Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Firefox and IE redirecting, now closes immediately


  • This topic is locked This topic is locked
6 replies to this topic

#1 Shmuel L

Shmuel L

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:17 AM

Posted 19 January 2012 - 02:03 PM

Please help or tell me what else I can provide!!!
ComboFix Log:
ComboFix 12-01-18.04 - EJackson 01/19/2012 10:46:11.3.2 - x64 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4094.3392 [GMT -5:00]
Running from: c:\users\ejackson\Desktop\ComboFix.exe
AV: Symantec Endpoint Protection *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Symantec Endpoint Protection *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Symantec Endpoint Protection *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2011-12-19 to 2012-01-19 )))))))))))))))))))))))))))))))
.
.
2012-01-19 16:18 . 2012-01-19 16:18 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-01-19 16:18 . 2012-01-19 16:18 -------- d-----w- c:\users\msingh\AppData\Local\temp
2012-01-19 16:18 . 2012-01-19 16:18 -------- d-----w- c:\users\Emma Jackson\AppData\Local\temp
2012-01-19 16:18 . 2012-01-19 16:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-19 16:18 . 2012-01-19 16:18 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2012-01-18 15:20 . 2012-01-18 15:20 -------- d-----w- c:\programdata\Citrix
2012-01-18 15:19 . 2012-01-18 15:22 -------- d-----w- c:\users\ejackson\AppData\Roaming\ICAClient
2012-01-18 15:19 . 2012-01-18 15:19 -------- d-----w- c:\users\ejackson\AppData\Local\Citrix
2012-01-18 15:19 . 2012-01-18 15:19 -------- d-----w- c:\program files (x86)\Citrix
2012-01-18 15:18 . 2012-01-18 15:19 -------- d-----w- c:\users\ejackson\AppData\Roaming\Download Manager
2012-01-18 15:15 . 2012-01-18 15:15 -------- d-----w- c:\windows\Sun
2012-01-18 15:15 . 2012-01-18 15:15 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-01-18 15:15 . 2012-01-18 15:14 476904 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
2012-01-18 15:15 . 2012-01-18 15:14 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-01-18 15:14 . 2012-01-18 15:14 -------- d-----w- c:\program files (x86)\Java
2012-01-18 15:07 . 2012-01-18 15:21 -------- d-----w- c:\users\ejackson\AppData\Roaming\Juniper Networks
2012-01-16 14:14 . 2012-01-16 14:14 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
2012-01-16 14:14 . 2012-01-16 14:14 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
2012-01-16 14:14 . 2012-01-16 14:14 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
2012-01-16 14:14 . 2012-01-16 14:14 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
2012-01-12 17:50 . 2012-01-12 17:50 -------- d-----w- c:\users\Administrator.EJLP
2012-01-12 17:48 . 2003-08-12 13:00 40960 ------w- c:\windows\system32\PwdServ.exe
2012-01-11 23:10 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2012-01-11 23:10 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-01-11 23:08 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 23:08 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-10 23:51 . 2012-01-11 00:01 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-01-10 23:51 . 2012-01-10 23:51 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
2012-01-10 21:26 . 2012-01-10 21:26 29808 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2012-01-10 16:54 . 2012-01-10 16:54 -------- d-----w- c:\users\ejackson\AppData\Roaming\Malwarebytes
2012-01-10 16:54 . 2012-01-10 16:54 -------- d-----w- c:\programdata\Malwarebytes
2012-01-10 16:54 . 2012-01-10 22:02 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-01-09 15:39 . 2012-01-09 15:39 -------- d-----w- c:\users\ejackson\AppData\Roaming\SUPERAntiSpyware.com
2012-01-09 15:39 . 2012-01-10 21:30 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-01-09 15:39 . 2012-01-09 15:39 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-01-07 17:29 . 2012-01-07 17:29 -------- d-----w- c:\programdata\Local Settings
2011-12-28 21:28 . 2011-12-28 21:32 -------- d-----w- c:\windows\system32\ESUG
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-30 19:15 . 2011-11-30 19:15 58288 ----a-w- c:\windows\SysWow64\snacnp.dll
2011-11-30 19:15 . 2011-11-30 19:15 58288 ----a-w- c:\windows\system32\snacnp.dll
2011-11-30 19:15 . 2011-11-30 19:15 42632 ----a-w- c:\windows\system32\drivers\WGX64.SYS
2011-11-30 19:15 . 2011-11-30 19:15 102832 ----a-w- c:\windows\system32\FwsVpn.dll
2011-11-30 19:15 . 2011-01-24 14:29 287152 ----a-w- c:\windows\system32\SymVPN.dll
2011-11-30 19:13 . 2011-07-07 15:00 174200 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
.
.
((((((((((((((((((((((((((((( SnapShot@2012-01-11_17.08.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-11 23:11 . 2011-11-05 04:31 67072 c:\windows\SysWOW64\mshtmled.dll
- 2011-09-15 22:28 . 2011-06-21 05:26 67072 c:\windows\SysWOW64\mshtmled.dll
- 2011-09-15 22:28 . 2011-06-21 05:28 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-01-11 23:11 . 2011-11-05 04:35 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
- 2011-09-15 22:28 . 2011-06-21 05:26 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2012-01-11 23:11 . 2011-11-05 04:30 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2009-07-14 04:54 . 2012-01-19 14:58 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-01-11 17:07 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-01-19 14:58 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-11 17:07 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-19 14:58 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-11 17:07 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-12-26 21:40 . 2012-01-19 14:59 32890 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-01-19 14:59 42190 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-07-07 14:21 . 2012-01-13 14:34 11864 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-378730940-942750680-3402015157-4622_UserData.bin
+ 2012-01-11 23:11 . 2011-11-05 05:38 97280 c:\windows\system32\mshtmled.dll
- 2011-09-15 22:28 . 2011-06-21 06:19 97280 c:\windows\system32\mshtmled.dll
- 2011-09-15 22:28 . 2011-06-21 06:20 95232 c:\windows\system32\migration\WininetPlugin.dll
+ 2012-01-11 23:11 . 2011-11-05 05:41 95232 c:\windows\system32\migration\WininetPlugin.dll
- 2011-09-15 22:28 . 2011-06-21 06:18 64512 c:\windows\system32\jsproxy.dll
+ 2012-01-11 23:11 . 2011-11-05 05:37 64512 c:\windows\system32\jsproxy.dll
- 2009-07-14 05:30 . 2011-11-30 19:17 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-07-14 05:30 . 2012-01-18 15:19 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2011-04-25 06:49 . 2011-04-25 06:49 66096 c:\windows\system32\DriverStore\FileRepository\ctxusbr.inf_amd64_neutral_6a8ae3007597285d\ctxusbr.sys
+ 2011-04-25 06:49 . 2011-04-25 06:49 87600 c:\windows\system32\drivers\ctxusbm.sys
+ 2012-01-11 23:11 . 2011-10-26 05:21 43520 c:\windows\system32\csrsrv.dll
- 2009-07-13 23:19 . 2009-07-14 01:40 43520 c:\windows\system32\csrsrv.dll
+ 2008-12-26 09:05 . 2012-01-19 14:58 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-12-26 09:05 . 2012-01-11 17:07 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-12-26 09:05 . 2012-01-11 17:07 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-12-26 09:05 . 2012-01-19 14:58 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-01-19 14:58 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-01-11 17:07 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-12-26 21:12 . 2012-01-11 17:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-12-26 21:12 . 2012-01-19 14:58 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:46 . 2011-11-02 18:47 89696 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 04:46 . 2012-01-12 17:52 89696 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2008-12-26 21:12 . 2012-01-19 14:58 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-12-26 21:12 . 2012-01-11 17:07 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-12-26 21:12 . 2012-01-11 17:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-12-26 21:12 . 2012-01-19 14:58 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-12-26 20:45 . 2012-01-11 16:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-12-26 20:45 . 2012-01-19 15:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-12-26 20:45 . 2012-01-11 16:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-12-26 20:45 . 2012-01-19 15:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-01-11 23:11 . 2011-12-25 20:40 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
+ 2012-01-11 23:11 . 2011-12-25 20:42 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2012-01-18 15:19 . 2012-01-18 15:19 77824 c:\windows\Installer\{F9F0C5D5-AAE5-45FA-95C2-CA1EE0FA067A}\liteico.exe.827545C6_7013_4DE1_8E6C_DAEE4C57F54A.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-09-03 22:54 . 2012-01-12 15:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2011-09-03 22:54 . 2011-09-03 22:54 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-10-16 17:56 . 2011-10-16 17:56 49144 c:\windows\Downloaded Program Files\JuniperSetupClientCtrlUninstaller.exe
