Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Google Redirect Virus


  • This topic is locked This topic is locked
24 replies to this topic

#1 Beast469

Beast469

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 01 May 2012 - 11:50 AM

trying to fix computer infected with google redirect virus. I've tried everything I can think of, but virus is being stubborn.

things I've tried so far (in order):
Malwarebytes scan
Trend Micro Scan
rkill->fixncr->malwarebytes scan
combofix

while these steps have cleaned up other issues, the google redirect virus is still holding on.

DDS log

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by mjm at 12:26:09 on 2012-05-01
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.4030.2209 [GMT -4:00]
.
AV: Trend Micro Security Agent *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Security Agent *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\ngvpnmgr.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\DKabcoms.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Program Files (x86)\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe
C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\Micro Focus\NMServiceManager\NMServiceManager.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBPOSDBService.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBDBMgr10.exe
C:\Program Files (x86)\UltraVNC\WinVNC.exe
C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe
C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\agent.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\PrintIsolationHost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\UltraVNC\WinVNC.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe
C:\Program Files\Dell\Printer Software\ErrorApp\dkab1err.exe
C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe
C:\Program Files (x86)\Digital Line Detect\DLG.exe
C:\Program Files (x86)\KONICA MINOLTA\FTP Utility\KMFtp.exe
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmNotify.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Trend Micro\Security Agent\tmlisten.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: TmIEPlugInBHO Class: {1ca1377b-dc1d-4a52-9585-6e06050fac53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.6.1106\6.6.1045\TmIEPlg32.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
uRun: [DKab1err] C:\Program Files\Dell\Printer Software\ErrorApp\DKab1err.exe
mRun: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
mRun: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
mRun: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
mRun: [QuickBooksDB20] C:\PROGRA~2\Intuit\QUICKB~1\QBDBMgrN.exe -n QB_OPTIPLEX780-1_20 -qs -gd ALL -gk all -gp 4096 -gu all -ch 256M -c 128M -x tcpip(BroadcastListener=NO;port=55338) -ti 0 -ec simple -qi -qw -tl 120 -oe C:\PROGRA~3\Intuit\QUICKB~2\DBSTAR~1.LOG -y
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\DIGITA~1.LNK - C:\Program Files (x86)\Digital Line Detect\DLG.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\FTPUTI~1.LNK - C:\Program Files (x86)\KONICA MINOLTA\FTP Utility\KMFtp.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\QUICKB~1.LNK - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\TDMNOT~1.LNK - C:\Program Files (x86)\Wave Systems Corp\Trusted Drive Manager\TdmNotify.exe
mPolicies-explorer: NoWelcomeScreen = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
Trusted Zone: finsvcs.com
Trusted Zone: GeoLearning.com
Trusted Zone: imagedepositgateway.com\direct
Trusted Zone: intuit.com
Trusted Zone: Massmutual.com
Trusted Zone: Massmutualdesigns.com
Trusted Zone: OPTIPLEX780-1
Trusted Zone: winflexweb.com\www
DPF: {0D221D00-A6ED-477C-8A91-41F3B660A832} - hxxps://direct.imagedepositgateway.com/MerchantCaptureWebClient/Reserved.ReportViewerWebControl.axd?ReportSession=wee2dvy1zg0qjwaosnxfud3b&ControlID=f9df2f1cb96e4ad0961e7d6f35d3d909&Culture=1033&UICulture=1033&ReportStack=1&OpType=PrintCab
DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} - hxxp://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {A796D216-2DE1-4EA8-BABB-FE6E7C959098} - hxxp://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://massmutual.webex.com/client/T26L/webex/ieatgpc1.cab
TCP: DhcpNameServer = 10.10.10.2
TCP: Interfaces\{14E9B651-E278-4269-B1BD-CAE258AB3625} : DhcpNameServer = 10.10.10.2
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - C:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll
Handler: qbpos - {662E7FAE-5C17-491C-AD9D-98C1F66CC6A0} - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBPOSProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\System32\mscoree.dll
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.6.1106\6.6.1045\TmIEPlg32.dll
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Security Agent\UIFrameWork\ProToolbarIMRatingActiveX.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: TmIEPlugInBHO Class: {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.6.1106\6.6.1045\TmIEPlg32.dll
BHO-X64: Trend Micro NSC BHO - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO-X64: SmartSelect - No File
TB-X64: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
mRun-x64: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
mRun-x64: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
mRun-x64: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
mRun-x64: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
mRun-x64: [QuickBooksDB20] C:\PROGRA~2\Intuit\QUICKB~1\QBDBMgrN.exe -n QB_OPTIPLEX780-1_20 -qs -gd ALL -gk all -gp 4096 -gu all -ch 256M -c 128M -x tcpip(BroadcastListener=NO;port=55338) -ti 0 -ec simple -qi -qw -tl 120 -oe C:\PROGRA~3\Intuit\QUICKB~2\DBSTAR~1.LOG -y
Hosts: 94.63.147.16 www.google.com
Hosts: 94.63.147.17 www.bing.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\mjm.MRAINC\AppData\Roaming\Mozilla\Firefox\Profiles\80xrf379.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 Amsp;Trend Micro Solution Platform;C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2010-11-18 268504]
R2 dkab_device;dkab_device;C:\Windows\system32\DKabcoms.exe -service --> C:\Windows\system32\DKabcoms.exe -service [?]
R2 HsfXAudioService;HsfXAudioService;C:\Windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-11 13336]
R2 Intuit Entitlement Service v6.0;Intuit Entitlement Service v6.0;C:\Program Files (x86)\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe [2009-6-2 20480]
R2 NgVpnMgr;Aventail VPN Client;C:\Windows\system32\ngvpnmgr.exe --> C:\Windows\system32\ngvpnmgr.exe [?]
R2 NMServiceManager;NMServiceManager;C:\Program Files (x86)\Micro Focus\NMServiceManager\NMServiceManager.exe [2009-11-25 603648]
R2 QBPOSDBServiceV10;QBPOS Database Manager v10;C:\Program Files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBPOSDBService.exe [2012-3-22 3136376]
R2 tmevtmgr;tmevtmgr;C:\Windows\system32\DRIVERS\tmevtmgr.sys --> C:\Windows\system32\DRIVERS\tmevtmgr.sys [?]
R2 uvnc_service;uvnc_service;C:\Program Files (x86)\UltraVNC\winvnc.exe [2010-11-18 1830856]
R2 Windows Agent Maintenance Service;Windows Agent Maintenance Service;C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe [2010-9-13 28672]
R2 Windows Agent Service;Windows Agent Service;C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\agent.exe [2010-9-13 192512]
R3 CAXHWBS2;CAXHWBS2;C:\Windows\system32\DRIVERS\CAXHWBS2.sys --> C:\Windows\system32\DRIVERS\CAXHWBS2.sys [?]
R3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;C:\Windows\system32\DRIVERS\e1k62x64.sys --> C:\Windows\system32\DRIVERS\e1k62x64.sys [?]
R3 NgLog;Aventail VPN Logging;C:\Windows\system32\DRIVERS\nglog.sys --> C:\Windows\system32\DRIVERS\nglog.sys [?]
R3 NgVpn;Aventail VPN Adapter;C:\Windows\system32\DRIVERS\ngvpn.sys --> C:\Windows\system32\DRIVERS\ngvpn.sys [?]
R3 NgWfp;Aventail VPN Callout;C:\Windows\system32\DRIVERS\ngwfp.sys --> C:\Windows\system32\DRIVERS\ngwfp.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-3-29 253088]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-4-28 129976]
S3 NgFilter;Aventail VPN Filter;C:\Windows\system32\DRIVERS\ngfilter.sys --> C:\Windows\system32\DRIVERS\ngfilter.sys [?]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 QuickBooksDB20;QuickBooksDB20;C:\PROGRA~2\Intuit\QUICKB~1\QBDBMgrN.exe -hvQuickBooksDB20 --> C:\PROGRA~2\Intuit\QUICKB~1\QBDBMgrN.exe -hvQuickBooksDB20 [?]
.
=============== Created Last 30 ================
.
2012-04-30 16:29:25 -------- d-----w- C:\Windows\System32\MpEngineStore
2012-04-28 15:18:37 -------- d-sh--w- C:\$RECYCLE.BIN
2012-04-28 11:20:44 -------- d-----w- C:\Users\mjm.MRAINC\AppData\Local\temp
2012-04-28 10:31:41 98816 ----a-w- C:\Windows\sed.exe
2012-04-28 10:31:41 518144 ----a-w- C:\Windows\SWREG.exe
2012-04-28 10:31:41 256000 ----a-w- C:\Windows\PEV.exe
2012-04-28 10:31:41 208896 ----a-w- C:\Windows\MBR.exe
2012-04-28 10:30:29 -------- d-----w- C:\ComboFix
2012-04-28 00:18:21 128512 ----a-w- C:\Windows\RegBootClean64.exe
2012-04-27 21:24:59 12800 ----a-w- C:\Windows\DCEBoot64.exe
2012-04-27 15:42:31 -------- d-----w- C:\Users\mjm.MRAINC\AppData\Roaming\Malwarebytes
2012-04-27 15:42:14 -------- d-----w- C:\ProgramData\Malwarebytes
.
==================== Find3M ====================
.
2012-04-21 15:28:17 70304 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-04-21 15:28:17 418464 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
.
============= FINISH: 12:34:48.21 ===============


attach.txt attachedAttached File  Attach.txt   15.67KB   2 downloads

BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 02 May 2012 - 12:28 AM

Hello and Welcome to Bleeping Computer!!

My name is Gringo and I'll be glad to help you with your computer problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Security Check

  • Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.



Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 02 May 2012 - 12:22 PM

OK, posting the Security check report, then will run combofix and post that report.

during the security check scan it stated the following error:
Specified file not found
HOSTCOPY.TXT not found

scan results

Results of screen317's Security Check version 0.99.32
Windows 7 x64 (UAC is disabled!)
Internet Explorer 8 Out of date!
``````````````````````````````
Antivirus/Firewall Check:

Windows Security Center service is not running! This report may not be accurate!
Trend Micro Worry-Free Business Security Agent
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:

Java™ 6 Update 20
Java version out of date!
Adobe Flash Player 10.1.53.64 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of date!
Mozilla Firefox (12.0.)
````````````````````````````````
Process Check:
objlist.exe by Laurent

