Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unrelentless Google Redirect


  • This topic is locked This topic is locked
24 replies to this topic

#1 Casee

Casee

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 13 July 2012 - 11:27 AM

Hello!
I've had this problem for a few weeks now, I've had it before, but I was usually able to fix it myself. Unfortunately that's not the case now. I use Mozilla Firefox. I've checked to see if it's happening in Internet Explorer, and it doesn't seem to be, though I haven't used it enough to know for sure. The most common website to get directed to is a "click.get-answers-fast.com" site, though it's occasionally another equally annoying site.

Sometimes the redirect will end up taking me a worse site and install some scareware, as you can see in the dds.txt, "xjnzfwzpgm.exe". I've since removed that.

As this computer is shared by my family, if you're somehow able to find out how this happened, that would be great as well!
And one more thing, what are your thoughts on Avast! Antivirus, and could you recommend something better? My father insists on using it, though I feel it can bog down the computer.

Thank you!

Unfortunately, my ark.txt was too large to attach, so I've uploaded it to mediafire. You can view and/or download it here.
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.0.0
Run by Temp at 3:52:53 on 2012-07-13
.
============== Running Processes ===============
.
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com/hws/sb/dell-usuk-rel/en/side.html?channel=us
uSearch Bar = hxxp://www.google.com/hws/sb/dell-usuk-rel/en/side.html?channel=us
uDefault_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=4070830
uStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
mURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: EWPBrowseObject Class: {68f9551e-0411-48e4-9aaf-4bc42a6a46be} - c:\program files\canon\easy-webprint\EWPBrowseLoader.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\mi1933~1\office14\GROOVEEX.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - No File
BHO: {b0cda128-b425-4eef-a174-61a11ac5dbf8} - No File
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\mi1933~1\office14\URLREDIR.DLL
BHO: {C335D693-C53A-45DC-A80D-7409E711F3D5} - No File
TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll
TB: {61539ecd-cc67-4437-a03c-9aaccbd14326} - No File
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
TB: {EEE6C35B-6118-11DC-9C72-001320C79847} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [Logitech Hardware Abstraction Layer] "c:\program files\common files\logitech\khalshared\KHALMNPR.EXE"
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [avast] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
dRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
dRun: [Citrix] rundll32.exe "c:\documents and settings\rob\local settings\application data\geckofx\citrix\ivnabfndt.dll",CreateInstance
dRunOnce: [RunNarrator] Narrator.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\mi1933~1\office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files\sweetim\toolbars\internet explorer\resources\menuext.html
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {0D8004AA-A1CB-4F92-BBEB-0A824B1EE2A2} - hxxp://ws.nopp.co.kr/Game/Common/HGLauncher.cab
DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - hxxp://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://photo2.walgreens.com/WalgreensActivia.cab
DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - hxxp://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{0AA4DC25-C3C4-423F-8F26-996AB94C01DD} : DhcpNameServer = 75.75.75.75 75.75.76.76
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\mi1933~1\office14\GROOVEEX.DLL
LSA: Authentication Packages = msv1_0 c:\windows\system32\vturr.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\temp\application data\mozilla\firefox\profiles\etsi8std.default\
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\documents and settings\temp\local settings\application data\robloxversions\version-21cdb2fff9fb4df2\NPRobloxProxy.dll