+ 2012-01-12 16:28 . 2012-01-12 16:28 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\6c13d7fb161ed4d7da730a70375b07c9\System.Web.DynamicData.Design.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\968c30c131b94a1b5e834fbc333b177b\stdole.ni.dll
+ 2012-01-12 15:16 . 2012-01-12 15:16 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\c066431266a5b4c8326779d12542161c\PresentationCFFRasterizer.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\621b2f176909228deae402a6031e7420\Microsoft.WSMan.Runtime.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\ecd29eb2eda46acfda1229f8362f60e9\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d77eafc89b58f5466b7555d89a293c50\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\c1e58a266d600248f08dca600457e346\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\9f1ca68fbcefac4ef4f13e5f5604ad82\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\8260ae5a7d4a7e7cd907c958858da284\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\371120a0816ba5ce909b8e1341da376f\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-01-12 15:12 . 2012-01-12 15:12 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\e6aabbfb38a14559712fdf51064ff3a1\Microsoft.VisualC.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 66048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\a9a494047cfbd13fd4a155c77a258a0a\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 64000 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\90b3ba2f1de795690641228b63586965\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\866c57c6e58cbe8249b36f21ec8ac18a\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\584f193ae53236bf55cd78b246214d83\LoadMxf.ni.exe
+ 2012-01-12 16:24 . 2012-01-12 16:24 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\50cda8ab4cd566b222342c3da14302d3\ehiUPnP.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\fae9950502b5464108feda9d64ebea78\ehiTVMSMusic.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\7de9a8137a33d06dad01c8405d960037\dfsvc.ni.exe
+ 2012-01-12 16:23 . 2012-01-12 16:23 33280 c:\windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\320d4f45d6463976ce238f654e706926\AuditPolicyGPManagedStubs.Interop.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\d301e1d96d4f39f15482db09206f1fb1\Accessibility.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\bb1d36ae26e7cadf563061596682e747\UIAutomationProvider.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\de6cc37afc2bb3ea973c29211f0b21d8\System.Windows.Presentation.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\94787ab3efcc074396a60ff3d83edf78\System.Web.DynamicData.Design.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\d0ed41e7dcb1be4a43a76e47de276d94\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\32d21563937263ee3ae9eecfa59fdc3d\System.AddIn.Contract.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\17b4308b0e6d35c1230135ed25fffbfe\stdole.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\af072bb984952ba5e573ca93cc0cad44\PresentationFontCache.ni.exe
+ 2012-01-12 15:18 . 2012-01-12 15:18 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\7681b87de3ecee06390331f0fab14c93\PresentationCFFRasterizer.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\a38f8e60cdbca2d158d8daaea9577934\napcrypt.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\0067507e3305266a72358b51bdd5dd86\Microsoft.WSMan.Runtime.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\f7a51d8e344dda4d7f38e1b824cd83ad\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ed12245481e36d8cc238876bd79b1e6c\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e5e22edbc2a34b9d9a166dbbaf7379ff\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ca1daccfdb3f0bff3bd0062644a539bf\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\afe4d94d07a22c70106c859139cb314a\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\62e68252fc137a55d2d39fe0d5093599\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\508857b730c4edea8eca42b3d435ef82\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5011901c735997d46243e3a90e8bd736\Microsoft.Vsa.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\3cb6023aa6ab962babcee9c0ec8991de\Microsoft.VisualC.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\cf3cab157883d19e2fb460518c26f6e7\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 39936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\4879f5496d8e920dc19c97e53db253d2\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aac5bc888c15c2630ea22e517e4e19f8\Microsoft.Build.Framework.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4ee55572f0f54a71e24fe3fec094968b\Microsoft.Build.Framework.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\e6e4bd9a47848b93cd2dd8a688968741\ehiUserXp.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\94a173b39fa90956937b41c775ac66d7\dfsvc.ni.exe
+ 2012-01-12 16:20 . 2012-01-12 16:20 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\06b63c6e22871790da6705df56a896dc\AuditPolicyGPManagedStubs.Interop.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\31fce331fded94dd06627603f6fe4562\Accessibility.ni.dll
+ 2012-01-16 14:47 . 2012-01-16 14:47 9560 c:\windows\system32\NetworkList\Icons\{6A927C67-F90B-4CBB-A60D-F25C32B57F77}_48.bin
+ 2012-01-16 14:47 . 2012-01-16 14:47 4280 c:\windows\system32\NetworkList\Icons\{6A927C67-F90B-4CBB-A60D-F25C32B57F77}_32.bin
+ 2012-01-16 14:47 . 2012-01-16 14:47 2456 c:\windows\system32\NetworkList\Icons\{6A927C67-F90B-4CBB-A60D-F25C32B57F77}_24.bin
- 2012-01-11 17:07 . 2012-01-11 17:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-19 15:22 . 2012-01-19 15:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-01-19 15:22 . 2012-01-19 15:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-01-11 17:07 . 2012-01-11 17:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-01-11 23:11 . 2011-11-05 04:35 981504 c:\windows\SysWOW64\wininet.dll
- 2011-09-15 22:28 . 2011-06-21 05:28 981504 c:\windows\SysWOW64\wininet.dll
- 2011-09-15 22:28 . 2011-06-21 05:28 132096 c:\windows\SysWOW64\url.dll
+ 2012-01-11 23:11 . 2011-11-05 04:34 132096 c:\windows\SysWOW64\url.dll
- 2011-09-15 22:50 . 2010-11-20 12:20 514560 c:\windows\SysWOW64\qdvd.dll
+ 2012-01-11 23:11 . 2011-10-26 04:32 514560 c:\windows\SysWOW64\qdvd.dll
+ 2012-01-11 23:11 . 2011-08-17 04:24 465408 c:\windows\SysWOW64\psisdecd.dll
- 2009-07-14 00:05 . 2009-07-14 01:16 465408 c:\windows\SysWOW64\psisdecd.dll
+ 2012-01-11 23:11 . 2011-08-27 04:26 571904 c:\windows\SysWOW64\oleaut32.dll
- 2011-07-21 22:26 . 2011-02-25 05:34 571904 c:\windows\SysWOW64\oleaut32.dll
+ 2012-01-11 23:11 . 2011-08-27 04:26 233472 c:\windows\SysWOW64\oleacc.dll
- 2009-07-13 23:26 . 2009-07-14 01:16 233472 c:\windows\SysWOW64\oleacc.dll
+ 2012-01-11 23:11 . 2011-11-05 04:31 599552 c:\windows\SysWOW64\msfeeds.dll
- 2011-09-15 22:28 . 2011-06-21 05:26 599552 c:\windows\SysWOW64\msfeeds.dll
+ 2012-01-11 23:11 . 2011-10-14 04:24 716800 c:\windows\SysWOW64\jscript.dll
- 2011-07-21 22:25 . 2011-02-18 05:41 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-01-18 15:15 . 2012-01-18 15:14 157472 c:\windows\SysWOW64\javaws.exe
+ 2012-01-18 15:15 . 2012-01-18 15:14 149280 c:\windows\SysWOW64\javaw.exe
+ 2012-01-18 15:15 . 2012-01-18 15:14 149280 c:\windows\SysWOW64\java.exe
+ 2012-01-11 23:11 . 2011-11-11 05:40 176640 c:\windows\SysWOW64\ieui.dll
- 2011-09-15 22:28 . 2011-06-21 05:26 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-01-11 23:11 . 2011-10-15 05:38 534528 c:\windows\SysWOW64\EncDec.dll
- 2011-07-21 22:28 . 2010-12-23 05:54 534528 c:\windows\SysWOW64\EncDec.dll
+ 2011-07-11 18:01 . 2012-01-19 05:04 357846 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2012-01-11 23:11 . 2011-11-05 05:41 134144 c:\windows\system32\url.dll
- 2011-09-15 22:28 . 2011-06-21 06:20 134144 c:\windows\system32\url.dll
- 2011-09-15 22:50 . 2010-11-20 13:27 366592 c:\windows\system32\qdvd.dll
+ 2012-01-11 23:11 . 2011-10-26 05:25 366592 c:\windows\system32\qdvd.dll
- 2009-07-14 00:20 . 2009-07-14 01:41 613888 c:\windows\system32\psisdecd.dll
+ 2012-01-11 23:11 . 2011-08-17 05:26 613888 c:\windows\system32\psisdecd.dll
+ 2009-07-14 02:36 . 2012-01-19 15:37 618026 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-01-19 15:37 104340 c:\windows\system32\perfc009.dat
+ 2012-01-11 23:11 . 2011-08-27 05:37 861696 c:\windows\system32\oleaut32.dll
- 2011-07-21 22:26 . 2011-02-25 06:22 861696 c:\windows\system32\oleaut32.dll
- 2009-07-13 23:39 . 2009-07-14 01:41 331776 c:\windows\system32\oleacc.dll
+ 2012-01-11 23:11 . 2011-08-27 05:37 331776 c:\windows\system32\oleacc.dll
+ 2012-01-11 23:11 . 2011-11-05 05:38 702464 c:\windows\system32\msfeeds.dll
- 2011-09-15 22:28 . 2011-06-21 06:19 702464 c:\windows\system32\msfeeds.dll
+ 2012-01-11 23:11 . 2011-10-14 05:31 918528 c:\windows\system32\jscript.dll
- 2011-09-15 22:28 . 2011-06-21 06:18 247808 c:\windows\system32\ieui.dll
+ 2012-01-11 23:11 . 2011-11-11 06:49 247808 c:\windows\system32\ieui.dll
- 2009-07-14 04:45 . 2011-10-04 13:36 422600 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 04:45 . 2012-01-12 15:11 422600 c:\windows\system32\FNTCACHE.DAT
+ 2012-01-11 23:11 . 2011-10-15 06:31 723456 c:\windows\system32\EncDec.dll
