch.lng
2009-07-29 07:30 . 2009-06-23 18:11 17600 ----a-w- c:\program files\xxxx.exe\LuLng\Deutsch.lng
2009-07-29 07:30 . 2009-06-23 18:11 16970 ----a-w- c:\program files\xxxx.exe\LuLng\Danish.lng
2009-07-29 07:30 . 2009-06-23 18:11 17762 ----a-w- c:\program files\xxxx.exe\LuLng\Czech.lng
2009-07-29 07:30 . 2009-06-23 18:11 9064 ----a-w- c:\program files\xxxx.exe\LuLng\ChineseTrad.lng
2009-07-29 07:30 . 2009-06-23 18:11 9192 ----a-w- c:\program files\xxxx.exe\LuLng\ChineseSimp.lng
2009-07-29 07:30 . 2009-04-14 15:58 315272 ----a-w- c:\program files\xxxx.exe\SOFactory.sdp
2009-07-29 07:30 . 2008-12-08 18:34 299400 ----a-w- c:\program files\xxxx.exe\whitelist.sdp
2009-07-29 07:30 . 2008-12-08 18:34 300424 ----a-w- c:\program files\xxxx.exe\stasks.sdp
2009-07-29 07:30 . 2008-12-08 18:34 284040 ----a-w- c:\program files\xxxx.exe\Settings.sdp
2009-07-29 07:30 . 2009-06-08 03:55 478600 ----a-w- c:\program files\xxxx.exe\sdextra.sdp
2009-07-29 07:30 . 2009-02-18 18:37 413064 ----a-w- c:\program files\xxxx.exe\scaneng.sdp
2009-07-29 07:30 . 2009-01-12 19:46 305544 ----a-w- c:\program files\xxxx.exe\RebootManager.sdp
2009-07-29 07:30 . 2008-12-10 16:36 332680 ----a-w- c:\program files\xxxx.exe\quarantine.sdp
2009-07-29 07:30 . 2008-12-08 18:33 125832 ----a-w- c:\program files\xxxx.exe\NfyMan.sdp
2009-07-29 07:30 . 2008-12-08 18:33 153480 ----a-w- c:\program files\xxxx.exe\Localizer.sdp
2009-07-29 07:30 . 2008-12-08 18:33 109448 ----a-w- c:\program files\xxxx.exe\Immunizer.sdp
2009-07-29 07:30 . 2009-06-04 14:31 435080 ----a-w- c:\program files\xxxx.exe\IDBLib.sdp
2009-07-29 07:30 . 2008-12-08 18:33 486280 ----a-w- c:\program files\xxxx.exe\FileStorage.sdp
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\TB_SD_uk.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\TB_SD_en.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\TB_SDA_uk.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\TB_SDA_en.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\FU_SD_uk.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\FU_SD_en.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\FU_SDA_uk.dat
2009-07-29 07:30 . 2009-07-14 18:47 69078 ----a-w- c:\program files\xxxx.exe\data\FU_SDA_en.dat
2009-07-29 07:30 . 2009-06-24 18:16 69078 ----a-w- c:\program files\xxxx.exe\data\ER_SD_uk.dat
2009-07-29 07:30 . 2009-06-24 18:16 69078 ----a-w- c:\program files\xxxx.exe\data\ER_SD_en.dat
2009-07-29 07:30 . 2009-06-24 18:16 69078 ----a-w- c:\program files\xxxx.exe\data\ER_SDA_uk.dat
2009-07-29 07:30 . 2009-06-24 18:16 69078 ----a-w- c:\program files\xxxx.exe\data\ER_SDA_en.dat
2009-07-29 07:30 . 2008-03-05 16:41 2153 ----a-w- c:\program files\xxxx.exe\Languages.xml
2009-07-29 07:30 . 2009-06-23 18:11 269352 ----a-w- c:\program files\xxxx.exe\Turkish.lng
2009-07-29 07:30 . 2009-06-23 18:11 245408 ----a-w- c:\program files\xxxx.exe\Thai.lng
2009-07-29 07:30 . 2009-06-23 18:11 262338 ----a-w- c:\program files\xxxx.exe\Swedish.lng
2009-07-29 07:30 . 2009-06-23 18:11 279358 ----a-w- c:\program files\xxxx.exe\Spanish.lng
2009-07-29 07:30 . 2009-06-23 18:11 279768 ----a-w- c:\program files\xxxx.exe\Russian.lng
2009-07-29 07:30 . 2009-06-23 18:11 278924 ----a-w- c:\program files\xxxx.exe\PortugueseBrazilian.lng
2009-07-29 07:30 . 2009-06-23 18:11 279604 ----a-w- c:\program files\xxxx.exe\Portuguese.lng
2009-07-29 07:30 . 2009-06-23 18:11 282932 ----a-w- c:\program files\xxxx.exe\Polski.lng
2009-07-29 07:30 . 2009-06-23 18:11 263856 ----a-w- c:\program files\xxxx.exe\Norwegian.lng