FF - plugin: c:\progra~1\mi1933~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\mi1933~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\new_plugin\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_265.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
============= SERVICES / DRIVERS ===============
.
.
=============== Created Last 30 ================
.
2012-07-13 00:31:48 364544 ----a-w- c:\documents and settings\temp\local settings\application data\xjnzfwzpgm.exe
2012-07-11 18:50:58 -------- d-----w- c:\program files\1ClickDownload
2012-07-11 03:45:07 -------- d-----w- c:\documents and settings\temp\application data\DTA Archiver
2012-07-10 16:08:27 -------- d-----w- c:\program files\MultiExtractor Pro
2012-07-10 03:10:57 -------- d-----w- c:\documents and settings\all users\application data\easetech
2012-07-09 18:16:51 110592 ----a-w- c:\windows\system32\atrac3.acm
2012-07-09 18:13:37 -------- d-----w- c:\program files\GoldWave
2012-07-09 16:05:07 -------- d--h--w- c:\windows\PIF
2012-07-08 20:08:23 -------- d-----w- c:\documents and settings\temp\local settings\application data\Focus Home Interactive
2012-07-08 19:40:43 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-07-08 06:02:13 -------- d-----w- c:\documents and settings\temp\local settings\application data\fontconfig
2012-07-08 06:02:11 -------- d-----w- c:\documents and settings\temp\.gimp-2.8
2012-07-08 06:02:10 -------- d-----w- c:\documents and settings\temp\local settings\application data\gegl-0.2
2012-07-08 05:59:44 -------- d-----w- c:\program files\GIMP 2
2012-07-08 04:58:21 165376 ----a-w- c:\windows\UNWISE.EXE
2012-07-08 04:44:25 40960 ----a-r- c:\documents and settings\temp\application data\microsoft\installer\{5e08b15d-7c97-4fc9-8500-bd7eda18c66a}\NewShortcut1_5E08B15D7C974FC98500BD7EDA18C66A.exe
2012-07-08 04:44:15 -------- d-----w- C:\microdem
2012-07-08 04:44:15 -------- d-----w- C:\mapdata
2012-07-08 04:02:07 140832 ----a-w- c:\windows\system32\drivers\str.sys
2012-07-04 00:17:03 256904 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2012-06-30 17:44:13 -------- d-----w- c:\program files\Traffic Simulator Configuration Tool
2012-06-30 03:09:39 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-06-28 19:17:03 -------- d-----w- c:\program files\GOGcom
2012-06-28 19:02:47 -------- d-----w- c:\documents and settings\temp\local settings\application data\GOG.com
2012-06-28 19:01:41 -------- d-----w- c:\program files\GOG.com
2012-06-27 20:22:39 -------- d-----w- c:\documents and settings\temp\application data\Atari
2012-06-27 20:13:36 -------- d-----w- c:\documents and settings\all users\application data\SecuROM
2012-06-27 20:13:07 -------- d-----w- c:\program files\SecuROM
2012-06-27 19:46:42 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2012-06-27 19:12:01 -------- d-----w- c:\documents and settings\temp\local settings\application data\Geckofx
2012-06-27 19:10:26 -------- d-----w- c:\documents and settings\temp\local settings\application data\Playbryte
2012-06-27 18:44:19 -------- d-----w- c:\program files\Atari
2012-06-27 18:43:24 184320 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iuser.dll
2012-06-27 18:43:23 69714 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\ctor.dll
2012-06-27 18:43:23 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\DotNetInstaller.exe
2012-06-27 18:43:23 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iscript.dll
2012-06-27 18:43:22 753664 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iKernel.dll
2012-06-27 18:43:13 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iGdi.dll
2012-06-27 18:43:12 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\setup.dll
2012-06-23 14:28:36 -------- d-----w- c:\program files\ConvertHelper
2012-06-19 22:35:14 4967624 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
2012-06-19 05:27:10 15128 ----a-w- c:\documents and settings\temp\application data\microsoft\identitycrl\production\ppcrlconfig.dll
2012-06-18 19:02:26 421200 ----a-w- c:\program files\mozilla firefox\msvcp100.dll