+ 2009-07-14 05:30 . 2012-01-18 15:19 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2011-11-30 19:17 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-01-18 15:19 143360 c:\windows\system32\DriverStore\infstor.dat
- 2009-07-14 05:30 . 2011-11-30 19:17 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2012-01-12 23:17 . 2012-01-13 23:13 237008 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2009-07-14 05:01 . 2012-01-11 17:06 399480 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-01-19 15:22 399480 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-01-11 23:11 . 2011-12-25 20:40 746256 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
- 2011-09-30 21:39 . 2011-03-29 22:32 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2012-01-11 23:11 . 2011-07-08 22:31 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2012-01-11 23:11 . 2011-12-25 20:42 437520 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2011-09-30 21:39 . 2011-03-29 22:33 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-01-11 23:11 . 2011-07-08 22:33 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-01-11 23:11 . 2011-07-08 22:33 995672 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2011-09-30 21:39 . 2011-03-29 22:33 995672 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2011-04-25 08:17 . 2011-04-25 08:17 909312 c:\windows\Installer\a86e906.msi
+ 2012-01-18 15:15 . 2012-01-18 15:15 207360 c:\windows\Installer\a86e8f7.msi
- 2011-07-07 13:38 . 2011-09-30 21:53 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-11-04 04:04 . 2008-11-04 04:04 498072 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MORPH9.DLL
+ 2012-01-11 23:11 . 2011-10-29 05:23 465920 c:\windows\ehome\mstvcapn.dll
- 2011-09-15 22:50 . 2010-11-20 13:27 465920 c:\windows\ehome\mstvcapn.dll
+ 2012-01-11 23:11 . 2011-08-17 05:28 315392 c:\windows\ehome\Microsoft.MediaCenter.Interop.dll
- 2011-09-15 22:50 . 2010-11-20 13:44 315392 c:\windows\ehome\Microsoft.MediaCenter.Interop.dll
+ 2011-10-16 17:56 . 2011-10-16 17:56 407416 c:\windows\Downloaded Program Files\JuniperExt.exe
+ 2012-01-12 16:29 . 2012-01-12 16:29 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\756011e2290f779331336b1659d804e9\WsatConfig.ni.exe
+ 2012-01-12 15:16 . 2012-01-12 15:16 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\344ac206baaadddc6f7c5fb8ae189b1a\UIAutomationTypes.ni.dll
+ 2012-01-12 15:16 . 2012-01-12 15:16 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\7a61dc7e8c606d1ed2c703cbeae2f8ef\UIAutomationProvider.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\93585639099b0e1b8280eb528fb12c0b\UIAutomationClient.ni.dll
+ 2012-01-12 16:29 . 2012-01-12 16:29 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\da4abebb1b165f2d27c5fe5bc6e9ed71\TaskScheduler.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\2b9253e5a2818152f9f1a3b9d7c7ee60\System.Xml.Linq.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\f715b47c2f0440ea23a71f1076b0af2b\System.Web.Routing.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\d78f9ad8894e441f38d96697bee1d6fa\System.Web.RegularExpressions.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\d258f45340e6e538a19a56d1165b750f\System.Web.Entity.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\6f6d11e33e2f3f6bddd4c33809340a48\System.Web.Entity.Design.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\bca38e802e2b45f80f8fbde2b54ce0a2\System.Web.DynamicData.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\0e411c30fc2caebb55813b8fa0689d42\System.Web.Abstractions.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f15a8af412d84b1fd14fc735fb5834f5\System.Transactions.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8428a82fd82a1ef1d3dab07be67dd78f\System.ServiceProcess.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\a3202e5eeb5c84ca6d5453b50c28e1af\System.Security.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\b3b42692707c0f555807def0c4acefe3\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\1d7d8aef36a4181c824e7b19a5717181\System.Net.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\7b701647e76dc015ef7574b789abac7b\System.Messaging.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\515b6d806d49ee9f3a0c4777c313c5a9\System.Management.Instrumentation.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\ab72e394c92f57172be9a9d29be90e90\System.IdentityModel.Selectors.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\4b0fd98f11e1e243efcfb810c170decf\System.EnterpriseServices.Wrapper.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\4026f724cc80f1beb4450d3286d93c0d\System.Drawing.Design.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\ea326d1e49d4824358eb5826fe52921a\System.DirectoryServices.Protocols.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 629760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\a342b0087027682df86caa73cf0dc223\System.Data.Services.Design.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\0749a52124e604d5104322fd60606810\System.Data.DataSetExtensions.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\7d99138fb23b6c17aa205d49c6bfce9e\System.Configuration.Install.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\63c8a0af333eb6fa7d73d5b30c9acb38\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\3867b72f0fdef0241a18f0c6767ecf05\System.AddIn.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\edf038eef2dc9f21b13da8bdc046a834\System.AddIn.Contract.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\0ba53d547dabd039b0cfc9ce52fa6c57\sysglobl.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\ce64633f4e4ba6f3c45ad5ad6a35d736\SMSvcHost.ni.exe
+ 2012-01-12 16:24 . 2012-01-12 16:24 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\d912b15f4aaac2455b690f6e477a67b1\SMDiagnostics.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 376832 c:\windows\assembly\NativeImages_v2.0.50727_64\SecurityAuditPolici#\66eee769d42b67224d5ca71d24bb5ed5\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a4757ccc20fa4dac96856aaaea05ffaa\PresentationFramework.Royale.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\9ab2ddfc6ccc7d84144aa45fc86969a1\PresentationFramework.Luna.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\631667d5c4e1f0beee46c82e316ed0cb\PresentationFramework.Aero.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\2de40f08930236c079d2653ade704bfc\PresentationFramework.Classic.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\864f48b66cc44fcc43b7a40bc2ccb3cd\napinit.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\fd2464358cddfa04f46d55b9153249e3\naphlpr.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\717cc07bafa8f50a6f87be383fa9018b\napcrypt.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\1b9e231c729d1e59a4610531e0314c6d\MSBuild.ni.exe
+ 2012-01-12 16:25 . 2012-01-12 16:25 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\091f53e39941f5371814cc96d71729a3\MMCFxCommon.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 681984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\8f7d31b01ed5d655fd5c48117453f960\Microsoft.WSMan.Management.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\3c37f454edf0064bb10747920ae0be9d\Microsoft.Vsa.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\3bdebcf5831c9f66c55e7b650713b2e9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 318976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\d0f8400be8cc4b7cea8e2b036ee75d23\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 937472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\c7a13491e86eb21258a1b0e778115e10\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 235008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\b4c1eaad859fe1c90ce29bc671c22890\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 275456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\92b61d50825667d08b6c563f35666920\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f616652a9327d4f41f9adc33aedd8feb\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\9e3b197d73893a55ec7bf4d4dda692e2\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\7bba925a067b6efc53e6e4ea3c458dc0\Microsoft.PowerShell.Security.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c9b6a9b9a26ac6d9d3575cda488172ce\Microsoft.MediaCenter.Playback.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c0673b635e9f01e3084c383e1cc689e5\Microsoft.MediaCenter.Interop.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\a743124afb874ab00d713ab50a7d850d\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\a4bde939b3d8da9baf5939b9e62d9ef7\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7de5318ee2be8e2b8fcffde83c79ab7c\Microsoft.MediaCenter.iTv.Media.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\53074205d60375dc33155586a27d07eb\Microsoft.MediaCenter.Mheg.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\377d824dde728ce28d61ef522c3be808\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\e1b7ce3acfe6f344c39e96d33637c4af\Microsoft.ManagementConsole.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 618496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\a28de069a345eb9fa468b65e8a0352b8\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 399360 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\98ea8003b7a453f2239669a432bf090e\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\a1a7ca0c475f607d60d4c8c17b5049af\Microsoft.Build.Utilities.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 244736 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\8eda32beeba1d8dff2848edce97f15b3\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\9f5bcff6a0b169efa6b607efd8789ea9\Microsoft.Build.Framework.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 121344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\0ef8fa5e835e9ae9fd9a20e5d5058460\Microsoft.Build.Framework.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\0c7a36fa5c4a99e157201a67c10ba344\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 727040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\5236edad06d28858a9c582c2c772be41\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 423424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\137a78131ad522e618ac4d1ac9107c39\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\348c58da6c217fb9a1a6f33b19bc1501\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\a37f126e2b6bbb6f476c0d14399949b0\Mcx2Dvcs.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\99229f50cf34d755c07c74f5d7e88803\mcupdate.ni.exe