2009-07-29 07:30 . 2009-06-23 18:11 190116 ----a-w- c:\program files\xxxx.exe\Korean.lng
2009-07-29 07:30 . 2009-06-23 18:11 187604 ----a-w- c:\program files\xxxx.exe\Japanese.lng
2009-07-29 07:30 . 2009-06-23 18:11 280944 ----a-w- c:\program files\xxxx.exe\Italian.lng
2009-07-29 07:30 . 2009-06-23 18:11 299862 ----a-w- c:\program files\xxxx.exe\Greek.lng
2009-07-29 07:30 . 2009-06-23 18:11 296352 ----a-w- c:\program files\xxxx.exe\French.lng
2009-07-29 07:30 . 2009-06-23 18:11 268206 ----a-w- c:\program files\xxxx.exe\Finnish.lng
2009-07-29 07:30 . 2009-06-23 18:11 254532 ----a-w- c:\program files\xxxx.exe\EnglishBritish.lng
2009-07-29 07:30 . 2009-07-17 17:37 255944 ----a-w- c:\program files\xxxx.exe\English.lng
2009-07-29 07:30 . 2009-06-23 18:11 277726 ----a-w- c:\program files\xxxx.exe\Dutch.lng
2009-07-29 07:30 . 2009-06-23 18:11 281064 ----a-w- c:\program files\xxxx.exe\Deutsch.lng
2009-07-29 07:30 . 2009-06-23 18:11 262142 ----a-w- c:\program files\xxxx.exe\Danish.lng
2009-07-29 07:30 . 2009-06-23 18:11 272510 ----a-w- c:\program files\xxxx.exe\Czech.lng
2009-07-29 07:30 . 2009-06-23 18:11 165922 ----a-w- c:\program files\xxxx.exe\ChineseTrad.lng
2009-07-29 07:30 . 2009-06-23 18:11 167280 ----a-w- c:\program files\xxxx.exe\ChineseSimp.lng
2009-07-29 07:30 . 2009-07-01 02:58 57713 ----a-w- c:\program files\xxxx.exe\tur-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 59265 ----a-w- c:\program files\xxxx.exe\tha-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 56528 ----a-w- c:\program files\xxxx.exe\swe-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 59806 ----a-w- c:\program files\xxxx.exe\rus-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 59110 ----a-w- c:\program files\xxxx.exe\por-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 57954 ----a-w- c:\program files\xxxx.exe\pol-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 57148 ----a-w- c:\program files\xxxx.exe\nor-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 60330 ----a-w- c:\program files\xxxx.exe\ned-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 55986 ----a-w- c:\program files\xxxx.exe\kor-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 58204 ----a-w- c:\program files\xxxx.exe\jap-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 59504 ----a-w- c:\program files\xxxx.exe\ita-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 58274 ----a-w- c:\program files\xxxx.exe\gre-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 58193 ----a-w- c:\program files\xxxx.exe\fre-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 59111 ----a-w- c:\program files\xxxx.exe\fin-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 53328 ----a-w- c:\program files\xxxx.exe\euk-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 57654 ----a-w- c:\program files\xxxx.exe\esp-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 54013 ----a-w- c:\program files\xxxx.exe\eng-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 56766 ----a-w- c:\program files\xxxx.exe\deu-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 56120 ----a-w- c:\program files\xxxx.exe\dan-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 57858 ----a-w- c:\program files\xxxx.exe\cze-sdhelp.chm
2009-07-29 07:30 . 2009-07-01 02:58 54230 ----a-w- c:\program files\xxxx.exe\ctr-sdhelp.chm
2009-07-29 07:30 . 2008-10-29 18:42 58511 ----a-w- c:\program files\xxxx.exe\csi-sdhelp_pr.chm
2009-07-29 07:30 . 2008-06-19 15:33 61846 ----a-w- c:\program files\xxxx.exe\csi-sdhelp.chm