Trend Micro AMSP coreServiceShell.exe
Trend Micro UniClient UiFrmWrk uiWatchDog.exe
Trend Micro AMSP coreFrameworkHost.exe
Trend Micro Security Agent tmlisten.exe
Trend Micro UniClient UiFrmWrk uiSeAgnt.exe
``````````End of Log````````````



#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 02 May 2012 - 12:56 PM

ok give me the combofix report when it is complete



gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 02 May 2012 - 01:42 PM

OK, turned off Trend Micro, waited about 30sec, then ran combofix. combofix reported trend micro was still running, although it was no longer in the tray, nor did i see any processes for it (may have missed it in the list)

Combofix ran through with no problems, although it did take 45min-1hr to fully complete.

However, I am still being redirected when i click on a link from a google search.

Combofix log (breaking into 2 posts because log is too long for 1)

ComboFix 12-05-02.03 - mjm 05/02/2012 13:34:16.2.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.4030.2639 [GMT -4:00]
Running from: c:\users\mjm.MRAINC\Downloads\ComboFix.exe
AV: Trend Micro Security Agent *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Security Agent *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-04-02 to 2012-05-02 )))))))))))))))))))))))))))))))
.
.
2012-05-02 18:08 . 2012-05-02 18:08 -------- d-----w- c:\users\QBDataServiceUser20\AppData\Local\temp
2012-05-02 18:08 . 2012-05-02 18:08 -------- d-----w- c:\users\MJM\AppData\Local\temp
2012-05-02 18:08 . 2012-05-02 18:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-05-02 18:08 . 2012-05-02 18:08 -------- d-----w- c:\users\administrator\AppData\Local\temp
2012-05-01 16:20 . 2011-11-17 06:49 152432 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-05-01 16:20 . 2011-11-17 06:35 340992 ----a-w- c:\windows\system32\schannel.dll
2012-05-01 16:17 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2012-05-01 16:17 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-05-01 16:17 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-05-01 16:17 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-05-01 16:17 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-05-01 16:17 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-04-30 16:29 . 2012-04-30 20:23 -------- d-----w- c:\windows\system32\MpEngineStore
2012-04-28 16:14 . 2012-04-28 16:14 -------- d-----w- c:\users\mjm.MRAINC\AppData\Local\Mozilla
2012-04-28 16:14 . 2012-04-28 16:14 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-04-28 11:24 . 2012-04-28 11:24 -------- d-----w- c:\users\TEMP
2012-04-28 11:20 . 2012-05-02 18:11 -------- d-----w- c:\users\mjm.MRAINC\AppData\Local\temp
2012-04-28 00:18 . 2012-04-28 00:18 128512 ----a-w- c:\windows\RegBootClean64.exe
2012-04-27 21:24 . 2012-04-29 15:40 12800 ----a-w- c:\windows\DCEBoot64.exe
2012-04-27 15:42 . 2012-04-27 15:42 -------- d-----w- c:\users\mjm.MRAINC\AppData\Roaming\Malwarebytes
2012-04-27 15:42 . 2012-04-27 15:42 -------- d-----w- c:\programdata\Malwarebytes
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-21 15:28 . 2012-03-29 14:46 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-21 15:28 . 2011-06-08 12:42 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((( SnapShot@2012-04-28_11.25.38 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-03-13 20:49 . 2010-11-20 12:08 96768 c:\windows\SysWOW64\sspicli.dll
+ 2012-05-01 16:19 . 2011-11-17 05:28 96768 c:\windows\SysWOW64\sspicli.dll
- 2011-03-13 20:48 . 2010-11-20 12:21 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-05-01 16:19 . 2011-11-17 05:34 22016 c:\windows\SysWOW64\secur32.dll
+ 2009-07-14 04:54 . 2012-04-29 15:26 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-04-28 11:23 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-04-28 11:23 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-29 15:26 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-28 11:23 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-04-29 15:26 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-12 00:08 . 2012-05-02 18:12 48418 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-05-02 18:12 36788 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-05-01 16:19 . 2011-11-17 06:35 29184 c:\windows\system32\sspisrv.dll
- 2011-03-13 20:49 . 2010-11-20 13:27 29184 c:\windows\system32\sspisrv.dll
- 2011-03-13 20:49 . 2010-11-20 13:27 28160 c:\windows\system32\secur32.dll
+ 2012-05-01 16:19 . 2011-11-17 06:35 28160 c:\windows\system32\secur32.dll
- 2009-07-13 23:20 . 2009-07-14 01:39 31232 c:\windows\system32\lsass.exe
+ 2012-05-01 16:19 . 2011-11-17 06:33 31232 c:\windows\system32\lsass.exe
- 2009-07-14 00:16 . 2009-07-14 00:16 23552 c:\windows\system32\drivers\tdtcp.sys
+ 2012-05-01 16:19 . 2012-02-17 04:57 23552 c:\windows\system32\drivers\tdtcp.sys
+ 2012-05-01 16:19 . 2011-11-17 06:49 95600 c:\windows\system32\drivers\ksecdd.sys
- 2010-11-18 15:13 . 2012-04-28 10:15 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-11-18 15:13 . 2012-05-02 17:14 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-18 15:13 . 2012-04-28 10:15 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-11-18 15:13 . 2012-05-02 17:14 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-04-28 10:15 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-05-02 17:14 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-09 20:35 . 2012-05-02 18:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-05-09 20:35 . 2012-04-28 11:23 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-05-09 20:35 . 2012-05-02 18:10 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-05-09 20:35 . 2012-04-28 11:23 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-05-09 20:35 . 2012-04-28 11:23 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-09 20:35 . 2012-05-02 18:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-18 20:18 . 2012-05-02 18:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-18 20:18 . 2012-04-28 11:24 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-18 20:18 . 2012-04-28 11:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-18 20:18 . 2012-05-02 18:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-05-01 17:00 . 2012-05-01 17:00 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-11-13 23:56 . 2011-11-13 23:56 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-11-13 23:55 . 2011-11-13 23:55 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-11-13 23:58 . 2012-05-01 16:59 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
+ 2012-05-02 17:46 . 2012-05-02 17:46 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\44d4e98964a6d9071ba14e5e6cfb67f3\System.Xaml.Hosting.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\42d44cc48edbf4d5b19af6d6afc6cd62\System.Windows.Presentation.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\5f7c671ba2199b784e30d0d2841ca327\System.Web.DynamicData.Design.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\5c5a54c265c044f359659e6eeff29171\System.Web.ApplicationServices.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 47616 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\fcce6ebdffab904e2ad8ec441dd1e504\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-02 17:37 . 2012-05-02 17:37 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\775f904a6e0d93130e26f5b48a118737\System.Xaml.Hosting.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\5febe9c0db17256605a3c0b906d124a3\System.Windows.Presentation.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\cdc0d470badb7b99e55ccee87468ab2f\System.Web.DynamicData.Design.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\d948214592e9ee62eefecfc06ac37690\System.Web.ApplicationServices.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\361744396ee71dcc435c93226a8a6754\System.ServiceModel.Channels.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\4ecbfe0c115d62bd2bb1314a4d4c5b18\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-02 17:41 . 2012-05-02 17:41 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\265f654b8eed2ac1e42d225a30433c37\System.Windows.Presentation.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\55487e5bf6e899174834355828d63e62\System.Web.DynamicData.Design.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\c1577aa4e5874f1debc9a63343e5a0d7\PresentationFontCache.ni.exe
+ 2012-05-02 17:07 . 2012-05-02 17:07 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\697c9c4ec947a0a5e21bc9e4c6471b74\PresentationCFFRasterizer.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\2d80e48139b13bf06e85c0c1db06bc20\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\df5c0dac9e7db175acc8a9755942f87f\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\8a9356f77bd1d1155202f59119ee57c9\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4e53199f22c13aa3e4bc6f063da0aee7\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\0f361440d7cbda4bf5b44bfbd4623812\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 87040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\e8d8257e7685fcdbec1d55c91ef849b9\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c8239c930f99c98202dbd678a10d3d02\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\8878ca8ff774e592cbbb264fc72f4ac6\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 89088 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\67d8a48cb6a3b8e58bf94789c689c1d6\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 86016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\54372f6724e4b83e703b68a13bf72066\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 93696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\1bfd71e2bb2110f637dadfdad19c6089\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\0c7c182d287c4aaab55bbf98171391bb\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 84480 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\049294e23dcbea38cda0e271cbef72b4\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f8f0b08845fb76dfcf57e00d86fc13fc\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\8cd347067dbe1ec5a79c9d261d2d75d9\LoadMxf.ni.exe
+ 2012-05-02 17:39 . 2012-05-02 17:39 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\4089bf2cec6e1a1539076c5bd6d95ce7\ehiTVMSMusic.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\cbd82b42e689fd2cf7db2ce9e7cdc3af\WindowsLiveWriter.ni.exe
+ 2012-05-02 17:33 . 2012-05-02 17:33 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a0dc95aed5461ec895c47cb52e8a4b5d\WindowsLive.Writer.Api.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\df6e2f050af3e7a7676650240ef9d7e5\System.Windows.Presentation.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\fe204168de7a2f7c1b9ae805c96caa29\System.Web.DynamicData.Design.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2463cb2600fc129e38f67974f3553368\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\bef92fc6725738f2a261600dab88cd66\PresentationFontCache.ni.exe
+ 2012-05-02 17:12 . 2012-05-02 17:12 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\dcdbd6714f689d7be2a15fe8ed1bc095\PresentationCFFRasterizer.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\7834abeef71f9188bb9d9253d8f807ab\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ef668f1802501935d634458ef637f5e7\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\a66c7d26f61bb8e12960441a77159102\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\61a8d567fe6450b5b77584b0044a6979\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\52785c0dca46f1e08b5cf9299fba9ae0\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\183073b14873e3b18951879ae4a8b425\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\824d2cc6a8193a2458ce90e579c8b8f5\Microsoft.Vsa.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b63cd78bf6dd3e9df6dd1b3b8e550c03\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 84992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a58e9c2d5c986b8fe49cded1c6ca5fc9\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a290ea7a45914e4466803b05cdd1153c\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9cd2ba0393b01eabb090905becda3d1c\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7faf76ae95bd58574a8ea0c8621f21c9\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\492bd6e8feb0bb28bf05729c750766d2\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\207589160a3dd1da72d4237f9cbf72e6\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\12d5f79acb9e5ecec2a8707ae8492c0a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0c7d30a3d4b7a03d5d150b40befb02fa\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\c3d4c8fe1b7afc44c48e5eb24689707e\IAStorDataMgrSvc.ni.exe
+ 2010-11-18 20:18 . 2012-05-01 15:58 9684 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2097351910-1350271648-2131945979-1112_UserData.bin
+ 2012-05-02 18:10 . 2012-05-02 18:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-04-28 11:23 . 2012-04-28 11:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-05-02 18:10 . 2012-05-02 18:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-04-28 11:23 . 2012-04-28 11:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-03-13 20:50 . 2010-11-20 12:21 314880 c:\windows\SysWOW64\webio.dll
+ 2012-05-01 16:19 . 2011-11-17 05:35 314880 c:\windows\SysWOW64\webio.dll
+ 2012-05-01 16:19 . 2011-11-17 05:34 224768 c:\windows\SysWOW64\schannel.dll
+ 2012-05-01 16:19 . 2012-02-17 05:34 826880 c:\windows\SysWOW64\rdpcore.dll
- 2011-03-13 20:49 . 2010-11-20 12:20 442880 c:\windows\SysWOW64\ntshrui.dll
+ 2012-05-01 16:19 . 2012-01-04 08:58 442880 c:\windows\SysWOW64\ntshrui.dll
+ 2012-05-01 16:19 . 2011-11-17 06:35 395776 c:\windows\system32\webio.dll
- 2011-03-13 20:50 . 2010-11-20 13:27 395776 c:\windows\system32\webio.dll
+ 2012-05-01 16:19 . 2011-11-17 06:35 136192 c:\windows\system32\sspicli.dll
- 2011-03-13 20:50 . 2010-11-20 13:27 136192 c:\windows\system32\sspicli.dll
- 2009-07-14 02:36 . 2012-04-28 10:18 664190 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-05-02 17:12 664190 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-04-28 10:18 122842 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2012-05-02 17:12 122842 c:\windows\system32\perfc009.dat
+ 2012-05-01 16:19 . 2012-01-04 10:44 509952 c:\windows\system32\ntshrui.dll
- 2011-03-13 20:50 . 2010-11-20 13:27 509952 c:\windows\system32\ntshrui.dll
- 2009-07-14 04:45 . 2012-03-24 18:10 497864 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 04:45 . 2012-05-02 17:06 497864 c:\windows\system32\FNTCACHE.DAT
+ 2012-05-01 16:19 . 2012-02-17 04:58 210944 c:\windows\system32\drivers\rdpwd.sys
- 2011-03-13 20:50 . 2010-11-20 11:04 210944 c:\windows\system32\drivers\rdpwd.sys
+ 2012-05-01 16:19 . 2011-11-17 06:44 459232 c:\windows\system32\drivers\cng.sys
- 2009-07-14 05:12 . 2012-04-27 22:52 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 05:12 . 2012-05-02 17:14 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 04:46 . 2012-05-02 17:09 108288 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2009-07-14 05:01 . 2012-05-02 18:09 429020 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2009-07-14 05:01 . 2012-04-28 11:23 429020 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2012-01-21 21:40 . 2012-01-21 21:40 616216 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
+ 2012-05-01 16:19 . 2012-01-26 23:31 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-01-21 21:40 . 2012-01-21 21:40 616216 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2012-05-01 16:19 . 2012-01-26 23:33 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-02-09 11:27 . 2012-02-09 11:27 206848 c:\windows\Installer\28bf5e.msp
+ 2012-03-21 09:58 . 2012-03-21 09:58 133120 c:\windows\Installer\28bf2c.msp
+ 2011-11-13 23:58 . 2012-05-01 16:59 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-03-25 15:23 . 2010-03-25 15:23 203632 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\SHAREPOINTPROVIDER.DLL
+ 2012-05-02 17:47 . 2012-05-02 17:47 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\ca30259d77af43f797e06190d61b6174\XamlBuildTask.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 462336 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\c74b1d583e670b400fac95a92744928c\WsatConfig.ni.exe
+ 2012-05-02 17:47 . 2012-05-02 17:47 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\1b7b90af6e57797658ffd75ba6a539cd\WindowsFormsIntegration.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\8df6331b51fe3ae5b9d0cf8c582d3f84\UIAutomationClient.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\6bc2cf9d31ae7e22349af3ddb1306c96\System.Xml.Linq.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\f9e5fcb862d898327924fcac2ff47c4d\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\66a079419ce17963f204cc1ec2bb58c6\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 314880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\3c18fcac2e60e8b6299fd93b1855e0b8\System.Web.RegularExpressions.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\248fc02c3e44752d80609d480455508c\System.Web.Entity.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\95733fdf7379a3365f4072dff6cec7fb\System.Web.Entity.Design.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\a111244a93cfe7b7a7c3fc952b7c7f53\System.Web.DynamicData.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 331776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\ffbb4e49978811e244224694be83634f\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\5f61f0305f22aed705e0680f58fc5d89\System.Transactions.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\42ba4c7ecc6926a9dd7bb6e47a1bb45f\System.ServiceProcess.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\bfb5e1c0961fe330c89c043a188cc807\System.ServiceModel.Routing.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\671c48760746239f2dfb0b64a7413624\System.ServiceModel.Channels.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 587776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\5aa0187435c08816b40cca1dc6836595\System.ServiceModel.Activation.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\d8342f4b914e190a9e5c89c7703dd11f\System.Security.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\9426384a1d2d2e815e093a0fe88da585\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\eb3a4f60a13a65ef2b9bf82c23dc3951\System.Runtime.Remoting.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 311296 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\f31d068e775a01267669d69c4d8ba3df\System.Runtime.Caching.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\21fa922f90a47d10fd11107efff5ea4f\System.Net.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\ad7538dad8aa88d8861f0359da96f277\System.Messaging.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\655c314109b3ab211e13b88d0769651b\System.Management.Instrumentation.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\cf1c0c4152c5548179dd3e2870f25cc4\System.IO.Log.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\d8dc2ea040e12c679b5d779370a19e58\System.IdentityModel.Selectors.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\fef2650a5b3bf39527150b4058762611\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\994e60f26b11755207e9c7ebb9fd688b\System.Dynamic.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\8ab9bf9bbd5eaad816582f7e5c8901df\System.Drawing.Design.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\bc62e3c6c42db6e63c18038e9bac5a5c\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\5373b5adf6f12ca3ac8806827259a986\System.Device.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 662528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\50c91291edeec36d56b8bdef77978123\System.Data.Services.Design.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\938f42c2d694b3935ca890fee7d0c8a7\System.Data.DataSetExtensions.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\cde466cd9b88dc7857c40ac43bf7632c\System.Configuration.Install.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\081bebeff0574ed1969b05eafab5b342\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\e88489a8cc6a68a7ebb4617d1a20e5e7\System.AddIn.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\ba36345815c2011c3f054ebee01a0569\System.Activities.DurableInstancing.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\70edc7fbf7505880ab1652b35f6e9517\SMSvcHost.ni.exe
+ 2012-05-02 17:43 . 2012-05-02 17:43 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\9d160b8d7c69ce50ac1db59a8fa2bcb5\SMDiagnostics.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\dbb2bb145d0bac0d0615f52739ad2702\PresentationFramework.Aero.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\4d9a6f376f83a6ea5b71a678566ee1de\PresentationFramework.Royale.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3ec560f5f3b643e02b6025363034d624\PresentationFramework.Luna.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1767cdd5d245b5087045d1ad2fbdd8fd\PresentationFramework.Classic.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 364544 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\5385bfc8c0c1b7fbfdcd383cbe525d26\MSBuild.ni.exe
+ 2012-05-02 17:42 . 2012-05-02 17:42 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\729d04335c97a73976e43be6b23437c2\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\385ffb17c4890d76682d1d0c81f39e09\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 851456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\a67cfbf40e33a6a4084f4b276f0efb5e\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 353792 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\2e1df11a396eed4f72ecb3af910f6c02\Microsoft.Build.Framework.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\736c15691c9eaea7c24cb6d60e8f5ade\ComSvcConfig.ni.exe
+ 2012-05-02 17:38 . 2012-05-02 17:38 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\a70b2031622cfd2d9c4f1d19d14d8380\XamlBuildTask.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\629c632cbb064034e9a4ddb32b374b5b\WsatConfig.ni.exe
+ 2012-05-02 17:38 . 2012-05-02 17:38 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\cbf5944593c1c9b4d3c77718fd40f151\WindowsFormsIntegration.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\f4d55487b0e1eae2de72e1d8e14c4781\UIAutomationClient.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\35b997b2652f8f564b062e6a6e59055f\System.Xml.Linq.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\b16aace2ac6c7e7d6849f3a683776cd1\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\d505043bd1d853304b74e5dfc6a87058\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\32f9c3111dc945ee091ee764a5045be9\System.Web.RegularExpressions.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\726c3093826be9b281b8852d159c6b6c\System.Web.Extensions.Design.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\8ad4f10ff589699d7e94b8bda3c9382f\System.Web.Entity.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\782f887181d1d0ca3ff8f0c18dac6f46\System.Web.Entity.Design.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\ea6ba3d16624260febafaf1ed3cf73ee\System.Web.DynamicData.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\e41c521f872d705abe506d3fe9ea8297\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\07db951fbbd939fc70b0b91a8fa83185\System.Transactions.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\303af4d01daa9ae9ff84cfa43001caf5\System.ServiceProcess.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b6b9eeba0eaffb7691e9fd06c4f3dd10\System.ServiceModel.Routing.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\7dbe42bc45bd6a1e11cb446d553d648a\System.ServiceModel.Activation.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\f7ddf9585d0b4b46437dc07b50955b64\System.Security.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\012cb4a4bd973425eac0dbe52cdcc721\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\4f283f4eae2ce9215368f74b73332143\System.Runtime.Remoting.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 244736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\95b74c7183ea690b5c2482b4cae87924\System.Runtime.Caching.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\6ddba0a0ef4a512f8de2b3feacb8bd4a\System.Net.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\8feb0e6c13c19bde3ce69302569964df\System.Messaging.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\b2990e7dd2ce6c1ec99e4f27f766beb0\System.Management.Instrumentation.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\3ee79197b362398995eba1a67e83d865\System.IO.Log.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\3e177995dd026b939dc8b6769c77e60f\System.IdentityModel.Selectors.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\06c498e1b0e11e9de295c02f1519b8ff\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\06c498e1b0e11e9de295c02f1519b8ff\System.EnterpriseServices.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\746a79ac47809d2658daf85f2b5a2ad9\System.Dynamic.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\858081de25e4278984bd50db7d9b5b3b\System.Drawing.Design.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\4946d4a8b1301179885c0621ac7120ca\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\171d40509eccb741a5a4a0908b41c840\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\eca593b1efb8f28f8204c841d6f875f2\System.Device.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\e7de5b8a20020f3e46a9a82bffab2cdb\System.Data.Services.Design.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\8cec191afd4e0abc87ed7e93f814f1fc\System.Data.DataSetExtensions.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\1702c5e18cdd96c022d87c38561f19c9\System.Configuration.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\36c77d53335088d10774054af4dfc034\System.Configuration.Install.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a58dbf4346bc2bd65df689cb6b25326c\System.ComponentModel.Composition.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\3924f7fd82f46e76f3b89b9828c3587c\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\b323b1cd4f7e891c9b2def688895cd37\System.AddIn.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\89c1fb7b7684036e32dafff798d1a744\System.Activities.DurableInstancing.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\2dca989632203f2bc603d76492aff1f3\SMSvcHost.ni.exe
+ 2012-05-02 17:36 . 2012-05-02 17:36 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\3ed5c98553688c7bd5fa0459ddc629bf\SMDiagnostics.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9dbdf77b1208ccfea1b67b50084c3f1a\PresentationFramework.Aero.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\870a3f81e3fa889dfd5f63ea813d1bb5\PresentationFramework.Royale.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\5bf1ff80129ae0bca17f47ccf3dbc0c4\PresentationFramework.Classic.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\590ab08a24d15cb6891608c80fdebb1a\PresentationFramework.Luna.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\92fab911e1837e04a8c20889fcb64bc6\MSBuild.ni.exe
+ 2012-05-02 17:36 . 2012-05-02 17:36 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\bbc0b83283a715f53a34be7e29fd9632\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\4a9409b232987a471b8437cd0a35a3ea\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 631808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\071b1bfcf5572adfd14381a9b4e7112c\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\91847ead9f1ce714ca02da48f0e234e4\Microsoft.Build.Framework.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 136192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\9f872e3f8eaa10200e17c30a1877af7b\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\6a523b563dcd30850801965c2e754c5f\ComSvcConfig.ni.exe
+ 2012-05-02 17:35 . 2012-05-02 17:35 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\c6c10140e6fb68691ad5ec77c50412da\AspNetMMCExt.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\600f8ca5fcc54f10623903952fcc10ac\WsatConfig.ni.exe
+ 2012-05-02 17:42 . 2012-05-02 17:42 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\718e8186ee8de8555888be444b86d443\WindowsFormsIntegration.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\152b577b846875cb3ac5e2097451daf0\UIAutomationClient.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\6138a7bf63fa559ffe856b586e369ba2\TaskScheduler.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\bc3bbe78635aeacaeea3b310ea5ff002\System.Xml.Linq.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\285974d0048e7b24c99a49740b90bcc8\System.Web.Routing.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\ed681c0aefa909f528d50d0d7f87b799\System.Web.RegularExpressions.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\84e3c5be0556133eadf55b0d9de2cc16\System.Web.Entity.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\3cb1ad63965d44b8ab487bb5344d7a7a\System.Web.Entity.Design.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\7cefcf6a8b2272d0cd0dae49f9e3c992\System.Web.DynamicData.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\4984bcea856c272c539a3266c7f8df93\System.Web.Abstractions.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\caa6d0e3ec056ab964616da777c2fcb1\System.Transactions.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\2ea95f3113ace6c1adf4ab9f9fc4285e\System.ServiceProcess.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\ffc67ee81b75ac04dfc1fee6a7fef8c5\System.Security.ni.dll
+ 2012-05-02 17:07 . 2012-05-02 17:07 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\bc8c5bdae37a113b2274279ceb94d6d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\e238ca4ca02f9309283c98e1a4235bbd\System.Net.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\c5bef7173a92e1a66e3f7a34eeed891f\System.Messaging.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\c340633057ed6b9ffcf2214cb348a1fa\System.Management.Instrumentation.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 569856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\c24a84d54ad05618cf6cab545c31b06b\System.IO.Log.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\2ba95581264a766410a6dbbe767c5ed8\System.IdentityModel.Selectors.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\dbd535c6b73a9d9ffab8b91124ea7dda\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\a94125636875d06389922fcd86b7a615\System.Drawing.Design.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3c2c8f083f34a3c75e0aa17ef9ac4127\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 629760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\be6635364f1af379afff83dd877a4e03\System.Data.Services.Design.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\027959159200e828ccfddaef5f01b3a9\System.Data.DataSetExtensions.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\e71e38d2ca2cd291467d890336f45931\System.Configuration.Install.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\8c954be3f8d070b1364844741ff4b4b1\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\bd9159951d0caa9bf5c90c44fc96661b\System.AddIn.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\8bfc7a328911ae69686576bd24f4f771\SMSvcHost.ni.exe
+ 2012-05-02 17:39 . 2012-05-02 17:39 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\823bd996cb5aefd6c2b2fa7e19e0ef40\SMDiagnostics.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 376832 c:\windows\assembly\NativeImages_v2.0.50727_64\SecurityAuditPolici#\7edcdb58fc8106cf1e2361f3482b368d\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\cc864feeea3e918e3d9790b301bb2004\PresentationFramework.Royale.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\ab440c134c4d619f82ba6eab569c8fed\PresentationFramework.Luna.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0e79d12dc8bede29dc337dba8d803bfa\PresentationFramework.Aero.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0e6121dbd31ce6b51354b38075dc9007\PresentationFramework.Classic.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\cc4082d64c96ff7569aa540b2bfb4e4e\napsnap.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\30d62e0be22cd4569141c32f8650773b\napinit.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\a4b5d98bf175a3f10c47f223195c34b0\MSBuild.ni.exe