+ 2012-01-12 16:24 . 2012-01-12 16:24 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\22e35c0c53328cbd317a395f81ce7122\mcstoredb.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4dce2da44e40d021caecb8243667718e\mcplayerinterop.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\9376158dbb6294a55db5b75cf78a06a4\mcGlidHostObj.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\b8735694a594d872e3b89050c3883f5c\MCESidebarCtrl.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\e96db8294b247cffcbd2df3cde0ece40\EventViewer.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\d8fcbbc454183dbd4883686dce6fb198\ehRecObj.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\87f11d95ab10469f888fd76c45f9fceb\ehiWUapi.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\a24c79d19a6d2a3e8ca587ecddd3e735\ehiwmp.ni.dll
+ 2012-01-12 15:12 . 2012-01-12 15:12 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\0de7a02857c6041bc2c86c1db3ca8c23\ehiUserXp.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\421eb174f94249cf6a3b9e517baa82f8\ehiiTv.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\d5bf6f8e9e3d08d407ed68b714c268ae\ehiExtens.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\b55c3bb24dda0acda2bc332cc3016f75\ehiBmlDataCarousel.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\cbebce3e616f8fa475427e94a5f607de\ehiActivScp.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\88c5012f9a84d220dc4d413c7935dd07\ehExtHost.ni.exe
+ 2012-01-12 16:24 . 2012-01-12 16:24 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\574c597861e298e143212535dc1e19ec\ehCIR.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\1e040217cf674c6cf528fbfe18c4c2f8\CustomMarshalers.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\6ccad398816b1569afb2a7fcbd49bf42\ComSvcConfig.ni.exe
+ 2012-01-12 16:23 . 2012-01-12 16:23 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\e938d38129512db210e2bc77214849d5\BDATunePIA.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\0f0e4119556b49e8e2adcd3a441753fc\WsatConfig.ni.exe
+ 2012-01-12 16:23 . 2012-01-12 16:23 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\273292e88c7b60ecbae9d85e94cd097e\WindowsFormsIntegration.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\93df5ea9646ad11a21517e4ab1d803d9\UIAutomationTypes.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\6eadd2ec3f027920eb71e6e9fed30ff2\UIAutomationClient.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\8c9f15092dab9a5f36d9f160b69d108c\TaskScheduler.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\88f32d62a8df469e8b9f12a8d3093627\System.Xml.Linq.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\8e576ae7d946a5440bddfdbe06818a8b\System.Web.Routing.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\54aff110093134e12558e26c7a038eb7\System.Web.RegularExpressions.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\5bd4f855a0b0386cb4baf093216ad2d3\System.Web.Extensions.Design.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\8d56e2f2a05dbde707d87cb3bdf0dffc\System.Web.Entity.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f560658d9ee6d2786cab976e775758d6\System.Web.Entity.Design.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\e94f08faeb08a8ee9d51a3480083bd07\System.Web.DynamicData.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\2dc7ec41005f6e6fe45e0cc0a20a12bc\System.Web.Abstractions.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f5659a792c1f6832d9a45c1509d03497\System.Transactions.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\6f2de1cb69aef1946760a70f355a3075\System.ServiceProcess.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\ccba14fc93de40f4f53d401f07b9bcb8\System.Security.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\680689b01ddb7fbe11478caf8cb71d3c\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b559a471eef00081f0b5c2719d1d9623\System.Runtime.Remoting.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\573003889d88b6c133de7360960c9da0\System.Net.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\4ede0fecbdb3795efa9dca6b77c2031b\System.Messaging.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\2e7668ad46be53fe98c5fbe4b3bf733e\System.Management.Instrumentation.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\ebd645cff62cef59eaf1ef8e3b3c5127\System.IO.Log.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\8a7d8a1bed270870c645ff47913f062a\System.IdentityModel.Selectors.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\dfe859829abd7f108aa5d82382251690\System.EnterpriseServices.Wrapper.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\dfe859829abd7f108aa5d82382251690\System.EnterpriseServices.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\8aa064c925a6b6bc885c3bd5bb1f4149\System.Drawing.Design.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a5df8714e91f2e7d0f76081b6581d071\System.DirectoryServices.Protocols.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7c86a11e96b7e798d5db164c22ea0268\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\50da9308aea01ad914cc87509dd968ec\System.Data.Services.Design.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\e6fa2be533d9e540ccafe51980ae0103\System.Data.Entity.Design.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\c523aa7f545394a1ed7f9a6358cf18e3\System.Data.DataSetExtensions.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\66a5094e521e34aecd51e4bae30ac266\System.Configuration.Install.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\55b239388c36e25bb9af84a8827df8c2\System.AddIn.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\571bcd3c57411a09469a58c7462a4c8b\sysglobl.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\2a25182592e8c63ea14d0935b0580b9d\SMSvcHost.ni.exe
+ 2012-01-12 16:20 . 2012-01-12 16:20 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\6294f61f25c953212b92b7e13a0fd9c1\SMDiagnostics.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\da273b9f6a5cb6438f5779e5a03b6441\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\aae0c17e133300ab45fb897647cdd8d7\PresentationFramework.Luna.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9ad023d8c5d5925e50b96c0d63da0235\PresentationFramework.Royale.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7b57fb7ab01951581394186c32cd278b\PresentationFramework.Classic.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07cdef1a740151932dcf161f3306bd9c\PresentationFramework.Aero.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\a41437397e3b33ebc5d2652d5d840667\napsnap.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\c2030859672edc6a6f938650d64c42fc\napinit.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\6c31aace1d7b39145fe0ef94f1530e8a\naphlpr.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\027cfb46a54d640ce0170818510f55cb\MSBuild.ni.exe