2012-06-18 19:02:25 770384 ----a-w- c:\program files\mozilla firefox\msvcr100.dll
2012-06-15 22:26:50 -------- d-----w- c:\program files\ESET
2012-06-15 20:52:37 -------- d-----w- c:\documents and settings\temp\application data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-15 18:40:16 26176 ---ha-w- c:\windows\system32\hamachi.sys
2012-06-15 16:34:39 -------- d-----w- c:\program files\Playbryte
2012-06-15 16:34:16 -------- d-----w- c:\program files\BabylonToolbar
2012-06-15 16:34:01 -------- d-----w- c:\documents and settings\all users\application data\Babylon
2012-06-15 06:30:35 -------- d-----w- c:\documents and settings\temp\application data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-15 06:30:35 -------- d-----w- c:\documents and settings\temp\application data\app
2012-06-15 06:30:33 -------- d-----w- c:\documents and settings\temp\application data\Dofus2
2012-06-15 06:30:33 -------- d-----w- c:\documents and settings\temp\application data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-14 19:09:28 -------- d-----w- c:\documents and settings\temp\local settings\application data\LogMeIn Hamachi
2012-06-13 17:57:10 521728 ------w- c:\windows\system32\dllcache\jsdbgui.dll
.
==================== Find3M ====================
.
2012-07-12 18:25:06 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-12 18:25:06 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-03 16:21:53 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-07-03 16:21:32 41224 ----a-w- c:\windows\avastSS.scr
2012-06-02 20:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 20:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 20:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 20:19:34 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 20:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 20:18:58 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 20:18:58 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 20:18:58 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-01 20:04:41 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-06-01 20:04:41 140952 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-01 20:04:32 298280 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-01 20:04:32 298280 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-01 19:59:06 138056 ----a-w- c:\documents and settings\temp\application data\PnkBstrK.sys
2012-05-31 21:36:55 3360624 ----a-w- c:\windows\system32\pbsvc.exe
2012-05-31 21:20:18 1074636 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-05-31 21:20:18 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-05-31 21:20:16 1074636 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-05-31 13:22:09 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08:26 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-16 05:33:11 33824 ----a-w- c:\windows\system32\drivers\oreans32.sys
2012-05-15 13:20:33 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-15 10:18:00 883008 ----a-w- c:\windows\system32\nvgenco32.dll
2012-05-15 10:18:00 65536 ----a-w- c:\windows\system32\OpenCL.dll
2012-05-15 10:18:00 6012928 ----a-w- c:\windows\system32\nvcuda.dll
2012-05-15 10:18:00 2530624 ----a-w- c:\windows\system32\nvcuvid.dll
2012-05-15 10:18:00 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-05-15 10:18:00 17543168 ----a-w- c:\windows\system32\nvcompiler.dll
2012-05-15 10:18:00 1000768 ----a-w- c:\windows\system32\nvdispco32.dll
2012-05-15 09:40:02 143680 ----a-w- c:\windows\system32\nvcolor.exe
2012-05-11 14:42:33 43520 ------w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42:33 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38:02 385024 ------w- c:\windows\system32\html.iec
2012-05-04 13:16:13 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32:19 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46:36 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-24 16:12:18 474624 --sha-w- C:\EUMONBMP.SYS
.
============= FINISH: 3:55:08.60 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 13 July 2012 - 11:49 PM

