Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with possible rootkit


  • This topic is locked This topic is locked
48 replies to this topic

#1 Shawn Goncalves

Shawn Goncalves

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 11 July 2012 - 06:43 AM

Hello I'm infected with some kind of root kit and was told to post this information in a new thread in this area. Here is a link back to my original thread Original Thread

dds.txt
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_32
Run by shawn.goncalves at 7:29:16 on 2012-07-11
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.16366.12493 [GMT -4:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Symantec Endpoint Protection *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe
C:\Program Files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe
C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe
C:\Program Files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe
C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\Smc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\SavUI.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe
C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe
C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files (x86)\Intuit\QuickBooks 2009\QBW32.EXE
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\RSS_BETA\Technician.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\PROGRA~2\Symantec\SYMANT~1\121110~1.105\Bin\DWHWizrd.exe
C:\Program Files (x86)\RSS_BETA\rsstech.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://companyweb
uSearch Bar = Preserve
mStart Page = hxxp://www.bing.com/?pc=MAGW
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
mURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll
mURLSearchHooks: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\bin\IPS\IPSBHO.DLL
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll
BHO: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
uRun: [RCUI] "C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe"
uRun: [RCHotKey] "C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
mRun: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [ViewPoint Updater] "C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe"
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
mRun: [Monitor] "C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe"
mRun: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
StartupFolder: C:\Users\SHAWN~1.GON\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
StartupFolder: C:\Users\SHAWN~1.GON\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TECHNI~1.LNK - C:\Program Files (x86)\RSS_BETA\LiveUpdate.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\INTUIT~1.LNK - C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\QUICKB~2.LNK - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\QUICKB~1.LNK - C:\Program Files (x86)\Intuit\QuickBooks 2009\QBW32.EXE
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: SoftwareSASGeneration = 3 (0x3)
IE: &ieSpell Options - C:\Program Files (x86)\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - C:\Program Files (x86)\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - file://C:\Program Files (x86)\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://C:\Program Files (x86)\ieSpell\wikipedia.HTM
IE: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files (x86)\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files (x86)\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {36ECAF82-3300-8F84-092E-AFF36D6C7040} - {86529161-034E-4F8A-88D2-3C625E612E04} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
LSP: mswsock.dll
Trusted Zone: hrsaccount.com\www
Trusted Zone: ibanking-services.com\cibng
Trusted Zone: stumbleupon.com\www
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_client_4.4.26.0.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {16F67783-7E72-4C39-99C4-4780A8335484} - hxxp://www.syncmyride.com/Own/Modules/UpdateCenter/applets/sync.cab
DPF: {44C1E3A2-B594-401C-B27A-D1B4476E4797} - hxxps://67.154.196.2:4433/XTSAC.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.0.cab
DPF: {5C709EEC-DDE1-4738-8E57-7564E2637891} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom1_2009.cab
DPF: {6EEFD7B1-B26C-440D-B55A-1EC677189F30} - hxxps://66.251.114.162:4433/NELX.cab
DPF: {788539E8-002D-4E59-9089-40B694A99C9A} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom2_2008.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://209.80.140.35/dana-cached/sc/JuniperSetupClient.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=724
TCP: Interfaces\{67491403-BEA5-41D2-8B50-7BA896231DBF} : DhcpNameServer = 192.168.0.1 192.168.0.11
TCP: Interfaces\{ECD07567-B620-4651-9A4A-C7CB86BEA1AB} : NameServer = 192.168.150.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: intu-help-qb5 - {867FCB77-9823-4cd6-8210-D85F968D466F} - C:\Program Files (x86)\Intuit\QuickBooks 2009\HelpAsyncPluggableProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\System32\mscoree.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: SEP - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\WinLogoutNotifier.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Symantec Intrusion Prevention: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\bin\IPS\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll
BHO-X64: BitTorrentBar - No File
BHO-X64: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
BHO-X64: Swag Bucks - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB-X64: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
TB-X64: Swag Bucks Toolbar: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files (x86)\Swag_Bucks\prxtbSwag.dll
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
mRun-x64: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [ViewPoint Updater] "C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe"
mRun-x64: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun-x64: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
mRun-x64: [Monitor] "C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe"
mRun-x64: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
IE-X64: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://C:\Program Files (x86)\ieSpell\iespell.dll/SPELLCHECK.HTM
IE-X64: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://C:\Program Files (x86)\ieSpell\iespell.dll/SPELLOPTION.HTM
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\shawn.goncalves\AppData\Roaming\Mozilla\Firefox\Profiles\ejqucwnx.default\
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=
FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\shawn.goncalves\AppData\Roaming\Mozilla\Firefox\Profiles\ejqucwnx.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\plugins\np-mswmp.dll
FF - plugin: C:\Windows\system32\Wat\npWatWeb.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpciflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]
R0 SymDS;Symantec Data Store;C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMDS64.SYS --> C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMEFA64.SYS --> C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMEFA64.SYS [?]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20120620.012\BHDrvx64.sys [2012-6-19 1161376]
R1 IDSVia64;IDSVia64;C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20120710.001\IDSviA64.sys [2012-7-10 509088]
R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\Ironx64.SYS --> C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\Ironx64.SYS [?]
R1 SYMNETS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMNETS.SYS --> C:\Windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMNETS.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 CrossLoopService;CrossLoop Service;C:\Users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe [2012-3-2 569072]
R2 GREGService;GREGService;C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe [2010-1-8 23584]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-4-8 13336]
R2 Live Updater Service;Live Updater Service;C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [2011-4-8 244624]
R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2011-9-26 375176]
R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2011-9-16 15928]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;\??\C:\Windows\system32\drivers\LMIRfsDriver.sys --> C:\Windows\system32\drivers\LMIRfsDriver.sys [?]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-5-4 503080]
R2 QBVSS;QBIDPService;C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [2012-1-10 1248256]
R2 SamsungAllShareV2.0;Samsung AllShare PC;C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-3-2 25504]
R2 SepMasterService;Symantec Endpoint Protection;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe [2012-1-28 137208]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-3-24 378472]
R2 SWGVCSvc;SonicWALL Global VPN Client Service;C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe [2011-1-14 286504]
R2 SWIPsec;SonicWALL IPsec Driver;\??\C:\Windows\system32\Drivers\SWIPsec.sys --> C:\Windows\system32\Drivers\SWIPsec.sys [?]
R2 TvWksSvc;Vertical Wave Workstation Service;C:\Program Files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe [2011-8-3 130560]
R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-5-28 2656280]
R2 ViewPointUpgradeService;Vertical Wave ViewPoint Upgrade Service;C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe [2011-10-19 14336]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-7-10 138912]
R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
R3 NxDrv;SonicWALL NetExtender Adapter;C:\Windows\system32\DRIVERS\NxDrv.sys --> C:\Windows\system32\DRIVERS\NxDrv.sys [?]
R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-4-14 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-11 257224]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-2 183560]
S3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\system32\drivers\btwampfl.sys --> C:\Windows\system32\drivers\btwampfl.sys [?]
S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
S3 FlyUsb;FLY Fusion;C:\Windows\system32\DRIVERS\FlyUsb.sys --> C:\Windows\system32\DRIVERS\FlyUsb.sys [?]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-4-14 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-6-12 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-4-27 113120]
S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\system32\DRIVERS\netaapl64.sys --> C:\Windows\system32\DRIVERS\netaapl64.sys [?]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\Windows\system32\DRIVERS\netr28x.sys --> C:\Windows\system32\DRIVERS\netr28x.sys [?]
S3 PSSDK42;PSSDK42;\??\C:\Windows\system32\Drivers\pssdk42.sys --> C:\Windows\system32\Drivers\pssdk42.sys [?]
S3 SimpleSlideShowServer;SimpleSlideShowServer;C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-3-2 27584]
S3 SolarWinds TFTP Server;SolarWinds TFTP Server;C:\Program Files (x86)\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe [2010-6-10 54784]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 SWVNIC;SonicWALL Virtual Miniport;C:\Windows\system32\DRIVERS\swvnic.sys --> C:\Windows\system32\DRIVERS\swvnic.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
S3 tvnserver;TightVNC Server;C:\Users\shawn.goncalves\AppData\Local\CrossLoop\tvnserver.exe [2012-3-2 814080]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-07-11 07:06:28 3148800 ----a-w- C:\Windows\System32\win32k.sys
2012-07-11 04:19:48 2004480 ----a-w- C:\Windows\System32\msxml6.dll
2012-07-10 18:28:08 -------- d-----w- C:\FRST
2012-07-10 18:11:56 -------- d-----w- C:\Users\shawn.goncalves\AppData\Roaming\SPE
2012-07-09 10:57:51 -------- d-sh--w- C:\Windows\SysWow64\%APPDATA%
2012-06-28 16:47:43 -------- d-----w- C:\Users\shawn.goncalves\AppData\Local\{C08F0DAA-BCC5-4AB0-B011-451C2C1E762B}
2012-06-27 13:35:54 -------- d-----w- C:\Users\shawn.goncalves\AppData\Local\Macromedia
2012-06-13 13:59:55 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
2012-06-13 12:58:36 175736 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS
2012-06-13 12:58:36 -------- d-----w- C:\Program Files\Symantec
2012-06-13 12:58:36 -------- d-----w- C:\Program Files\Common Files\Symantec Shared
2012-06-13 12:56:04 81840 ----a-w- C:\Windows\System32\FwsVpn.dll
2012-06-13 12:56:04 58288 ----a-w- C:\Windows\SysWow64\snacnp.dll
2012-06-13 12:56:04 58288 ----a-w- C:\Windows\System32\snacnp.dll
2012-06-13 12:56:04 42632 ----a-w- C:\Windows\System32\drivers\WGX64.SYS
2012-06-13 12:56:04 288176 ----a-w- C:\Windows\System32\SymVPN.dll
2012-06-13 12:55:26 -------- d-----w- C:\ProgramData\regid.1992_12.com.symantec
2012-06-13 12:54:40 -------- d-----w- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x64
2012-06-13 12:54:40 -------- d-----w- C:\Windows\System32\drivers\SEP\0C01044D\0191.105
2012-06-13 12:54:40 -------- d-----w- C:\Windows\System32\drivers\SEP\0C01044D
2012-06-13 12:54:40 -------- d-----w- C:\Windows\System32\drivers\SEP
2012-06-13 12:54:40 -------- d-----w- C:\Program Files (x86)\Symantec
2012-06-13 04:35:24 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-06-13 04:35:18 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-06-13 04:35:18 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-06-13 04:35:04 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-06-13 04:34:55 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-06-13 04:34:55 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-06-13 04:34:48 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
.
==================== Find3M ====================
.
2012-07-09 11:23:09 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-09 11:23:09 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-07-05 12:44:46 53312 ----a-w- C:\Windows\System32\drivers\pssdk42.sys
2012-06-06 06:06:16 1881600 ----a-w- C:\Windows\System32\msxml3.dll
2012-06-06 06:02:54 1133568 ----a-w- C:\Windows\System32\cdosys.dll
2012-06-06 05:05:52 1390080 ----a-w- C:\Windows\SysWow64\msxml6.dll
2012-06-06 05:05:52 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll
2012-06-06 05:03:06 805376 ----a-w- C:\Windows\SysWow64\cdosys.dll
2012-06-02 12:12:17 2311680 ----a-w- C:\Windows\System32\jscript9.dll
2012-06-02 12:05:28 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-06-02 12:04:50 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-06-02 12:01:40 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-06-02 11:57:08 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-06-02 08:33:25 1800192 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-06-02 08:25:08 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-06-02 08:25:03 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-06-02 08:20:33 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-06-02 08:16:52 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-06-02 05:50:10 458704 ----a-w- C:\Windows\System32\drivers\cng.sys
2012-06-02 05:48:16 95600 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2012-06-02 05:48:16 151920 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2012-06-02 05:45:31 340992 ----a-w- C:\Windows\System32\schannel.dll
2012-06-02 05:44:21 307200 ----a-w- C:\Windows\System32\ncrypt.dll
2012-06-02 04:40:42 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2012-06-02 04:40:39 225280 ----a-w- C:\Windows\SysWow64\schannel.dll
2012-06-02 04:39:10 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2012-06-02 04:34:09 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2012-05-19 08:37:48 87456 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll
2012-05-19 08:37:48 80768 ----a-w- C:\Windows\System32\LMIinit.dll
2012-05-19 08:37:48 34688 ----a-w- C:\Windows\System32\LMIport.dll
2012-05-09 13:09:59 476960 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
2012-05-09 13:09:59 472864 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-04-24 05:37:37 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-04-24 05:37:37 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-04-24 05:37:36 1462272 ----a-w- C:\Windows\System32\crypt32.dll
2012-04-24 04:36:42 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-04-24 04:36:42 1158656 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-04-24 04:36:42 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
.
============= FINISH: 7:30:00.36 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 15 July 2012 - 02:49 PM

Shawn,


:welcome: to Bleeping Computer.

My name is Jason and I'll be helping you with your computer problems. You can call me by my screename jntkwx or Jason is fine.

Some things to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please do not attach logs or put logs in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can also help.
  • Do not run anything while running a fix.
  • If you don't understand a step, please ask for clarification before continuing with any future steps.

Click on the Watch Topic button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

 

Posted Image One or more of the identified infections is a backdoor trojan and password stealer.

This type of infection allows hackers to access and remotely control your computer, log keystrokes, steal critical system information, and download and execute files without your knowledge.
If you do any banking or other financial transactions on the PC or if it contains any other sensitive information, then from a clean computer, change all passwords where applicable.
It would also be wise to contact those same financial institutions to appraise them of your situation.


I highly suggest you take a look at the two links provided below:
1. How Do I Handle Possible Identify Theft, Internet Fraud, and CC Fraud?
2. When should I re-format? How should I reinstall?

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do. If you decide to go through with the cleanup, please proceed with the following steps.




:step1: Please download and run Combofix:

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. If you do not know how to do this you can find out >here< or >here<
3. Double click on combofix.exe & follow the prompts.

Notes:
  • Combofix may need to reboot your computer more than once to do its job. This is normal.
  • When finished, it will produce a report for you.

Important:
  • Do not mouseclick combofix's window while it's running. That may cause it to stall.
  • If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

In your next reply, please include:
  • Combofix log
  • How is your computer running now? Please be as descriptive as possible. Include any word-for-word error messages that you may have, and/or screenshots of strange behavior.

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#3 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 16 July 2012 - 06:40 AM

Hi Jason,

Thanks for getting back to me, currently I'm not getting any weird popups or error messages but I'm still getting the Symatec popup of files being quarantined. Also occassionally I'll have a IE redirect problem. Attached is the combofix log file.

Attached Files



#4 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 16 July 2012 - 08:53 AM

Shawn,

Can you tell me exactly what files Symantec is quarantining?

What happens when you are redirected? Are you searching Google, and are redirected? Are you redirected to the same website each time?

Do you notice anything else odd with your computer?


Rerun Combofix

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the box below into it:

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}"=-

[-HKEY_CLASSES_ROOT\clsid\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}]

[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}"=-

Files::
c:\program files (x86)\Swag_Bucks\

Save this as CFScript.txt, in the same location as ComboFix.exe


Posted Image

Refering to the picture above, drag CFScript into ComboFix.exe

If asked to update Combofix, please allow it to update.

When finished, it shall produce a log for you at C:\ComboFix.txt.


Please post this Combofix log in your reply, along with the answers to my questions, above.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#5 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 16 July 2012 - 10:43 AM

Hi Jason,

New combofix log is attached and below is a small sample of Symantec risk log, tried to attach as csv but wouldn't let me. The redirect issue happens very intermittenly but yes it is while searching with google then trying to follow the search results.



Filename Risk Action Risk Type Original Location Computer User Status Current Location Primary Action Secondary Action Logged By Action Description Date and Time
APQF583.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/15/2012 17:37
80000032.@ Trojan.Gen Quarantined File; Virus C:\Windows\INSTALLER\{0AC3BB32-A937-0474-B00E-98332C8A9329}\U\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/15/2012 16:47
Cookie:shawn.goncalves@yieldmanager.net/ Tracking Cookies Deleted Tracking Cookie Cookie:shawn.goncalves@yieldmanager.net/ SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/15/2012 13:34
Cookie:shawn.goncalves@go.com/ Tracking Cookies Deleted Tracking Cookie Cookie:shawn.goncalves@go.com/ SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/15/2012 13:02
.medleyads.com Tracking Cookies Deleted Tracking Cookie .medleyads.com SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/14/2012 12:35
DWH16C1.tmp Trojan.Gen.2 Quarantined File; Virus C:\Users\SHAWN.GONCALVES\AppData\Local\Temp\ SHAWN-OFFICE SYSTEM Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/14/2012 11:57
Cookie:shawn.goncalves@atdmt.com/ Tracking Cookies Deleted Tracking Cookie Cookie:shawn.goncalves@atdmt.com/ SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/13/2012 14:05
.adultfriendfinder.com Tracking Cookies Deleted Tracking Cookie .adultfriendfinder.com SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/12/2012 14:00
.doubleclick.net Tracking Cookies Deleted Tracking Cookie .doubleclick.net SHAWN-OFFICE shawn.goncalves Deleted Deleted Delete Leave alone (log only) Scheduled scan The file was deleted successfully. 7/11/2012 13:43
APQ453F.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:06
APQ8068.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:06
APQ6A0F.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:06
APQC6A.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:06
APQ4870.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ6DB8.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ56DC.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQF6EB.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQCF2.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ8585.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ4E50.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ4EE7.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQE255.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQE2F0.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ9061.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ90D1.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQC097.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQD0FF.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ893.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ8239.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQF71B.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQF356.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQ2880.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQE97C.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQAE3.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQFBCF.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:05
APQB69.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQABCA.tmp Trojan Horse Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQD5F1.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQD15.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQ6B83.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQ588.tmp Trojan.Gen.2 Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQB695.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQ96C.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQDFE8.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
APQ8502.tmp JS.Alescurf Quarantined File; Virus C:\PROGRAMDATA\Symantec\SRTSP\Quarantine\ SHAWN-OFFICE shawn.goncalves Infected Quarantine Clean security risk Quarantine Auto-Protect scan The file was quarantined successfully. 7/11/2012 7:04
80000000.@ Hacktool.Rootkit Cleaned File; Virus C:\Windows\Installer\{0ac3bb32-a937-0474-b00e-98332c8a9329}\U\ SHAWN-OFFICE SYSTEM Cleaned C:\Windows\Installer\{0ac3bb32-a937-0474-b00e-98332c8a9329}\U\ Clean security risk Quarantine Auto-Protect scan The file was repaired successfully. 7/11/2012 7:04

 


ComboFix 12-07-16.01 - shawn.goncalves 07/16/2012 9:59.3.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.16366.13079 [GMT -4:00]
Running from: c:\users\shawn.goncalves\Downloads\ComboFix.exe
Command switches used :: c:\users\shawn.goncalves\Downloads\cfscript.txt
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Symantec Endpoint Protection *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-06-16 to 2012-07-16 )))))))))))))))))))))))))))))))
.
.
2012-07-16 14:42 . 2012-07-16 14:42 -------- d-----w- c:\users\TEMP\AppData\Local\temp
2012-07-16 14:42 . 2012-07-16 14:42 -------- d-----w- c:\users\Shawn\AppData\Local\temp
2012-07-16 14:42 . 2012-07-16 14:42 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-07-16 14:42 . 2012-07-16 14:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-11 07:06 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-07-11 04:19 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll
2012-07-10 18:28 . 2012-07-10 18:34 -------- d-----w- C:\FRST
2012-07-10 18:11 . 2012-07-10 18:11 -------- d-----w- c:\users\shawn.goncalves\AppData\Roaming\SPE
2012-07-09 10:57 . 2012-07-09 10:57 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2012-06-27 13:35 . 2012-06-27 13:35 -------- d-----w- c:\users\shawn.goncalves\AppData\Local\Macromedia
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-13 13:18 . 2012-01-17 13:43 53312 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2012-07-13 08:37 . 2011-11-03 19:50 34720 ----a-w- c:\windows\system32\LMIport.dll
2012-07-13 08:37 . 2011-11-03 19:50 87488 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2012-07-13 08:37 . 2011-11-03 19:50 80800 ----a-w- c:\windows\system32\LMIinit.dll
2012-07-12 16:42 . 2012-04-11 10:06 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-12 16:42 . 2011-09-15 01:02 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-13 12:58 . 2012-06-13 12:58 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-06-13 12:56 . 2012-06-13 12:56 81840 ----a-w- c:\windows\system32\FwsVpn.dll
2012-06-13 12:56 . 2012-06-13 12:56 58288 ----a-w- c:\windows\SysWow64\snacnp.dll
2012-06-13 12:56 . 2012-06-13 12:56 58288 ----a-w- c:\windows\system32\snacnp.dll
2012-06-13 12:56 . 2012-06-13 12:56 42632 ----a-w- c:\windows\system32\drivers\WGX64.SYS
2012-06-13 12:56 . 2012-06-13 12:56 288176 ----a-w- c:\windows\system32\SymVPN.dll
2012-05-19 08:37 . 2011-11-03 19:50 87456 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2012-05-19 08:37 . 2011-11-03 19:50 80768 ----a-w- c:\windows\system32\LMIinit.dll.000.bak
2012-05-09 13:09 . 2012-05-09 13:10 476960 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-05-09 13:09 . 2012-01-30 15:04 472864 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-04 11:06 . 2012-06-13 04:35 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 10:03 . 2012-06-13 04:34 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-04 10:03 . 2012-06-13 04:34 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-28 03:55 . 2012-06-13 04:34 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 05:41 . 2012-06-13 04:35 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 05:41 . 2012-06-13 04:35 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 05:34 . 2012-06-13 04:35 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
.
.
((((((((((((((((((((((((((((( SnapShot_2012-07-15_21.37.59 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-09-14 17:43 . 2012-07-14 22:31 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-09-14 17:43 . 2012-07-16 11:20 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-09-14 17:43 . 2012-07-16 11:20 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-09-14 17:43 . 2012-07-14 22:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-07-16 11:20 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-07-14 22:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:46 . 2012-07-15 21:48 114736 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\BitTorrentBar\prxtbBitT.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\prxtbBitT.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RCUI"="c:\program files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe" [2010-11-23 500992]
"RCHotKey"="c:\program files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe" [2010-11-23 38144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
"Hotkey Utility"="c:\program files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe" [2011-01-19 620136]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"ViewPoint Updater"="c:\program files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe" [2011-10-19 105984]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
"AllShareAgent"="c:\program files (x86)\Samsung\AllShare\AllShareAgent.exe" [2012-03-02 285072]
"Monitor"="c:\program files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe" [2011-11-12 268640]
"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2012-01-10 2215768]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\shawn.goncalves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]
Technician.lnk - c:\program files (x86)\RSS_BETA\LiveUpdate.exe [2011-9-14 802656]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-11-30 1120032]
Intuit Data Protect.lnk - c:\program files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe [2012-3-14 5961048]
QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2012-3-14 1175912]
QuickBooks_Standard_21.lnk - c:\program files (x86)\Intuit\QuickBooks 2009\QBW32.EXE [2012-3-14 1178984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SEP]
c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\WinLogoutNotifier.dll [BU]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CrossLoopService;CrossLoop Service;c:\users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe [2012-01-06 569072]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-12 250056]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2009-11-30 319016]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-11-18 39464]
R3 EraserUtilDrv11210;EraserUtilDrv11210;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11210.sys [x]
R3 FlyUsb;FLY Fusion;c:\windows\system32\DRIVERS\FlyUsb.sys [2011-11-12 24576]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 136176]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-27 113120]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [2011-08-02 22528]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [2010-08-11 1014624]
R3 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2012-07-13 53312]
R3 SimpleSlideShowServer;SimpleSlideShowServer;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-02 27584]
R3 SolarWinds TFTP Server;SolarWinds TFTP Server;c:\program files (x86)\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe [2010-06-10 54784]
R3 SWVNIC;SonicWALL Virtual Miniport;c:\windows\system32\DRIVERS\swvnic.sys [2010-01-23 24600]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 tvnserver;TightVNC Server;c:\users\shawn.goncalves\AppData\Local\CrossLoop\tvnserver.exe [2010-07-21 814080]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-12-19 146736]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-09-14 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-24 25960]
S0 SymDS;Symantec Data Store;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMDS64.SYS [2011-11-16 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMEFA64.SYS [2012-02-27 932472]
S1 BHDrvx64;BHDrvx64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20120711.012\BHDrvx64.sys [2012-06-20 1161376]
S1 IDSVia64;IDSVia64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20120713.001\IDSvia64.sys [2012-06-26 509088]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\Ironx64.SYS [2011-11-16 171128]
S1 SYMNETS;Symantec Network Security WFP Driver;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMNETS.SYS [2012-03-19 386168]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2011-12-19 224048]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2011-12-19 130864]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 GREGService;GREGService;c:\program files (x86)\Gateway\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 Live Updater Service;Live Updater Service;c:\program files\Gateway\Gateway Updater\UpdaterService.exe [2011-01-31 244624]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2012-07-13 375208]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [2011-09-16 15928]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-06-25 35344]
S2 QBVSS;QBIDPService;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [2012-01-10 1248256]
S2 SamsungAllShareV2.0;Samsung AllShare PC;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-02 25504]
S2 SepMasterService;Symantec Endpoint Protection;c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe [2012-01-28 137208]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-24 378472]
S2 SWGVCSvc;SonicWALL Global VPN Client Service;c:\program files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe [2011-01-14 286504]
S2 SWIPsec;SonicWALL IPsec Driver;c:\windows\system32\Drivers\SWIPsec.sys [2011-01-14 100128]
S2 TvWksSvc;Vertical Wave Workstation Service;c:\program files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe [2011-08-04 130560]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S2 ViewPointUpgradeService;Vertical Wave ViewPoint Upgrade Service;c:\program files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe [2011-10-19 14336]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-07-02 138912]
S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-03 174184]
S3 NxDrv;SonicWALL NetExtender Adapter;c:\windows\system32\DRIVERS\NxDrv.sys [2009-10-21 24264]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-16 428136]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2011-12-19 165680]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - LMIINFO
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 16:42]
.
2012-07-16 c:\windows\Tasks\Gateway Registration - Data Sending task.job
- c:\program files (x86)\Gateway\Registration\GREG.exe [2010-04-28 02:47]
.
2012-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 11:40]
.
2012-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 11:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]
"SonicWALLNetExtender"="c:\program files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe" [2010-06-22 1103744]
"LogMeIn GUI"="c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2011-09-16 57928]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://companyweb
mStart Page = hxxp://www.bing.com/?pc=MAGW
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: &ieSpell Options - c:\program files (x86)\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files (x86)\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - file://c:\program files (x86)\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files (x86)\ieSpell\wikipedia.HTM
Trusted Zone: comptelnetworks.local\sc
Trusted Zone: hrsaccount.com\www
Trusted Zone: ibanking-services.com\cibng
Trusted Zone: stumbleupon.com\www
TCP: Interfaces\{ECD07567-B620-4651-9A4A-C7CB86BEA1AB}: NameServer = 192.168.150.1
Handler: intu-help-qb5 - {867FCB77-9823-4cd6-8210-D85F968D466F} - c:\program files (x86)\Intuit\QuickBooks 2009\HelpAsyncPluggableProtocol.dll
DPF: {16F67783-7E72-4C39-99C4-4780A8335484} - hxxp://www.syncmyride.com/Own/Modules/UpdateCenter/applets/sync.cab
DPF: {5C709EEC-DDE1-4738-8E57-7564E2637891} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom1_2009.cab
DPF: {788539E8-002D-4E59-9089-40B694A99C9A} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom2_2008.cab
FF - ProfilePath - c:\users\shawn.goncalves\AppData\Roaming\Mozilla\Firefox\Profiles\ejqucwnx.default\
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SepMasterService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe\" /s \"Symantec Endpoint Protection\" /m \"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\sms.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SmcService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\Smc.exe\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-07-16 11:03:41
ComboFix-quarantined-files.txt 2012-07-16 15:03
ComboFix2.txt 2012-07-15 21:45
ComboFix3.txt 2012-03-30 14:07
.
Pre-Run: 756,897,992,704 bytes free
Post-Run: 756,840,992,768 bytes free
.
- - End Of File - - 42EFE90741CF747DFC64A7E3F9DCB773

Attached Files


Edited by jntkwx, 16 July 2012 - 03:37 PM.


#6 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 16 July 2012 - 03:42 PM

Shawn,

Does Symantec continually pop up with new infections?

OTL Report
  • Please download OTL from one of the following mirrors:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTL.txt <-- Will be opened
    • Extra.txt <-- Will be minimized

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#7 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 18 July 2012 - 08:48 PM

Shawn,

It has been two days since my last post. Do you still need help?

If you do, please follow my previous instructions. :thumbup2:
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#8 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 19 July 2012 - 01:49 PM

Hi Jason, sorry for the delay but yes I still get periodic popup and another that start happening today is when using google search if I click on a link sometimes a new tab opens and redirects. Below is the result of the otl scan.

otl.txt
TL logfile created on: 7/19/2012 2:37:41 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\shawn.goncalves\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 9.57 Gb Available Physical Memory | 59.86% Memory free
31.96 Gb Paging File | 24.92 Gb Available in Paging File | 77.96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1383.17 Gb Total Space | 700.03 Gb Free Space | 50.61% Space Free | Partition Type: NTFS