+ 2012-01-12 16:21 . 2012-01-12 16:21 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\6bc5509877a8e98672c09d8279aa93f0\MMCFxCommon.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\d2895e306d1273b26f21b2e236a8fa29\Microsoft.WSMan.Management.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce29d5de8d4f6f1b2216f7f17ae66c80\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 187392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\e34191abf1bb565270cf4a8cda9f7726\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 157184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\6d2877875d3e610806b8e3a0c312b945\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\657d937db9f0b5a65714b9d2a99570ab\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 210944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\547f0d2298367b51bd1c70a7d3365563\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\75da06cfbcab0c1e87d570e1f89e57a9\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\53ef826acbbf946830301f1fcc0361d2\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3ba895a97f175c7b84165998badb814e\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\38b928a3c5a4ddbe616983989bae6487\Microsoft.PowerShell.Security.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\162342556ee7cad6282e99be346b8651\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\189ddbba16fb3c5b7f2250b3286ad0fa\Microsoft.ManagementConsole.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\c92fc33c0cb945ea773911cd0fbb3df9\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 286208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\a391ba9657040ba0711807cc4e117289\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\547d1806b410977e2d3d5c05e5114d1a\Microsoft.Build.Utilities.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4153cdd9b2d16edd1bba53bea09614a2\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\88cf4cd59af3b638ca7b1e82fab428b5\Microsoft.Build.Engine.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\86c1ebc6968927a4ec60d3f14f3fb44e\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\5b07981ed0dbb690ccf9c4078a3041e5\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 587776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\38dc2628747f2f2c80a329c0eef42971\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\2d30f32b6ca585235fada8fb050f2be5\mcstoredb.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\88e8c62f1004f6f07e591df9723f57bd\EventViewer.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\0bde53bae85a8d27007dc0f7d418df41\ehRecObj.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\fbec5a519a2c5005d43b04b6386406b2\ehiVidCtl.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\832b98f0578e73e8693fea7067c3d2ab\ehiProxy.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\fa383760dc46e586ae40374129164b4e\ehiExtens.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\c52cbd60b414e74e81e2d2445f36208a\ehExtHost32.ni.exe
+ 2012-01-12 16:20 . 2012-01-12 16:20 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\2c2215e99c21daeec6bf697cf7bcf103\CustomMarshalers.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\ca2d56fdb2662c94353b2eba49d47725\ComSvcConfig.ni.exe
+ 2012-01-12 16:20 . 2012-01-12 16:20 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\91855551ad544c05d076b476f2e25002\BDATunePIA.ni.dll
- 2011-09-15 22:50 . 2010-11-20 13:44 315392 c:\windows\assembly\GAC_64\Microsoft.MediaCenter.Interop\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Interop.dll
+ 2012-01-11 23:11 . 2011-08-17 05:28 315392 c:\windows\assembly\GAC_64\Microsoft.MediaCenter.Interop\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Interop.dll
+ 2012-01-11 23:19 . 2012-01-11 23:19 350080 c:\windows\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
- 2011-09-15 22:28 . 2011-06-21 05:28 1231360 c:\windows\SysWOW64\urlmon.dll
+ 2012-01-11 23:11 . 2011-11-05 04:34 1231360 c:\windows\SysWOW64\urlmon.dll
+ 2012-01-11 23:11 . 2011-10-26 04:32 1328128 c:\windows\SysWOW64\quartz.dll
- 2011-09-15 22:51 . 2010-11-20 12:20 1328128 c:\windows\SysWOW64\quartz.dll
+ 2012-01-11 23:11 . 2011-11-17 05:38 1292080 c:\windows\SysWOW64\ntdll.dll
+ 2012-01-11 23:11 . 2011-11-05 04:31 5997056 c:\windows\SysWOW64\mshtml.dll
+ 2012-01-11 23:11 . 2011-11-05 04:30 2073600 c:\windows\SysWOW64\iertutil.dll
- 2011-09-15 22:29 . 2011-06-21 05:26 2073600 c:\windows\SysWOW64\iertutil.dll
- 2011-09-15 22:28 . 2011-06-21 06:20 1188864 c:\windows\system32\wininet.dll
+ 2012-01-11 23:11 . 2011-11-05 05:41 1188864 c:\windows\system32\wininet.dll
+ 2012-01-11 23:11 . 2011-11-24 04:52 3145216 c:\windows\system32\win32k.sys
+ 2012-01-11 23:11 . 2011-11-05 05:41 1494016 c:\windows\system32\urlmon.dll
+ 2012-01-11 23:11 . 2011-10-26 05:25 1572864 c:\windows\system32\quartz.dll
+ 2012-01-11 23:11 . 2011-11-17 06:41 1731920 c:\windows\system32\ntdll.dll
+ 2012-01-11 23:11 . 2011-11-05 05:38 9018880 c:\windows\system32\mshtml.dll
+ 2012-01-11 23:11 . 2011-11-05 05:37 2454528 c:\windows\system32\iertutil.dll
- 2011-09-15 22:29 . 2011-06-21 06:18 2454528 c:\windows\system32\iertutil.dll
+ 2011-04-25 06:49 . 2011-04-25 06:49 1490656 c:\windows\system32\DriverStore\FileRepository\ctxusbr.inf_amd64_neutral_6a8ae3007597285d\wdfcoinstaller01007.dll
+ 2012-01-11 23:11 . 2011-09-29 16:29 1923952 c:\windows\system32\drivers\tcpip.sys
+ 2009-07-14 04:45 . 2012-01-12 15:13 6019623 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2011-10-04 13:39 6019623 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-08-22 21:46 . 2012-01-19 15:22 6459472 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-378730940-942750680-3402015157-4622-12288.dat
+ 2012-01-11 23:11 . 2011-12-25 20:40 5263360 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll
+ 2012-01-11 23:11 . 2011-07-08 22:31 9990992 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
- 2011-09-30 21:39 . 2011-03-29 22:32 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-01-11 23:11 . 2011-07-08 22:31 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-01-11 23:11 . 2011-07-08 22:31 1755480 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
- 2011-09-30 21:39 . 2011-03-29 22:32 1755480 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
+ 2012-01-11 23:11 . 2011-12-25 20:42 5255168 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2012-01-11 23:11 . 2011-07-08 22:33 5924176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2011-09-30 21:39 . 2011-03-29 22:33 5924176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2012-01-11 23:11 . 2011-07-08 22:33 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2011-09-30 21:39 . 2011-03-29 22:33 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2011-04-25 07:47 . 2011-04-25 07:47 1348096 c:\windows\Installer\a86e90b.msi
+ 2011-04-25 08:41 . 2011-04-25 08:41 3308544 c:\windows\Installer\a86e901.msi
+ 2011-04-25 08:30 . 2011-04-25 08:30 9378304 c:\windows\Installer\a86e8fc.msi
+ 2011-11-01 18:34 . 2011-11-01 18:34 4250112 c:\windows\Installer\65550c.msp
+ 2011-11-01 18:34 . 2011-11-01 18:34 2247168 c:\windows\Installer\6554e5.msp
+ 2011-11-11 21:14 . 2011-11-11 21:14 9096192 c:\windows\Installer\6554cf.msp
+ 2011-11-01 18:34 . 2011-11-01 18:34 4225536 c:\windows\Installer\6554b9.msp
+ 2011-11-01 18:34 . 2011-11-01 18:34 2531840 c:\windows\Installer\65549e.msp
+ 2011-11-11 21:15 . 2011-11-11 21:15 1795584 c:\windows\Installer\655488.msp
+ 2011-12-09 00:24 . 2011-12-09 00:24 4989952 c:\windows\Installer\655472.msp
+ 2011-11-11 21:16 . 2011-11-11 21:16 8458240 c:\windows\Installer\65545c.msp
+ 2011-07-07 13:38 . 2012-01-11 23:19 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-07-07 13:38 . 2011-09-30 21:53 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-07-07 13:38 . 2012-01-11 23:19 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2009-04-03 01:44 . 2009-04-03 01:44 2532224 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\GRAPH.EXE
+ 2012-01-12 15:16 . 2012-01-12 15:16 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\bb70e6c85f728c359f1853e2d994dbae\WindowsBase.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\372dfe1a5b9ed9217b0f491ba07745d2\System.Xml.ni.dll
+ 2012-01-12 16:29 . 2012-01-12 16:29 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\455567dae39910d806447b77ee657a85\System.WorkflowServices.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\45339e741d73e8f1f9393df8163c8c00\System.Workflow.Runtime.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\48ef2f59740ad3d438d0514b335dd334\System.Workflow.ComponentModel.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\7972e04df268430da009e63e90ff4ca9\System.Workflow.Activities.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\8d374a0a9c49f485a7ce6e89ec354b4c\System.Web.Services.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\91ecefc70d74ed44e5139ea2929adbb8\System.Web.Mobile.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\71da5a6d09e12eb94be32935e4a8d5a2\System.Web.Extensions.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2bb91a2edcc92d2bb79007e7d2ddc2ae\System.Web.Extensions.Design.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\8e2d63ddf8223dab939bbdf5a9a51185\System.Speech.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\3a6ac85c04453976c0f3a7c6a64ec43a\System.ServiceModel.Web.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\1377c29b871c7eb768769b5f4bdbb15d\System.Runtime.Serialization.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\d12c2299179cb05591cf08c8712a6495\System.Runtime.Remoting.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\ea01287229d87b63089ee4fa545d70a3\System.Printing.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 1472000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\2fb0402632ad5e804276ac653a95ef80\System.Management.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\1f90d38a42906a776be313d9720e350d\System.IdentityModel.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\4b0fd98f11e1e243efcfb810c170decf\System.EnterpriseServices.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\7913f5c6b6fc7a75b2b8f558bb7b5568\System.Drawing.