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your computer problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Security Check

  • Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.



Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 14 July 2012 - 01:29 AM

Hello again, thanks for the reply!

Unfortunately, Security Check gave me an error and was unable to run. You can see the error in the second image here: http://imgur.com/a/RrBlj
ComboFix did run successfully, and found that I'm infected with Rootkit.ZeroAccess. I'm still experiencing google redirects, however.

ComboFix 12-07-13.03 - Temp 07/14/2012 0:32.1.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2635 [GMT -5:00]
Running from: c:\documents and settings\Temp\My Documents\Downloads\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Antivirus *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\3944_6759788_MVM_0.tmp
C:\3944_6759788_MVM_1.tmp
C:\3944_6759788_MVM_2.tmp
C:\3944_6759788_MVM_3.tmp
C:\3944_6759788_MVM_4.tmp
c:\documents and settings\All Users\Application Data\1904398234.sys
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\rob\GoToAssistDownloadHelper.exe
c:\documents and settings\tamara\Favorites\Online Security Guide.lnk
c:\documents and settings\Temp\Application Data\app
c:\documents and settings\Temp\Application Data\app\Jerakine_lang.dat
c:\documents and settings\Temp\Application Data\app\Jerakine_lang_vesrion.dat
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome.manifest
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\background.html
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\browser.xul
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\crossrider.js
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\crossriderapi.js
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\dialog.js
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.js
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\options.xul
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\search_dialog.xul
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\chrome\content\update.html
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\defaults\preferences\prefs.js
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\install.rdf
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\locale\en-US\translations.dtd
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\button1.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\button2.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\button3.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\button4.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\button5.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\crossrider_statusbar.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\icon128.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\icon16.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\icon24.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\icon48.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\panelarrow-up.png
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\popup.css
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\popup.html
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\popup_binding.xml
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\skin.css
c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\extensions\crossriderapp2258@crossrider.com\skin\update.css
C:\install.exe
c:\temp\abW9
c:\windows\$NtUninstallKB14659$
c:\windows\$NtUninstallKB14659$\809666225
c:\windows\Downloaded Program Files\f3initialsetup1.0.0.15-3.inf
c:\windows\Installer\{ba0fb7ed-97c0-7cf7-9c5d-2ad6bad59a81}\@
c:\windows\Installer\{ba0fb7ed-97c0-7cf7-9c5d-2ad6bad59a81}\U\00000001.@
c:\windows\system32\ctfmon(2).exe
c:\windows\system32\drivers\str.sys
c:\windows\system32\lstqcscs.dllbox
c:\windows\system32\rMa18yy
c:\windows\system32\updfynos.dllbox
c:\windows\system32\usp10(2).dll
.
.
((((((((((((((((((((((((( Files Created from 2012-06-14 to 2012-07-14 )))))))))))))))))))))))))))))))
.
.
2012-07-11 18:50 . 2012-07-11 18:50 -------- d-----w- c:\program files\1ClickDownload
2012-07-11 03:45 . 2012-07-11 03:47 -------- d-----w- c:\documents and settings\Temp\Application Data\DTA Archiver
2012-07-10 16:08 . 2012-07-10 16:08 -------- d-----w- c:\program files\MultiExtractor Pro
2012-07-10 03:10 . 2012-07-10 03:10 -------- d-----w- c:\documents and settings\All Users\Application Data\easetech
2012-07-09 18:16 . 2000-09-28 20:00 110592 ----a-w- c:\windows\system32\atrac3.acm
2012-07-09 18:13 . 2012-07-09 18:19 -------- d-----w- c:\program files\GoldWave
2012-07-09 16:05 . 2012-07-09 16:05 -------- d--h--w- c:\windows\PIF
2012-07-08 20:08 . 2012-07-08 20:08 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Focus Home Interactive
2012-07-08 19:40 . 2012-07-08 20:39 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-07-08 06:02 . 2012-07-08 06:02 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\fontconfig
2012-07-08 06:02 . 2012-07-08 06:06 -------- d-----w- c:\documents and settings\Temp\.gimp-2.8
2012-07-08 06:02 . 2012-07-08 06:02 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\gegl-0.2
2012-07-08 05:59 . 2012-07-08 06:01 -------- d-----w- c:\program files\GIMP 2
2012-07-08 04:58 . 2001-11-05 14:30 165376 ----a-w- c:\windows\UNWISE.EXE