Computer Name: SHAWN-OFFICE | User Name: shawn.goncalves | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/19 14:37:17 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\shawn.goncalves\Downloads\otl.exe
PRC - [2012/07/18 12:18:45 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/07/18 08:40:04 | 000,133,632 | ---- | M] (LPI Level Platforms Inc.) -- C:\Users\shawn.goncalves\AppData\Local\Apps\2.0\24EC79XZ.VZZ\VV09N7PO.NG0\mwre..tion_e4e4f0581fe8e748_0007.0000_28c8924b7da9fa69\MWRemoteAccessGateway.exe
PRC - [2012/07/12 11:42:06 | 000,686,280 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.exe
PRC - [2012/04/19 04:01:15 | 000,198,576 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\SavUI.exe
PRC - [2012/04/03 09:54:38 | 002,446,696 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files (x86)\LogMeIn Ignition\LMIIgnition.exe
PRC - [2012/03/27 08:40:49 | 000,357,808 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
PRC - [2012/03/14 12:14:52 | 001,175,912 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
PRC - [2012/03/14 12:13:30 | 001,178,984 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Intuit\QuickBooks 2009\QBW32.EXE
PRC - [2012/03/14 11:19:46 | 000,045,056 | ---- | M] (Intuit) -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
PRC - [2012/03/02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
PRC - [2012/03/01 23:59:26 | 000,285,072 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
PRC - [2012/02/27 00:15:32 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
PRC - [2012/02/20 21:28:32 | 000,059,240 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
PRC - [2012/02/15 10:32:12 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
PRC - [2012/01/28 00:49:14 | 000,137,208 | ---- | M] (Symantec Corporation) -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe
PRC - [2012/01/10 10:56:52 | 001,248,256 | ---- | M] (Intuit Inc.) -- C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe
PRC - [2012/01/06 09:35:22 | 000,569,072 | -H-- | M] (CrossLoop) -- C:\Users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe
PRC - [2012/01/03 14:23:16 | 022,218,584 | ---- | M] (Tigerpaw Software, Inc. 2201 Thurston Circle Suite 7, Bellevue, Nebraska 68005.) -- C:\Program Files (x86)\Tigerpaw 11\Tigerpaw11.exe
PRC - [2011/12/27 23:19:26 | 001,093,232 | ---- | M] (R.D.H., LLC) -- C:\Program Files (x86)\RSS_BETA\rsstech.exe
PRC - [2011/12/27 23:19:14 | 002,958,560 | ---- | M] (R.D.H., LLC) -- C:\Program Files (x86)\RSS_BETA\Technician.exe
PRC - [2011/11/12 12:04:12 | 000,268,640 | ---- | M] (LeapFrog Enterprises, Inc.) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe
PRC - [2011/11/12 11:21:58 | 006,141,792 | ---- | M] (LeapFrog Enterprises, Inc.) -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe
PRC - [2011/10/19 14:48:02 | 000,105,984 | ---- | M] (Vertical Communications, Inc.) -- C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe
PRC - [2011/10/19 14:43:44 | 000,014,336 | ---- | M] (Vertical Communications, Inc.) -- C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe
PRC - [2011/08/03 23:50:16 | 000,130,560 | ---- | M] (Vertical Communications, Inc.) -- C:\Program Files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe
PRC - [2011/07/14 08:21:10 | 000,108,032 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
PRC - [2011/03/24 02:20:24 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/02/25 13:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/02/01 01:24:42 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2011/02/01 01:24:40 | 000,326,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2011/01/31 16:55:14 | 000,244,624 | ---- | M] (Acer Incorporated) -- C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
PRC - [2011/01/18 21:08:08 | 000,620,136 | ---- | M] () -- C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
PRC - [2010/11/23 17:52:10 | 000,500,992 | ---- | M] (RingCentral, Inc.) -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe
PRC - [2010/11/23 17:52:06 | 000,038,144 | ---- | M] (RingCentral, Inc.) -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe
PRC - [2010/11/06 02:54:22 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/11/06 02:54:20 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/06/22 18:46:32 | 001,103,744 | ---- | M] (SonicWALL Inc.) -- C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe
PRC - [2010/05/04 15:07:22 | 000,503,080 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010/02/03 03:08:56 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
PRC - [2010/01/08 09:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe
PRC - [2009/12/09 09:25:16 | 000,615,720 | ---- | M] (Juniper Networks) -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/18 12:18:45 | 002,003,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/06/13 03:48:18 | 000,221,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\a41ce1b6f77a65783d1c0d3a4223559f\System.ServiceProcess.ni.dll
MOD - [2012/06/13 03:48:16 | 012,078,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\a2f4ebd107137ad2126b18d77815ac6f\System.Web.ni.dll
MOD - [2012/06/13 03:47:55 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll
MOD - [2012/06/13 03:47:25 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
MOD - [2012/06/13 03:44:32 | 000,475,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\1cb5f5d54ef9b24b90a51b006181fe71\IAStorUtil.ni.dll
MOD - [2012/06/13 03:41:31 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll
MOD - [2012/06/13 03:41:14 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012/06/13 03:41:09 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012/06/13 03:41:08 | 001,806,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll
MOD - [2012/06/13 03:23:06 | 011,522,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\334f4a2b874af82700a37098b4b27e50\PresentationCore.ni.dll
MOD - [2012/06/13 03:23:00 | 013,197,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\4b22dad19a03b0a1cf7b70ff29518693\System.Windows.Forms.ni.dll
MOD - [2012/06/13 03:22:55 | 003,879,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\eca1bc38b28d3caf12dc3f6469c2be90\WindowsBase.ni.dll
MOD - [2012/06/13 03:22:53 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\774be62ce5b089eb7118736d63a8b3e0\System.Drawing.ni.dll
MOD - [2012/05/09 09:10:00 | 000,108,320 | ---- | M] () -- C:\Program Files (x86)\Java\jre6\bin\jp2iexp.dll
MOD - [2012/05/09 09:10:00 | 000,014,112 | ---- | M] () -- C:\Program Files (x86)\Java\jre6\bin\jp2native.dll
MOD - [2012/05/09 03:45:19 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1799edaf526c8acd66a05266ced58279\System.Runtime.Remoting.ni.dll
MOD - [2012/05/09 03:45:00 | 001,707,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll
MOD - [2012/05/09 03:43:18 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
MOD - [2012/05/09 03:43:17 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll
MOD - [2012/05/09 03:43:16 | 017,478,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll
MOD - [2012/05/09 03:40:32 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\367af7fc22650701edfa7e8ecadcb273\IAStorCommon.ni.dll
MOD - [2012/05/09 03:40:21 | 002,297,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
MOD - [2012/05/09 03:26:18 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
MOD - [2012/05/09 03:26:17 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll
MOD - [2012/05/09 03:26:17 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll
MOD - [2012/05/09 03:26:16 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
MOD - [2012/05/09 03:25:46 | 000,310,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ff4e90c5842525f7a7456639de090d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
MOD - [2012/05/09 03:25:29 | 000,025,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll
MOD - [2012/05/09 03:25:10 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012/05/09 03:25:05 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012/05/09 03:25:00 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012/05/09 03:24:59 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/09 03:23:39 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/05/09 03:07:54 | 007,053,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\a77b7b58c3a6b12d8e1d4862a5e4707c\System.Core.ni.dll
MOD - [2012/05/09 03:07:52 | 005,618,176 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\27db9abf05348711baf8ce46589ea251\System.Xml.ni.dll
MOD - [2012/05/09 03:07:50 | 000,980,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\b8c47ff8eba1c63c4b5d50fe571cac5a\System.Configuration.ni.dll
MOD - [2012/05/09 03:07:49 | 009,091,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\d9f2d9f4d4bda48670bdae6555fec6dd\System.ni.dll
MOD - [2012/05/09 03:07:45 | 014,414,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll
MOD - [2012/03/14 12:14:20 | 000,138,088 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\QBMAPILibrary.dll
MOD - [2012/03/14 12:14:16 | 000,020,840 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\QBCompressor.DLL
MOD - [2012/03/14 12:14:04 | 000,042,344 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\mbpopup.dll
MOD - [2012/03/14 12:13:40 | 000,176,488 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\boost_serialization-vc90-mt-p-1_33.dll
MOD - [2012/03/14 12:13:38 | 000,268,648 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\boost_regex-vc90-mt-p-1_33.dll
MOD - [2012/03/14 12:13:36 | 000,380,264 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\BackupLib.dll
MOD - [2012/02/01 10:51:44 | 004,617,616 | ---- | M] () -- C:\Program Files (x86)\LogMeIn Ignition\RACtrl.dll
MOD - [2012/01/10 10:56:16 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Intuit\QuickBooks 2009\zlib1.dll
MOD - [2011/12/23 13:11:34 | 000,293,208 | ---- | M] () -- C:\Program Files (x86)\Tigerpaw Software\Tigerpaw Control Library\tsiControls\tsiInteropUserControlLibrary.dll
MOD - [2011/12/23 13:10:54 | 000,239,960 | ---- | M] () -- C:\Program Files (x86)\Tigerpaw Software\Tigerpaw Control Library\tsiControls\Tigerpaw.GridWrapper.dll
MOD - [2011/09/27 07:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/27 07:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/09/14 15:12:59 | 000,046,496 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Microsoft.InteropFormTools\1.0.0.0__b03f5f7f11d50a3a\Microsoft.InteropFormTools.dll
MOD - [2011/09/14 09:19:06 | 008,500,224 | ---- | M] () -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect\QtGui4.dll
MOD - [2011/09/14 09:19:06 | 002,348,544 | ---- | M] () -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect\QtCore4.dll
MOD - [2011/07/14 08:21:22 | 001,712,128 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvorbis_plugin.dll
MOD - [2011/07/14 08:21:22 | 001,451,520 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libzvbi_plugin.dll
MOD - [2011/07/14 08:21:22 | 001,137,664 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libxml_plugin.dll
MOD - [2011/07/14 08:21:22 | 001,108,992 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtaglib_plugin.dll
MOD - [2011/07/14 08:21:22 | 001,034,752 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libx264_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,437,760 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_rtp_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,401,920 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_raop_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,368,640 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtheora_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,325,120 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libswscale_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,287,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_sdl_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,146,944 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtwolame_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,123,392 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libts_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,078,848 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libzip_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_transcode_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,062,464 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvisual_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,056,832 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvod_rtsp_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,052,736 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libwingdi_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,052,736 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libty_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubtitle_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,048,640 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvcd_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,047,104 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsdec_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libwaveout_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvobsub_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsusf_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_record_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_mosaic_bridge_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvideo_filter_wrapper_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtransform_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_standard_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,040,448 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i420_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_wrapper_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i422_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libwav_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsvcdsub_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libwall_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvoc_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_smem_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvmem_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libxtag_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuv_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtta_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libwave_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libvc1_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_channel_mixer_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_gather_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libxa_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuvp_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libugly_resampler_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_mixer_plugin.dll
MOD - [2011/07/14 08:21:22 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libt140_plugin.dll
MOD - [2011/07/14 08:21:20 | 011,496,448 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libqt4_plugin.dll
MOD - [2011/07/14 08:21:20 | 002,169,856 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libskins2_plugin.dll
MOD - [2011/07/14 08:21:20 | 001,013,248 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libschroedinger_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,401,920 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libremoteosd_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,400,896 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librtp_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,302,080 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsdl_image_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,130,048 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libspeex_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,103,936 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libspatializer_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,080,896 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsap_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libreal_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,044,032 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librss_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libscreen_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_bridge_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libspudec_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_es_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsmf_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libscaletempo_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librotate_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvid_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libscene_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libquicktime_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_duplicate_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_rar_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librealvideo_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstats_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsimple_channel_mixer_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librawdv_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librawaud_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_display_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libsharpen_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libripple_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvideo_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_autodel_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libscale_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_record_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\librv32_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_description_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libspdif_mixer_plugin.dll
MOD - [2011/07/14 08:21:20 | 000,030,208 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_dummy_plugin.dll
MOD - [2011/07/14 08:21:18 | 001,423,360 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libprojectm_plugin.dll
MOD - [2011/07/14 08:21:18 | 001,231,872 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmkv_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,441,856 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmod_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,237,568 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpng_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,194,048 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmp4_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,134,656 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ts_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,128,000 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgatofixed32_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,108,032 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libplaylist_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,098,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldhttp_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,093,184 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpc_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,091,648 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ps_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,090,624 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libportaudio_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,089,600 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libogg_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,081,408 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpostproc_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,081,408 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_h264_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldrc_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,054,272 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpanoramix_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,053,760 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4audio_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,052,736 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ogg_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mp4_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_asf_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,051,200 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libps_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,048,128 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmosaic_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,047,616 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_dirac_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,043,520 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libosd_parser_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_vc1_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldtelnet_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnuv_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_avi_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,040,448 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpegvideo_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,039,936 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotiondetect_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4video_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_flac_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpuzzle_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mlp_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmono_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,038,400 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libosdmenu_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpodcast_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpeg_audio_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpva_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libntservice_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsv_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libparam_eq_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnetsync_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpsychedelic_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_copy_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsc_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnormvol_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_wav_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmsn_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotionblur_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libnoise_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mpjpeg_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_dummy_plugin.dll
MOD - [2011/07/14 08:21:18 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgv_plugin.dll
MOD - [2011/07/14 08:21:16 | 001,776,128 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibass_plugin.dll
MOD - [2011/07/14 08:21:16 | 001,125,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgnutls_plugin.dll
MOD - [2011/07/14 08:21:16 | 001,085,440 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblive555_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,379,904 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgme_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,338,432 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblua_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,231,936 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgoom_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,152,576 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibmpeg2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,135,680 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_sse2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,094,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libkate_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_mmx_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libglwin32_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,048,640 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_sse2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libhotkeys_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,046,080 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_sse2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgradient_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,039,936 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_mmx_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogo_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmarq_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,038,400 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_mmx_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmagnify_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libheadphone_channel_mixer_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgestures_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmirror_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmediadirs_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblpcm_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmjpeg_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogger_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmxext_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpy3dn_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libglobalhotkeys_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmx_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvmem_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_i420_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrey_yuv_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrain_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libh264_plugin.dll
MOD - [2011/07/14 08:21:16 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvert_plugin.dll
MOD - [2011/07/14 08:21:14 | 001,131,520 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirac_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,652,800 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfreetype_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,309,760 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfaad_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,265,216 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libflac_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,258,048 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfluidsynth_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,231,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdnav_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,210,944 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdshow_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,178,176 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstofloat32_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,157,696 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdread_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,150,528 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvbsub_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,097,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdeinterlace_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirectx_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirect3d_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,050,176 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdmo_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,043,520 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcrop_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libequalizer_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,041,984 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libflacsys_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libes_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libextract_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,039,936 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdummy_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfilesystem_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdts_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,037,888 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libexport_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfake_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcvdsub_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcroppadd_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liberase_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libgaussianblur_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstospdif_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdolby_surround_decoder_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemuxdump_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfloat32_mixer_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemux_cdg_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libfolder_plugin.dll
MOD - [2011/07/14 08:21:14 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libdrawable_plugin.dll
MOD - [2011/07/14 08:21:12 | 008,248,320 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libavcodec_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,831,488 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcaca_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,267,264 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_sdl_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,184,832 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libatmo_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libbda_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,129,024 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdda_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,088,064 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libavi_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,072,192 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libasf_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,057,856 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libblend_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_v_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libadjust_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_directx_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaraw_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libball_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudioscrobbler_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudio_format_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,039,424 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcc_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,038,912 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libadpcm_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_a_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libchorus_flanger_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libbluescreen_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcanvas_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libblendbench_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcolorthres_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,034,816 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_file_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdg_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaiff_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libclone_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libalphamask_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,033,280 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaes3_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libconverter_fixed_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libchain_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_udp_plugin.dll
MOD - [2011/07/14 08:21:12 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libau_plugin.dll
MOD - [2011/07/14 08:21:10 | 002,263,552 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
MOD - [2011/07/14 08:21:10 | 000,394,240 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_shout_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,108,032 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
MOD - [2011/07/14 08:21:10 | 000,101,376 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
MOD - [2011/07/14 08:21:10 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_bd_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,088,064 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_http_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,075,776 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_mms_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,070,144 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_realrtsp_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tofloat32_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_imem_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_ftp_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_udp_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,036,352 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,035,840 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_http_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,034,304 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_smb_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_fake_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,032,256 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_file_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_tcp_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,031,232 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_attachment_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_dummy_plugin.dll
MOD - [2011/07/14 08:21:10 | 000,030,720 | ---- | M] () -- C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tospdif_plugin.dll
MOD - [2011/03/24 02:20:08 | 000,237,160 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2011/01/18 21:08:08 | 000,620,136 | ---- | M] () -- C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
MOD - [2011/01/18 21:08:04 | 000,151,656 | ---- | M] () -- C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyHook.dll
MOD - [2010/12/21 01:15:30 | 001,041,248 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
MOD - [2010/11/23 17:53:18 | 001,049,856 | ---- | M] () -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCTH.dll
MOD - [2010/11/23 17:53:04 | 000,374,016 | ---- | M] () -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCABEx.dll
MOD - [2010/11/23 17:45:30 | 001,560,576 | ---- | M] () -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\Characters\RCSPSkSPDark.dll
MOD - [2010/11/20 23:24:08 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2010/08/12 14:08:20 | 000,008,592 | ---- | M] () -- C:\Program Files (x86)\LogMeIn Ignition\RACtrlKeyHook.dll
MOD - [2010/05/05 13:21:58 | 000,126,976 | ---- | M] () -- C:\Program Files (x86)\RingCentral\RingCentral Call Controller\NetFixDll.dll
MOD - [2009/06/10 17:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009/02/27 15:52:56 | 000,258,048 | ---- | M] () -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\sqlite.dll
MOD - [2009/01/18 18:50:02 | 000,417,792 | ---- | M] () -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeXMP.dll
MOD - [2006/10/14 23:03:34 | 001,228,800 | ---- | M] () -- C:\Program Files (x86)\Business Objects\Common\3.5\bin\prompt.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/25 10:59:38 | 000,011,264 | ---- | M] (Tenable Network Security, Inc) [On_Demand | Stopped] -- C:\Program Files\Tenable\Nessus\nessus-service.exe -- (Tenable Nessus)
SRV:64bit: - [2011/01/31 16:55:14 | 000,244,624 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe -- (Live Updater Service)
SRV:64bit: - [2011/01/14 16:07:08 | 000,286,504 | ---- | M] (SonicWALL, Inc.) [Auto | Running] -- C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe -- (SWGVCSvc)
SRV:64bit: - [2010/09/22 21:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/11/30 17:55:46 | 000,919,328 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/07/13 21:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012/07/18 12:18:45 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/07/13 04:38:06 | 000,147,368 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2012/07/13 04:37:59 | 000,375,208 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2012/07/12 12:42:16 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/19 04:05:16 | 002,601,544 | ---- | M] (Symantec Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\Smc.exe -- (SmcService)
SRV - [2012/04/19 03:47:05 | 000,325,040 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\snac64.exe -- (SNAC)
SRV - [2012/03/14 11:19:46 | 000,045,056 | ---- | M] (Intuit) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService)
SRV - [2012/03/02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe -- (SamsungAllShareV2.0)
SRV - [2012/03/02 17:00:20 | 000,027,584 | ---- | M] (Samsung Electronics Co., Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe -- (SimpleSlideShowServer)
SRV - [2012/01/28 00:49:14 | 000,137,208 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe -- (SepMasterService)
SRV - [2012/01/10 10:56:52 | 001,248,256 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe -- (QBVSS)
SRV - [2012/01/10 10:56:28 | 000,061,440 | ---- | M] (Intuit Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService)
SRV - [2012/01/06 09:35:22 | 000,569,072 | -H-- | M] (CrossLoop) [Auto | Running] -- C:\Users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe -- (CrossLoopService)
SRV - [2011/11/12 11:21:58 | 006,141,792 | ---- | M] (LeapFrog Enterprises, Inc.) [Auto | Running] -- C:\Program Files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe -- (LeapFrog Connect Device Service)
SRV - [2011/10/19 14:43:44 | 000,014,336 | ---- | M] (Vertical Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe -- (ViewPointUpgradeService)
SRV - [2011/09/16 15:10:50 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2011/08/03 23:50:16 | 000,130,560 | ---- | M] (Vertical Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe -- (TvWksSvc)
SRV - [2011/03/24 02:20:24 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/03/02 00:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 13:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/01 01:24:42 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2011/02/01 01:24:40 | 000,326,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/11/06 02:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®
SRV - [2010/10/12 13:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/07/21 08:50:26 | 000,814,080 | -H-- | M] (GlavSoft LLC.) [On_Demand | Stopped] -- C:\Users\shawn.goncalves\AppData\Local\CrossLoop\tvnserver.exe -- (tvnserver)
SRV - [2010/06/25 13:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/06/22 18:46:36 | 000,498,560 | ---- | M] (SonicWALL Inc.) [Auto | Running] -- C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe -- (SONICWALL_NetExtender)
SRV - [2010/06/10 10:50:50 | 000,054,784 | ---- | M] (SolarWinds) [On_Demand | Stopped] -- C:\Program Files (x86)\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe -- (SolarWinds TFTP Server)
SRV - [2010/05/04 15:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/08 09:21:22 | 000,023,584 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe -- (GREGService)
SRV - [2009/12/09 09:25:16 | 000,615,720 | ---- | M] (Juniper Networks) [Auto | Running] -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/07/13 09:18:28 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pssdk42.sys -- (PSSDK42)
DRV:64bit: - [2012/07/13 04:37:59 | 000,087,488 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2012/06/13 08:58:36 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)
DRV:64bit: - [2012/03/18 22:23:44 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\symnets.sys -- (SYMNETS)
DRV:64bit: - [2012/03/07 03:09:30 | 000,678,008 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\srtsp64.sys -- (SRTSP)
DRV:64bit: - [2012/03/07 03:09:30 | 000,039,032 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2012/03/01 02:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/26 22:31:39 | 000,932,472 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\SymEFA64.sys -- (SymEFA)
DRV:64bit: - [2012/02/15 11:01:50 | 000,052,736 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011/12/19 14:45:22 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011/11/15 22:11:52 | 000,451,192 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\SymDS64.sys -- (SymDS)
DRV:64bit: - [2011/11/15 22:05:11 | 000,171,128 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SEP\0C01044D\0191.105\x64\Ironx64.sys -- (SymIRON)
DRV:64bit: - [2011/11/12 11:18:20 | 000,024,576 | ---- | M] (LeapFrog) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\FlyUsb.sys -- (FlyUsb)
DRV:64bit: - [2011/09/16 15:10:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2011/09/16 15:10:24 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2011/08/02 17:38:44 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:64bit: - [2011/03/24 02:48:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011/03/03 11:59:18 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011/02/16 05:11:08 | 000,428,136 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011/01/14 16:08:20 | 000,100,128 | ---- | M] (SonicWALL, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SWIPsec.sys -- (SWIPsec)
DRV:64bit: - [2010/12/06 09:46:24 | 000,131,672 | ---- | M] (Deterministic Networks, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dnelwf64.sys -- (DNE)
DRV:64bit: - [2010/11/20 23:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 23:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010/11/20 23:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 23:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/20 23:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 09:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)
DRV:64bit: - [2010/11/20 07:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)
DRV:64bit: - [2010/11/06 02:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/10/19 04:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel®
DRV:64bit: - [2010/08/10 23:40:06 | 001,014,624 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2010/06/25 13:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2010/01/23 11:55:28 | 000,024,600 | ---- | M] (SonicWALL, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWVNIC.sys -- (SWVNIC)
DRV:64bit: - [2009/12/09 09:10:40 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt)
DRV:64bit: - [2009/11/30 15:37:30 | 000,319,016 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
DRV:64bit: - [2009/11/24 21:06:40 | 000,102,440 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2009/11/24 21:06:38 | 000,135,720 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2009/11/24 21:06:34 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2009/11/17 20:45:00 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:64bit: - [2009/10/21 14:24:26 | 000,024,264 | ---- | M] (SonicWALL Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NxDrv.sys -- (NxDrv)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 20:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2012/07/02 19:37:34 | 002,068,600 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20120718.034\ex64.sys -- (NAVEX15)
DRV - [2012/07/02 19:37:34 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2012/07/02 19:37:34 | 000,120,440 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20120718.034\eng64.sys -- (NAVENG)
DRV - [2012/06/26 11:33:25 | 000,509,088 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20120718.001\IDSviA64.sys -- (IDSVia64)
DRV - [2012/06/19 20:09:46 | 001,161,376 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20120711.012\BHDrvx64.sys -- (BHDrvx64)
DRV - [2012/06/13 09:03:09 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)
DRV - [2011/09/16 15:10:50 | 000,015,928 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2009/07/13 21:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=MAGW
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AGWTDF&pc=MAGW&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=MAGW
IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=AGWTDF&pc=MAGW&src=IE-SearchBox


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-260843078-278039929-3275570884-1142\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://companyweb
IE - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..\SearchScopes,DefaultScope = {A7CF3EDB-AD92-48F6-ABF3-639F8830D477}
IE - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..\SearchScopes\{A7CF3EDB-AD92-48F6-ABF3-639F8830D477}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}&rlz=
IE - HKU\S-1-5-21-260843078-278039929-3275570884-1142\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-260843078-278039929-3275570884-1142\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q="
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\IPSFFPlgn\ [2012/07/17 10:05:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/18 12:18:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/07/07 23:39:30 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{B6336AAE-7350-11E1-826D-B8AC6F996F26}: C:\Users\shawn.goncalves\AppData\Local\{B6336AAE-7350-11E1-826D-B8AC6F996F26}\ [2012/03/21 08:23:51 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{D49333B0-7CBC-11E1-826D-B8AC6F996F26}: C:\Users\shawn.goncalves\AppData\Local\{D49333B0-7CBC-11E1-826D-B8AC6F996F26}\ [2012/04/02 08:10:26 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/18 12:18:45 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/07/07 23:39:30 | 000,000,000 | ---D | M]

[2011/09/14 20:59:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\shawn.goncalves\AppData\Roaming\mozilla\Extensions
[2012/07/18 12:18:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\shawn.goncalves\AppData\Roaming\mozilla\Firefox\Profiles\ejqucwnx.default\extensions
[2012/07/18 12:18:51 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Users\shawn.goncalves\AppData\Roaming\mozilla\Firefox\Profiles\ejqucwnx.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
[2012/06/09 13:58:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/03/21 08:23:51 | 000,000,000 | ---D | M] (Translate This!) -- C:\USERS\SHAWN.GONCALVES\APPDATA\LOCAL\{B6336AAE-7350-11E1-826D-B8AC6F996F26}
[2012/04/11 06:35:30 | 000,004,733 | ---- | M] () (No name found) -- C:\USERS\SHAWN.GONCALVES\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EJQUCWNX.DEFAULT\EXTENSIONS\ZKTNJRPOXW@ZKTNJRPOXW.ORG.XPI
[2012/07/18 12:18:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/03/18 14:32:12 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
[2011/03/18 14:32:14 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll
[2011/12/09 13:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2012/04/27 07:30:29 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/04/27 07:30:29 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012/07/15 17:37:49 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.)
O4:64bit: - HKLM..\Run: [itype] c:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [SonicWALLNetExtender] C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe (SonicWALL Inc.)
O4 - HKLM..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe ()
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe (Intuit Inc. All rights reserved.)
O4 - HKLM..\Run: [Monitor] C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe (LeapFrog Enterprises, Inc.)
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [ViewPoint Updater] C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe (Vertical Communications, Inc.)
O4 - HKU\S-1-5-21-260843078-278039929-3275570884-1142..\Run: [Conduit] C:\Users\shawn.goncalves\AppData\Local\CrossLoop\Conduit\xtowrgor.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-260843078-278039929-3275570884-1142..\Run: [RCHotKey] C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe (RingCentral, Inc.)
O4 - HKU\S-1-5-21-260843078-278039929-3275570884-1142..\Run: [RCUI] C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe (RingCentral, Inc.)
O4 - Startup: C:\Users\shawn.goncalves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Technician.lnk = C:\Program Files (x86)\RSS_BETA\LiveUpdate.exe (R.D.H., LLC)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\Software\Policies\Microsoft\Internet Explorer\PhishingFilter present
O7 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: &ieSpell Options - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O8:64bit: - Extra context menu item: Check &Spelling - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O8:64bit: - Extra context menu item: Lookup on Merriam Webster - C:\Program Files (x86)\ieSpell\Merriam Webster.HTM ()
O8:64bit: - Extra context menu item: Lookup on Wikipedia - C:\Program Files (x86)\ieSpell\wikipedia.HTM ()
O8 - Extra context menu item: &ieSpell Options - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Check &Spelling - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O8 - Extra context menu item: Lookup on Merriam Webster - C:\Program Files (x86)\ieSpell\Merriam Webster.HTM ()
O8 - Extra context menu item: Lookup on Wikipedia - C:\Program Files (x86)\ieSpell\wikipedia.HTM ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..Trusted Domains: comptelnetworks.com ([remote] https in Local intranet)
O15 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..Trusted Domains: comptelnetworks.local ([sc] http in Trusted sites)
O15 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..Trusted Domains: hrsaccount.com ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..Trusted Domains: ibanking-services.com ([cibng] https in Trusted sites)
O15 - HKU\S-1-5-21-260843078-278039929-3275570884-1142\..Trusted Domains: stumbleupon.com ([www] https in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 10.0.0)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_client_4.4.26.0.cab (SysInfo Class)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {16F67783-7E72-4C39-99C4-4780A8335484} http://www.syncmyride.com/Own/Modules/UpdateCenter/applets/sync.cab (SyncXfer Class)
O16 - DPF: {44C1E3A2-B594-401C-B27A-D1B4476E4797} https://67.154.196.2:4433/XTSAC.cab (XTSAC Control)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.0.cab (DLM Control)
O16 - DPF: {5C709EEC-DDE1-4738-8E57-7564E2637891} https://merchantaccount.quickbooks.com/sync/QBMASSyncCom1_2009.cab (QBMASSyncCom1_2009.UserControl1)
O16 - DPF: {6EEFD7B1-B26C-440D-B55A-1EC677189F30} https://66.251.114.162:4433/NELX.cab (NELaunchCtrl Class)
O16 - DPF: {788539E8-002D-4E59-9089-40B694A99C9A} https://merchantaccount.quickbooks.com/sync/QBMASSyncCom2_2008.cab (QBMASSyncCom2_2008.UserControl1)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://209.80.140.35/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=724 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = comptelnetworks.local
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{67491403-BEA5-41D2-8B50-7BA896231DBF}: DhcpNameServer = 192.168.0.1 192.168.0.11
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ECD07567-B620-4651-9A4A-C7CB86BEA1AB}: NameServer = 192.168.150.1
O18:64bit: - Protocol\Handler\intu-help-qb5 - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll File not found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\qbwc - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\intu-help-qb5 {867FCB77-9823-4cd6-8210-D85F968D466F} - C:\Program Files (x86)\Intuit\QuickBooks 2009\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\SEP: DllName - (C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\WinLogoutNotifier.dll) - File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/07/19 13:09:34 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\Documents\Internal VA Report
[2012/07/16 11:24:43 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/07/16 11:04:11 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/07/11 07:36:41 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\Desktop\gmer
[2012/07/11 03:02:28 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/07/11 03:02:28 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/07/11 03:02:27 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/07/11 03:02:27 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/07/11 03:02:25 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012/07/11 03:02:25 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012/07/11 03:02:25 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012/07/11 03:02:25 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/07/11 03:02:25 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/07/11 03:02:25 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012/07/11 03:02:25 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012/07/11 03:02:24 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012/07/11 03:02:24 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012/07/11 00:19:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012/07/11 00:19:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2012/07/11 00:19:38 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2012/07/11 00:19:36 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012/07/11 00:19:36 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012/07/11 00:19:17 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012/07/11 00:19:17 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012/07/10 14:28:08 | 000,000,000 | ---D | C] -- C:\FRST
[2012/07/10 14:11:56 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\AppData\Roaming\SPE
[2012/07/09 06:57:51 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\%APPDATA%
[2012/07/03 13:07:19 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\Desktop\Merri
[2012/06/28 12:47:43 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\AppData\Local\{C08F0DAA-BCC5-4AB0-B011-451C2C1E762B}
[2012/06/28 10:45:05 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ScreenPop
[2012/06/27 09:35:54 | 000,000,000 | ---D | C] -- C:\Users\shawn.goncalves\AppData\Local\Macromedia
[2011/09/14 15:36:25 | 009,802,816 | ---- | C] (R.D.H. LLC ) -- C:\Users\shawn.goncalves\AppData\Roaming\rss_update.exe
[1621 C:\Users\shawn.goncalves\AppData\Local\Temp\*.tmp files -> C:\Users\shawn.goncalves\AppData\Local\Temp\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

File not found -- C:\Windows\SysNative\
[2012/07/19 14:42:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/19 14:30:00 | 000,000,398 | ---- | M] () -- C:\Windows\tasks\Gateway Registration - Data Sending task.job
[2012/07/19 13:56:00 | 000,000,916 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/19 13:02:40 | 000,471,266 | ---- | M] () -- C:\Users\shawn.goncalves\Documents\Internal VA Report.zip
[2012/07/18 20:56:00 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/17 21:04:29 | 000,002,080 | -H-- | M] () -- C:\Users\shawn.goncalves\Documents\Default.rdp
[2012/07/17 12:03:59 | 000,022,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/17 12:03:59 | 000,022,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/17 10:04:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/17 10:04:27 | 4281,200,638 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/16 11:40:56 | 000,011,383 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\SEP-Log.csv
[2012/07/16 11:39:14 | 019,388,911 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\SEP Log.csv
[2012/07/16 11:37:20 | 000,182,824 | ---- | M] () -- C:\Users\shawn.goncalves\Documents\House Addendum.pdf
[2012/07/15 17:37:49 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012/07/15 09:18:43 | 000,001,024 | ---- | M] () -- C:\.rnd
[2012/07/13 09:18:28 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) -- C:\Windows\SysNative\drivers\pssdk42.sys
[2012/07/13 04:37:59 | 000,087,488 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIRfsClientNP.dll
[2012/07/13 04:37:59 | 000,080,800 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIinit.dll
[2012/07/13 04:37:59 | 000,034,720 | ---- | M] (LogMeIn, Inc.) -- C:\Windows\SysNative\LMIport.dll
[2012/07/12 14:29:23 | 002,795,753 | ---- | M] () -- C:\Users\shawn.goncalves\Documents\packet-c.cap
[2012/07/12 12:42:16 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/07/12 12:42:16 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/07/11 07:36:28 | 000,294,216 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\gmer.zip
[2012/07/11 07:26:23 | 000,000,000 | ---- | M] () -- C:\Users\shawn.goncalves\defogger_reenable
[2012/07/11 03:15:27 | 000,434,680 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/10 16:04:03 | 000,000,512 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\MBR.dat
[2012/07/10 12:43:08 | 005,323,204 | ---- | M] () -- C:\Users\shawn.goncalves\Documents\DialingExtension5201.zip
[2012/07/09 07:35:19 | 607,829,916 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/07/07 23:39:31 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012/07/05 14:57:45 | 000,450,560 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\autowhitelist.mdb
[2012/07/03 13:51:48 | 000,782,838 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/03 13:51:48 | 000,662,972 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/03 13:51:48 | 000,121,840 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/06/29 18:21:49 | 000,069,864 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\IMG_0294.JPG
[2012/06/29 18:21:05 | 000,070,222 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\IMG_0292.JPG
[2012/06/28 14:38:06 | 000,077,626 | ---- | M] () -- C:\Users\shawn.goncalves\Desktop\IMG_0291.JPG

========== Files Created - No Company Name ==========

File not found -- C:\Users\shawn.goncalves\AppData\Local\Temp\dwhbe90.@
File not found -- C:\Windows\SysNative\
[2012/07/19 13:03:06 | 000,471,266 | ---- | C] () -- C:\Users\shawn.goncalves\Documents\Internal VA Report.zip
[2012/07/16 11:40:44 | 000,011,383 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\SEP-Log.csv
[2012/07/16 11:37:20 | 000,182,824 | ---- | C] () -- C:\Users\shawn.goncalves\Documents\House Addendum.pdf
[2012/07/16 11:11:22 | 019,388,911 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\SEP Log.csv
[2012/07/12 14:30:59 | 002,795,753 | ---- | C] () -- C:\Users\shawn.goncalves\Documents\packet-c.cap
[2012/07/11 07:36:27 | 000,294,216 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\gmer.zip
[2012/07/11 07:26:23 | 000,000,000 | ---- | C] () -- C:\Users\shawn.goncalves\defogger_reenable
[2012/07/10 15:42:47 | 000,000,512 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\MBR.dat
[2012/07/10 12:43:08 | 005,323,204 | ---- | C] () -- C:\Users\shawn.goncalves\Documents\DialingExtension5201.zip
[2012/07/09 07:35:19 | 607,829,916 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012/07/05 13:52:10 | 000,450,560 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\autowhitelist.mdb
[2012/06/29 18:21:24 | 000,069,864 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\IMG_0294.JPG
[2012/06/29 18:20:36 | 000,070,222 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\IMG_0292.JPG
[2012/06/28 14:37:05 | 000,077,626 | ---- | C] () -- C:\Users\shawn.goncalves\Desktop\IMG_0291.JPG
[2012/04/12 08:10:14 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\VPN.dll
[2012/03/30 09:52:50 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/03/30 09:52:50 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/03/30 09:52:50 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/03/30 09:52:50 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/03/30 09:52:50 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/03/22 09:03:18 | 000,776,562 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/01/11 01:00:12 | 000,002,048 | -HS- | C] () -- C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}\@
[2011/10/19 14:40:08 | 000,065,024 | ---- | C] () -- C:\Windows\SysWow64\Vertical.Wave.Api.VoiceFileConversion.dll
[2011/09/19 16:22:26 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2011/09/19 09:29:20 | 000,005,120 | ---- | C] ( ) -- C:\Windows\SysWow64\Interop.StatusAnimation2.dll
[2011/09/14 15:14:31 | 000,000,206 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011/09/14 15:03:44 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\libmysql.dll
[2011/09/14 14:39:59 | 000,000,090 | ---- | C] () -- C:\Windows\QBChanUtil_Trigger.ini
[2011/09/14 14:36:13 | 000,048,492 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011/09/14 02:36:42 | 000,000,858 | RHS- | C] () -- C:\Users\shawn.goncalves\ntuser.pol
[2011/05/16 14:31:44 | 000,008,592 | ---- | C] () -- C:\Windows\SysWow64\ractrlkeyhook.dll

< End of report >

extras.txt
OTL Extras logfile created on: 7/19/2012 2:37:41 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\shawn.goncalves\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 9.57 Gb Available Physical Memory | 59.86% Memory free
31.96 Gb Paging File | 24.92 Gb Available in Paging File | 77.96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 1383.17 Gb Total Space | 700.03 Gb Free Space | 50.61% Space Free | Partition Type: NTFS

Computer Name: SHAWN-OFFICE | User Name: shawn.goncalves | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
"PolicyVersion" = 512

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules]
"CoreNet-ICMP6-DU-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25110|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP4-DUFRAG-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Domain|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25251|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DHCP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25301|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IGMP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=2|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25376|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IPv6-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=41|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25351|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LD-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25082|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25061|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25068|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR2-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25075|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDA-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=136:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDS-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=135:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25019|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PTB-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=2:*|App=System|Name=@FirewallAPI.dll,-25001|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25116|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RA-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=134:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25012|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-Teredo-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=Teredo|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25326|Desc=@FirewallAPI.dll,-25332|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-TE-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25113|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-DU-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25111|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP4-DUFRAG-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25252|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DHCP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25302|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IGMP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IPv6-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25352|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LD-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25083|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25062|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25069|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR2-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25076|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDA-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=136:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25027|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDS-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=135:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25020|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PTB-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=2:*|App=System|Name=@FirewallAPI.dll,-25002|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25117|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RA-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=134:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-Teredo-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25327|Desc=@FirewallAPI.dll,-25333|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-TE-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25114|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-LSASS-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\lsass.exe|Name=@FirewallAPI.dll,-25407|Desc=@FirewallAPI.dll,-25408|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Name=@FirewallAPI.dll,-25403|Desc=@FirewallAPI.dll,-25404|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-NP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-25401|Desc=@FirewallAPI.dll,-25401|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RS-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=133:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25008|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DNS-Out-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=53|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-25405|Desc=@FirewallAPI.dll,-25406|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|LSM=TRUE|
"FPS-ICMP4-ERQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP6-ERQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Datagram-In-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Name-In-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Session-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SMB-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SpoolSvc-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-RPCSS-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP4-ERQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP6-ERQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Datagram-Out-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Name-Out-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Session-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SMB-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"RemoteAssistance-DCOM-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-33035|Desc=@FirewallAPI.dll,-33036|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnPHost-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33027|Desc=@FirewallAPI.dll,-33030|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-SSDPSrv-In-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33019|Desc=@FirewallAPI.dll,-33022|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-In-TCP-EdgeScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-RAServer-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33011|Desc=@FirewallAPI.dll,-33014|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnPHost-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33031|Desc=@FirewallAPI.dll,-33034|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-SSDPSrv-Out-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33023|Desc=@FirewallAPI.dll,-33026|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-RAServer-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteDesktop-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=3389|App=System|Name=@FirewallAPI.dll,-28753|Desc=@FirewallAPI.dll,-28756|EmbedCtxt=@FirewallAPI.dll,-28752|Edge=FALSE|
"WMI-ASYNC-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|
"WMI-RPCSS-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|
"WMI-WINMGMT-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
"PolicyVersion" = 512

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules]
"CoreNet-ICMP6-DU-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25110|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP4-DUFRAG-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Domain|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25251|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DHCP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25301|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IGMP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=2|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25376|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IPv6-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=41|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25351|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LD-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25082|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25061|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25068|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR2-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25075|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDA-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=136:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDS-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=135:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25019|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PTB-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=2:*|App=System|Name=@FirewallAPI.dll,-25001|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PP-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25116|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RA-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=134:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25012|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-Teredo-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=Teredo|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25326|Desc=@FirewallAPI.dll,-25332|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-TE-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25113|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-DU-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25111|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP4-DUFRAG-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25252|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DHCP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25302|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IGMP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-IPv6-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|Profile=Domain|App=System|Name=@FirewallAPI.dll,-25352|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LD-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25083|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25062|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25069|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-LR2-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25076|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDA-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=136:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25027|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-NDS-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=135:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25020|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PTB-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=2:*|App=System|Name=@FirewallAPI.dll,-25002|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-PP-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25117|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RA-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=134:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-Teredo-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25327|Desc=@FirewallAPI.dll,-25333|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-TE-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25114|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-LSASS-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\lsass.exe|Name=@FirewallAPI.dll,-25407|Desc=@FirewallAPI.dll,-25408|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Name=@FirewallAPI.dll,-25403|Desc=@FirewallAPI.dll,-25404|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-GP-NP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-25401|Desc=@FirewallAPI.dll,-25401|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-ICMP6-RS-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=133:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25008|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|
"CoreNet-DNS-Out-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=53|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-25405|Desc=@FirewallAPI.dll,-25406|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=FALSE|LSM=TRUE|
"FPS-ICMP4-ERQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP6-ERQ-In" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Datagram-In-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Name-In-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Session-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SMB-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SpoolSvc-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-RPCSS-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP4-ERQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-ICMP6-ERQ-Out" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Datagram-Out-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Name-Out-UDP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-NB_Session-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"FPS-SMB-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502|Edge=FALSE|
"RemoteAssistance-DCOM-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-33035|Desc=@FirewallAPI.dll,-33036|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnPHost-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33027|Desc=@FirewallAPI.dll,-33030|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-SSDPSrv-In-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33019|Desc=@FirewallAPI.dll,-33022|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-In-TCP-EdgeScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-RAServer-In-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33011|Desc=@FirewallAPI.dll,-33014|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnPHost-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-33031|Desc=@FirewallAPI.dll,-33034|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-UPnP-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-SSDPSrv-Out-UDP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33023|Desc=@FirewallAPI.dll,-33026|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-Out-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteAssistance-RAServer-Out-TCP-NoScope" = v2.0|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=FALSE|
"RemoteDesktop-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=3389|App=System|Name=@FirewallAPI.dll,-28753|Desc=@FirewallAPI.dll,-28756|EmbedCtxt=@FirewallAPI.dll,-28752|Edge=FALSE|
"WMI-ASYNC-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|
"WMI-RPCSS-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|
"WMI-WINMGMT-In-TCP" = v2.0|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251|Edge=FALSE|