+ 2012-05-02 17:39 . 2012-05-02 17:39 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\0da2c8a454593084e0215266b5572bf0\MMCFxCommon.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 681984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\04532b2b5174ca249e01a8b21d0ba6fd\Microsoft.WSMan.Management.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\5cd854d075caf8b50de3c803b4303e03\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\cb1c199305d00b2424e707311eb9dcfd\Microsoft.Vsa.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 277504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f9fa6fac40ea6a3ac42f4354d45e4233\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 390656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d94da1a53d099635a79bc3b91f566629\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c0a89e4c55c42be0ab561ab822e9d414\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\b4ca8eca3fb2b9e9eb4dcde40eca00b0\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 232448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\ae4c0d1f4f5c2450ffc9e01660ba59a9\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 499200 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\adeb865c6a363c192613da3b48caf089\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 970240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\a4f7d069a6f8132f2bae9cb10919e23f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 202752 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\8c8d9b3a05d2b948d5eec7400d6f6984\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 225280 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\841980c52ea05db8c1561ee8f396f19b\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 777728 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7990ce0c86bcc8cd37d268b919919550\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\66a2899e82080dd11b52d55673961f01\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 226816 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5e3dfcd0cf8a0c016d82a75b1dfcb601\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 226816 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5e13e713b204b6a722ef18a70347b15a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 494592 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\570a61eda4bf1cefa0adab9730ec1b32\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 125440 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\4c3978062690bf27950ab2b9e0d6a503\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\b2438f632ab1dcbb1cb91c5a1226aaf1\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 937472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\762b104fb41272b94fbd442ee2ef97e2\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 235008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\593d4852da5730b2745a902cb765bf9b\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 275456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\2bd4bf486059581106a5d16bd9fe853f\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 318976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\23a1aeed1d0c341d10190166f16923aa\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\d7f5b39fba028d2f9e2b3a772845a2a6\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\99bb7896ddbe74236efaa97733c63cbc\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\71542ecf96342dc1464fe471852be89a\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0bafa5e2dc431bb12108395cf2e18773\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\987951ffdadf4a176d1fa3a02c3288f9\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\44eecde37d940c1c9aaebb700ae81ed5\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ecaf4199c3937827b85be8e8ac36de2b\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ddd2f252bea1cce14bb498257992635a\Microsoft.MediaCenter.Interop.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\cf9be66d53dddbf49b75cead76ef3cea\Microsoft.MediaCenter.Mheg.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\8dd963b1ac45ad4d484855d9853747bd\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\55172dec8f1353d1a8d9cdc4c0b9fac0\Microsoft.MediaCenter.Playback.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5495e7eca3dac7eee473e30a3611f178\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\fe924ef08b715e71e410270c60cc372c\Microsoft.ManagementConsole.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 618496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\668798ebaebb3baa6a152d86e3e03364\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 399360 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\6380c4a4aa90e1047f6b160077983dbb\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 244736 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\f356844d3667b88d03bde2ae524659b6\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\86f7fa65013864ae7da2fba058199dae\Microsoft.Build.Utilities.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\c467a4d9eeda620e3e7602a9ecf9ae76\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 423424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\cb23b761d394d3db188d2d710459217e\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 727040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\607e206ef66533feecd6a3786ad55560\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\304068df803748d7743a6a4dc344915f\Mcx2Dvcs.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\fb79aad0c745ff7b45151bc58b4dc8e9\mcupdate.ni.exe
+ 2012-05-02 17:39 . 2012-05-02 17:39 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\4a29229fecf805779bee25b756d78a0d\mcstoredb.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\857d04eadbf226277488bfabfda2a01d\mcplayerinterop.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\7a2e04f455b793a14e9d1df5fdd93bf7\mcGlidHostObj.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\2ce02776e0f2f1770f4bb77e1f6d7472\MCESidebarCtrl.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\56c25b27b777af0b93999261cfeec0cd\EventViewer.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\307ca4b67db79b05b4781634ea8ec0d7\ehRecObj.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\2c9f3eaa3e79d491c1e29ab58fdcc54a\ehExtHost.ni.exe
+ 2012-05-02 17:39 . 2012-05-02 17:39 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\b49168b11f5f60ddafed2ab1fdd4540f\ehCIR.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\f2808fb3389d3e28e2b0223dcd654e02\ComSvcConfig.ni.exe
+ 2012-05-02 17:38 . 2012-05-02 17:38 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\45af2aab82a69a1a6fe0f7cef4024673\BDATunePIA.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\105e77fbca8c5bb29988f3847b0d599f\WsatConfig.ni.exe
+ 2012-05-02 17:33 . 2012-05-02 17:33 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\507ad58fcddc1ce89733281164b91228\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eb2e1e843e1e412e9651d07a54f9291b\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eabeff6b96ba49ae4580c30985178255\WindowsLive.Writer.Interop.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d22ab41f815eaee923fc185587cb5358\WindowsLive.Writer.FileDestinations.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c4acc2545e37c52cba93196045ba5e3a\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bd572a011fea0c068da577b95317b0a6\WindowsLive.Writer.Controls.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ba3519c39315237f3fe51f1a8e0058bb\WindowsLive.Writer.SpellChecker.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b7cf348bb303ea4b09ea1e9a1f4c2a9f\WindowsLive.Writer.BrowserControl.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ac2d8ffc66c7dab83d44429b3747a696\WindowsLive.Writer.Mshtml.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a20fc6da7d53dee4b4769485664c88b3\WindowsLive.Writer.Localization.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7e0011756468300189bbd67ebb70ee58\WindowsLive.Writer.Extensibility.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4603800223476adaa15d9ddcddad4517\WindowsLive.Writer.Instrumentation.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\37baec4007ba80e3f4e14a73a9fa802f\WindowsLive.Writer.Passport.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2ac790d4ef1782089089407f5afe5e18\WindowsLive.Writer.HtmlParser.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\d6c93384b37778bc90c49c7b7a6c1de1\WindowsLive.Client.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\688abb339fb8301c37b0889a0d01dfa3\WindowsFormsIntegration.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\d0972fea9e965a565c3cff76982709db\UIAutomationClient.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\97d8bd8f21969a91b7c5171031250d1e\TaskScheduler.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\fa1161af51ab42a61bfac9d02d469a06\System.Xml.Linq.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\fb9376e183b55a281cd4b2d0284b2ae8\System.Web.Routing.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\84ee5a23a20b65773686657254ea9831\System.Web.RegularExpressions.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4b3a819ac98366b7d4613f47be85dc34\System.Web.Extensions.Design.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\c173b34209a9fabfb935ee24d238edf3\System.Web.Entity.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\cffabe6d661a6f6c4e0f2022ac9f389f\System.Web.Entity.Design.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c4cb9c791aac1bf2abe80604aaf48439\System.Web.DynamicData.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\0401a6ad16a6815a60b959c46c0b3444\System.Web.Abstractions.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9e8dfbd1334d30a08ce1f2df29ca9aff\System.Transactions.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c2c7f68605a42caef1b7a19c51de58b4\System.ServiceProcess.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\dc4a4350f8c0c0919b5fb78f0c44291b\System.Security.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\adb2fc93e7a4462eb399442c678be681\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\923b13d681f3cf03299ee031bc30b61a\System.Runtime.Remoting.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2273d6ab12c9ae0d52842a84d586b8df\System.Net.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\69b1de7425d09eb9fe42f81882d2896e\System.Messaging.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\b5930434d0d624701114e014513c9041\System.Management.Instrumentation.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\7651951311f9d134e6bc08be7dc9ddc7\System.IO.Log.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\8b0dc9405f292a93ddd52eb76bb88169\System.IdentityModel.Selectors.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3fccda0d4dd150a217c2798e39e97a48\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\3fccda0d4dd150a217c2798e39e97a48\System.EnterpriseServices.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b64b898fd099d1644a8673137ac56011\System.Drawing.Design.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\eebb837dbb8e5781e448c72eeda27983\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\344d3289061b28a0f7fb19229f45bb9c\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\6a6642467bcccf0345c5e9139e7fd9ae\System.Data.Services.Design.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\173776ff3afd1ffda2b0b034670461db\System.Data.Entity.Design.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\71400a36c8621388031e00075f2fc8e9\System.Data.DataSetExtensions.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\47e25ae9163f4624a66f99ede0ea98fe\System.Configuration.Install.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\05c4011ad0068d0af722b4b52677d915\System.AddIn.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\17b78ffee2144cf38f024e73b131158d\SMSvcHost.ni.exe
+ 2012-05-02 17:33 . 2012-05-02 17:33 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\281b67b96a2dd473dad4d222da0ca514\SMDiagnostics.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\b7a94173e0bedb89545cbfa23e71b8e0\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fbcb09488417e40b6f7f7737f737bbfd\PresentationFramework.Luna.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\dbd1929fa377b354903e37469838d9a1\PresentationFramework.Classic.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\74fcc0f56435d0396f9524cd4293d3e5\PresentationFramework.Aero.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\4ff6c887092d4db687441d71e2c812ff\PresentationFramework.Royale.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\2ffec892832457d3530d59a9da07324c\napsnap.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\1167a79ab309e2a4e6da2bd2dbea01a6\napinit.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\4ac4095081957a001a6174c0b9f7f195\MSBuild.ni.exe
+ 2012-05-02 17:33 . 2012-05-02 17:33 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\c83df01d683dbeb36be10218cc50ff03\MMCFxCommon.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\928fb6b2401fffd8cc993578c3a04acd\Microsoft.WSMan.Management.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f8ae93a99dcc6388370493e488730089\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dcb9e93aa37e3d3258fc07f3aa9ea18c\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 365056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dad9f84c07db8f7c371a9dbe2d8daebc\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d59bdf6aaa29fcf72fe462931f6bbf1f\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 191488 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\bd1b54a5ca26bf9b9e179c44bf68e8ec\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\aa529209bf2dadbe33c1ff6f4a5858fb\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a278c91a9f9d7c4ea7e1aaf0c290684a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\77e12e288240a3842159b7f04f57123f\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\41d9475e0f83d4d373479a6c70867cb7\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 184320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0ff1747e828c62dac1e75a182285eed6\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 663552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0f0684a1cf2fd932ce32eb0602f10c4d\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0e6685fa21a5e598c0ebdee764af7a7f\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\01e71094136bf26bea62a21c69d5aa14\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\481b6ebea3e357f29a4ec0e8193d36d3\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 157184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\f21a2f175222c7013ca506b501fa5509\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\db99af884a053f153e7fc72fa3607710\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 187392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\d8e67eaed0a599bbfee9457ce90b94bc\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 210944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\ac290c81209bcf6b08c83ac124c3beac\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\eda566c4dc6595779c3c9dfc359575ed\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\df4f6b6f33d84b7f438c3f3b66f0336d\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\951235283ff1d4a91ffaa92ea8693249\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\5f7928a2ffe462f16e25f03be01966e9\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2015eca4346e34310e958089b22a9c62\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\94aa23a60fd4ef3aa99061f0c1641bd7\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\773d5489dd158e1c72c2b8327c4cffd3\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\667bce54a4a095320e5c3390e52e9693\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\564ee7c52ff064b953ca9fe02e0a2067\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 268800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\7c41f7088c8b428499cfb351b557ddee\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\68842b507f3ad7fa603bf57c813c6a0c\Microsoft.ManagementConsole.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\eff4e9083f7ff25c18f52542f9a1e596\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 286208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\6d1d13360464eef30dccee6a5ddb490e\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 343552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\1398a27a5c79788ee453d2a8ac2e64c7\Microsoft.BusinessData.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\c8e128b5e6ceee852cb1f8c165c2177e\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\9795da40a8ee0bc54e91792de7422152\Microsoft.Build.Utilities.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\be7ad749a064283deab76fad38bf2930\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\f42105699650a206e2ae439ac54ad40a\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\b872774c6d7f49712c7b7cdd71f3204b\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 587776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\06f1bc0c2fa665d1d48597c77a5fee55\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\886a8c3d4f00567df779318fea56f28a\mcstoredb.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 170496 c:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c9f86107711667159f5a87d8ed9e075a\IsdiInterop.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 452608 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\5be773440afa1e1f565f9021d8fd9730\IAStorUtil.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 176640 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\10e15089d8fc56e52c1b257b09d484e3\IAStorDataMgr.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\4e2b9e7e956dcee6a9721b57c8ccde60\EventViewer.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\9d5219961228fb5236c843ea75c69d39\ehRecObj.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\380a1283ad9a74eb337feb276453a87f\ehExtHost32.ni.exe
+ 2012-05-02 17:33 . 2012-05-02 17:33 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\39ab6b73bdbaac85b90cc561761916f7\ComSvcConfig.ni.exe
+ 2012-05-02 17:32 . 2012-05-02 17:32 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\d89086a63a9d85aa9d719d7088e5ae69\BDATunePIA.ni.dll
+ 2012-05-01 16:19 . 2012-01-26 23:33 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-05-01 16:19 . 2012-02-10 05:38 1077248 c:\windows\SysWOW64\DWrite.dll
+ 2012-05-01 16:19 . 2012-02-03 04:34 3145728 c:\windows\system32\win32k.sys


rest of log in next post

rest of combofix log

+ 2012-05-01 16:19 . 2012-02-17 06:38 1031680 c:\windows\system32\rdpcore.dll
- 2011-03-13 20:50 . 2010-11-20 13:27 1031680 c:\windows\system32\rdpcore.dll
- 2011-03-13 20:50 . 2010-11-20 13:26 1447936 c:\windows\system32\lsasrv.dll
+ 2012-05-01 16:19 . 2011-11-17 06:35 1447936 c:\windows\system32\lsasrv.dll
- 2011-03-13 20:24 . 2011-02-19 12:04 1544192 c:\windows\system32\DWrite.dll
+ 2012-05-01 16:19 . 2012-02-10 06:36 1544192 c:\windows\system32\DWrite.dll
+ 2009-07-14 04:45 . 2012-05-02 17:09 7411554 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2012-03-24 18:13 7411554 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2010-11-18 20:05 . 2012-04-27 21:50 5429552 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2010-11-18 20:05 . 2012-04-28 21:16 5429552 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-07-04 21:25 . 2012-05-02 18:09 2754082 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2097351910-1350271648-2131945979-1112-12288.dat
- 2011-07-04 21:25 . 2012-04-27 14:59 2754082 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2097351910-1350271648-2131945979-1112-12288.dat
+ 2011-10-26 18:46 . 2011-10-26 18:46 3511880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
- 2011-08-20 22:15 . 2011-05-04 22:31 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2012-05-01 16:20 . 2011-10-31 23:15 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2011-10-26 18:46 . 2011-10-26 18:46 3511880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
- 2011-08-20 22:15 . 2011-05-04 22:32 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-01 16:20 . 2011-10-31 23:16 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 3511880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-11-13 23:55 . 2011-11-13 23:55 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-11-13 23:56 . 2011-11-13 23:56 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-01 17:00 . 2012-05-01 17:00 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-01-22 14:20 . 2012-01-22 14:20 1707520 c:\windows\Installer\28bf67.msp
+ 2011-10-26 20:36 . 2011-10-26 20:36 2829312 c:\windows\Installer\28bf4a.msp
+ 2011-10-16 18:28 . 2011-10-16 18:28 1138688 c:\windows\Installer\28bf41.msp
+ 2012-03-21 09:57 . 2012-03-21 09:57 1591808 c:\windows\Installer\28bf26.msp
- 2011-11-13 23:58 . 2011-11-14 16:33 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 4520288 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 4520288 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
- 2011-11-13 23:58 . 2011-11-14 16:33 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-11-13 23:58 . 2012-05-01 16:59 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-03-09 14:57 . 2010-03-09 14:57 2162024 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\POWERPNT.EXE
+ 2012-05-02 17:43 . 2012-05-02 17:43 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\f3aec9cd6eb72a851826073279e512b6\WindowsBase.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\68f44d619637fac197ee6c8ac9f2aec9\UIAutomationClientsideProviders.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ff247393a6deb90d63811aa88c84dc7e\System.Xml.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\e158bd31f13cbc20f6fc7c7f426113d7\System.Xaml.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 1602560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\cc78db84c1585decfe5f46ff7fa959f8\System.WorkflowServices.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 2887680 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\ad85ee9dd0070bc50ad76815cced9dbb\System.Workflow.Runtime.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 5922304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\128c8045dd2f716218a9e2112427496a\System.Workflow.ComponentModel.ni.dll
+ 2012-05-02 17:47 . 2012-05-02 17:47 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\7b661265d3af87a4793ad9732a0060dc\System.Workflow.Activities.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\ecf54a107871cf4c66ba0ec9fb6da2a8\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\f5306e98406dd64fed1a2b6fd4d0bb27\System.Web.Services.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 2964992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\ced295ef27d98932f096f38578bdcb28\System.Web.Mobile.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1101312 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\8bb27d82e503a130fbdfa1c1e0cae87d\System.Web.Extensions.Design.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 3804672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\299a5f4ff5afb00c3b9df4bb79b3ca2f\System.Web.Extensions.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 5618688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\f740b50cdcb7be7f2db53813329d9f54\System.Web.DataVisualization.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\ae3a837b63de8d3f3fc63a7bfc16589a\System.Speech.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\aec154cbfb0eec1497fb89ebd6deb344\System.ServiceModel.Discovery.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\80b8b6324a73493227b2672b2d6820d3\System.ServiceModel.Activities.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4daacfbe75e18ddfde8fa378bf71572a\System.ServiceModel.Web.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\717540eea541a2769a6cf621fd948678\System.Runtime.Serialization.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\dc7fbde064d5710780a6b8f27554dc57\System.Runtime.DurableInstancing.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\4c2c3b5a96f7712e3a8af81b3a525aa6\System.Printing.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\15112a35e0e355fc344792e49c41628f\System.Management.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\bffc049b6775c3f6f144917a4387a0be\System.IdentityModel.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\fef2650a5b3bf39527150b4058762611\System.EnterpriseServices.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 2303488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\13de49dc9dda83198f3e47733764bcda\System.Drawing.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1217536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\d94ef12e883b2354af26f19ec7e25110\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\026c74ff72ba4fce837134953778e755\System.DirectoryServices.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\d2776e3c931a9eaedbb98842abccde65\System.Deployment.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\8d734fe538fe6f226eab465c8d8e3d5c\System.Data.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\83aa1c4f17f57067d3be29e560331349\System.Data.SqlXml.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 2702848 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\8a5ca0469c80671cf431c3c425e3dd00\System.Data.Services.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 1798656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\6a0bcd0e756819ea795b161d2156e9a8\System.Data.Services.Client.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\9ef92d2f74cc95d08b9b7de5174bdec3\System.Data.OracleClient.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\1548624d8ec5142825864c5f59be9b49\System.Data.Linq.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\dd52ac905202dc60a93571582b137fe4\System.Data.Entity.Design.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\2672be84bcad1c772163d15db0e2864e\System.Configuration.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\228bb21cab2c9ce2f69d5e24a9352a3f\System.ComponentModel.Composition.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\36f5aa69b510e3aeb24ef402d12c20e0\System.Activities.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\bafbf5aa42e5b06e85fcadea923e3dfd\System.Activities.Presentation.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\8d549e47084ec2661c944a1eeb9a2be5\System.Activities.Core.Presentation.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 4232704 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\862f013ef3e62c1d64b81e4f45cbd2cf\ReachFramework.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\4e2c0ce063cef10822793527a3ede900\PresentationUI.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1891328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\725c3cf628a0bca2ad885aa6136edc91\PresentationBuildTasks.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6b96513a9bb94813405470302b3e8873\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6b82e7a7001a661cb712067b75b7c5ec\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\383a1ae25c6f8f5f8df8dc140d892d85\Microsoft.VisualBasic.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\2e6537fafd64c81032b0aaebb7d3180a\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\f38dbc9d7ebe981a7c22b72dffb4a2af\Microsoft.JScript.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\1cf22b5ea0ef63e71b6416a36b656b8a\Microsoft.CSharp.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 6004736 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\a06bcc10747e71d3d8b482be1b54da09\Microsoft.Build.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 3820544 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\4ecb972c5b8db1d5ebdd7a83445fcc3c\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 2521088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\6fdf4753fdb6e360ee2d91b25de48c20\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\cfe691ad5d7eac01eecd0cf381752ff0\AspNetMMCExt.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 3857920 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\6ae52f8d9c8b75f10c6ac00f0b76f2c7\WindowsBase.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\de58d9a7cb1ebe18d9519943fb351105\UIAutomationClientsideProviders.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\9c4788acc8f93c33214865395cee2e1c\System.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a588133985ef7510d4cc8cc7924f8ec3\System.Xml.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b74e1ad9110a39851b12cb46b3954163\System.Xaml.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 1226752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\21345160a15f57de9cb69d47ea3cec3a\System.WorkflowServices.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\376835e345a7c310c75e90bb0f0d6bbc\System.Workflow.Runtime.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 4476416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\ca443e9a66938c28d879340238dea36a\System.Workflow.ComponentModel.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\76a19ba0fa2f3491562ff4f043e13019\System.Workflow.Activities.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\81b8820ccda3620cab6d7ff659791725\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\c4b4578b937a51d7784f8ba63bcbd41b\System.Web.Services.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\7f053d3a398f30b1db23c869188c5bdb\System.Web.Mobile.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 3126784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\e88f6b5a7f92f6d01c816f3694aa88d3\System.Web.Extensions.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 4575232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\2cc9b67966d18d87b283d62118c1d776\System.Web.DataVisualization.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\572316066654286b4629c0a680a76e1b\System.Speech.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ab8554d6e74e24b22f41c885df525c35\System.ServiceModel.Web.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1392640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4d1a64fc317c7d5de7321ef42d9443aa\System.ServiceModel.Activities.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\26150ab602b494d300ae488f81dbef9b\System.ServiceModel.Discovery.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7aa036e91909e1bc5e1d35b673defab2\System.Runtime.Serialization.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\a2011e79b6ef1c5381d110f75685008c\System.Runtime.DurableInstancing.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\92642f7384a4c0e03dc661ba7c8a21d8\System.Printing.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\b7bf9745b6ac67086c7364ee34174c51\System.Management.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\38b6bf7d0ee6cea88d785e52e991627c\System.IdentityModel.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 1665024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\9a8680564f192b97d7ecf67e3478f1c3\System.Drawing.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94f406f804865ec1ef81acaf426e48ca\System.DirectoryServices.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\5e12a94d8f252aae678192aca363ad86\System.Deployment.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\25a90057cd6623c3b3cc07e53c8de77a\System.Data.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\79ff5fcb68fc0f3dce4571f8fa950a51\System.Data.SqlXml.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 2026496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\0b3b29a1de0aff95a2e7a809717bd02d\System.Data.Services.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\6bbce53ef9b6e8b9204929342f503647\System.Data.Services.Client.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\55479b2c4a07d81798bc2095bc063469\System.Data.OracleClient.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\ae45172466a99ef79ed2ab3ae5ad0ef9\System.Data.Linq.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\f43ca9f1f1ed99ae40cfb222bddae81e\System.Data.Entity.Design.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\b6ac99f2787a9a672d7a696ef25588ee\System.Core.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\3d60413b16725524801275d92249169b\System.Activities.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\00c9c5eeaf546b7b7c8a77580f6c3f8b\System.Activities.Presentation.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\d92c6df050f16ca2610191d283d826bb\System.Activities.Core.Presentation.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 2907136 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\02cc3e9eb7b5eea0522bdb6853a3ab63\ReachFramework.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\1935c1350c94a0896bf1cd4d1211854a\PresentationUI.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\b264d984ac50a328e4e103e1aa74e2bc\PresentationBuildTasks.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9a8fce6796ccef58426ded207811cb0a\Microsoft.VisualBasic.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\58f7d4b2c50278a8a1557f8715f3fe83\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2308d9bc9e1b4fa300140d447aa34d51\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\38b6c0eb820c7b8ce3efb4bdfb6ba480\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\5beb57c4dedf5103ee84b16d0d269093\Microsoft.JScript.ni.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\bc7e22b7991a4f23c6bb9e83e2241d05\Microsoft.CSharp.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 4247552 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\1d18fee503a4ccba2287c0008a59446f\Microsoft.Build.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\3997bbc2f75a4c1b2aa644cd1dbd25b4\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\28f09d6e579b5ae2ad73974b5963194e\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\a6d9b6658c7778345cc60fe0d9bb6e64\WindowsBase.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1459712 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\dac9f71ca1332da2a359e2d07589b7e9\UIAutomationClientsideProviders.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\e04d9231de2f5d2ababdb425df670e63\System.Xml.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\9132e9fc2b49b4ec17abb50d927ef264\System.WorkflowServices.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\339fe16aaad7e5a4339eacc1b7a68434\System.Workflow.Runtime.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\f6265ef0c2ee6c31e6c7820649961246\System.Workflow.ComponentModel.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\8ab46790ab6d0fcf056620121ef39239\System.Workflow.Activities.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\447d7790fed39f33f54cfcff2c953921\System.Web.Services.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\7972b87566bac03df9847ddc1791d118\System.Web.Mobile.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f20123a32b07731a34f837410f832b34\System.Web.Extensions.Design.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 3042304 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\c0ce4f5df364369a6be3e1dc1af38fc7\System.Web.Extensions.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\a49bc70b640e21c9bcecbd8122203283\System.Speech.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\098bc82de3c5667bb618dec75084ad00\System.ServiceModel.Web.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\f99728bbb535157b904873158379dc67\System.Runtime.Serialization.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\4523421096049e49454b73803dd7ab9b\System.Runtime.Remoting.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\7e62d5f06809c96b0e957cc948d98d7c\System.Printing.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1472000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\6860203a3f244d4c6b89ff38a9c9cadb\System.Management.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\3ea23737d8330f6df47b8c616773e1a3\System.IdentityModel.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\dbd535c6b73a9d9ffab8b91124ea7dda\System.EnterpriseServices.ni.dll