2009-07-29 07:30 . 2008-10-29 18:42 46150 ----a-w- c:\program files\xxxx.exe\bpo-sdhelp.chm
2009-07-29 07:30 . 2007-12-12 10:04 1874944 ----a-w- c:\program files\xxxx.exe\vcl100.bpl
2009-07-29 07:30 . 2007-12-12 10:04 853504 ----a-w- c:\program files\xxxx.exe\rtl100.bpl
2009-07-29 07:30 . 2008-12-08 18:22 406528 ----a-w- c:\program files\xxxx.exe\PCToolsComponents.bpl
2009-07-29 07:30 . 2009-07-23 03:44 742280 ----a-w- c:\program files\xxxx.exe\UpdateHlpr.dll
2009-07-29 07:30 . 2008-11-13 19:19 32704 ----a-w- c:\program files\xxxx.exe\PCTSDInj32.sys
2009-07-29 07:30 . 2008-12-08 18:33 205192 ----a-w- c:\program files\xxxx.exe\UmInject32.exe
2009-07-29 07:30 . 2008-11-13 19:19 148944 ----a-w- c:\program files\xxxx.exe\smum32.dll
2009-07-29 07:30 . 2008-12-10 16:36 505736 ----a-w- c:\program files\xxxx.exe\Sqlite3DB.dll
2009-07-29 07:30 . 2009-04-14 15:58 148872 ----a-w- c:\program files\xxxx.exe\SysAccess.dll
2009-07-29 07:30 . 2009-01-06 15:43 399752 ----a-w- c:\program files\xxxx.exe\SH.dll
2009-07-29 07:30 . 2008-12-08 18:34 59272 ----a-w- c:\program files\xxxx.exe\sdwvhlp.dll
2009-07-29 07:30 . 2009-07-23 03:44 129928 ----a-w- c:\program files\xxxx.exe\sdcore.dll
2009-07-29 07:30 . 2008-12-08 18:34 288648 ----a-w- c:\program files\xxxx.exe\RegHelper.dll
2009-07-29 07:30 . 2008-12-08 18:34 195976 ----a-w- c:\program files\xxxx.exe\PWindow.dll
2009-07-29 07:30 . 2009-01-16 14:23 182152 ----a-w- c:\program files\xxxx.exe\PCTWSC.dll
2009-07-29 07:30 . 2009-07-23 03:44 391048 ----a-w- c:\program files\xxxx.exe\inethlpr.dll
2009-07-29 07:30 . 2009-02-12 16:48 323976 ----a-w- c:\program files\xxxx.exe\filehlpr.dll
2009-07-29 07:30 . 2009-01-06 15:43 301448 ----a-w- c:\program files\xxxx.exe\commhlpr.dll
2009-07-29 07:30 . 2009-07-23 03:44 681864 ----a-w- c:\program files\xxxx.exe\cdialogs.dll
2009-07-29 07:30 . 2009-07-23 03:44 439688 ----a-w- c:\program files\xxxx.exe\BH.dll
2009-07-29 07:30 . 2009-07-23 03:44 984968 ----a-w- c:\program files\xxxx.exe\Alert.exe
2009-07-29 07:30 . 2009-01-07 17:40 348752 ----a-w- c:\program files\xxxx.exe\pctsAuxs.exe
2009-07-29 07:30 . 2009-07-23 03:44 1097096 ----a-w- c:\program files\xxxx.exe\pctsSvc.exe
2009-07-29 07:30 . 2009-07-24 22:12 2916816 ----a-w- c:\program files\xxxx.exe\pctsGui.exe
2009-07-29 07:30 . 2009-07-23 03:44 1181064 ----a-w- c:\program files\xxxx.exe\pctsTray.exe
2009-07-29 07:30 . 2008-12-08 18:34 347016 ----a-w- c:\program files\xxxx.exe\sdloader.exe
2009-07-29 07:30 . 2008-12-08 18:34 290184 ----a-w- c:\program files\xxxx.exe\sdinvoker.exe
2009-07-29 07:30 . 2008-12-08 18:33 28040 ----a-w- c:\program files\xxxx.exe\drvctl.exe
2009-07-29 07:30 . 2008-01-03 19:12 44944 ----a-w- c:\program files\xxxx.exe\alert.wav
2009-07-29 07:30 . 2009-07-23 03:45 1951624 ----a-w- c:\program files\xxxx.exe\Update.exe
2009-07-29 07:30 . 2009-07-23 03:45 1034120 ----a-w- c:\program files\xxxx.exe\SDInfo.sdp
2009-07-29 07:30 . 2009-01-29 11:28 1238920 ----a-w- c:\program files\xxxx.exe\PDialogs.dll
2009-07-29 07:30 . 2009-06-04 14:31 1034120 ----a-w- c:\program files\xxxx.exe\SystemMonitor.sdp
2009-07-29 07:30 . 2009-07-23 03:45 1030024 ----a-w- c:\program files\xxxx.exe\commom.dll
2009-07-29 07:30 . 2008-12-08 18:34 923528 ----a-w- c:\program files\xxxx.exe\commlib.dll
2009-07-29 07:30 . 2009-05-21 19:21 241664 ----a-w- c:\program files\xxxx.exe\InnoHelpers.dll
2009-07-29 07:30 . 2009-07-29 07:29 697736 ----a-w- c:\program files\xxxx.exe\unins000.exe
2009-07-29 07:30 . 2009-07-29 07:30 312974 ----a-w- c:\program files\xxxx.exe\unins000.dat