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0294BB2F-6178-459D-8C46-8D1C40D6AD6B}" = rport=445 | protocol=6 | dir=out | app=system |
"{057550CC-1C7E-4C7B-A2F8-3A8DDC978C8C}" = lport=138 | protocol=17 | dir=in | app=system |
"{08E024BB-596A-4DFF-A430-159062EB67CE}" = lport=10243 | protocol=6 | dir=in | app=system |
"{19A5737B-0BEE-43C8-BCD3-3CC714AA4FD3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{25B9D31D-64EC-44F5-900B-17177C3E5D3C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{295EF879-34FC-4A05-A484-51AA1443280E}" = lport=445 | protocol=6 | dir=in | app=system |
"{2FA65B31-3A9D-4C20-AFC6-469495F0EF44}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{4084E937-EAAA-47EE-9520-7BE7CE434C09}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4BF5EB07-06A2-40E2-B5B6-244EF5C49A0F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{5456EA1E-AF45-48BD-9C96-AB99A6CCF1D9}" = lport=139 | protocol=6 | dir=in | app=system |
"{6364B77A-8796-4078-B3CC-5963A3E70B4F}" = rport=139 | protocol=6 | dir=out | app=system |
"{6EFD3216-D4DB-448C-81DA-E8838C66FFD2}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7C7BD74E-D59D-40F9-8481-A74C4729E9DD}" = rport=138 | protocol=17 | dir=out | app=system |
"{86444BB3-291D-4D31-A046-BB4AA3243C28}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{AF8150A9-8B4A-4262-900E-D368942052B3}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BE10AB93-C4A6-464B-BE93-069E778BFF99}" = rport=10243 | protocol=6 | dir=out | app=system |
"{C232D951-55E7-4D04-9346-F88A07FC0B22}" = lport=137 | protocol=17 | dir=in | app=system |
"{C428A183-FD79-40B5-990D-895328F43AC8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CF0676E6-E2EC-438A-9741-7029DEBD00CE}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F534D21D-02A4-4E48-A237-A3745ED5E6D3}" = rport=137 | protocol=17 | dir=out | app=system |
"{F9C1EEE5-72B7-40C6-BC7C-64E9DF7DEB39}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{003C7A18-60D9-4C89-94D8-DE42C1AA1D76}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{02A4D600-582A-4C14-ADFE-C125CF0CB18F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1473D86F-6F04-46A3-9153-CD04272511DC}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4849799C-D8E9-4360-8F9A-6B5F2BCC7EA4}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{4CAF98E1-D8C1-4014-A29B-8398AEEA0573}" = protocol=6 | dir=in | app=c:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe |
"{56E808A1-BFD0-4B79-B567-B9FA848D697F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{61FB8AD2-C831-45AB-9DFB-D685C3A8300D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{62F27534-2769-4D2F-B42F-E96E62F64F44}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{65901CFC-D156-4C8F-90EA-C26D256CA195}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{68F6992D-6E9D-4F14-88EC-3E0B8BEC7EFF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8642AF85-31DC-4BB3-8E9D-1E478C224084}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A5589677-56C4-46C1-A86B-1F0B5425786F}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AB3FBA72-52C3-4476-9A38-230DBE05659B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{AEE10ABC-8034-4F9F-82FB-4F9C6380E667}" = protocol=17 | dir=in | app=c:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe |
"{BC7833D1-AE4B-4CAB-BDD5-6EA587E5C763}" = protocol=6 | dir=out | app=system |
"{CE504808-152F-4073-8BB9-0F8E7C4D30C6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D3648D1D-2BA3-4973-9B7E-EDC907B6E342}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E8715BB0-E132-4617-B344-62E03BFE2C1C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{E926E57D-011D-4F63-BCC5-FFCFDC28D091}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{EFA98652-B437-42AA-B7D3-EFFD71ED4ECD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F7DCF881-DB9D-4779-8D1C-CCCBAC7C73FF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{43178A02-3FC4-4563-AB82-6523600C02F6}C:\program files (x86)\itunes\itunes.exe" = protocol=6 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"TCP Query User{4E54C85E-535C-4298-9A34-8A51FA718805}C:\program files (x86)\rss_beta\rsstech.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rss_beta\rsstech.exe |
"TCP Query User{A2951FF7-8F90-4CEC-824E-911DF4150C84}C:\program files (x86)\samsung\allshare\allshareagent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\allshare\allshareagent.exe |
"TCP Query User{C6460A94-5BB7-45C0-8BBD-2DE86EE12D58}C:\program files (x86)\logmein ignition\lmiignition.exe" = protocol=6 | dir=in | app=c:\program files (x86)\logmein ignition\lmiignition.exe |
"TCP Query User{D2F49796-914E-4D60-874F-9FA5E7E4F590}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe |
"UDP Query User{2DEB20EE-C93C-4D13-BD8B-EF6709D18509}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe |
"UDP Query User{65C3B312-0477-4516-9341-A17C3C488DB2}C:\program files (x86)\itunes\itunes.exe" = protocol=17 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"UDP Query User{6675763F-FA3A-4932-9B25-ADD66BC4F3FA}C:\program files (x86)\logmein ignition\lmiignition.exe" = protocol=17 | dir=in | app=c:\program files (x86)\logmein ignition\lmiignition.exe |
"UDP Query User{71E5652B-B0D2-4A21-9AEB-129FE70157D8}C:\program files (x86)\rss_beta\rsstech.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rss_beta\rsstech.exe |
"UDP Query User{B92B1819-4654-4961-8FCD-1E27EE51B9DB}C:\program files (x86)\samsung\allshare\allshareagent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\allshare\allshareagent.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08ECC740-2B3E-45D7-860C-59B511386286}" = Microsoft SQL Server 2008 Management Objects
"{0C6C4C8A-3B96-4681-90BA-0E15CDE96298}" = Microsoft SQL Server 2008 Management Studio
"{108C8C1D-DA02-4A6C-94CD-5603F6A6FC72}" = Microsoft SQL Server 2008 Management Studio
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86417000FF}" = Java™ 7 (64-bit)
"{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}" = Microsoft SQL Server 2008 Native Client
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{4ADBF5BE-7CAF-4193-A1F9-DE6820E68569}" = Symantec Endpoint Protection
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5340A3B5-3853-4745-BED2-DD9FF5371331}" = Microsoft SQL Server 2008 Common Files
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6292D514-17A4-403F-98F9-E150F10C043D}" = Microsoft SQL Server 2008 Setup Support Files
"{64A3A4F4-B792-11D6-A78A-00B0D0170000}" = Java™ SE Development Kit 7 (64-bit)
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{7808E43D-2A8C-4F62-B7DC-558B7185B2CF}" = Nessus64
"{8219EDCB-CE5A-4348-B056-AAC0FE4E99D0}" = Microsoft IntelliType Pro 8.2
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{893F27E6-D6BE-4B9F-80E6-0ADA694A31A8}" = Microsoft SQL Server 2008 Common Files
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{9049851D-76CC-4DCC-B446-4F370C542797}" = SonicWALL Global VPN Client
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B2C4509-2B9F-4303-BA74-E2F9BB773F03}" = Oracle VM VirtualBox 4.1.8
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{ADDF4B84-5D28-4EAE-8511-EF808C8BC81C}" = HP Officejet 6500 E710n-z Basic Device Software
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 267.85
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 267.85
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.2.22.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support
"{C92556F2-4950-48CF-ABA3-F0026B05BCE8}" = Microsoft SQL Server 2005 Backward compatibility
"{CF8FFD12-602B-422D-AF1D-511B411E7632}" = iTunes
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E4FF4DF1-F99C-49AC-B398-BE0887432846}" = Windows Small Business Server 2008 ClientAgent
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F5E5D7CA-0F94-41A3-8106-66473C2F3728}" = Windows Small Business Server 2008 Desktop Links Gadget
"781745E87AFF80C0C1388CFF79D19ECAB2E9BB47" = Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0)
"8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D" = Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012)
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"Microsoft SQL Server 10" = Microsoft SQL Server 2008 (64-bit)
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008 (64-bit)
"Ultravnc2_is1" = UltraVnc
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.44-1 (x64)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C1B233-D218-484B-8078-9375482C5608}" = LeapFrog Tag Plugin
"{01C5A10F-AD9B-405B-853A-6659841A1242}" = Microsoft SQL Server 2008 Policies
"{037CD593-D760-4A00-B030-7BBAFA1123FE}" = HP Officejet 6500 E710a-f Help
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{0A3A9522-EFA2-4C56-9138-101692C2A130}" = System Requirements Lab
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{130E5108-547F-4482-91EE-F45C784E08C7}" = HP Officejet 6500 E710n-z Help
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1AA86313-B188-498D-91CF-D017AC5A82A5}" = SolarWinds TFTP Server
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{22057D8D-7CC8-46FF-AD8C-9BD24F9014F3}" = QuickBooks Pro 2012
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{25E202D1-D8E7-46AF-B4B0-157D9993A93E}" = QuickBooks
"{26A24AE4-039D-4CA4-87B4-2F83216032FF}" = Java™ 6 Update 32
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F05F005-DEE5-4035-93EF-50CE30A9C273}" = UDP Test Tool
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A3F6A80-7913-475E-8B96-477A952CFA43}" = SupportSoft Assisted Service
"{5C8AE145-C9F7-4883-9750-7ECD2B41CCCA}" = QuickVPN Client
"{6057E21C-ABE9-4059-AE3E-3BEB9925E660}" = Windows Live Messenger
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}" = Nero Multimedia Suite 10 Essentials
"{64CDE8F2-3791-46F5-BAD2-72FFF5252FAB}" = Microsoft SQL Server Compact 3.5 SP1 Query Tools English
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6946F84B-8BD5-4821-83F6-72A3823F44F8}_is1" = Remote Support System
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-gateway" = WildTangent Games App (Gateway Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{76D1AA2B-A434-4D63-BE2C-80286F23C223}" = Microsoft Interop Forms Redistributable Package 2.0a
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7D2B093D-5548-484A-AC16-9D6A3656E261}" = Tigerpaw Interop
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{838257FC-952A-467B-86BF-21DB6B137A3F}" = Windows Small Business Server 2008 WMI Provider
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{85D29B91-2BD3-7B95-C4FE-13E226D34090}" = Flixster Collections
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8B075E14-ADFE-4450-A7A0-7EE8A130DB0D}" = ScreenPop
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0054-0409-0000-0000000FF1CE}" = Microsoft Office Visio MUI (English) 2010
"{90140000-0054-0409-0000-0000000FF1CE}_Office14.VISIOR_{CDC4310F-8189-485F-B47D-D972217CE173}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0057-0000-0000-0000000FF1CE}" = Microsoft Office Visio 2010
"{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{01D8AE4B-A04D-47E5-81BF-E3F98B81B8C3}" = Microsoft Visio 2010 Service Pack 1 (SP1)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BA8C00B-3524-4FC0-AE9C-37A4A68A6281}" = Tigerpaw Control Library
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.1 MUI
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{CD53B08A-5B75-40F9-9BE7-71E426F4D979}" = Vertical Wave ViewPoint
"{CDCF3F3F-2440-4E82-87B3-5C0FCE5A2197}" = SMTP Test Tool
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D97A7C7D-942B-426F-BA7F-6F79523633C9}" = Tigerpaw 11
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}" = eBay Worldwide
"{E217A3D4-2FF9-4D5F-9C20-1386E0FF9864}" = LogMeIn
"{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Gateway Updater
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F279C4CC-D6A6-4C2E-A55D-425AD99F3B17}" = LogMeIn Ignition
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F9D59E62-845F-49A2-8B75-DDB00661673C}" = LeapFrog Connect
"{FB705754-66FB-4419-9EA9-EB020DEA8D50}" = RingCentral Voicemail Player
"{FD395409-6CA9-493B-832C-0273B4185B8E}" = TCP Test Tool
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Aimersoft Blu-ray Ripper_is1" = Aimersoft Blu-ray Ripper(Build 3.0.0.3)
"Aimersoft DVD Ripper_is1" = Aimersoft DVD Ripper(Build 2.6.1.0)
"Android SDK Tools" = Android SDK Tools
"Audacity_is1" = Audacity 1.2.6
"AVI To MP4 Converter_is1" = AVI To MP4 Converter 1.0
"BeerSmith 2" = BeerSmith 2
"BitTorrent" = BitTorrent
"BitTorrentBar Toolbar" = BitTorrentBar Toolbar
"BN_DesktopReader" = NOOK for PC
"Bonjour Browser_is1" = Bonjour Browser
"com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1" = Times Reader
"Coupon Printer for Windows5.0.0.1" = Coupon Printer for Windows
"CrossLoop_is1" = CrossLoop 2.82
"FlixsterCollections" = Flixster Collections
"Gateway Registration" = Gateway Registration
"Gateway Screensaver" = Gateway ScreenSaver
"Gateway Welcome Center" = Welcome Center
"HandBrake" = HandBrake 0.9.5
"Hotkey Utility" = Hotkey Utility
"Identity Card" = Identity Card
"ieSpell" = ieSpell
"InstallShield_{1AA86313-B188-498D-91CF-D017AC5A82A5}" = SolarWinds TFTP Server
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}" = Samsung AllShare
"IrfanView" = IrfanView (remove only)
"Juniper Network Connect 6.5.0" = Juniper Networks Network Connect 6.5.0
"KeyFinder_is1" = Magical Jelly Bean KeyFinder
"MakeMKV" = MakeMKV v1.6.16
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400
"Mozilla Firefox 14.0.1 (x86 en-US)" = Mozilla Firefox 14.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MusicBrainz Picard" = MusicBrainz Picard
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"Office14.VISIOR" = Microsoft Visio Professional 2010
"RingCentral" = RingCentral Call Controller
"SonicWALL SSL-VPN NetExtender" = SonicWALL SSL-VPN NetExtender
"Swag_Bucks Toolbar" = Swag Bucks Toolbar
"SYNC My iTunes_is1" = SYNC My iTunes v1.1.61
"TagPlugin" = Use the entry named LeapFrog Connect to uninstall (LeapFrog Tag Plugin)
"UPCShell" = LeapFrog Connect
"VLC media player" = VLC media player 1.1.11
"WildTangent gateway Master Uninstall" = Gateway Games
"Winamp" = Winamp
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"Wireshark" = Wireshark 1.6.2
"WTA-0bd3cb51-af15-450c-8b43-6a9e52cc0c2a" = Diner Dash 2 Restaurant Rescue
"WTA-37eca013-df45-4dfd-9e0a-8462b37ebba6" = Build-a-lot 2
"WTA-4318ff0a-8a65-4041-b109-60575ccbf02f" = Torchlight
"WTA-4e1fea77-e933-40ba-bdf5-c679e88b097f" = Virtual Villagers 4 - The Tree of Life
"WTA-516d1859-e203-4e74-8cde-357e750743a7" = Poker Superstars III
"WTA-5ac3da73-dc7b-4101-bf82-8b5354311eb5" = Zuma's Revenge
"WTA-5c2417cb-9675-491c-aee7-70fea71a9cb3" = Final Drive: Nitro
"WTA-686ca557-685b-488c-bf5e-8e2a18542eb1" = Chuzzle Deluxe
"WTA-75d28604-e199-4ad9-9e0b-fbf3b6e9e271" = Mystery P.I. - Stolen in San Francisco
"WTA-7b1d7e2c-c02f-4724-8bca-ca652527ad0b" = Agatha Christie - 4:50 from Paddington
"WTA-9647267b-4015-44fe-b4b2-709f5db181d7" = Polar Golfer
"WTA-9860d3de-820e-4073-b2e9-81aef5c05c36" = Plants vs. Zombies - Game of the Year
"WTA-a3145d8f-ff66-492e-8a23-254f8cc4ce64" = Polar Bowler
"WTA-d7216d88-b7ff-4c57-9afd-ad94397c59c6" = Dora's World Adventure
"WTA-dbc097b0-afe3-4de1-96df-44efd27ecbe2" = Bejeweled 2 Deluxe
"WTA-e70492b0-a666-4b47-8ac9-2e82ab12ab2b" = Penguins!
"WTA-eb2fc207-25d0-4f83-96f4-d10adbdd0519" = Namco All-Stars: PAC-MAN
"WTA-eb9cd788-fed9-4ab1-a0c3-4989fbff6014" = Jewel Quest Heritage

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-260843078-278039929-3275570884-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"JoinMe" = join.me
"Juniper_Setup_Client" = Juniper Networks Setup Client
"Winamp Detect" = Winamp Detector Plug-in

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 7/18/2012 12:43:54 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16447,
time stamp: 0x4fc9cd53 Faulting module name: jvm.dll, version: 20.7.0.2, time stamp:
0x4f7e3cc7 Exception code: 0xc0000005 Fault offset: 0x0005e562 Faulting process id:
0x1a64 Faulting application start time: 0x01cd6425cbe0b854 Faulting application path:
C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path: C:\PROGRA~2\Java\jre6\bin\client\jvm.dll
Report
Id: c262cec2-d0f7-11e1-816e-e06995a6b5f2

Error - 7/18/2012 1:11:38 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: Cookie:shawn.goncalves@yieldmanager.net/
by: Scheduled scan. Action: Delete succeeded. Action Description: The file was
deleted successfully.

Error - 7/19/2012 10:48:36 AM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!Trojan.Gen.2 in File: C:\Users\SHAWN.GONCALVES\AppData\Local\Temp\DWHA437.tmp
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

Error - 7/19/2012 12:43:09 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16447,
time stamp: 0x4fc9cd53 Faulting module name: ntdll.dll, version: 6.1.7601.17725,
time stamp: 0x4ec49b8f Exception code: 0xc0000008 Fault offset: 0x000827b8 Faulting
process id: 0xdd5c Faulting application start time: 0x01cd650fa1a9e402 Faulting application
path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path:
C:\Windows\SysWOW64\ntdll.dll Report Id: d201eb70-d1c0-11e1-816e-e06995a6b5f2

Error - 7/19/2012 12:48:04 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: .atdmt.com by: Scheduled
scan. Action: Delete succeeded. Action Description: The file was deleted successfully.



Error - 7/19/2012 1:52:47 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: Cookie:shawn.goncalves@yieldmanager.net/
by: Scheduled scan. Action: Delete succeeded. Action Description: The file was
deleted successfully.

Error - 7/19/2012 2:08:33 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16447,
time stamp: 0x4fc9cd53 Faulting module name: RPCRT4.dll, version: 6.1.7601.17514,
time stamp: 0x4ce7ba59 Exception code: 0xc0020043 Fault offset: 0x0005cd99 Faulting
process id: 0x857c Faulting application start time: 0x01cd65cd94694e93 Faulting application
path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path:
C:\Windows\syswow64\RPCRT4.dll Report Id: c04c0477-d1cc-11e1-816e-e06995a6b5f2

Error - 7/19/2012 2:36:46 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!WS.Viral.1 in File: C:\Users\SHAWN.GONCALVES\AppData\Local\MICROSOFT\Windows\TEMPORARY
INTERNET FILES\Content.IE5\G6JSBN37\OTL.exe by: Auto-Protect scan. Action: Quarantine
succeeded : Access denied. Action Description: The file was quarantined successfully.



Error - 7/19/2012 2:37:13 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!WS.Viral.1 in File: C:\Users\SHAWN.GONCALVES\Downloads\OTL.exe
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

Error - 7/19/2012 2:42:26 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec AntiVirus | ID = 16711731
Description = Security Risk Found!Trojan.Gen in File: C:\Users\SHAWN.GONCALVES\AppData\Local\Temp\dwhbe90.@
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

[ Symantec Endpoint Protection Client Events ]
Error - 7/17/2012 9:50:12 AM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Trojan.Gen in File: C:\PROGRAMDATA\MICROSOFT\Windows\DRM\A7EF.tmp
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

Error - 7/17/2012 10:07:54 AM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Backdoor.Graybird in File: C:\Users\SHAWN.GONCALVES\AppData\Local\MICROSOFT\Windows\TEMPORARY
INTERNET FILES\Low\Content.IE5\OEA8NSIK\OTL[1].exe by: Auto-Protect scan. Action:
Delete succeeded . Action Description: Reboot Processing

Error - 7/17/2012 1:46:36 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: Cookie:shawn.goncalves@go.com/
by: Scheduled scan. Action: Delete succeeded. Action Description: The file was
deleted successfully.

Error - 7/18/2012 1:11:38 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: Cookie:shawn.goncalves@yieldmanager.net/
by: Scheduled scan. Action: Delete succeeded. Action Description: The file was
deleted successfully.

Error - 7/19/2012 10:48:36 AM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Trojan.Gen.2 in File: C:\Users\SHAWN.GONCALVES\AppData\Local\Temp\DWHA437.tmp
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

Error - 7/19/2012 12:48:04 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: .atdmt.com by: Scheduled
scan. Action: Delete succeeded. Action Description: The file was deleted successfully.



Error - 7/19/2012 1:52:47 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Tracking Cookies in File: Cookie:shawn.goncalves@yieldmanager.net/
by: Scheduled scan. Action: Delete succeeded. Action Description: The file was
deleted successfully.

Error - 7/19/2012 2:36:46 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!WS.Viral.1 in File: C:\Users\SHAWN.GONCALVES\AppData\Local\MICROSOFT\Windows\TEMPORARY
INTERNET FILES\Content.IE5\G6JSBN37\OTL.exe by: Auto-Protect scan. Action: Quarantine
succeeded : Access denied. Action Description: The file was quarantined successfully.



Error - 7/19/2012 2:37:13 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!WS.Viral.1 in File: C:\Users\SHAWN.GONCALVES\Downloads\OTL.exe
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

Error - 7/19/2012 2:42:26 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = Symantec Endpoint Protection Client | ID = 16711731
Description = Security Risk Found!Trojan.Gen in File: C:\Users\SHAWN.GONCALVES\AppData\Local\Temp\dwhbe90.@
by: Auto-Protect scan. Action: Quarantine succeeded : Access denied. Action Description:
The file was quarantined successfully.

[ System Events ]
Error - 7/19/2012 1:22:21 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 1:22:21 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 1:22:22 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 1:22:22 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =

Error - 7/19/2012 2:08:40 PM | Computer Name = SHAWN-OFFICE.comptelnetworks.local | Source = DCOM | ID = 10016
Description =


< End of report >

#9 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 19 July 2012 - 05:38 PM

Shawn,

Please open notepad and copy/paste the text in the quotebox below into it:

http://www.bleepingcomputer.com/forums/topic460191.html

Collect::
C:\USERS\SHAWN.GONCALVES\APPDATA\LOCAL\{B6336AAE-7350-11E1-826D-B8AC6F996F26}
C:\USERS\SHAWN.GONCALVES\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EJQUCWNX.DEFAULT\EXTENSIONS\ZKTNJRPOXW@ZKTNJRPOXW.ORG.XPI
C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}

Firefox::
FF - ProfilePath - C:\Users\shawn.goncalves\AppData\Roaming\Mozilla\Firefox\Profiles\ejqucwnx.default\
FF - prefs.js: keyword.URL

Save this as CFScript.txt


Posted Image


Refering to the picture above, drag CFScript.txt into ComboFix.exe

If prompted to update Combofix, please click Yes to allow it to update.

When finished, it shall produce a log for you. Post that log in your next reply (don't attach it).

**Note**
When CF finishes running, the ComboFix log will open along with a message box--do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.
Ensure you are connected to the internet and click OK on the message box.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#10 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 19 July 2012 - 08:19 PM