+ 2012-05-02 17:07 . 2012-05-02 17:07 2317312 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\95d41ace5d8803b9318366ad5f0fbdff\System.Drawing.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\cc26a70ca09b5e09736df4f2f4af045a\System.DirectoryServices.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1230848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\48a91957a4b86c3bcebec68eb1471def\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-02 17:07 . 2012-05-02 17:07 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\7e705656ef1ee9078e0d51699d9e0858\System.Deployment.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 8681472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\bc98c6a47226c05d244f7ffb07b6d6bf\System.Data.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 3463680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\134d55401aae7ef73c10ad743774127f\System.Data.SqlXml.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\ef9b16fc9e42c304ffb7e590dbede5f0\System.Data.Services.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\0177f6ff2b3faf1805b3ba63e0e20ad0\System.Data.Services.Client.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\7892bc65d0be332ab0d4f5dae01d2c3c\System.Data.OracleClient.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\dd28d55dd94fb4d1e4dca6393e4b15a4\System.Data.Linq.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\f27f70062e4967b87873256561410e79\System.Data.Entity.Design.ni.dll
+ 2012-05-02 17:38 . 2012-05-02 17:38 3315200 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\9e59bc2c8cf98cd315468ca01f68663c\System.Core.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\da9e586395168489e96323c7cbd635a3\System.Configuration.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1530368 c:\windows\assembly\NativeImages_v2.0.50727_64\SrpUxSnapIn\9208a9d4acc76688fb7b07a3b99d1c5e\SrpUxSnapIn.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\df3b4d20eaf81da80db9be811947e475\ReachFramework.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\8e76dcfa3f4676022f95437037c8ad51\PresentationUI.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 1884160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\0618574a66f03040f765c43693bf58f6\PresentationBuildTasks.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\92ab2a505e2b1e55887248752fc8791b\Narrator.ni.exe
+ 2012-05-02 17:41 . 2012-05-02 17:41 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\b843ee3c17f0b9d517f74f2fc2cef321\MMCEx.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\2717cf37deaf5c7f780c87d00231c518\MIGUIControls.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1877504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\01e44613cae9d302e9f7e9f1579b87e0\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\d8376ad9589e28008a43e241635808f7\Microsoft.VisualBasic.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\11bd9381aca79215bc01b45a5e7bddce\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\df845957256262139e42bf529cd6e47d\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a365fda36604d8f8b6ea67667dc3dd46\Microsoft.PowerShell.Editor.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\713f3cf6037ed7047485c738934f9054\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\09516cb547f50c165051c5512c0770d3\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\ef37fe70c135b3e38caff59f13265ff8\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\d4a618d9f5959f658a1892a007f96a04\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1093632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\631ae18fbb786ed963eac3080906a3cf\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c963f3456a24aa1f738c1b6bf0f04ca8\Microsoft.MediaCenter.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b54d398a06452904630482f2f83d21dd\Microsoft.MediaCenter.Shell.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7a29a061b231c192bf83e9949e6b50c5\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5f69561da0086365718db46e1172d204\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\421b294c6b74831f08d9605a05873b86\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 3213312 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\551b383e39b9fedb84e25c9fc7d763ee\Microsoft.JScript.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\9e91d7c4464a12eb7d2c174ffc56c168\Microsoft.Ink.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 5054976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\2e8e432e156067c09138707c37d7850d\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\a67cf1480b9711c9e9da320bc5114879\Microsoft.Build.Tasks.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\7b5c7863043af7cd47dfb104c0fe6879\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\a22f83fa561173b77ee1215e0dfd7a76\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\5cd9b4020f38edbdc2718884fe3e68f0\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\a1c741fa6d3e2635dd2a2a77890c87b5\mcstore.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 4088320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\905166e37a4a5f45a7d1672fb756d96e\mcepg.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f260b29a4e7b2f5f69d30845b2b2e43c\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 6394368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c6ead54a300c6d6fb102449db192d1fc\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a6adf7bee5173f784fd5faa83edf0f2a\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\47b9e7f070271ff50f988f75ea68fa3e\WindowsBase.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\c463ccf17b00f16ed8e60a6ba1cb46e5\UIAutomationClientsideProviders.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 7967232 c:\windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 5453312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\0c5c8bde9dce206bc58eb98166e51c94\System.WorkflowServices.ni.dll
+ 2012-05-02 17:13 . 2012-05-02 17:13 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\bf78e685f3ba05820da954649f637980\System.Workflow.Runtime.ni.dll
+ 2012-05-02 17:13 . 2012-05-02 17:13 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\90c7ccc61ec8848774f54dd99d4c3691\System.Workflow.ComponentModel.ni.dll
+ 2012-05-02 17:13 . 2012-05-02 17:13 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\d8820ca3cba6bb89735f1a9d71fa5ba9\System.Workflow.Activities.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\0c301b9611359646cbfc2919c1e0d44f\System.Web.Services.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\ceefae751f8fd0c3ef1389a5e3927711\System.Web.Mobile.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\bd014807a7eba131dc47ba8d3a6e5c0d\System.Web.Extensions.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\8e4b0ae89bdfbe3eac1b79dacef4ef79\System.Speech.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:35 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\47bdfa09ab6581225b3ee6b116580ade\System.ServiceModel.Web.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bc96c5c6e644452270ff7c3d066ff713\System.Runtime.Serialization.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0b27d6da6e6bc319c3805435b818c1e5\System.Printing.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1051136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\cb5bd98ffa4c82327b0e4db02bb58d2d\System.Management.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\f4d8c56c790b998bd1bb971905bfae78\System.Management.Automation.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\31df4a96534ba1012c42c02c9ac068ef\System.IdentityModel.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1590784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2d379df0010f87d5c3d8c2be00b3de7a\System.DirectoryServices.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\e45611cad86870a7011bb18b9e993861\System.Deployment.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 6611456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\eedf95f16a7e81ca43dd8accf11498a3\System.Data.ni.dll
+ 2012-05-02 17:11 . 2012-05-02 17:11 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\d7621134717a86f5062dcf80206ab164\System.Data.SqlXml.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\488779e9df23e0f0f4865c8e21dc405d\System.Data.Services.ni.dll
+ 2012-05-02 17:35 . 2012-05-02 17:35 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3763b8ac5fa0a96ad5100a53b10b4449\System.Data.Services.Client.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\c3e0c299c00016b5ffb5006bc32dd0db\System.Data.OracleClient.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\1fe993f1045190570a2c69cb32f9d62d\System.Data.Linq.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\932542a144496e3a9cb9155270fd4492\System.Data.Entity.ni.dll
+ 2012-05-02 17:32 . 2012-05-02 17:32 2297856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\f01c5c76d0a19516a37b7bd191a02cda\System.Core.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\e304bbb529be3c6839fcc740c0850141\SrpUxSnapIn.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\ffe872f5d03f8bf4d1e1aca71274aec4\ReachFramework.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\167ae650f54f5cd46c07329972f179ad\PresentationUI.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\d2c547794ac1c167fe24904e6848d5cc\PresentationBuildTasks.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\a61a4567bd8a09a0068db7fcc46151e1\Narrator.ni.exe
+ 2012-05-02 17:34 . 2012-05-02 17:34 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\a8ac3e062a13d75ff8d632bed75358b0\MMCEx.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\68b219ec5b557ed869925330a52f0a1e\MIGUIControls.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1300992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5305bd66ebbc5fadbd10db6c0de84c69\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\86a2c96796b147e4ec3cad0c78689e43\Microsoft.VisualBasic.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1a6921bcfb8ade6652efb9f095b275f1\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a7364db379808ebdee5cd876d5af2656\Microsoft.PowerShell.Editor.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2f66392066352b804d8022664e7bf8de\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2f5ee5f88067d79a8a002179b505aff0\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-05-02 17:34 . 2012-05-02 17:34 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\dbd0c24e7fefe5a2b5f1f86c3bef97a9\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 3237376 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\89af347a2cd562d91108f1b4266592d3\Microsoft.Office.BusinessData.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\e62a32be98c9bee518ca3e11c0a0959b\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5e70eabb16baf00ab00b22ebddb6c4d6\Microsoft.MediaCenter.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 2335744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\09cea564f5888335ef97bd104d7e4ea6\Microsoft.JScript.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\ffc29e128c4ddebb991189d617ed1bf7\Microsoft.Ink.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\5a9b854a12653e3daa7eeb7d05e2713f\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\0c9d80e810caa6aeb85bd4d253281434\Microsoft.Build.Tasks.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\008b235de7df9c690e3f289f3c776eda\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6b8459651fae37b63ab314350a8eff8a\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\227b7eaefe6ae6b78190516516793b4b\mcstore.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\c28c1427f0691e070b77b4ad97000e4c\mcepg.ni.dll
- 2011-08-20 22:15 . 2011-05-04 22:32 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-01 16:20 . 2011-10-31 23:16 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-01 16:19 . 2012-01-04 08:59 12872704 c:\windows\SysWOW64\shell32.dll
+ 2009-07-14 02:34 . 2012-05-02 17:05 11010048 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2012-05-01 16:19 . 2012-01-04 10:44 14172672 c:\windows\system32\shell32.dll
+ 2012-05-01 16:58 . 2012-05-01 16:58 11879936 c:\windows\assembly\NativeImages_v4.0.30319_64\System\bbcac65b1d0045229354424a7595e258\System.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 17353728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\7c36ff733996670837aea472b1a90574\System.Windows.Forms.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 15743488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\822cca99589b064aa0ac1fb326faf390\System.Web.ni.dll
+ 2012-05-02 17:46 . 2012-05-02 17:46 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\49314ff27e3a21bbb1fb675a295f6571\System.ServiceModel.ni.dll
+ 2012-05-02 17:44 . 2012-05-02 17:44 13314048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\16fb82bddb17697b307672822a81b0fa\System.Design.ni.dll
+ 2012-05-02 17:45 . 2012-05-02 17:45 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\78e35b4bf12ee4833ed720a490e958f2\System.Data.Entity.ni.dll
+ 2012-05-02 17:42 . 2012-05-02 17:42 10439168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\fcefa2871c7dc4d397ff8c6f92abf0d5\System.Core.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 24407040 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\7e469d3db62f02d4f9b0ddb56ab0fbe3\PresentationFramework.ni.dll
+ 2012-05-02 17:43 . 2012-05-02 17:43 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\b59d1b5738ac652bc4f58068b81d5b60\PresentationCore.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 13197312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\b5a80e55000206e1b9d1fa92e7cc7c11\System.Windows.Forms.ni.dll
+ 2012-05-02 17:36 . 2012-05-02 17:36 12068864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\b9a079340ece4d7c575682d101e1e504\System.Web.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\b711fe4f8f23da12b205be1d231d4e2e\System.ServiceModel.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 11021824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\b815f3336ee76cbb102476dcf44b82ec\System.Design.ni.dll
+ 2012-05-02 17:37 . 2012-05-02 17:37 13346816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\0816c3b4ab4f25931be80ef29db36024\System.Data.Entity.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\0ac01c073ef1df15c458f53da9da17e2\PresentationFramework.ni.dll
+ 2012-05-01 17:01 . 2012-05-01 17:01 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9155f65ac0db3c7be70cceee0aa0b020\PresentationCore.ni.dll
+ 2012-05-02 17:06 . 2012-05-02 17:06 10624512 c:\windows\assembly\NativeImages_v2.0.50727_64\System\d5bc322d03a6628891b1e1232c4815af\System.ni.dll
+ 2012-05-02 17:07 . 2012-05-02 17:07 17379840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\3466442b4168ba11787961fcfd410adf\System.Windows.Forms.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 15249408 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\e7e14c2188fd746e6873dda364858e8c\System.Web.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\ac10cef98e7d83cd6e193818634e4915\System.ServiceModel.ni.dll
+ 2012-05-02 17:40 . 2012-05-02 17:40 11900928 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\e18dbed9e34d7d56cc7e2f683de12237\System.Management.Automation.ni.dll
+ 2012-05-02 17:09 . 2012-05-02 17:09 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\8938620a438187cb23562a56293b7d8e\System.Design.ni.dll
+ 2012-05-02 17:41 . 2012-05-02 17:41 13760000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\00b730e56986ad4f378e420fa8606395\System.Data.Entity.ni.dll
+ 2012-05-02 17:08 . 2012-05-02 17:08 19195392 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\b87e4cff3eb13680c55a5f4ee9786b56\PresentationFramework.ni.dll
+ 2012-05-02 17:07 . 2012-05-02 17:07 16540160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\1233412b58120995b639428b5e6d998e\PresentationCore.ni.dll
+ 2012-05-02 17:39 . 2012-05-02 17:39 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\27d15ead8b540a1cad3b52fdad67f359\ehshell.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 12433408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 11819520 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\749692af2828b7b59ffc1562d933d24e\System.Web.ni.dll
+ 2012-05-02 17:33 . 2012-05-02 17:33 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\5e53d5914c31e8684d426d2ffac8cff6\System.ServiceModel.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\a15f8599c7b9f13e4e2321e5e96b9a6d\System.Design.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 14339072 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\43e23da6683962ea1168aaf007bbc35d\PresentationFramework.ni.dll
+ 2012-05-02 17:12 . 2012-05-02 17:12 12234752 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\74d980e52c1791f1b8608d767a393144\PresentationCore.ni.dll
+ 2011-10-16 18:38 . 2011-10-16 18:38 100966912 c:\windows\Installer\28bf10.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DKab1err"="c:\program files\Dell\Printer Software\ErrorApp\DKab1err.exe" [2010-08-03 582976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-22 1314816]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-18 98304]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-09-07 40376]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-06-25 140520]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\\isuspm.exe" [2010-05-21 324976]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2011-02-22 1497352]
"QuickBooksDB20"="c:\progra~2\Intuit\QUICKB~1\QBDBMgrN.exe" [2009-08-18 678912]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files (x86)\Digital Line Detect\DLG.exe [2010-11-11 50688]
FTP Utility.lnk - c:\program files (x86)\KONICA MINOLTA\FTP Utility\KMFtp.exe [2004-10-27 102400]
QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2012-2-4 1155432]
TdmNotify.lnk - c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmNotify.exe [2010-3-29 185192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 253088]
R3 DAmirr;DAmirr;c:\windows\system32\DRIVERS\DAmirr.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
R3 NgFilter;Aventail VPN Filter;c:\windows\system32\DRIVERS\ngfilter.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 QuickBooksDB20;QuickBooksDB20;c:\progra~2\Intuit\QUICKB~1\QBDBMgrN.exe [2009-08-18 678912]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
S2 dkab_device;dkab_device;c:\windows\system32\DKabcoms.exe [2010-08-03 1055040]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 Intuit Entitlement Service v6.0;Intuit Entitlement Service v6.0;c:\program files (x86)\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe [2009-06-02 20480]
S2 NgVpnMgr;Aventail VPN Client;c:\windows\system32\ngvpnmgr.exe [x]
S2 NMServiceManager;NMServiceManager;c:\program files (x86)\Micro Focus\NMServiceManager\NMServiceManager.exe [2009-11-25 603648]
S2 QBPOSDBServiceV10;QBPOS Database Manager v10;c:\program files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBPOSDBService.exe [2012-03-22 3136376]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [x]
S2 uvnc_service;uvnc_service;c:\program files (x86)\UltraVNC\WinVNC.exe [2009-07-10 1830856]
S2 Windows Agent Maintenance Service;Windows Agent Maintenance Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe [2010-09-14 28672]
S2 Windows Agent Service;Windows Agent Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\agent.exe [2010-09-14 192512]
S3 CAXHWBS2;CAXHWBS2;c:\windows\system32\DRIVERS\CAXHWBS2.sys [x]
S3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [x]
S3 NgLog;Aventail VPN Logging;c:\windows\system32\DRIVERS\nglog.sys [x]
S3 NgVpn;Aventail VPN Adapter;c:\windows\system32\DRIVERS\ngvpn.sys [x]
S3 NgWfp;Aventail VPN Callout;c:\windows\system32\DRIVERS\ngwfp.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 15:28]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}"
[HKEY_CLASSES_ROOT\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}]
2010-03-29 19:00 60784 ----a-w- c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{CF08DA3E-C97D-4891-A66B-E39B28DD270F}"
[HKEY_CLASSES_ROOT\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}]
2010-03-29 19:00 60784 ----a-w- c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"USCService"="c:\program files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe" [2010-06-22 34232]
"DBRMTray"="c:\dell\DBRM\Reminder\DbrmTrayIcon.exe" [BU]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2010-10-27 194080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\DAinit.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MIF5BA~1\Office14\ONBttnIE.dll/105
Trusted Zone: finsvcs.com
Trusted Zone: GeoLearning.com
Trusted Zone: imagedepositgateway.com\direct
Trusted Zone: intuit.com
Trusted Zone: Massmutual.com
Trusted Zone: Massmutualdesigns.com
Trusted Zone: OPTIPLEX780-1
Trusted Zone: winflexweb.com\www
TCP: DhcpNameServer = 10.10.10.2
DPF: {0D221D00-A6ED-477C-8A91-41F3B660A832} - hxxps://direct.imagedepositgateway.com/MerchantCaptureWebClient/Reserved.ReportViewerWebControl.axd?ReportSession=wee2dvy1zg0qjwaosnxfud3b&ControlID=f9df2f1cb96e4ad0961e7d6f35d3d909&Culture=1033&UICulture=1033&ReportStack=1&OpType=PrintCab
FF - ProfilePath -
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
"Key"="ActionsPane3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/smartdocuments/2003\0]
"Key"="http://schemas.microsoft.com/office/smartdocuments/2003"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0\Solutions\http://schemas.microsoft.com/office/smartdocuments/2003\0\{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}\Alias]
"0"="Microsoft Actions Pane 3"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
c:\program files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBDBMgr10.exe
c:\program files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
.
**************************************************************************
.
Completion time: 2012-05-02 14:32:39 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-02 18:32
ComboFix2.txt 2012-04-28 11:46
.
Pre-Run: 405,038,055,424 bytes free
Post-Run: 403,701,444,608 bytes free
.
- - End Of File - - 4869DA63A23B5362FBB735DB3DB5DC88



#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 02 May 2012 - 03:20 PM

Greetings

I would like to know which browsers are redirecting and check all that are installed

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 02 May 2012 - 04:12 PM

IE 8 and Firefox 12 are the only browsers installed, both are infected.

I tried running both tdsskiller and aswMBR, but neither one would start.

#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 02 May 2012 - 10:13 PM

Hello

I would like you to run this tool for me - fixTDSS

download it to your desktop and start the program

Follow the prompts and Ok any security prompts

when it is complete it will say the infection was cleared or no infection was found - let me know what it says

after it is complete I want you to restart the computer and try to rerun TDSSKiller for me and send me the report

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 03 May 2012 - 10:52 AM

fixTDSS came back with the following:
***Infected MBR Detected

I hit repair, prompt said it was cleared.

am restarting computer to run TDSSkiller

#10 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 03 May 2012 - 10:59 AM

Ran TDSSkiller, nothing was found, firefox no longer redirects, IE no longer redirects. Looks like we're clean, thanks for the assistance.

tdsskiller log:

11:54:33.0859 4816 TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18
11:54:34.0087 4816 ============================================================
11:54:34.0087 4816 Current date / time: 2012/05/03 11:54:34.0087
11:54:34.0087 4816 SystemInfo:
11:54:34.0087 4816
11:54:34.0087 4816 OS Version: 6.1.7601 ServicePack: 1.0
11:54:34.0087 4816 Product type: Workstation
11:54:34.0087 4816 ComputerName: OPTIPLEX780-1
11:54:34.0087 4816 UserName: mjm
11:54:34.0087 4816 Windows directory: C:\Windows
11:54:34.0087 4816 System windows directory: C:\Windows
11:54:34.0087 4816 Running under WOW64
11:54:34.0087 4816 Processor architecture: Intel x64
11:54:34.0087 4816 Number of processors: 2
11:54:34.0087 4816 Page size: 0x1000
11:54:34.0087 4816 Boot type: Normal boot
11:54:34.0087 4816 ============================================================
11:54:35.0713 4816 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:54:35.0717 4816 Drive \Device\Harddisk1\DR1 - Size: 0xF1800000 (3.77 Gb), SectorSize: 0x200, Cylinders: 0x1EC, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
11:54:35.0718 4816 ============================================================
11:54:35.0718 4816 \Device\Harddisk0\DR0:
11:54:35.0718 4816 MBR partitions:
11:54:35.0718 4816 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x21C3000
11:54:35.0718 4816 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x21D7000, BlocksNum 0x381AA030
11:54:35.0718 4816 \Device\Harddisk1\DR1:
11:54:35.0719 4816 MBR partitions:
11:54:35.0719 4816 \Device\Harddisk1\DR1\Partition0: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x78BFC1
11:54:35.0719 4816 ============================================================
11:54:35.0811 4816 C: <-> \Device\Harddisk0\DR0\Partition1
11:54:35.0811 4816 ============================================================
11:54:35.0811 4816 Initialize success
11:54:35.0811 4816 ============================================================
11:54:52.0235 2500 ============================================================
11:54:52.0235 2500 Scan started
11:54:52.0235 2500 Mode: Manual;
11:54:52.0235 2500 ============================================================
11:54:56.0990 2500 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
11:54:57.0047 2500 1394ohci - ok
11:54:57.0651 2500 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
11:54:57.0667 2500 ACPI - ok
11:54:57.0752 2500 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
11:54:57.0753 2500 AcpiPmi - ok
11:54:58.0219 2500 ADIHdAudAddService (0fa60a409e1c8ab9a81901311d15393d) C:\Windows\system32\drivers\ADIHdAud.sys
11:54:58.0237 2500 ADIHdAudAddService - ok
11:54:59.0173 2500 AdobeFlashPlayerUpdateSvc (459ac130c6ab892b1cd5d7544626efc5) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:54:59.0211 2500 AdobeFlashPlayerUpdateSvc - ok
11:55:00.0821 2500 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
11:55:00.0856 2500 adp94xx - ok
11:55:01.0025 2500 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
11:55:01.0056 2500 adpahci - ok
11:55:01.0817 2500 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
11:55:01.0842 2500 adpu320 - ok
11:55:02.0025 2500 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
11:55:02.0049 2500 AeLookupSvc - ok
11:55:02.0251 2500 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
11:55:02.0257 2500 AFD - ok
11:55:02.0673 2500 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
11:55:02.0707 2500 agp440 - ok
11:55:03.0206 2500 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
11:55:03.0239 2500 ALG - ok
11:55:03.0426 2500 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
11:55:03.0451 2500 aliide - ok
11:55:03.0707 2500 AMD External Events Utility (5989d711769200f0f3e145319250472b) C:\Windows\system32\atiesrxx.exe
11:55:03.0708 2500 AMD External Events Utility - ok
11:55:03.0823 2500 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
11:55:03.0824 2500 amdide - ok
11:55:04.0388 2500 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
11:55:04.0422 2500 AmdK8 - ok
11:55:04.0900 2500 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
11:55:04.0933 2500 AmdPPM - ok
11:55:05.0537 2500 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
11:55:05.0554 2500 amdsata - ok
11:55:06.0826 2500 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
11:55:06.0942 2500 amdsbs - ok
11:55:07.0148 2500 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
11:55:07.0149 2500 amdxata - ok
11:55:07.0739 2500 Amsp (f5def3ce8ad92c1d4de764b139040fd3) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
11:55:07.0740 2500 Amsp - ok
11:55:08.0443 2500 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
11:55:08.0560 2500 AppID - ok
11:55:08.0747 2500 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
11:55:08.0781 2500 AppIDSvc - ok
11:55:09.0220 2500 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
11:55:09.0245 2500 Appinfo - ok
11:55:09.0505 2500 AppMgmt (4aba3e75a76195a3e38ed2766c962899) C:\Windows\System32\appmgmts.dll
11:55:09.0516 2500 AppMgmt - ok
11:55:09.0671 2500 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
11:55:09.0674 2500 arc - ok
11:55:09.0940 2500 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
11:55:09.0973 2500 arcsas - ok
11:55:10.0782 2500 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
11:55:11.0381 2500 aspnet_state - ok
11:55:11.0586 2500 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
11:55:11.0602 2500 AsyncMac - ok
11:55:11.0783 2500 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
11:55:11.0800 2500 atapi - ok
11:55:12.0259 2500 atikmdag (b5fb227a09a9ec28163fa4b45487c3c7) C:\Windows\system32\DRIVERS\atikmdag.sys
11:55:12.0317 2500 atikmdag - ok
11:55:14.0714 2500 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
11:55:14.0733 2500 AudioEndpointBuilder - ok
11:55:14.0739 2500 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
11:55:14.0743 2500 AudioSrv - ok
11:55:15.0278 2500 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