((((((((((((((((((((((((((((( SnapShot_2009-08-21_15.48.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2006-11-02 10:33 . 2009-08-21 15:53 621354 c:\windows\System32\perfh009.dat
- 2006-11-02 10:33 . 2009-08-20 18:39 621354 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2009-08-21 15:53 110046 c:\windows\System32\perfc009.dat
- 2006-11-02 10:33 . 2009-08-20 18:39 110046 c:\windows\System32\perfc009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\Sidebar.exe" [2008-01-21 1233920]
"RunSpySweeperScheduleAtStartup"="c:\windows\system32\msfeedssync.exe" [2008-01-21 12800]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Veoh"="c:\program files\Veoh Networks\Veoh\VeohClient.exe" [2008-06-19 3664944]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Yahoo!MessengerForVista"="c:\users\Owner\AppData\Local\Yahoo!\Messenger for Vista\Yahoo.Messenger.YmApp.exe" [2008-06-30 204800]
"SmileboxTray"="c:\users\Owner\AppData\Roaming\Smilebox\SmileboxTray.exe" [2009-02-24 254600]
"SightSpeed"="c:\program files\SightSpeed\SightSpeed.exe" [2008-11-03 4789048]
"Google Update"="c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-05-05 133104]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-04-16 24264488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TRCMan"="c:\program files\TOSHIBA\TRCMan\TRCMan.exe" [2008-01-11 692224]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-10-26 413696]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2008-01-17 431456]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2007-11-01 54608]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-06-16 448080]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-29 75136]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-07 1029416]
"PCMAgent"="c:\program files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe" [2007-12-14 143360]
"CLMLServer"="c:\program files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe" [2008-02-14 184320]
"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-07-29 1398024]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-08-14 2407184]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-05-14 177472]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-06-05 292136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-12 39792]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-01-30 4911104]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-1-5 66864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux5"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiSpywareOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{26933D98-10C6-44B7-8E36-10EB7EAC010A}c:\\program files\\sightspeed\\sightspeed.exe"= UDP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"UDP Query User{213F9975-059B-4235-AF47-B53E0DFA1F6B}c:\\program files\\sightspeed\\sightspeed.exe"= TCP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"TCP Query User{9EA19E15-1D33-4F5A-B57B-12F915183C44}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype
"UDP Query User{91165E5D-7129-4846-BB2D-9478FE4D0F21}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype
"TCP Query User{A997AC4F-1695-461F-8398-610B904AA9DF}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= UDP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"UDP Query User{AA6D06D1-4FAE-4DC2-BD1B-851B4641EB4D}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= TCP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"TCP Query User{0DA6CFDD-9F9F-4105-B7B7-B15625ED3742}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= UDP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"UDP Query User{D43DDBE5-1EF0-4E9C-AEB5-2C6009D0ACE6}c:\\program files\\veoh networks\\veoh\\veohclient.exe"= TCP:c:\program files\veoh networks\veoh\veohclient.exe:Veoh Client
"TCP Query User{25B094EC-4AF3-4BAA-9740-D335F0890C18}c:\\program files\\sightspeed\\sightspeed.exe"= UDP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"UDP Query User{1D142CCB-4C18-4D34-8D15-8E8D252AF6CE}c:\\program files\\sightspeed\\sightspeed.exe"= TCP:c:\program files\sightspeed\sightspeed.exe:SightSpeed Video Calling
"TCP Query User{E2BAEFF7-3E3F-4552-A5C0-44C92411E1AB}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= UDP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"UDP Query User{A4D238E3-F98C-4B2D-AD97-C0580FA45F5F}c:\\program files\\logitech\\desktop messenger\\8876480\\program\\logitechdesktopmessenger.exe"= TCP:c:\program files\logitech\desktop messenger\8876480\program\logitechdesktopmessenger.exe:Logitech Desktop Messenger
"TCP Query User{13675CC9-55C2-4342-996C-34126BA8D15B}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype
"UDP Query User{45BD2099-947C-451D-8ACA-D845C8BC4A02}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\TOSHIBA\\ivp\\NetInt\\Netint.exe"= c:\toshiba\ivp\NetInt\Netint.exe:*:Enabled:NIE - Toshiba Software Upgrades Engine
"c:\\TOSHIBA\\Ivp\\ISM\\pinger.exe"= c:\toshiba\Ivp\ISM\pinger.exe:*:Enabled:Toshiba Software Upgrades Pinger