ComboFix 12-07-19.02 - shawn.goncalves 07/19/2012 20:43:35.2.8 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.16366.13309 [GMT -4:00]
Running from: c:\users\shawn.goncalves\Downloads\ComboFix.exe
Command switches used :: c:\users\shawn.goncalves\Downloads\cfscript.txt
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Symantec Endpoint Protection *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\SHAWN.GONCALVES\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\EJQUCWNX.DEFAULT\EXTENSIONS\ZKTNJRPOXW@ZKTNJRPOXW.ORG.XPI
c:\windows\SysWow64\zip32.dll
.
.
((((((((((((((((((((((((( Files Created from 2012-06-20 to 2012-07-20 )))))))))))))))))))))))))))))))
.
.
2012-07-20 00:55 . 2012-07-20 00:55 -------- d-----w- c:\users\TEMP\AppData\Local\temp
2012-07-20 00:55 . 2012-07-20 00:55 -------- d-----w- c:\users\Shawn\AppData\Local\temp
2012-07-20 00:55 . 2012-07-20 00:55 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-07-20 00:55 . 2012-07-20 00:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-07-17 13:49 . 2012-07-17 13:49 113664 ----a-w- c:\programdata\Microsoft\Windows\DRM\A7EF.tmp.dat
2012-07-11 07:06 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-07-11 04:19 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll
2012-07-10 18:28 . 2012-07-10 18:34 -------- d-----w- C:\FRST
2012-07-10 18:11 . 2012-07-10 18:11 -------- d-----w- c:\users\shawn.goncalves\AppData\Roaming\SPE
2012-07-09 10:57 . 2012-07-09 10:57 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2012-06-27 13:35 . 2012-06-27 13:35 -------- d-----w- c:\users\shawn.goncalves\AppData\Local\Macromedia
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-13 13:18 . 2012-01-17 13:43 53312 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2012-07-13 08:37 . 2011-11-03 19:50 34720 ----a-w- c:\windows\system32\LMIport.dll
2012-07-13 08:37 . 2011-11-03 19:50 87488 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2012-07-13 08:37 . 2011-11-03 19:50 80800 ----a-w- c:\windows\system32\LMIinit.dll
2012-07-12 16:42 . 2012-04-11 10:06 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-07-12 16:42 . 2011-09-15 01:02 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-13 12:58 . 2012-06-13 12:58 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
2012-06-13 12:56 . 2012-06-13 12:56 81840 ----a-w- c:\windows\system32\FwsVpn.dll
2012-06-13 12:56 . 2012-06-13 12:56 58288 ----a-w- c:\windows\SysWow64\snacnp.dll
2012-06-13 12:56 . 2012-06-13 12:56 58288 ----a-w- c:\windows\system32\snacnp.dll
2012-06-13 12:56 . 2012-06-13 12:56 42632 ----a-w- c:\windows\system32\drivers\WGX64.SYS
2012-06-13 12:56 . 2012-06-13 12:56 288176 ----a-w- c:\windows\system32\SymVPN.dll
2012-05-19 08:37 . 2011-11-03 19:50 87456 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2012-05-19 08:37 . 2011-11-03 19:50 80768 ----a-w- c:\windows\system32\LMIinit.dll.000.bak
2012-05-09 13:09 . 2012-05-09 13:10 476960 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-05-09 13:09 . 2012-01-30 15:04 472864 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-04 11:06 . 2012-06-13 04:35 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 10:03 . 2012-06-13 04:34 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-04 10:03 . 2012-06-13 04:34 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-04-28 03:55 . 2012-06-13 04:34 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 05:41 . 2012-06-13 04:35 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 05:41 . 2012-06-13 04:35 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 05:34 . 2012-06-13 04:35 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2012-03-30_14.02.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-04-12 12:10 . 2009-11-16 17:31 40960 c:\windows\SysWOW64\VPN.dll
+ 2012-07-11 04:19 . 2012-06-02 04:34 96768 c:\windows\SysWOW64\sspicli.dll
- 2012-01-11 05:00 . 2011-11-17 05:28 96768 c:\windows\SysWOW64\sspicli.dll
+ 2012-07-11 04:19 . 2012-06-02 04:40 22016 c:\windows\SysWOW64\secur32.dll
- 2012-01-11 05:00 . 2011-11-17 05:34 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-07-11 07:02 . 2012-06-02 08:17 73216 c:\windows\SysWOW64\mshtmled.dll
- 2012-02-15 08:00 . 2011-12-14 02:54 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-07-11 07:02 . 2012-06-02 08:22 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
- 2012-02-15 08:00 . 2011-12-14 02:54 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2012-07-11 07:02 . 2012-06-02 08:21 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2012-06-13 11:50 . 2012-06-13 11:50 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\index.dat
+ 2012-07-09 13:51 . 2012-07-10 05:10 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat
+ 2012-06-13 11:51 . 2012-06-13 11:50 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012061320120614\index.dat
+ 2012-06-13 12:03 . 2012-06-13 12:03 44544 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\{DAE272B7-B54F-11E1-83AA-E06995A6B5F2}.dat
+ 2012-06-13 11:50 . 2012-06-13 12:03 64000 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E8E0439D-B54D-11E1-83AA-E06995A6B5F2}.dat
+ 2011-04-08 09:43 . 2012-06-13 11:50 49120 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT
+ 2012-06-13 11:51 . 2012-07-10 17:41 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
+ 2012-06-13 11:50 . 2012-06-13 11:50 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Feeds Cache\index.dat
+ 2010-11-21 03:09 . 2012-07-20 00:59 79122 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-07-20 00:59 35432 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-11-03 19:50 . 2012-07-13 08:37 59808 c:\windows\system32\spool\prtprocs\x64\LMIproc.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 65440 c:\windows\system32\spool\drivers\x64\LMIprinterui.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 65440 c:\windows\system32\spool\drivers\x64\LMIprinterdat.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 53152 c:\windows\system32\spool\drivers\x64\LMIprinter.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 65440 c:\windows\system32\spool\drivers\x64\3\LMIprinterui.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 65440 c:\windows\system32\spool\drivers\x64\3\LMIprinterdat.dll
+ 2011-11-03 19:50 . 2012-07-13 08:37 53152 c:\windows\system32\spool\drivers\x64\3\LMIprinter.dll
+ 2012-07-11 07:02 . 2012-06-02 11:57 96768 c:\windows\system32\mshtmled.dll
+ 2012-07-11 07:02 . 2012-06-02 12:03 86528 c:\windows\system32\migration\WininetPlugin.dll
- 2012-02-15 08:00 . 2011-12-14 07:02 86528 c:\windows\system32\migration\WininetPlugin.dll
+ 2012-06-13 15:43 . 2012-07-19 23:52 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
- 2012-02-15 08:00 . 2011-12-14 07:01 85504 c:\windows\system32\jsproxy.dll
+ 2012-07-11 07:02 . 2012-06-02 12:03 85504 c:\windows\system32\jsproxy.dll
+ 2012-04-11 07:01 . 2012-03-01 06:33 81408 c:\windows\system32\imagehlp.dll
- 2009-07-14 05:30 . 2012-03-17 00:24 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-07-14 05:30 . 2012-06-13 15:27 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2012-02-15 15:01 . 2012-02-15 15:01 52736 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_amd64_neutral_c111aaecb61e9a2b\usbaapl64.sys
+ 2012-02-15 15:01 . 2012-02-15 15:01 52736 c:\windows\system32\drivers\usbaapl64.sys
+ 2012-03-07 07:09 . 2012-03-07 07:09 39032 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\srtspx64.sys
+ 2012-05-09 04:11 . 2012-03-17 07:58 75120 c:\windows\system32\drivers\partmgr.sys
+ 2012-03-29 12:15 . 2012-04-04 19:56 24904 c:\windows\system32\drivers\mbam.sys
+ 2012-07-11 04:19 . 2012-06-02 05:48 95600 c:\windows\system32\drivers\ksecdd.sys
- 2012-01-11 05:00 . 2011-11-17 06:49 95600 c:\windows\system32\drivers\ksecdd.sys
+ 2012-04-11 07:01 . 2012-03-01 06:46 23408 c:\windows\system32\drivers\fs_rec.sys
- 2011-09-14 17:43 . 2012-03-30 14:01 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-09-14 17:43 . 2012-07-20 00:09 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-09-14 17:43 . 2012-03-30 14:01 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-09-14 17:43 . 2012-07-20 00:09 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-07-20 00:09 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-03-30 14:01 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-07-20 00:59 . 2012-07-20 00:59 20560 c:\windows\SoftwareDistribution\EventCache\{6E5ABD42-7ED8-4172-93E8-C40C3E866764}.bin
+ 2011-09-14 05:47 . 2012-06-13 14:54 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-09-14 05:47 . 2011-12-12 19:51 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-25 14:52 . 2011-12-25 14:52 16656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
- 2011-12-26 09:18 . 2011-12-26 09:18 16656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 79112 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\Setup.exe
+ 2012-04-21 14:15 . 2012-04-21 14:15 78912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe
+ 2011-12-15 12:51 . 2011-12-15 12:51 68368 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
- 2011-12-26 09:18 . 2011-12-26 09:18 41744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe
+ 2011-12-25 14:52 . 2011-12-25 14:52 41744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe
- 2011-12-26 07:54 . 2011-12-26 07:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 57104 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
- 2011-12-26 07:54 . 2011-12-26 07:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
- 2012-03-23 07:09 . 2012-03-23 07:09 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2012-03-23 07:09 . 2012-03-23 07:09 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2012-03-23 07:14 . 2012-03-23 07:14 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-03-23 07:09 . 2012-03-23 07:09 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2012-03-23 07:08 . 2012-03-23 07:08 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-04-14 11:41 . 2012-04-14 11:41 28160 c:\windows\Installer\950f6.msi
+ 2012-04-11 08:55 . 2012-04-11 08:55 41472 c:\windows\Installer\3c3b2a5c.msi
+ 2012-07-11 00:51 . 2012-07-11 00:51 25600 c:\windows\Installer\1790f59.msi
+ 2011-09-19 16:56 . 2012-04-09 19:57 49152 c:\windows\Installer\{CD53B08A-5B75-40F9-9BE7-71E426F4D979}\NewShortcut2_7845ED8D4168499980D7F1C256300A55.exe
- 2011-09-19 16:56 . 2011-10-31 01:13 49152 c:\windows\Installer\{CD53B08A-5B75-40F9-9BE7-71E426F4D979}\NewShortcut2_7845ED8D4168499980D7F1C256300A55.exe
+ 2011-09-19 16:56 . 2012-04-09 19:57 49152 c:\windows\Installer\{CD53B08A-5B75-40F9-9BE7-71E426F4D979}\NewShortcut1_AEC259FA526F4F7B90B081D6B0A12112.exe
- 2011-09-19 16:56 . 2011-10-31 01:13 49152 c:\windows\Installer\{CD53B08A-5B75-40F9-9BE7-71E426F4D979}\NewShortcut1_AEC259FA526F4F7B90B081D6B0A12112.exe
+ 2012-02-21 19:04 . 2012-07-11 07:05 34144 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\oisicon.exe
- 2012-02-21 19:04 . 2012-03-14 07:01 34144 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\oisicon.exe
- 2012-02-21 19:04 . 2012-03-14 07:01 42848 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\msouc.exe
+ 2012-02-21 19:04 . 2012-07-11 07:05 42848 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\msouc.exe
+ 2012-02-21 19:04 . 2012-07-11 07:05 19296 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\cagicon.exe
- 2012-02-21 19:04 . 2012-03-14 07:01 19296 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 69632 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\QFMSMShortcut.691646B9_A175_4950_9836_F2BA367B0A4F.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 69632 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\QFMSMShortcut.691646B9_A175_4950_9836_F2BA367B0A4F.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 69632 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\QFMDTShortcut.691646B9_A175_4950_9836_F2BA367B0A4F.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 69632 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\QFMDTShortcut.691646B9_A175_4950_9836_F2BA367B0A4F.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 45056 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut6_1B72F66FEC97454396CC50F63093FE70_1.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 45056 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut6_1B72F66FEC97454396CC50F63093FE70_1.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 86016 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut30_7AE715922BD74E0E938522AC3FDACFB1.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 86016 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut30_7AE715922BD74E0E938522AC3FDACFB1.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\Setup.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Installer\$PatchCache$\Managed\C28643E881181F13CBC489DC69571E2C\4.0.30319\Setup.exe
+ 2012-01-10 18:37 . 2012-01-10 18:37 45416 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\svcxutil.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 56680 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbuchannel.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 15208 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbserverutilityhelper.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 85864 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBSDKCOMUtil.dll
+ 2012-01-10 18:35 . 2012-01-10 18:35 79208 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbrequestadaptor.exe
+ 2012-01-10 18:36 . 2012-01-10 18:36 26472 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBObjProxy.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 14696 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBMsgMgrps.dll
+ 2012-01-10 18:35 . 2012-01-10 18:35 38760 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbexceladaptor.exe
+ 2012-01-10 18:36 . 2012-01-10 18:36 30568 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbdbportfinder.dll
+ 2012-01-10 17:18 . 2012-01-10 17:18 45056 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbcfmonitorservice.exe
+ 2012-01-10 18:36 . 2012-01-10 18:36 60264 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\permissionmgr.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 16728 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\oauthwebbrowser.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 26968 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\oauthhelper.dll
+ 2012-01-10 18:36 . 2012-01-10 18:36 18280 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\interop.netfwtypelib.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 57688 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibuenghost.exe
+ 2012-01-10 14:56 . 2012-01-10 14:56 46424 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibueng_x86w2k3.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 46424 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibueng_x86vista.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 55640 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibueng_x64w2k3.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 55640 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibueng_x64vista.dll
+ 2012-01-10 14:56 . 2012-01-10 14:56 46424 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\ibueng.dll
+ 2012-01-10 18:00 . 2012-01-10 18:00 36864 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\cfscan.dll
+ 2010-12-21 04:48 . 2010-12-21 04:48 44992 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACERCLR.DLL
+ 2011-02-04 17:40 . 2011-02-04 17:40 49488 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\VBAJET32.DLL
+ 2010-12-21 04:48 . 2010-12-21 04:48 44992 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACERCLR.DLL
+ 2012-05-09 07:39 . 2012-05-09 07:39 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\24db93610cf0da79446d339047628457\System.Xaml.Hosting.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\79510a65ce58caa133b3da6ae3f4e90a\System.Windows.Presentation.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Routing\9859126f7844aa9c84ddf8b93d26362a\System.Web.Routing.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\6ecb3a86b1d548420c7e0625d596e4b4\System.Web.DynamicData.Design.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\5fa1954810a78eed54b8b76d1bab69be\System.Web.DynamicData.Design.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\feb24fb869ff311f706bb3da49f47229\System.Web.ApplicationServices.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Abstract#\6c6ab0c69f6611934c5779a6286d5687\System.Web.Abstractions.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 13824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\a00da9d744a944fb72d087bbef5e45eb\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\12b68397fdf7d5059d9fe2cb936d2a59\System.AddIn.Contract.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 47104 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\13650544ec6fbea931498d0bb087cd7e\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-09 07:35 . 2012-05-09 07:35 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\e5120d123214f6283ede617856efdbb8\Microsoft.VisualC.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\ec7ce92b7b419604d0431f82f6fab762\dfsvc.ni.exe
+ 2012-05-09 07:34 . 2012-05-09 07:34 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\37d7cfc1d3fc0ca30a9f85d66b603651\Accessibility.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\4f6f91ae9ca4f02c6a2083e617272935\UIAutomationProvider.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\442eb16d7504e2025a596fb5591c6de2\System.Xaml.Hosting.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\304a17ceec631e68bb3f966badfa7f09\System.Windows.Presentation.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\f1280cc647148384decdfe83ca9b639c\System.Web.Routing.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\ab110728c4176e92269858e35da566aa\System.Web.DynamicData.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\6b38126f7282ae12528ba223c2b6deb7\System.Web.DynamicData.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\be47c125f2db87d63044b76fefb00271\System.Web.ApplicationServices.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\c5a05c647f902d62a00e9caa80077763\System.Web.Abstractions.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4319ea8350075cb33e83946e372b1157\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\0bc0ec05e263e07648ef6516e2444672\System.ServiceModel.Channels.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\bcc486fc12f047e7f3d89936f4ef6e69\System.AddIn.Contract.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\stdole\bb9e35dec9ff5057bda68f0129d06a28\stdole.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\200f9594ac946ebcd039ec197b71860e\Microsoft.Workflow.Compiler.ni.exe
+ 2012-05-09 07:45 . 2012-05-09 07:45 31744 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e9e7eb6e23d9c9c780a5913b3d6fd590\Microsoft.VisualStudio.VSHelp80.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c61337480e3a6d23cf22355223fa08bc\Microsoft.VisualStudio.VSHelp.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\09da7b182b4d5b2737eb8d5e3168b3e6\Microsoft.VisualC.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 98304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\f6f81818b3d7a963f443804d37dca7e4\Microsoft.SqlServer.DlgGrid.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 75264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\e979639e4f3434720d827b06babf7d3c\Microsoft.SqlServer.CustomControls.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 31744 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\d5424d1de4f7e7426cfb428ff2d97263\Microsoft.SqlServer.Dts.Design.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 75264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\af08bc05c7f3f7b689357e1721378143\Microsoft.SqlServer.CustomControls.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 38400 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\ad1a6c8136201363b6a4f9569c3f3869\Microsoft.SqlServer.ServiceBrokerEnum.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 22016 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\ab983fcff4e6fac45083e06a2c5c1166\Microsoft.SqlServer.SqlClrProvider.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 64000 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\6fe999324a38cf0504a12ffe7fd82cab\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 59392 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\64c03b18ea3644428114ea6aa56ea5e7\Microsoft.SqlServer.SQLTaskConnectionsWrap.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 19456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\563848756d5dd38618f215d932daa2c8\Microsoft.SqlServer.DTSUtilities.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 98304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\539e3df1450eef00d35cd675e5ce9134\Microsoft.SqlServer.DlgGrid.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 64000 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\18c770d4de3c56b337bcec55e2f1a295\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 31744 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\0cd96a63e49cdda272cbf3f06a11cc4c\Microsoft.SqlServer.Dts.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 68608 c:\windows\assembly\NativeImages_v4.0.30319_32\interop.msdasc\fb3dff4b132fdb1450d32403462336ab\interop.msdasc.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\ecc3a90b9f37eef16697078780e54544\Accessibility.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\fb4bc14964a1d415bdbe55b62ce73a52\System.Windows.Presentation.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\c84c5d95947b3c9ce4914a3f77934469\stdole.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\78f495970511b726a0ca7b8119360e25\PresentationFontCache.ni.exe
+ 2012-05-09 07:28 . 2012-05-09 07:28 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\1a359e9b908a2565c546a8ca04b241c2\PresentationCFFRasterizer.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\9d57c4bbbc0b3243046fc7839da71b00\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d6578432220dbabf2b15027681327bf8\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\66deb65a87750efddf62d1e0c0655352\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4b6402dc918e41b8de8c501f29833d91\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\28545d2b6a0aaef4aa168f9808603bc5\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\1d8a17a2c1416a8ad4d6ad2a28b4c5fd\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\0abc7256549c204f39af7dcc52c9e5d5\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d84c14e69b88aeac74de3f6805b900e7\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 71680 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\abd9d2880ca61bf077d60419f5ec1114\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\90084df18546aa62b4341a272ea71d30\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 93696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\75909fbd25e848d0425e03df4c06a00b\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7003996ae5bd140e50c6a12a7c419910\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 86016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\397ef046a0d464801359654f6df589be\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 82944 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\330f302c0c1efd78014116c61314c298\Microsoft.VisualStudio.VSHelp.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\317ca97e8f47080ea7950654db36ece0\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\2d07593d9552f036c38c9b15b6355390\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 87040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\07f7dae1df42a6bce3126ce63ea0564e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\3c3a6cce983114e7406e0a6e6116ecd8\Microsoft.VisualC.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 94208 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\f944bebaff94de388e0259b1a0190702\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 94208 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\ce55e6ffdbf2cd41d9013b46c3ddcc7e\Microsoft.SqlServer.WmiEnum.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 67072 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\b64c21fa973913faaa2f928e93da46dc\Microsoft.SqlServer.SString.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 42496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\9d5b8757f1aec00f2829676cab3c6039\Microsoft.SqlServer.SqlClrProvider.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 69120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\91dfc10a71dab868d807e19bbc54b6ff\Microsoft.SqlServer.Management.Sdk.Scripting.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 91136 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\6cc50d41e2bb6435538eea6bc662d96d\Microsoft.SqlServer.BatchParserClient.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 48640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\66f306355d731226e72ae2e382d00ffa\Microsoft.SqlServer.PolicyEnum.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 59392 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\6551243f2e550685824c8f6eab685501\Microsoft.SqlServer.ServiceBrokerEnum.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 64000 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\da47c045fb26852f5f85c81daf7283ad\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 66048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\470be8218256dec2c8a1a503b70feab1\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\6ab0575bf49b60fd4b697d47e1754072\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\1569a004b1f41193818e3b3777f2c73d\LoadMxf.ni.exe
+ 2012-05-09 07:32 . 2012-05-09 07:32 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\3ee98e8b2084e27d65953bbd7e362bf8\ehiUPnP.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\1cd9f92749d29b9fd61fcb1c4ae84294\ehiTVMSMusic.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\0811f67973c32efb2bfad62a4a2592b5\dfsvc.ni.exe
+ 2012-05-09 07:31 . 2012-05-09 07:31 33280 c:\windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\e5caecdfb99f9de3031152786ee208d9\AuditPolicyGPManagedStubs.Interop.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\ae9311dcb0e713330a2a86b04cf361dc\Accessibility.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\6a1ae26286b311dbd430add2aab1cda0\WindowsLiveWriter.ni.exe
+ 2012-05-09 07:42 . 2012-05-09 07:42 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\6192c2bc6104d283099dd504c8ae4c55\WindowsLiveWriter.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0f2cb7a760ad8ec0b6cf5ddc46519e9b\WindowsLive.Writer.Passport.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 80384 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\ebe1196194971cfe926eb81469268cbe\WindowsFormsIntegration.Package.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 80384 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\20baccb24b30f79ed4381d9cc6fabcf7\WindowsFormsIntegration.Package.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 16384 c:\windows\assembly\NativeImages_v2.0.50727_32\VSTADTEProvider.Int#\5fde7542075ed96dbf36d82532163c35\VSTADTEProvider.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 99328 c:\windows\assembly\NativeImages_v2.0.50727_32\VSLangProj\93ba83b4d61ef0abb482583e07a44498\VSLangProj.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ca2eff60beb3ba00a529a2d42dceca22\UIAutomationProvider.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\66d750f3f8dde0cc865f921497ab3545\System.Windows.Presentation.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c1ea7869d01b1b668de2181be6ebca56\System.Web.DynamicData.Design.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\543b0e12423bcec010bdd2ac27c5dc04\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f34410ab8e82063735d876533db26c49\System.AddIn.Contract.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\0eb60a417f950ff100495f3f65b60dd9\stdole.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbench.Interf#\8e2d3944a665ae25f8db887fa22a6bd4\SqlWorkbench.Interfaces.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbench.Interf#\417b4b55109ae1ef8451b4a91c8958d9\SqlWorkbench.Interfaces.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 85504 c:\windows\assembly\NativeImages_v2.0.50727_32\SQLPS\e12613d864caab2d6ce9fc0d44521b5a\SQLPS.ni.exe
+ 2012-05-09 07:44 . 2012-05-09 07:44 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\d24744f15243e28ea541a459ff7ff5d5\PresentationFontCache.ni.exe
+ 2012-05-09 07:25 . 2012-05-09 07:25 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5a9d0ff936810991cedd098fe006a9be\PresentationCFFRasterizer.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 79360 c:\windows\assembly\NativeImages_v2.0.50727_32\NetShareEnum\8f7cd0b57b2fec5e4607bc7a37dfd19b\NetShareEnum.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 79360 c:\windows\assembly\NativeImages_v2.0.50727_32\NetShareEnum\7d660f2ab77b7faf84c9ff53d5365719\NetShareEnum.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\87a30ba337ed55d0905f19742e2985bc\napcrypt.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 74240 c:\windows\assembly\NativeImages_v2.0.50727_32\msddslmp\753b83a6bfa560d3dc7f830721caca87\msddslmp.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\9f2e8e0df9ff39ad21088f1d66cfadb1\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 48640 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e30a60f5add4da7716faf0d25ced701c\Microsoft.Windows.Design.Host.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d797123d55bb7b823120d0a7ffbbc2a7\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb8ad29814d9e5589bd400d38e7a0b10\Microsoft.Windows.Diagnosis.SDHost.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb42a0f25b7608b2675080081b03f6e5\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c6e9143be5afb36345875d56b61c444f\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\91767cf3facefe10e00734c815e925ad\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\66cd99d2f576cde047074e98bd5e1848\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4308e1bdc640e1c3f1ea966e84e48900\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\06fcf2fbbe38d9425fc49d935498ec93\Microsoft.Vsa.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 53760 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e975cda088d0513a1e4fcdebe7594d89\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e887264e61318579d66a5e0d60fb7b9e\Microsoft.VisualStudio.VSHelp.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\be59506a77d76e325dbb02a4ef651eff\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 59392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b2b4dc1d8799bd8b63d44d447d69df2d\Microsoft.VisualStudio.Data.Interop.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a516cad7285e7506dc477e03c7468aac\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a3d7d37ccd26595b9858116ac8e78e42\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a306bdd890d9250b9cb4c03876f3b146\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9e572d1a5f468ae4226d9c74a54dbf5a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\998cc239c14c7f53ffa6149c67fdbe4b\Microsoft.VisualStudio.VSHelp80.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\58a27330c26823a4a99a6a4e5458912c\Microsoft.VisualStudio.Data.Core.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 13312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\56d677fc673cb7ae0639b531f3b5af09\Microsoft.VisualStudio.ProjectAggregator.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\537793366a0eb2981866c8ae6d25abeb\Microsoft.VisualStudio.Shell.Interop.9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5288ab86c56e7e057a09ecd5b94f3754\Microsoft.VisualStudio.Designer.Interfaces.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4d661ba2b6ac1a23427070f799fd540c\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\443eceb48c4c76162ef874395f612590\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3075a36b2cc4da9815ff89c7d5c0b960\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\11852ce9e3c8a47a9f194e2671a2597f\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 67072 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0d3dc00717ec2d7e1ad1246efe394de4\Microsoft.VisualStudio.DataTools.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\03f7e17a9422755c383ec2100e178a32\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
+ 2012-05-09 07:24 . 2012-05-09 07:24 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\55c57057dc81a5e8c5bde3a230f0bcb9\Microsoft.VisualC.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fd1b5632b09f064449bd331140a0f927\Microsoft.SqlServer.SString.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 77312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fa1822801b6916f2d42f20d4b1948fbe\Microsoft.SqlServer.Dmf.Adapters.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f8238704b56d0efe14d3100dac912f87\Microsoft.SqlServer.VariablesMigrationModule.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 34816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f7fb79a24b21675dfbd2f58b6fba9d56\Microsoft.SqlServer.SQLTaskConnectionsWrap.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 38912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f3790f6da6ac706ea545bed4d8de5696\Microsoft.SqlServer.Management.OlapTasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ee69fbb440b735a872b20ca994a549f8\Microsoft.SqlServer.TableTransferGeneratorTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 76288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ebbe9c690e06fc173560a5f85fa8d104\Microsoft.SqlServer.CustomControls.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 98816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e6e075d345238f1527c687fbf07a583a\Microsoft.SqlServer.DlgGrid.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e1169799a2cfc5aa7f2020cfa78f4cfe\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 59392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\dec1f7c2ade92bca3088faead36338ae\Microsoft.SqlServer.SqlCEDest.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d7dcd98817dfa46223c79b6eabe95361\Microsoft.SqlServer.Dts.Design.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 30720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d6d146c280e039cd339e94d836a6cc8f\Microsoft.SqlServer.Management.PowerShellTasks.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\cf87406a9f30ff41ff47aec4963da2be\Microsoft.SqlServer.Management.Scripting.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\cbc872c60d48105b53a982c9d59cd3dd\Microsoft.SqlServer.Management.Sdk.Scripting.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c5f191dcd659d5374f48cb54d6b9bf9f\Microsoft.SqlServer.ServiceBrokerEnum.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 61952 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c541f7ecf3e4c4a9c29fe771205d45fa\Microsoft.SqlServer.DataProfilingTask.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 59904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b9085baa2c2a61196b99b1bd0937e9cb\Microsoft.SqlServer.Management.Data.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b8b1080f60cf4ccfcdbe405fb43ebf5f\Microsoft.SqlServer.Dts.Design.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 89088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b6121fc8f826d1f9a53a842344b245c9\Microsoft.SqlServer.TransferStoredProceduresTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 33280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b238f41dbaa09b79e08f2ee2f04f775e\Microsoft.SqlServer.HelperUtility.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a501ffb2c8740f1dc09fa06ec025d7a9\Microsoft.SqlServer.Management.RSTasks.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 65536 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a083305710924b4b7c17e7e085f5d600\Microsoft.SqlServer.ExecProcTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 45568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9cd3890f33db3312953491caafa4fc91\Microsoft.SqlServer.DTS8HelperUtility.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9a26ba239e26e7517a8e5a7866360a76\Microsoft.SqlServer.Management.Scripting.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\99f381220c3d7f831cb8db448f712e5c\Microsoft.SqlServer.ForEachADOEnumerator.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\98488728a55c04b92ed3136a53954c62\Microsoft.SqlServer.FileSystemTask.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8ba6ac19b84728325795b3116fb30725\Microsoft.SqlServer.ForEachNodeListEnumerator.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 69632 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\85a486770607c6ad92cbcb81ad102863\Microsoft.SqlServer.DtsMigration.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\84aa9f326806ad9657a233265eeac833\Microsoft.SqlServer.Management.RSTasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7a0d7a39654a33adc97be4e77d0162df\Microsoft.SqlServer.ForEachSMOEnumerator.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 18432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\798dd4d0e4c511a3ab916511c4a90d2f\Microsoft.SqlServer.WorkFlowMigrationModule.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 33280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\780b13378b39d89bec9373518b0d16b6\Microsoft.SqlServer.DTS8HelperObjectModel.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 75264 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\76da538ef8013264ef75a9befa6f5723\Microsoft.SqlServer.SendMailTask.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 76288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\70416442819bd1dda2b3c55a54281a69\Microsoft.SqlServer.CustomControls.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 85504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6eda1bd1357d7d145abf8d4f2b47e881\Microsoft.SqlServer.FtpTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 53248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6dbaf49f0a136eca0bc3ed23d6b3b856\Microsoft.SqlServer.ActiveXScriptTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 94720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6d3f5cfdcd40bb4995efdba84aa8ef47\Microsoft.SqlServer.TransferLoginsTask.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 16896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6d3b14d2ad8a60046d73d365f6cd4c5d\Microsoft.SqlServer.Management.ConnectionUI.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 55808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6cb66d3f6e396a79206364904cce26e2\Microsoft.SqlServer.ManagedConnections.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6a4f45736f0fbafd04e632e400850bd2\Microsoft.SqlServer.SqlClrProvider.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 69632 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\67f0fd69ded2f4d3caff3bc68b92c004\Microsoft.SqlServer.WMIDRTask.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 69632 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5e85861eff6b5a8d1638c4c1c63e8dbb\Microsoft.SqlServer.DataReaderDest.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 33280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\58b4c7470dee09a949501004e863ecc5\Microsoft.SqlServer.ConnectionsMigrationModule.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 16896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\55df1c4068e68a86010a59bea11bcaf0\Microsoft.SqlServer.ExecPackageTaskWrap.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 56320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\46138c8f9bdd5ef3c59829ea71880699\Microsoft.SqlServer.DTSCustTasks.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 98816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\458ace3dfa32e35e5da57b5d4cbbfa17\Microsoft.SqlServer.DlgGrid.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 84480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\44d89b9a546e50e39bac7e2545efed36\Microsoft.SqlServer.TransferDatabasesTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 88064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3d92eb56e59867bf07f18b7ec500d14a\Microsoft.SqlServer.TransferErrorMessagesTask.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 72704 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\37c5905c6cc80a017472be70aa9f6f56\Microsoft.SqlServer.BatchParserClient.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\35ff2db3064a3385c54ed355844535b2\Microsoft.SqlServer.DTEnum.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 69120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\31f655d8454315e4aed5fb2acf7f10f8\Microsoft.SqlServer.WMIEWTask.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 22528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2d999c78bde5a32cc0cb8ca37628c351\Microsoft.SqlServer.DTSUtilities.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 18432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\27a7ac03d1cc6b52d0ae2bf6e4655202\Microsoft.SqlServer.ForEachFileEnumeratorWrap.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 38912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\255ae6b062e004bc039261a592f17eff\Microsoft.SqlServer.Management.OlapTasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 65536 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\21b202738fd9c1913f31283ae0592b5e\Microsoft.SqlServer.WmiEnum.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 32768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1a7c7109f5d0bdcf40eda77655fee2a1\Microsoft.SqlServer.PolicyEnum.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\197db6604024b51465a93b280837ff98\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 69120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\19655e4fb2cb73d0d4c1bb0014bc6673\Microsoft.SqlServer.Management.DataTools.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\18e47990cfe384494c016670f1b1362b\Microsoft.SqlServer.TransferJobsTask.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 96256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1512c4a541a0ddba4baad9e1791cc54c\Microsoft.SqlServer.OlapEnum.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 22528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0c13c3a67866946ab24a81838059f814\Microsoft.SqlServer.DTS9HelperUtility.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0bb993b9585704b4d2c1b61d4cae9f61\Microsoft.SqlServer.Dts.DtsClient.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\065f137c17b069fcbc926657b5b90485\Microsoft.SqlServer.ForEachFromVarEnumerator.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 65536 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\054ff376d0135cd54d6d9c85d1322284\Microsoft.SqlServer.Instapi.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 30720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\013c9075d76e3b5edb8905c3df8b231f\Microsoft.SqlServer.Management.PowerShellTasks.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\c8831ecadb3b99c04fdde12217e715cb\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 39936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\54c9d51df5b739db67a270b421af5fde\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 90624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\6c7e8c5feaf89c9ae340e89711703504\Microsoft.ReportingServices.Interfaces.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\b340ffecf18f545373cc05827462d6cb\Microsoft.Office.InfoPath.Permission.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 18944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Internal.#\066d7e6209e589414c0c55edb91354ee\Microsoft.Internal.VisualStudio.Shell.Interop.9.0.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 53248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\e9745523560a5740eb7e993c0dbcf380\Microsoft.DataWarehouse.Interfaces.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 77824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\e47deabd912c1a7bc672af4c4fa172c4\Microsoft.DataWarehouse.SQM.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\cc81bb7bc171b6c3128c3e4dcd91d91e\Microsoft.DataWarehouse.Layout.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\b76f39ffdec122e480d4768d09c54d15\Microsoft.DataWarehouse.Layout.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 53248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\5657bfc5f67a146443b69bd66bc6465e\Microsoft.DataWarehouse.Interfaces.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 77824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\0b1b9ede0e557076c1364a8cd72b836a\Microsoft.DataWarehouse.SQM.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\808cd19137c46c1f2208d69e9ac64eb6\Microsoft.DataTransformationServices.Interfaces.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\547facdef30b7185a1fd9cfebc3acb2e\Microsoft.DataTransformationServices.Interfaces.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Data.Conn#\8381d65d924733f78043ac4c8f39ae5a\Microsoft.Data.ConnectionUI.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e3ef400b1f37e4d3b79a42a8a602ea02\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2095344bf8c40f8baa94ba53a993fb4c\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\ipdmctrl\1746deeb1c6c9609c1c59c852bf0bcbb\ipdmctrl.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\21b710d1ac8b201c5402d6991733d07e\IAStorDataMgrSvc.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\367af7fc22650701edfa7e8ecadcb273\IAStorCommon.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 31232 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE90a\cb91351b7baca13918cad02071886359\EnvDTE90a.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 46080 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE90\b70d0e5c44a3938ff692639211c48407\EnvDTE90.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\dc93539af5a961641a26ada75f730136\ehiUserXp.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 91648 c:\windows\assembly\NativeImages_v2.0.50727_32\DTExecUI\cf9d4dee68492707e891685e5412a98b\DTExecUI.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 91648 c:\windows\assembly\NativeImages_v2.0.50727_32\DTExecUI\5d677b547bc93fa9ba1e577cf3038519\DTExecUI.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\53d03b0e238c77cf7e5ac88e02aecd2c\dfsvc.ni.exe
+ 2012-06-13 07:45 . 2012-06-13 07:45 79360 c:\windows\assembly\NativeImages_v2.0.50727_32\ControlService\fb5efbadbb53401c76b49940835f835e\ControlService.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 79360 c:\windows\assembly\NativeImages_v2.0.50727_32\ControlService\2887085a6727daf9d8b3d938655354f4\ControlService.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\2ebfc41cb0193cb129521d80ec206da7\AuditPolicyGPManagedStubs.Interop.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll
- 2009-07-14 00:19 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wmi.dll
+ 2012-04-11 07:01 . 2012-03-01 05:29 5120 c:\windows\SysWOW64\wmi.dll
+ 2012-07-11 04:19 . 2010-06-26 03:24 2048 c:\windows\SysWOW64\msxml3r.dll
- 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\msxml3r.dll
+ 2012-06-13 12:03 . 2012-06-13 12:03 3584 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Last Active\RecoveryStore.{DAE272B6-B54F-11E1-83AA-E06995A6B5F2}.dat
+ 2012-06-13 11:50 . 2012-06-13 12:03 4096 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{E8E0439C-B54D-11E1-83AA-E06995A6B5F2}.dat
+ 2012-04-11 07:01 . 2012-03-01 06:28 5120 c:\windows\system32\wmi.dll
- 2009-07-14 00:41 . 2009-07-14 01:33 5120 c:\windows\system32\wmi.dll
+ 2011-09-14 18:37 . 2012-07-20 00:59 9586 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-260843078-278039929-3275570884-1142_UserData.bin
+ 2012-04-12 12:22 . 2012-04-12 12:22 9560 c:\windows\system32\NetworkList\Icons\{497707FA-2365-49C7-A388-4BDC519A51AE}_48.bin
+ 2012-04-12 12:22 . 2012-04-12 12:22 4280 c:\windows\system32\NetworkList\Icons\{497707FA-2365-49C7-A388-4BDC519A51AE}_32.bin
+ 2012-04-12 12:22 . 2012-04-12 12:22 2456 c:\windows\system32\NetworkList\Icons\{497707FA-2365-49C7-A388-4BDC519A51AE}_24.bin
- 2009-07-14 00:41 . 2009-07-14 01:30 2048 c:\windows\system32\msxml3r.dll
+ 2012-07-11 04:19 . 2010-06-26 03:55 2048 c:\windows\system32\msxml3r.dll
+ 2012-07-20 00:56 . 2012-07-20 00:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-03-30 14:00 . 2012-03-30 14:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-07-20 00:56 . 2012-07-20 00:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-03-30 14:00 . 2012-03-30 14:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-01-10 18:37 . 2012-01-10 18:37 8040 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\quickbooksmsgs.dll
+ 2012-01-10 15:38 . 2012-01-10 15:38 5120 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\managedutilities.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\e4ce7f0ca709f2574acc831902f4ae01\dfsvc.ni.exe
+ 2012-04-11 07:01 . 2012-03-01 05:37 172544 c:\windows\SysWOW64\wintrust.dll
- 2012-02-15 08:01 . 2011-12-14 02:55 231936 c:\windows\SysWOW64\url.dll
+ 2012-07-11 07:02 . 2012-06-02 08:23 231936 c:\windows\SysWOW64\url.dll
+ 2012-07-11 04:19 . 2012-06-02 04:40 225280 c:\windows\SysWOW64\schannel.dll
+ 2012-07-11 04:19 . 2012-06-02 04:39 219136 c:\windows\SysWOW64\ncrypt.dll
- 2009-07-13 23:33 . 2009-07-14 01:16 219136 c:\windows\SysWOW64\ncrypt.dll
+ 2012-07-12 16:42 . 2012-07-12 16:42 686280 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_Plugin.exe
+ 2012-07-12 15:42 . 2012-07-12 15:42 686280 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.exe
+ 2012-07-12 15:42 . 2012-07-12 15:42 465096 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_265_ActiveX.dll
+ 2012-06-13 12:10 . 2012-07-09 11:23 686280 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.exe
+ 2012-06-13 12:10 . 2012-07-09 11:23 465096 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.dll
+ 2012-04-11 10:06 . 2012-07-12 16:42 250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
- 2012-02-15 08:00 . 2011-12-14 02:53 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-07-11 07:02 . 2012-06-02 08:19 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-05-09 13:10 . 2012-05-09 13:10 157472 c:\windows\SysWOW64\javaws.exe
- 2012-01-30 15:04 . 2012-01-30 15:04 157472 c:\windows\SysWOW64\javaws.exe
- 2012-01-30 15:04 . 2012-01-30 15:04 149280 c:\windows\SysWOW64\javaw.exe
+ 2012-05-09 13:10 . 2012-05-09 13:10 149280 c:\windows\SysWOW64\javaw.exe
+ 2012-05-09 13:10 . 2012-05-09 13:10 149280 c:\windows\SysWOW64\java.exe
- 2012-01-30 15:04 . 2012-01-30 15:04 149280 c:\windows\SysWOW64\java.exe
+ 2012-04-11 07:01 . 2012-03-01 05:33 159232 c:\windows\SysWOW64\imagehlp.dll
+ 2012-07-11 07:02 . 2012-06-02 08:20 142848 c:\windows\SysWOW64\ieUnatt.exe
- 2011-09-14 20:33 . 2011-09-14 20:33 142848 c:\windows\SysWOW64\ieUnatt.exe
- 2012-02-15 08:01 . 2011-12-14 02:47 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-07-11 07:02 . 2012-06-02 08:14 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-07-11 04:19 . 2012-04-24 04:36 140288 c:\windows\SysWOW64\cryptsvc.dll
+ 2012-07-11 04:19 . 2012-04-24 04:36 103936 c:\windows\SysWOW64\cryptnet.dll
+ 2009-07-14 04:54 . 2012-07-12 16:42 327680 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-11-21 03:24 . 2010-11-21 03:24 805376 c:\windows\SysWOW64\cdosys.dll
+ 2012-07-11 04:19 . 2012-06-06 05:03 805376 c:\windows\SysWOW64\cdosys.dll
+ 2012-07-09 10:57 . 2012-07-10 17:30 262144 c:\windows\SysWOW64\%APPDATA%\Microsoft\Windows\IETldCache\index.dat
- 2010-11-21 03:24 . 2010-11-21 03:24 220672 c:\windows\system32\wintrust.dll
+ 2012-04-11 07:01 . 2012-03-01 06:38 220672 c:\windows\system32\wintrust.dll
- 2012-02-15 08:01 . 2011-12-14 07:03 237056 c:\windows\system32\url.dll
+ 2012-07-11 07:02 . 2012-06-02 12:04 237056 c:\windows\system32\url.dll
- 2012-01-11 05:00 . 2011-11-17 06:35 340992 c:\windows\system32\schannel.dll
+ 2012-07-11 04:19 . 2012-06-02 05:45 340992 c:\windows\system32\schannel.dll
+ 2009-07-14 02:36 . 2012-07-03 17:51 662972 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-07-03 17:51 121840 c:\windows\system32\perfc009.dat
- 2009-07-13 23:49 . 2009-07-14 01:41 307200 c:\windows\system32\ncrypt.dll
+ 2012-07-11 04:19 . 2012-06-02 05:44 307200 c:\windows\system32\ncrypt.dll
+ 2012-07-12 16:42 . 2012-07-12 16:42 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_265_Plugin.exe
+ 2012-07-12 15:42 . 2012-07-12 15:42 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_265_ActiveX.exe
+ 2012-07-12 15:42 . 2012-07-12 15:42 512200 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_265_ActiveX.dll
- 2012-02-15 08:00 . 2011-12-14 07:00 818688 c:\windows\system32\jscript.dll
+ 2012-07-11 07:02 . 2012-06-02 12:00 818688 c:\windows\system32\jscript.dll
+ 2012-07-11 07:02 . 2012-06-02 12:01 173056 c:\windows\system32\ieUnatt.exe
- 2011-09-14 20:33 . 2011-09-14 20:33 173056 c:\windows\system32\ieUnatt.exe
- 2012-02-15 08:01 . 2011-12-14 06:53 248320 c:\windows\system32\ieui.dll
+ 2012-07-11 07:02 . 2012-06-02 11:54 248320 c:\windows\system32\ieui.dll
- 2009-07-14 04:45 . 2012-03-30 14:00 434680 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 04:45 . 2012-07-11 07:15 434680 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 05:30 . 2012-06-13 15:27 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2012-03-17 00:24 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-06-13 15:27 143360 c:\windows\system32\DriverStore\infstor.dat
- 2009-07-14 05:30 . 2012-03-17 00:24 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2012-03-19 02:23 . 2012-03-19 02:23 386168 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\symnets.sys
+ 2012-02-27 02:31 . 2012-02-27 02:31 932472 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\SymEFA64.sys
+ 2011-11-16 02:11 . 2011-11-16 02:11 451192 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\SymDS64.sys
+ 2012-03-07 07:09 . 2012-03-07 07:09 678008 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\srtsp64.sys
+ 2011-11-16 02:05 . 2011-11-16 02:05 171128 c:\windows\system32\drivers\SEP\0C01044D\0191.105\x64\Ironx64.sys
+ 2012-07-11 04:19 . 2012-06-02 05:48 151920 c:\windows\system32\drivers\ksecpkg.sys
+ 2012-07-11 04:19 . 2012-06-02 05:50 458704 c:\windows\system32\drivers\cng.sys
+ 2012-07-11 04:19 . 2012-04-24 05:37 184320 c:\windows\system32\cryptsvc.dll
+ 2012-07-11 04:19 . 2012-04-24 05:37 140288 c:\windows\system32\cryptnet.dll
+ 2012-06-13 11:50 . 2012-06-13 11:50 299160 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\1033\StructuredQuerySchema.bin
+ 2009-07-14 04:46 . 2012-07-17 15:59 117968 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2009-07-14 04:46 . 2012-03-29 12:09 117968 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2012-07-10 10:04 . 2012-07-10 10:04 219368 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\reliability\Sqm\Manifest\Sqm27.bin
- 2009-07-14 05:01 . 2012-03-30 13:57 400336 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-07-20 00:55 400336 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-15 12:51 . 2011-12-15 12:51 226600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
- 2011-12-26 09:18 . 2011-12-26 09:18 721680 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
+ 2011-12-25 14:52 . 2011-12-25 14:52 721680 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
+ 2012-04-21 14:15 . 2012-04-21 14:15 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 156440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 296712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\SetupUi.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 810256 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\SetupEngine.dll
+ 2012-04-21 14:15 . 2012-04-21 14:15 296520 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupUi.dll
+ 2012-04-21 14:15 . 2012-04-21 14:15 810576 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\SetupEngine.dll
- 2011-12-26 09:47 . 2011-12-26 09:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
+ 2011-12-25 15:18 . 2011-12-25 15:18 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
+ 2012-05-09 04:10 . 2012-02-10 23:29 172320 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
+ 2012-06-13 04:34 . 2012-04-23 22:33 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
- 2011-12-26 07:54 . 2011-12-26 07:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
+ 2012-04-21 14:15 . 2012-04-21 14:15 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 517888 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
- 2011-12-26 08:39 . 2011-12-26 08:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2011-12-25 14:19 . 2011-12-25 14:19 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2011-12-15 12:07 . 2011-12-15 12:07 956688 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 131360 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2012-06-13 04:34 . 2012-04-23 22:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-05-09 04:11 . 2012-01-04 02:51 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-05-09 04:11 . 2012-01-04 02:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2012-05-09 04:11 . 2012-01-04 02:50 996624 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35

#11 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 19 July 2012 - 08:24 PM

- 2012-03-23 07:14 . 2012-03-23 07:14 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-03-23 07:08 . 2012-03-23 07:08 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-03-23 07:08 . 2012-03-23 07:08 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-03-23 07:08 . 2012-03-23 07:08 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-02-09 11:27 . 2012-02-09 11:27 206848 c:\windows\Installer\1b5a2130.msp
+ 2012-03-21 09:58 . 2012-03-21 09:58 133120 c:\windows\Installer\1b5a20b4.msp
+ 2012-05-09 13:10 . 2012-05-09 13:10 207360 c:\windows\Installer\1419529.msi
- 2011-12-05 13:22 . 2012-03-17 01:11 231320 c:\windows\Installer\{DF47ACA3-7C78-4C08-8007-AC682563C9F1}\ARPPRODUCTICON.exe
+ 2011-12-05 13:22 . 2012-04-27 14:32 231320 c:\windows\Installer\{DF47ACA3-7C78-4C08-8007-AC682563C9F1}\ARPPRODUCTICON.exe
+ 2012-04-06 14:48 . 2012-04-06 14:48 380928 c:\windows\Installer\{CF8FFD12-602B-422D-AF1D-511B411E7632}\iTunesIco.exe
- 2012-02-21 19:04 . 2012-03-14 07:01 571232 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\misc.exe
+ 2012-02-21 19:04 . 2012-07-11 07:05 571232 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\misc.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 470616 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut92_995982DA6F5147D0B263EACCBFB80EEC.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut92_995982DA6F5147D0B263EACCBFB80EEC.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut911_52BC2593A7AD474C89760DD3095F858D.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut911_52BC2593A7AD474C89760DD3095F858D.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut91_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut91_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut9_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut9_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut82_C55036898DFD4AC78FAF03E64357D1C5.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut82_C55036898DFD4AC78FAF03E64357D1C5.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut811_35DFAD5C171D44088EAA810BD0A23520.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut811_35DFAD5C171D44088EAA810BD0A23520.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut81_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut81_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut8_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut8_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut72_CAD273ADB04649A6BD8728786328AA87.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut72_CAD273ADB04649A6BD8728786328AA87.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut711_017ECA06492B42F79CDC1E5C8EA0D4DB.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut711_017ECA06492B42F79CDC1E5C8EA0D4DB.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut71_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut71_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut7_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut7_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut52_0BE5792C876246FC9ABE69B6DDA308A3.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut52_0BE5792C876246FC9ABE69B6DDA308A3.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut511_C00D6FDD7F0C4313938DD0B302929D40.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut511_C00D6FDD7F0C4313938DD0B302929D40.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut51_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut51_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut5_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut5_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut42_3242FA92AA814582BF8F363E375E2617.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut42_3242FA92AA814582BF8F363E375E2617.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut411_D7FFEBDC368A4660B7F21BA64BFCD866.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut411_D7FFEBDC368A4660B7F21BA64BFCD866.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut41_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut41_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut4_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut4_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut32_F9B129D0055B4A3694BB83B45342EB06.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut32_F9B129D0055B4A3694BB83B45342EB06.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut311_4604B4259921471B96EC624AFEA12F1B.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut311_4604B4259921471B96EC624AFEA12F1B.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut31_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut31_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut3_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut3_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut29_64E38A90B85F447EA9D42C14DFF7B399.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut29_64E38A90B85F447EA9D42C14DFF7B399.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut28_6C2287199EDD4CAA8285D3095F51E522.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut28_6C2287199EDD4CAA8285D3095F51E522.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut27_6C2287199EDD4CAA8285D3095F51E522.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut27_6C2287199EDD4CAA8285D3095F51E522.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut26_6C2287199EDD4CAA8285D3095F51E522.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut26_6C2287199EDD4CAA8285D3095F51E522.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut25_6C2287199EDD4CAA8285D3095F51E522.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut25_6C2287199EDD4CAA8285D3095F51E522.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut241_7AE715922BD74E0E938522AC3FDACFB1.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut241_7AE715922BD74E0E938522AC3FDACFB1.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut24_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut24_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut211_8C085A93DB0043388676173D40A360A3.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut211_8C085A93DB0043388676173D40A360A3.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut21_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut21_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut201_7AE715922BD74E0E938522AC3FDACFB1.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut201_7AE715922BD74E0E938522AC3FDACFB1.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut20_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut20_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut2_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut2_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut2.CB4E6205_F99A_4C51_ADD4_184506EFAB87.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut2.CB4E6205_F99A_4C51_ADD4_184506EFAB87.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut181_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut181_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut18_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut18_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut171_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut171_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut17_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut17_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut161_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut161_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut16_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut16_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut151_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut151_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut15_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut15_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut131_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut131_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut13_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut13_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut121_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut121_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut12_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut12_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut111_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut111_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut11_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut11_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut102_5644560183D14A7B8DC5AA115758DEAA.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut102_5644560183D14A7B8DC5AA115758DEAA.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut1011_5774C111B8F246B0AFB1F71F20FF4E67.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut1011_5774C111B8F246B0AFB1F71F20FF4E67.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut101_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut101_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut10_1B72F66FEC97454396CC50F63093FE70.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut10_1B72F66FEC97454396CC50F63093FE70.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut1_5DDC3DFBB658402487936E98D3651BFD.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\NewShortcut1_5DDC3DFBB658402487936E98D3651BFD.exe
+ 2012-03-22 13:07 . 2012-04-04 13:12 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\IntuitDataProtect__04F38842ABCB4C6DB4AA98780DA65B97.exe
- 2012-03-22 13:07 . 2012-03-22 13:07 335872 c:\windows\Installer\{25E202D1-D8E7-46AF-B4B0-157D9993A93E}\IntuitDataProtect__04F38842ABCB4C6DB4AA98780DA65B97.exe
+ 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\sqmapi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\SetupUi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\SetupEngine.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 181096 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_X86.dll
+ 2010-03-18 18:27 . 2010-03-18 18:27 225640 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_AMD64.dll
+ 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Installer\$PatchCache$\Managed\C28643E881181F13CBC489DC69571E2C\4.0.30319\sqmapi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Installer\$PatchCache$\Managed\C28643E881181F13CBC489DC69571E2C\4.0.30319\SetupUi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Installer\$PatchCache$\Managed\C28643E881181F13CBC489DC69571E2C\4.0.30319\SetupEngine.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 479080 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\StopQBServer.dll
+ 2012-01-10 18:00 . 2012-01-10 18:00 155648 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\SSCE5232.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 745320 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBXMLRP2.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 121192 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBVersionTool.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 740712 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBUServiceMgr.dll
+ 2012-01-10 18:35 . 2012-01-10 18:35 268136 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbserverutilitymgr.exe
+ 2012-01-10 18:37 . 2012-01-10 18:37 567144 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBMsgRequestMgr.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 186728 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBMsgMgr.exe
+ 2012-01-10 18:36 . 2012-01-10 18:36 589672 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbmas32.dll
+ 2012-01-10 18:35 . 2012-01-10 18:35 784744 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBLaunch.exe
+ 2012-01-10 18:36 . 2012-01-10 18:36 786792 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\QBInstanceFinder.dll
+ 2012-01-10 18:36 . 2012-01-10 18:36 196968 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbexcel2007reportupdater.dll
+ 2012-01-10 18:36 . 2012-01-10 18:36 190824 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbexcel2003reportupdater.dll
+ 2012-01-10 18:00 . 2012-01-10 18:00 143360 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\OLBService.dll
+ 2012-01-10 18:36 . 2012-01-10 18:36 263016 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\CoLocator2.dll
+ 2012-01-10 18:36 . 2012-01-10 18:36 268136 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\addinmgr2.dll
+ 2011-02-04 17:40 . 2011-02-04 17:40 452936 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\EXPSRV.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 362904 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEXBE.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 527776 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEREP.DLL
+ 2010-12-21 04:48 . 2010-12-21 04:48 329624 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACER3X.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 383904 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEOLEDB.DLL
+ 2010-12-21 04:48 . 2010-12-21 04:48 278448 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEODBC.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 334752 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEEXCH.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 686504 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEES.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEDAO.DLL
+ 2010-12-21 06:58 . 2010-12-21 06:58 294768 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\SHAREPOINTPROVIDER.DLL
+ 2011-02-05 03:52 . 2011-02-05 03:52 403320 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\OFFXML.DLL
+ 2010-10-20 20:06 . 2010-10-20 20:06 169352 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\IPOLK.DLL
+ 2011-02-04 17:40 . 2011-02-04 17:40 452936 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\EXPSRV.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 362904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEXBE.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 220560 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACETXT.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 527776 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEREP.DLL
+ 2010-12-21 04:48 . 2010-12-21 04:48 329624 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACER3X.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 383904 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEOLEDB.DLL
+ 2010-12-21 04:48 . 2010-12-21 04:48 278448 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEODBC.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 644504 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEEXCL.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 334752 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEEXCH.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 686504 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEES.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEDAO.DLL
+ 2010-12-28 04:49 . 2010-12-28 04:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACACEDAO.DLL
+ 2012-05-09 07:40 . 2012-05-09 07:40 553472 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\e43ce73880aa985f47f28dc11869e267\XamlBuildTask.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 462336 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\0f51db755683f593c7057cd1a673c564\WsatConfig.ni.exe
+ 2012-06-13 07:51 . 2012-06-13 07:51 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\f634588646f31dd0f0c85845d8f92e23\WindowsFormsIntegration.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\e6c74bd184036960736958045300ef8a\WindowsFormsIntegration.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\e5c7d625e4f811134b3975323d1e5bd3\UIAutomationTypes.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\f4a42ebee85ba12e094383d3d7283ff7\UIAutomationProvider.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\ca3d386bb4db8ed24b1d678545b79987\UIAutomationClient.ni.dll
+ 2012-06-13 07:32 . 2012-06-13 07:32 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\Temp\2178-0\System.Messaging.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 525824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\0c0156fd1d773ff7338ed1ad9aa06eea\System.Xml.Linq.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 254976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\9c46408654f74c178771523dbbcd2e3f\System.Windows.Input.Manipulations.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 243712 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\9e332e76976f23ba14cab906135a1d13\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 243712 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\2da6faec68774407d7430cd28d5e6ad5\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 314880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\499a98dc2af41bfaf20a371f273c5e87\System.Web.RegularExpressions.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 449024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\bb0256c06cb2155fbd4511cd8f205f4c\System.Web.Entity.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 449024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\26e3439667ec518cc1a76ecfdeba9eeb\System.Web.Entity.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\90028f6923e75281f3a04490c746a1f0\System.Web.Entity.Design.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\8d56f28a2e523389547716db29965d3e\System.Web.Entity.Design.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 965632 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\8e70d6810d3da598e3fa0d13c7e29c5a\System.Web.DynamicData.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 965632 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\2acc6986075ae0a7baddcda53e70cb7b\System.Web.DynamicData.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 330752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\f04a7507a63f16a0f1e58e32ae149f31\System.Web.DataVisualization.Design.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 330752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\e9faee4ba07127a75e399c3f9a500df2\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\ea63ef361828bf3259977a78d37be2a0\System.Transactions.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\7cde84bd852c49e64bea15d3ff1fad6b\System.ServiceProcess.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\15a67a78b351a428609494b00e866e04\System.ServiceProcess.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 507904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\2892668bf8658079516c7e348208b113\System.ServiceModel.Routing.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 107520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\20ebee39b23b5c6c5890e17ec59ebb7b\System.ServiceModel.Channels.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 578560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\1a3107007e103029443aef026886123c\System.ServiceModel.Activation.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 939520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\53168b52b90ed9dacf1f1864513ac268\System.Security.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 376320 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\c8a08b3895670c2219c72d1990d54d14\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\d6a40dedd596eeb2a502606e2126f4ee\System.Runtime.Remoting.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 308224 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\df88f565625fc43896cac65a7bf673c1\System.Runtime.Caching.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\50e90f7254f7587162ae2fef8f1d240e\System.Numerics.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 930304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\fe1d7bc75088885fb655c095d6e6a942\System.Net.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\ae95aa3d97b6e0c4a04660caaa68b652\System.Messaging.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\83410ed4d9106d7268a1dbed6a990543\System.Messaging.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\f9f2689ffec8dcd6b1667487739a0fd9\System.Management.Instrumentation.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\b59389ad22c1ae01b84c334a91a4c877\System.IO.Log.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\084870ce076210587c5fcbf574c0444e\System.IdentityModel.Selectors.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7d38c29c28640f46388d06f1bd3d5fcc\System.EnterpriseServices.Wrapper.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 511488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\49146b5777bbf89b6fcd2e038127b8cf\System.Dynamic.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\f8c64e5ef74694c50f8fb4a35188f56b\System.Drawing.Design.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\629c6213814162c1feff7bb496f1c6f7\System.Drawing.Design.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 628736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\7e292d7aea7e5873f3f59902202da91d\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\31fbc08d17b77c19cfecbd6e90ff3ec0\System.Device.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 659456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\64e86d8929ffd77aa4b64b73d8deaeec\System.Data.Services.Design.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\b1448de67916d187bf64b04209d9ac29\System.Data.DataSetExtensions.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 181248 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\60ed267395ce97b793c3094d602c57b6\System.Configuration.Install.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 181248 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\117c2c89d1ad6f44d2e53f1285a779d4\System.Configuration.Install.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\21886bf3ba6f8876dda717d5b3b596e5\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 871936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\3d243f7d404c6bd64ac688aae85e2f26\System.AddIn.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 552960 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\5c86430ae2ea217ead2a80c77d2c75a3\System.Activities.DurableInstancing.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 430080 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\50a5291c9bb8e0ced8d259dd5d3e49bf\SMSvcHost.ni.exe
+ 2012-05-09 07:36 . 2012-05-09 07:36 184832 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\c7002204e994cc1cff01f76e382f503b\SMDiagnostics.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\5f17a1b5258b54fa411724e5cb4cf08f\PresentationFramework.Aero.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\5860425ca32d0015aab41adb8bfa3762\PresentationFramework.Royale.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 352256 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\259dd9063c5c874c6fb0770d6fc61e50\PresentationFramework.Classic.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\13f589dcd10ef7f6fde01fce43923019\PresentationFramework.Luna.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 365056 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\e79c9c82cc36b9774fd75da801185213\MSBuild.ni.exe
+ 2012-05-09 07:35 . 2012-05-09 07:35 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\aa7d5ca953fd0a465d31288d4b1b3407\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-06-13 07:29 . 2012-06-13 07:29 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\92a9a599d3bf306dc2a026f39146dede\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\9f2902b483374475e7b0aee5edad599b\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 850432 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\5ef96b63f67cadc6db00f947d5bddbe6\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 353792 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\721ce0fb433b80c6989979b702310c56\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\0ef80512d170b04bc4c57abafbec3af1\CustomMarshalers.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 660480 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\ebf93b9b380991b85515bcd274206746\ComSvcConfig.ni.exe
+ 2012-05-09 07:47 . 2012-05-09 07:47 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\5406911734d13b0bcab041295c151f46\XamlBuildTask.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\9214809489c3f30031ba88397da20b60\WsatConfig.ni.exe
+ 2012-05-09 07:47 . 2012-05-09 07:47 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\c5c052d83594b88609a834312444dd05\WindowsFormsIntegration.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\0561b234d9a2f41ac93c9ccf5bb56971\WindowsFormsIntegration.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\11e249ac9520b149ae8b718dfb4eea2d\UIAutomationTypes.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\96043f3451746a807a8ee75bf0fc7213\UIAutomationClient.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\a43e204247b19cd89230df14eb81cab5\System.Xml.Linq.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\16e6d55a44d95c6d9a3529945254f152\System.Windows.Input.Manipulations.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\c2cf3fefb600580fb616f03224071058\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\6ee29b5c9ae30f5fe6887cb8eb1a4fab\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\a590ae460831d7bb6d9765b26d935a58\System.Web.RegularExpressions.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 864256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\d3906e3f50cfebffc316c95cc93998c7\System.Web.Extensions.Design.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 864256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\5528671ec60f759c4f1ef4e17e7b3e24\System.Web.Extensions.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 334848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\c4b607b59f79d58fbdea44b703e762a6\System.Web.Entity.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 334848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\5fbb31957cfbe917b8a118143ae53995\System.Web.Entity.ni.dll