11:55:15.0302 2500 AxInstSV - ok
11:55:16.0753 2500 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
11:55:16.0786 2500 b06bdrv - ok
11:55:18.0514 2500 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
11:55:18.0531 2500 b57nd60a - ok
11:55:18.0683 2500 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
11:55:18.0685 2500 BDESVC - ok
11:55:18.0749 2500 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
11:55:18.0750 2500 Beep - ok
11:55:19.0049 2500 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
11:55:19.0077 2500 BFE - ok
11:55:19.0322 2500 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
11:55:19.0354 2500 BITS - ok
11:55:19.0809 2500 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
11:55:19.0842 2500 blbdrive - ok
11:55:20.0467 2500 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
11:55:20.0500 2500 bowser - ok
11:55:20.0676 2500 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
11:55:20.0709 2500 BrFiltLo - ok
11:55:20.0791 2500 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
11:55:20.0793 2500 BrFiltUp - ok
11:55:21.0832 2500 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
11:55:21.0857 2500 BridgeMP - ok
11:55:22.0735 2500 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
11:55:22.0777 2500 Browser - ok
11:55:24.0523 2500 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
11:55:24.0565 2500 Brserid - ok
11:55:24.0805 2500 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
11:55:24.0837 2500 BrSerWdm - ok
11:55:24.0907 2500 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
11:55:24.0908 2500 BrUsbMdm - ok
11:55:25.0044 2500 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
11:55:25.0046 2500 BrUsbSer - ok
11:55:25.0508 2500 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
11:55:25.0526 2500 BTHMODEM - ok
11:55:25.0982 2500 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
11:55:25.0990 2500 bthserv - ok
11:55:26.0877 2500 catchme - ok
11:55:29.0701 2500 CAXHWBS2 (46f088d1247e825b313200254edd9e5b) C:\Windows\system32\DRIVERS\CAXHWBS2.sys
11:55:29.0742 2500 CAXHWBS2 - ok
11:55:30.0525 2500 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
11:55:30.0558 2500 cdfs - ok
11:55:31.0527 2500 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
11:55:31.0561 2500 cdrom - ok
11:55:32.0610 2500 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
11:55:32.0627 2500 CertPropSvc - ok
11:55:33.0017 2500 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
11:55:33.0051 2500 circlass - ok
11:55:33.0249 2500 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
11:55:33.0253 2500 CLFS - ok
11:55:33.0709 2500 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
11:55:33.0724 2500 clr_optimization_v2.0.50727_32 - ok
11:55:33.0832 2500 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
11:55:33.0836 2500 clr_optimization_v2.0.50727_64 - ok
11:55:34.0291 2500 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
11:55:35.0006 2500 clr_optimization_v4.0.30319_32 - ok
11:55:35.0432 2500 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
11:55:35.0605 2500 clr_optimization_v4.0.30319_64 - ok
11:55:35.0786 2500 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
11:55:35.0828 2500 CmBatt - ok
11:55:35.0940 2500 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
11:55:35.0948 2500 cmdide - ok
11:55:36.0247 2500 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
11:55:36.0275 2500 CNG - ok
11:55:36.0493 2500 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
11:55:36.0518 2500 Compbatt - ok
11:55:36.0717 2500 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
11:55:36.0718 2500 CompositeBus - ok
11:55:36.0783 2500 COMSysApp - ok
11:55:36.0902 2500 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
11:55:36.0935 2500 crcdisk - ok
11:55:37.0216 2500 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
11:55:37.0237 2500 CryptSvc - ok
11:55:37.0704 2500 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
11:55:37.0723 2500 CSC - ok
11:55:37.0868 2500 CscService (3ab183ab4d2c79dcf459cd2c1266b043) C:\Windows\System32\cscsvc.dll
11:55:37.0912 2500 CscService - ok
11:55:37.0950 2500 DAmirr - ok
11:55:38.0236 2500 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
11:55:38.0270 2500 DcomLaunch - ok
11:55:38.0400 2500 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
11:55:38.0405 2500 defragsvc - ok
11:55:38.0621 2500 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
11:55:38.0628 2500 DfsC - ok
11:55:38.0732 2500 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
11:55:38.0737 2500 Dhcp - ok
11:55:39.0092 2500 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
11:55:39.0184 2500 discache - ok
11:55:39.0540 2500 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
11:55:39.0541 2500 Disk - ok
11:55:39.0640 2500 dkab_device - ok
11:55:40.0030 2500 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
11:55:40.0059 2500 Dnscache - ok
11:55:40.0371 2500 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
11:55:40.0389 2500 dot3svc - ok
11:55:40.0536 2500 Dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
11:55:40.0538 2500 Dot4 - ok
11:55:40.0898 2500 Dot4Print (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\drivers\Dot4Prt.sys
11:55:40.0900 2500 Dot4Print - ok
11:55:40.0947 2500 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
11:55:40.0950 2500 DPS - ok
11:55:41.0035 2500 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
11:55:41.0035 2500 drmkaud - ok
11:55:41.0578 2500 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
11:55:41.0583 2500 DXGKrnl - ok
11:55:41.0759 2500 e1kexpress (60c5b36e07be8b3af3911c3d10303cfe) C:\Windows\system32\DRIVERS\e1k62x64.sys
11:55:41.0761 2500 e1kexpress - ok
11:55:41.0820 2500 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
11:55:41.0822 2500 EapHost - ok
11:55:43.0053 2500 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
11:55:43.0131 2500 ebdrv - ok
11:55:43.0694 2500 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
11:55:43.0717 2500 EFS - ok
11:55:43.0911 2500 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
11:55:43.0957 2500 ehRecvr - ok
11:55:44.0003 2500 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
11:55:44.0004 2500 ehSched - ok
11:55:47.0330 2500 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
11:55:47.0691 2500 elxstor - ok
11:55:47.0784 2500 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
11:55:47.0792 2500 ErrDev - ok
11:55:47.0844 2500 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
11:55:47.0863 2500 EventSystem - ok
11:55:49.0053 2500 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
11:55:49.0221 2500 exfat - ok
11:55:49.0264 2500 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
11:55:49.0278 2500 fastfat - ok
11:55:49.0427 2500 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
11:55:49.0478 2500 Fax - ok
11:55:49.0548 2500 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
11:55:49.0558 2500 fdc - ok
11:55:49.0650 2500 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
11:55:49.0657 2500 fdPHost - ok
11:55:49.0695 2500 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
11:55:49.0701 2500 FDResPub - ok
11:55:49.0798 2500 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
11:55:49.0809 2500 FileInfo - ok
11:55:49.0907 2500 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
11:55:49.0923 2500 Filetrace - ok
11:55:52.0753 2500 FLEXnet Licensing Service (f76d04f7413b07daa029f6520b64b4e8) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
11:55:53.0623 2500 FLEXnet Licensing Service - ok
11:55:53.0908 2500 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
11:55:53.0958 2500 flpydisk - ok
11:55:54.0033 2500 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
11:55:54.0047 2500 FltMgr - ok
11:55:54.0197 2500 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
11:55:54.0263 2500 FontCache - ok
11:55:54.0667 2500 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:55:54.0682 2500 FontCache3.0.0.0 - ok
11:55:54.0788 2500 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
11:55:54.0794 2500 FsDepends - ok
11:55:54.0832 2500 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
11:55:54.0838 2500 Fs_Rec - ok
11:55:55.0409 2500 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
11:55:55.0420 2500 fvevol - ok
11:55:56.0400 2500 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
11:55:56.0456 2500 gagp30kx - ok
11:55:57.0188 2500 GoToAssist (d3316f6e3c011435f36e3d6e49b3196c) C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
11:55:57.0227 2500 GoToAssist - ok
11:55:57.0379 2500 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
11:55:57.0472 2500 gpsvc - ok
11:55:57.0906 2500 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
11:55:57.0935 2500 hcw85cir - ok
11:55:57.0987 2500 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
11:55:57.0995 2500 HDAudBus - ok
11:55:58.0208 2500 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
11:55:58.0312 2500 HidBatt - ok
11:55:58.0618 2500 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
11:55:58.0682 2500 HidBth - ok
11:55:58.0873 2500 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
11:55:59.0006 2500 HidIr - ok
11:55:59.0204 2500 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
11:55:59.0242 2500 hidserv - ok
11:55:59.0401 2500 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
11:55:59.0408 2500 HidUsb - ok
11:55:59.0975 2500 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
11:55:59.0986 2500 hkmsvc - ok
11:56:00.0140 2500 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
11:56:00.0154 2500 HomeGroupListener - ok
11:56:00.0259 2500 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
11:56:00.0268 2500 HomeGroupProvider - ok
11:56:00.0687 2500 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
11:56:00.0741 2500 HpSAMD - ok
11:56:00.0989 2500 HsfXAudioService (447256d1c026654c5cd3cc17e7b20631) C:\Windows\SysWOW64\XAudio64.dll
11:56:01.0022 2500 HsfXAudioService - ok
11:56:01.0129 2500 HSF_DPV (26c5d00321937e49b6bc91029947d094) C:\Windows\system32\DRIVERS\CAX_DPV.sys
11:56:01.0190 2500 HSF_DPV - ok
11:56:01.0770 2500 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
11:56:01.0793 2500 HTTP - ok
11:56:02.0132 2500 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
11:56:02.0138 2500 hwpolicy - ok
11:56:02.0374 2500 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
11:56:02.0385 2500 i8042prt - ok
11:56:02.0442 2500 iaStor (abbf174cb394f5c437410a788b7e404a) C:\Windows\system32\DRIVERS\iaStor.sys
11:56:02.0485 2500 iaStor - ok
11:56:02.0894 2500 IAStorDataMgrSvc (31a0e93cdf29007d6c6fffb632f375ed) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
11:56:02.0901 2500 IAStorDataMgrSvc - ok
11:56:06.0608 2500 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
11:56:07.0014 2500 iaStorV - ok
11:56:07.0968 2500 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
11:56:08.0051 2500 idsvc - ok
11:56:08.0628 2500 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
11:56:08.0667 2500 iirsp - ok
11:56:09.0019 2500 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
11:56:09.0062 2500 IKEEXT - ok
11:56:09.0152 2500 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
11:56:09.0157 2500 intelide - ok
11:56:09.0343 2500 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
11:56:09.0349 2500 intelppm - ok
11:56:09.0698 2500 Intuit Entitlement Service v6.0 (d057df46b913ac54200dfd0edb2909ce) C:\Program Files (x86)\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe
11:56:09.0708 2500 Intuit Entitlement Service v6.0 - ok
11:56:10.0007 2500 IntuitUpdateService (7bdb4e00e1cb174b56e5b2c31dde68a7) C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
11:56:10.0013 2500 IntuitUpdateService - ok
11:56:10.0070 2500 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
11:56:10.0077 2500 IPBusEnum - ok
11:56:10.0572 2500 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:56:10.0722 2500 IpFilterDriver - ok
11:56:10.0915 2500 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
11:56:10.0939 2500 iphlpsvc - ok
11:56:10.0990 2500 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
11:56:11.0000 2500 IPMIDRV - ok
11:56:11.0123 2500 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
11:56:11.0144 2500 IPNAT - ok
11:56:11.0209 2500 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
11:56:11.0215 2500 IRENUM - ok
11:56:11.0242 2500 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
11:56:11.0249 2500 isapnp - ok
11:56:11.0560 2500 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
11:56:11.0592 2500 iScsiPrt - ok
11:56:11.0635 2500 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
11:56:11.0642 2500 kbdclass - ok
11:56:11.0832 2500 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
11:56:11.0862 2500 kbdhid - ok
11:56:11.0942 2500 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
11:56:11.0950 2500 KeyIso - ok
11:56:12.0749 2500 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
11:56:12.0844 2500 KSecDD - ok
11:56:12.0915 2500 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
11:56:12.0923 2500 KSecPkg - ok
11:56:13.0117 2500 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
11:56:13.0138 2500 ksthunk - ok
11:56:13.0302 2500 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
11:56:13.0331 2500 KtmRm - ok
11:56:13.0408 2500 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
11:56:13.0427 2500 LanmanServer - ok
11:56:13.0451 2500 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
11:56:13.0543 2500 LanmanWorkstation - ok
11:56:13.0641 2500 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
11:56:13.0649 2500 lltdio - ok
11:56:15.0247 2500 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
11:56:15.0417 2500 lltdsvc - ok
11:56:15.0455 2500 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
11:56:15.0464 2500 lmhosts - ok
11:56:16.0002 2500 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
11:56:16.0058 2500 LSI_FC - ok
11:56:16.0177 2500 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
11:56:16.0204 2500 LSI_SAS - ok
11:56:16.0303 2500 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
11:56:16.0331 2500 LSI_SAS2 - ok
11:56:16.0351 2500 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
11:56:16.0359 2500 LSI_SCSI - ok
11:56:16.0404 2500 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
11:56:16.0412 2500 luafv - ok
11:56:16.0442 2500 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
11:56:16.0449 2500 Mcx2Svc - ok
11:56:16.0468 2500 mdmxsdk (e4f44ec214b3e381e1fc844a02926666) C:\Windows\system32\DRIVERS\mdmxsdk.sys
11:56:16.0474 2500 mdmxsdk - ok
11:56:16.0477 2500 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
11:56:16.0485 2500 megasas - ok
11:56:16.0506 2500 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
11:56:16.0517 2500 MegaSR - ok
11:56:16.0541 2500 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
11:56:16.0548 2500 MMCSS - ok
11:56:16.0559 2500 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
11:56:16.0566 2500 Modem - ok
11:56:16.0610 2500 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
11:56:16.0616 2500 monitor - ok
11:56:16.0666 2500 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
11:56:16.0673 2500 mouclass - ok
11:56:16.0751 2500 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
11:56:16.0782 2500 mouhid - ok
11:56:16.0807 2500 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
11:56:16.0814 2500 mountmgr - ok
11:56:16.0900 2500 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
11:56:16.0912 2500 MozillaMaintenance - ok
11:56:16.0937 2500 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
11:56:16.0948 2500 mpio - ok
11:56:16.0967 2500 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
11:56:16.0975 2500 mpsdrv - ok
11:56:17.0086 2500 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
11:56:17.0121 2500 MpsSvc - ok
11:56:17.0188 2500 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
11:56:17.0207 2500 MRxDAV - ok
11:56:17.0237 2500 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
11:56:17.0246 2500 mrxsmb - ok
11:56:17.0284 2500 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:56:17.0295 2500 mrxsmb10 - ok
11:56:17.0319 2500 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:56:17.0328 2500 mrxsmb20 - ok
11:56:17.0356 2500 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
11:56:17.0362 2500 msahci - ok
11:56:17.0415 2500 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
11:56:17.0433 2500 msdsm - ok
11:56:17.0470 2500 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
11:56:17.0479 2500 MSDTC - ok
11:56:17.0528 2500 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
11:56:17.0535 2500 Msfs - ok
11:56:17.0541 2500 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
11:56:17.0547 2500 mshidkmdf - ok
11:56:17.0567 2500 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
11:56:17.0572 2500 msisadrv - ok
11:56:17.0593 2500 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
11:56:17.0601 2500 MSiSCSI - ok
11:56:17.0603 2500 msiserver - ok
11:56:17.0640 2500 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
11:56:17.0646 2500 MSKSSRV - ok
11:56:17.0680 2500 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
11:56:17.0686 2500 MSPCLOCK - ok
11:56:17.0695 2500 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
11:56:17.0700 2500 MSPQM - ok
11:56:17.0738 2500 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
11:56:17.0748 2500 MsRPC - ok
11:56:17.0779 2500 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
11:56:17.0785 2500 mssmbios - ok
11:56:17.0794 2500 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
11:56:17.0799 2500 MSTEE - ok
11:56:17.0807 2500 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
11:56:17.0813 2500 MTConfig - ok
11:56:17.0857 2500 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
11:56:17.0863 2500 Mup - ok
11:56:17.0928 2500 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
11:56:17.0931 2500 napagent - ok
11:56:17.0999 2500 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
11:56:18.0011 2500 NativeWifiP - ok
11:56:18.0082 2500 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
11:56:18.0100 2500 NDIS - ok
11:56:18.0136 2500 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
11:56:18.0144 2500 NdisCap - ok
11:56:18.0178 2500 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
11:56:18.0184 2500 NdisTapi - ok
11:56:18.0452 2500 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
11:56:18.0500 2500 Ndisuio - ok
11:56:18.0530 2500 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
11:56:18.0539 2500 NdisWan - ok
11:56:18.0564 2500 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
11:56:18.0571 2500 NDProxy - ok
11:56:18.0646 2500 Net Driver HPZ12 (2334dc48997ba203b794df3ee70521db) C:\Windows\system32\HPZinw12.dll
11:56:18.0647 2500 Net Driver HPZ12 - ok
11:56:18.0683 2500 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
11:56:18.0690 2500 NetBIOS - ok
11:56:18.0731 2500 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
11:56:18.0742 2500 NetBT - ok
11:56:18.0760 2500 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
11:56:18.0761 2500 Netlogon - ok
11:56:18.0813 2500 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
11:56:18.0823 2500 Netman - ok
11:56:18.0975 2500 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:56:19.0045 2500 NetMsmqActivator - ok
11:56:19.0047 2500 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:56:19.0049 2500 NetPipeActivator - ok
11:56:19.0078 2500 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
11:56:19.0125 2500 netprofm - ok
11:56:19.0128 2500 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:56:19.0130 2500 NetTcpActivator - ok
11:56:19.0152 2500 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:56:19.0153 2500 NetTcpPortSharing - ok
11:56:19.0193 2500 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
11:56:19.0201 2500 nfrd960 - ok
11:56:19.0277 2500 NgFilter (8db6fa298cea49042d2186db93687e06) C:\Windows\system32\DRIVERS\ngfilter.sys
11:56:19.0309 2500 NgFilter - ok
11:56:19.0357 2500 NgLog (0dc66c56bd84edcb63622580663967c8) C:\Windows\system32\DRIVERS\nglog.sys
11:56:19.0366 2500 NgLog - ok
11:56:19.0399 2500 NgVpn (0daac97a4793f1a3f50e7d3eae4fbb0e) C:\Windows\system32\DRIVERS\ngvpn.sys
11:56:19.0410 2500 NgVpn - ok
11:56:19.0851 2500 NgVpnMgr (6deb291fa31d8293ab442299bc491102) C:\Windows\system32\ngvpnmgr.exe
11:56:19.0866 2500 NgVpnMgr - ok
11:56:20.0040 2500 NgWfp (d0f6eb2a72ba7c476aa19c986d67a982) C:\Windows\system32\DRIVERS\ngwfp.sys
11:56:20.0046 2500 NgWfp - ok
11:56:20.0102 2500 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
11:56:20.0112 2500 NlaSvc - ok
11:56:20.0265 2500 NMServiceManager (7197895323af822da17d9de79f48e09b) C:\Program Files (x86)\Micro Focus\NMServiceManager\NMServiceManager.exe
11:56:20.0283 2500 NMServiceManager - ok
11:56:20.0319 2500 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
11:56:20.0327 2500 Npfs - ok
11:56:20.0339 2500 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
11:56:20.0345 2500 nsi - ok
11:56:20.0355 2500 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
11:56:20.0363 2500 nsiproxy - ok
11:56:20.0442 2500 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
11:56:20.0468 2500 Ntfs - ok
11:56:20.0546 2500 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
11:56:20.0551 2500 Null - ok
11:56:21.0262 2500 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
11:56:21.0303 2500 nvraid - ok
11:56:21.0355 2500 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
11:56:21.0364 2500 nvstor - ok
11:56:21.0394 2500 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
11:56:21.0403 2500 nv_agp - ok
11:56:21.0432 2500 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
11:56:21.0440 2500 ohci1394 - ok
11:56:21.0539 2500 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:56:21.0551 2500 ose - ok
11:56:21.0804 2500 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
11:56:21.0935 2500 osppsvc - ok
11:56:22.0032 2500 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
11:56:22.0042 2500 p2pimsvc - ok
11:56:22.0068 2500 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
11:56:22.0085 2500 p2psvc - ok
11:56:22.0132 2500 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
11:56:22.0141 2500 Parport - ok
11:56:22.0176 2500 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
11:56:22.0183 2500 partmgr - ok
11:56:22.0239 2500 PBADRV (363b3f857abee85767e01e3044c539cd) C:\Windows\system32\DRIVERS\PBADRV.sys
11:56:22.0246 2500 PBADRV - ok
11:56:22.0264 2500 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
11:56:22.0272 2500 PcaSvc - ok
11:56:22.0306 2500 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
11:56:22.0315 2500 pci - ok
11:56:22.0323 2500 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
11:56:22.0328 2500 pciide - ok
11:56:22.0349 2500 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
11:56:22.0359 2500 pcmcia - ok
11:56:22.0369 2500 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
11:56:22.0375 2500 pcw - ok
11:56:22.0404 2500 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
11:56:22.0420 2500 PEAUTH - ok
11:56:22.0481 2500 PeerDistSvc (b9b0a4299dd2d76a4243f75fd54dc680) C:\Windows\system32\peerdistsvc.dll
11:56:22.0506 2500 PeerDistSvc - ok
11:56:22.0561 2500 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
11:56:22.0571 2500 PerfHost - ok
11:56:22.0709 2500 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
11:56:22.0735 2500 pla - ok
11:56:22.0794 2500 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
11:56:22.0812 2500 PlugPlay - ok
11:56:22.0871 2500 Pml Driver HPZ12 (ac78df349f0e4cfb8b667c0cfff83cce) C:\Windows\system32\HPZipm12.dll
11:56:22.0877 2500 Pml Driver HPZ12 - ok
11:56:22.0897 2500 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
11:56:22.0903 2500 PNRPAutoReg - ok
11:56:22.0924 2500 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
11:56:22.0927 2500 PNRPsvc - ok
11:56:22.0960 2500 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
11:56:22.0975 2500 PolicyAgent - ok
11:56:22.0995 2500 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
11:56:23.0003 2500 Power - ok
11:56:23.0048 2500 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
11:56:23.0057 2500 PptpMiniport - ok
11:56:23.0077 2500 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
11:56:23.0085 2500 Processor - ok
11:56:23.0105 2500 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
11:56:23.0114 2500 ProfSvc - ok
11:56:23.0136 2500 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
11:56:23.0143 2500 ProtectedStorage - ok
11:56:23.0185 2500 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
11:56:23.0195 2500 Psched - ok
11:56:23.0242 2500 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys
11:56:23.0250 2500 PxHlpa64 - ok
11:56:23.0465 2500 QBCFMonitorService (ee46f431b25c14778d2e89d6f10f1d65) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
11:56:23.0477 2500 QBCFMonitorService - ok
11:56:23.0774 2500 QBFCService (6bee1814470dc12fa20c53dfc3c97ebb) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
11:56:23.0816 2500 QBFCService - ok
11:56:24.0104 2500 QBPOSDBServiceV10 (2f5d36bda8728bc69d3c15b1fd5dba62) C:\Program Files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBPOSDBService.exe
11:56:24.0116 2500 QBPOSDBServiceV10 - ok
11:56:24.0248 2500 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
11:56:24.0289 2500 ql2300 - ok
11:56:24.0340 2500 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
11:56:24.0348 2500 ql40xx - ok
11:56:24.0415 2500 QuickBooksDB20 - ok
11:56:24.0446 2500 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
11:56:24.0455 2500 QWAVE - ok
11:56:24.0468 2500 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
11:56:24.0476 2500 QWAVEdrv - ok
11:56:24.0489 2500 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
11:56:24.0496 2500 RasAcd - ok
11:56:24.0549 2500 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
11:56:24.0557 2500 RasAgileVpn - ok
11:56:24.0568 2500 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
11:56:24.0576 2500 RasAuto - ok
11:56:24.0600 2500 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
11:56:24.0610 2500 Rasl2tp - ok
11:56:24.0667 2500 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
11:56:24.0677 2500 RasMan - ok
11:56:24.0690 2500 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
11:56:24.0699 2500 RasPppoe - ok
11:56:24.0739 2500 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
11:56:24.0747 2500 RasSstp - ok
11:56:24.0782 2500 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
11:56:24.0793 2500 rdbss - ok
11:56:24.0805 2500 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
11:56:24.0812 2500 rdpbus - ok
11:56:24.0818 2500 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
11:56:24.0823 2500 RDPCDD - ok
11:56:24.0851 2500 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
11:56:24.0861 2500 RDPDR - ok
11:56:24.0869 2500 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
11:56:24.0875 2500 RDPENCDD - ok
11:56:24.0878 2500 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
11:56:24.0884 2500 RDPREFMP - ok
11:56:24.0914 2500 RDPWD (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
11:56:24.0924 2500 RDPWD - ok
11:56:24.0961 2500 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
11:56:24.0972 2500 rdyboost - ok
11:56:25.0030 2500 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
11:56:25.0037 2500 RemoteAccess - ok
11:56:25.0049 2500 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
11:56:25.0057 2500 RemoteRegistry - ok
11:56:25.0066 2500 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
11:56:25.0072 2500 RpcEptMapper - ok
11:56:25.0088 2500 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
11:56:25.0094 2500 RpcLocator - ok
11:56:25.0138 2500 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
11:56:25.0147 2500 RpcSs - ok
11:56:25.0161 2500 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
11:56:25.0169 2500 rspndr - ok
11:56:25.0196 2500 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
11:56:25.0202 2500 s3cap - ok
11:56:25.0220 2500 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
11:56:25.0221 2500 SamSs - ok
11:56:25.0249 2500 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
11:56:25.0256 2500 sbp2port - ok
11:56:25.0272 2500 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
11:56:25.0281 2500 SCardSvr - ok
11:56:25.0313 2500 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
11:56:25.0319 2500 scfilter - ok
11:56:25.0766 2500 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
11:56:25.0786 2500 Schedule - ok
11:56:25.0866 2500 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
11:56:25.0872 2500 SCPolicySvc - ok
11:56:25.0901 2500 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
11:56:25.0910 2500 SDRSVC - ok
11:56:25.0947 2500 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
11:56:25.0954 2500 secdrv - ok
11:56:25.0984 2500 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
11:56:25.0990 2500 seclogon - ok
11:56:26.0405 2500 SecureStorageService (38a40e111abdf0862b72bb37a8bd5e62) C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
11:56:26.0458 2500 SecureStorageService - ok
11:56:26.0546 2500 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
11:56:26.0553 2500 SENS - ok
11:56:26.0564 2500 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
11:56:26.0570 2500 SensrSvc - ok
11:56:26.0615 2500 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
11:56:26.0622 2500 Serenum - ok
11:56:26.0638 2500 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
11:56:26.0647 2500 Serial - ok
11:56:26.0674 2500 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
11:56:26.0682 2500 sermouse - ok
11:56:26.0711 2500 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
11:56:26.0718 2500 SessionEnv - ok
11:56:26.0742 2500 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
11:56:26.0748 2500 sffdisk - ok
11:56:26.0761 2500 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
11:56:26.0766 2500 sffp_mmc - ok
11:56:26.0779 2500 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
11:56:26.0785 2500 sffp_sd - ok
11:56:26.0822 2500 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
11:56:26.0829 2500 sfloppy - ok
11:56:26.0884 2500 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
11:56:26.0895 2500 SharedAccess - ok
11:56:26.0937 2500 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
11:56:26.0951 2500 ShellHWDetection - ok
11:56:26.0991 2500 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
11:56:26.0998 2500 SiSRaid2 - ok
11:56:27.0015 2500 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
11:56:27.0022 2500 SiSRaid4 - ok
11:56:27.0058 2500 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
11:56:27.0066 2500 Smb - ok
11:56:27.0092 2500 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
11:56:27.0098 2500 SNMPTRAP - ok
11:56:27.0105 2500 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
11:56:27.0111 2500 spldr - ok
11:56:27.0139 2500 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
11:56:27.0151 2500 Spooler - ok
11:56:27.0295 2500 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
11:56:27.0322 2500 sppsvc - ok
11:56:27.0414 2500 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
11:56:27.0421 2500 sppuinotify - ok
11:56:27.0462 2500 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
11:56:27.0482 2500 srv - ok
11:56:27.0532 2500 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
11:56:27.0553 2500 srv2 - ok
11:56:27.0585 2500 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
11:56:27.0594 2500 srvnet - ok
11:56:27.0631 2500 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
11:56:27.0640 2500 SSDPSRV - ok
11:56:27.0649 2500 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
11:56:27.0656 2500 SstpSvc - ok
11:56:27.0678 2500 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
11:56:27.0684 2500 stexstor - ok
11:56:27.0728 2500 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
11:56:27.0764 2500 stisvc - ok
11:56:27.0944 2500 stllssvr (e476c66713c842f58e61a95826ed1d57) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
11:56:27.0961 2500 stllssvr - ok
11:56:27.0997 2500 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
11:56:28.0006 2500 storflt - ok
11:56:28.0031 2500 StorSvc (c40841817ef57d491f22eb103da587cc) C:\Windows\system32\storsvc.dll
11:56:28.0037 2500 StorSvc - ok
11:56:28.0193 2500 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
