Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

RootKit infection


  • This topic is locked This topic is locked
14 replies to this topic

#1 gunsling

gunsling

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 15 April 2012 - 05:23 PM

My computer was infected with happlli redirect in firefox and having major thunderbird problems (which i haven't re-installed yet). After following a similar case in another thread i decided to implement the same fix's. I ran malware anti-malware bytes, rkill, defogger, Hijackthis, tsddkiller(didn't find anything), combo fix, and since then I have not be redirected. I have however seen -'s and |'s against a command line type background every-time i boot the computer, this coupled with poor performance while doing simple tasks leads me to believe that the system is still infected with a rootkit.

I am running windows 7 64 bit enterprise.

dds log follows


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Student at 15:22:12 on 2012-04-15
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.4053.2029 [GMT -4:00]
.
AV: Trend Micro OfficeScan Antivirus *Enabled/Updated* {B7599298-8445-728A-A5C7-A26A082C8BDA}
SP: Trend Micro OfficeScan Anti-spyware *Enabled/Updated* {0C38737C-A27F-7D04-9F77-991873ABC167}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Novell\Client\XTier\Services\XTSvcMgr.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Novell\Client\cusrvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Windows\system32\DRIVERS\o2flash.exe
C:\Windows\SysWOW64\srvany.exe
C:\Windows\sysWOW64\SDIOAssist.exe
C:\PROGRA~2\PHAROS~1\Core\CTskMstr.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Dell\Dell System Manager\DCPSysMgrSvc.exe
C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files (x86)\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmProxy.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\nwtray.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe
C:\Program Files\Logitech\SetPointP\SetPoint.exe
C:\Program Files\Dell\Dell System Manager\DCPSysMgr.exe
D:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files (x86)\Trend Micro\OfficeScan Client\PccNTMon.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\system32\conhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Windows\system32\conhost.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
D:\Users\Student\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [OfficeScanNT Monitor] "C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: D:\Users\Student\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - D:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLSY~1.LNK - C:\Program Files (x86)\Dell\Dell System Manager\DCPSysMgr.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: DisableCAD = 1 (0x1)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
TCP: DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{32D4D9B8-6550-4F1C-9B28-DEADA04C0A63} : DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{34DC5CE4-FEC1-4764-8265-48B2C64358C3} : DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{366809EC-9FB7-4460-862A-D53D9CB5DBFD} : DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{70AC01CF-334B-452E-A562-98C35D454E2C} : DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{70AC01CF-334B-452E-A562-98C35D454E2C}\2375942554130323 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{70AC01CF-334B-452E-A562-98C35D454E2C}\24F696E676F60284F6473707F647 : DhcpNameServer = 10.6.0.1
TCP: Interfaces\{70AC01CF-334B-452E-A562-98C35D454E2C}\33760284F6473707F647 : DhcpNameServer = 66.174.71.33 69.78.96.14 8.8.8.8
TCP: Interfaces\{70AC01CF-334B-452E-A562-98C35D454E2C}\C416155796E64716 : DhcpNameServer = 4.2.2.1
TCP: Interfaces\{811458F1-767B-4C66-BAB7-5D304086C3DE} : DhcpNameServer = 66.174.71.33 69.78.96.14 8.8.8.8
TCP: Interfaces\{9BBFD31D-83A4-4219-89DB-8829804DE613} : DhcpNameServer = 130.127.255.250 130.127.255.251
TCP: Interfaces\{B6536307-D747-430F-B745-455159A00D1A} : DhcpNameServer = 130.127.255.250 130.127.255.251
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
mRun-x64: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [OfficeScanNT Monitor] "C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun-x64: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
.
============= SERVICES / DRIVERS ===============
.
R0 NCFilter;Novell UNC Filter - Filter;C:\Windows\system32\DRIVERS\NCFilter.sys --> C:\Windows\system32\DRIVERS\NCFilter.sys [?]
R0 NCRecognizer;Novell UNC Filter - Recognizer;C:\Windows\system32\DRIVERS\NCRecognizer.sys --> C:\Windows\system32\DRIVERS\NCRecognizer.sys [?]
R0 NCUncFilter;Novell UNC Filter - UNC Filter;C:\Windows\system32\DRIVERS\NCUncFilter.sys --> C:\Windows\system32\DRIVERS\NCUncFilter.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer;C:\Windows\system32\DRIVERS\stdcfltn.sys --> C:\Windows\system32\DRIVERS\stdcfltn.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 NCFSD;Novell Client File System Redirector;C:\Program Files\Novell\Client\XTier\Drivers\ncfsd.sys [2011-4-5 104536]
R2 NCIOCTL;Novell Xplat IoCtl Driver;C:\Program Files\Novell\Client\XTier\Drivers\ncioctl.sys [2011-4-5 89688]
R2 TmFilter;Trend Micro Filter;C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmXPFlt.sys [2010-10-20 342288]
R2 TmPreFilter;Trend Micro PreFilter;C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmpreflt.sys [2010-10-20 42768]
R3 Acceler;Accelerometer Service;C:\Windows\system32\DRIVERS\Accelern.sys --> C:\Windows\system32\DRIVERS\Accelern.sys [?]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
R3 bpenum;Intel® Centrino® WiMAX Enumerator;C:\Windows\system32\DRIVERS\bpenum.sys --> C:\Windows\system32\DRIVERS\bpenum.sys [?]
R3 bpmp;Intel® Centrino® WiMAX 6050 Series;C:\Windows\system32\DRIVERS\bpmp.sys --> C:\Windows\system32\DRIVERS\bpmp.sys [?]
R3 bpusb;Intel® Centrino® WiMAX 6050 Series Function Driver;C:\Windows\system32\Drivers\bpusb.sys --> C:\Windows\system32\Drivers\bpusb.sys [?]
R3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 cvusbdrv;Dell ControlVault;C:\Windows\system32\Drivers\cvusbdrv.sys --> C:\Windows\system32\Drivers\cvusbdrv.sys [?]
R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;C:\Windows\system32\DRIVERS\e1c62x64.sys --> C:\Windows\system32\DRIVERS\e1c62x64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys --> C:\Windows\system32\DRIVERS\NETwNs64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 O2MDRRDR;O2MDRRDR;C:\Windows\system32\DRIVERS\O2MDRw7x64.sys --> C:\Windows\system32\DRIVERS\O2MDRw7x64.sys [?]
R3 O2SDJRDR;O2SDJRDR;C:\Windows\system32\DRIVERS\o2sdjw7x64.sys --> C:\Windows\system32\DRIVERS\o2sdjw7x64.sys [?]
R3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]
S3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;C:\Windows\system32\DRIVERS\e1k62x64.sys --> C:\Windows\system32\DRIVERS\e1k62x64.sys [?]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\system32\DRIVERS\LEqdUsb.Sys --> C:\Windows\system32\DRIVERS\LEqdUsb.Sys [?]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\system32\DRIVERS\LHidEqd.Sys --> C:\Windows\system32\DRIVERS\LHidEqd.Sys [?]
S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\system32\DRIVERS\netaapl64.sys --> C:\Windows\system32\DRIVERS\netaapl64.sys [?]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]
S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?]
S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\drivers\terminpt.sys --> C:\Windows\system32\drivers\terminpt.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsusbhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?]
.
=============== Created Last 30 ================
.
2012-04-13 16:11:37 8669240 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{04F770EE-DCF4-4559-9F75-55672889811D}\mpengine.dll
2012-04-12 15:02:00 81408 ----a-w- C:\Windows\System32\imagehlp.dll
2012-04-12 15:02:00 23408 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-04-12 15:02:00 159232 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-04-12 15:01:59 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-04-12 15:01:59 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-04-12 15:01:59 220672 ----a-w- C:\Windows\System32\wintrust.dll
2012-04-12 15:01:59 172544 ----a-w- C:\Windows\SysWow64\wintrust.dll
2012-04-10 22:59:33 119808 ----a-r- D:\Users\Student\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
2012-04-10 22:07:10 -------- d-----w- C:\Program Files\Windows Imaging
2012-04-10 22:06:43 -------- d-----w- C:\Program Files\Windows AIK
2012-04-10 22:04:30 -------- d-----w- C:\Program Files (x86)\vLite
2012-04-09 00:32:27 -------- d-----w- D:\Users\Student\AppData\Local\NPE
2012-04-09 00:32:27 -------- d-----w- C:\ProgramData\Norton
2012-04-06 04:09:01 -------- d-----w- C:\Program Files (x86)\ESET
2012-04-06 03:55:21 388096 ----a-r- D:\Users\Student\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-05 19:06:23 -------- d-----w- D:\Users\Student\AppData\Roaming\Malwarebytes
2012-04-05 19:06:20 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-04-05 19:06:20 -------- d-----w- C:\ProgramData\Malwarebytes
2012-04-05 19:06:20 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-04-05 18:47:30 -------- d-sh--w- C:\$RECYCLE.BIN
2012-04-05 15:50:02 -------- d-----w- C:\Program Files (x86)\VS Revo Group
2012-04-05 04:00:26 98816 ----a-w- C:\Windows\sed.exe
2012-04-05 04:00:26 518144 ----a-w- C:\Windows\SWREG.exe
2012-04-05 04:00:26 256000 ----a-w- C:\Windows\PEV.exe
2012-04-05 04:00:26 208896 ----a-w- C:\Windows\MBR.exe
2012-04-04 05:53:56 182160 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
2012-04-02 13:09:14 418464 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-04-01 18:46:36 -------- d-----w- C:\Program Files\iPod
2012-04-01 18:46:35 -------- d-----w- C:\Program Files\iTunes
2012-04-01 17:17:30 -------- d-----w- D:\Users\Student\AppData\Local\{906342B3-7C1E-11E1-826D-B8AC6F996F26}
.
==================== Find3M ====================
.
2012-04-02 13:09:14 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-10 03:40:46 18960 ----a-w- C:\Windows\System32\drivers\LNonPnP.sys
2012-03-06 06:53:37 5559152 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-03-06 05:59:47 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-06 05:59:41 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-02-28 06:56:48 2311168 ----a-w- C:\Windows\System32\jscript9.dll
2012-02-28 06:49:56 1390080 ----a-w- C:\Windows\System32\wininet.dll
2012-02-28 06:48:57 1493504 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-02-28 06:42:55 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-02-28 01:18:55 1799168 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-02-28 01:11:21 1427456 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-02-28 01:11:07 1127424 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-02-28 01:03:16 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-02-23 13:18:36 279656 ------w- C:\Windows\System32\MpSigStub.exe
2012-02-17 06:38:27 1112064 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-02-17 06:38:26 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-02-17 05:34:22 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-02-17 04:58:24 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-02-17 04:57:32 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-02-15 16:01:50 52736 ----a-w- C:\Windows\System32\drivers\usbaapl64.sys
2012-02-15 16:01:50 4547944 ----a-w- C:\Windows\System32\usbaaplrc.dll
2012-02-14 16:09:44 1070352 ----a-w- C:\Windows\SysWow64\MSCOMCTL.OCX
2012-02-10 06:36:07 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2012-02-10 05:38:43 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll
2012-02-03 04:34:34 3145728 ----a-w- C:\Windows\System32\win32k.sys
2012-01-25 06:38:39 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-01-25 06:38:38 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-01-25 06:33:30 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
.
============= FINISH: 15:24:05.89 ===============

BC AdBot (Login to Remove)

 


#2 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 16 April 2012 - 08:47 PM

bump for help?

#3 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 17 April 2012 - 10:06 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

If you still have the ComboFix tool just run it as suggested here. You may also be requested to update the program please do so.

Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

IMPORTANT....

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Do not install any other programs until this if fixed.


How to : Disable Anti-virus and Firewall...
http://www.bleepingcomputer.com/forums/topic114351.html

Double click on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt
Note:
Do not mouse click ComboFix's window while it's running. That may cause it to stall


Note: If you have difficulty properly disabling your protective programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.html
===

Third party programs if not up to date can be the cause infiltration of an infection.

Please run this security check for my review.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===

Note: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.

Please post the logs for my review.

#4 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 17 April 2012 - 03:02 PM

* Note that I didn't not have malewarebytes installed until I went to remove the infection, and that is also when I ran the ESET Online scaner.