+ 2012-06-13 07:48 . 2012-06-13 07:48 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\576aff4eba2806c07fdec8cbb8e9bd1a\System.Web.Entity.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\1167081928d0843c2852417b03aa88b8\System.Web.Entity.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\e72f94adac46f1b25da02be6e58fc774\System.Web.DynamicData.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\65dbde2d17d13a1b9a8ddbfe601682fa\System.Web.DynamicData.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\5c6438725392f8beeb17b5d73e33e6d0\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\38cac065e1313e7c08a4113369298919\System.Web.DataVisualization.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\7ec9e9c396d8215dcc2f428c35c9ea0a\System.Transactions.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\a41ce1b6f77a65783d1c0d3a4223559f\System.ServiceProcess.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\02ca5638d9935f76e8be49ff3c7efe50\System.ServiceProcess.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 425472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9bcb6ffe66a7f031b0534d21d055a90e\System.ServiceModel.Activation.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5f56848cdaf95c850a2c04e50fe550f0\System.ServiceModel.Routing.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\6b7cd0bbea81be72820d444885eae84a\System.Security.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\c3126fee54561bc772518e1b5eb20612\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1799edaf526c8acd66a05266ced58279\System.Runtime.Remoting.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\2a0d03db0b4c285d961f34fd12152a14\System.Runtime.Caching.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\3ca79e608c5338a36466e9afffa2cbd5\System.Numerics.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 652800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\4ba8464e1cfcf227a195915a3ef6289f\System.Net.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\98ed0ef8e9505fe41ae83e5ffeb11709\System.Messaging.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\2ed725da55176451ca1d72d25172962d\System.Messaging.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\fdad9bcefd144c21a2852a438f8fcdd1\System.Management.Instrumentation.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ecb5bc89b9c551f556ca9ee9e0047cc8\System.IO.Log.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\ade9e5286670b765a4ab5620f5ea8361\System.IdentityModel.Selectors.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fcf4d7ddb0fce3602946d5a33fbc5b31\System.EnterpriseServices.Wrapper.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fcf4d7ddb0fce3602946d5a33fbc5b31\System.EnterpriseServices.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a5de4d07cac9c87fee9a8cc41278b713\System.Dynamic.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\f0b9d575de9f3069774ddcfe9cf6e750\System.Drawing.Design.ni.dll
+ 2012-06-13 07:22 . 2012-06-13 07:22 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\dc595102f08675a47ad461c6e8e8dacb\System.Drawing.Design.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\f02b8e6150a26d3f39f0a481478a0ac1\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\5993c56c73918eb9e1ff55c2324f1d80\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\b5855bafcb8f285331b64ea0adbe9de1\System.Device.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 704000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlServ#\9a83117189822ef4d8a9614b14062f14\System.Data.SqlServerCe.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 508416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\a075255264a288da46eb7eb1100a0de5\System.Data.Services.Design.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\53649af8e4eb7575b69ffa649ace8150\System.Data.DataSetExtensions.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\b8c47ff8eba1c63c4b5d50fe571cac5a\System.Configuration.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\edc389ee737bcc33f80ee228f2300f45\System.Configuration.Install.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c799aa314469defdda0a94768b108e53\System.Configuration.Install.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\33e2dcfe8825e771d08d49cdb53bb8bb\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\00fd33f2c4f8164148706f0a013a75ac\System.ComponentModel.Composition.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\e5d1112acd0762de17e84893898d8cf8\System.AddIn.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\b658ef9149895ddfc9df54f41b2959d6\System.Activities.DurableInstancing.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\46d3698d831edbd59f42f967eff49ac9\SMSvcHost.ni.exe
+ 2012-05-09 07:45 . 2012-05-09 07:45 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\99e793da810f7f27ea4b24281376d2f1\SMDiagnostics.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7b9ffaa3ff85dba8c04274705fe00cd2\PresentationFramework.Royale.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\39dd00c5ddf4cb228aa4fb864d5f410b\PresentationFramework.Luna.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 311808 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\2105c94f13c71f0121c2afedb1e936ca\PresentationFramework.Classic.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\0669a1658eb6c57166da9b9d2843577e\PresentationFramework.Aero.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\8484214b5091b01d8e3fbca8db399aa5\MSBuild.ni.exe
+ 2012-05-09 07:45 . 2012-05-09 07:45 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8f16d60bef4dacef38da63f1b4f5fed2\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\4c77b82d50263fbb3070cbb87fcf3a71\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5db713360df6870dce94bd6c2da1435c\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 546816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\d60c99c09f1ad39a0c8578cb522ce7b1\Microsoft.SqlServer.GridControl.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 187392 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\bd3599a4754719dc4eb7db5858f6b468\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 657920 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\b4811284288e103c945bbb3c7b2dbd24\Microsoft.SqlServer.DTSRuntimeWrap.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 140288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\b2f96d8167098952e76225e4b81d9fb5\Microsoft.SqlServer.SQLTask.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 753664 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\9e63d532d22038e77b241a2b445a82cd\Microsoft.SqlServer.ManagedDTS.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 546816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\985e84b54bd6d01f0f3c1fbebb63394e\Microsoft.SqlServer.GridControl.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 130560 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\8ea920c1e1d6e4844926707548d90f43\Microsoft.SqlServer.RegSvrEnum.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 140288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\81988a400f21bbfe48828533be56c94d\Microsoft.SqlServer.PipelineHost.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 648704 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\62e573140f549b7666b1541ac12d43ee\Microsoft.SqlServer.Msxml6_interop.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 178176 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\5f98ff3f1496e2e451b06aefad5046d2\Microsoft.SqlServer.DataStorage.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 266752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\5e4a73d89afde137c28b66b2fce08cc6\Microsoft.SqlServer.DTSPipelineWrap.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 587264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\5b01972c483a4e206e3244979b4bb54c\Microsoft.SqlServer.BatchParser.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 248832 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\3e43d7008388d141fd3e6e79ea0eb04c\Microsoft.SqlServer.ConnectionInfo.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 178176 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\367fbe1f5899f55720f407436997e526\Microsoft.SqlServer.DataStorage.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 753664 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\294c64faf8a0076618676e758040107a\Microsoft.SqlServer.ManagedDTS.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 156672 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\153786e4a83551afc1f25e09a230327d\Microsoft.SqlServer.DtsMsg.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.NetEnterp#\e7173a9f151146867d3ea6ba84e2b887\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.NetEnterp#\cca4866e77479d35dbc955c84732ffc2\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\51c1841ff61d355009d478eae98708e3\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\e5c17e6fa42b9b76844ce79c12e41870\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\5c24d65853b864b31da3db5a930d55c8\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 898560 c:\windows\assembly\NativeImages_v4.0.30319_32\EnvDTE\8093dab1fabad8e73d950391e27c43d4\EnvDTE.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\c6f50454841e46989bfbf8b70d598db0\CustomMarshalers.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\5dc94a99845ca8bfeed0c923a0fe4480\ComSvcConfig.ni.exe
+ 2012-05-09 07:45 . 2012-05-09 07:45 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\8d2d903c73cf8fd54c0737e59b1fb4c8\AspNetMMCExt.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\288ddc4d284e60d66753b314df1397ae\AspNetMMCExt.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 348160 c:\windows\assembly\NativeImages_v4.0.30319_32\ADODB\f1694c10cfec1d1d0946d8bbed5f13c0\ADODB.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\ad7f43afb4f124acae4d503b40f591c1\WsatConfig.ni.exe
+ 2012-06-13 07:51 . 2012-06-13 07:51 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f4d304fcbfda323997083a1f88b83719\WindowsFormsIntegration.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\bf634b0e2e28466c6ed6ae1eb602b09f\UIAutomationTypes.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\1ff8fb81d6f045f1dc6f50be95444292\UIAutomationProvider.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\1f36e020c3563e0ff414f13138e238e1\UIAutomationClient.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\681410f842337dccc72eb059738c3ced\TaskScheduler.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\de45d043775d8c805f6feca40d7a9ed2\System.Xml.Linq.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\72b4992e45d232251a273a59eb3333d5\System.Web.Routing.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\76662ce36d2141e45513e64386073cc2\System.Web.RegularExpressions.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b905eb57b631a30c60caa4d68c186963\System.Web.Entity.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e412dfbf1aa49bbe345a02a4d23104f5\System.Web.Entity.Design.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\815769f953ebe3f84439d522c97317b8\System.Web.DynamicData.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c8144ee08dccdac183527e53c86aa901\System.Web.Abstractions.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\ec95ad2463c5588fc8ef552b3f375ee6\System.Transactions.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f71d2f65d0f149c75ac7a569dbcc8500\System.ServiceProcess.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\1875b50d0228f29aef00bed38ab594d6\System.Security.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\807759890a40e4047c35a24e64dc76d5\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\3b3581851a728bef36f319e9d4c72499\System.Net.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d5d612f7d372f500e3062e3814e79d75\System.Messaging.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\599954438a668c94dd38e8e7e506ac2a\System.Management.Instrumentation.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 569856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\fd51741bfd973ad507bbd141e98932f8\System.IO.Log.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\ef6abe121bb11bff2514bfdfb7e76b7a\System.IdentityModel.Selectors.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d50cde53634ccbb5e0231738784ff4b8\System.EnterpriseServices.Wrapper.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\fbc02e9f5a14bb93082ebc88bc577413\System.Drawing.Design.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\4bb1134d9b166434327385ddf3c5dd54\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 629760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\7c4ce1b8a2f83ef29aa6d5f126ab5b71\System.Data.Services.Design.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\19d1414f1ca718ce4d0c07e7305b3450\System.Data.DataSetExtensions.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a88ca70ab9641b8236149bc5dd8d1564\System.Configuration.Install.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\9536bb262c4f1ea389d287ab669767d4\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 890880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\84262138e2e9f34c88fd282caa82baa5\System.AddIn.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\176899be7b920fb20408ff49e636a776\System.AddIn.Contract.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\ee0608cd62dfb37016016884fc39e425\sysglobl.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\9fa1abf006689e262527ae50d452e97e\SMSvcHost.ni.exe
+ 2012-05-09 07:31 . 2012-05-09 07:31 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\2eac9c598de3341eba5c16787c74f220\SMDiagnostics.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 376832 c:\windows\assembly\NativeImages_v2.0.50727_64\SecurityAuditPolici#\0101faefdcc3274ba594e7a103ec0186\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\89de197bdde5984658045ade41c2c9b9\PresentationFramework.Classic.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\7ffb91db770d0b09921f623bc5d68b4f\PresentationFramework.Luna.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\4f3567165e2a444fc9a62980c4d0ea82\PresentationFramework.Aero.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\205bb33cef9ae6b906ceadd6f2861c86\PresentationFramework.Royale.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\2f1bad2fb963482a02443d5e7fece2b6\napsnap.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\bb4947f0ecc925a7bcfd129b6eec8f9b\napinit.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\5f0ae15f9d1cade37fbfaacff7e64bff\naphlpr.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\5346ceca518baf5e5fa3fed9f900f792\napcrypt.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\8f792883d0adad8c7beccf24aed65817\MSBuild.ni.exe
+ 2012-06-13 07:49 . 2012-06-13 07:49 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\67240ddde494b9cc05cd732ccd099668\MMCFxCommon.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 681984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\b78beede8a3c9720095dde4a4a162acc\Microsoft.WSMan.Management.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\83222514e209f186ad3a1c3794168bfd\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\a843956bb452503139683304de4cc8f6\Microsoft.Vsa.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\fda2f68162063c54d2e669e85de7dfb1\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 202752 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f91011762717be2cbc01f328a806c37c\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 232448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d506bcf38b89f1fb1cd41e01a7d94298\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 209920 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\cfaa030ecf4e968aecd91ddca97d650e\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 225280 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\cf9c858a00058974b41c67bbd68e45c4\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c8c461dbe6ab47066c7890e6546a8907\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 229888 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\ae1ab78737e051b7da756e37488ceb80\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\a3efaee751d02ee3b370cb285f4dad1f\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\9522b90955f403c723b945cf1b201cf5\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 499200 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\902522b8368cc353596494d2e51bd34c\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 270336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7f7571bd13b19a6ded4701c7b098e352\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 124928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\78c3f8bc571f6a9120f92a6a2e088240\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 495616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7521a6224a26851550e2c903367e7a3b\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 390656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\639acfa01f065f3a0f8d41648ed5e1bc\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\3adbee43498cd363d94881c0a329d519\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\07cc587a052474c710d61f40668619c5\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\c56d6513e4b239b1b1dbe29b0588321a\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 183296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\e4e2f16f3e758dbe859706649d590aa4\Microsoft.SqlServer.RegSvrEnum.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\d1158ce5327dd1620f837938643a75cf\Microsoft.SqlServer.CustomControls.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 289792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\b61f2a0aebc8c0dbeb45e1dffd90c670\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 347648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\a5f56d3ce12cfff8ebfa4d1a09352dd5\Microsoft.SqlServer.Management.UserSettings.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 567296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\9cb1e060447f3599cffc0abe19292b2d\Microsoft.SqlServer.Management.SDK.SqlStudio.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 258048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\80c908c8e640e8ce437462f1c7cf1606\Microsoft.SqlServer.DataStorage.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 172544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\7dde0bb190040e161d58ae27a768ceab\Microsoft.SqlServer.Management.SqlStudio.Controls.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 334848 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\7c691e7414d66f30295d150b4fe68b27\Microsoft.SqlServer.ConnectionInfo.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 318976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\7782ad4c96836ab164af3d3b28521aeb\Microsoft.SqlServer.SqlWmiManagement.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\70a9bc0852c3b3bd980fac094ddaa75a\Microsoft.SqlServer.ConnectionInfoExtended.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 543744 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\6b4fb3aca8348e1f03483258f1de767d\Microsoft.SqlServer.SmoExtended.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 765952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\61503fee75ae92af46c00840d0514d92\Microsoft.SqlServer.GridControl.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\4cc172a7830c2336d1c560ff2a7b3be9\Microsoft.SqlServer.Management.SDK.TaskForms.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 157696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\3ca7f1d62213c7e7960829a90cafd068\Microsoft.SqlServer.DlgGrid.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 126464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\0344b675b65337f0c0bd2e924b17992e\Microsoft.SqlServer.OlapEnum.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 235008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\92f7f1c771fc7c909cf0d4da4d558105\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 937472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\526a33ed761cce911ff85646c4a0ec80\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 318976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\4ac43f1030faa080a78faf6867448fc7\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 275456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\168f2d23b2652dd1a4d6eb7c8c008d51\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\fb0d102ca78bd05fe7064b9e6be30fc7\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b21fa6ff448b99a97319e18c166c03e2\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6c3fe42a14ac5b48ebd43be290973d24\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\2572e94f9d0b412cdc529c8d74fdb689\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\be59f62322f27b7494b5ce4487a1a325\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\795e07cc078bee3396f1d946f734c871\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 293376 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.NetEnterp#\c0f454959b458ecb523d3b7eaabbd055\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f04ccbbf5199d2b264f1b1175be44686\Microsoft.MediaCenter.Mheg.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f015188310f7613f819fcf032f98705a\Microsoft.MediaCenter.iTv.Media.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e29cbd30a31d3c8dae19eb17f70c4ec4\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\6dbd502a13b5e3caae0b1f2b4847612f\Microsoft.MediaCenter.Playback.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\514667153fd74307d21e7f50b79858c9\Microsoft.MediaCenter.Interop.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\409dae089f2e041343cff71f822cd505\Microsoft.MediaCenter.ITVVM.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\18367b9a0b9e9261d1d9e371230af87c\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\803188573fb19785a94284e097c48a67\Microsoft.ManagementConsole.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 399360 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\a92fbdf48c09de9c994cfea90f23af13\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 618496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\167a62317f33ae61ef5d7b70ba0421c3\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 244736 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\d68a27daca73749e4438a47e61643c3c\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\3151235c1c38db94fd44e3c6f290ff38\Microsoft.Build.Utilities.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 121344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\cf5e9b5d10682467a9e03358a6d6258f\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\0f233d0eb396065719e83ab573a72cc5\Microsoft.Build.Framework.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\2416af06edb993f98a751acb69f67016\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 423424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\9016fe60c2398dd6c3c8d8494e1a24b5\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 727040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Applicati#\877ba3d01d6bac7d76ec8a5fede67baf\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 726016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.AnalysisS#\0f3b3306cda966cd56c50f578e554817\Microsoft.AnalysisServices.Xmla.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\e47d5af186e9e00a5febd05b2eb29cb5\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\74e4adc90675c3b1365825c7e78b5ce9\Mcx2Dvcs.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\4a1f9a648a3928d42b77a91666d9aa8a\mcupdate.ni.exe
+ 2012-05-09 07:32 . 2012-05-09 07:32 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\40d70417c04f9ccb5fdecb5b9be5a6a3\mcstoredb.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4ae6ccc32dafb4e3765b9db05585bd48\mcplayerinterop.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\b0db345fd62a84c98fd8b0bf3c72e8bb\mcGlidHostObj.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\3fc113fe40d0145cd87afca2d107bf6d\MCESidebarCtrl.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bc5df15ee827e248dd6f819874a85718\EventViewer.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\584d419d4c837ea19f7f450a807b0273\ehRecObj.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\20c3505378a50f4859c9b2e7dcbb5fa2\ehiWUapi.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\2f9f48ad6496c9103043db1c21a651fd\ehiwmp.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\0955237aa3c1cb3a643248b8c58ec34c\ehiUserXp.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\7998173654fa518876cc97e37b86d465\ehiiTv.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\6c97aa6908f96ac9816ce74e4f6251ac\ehiExtens.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\a501747a95523297a8a1f119df8b1642\ehiBmlDataCarousel.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\4cc5d19703a5a63ba8cd89f98311ddcb\ehiActivScp.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\08c9aa18b306aa47ddc0ae4a63b05d04\ehExtHost.ni.exe
+ 2012-05-09 07:32 . 2012-05-09 07:32 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\ff7ef4caed03d6934669d1a39877a8ac\ehCIR.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\b7916689137fd0bc9ba1ba5a27e2a38a\CustomMarshalers.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\cc6e6febcd804604bf4d92d0eb8ec6ae\ComSvcConfig.ni.exe
+ 2012-05-09 07:31 . 2012-05-09 07:31 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\d18719c2df1334364cac199bb9c86adf\BDATunePIA.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\9d60139fdead64a892985181d663989f\WsatConfig.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\fce1e0893c078038a2f22353153b9e4c\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\7ce238d984b4974e2ae82ddfd5ebfbb6\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ffbaae26e17f35e5c1c5b03a2cf5292a\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fde3bfd75e1d0f4d8afe8ebf13ccb8a8\WindowsLive.Writer.BrowserControl.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f9f46926a89419725c8d7b8525a7b306\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f022aa80a5c8eca69450b1187f07b7a5\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ee87a488e85c3a656da0efd5fd8208db\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 374272 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e96edfefb96cdab36c6c6e5747080859\WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d6b49c30d38d1bff60f549615da1dad7\WindowsLive.Writer.SpellChecker.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d63ad8378fe857b79735b6c2d8145865\WindowsLive.Writer.Extensibility.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d5766bdde6d4aa61cd92652658c8a8dd\WindowsLive.Writer.Interop.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c528fe73dc8f7f0391c184f941132213\WindowsLive.Writer.Mshtml.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b5c46eed2f716f050cc6c93b1d37f720\WindowsLive.Writer.Api.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8074a319e5f58d21a0b05d36b6b19695\WindowsLive.Writer.Api.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7639020e998dfb01562ea08d8049b504\WindowsLive.Writer.Extensibility.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\73c3da8d2bf90db528367c96ae90bcc7\WindowsLive.Writer.FileDestinations.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7084d2cde6edadb9da03f6b6716b55c9\WindowsLive.Writer.FileDestinations.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\59d583a651c425e911fa4179624b1330\WindowsLive.Writer.Interop.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\50d632f6d970cea8d878cd0c9832235e\WindowsLive.Writer.Mshtml.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\50c0ee9beb3aecf16dac7ab2d0a59d66\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4791dce816b6649ce5e00e9b4386c886\WindowsLive.Writer.Instrumentation.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3a4371400ac49e29a124da07a3158731\WindowsLive.Writer.BrowserControl.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\32686b4c87cc5ecd58dd1b35022a80a5\WindowsLive.Writer.SpellChecker.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2039efd4072d8a1d620926aa813935a1\WindowsLive.Writer.Controls.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\11cb54ebac3de3b2430304fb595eed94\WindowsLive.Writer.HtmlParser.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\11254c35ffde72dfee136477b52e6fe9\WindowsLive.Writer.Controls.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\370cd385241d946872e88dda6227c8d6\WindowsLive.Client.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\1f9098fd6253b4b66e4a6726d6bc3ecb\WindowsLive.Client.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 198656 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\ea062a5debc79dd7084184751560c201\WindowsFormsIntegration.Design.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 198656 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b29fe59eacbb293bd520bbc5614761c0\WindowsFormsIntegration.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\9bfbf0613d3780e34d98333c7b381218\WindowsFormsIntegration.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\d8af9a65cf0ed85d47360796e2645a06\UIAutomationTypes.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\779b08c46960a1824503aa6f089673fa\UIAutomationClient.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\f3e052584df9c614407da662dd3c3df3\TaskScheduler.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\c4edf782e69aa24453554f8b6cb40773\TaskScheduler.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\64de6810023adccdc56ddae13bdd6b03\System.Xml.Linq.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\d75f0b1e2ea688466552da04fd805949\System.Web.Routing.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\06e4119a0a3484bb0ca667a16145ce74\System.Web.Routing.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\2b129372a27469195acbe3b6b81786ef\System.Web.RegularExpressions.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\5d6fdd022660b8ca4be19ff06ddfee7a\System.Web.Extensions.Design.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4f13c2c06fb97f6659473f02802b377b\System.Web.Extensions.Design.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\d084aa31b82c66eb83e40853ba961b48\System.Web.Entity.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bc239944bca7cc6b6ddb473259183c7d\System.Web.Entity.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\53ca1042189a64dcd1f8ff487922b749\System.Web.Entity.Design.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\3701488fb9e601ebe963db25b784d684\System.Web.Entity.Design.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a09cc9877f51f16a4610b702155e8b70\System.Web.DynamicData.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\0b8a9e120d8f557a9702229e3c64987c\System.Web.DynamicData.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c6aad1edcc51862ceb26b6b65dad1490\System.Web.Abstractions.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\5d95b9a6cee5a9b1aac34b5d33c721ba\System.Web.Abstractions.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5abddd1112204bd1e3347be519eaa28f\System.ServiceProcess.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\054fcff18035c210487b0888e6461192\System.Security.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ff4e90c5842525f7a7456639de090d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\0b5f082230e3486412e0fa333290e85a\System.Net.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\f1241239a9b8229f91ce55d230fad38c\System.Messaging.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\2b4d6976393bf5643a4ef2d8dffdf75b\System.Messaging.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\8280490a2939075b726fd051d9010cc0\System.Management.Instrumentation.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\a03191ed937f6c1dc827b53d94ea0176\System.IO.Log.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\100d39c2f8985cb93e26feef86ba5212\System.IdentityModel.Selectors.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.Wrapper.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\6b16664ac4ab46643c4a7fdd960ef9fb\System.Drawing.Design.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\55545e89f96539ef93375524d1145a6f\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4d73a7649876bb6e54a01ccbf235919b\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 689664 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlServ#\7ad858343df4d35cd393b6263608a70a\System.Data.SqlServerCe.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e36e03067b12bc35fcc3787dc81022c8\System.Data.Services.Design.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\5a29fff52e2c3d13ec15e8701027ab17\System.Data.Entity.Design.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\940f62a5d077405e0b324422afb6ff2c\System.Data.DataSetExtensions.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\d3325c6bced333a67122db7414c1fd1e\System.Configuration.Install.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\498d2033c60fe5b777cf923b71b25972\System.Configuration.Install.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\a90ec436f1d2c5cb0133a53c2e47d61a\System.AddIn.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\1ed79278fe139272e868e3a53d736f22\sysglobl.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 417792 c:\windows\assembly\NativeImages_v2.0.50727_32\SSISUpgrade\d6e784d1218073ae0b40bd7a3dcacd1b\SSISUpgrade.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 417792 c:\windows\assembly\NativeImages_v2.0.50727_32\SSISUpgrade\280698c5abb7fc90ad683454ad940291\SSISUpgrade.ni.exe
+ 2012-06-13 07:46 . 2012-06-13 07:46 317440 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbenchProject\adf95eaec834a4fd114f869f54f98b5f\SqlWorkbenchProject.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 317440 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbenchProject\83ebf0250f253152f13339ee06f8a605\SqlWorkbenchProject.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\1b0b19607668635281fa260707f4352f\SMSvcHost.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\f7d5b31f334ced015f8b58616f160163\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\SecurityAuditPolici#\2b9aa0cd9971fff78931f901c901f1e0\SecurityAuditPoliciesSnapIn.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 252928 c:\windows\assembly\NativeImages_v2.0.50727_32\RadLangSvc\ce2c0036db30557d6fc8d361bb6e2111\RadLangSvc.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 252928 c:\windows\assembly\NativeImages_v2.0.50727_32\RadLangSvc\3a45619563d36132bfebaa6c26789cb4\RadLangSvc.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae55e761d480fe15781156d1311a1837\PresentationFramework.Classic.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7df1f379457aa5f39183903d115b5479\PresentationFramework.Royale.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\496bc57a53989bb83ec58865fa34be1d\PresentationFramework.Luna.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 225792 c:\windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorerRepli#\e08305456b76368f688b8b69e7dd8e55\ObjectExplorerReplication.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 225792 c:\windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorerRepli#\baf9b3cb0ac84825225db86e6fbf0228\ObjectExplorerReplication.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\acfafa161ea232928cb02b01c50acf1c\napsnap.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\9e0dafde490fbb06e0624ad4e5355b58\napsnap.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\782ffccdf30881e1eb1236c3fd7e959b\napinit.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\0abec246c5ca6ec4858bfd3ab84da0ec\napinit.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\e0c40329b9cdd7f141a3702d79eb4bda\naphlpr.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 341504 c:\windows\assembly\NativeImages_v2.0.50727_32\msddsp\80a764df3edfe49a69a9868fb077d621\msddsp.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\74a8b6419deb005337a1e43ec2502134\MSBuild.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\9e8d56153e65d3cf74342c741126d396\MMCFxCommon.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1e03b7c2539c5376f0665a4aba04efbd\MMCFxCommon.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\070505350ec9daa3343b3cd2bc8cf59e\Microsoft.WSMan.Management.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 503808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ac501e56f01be92392f70ddc532d75c6\Microsoft.Windows.Design.Interaction.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 438784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\735dd6a64f22063c282e539f573fe4be\Microsoft.Windows.Design.Extensibility.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 353792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\38ce7be62f31ee80d4025cc7237ceed5\Microsoft.Windows.Design.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 198656 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f03cecda964a5a4462a66ee65a546a9c\Microsoft.VisualStudio.Tools.Applications.DesignTime.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e439c12c9e047a5252fc0870a0edad57\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e086f239540d80cdb3918d0edbe08663\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 602624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d918747605c9f89f5fc70e00a5b017d0\Microsoft.VisualStudio.Package.LanguageService.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d8d03042b4fba3e3cd5e59dce8fda349\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 159744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d80f6b34bcc4b8c293bd4953b44eff1b\Microsoft.VisualStudio.WizardFramework.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d7f1a24f4ab28ff9859120d65b72d688\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 577024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d69db41514cb97b726800277808e0978\Microsoft.VisualStudio.Shell.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 281088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d54ea6f5169bb87d9d01894e92b5fa7d\Microsoft.VisualStudio.TextManager.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d3d3ffda4ace48b6c4ed9a0faa84415f\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 373248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d13df80540e580f35cfc577a15a6edc0\Microsoft.VisualStudio.Shell.Interop.8.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 337408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cbaa2c3a4e91129440a784827d1d26bb\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 300032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ca5a922fedb5bbe26260aa5de946ce6d\Microsoft.VisualStudio.Tools.Applications.ProgrammingModel.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 513024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c92183fadab68e784ac06a599062bbe5\Microsoft.VisualStudio.Shell.Design.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 382464 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c4e9e73302bbb4d7975628ee9be6a720\Microsoft.VisualStudio.Data.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 876032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b089a9ec7d88fd6333863e7746e19d7c\Microsoft.VisualStudio.Shell.9.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 173568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b0497dfe5273ea1b4605ad699816e9e5\Microsoft.VisualStudio.TextTemplating.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 641024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\afb9da37cce4266d4e135937aeac7aa3\Microsoft.VisualStudio.Xaml.LanguageService.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 450048 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ab50e8a9e55bd33423f91c3b43f79553\Microsoft.VisualStudio.Debugger.Interop.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a9f6c9b07b5450581322eada5a828b89\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 801792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a41fa55e28c11c7f328da8a672a37118\Microsoft.VisualStudio.Tools.Applications.Project.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 159744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a0dbdf80f8c7ebcd50a50e7faa8852f6\Microsoft.VisualStudio.WizardFramework.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 861696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9eebffaf1b13e90361b0370d854167a7\Microsoft.VisualStudio.Modeling.Sdk.Shell.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 220160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9ab91d9b3c3e3068cac1c9a1eef736d4\Microsoft.VisualStudio.Configuration.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 861696 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\97271f0c67ec425f4aeb209b7f1c210e\Microsoft.VisualStudio.Modeling.Sdk.Shell.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 382464 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9456cb6a8fc201363c69c51a5a1d1543\Microsoft.VisualStudio.Data.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\913fce36cb050a091d692e8d090ee3ae\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 283136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b777a46e6636276cdb3f856b22ba928\Microsoft.VisualStudio.Data.Services.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 876032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\78e3f6c77af654a4124da7ef87445186\Microsoft.VisualStudio.Shell.9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\787f2a870ba9d0895455ccd8578f1a20\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\783a4e24531ee190eb826509f8cc2a45\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6c7ccf3f7fa572b45a31097585b9be71\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 306176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6a21c5048e1b991e721aebe75f297dcb\Microsoft.VisualStudio.OLE.Interop.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\652f4f7fb3e528fa00875d28524a730d\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 838144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\60da66bdb5084f1665e5d823f45ac19f\Microsoft.VisualStudio.Shell.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5cdbdb1386f3060d12c31352910d59d3\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 513024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5a5cc642eb1e90e633cea80add70e200\Microsoft.VisualStudio.Shell.Design.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 602624 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\53e3ec667dfe7244307b3e45287ea221\Microsoft.VisualStudio.Package.LanguageService.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4bcc1e99ebad37a7f013f37c7c72c278\Microsoft.VisualStudio.TextTemplating.VSHost.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4bc310439d3df869c82d0064c3e1180a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4b76c8d476ab52a28bbfa154c6f5ef07\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 124416 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4af48a3b9f6cd2f9a45955d8d481d135\Microsoft.VisualStudio.TextManager.Interop.8.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 220160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3f0f008b791c7ef5275d53be37b657fe\Microsoft.VisualStudio.Configuration.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 641024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3e53508d541ad115b2cd6777228682df\Microsoft.VisualStudio.Xaml.LanguageService.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3d016be961a0f7e1941e0ceca394ed9d\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\381929d20659524e3e0f56638f4de1b7\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 283136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\28a1eea4e6d3171f265ebfada3f18b8b\Microsoft.VisualStudio.Data.Services.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\18398ec695f2329ebc5ae12038528722\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1701cf92acbe16a9da38e2951929fd32\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 300032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\11ee07601143167b4104ad7ef32e4165\Microsoft.VisualStudio.Tools.Applications.ProgrammingModel.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 838144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\11ec31a30c7d302beb517a2fc49cf845\Microsoft.VisualStudio.Shell.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0fba30dc0f5aaf5e2c5d04495ec2aa3e\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 801792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\07609786ff7b31f6fbbaf5174a6e5b41\Microsoft.VisualStudio.Tools.Applications.Project.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\05d99588e8d50e942b25896235ec93df\Microsoft.VisualStudio.TextTemplating.VSHost.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\03aa5aec5353de57e3e5bc604cc8a293\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1e639225ba30d7f182b893ddacea506b\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 557568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ffa9c2dd492185aa76d374dc3dcf64f0\Microsoft.SqlServer.Management.SqlStudio.Explorer.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 118272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fda69a3df4aea8f490d5d59d46bcb655\Microsoft.SqlServer.Sqm.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 192512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f98fba3f13d9611cba43751a8ecb52ae\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 674304 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f5a6f2e9e18debab1fa091647250169b\Microsoft.SqlServer.Management.Controls.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 120320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f4532472e62b141a6d2a5aaa5da268ca\Microsoft.SqlServer.VSTAScriptingLib.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 165376 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f39f51bedfd3ae1e4b21eacbdfb4104a\Microsoft.SqlServer.DtsTransferProvider.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 288768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f1bf46b30bec0b1ee2e5d95fb0b42405\Microsoft.SqlServer.Management.CollectorTasks.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\edf7924bb4f42aa9cbdfc14aa2c9e4bd\Microsoft.SqlServer.Dts80.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 452608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ea02da517c6a3c783ca2df15a38c8637\Microsoft.SqlServer.Management.RegisteredServersUI.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e872a4648004c6a0940ba60e0e8bdaf5\Microsoft.SqlServer.VSTAScriptTaskPrx.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 122880 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e87217dc4757453257cb0dad82b725b5\Microsoft.SqlServer.Management.SqlStudio.Actions.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 139264 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e83bed41b87bb2dfd5fa5b607ff3e6dd\Microsoft.SqlServer.PipelineHost.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 183296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e34146d595a71a96083e1d52a6caf9ed\Microsoft.SqlServer.WebServiceTask.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 295424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e31d71017aeb8fc25e67163572c1ff75\Microsoft.SqlServer.TxScript.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 483840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d622cb20d3067f4ba2780b2ee76256c9\Microsoft.SqlServer.XmlSrc.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 403456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d313113c6950228c5addf4b1f5edd099\Microsoft.SqlServer.Management.SDK.TaskForms.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 263168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d0b655b9838b6bc0368f16f577e04cc6\Microsoft.SqlServer.Management.UserSettings.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 120320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ce399a40ca5e0cf806d7b4f8145cc43c\Microsoft.SqlServer.VSTAScriptingLib.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 470016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\cd9a3a5e7a5eefd75192a0a5d1c54ee9\Microsoft.SqlServer.Management.ResourceMonitorWidgets.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 202752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c8706228677c75525e1f33cf6424ef3b\Microsoft.SqlServer.Management.PSProvider.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 295936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c0c7c0e1684e03e1b5bde30da02727cd\Microsoft.SqlServer.TxScript.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 201216 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\bbac1dccef4f16dc754b7aac81ec7d0a\Microsoft.SqlServer.ActiveXScriptTaskUtil.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 999936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ba750b90aa33bbc5c498e3c4fa3df71a\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 674304 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b3411c47302d56ffdbc4e66cdb1a9058\Microsoft.SqlServer.Management.Controls.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 251904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b0ae0948042c70ed21505de9651704df\Microsoft.SqlServer.SqlWmiManagement.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 295424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b03c5fb209cf2466dcc6e43b9064248d\Microsoft.SqlServer.TxScript.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\af78b5f630f09be88f9df9665725aa14\Microsoft.SqlServer.DtsObjectExplorerUI.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ae3fe4422423630ff79a353fc9941751\Microsoft.SqlServer.Management.SqlStudio.ResourceMonitor.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 536576 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ada5b8a60a584a58e22ce6b0519e6964\Microsoft.SqlServer.MaintenancePlanTasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 144896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ad16cff9d412857c911efd85c75dc29b\Microsoft.SqlServer.ADONETDest.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 334336 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\acdd306aa11b5faf7d5f6cd3f35805c6\Microsoft.SqlServer.Management.SDK.SqlStudio.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 159232 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\aca44134efa180e206f53a080165db0c\Microsoft.SqlServer.DtsMsg.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a90e49c9edda907c7e63293084ea9578\Microsoft.SqlServer.Management.ResourceMonitoring.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 100352 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a7003a1ae5e619643868e1c23bc0c57f\Microsoft.SqlServer.Management.PSSnapins.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 121856 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a35791064e9b2d54dc5ad96bf7d0424a\Microsoft.SqlServer.VSTAScriptingLib.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 804352 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a31afc1b4e94e08b261d2dbf5315b2b9\Microsoft.SqlServer.Management.MaintenancePlanWizard.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 485888 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a15e5ad301f98b3f062f0e354e80a489\Microsoft.SqlServer.Msxml6_interop.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a115e5d1b59e21f5ef490bfb5416a9ab\Microsoft.SqlServer.Management.SqlStudio.ResourceMonitor.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 128000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9e3726a98f95b3b180a5b8257ad2942a\Microsoft.SqlServer.RegSvrEnum.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 118272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9dd159c2be30102b8ad398dd129857fc\Microsoft.SqlServer.ScriptTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9dcec0df772166b97f957c000fe2f575\Microsoft.SqlServer.SQLTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 371712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9ca025198187a2aae260bd97006c0b48\Microsoft.SqlServer.BulkInsertTaskConnections.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 220160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9b8ddf92d931821525d41fe046345ffd\Microsoft.SqlServer.TasksMigrationModules.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 934912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9b2fc7767e422bd9ae09dc7db85fa647\Microsoft.SqlServer.Management.RelationalEngineTasks.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 121856 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9925bad8d926beefb8ad49fd1c1fa1b8\Microsoft.SqlServer.VSTAScriptingLib.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\977678b4a3206c0bb3787e05467f57ce\Microsoft.SqlServer.Management.SqlStudio.Migration.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 751104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\973b9bf7b1a79f5b03bdf9bc955c1e58\Microsoft.SqlServer.ManagedDTS.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 403456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\967f5e8eff90521f0b0f27aec01c650f\Microsoft.SqlServer.Management.SDK.TaskForms.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 205312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\929a87811f3d867c0590b933debef21c\Microsoft.SqlServer.Management.RegisteredServers.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 190464 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\920ebc3ec60ee1468231656360644587\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 537088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8cbbb1a24dac171e096ed7d727d9e913\Microsoft.SqlServer.MaintenancePlanTasks.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 452608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8a9a27567e0c7bc63392c5fd60ef2b3d\Microsoft.SqlServer.Management.RegisteredServersUI.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 751104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\840275af21c8d2d7a232c73a662d9d62\Microsoft.SqlServer.ManagedDTS.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 137216 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7ffce040193e6b7035e644dcedc35f23\Microsoft.SqlServer.ConnectionInfoExtended.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 248320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7e83373d913d9b361ddeeaa325d2a436\Microsoft.SqlServer.ConnectionInfo.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\791683ad67de6d8c528930b84ec010df\Microsoft.SqlServer.DataStorage.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 192512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\789dbae3f2dda297f031e5b192399593\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 152576 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\779d679504243da02bfc56ffda1a3bd9\Microsoft.SqlServer.PipelineXML.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 164864 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\77675ce2ae1dbf324e45c7cf05ab49df\Microsoft.SqlServer.Management.SqlStudio.Controls.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 295936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\75e0eef369eedfdd20e88ee5ba8f6f8b\Microsoft.SqlServer.TxScript.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 128512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6fa8586f3c56cbb4ff25ee38bee04715\Microsoft.SqlServer.DTSPipelineWrap.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6dd0bc9e66fc8a8c45f87e130773d79a\Microsoft.SqlServer.DtsObjectExplorerUI.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6c8daeb1d75ecaad7a3fc55129493b63\Microsoft.SqlServer.MSMQTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 632320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\67660d78931529a5469e96c417a21559\Microsoft.SqlServer.BatchParser.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 122880 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\66f80d6a2b1645e7b65bb78b0e2f761f\Microsoft.SqlServer.Management.SqlStudio.Actions.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 107520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6599310ee0f0874e8366561ac9710daa\Microsoft.SqlServer.BulkInsertTask.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 630784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6134f5778b2e37462b5dcd5bc85913c4\Microsoft.SqlServer.SqlTools.VSIntegration.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 220160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5a10638e5e1c0bdd013670daf4802994\Microsoft.SqlServer.TasksMigrationModules.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 557568 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\58a10a599b91f0f13da624bca7ef4d4a\Microsoft.SqlServer.Management.SqlStudio.Explorer.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 263168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\586439e1f37391387a9dee4f2b2d2656\Microsoft.SqlServer.Management.UserSettings.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 347648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\548bcc8fa689b3f405c2245ab5a23945\Microsoft.SqlServer.TransferObjectsTask.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 850432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\531745914931f53b2b1ae224e17e5c95\Microsoft.SqlServer.Types.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 630784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\514d807a28c9c206e5f925c224329475\Microsoft.SqlServer.SqlTools.VSIntegration.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 532480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\444d39a7a1184d61a2d61ebac5d402fb\Microsoft.SqlServer.GridControl.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 251904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\42c8e8d461f70a303db8f39de0dbe416\Microsoft.SqlServer.Management.ResourceGovernorUITasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 221184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\42a98a49c5ccb6a09a85abd79701ed72\Microsoft.SqlServer.PackageFormatUpdate.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 656896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3da7114325d5647c832547b61afaa157\Microsoft.SqlServer.Management.ConnectionUI.Dialog.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3d7ca0a7adcdd6c6e16b0f54fa380df4\Microsoft.SqlServer.SQLServerHelperUtil.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3bf2bf7a470aeff142775b3524674863\Microsoft.SqlServer.XMLTask.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 384000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3a2dd7a981ad2290f39dce3448f6aa60\Microsoft.SqlServer.Management.Data.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\38a467a380a0033213f3f55d5e5554e0\Microsoft.SqlServer.VSTAScriptTaskPrx.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 125952 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\383e8b9e77f91f1deeb67a4030fbc508\Microsoft.SqlServer.Management.SqlStudio.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 334336 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\32e594e7fa1a49e5c76b8e4b86b2c323\Microsoft.SqlServer.Management.SDK.SqlStudio.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 103424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2922454560233a1c0737f352e2cee857\Microsoft.SqlServer.ADONETSrc.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 219648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\28eea10399c9b001ac9da4e6be490584\Microsoft.SqlServer.Management.Collector.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\238d6b6768cb285f75ea316e7f335a69\Microsoft.SqlServer.DataStorage.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 804352 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\215146741390b85d5ffb9bd6635fa9d0\Microsoft.SqlServer.Management.MaintenancePlanWizard.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 384000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\211a9a44a7000f33790c9b02b3348301\Microsoft.SqlServer.Management.Data.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 656896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1f13bafe2d93554dd01445052830f715\Microsoft.SqlServer.Management.ConnectionUI.Dialog.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 169984 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1d1faecee3d43d2ad9f0860bbd6c1cd8\Microsoft.SqlServer.TransferSqlServerObjectsTask.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 406016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\161d0796399dee3598cd8ba2485abe74\Microsoft.SqlServer.SmoExtended.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 164864 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\146ea3410e97bd09838a1c03d91e8663\Microsoft.SqlServer.Management.SqlStudio.Controls.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 125952 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\131c6ad9e5ff1f60a335682dccb4d1bf\Microsoft.SqlServer.Management.SqlStudio.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 934912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\113fe06cae814794d92a4d4cd6135aa8\Microsoft.SqlServer.Management.RelationalEngineTasks.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 139776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0f8750bc07caa63f5566a430ffe37d87\Microsoft.SqlServer.Management.ServerInformation.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 205312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0e5455ceb2cf0c1784556d38dc31b238\Microsoft.SqlServer.Management.RegisteredServers.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 999936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0e2e063f516afadeeee8bc87fa732c3d\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 139776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0bfc1bc4ce33cf47af5d1faaa08b854c\Microsoft.SqlServer.Management.ServerInformation.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 414208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0abb82b5ec9046708f9314723d242bdd\Microsoft.SqlServer.DTSRuntimeWrap.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 251904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0944deae4dd274b7634326accdbef6e3\Microsoft.SqlServer.Management.ResourceGovernorUITasks.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0740e417bbfbe0103d499e7f16f4d3d4\Microsoft.SqlServer.Management.ResourceMonitoring.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 470016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\05c0854e65402865dad4c065b5dad153\Microsoft.SqlServer.Management.ResourceMonitorWidgets.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 532480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\028d80ea4b185ff6eb96b550afe88052\Microsoft.SqlServer.GridControl.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\9e50f2fb3c8157aac9508d1484fca9c5\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 187392 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\8c10fabe7b25fbced5d8078481c9e9dc\Microsoft.Security.ApplicationId.PolicyManagement.PolicyManager.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 157184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\637695a13f044c7fc5a8d8779e5a64ae\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\498f876d5aef5febed9d62bf62e52e6a\Microsoft.Security.ApplicationId.Wizards.AutomaticRuleGenerationWizard.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 210944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\1cea81520a22da5621733cad33e75ac4\Microsoft.Security.ApplicationId.PolicyManagement.Cmdlets.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 705536 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\9c66406871f094ce4ffda25f11f71244\Microsoft.ReportingServices.DataExtensions.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d4c36b363fcd1ca494218e74ba606e99\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ba2ca86f5d270f493501848843d2f227\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\607324a312b1c6d7fbede8300e8cee91\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1f1185444c8a12ace85ba4c2d49f41f8\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\12715b7e3e89758161053520b57764b2\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\d74e5a924d753ca8bbf5068aaffecc25\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\b70bc4c745dd9a2e5e90e46bcedfe1dc\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\ac10628d091eae96da114ea9b313bd6d\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\78dd5caf7a28d0b1b122483818205cf0\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\6cf347fef7ae94efd5c2dc4bf89a13d7\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\51ad304ce7ae5aa72a6afdbce7661195\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\4c25ce49f67ece78f29b0677b336bb8f\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\1e7993c8982172e40c91c039b706b195\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\20ff7a71560e4becdc686b2c2ab73da5\Microsoft.Office.InfoPath.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 206848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\1f513d51b62f58e6152da6c69354c3e4\Microsoft.Office.InfoPath.Client.Internal.Host.Interop.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 375808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\169e78a00366d6c091b600b153466bba\Microsoft.Office.Interop.InfoPath.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 268800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\3b7e2d4895e100c465d87d12a7d4fab2\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 232960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\4b5b54382263da77572c3f0a0cedc5b4\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 232960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\491a52199158c640b0455068a7ce3d20\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 145408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MSXML\90cb4ddfdf66c84989e7d452c530a94a\Microsoft.MSXML.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\f077b7199d773c7812c04bb146014257\Microsoft.ManagementConsole.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\622b582866fca37f113bd97ae4c6d1f6\Microsoft.ManagementConsole.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 286208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\bfb3100618f589638a8a31ab52135ca4\Microsoft.GroupPolicy.Interop.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\86ffe35a29d7705487510251cdd0bff3\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 455168 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\855b99be5878283866f6977c6dc556e8\Microsoft.GroupPolicy.AdmTmplEditor.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 233472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Exception#\b9c54cc9608e6f2015a487ba53dbd32d\Microsoft.ExceptionMessageBox.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 233472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Exception#\0eb2c0b617db1f44af47c4888894ca86\Microsoft.ExceptionMessageBox.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 581120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\dba881d8b95e29bfa8a60fcad4472350\Microsoft.DatatransformationServices.DTSExecUI.Controls.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 581120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\c0762a95a89f0af59da6e1572325d4dd\Microsoft.DatatransformationServices.DTSExecUI.Controls.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 637440 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\bf8f514d2dbab94a4078500ba7ee7349\Microsoft.DataTransformationServices.VsIntegration.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 637440 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\1a3453392ddf8de9f910649e6a63f42b\Microsoft.DataTransformationServices.VsIntegration.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Data.Conn#\cca6c5a153f7bfb3fb15b751ebb06e4a\Microsoft.Data.ConnectionUI.Dialog.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Data.Conn#\5e3d67bad64d067f89968cb3b5482b78\Microsoft.Data.ConnectionUI.Dialog.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 343552 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\fffcd9e63e3068533e45ba0dde5d17be\Microsoft.BusinessData.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\7e59b3b84ca3c61adfc0dc74a65ea177\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\07e346ee0e3f7433f2de7a72fadd6713\Microsoft.Build.Utilities.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\432160eff3b1f9301c6a74c2e647e03d\Microsoft.Build.Engine.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\8297305de86377d0070a983d99a7f943\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\c5fb23456e58073dd64cd1b8686565a4\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 587776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\bd371ac78fe72393b9453b10e9e99d28\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 316928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\98f7f926a9f0ad41a3773a054cc4d3a8\Microsoft.ApplicationId.Framework.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 587776 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\39b197cc7e97cb5dfdb4047845fc1c8c\Microsoft.ApplicationId.RuleWizard.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 354304 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\f25db582c195cfc579875e9eaa098975\Microsoft.AnalysisServices.Graphing.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 354304 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\4835144271d713f0975e9d244e555aa7\Microsoft.AnalysisServices.Graphing.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 513024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\1d0b21eddf9eccc70661eed0766912fa\Microsoft.AnalysisServices.Xmla.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\541a5bb4d0f8490e506f885a4b435566\mcstoredb.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 169472 c:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\0bdaacbab99635ea9c9cd99e876a4f78\IsdiInterop.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 169472 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.VisioGraph_#\b9d366501b702ea8406699855159c257\Interop.VisioGraph_2_100.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 475648 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\8bc2e721cb34a40d113df609593d09c7\IAStorUtil.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 475648 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\1cb5f5d54ef9b24b90a51b006181fe71\IAStorUtil.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 219136 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\8ebe356967a2cad52f50500bb6920b3c\IAStorDataMgr.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\185067f9c70ccbccb4431063f9054b66\EventViewer.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\02577b78c6ed2f9bda301de888dccad8\EventViewer.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 276480 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE80\88e27448b6dfea3ea7a981d09906935a\EnvDTE80.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 573440 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE\5b8667c6746bd6dff357a27fe2d5aa3a\EnvDTE.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\5ae5c6732ef8e7115baaeb66fd69cdd2\ehRecObj.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\e8b728d109ffc97f13b5e6c2fd5e218e\ehiVidCtl.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\cbf3a07d3ab873b19f47d6a24f06c796\ehiProxy.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\5cc4a5672758f4732ef430b3431f47fc\ehiExtens.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a6b8eb80cfbdd927b2fa4ecb69fc0209\ehExtHost32.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\15b24807d7e7cae1db4f285f04cb82d7\ehExtHost32.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 570880 c:\windows\assembly\NativeImages_v2.0.50727_32\DTSMigrationWizard\ca221f41bde11616cd8ebe4cd9d1937f\DTSMigrationWizard.ni.exe
+ 2012-06-13 07:44 . 2012-06-13 07:44 570880 c:\windows\assembly\NativeImages_v2.0.50727_32\DTSMigrationWizard\98d06d59a5f478901e70f174baf860d2\DTSMigrationWizard.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 591360 c:\windows\assembly\NativeImages_v2.0.50727_32\DTSInstall\c2b64985159b96e13a7778fb99c610b6\DTSInstall.ni.exe
+ 2012-06-13 07:44 . 2012-06-13 07:44 591360 c:\windows\assembly\NativeImages_v2.0.50727_32\DTSInstall\8d0d4da8bc66df1f5016da293fe127c3\DTSInstall.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 170496 c:\windows\assembly\NativeImages_v2.0.50727_32\DTEParseMgd\96c342978f81735e67db762925ea21bd\DTEParseMgd.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMirroring\7a57f3d29d4ee2d0f9b55ff37c65eeba\DBMirroring.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMirroring\766130848ab7fae953b3aa047bf45b75\DBMirroring.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 808960 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMaintenanceProper#\47cb24ad4a19ad62aea2df2fc144e262\DBMaintenanceProperties.ni.dll