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 1230848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\ece506e2c1e0a1bde755dd7d652b5325\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3623e2ad193bcccf00ac1107d4f62236\System.DirectoryServices.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\9c394336e3ce35330907d1c51c47951c\System.Deployment.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 8681472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\4cfb4616eb3af7f91c1ea7113465860b\System.Data.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 3463680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\32cf78868a7f90ad05525253a2540e1f\System.Data.SqlXml.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\1d2c369d8e2d6f95c99ca90aca273418\System.Data.Services.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\55c030c014a9cd3ce63b1ce30722b6d7\System.Data.Services.Client.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\03c0fa3f53e9ddf45a7dce06ae740de8\System.Data.OracleClient.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\6d2a8c2d751cb29ecdbc8a20aac2dd1e\System.Data.Linq.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\b7bd7d91dc9abd73f2506bb7a0292373\System.Data.Entity.Design.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 3315200 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\eed0dd8cdc46206a76e8c23872fc0787\System.Core.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\fe860189c078d45125ca6366495fd414\System.Configuration.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 1530368 c:\windows\assembly\NativeImages_v2.0.50727_64\SrpUxSnapIn\6bb26fbae8283643f986174a6b0029c5\SrpUxSnapIn.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\c9ead0d73ee0c798c1509479797611d8\ReachFramework.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\fd07cec48ab260c1a27c19b37466369f\PresentationUI.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 1884160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\efa575767e695618224d140941250d8b\PresentationBuildTasks.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\8eb00c2e6ad95f84704a73c15934ad64\Narrator.ni.exe
+ 2012-01-12 16:27 . 2012-01-12 16:27 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\487581cba0779ee130e354096f40edd1\MMCEx.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\53fcf7f34708a9482d3e4059ce29608c\MIGUIControls.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\486ff8cee09c8c63aa9c60ff4f5feafa\Microsoft.VisualBasic.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\014c1c5365a633b4202b23ed09f7599c\Microsoft.Transactions.Bridge.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b68f19bf3f3d545547d2b680eb54a660\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6f0bbc912ec21fad139214ca4578a7ed\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-01-12 16:27 . 2012-01-12 16:27 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0bffc2eeaf9544a9ea24691e9d572438\Microsoft.PowerShell.Editor.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ae64957bd11cb42df95fb949e690980c\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
+ 2012-01-12 15:13 . 2012-01-12 15:13 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7e81f50c34dec17b90bfebec5929853a\Microsoft.MediaCenter.UI.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\70a990f97a3295782d195bcb052eb69f\Microsoft.MediaCenter.Shell.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\65a892a923b49b062bd8fc97254940d3\Microsoft.MediaCenter.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\33fd1381f221898a53253303cb7e5380\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 3213312 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\b733f33cc6a07e4cd5bed494cf536af1\Microsoft.JScript.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\ea8f48f12613578b64bd9077bdae4c31\Microsoft.Ink.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 5054976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\d955463d0397605306d07d25c9c186fb\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\f298e576c8e06073fe2310ccf0756396\Microsoft.Build.Tasks.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\9f6d2a67a43f90c37d475d9eb433e98b\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\c8205ffff2cc4dea7093b8c59c3b5a3a\Microsoft.Build.Engine.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\a288688a887e392b713bb459110507c1\Microsoft.Build.Engine.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\9fb794b6ac9dc760681ba3b485996b97\mcstore.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 4088320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\2980298bb4b3f3c844523562d74b0854\mcepg.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\f61f677c8d3ba5191da2d0809bb35fe1\ehiVidCtl.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\17d0b71391bf67c5a663b140b9a7a936\ehiProxy.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d7a64c28cf0c90e6c48af4f7d6f9ed41\WindowsBase.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\650f98b105afd8e1f75baaf6bd53050e\UIAutomationClientsideProviders.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 7963648 c:\windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 5453312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\a612958eaf641f0ba83b0daae44cb7b1\System.WorkflowServices.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\ad68aa9e6fa1ec8005e1f604579a76be\System.Workflow.Runtime.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 4515840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\00b0a14ef5cb0154db7989da39a7f1e5\System.Workflow.ComponentModel.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\54873f241a4ad6d2a13e48d2da444538\System.Workflow.Activities.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\be4f1d78d06979df7fd08dedf0d8c804\System.Web.Services.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\d957ec1fb12ff02282a7f73d6318b66b\System.Web.Mobile.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\a90f033a5a062ff29f7df8f9edc1a80c\System.Web.Extensions.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\0b5017932511872e37f6da04ef4f44b3\System.Speech.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\828e31a37bfd9d432083be6307845630\System.ServiceModel.Web.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\76692f411b404f1db0c95d81dd537c37\System.Runtime.Serialization.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\a18184c1609b655455395c522bd9054f\System.Printing.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1051136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\1049a76b3de293df726d380932215c91\System.Management.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\aaffd889b1ac972c5faf72442e92e6f3\System.Management.Automation.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c0d9df88f2b37d14cf416281364c5b7f\System.IdentityModel.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f78fa584bb78607b65e8872d925a96af\System.DirectoryServices.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\dd2070ee8e6e28ac8dc658404c50ebde\System.Deployment.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 6611456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f8196c3588c2229e84516af4b6a0ee60\System.Data.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\7bfd55df5c38d128885251b92e392943\System.Data.SqlXml.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\76e676a9b6387aad5544d61a4ac12a78\System.Data.Services.ni.dll
+ 2012-01-12 16:23 . 2012-01-12 16:23 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\91ee2a5b20d39be70a1d4e39ca9e23bf\System.Data.Services.Client.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1171b168dc6db0132146d8e26ae00d22\System.Data.OracleClient.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\9d9e419b7157083a5a246768b29dd92f\System.Data.Linq.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\de785592a16c949cfb67da6781acd156\System.Data.Entity.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 2297856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\dd56ffc9d534de278c79420dcce058a4\System.Core.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\3e1c46e0d7b52efcaa091e9e5cfad7bf\SrpUxSnapIn.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\eb6d83d30262cb6d1b6f2a47dcf8a37d\ReachFramework.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\79f71b891de1584cdcce378e22f047ee\PresentationUI.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\d34f41676aed9e84ef18852d371359e1\PresentationBuildTasks.ni.dll
+ 2012-01-12 16:22 . 2012-01-12 16:22 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\060646580ce5113ef5e11d3523cbe883\Narrator.ni.exe