ComboFix 12-04-16.04 - Student 04/17/2012 15:08:35.3.8 - x64
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.1.1033.18.4053.2491 [GMT -4:00]
Running from: d:\users\Student\Desktop\ComboFix.exe
AV: Trend Micro OfficeScan Antivirus *Disabled/Updated* {B7599298-8445-728A-A5C7-A26A082C8BDA}
SP: Trend Micro OfficeScan Anti-spyware *Disabled/Updated* {0C38737C-A27F-7D04-9F77-991873ABC167}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-03-17 to 2012-04-17 )))))))))))))))))))))))))))))))
.
.
2012-04-17 19:18 . 2012-04-17 19:18 -------- d-----w- d:\users\Srodger\AppData\Local\temp
2012-04-17 16:05 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C1CEFBF1-C7B8-4F3C-A6D1-9D8841C7EB47}\mpengine.dll
2012-04-16 17:46 . 2012-04-16 17:46 -------- d-----w- c:\program files (x86)\LEGO Software
2012-04-16 17:45 . 2012-04-16 17:45 -------- d-----w- c:\program files (x86)\National Instruments
2012-04-16 17:45 . 2012-04-16 17:45 -------- d-----w- c:\program files (x86)\IVI Foundation
2012-04-16 17:45 . 2012-04-16 17:45 -------- d-----w- c:\programdata\National Instruments
2012-04-16 01:38 . 2012-04-16 01:38 -------- d-----w- d:\users\Student\AppData\Roaming\Fit3DLive
2012-04-16 01:29 . 2012-04-16 01:29 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-04-12 15:02 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-04-12 15:02 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-04-12 15:02 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-04-12 15:01 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-04-12 15:01 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-04-12 15:01 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-04-12 15:01 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-04-10 22:59 . 2012-04-10 22:59 119808 ----a-r- d:\users\Student\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe
2012-04-10 22:07 . 2012-04-10 22:07 -------- d-----w- c:\program files\Windows Imaging
2012-04-10 22:06 . 2012-04-10 22:07 -------- d-----w- c:\program files\Windows AIK
2012-04-10 22:04 . 2012-04-10 22:59 -------- d-----w- c:\program files (x86)\vLite
2012-04-09 00:32 . 2012-04-09 00:41 -------- d-----w- d:\users\Student\AppData\Local\NPE
2012-04-09 00:32 . 2012-04-09 00:32 -------- d-----w- c:\programdata\Norton
2012-04-06 04:09 . 2012-04-06 04:09 -------- d-----w- c:\program files (x86)\ESET
2012-04-06 03:55 . 2012-04-06 03:55 388096 ----a-r- d:\users\Student\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2012-04-05 19:06 . 2012-04-05 19:06 -------- d-----w- d:\users\Student\AppData\Roaming\Malwarebytes
2012-04-05 19:06 . 2012-04-11 14:06 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-04-05 19:06 . 2012-04-05 19:06 -------- d-----w- c:\programdata\Malwarebytes
2012-04-05 19:06 . 2012-04-04 19:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-04-05 15:50 . 2012-04-05 15:50 -------- d-----w- c:\program files (x86)\VS Revo Group
2012-04-04 05:53 . 2012-04-04 05:53 182160 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2012-04-02 13:09 . 2012-04-02 13:09 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-01 18:46 . 2012-04-01 18:46 -------- d-----w- c:\program files\iPod
2012-04-01 18:46 . 2012-04-01 19:51 -------- d-----w- c:\program files\iTunes
2012-04-01 17:17 . 2012-04-01 17:17 -------- d-----w- d:\users\Student\AppData\Local\{906342B3-7C1E-11E1-826D-B8AC6F996F26}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-16 01:29 . 2011-04-06 17:11 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-04-02 13:09 . 2011-08-21 14:04 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-10 03:40 . 2011-11-28 14:00 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2012-03-02 05:17 . 2012-03-02 05:17 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2012-03-02 05:17 . 2012-03-02 05:17 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-03-02 05:17 . 2012-03-02 05:17 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-03-02 05:17 . 2012-03-02 05:17 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2012-03-02 05:17 . 2012-03-02 05:17 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2012-03-02 05:17 . 2012-03-02 05:17 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-03-02 05:17 . 2012-03-02 05:17 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-02 05:17 . 2012-03-02 05:17 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2012-03-02 05:17 . 2012-03-02 05:17 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2012-03-02 05:17 . 2012-03-02 05:17 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-03-02 05:17 . 2012-03-02 05:17 367104 ----a-w- c:\windows\SysWow64\html.iec
2012-03-02 05:17 . 2012-03-02 05:17 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2012-03-02 05:17 . 2012-03-02 05:17 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2012-03-02 05:17 . 2012-03-02 05:17 222208 ----a-w- c:\windows\system32\msls31.dll
2012-03-02 05:17 . 2012-03-02 05:17 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2012-03-02 05:17 . 2012-03-02 05:17 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2012-03-02 05:17 . 2012-03-02 05:17 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-03-02 05:17 . 2012-03-02 05:17 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2012-03-02 05:17 . 2012-03-02 05:17 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2012-03-02 05:17 . 2012-03-02 05:17 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-02 05:17 . 2012-03-02 05:17 85504 ----a-w- c:\windows\system32\iesetup.dll
2012-03-02 05:17 . 2012-03-02 05:17 76800 ----a-w- c:\windows\system32\tdc.ocx
2012-03-02 05:17 . 2012-03-02 05:17 603648 ----a-w- c:\windows\system32\vbscript.dll
2012-03-02 05:17 . 2012-03-02 05:17 49664 ----a-w- c:\windows\system32\imgutil.dll
2012-03-02 05:17 . 2012-03-02 05:17 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-03-02 05:17 . 2012-03-02 05:17 448512 ----a-w- c:\windows\system32\html.iec
2012-03-02 05:17 . 2012-03-02 05:17 30720 ----a-w- c:\windows\system32\licmgr10.dll
2012-03-02 05:17 . 2012-03-02 05:17 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-03-02 05:17 . 2012-03-02 05:17 165888 ----a-w- c:\windows\system32\iexpress.exe
2012-03-02 05:17 . 2012-03-02 05:17 160256 ----a-w- c:\windows\system32\wextract.exe
2012-03-02 05:17 . 2012-03-02 05:17 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-03-02 05:17 . 2012-03-02 05:17 12288 ----a-w- c:\windows\system32\mshta.exe
2012-03-02 05:17 . 2012-03-02 05:17 114176 ----a-w- c:\windows\system32\admparse.dll
2012-03-02 05:17 . 2012-03-02 05:17 111616 ----a-w- c:\windows\system32\iesysprep.dll
2012-02-23 13:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-17 06:38 . 2012-03-14 14:09 1112064 ----a-w- c:\windows\system32\rdpcorets.dll
2012-02-17 06:38 . 2012-03-14 14:09 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-02-17 05:34 . 2012-03-14 14:09 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-02-17 04:58 . 2012-03-14 14:09 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-02-17 04:57 . 2012-03-14 14:09 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-02-15 16:01 . 2012-02-15 16:01 52736 ----a-w- c:\windows\system32\drivers\usbaapl64.sys
2012-02-15 16:01 . 2012-02-15 16:01 4547944 ----a-w- c:\windows\system32\usbaaplrc.dll
2012-02-14 16:09 . 2012-02-14 16:09 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-02-10 06:36 . 2012-03-14 14:10 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-02-10 05:38 . 2012-03-14 14:10 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-02-03 04:34 . 2012-03-14 14:10 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-01-25 06:38 . 2012-03-14 14:10 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-01-25 06:38 . 2012-03-14 14:10 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-01-25 06:33 . 2012-03-14 14:10 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-05_04.13.15 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-02-22 13:48 . 2007-02-22 13:48 68896 c:\windows\SysWOW64\NiViSv32.dll
- 2012-03-02 16:57 . 2011-12-14 02:50 72704 c:\windows\SysWOW64\mshtmled.dll
+ 2012-04-12 15:05 . 2012-02-28 01:03 72704 c:\windows\SysWOW64\mshtmled.dll
- 2012-03-02 16:57 . 2011-12-14 02:54 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-04-12 15:05 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-04-16 17:48 . 2012-04-16 17:48 84661 c:\windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe
- 2012-03-02 16:57 . 2011-12-14 02:54 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2012-04-12 15:05 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2010-11-21 03:09 . 2012-04-12 18:37 57804 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-04-17 19:00 48846 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-04-07 15:48 . 2012-04-17 16:03 14592 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1213181057-3195632568-401352705-1001_UserData.bin
+ 2012-04-12 15:05 . 2012-02-28 06:43 96256 c:\windows\system32\mshtmled.dll
- 2012-03-02 16:57 . 2011-12-14 06:57 96256 c:\windows\system32\mshtmled.dll
+ 2012-04-12 15:05 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll
- 2012-03-02 16:57 . 2011-12-14 07:02 86528 c:\windows\system32\migration\WininetPlugin.dll
- 2012-03-02 16:57 . 2011-12-14 07:01 85504 c:\windows\system32\jsproxy.dll
+ 2012-04-12 15:05 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll
- 2009-07-14 05:30 . 2012-03-11 02:41 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-07-14 05:30 . 2012-04-16 17:56 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2011-04-01 16:36 . 2012-04-17 18:58 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-01 16:36 . 2012-04-05 04:12 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-04-01 16:36 . 2012-04-05 04:12 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-04-01 16:36 . 2012-04-17 18:58 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-05 04:12 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-17 18:58 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:46 . 2012-03-25 23:52 84952 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 04:46 . 2012-04-14 22:10 84952 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2012-04-12 15:09 . 2012-04-12 15:09 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-03-13 05:01 . 2012-03-13 05:01 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-03-13 05:01 . 2012-03-13 05:01 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-04-05 14:22 . 2012-03-14 15:06 34144 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 34144 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 42848 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 42848 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 19296 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 19296 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 73624 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\wow_helper.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\ViewerPS.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\reader_sl.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 88992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\PDFPrevHndlr.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\eula.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 64952 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\armsvc.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrotextextractor.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32Info.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 63912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acroiehelpershim.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroIEHelper.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\Acrofx32.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\66b5c693a8aa660276216d7a521da5e2\System.Web.DynamicData.Design.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1371ed674fc04f510cb41524e2d4322d\System.Web.DynamicData.Design.ni.dll
+ 2011-08-10 11:49 . 2012-04-17 18:21 5982 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2012-04-17 18:58 . 2012-04-17 18:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-05 04:12 . 2012-04-05 04:12 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-05 04:12 . 2012-04-05 04:12 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-04-17 18:58 . 2012-04-17 18:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2007-02-22 13:48 . 2007-02-22 13:48 185120 c:\windows\SysWOW64\visa32.dll
+ 2012-04-12 15:05 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll
- 2012-03-02 16:57 . 2011-12-14 02:55 231936 c:\windows\SysWOW64\url.dll
- 2008-03-14 08:00 . 2008-03-14 08:00 348160 c:\windows\SysWOW64\msvcr71.dll
+ 2003-02-21 08:42 . 2003-02-21 08:42 348160 c:\windows\SysWOW64\msvcr71.dll
- 2008-03-14 08:00 . 2008-03-14 08:00 499712 c:\windows\SysWOW64\msvcp71.dll
+ 2003-03-19 00:14 . 2003-03-19 00:14 499712 c:\windows\SysWOW64\msvcp71.dll
+ 2011-02-28 23:01 . 2011-07-29 00:54 947472 c:\windows\SysWOW64\msjava.dll
- 2011-02-28 23:01 . 2011-02-28 23:01 947472 c:\windows\SysWOW64\msjava.dll
+ 2008-10-05 03:24 . 2008-10-05 03:24 235936 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2012-04-12 15:05 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll
- 2012-03-02 16:57 . 2011-12-14 02:53 716800 c:\windows\SysWOW64\jscript.dll
- 2011-08-10 11:13 . 2011-05-04 08:52 157472 c:\windows\SysWOW64\javaws.exe
+ 2012-04-16 01:29 . 2012-04-16 01:29 157472 c:\windows\SysWOW64\javaws.exe
+ 2012-04-16 01:29 . 2012-04-16 01:29 149280 c:\windows\SysWOW64\javaw.exe
+ 2012-04-16 01:29 . 2012-04-16 01:29 149280 c:\windows\SysWOW64\java.exe
+ 2012-04-12 15:05 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll
- 2012-03-02 16:57 . 2011-12-14 02:47 176640 c:\windows\SysWOW64\ieui.dll
+ 2008-04-11 17:44 . 2008-04-11 17:44 114176 c:\windows\SysWOW64\fantom.dll
+ 2011-04-01 18:14 . 2012-04-06 00:48 338300 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2011-04-04 15:12 . 2012-04-17 05:10 447010 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2012-04-12 15:05 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll
- 2012-03-02 16:57 . 2011-12-14 07:03 237056 c:\windows\system32\url.dll
+ 2009-07-14 02:36 . 2012-04-17 19:02 658756 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-04-05 00:32 658756 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-04-05 00:32 118120 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2012-04-17 19:02 118120 c:\windows\system32\perfc009.dat
+ 2012-04-12 15:05 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll
- 2012-03-02 16:57 . 2011-12-14 07:00 818688 c:\windows\system32\jscript.dll
+ 2012-04-12 15:05 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll
- 2012-03-02 16:57 . 2011-12-14 06:53 248320 c:\windows\system32\ieui.dll
- 2009-07-14 05:30 . 2012-03-11 02:41 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-04-16 17:56 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2012-03-09 05:43 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2009-07-14 05:30 . 2012-04-16 17:45 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2008-01-19 04:10 . 2008-01-19 04:10 154168 c:\windows\system32\drivers\WimFltr.sys
+ 2009-07-14 05:01 . 2012-04-17 18:21 519332 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2012-04-05 04:11 519332 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-01-21 21:40 . 2012-01-21 21:40 616216 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
+ 2012-04-12 03:50 . 2012-01-26 23:31 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-01-21 21:40 . 2012-01-21 21:40 616216 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2012-04-12 03:50 . 2012-01-26 23:33 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-04-05 18:54 . 2012-04-05 18:54 908800 c:\windows\Installer\635610.msi
+ 2012-04-16 01:29 . 2012-04-16 01:29 207360 c:\windows\Installer\54e6c1.msi
+ 2012-02-09 11:27 . 2012-02-09 11:27 206848 c:\windows\Installer\4b8fd.msp
+ 2012-03-21 09:58 . 2012-03-21 09:58 133120 c:\windows\Installer\4b892.msp
+ 2009-03-30 17:35 . 2009-03-30 17:35 752128 c:\windows\Installer\1177d3.msi