+ 2012-06-13 07:45 . 2012-06-13 07:45 808960 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMaintenanceProper#\2c879275ed19ed70f8bb78fd1630ab01\DBMaintenanceProperties.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 168960 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMaintenancePlanHi#\973c8277dc24c692c077f5ea0d20b255\DBMaintenancePlanHistory.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 168960 c:\windows\assembly\NativeImages_v2.0.50727_32\DBMaintenancePlanHi#\6cff019218c662cbbed24260cbd53c67\DBMaintenancePlanHistory.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 804864 c:\windows\assembly\NativeImages_v2.0.50727_32\DataProfileViewer\62707f0e18d592d9e23fa28b5f0c6190\DataProfileViewer.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 804864 c:\windows\assembly\NativeImages_v2.0.50727_32\DataProfileViewer\09a14c4c79f5b3916e3f360620302866\DataProfileViewer.ni.exe
+ 2012-06-13 07:45 . 2012-06-13 07:45 896000 c:\windows\assembly\NativeImages_v2.0.50727_32\DatabaseMailWizard\dd9719c293a458b41b5be21e2496b3c3\DatabaseMailWizard.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 896000 c:\windows\assembly\NativeImages_v2.0.50727_32\DatabaseMailWizard\6c2e00f873aa51461423d2cc9a8f00e2\DatabaseMailWizard.ni.exe
+ 2012-05-09 07:43 . 2012-05-09 07:43 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\626d0ac2f4ada682d7ca6c4ebf821469\CustomMarshalers.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\3912b69593af13d0922279a063e5af66\ComSvcConfig.ni.exe
+ 2012-05-09 07:40 . 2012-05-09 07:40 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e1c3540ffb669448747187f76c6ebe82\BDATunePIA.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 265728 c:\windows\assembly\NativeImages_v2.0.50727_32\ADODB\752c7787eaff0fead7d29e810f6d7f74\ADODB.ni.dll
+ 2012-06-13 04:34 . 2012-04-23 22:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-11-21 03:25 . 2010-11-21 03:25 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-09 04:11 . 2012-01-04 02:50 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-05-09 04:10 . 2012-02-10 23:29 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-07-11 07:02 . 2012-06-02 08:25 1129472 c:\windows\SysWOW64\wininet.dll
+ 2012-07-11 07:02 . 2012-06-02 08:26 1103872 c:\windows\SysWOW64\urlmon.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 1390080 c:\windows\SysWOW64\msxml6.dll
+ 2012-07-11 04:19 . 2012-06-06 05:05 1390080 c:\windows\SysWOW64\msxml6.dll
+ 2012-07-11 04:19 . 2012-06-06 05:05 1236992 c:\windows\SysWOW64\msxml3.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 1236992 c:\windows\SysWOW64\msxml3.dll
+ 2012-07-12 16:42 . 2012-07-12 16:42 9465032 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll
+ 2012-07-12 16:42 . 2012-07-12 16:42 1536712 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
+ 2012-07-11 07:02 . 2012-06-02 08:33 1800192 c:\windows\SysWOW64\jscript9.dll
+ 2012-07-11 07:02 . 2012-06-02 08:19 1793024 c:\windows\SysWOW64\iertutil.dll
+ 2012-07-11 07:02 . 2012-06-02 08:43 9737728 c:\windows\SysWOW64\ieframe.dll
- 2012-03-14 04:44 . 2012-02-10 05:38 1077248 c:\windows\SysWOW64\DWrite.dll
+ 2012-05-09 04:12 . 2012-03-03 05:31 1077248 c:\windows\SysWOW64\DWrite.dll
+ 2012-07-11 04:19 . 2012-04-24 04:36 1158656 c:\windows\SysWOW64\crypt32.dll
+ 2009-07-14 04:54 . 2012-07-12 16:42 2146304 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2012-07-11 07:02 . 2012-06-02 12:05 1392128 c:\windows\system32\wininet.dll
+ 2012-02-15 15:01 . 2012-02-15 15:01 4547944 c:\windows\system32\usbaaplrc.dll
+ 2012-07-11 07:02 . 2012-06-02 12:05 1346048 c:\windows\system32\urlmon.dll
- 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
+ 2012-05-09 04:10 . 2012-03-31 05:40 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
+ 2012-07-11 04:19 . 2012-06-06 06:06 1881600 c:\windows\system32\msxml3.dll
+ 2012-07-11 07:02 . 2012-06-02 12:12 2311680 c:\windows\system32\jscript9.dll
+ 2012-07-11 07:02 . 2012-06-02 11:59 2144768 c:\windows\system32\iertutil.dll
+ 2012-05-09 04:12 . 2012-03-03 06:35 1544704 c:\windows\system32\DWrite.dll
+ 2012-02-15 15:01 . 2012-02-15 15:01 4547944 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_amd64_neutral_c111aaecb61e9a2b\usbaaplrc.dll
+ 2012-05-09 04:10 . 2012-03-30 11:35 1918320 c:\windows\system32\drivers\tcpip.sys
+ 2012-07-11 04:19 . 2012-04-24 05:37 1462272 c:\windows\system32\crypt32.dll
+ 2012-07-11 04:19 . 2012-06-06 06:02 1133568 c:\windows\system32\cdosys.dll
- 2010-11-21 03:23 . 2010-11-21 03:23 1133568 c:\windows\system32\cdosys.dll
- 2009-07-14 04:45 . 2012-03-23 07:28 7745184 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2012-07-11 07:25 7745184 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-09-14 19:34 . 2012-05-27 12:41 2776248 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-09-15 02:44 . 2012-07-19 23:50 7005328 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-260843078-278039929-3275570884-1142-12288.dat
+ 2012-07-09 11:24 . 2012-07-10 17:49 7483628 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
+ 2012-01-19 12:14 . 2012-01-19 12:14 1372432 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 12:14 . 2012-01-19 12:14 6432552 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 12:51 . 2012-01-19 12:51 3827488 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
+ 2012-03-15 12:31 . 2012-03-15 12:31 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 1863976 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-25 14:52 . 2011-12-25 14:52 5201168 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.dll
+ 2011-04-25 08:56 . 2011-04-25 08:56 1749880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll
- 2011-04-28 15:06 . 2011-04-28 15:06 1749880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.DataVisualization.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 3512584 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 4971792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 1512712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
+ 2011-12-15 12:51 . 2011-12-15 12:51 9792768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2012-05-09 04:10 . 2012-02-10 23:29 2256152 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
- 2011-09-14 06:22 . 2011-03-29 22:32 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
+ 2012-06-13 04:35 . 2012-03-21 22:30 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
- 2012-02-15 04:31 . 2011-10-31 23:15 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2012-06-13 04:35 . 2012-03-21 22:30 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
- 2010-11-21 03:23 . 2010-11-21 03:23 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 9992464 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
- 2011-10-12 07:01 . 2011-07-08 22:31 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 1577232 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 1756432 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
+ 2012-01-19 12:14 . 2012-01-19 12:14 1372432 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 12:14 . 2012-01-19 12:14 6432552 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 12:14 . 2012-01-19 12:14 3792160 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2012-03-15 12:31 . 2012-03-15 12:31 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 1863976 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-25 13:39 . 2011-12-25 13:39 5231888 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
- 2011-04-28 15:06 . 2011-04-28 15:06 1749880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.dll
+ 2011-04-25 08:56 . 2011-04-25 08:56 1749880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 3512584 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 5202192 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-12-15 12:07 . 2011-12-15 12:07 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 1737496 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2012-06-13 04:35 . 2012-03-21 22:32 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2011-09-14 06:22 . 2011-03-29 22:33 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2012-02-15 04:31 . 2011-10-31 23:16 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-09 04:11 . 2012-01-04 02:51 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-06-13 04:35 . 2012-03-21 22:32 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-05-09 04:11 . 2012-01-04 02:51 5925136 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2011-10-12 07:01 . 2011-07-08 22:33 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-05-09 04:11 . 2012-01-04 02:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1372432 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 3512584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1863976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 6432552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-03-23 07:08 . 2012-03-23 07:08 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
- 2012-03-23 07:09 . 2012-03-23 07:09 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 5201168 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 3827488 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 4971792 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-13 07:20 . 2012-06-13 07:20 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-03-23 07:14 . 2012-03-23 07:14 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-04-27 14:16 . 2012-04-27 14:16 5231888 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 3792160 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 5202192 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-13 07:19 . 2012-06-13 07:19 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-03-23 07:13 . 2012-03-23 07:13 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-03-27 15:47 . 2012-03-27 15:47 4959232 c:\windows\Installer\7e9cc943.msp
+ 2012-04-19 08:59 . 2012-04-19 08:59 7712768 c:\windows\Installer\6c277.msi
+ 2012-05-17 06:58 . 2012-05-17 06:58 3462144 c:\windows\Installer\5659bc7a.msp
+ 2012-04-23 02:46 . 2012-04-23 02:46 1187328 c:\windows\Installer\5659bc65.msp
+ 2012-03-15 18:26 . 2012-03-15 18:26 4212736 c:\windows\Installer\5659bc5b.msp
+ 2012-06-28 14:44 . 2012-06-28 14:44 1146880 c:\windows\Installer\4d7ec058.msi
+ 2010-11-24 13:41 . 2010-11-24 13:41 2408960 c:\windows\Installer\4386198d.msp
+ 2010-11-24 12:56 . 2010-11-24 12:56 1150464 c:\windows\Installer\4386198c.msp
+ 2012-04-23 14:32 . 2012-04-23 14:32 3460096 c:\windows\Installer\3c3b2ac9.msp
+ 2012-03-15 17:12 . 2012-03-15 17:12 4968960 c:\windows\Installer\3c3b298f.msp
+ 2012-03-15 17:11 . 2012-03-15 17:11 1989632 c:\windows\Installer\3c3b2961.msp
+ 2012-06-20 05:29 . 2012-06-20 05:29 5262848 c:\windows\Installer\2c7af3b.msp
+ 2012-06-20 06:00 . 2012-06-20 06:00 3461120 c:\windows\Installer\2c7af17.msp
+ 2012-04-05 05:56 . 2012-04-05 05:56 2820096 c:\windows\Installer\2c7af01.msp
+ 2012-04-05 05:54 . 2012-04-05 05:54 8301056 c:\windows\Installer\2c7aeeb.msp
+ 2012-06-20 06:06 . 2012-06-20 06:06 1839104 c:\windows\Installer\2c7aec8.msp
+ 2012-01-22 14:20 . 2012-01-22 14:20 1707520 c:\windows\Installer\1b5a2138.msp
+ 2012-03-07 19:01 . 2012-03-07 19:01 1907712 c:\windows\Installer\1b5a211a.msp
+ 2012-04-01 20:27 . 2012-04-01 20:27 3463168 c:\windows\Installer\1b5a20eb.msp
+ 2012-02-17 07:50 . 2012-02-17 07:50 1236480 c:\windows\Installer\1b5a20ca.msp
+ 2012-03-21 09:57 . 2012-03-21 09:57 1591808 c:\windows\Installer\1b5a20ae.msp
- 2012-02-21 19:04 . 2012-03-14 07:01 1162592 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\visicon.exe
+ 2012-02-21 19:04 . 2012-07-11 07:05 1162592 c:\windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\visicon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2011-10-04 11:02 . 2012-03-14 07:00 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-10-04 11:02 . 2012-07-11 07:04 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_x86.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1303896 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\WindowsBase_amd64.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_x86.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 6346600 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationFramework_amd64.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 3545952 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_x86.dll
+ 2010-03-18 18:27 . 2010-03-18 18:27 3453792 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationCore_amd64.dll
+ 2008-09-11 03:07 . 2008-09-11 03:07 1916928 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\xerces_c_2_5_0_qb.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 1165672 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\sdksubscription.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 7033704 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbwps.dll
+ 2012-01-10 18:37 . 2012-01-10 18:37 1175912 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\qbupdate.exe
+ 2012-01-10 14:56 . 2012-01-10 14:56 5904216 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\intuitdataprotect.exe
+ 2010-10-22 22:55 . 2010-10-22 22:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004119750000000000000000F01FEC\14.0.6029\ACEWDAT.DLL
+ 2010-10-22 21:12 . 2010-10-22 21:12 5496688 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\IPEDITOR.DLL
+ 2011-01-13 00:33 . 2011-01-13 00:33 5867896 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\IPDESIGN.DLL
+ 2010-10-22 21:12 . 2010-10-22 21:12 1734000 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\INFOPATH.EXE
+ 2011-03-17 05:22 . 2011-03-17 05:22 4301184 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\GRAPH.EXE
+ 2010-10-22 22:55 . 2010-10-22 22:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACEWDAT.DLL
+ 2011-03-11 21:46 . 2011-03-11 21:46 2194312 c:\windows\Installer\$PatchCache$\Managed\00004119110000000000000000F01FEC\14.0.6029\ACECORE.DLL
+ 2012-05-09 07:35 . 2012-05-09 07:35 5269504 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\b163970232b7f893bb2a00d9d0a7eea1\WindowsBase.ni.dll
+ 2012-06-13 07:30 . 2012-06-13 07:30 5269504 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\58f7bfe1a502540bdedbc4bb0512a13c\WindowsBase.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\088fdaca4d3311f952d8efcd0a19adbc\UIAutomationClientsideProviders.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ed248c2d1ee1db3b58f695a83a6a546f\System.Xml.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 2447360 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\45533cd1677edd1d1e009617dbd8ecf2\System.Xaml.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1592832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\81b296f6f8d4b739cda1a0cbfff09c5f\System.WorkflowServices.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 1592832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\23ad0c493b385b4bdc7610f8064560cd\System.WorkflowServices.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 2884608 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\e70d654d0251aaa62d84c70a4654cc9e\System.Workflow.Runtime.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 5920256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\5601a4a4bf7da2014105f86dbe64b34e\System.Workflow.ComponentModel.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 5920256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\33cbd29b369caf70398f169a3b49bbba\System.Workflow.ComponentModel.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\53e732ce945cbe6e2b6f7da511fdf43a\System.Workflow.Activities.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\0582d634f5ff63bd2e8871f4c536bc67\System.Workflow.Activities.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 5644800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\a2d3296a65ec0548c3b36bd9d19835e0\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 5644800 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\07f6bc7c3be10cd3eca1cd177eed382f\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 2272256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\df0b564b1f0cf3ad328ee55e656ece76\System.Web.Services.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 2964480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\daf5c6ddab5ed9c55ddf6196e755ede5\System.Web.Mobile.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 2964480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\7955077779728772f154b084c3e8bd09\System.Web.Mobile.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 1098240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\deda54a881c68fe7f34a3a686a662c3c\System.Web.Extensions.Design.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 3796480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\d1a0ea5493e56b5dc9b2c46b67dbd17f\System.Web.Extensions.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 3796480 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\9db56b13a152b0b390f3b7ec83c8a396\System.Web.Extensions.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1098240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\38ddeb9743362ee7aeee9a5a332a60de\System.Web.Extensions.Design.ni.dll
+ 2012-06-13 07:51 . 2012-06-13 07:51 5617664 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\df07bafd593bd2dadda6266993e86edf\System.Web.DataVisualization.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 5617664 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\8798ca68a398b6dd6714273c0d976ed8\System.Web.DataVisualization.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 2733568 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\210cad978e3db9af3c5d1c39ed0b185c\System.Speech.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1904128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\65952afdf56db9b409fb241c88166e91\System.ServiceModel.Activities.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 1476608 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\59816bdeb0252cb2504a27f632a38827\System.ServiceModel.Web.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1561600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\2682673cd3a718546357b44e65b8e1db\System.ServiceModel.Discovery.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 3403776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\d76c50f5fbd8b11408b7aaf7a4c79f36\System.Runtime.Serialization.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 1346048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\c62d3d7a636dc3384678d55df27d5678\System.Runtime.DurableInstancing.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 1473024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\eada752f66beb2154ddabd8ddfd1b1a3\System.Printing.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 1473024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\857c2213815462a509946760e83fef26\System.Printing.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\c3fa1bb328ea892250567254b39f7b16\System.Management.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\7660a5ea9fbb868a9c2d22330a650238\System.IdentityModel.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 1096704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\7d38c29c28640f46388d06f1bd3d5fcc\System.EnterpriseServices.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 2305024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\b4704388a008c67a8727ab191abd7108\System.Drawing.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 2303488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\0430aa885e81d01b80eea74250f98697\System.Drawing.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\b854ffb57c5b50db567ce8e691035459\System.DirectoryServices.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\0ff293c84793f4af48ca7d08cd1e7d30\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 2401280 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\76b97cf7666716dd17243b30ed97d53a\System.Deployment.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 2401280 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\6ee01eaf4c75272730e0def8ceabe27b\System.Deployment.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 8580096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\475bd19de0048795d846f1e23d29cf6e\System.Data.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\d6531851a7cdd4aafa9b03a618153e4f\System.Data.SqlXml.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 2692096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\1a8b03d5516f28e6d834be9bdc29058e\System.Data.Services.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 1791488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\4988ae1cf1fd2fc52cf74ffb6a41c406\System.Data.Services.Client.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\92f813f796a9b1d5e30b3cf597dea4e7\System.Data.OracleClient.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 3380224 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\bf5f303568561e3f9e3d6347c18f0ef2\System.Data.Linq.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 1726976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\fd391fcea0168a226d3063ce179a5808\System.Data.Entity.Design.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1255424 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\8552825fe919cf8e06b1bb85d58326d2\System.Configuration.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 1002496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\f0d693d3a63629a0b1e10a67af64f905\System.ComponentModel.Composition.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 5681152 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\b5823db102d283c881e1569bf756eee8\System.Activities.ni.dll
+ 2012-06-13 07:32 . 2012-06-13 07:32 5054464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\f379730d95067b1448c95f7002174178\System.Activities.Presentation.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 5054464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\4524a8482abdf5867f6b12afe4cef981\System.Activities.Presentation.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 2072576 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\837b3c45d33e61c8ea7a56f878f5df1a\System.Activities.Core.Presentation.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 4235776 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\b9aa308552c9ad8a1d8301d06a854972\ReachFramework.ni.dll
+ 2012-06-13 07:32 . 2012-06-13 07:32 4235776 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\67018abd461ecf3411f876e90b731e11\ReachFramework.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 2063360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\c96451c3645bee71b444b4535b48c1d0\PresentationUI.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 2063360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\0497cd556f202c53ffa0978643e034fc\PresentationUI.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1890304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\f716ff3e34aeae4e71ac513d247728b6\PresentationBuildTasks.ni.dll
+ 2012-06-13 07:29 . 2012-06-13 07:29 2314752 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e6a76ff47898343421d1f17594ce4ed6\Microsoft.VisualBasic.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\c4ada6cfb071f3d7063e4acd179510e3\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-06-13 07:29 . 2012-06-13 07:29 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\b34660de4d6697d5cb709c0711a8031c\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6c48d9162e3dcefe2dabeab7d46182cb\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 2314752 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\33eb2b4ffdc35166bc1fd55af96c407f\Microsoft.VisualBasic.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1510400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\c2bf7638cb310e74a0a71649c7517ecf\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 3312640 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\19e7871ba5622ca546974456494d47a0\Microsoft.JScript.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 2009088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\3de15bf72da85d3df0f9574fd0a63414\Microsoft.CSharp.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 5997056 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\39a41f241af4bc83dbf2ade94c116489\Microsoft.Build.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 3805696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\d2becbc819cb4e35e9ced7dd66448de3\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 3805696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\19540e4b01f08b86f824f8541063398b\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 2518528 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\45a211eb4e7b416708fe466c35bccb3a\Microsoft.Build.Engine.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\e424c3234867efcb7c2080478df487b1\AspNetMMCExt.ni.dll
+ 2012-06-13 07:29 . 2012-06-13 07:29 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\acc2ae9fda1fc4ff54cda37159cf62ac\AspNetMMCExt.ni.dll
+ 2012-06-13 07:22 . 2012-06-13 07:22 3879936 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\eca1bc38b28d3caf12dc3f6469c2be90\WindowsBase.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 3879936 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\9264bd877ef1063b86ea51f9dd68b6ba\WindowsBase.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\110f2f927c1f816a1fb95b7b72cb4cbb\UIAutomationClientsideProviders.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 9091072 c:\windows\assembly\NativeImages_v4.0.30319_32\System\d9f2d9f4d4bda48670bdae6555fec6dd\System.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\27db9abf05348711baf8ce46589ea251\System.Xml.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\6e2e6c933b6f13a9bcac17c9a8350f83\System.Xaml.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 1211904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\997d5a719b7ab5bb06e3ba6bb745d94e\System.WorkflowServices.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 1211904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\7216dfbd39b8b178728419c2f67bd66c\System.WorkflowServices.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 1969152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\f87f285acedd27f896f1433a199f88af\System.Workflow.Runtime.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 4475904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\71aac589bd06495e67e4661cc66e7883\System.Workflow.ComponentModel.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 4475904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\520b95a1d0e5ec0692b238a142ab2bc4\System.Workflow.ComponentModel.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\f77c56e6881d6ed57691a61ae574df40\System.Workflow.Activities.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\bc23de5e2e5df5065d787f025a281c50\System.Workflow.Activities.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 4586496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\f23ccc22aa652b9f48897faee1349eb0\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 4586496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\cfc56ad7df7f6b4eb266502cd260b166\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1897472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\aea28d7d6bcfeb48d7968fc79cfaeb6c\System.Web.Services.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\9c6cd7dcff444415262806565de6a9bd\System.Web.Mobile.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\24c5bd19a15caa52e91146e0a6fa2ec7\System.Web.Mobile.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 3123200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\f9c4a5112cdbaae3832f1aba7f8201bd\System.Web.Extensions.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 3123200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\05c1a76150a89888f0eeb796ded985f2\System.Web.Extensions.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 4574720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\e8fe2c131b3559aa1985c52d0c974c1b\System.Web.DataVisualization.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 4574720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\2d12f93809926c7944aba1436bd78f0c\System.Web.DataVisualization.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 2010624 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\45e35b73b9ea4f8f8d8322353a292cf3\System.Speech.ni.dll
+ 2012-05-09 07:47 . 2012-05-09 07:47 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e381c27eac91a0bd146c35dfe6f691c8\System.ServiceModel.Discovery.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1051648 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8688f513ad20d17a0016ec05b3a3a03a\System.ServiceModel.Web.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\866abd583babf744f2c45d9e8b94ce26\System.ServiceModel.Activities.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ae8d0496e9f218406a2189e0fc2671a5\System.Runtime.Serialization.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\70ebcd277c36e23059b45c632d08fa4e\System.Runtime.DurableInstancing.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\7a080914a3cc8999514d7d968eec3ed1\System.Printing.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\6c0c6b144280f2110af736a5c1641127\System.Printing.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\aff6ed56e2b81aadea9fe208e2e50c24\System.Management.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\7b75991c6d82cb6f0e12dcffad3903ed\System.IdentityModel.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 1665536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\82a77e19afb11a0183333706b9590485\System.Drawing.ni.dll
+ 2012-06-13 07:22 . 2012-06-13 07:22 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\774be62ce5b089eb7118736d63a8b3e0\System.Drawing.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\a09a39d10875297d3868cbc0d0fb1628\System.DirectoryServices.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\ef752c6f7ab588ab4b7ca68612cf6f71\System.Deployment.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\bcf8ac0d92a63100b30d3f8e57ea42fa\System.Deployment.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\b49c3be360048968d7fe93a69bd648ca\System.Data.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\3c421366006d3a72674fc98707d4ed87\System.Data.SqlXml.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 2018304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\1215e151e54f86c9bd490b173ff4962a\System.Data.Services.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\3ff1b7aa338d807310169d1a5e9efa51\System.Data.Services.Client.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\987a0a9234e761ddadba62567ef698df\System.Data.OracleClient.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\5a20dacee7b52d2a29cbeda9ba7f2ca7\System.Data.Linq.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1408000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\510eef0ea36ca985167f338c9ee738b4\System.Data.Entity.Design.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 7053312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\a77b7b58c3a6b12d8e1d4862a5e4707c\System.Core.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 4120576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\9d9c2d0fc152d03221e1e3f032d070c9\System.Activities.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 3762688 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\e5ad4efcecfba6b253ed07708dd52b6c\System.Activities.Presentation.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 3762688 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\aea14cd2884321f20284c3df0e48ee07\System.Activities.Presentation.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 1551360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\a322111f93156b33ef3a97324ac54e5e\System.Activities.Core.Presentation.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 2908160 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\92584683569c3f1adfbe1236abe152a8\ReachFramework.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2908160 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\55de7833355ea5ec7a931dff54c90de1\ReachFramework.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1646592 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\b9d532c89fdf4f03a125207ee78af57e\PresentationUI.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1646592 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\4f58e08de7bf0b828a39706d8efdb7ea\PresentationUI.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1478144 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\edeaae12efa8e2b69fff42c66b6b80d2\PresentationBuildTasks.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\dab9c0c198c3556044f176f4b3bc91c2\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9b96c479f15f761c087a23076eef7d43\Microsoft.VisualBasic.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\89154df819c451dd12effe6b9861316f\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\805c0a6c2f99a9e5fe92b5fd67d7c675\Microsoft.VisualBasic.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\0052853758cadf8d419c3aa77e71356a\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\fee23e79021273af1da48686588eb3ce\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1126400 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\fb8b4ab37bd4358c34825cf71f62c68c\Microsoft.SqlServer.Management.Sdk.Sfc.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1501184 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\f8a5d53be32441b4312267ba848297e6\Microsoft.SqlServer.SqlEnum.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1186816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\d632215ead9cb6e633a0ac3ec0d8da73\Microsoft.SqlServer.Dmf.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 6436352 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\d39e4f6109e5e62fea044368ac8c39be\Microsoft.SqlServer.Smo.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1015296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\c4e327bed39eb8c47f4951e5bbc497d0\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1015296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.SqlServer#\2df9964323e74db36b25b11eea603538\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\1b711301291f49c5418be28bfb56e77c\Microsoft.JScript.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.DataTrans#\a4b76a768a236c57dd8a93260ea82c0b\Microsoft.DataTransformationServices.Controls.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.DataTrans#\9f5ef8214dbdb001d0b5f8a48afc60e9\Microsoft.DataTransformationServices.Controls.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\c96d1240da508c83314e19aa9bb17b97\Microsoft.CSharp.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 4243456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\8cea94b65a8c496a4b32cf619847258d\Microsoft.Build.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2868736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\d2c7973beffe44b9e92cc3bdb83ef44f\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 2868736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\2d723bd844cfcbe16a48d481ace7d908\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1929216 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\e6d9d443a2e5ee1cfc0455320f17e178\Microsoft.Build.Engine.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 1385984 c:\windows\assembly\NativeImages_v4.0.30319_32\DTSWizard\9449f0f007ad31926df38e3e0e63d787\DTSWizard.ni.exe
+ 2012-05-09 07:45 . 2012-05-09 07:45 1385984 c:\windows\assembly\NativeImages_v4.0.30319_32\DTSWizard\3394dd147476a41929c2cfca35700457\DTSWizard.ni.exe
+ 2012-05-09 07:27 . 2012-05-09 07:27 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\4bcc5a6e9e9d25e068fc304bd7eda6af\WindowsBase.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 1459712 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\783df1ee260d3df406fa80afa38502d4\UIAutomationClientsideProviders.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\24d1b7ccbedaa3602bae6a6acea9929e\System.Xml.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\70cc5e8a5a3372fe0b104c1b20392cd2\System.WorkflowServices.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\aa638ba79250284eb4af4adaa4a4117b\System.Workflow.Runtime.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\996dc2af3b9e5c111130935f298908c6\System.Workflow.ComponentModel.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\178797db84abae2eeaed835bd28ca52c\System.Workflow.Activities.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\a32734087cd0db5607d5744ca63235d7\System.Web.Services.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\af7689e8cbec5d2755497be23c30e293\System.Web.Mobile.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\768ea257d75839979b4efb2d49d653f6\System.Web.Extensions.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2c47bc5d426a7cf9ffef1425eda08184\System.Web.Extensions.Design.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\ca51f026916139f886519fdf6d6c73e9\System.Speech.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\56ee9b5f220583c1c7374a61ad904044\System.ServiceModel.Web.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\265531568722647aab229a2cec195b3d\System.Runtime.Serialization.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\2a02b172fa4cf3d93ce7388b67b2a199\System.Runtime.Remoting.ni.dll
+ 2012-06-13 07:39 . 2012-06-13 07:39 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\b964519964d302b4977e1380d8d15f1a\System.Printing.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 1472000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\fd4a8227569e64d657b80483da8ffe78\System.Management.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\d1f21a29e79e73b5401fae156f339f67\System.IdentityModel.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d50cde53634ccbb5e0231738784ff4b8\System.EnterpriseServices.ni.dll
+ 2012-06-13 07:38 . 2012-06-13 07:38 2318848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\222eb8aa336953a6b0216db2b0c4770d\System.Drawing.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 1230848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\39d16229a3d5c6e7c1594ef10758bf75\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\152ef61928f1c300fdad8fa6d5905880\System.DirectoryServices.ni.dll
+ 2012-06-13 07:38 . 2012-06-13 07:38 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\6e4e9b07f376d445df1718c0011fa99b\System.Deployment.ni.dll
+ 2012-05-09 07:28 . 2012-05-09 07:28 8681472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\ea1848ec07c70f3d3c3445f4fbdae87a\System.Data.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 3463680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\7f6f74f1cc0ea6c40a2d6707b12af818\System.Data.SqlXml.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\0679fe5f3f9164f499e50cdade962ba3\System.Data.Services.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\2e9de1acfb7974cad94b747442ca325f\System.Data.Services.Client.ni.dll
+ 2012-05-09 07:29 . 2012-05-09 07:29 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\97429a1c70c94c49850be3f944a32a2e\System.Data.OracleClient.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\2ec3d436b861d35c586b710a570e170d\System.Data.Linq.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\b7b5364bc524988f7ca5b8c20a24119d\System.Data.Entity.Design.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 3315200 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\766ce7ee1a2e4f2a85fd90e7572f5d53\System.Core.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\193d03ca60573c92f92d9b07fa5bc243\System.Configuration.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1530368 c:\windows\assembly\NativeImages_v2.0.50727_64\SrpUxSnapIn\78d5f2d52e06f6ea47b359bf4ceb7b65\SrpUxSnapIn.ni.dll
+ 2012-06-13 07:39 . 2012-06-13 07:39 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\1f88a3693c8ddd527a130aff49dc58b3\ReachFramework.ni.dll
+ 2012-06-13 07:39 . 2012-06-13 07:39 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\b91c32fab08ba62d8c7681cc596895be\PresentationUI.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 1884160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\4fbff79b8ebf082d08c0080923ff5036\PresentationBuildTasks.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\ac1ba76ed19d668ce53a74593f040453\Narrator.ni.exe
+ 2012-06-13 07:50 . 2012-06-13 07:50 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\df2557ab1b8e4389d846e13dc82eba57\MMCEx.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\61812970c4743b686a67f28687e1dcb6\MIGUIControls.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 1877504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\1dcc7a3940f5e4be8da3dd0b66bc38c0\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1586ee919f86130df9771cf9b8d95d3a\Microsoft.VisualBasic.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\28ba52bc122353647f1b547506e2df7c\Microsoft.Transactions.Bridge.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 1174016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\e61b2f653ddcb82c541d63cb06f871be\Microsoft.SqlServer.WizardFramework.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 1605632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\b238cbf46374ac8a0c883f5fc885a99d\Microsoft.SqlServer.Dmf.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 1731584 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\9892862bdea0574fda2a402485cd39f9\Microsoft.SqlServer.SqlEnum.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 8071680 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\4c1ede62c8890cc9c1b789e5a9664013\Microsoft.SqlServer.Smo.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 1564160 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\23e3f9dbd247973a26cb618268d085ad\Microsoft.SqlServer.Management.Sdk.Sfc.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 1095168 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\0828c3fab8020e4616a64ebc3ea73eec\Microsoft.SqlServer.BatchParser.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f5790625975320b1ffad63b476da9132\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ca7e936eed0de2436d87b2601ee3a20a\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6caa366471176a065a96d77e8ba01eeb\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3040e2de07177c0a6a66a49de61fdc59\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\91391297ea9428993774313f05e98dd2\Microsoft.Office.Tools.Word.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\6ecfa88a42ba7c5c3a4580cd479d0d21\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1093632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\0929a1a8f19d58cca0ff9bf5f9086dc1\Microsoft.Office.Tools.Common.v9.0.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c057be8bb6614cce013af3721fe34983\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b2afc0af3d89ae00e973b4e6e9db382c\Microsoft.MediaCenter.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\73bfbdccdc1b0ae87f70a0ec594fee3c\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\653e1ee01f10d658d52ca42e17e74283\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\260d83ee2128a3388051cf416d4450b0\Microsoft.MediaCenter.Shell.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 3213312 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\094f6a515ca31504f96b4bad5848d692\Microsoft.JScript.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\dac69844e6333484159a4cf544190906\Microsoft.Ink.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 5054976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.GroupPoli#\2dace3e1a3fbdd679501e1c7c868ac3e\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4b362e9e25c33e371f06403edec8849a\Microsoft.Build.Tasks.ni.dll