11:56:28.0223 2500 storvsc - ok
11:56:28.0261 2500 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
11:56:28.0269 2500 swenum - ok
11:56:28.0309 2500 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
11:56:28.0329 2500 swprv - ok
11:56:28.0435 2500 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
11:56:28.0482 2500 SysMain - ok
11:56:28.0605 2500 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
11:56:28.0616 2500 TabletInputService - ok
11:56:28.0667 2500 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
11:56:28.0681 2500 TapiSrv - ok
11:56:28.0703 2500 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
11:56:28.0713 2500 TBS - ok
11:56:28.0820 2500 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
11:56:28.0861 2500 Tcpip - ok
11:56:29.0026 2500 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
11:56:29.0037 2500 TCPIP6 - ok
11:56:29.0289 2500 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
11:56:29.0325 2500 tcpipreg - ok
11:56:30.0616 2500 tcsd_win32.exe (69f1a38a6dbfe682491cb61a596662e3) C:\Program Files (x86)\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe
11:56:30.0700 2500 tcsd_win32.exe - ok
11:56:31.0062 2500 TdmService (8c6740f641a1c3d56a1a396aeb0158e7) C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
11:56:31.0089 2500 TdmService - ok
11:56:31.0335 2500 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
11:56:31.0376 2500 TDPIPE - ok
11:56:31.0427 2500 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
11:56:31.0438 2500 TDTCP - ok
11:56:31.0472 2500 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
11:56:31.0484 2500 tdx - ok
11:56:31.0528 2500 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
11:56:31.0538 2500 TermDD - ok
11:56:31.0773 2500 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
11:56:31.0797 2500 TermService - ok
11:56:31.0819 2500 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
11:56:31.0828 2500 Themes - ok
11:56:31.0853 2500 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
11:56:31.0862 2500 THREADORDER - ok
11:56:31.0917 2500 tmactmon (ba110e99d074cab719e29ccbf048b7b2) C:\Windows\system32\DRIVERS\tmactmon.sys
11:56:31.0928 2500 tmactmon - ok
11:56:31.0976 2500 tmcomm (c8790e3f9a7bb061825aa7bde2c95a92) C:\Windows\system32\DRIVERS\tmcomm.sys
11:56:31.0988 2500 tmcomm - ok
11:56:32.0461 2500 tmevtmgr (9bf63b74bf7d6277889b36814ccf7de8) C:\Windows\system32\DRIVERS\tmevtmgr.sys
11:56:32.0470 2500 tmevtmgr - ok
11:56:32.0863 2500 TmListen (f2c6ebc814afa6b857518804dcd26114) C:\Program Files\Trend Micro\Security Agent\tmlisten.exe
11:56:32.0875 2500 TmListen - ok
11:56:32.0916 2500 tmtdi (77b9bebb0769f45ef770297196ef3506) C:\Windows\system32\DRIVERS\tmtdi.sys
11:56:32.0922 2500 tmtdi - ok
11:56:32.0939 2500 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
11:56:32.0946 2500 TrkWks - ok
11:56:33.0005 2500 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
11:56:33.0021 2500 TrustedInstaller - ok
11:56:33.0063 2500 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
11:56:33.0074 2500 tssecsrv - ok
11:56:33.0125 2500 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
11:56:33.0136 2500 TsUsbFlt - ok
11:56:33.0236 2500 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
11:56:33.0251 2500 tunnel - ok
11:56:33.0480 2500 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
11:56:33.0523 2500 uagp35 - ok
11:56:33.0657 2500 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
11:56:33.0675 2500 udfs - ok
11:56:33.0705 2500 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
11:56:33.0713 2500 UI0Detect - ok
11:56:33.0763 2500 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
11:56:33.0794 2500 uliagpkx - ok
11:56:33.0847 2500 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
11:56:33.0857 2500 umbus - ok
11:56:33.0872 2500 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
11:56:33.0880 2500 UmPass - ok
11:56:33.0913 2500 UmRdpService (a293dcd756d04d8492a750d03b9a297c) C:\Windows\System32\umrdp.dll
11:56:33.0925 2500 UmRdpService - ok
11:56:33.0948 2500 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
11:56:33.0963 2500 upnphost - ok
11:56:33.0980 2500 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
11:56:33.0992 2500 usbccgp - ok
11:56:34.0013 2500 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
11:56:34.0025 2500 usbcir - ok
11:56:34.0041 2500 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
11:56:34.0051 2500 usbehci - ok
11:56:34.0111 2500 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
11:56:34.0129 2500 usbhub - ok
11:56:34.0147 2500 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
11:56:34.0153 2500 usbohci - ok
11:56:34.0168 2500 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
11:56:34.0175 2500 usbprint - ok
11:56:34.0201 2500 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
11:56:34.0209 2500 USBSTOR - ok
11:56:34.0450 2500 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys
11:56:34.0491 2500 usbuhci - ok
11:56:34.0765 2500 uvnc_service (b840c0d1a043bd4f3d98ee0c8bd8de72) C:\Program Files (x86)\UltraVNC\WinVNC.exe
11:56:34.0773 2500 uvnc_service - ok
11:56:34.0846 2500 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
11:56:34.0853 2500 UxSms - ok
11:56:34.0872 2500 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
11:56:34.0873 2500 VaultSvc - ok
11:56:34.0919 2500 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
11:56:34.0925 2500 vdrvroot - ok
11:56:34.0973 2500 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
11:56:35.0020 2500 vds - ok
11:56:35.0047 2500 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
11:56:35.0058 2500 vga - ok
11:56:35.0074 2500 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
11:56:35.0085 2500 VgaSave - ok
11:56:35.0118 2500 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
11:56:35.0133 2500 vhdmp - ok
11:56:35.0143 2500 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
11:56:35.0152 2500 viaide - ok
11:56:35.0179 2500 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
11:56:35.0188 2500 vmbus - ok
11:56:35.0209 2500 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
11:56:35.0216 2500 VMBusHID - ok
11:56:35.0232 2500 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
11:56:35.0239 2500 volmgr - ok
11:56:35.0279 2500 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
11:56:35.0295 2500 volmgrx - ok
11:56:35.0336 2500 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
11:56:35.0352 2500 volsnap - ok
11:56:35.0403 2500 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
11:56:35.0415 2500 vsmraid - ok
11:56:35.0493 2500 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
11:56:35.0555 2500 VSS - ok
11:56:35.0707 2500 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
11:56:35.0715 2500 vwifibus - ok
11:56:36.0172 2500 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
11:56:36.0185 2500 W32Time - ok
11:56:36.0272 2500 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
11:56:36.0298 2500 WacomPen - ok
11:56:36.0375 2500 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
11:56:36.0388 2500 WANARP - ok
11:56:36.0417 2500 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
11:56:36.0418 2500 Wanarpv6 - ok
11:56:36.0636 2500 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
11:56:36.0676 2500 WatAdminSvc - ok
11:56:36.0777 2500 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
11:56:36.0819 2500 wbengine - ok
11:56:36.0964 2500 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
11:56:36.0977 2500 WbioSrvc - ok
11:56:37.0019 2500 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
11:56:37.0033 2500 wcncsvc - ok
11:56:37.0046 2500 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
11:56:37.0055 2500 WcsPlugInService - ok
11:56:37.0079 2500 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
11:56:37.0086 2500 Wd - ok
11:56:37.0126 2500 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
11:56:37.0177 2500 Wdf01000 - ok
11:56:37.0194 2500 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
11:56:37.0204 2500 WdiServiceHost - ok
11:56:37.0207 2500 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
11:56:37.0209 2500 WdiSystemHost - ok
11:56:37.0239 2500 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
11:56:37.0249 2500 WebClient - ok
11:56:37.0268 2500 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
11:56:37.0277 2500 Wecsvc - ok
11:56:37.0291 2500 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
11:56:37.0298 2500 wercplsupport - ok
11:56:37.0315 2500 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
11:56:37.0322 2500 WerSvc - ok
11:56:37.0357 2500 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
11:56:37.0366 2500 WfpLwf - ok
11:56:37.0379 2500 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
11:56:37.0388 2500 WIMMount - ok
11:56:37.0435 2500 winachsf (a6ea7a3fc4b00f48535b506db1e86efd) C:\Windows\system32\DRIVERS\CAX_CNXT.sys
11:56:37.0476 2500 winachsf - ok
11:56:37.0529 2500 WinDefend - ok
11:56:37.0604 2500 Windows Agent Maintenance Service (29f3008090d6352e5bab2bbe9d6bd484) C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe
11:56:37.0605 2500 Windows Agent Maintenance Service - ok
11:56:37.0634 2500 Windows Agent Service (418717f2efa7531152f85b228856d69d) C:\Program Files (x86)\N-able Technologies\Windows Agent\bin\agent.exe
11:56:37.0636 2500 Windows Agent Service - ok
11:56:37.0708 2500 WinDriver6 (4de7d61cf51f4c8261d119cfbdb70243) C:\Windows\system32\DRIVERS\Windrvr6.sys
11:56:37.0722 2500 WinDriver6 - ok
11:56:37.0724 2500 WinHttpAutoProxySvc - ok
11:56:37.0760 2500 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
11:56:37.0768 2500 Winmgmt - ok
11:56:37.0864 2500 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
11:56:37.0916 2500 WinRM - ok
11:56:38.0025 2500 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
11:56:38.0035 2500 WinUsb - ok
11:56:38.0084 2500 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
11:56:38.0126 2500 Wlansvc - ok
11:56:38.0147 2500 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
11:56:38.0152 2500 WmiAcpi - ok
11:56:38.0185 2500 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
11:56:38.0196 2500 wmiApSrv - ok
11:56:38.0226 2500 WMPNetworkSvc - ok
11:56:38.0244 2500 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
11:56:38.0253 2500 WPCSvc - ok
11:56:38.0279 2500 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
11:56:38.0288 2500 WPDBusEnum - ok
11:56:38.0305 2500 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
11:56:38.0315 2500 ws2ifsl - ok
11:56:38.0354 2500 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
11:56:38.0364 2500 wscsvc - ok
11:56:38.0367 2500 WSearch - ok
11:56:38.0479 2500 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
11:56:38.0498 2500 wuauserv - ok
11:56:38.0699 2500 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
11:56:38.0712 2500 WudfPf - ok
11:56:38.0776 2500 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
11:56:38.0790 2500 WUDFRd - ok
11:56:38.0823 2500 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
11:56:38.0834 2500 wudfsvc - ok
11:56:38.0850 2500 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
11:56:38.0861 2500 WwanSvc - ok
11:56:38.0882 2500 XAudio (e8f3fa126a06f8e7088f63757112a186) C:\Windows\system32\DRIVERS\XAudio64.sys
11:56:38.0888 2500 XAudio - ok
11:56:38.0933 2500 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0
11:56:38.0999 2500 \Device\Harddisk0\DR0 - ok
11:56:39.0004 2500 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
11:56:41.0990 2500 \Device\Harddisk1\DR1 - ok
11:56:41.0998 2500 Boot (0x1200) (63f96203ae28fa4e463bd32848485406) \Device\Harddisk0\DR0\Partition0
11:56:41.0999 2500 \Device\Harddisk0\DR0\Partition0 - ok
11:56:42.0012 2500 Boot (0x1200) (5ee66f2ae00540824c2d0e8dcee860f4) \Device\Harddisk0\DR0\Partition1
11:56:42.0013 2500 \Device\Harddisk0\DR0\Partition1 - ok
11:56:42.0016 2500 Boot (0x1200) (03c5e948be76dc96fdc70b7d7edcd056) \Device\Harddisk1\DR1\Partition0
11:56:42.0017 2500 \Device\Harddisk1\DR1\Partition0 - ok
11:56:42.0018 2500 ============================================================
11:56:42.0018 2500 Scan finished
11:56:42.0018 2500 ============================================================
11:56:42.0025 1064 Detected object count: 0
11:56:42.0025 1064 Actual detected object count: 0
11:56:50.0573 4824 Deinitialize success



#11 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 03 May 2012 - 12:51 PM

Greetings

please DON'T put the report in quote tags

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

ClearJavaCache::

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe
Posted Image
This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following

  • report from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now after running the script?

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#12 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 03 May 2012 - 07:36 PM

Computer Is running Great after most recent combfix run.

While Combofix was running, an error message popped up.
said something along the lines that PEV.exe had stopped working due to some program. I ignored this and let combofix finish.

here is combofix log (part 1, part 2 in next post)

ComboFix 12-05-02.03 - mjm 05/03/2012 20:19:13.3.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.4030.2656 [GMT -4:00]
Running from: c:\users\mjm.MRAINC\Desktop\ComboFix.exe
Command switches used :: c:\users\mjm.MRAINC\Downloads\CFScript.txt
AV: Trend Micro Security Agent *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
SP: Trend Micro Security Agent *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-04-04 to 2012-05-04 )))))))))))))))))))))))))))))))
.
.
2012-05-04 00:24 . 2012-05-04 00:24 -------- d-----w- c:\users\QBDataServiceUser20\AppData\Local\temp
2012-05-04 00:24 . 2012-05-04 00:24 -------- d-----w- c:\users\MJM\AppData\Local\temp
2012-05-04 00:24 . 2012-05-04 00:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-05-04 00:24 . 2012-05-04 00:24 -------- d-----w- c:\users\administrator\AppData\Local\temp
2012-05-03 15:45 . 2012-04-18 07:03 8917360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{354820FD-F64E-4A56-BB85-A1A6E191C26A}\mpengine.dll
2012-05-02 22:01 . 2012-03-06 06:53 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-02 22:01 . 2012-03-06 05:59 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-02 22:01 . 2012-03-06 05:59 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-02 22:01 . 2012-05-02 22:01 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2012-05-02 21:58 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-05-02 21:58 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-05-02 21:58 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-05-02 21:58 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-05-02 21:58 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-05-02 21:58 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-05-02 21:58 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-05-02 17:16 . 2011-12-28 03:59 498688 ----a-w- c:\windows\system32\drivers\afd.sys
2012-05-02 17:16 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-05-02 17:16 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-05-02 17:16 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-05-02 17:16 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-05-02 17:16 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
2012-05-02 17:16 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2012-05-02 17:16 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2012-05-02 17:16 . 2011-12-16 08:46 634880 ----a-w- c:\windows\system32\msvcrt.dll
2012-05-02 17:16 . 2011-12-16 07:52 690688 ----a-w- c:\windows\SysWow64\msvcrt.dll
2012-05-02 17:15 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-05-02 17:15 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-05-02 17:15 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-05-02 17:15 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-05-02 17:15 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-05-01 16:20 . 2011-11-17 06:49 152432 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-05-01 16:20 . 2011-11-17 06:35 340992 ----a-w- c:\windows\system32\schannel.dll
2012-05-01 16:17 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
2012-05-01 16:17 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-05-01 16:17 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-05-01 16:17 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-05-01 16:17 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-05-01 16:17 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-04-30 16:29 . 2012-04-30 20:23 -------- d-----w- c:\windows\system32\MpEngineStore
2012-04-28 16:14 . 2012-04-28 16:14 -------- d-----w- c:\users\mjm.MRAINC\AppData\Local\Mozilla
2012-04-28 16:14 . 2012-04-28 16:14 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2012-04-28 11:24 . 2012-04-28 11:24 -------- d-----w- c:\users\TEMP
2012-04-28 11:20 . 2012-05-04 00:25 -------- d-----w- c:\users\mjm.MRAINC\AppData\Local\temp
2012-04-28 00:18 . 2012-04-28 00:18 128512 ----a-w- c:\windows\RegBootClean64.exe
2012-04-27 21:24 . 2012-04-29 15:40 12800 ----a-w- c:\windows\DCEBoot64.exe
2012-04-27 15:42 . 2012-04-27 15:42 -------- d-----w- c:\users\mjm.MRAINC\AppData\Roaming\Malwarebytes
2012-04-27 15:42 . 2012-04-27 15:42 -------- d-----w- c:\programdata\Malwarebytes
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-21 15:28 . 2012-03-29 14:46 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-04-21 15:28 . 2011-06-08 12:42 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-23 14:18 . 2010-11-18 15:43 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-14 16:09 . 2012-02-14 16:09 1070352 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
.
.
((((((((((((((((((((((((((((( SnapShot_2012-05-02_18.12.31 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-21 04:05 . 2009-07-21 04:05 91656 c:\windows\SysWOW64\msxml4r.dll
+ 2012-05-02 17:17 . 2012-02-28 05:35 67072 c:\windows\SysWOW64\mshtmled.dll
- 2011-11-13 23:47 . 2011-08-20 04:27 67072 c:\windows\SysWOW64\mshtmled.dll
- 2011-11-13 23:47 . 2011-08-20 04:31 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-05-02 17:17 . 2012-02-28 05:38 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
- 2011-11-13 23:47 . 2011-08-20 04:27 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2012-05-02 17:17 . 2012-02-28 05:34 48128 c:\windows\SysWOW64\jsproxy.dll
+ 2010-11-12 00:08 . 2012-05-04 00:16 48996 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-05-04 00:16 36864 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2011-11-13 23:47 . 2011-08-20 05:34 97280 c:\windows\system32\mshtmled.dll
+ 2012-05-02 17:17 . 2012-02-28 06:36 97280 c:\windows\system32\mshtmled.dll
+ 2012-05-02 17:17 . 2012-02-28 06:39 95232 c:\windows\system32\migration\WininetPlugin.dll
- 2011-11-13 23:47 . 2011-08-20 05:37 95232 c:\windows\system32\migration\WininetPlugin.dll
+ 2012-05-02 17:17 . 2012-02-28 06:35 64512 c:\windows\system32\jsproxy.dll
- 2011-11-13 23:47 . 2011-08-20 05:33 64512 c:\windows\system32\jsproxy.dll
- 2010-11-18 15:13 . 2012-05-02 17:14 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-11-18 15:13 . 2012-05-03 16:37 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-11-18 15:13 . 2012-05-03 16:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-11-18 15:13 . 2012-05-02 17:14 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-05-02 17:14 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-05-03 16:37 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-09 20:35 . 2012-05-03 15:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-05-09 20:35 . 2012-05-02 18:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-05-09 20:35 . 2012-05-02 18:10 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-05-09 20:35 . 2012-05-03 15:39 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-05-09 20:35 . 2012-05-02 18:10 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-09 20:35 . 2012-05-03 15:39 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-18 20:18 . 2012-05-04 00:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-18 20:18 . 2012-05-02 18:11 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-11-18 20:18 . 2012-05-04 00:17 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-11-18 20:18 . 2012-05-02 18:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-12-26 09:18 . 2011-12-26 09:18 16656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-12-26 09:18 . 2011-12-26 09:18 41744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe
+ 2012-05-02 17:17 . 2011-12-25 20:40 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
+ 2011-12-26 07:54 . 2011-12-26 07:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
+ 2012-05-02 17:17 . 2011-12-25 20:42 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2012-05-02 22:04 . 2012-05-02 22:04 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-05-02 22:04 . 2012-05-02 22:04 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-05-02 22:03 . 2012-05-02 22:03 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 76200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 79776 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-05-01 17:00 . 2012-05-01 17:00 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-09-14 14:38 . 2011-09-14 14:38 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 15208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 27528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.v4.0.Framework\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v4.0.Framework.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 56184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 91512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Common\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-11-19 14:08 . 2010-11-19 14:08 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2012-05-02 22:04 . 2012-05-02 22:04 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-02-25 16:07 . 2010-02-25 16:07 49488 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\VBAJET32.DLL
+ 2010-01-10 02:47 . 2010-01-10 02:47 29528 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\THOCRAPI.DLL
+ 2010-03-23 01:36 . 2010-03-23 01:36 82848 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PEOPLEDATAHANDLER.DLL
+ 2010-03-23 01:36 . 2010-03-23 01:36 45984 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OSETUPPS.DLL
+ 2010-03-23 01:36 . 2010-03-23 01:36 15776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OMUOPTINPS.DLL
+ 2010-02-28 07:13 . 2010-02-28 07:13 20880 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MUOPTIN.DLL
+ 2010-03-01 10:17 . 2010-03-01 10:17 14736 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOCFUIU.DLL
+ 2010-01-11 00:48 . 2010-01-11 00:48 18832 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOCFU.DLL
+ 2010-03-01 10:09 . 2010-03-01 10:09 61832 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSAEXP30.DLL
+ 2010-03-23 01:36 . 2010-03-23 01:36 58232 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EXP_XPS.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 44480 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACERCLR.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODTXT.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODEXL.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 14776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODDBS.DLL
+ 2010-03-23 15:54 . 2010-03-23 15:54 37776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEERR.DLL
+ 2010-02-28 09:33 . 2010-02-28 09:33 93576 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACCOLK.DLL
+ 2011-11-14 16:01 . 2011-11-14 16:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACCESSPL.DLL
+ 2011-11-14 16:01 . 2011-11-14 16:01 11656 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACC12PL.DLL
+ 2012-05-03 16:22 . 2012-05-03 16:22 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\f137c53afae3903f20eba1fa0f8f8dad\System.Xml.Serialization.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\d4c98757d64684477081d5f200e875c1\System.Xaml.Hosting.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\ef151d5b49d8b0d0052d05fc56d25107\System.Windows.Presentation.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Routing\8295dbd8d0d3dbbfac33aa7dc15c8d29\System.Web.Routing.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\987ad3f7a65b6f4671af5b4652ddf4d0\System.Web.DynamicData.Design.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\c5b08a1a9a7a97922af50f30b5e32268\System.Web.ApplicationServices.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Abstract#\46c50dbb9de3e13078242f8b3b32e4fe\System.Web.Abstractions.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 13824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\f0042f79d36bedda0e99e2892bb02fe7\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\5b53a87f7799ee5454e4fb8faece3a82\System.AddIn.Contract.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 47616 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\64fd2fd1812f2536afaec66752707952\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-02 22:02 . 2012-05-02 22:02 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\a4e98103e5d36bf22ef19c64442543f2\Microsoft.VisualC.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 28160 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\6885348510555806f55825539f99691b\Microsoft.Office.Tools.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 55808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\1564c97d4494d51111c907058d8664e8\Microsoft.Office.Tools.v4.0.Framework.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\cbd21f19057f07ec2cb55b2bef91f344\dfsvc.ni.exe
+ 2012-05-02 22:01 . 2012-05-02 22:01 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\52890eb2a4f8d822bff7e9cddc713fb5\Accessibility.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\8dd565cc0b374e1eec73cf7eaba91e92\UIAutomationProvider.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\31c9ef760d04c92e17106dae1a9091f4\System.Xaml.Hosting.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\077e75015456f75a0495f65cfcf140cb\System.Windows.Presentation.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\205067fe0e5c75891b489719b799c79d\System.Web.Routing.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\e7efc73c52a5aeaf1fc83470ed455f4f\System.Web.DynamicData.Design.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\22a9aa847a8e4e651a35b63270ce8999\System.Web.ApplicationServices.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\931f8d259c4bde5078375e82897db92f\System.Web.Abstractions.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\fdeb5ca04943da59f732d3001d6a0df0\System.ServiceModel.Channels.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5ab20ea5fd89e0e8ba9e93e297cea012\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\9688786618bf6390637c283b5bd1c9b3\System.AddIn.Contract.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\974157f629303efea6fc23e6578901ba\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-03 16:13 . 2012-05-03 16:13 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\6ffc3ac04451b4978519218fd266403e\Microsoft.VisualC.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 45056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\9d5e0f70ee77a55f1ce32fac3366ac38\Microsoft.Office.Tools.v4.0.Framework.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 21504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\11b10e95e6c0b206ea453097cda58614\Microsoft.Office.Tools.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\8cbc15b63aa3f06453f1aaa8659cf809\Accessibility.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\66b5c693a8aa660276216d7a521da5e2\System.Web.DynamicData.Design.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d1f2d3b5e187e3bc12ec2522bb845392\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\60011d8c51e32dffe9342397dabf4e5d\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1371ed674fc04f510cb41524e2d4322d\System.Web.DynamicData.Design.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cd2766ef74cee07c420507db80aed932\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\625efeb26f5791302a0777b08feeae18\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0d338dece43bd674e4ed5701777a18e7\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
- 2011-11-14 16:01 . 2011-11-14 16:01 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.dll
- 2011-11-14 16:01 . 2011-11-14 16:01 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 83896 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 41408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 63408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 77752 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 23976 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 62392 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll
+ 2010-11-18 20:18 . 2012-05-03 15:55 9984 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2097351910-1350271648-2131945979-1112_UserData.bin
+ 2012-05-04 00:25 . 2012-05-04 00:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-02 18:10 . 2012-05-02 18:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-02 18:10 . 2012-05-02 18:10 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-05-04 00:25 . 2012-05-04 00:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-05-03 16:15 . 2012-05-03 16:15 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\6bafe185b3d23de57ec689035642fe43\System.Xml.Serialization.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\592252ee904bd41f99cd1d19909b548c\dfsvc.ni.exe
- 2011-11-13 23:47 . 2011-08-20 04:31 981504 c:\windows\SysWOW64\wininet.dll
+ 2012-05-02 17:17 . 2012-02-28 05:38 981504 c:\windows\SysWOW64\wininet.dll
+ 2012-05-02 17:17 . 2012-02-28 05:38 132096 c:\windows\SysWOW64\url.dll
- 2011-11-13 23:47 . 2011-08-20 04:30 132096 c:\windows\SysWOW64\url.dll
+ 2012-05-02 17:17 . 2012-02-28 05:35 599552 c:\windows\SysWOW64\msfeeds.dll
- 2011-11-13 23:47 . 2011-08-20 04:27 599552 c:\windows\SysWOW64\msfeeds.dll
+ 2012-05-02 17:17 . 2011-10-14 04:24 716800 c:\windows\SysWOW64\jscript.dll
- 2011-07-30 13:44 . 2011-02-18 05:41 716800 c:\windows\SysWOW64\jscript.dll
- 2011-11-13 23:47 . 2011-08-20 04:26 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-05-02 17:17 . 2012-02-28 05:34 176640 c:\windows\SysWOW64\ieui.dll
- 2011-11-13 23:47 . 2011-08-20 05:37 134144 c:\windows\system32\url.dll
+ 2012-05-02 17:17 . 2012-02-28 06:39 134144 c:\windows\system32\url.dll
- 2009-07-14 02:36 . 2012-05-02 17:12 664190 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-05-04 00:20 664190 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-05-04 00:20 122842 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2012-05-02 17:12 122842 c:\windows\system32\perfc009.dat
+ 2012-05-02 17:17 . 2012-02-28 06:36 702464 c:\windows\system32\msfeeds.dll
- 2011-11-13 23:47 . 2011-08-20 05:34 702464 c:\windows\system32\msfeeds.dll
+ 2012-05-02 17:17 . 2011-10-14 05:31 918528 c:\windows\system32\jscript.dll
- 2011-11-13 23:47 . 2011-08-20 05:33 247808 c:\windows\system32\ieui.dll
+ 2012-05-02 17:17 . 2012-02-28 06:35 247808 c:\windows\system32\ieui.dll
+ 2009-07-14 04:46 . 2012-05-03 15:52 108496 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2009-07-14 05:01 . 2012-05-02 18:09 429020 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-05-04 00:24 429020 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-26 09:18 . 2011-12-26 09:18 721680 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2011-12-26 09:47 . 2011-12-26 09:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