+ 2011-04-05 14:22 . 2012-04-12 15:06 415584 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 415584 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 303456 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 303456 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 571232 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 571232 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 326496 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 326496 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 469856 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 469856 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 178528 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 178528 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 249232 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\sqlite.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 394136 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\pdfshell.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 183696 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\nppdf32.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 104344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AiodLite.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 937920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\adobearm.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 102808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRdIF.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 755088 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroPDF.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 296344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrobroker.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 205720 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\a3dutils.dll
+ 2010-12-21 06:58 . 2010-12-21 06:58 294768 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\SHAREPOINTPROVIDER.DLL
+ 2012-04-14 02:31 . 2012-04-14 02:31 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\3893bfa343bfd255531a743ffa660722\WindowsFormsIntegration.ni.dll
+ 2012-04-14 02:30 . 2012-04-14 02:30 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\a38a67bfd6245b2f72eb918a57d37bcd\System.ServiceProcess.ni.dll
+ 2012-04-14 02:30 . 2012-04-14 02:30 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\cdf11c8e0679ce7ff91dc37c6e1b5545\System.Messaging.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 235008 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\a0e20ee2dd9194fdfa52f9cc86051246\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-04-13 23:50 . 2012-04-13 23:50 864768 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\67278ab733f1baf4132ca4bf85cd5b60\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\b6c591378ae5158071d63be3fb88ef37\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\e124e073bbf4e06cb775df9d6b8b7979\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\952e3b13d0001f027a1c3f96e33d5c77\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\94906ec077cf7897d25d2c3659bc7dfe\Microsoft.Office.Tools.Common.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 408576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\8e6980a50fc52d127134e72d5f532dd4\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ebd99d5801192b27f605630e2665db37\WindowsFormsIntegration.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\9cabbb335fc6dff10392376707a4d0a2\System.ServiceProcess.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\621d2aae96fd06f9ccf66d335d7f1232\System.Messaging.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 708608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\bea3115c4fb01ef5636cc104793d85c9\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 178176 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\be8e0e2289d04fbc8a63b28b9c971f48\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09237903b1f9e5c7a69a4995d85eaa35\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\e070443fc6be8a8f34f68fb6c9674494\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\ce50979942c411efd3323472dc2e6254\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\cd38bbc2e82123234ae8fb6c05999af7\Microsoft.Office.Tools.Word.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\b0b8c3fdef61ce27b6bcd7b6617ac838\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\92d8765edfd33f34e12da0b65c49f9c0\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\59026dafb681def4fa70a4996bb79244\Microsoft.Office.Tools.Common.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\718e8186ee8de8555888be444b86d443\WindowsFormsIntegration.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\6138a7bf63fa559ffe856b586e369ba2\TaskScheduler.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\01e6d953aaaada7216112df9e0f39c11\System.Web.Routing.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\32b4d44198ecd16ca5deb1024642313f\System.Web.Entity.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\9d7b9e05e5bc7eab07de61a8dd70757a\System.Web.Entity.Design.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\e59cbe4ccb29922c44bf66d3ae044b32\System.Web.DynamicData.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\cb674da808088671f0633d46d1dade03\System.Web.Abstractions.ni.dll
+ 2012-04-12 15:55 . 2012-04-12 15:55 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\2ea95f3113ace6c1adf4ab9f9fc4285e\System.ServiceProcess.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\c5bef7173a92e1a66e3f7a34eeed891f\System.Messaging.ni.dll
+ 2012-04-12 15:55 . 2012-04-12 15:55 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\a94125636875d06389922fcd86b7a615\System.Drawing.Design.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 376832 c:\windows\assembly\NativeImages_v2.0.50727_64\SecurityAuditPolici#\7edcdb58fc8106cf1e2361f3482b368d\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\cc4082d64c96ff7569aa540b2bfb4e4e\napsnap.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\30d62e0be22cd4569141c32f8650773b\napinit.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\0da2c8a454593084e0215266b5572bf0\MMCFxCommon.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f62e745133fcb776cd05bc7a71e1fcfc\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\b4ca8eca3fb2b9e9eb4dcde40eca00b0\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 225280 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\841980c52ea05db8c1561ee8f396f19b\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 229888 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\6fe83fc5a86e571d3e12fa74d150c451\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\35793b5db90189bdcd354e084590a20f\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 937472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\762b104fb41272b94fbd442ee2ef97e2\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\987951ffdadf4a176d1fa3a02c3288f9\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\44eecde37d940c1c9aaebb700ae81ed5\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ecaf4199c3937827b85be8e8ac36de2b\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\8dd963b1ac45ad4d484855d9853747bd\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\fe924ef08b715e71e410270c60cc372c\Microsoft.ManagementConsole.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 618496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\668798ebaebb3baa6a152d86e3e03364\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 423424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\cb23b761d394d3db188d2d710459217e\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 727040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\607e206ef66533feecd6a3786ad55560\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\857d04eadbf226277488bfabfda2a01d\mcplayerinterop.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\7a2e04f455b793a14e9d1df5fdd93bf7\mcGlidHostObj.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\56c25b27b777af0b93999261cfeec0cd\EventViewer.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\688abb339fb8301c37b0889a0d01dfa3\WindowsFormsIntegration.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\97d8bd8f21969a91b7c5171031250d1e\TaskScheduler.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\2d9aab831590b771aa70cd6991f7af88\System.Web.Routing.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\47e3f7fa0b07e85e269f2e152e0e5e29\System.Web.Extensions.Design.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\3595f5769afb7d38aa5a05abef97364c\System.Web.Entity.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\7485eeab1b46532b35d7ab5814a43a30\System.Web.Entity.Design.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ec083a1d2f94e4c565545f9d090c5039\System.Web.DynamicData.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\88430faf21e241f93d02711e35173de6\System.Web.Abstractions.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c2c7f68605a42caef1b7a19c51de58b4\System.ServiceProcess.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\69b1de7425d09eb9fe42f81882d2896e\System.Messaging.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b64b898fd099d1644a8673137ac56011\System.Drawing.Design.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\b7a94173e0bedb89545cbfa23e71b8e0\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\2ffec892832457d3530d59a9da07324c\napsnap.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\1167a79ab309e2a4e6da2bd2dbea01a6\napinit.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\c83df01d683dbeb36be10218cc50ff03\MMCFxCommon.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d0af49f408e942efe4cc444136f3e7fe\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a278c91a9f9d7c4ea7e1aaf0c290684a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\63b6599f7c0555054883b2f5f55ad270\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c085ee71c2b8e94aae910a39bc4a212\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\01e71094136bf26bea62a21c69d5aa14\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\db99af884a053f153e7fc72fa3607710\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\94aa23a60fd4ef3aa99061f0c1641bd7\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\773d5489dd158e1c72c2b8327c4cffd3\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\667bce54a4a095320e5c3390e52e9693\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\564ee7c52ff064b953ca9fe02e0a2067\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\68842b507f3ad7fa603bf57c813c6a0c\Microsoft.ManagementConsole.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\eff4e9083f7ff25c18f52542f9a1e596\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\b872774c6d7f49712c7b7cdd71f3204b\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 587776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\06f1bc0c2fa665d1d48597c77a5fee55\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\4e2b9e7e956dcee6a9721b57c8ccde60\EventViewer.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\380a1283ad9a74eb337feb276453a87f\ehExtHost32.ni.exe
+ 2012-04-12 03:50 . 2012-01-26 23:33 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-03-02 16:57 . 2011-12-14 02:57 1127424 c:\windows\SysWOW64\wininet.dll
+ 2012-04-12 15:05 . 2012-02-28 01:11 1127424 c:\windows\SysWOW64\wininet.dll
+ 2012-04-12 15:05 . 2012-02-28 01:12 1103360 c:\windows\SysWOW64\urlmon.dll
- 2012-03-02 16:57 . 2011-12-14 02:57 1103360 c:\windows\SysWOW64\urlmon.dll
+ 2012-04-12 15:05 . 2012-03-06 05:59 3913072 c:\windows\SysWOW64\ntoskrnl.exe
- 2012-03-14 15:08 . 2011-11-19 14:50 3968368 c:\windows\SysWOW64\ntkrnlpa.exe
+ 2012-04-12 15:05 . 2012-03-06 05:59 3968368 c:\windows\SysWOW64\ntkrnlpa.exe
+ 2008-10-05 03:24 . 2008-10-05 03:24 3695008 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
+ 2012-04-12 15:05 . 2012-02-28 01:18 1799168 c:\windows\SysWOW64\jscript9.dll
+ 2012-04-12 15:05 . 2012-02-28 01:04 1792000 c:\windows\SysWOW64\iertutil.dll
- 2012-03-02 16:57 . 2011-12-14 02:52 1792000 c:\windows\SysWOW64\iertutil.dll
+ 2012-04-12 15:05 . 2012-02-28 01:27 9705984 c:\windows\SysWOW64\ieframe.dll
+ 2012-04-12 15:05 . 2012-02-28 06:49 1390080 c:\windows\system32\wininet.dll
- 2012-03-02 16:57 . 2011-12-14 07:04 1390080 c:\windows\system32\wininet.dll
+ 2012-04-12 15:05 . 2012-02-28 06:50 1345536 c:\windows\system32\urlmon.dll
- 2012-03-02 16:57 . 2011-12-14 07:04 1345536 c:\windows\system32\urlmon.dll
- 2012-03-14 15:08 . 2011-11-19 15:20 5559152 c:\windows\system32\ntoskrnl.exe
+ 2012-04-12 15:05 . 2012-03-06 06:53 5559152 c:\windows\system32\ntoskrnl.exe
+ 2012-04-12 15:05 . 2012-02-28 06:56 2311168 c:\windows\system32\jscript9.dll
- 2012-03-02 16:57 . 2011-12-14 06:59 2144256 c:\windows\system32\iertutil.dll
+ 2012-04-12 15:05 . 2012-02-28 06:43 2144256 c:\windows\system32\iertutil.dll
+ 2009-07-14 04:45 . 2012-04-12 15:53 6944795 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2012-03-14 16:15 6944795 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2011-06-14 16:33 . 2012-04-03 22:32 2390792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-06-14 16:33 . 2012-04-17 05:12 2390792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2012-03-26 04:22 . 2012-04-11 04:26 1289732 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1213181057-3195632568-401352705-1001-12288.dat
- 2012-03-13 05:01 . 2012-03-13 05:01 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-04-12 15:09 . 2012-04-12 15:09 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-03-13 05:01 . 2012-03-13 05:01 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-03-13 05:00 . 2012-03-13 05:00 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-04-12 15:08 . 2012-04-12 15:08 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-04-06 03:54 . 2012-04-06 03:54 1402880 c:\windows\Installer\6d6e81.msi
+ 2012-01-22 14:20 . 2012-01-22 14:20 1707520 c:\windows\Installer\4b907.msp
+ 2012-03-07 19:01 . 2012-03-07 19:01 1907712 c:\windows\Installer\4b8e6.msp
+ 2012-04-01 20:27 . 2012-04-01 20:27 3463168 c:\windows\Installer\4b8c0.msp
+ 2012-02-17 07:50 . 2012-02-17 07:50 1236480 c:\windows\Installer\4b8a9.msp
+ 2012-03-21 09:57 . 2012-03-21 09:57 1591808 c:\windows\Installer\4b88b.msp
+ 2009-12-09 16:40 . 2009-12-09 16:40 2878976 c:\windows\Installer\1bc5a4b.msi
+ 2011-06-06 20:45 . 2011-06-06 20:45 2318848 c:\windows\Installer\1978279.msi
+ 2009-03-30 17:35 . 2009-03-30 17:35 2527744 c:\windows\Installer\1177ec.msi
+ 2009-03-30 17:35 . 2009-03-30 17:35 1434624 c:\windows\Installer\1177e1.msi
+ 2009-03-30 17:35 . 2009-03-30 17:35 2841600 c:\windows\Installer\1177db.msi
- 2011-04-05 14:22 . 2012-03-14 15:06 1479520 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 1479520 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 1858400 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 1858400 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 3792736 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 3792736 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2011-04-05 14:22 . 2012-03-14 15:06 1449312 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-04-05 14:22 . 2012-04-12 15:06 1449312 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 2215312 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\rt3d.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 1189004 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\JSByteCodeWin.bin
+ 2011-06-06 16:55 . 2011-06-06 16:55 6543768 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\authplay.dll
+ 2011-06-06 16:55 . 2011-06-06 16:55 1240992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AdobeCollabSync.exe
+ 2011-06-06 16:55 . 2011-06-06 16:55 1480600 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.exe
+ 2012-04-14 02:02 . 2012-04-14 02:02 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\fb00cd7183b28470878a3b5687929a56\WindowsBase.ni.dll
+ 2012-04-14 02:31 . 2012-04-14 02:31 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\80de3f9f56bed3e05ba97741905abddb\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-04-14 02:06 . 2012-04-14 02:06 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\21c096f214db354198e2664473875f06\System.Printing.ni.dll
+ 2012-04-14 02:05 . 2012-04-14 02:05 2303488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\9bcabb321026ee927401cbba73dff054\System.Drawing.ni.dll
+ 2012-04-14 02:05 . 2012-04-14 02:05 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\90ec5a09a2329a45554d79e0fd9fbbee\System.Deployment.ni.dll
+ 2012-04-14 02:30 . 2012-04-14 02:30 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\45d4a9fa235f5658f8c9b89f6a4f691f\System.Activities.Presentation.ni.dll
+ 2012-04-14 02:06 . 2012-04-14 02:06 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\8ad595c3d0668d10777d8ce28b88cc7c\ReachFramework.ni.dll
+ 2012-04-14 02:05 . 2012-04-14 02:05 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\cb31bfb24a52f83cf826c00979827ba6\PresentationUI.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 1843712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\a93e8035988f3d15d34aee7c817c547a\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\5281ac494089700d1c72c16478ab3363\Microsoft.VisualBasic.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 1118208 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\f5212405cfab746bb8a280d592c7cfbd\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 2035200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\d2b4c843482c755f49792d3a0e558368\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4b1a827d511d04827b1c8667c5706e34\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\363aac28351f0e2d17dca84f7532d8b1\Microsoft.Office.Tools.Word.ni.dll