+ 2012-06-13 07:50 . 2012-06-13 07:50 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\33730d136a34d2f4e56a0322f49ee9b6\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\f1a0df6a86ceb708c5e50338f12b77ba\Microsoft.Build.Engine.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\6b727c7aa69ae3e04a869908bfbae696\Microsoft.Build.Engine.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\cc4844e7242c1e35d145bf2439f944c5\mcstore.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 4088320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\596902addad034f4df2caf291b12d61d\mcepg.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 1637888 c:\windows\assembly\NativeImages_v2.0.50727_64\EnvDTE\e59c87a6579a336e95bb71370a3ab8a6\EnvDTE.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\304d29f3ff53d45711c6cf4a0d8bedb7\ehiVidCtl.ni.dll
+ 2012-05-09 07:32 . 2012-05-09 07:32 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\0423915e377ec85d71ac216fafa77ab0\ehiProxy.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\efe77273cac25367cf55d17578517eb1\WindowsLive.Writer.Localization.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\95129e8b6ba2c9e94e68e96a295d7b56\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6ebb5ea06dabbcc1ec1ef87e3a6bf67a\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3f3727612fa0e5e518f0155a02311547\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\26f7accac90d9a4fdf9e3f680417676b\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1a32ab8a8f53dbd7c56a094aa7368a1b\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\154a86557f1ce0459512459955827531\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\00ece8bfa66daeab874a61037b0b8a54\WindowsLive.Writer.Localization.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\3b452cde57280624e1085699fe8beb03\UIAutomationClientsideProviders.ni.dll
+ 2012-05-09 07:24 . 2012-05-09 07:24 7967232 c:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\439862b007b2dd84127ff35af476f5ad\System.WorkflowServices.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\bfa1ffe928b4e3fd6701aabfee7df15e\System.Workflow.Runtime.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\88bfc62ac0195a8ae673c444a3339505\System.Workflow.Runtime.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\cfb739be21092d5b8f7b4fde529e6aaa\System.Workflow.ComponentModel.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0a7d29e1614521f3a87cd5a13e57f9f1\System.Workflow.ComponentModel.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\edac556f009c25b62ef1a040152e9cda\System.Workflow.Activities.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\a815fffab98375c1919df68b5b292725\System.Workflow.Activities.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 4525568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Form#\b956cdf30b6abf243cb3af5b92cf1c23\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 4525568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Form#\b0b7a22f9b4efacb0ff1bf85a1dae484\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\59a5af8e3ea07f7980e0476d2da234cd\System.Web.Services.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a90802e36dee6e10d9bf54832cbf549\System.Web.Mobile.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\0307caacafd3e157fc003ed4743c5e2e\System.Web.Mobile.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c45efc7ec92c1da8e67eb597559ec39c\System.Web.Extensions.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\04442376410587c6de88f4b84cc69b1a\System.Web.Extensions.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\83053c3eeb3255672d84c1ddc0ce8ef3\System.Speech.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d900f9ec12af9070d7c8f061a2b2618c\System.Printing.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\991dbe40be5b114ed705bb5b48e6b330\System.Printing.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1051136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\626ab4f2c2b4d1b6d85fcc8f1c293ee2\System.Management.Automation.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2ce8210219c7123610072357358df470\System.IdentityModel.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 1590784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\69f6e582cb79f107c61308b468c1a215\System.Drawing.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ef0d8a4790c24a3a091170958bc7b976\System.DirectoryServices.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\bf659f9bb758ac14ed7a37bdfe965849\System.Deployment.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 6611456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e9774272e9fc6ca49e6c616a31783040\System.Data.SqlXml.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\3285887b33030a7ce453573d3bed4e95\System.Data.Services.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\330d3ad45a00455b537047183e128def\System.Data.Services.Client.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\0f4e07fb8b1b7e7133a98f478856f70c\System.Data.OracleClient.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\2fe1658f05b0a96fe25c956a31d27b06\System.Data.Linq.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\51a2589d5ee1c9c40fb6c56391570f9e\System.Data.Entity.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 2297856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\bee6778ba9f7068dc7aef55f48a73d48\SrpUxSnapIn.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1351168 c:\windows\assembly\NativeImages_v2.0.50727_32\SrpUxSnapIn\0f05778da82962003762ac22f0ab4b91\SrpUxSnapIn.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 5337088 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlMgmt\43d56d99176e0b5bd728c2d34f7c866f\SqlMgmt.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 5337088 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlMgmt\3fe994e2d0ad1692d5f0b4d7fa0fe69a\SqlMgmt.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 2512896 c:\windows\assembly\NativeImages_v2.0.50727_32\SQLEditors\10ed310498ccfd20e824d31851c32dcb\SQLEditors.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 2512896 c:\windows\assembly\NativeImages_v2.0.50727_32\SQLEditors\0dd659093c3d762535e778931caaea1e\SQLEditors.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\87f73de6e080d37be93adfc7d5c31d7a\ReachFramework.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\305c4315c192a2964a312051caa5259e\ReachFramework.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\b935f8a4e6115d3eeb7bb293bf4b2257\PresentationUI.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\163517c8a195fb48f7ef6ee17c585bdb\PresentationUI.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b3f13707cbd5d48aabaa9ef5264c8a30\PresentationBuildTasks.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 4138496 c:\windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorer\f63411102cb8eff56f554ca9313cc772\ObjectExplorer.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 4138496 c:\windows\assembly\NativeImages_v2.0.50727_32\ObjectExplorer\2d98ee52cb52807776c10c2bea09c97d\ObjectExplorer.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\a96e05eaed77a88a7a495091ed8296dc\Narrator.ni.exe
+ 2012-06-13 07:47 . 2012-06-13 07:47 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\17add09c98fa34255142d42697db53df\Narrator.ni.exe
+ 2012-06-13 07:47 . 2012-06-13 07:47 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\21abde8efab609732b2ade3f05234e79\MMCEx.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\0310b6efd8cd8b1b90bb78303d014081\MMCEx.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\6e602986ed39fd1f9e3801ee96b63f41\MIGUIControls.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\0e7da0df83f0619e3b0e0a7d7ee05fa3\MIGUIControls.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 3152384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b69604c562997ce4a7a77669078748a6\Microsoft.Windows.Design.Markup.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 2857984 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\2e9ea806e5ccbc1816dc2944da1f185a\Microsoft.Windows.Design.Developer.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 3152384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\1acca719b1a2bcf4165a04497e3bc786\Microsoft.Windows.Design.Markup.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1515520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cf0f5f73ab2d16d00233a7b3fe1f52c5\Microsoft.VisualStudio.Modeling.Sdk.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1873920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a5117f497910029c7f27ac5bcc9ff829\Microsoft.VisualStudio.CommonIDE.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1515520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9f8c7116d9863b158365aac5c7f2260e\Microsoft.VisualStudio.Modeling.Sdk.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 2382848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\90b1f214db8b3a3dc5cf61eba81de3e5\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1338880 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\55d15f83218956a81d3349cfd6987f71\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.GraphObject.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1300992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0849dd848383994c63dc00278f64ddae\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 2382848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\074b30edefb64b5f7753f8cdbd5f6213\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1873920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\00d25b7317db77ff5c2ec2b1eaf69beb\Microsoft.VisualStudio.CommonIDE.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\dab0ad2d0f5da372a4947d3a1c7c07a9\Microsoft.VisualBasic.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cd9e47effec6549cdec61eb3aef99f7c\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 1251840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fa8546bb06d3b9e62950b59f3024eb9c\Microsoft.SqlServer.Rmo.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1164800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e3c0f64e35afface301d5b789b002c81\Microsoft.SqlServer.MaintenancePlanTasksUI.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1127424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ca3ded5852578ca889161a28c1e35e72\Microsoft.SqlServer.Management.Sdk.Sfc.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 3578368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\bb19b6c5aa3acb7c7edf24ca212c7e9a\Microsoft.SqlServer.Management.DataCollectionUITasks.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 4366336 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b7ee51de4e7c25292ff5954acf62966c\Microsoft.SqlServer.Management.DataTools.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 4366336 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a63e22eb62924ea52beac9e433280d6b\Microsoft.SqlServer.Management.DataTools.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 2014720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a349eafda035c1ff59ef9cdfe03bb364\Microsoft.SqlServer.Management.Dmf.UI.ni.dll
+ 2012-05-09 07:44 . 2012-05-09 07:44 1164800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8b45e4092ccbcd998dd7c3a19f1ce750\Microsoft.SqlServer.MaintenancePlanTasksUI.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 2014720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7dd163201977320a2614db3d80b32595\Microsoft.SqlServer.Management.Dmf.UI.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 1293824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\721337a1fe79d7d094c4195e846076a2\Microsoft.SqlServer.MaintenancePlanTasksUI.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 3478016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\63fa00ffb44f0596677e03e83e48130f\Microsoft.SqlServer.Replication.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 6428672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5f31622e4e135997c5e71957ecf35767\Microsoft.SqlServer.SqlParser.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1509888 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5acea91adf6a38cb88d7989a806341c8\Microsoft.SqlServer.SqlEnum.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1293824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\52792ccc5f005db5d0fb24c21ba4802c\Microsoft.SqlServer.MaintenancePlanTasksUI.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 6121984 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2a8635705e74c30d835d62a10d875487\Microsoft.SqlServer.Smo.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1248256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1721749b8b38f96b82d22dee45ca4b47\Microsoft.SqlServer.DataProfiler.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 9334272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\163c06c4891fa820a99e7688c361da46\Microsoft.SqlServer.Management.Reports.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 9334272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0c4bc97f2665808fd2aec9dd304f62e8\Microsoft.SqlServer.Management.Reports.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1128448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\05e91db258fab8b2acf47e8ffbe0faa3\Microsoft.SqlServer.Dmf.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 3578368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\001f3ae789a24c87de73d483fac2dc57\Microsoft.SqlServer.Management.DataCollectionUITasks.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 2786816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\f02963895a0cd7eede3ed082626e31c4\Microsoft.ReportingServices.MapWinControl.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 2786816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\d7e47d41115030f9914fea9c0703a5db\Microsoft.ReportingServices.MapWinControl.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 4864512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\c2b6a6c97515acab4726a739f7e289e3\Microsoft.ReportingServices.QueryDesigners.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 2316800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\7e814183a16f2d4749bd56f2171ede0f\Microsoft.ReportingServices.Diagnostics.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 4864512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\7d6a80833c476dee291efda2d7d756fa\Microsoft.ReportingServices.QueryDesigners.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 2316800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Reporting#\754df384c43c2c925bd9c7dfd2067f43\Microsoft.ReportingServices.Diagnostics.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d62bb06df2169fa249006539173d6b5f\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\99ae5f32cd1dc3618659bc3c77f2b2a9\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\870bb30c079ed5bc201057d71661601f\Microsoft.PowerShell.Editor.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7ee29045f76b1e9577bfc1e0fab723d8\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\77b5496d214dd5034294b058c0bb0e8d\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\72765e5fab12761eb6d3f58180fa34d7\Microsoft.PowerShell.Editor.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\ce074c5d4f3b91f86cd4e11b92475013\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\63513a219edd166209b039f0681f1d59\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\e7d10ebd969e4b355eb9c57ba8679cd0\Microsoft.Office.Interop.InfoPath.SemiTrust.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\b7c00af6c6bfa2788db4f10402f5329b\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\475d5bb4a3e4c7d44098b00a2136b144\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 2091520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\b48ffdea1a867ac5ce70c462aaf7887f\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 4752384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\b227b48172ab1f6aee0ccda880c4c6a7\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1564672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\802fedab669472617ec1f803abcf4e91\Microsoft.Office.BusinessApplications.Runtime.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 2091520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\7f635834340bea5f93572d8ab41355b5\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 3238400 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\68ae29c06463a7e956dbd4e6e1ab4cef\Microsoft.Office.BusinessData.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1564672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\5190887d5ed2ef28d1596fd2f48bd935\Microsoft.Office.BusinessApplications.Runtime.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 4752384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\48c93c9b5095c25bc4fde40f25c014ea\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2012-06-13 07:47 . 2012-06-13 07:47 3238400 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\2db98cd03e8f4be6c6b33bee3bdbfc30\Microsoft.Office.BusinessData.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\9ac798ce15e5c0336f43b624af7363ec\Microsoft.MediaCenter.UI.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ce1d10f94b40f054017865757552f2d\Microsoft.MediaCenter.UI.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\7fab1ec8f5ed6a55a8a73b2c590bd7cd\Microsoft.MediaCenter.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\0cb862d3708c15fe0f5c66d2a40cb074\Microsoft.MediaCenter.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 2335744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\e3d2577e00aef6bc9b3e235eb83634f3\Microsoft.JScript.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\89ebef016091d09d58c8a1066def8bcd\Microsoft.Ink.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4d381048e3b9c0914c0f72c6aa0a599d\Microsoft.Ink.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\efbe64bfafaaaec44b5c0e487c0b2c4a\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 4071424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.GroupPoli#\6a07260effa6857b0c16282969038b00\Microsoft.GroupPolicy.Reporting.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 2934272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\c5ffcb1bbadadf5703719bbf66ab5232\Microsoft.DataWarehouse.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 2934272 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\a894d46039543bb9ae298672f1632219\Microsoft.DataWarehouse.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 1211904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\fa91117c8cdab79ea1dcdcdce5916921\Microsoft.DataTransformationServices.Wizards.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 2189312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\f87ec21ba696dae4f93c93cd6d4eee36\Microsoft.DatatransformationServices.DataFlowUI.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 1211904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\f6e81ce21988024f564f6216d1ddde64\Microsoft.DataTransformationServices.Wizards.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 2189312 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\aa59b9c85823bf75c2e7e63e1a127c6f\Microsoft.DatatransformationServices.DataFlowUI.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 7190528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\9084a58af3734bb08ae898a35b059b1f\Microsoft.DataTransformationServices.Design.ni.dll
+ 2012-05-09 07:40 . 2012-05-09 07:40 1604096 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\66a43c001871ecccae0b58865a266db9\Microsoft.DataTransformationServices.Controls.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 7190528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\4cd0ba883af9565cc533ac603839a6ed\Microsoft.DataTransformationServices.Design.ni.dll
+ 2012-06-13 07:44 . 2012-06-13 07:44 1604096 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataTrans#\2c932e1bf4f71018c07b2cbbd3fb09fe\Microsoft.DataTransformationServices.Controls.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\81b8987ca8661d6af40ead6311c45724\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\52e05f8fa4314803ceab2befae2e0a39\Microsoft.Build.Tasks.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3893fa9a19b52dee8b2cc424840d5d08\Microsoft.Build.Tasks.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d2250044b1ecff755e26ed12f6d27cb\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6b66f52dbd8f87e53c3c9a1de7ca5bba\Microsoft.Build.Engine.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 2952192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\cf0497ec25ce869c1861dc67a99858d3\Microsoft.AnalysisServices.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 1390080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\5eaa4375edb7d07c8db0bcb91c6b444e\Microsoft.AnalysisServices.AdomdClient.ni.dll
+ 2012-06-13 07:46 . 2012-06-13 07:46 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\3a4e56a8d1075cf0af0619c383b3e592\mcstore.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\14defdf34097afaf302497a7d612aaaf\mcstore.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\69b8de21b08c3412422c5918399ed702\mcepg.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 7462400 c:\windows\assembly\NativeImages_v2.0.50727_32\DundasWinChart\da37ef33a7436839954231c177c499bc\DundasWinChart.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 7462400 c:\windows\assembly\NativeImages_v2.0.50727_32\DundasWinChart\2de63d6dd24647996c9881669ca98ff0\DundasWinChart.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 1013248 c:\windows\assembly\NativeImages_v2.0.50727_32\CopyDatabaseWizard\c1a6dedb72dd62487382408f65c1ee7e\CopyDatabaseWizard.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 1013248 c:\windows\assembly\NativeImages_v2.0.50727_32\CopyDatabaseWizard\65d1cf664899f10aa0a4d42eeffbb171\CopyDatabaseWizard.ni.exe
+ 2012-05-09 07:41 . 2012-05-09 07:41 1192448 c:\windows\assembly\NativeImages_v2.0.50727_32\ConnectionDlg\c25f1068ccc62b0ade4e39ec71ef2eb4\ConnectionDlg.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 1192448 c:\windows\assembly\NativeImages_v2.0.50727_32\ConnectionDlg\55ca3ccb9d90d1d4cb7609ed3eed73c1\ConnectionDlg.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 1428992 c:\windows\assembly\NativeImages_v2.0.50727_32\AppIDPackage\e6af84a22f1ba2f5f5fa168e22e2bb66\AppIDPackage.ni.dll
+ 2012-05-09 07:41 . 2012-05-09 07:41 1428992 c:\windows\assembly\NativeImages_v2.0.50727_32\AppIDPackage\d54fcb1f05ae78dd8a74ed09eb403cfd\AppIDPackage.ni.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-02-15 04:31 . 2011-10-31 23:16 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-09 04:11 . 2012-01-04 02:51 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-09-14 06:22 . 2011-03-29 22:33 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-13 04:35 . 2012-03-21 22:32 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-13 04:35 . 2012-03-21 22:32 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-05-09 04:10 . 2012-02-10 23:29 2256152 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
+ 2012-05-09 04:10 . 2012-02-10 23:29 3998208 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-09 04:11 . 2012-01-04 03:34 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-12 07:01 . 2011-07-08 22:31 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 1737496 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
- 2010-11-21 03:24 . 2010-11-21 03:24 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-09 04:10 . 2012-02-10 23:31 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-10-12 07:01 . 2011-07-08 22:33 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-09 04:11 . 2012-01-04 02:50 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-07-11 04:19 . 2012-06-09 04:41 12873728 c:\windows\SysWOW64\shell32.dll
+ 2012-07-11 07:02 . 2012-06-02 09:07 12314624 c:\windows\SysWOW64\mshtml.dll
+ 2009-07-14 04:54 . 2012-07-12 16:42 15122432 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 02:34 . 2012-07-11 07:12 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
- 2009-07-14 02:34 . 2012-03-14 07:06 10223616 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
+ 2012-07-11 04:19 . 2012-06-09 05:43 14172672 c:\windows\system32\shell32.dll
+ 2012-07-11 07:02 . 2012-06-02 12:49 17807360 c:\windows\system32\mshtml.dll
+ 2012-07-12 16:42 . 2012-07-12 16:42 12314312 c:\windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll
+ 2012-07-11 07:02 . 2012-06-02 12:17 10924032 c:\windows\system32\ieframe.dll
+ 2011-09-14 22:06 . 2012-07-20 00:55 24964496 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-260843078-278039929-3275570884-1142-8192.dat
+ 2011-09-14 22:06 . 2012-07-20 00:55 38820084 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-260843078-278039929-3275570884-1142-4096.dat
+ 2012-04-27 14:29 . 2012-04-27 14:29 25895424 c:\windows\Installer\b53b1.msi
+ 2012-01-19 18:20 . 2012-01-19 18:20 11997696 c:\windows\Installer\3c3b2ab4.msp
+ 2011-12-15 18:54 . 2011-12-15 18:54 39732736 c:\windows\Installer\3c3b2aa9.msp
+ 2012-03-15 17:09 . 2012-03-15 17:09 17165312 c:\windows\Installer\3c3b2a80.msp
+ 2012-05-09 07:02 . 2012-05-09 07:02 53217792 c:\windows\Installer\3c3b2a63.msp
+ 2012-03-15 17:11 . 2012-03-15 17:11 66812928 c:\windows\Installer\3c3b2978.msp
+ 2012-04-06 14:46 . 2012-04-06 14:46 49125888 c:\windows\Installer\344b6b2.msi
+ 2012-04-06 14:45 . 2012-04-06 14:45 11105280 c:\windows\Installer\344aacb.msi
+ 2012-04-06 14:45 . 2012-04-06 14:45 20396032 c:\windows\Installer\344aa60.msi
+ 2012-03-07 19:03 . 2012-03-07 19:03 23710208 c:\windows\Installer\1b5a2112.msp
+ 2012-05-09 13:08 . 2012-05-09 13:08 12962304 c:\windows\Installer\141951b.msi
+ 2012-01-10 18:37 . 2012-01-10 18:37 22429544 c:\windows\Installer\$PatchCache$\Managed\1D202E527E8DFA644B0B51D799399AE3\22.0.4006\sdkparse.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 11878912 c:\windows\assembly\NativeImages_v4.0.30319_64\System\f173aff5dc44aa81bf28f1db7eb9deab\System.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 17353216 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\881a54eb5836f5461b1a1eca9eabdcda\System.Windows.Forms.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 17352192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\37cc0c4438276426b838e47fb4b04847\System.Windows.Forms.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 15762944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\a78dca2fba2fa91fcc92a005cd232ff4\System.Web.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 15762944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\1c6ae640281959fa287e28265c2e05ba\System.Web.ni.dll
+ 2012-05-09 07:39 . 2012-05-09 07:39 24484864 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\bfdb523a936c8d5cc74e2e9461f8b39b\System.ServiceModel.ni.dll
+ 2012-06-13 07:31 . 2012-06-13 07:31 13294080 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\f9eb5d88596ac86448aea3e0a7bbcc10\System.Design.ni.dll
+ 2012-05-09 07:37 . 2012-05-09 07:37 13294080 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\38736e8f15a8bdce00ead5924c5da393\System.Design.ni.dll
+ 2012-05-09 07:38 . 2012-05-09 07:38 18433024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\718827d5900e70c4b20ec34dc195d86e\System.Data.Entity.ni.dll
+ 2012-05-09 07:35 . 2012-05-09 07:35 10420736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\f81d093b1c7e35e1c1a971701a8b3de1\System.Core.ni.dll
+ 2012-06-13 07:30 . 2012-06-13 07:30 24430592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a2e6f28514b6a08a3286e2e00e26cfa0\PresentationFramework.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 24430592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\8e9d69f5f03fd06bd7f5a208bdafaef1\PresentationFramework.ni.dll
+ 2012-06-13 07:30 . 2012-06-13 07:30 16015360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\c08098a47d8e0d0f753941a185379363\PresentationCore.ni.dll
+ 2012-05-09 07:36 . 2012-05-09 07:36 16015360 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\68ca575b6b84727e9b9890f412308dc9\PresentationCore.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 19355648 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\fc72d4cf3fd917a76f5e9838f4bbef08\mscorlib.ni.dll
+ 2012-06-13 07:23 . 2012-06-13 07:23 13197824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\4b22dad19a03b0a1cf7b70ff29518693\System.Windows.Forms.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 13196800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\2dfae0a07ef28da1f4f379d75f9466a5\System.Windows.Forms.ni.dll
+ 2012-06-13 07:48 . 2012-06-13 07:48 12078592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\a2f4ebd107137ad2126b18d77815ac6f\System.Web.ni.dll
+ 2012-05-09 07:45 . 2012-05-09 07:45 12078592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\3d3f175e35014e52240d9a2c6f554f69\System.Web.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\b6e582a8c9ae9e3f415a2c304784febf\System.ServiceModel.ni.dll
+ 2012-06-13 07:22 . 2012-06-13 07:22 11002880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\849e9c25404a60c88b5d690aa675fcb4\System.Design.ni.dll
+ 2012-05-09 07:08 . 2012-05-09 07:08 11002880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\372021c79cf0e4205d6a43e0c89378a3\System.Design.ni.dll
+ 2012-05-09 07:46 . 2012-05-09 07:46 13324288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\dade3ce531f3fa118c9b115696a5acfc\System.Data.Entity.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 18017792 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\708c3077f1462353567d73d6ec623bf2\PresentationFramework.ni.dll
+ 2012-06-13 07:23 . 2012-06-13 07:23 18017792 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\5e234618000edb585e4307e30a5eb085\PresentationFramework.ni.dll
+ 2012-05-09 07:10 . 2012-05-09 07:10 11522048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\60f381c0c745d5b63208773cd12b7377\PresentationCore.ni.dll
+ 2012-06-13 07:23 . 2012-06-13 07:23 11522048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\334f4a2b874af82700a37098b4b27e50\PresentationCore.ni.dll
+ 2012-05-09 07:07 . 2012-05-09 07:07 14414336 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 10624512 c:\windows\assembly\NativeImages_v2.0.50727_64\System\c40ec0f4cd203c880298f94c0427dd54\System.ni.dll
+ 2012-06-13 07:39 . 2012-06-13 07:39 17383424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\dc5bb74eefdbf954cdfb70dd534d5564\System.Windows.Forms.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\95f38e7485bbe2b73b6055c45196fedd\System.Web.ni.dll
+ 2012-05-09 07:31 . 2012-05-09 07:31 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\f74b2d1b8cf279ff6bfe479f79e70fe9\System.ServiceModel.ni.dll
+ 2012-05-09 07:33 . 2012-05-09 07:33 11900928 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\00c4a761d0a5cafc00f34d763fe76ac4\System.Management.Automation.ni.dll
+ 2012-06-13 07:40 . 2012-06-13 07:40 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\582144c0ee317038621aebc626187b56\System.Design.ni.dll
+ 2012-05-09 07:34 . 2012-05-09 07:34 13760000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\daaff9fe9c85fc171d426a3cb6766dbb\System.Data.Entity.ni.dll
+ 2012-06-13 07:39 . 2012-06-13 07:39 19198464 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\47054c4d5b7e522c21a9d57797410302\PresentationFramework.ni.dll
+ 2012-06-13 07:38 . 2012-06-13 07:38 16543232 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\3a9d13514a8c4c710fa5ce8e9b5393fe\PresentationCore.ni.dll
+ 2012-05-09 07:27 . 2012-05-09 07:27 15570944 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\f73f0a9c9a83dcd3ff428be509a7992f\mscorlib.ni.dll
+ 2012-06-13 07:49 . 2012-06-13 07:49 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\0c1f96a4136efe532bbb8eb91d3de300\ehshell.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 12433408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\90555968565afd59bce4b0974e9903bd\System.Windows.Forms.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 12436480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\1a690902e9a6293de228c16fab21e2f7\System.Web.ni.dll
+ 2012-05-09 07:43 . 2012-05-09 07:43 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\649766df70bab5885c1b74a1491d60cb\System.Design.ni.dll
+ 2012-05-09 07:42 . 2012-05-09 07:42 13179904 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlManagerUI\dea3e57f6ee6a322367e7989fc043a8a\SqlManagerUI.ni.dll
+ 2012-06-13 07:45 . 2012-06-13 07:45 13179904 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlManagerUI\48f8f0a71d1b5e919e3667d680d79fa3\SqlManagerUI.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
+ 2012-05-09 07:26 . 2012-05-09 07:26 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07f019692c382d588d3c6cb2da2a9ec5\PresentationFramework.ni.dll
+ 2012-05-09 07:25 . 2012-05-09 07:25 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\2d1fd350e9bc62ce659e5cbcfd555796\PresentationCore.ni.dll
+ 2012-06-13 07:41 . 2012-06-13 07:41 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
+ 2012-05-09 07:23 . 2012-05-09 07:23 11492864 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
+ 2012-04-03 07:50 . 2012-04-03 07:50 108784128 c:\windows\Installer\3bc90a8.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}"= "c:\program files (x86)\Swag_Bucks\prxtbSwag.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\BitTorrentBar\prxtbBitT.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}]
2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\Swag_Bucks\prxtbSwag.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files (x86)\BitTorrentBar\prxtbBitT.dll" [2011-05-09 176936]
"{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}"= "c:\program files (x86)\Swag_Bucks\prxtbSwag.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CLASSES_ROOT\clsid\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RCUI"="c:\program files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe" [2010-11-23 500992]
"RCHotKey"="c:\program files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe" [2010-11-23 38144]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
"Hotkey Utility"="c:\program files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe" [2011-01-19 620136]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"ViewPoint Updater"="c:\program files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe" [2011-10-19 105984]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
"AllShareAgent"="c:\program files (x86)\Samsung\AllShare\AllShareAgent.exe" [2012-03-02 285072]
"Monitor"="c:\program files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe" [2011-11-12 268640]
"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2012-01-10 2215768]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\shawn.goncalves\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]
Technician.lnk - c:\program files (x86)\RSS_BETA\LiveUpdate.exe [2011-9-14 802656]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-11-30 1120032]
Intuit Data Protect.lnk - c:\program files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe [2012-3-14 5961048]
QuickBooks Update Agent.lnk - c:\program files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2012-3-14 1175912]
QuickBooks_Standard_21.lnk - c:\program files (x86)\Intuit\QuickBooks 2009\QBW32.EXE [2012-3-14 1178984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SEP]
c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\WinLogoutNotifier.dll [BU]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-12 250056]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2009-11-30 319016]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-11-18 39464]
R3 FlyUsb;FLY Fusion;c:\windows\system32\DRIVERS\FlyUsb.sys [2011-11-12 24576]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 136176]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-27 113120]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [2011-08-02 22528]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [2010-08-11 1014624]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2012-07-13 53312]
R3 SimpleSlideShowServer;SimpleSlideShowServer;c:\program files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2012-03-02 27584]
R3 SolarWinds TFTP Server;SolarWinds TFTP Server;c:\program files (x86)\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe [2010-06-10 54784]
R3 SWVNIC;SonicWALL Virtual Miniport;c:\windows\system32\DRIVERS\swvnic.sys [2010-01-23 24600]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 tvnserver;TightVNC Server;c:\users\shawn.goncalves\AppData\Local\CrossLoop\tvnserver.exe [2010-07-21 814080]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-12-19 146736]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-09-14 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-03-24 25960]
S0 SymDS;Symantec Data Store;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMDS64.SYS [2011-11-16 451192]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMEFA64.SYS [2012-02-27 932472]
S1 BHDrvx64;BHDrvx64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20120711.012\BHDrvx64.sys [2012-06-20 1161376]
S1 IDSVia64;IDSVia64;c:\programdata\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20120719.002\IDSvia64.sys [2012-06-26 509088]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\Ironx64.SYS [2011-11-16 171128]
S1 SYMNETS;Symantec Network Security WFP Driver;c:\windows\system32\Drivers\SEP\0C01044D\0191.105\x64\SYMNETS.SYS [2012-03-19 386168]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2011-12-19 224048]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2011-12-19 130864]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 CrossLoopService;CrossLoop Service;c:\users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe [2012-01-06 569072]
S2 GREGService;GREGService;c:\program files (x86)\Gateway\Registration\GREGsvc.exe [2010-01-08 23584]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
S2 Live Updater Service;Live Updater Service;c:\program files\Gateway\Gateway Updater\UpdaterService.exe [2011-01-31 244624]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2012-07-13 375208]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [2011-09-16 15928]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-06-25 35344]
S2 QBVSS;QBIDPService;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [2012-01-10 1248256]
S2 SamsungAllShareV2.0;Samsung AllShare PC;c:\program files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe [2012-03-02 25504]
S2 SepMasterService;Symantec Endpoint Protection;c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe [2012-01-28 137208]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-24 378472]
S2 SWGVCSvc;SonicWALL Global VPN Client Service;c:\program files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe [2011-01-14 286504]
S2 SWIPsec;SonicWALL IPsec Driver;c:\windows\system32\Drivers\SWIPsec.sys [2011-01-14 100128]
S2 TvWksSvc;Vertical Wave Workstation Service;c:\program files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe [2011-08-04 130560]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S2 ViewPointUpgradeService;Vertical Wave ViewPoint Upgrade Service;c:\program files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe [2011-10-19 14336]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-07-02 138912]
S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2011-03-03 174184]
S3 NxDrv;SonicWALL NetExtender Adapter;c:\windows\system32\DRIVERS\NxDrv.sys [2009-10-21 24264]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-16 428136]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2011-12-19 165680]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 16:42]
.
2012-07-20 c:\windows\Tasks\Gateway Registration - Data Sending task.job
- c:\program files (x86)\Gateway\Registration\GREG.exe [2010-04-28 02:47]
.
2012-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 11:40]
.
2012-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-04-14 11:40]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-30 11660904]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1873256]
"SonicWALLNetExtender"="c:\program files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe" [2010-06-22 1103744]
"LogMeIn GUI"="c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe" [2011-09-16 57928]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://companyweb
mStart Page = hxxp://www.bing.com/?pc=MAGW
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: &ieSpell Options - c:\program files (x86)\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files (x86)\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - file://c:\program files (x86)\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files (x86)\ieSpell\wikipedia.HTM
Trusted Zone: comptelnetworks.local\sc
Trusted Zone: hrsaccount.com\www
Trusted Zone: ibanking-services.com\cibng
Trusted Zone: stumbleupon.com\www
TCP: Interfaces\{ECD07567-B620-4651-9A4A-C7CB86BEA1AB}: NameServer = 192.168.150.1
Handler: intu-help-qb5 - {867FCB77-9823-4cd6-8210-D85F968D466F} - c:\program files (x86)\Intuit\QuickBooks 2009\HelpAsyncPluggableProtocol.dll
DPF: {16F67783-7E72-4C39-99C4-4780A8335484} - hxxp://www.syncmyride.com/Own/Modules/UpdateCenter/applets/sync.cab
DPF: {5C709EEC-DDE1-4738-8E57-7564E2637891} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom1_2009.cab
DPF: {788539E8-002D-4E59-9089-40B694A99C9A} - hxxps://merchantaccount.quickbooks.com/sync/QBMASSyncCom2_2008.cab
FF - ProfilePath - c:\users\shawn.goncalves\AppData\Roaming\Mozilla\Firefox\Profiles\ejqucwnx.default\
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=2&q=
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
WebBrowser-{88C7F2AA-F93F-432C-8F0E-B7D85967A527} - (no file)
WebBrowser-{8BDEA9D6-6F62-45EB-8EE9-8A81AF0D2F94} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SepMasterService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe\" /s \"Symantec Endpoint Protection\" /m \"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\sms.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SmcService]
"ImagePath"="\"c:\program files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\Smc.exe\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Symantec\Symantec Endpoint Protection\CurrentVersion]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Juniper Networks\Common Files\dsNcService.exe
c:\program files (x86)\LeapFrog\LeapFrog Connect\CommandService.exe
c:\program files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\SysWOW64\RunDll32.exe
c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
c:\program files (x86)\RSS_BETA\Technician.exe
c:\windows\SysWOW64\DllHost.exe
.
**************************************************************************
.
Completion time: 2012-07-19 21:11:47 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-20 01:11
ComboFix2.txt 2012-07-16 15:03
ComboFix3.txt 2012-07-15 21:45
ComboFix4.txt 2012-03-30 14:07
.
Pre-Run: 748,215,468,032 bytes free
Post-Run: 748,005,974,016 bytes free
.
- - End Of File - - 13037EA2D3F52F55AC920B9BA3B0C75E
Upload was successful