+ 2012-01-12 16:22 . 2012-01-12 16:22 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\09856e5c68686a53563775f9359e07ac\MMCEx.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\20d18697deb8413c01119531c6b987ad\MIGUIControls.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\dd759df05fad8dc6d3404e8e02b40819\Microsoft.VisualBasic.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\a31ec9cb215741ea987630aa277ea658\Microsoft.Transactions.Bridge.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\beca29b613b68f68560960310c788ec3\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\88b4d41e45ea4e4bcebdb5815f9e3c24\Microsoft.PowerShell.Editor.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\695508ea67706e5f66208cabe5363099\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5662462cfa995c71817791af93686db2\Microsoft.MediaCenter.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4676e3f99469bd1120f8aed9cf37e4d2\Microsoft.MediaCenter.UI.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 2335744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\a2c9438aa64633f2dc8ef0cf069b57c5\Microsoft.JScript.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\d8c9bc51701795a194e6695a137241e4\Microsoft.Ink.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\df2d7205594489b4f1a5336fcf9244e5\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\b6942de187e833d0ec47d9267270ae2b\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1e563d8dfdd4017cdc06ed6e845ff9c7\Microsoft.Build.Tasks.ni.dll
+ 2012-01-12 16:21 . 2012-01-12 16:21 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\84a01599d405e5f2de5eac2da2f13424\Microsoft.Build.Engine.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\a2e0652abfd57dcacef112f2b0beecaf\mcstore.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\67cb5c00eb2555fb2972fe924e592cce\mcepg.ni.dll
- 2011-09-15 22:51 . 2010-11-05 01:53 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-11 23:11 . 2011-12-25 20:42 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-01-11 23:11 . 2011-12-25 20:40 5263360 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-11 23:11 . 2011-07-08 22:31 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-09-30 21:39 . 2011-03-29 22:32 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-01-11 23:11 . 2011-12-25 20:42 5255168 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-01-11 23:11 . 2011-07-08 22:33 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-09-30 21:39 . 2011-03-29 22:33 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-01-11 23:11 . 2011-11-11 05:40 10991104 c:\windows\SysWOW64\ieframe.dll
- 2011-09-15 22:29 . 2011-06-21 05:25 10991104 c:\windows\SysWOW64\ieframe.dll
- 2009-07-14 02:34 . 2011-09-16 13:49 10747904 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2009-07-14 02:34 . 2012-01-12 15:09 10747904 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2011-07-21 22:44 . 2012-01-04 23:02 54008112 c:\windows\system32\MRT.exe
+ 2012-01-11 23:11 . 2011-11-11 06:49 12261888 c:\windows\system32\ieframe.dll
+ 2012-01-18 15:14 . 2012-01-18 15:14 12905472 c:\windows\Installer\a86e8f2.msi
+ 2012-01-12 15:01 . 2012-01-12 15:01 20333568 c:\windows\Installer\3c9581a.msp
+ 2012-01-12 15:13 . 2012-01-12 15:13 10618880 c:\windows\assembly\NativeImages_v2.0.50727_64\System\8c862eb9bcba031e1479974a7d62aa0b\System.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 17379840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\bc4df91390f1b827ecb62a2edd0d1894\System.Windows.Forms.ni.dll
+ 2012-01-12 15:14 . 2012-01-12 15:14 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\ab920a032a9b63aa07f26c5592d7c72c\System.Web.ni.dll
+ 2012-01-12 16:24 . 2012-01-12 16:24 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\4bf05a9a1aebde89033c40b9e51af495\System.ServiceModel.ni.dll
+ 2012-01-12 16:26 . 2012-01-12 16:26 11900928 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\2cafbf62a43038d57239173614435a88\System.Management.Automation.ni.dll
+ 2012-01-12 15:15 . 2012-01-12 15:15 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\665178c1ccfd538896eaa0fff283b6ef\System.Design.ni.dll
+ 2012-01-12 16:28 . 2012-01-12 16:28 13760000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\2d06fb193634c8d3951a01878f7d3297\System.Data.Entity.ni.dll
+ 2012-01-12 15:17 . 2012-01-12 15:17 19195392 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\92eba0d443a423072e9c4b7ca1eec4cd\PresentationFramework.ni.dll
+ 2012-01-12 15:16 . 2012-01-12 15:16 16540160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\11214511a256f136b8425bdd316b47c9\PresentationCore.ni.dll
+ 2012-01-12 15:12 . 2012-01-12 15:12 15568384 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\1d2d3e57724bcacaea5e41063dc565c1\mscorlib.ni.dll
+ 2012-01-12 16:25 . 2012-01-12 16:25 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\897b2e70eb1754bf8c557fadd93faf98\ehshell.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 12433408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b41e38edbd6dfe20997f6ea7c080aceb\System.Web.ni.dll
+ 2012-01-12 16:20 . 2012-01-12 16:20 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\7bc7e33d4568a214f226cdb6a161a37a\System.ServiceModel.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\70f9f6de6dc9611157ed563bdb4e79a4\System.Design.ni.dll
+ 2012-01-12 15:19 . 2012-01-12 15:19 14339072 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\70e2ca33ffa52c743285dc5b4910a229\PresentationFramework.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 12234752 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7c94a121334aeca7553c7f01290740f0\PresentationCore.ni.dll
+ 2012-01-12 15:18 . 2012-01-12 15:18 11490304 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-12-09 5486464]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"systray"="c:\program files (x86)\Dell\Dell Mobile Broadband\systray.exe" [2008-07-29 331851]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-05-09 36864]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"ConnectionCenter"="c:\program files (x86)\Citrix\ICA Client\concentr.exe" [2011-04-25 305088]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SEP]
c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\WinLogoutNotifier.dll [BU]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
R1 BHDrvx64;BHDrvx64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\BASHDefs\20120106.011_31a\BHDrvx64.sys [2012-01-11 1157240]
R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x]
R1 IDSVia64;IDSVia64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Data\Definitions\IPSDefs\20120118.002\IDSvia64.sys [2012-01-10 488568]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\Drivers\SEP\0C01029F\136B.105\x64\Ironx64.SYS [x]
R1 SYMNETS;Symantec Network Security WFP Driver;c:\windows\system32\Drivers\SEP\0C01029F\136B.105\x64\SYMNETS.SYS [x]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 136176]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SepMasterService;Symantec Endpoint Protection;c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\ccSvcHst.exe [2011-06-17 137224]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-21 378472]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-11-08 138360]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 136176]
R3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [x]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 NWDellModem;Dell Wireless Mobile Broadband Modem Driver;c:\windows\system32\DRIVERS\nwdelmdm.sys [x]
R3 NWDellPort;Dell Wireless Mobile Broadband Status Port Driver;c:\windows\system32\DRIVERS\nwdelser.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\Drivers\SEP\0C01029F\136B.105\x64\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\Drivers\SEP\0C01029F\136B.105\x64\SYMEFA64.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 60775736
*Deregistered* - 60775736
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 21:29]
.
2012-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 21:29]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"
[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]
2007-09-10 21:50 3380736 ----a-w- c:\program files\Fingerprint Reader Suite\farchns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"
[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]
2007-09-10 21:50 3380736 ----a-w- c:\program files\Fingerprint Reader Suite\farchns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PSQLLauncher"="c:\program files\Fingerprint Reader Suite\launcher.exe" [2007-04-17 67088]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-05-21 326760]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.12 192.168.1.10
FF - ProfilePath - c:\users\ejackson\AppData\Roaming\Mozilla\Firefox\Profiles\i0ogj5sd.default\
FF - prefs.js: browser.startup.homepage - www.nytimes.com
FF - prefs.js: network.proxy.type - 0
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SepMasterService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\ccSvcHst.exe\" /s \"Symantec Endpoint Protection\" /m \"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin\sms.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SmcService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.671.4971.105\Bin64\Smc.exe\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SPBBCDrv]
"ImagePath"=""
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-01-19 11:37:34
ComboFix-quarantined-files.txt 2012-01-19 16:37
ComboFix2.txt 2012-01-11 20:46
ComboFix3.txt 2012-01-11 17:31
.
Pre-Run: 204,907,393,024 bytes free
Post-Run: 204,865,552,384 bytes free
.
- - End Of File - - 550B09D1FD88F3DBB1ADF9230F364CF9