+ 2012-04-12 15:10 . 2012-04-12 15:10 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\02ea3ff3b5908b51da47e1aeb9e75b04\WindowsBase.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\acae13e8725a0a5da6dcda3e309cb9d2\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\7175344bfab919484674d37de776a82f\System.Printing.ni.dll
+ 2012-04-12 15:10 . 2012-04-12 15:10 1665536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\c02325260bdcecd695a87bbb24547df2\System.Drawing.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\d0ae88ebdc709e940fbd0c6bafcab13c\System.Deployment.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\f4311e621d2bbf4de0d32bae765b1484\System.Activities.Presentation.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\f4ab7bc19b981163de613143a1e1c997\ReachFramework.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\3e896ba1c3cc8d62c267508dccd7aa5a\PresentationUI.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1139712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\b568128ba083f17ce78eb224d9b85f4d\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1f54c28f39e25b121c374480ad50d384\Microsoft.VisualBasic.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\e688beeea8b1e205c0476413ef3edc3a\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\21995a6562bc7fb06f07c0e2c5ba2319\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-04-13 23:49 . 2012-04-13 23:49 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\8f4bee781d2709ba927b31c6bee8abce\System.WorkflowServices.ni.dll
+ 2012-04-12 15:55 . 2012-04-12 15:55 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\d26e6d07c2e10bc55c2bfd2440ec14bc\System.Workflow.ComponentModel.ni.dll
+ 2012-04-12 15:55 . 2012-04-12 15:55 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\f044eaa5dc79454c4081bdbea81bf67e\System.Workflow.Activities.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\57631b92442dcbaa782800614f11eed4\System.Web.Mobile.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f21b305ec2cacfd1737aba590508716a\System.Web.Extensions.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\01e5bdd5a9c2db218cf64aff1875bf10\System.Web.Extensions.Design.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\7e62d5f06809c96b0e957cc948d98d7c\System.Printing.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 2317312 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\95d41ace5d8803b9318366ad5f0fbdff\System.Drawing.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\7e705656ef1ee9078e0d51699d9e0858\System.Deployment.ni.dll
+ 2012-04-13 23:48 . 2012-04-13 23:48 1530368 c:\windows\assembly\NativeImages_v2.0.50727_64\SrpUxSnapIn\9208a9d4acc76688fb7b07a3b99d1c5e\SrpUxSnapIn.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\df3b4d20eaf81da80db9be811947e475\ReachFramework.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\8e76dcfa3f4676022f95437037c8ad51\PresentationUI.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\92ab2a505e2b1e55887248752fc8791b\Narrator.ni.exe
+ 2012-04-13 23:47 . 2012-04-13 23:47 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\b843ee3c17f0b9d517f74f2fc2cef321\MMCEx.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\ff499b53b4b43e5cf6175a7d95fb15ea\MIGUIControls.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\a2368cca7264c3f047d16fefcb29ca66\Microsoft.VisualBasic.ni.dll
+ 2012-04-13 23:47 . 2012-04-13 23:47 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a365fda36604d8f8b6ea67667dc3dd46\Microsoft.PowerShell.Editor.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a1c24b217f836d73170c0f32b7dda5c2\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\ef37fe70c135b3e38caff59f13265ff8\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\d4a618d9f5959f658a1892a007f96a04\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 1093632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\631ae18fbb786ed963eac3080906a3cf\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\8dff78b6458b3995288e7e89aa7ae34a\Microsoft.MediaCenter.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\88b7272ddb53920b927a7ef59fd3ad6a\Microsoft.MediaCenter.UI.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1225d00b36449afd4a4314eadcb8bf58\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\9e91d7c4464a12eb7d2c174ffc56c168\Microsoft.Ink.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\a67cf1480b9711c9e9da320bc5114879\Microsoft.Build.Tasks.ni.dll
+ 2012-04-13 23:46 . 2012-04-13 23:46 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\7b5c7863043af7cd47dfb104c0fe6879\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-04-13 17:59 . 2012-04-13 17:59 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\a1c741fa6d3e2635dd2a2a77890c87b5\mcstore.ni.dll
+ 2012-04-13 17:58 . 2012-04-13 17:58 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\d362f68d3bf954ba55a4494a659492af\System.WorkflowServices.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6d2f8bad410dae6049507d7bc097a62d\System.Workflow.ComponentModel.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\31fd6842b7ccb502dc2f5f11c1f991bd\System.Workflow.Activities.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\a118322b0f5ffc0e67c06658e8788e1d\System.Web.Mobile.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e6747d0470e8a42907df14af10862844\System.Web.Extensions.ni.dll
+ 2012-04-12 15:52 . 2012-04-12 15:52 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0b27d6da6e6bc319c3805435b818c1e5\System.Printing.ni.dll
+ 2012-04-12 15:50 . 2012-04-12 15:50 1590784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll
+ 2012-04-12 15:50 . 2012-04-12 15:50 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\e45611cad86870a7011bb18b9e993861\System.Deployment.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\e304bbb529be3c6839fcc740c0850141\SrpUxSnapIn.ni.dll
+ 2012-04-12 15:52 . 2012-04-12 15:52 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\ffe872f5d03f8bf4d1e1aca71274aec4\ReachFramework.ni.dll
+ 2012-04-12 15:51 . 2012-04-12 15:51 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\167ae650f54f5cd46c07329972f179ad\PresentationUI.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\a61a4567bd8a09a0068db7fcc46151e1\Narrator.ni.exe
+ 2012-04-13 17:57 . 2012-04-13 17:57 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\a8ac3e062a13d75ff8d632bed75358b0\MMCEx.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\2a348513f0f83117bedeb39a7d10b034\MIGUIControls.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3ce70b84dbb9970e1893672c5d430c80\Microsoft.VisualBasic.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a7364db379808ebdee5cd876d5af2656\Microsoft.PowerShell.Editor.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2a9dff80feb7cf8dbac17adb959159ca\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-04-13 17:57 . 2012-04-13 17:57 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\dbd0c24e7fefe5a2b5f1f86c3bef97a9\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\6fb56894a05f5c937528015f8739a795\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 2091520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\99e91ead00b24fe591435147e07b6ce4\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 4752384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\2e822a910847c6f2a6626fc3658bd8c4\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4a603d10666b9ee9487e7f0ce27c1c68\Microsoft.MediaCenter.UI.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\142b59a72b233db75ede02941b86291d\Microsoft.MediaCenter.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\ffc29e128c4ddebb991189d617ed1bf7\Microsoft.Ink.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\0c9d80e810caa6aeb85bd4d253281434\Microsoft.Build.Tasks.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\008b235de7df9c690e3f289f3c776eda\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-04-13 17:56 . 2012-04-13 17:56 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\227b7eaefe6ae6b78190516516793b4b\mcstore.ni.dll
+ 2012-04-12 15:05 . 2012-02-28 01:52 12281856 c:\windows\SysWOW64\mshtml.dll
+ 2009-07-14 02:34 . 2012-04-12 15:48 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 02:34 . 2012-03-14 16:12 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2012-04-12 15:05 . 2012-02-28 07:34 17790976 c:\windows\system32\mshtml.dll
+ 2011-04-04 14:37 . 2012-04-12 15:02 57249312 c:\windows\system32\MRT.exe
+ 2012-04-12 15:05 . 2012-02-28 07:02 10888704 c:\windows\system32\ieframe.dll
+ 2011-04-07 15:45 . 2012-04-17 18:21 39117460 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1213181057-3195632568-401352705-1001-8192.dat
+ 2012-04-16 01:28 . 2012-04-16 01:28 12938752 c:\windows\Installer\54e6bb.msi
+ 2012-03-07 19:03 . 2012-03-07 19:03 23710208 c:\windows\Installer\4b8dd.msp
+ 2012-04-04 11:17 . 2012-04-04 11:17 16613376 c:\windows\Installer\197827a.msp
+ 2008-01-24 00:19 . 2008-01-24 00:19 93742080 c:\windows\Installer\18beb62.msi
+ 2011-06-06 16:55 . 2011-06-06 16:55 24731544 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.dll
+ 2012-04-14 02:06 . 2012-04-14 02:06 17353728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\c80f2e11e938ed65b843f750add94b35\System.Windows.Forms.ni.dll
+ 2012-04-14 02:05 . 2012-04-14 02:05 24407040 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\b93196152e384bd43b9abf1e20c8d067\PresentationFramework.ni.dll
+ 2012-04-14 02:03 . 2012-04-14 02:03 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\fc074b5198bd925a4f5b48403bba0e34\PresentationCore.ni.dll
+ 2012-04-12 15:10 . 2012-04-12 15:10 13197312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\0b36565a61f83137806e71b287d81042\System.Windows.Forms.ni.dll
+ 2012-04-12 15:10 . 2012-04-12 15:10 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7786f3e95a399a8b6691170ae2fe0e1c\PresentationFramework.ni.dll
+ 2012-04-12 15:10 . 2012-04-12 15:10 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\239eba799555dbe10760ee80c8c8df7c\PresentationCore.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 17379840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\3466442b4168ba11787961fcfd410adf\System.Windows.Forms.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\79c8a2e836c01784bb8e3e2d0ed26850\System.Web.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\552733f73f5483946cce9229b27bdcb2\System.Design.ni.dll
+ 2012-04-12 15:54 . 2012-04-12 15:54 19195392 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\b87e4cff3eb13680c55a5f4ee9786b56\PresentationFramework.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 16540160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\1233412b58120995b639428b5e6d998e\PresentationCore.ni.dll
+ 2012-04-13 23:45 . 2012-04-13 23:45 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\d9a8c2b82b4370a5b0f537a65d867f49\ehshell.ni.dll
+ 2012-04-12 15:50 . 2012-04-12 15:50 12433408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll
+ 2012-04-12 15:52 . 2012-04-12 15:52 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\507b4ca18da9d2fde2e51a1f04593443\System.Web.ni.dll
+ 2012-04-12 15:53 . 2012-04-12 15:53 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\846a51eb446bee41a26a6914a95e38cd\System.Design.ni.dll
+ 2012-04-12 15:51 . 2012-04-12 15:51 14339072 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\43e23da6683962ea1168aaf007bbc35d\PresentationFramework.ni.dll
+ 2012-04-12 15:50 . 2012-04-12 15:50 12234752 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\74d980e52c1791f1b8608d767a393144\PresentationCore.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-02-01 336384]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"OfficeScanNT Monitor"="c:\program files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe" [2012-01-19 1378784]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
d:\users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - d:\users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-4-12 26950560]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Dell System Manager.lnk - c:\program files\Dell\Dell System Manager\DCPSysMgr.exe [2011-1-20 1552240]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 O2SDIOAssist;O2SDIOAssist;c:\windows\SysWOW64\srvany.exe [2003-04-18 8192]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-15 158856]
R2 TmFilter;Trend Micro Filter;c:\program files (x86)\Trend Micro\OfficeScan Client\TmXPFlt.sys [2011-07-12 342288]
R2 TmPreFilter;Trend Micro PreFilter;c:\program files (x86)\Trend Micro\OfficeScan Client\TmPreFlt.sys [2011-07-12 42768]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 253600]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]
R3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [x]
R3 TmProxy;OfficeScan NT Proxy Service;c:\program files (x86)\Trend Micro\OfficeScan Client\TmProxy.exe [2011-04-15 918032]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 NCFilter;Novell UNC Filter - Filter;c:\windows\system32\DRIVERS\NCFilter.sys [x]
S0 NCRecognizer;Novell UNC Filter - Recognizer;c:\windows\system32\DRIVERS\NCRecognizer.sys [x]
S0 NCUncFilter;Novell UNC Filter - UNC Filter;c:\windows\system32\DRIVERS\NCUncFilter.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-02 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 dcpsysmgrsvc;Dell System Manager Service;c:\program files\Dell\Dell System Manager\DCPSysMgrSvc.exe [2011-01-20 517488]
S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [2010-11-07 499200]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 NCFSD;Novell Client File System Redirector;c:\program files\Novell\Client\XTier\Drivers\ncfsd.sys [2011-04-02 104536]
S2 NCIOCTL;Novell Xplat IoCtl Driver;c:\program files\Novell\Client\XTier\Drivers\ncioctl.sys [2011-04-02 89688]
S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 2358656]
S2 vpnagent;Cisco AnyConnect VPN Agent;c:\program files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe [2011-08-03 645048]
S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [2010-11-07 869376]
S2 XTSvcMgr;Novell XTier Service Manager;c:\program files\Novell\Client\XTier\Services\XTSvcMgr.exe [2011-04-02 19544]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
S3 bpenum;Intel® Centrino® WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys [x]
S3 bpmp;Intel® Centrino® WiMAX 6050 Series;c:\windows\system32\DRIVERS\bpmp.sys [x]
S3 bpusb;Intel® Centrino® WiMAX 6050 Series Function Driver;c:\windows\system32\Drivers\bpusb.sys [x]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 cvusbdrv;Dell ControlVault;c:\windows\system32\Drivers\cvusbdrv.sys [x]
S3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c62x64.sys [x]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys [x]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 O2MDRRDR;O2MDRRDR;c:\windows\system32\DRIVERS\O2MDRw7x64.sys [x]
S3 O2SDJRDR;O2SDJRDR;c:\windows\system32\DRIVERS\o2sdjw7x64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - nciom
*Deregistered* - ncp
*Deregistered* - ncpl
*Deregistered* - ndm
*Deregistered* - ndmndap
*Deregistered* - ndslpp
*Deregistered* - niam
*Deregistered* - nipctl
*Deregistered* - nscm
*Deregistered* - nsns
*Deregistered* - nsvccost
*Deregistered* - xtxplat
.
Contents of the 'Scheduled Tasks' folder
.
2012-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 13:09]
.
2012-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1213181057-3195632568-401352705-1001Core.job
- d:\users\Student\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-25 06:15]
.
2012-04-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1213181057-3195632568-401352705-1001UA.job
- d:\users\Student\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-25 06:15]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- d:\users\Student\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-01-04 592240]
"NWTRAY"="NWTRAY.EXE" [2011-04-02 43608]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2011-03-17 313448]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-12-07 525312]
"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2010-11-14 1605632]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 130.127.255.250 130.127.255.251
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-04-17 15:20:01
ComboFix-quarantined-files.txt 2012-04-17 19:20
ComboFix2.txt 2012-04-05 18:17
ComboFix3.txt 2012-04-05 04:17
.
Pre-Run: 45,281,349,632 bytes free
Post-Run: 45,084,913,664 bytes free
.
- - End Of File - - 70CECAC9278E5392C05540DBD80E5F25