#12 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 19 July 2012 - 09:06 PM

Shawn,

Looking better. :thumbup2:

FRST
Please download a NEW version of Farbar Recovery Scan Tool 64-Bit and save it to a flash drive (overwrite any older versions).

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.

- OR -

To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select US as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.

On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
[*]Select Command Prompt
[*]In the command window type in notepad and press Enter.
[*]The notepad opens. Under File menu select Open.
[*]Select "Computer" and find your flash drive letter and close the notepad.
[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
[*]The tool will start to run.
[*]When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.[/list]
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#13 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 24 July 2012 - 07:57 AM

Shawn,

It has been five days since my last post. Do you still need help?

If you do, please follow my previous instructions. :thumbup2:
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#14 Shawn Goncalves

Shawn Goncalves
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:01:24 AM

Posted 24 July 2012 - 08:43 AM

Sorry Jason, here it is

frst.txt
Scan result of Farbar Recovery Scan Tool Version: 20-07-2012 01
Ran by SYSTEM at 24-07-2012 09:33:54
Running from G:\
Windows 7 Professional Service Pack 1 (X64) OS Language: English(US)
The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11660904 2010-11-29] (Realtek Semiconductor)
HKLM\...\Run: [itype] "c:\Program Files\Microsoft IntelliType Pro\itype.exe" [1873256 2011-08-10] (Microsoft Corporation)
HKLM\...\Run: [SonicWALLNetExtender] C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEGui.exe -hideGUI -clearReboot [1103744 2010-06-22] (SonicWALL Inc.)
HKLM\...\Run: [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" [57928 2011-09-16] (LogMeIn, Inc.)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [37296 2012-03-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [Hotkey Utility] C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe [620136 2011-01-18] ()
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ViewPoint Updater] "C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpdater.exe" [105984 2011-10-19] (Vertical Communications, Inc.)
HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM-x32\...\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59240 2012-02-20] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2011-10-24] (Apple Inc.)
HKLM-x32\...\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Monitor] "C:\Program Files (x86)\LeapFrog\LeapFrog Connect\Monitor.exe" [268640 2011-11-12] (LeapFrog Enterprises, Inc.)
HKLM-x32\...\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup [2215768 2012-01-10] (Intuit Inc. All rights reserved.)
HKLM-x32\...\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [421736 2012-03-27] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [254696 2012-01-18] (Sun Microsystems, Inc.)
HKU\shawn.goncalves\...\Run: [RCUI] "C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCUI.exe" [500992 2010-11-23] (RingCentral, Inc.)
HKU\shawn.goncalves\...\Run: [RCHotKey] "C:\Program Files (x86)\RingCentral\RingCentral Call Controller\RCHotKey.exe" [38144 2010-11-23] (RingCentral, Inc.)
HKU\shawn.goncalves\...\Run: [tmikanp] rundll32 "C:\Users\shawn.goncalves\AppData\Local\tmikanp.dll",tmikanp [15872 2012-07-23] ()
Tcpip\..\Interfaces\{ECD07567-B620-4651-9A4A-C7CB86BEA1AB}: [NameServer]192.168.150.1
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\Intuit Data Protect.lnk
ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
Startup: C:\Users\All Users\Start Menu\Programs\Startup\QuickBooks_Standard_21.lnk
ShortcutTarget: QuickBooks_Standard_21.lnk -> C:\Program Files (x86)\Intuit\QuickBooks 2009\QBW32.EXE (Intuit Inc.)
Startup: C:\Users\shawn.goncalves\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\shawn.goncalves\Start Menu\Programs\Startup\Technician.lnk
ShortcutTarget: Technician.lnk -> C:\Program Files (x86)\RSS_BETA\LiveUpdate.exe (R.D.H., LLC)

==================== Services (Whitelisted) ======

2 CrossLoopService; "C:\Users\shawn.goncalves\AppData\Local\CrossLoop\CrossLoopService.exe" --service [569072 2012-01-06] (CrossLoop)
2 GREGService; C:\Program Files (x86)\Gateway\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
2 Live Updater Service; C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe [244624 2011-01-31] (Acer Incorporated)
2 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe" [375208 2012-07-13] (LogMeIn, Inc.)
2 LMIMaint; "C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe" [147368 2012-07-13] (LogMeIn, Inc.)
2 LogMeIn; "C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe" [407424 2011-09-16] (LogMeIn, Inc.)
2 SepMasterService; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection" /m "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\sms.dll" /prefetch:1 [167344 2012-04-18] (Symantec Corporation)
3 SmcService; "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\Smc.exe" /prefetch:1 [2601544 2012-04-19] (Symantec Corporation)
3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin64\snac64.exe [325040 2012-04-18] (Symantec Corporation)
3 SolarWinds TFTP Server; "C:\Program Files (x86)\SolarWinds\TFTPServer\SolarWinds TFTP Server.exe" [54784 2010-06-10] (SolarWinds)
2 SONICWALL_NetExtender; C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe [498560 2010-06-22] (SonicWALL Inc.)
2 SWGVCSvc; "C:\Program Files\SonicWALL\SonicWALL Global VPN Client\SWGVCSvc.exe" -regserver [286504 2011-01-14] (SonicWALL, Inc.)
3 Tenable Nessus; "C:\Program Files\Tenable\Nessus\nessus-service.exe" [11264 2011-02-25] (Tenable Network Security, Inc)
3 tvnserver; "C:\Users\shawn.goncalves\AppData\Local\CrossLoop\tvnserver.exe" -service [814080 2010-07-21] (GlavSoft LLC.)
2 TvWksSvc; "C:\Program Files (x86)\Common Files\Vertical\Wave\TvWksSvc.exe" [130560 2011-08-03] (Vertical Communications, Inc.)
2 UNS; "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe" [2656280 2011-01-31] (Intel Corporation)
2 ViewPointUpgradeService; "C:\Program Files (x86)\Vertical Wave\ViewPoint\ViewPointUpgradeService.exe" [14336 2011-10-19] (Vertical Communications, Inc.)
3 rpcapd; "C:\Program Files (x86)\WinPcap\rpcapd.exe" -d -f "C:\Program Files (x86)\WinPcap\rpcapd.ini" [x]

========================== Drivers (Whitelisted) =============

1 BHDrvx64; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20120711.012\BHDrvx64.sys [1161376 2012-06-19] (Symantec Corporation)
1 DNE; C:\Windows\System32\DRIVERS\dnelwf64.sys [131672 2010-12-06] (Deterministic Networks, Inc.)
1 eeCtrl; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-06-13] (Symantec Corporation)
3 EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-07-02] (Symantec Corporation)
3 FlyUsb; C:\Windows\System32\Drivers\FlyUsb.sys [24576 2011-11-12] (LeapFrog)
1 IDSVia64; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20120722.001\IDSvia64.sys [509088 2012-06-26] (Symantec Corporation)
2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [15928 2011-09-16] (LogMeIn, Inc.)
3 lmimirr; C:\Windows\System32\Drivers\lmimirr.sys [11552 2011-09-16] (LogMeIn, Inc.)
2 LMIRfsDriver; C:\Windows\System32\Drivers\LMIRfsDriver.sys [72216 2011-09-16] (LogMeIn, Inc.)
3 NAVENG; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20120723.034\ENG64.SYS [120440 2012-07-02] (Symantec Corporation)
3 NAVEX15; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20120723.034\EX64.SYS [2068600 2012-07-02] (Symantec Corporation)
2 NPF; C:\Windows\System32\Drivers\NPF.sys [35344 2010-06-25] (CACE Technologies, Inc.)
3 NxDrv; C:\Windows\System32\Drivers\NxDrv.sys [24264 2009-10-21] (SonicWALL Inc.)
3 PSSDK42; C:\Windows\System32\Drivers\PSSDK42.sys [53312 2012-07-13] (microOLAP Technologies LTD)
1 SRTSP; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\SRTSP64.SYS [678008 2012-03-06] (Symantec Corporation)
1 SRTSPX; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\SRTSPX64.SYS [39032 2012-03-06] (Symantec Corporation)
2 SWIPsec; C:\Windows\System32\Drivers\SWIPsec.sys [100128 2011-01-14] (SonicWALL, Inc.)
3 SWVNIC; C:\Windows\System32\Drivers\SWVNIC.sys [24600 2010-01-23] (SonicWALL, Inc.)
0 SymDS; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\SYMDS64.SYS [451192 2011-11-15] (Symantec Corporation)
0 SymEFA; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\SYMEFA64.SYS [932472 2012-02-26] (Symantec Corporation)
3 SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [175736 2012-06-13] (Symantec Corporation)
1 SymIRON; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\Ironx64.SYS [171128 2011-11-15] (Symantec Corporation)
1 SYMNETS; C:\Windows\System32\Drivers\SEP\0C01044D\0191.105\x64\SYMNETS.SYS [386168 2012-03-18] (Symantec Corporation)
3 catchme; \??\C:\ComboFix\catchme.sys [x]
4 LMIRfsClientNP; [x]

========================== NetSvcs (Whitelisted) ===========


============ One Month Created Files and Folders ==============

2012-07-23 11:22 - 2012-07-23 11:22 - 00015872 ____A C:\Users\shawn.goncalves\AppData\Local\tmikanp.dll
2012-07-23 11:22 - 2012-07-23 11:22 - 00014848 ____A C:\Users\shawn.goncalves\0.8746796126581879.exe
2012-07-19 17:11 - 2012-07-19 17:15 - 00411164 ____A C:\ComboFix.txt
2012-07-19 10:44 - 2012-07-19 10:44 - 00153418 ____A C:\Users\shawn.goncalves\Downloads\Extras.Txt
2012-07-19 10:43 - 2012-07-19 10:43 - 00210728 ____A C:\Users\shawn.goncalves\Downloads\OTL.Txt
2012-07-19 09:09 - 2012-07-19 09:22 - 00000000 ____D C:\Users\shawn.goncalves\Documents\Internal VA Report
2012-07-19 09:03 - 2012-07-19 09:02 - 00471266 ____N C:\Users\shawn.goncalves\Documents\Internal VA Report.zip
2012-07-16 07:40 - 2012-07-16 07:40 - 00011383 ____A C:\Users\shawn.goncalves\Desktop\SEP-Log.csv
2012-07-16 07:11 - 2012-07-16 07:39 - 19388911 ____A C:\Users\shawn.goncalves\Desktop\SEP Log.csv
2012-07-15 12:45 - 2012-07-19 16:40 - 04582475 ____R (Swearware) C:\Users\shawn.goncalves\Downloads\ComboFix.exe
2012-07-12 10:30 - 2012-07-12 10:29 - 02795753 ____N C:\Users\shawn.goncalves\Documents\packet-c.cap
2012-07-11 03:36 - 2012-07-11 03:36 - 00294216 ____A C:\Users\shawn.goncalves\Desktop\gmer.zip
2012-07-11 03:36 - 2012-07-11 03:36 - 00000000 ____D C:\Users\shawn.goncalves\Desktop\gmer
2012-07-11 03:35 - 2012-07-11 03:35 - 00302592 ____A C:\Users\shawn.goncalves\Downloads\xdm4keeb.exe
2012-07-11 03:33 - 2012-07-11 03:33 - 00012199 ____A C:\Users\shawn.goncalves\Desktop\Attach.txt
2012-07-11 03:32 - 2012-07-11 03:33 - 00033617 ____A C:\Users\shawn.goncalves\Desktop\DDS.txt
2012-07-11 03:26 - 2012-07-11 03:26 - 00050477 ____A C:\Users\shawn.goncalves\Downloads\Defogger.exe
2012-07-11 03:26 - 2012-07-11 03:26 - 00000492 ____A C:\Users\shawn.goncalves\Desktop\defogger_disable.log
2012-07-11 03:26 - 2012-07-11 03:26 - 00000000 ____A C:\Users\shawn.goncalves\defogger_reenable
2012-07-10 23:06 - 2012-06-11 19:08 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-07-10 23:02 - 2012-06-02 04:49 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-07-10 23:02 - 2012-06-02 04:17 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-07-10 23:02 - 2012-06-02 04:12 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-07-10 23:02 - 2012-06-02 04:05 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-07-10 23:02 - 2012-06-02 04:05 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-07-10 23:02 - 2012-06-02 04:04 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-07-10 23:02 - 2012-06-02 04:04 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-07-10 23:02 - 2012-06-02 04:03 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-07-10 23:02 - 2012-06-02 04:01 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-07-10 23:02 - 2012-06-02 04:00 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-07-10 23:02 - 2012-06-02 03:59 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-07-10 23:02 - 2012-06-02 03:57 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-07-10 23:02 - 2012-06-02 03:57 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-07-10 23:02 - 2012-06-02 03:54 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-07-10 23:02 - 2012-06-02 01:07 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-07-10 23:02 - 2012-06-02 00:43 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-07-10 23:02 - 2012-06-02 00:33 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-07-10 23:02 - 2012-06-02 00:26 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-07-10 23:02 - 2012-06-02 00:25 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-07-10 23:02 - 2012-06-02 00:25 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-07-10 23:02 - 2012-06-02 00:23 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-07-10 23:02 - 2012-06-02 00:21 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-07-10 23:02 - 2012-06-02 00:20 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-07-10 23:02 - 2012-06-02 00:19 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-07-10 23:02 - 2012-06-02 00:19 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-07-10 23:02 - 2012-06-02 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-07-10 23:02 - 2012-06-02 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-07-10 23:02 - 2012-06-02 00:14 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-07-10 20:19 - 2012-06-08 21:43 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-07-10 20:19 - 2012-06-08 20:41 - 12873728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-07-10 20:19 - 2012-06-05 22:06 - 02004480 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2012-07-10 20:19 - 2012-06-05 22:06 - 01881600 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2012-07-10 20:19 - 2012-06-05 22:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2012-07-10 20:19 - 2012-06-05 21:05 - 01390080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2012-07-10 20:19 - 2012-06-05 21:05 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2012-07-10 20:19 - 2012-06-05 21:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2012-07-10 20:19 - 2012-06-01 21:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2012-07-10 20:19 - 2012-06-01 21:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2012-07-10 20:19 - 2012-06-01 21:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2012-07-10 20:19 - 2012-06-01 21:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2012-07-10 20:19 - 2012-06-01 21:44 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2012-07-10 20:19 - 2012-06-01 20:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2012-07-10 20:19 - 2012-06-01 20:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2012-07-10 20:19 - 2012-06-01 20:39 - 00219136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2012-07-10 20:19 - 2012-06-01 20:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2012-07-10 20:19 - 2012-04-23 21:37 - 01462272 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2012-07-10 20:19 - 2012-04-23 21:37 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2012-07-10 20:19 - 2012-04-23 21:37 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2012-07-10 20:19 - 2012-04-23 20:36 - 01158656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2012-07-10 20:19 - 2012-04-23 20:36 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2012-07-10 20:19 - 2012-04-23 20:36 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2012-07-10 20:19 - 2010-06-25 19:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2012-07-10 20:19 - 2010-06-25 19:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2012-07-10 11:46 - 2012-07-10 11:50 - 00034155 ____A C:\Users\shawn.goncalves\Desktop\Result.txt
2012-07-10 11:45 - 2012-07-10 11:46 - 00403231 ____A C:\Users\shawn.goncalves\Downloads\minitoolbox.exe
2012-07-10 11:42 - 2012-07-10 12:04 - 00005478 ____A C:\Users\shawn.goncalves\Desktop\aswMBR.txt
2012-07-10 11:42 - 2012-07-10 12:04 - 00000512 ____A C:\Users\shawn.goncalves\Desktop\MBR.dat
2012-07-10 10:30 - 2012-07-10 10:34 - 00023699 ____A C:\Users\shawn.goncalves\Downloads\FRST.txt
2012-07-10 10:29 - 2012-07-10 10:30 - 01434401 ____A (Farbar) C:\Users\shawn.goncalves\Downloads\FRST64.exe
2012-07-10 10:28 - 2012-07-10 10:34 - 00000000 ____D C:\FRST
2012-07-10 10:11 - 2012-07-10 10:11 - 00000000 ____D C:\Users\shawn.goncalves\AppData\Roaming\SPE
2012-07-10 08:43 - 2012-07-10 08:43 - 05323204 ____A C:\Users\shawn.goncalves\Documents\DialingExtension5201.zip
2012-07-09 03:35 - 2012-07-09 03:35 - 607829916 ____A C:\Windows\MEMORY.DMP
2012-07-09 02:57 - 2012-07-09 02:57 - 00000000 __SHD C:\Windows\SysWOW64\%APPDATA%
2012-07-05 09:52 - 2012-07-05 10:57 - 00450560 ____A C:\Users\shawn.goncalves\Desktop\autowhitelist.mdb
2012-07-05 04:40 - 2012-07-12 11:20 - 00024576 ____A C:\Users\shawn.goncalves\Desktop\Book1.xls
2012-07-03 09:07 - 2012-07-03 09:08 - 00000000 ____D C:\Users\shawn.goncalves\Desktop\Merri
2012-06-28 08:47 - 2012-06-28 08:47 - 00000000 ____D C:\Users\shawn.goncalves\AppData\Local\{C08F0DAA-BCC5-4AB0-B011-451C2C1E762B}
2012-06-27 05:35 - 2012-06-27 05:35 - 00000000 ____D C:\Users\shawn.goncalves\AppData\Local\Macromedia


============ 3 Months Modified Files ========================

2012-07-24 05:31 - 2011-05-27 21:40 - 01067547 ____A C:\Windows\WindowsUpdate.log
2012-07-24 05:30 - 2011-09-13 21:47 - 00000398 ____A C:\Windows\Tasks\Gateway Registration - Data Sending task.job
2012-07-24 04:56 - 2012-04-14 03:41 - 00000916 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2012-07-24 04:42 - 2012-04-11 02:06 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2012-07-23 16:56 - 2012-04-14 03:40 - 00000912 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2012-07-23 14:53 - 2012-04-14 21:00 - 00032928 ____A C:\Windows\setupact.log
2012-07-23 11:22 - 2012-07-23 11:22 - 00015872 ____A C:\Users\shawn.goncalves\AppData\Local\tmikanp.dll
2012-07-23 11:22 - 2012-07-23 11:22 - 00014848 ____A C:\Users\shawn.goncalves\0.8746796126581879.exe
2012-07-19 17:15 - 2012-07-19 17:11 - 00411164 ____A C:\ComboFix.txt
2012-07-19 17:07 - 2009-07-13 20:45 - 00022128 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-07-19 17:07 - 2009-07-13 20:45 - 00022128 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-07-19 16:58 - 2009-07-13 18:34 - 00000215 ____A C:\Windows\system.ini
2012-07-19 16:56 - 2012-04-27 06:20 - 00039184 ____A C:\Windows\PFRO.log
2012-07-19 16:56 - 2009-07-13 21:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2012-07-19 16:40 - 2012-07-15 12:45 - 04582475 ____R (Swearware) C:\Users\shawn.goncalves\Downloads\ComboFix.exe
2012-07-19 16:39 - 2011-09-14 14:28 - 00002046 ___AH C:\Users\shawn.goncalves\Documents\Default.rdp
2012-07-19 15:08 - 2011-09-13 22:35 - 00000160 ____A C:\Windows\System32\config\netlogon.ftl
2012-07-19 10:44 - 2012-07-19 10:44 - 00153418 ____A C:\Users\shawn.goncalves\Downloads\Extras.Txt
2012-07-19 10:43 - 2012-07-19 10:43 - 00210728 ____A C:\Users\shawn.goncalves\Downloads\OTL.Txt
2012-07-19 10:32 - 2011-09-20 07:32 - 00671464 ____A C:\Users\shawn.goncalves\AppData\Local\MWRemoteAccessGateway.log
2012-07-19 09:02 - 2012-07-19 09:03 - 00471266 ____N C:\Users\shawn.goncalves\Documents\Internal VA Report.zip
2012-07-16 07:40 - 2012-07-16 07:40 - 00011383 ____A C:\Users\shawn.goncalves\Desktop\SEP-Log.csv
2012-07-16 07:39 - 2012-07-16 07:11 - 19388911 ____A C:\Users\shawn.goncalves\Desktop\SEP Log.csv
2012-07-15 05:18 - 2011-11-03 11:50 - 00001024 ____A C:\.rnd
2012-07-13 05:18 - 2012-01-17 05:43 - 00053312 ____A (microOLAP Technologies LTD) C:\Windows\System32\Drivers\pssdk42.sys
2012-07-13 00:37 - 2011-11-03 11:50 - 00087488 ____A (LogMeIn, Inc.) C:\Windows\System32\LMIRfsClientNP.dll
2012-07-13 00:37 - 2011-11-03 11:50 - 00080800 ____A (LogMeIn, Inc.) C:\Windows\System32\LMIinit.dll
2012-07-13 00:37 - 2011-11-03 11:50 - 00034720 ____A (LogMeIn, Inc.) C:\Windows\System32\LMIport.dll
2012-07-12 11:20 - 2012-07-05 04:40 - 00024576 ____A C:\Users\shawn.goncalves\Desktop\Book1.xls
2012-07-12 10:29 - 2012-07-12 10:30 - 02795753 ____N C:\Users\shawn.goncalves\Documents\packet-c.cap
2012-07-12 08:42 - 2012-04-11 02:06 - 00426184 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-07-12 08:42 - 2011-09-14 17:02 - 00070344 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2012-07-11 03:36 - 2012-07-11 03:36 - 00294216 ____A C:\Users\shawn.goncalves\Desktop\gmer.zip
2012-07-11 03:35 - 2012-07-11 03:35 - 00302592 ____A C:\Users\shawn.goncalves\Downloads\xdm4keeb.exe
2012-07-11 03:33 - 2012-07-11 03:33 - 00012199 ____A C:\Users\shawn.goncalves\Desktop\Attach.txt
2012-07-11 03:33 - 2012-07-11 03:32 - 00033617 ____A C:\Users\shawn.goncalves\Desktop\DDS.txt
2012-07-11 03:26 - 2012-07-11 03:26 - 00050477 ____A C:\Users\shawn.goncalves\Downloads\Defogger.exe
2012-07-11 03:26 - 2012-07-11 03:26 - 00000492 ____A C:\Users\shawn.goncalves\Desktop\defogger_disable.log
2012-07-11 03:26 - 2012-07-11 03:26 - 00000000 ____A C:\Users\shawn.goncalves\defogger_reenable
2012-07-10 23:15 - 2009-07-13 20:45 - 00434680 ____A C:\Windows\System32\FNTCACHE.DAT
2012-07-10 12:04 - 2012-07-10 11:42 - 00005478 ____A C:\Users\shawn.goncalves\Desktop\aswMBR.txt
2012-07-10 12:04 - 2012-07-10 11:42 - 00000512 ____A C:\Users\shawn.goncalves\Desktop\MBR.dat
2012-07-10 11:50 - 2012-07-10 11:46 - 00034155 ____A C:\Users\shawn.goncalves\Desktop\Result.txt
2012-07-10 11:46 - 2012-07-10 11:45 - 00403231 ____A C:\Users\shawn.goncalves\Downloads\minitoolbox.exe
2012-07-10 10:34 - 2012-07-10 10:30 - 00023699 ____A C:\Users\shawn.goncalves\Downloads\FRST.txt
2012-07-10 10:30 - 2012-07-10 10:29 - 01434401 ____A (Farbar) C:\Users\shawn.goncalves\Downloads\FRST64.exe
2012-07-10 08:43 - 2012-07-10 08:43 - 05323204 ____A C:\Users\shawn.goncalves\Documents\DialingExtension5201.zip
2012-07-09 03:35 - 2012-07-09 03:35 - 607829916 ____A C:\Windows\MEMORY.DMP
2012-07-07 19:39 - 2011-09-16 08:44 - 00002021 ____A C:\Users\Public\Desktop\Adobe Reader 9.lnk
2012-07-05 10:57 - 2012-07-05 09:52 - 00450560 ____A C:\Users\shawn.goncalves\Desktop\autowhitelist.mdb
2012-07-03 09:51 - 2009-07-13 21:13 - 00782838 ____A C:\Windows\System32\PerfStringBackup.INI
2012-06-13 04:58 - 2012-06-13 04:58 - 00175736 ____A (Symantec Corporation) C:\Windows\System32\Drivers\SYMEVENT64x86.SYS
2012-06-13 04:58 - 2012-06-13 04:58 - 00007488 ____A C:\Windows\System32\Drivers\SYMEVENT64x86.CAT
2012-06-13 04:56 - 2012-06-13 04:56 - 00288176 ____A (Symantec Corporation) C:\Windows\System32\SymVPN.dll
2012-06-13 04:56 - 2012-06-13 04:56 - 00081840 ____A (Symantec Corporation) C:\Windows\System32\FwsVpn.dll
2012-06-13 04:56 - 2012-06-13 04:56 - 00058288 ____A (Symantec Corporation) C:\Windows\SysWOW64\snacnp.dll
2012-06-13 04:56 - 2012-06-13 04:56 - 00058288 ____A (Symantec Corporation) C:\Windows\System32\snacnp.dll
2012-06-13 04:56 - 2012-06-13 04:56 - 00042632 ____A (Symantec Corporation) C:\Windows\System32\Drivers\WGX64.SYS
2012-06-13 04:42 - 2012-06-13 04:33 - 215882584 ____A (Igor Pavlov) C:\Users\shawn.goncalves\Downloads\Symantec_Endpoint_Protection_12.1.1_MP1_Win64-bit_Client_EN.exe
2012-06-13 03:50 - 2012-06-13 03:50 - 00001988 ___AH C:\Windows\System32\Default.rdp
2012-06-12 23:47 - 2012-06-12 23:47 - 00118528 ____A C:\Users\TEMP\AppData\Local\GDIPFONTCACHEV1.DAT
2012-06-12 23:37 - 2012-06-12 23:37 - 00000858 _RASH C:\Users\TEMP\ntuser.pol
2012-06-11 19:08 - 2012-07-10 23:06 - 03148800 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-06-10 14:50 - 2012-06-10 14:50 - 23689545 ____A C:\Users\shawn.goncalves\Desktop\DSC_0151.zip
2012-06-08 21:43 - 2012-07-10 20:19 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2012-06-08 20:41 - 2012-07-10 20:19 - 12873728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2012-06-07 10:31 - 2012-06-07 10:30 - 09739244 ____A C:\Users\shawn.goncalves\Downloads\NoRTP.pcap
2012-06-05 22:06 - 2012-07-10 20:19 - 02004480 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2012-06-05 22:06 - 2012-07-10 20:19 - 01881600 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2012-06-05 22:02 - 2012-07-10 20:19 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2012-06-05 21:05 - 2012-07-10 20:19 - 01390080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2012-06-05 21:05 - 2012-07-10 20:19 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2012-06-05 21:03 - 2012-07-10 20:19 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2012-06-02 04:49 - 2012-07-10 23:02 - 17807360 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-06-02 04:17 - 2012-07-10 23:02 - 10924032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-06-02 04:12 - 2012-07-10 23:02 - 02311680 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2012-06-02 04:05 - 2012-07-10 23:02 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-06-02 04:05 - 2012-07-10 23:02 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-06-02 04:04 - 2012-07-10 23:02 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2012-06-02 04:04 - 2012-07-10 23:02 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-06-02 04:03 - 2012-07-10 23:02 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-06-02 04:01 - 2012-07-10 23:02 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2012-06-02 04:00 - 2012-07-10 23:02 - 00818688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2012-06-02 03:59 - 2012-07-10 23:02 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-06-02 03:57 - 2012-07-10 23:02 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-06-02 03:57 - 2012-07-10 23:02 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-06-02 03:54 - 2012-07-10 23:02 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-06-02 01:07 - 2012-07-10 23:02 - 12314624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-06-02 00:43 - 2012-07-10 23:02 - 09737728 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-06-02 00:33 - 2012-07-10 23:02 - 01800192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2012-06-02 00:26 - 2012-07-10 23:02 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-06-02 00:25 - 2012-07-10 23:02 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2012-06-02 00:25 - 2012-07-10 23:02 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-06-02 00:23 - 2012-07-10 23:02 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-06-02 00:21 - 2012-07-10 23:02 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-06-02 00:20 - 2012-07-10 23:02 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2012-06-02 00:19 - 2012-07-10 23:02 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-06-02 00:19 - 2012-07-10 23:02 - 00716800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2012-06-02 00:17 - 2012-07-10 23:02 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-06-02 00:16 - 2012-07-10 23:02 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-06-02 00:14 - 2012-07-10 23:02 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-06-01 21:50 - 2012-07-10 20:19 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2012-06-01 21:48 - 2012-07-10 20:19 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2012-06-01 21:48 - 2012-07-10 20:19 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2012-06-01 21:45 - 2012-07-10 20:19 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2012-06-01 21:44 - 2012-07-10 20:19 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2012-06-01 20:40 - 2012-07-10 20:19 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2012-06-01 20:40 - 2012-07-10 20:19 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2012-06-01 20:39 - 2012-07-10 20:19 - 00219136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2012-06-01 20:34 - 2012-07-10 20:19 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2012-05-31 08:35 - 2011-09-20 09:56 - 00018432 ____A C:\Users\shawn.goncalves\Documents\Account Login Info.xlsx
2012-05-29 10:16 - 2012-05-29 09:46 - 495261453 ____A C:\Users\shawn.goncalves\Downloads\Jasmin - [BangBros_brf9582] March 24, 2012.wmv
2012-05-29 09:49 - 2012-05-29 09:42 - 709418279 ____A C:\Users\shawn.goncalves\Downloads\Jasmin - [BangBros_btra9573] April 05, 2012_3000.mp4
2012-05-22 16:37 - 2012-05-22 16:37 - 112639081 ____A C:\Users\shawn.goncalves\Downloads\update.zip
2012-05-19 00:37 - 2011-11-03 11:50 - 00087456 ____A (LogMeIn, Inc.) C:\Windows\System32\LMIRfsClientNP.dll.000.bak
2012-05-19 00:37 - 2011-11-03 11:50 - 00080768 ____A (LogMeIn, Inc.) C:\Windows\System32\LMIinit.dll.000.bak
2012-05-09 05:10 - 2012-05-09 05:10 - 00157472 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2012-05-09 05:10 - 2012-05-09 05:10 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2012-05-09 05:10 - 2012-05-09 05:10 - 00149280 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2012-05-09 05:09 - 2012-05-09 05:10 - 00476960 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\npdeployJava1.dll
2012-05-09 05:09 - 2012-01-30 07:04 - 00472864 ____A (Sun Microsystems, Inc.) C:\Windows\SysWOW64\deployJava1.dll
2012-05-09 03:24 - 2012-05-09 03:24 - 01284232 ____A (Coupons.com Incorporated) C:\Users\shawn.goncalves\Downloads\CouponPrinter.exe
2012-05-04 03:06 - 2012-06-12 20:35 - 05559664 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2012-05-04 02:03 - 2012-06-12 20:34 - 03968368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2012-05-04 02:03 - 2012-06-12 20:34 - 03913072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2012-05-01 05:57 - 2012-05-01 05:57 - 03691008 ____A C:\Users\shawn.goncalves\Downloads\join.me.msi
2012-04-27 19:55 - 2012-06-12 20:34 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-04-27 06:33 - 2011-12-05 05:23 - 00002032 ____A C:\Users\Public\Desktop\Samsung AllShare.lnk
2012-04-27 06:16 - 2012-03-22 05:03 - 00776562 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2012-04-27 04:28 - 2012-04-27 04:30 - 02091426 ____A C:\Users\shawn.goncalves\Downloads\ieSpellSetup264573.exe
2012-04-26 05:13 - 2012-04-26 05:13 - 10063000 ____A (Malwarebytes Corporation ) C:\Users\shawn.goncalves\Downloads\mbam-setup-1.61.0.1400.exe


ZeroAccess:
C:\Windows\Installer\{0ac3bb32-a937-0474-b00e-98332c8a9329}
C:\Windows\Installer\{0ac3bb32-a937-0474-b00e-98332c8a9329}\L
C:\Windows\Installer\{0ac3bb32-a937-0474-b00e-98332c8a9329}\U

ZeroAccess:
C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}
C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}\@
C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}\L
C:\Users\shawn.goncalves\AppData\Local\{0ac3bb32-a937-0474-b00e-98332c8a9329}\U

========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

========================= Memory info ======================

Percentage of memory in use: 8%
Total physical RAM: 16366.5 MB
Available physical RAM: 15005.97 MB
Total Pagefile: 16364.7 MB
Available Pagefile: 14996.87 MB
Total Virtual: 8192 MB
Available Virtual: 8191.91 MB

======================= Partitions =========================

1 Drive c: (Gateway) (Fixed) (Total:1383.17 GB) (Free:694.03 GB) NTFS
2 Drive e: (PQSERVICE) (Fixed) (Total:14 GB) (Free:2.56 GB) NTFS
4 Drive g: () (Removable) (Total:3.74 GB) (Free:1.67 GB) FAT32
10 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
11 Drive y: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 1397 GB 0 B
Disk 1 Online 0 B 0 B
Disk 2 Online 3835 MB 0 B
Disk 3 No Media 0 B 0 B
Disk 4 No Media 0 B 0 B
Disk 5 No Media 0 B 0 B
Disk 6 No Media 0 B 0 B
Disk 7 No Media 0 B 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Recovery 14 GB 1024 KB
Partition 2 Primary 100 MB 14 GB
Partition 3 Primary 1383 GB 14 GB

==================================================================================

Disk: 0
Partition 1
Type : 27
Hidden: Yes
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 E PQSERVICE NTFS Partition 14 GB Healthy Hidden

==================================================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 Y SYSTEM RESE NTFS Partition 100 MB Healthy

==================================================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 C Gateway NTFS Partition 1383 GB Healthy

==================================================================================

Partitions of Disk 1:
===============

There are no partitions on this disk to show.

==================================================================================

Partitions of Disk 2:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 3835 MB 31 KB

==================================================================================

Disk: 2
Partition 1
Type : 0C
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 4 G FAT32 Removable 3835 MB Healthy

==================================================================================

==========================================================

Last Boot: 2012-07-17 20:21

======================= End Of Log ==========================

#15 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:01:24 AM

Posted 25 July 2012 - 08:21 PM

Shawn,

Please do the following. You will need a USB flash drive. If you have any questions, need clarification, or run into problems, please let me know.

  • Insert your USB drive.
  • Press Start > My Computer > right click your USB drive > choose Format > Quick format (Note that this will erase any files you have on your flashdrive. Please move any files you want to keep to your computer before completing this step.)
  • Download xPUD 0.9.2 iso, saving the file to your Desktop.
  • Download UNetbootin and save it to your Desktop as well.
  • Double click the unetbootin-windows-latest.exe that you just downloaded.
  • Select the DiskImage option then click the browse button located on the right side of the textbox field.
  • Browse to and select the xpud-0.9.2.iso file you downloaded
  • Verify the correct drive letter is selected for your USB device then click OK
  • It will write files to your USB device and make it bootable
  • Once the files have been written to the device you will be prompted to reboot ~ do NOT reboot and instead just Exit the UNetbootin interface
  • Next, download dumpit and save it to the same flash drive where you installed xPUD. (right click this file, and click on Save File As... You want to save it without a file extension, so you may have to change the File Type to All Files.)
  • Remove the USB and insert it in the ailing computer
  • Power on the computer and press F12 then choose to boot from the USB
  • After selecting a language and readying the system, a Welcome to xPUD screen will appear
  • Click the File tab
  • Expand mnt by clicking the plus sign to it's left
  • sda1,2...usually corresponds to your HDD
  • sdb1 is likely your USB
  • Double click dumpit.
  • It will create some MBR copies on the USB drive.
  • When it completes press Enter to exit the Terminal window.
  • Remove the USB drive, then locate on it an mbr.zip file, and upload that here as an attachment please.
mbr.zip should be created on your flash drive, please attach it to your next reply.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users