BC AdBot (Login to Remove)

 


#2 Shmuel L

Shmuel L
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:17 AM

Posted 23 January 2012 - 04:00 PM

I cant seem to get out of this one. we removed with tddskiller then got the 0x7b. Tried many things. Just recently tried to run farbar and I can share a log if someone is available please? Should i attach or post?

#3 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:17 PM

Posted 23 January 2012 - 05:00 PM

Is this the same computer as your other topic here: http://www.bleepingcomputer.com/forums/topic438946.html
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#4 Shmuel L

Shmuel L
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:07:17 AM

Posted 23 January 2012 - 05:37 PM

well yes that is what WAS happening but I ran out of patience waiting for reply because my user is upset that i cant get them back running. since THAT post, we ran tdsskiller and it removed Rootkit.Boot.SST.b and along with that became unbootable. whilst waiting for your reply i found this great post http://www.bleepingcomputer.com/forums/topic428312.html/page__st__30 and after running:

bcdedit /export c:\bcdexport.txt

bcdedit /set {default} winpe no

I seem to be back in business- but they mention to run dds.... should i run and if yes would you like to see my log? and if yes, attach or post? THANKS !!!!

#5 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:17 PM

Posted 23 January 2012 - 07:31 PM

In that case I have merged the two topics so you retain your original place in the queue.

Our current backlog of topics is about 5 days, as such you should receive a reply in a day or two (I will not be the one assisting you with this matter).

Good luck.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#6 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 25 January 2012 - 02:05 PM

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

Posted Image In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/438946 <<< CLICK THIS LINK



If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

Posted Image If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

  • If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  • A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
    • Please do this even if you have previously posted logs for us.
    • If you were unable to produce the logs originally please try once more.
    • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    • If you are unsure about any of these characteristics just post what you can and we will guide you.
  • Please tell us if you have your original Windows CD/DVD available.
  • Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

  • Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


We also need a new log from the GMER anti-rootkit Scanner.

Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step.

Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log


As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

#7 HelpBot

HelpBot

    Bleepin' Binary Bot


  • Bots
  • 12,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:17 AM

Posted 30 January 2012 - 02:10 PM

Hello again!

I haven't heard from you in 5 days. Therefore, I am going to assume that you no longer need our help, and close this topic.

If you do still need help, please send a Private Message to any Moderator within the next five days. Be sure to include a link to your topic in your Private Message.

Thank you for using Bleeping Computer, and have a great day!




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users