R0 PCTCore;PCTools KDS;c:\windows\System32\drivers\PCTCore.sys [7/29/2009 02:48 130936]
R1 jswpslwf;JumpStart Wireless Filter Driver;c:\windows\System32\drivers\jswpslwf.sys [6/16/2008 13:36 20352]
R2 ConfigFree Service;ConfigFree Service;c:\program files\Toshiba\ConfigFree\CFSvcs.exe [12/25/2007 17:07 40960]
R2 FlipShare Service;FlipShare Service;c:\program files\Flip Video\FlipShare\FlipShareService.exe [6/4/2009 18:41 451904]
R2 tmevtmgr;tmevtmgr;c:\windows\System32\drivers\tmevtmgr.sys [2/16/2008 00:34 52624]
R2 tmpreflt;tmpreflt;c:\windows\System32\drivers\tmpreflt.sys [7/15/2009 22:22 36368]
R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\Toshiba\SMARTLogService\TosIPCSrv.exe [12/3/2007 20:03 126976]
R3 FwLnk;FwLnk Driver;c:\windows\System32\drivers\FwLnk.sys [2/13/2008 01:46 7168]
R3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [7/26/2008 17:31 648456]
S2 gupdate1c9b8bdb9b84200;Google Update Service (gupdate1c9b8bdb9b84200);c:\program files\Google\Update\GoogleUpdate.exe [4/8/2009 22:48 133104]
S3 ATTRcAppSvc;AT&T RcAppSvc;"c:\program files\AT&T\Communication Manager\RcAppSvc.exe" /n "ATTRcAppSvc" --> c:\program files\AT&T\Communication Manager\RcAppSvc.exe [?]
S3 CAATT;AT&T Con App Svc;"c:\program files\AT&T\Communication Manager\ConAppsSvc.exe" /n "CAATT" --> c:\program files\AT&T\Communication Manager\ConAppsSvc.exe [?]
S3 jswpsapi;Jumpstart Wifi Protected Setup;c:\program files\Jumpstart\jswpsapi.exe [6/16/2008 13:36 937984]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [7/29/2009 02:48 348752]
S3 SWNC8U56;Sierra Wireless MUX NDIS Driver (UMTS56);c:\windows\System32\drivers\swnc8u56.sys [6/27/2007 11:41 101248]
S3 SWUMX56;Sierra Wireless USB MUX Driver (UMTS56);c:\windows\System32\drivers\swumx56.sys [6/27/2007 11:42 73856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
bthsvcs REG_MULTI_SZ BthServ
.
Contents of the 'Scheduled Tasks' folder