Results of screen317's Security Check version 0.99.32
Windows 7 x64 (UAC is enabled)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Enabled!
ESET Online Scanner v3
Trend Micro OfficeScan Client
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:

Java™ 6 Update 31
Adobe Flash Player 10.0.12.36 Flash Player out of Date!
Adobe Reader X (10.1.3)
````````````````````````````````
Process Check:
objlist.exe by Laurent

Malwarebytes' Anti-Malware mbamservice.exe
Malwarebytes' Anti-Malware mbamgui.exe
Trend Micro OfficeScan Client pccntmon.exe
Trend Micro OfficeScan Client ntrtscan.exe
Trend Micro OfficeScan Client tmlisten.exe
Trend Micro OfficeScan Client CNTAoSMgr.exe
Trend Micro OfficeScan Client TmProxy.exe
``````````End of Log````````````

#5 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 18 April 2012 - 07:46 AM

Nothing suspicious was found on the ComboFix log.


I have however seen -'s and |'s against a command line type background every-time i boot the computer

Could these gremlins be coming from your Boot.ini file?

Locate the file in your C:\ driver open it with Notepad. Copy and post the content in your next reply.

If you have a Autoexec.bat file at the same location open it also and post the contents.

Do you have any other issues with this computer?

#6 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 18 April 2012 - 08:49 PM

I could not find a boot.ini file in the C:/ partition, or searching the whole pc with all hidden files visible. Otherwise there are not really any issues, I could eventually try re-installing firefox and make sure i don't get redirceted anymore.

#7 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 19 April 2012 - 09:33 AM

Otherwise there are not really any issues, I could eventually try re-installing firefox and make sure i don't get redirceted anymore.


Are you still getting some redirection on occasion?

#8 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 19 April 2012 - 09:56 AM

Not since I followed the other thread and also took off firefox and started only using google chrome

#9 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 19 April 2012 - 01:22 PM

Time for some housekeeping

The following will implement some cleanup procedures as well as reset System Restore points:

Click Start > Run and copy/paste the following bold text into the Run box and click OK:

ComboFix /Uninstall
===

Delete the other tools we used.

#10 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 20 April 2012 - 11:20 AM

hey so i did what you said uninstalling the combofix and the other program and now my laptop battery won't charge. all last night I sat at like 7% and said plugged in not charging, then now today it says charging but went up 1% in an hour.

#11 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 20 April 2012 - 01:19 PM

ComboFix does not go near the power supply.

Remove the power, let the battery die completely. Then connect the power.

#12 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 20 April 2012 - 09:30 PM

I agree with you that I do not think it was the removal of combo fix. I let the battery die and left it plugged in over night. The battery is at zero percent and the laptop turns off it unplugged from the wall. I believe I also saw a dell message which said it could not communicate with the battery. So I believe I have an unrelated hardware failure, do you agree with this conclusion?

Edited by gunsling, 20 April 2012 - 09:30 PM.


#13 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 20 April 2012 - 10:00 PM

I did find this on the desktop in a notepad


#
# A fatal error has been detected by the Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x09fd0b10, pid=5196, tid=1848
#
# JRE version: 6.0_31-b05
# Java VM: Java HotSpot™ Client VM (20.6-b01 mixed mode, sharing windows-x86 )
# Problematic frame:
# C [FbJNI.dll+0x50b10]
#
# If you would like to submit a bug report, please visit:
# http://java.sun.com/webapps/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0x02609000): VMThread [stack: 0x024c0000,0x02510000] [id=1848]

siginfo: ExceptionCode=0xc0000005, reading address 0x00000004

Registers:
EAX=0x72e4f910, EBX=0x72d32bd9, ECX=0x72e4f910, EDX=0x72e054d0
ESP=0x0250fa5c, EBP=0x0250fa88, ESI=0x0a51bb5c, EDI=0x00000000
EIP=0x09fd0b10, EFLAGS=0x00010216

Top of Stack: (sp=0x0250fa5c)
0x0250fa5c: 09fd0c1f 0a67b49c 09f7a4bc 09fd090e
0x0250fa6c: 09fc6f78 0a67b49c 09f7a4bc 72d32bd9
0x0250fa7c: f79f4725 09f79848 72d32c3d 09f79848
0x0250fa8c: 0a39cbea 09fd0900 0a30683b 00000001
0x0250fa9c: 00000000 09f80000 0250fae8 0a30692e
0x0250faac: 09f80000 2fed3466 00000001 ce8e05a1
0x0250fabc: 00000001 0250fb04 00699a70 c0000005
0x0250facc: 00000001 0250fab8 0250f49c 0250fba4

Instructions: (pc=0x09fd0b10)
0x09fd0af0: a3 5c 99 67 0a e8 76 00 00 00 8b 4c 24 0c 64 89
0x09fd0b00: 0d 00 00 00 00 59 5b 83 c4 10 c3 cc cc cc cc cc
0x09fd0b10: 83 7f 04 00 53 8b 1d 64 99 67 0a 0f 95 c0 56 be
0x09fd0b20: 68 cf 57 0a b9 10 d5 57 0a 50 b8 19 00 00 00 e8


Register to memory mapping:

EAX=
[error occurred during error reporting (printing register info), id 0xc0000005]

Stack: [0x024c0000,0x02510000], sp=0x0250fa5c, free space=318k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [FbJNI.dll+0x50b10] Java_Fb_FbWidget3DImpl_GetAppletTypeNative+0x22a40

VM_Operation (0x002af890): Exit, mode: safepoint, requested by thread 0x025ab800


--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x0541d800 JavaThread "Thread-12" [_thread_blocked, id=6568, stack(0x07c60000,0x07cb0000)]
0x0541d000 JavaThread "TimerQueue" daemon [_thread_blocked, id=6712, stack(0x07bd0000,0x07c20000)]
0x0541bc00 JavaThread "AWT-EventQueue-2" [_thread_blocked, id=6368, stack(0x07b40000,0x07b90000)]
0x0541b800 JavaThread "JVM[id=0]-Heartbeat" daemon [_thread_blocked, id=4816, stack(0x07ab0000,0x07b00000)]
0x0541ac00 JavaThread "Applet 15 LiveConnect Worker Thread" [_thread_blocked, id=6352, stack(0x074f0000,0x07540000)]
0x0541a400 JavaThread "Browser Side Object Cleanup Thread" [_thread_blocked, id=7004, stack(0x07920000,0x07970000)]
0x05419800 JavaThread "Windows Tray Icon Thread" [_thread_in_native, id=6268, stack(0x077c0000,0x07810000)]
0x05419000 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=6228, stack(0x07730000,0x07780000)]
0x053f3000 JavaThread "CacheMemoryCleanUpThread" daemon [_thread_blocked, id=6224, stack(0x076a0000,0x076f0000)]
0x05389000 JavaThread "SysExecutionTheadCreator" daemon [_thread_blocked, id=6192, stack(0x06ff0000,0x07040000)]
0x053e6400 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=6184, stack(0x07580000,0x075d0000)]
0x053e0800 JavaThread "AWT-Shutdown" [_thread_blocked, id=6024, stack(0x07360000,0x073b0000)]
0x053e0000 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=7160, stack(0x072d0000,0x07320000)]
0x053dac00 JavaThread "Java Plug-In Pipe Worker Thread (Client-Side)" daemon [_thread_in_native, id=6788, stack(0x07140000,0x07190000)]
0x053d0800 JavaThread "Timer-0" [_thread_blocked, id=7152, stack(0x06f60000,0x06fb0000)]
0x0538d800 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=2308, stack(0x05260000,0x052b0000)]
0x0265b800 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=6888, stack(0x05140000,0x05190000)]
0x02654000 JavaThread "C1 CompilerThread0" daemon [_thread_blocked, id=6912, stack(0x050b0000,0x05100000)]
0x02653000 JavaThread "Attach Listener" daemon [_thread_blocked, id=6900, stack(0x05020000,0x05070000)]
0x02650000 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=6896, stack(0x04f70000,0x04fc0000)]
0x02647400 JavaThread "Finalizer" daemon [_thread_blocked, id=6720, stack(0x04c80000,0x04cd0000)]
0x02645c00 JavaThread "Reference Handler" daemon [_thread_blocked, id=6768, stack(0x04ac0000,0x04b10000)]
0x025ab800 JavaThread "main" [_thread_blocked, id=6464, stack(0x00260000,0x002b0000)]

Other Threads:
=>0x02609000 VMThread [stack: 0x024c0000,0x02510000] [id=1848]

VM state:at safepoint (shutting down)

VM Mutex/Monitor currently owned by a thread: ([mutex/lock_event])
[0x025a9330] Threads_lock - owner thread: 0x02609000

Heap
def new generation total 5056K, used 118K [0x244a0000, 0x24a10000, 0x299f0000)
eden space 4544K, 2% used [0x244a0000, 0x244bd958, 0x24910000)
from space 512K, 0% used [0x24990000, 0x24990000, 0x24a10000)
to space 512K, 0% used [0x24910000, 0x24910000, 0x24990000)
tenured generation total 10944K, used 3367K [0x299f0000, 0x2a4a0000, 0x344a0000)
the space 10944K, 30% used [0x299f0000, 0x29d39f00, 0x29d3a000, 0x2a4a0000)
compacting perm gen total 12288K, used 4383K [0x344a0000, 0x350a0000, 0x384a0000)
the space 12288K, 35% used [0x344a0000, 0x348e7c68, 0x348e7e00, 0x350a0000)
ro space 10240K, 51% used [0x384a0000, 0x389ce318, 0x389ce400, 0x38ea0000)
rw space 12288K, 55% used [0x38ea0000, 0x3953a088, 0x3953a200, 0x39aa0000)

Code Cache [0x02890000, 0x029f0000, 0x04890000)
total_blobs=795 nmethods=583 adapters=148 free_code_cache=32133760 largest_free_block=0

Dynamic libraries:
0x00400000 - 0x00425000 C:\Program Files (x86)\Java\jre6\bin\java.exe
0x77570000 - 0x776f0000 C:\Windows\SysWOW64\ntdll.dll
0x75ec0000 - 0x75fd0000 C:\Windows\syswow64\kernel32.dll
0x76490000 - 0x764d6000 C:\Windows\syswow64\KERNELBASE.dll
0x74fd0000 - 0x75070000 C:\Windows\syswow64\ADVAPI32.dll
0x765c0000 - 0x7666c000 C:\Windows\syswow64\msvcrt.dll
0x76440000 - 0x76459000 C:\Windows\SysWOW64\sechost.dll
0x761a0000 - 0x76290000 C:\Windows\syswow64\RPCRT4.dll
0x74c50000 - 0x74cb0000 C:\Windows\syswow64\SspiCli.dll
0x74c40000 - 0x74c4c000 C:\Windows\syswow64\CRYPTBASE.dll
0x72290000 - 0x722dc000 C:\Windows\system32\apphelp.dll
0x74950000 - 0x749dd000 C:\Windows\AppPatch\AcLayers.DLL
0x74e60000 - 0x74f60000 C:\Windows\syswow64\USER32.dll
0x75070000 - 0x75100000 C:\Windows\syswow64\GDI32.dll
0x74f60000 - 0x74f6a000 C:\Windows\syswow64\LPK.dll
0x76760000 - 0x767fd000 C:\Windows\syswow64\USP10.dll
0x75100000 - 0x75d4a000 C:\Windows\syswow64\SHELL32.dll
0x76990000 - 0x769e7000 C:\Windows\syswow64\SHLWAPI.dll
0x76830000 - 0x7698c000 C:\Windows\syswow64\ole32.dll
0x76670000 - 0x766ff000 C:\Windows\syswow64\OLEAUT32.dll
0x72890000 - 0x728a7000 C:\Windows\system32\USERENV.dll
0x74400000 - 0x7440b000 C:\Windows\system32\profapi.dll
0x721a0000 - 0x721f1000 C:\Windows\system32\WINSPOOL.DRV
0x72070000 - 0x72082000 C:\Windows\system32\MPR.dll
0x75dd0000 - 0x75e30000 C:\Windows\system32\IMM32.DLL
0x764e0000 - 0x765ac000 C:\Windows\syswow64\MSCTF.dll
0x7c340000 - 0x7c396000 C:\Program Files (x86)\Java\jre6\bin\msvcr71.dll
0x6d7f0000 - 0x6da9f000 C:\Program Files (x86)\Java\jre6\bin\client\jvm.dll
0x72b70000 - 0x72ba2000 C:\Windows\system32\WINMM.dll
0x6d7a0000 - 0x6d7ac000 C:\Program Files (x86)\Java\jre6\bin\verify.dll
0x6d320000 - 0x6d33f000 C:\Program Files (x86)\Java\jre6\bin\java.dll
0x6d000000 - 0x6d14c000 C:\Program Files (x86)\Java\jre6\bin\awt.dll
0x71c50000 - 0x71dee000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll
0x71f10000 - 0x71f90000 C:\Windows\system32\uxtheme.dll
0x6d7e0000 - 0x6d7ef000 C:\Program Files (x86)\Java\jre6\bin\zip.dll
0x73be0000 - 0x73da3000 C:\Windows\system32\d3d9.dll
0x72d10000 - 0x72d19000 C:\Windows\system32\VERSION.dll
0x74940000 - 0x74946000 C:\Windows\system32\d3d8thk.dll
0x72030000 - 0x72043000 C:\Windows\system32\dwmapi.dll
0x72f30000 - 0x72fbb000 C:\Windows\system32\aticfx32.dll
0x74930000 - 0x7493a000 C:\Windows\system32\atiu9pag.dll
0x6d420000 - 0x6d426000 C:\Program Files (x86)\Java\jre6\bin\jp2native.dll
0x6d1d0000 - 0x6d1e3000 C:\Program Files (x86)\Java\jre6\bin\deploy.dll
0x76320000 - 0x7643d000 C:\Windows\syswow64\CRYPT32.dll
0x765b0000 - 0x765bc000 C:\Windows\syswow64\MSASN1.dll
0x76b40000 - 0x76c5b000 C:\Windows\syswow64\WININET.dll
0x74e50000 - 0x74e53000 C:\Windows\syswow64\Normaliz.dll
0x75fd0000 - 0x76188000 C:\Windows\syswow64\iertutil.dll
0x769f0000 - 0x76b01000 C:\Windows\syswow64\urlmon.dll
0x6d6a0000 - 0x6d6e6000 C:\Program Files (x86)\Java\jre6\bin\regutils.dll
0x6d600000 - 0x6d613000 C:\Program Files (x86)\Java\jre6\bin\net.dll
0x76720000 - 0x76755000 C:\Windows\syswow64\WS2_32.dll
0x76190000 - 0x76196000 C:\Windows\syswow64\NSI.dll
0x74420000 - 0x7445c000 C:\Windows\system32\mswsock.dll
0x72320000 - 0x72326000 C:\Windows\System32\wship6.dll
0x6d620000 - 0x6d629000 C:\Program Files (x86)\Java\jre6\bin\nio.dll
0x72020000 - 0x72028000 C:\Windows\system32\Secur32.dll
0x6d230000 - 0x6d27f000 C:\Program Files (x86)\Java\jre6\bin\fontmanager.dll
0x71a70000 - 0x71ab4000 C:\Windows\system32\dnsapi.DLL
0x72900000 - 0x7291c000 C:\Windows\system32\iphlpapi.DLL
0x728f0000 - 0x728f7000 C:\Windows\system32\WINNSI.DLL
0x74410000 - 0x74415000 C:\Windows\System32\wshtcpip.dll
0x71a20000 - 0x71a41000 C:\Program Files (x86)\Bonjour\mdnsNSP.dll
0x71a10000 - 0x71a16000 C:\Windows\system32\rasadhlp.dll
0x722e0000 - 0x72318000 C:\Windows\System32\fwpuclnt.dll
0x6d780000 - 0x6d788000 C:\Program Files (x86)\Java\jre6\bin\sunmscapi.dll
0x6d350000 - 0x6d356000 C:\Program Files (x86)\Java\jre6\bin\jawt.dll
0x10000000 - 0x10092000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\libiomp5md.dll
0x6ae80000 - 0x6ae9c000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avutil-50.dll
0x086c0000 - 0x08f53000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avcodec-52.dll
0x64940000 - 0x649e6000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avformat-52.dll
0x6f800000 - 0x6f809000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avdevice-52.dll
0x73e80000 - 0x73e93000 C:\Windows\system32\AVICAP32.DLL
0x74900000 - 0x74921000 C:\Windows\system32\MSVFW32.dll
0x080b0000 - 0x08107000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\swscale-0.dll
0x09690000 - 0x09def000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbIppLib.dll
0x72d30000 - 0x72dcb000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll
0x08110000 - 0x0824c000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbMklLib.dll
0x09f80000 - 0x0a6d2000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbJNI.dll
0x737a0000 - 0x73868000 C:\Windows\system32\OPENGL32.dll
0x73e50000 - 0x73e72000 C:\Windows\system32\GLU32.dll
0x67970000 - 0x67a57000 C:\Windows\system32\DDRAW.dll
0x6b650000 - 0x6b656000 C:\Windows\system32\DCIMAN32.dll
0x74cb0000 - 0x74e4d000 C:\Windows\syswow64\SETUPAPI.dll
0x76460000 - 0x76487000 C:\Windows\syswow64\CFGMGR32.dll
0x76700000 - 0x76712000 C:\Windows\syswow64\DEVOBJ.dll
0x75d50000 - 0x75dcb000 C:\Windows\syswow64\comdlg32.dll
0x72dd0000 - 0x72e57000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCP80.dll
0x76290000 - 0x76313000 C:\Windows\syswow64\CLBCatQ.DLL
0x73df0000 - 0x73e04000 C:\Windows\SysWOW64\devenum.dll
0x72830000 - 0x72851000 C:\Windows\system32\ntmarta.dll
0x76c60000 - 0x76ca5000 C:\Windows\syswow64\WLDAP32.dll
0x76800000 - 0x7682d000 C:\Windows\syswow64\WINTRUST.dll
0x73ec0000 - 0x73ecb000 C:\Windows\system32\msdmo.dll
0x73760000 - 0x73792000 C:\Windows\SysWOW64\qcap.dll
0x73010000 - 0x73187000 C:\Windows\SysWOW64\quartz.dll
0x73720000 - 0x73753000 C:\Windows\SysWOW64\ksproxy.ax
0x73de0000 - 0x73de4000 C:\Windows\SysWOW64\ksuser.dll
0x73dd0000 - 0x73dd9000 C:\Windows\SysWOW64\vidcap.ax
0x73700000 - 0x7371d000 C:\Windows\SysWOW64\kswdmcap.ax
0x70440000 - 0x7055c000 C:\Windows\SysWOW64\MFC42.dll
0x73670000 - 0x736fc000 C:\Windows\SysWOW64\ODBC32.dll
0x735a0000 - 0x735d8000 C:\Windows\SysWOW64\odbcint.dll
0x70af0000 - 0x70b70000 C:\Windows\SysWOW64\qedit.dll
0x74060000 - 0x741f0000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
0x73660000 - 0x73667000 C:\Windows\system32\atiglpxx.dll
0x69030000 - 0x6a083000 C:\Windows\system32\atioglxx.dll
0x73650000 - 0x7365a000 C:\Windows\system32\atigktxx.dll
0x0c830000 - 0x0c86d000 C:\Windows\system32\atiadlxy.dll
0x72880000 - 0x7288d000 C:\Windows\system32\WTSAPI32.dll
0x77540000 - 0x77545000 C:\Windows\syswow64\PSAPI.DLL
0x74460000 - 0x7454b000 C:\Windows\system32\dbghelp.dll