+ 2012-05-02 17:17 . 2011-12-25 20:40 746256 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-26 08:39 . 2011-12-26 08:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2011-11-22 02:31 . 2011-11-22 02:31 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2012-05-02 17:17 . 2011-12-25 20:42 437520 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 616216 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 397208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 133544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.Internal\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 201648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 163744 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 141688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Word\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 341392 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.Implementation\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.Implementation.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 139672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.Implementation\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.Implementation.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 171384 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 465304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.Implementation\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.Implementation.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 357272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.Implementation\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.Implementation.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-04-29 00:27 . 2011-04-29 00:27 608768 c:\windows\Installer\304851.msp
+ 2011-10-27 02:46 . 2011-10-27 02:46 794112 c:\windows\Installer\3046c9.msp
- 2011-11-13 23:58 . 2012-05-01 16:59 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-12-21 05:30 . 2010-12-21 05:30 579968 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\VPREVIEW.EXE
+ 2010-02-28 08:13 . 2010-02-28 08:13 579968 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\VPREVIEW.EXE
+ 2010-01-10 02:47 . 2010-01-10 02:47 133512 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\TWCUTCHR.DLL
+ 2010-03-01 10:09 . 2010-03-01 10:09 524176 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\SOA.DLL
+ 2010-02-28 07:13 . 2010-02-28 07:13 521616 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\SELFCERT.EXE
+ 2010-03-01 09:56 . 2010-03-01 09:56 647552 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PTXT9.DLL
+ 2010-02-28 07:22 . 2010-02-28 07:22 139136 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PRTF9.DLL
+ 2010-02-28 07:21 . 2010-02-28 07:21 259960 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OISGRAPH.DLL
+ 2010-02-28 07:21 . 2010-02-28 07:21 886640 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OISAPP.DLL
+ 2010-02-28 07:21 . 2010-02-28 07:21 274280 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OIS.EXE
+ 2010-02-28 07:09 . 2010-02-28 07:09 401784 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OFFXML.DLL
+ 2010-03-11 05:44 . 2010-03-11 05:44 510904 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ODEPLOY.EXE
+ 2010-01-10 02:23 . 2010-01-10 02:23 169352 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OARPMANY.EXE
+ 2010-02-28 07:15 . 2010-02-28 07:15 702312 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSTORDB.EXE
+ 2010-03-30 02:47 . 2010-03-30 02:47 218464 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSPROOF6.DLL
+ 2010-03-25 01:28 . 2010-03-25 01:28 473952 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOICONS.EXE
+ 2010-03-06 10:29 . 2010-03-06 10:29 501088 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSODCW.DLL
+ 2010-03-01 10:17 . 2010-03-01 10:17 152952 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOCF.DLL
+ 2009-09-04 14:02 . 2009-09-04 14:02 591680 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSLID.DLL
+ 2010-03-30 02:47 . 2010-03-30 02:47 787864 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSET7TKJP.DLL
+ 2010-03-30 02:47 . 2010-03-30 02:47 512392 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSET7TK.DLL
+ 2010-03-30 02:47 . 2010-03-30 02:47 543144 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSET7.DLL
+ 2010-03-25 01:28 . 2010-03-25 01:28 571232 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MISC.EXE
+ 2010-02-28 07:15 . 2010-02-28 07:15 698216 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MEDCAT.DLL
+ 2011-11-14 16:01 . 2011-11-14 16:01 960384 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\LOBIOBDA.DLL
+ 2010-03-23 01:36 . 2010-03-23 01:36 178560 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\IETAG.DLL
+ 2010-02-04 09:41 . 2010-02-04 09:41 120160 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\FLTLDR.EXE
+ 2010-02-25 16:07 . 2010-02-25 16:07 452936 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EXPSRV.DLL
+ 2010-03-23 16:03 . 2010-03-23 16:03 104824 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EXP_PDF.DLL
+ 2010-03-23 02:30 . 2010-03-23 02:30 115584 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EMABLT32.DLL
+ 2010-02-28 07:09 . 2010-02-28 07:09 519584 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\DWTRIG20.EXE
+ 2010-03-01 10:18 . 2010-03-01 10:18 397656 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\CDLMSO.DLL
+ 2010-01-19 01:59 . 2010-01-19 01:59 998776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ASMAIN.DLL
+ 2010-01-19 01:59 . 2010-01-19 01:59 100280 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ASLTS.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 362904 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEXBE.DLL
+ 2010-03-01 10:19 . 2010-03-01 10:19 247200 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEWSS.DLL
+ 2010-03-23 15:54 . 2010-03-23 15:54 220560 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACETXT.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 527776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEREP.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 329624 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACER3X.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 383904 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEOLEDB.DLL
+ 2010-03-23 01:51 . 2010-03-23 01:51 278448 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODBC.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 643992 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEEXCL.DLL
+ 2010-03-23 15:54 . 2010-03-23 15:54 334752 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEEXCH.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 686504 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEES.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 548792 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEDAO.DLL
+ 2010-02-28 09:33 . 2010-02-28 09:33 164224 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACCWIZ.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 548792 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACACEDAO.DLL
- 2011-03-13 20:50 . 2010-11-20 13:27 465920 c:\windows\ehome\mstvcapn.dll
+ 2012-05-02 17:16 . 2011-10-29 05:23 465920 c:\windows\ehome\mstvcapn.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\ce782fd1260cae5ae699b71e0d812d83\XamlBuildTask.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 462336 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\eac69863f449fe367f746d5f0a350679\WsatConfig.ni.exe
+ 2012-05-03 16:22 . 2012-05-03 16:22 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\3893bfa343bfd255531a743ffa660722\WindowsFormsIntegration.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\b2a2a1fb4e1313088250b334b3af2a15\UIAutomationTypes.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\89414bab411eb27c7c181df81b4d36a5\UIAutomationProvider.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\cd55f47d44c3695862bc047b8e86fcd3\UIAutomationClient.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\910d557d55f4fc7bb51ace0546bd3c50\System.Xml.Linq.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\dcb9e1eaa1491094f79c3288b8c78830\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\3baa7121b73af962dc8cd7dd95235a0c\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 314880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\ebfbacf10670251b2db61f2cbca08af3\System.Web.RegularExpressions.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\24054b418b6bd8b575b4561d2a0090e3\System.Web.Entity.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\ec94932881ce0b6abc0c91433a6b69f0\System.Web.Entity.Design.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\84b0d19714fbc794a1d639706cc60843\System.Web.DynamicData.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 331776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\215f6508fa8f0fd1613c0cbfb7646d98\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\922f3f17f5112441e77f9d3d56d5b753\System.Transactions.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\a38a67bfd6245b2f72eb918a57d37bcd\System.ServiceProcess.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\909c8d76773648809478644ac50a21eb\System.ServiceModel.Routing.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 587776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\7bb3d57e54fb2ce288cfe4cacd43a893\System.ServiceModel.Activation.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\26db69101f5bcf148fd962f00c0e78dd\System.ServiceModel.Channels.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\878946615037b9d5f09916c598420dc1\System.Security.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\73cc698ccc98e37f53cdbff3687a921c\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\2da997f0d78859f06d72fcc61fc1a36f\System.Runtime.Remoting.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 311296 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\c64bdda4c5b1008a50130456a416e688\System.Runtime.Caching.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\8064e773b9addf027658899e27e94c7b\System.Numerics.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\a46d5472536da900435885b28a19eda8\System.Net.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\cdf11c8e0679ce7ff91dc37c6e1b5545\System.Messaging.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\3ad050d3f47352421e05b7707ddd3524\System.Management.Instrumentation.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\87efa405cd384d2c47380467fcd7ea86\System.IO.Log.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\50ccc897ad714e66f750ca1e51e0ffde\System.IdentityModel.Selectors.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7b06b84cb3b99a3ab22adb2a3f6376e6\System.EnterpriseServices.Wrapper.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\cbc3e5d028dd347a294096f068a053d4\System.Dynamic.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\cb799cb414d94fdd0d6d0e73fb0c7032\System.Drawing.Design.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\1ae0a8a9eb92ccaf900f5911740b2c3c\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\9edded64312f5cbae54a093eca246aaa\System.Device.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 662528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\18dc9d6390f0fbbd47581cb3ea6567c6\System.Data.Services.Design.ni.dll

combfix log part 2

+ 2012-05-03 16:20 . 2012-05-03 16:20 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\db296a100034c7dee5f80219f0542df7\System.Data.DataSetExtensions.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\0f771cbf8b32ae1618f4cd4266337b3c\System.Configuration.Install.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\501ad39b1ef6f43e8dc92a4efa7c35ea\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\f8c6e4854178bb4d928c8aec1c04648d\System.AddIn.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\3503e3c2a87db97b720c0ed8a5d59f61\System.Activities.DurableInstancing.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\30cf4fc2c247cf490879f5436c63017c\SMSvcHost.ni.exe
+ 2012-05-03 16:18 . 2012-05-03 16:18 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\b4f75962376771b6b6d39279d780abba\SMDiagnostics.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\eaca48940ac6976d39d5de4d5b42fed6\PresentationFramework.Royale.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\bdb41ce9ab6d561ddb8107255daaee30\PresentationFramework.Luna.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\78310f7eef84b5f9ca4bf32798bd77f9\PresentationFramework.Aero.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\64b86aebea22fd357f22384757caed3f\PresentationFramework.Classic.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 364544 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\fe507be01e652c9d1577ed3c82bc0725\MSBuild.ni.exe
+ 2012-05-03 16:17 . 2012-05-03 16:17 169984 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\c45a27e16f1710fbb5f9a1998d91ffc0\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 232960 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\c38c85ad0a6ea744ee4ca440adfebc4e\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 475136 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\b1e9a84a2436a463c35ded871dca6419\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\8cc272eda49bc1202de40a2691882fcc\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 864768 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\67278ab733f1baf4132ca4bf85cd5b60\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 992256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\4c1b69eea40a1af64f8c4f833e367864\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\b6c591378ae5158071d63be3fb88ef37\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\16bf3be602620d349b25e6c2d08199a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\e124e073bbf4e06cb775df9d6b8b7979\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\952e3b13d0001f027a1c3f96e33d5c77\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\94906ec077cf7897d25d2c3659bc7dfe\Microsoft.Office.Tools.Common.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 408576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\55092a49ca7b5b552471c4b84875374d\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 851456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\ef49e94c2b9e293e658979ba193686c7\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 353792 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\f03be672b1993e4a2dee05f0c99cf27a\Microsoft.Build.Framework.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\f6b9abf9cd43524102ad9be82b7136d0\CustomMarshalers.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\a9e4411f4eab2d15b546b04771f872e0\ComSvcConfig.ni.exe
+ 2012-05-02 22:06 . 2012-05-02 22:06 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\3c87931e06af65974a92146167d898f3\ComSvcConfig.ni.exe
+ 2012-05-03 16:15 . 2012-05-03 16:15 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\fd0c917972edf6f2a05c090627030608\XamlBuildTask.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\5f644edb4fd9228b50499b597b20f8d6\WsatConfig.ni.exe
+ 2012-05-03 16:15 . 2012-05-03 16:15 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ebd99d5801192b27f605630e2665db37\WindowsFormsIntegration.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\9562374f940f41cdc64d88268d543f0b\UIAutomationTypes.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\641eec5b274fe3972d02892607f9b650\UIAutomationClient.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\295b3156b838ca161a64a5456522438b\System.Xml.Linq.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\0b68854406b775365c6d91e87813c2dc\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\76a205e2eeeafe760194d69c2513c1aa\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\0613bd8bf52bb05610bc85ae9b950e9f\System.Web.RegularExpressions.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\ccc79ac02cc9747798c7cc689e90899e\System.Web.Extensions.Design.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\95b92fa75d2427a7cb496fddb3f394da\System.Web.Entity.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\504b4901d1f1039264d31d77fcd6e3f2\System.Web.Entity.Design.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\5283aa252d0efa81f23d2823615dd31b\System.Web.DynamicData.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\a6fbeebf631e147104fbde01bcc6602c\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\5e3cf00b80c0aecd8392f1702d2d0f28\System.Transactions.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\9cabbb335fc6dff10392376707a4d0a2\System.ServiceProcess.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\eed602a6dac854f70fa1bb181b2179de\System.ServiceModel.Activation.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d3d9c582c7cd77f17fd93167dc462242\System.ServiceModel.Routing.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\c1127f26363bea39c40707b9ddb6bbb9\System.Security.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7b17528dffe47d9b17be6086a575a516\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\e86e6094904541b5f9cf7df0709349d2\System.Runtime.Remoting.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 244736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\a89c27bacba019eeed438f67b8544b78\System.Runtime.Caching.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\3ce3d5b8126cda36b3dbd3535f249890\System.Numerics.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\965e2749489298cc85387f44f76a40f2\System.Net.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\621d2aae96fd06f9ccf66d335d7f1232\System.Messaging.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\1bff2d3e952c2160ba0c790d2342a601\System.Management.Instrumentation.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\e6cb98078120266f5310adf0f45aa7df\System.IO.Log.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\22dadf930ad449894633480562d6c913\System.IdentityModel.Selectors.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d0d8c27be9116224e42260292e21cad5\System.EnterpriseServices.Wrapper.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d0d8c27be9116224e42260292e21cad5\System.EnterpriseServices.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\cbb6e9a9b075d9f6fa303e3eef4c0ffd\System.Dynamic.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\7f51b59dc6c39bbc00776c9204d7525d\System.Drawing.Design.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e25cc7918b583b3beffcad52920eae29\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\a3be39ae9813098aa81430dd507d22ca\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4975f93d2055b33bd7a91d6f05628e2a\System.Device.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\35a9933c9a009b623b4332a4e1daf245\System.Data.Services.Design.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\42d3d301d2adef24edeb3b775fbe3a4b\System.Data.DataSetExtensions.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\bab886a18699bab842769c5ce486c332\System.Configuration.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\e844f0d4cf703c2e97515ed020331b76\System.Configuration.Install.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a92c1bd4d32fbbc54134fc40d2f97389\System.ComponentModel.Composition.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\9b418b211d6207feafcdc27027d26036\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\a4cfba8e3500f8387fe5924b940983be\System.AddIn.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\520d0ed9f48c121fbe79bda6fc176b74\System.Activities.DurableInstancing.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\98ec8a39382e6eee39845bd4759ecf04\SMSvcHost.ni.exe
+ 2012-05-03 16:13 . 2012-05-03 16:13 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\3b905cdec5960d51e5bdc7030b005c09\SMDiagnostics.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\94d89db071d382d9ba0bc6381669b85f\PresentationFramework.Classic.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8b8a5c194aacfb2102d4e26b75a84e03\PresentationFramework.Aero.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\443c3fae1f6f0588a542ddc1c02c1be1\PresentationFramework.Royale.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\273034086c19b92034c9f2896724ac33\PresentationFramework.Luna.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\265875f162e9c2ffefca67188cee8faa\MSBuild.ni.exe
+ 2012-05-03 16:13 . 2012-05-03 16:13 210432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c94b450a8c2f30439acc69a8823270df\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 708608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\bea3115c4fb01ef5636cc104793d85c9\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 177152 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\95cc6c6d8a6966379f51dbc022bdeef6\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4a71330988e21161159809690e690cc3\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 364544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\20da1f81376916a4f394f3c0781688d4\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 738304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1917917be6c570244e250b28a9cb819f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09237903b1f9e5c7a69a4995d85eaa35\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5958d9610eb58adb2b62153492a7c27e\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\e070443fc6be8a8f34f68fb6c9674494\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\ce50979942c411efd3323472dc2e6254\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\cd38bbc2e82123234ae8fb6c05999af7\Microsoft.Office.Tools.Word.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\c041b5e4c53a61f6cb15b6d8c807b921\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\92d8765edfd33f34e12da0b65c49f9c0\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\59026dafb681def4fa70a4996bb79244\Microsoft.Office.Tools.Common.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\861156abd2fbeb15a72e479fb140c9b9\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\03c15533eddd91753b86895c6bfd59aa\Microsoft.Build.Framework.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 136192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\dda5a6b2ff35b701c4585b7845101391\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e3e1fd8ccf76e9eb0147484fb8dd773a\CustomMarshalers.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\e9dee8646a22abf1626514f0f14fcdd9\ComSvcConfig.ni.exe
+ 2012-05-03 16:12 . 2012-05-03 16:12 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\2965fcd151e21543887df9006519ed58\AspNetMMCExt.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\01e6d953aaaada7216112df9e0f39c11\System.Web.Routing.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\32b4d44198ecd16ca5deb1024642313f\System.Web.Entity.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\9d7b9e05e5bc7eab07de61a8dd70757a\System.Web.Entity.Design.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\e59cbe4ccb29922c44bf66d3ae044b32\System.Web.DynamicData.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\cb674da808088671f0633d46d1dade03\System.Web.Abstractions.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f62e745133fcb776cd05bc7a71e1fcfc\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\dcda79052acc486c168d4440ec16e6d9\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 495616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\b45b8ce21d0fd161749b2de5bc7df56e\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\9c9fc8a4a6a35d8888c5a9938444defe\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 270336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\69242292e2f125ccb605c4f8a7e11fa2\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 226304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\624a2b05e9289689e3ab48f2b5b892c6\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\5d5f9b6272e24579f25243fbe7304f45\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 124928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\4f32b8fcd85f50cb544525d8003b7e26\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\ae3312395070c09c34a7ce4b244eea26\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8b0678e775e389f71cfa327fa7d9517d\WindowsLive.Writer.HtmlParser.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\616b97185066b41cd07aa5f2c0ab87af\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\421cbc3b33fc5a49bf4cb913e1798fba\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\2d9aab831590b771aa70cd6991f7af88\System.Web.Routing.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\47e3f7fa0b07e85e269f2e152e0e5e29\System.Web.Extensions.Design.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\3595f5769afb7d38aa5a05abef97364c\System.Web.Entity.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\7485eeab1b46532b35d7ab5814a43a30\System.Web.Entity.Design.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ec083a1d2f94e4c565545f9d090c5039\System.Web.DynamicData.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\88430faf21e241f93d02711e35173de6\System.Web.Abstractions.ni.dll
+ 2012-05-03 15:41 . 2012-05-03 15:41 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a1c4a635721f85bef0ea4194b888b871\System.Runtime.Remoting.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\c1cf8e31da405f07780fa7b0f28cc650\System.Data.Entity.Design.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e30df0584fc41462a3360ac609008514\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d0a04859082860a4999ad4ca970860e2\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9949ca42861385d6f9ed0057faa58027\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\73a385d0a8e76c44988c813a93d626b3\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\67a0b11d64fd1316376326b78f69e02a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c085ee71c2b8e94aae910a39bc4a212\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-03 15:44 . 2012-05-03 15:44 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1098c634446dc3569a141c9e9e1f8458\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 363936 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 193472 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 153008 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 964480 c:\windows\assembly\GAC_32\Microsoft.Office.BusinessData\14.0.0.0__71e9bce111e9429c\microsoft.office.businessdata.dll
- 2011-11-13 23:47 . 2011-08-20 04:30 1231360 c:\windows\SysWOW64\urlmon.dll
+ 2012-05-02 17:17 . 2012-02-28 05:38 1231360 c:\windows\SysWOW64\urlmon.dll
+ 2009-07-21 05:05 . 2009-07-21 05:05 1348432 c:\windows\SysWOW64\msxml4.dll
+ 2012-05-02 17:17 . 2012-02-28 05:35 5998080 c:\windows\SysWOW64\mshtml.dll
- 2011-11-13 23:47 . 2011-08-20 04:26 2073600 c:\windows\SysWOW64\iertutil.dll
+ 2012-05-02 17:17 . 2012-02-28 05:34 2073600 c:\windows\SysWOW64\iertutil.dll
+ 2010-10-20 16:44 . 2010-10-20 16:44 1207656 c:\windows\SysWOW64\FM20.DLL
- 2011-11-13 23:47 . 2011-08-20 05:37 1188864 c:\windows\system32\wininet.dll
+ 2012-05-02 17:17 . 2012-02-28 06:39 1188864 c:\windows\system32\wininet.dll
+ 2012-05-02 17:17 . 2012-02-28 06:39 1494016 c:\windows\system32\urlmon.dll
- 2011-11-13 23:47 . 2011-08-20 05:37 1494016 c:\windows\system32\urlmon.dll
+ 2012-05-02 17:17 . 2012-02-28 06:36 9020928 c:\windows\system32\mshtml.dll
+ 2012-05-02 17:17 . 2012-02-28 06:35 2453504 c:\windows\system32\iertutil.dll
+ 2009-07-14 04:45 . 2012-05-03 15:42 7411554 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2009-07-14 04:45 . 2012-05-02 17:09 7411554 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2011-07-04 21:25 . 2012-05-02 18:09 2754082 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2097351910-1350271648-2131945979-1112-12288.dat
+ 2011-07-04 21:25 . 2012-05-04 00:24 2754082 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2097351910-1350271648-2131945979-1112-12288.dat
+ 2011-12-26 07:54 . 2011-12-26 07:54 1863464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-26 09:18 . 2011-12-26 09:18 5200656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-11-22 03:57 . 2011-11-22 03:57 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2012-05-02 17:17 . 2011-12-25 20:40 5263360 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 1863464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 5230864 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-11-22 02:31 . 2011-11-22 02:31 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-05-02 17:17 . 2011-12-25 20:42 5255168 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
- 2011-09-14 14:38 . 2011-09-14 14:38 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 5200656 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-05-01 17:00 . 2012-05-01 17:00 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-05-02 22:03 . 2012-05-02 22:03 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-11-18 22:52 . 2011-11-18 22:52 9183232 c:\windows\Installer\3048aa.msp
+ 2012-01-05 10:21 . 2012-01-05 10:21 4964864 c:\windows\Installer\30487f.msp
+ 2012-03-07 19:01 . 2012-03-07 19:01 1907712 c:\windows\Installer\304737.msp
+ 2011-12-26 10:24 . 2011-12-26 10:24 8835072 c:\windows\Installer\3046fc.msp
+ 2012-04-01 20:27 . 2012-04-01 20:27 3463168 c:\windows\Installer\3046f3.msp
+ 2012-02-17 07:50 . 2012-02-17 07:50 1236480 c:\windows\Installer\3046de.msp
+ 2011-10-27 02:46 . 2011-10-27 02:46 1833472 c:\windows\Installer\3046b4.msp
- 2011-11-13 23:58 . 2012-05-01 16:59 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 4525408 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
- 2011-11-13 23:58 . 2012-05-01 16:59 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-11-13 23:58 . 2012-05-02 22:09 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-10-20 17:35 . 2010-10-20 17:35 1479520 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\XLICONS.EXE
+ 2010-02-18 02:56 . 2010-02-18 02:56 1199008 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\WKCONV.EXE
+ 2010-02-25 16:07 . 2010-02-25 16:07 2672456 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\VBE7.DLL
+ 2010-02-28 07:55 . 2010-02-28 07:55 1040736 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\UMOUTLOOKADDIN.DLL
+ 2010-03-01 10:07 . 2010-03-01 10:07 2831768 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\STSLIST.DLL
+ 2010-03-11 05:44 . 2010-03-11 05:44 1100664 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\SETUP.EXE
+ 2010-02-28 07:14 . 2010-02-28 07:14 4520288 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PROMO.EXE
+ 2010-03-11 05:44 . 2010-03-11 05:44 5789544 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OSETUP.DLL
+ 2010-03-30 13:29 . 2010-03-30 13:29 1177968 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ONFILTER.DLL
+ 2010-01-10 02:24 . 2010-01-10 02:24 3483000 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OIMG.DLL
+ 2010-02-28 07:19 . 2010-02-28 07:19 7277440 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OFFOWC.DLL
+ 2010-03-30 02:48 . 2010-03-30 02:48 6629808 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\NL7MODELS0011.DLL
+ 2010-03-30 02:48 . 2010-03-30 02:48 2460080 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\NL7LEXICONS0011.DLL
+ 2010-03-30 02:47 . 2010-03-30 02:47 7467440 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\NL7DATA0011.DLL
+ 2010-03-30 13:36 . 2010-03-30 13:36 5496688 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\IPEDITOR.DLL
+ 2010-03-13 03:45 . 2010-03-13 03:45 4299648 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\GRAPH.EXE
+ 2010-03-01 10:08 . 2010-03-01 10:08 1746280 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\GFX.DLL
+ 2010-02-20 22:20 . 2010-02-20 22:20 1207144 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\FM20.DLL
+ 2010-01-19 01:59 . 2010-01-19 01:59 2182040 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ASSAPIFE.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEWDAT.DLL
+ 2010-03-23 15:55 . 2010-03-23 15:55 2193800 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACECORE.DLL
+ 2010-03-25 01:28 . 2010-03-25 01:28 1449312 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACCICONS.EXE
+ 2011-11-14 16:01 . 2011-11-14 16:01 1857400 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACCESS.DLL
+ 2012-05-02 22:02 . 2012-05-02 22:02 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\fb00cd7183b28470878a3b5687929a56\WindowsBase.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\d1d48cd30cd275b06fad70778798cae7\UIAutomationClientsideProviders.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ecdcf3d1d7bc90546464d70a4bee843d\System.Xml.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\3a9670f473f8f9291ca256d9a15fc281\System.Xaml.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 1602560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\ba60dbd16ea036209a8601449b0a4cc1\System.WorkflowServices.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 2887168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\e4b0b5a166ae5bcbf921d0ae8f461f33\System.Workflow.Runtime.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 5922304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\4f35e62df9517229ed11972a4561387f\System.Workflow.ComponentModel.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\b9e2ffb187489a72bf92f054967824f2\System.Workflow.Activities.ni.dll