2009-08-21 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-13 02:47]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-09 02:48]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-09 02:48]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-185379766-2671556060-1075924701-1000Core.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-07 23:08]

2009-08-21 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-185379766-2671556060-1075924701-1000UA.job
- c:\users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe [2009-05-07 23:08]

2009-08-21 c:\windows\Tasks\User_Feed_Synchronization-{8C7EDD21-1F4B-463E-983B-457D8CF60B97}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-21 15:16
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\C80F.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(4012)
c:\program files\Google\Google Desktop Search\GoogleDesktopCommon.dll
.
Completion time: 2009-08-21 15:22
ComboFix-quarantined-files.txt 2009-08-21 19:22
ComboFix2.txt 2009-08-21 15:58
ComboFix3.txt 2009-08-06 20:29

Pre-Run: 154,450,669,568 bytes free
Post-Run: 154,392,686,592 bytes free

Current=3 Default=3 Failed=1 LastKnownGood=8 Sets=1,2,3,4,5,6,7,8
483 --- E O F --- 2009-08-21 08:00

#12 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 21 August 2009 - 02:41 PM

Ok the xxxx.exe folder is just for trendmicro. Must have renamed it to that to try and bypass the rootkit protection. Everything looks good at this point other than the UAC. Once you tell me what to do there, and I think you should enable it so you do not get further infections on this machine, I will give the cleanup instructions.

#13 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 22 August 2009 - 09:30 AM

I'm enabling UAC. If he doesn't like it he can fix his own machine. :thumbup2:

#14 Grinler

Grinler

    Bleep Bleep!


  • Admin
  • 40,095 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:12:36 AM

Posted 22 August 2009 - 10:17 AM

Good idea..tell me when its set and your ready.

#15 oldmuttonhead

oldmuttonhead
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:12:36 AM

Posted 24 August 2009 - 03:13 PM

Sorry it has taken me so long to respond. I'm a football official and this was week one of the high school season. I had a LOOOOOONG weekend! Anyway, UAC IS on already. It is giving me the "are you sure" prompts when I run anything that should require admin rights.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users