VM Arguments:
jvm_args: -D__jvm_launched=6271276547 -Xbootclasspath/a:C:\\PROGRA~2\\Java\\jre6\\lib\\deploy.jar;C:\\PROGRA~2\\Java\\jre6\\lib\\javaws.jar;C:\\PROGRA~2\\Java\\jre6\\lib\\plugin.jar -Dsun.awt.warmup=true -Dsun.plugin2.jvm.args=-D__jvm_launched=6271276547 "-Xbootclasspath/a:C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\deploy.jar;C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\javaws.jar;C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\plugin.jar" "-Djava.class.path=C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\classes" -Dsun.awt.warmup=true --- --
java_command: sun.plugin2.main.client.PluginMain write_pipe_name=jpi2_pid3568_pipe42,read_pipe_name=jpi2_pid3568_pipe41
Launcher Type: SUN_STANDARD

Environment Variables:
PATH=C:\Program Files (x86)\Internet Explorer;;C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\PharosSystems\Core;C:\Program Files\MATLAB\R2010b\runtime\win64;C:\Program Files\MATLAB\R2010b\bin;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared;C:\Program Files (x86)\Roxio\OEM\AudioCore;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files\Windows Imaging\;C:\Program Files (x86)\SSH Communications Security\SSH Secure Shell
USERNAME=Student
OS=Windows_NT
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel



--------------- S Y S T E M ---------------

OS: Windows 7 , 64 bit Build 7601 Service Pack 1

CPU:total 8 (4 cores per cpu, 2 threads per core) family 6 model 42 stepping 7, cmov, cx8, fxsr, mmx, sse, sse2, sse3, ssse3, sse4.1, sse4.2, popcnt, ht

Memory: 4k page, physical 4150168k(2065168k free), swap 8298484k(5675476k free)

vm_info: Java HotSpot™ Client VM (20.6-b01) for windows-x86 JRE (1.6.0_31-b05), built on Feb 3 2012 18:44:09 by "java_re" with MS VC++ 7.1 (VS2003)

time: Sun Apr 15 21:42:42 2012
elapsed time: 126 seconds

#14 gunsling

gunsling
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:02:56 PM

Posted 20 April 2012 - 10:00 PM

I did find this on the desktop in a notepad


#
# A fatal error has been detected by the Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x09fd0b10, pid=5196, tid=1848
#
# JRE version: 6.0_31-b05
# Java VM: Java HotSpot™ Client VM (20.6-b01 mixed mode, sharing windows-x86 )
# Problematic frame:
# C [FbJNI.dll+0x50b10]
#
# If you would like to submit a bug report, please visit:
# http://java.sun.com/webapps/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0x02609000): VMThread [stack: 0x024c0000,0x02510000] [id=1848]

siginfo: ExceptionCode=0xc0000005, reading address 0x00000004

Registers:
EAX=0x72e4f910, EBX=0x72d32bd9, ECX=0x72e4f910, EDX=0x72e054d0
ESP=0x0250fa5c, EBP=0x0250fa88, ESI=0x0a51bb5c, EDI=0x00000000
EIP=0x09fd0b10, EFLAGS=0x00010216

Top of Stack: (sp=0x0250fa5c)
0x0250fa5c: 09fd0c1f 0a67b49c 09f7a4bc 09fd090e
0x0250fa6c: 09fc6f78 0a67b49c 09f7a4bc 72d32bd9
0x0250fa7c: f79f4725 09f79848 72d32c3d 09f79848
0x0250fa8c: 0a39cbea 09fd0900 0a30683b 00000001
0x0250fa9c: 00000000 09f80000 0250fae8 0a30692e
0x0250faac: 09f80000 2fed3466 00000001 ce8e05a1
0x0250fabc: 00000001 0250fb04 00699a70 c0000005
0x0250facc: 00000001 0250fab8 0250f49c 0250fba4

Instructions: (pc=0x09fd0b10)
0x09fd0af0: a3 5c 99 67 0a e8 76 00 00 00 8b 4c 24 0c 64 89
0x09fd0b00: 0d 00 00 00 00 59 5b 83 c4 10 c3 cc cc cc cc cc
0x09fd0b10: 83 7f 04 00 53 8b 1d 64 99 67 0a 0f 95 c0 56 be
0x09fd0b20: 68 cf 57 0a b9 10 d5 57 0a 50 b8 19 00 00 00 e8


Register to memory mapping:

EAX=
[error occurred during error reporting (printing register info), id 0xc0000005]

Stack: [0x024c0000,0x02510000], sp=0x0250fa5c, free space=318k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C [FbJNI.dll+0x50b10] Java_Fb_FbWidget3DImpl_GetAppletTypeNative+0x22a40

VM_Operation (0x002af890): Exit, mode: safepoint, requested by thread 0x025ab800


--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x0541d800 JavaThread "Thread-12" [_thread_blocked, id=6568, stack(0x07c60000,0x07cb0000)]
0x0541d000 JavaThread "TimerQueue" daemon [_thread_blocked, id=6712, stack(0x07bd0000,0x07c20000)]
0x0541bc00 JavaThread "AWT-EventQueue-2" [_thread_blocked, id=6368, stack(0x07b40000,0x07b90000)]
0x0541b800 JavaThread "JVM[id=0]-Heartbeat" daemon [_thread_blocked, id=4816, stack(0x07ab0000,0x07b00000)]
0x0541ac00 JavaThread "Applet 15 LiveConnect Worker Thread" [_thread_blocked, id=6352, stack(0x074f0000,0x07540000)]
0x0541a400 JavaThread "Browser Side Object Cleanup Thread" [_thread_blocked, id=7004, stack(0x07920000,0x07970000)]
0x05419800 JavaThread "Windows Tray Icon Thread" [_thread_in_native, id=6268, stack(0x077c0000,0x07810000)]
0x05419000 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=6228, stack(0x07730000,0x07780000)]
0x053f3000 JavaThread "CacheMemoryCleanUpThread" daemon [_thread_blocked, id=6224, stack(0x076a0000,0x076f0000)]
0x05389000 JavaThread "SysExecutionTheadCreator" daemon [_thread_blocked, id=6192, stack(0x06ff0000,0x07040000)]
0x053e6400 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=6184, stack(0x07580000,0x075d0000)]
0x053e0800 JavaThread "AWT-Shutdown" [_thread_blocked, id=6024, stack(0x07360000,0x073b0000)]
0x053e0000 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=7160, stack(0x072d0000,0x07320000)]
0x053dac00 JavaThread "Java Plug-In Pipe Worker Thread (Client-Side)" daemon [_thread_in_native, id=6788, stack(0x07140000,0x07190000)]
0x053d0800 JavaThread "Timer-0" [_thread_blocked, id=7152, stack(0x06f60000,0x06fb0000)]
0x0538d800 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=2308, stack(0x05260000,0x052b0000)]
0x0265b800 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=6888, stack(0x05140000,0x05190000)]
0x02654000 JavaThread "C1 CompilerThread0" daemon [_thread_blocked, id=6912, stack(0x050b0000,0x05100000)]
0x02653000 JavaThread "Attach Listener" daemon [_thread_blocked, id=6900, stack(0x05020000,0x05070000)]
0x02650000 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=6896, stack(0x04f70000,0x04fc0000)]
0x02647400 JavaThread "Finalizer" daemon [_thread_blocked, id=6720, stack(0x04c80000,0x04cd0000)]
0x02645c00 JavaThread "Reference Handler" daemon [_thread_blocked, id=6768, stack(0x04ac0000,0x04b10000)]
0x025ab800 JavaThread "main" [_thread_blocked, id=6464, stack(0x00260000,0x002b0000)]

Other Threads:
=>0x02609000 VMThread [stack: 0x024c0000,0x02510000] [id=1848]

VM state:at safepoint (shutting down)

VM Mutex/Monitor currently owned by a thread: ([mutex/lock_event])
[0x025a9330] Threads_lock - owner thread: 0x02609000

Heap
def new generation total 5056K, used 118K [0x244a0000, 0x24a10000, 0x299f0000)
eden space 4544K, 2% used [0x244a0000, 0x244bd958, 0x24910000)
from space 512K, 0% used [0x24990000, 0x24990000, 0x24a10000)
to space 512K, 0% used [0x24910000, 0x24910000, 0x24990000)
tenured generation total 10944K, used 3367K [0x299f0000, 0x2a4a0000, 0x344a0000)
the space 10944K, 30% used [0x299f0000, 0x29d39f00, 0x29d3a000, 0x2a4a0000)
compacting perm gen total 12288K, used 4383K [0x344a0000, 0x350a0000, 0x384a0000)
the space 12288K, 35% used [0x344a0000, 0x348e7c68, 0x348e7e00, 0x350a0000)
ro space 10240K, 51% used [0x384a0000, 0x389ce318, 0x389ce400, 0x38ea0000)
rw space 12288K, 55% used [0x38ea0000, 0x3953a088, 0x3953a200, 0x39aa0000)

Code Cache [0x02890000, 0x029f0000, 0x04890000)
total_blobs=795 nmethods=583 adapters=148 free_code_cache=32133760 largest_free_block=0