+ 2012-05-03 16:22 . 2012-05-03 16:22 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\80de3f9f56bed3e05ba97741905abddb\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\97b05378b616e023221f9c6072239168\System.Web.Services.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 2964992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\2e491e13b4858e33488246db1f95c678\System.Web.Mobile.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\5d29b4be05d79291f850ba4dd3cbdd78\System.Web.Extensions.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1101312 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\51286ccbca7acb595da250f5de095a04\System.Web.Extensions.Design.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 5618688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\ac4541a6eb47813c114a01bbc7572977\System.Web.DataVisualization.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\561e5a115d6d7ade93236df74d61af84\System.Speech.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\8b0750707e418bbea8a7eed272890585\System.ServiceModel.Web.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\4606cac0ba2d406b4ddefca21a3db1eb\System.ServiceModel.Activities.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\28b5d075cf252a24a6b007ff5941dce1\System.ServiceModel.Discovery.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\1a361129f93a8190d8797b7c680baecc\System.Runtime.Serialization.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\2c57eff357f1bc56d0367f04adcf6d76\System.Runtime.DurableInstancing.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\21c096f214db354198e2664473875f06\System.Printing.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\2280764a011295483642b17fe5d2b1f7\System.Management.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\a77730a57cc54142f1ecbb1e85060e5f\System.IdentityModel.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7b06b84cb3b99a3ab22adb2a3f6376e6\System.EnterpriseServices.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 2303488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\9bcabb321026ee927401cbba73dff054\System.Drawing.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\60390cb3abc6f1d85a572c156d39fc02\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\5eaf17b571cf9fb6f159a0c92d6244ab\System.DirectoryServices.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\90ec5a09a2329a45554d79e0fd9fbbee\System.Deployment.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\ca4a0bde02b2eb73d2e9f22925719ecf\System.Data.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\657b967b5fd7819f273f5704197ce97e\System.Data.SqlXml.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 2703360 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\b5d6361ffc4e2ab8b2fa989e65267668\System.Data.Services.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 1799168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\930a4b48234d358f2758f075be0684c5\System.Data.Services.Client.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\f1e8508072fb84206550bc497dc5b49c\System.Data.OracleClient.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 3386880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\0ba3ab7e136a52fcba260ad7893ede32\System.Data.Linq.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\463d0d0f836d6286345ae0e7a980d609\System.Data.Entity.Design.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\c24ce44b45c0e0c0961a9755f192eb3a\System.Configuration.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\5a66bc1859e864d87b81e31438a5f07d\System.ComponentModel.Composition.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\f25d1dde40ef0128d9e5163d142bd2e2\System.Activities.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\45d4a9fa235f5658f8c9b89f6a4f691f\System.Activities.Presentation.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\e9f6686e336507594e33cad6ed7814cd\System.Activities.Core.Presentation.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\8ad595c3d0668d10777d8ce28b88cc7c\ReachFramework.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\cb31bfb24a52f83cf826c00979827ba6\PresentationUI.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 1891328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\2876e05f3ce0df4f38abe04c9bec2e8c\PresentationBuildTasks.ni.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6845c178054282fe6476fdfb0e9a9e6a\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\5281ac494089700d1c72c16478ab3363\Microsoft.VisualBasic.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\15b88fefd6d638f01856a68c14e2ab9b\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\094dfa3c6d5b4dc566740a8520e928e0\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\2d92f0cffe052f601c1bca1f52425fef\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 2035200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\f1c5522923ad110ba1b6343b48a5d440\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4f919111d285c50853d0648803257253\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\363aac28351f0e2d17dca84f7532d8b1\Microsoft.Office.Tools.Word.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1118208 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\19b930cde2adc1721d6f1e6b74a67118\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\0fbfc1087f7622c5b6b06f88fce1a45e\Microsoft.JScript.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\83f53b455553f5ad67e756f6762dc3b4\Microsoft.CSharp.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 6004736 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\5417f88ad5b4444a5f1e744fcd8ac9cc\Microsoft.Build.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 3820544 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\9f1c45888c7f1f15d04f30c9437f8bf2\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-02 22:02 . 2012-05-02 22:02 2521088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\0220591dc78673b4efa66d7848de3f54\Microsoft.Build.Engine.ni.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\becc41859bd5d01b57cacff13fd51787\AspNetMMCExt.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\1a9dbc6b82fda32d83b46081e13da910\AspNetMMCExt.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\02ea3ff3b5908b51da47e1aeb9e75b04\WindowsBase.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\0f5df23e9f268e9ff4c8033f9865a12a\UIAutomationClientsideProviders.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\2c59490afc22def906d3ca96e1207ff9\System.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\19e79fc0f95c93b0244c7b287e254871\System.Xml.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\ae31d46211440b11a9e66c3ba1a4e7ff\System.Xaml.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 1226752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\abfe51993df8d3de6f000297de7ead9d\System.WorkflowServices.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\7a4b5fe58999d11fd532120d6f75f6da\System.Workflow.Runtime.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 4476416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\03a20bf18f39c7d1a98769c6bcb46830\System.Workflow.ComponentModel.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\533c90d6e55e0529feb68df7f0dad47b\System.Workflow.Activities.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\acae13e8725a0a5da6dcda3e309cb9d2\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\b6139cfbdbdc57c3ff421204292f4041\System.Web.Services.ni.dll
+ 2012-05-03 16:15 . 2012-05-03 16:15 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\cfd26c0116fafc3f71408fb255ff824a\System.Web.Mobile.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 3127296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\d526d6e7d41aa2a5b3e5871cdb6597f1\System.Web.Extensions.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 4575232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\ff3ad02fb7f572ec84afc681fda661fc\System.Web.DataVisualization.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\90de8ba8101001c8845439cd5f9a76eb\System.Speech.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1393152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8c12f469cbd6b8d9718c64a4b2c96d47\System.ServiceModel.Activities.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\746651ce870c2f9cd43bc7246154f81a\System.ServiceModel.Discovery.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\60ada6691ab37a75d25670eab4e32c5f\System.ServiceModel.Web.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\a14816d568ee8c7cc9f9923d979d682d\System.Runtime.Serialization.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\d6b9e13a40ed53cfc10e04c023c62a49\System.Runtime.DurableInstancing.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\7175344bfab919484674d37de776a82f\System.Printing.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\dfd9cbfccfadcf84406398a9d83ab4f4\System.Management.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\2a4589aeec877df58cbbcd633bc18fb6\System.IdentityModel.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 1665536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\c02325260bdcecd695a87bbb24547df2\System.Drawing.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\6bd4a77663c0e708e0827be849906fdc\System.DirectoryServices.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\d0ae88ebdc709e940fbd0c6bafcab13c\System.Deployment.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\4a1e0e4ec906686357466a5881de605e\System.Data.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\67ccf8c95fb30e4dcbe3f1eae1f72d00\System.Data.SqlXml.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 2025984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\546dc84f7a98dd07602ebe6dca6fda7f\System.Data.Services.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1344000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\4b28434c73ac4229c7ae7c4f0598e25f\System.Data.Services.Client.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\c8b5d26c88a0f00cfb079bf421298076\System.Data.OracleClient.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\f5cc7fbaadd22a9278512102cd30eb3a\System.Data.Linq.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\f58605285e9bf14f17c39f28d5621628\System.Data.Entity.Design.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\7292b3e639a6202cf7eaf1f7ed271249\System.Core.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\7bbd2b637fbe2a5b17a16cd4fcc3c3ca\System.Activities.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\f4311e621d2bbf4de0d32bae765b1484\System.Activities.Presentation.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\819fccf9934ef29a6078d4accbf9ea0c\System.Activities.Core.Presentation.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\f4ab7bc19b981163de613143a1e1c997\ReachFramework.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\3e896ba1c3cc8d62c267508dccd7aa5a\PresentationUI.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\f021e82fdaaf18ca99ff997f6552f947\PresentationBuildTasks.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\7511c9da502ed9c4e630a902d462cdef\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1f54c28f39e25b121c374480ad50d384\Microsoft.VisualBasic.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\1ae1a98af2c7d3e68c7525bf1395fa61\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\fb09c8733a8ef9292079399b25d5d973\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\944d29816edbfedee6b3cd3adaa72d8c\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\943b2e7de77a4315d213b09933ed57ac\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\8b1e797d9c7f5ef773c150e15b07a087\Microsoft.JScript.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\a263b12a7f89cd41ef8ea216dcd1e854\Microsoft.CSharp.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 4248064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\faa09803e406df761fee15f3cb4390bb\Microsoft.Build.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\98d8d80f4b2d74cb4c5dc31483793bfb\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\4bfe4b4fa5d4fccdcbfc10ff609e6a28\Microsoft.Build.Engine.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\8f4bee781d2709ba927b31c6bee8abce\System.WorkflowServices.ni.dll
+ 2012-05-03 15:40 . 2012-05-03 15:40 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\3b2e60a9cfedffc4c850f1d0ef17e5e1\System.Workflow.Runtime.ni.dll
+ 2012-05-03 15:40 . 2012-05-03 15:40 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\d26e6d07c2e10bc55c2bfd2440ec14bc\System.Workflow.ComponentModel.ni.dll
+ 2012-05-03 15:40 . 2012-05-03 15:40 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\f044eaa5dc79454c4081bdbea81bf67e\System.Workflow.Activities.ni.dll
+ 2012-05-03 15:39 . 2012-05-03 15:39 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\28c5f5bb725935286936596e3f5f4f38\System.Web.Services.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\57631b92442dcbaa782800614f11eed4\System.Web.Mobile.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\f21b305ec2cacfd1737aba590508716a\System.Web.Extensions.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\01e5bdd5a9c2db218cf64aff1875bf10\System.Web.Extensions.Design.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\8ef813ce3f85ea3b3f499d734ac8019e\System.ServiceModel.Web.ni.dll
+ 2012-05-03 15:39 . 2012-05-03 15:39 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\8b193e216f8cf8cd74d7f63cc3ebd2d9\System.Runtime.Remoting.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\3fae8a8515a716f1fae4a64a7f2a4b05\System.IdentityModel.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\2dd10ff57a987aa347518b0abfcaf8b3\System.Data.Services.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\caf124d5431e8d8aba046e54a8b7dea5\System.Data.Entity.Design.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\ff499b53b4b43e5cf6175a7d95fb15ea\MIGUIControls.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\a2368cca7264c3f047d16fefcb29ca66\Microsoft.VisualBasic.ni.dll
+ 2012-05-03 16:17 . 2012-05-03 16:17 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a1c24b217f836d73170c0f32b7dda5c2\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\8dff78b6458b3995288e7e89aa7ae34a\Microsoft.MediaCenter.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\88b7272ddb53920b927a7ef59fd3ad6a\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1225d00b36449afd4a4314eadcb8bf58\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 5054976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\7c9b82506032312a1cbc644fffa73b17\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e98b247cb28ac884c673eab88d9c4114\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 6394368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e2af41c4623b34757f33ce4800ed3696\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\d362f68d3bf954ba55a4494a659492af\System.WorkflowServices.ni.dll
+ 2012-05-03 15:42 . 2012-05-03 15:42 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\ee22bb1fef89981da77783c69aa1f154\System.Workflow.Runtime.ni.dll
+ 2012-05-03 15:42 . 2012-05-03 15:42 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6d2f8bad410dae6049507d7bc097a62d\System.Workflow.ComponentModel.ni.dll
+ 2012-05-03 15:42 . 2012-05-03 15:42 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\31fd6842b7ccb502dc2f5f11c1f991bd\System.Workflow.Activities.ni.dll
+ 2012-05-03 15:41 . 2012-05-03 15:41 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a595aa31f93ed043fd02ec9d8ff40b32\System.Web.Services.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\a118322b0f5ffc0e67c06658e8788e1d\System.Web.Mobile.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e6747d0470e8a42907df14af10862844\System.Web.Extensions.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\0113a0162fe157bb4f0130a60bbcad1a\System.ServiceModel.Web.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d939fca96c3645bb8806ea8ae43cc0ca\System.IdentityModel.ni.dll
+ 2012-05-03 16:12 . 2012-05-03 16:12 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\47c2a93f42a371ac1b3756d098ac18a5\System.Data.Services.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\2a348513f0f83117bedeb39a7d10b034\MIGUIControls.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3ce70b84dbb9970e1893672c5d430c80\Microsoft.VisualBasic.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2a9dff80feb7cf8dbac17adb959159ca\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 3238400 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\f3b8c2f1c9ae40884e59a1574fe7591d\Microsoft.Office.BusinessData.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4a603d10666b9ee9487e7f0ce27c1c68\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\142b59a72b233db75ede02941b86291d\Microsoft.MediaCenter.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\de23c7b3c400d92565312e85b6b0b00e\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-02 17:17 . 2011-12-25 20:42 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-03-13 20:50 . 2010-11-05 01:53 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-11-14 16:01 . 2011-11-14 16:01 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 1857400 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2012-05-02 17:17 . 2011-12-25 20:40 5263360 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-05-02 17:17 . 2011-12-25 20:42 5255168 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-05-02 17:17 . 2012-02-28 05:34 10992640 c:\windows\SysWOW64\ieframe.dll
+ 2009-07-14 02:34 . 2012-05-03 15:38 11010048 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
- 2009-07-14 02:34 . 2012-05-02 17:05 11010048 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2010-11-19 14:05 . 2012-03-29 07:00 57249312 c:\windows\system32\MRT.exe
+ 2012-05-02 17:17 . 2012-02-28 06:35 12264448 c:\windows\system32\ieframe.dll
+ 2011-10-27 02:45 . 2011-10-27 02:45 66426368 c:\windows\Installer\304895.msp
+ 2011-04-29 03:28 . 2011-04-29 03:28 16972800 c:\windows\Installer\30486a.msp
+ 2011-04-29 03:28 . 2011-04-29 03:28 11056128 c:\windows\Installer\304861.msp
+ 2011-04-29 00:34 . 2011-04-29 00:34 11155456 c:\windows\Installer\304859.msp
+ 2012-03-07 19:03 . 2012-03-07 19:03 23710208 c:\windows\Installer\30472f.msp
+ 2011-10-27 02:47 . 2011-10-27 02:47 10328064 c:\windows\Installer\30469f.msp
+ 2011-10-27 02:49 . 2011-10-27 02:49 16245760 c:\windows\Installer\30468e.msp
+ 2011-10-27 02:49 . 2011-10-27 02:49 10427392 c:\windows\Installer\30467c.msp
+ 2011-11-22 04:42 . 2011-11-22 04:42 33189888 c:\windows\Installer\304658.msp
+ 2010-03-01 10:09 . 2010-03-01 10:09 13988704 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSACCESS.EXE
+ 2012-05-02 21:57 . 2012-05-02 21:57 11880448 c:\windows\assembly\NativeImages_v4.0.30319_64\System\a9e29e892ad68ac0b88f0480746a0d0b\System.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 17353728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\c80f2e11e938ed65b843f750add94b35\System.Windows.Forms.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 15762432 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\bf66e2b2a4dfefe1064dc172723b2cdd\System.Web.ni.dll
+ 2012-05-03 16:21 . 2012-05-03 16:21 24551424 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\bd433ada9b2565b666331b5b1276538a\System.ServiceModel.ni.dll
+ 2012-05-03 16:19 . 2012-05-03 16:19 13314048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\8d8f7d5ddfee1cd87ca1396946aa18f7\System.Design.ni.dll
+ 2012-05-03 16:20 . 2012-05-03 16:20 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\9aca7097fc620da8481516b2d4e3fede\System.Data.Entity.ni.dll
+ 2012-05-02 22:01 . 2012-05-02 22:01 10440704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\e91a0d844afdda429e0fbd9814f41134\System.Core.ni.dll
+ 2012-05-03 16:18 . 2012-05-03 16:18 24407040 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\b93196152e384bd43b9abf1e20c8d067\PresentationFramework.ni.dll
+ 2012-05-02 22:06 . 2012-05-02 22:06 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\fc074b5198bd925a4f5b48403bba0e34\PresentationCore.ni.dll
+ 2012-05-02 21:56 . 2012-05-02 21:56 19355648 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\d9d8d4f8fc868d07be41d4ffb46d7364\mscorlib.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 13197312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\0b36565a61f83137806e71b287d81042\System.Windows.Forms.ni.dll
+ 2012-05-03 16:13 . 2012-05-03 16:13 12079616 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\a0fb4bd3ae9ce574167ae3a79b7a1aa5\System.Web.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\c43869b44f633a3ad003a0ad9e79b273\System.ServiceModel.ni.dll
+ 2012-05-02 22:04 . 2012-05-02 22:04 11021824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\cd7e0c408cc063860fbccce73bbc9c8d\System.Design.ni.dll
+ 2012-05-03 16:14 . 2012-05-03 16:14 13345792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\b642a4ad94ff1e027a128b9796878372\System.Data.Entity.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7786f3e95a399a8b6691170ae2fe0e1c\PresentationFramework.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\239eba799555dbe10760ee80c8c8df7c\PresentationCore.ni.dll
+ 2012-05-02 21:57 . 2012-05-02 21:57 14413824 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\44ae9f9afb2373055136d57ac6db3f96\mscorlib.ni.dll
+ 2012-05-03 15:39 . 2012-05-03 15:39 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\79c8a2e836c01784bb8e3e2d0ed26850\System.Web.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\0b51b0626d95de7446d132c73edd77cc\System.ServiceModel.ni.dll
+ 2012-05-03 15:39 . 2012-05-03 15:39 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\552733f73f5483946cce9229b27bdcb2\System.Design.ni.dll
+ 2012-05-03 16:16 . 2012-05-03 16:16 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\d9a8c2b82b4370a5b0f537a65d867f49\ehshell.ni.dll
+ 2012-05-03 15:41 . 2012-05-03 15:41 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\507b4ca18da9d2fde2e51a1f04593443\System.Web.ni.dll
+ 2012-05-03 16:11 . 2012-05-03 16:11 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\b74950292d5681795d9d2c1a72a79952\System.ServiceModel.ni.dll
+ 2012-05-03 15:42 . 2012-05-03 15:42 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\846a51eb446bee41a26a6914a95e38cd\System.Design.ni.dll
+ 2011-04-29 00:33 . 2011-04-29 00:33 425345024 c:\windows\Installer\30484b.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DKab1err"="c:\program files\Dell\Printer Software\ErrorApp\DKab1err.exe" [2010-08-03 582976]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-22 1314816]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-11-18 98304]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-09-07 40376]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-06-25 140520]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\\isuspm.exe" [2010-05-21 324976]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2011-02-22 1497352]
"QuickBooksDB20"="c:\progra~2\Intuit\QUICKB~1\QBDBMgrN.exe" [2009-08-18 678912]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files (x86)\Digital Line Detect\DLG.exe [2010-11-11 50688]
FTP Utility.lnk - c:\program files (x86)\KONICA MINOLTA\FTP Utility\KMFtp.exe [2004-10-27 102400]
QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2012-2-4 1155432]
TdmNotify.lnk - c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmNotify.exe [2010-3-29 185192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 253088]
R3 DAmirr;DAmirr;c:\windows\system32\DRIVERS\DAmirr.sys [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976]
R3 NgFilter;Aventail VPN Filter;c:\windows\system32\DRIVERS\ngfilter.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 QuickBooksDB20;QuickBooksDB20;c:\progra~2\Intuit\QUICKB~1\QBDBMgrN.exe [2009-08-18 678912]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
S2 dkab_device;dkab_device;c:\windows\system32\DKabcoms.exe [2010-08-03 1055040]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 Intuit Entitlement Service v6.0;Intuit Entitlement Service v6.0;c:\program files (x86)\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe [2009-06-02 20480]
S2 NgVpnMgr;Aventail VPN Client;c:\windows\system32\ngvpnmgr.exe [x]
S2 NMServiceManager;NMServiceManager;c:\program files (x86)\Micro Focus\NMServiceManager\NMServiceManager.exe [2009-11-25 603648]
S2 QBPOSDBServiceV10;QBPOS Database Manager v10;c:\program files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBPOSDBService.exe [2012-03-22 3136376]
S2 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [x]
S2 uvnc_service;uvnc_service;c:\program files (x86)\UltraVNC\WinVNC.exe [2009-07-10 1830856]
S2 Windows Agent Maintenance Service;Windows Agent Maintenance Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\AgentMaint.exe [2010-09-14 28672]
S2 Windows Agent Service;Windows Agent Service;c:\program files (x86)\N-able Technologies\Windows Agent\bin\agent.exe [2010-09-14 192512]
S3 CAXHWBS2;CAXHWBS2;c:\windows\system32\DRIVERS\CAXHWBS2.sys [x]
S3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [x]
S3 NgLog;Aventail VPN Logging;c:\windows\system32\DRIVERS\nglog.sys [x]
S3 NgVpn;Aventail VPN Adapter;c:\windows\system32\DRIVERS\ngvpn.sys [x]
S3 NgWfp;Aventail VPN Callout;c:\windows\system32\DRIVERS\ngwfp.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 15:28]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}"
[HKEY_CLASSES_ROOT\CLSID\{30D3C2AF-9709-4D05-9CF4-13335F3C1E4A}]
2010-03-29 19:00 60784 ----a-w- c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{CF08DA3E-C97D-4891-A66B-E39B28DD270F}"
[HKEY_CLASSES_ROOT\CLSID\{CF08DA3E-C97D-4891-A66B-E39B28DD270F}]
2010-03-29 19:00 60784 ----a-w- c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmIconOverlay.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"USCService"="c:\program files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe" [2010-06-22 34232]
"DBRMTray"="c:\dell\DBRM\Reminder\DbrmTrayIcon.exe" [BU]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2010-10-27 194080]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\DAinit.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MIF5BA~1\Office14\ONBttnIE.dll/105
Trusted Zone: finsvcs.com
Trusted Zone: GeoLearning.com
Trusted Zone: imagedepositgateway.com\direct
Trusted Zone: intuit.com
Trusted Zone: Massmutual.com
Trusted Zone: Massmutualdesigns.com
Trusted Zone: OPTIPLEX780-1
Trusted Zone: winflexweb.com\www
TCP: DhcpNameServer = 10.10.10.2
DPF: {0D221D00-A6ED-477C-8A91-41F3B660A832} - hxxps://direct.imagedepositgateway.com/MerchantCaptureWebClient/Reserved.ReportViewerWebControl.axd?ReportSession=wee2dvy1zg0qjwaosnxfud3b&ControlID=f9df2f1cb96e4ad0961e7d6f35d3d909&Culture=1033&UICulture=1033&ReportStack=1&OpType=PrintCab
FF - ProfilePath -
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_233_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_233.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
"Key"="ActionsPane3"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
c:\program files (x86)\Intuit\QuickBooks Point of Sale 10.0\DatabaseServer\QBDBMgr10.exe
c:\program files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
.
**************************************************************************
.
Completion time: 2012-05-03 20:30:45 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-04 00:30
ComboFix2.txt 2012-05-02 18:32
ComboFix3.txt 2012-04-28 11:46
.
Pre-Run: 401,080,360,960 bytes free
Post-Run: 400,887,267,328 bytes free
.
- - End Of File - - 445FFEE29755E800DF2703D5132B5A53

#13 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 03 May 2012 - 08:41 PM

These logs are looking allot better. But we still have some work to do.

Please print out these instructions, or copy them to a Notepad file. It will make it easier for you to follow the instructions and complete all of the necessary steps..

uninstall some programs

NOTE** Because of the cleanup process some of the programs I have listed may not be in add/remove anymore this is fine just move to the next item on the list.

You can remove these programs using add/remove or you can use the free uninstaller from Revo (it does allot better of a job

Programs to remove

Adobe Reader
Adobe Reader 9.4.4
Java™ 6 Update 20
[/list]


  • Please download and install Revo Uninstaller Free
  • Double click Revo Uninstaller to run it.
  • From the list of programs double click on The Program to remove
  • When prompted if you want to uninstall click Yes.
  • Be sure the Moderate option is selected then click Next.
  • The program will run, If prompted again click Yes
  • when the built-in uninstaller is finished click on Next.
  • Once the program has searched for leftovers click Next.
  • Check/tick the bolded items only on the list then click Delete
  • when prompted click on Yes and then on next.
  • put a check on any folders that are found and select delete
  • when prompted select yes then on next
  • Once done click Finish.
.

Update Adobe Reader

Recently there have been vulnerabilities detected in older versions of Adobe Reader. It is strongly suggested that you update to the current version.

You can download it from http://www.adobe.com/products/acrobat/readstep2.html
After installing the latest Adobe Reader, uninstall all previous versions.
If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

If you don't like Adobe Reader (53 MB), you can download Foxit PDF Reader(7 MB) from here. It's a much smaller file to download and uses a lot less resources than Adobe Reader.

Note: When installing FoxitReader, be careful not to install anything to do with AskBar.
[/list]
Install Java:

Please go here to install Java

  • click on the Free Java Download Button
  • click on Agree and start Free download
  • click on Run
  • click on run again
  • click on install
  • when install is complete click on close

Clean Out Temp Files

  • This small application you may want to keep and use once a week to keep the computer clean.

    Download CCleaner from here http://www.ccleaner.com/

  • Run the installer to install the application.
  • When it gives you the option to install Yahoo toolbar uncheck the box next to it.
  • Run CCleaner. (make sure under Windows tab all the boxes of Internet Explorer and Windows explorer are checked. Under System check Empty Recycle Bin and Temporary Files. Under Application tab all the boxes should be checked).
  • Click Run Cleaner.
  • Close CCleaner.


: Malwarebytes' Anti-Malware :

  • Please download Malwarebytes' Anti-Malware to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is Checked (ticked) except items in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply
    • If you accidently close it, the log file is saved here and will be named like this:
    • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.


Download HijackThis

If you have any problems running Hijackthis see NOTE** below (Host file not read, blank notepad ...)

  • Go Here to download HijackThis Installer
  • Save HijackThis Installer to your desktop.
  • Double-click on the HijackThis Installer icon on your desktop. (Vista and Win 7 right click and run as admin)
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed it will launch Hijackthis.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Click on Edit > Select All then click on Edit > Copy to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT use the AnalyseThis button its findings are dangerous if misinterpreted.
  • DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.


NOTE**
sometimes we have to run it like this To run HijackThis as an administrator, right-click HijackThis.exe
(located: C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe)<--32bit
(located: C:\Program Files(86)\Trend Micro\HiJackThis\HiJackThis.exe)<--64bit
and select to run as administrator

"information and logs"

  • In your next post I need the following

  • Log From MBAM
  • report from Hijackthis
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#14 Beast469

Beast469
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:12:12 AM

Posted 04 May 2012 - 10:21 AM

question while I am digging through the REVO registry list thing
I am running into some bold red items. do i delete these, or no?

#15 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:01:12 AM

Posted 04 May 2012 - 01:21 PM

in the registry section ONLY the items in Bold
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users