Dynamic libraries:
0x00400000 - 0x00425000 C:\Program Files (x86)\Java\jre6\bin\java.exe
0x77570000 - 0x776f0000 C:\Windows\SysWOW64\ntdll.dll
0x75ec0000 - 0x75fd0000 C:\Windows\syswow64\kernel32.dll
0x76490000 - 0x764d6000 C:\Windows\syswow64\KERNELBASE.dll
0x74fd0000 - 0x75070000 C:\Windows\syswow64\ADVAPI32.dll
0x765c0000 - 0x7666c000 C:\Windows\syswow64\msvcrt.dll
0x76440000 - 0x76459000 C:\Windows\SysWOW64\sechost.dll
0x761a0000 - 0x76290000 C:\Windows\syswow64\RPCRT4.dll
0x74c50000 - 0x74cb0000 C:\Windows\syswow64\SspiCli.dll
0x74c40000 - 0x74c4c000 C:\Windows\syswow64\CRYPTBASE.dll
0x72290000 - 0x722dc000 C:\Windows\system32\apphelp.dll
0x74950000 - 0x749dd000 C:\Windows\AppPatch\AcLayers.DLL
0x74e60000 - 0x74f60000 C:\Windows\syswow64\USER32.dll
0x75070000 - 0x75100000 C:\Windows\syswow64\GDI32.dll
0x74f60000 - 0x74f6a000 C:\Windows\syswow64\LPK.dll
0x76760000 - 0x767fd000 C:\Windows\syswow64\USP10.dll
0x75100000 - 0x75d4a000 C:\Windows\syswow64\SHELL32.dll
0x76990000 - 0x769e7000 C:\Windows\syswow64\SHLWAPI.dll
0x76830000 - 0x7698c000 C:\Windows\syswow64\ole32.dll
0x76670000 - 0x766ff000 C:\Windows\syswow64\OLEAUT32.dll
0x72890000 - 0x728a7000 C:\Windows\system32\USERENV.dll
0x74400000 - 0x7440b000 C:\Windows\system32\profapi.dll
0x721a0000 - 0x721f1000 C:\Windows\system32\WINSPOOL.DRV
0x72070000 - 0x72082000 C:\Windows\system32\MPR.dll
0x75dd0000 - 0x75e30000 C:\Windows\system32\IMM32.DLL
0x764e0000 - 0x765ac000 C:\Windows\syswow64\MSCTF.dll
0x7c340000 - 0x7c396000 C:\Program Files (x86)\Java\jre6\bin\msvcr71.dll
0x6d7f0000 - 0x6da9f000 C:\Program Files (x86)\Java\jre6\bin\client\jvm.dll
0x72b70000 - 0x72ba2000 C:\Windows\system32\WINMM.dll
0x6d7a0000 - 0x6d7ac000 C:\Program Files (x86)\Java\jre6\bin\verify.dll
0x6d320000 - 0x6d33f000 C:\Program Files (x86)\Java\jre6\bin\java.dll
0x6d000000 - 0x6d14c000 C:\Program Files (x86)\Java\jre6\bin\awt.dll
0x71c50000 - 0x71dee000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll
0x71f10000 - 0x71f90000 C:\Windows\system32\uxtheme.dll
0x6d7e0000 - 0x6d7ef000 C:\Program Files (x86)\Java\jre6\bin\zip.dll
0x73be0000 - 0x73da3000 C:\Windows\system32\d3d9.dll
0x72d10000 - 0x72d19000 C:\Windows\system32\VERSION.dll
0x74940000 - 0x74946000 C:\Windows\system32\d3d8thk.dll
0x72030000 - 0x72043000 C:\Windows\system32\dwmapi.dll
0x72f30000 - 0x72fbb000 C:\Windows\system32\aticfx32.dll
0x74930000 - 0x7493a000 C:\Windows\system32\atiu9pag.dll
0x6d420000 - 0x6d426000 C:\Program Files (x86)\Java\jre6\bin\jp2native.dll
0x6d1d0000 - 0x6d1e3000 C:\Program Files (x86)\Java\jre6\bin\deploy.dll
0x76320000 - 0x7643d000 C:\Windows\syswow64\CRYPT32.dll
0x765b0000 - 0x765bc000 C:\Windows\syswow64\MSASN1.dll
0x76b40000 - 0x76c5b000 C:\Windows\syswow64\WININET.dll
0x74e50000 - 0x74e53000 C:\Windows\syswow64\Normaliz.dll
0x75fd0000 - 0x76188000 C:\Windows\syswow64\iertutil.dll
0x769f0000 - 0x76b01000 C:\Windows\syswow64\urlmon.dll
0x6d6a0000 - 0x6d6e6000 C:\Program Files (x86)\Java\jre6\bin\regutils.dll
0x6d600000 - 0x6d613000 C:\Program Files (x86)\Java\jre6\bin\net.dll
0x76720000 - 0x76755000 C:\Windows\syswow64\WS2_32.dll
0x76190000 - 0x76196000 C:\Windows\syswow64\NSI.dll
0x74420000 - 0x7445c000 C:\Windows\system32\mswsock.dll
0x72320000 - 0x72326000 C:\Windows\System32\wship6.dll
0x6d620000 - 0x6d629000 C:\Program Files (x86)\Java\jre6\bin\nio.dll
0x72020000 - 0x72028000 C:\Windows\system32\Secur32.dll
0x6d230000 - 0x6d27f000 C:\Program Files (x86)\Java\jre6\bin\fontmanager.dll
0x71a70000 - 0x71ab4000 C:\Windows\system32\dnsapi.DLL
0x72900000 - 0x7291c000 C:\Windows\system32\iphlpapi.DLL
0x728f0000 - 0x728f7000 C:\Windows\system32\WINNSI.DLL
0x74410000 - 0x74415000 C:\Windows\System32\wshtcpip.dll
0x71a20000 - 0x71a41000 C:\Program Files (x86)\Bonjour\mdnsNSP.dll
0x71a10000 - 0x71a16000 C:\Windows\system32\rasadhlp.dll
0x722e0000 - 0x72318000 C:\Windows\System32\fwpuclnt.dll
0x6d780000 - 0x6d788000 C:\Program Files (x86)\Java\jre6\bin\sunmscapi.dll
0x6d350000 - 0x6d356000 C:\Program Files (x86)\Java\jre6\bin\jawt.dll
0x10000000 - 0x10092000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\libiomp5md.dll
0x6ae80000 - 0x6ae9c000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avutil-50.dll
0x086c0000 - 0x08f53000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avcodec-52.dll
0x64940000 - 0x649e6000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avformat-52.dll
0x6f800000 - 0x6f809000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\avdevice-52.dll
0x73e80000 - 0x73e93000 C:\Windows\system32\AVICAP32.DLL
0x74900000 - 0x74921000 C:\Windows\system32\MSVFW32.dll
0x080b0000 - 0x08107000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\swscale-0.dll
0x09690000 - 0x09def000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbIppLib.dll
0x72d30000 - 0x72dcb000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCR80.dll
0x08110000 - 0x0824c000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbMklLib.dll
0x09f80000 - 0x0a6d2000 D:\Users\Student\AppData\Roaming\Fit3DLive\Browser\FbJNI.dll
0x737a0000 - 0x73868000 C:\Windows\system32\OPENGL32.dll
0x73e50000 - 0x73e72000 C:\Windows\system32\GLU32.dll
0x67970000 - 0x67a57000 C:\Windows\system32\DDRAW.dll
0x6b650000 - 0x6b656000 C:\Windows\system32\DCIMAN32.dll
0x74cb0000 - 0x74e4d000 C:\Windows\syswow64\SETUPAPI.dll
0x76460000 - 0x76487000 C:\Windows\syswow64\CFGMGR32.dll
0x76700000 - 0x76712000 C:\Windows\syswow64\DEVOBJ.dll
0x75d50000 - 0x75dcb000 C:\Windows\syswow64\comdlg32.dll
0x72dd0000 - 0x72e57000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\MSVCP80.dll
0x76290000 - 0x76313000 C:\Windows\syswow64\CLBCatQ.DLL
0x73df0000 - 0x73e04000 C:\Windows\SysWOW64\devenum.dll
0x72830000 - 0x72851000 C:\Windows\system32\ntmarta.dll
0x76c60000 - 0x76ca5000 C:\Windows\syswow64\WLDAP32.dll
0x76800000 - 0x7682d000 C:\Windows\syswow64\WINTRUST.dll
0x73ec0000 - 0x73ecb000 C:\Windows\system32\msdmo.dll
0x73760000 - 0x73792000 C:\Windows\SysWOW64\qcap.dll
0x73010000 - 0x73187000 C:\Windows\SysWOW64\quartz.dll
0x73720000 - 0x73753000 C:\Windows\SysWOW64\ksproxy.ax
0x73de0000 - 0x73de4000 C:\Windows\SysWOW64\ksuser.dll
0x73dd0000 - 0x73dd9000 C:\Windows\SysWOW64\vidcap.ax
0x73700000 - 0x7371d000 C:\Windows\SysWOW64\kswdmcap.ax
0x70440000 - 0x7055c000 C:\Windows\SysWOW64\MFC42.dll
0x73670000 - 0x736fc000 C:\Windows\SysWOW64\ODBC32.dll
0x735a0000 - 0x735d8000 C:\Windows\SysWOW64\odbcint.dll
0x70af0000 - 0x70b70000 C:\Windows\SysWOW64\qedit.dll
0x74060000 - 0x741f0000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
0x73660000 - 0x73667000 C:\Windows\system32\atiglpxx.dll
0x69030000 - 0x6a083000 C:\Windows\system32\atioglxx.dll
0x73650000 - 0x7365a000 C:\Windows\system32\atigktxx.dll
0x0c830000 - 0x0c86d000 C:\Windows\system32\atiadlxy.dll
0x72880000 - 0x7288d000 C:\Windows\system32\WTSAPI32.dll
0x77540000 - 0x77545000 C:\Windows\syswow64\PSAPI.DLL
0x74460000 - 0x7454b000 C:\Windows\system32\dbghelp.dll

VM Arguments:
jvm_args: -D__jvm_launched=6271276547 -Xbootclasspath/a:C:\\PROGRA~2\\Java\\jre6\\lib\\deploy.jar;C:\\PROGRA~2\\Java\\jre6\\lib\\javaws.jar;C:\\PROGRA~2\\Java\\jre6\\lib\\plugin.jar -Dsun.awt.warmup=true -Dsun.plugin2.jvm.args=-D__jvm_launched=6271276547 "-Xbootclasspath/a:C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\deploy.jar;C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\javaws.jar;C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\lib\\\\plugin.jar" "-Djava.class.path=C:\\\\PROGRA~2\\\\Java\\\\jre6\\\\classes" -Dsun.awt.warmup=true --- --
java_command: sun.plugin2.main.client.PluginMain write_pipe_name=jpi2_pid3568_pipe42,read_pipe_name=jpi2_pid3568_pipe41
Launcher Type: SUN_STANDARD

Environment Variables:
PATH=C:\Program Files (x86)\Internet Explorer;;C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\PharosSystems\Core;C:\Program Files\MATLAB\R2010b\runtime\win64;C:\Program Files\MATLAB\R2010b\bin;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\DLLShared;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared;C:\Program Files (x86)\Roxio\OEM\AudioCore;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files\Windows Imaging\;C:\Program Files (x86)\SSH Communications Security\SSH Secure Shell
USERNAME=Student
OS=Windows_NT
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel



--------------- S Y S T E M ---------------

OS: Windows 7 , 64 bit Build 7601 Service Pack 1

CPU:total 8 (4 cores per cpu, 2 threads per core) family 6 model 42 stepping 7, cmov, cx8, fxsr, mmx, sse, sse2, sse3, ssse3, sse4.1, sse4.2, popcnt, ht

Memory: 4k page, physical 4150168k(2065168k free), swap 8298484k(5675476k free)

vm_info: Java HotSpot™ Client VM (20.6-b01) for windows-x86 JRE (1.6.0_31-b05), built on Feb 3 2012 18:44:09 by "java_re" with MS VC++ 7.1 (VS2003)

time: Sun Apr 15 21:42:42 2012
elapsed time: 126 seconds

#15 nasdaq

nasdaq

  • Malware Response Team
  • 38,764 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:56 PM

Posted 21 April 2012 - 09:52 AM

Sure looks like some hardware problem.

Similar issue here.

http://www.tomshardware.com/forum/63686-35-dell-inspiron-1721-forum

Link found on the page. Test the Battery.
http://www.passmark.com/products/batmon.htm
===

I did find this on the desktop in a notepad


#
# A fatal error has been detected by the Java Runtime Environment:
#
Etc...

It may be a one time deal. If it happens again I suggest you submit the log to Sun Java as suggested.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users