2012-07-08 04:58 . 2012-07-08 04:58 -------- d-----w- c:\program files\Borland
2012-07-08 04:44 . 2012-07-08 04:44 40960 ----a-r- c:\documents and settings\Temp\Application Data\Microsoft\Installer\{5E08B15D-7C97-4FC9-8500-BD7EDA18C66A}\NewShortcut1_5E08B15D7C974FC98500BD7EDA18C66A.exe
2012-07-08 04:44 . 2012-07-08 05:33 -------- d-----w- C:\microdem
2012-07-08 04:44 . 2012-07-08 05:01 -------- d-----w- C:\mapdata
2012-07-08 04:06 . 2012-07-08 04:06 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2012-07-04 00:17 . 2012-06-05 07:37 256904 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2012-06-30 17:44 . 2012-07-01 05:13 -------- d-----w- c:\program files\Traffic Simulator Configuration Tool
2012-06-30 03:09 . 2012-06-30 03:09 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-06-28 19:17 . 2012-06-28 19:17 -------- d-----w- c:\program files\GOGcom
2012-06-28 19:02 . 2012-06-28 19:11 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\GOG.com
2012-06-28 19:01 . 2012-06-28 19:01 -------- d-----w- c:\program files\GOG.com
2012-06-27 20:22 . 2012-06-27 20:22 -------- d-----w- c:\documents and settings\Temp\Application Data\Atari
2012-06-27 20:13 . 2012-06-27 20:13 -------- d-----w- c:\documents and settings\All Users\Application Data\SecuROM
2012-06-27 20:13 . 2012-06-27 20:13 -------- d-----w- c:\program files\SecuROM
2012-06-27 19:46 . 2012-06-27 22:12 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2012-06-27 19:12 . 2012-06-27 19:12 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Geckofx
2012-06-27 19:10 . 2012-06-27 19:10 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Playbryte
2012-06-27 18:50 . 2012-06-27 18:50 -------- d-----w- c:\documents and settings\Temp\Application Data\Leadertech
2012-06-27 18:44 . 2012-06-27 18:44 -------- d-----w- c:\program files\Atari
2012-06-27 18:43 . 2005-04-04 04:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2012-06-27 18:43 . 2005-04-04 04:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2012-06-27 18:43 . 2005-04-04 04:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2012-06-27 18:43 . 2005-04-04 03:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2012-06-27 18:43 . 2005-04-04 04:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2012-06-27 18:43 . 2012-06-27 18:43 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2012-06-27 18:43 . 2012-06-27 18:43 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2012-06-27 02:28 . 2012-06-27 02:28 -------- d-----w- c:\documents and settings\Temp\Application Data\Sony Corporation
2012-06-23 14:28 . 2012-06-23 14:28 -------- d-----w- c:\program files\ConvertHelper
2012-06-19 22:35 . 2012-06-19 22:35 4967624 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
2012-06-18 19:02 . 2012-06-18 19:02 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-18 19:02 . 2012-06-18 19:02 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-15 22:26 . 2012-06-15 22:26 -------- d-----w- c:\program files\ESET
2012-06-15 20:52 . 2012-06-15 20:52 -------- d-----w- c:\documents and settings\Temp\Application Data\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-15 18:40 . 2009-03-18 22:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2012-06-15 16:34 . 2012-06-27 19:10 -------- d-----w- c:\program files\Playbryte
2012-06-15 16:34 . 2012-06-19 03:17 -------- d-----w- c:\documents and settings\rob\Local Settings\Application Data\Playbryte
2012-06-15 16:34 . 2012-06-15 16:34 250 ----a-w- C:\user.js
2012-06-15 16:34 . 2012-06-15 16:34 -------- d-----w- c:\program files\BabylonToolbar
2012-06-15 16:34 . 2012-06-15 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon
2012-06-15 16:34 . 2012-06-15 16:34 -------- d-----w- c:\documents and settings\rob\Application Data\Babylon
2012-06-15 15:29 . 2012-06-18 23:13 -------- d-----w- c:\documents and settings\rob\Local Settings\Application Data\LogMeIn Hamachi
2012-06-15 06:30 . 2012-06-15 06:30 -------- d-----w- c:\documents and settings\Temp\Application Data\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-15 06:30 . 2012-06-15 20:56 -------- d-----w- c:\documents and settings\Temp\Application Data\Dofus2
2012-06-15 06:30 . 2012-06-15 06:30 -------- d-----w- c:\documents and settings\Temp\Application Data\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2012-06-14 19:09 . 2012-07-03 16:58 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\LogMeIn Hamachi
2012-06-14 19:09 . 2012-07-14 05:53 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 18:25 . 2012-06-07 05:13 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-12 18:25 . 2011-06-04 23:29 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-03 16:21 . 2009-12-07 21:47 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-07-03 16:21 . 2011-05-15 00:23 721000 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-07-03 16:21 . 2009-12-07 21:47 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-07-03 16:21 . 2009-12-07 21:47 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-07-03 16:21 . 2009-12-07 21:47 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-07-03 16:21 . 2009-12-07 21:47 353688 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-07-03 16:21 . 2009-12-07 21:47 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-07-03 16:21 . 2009-12-07 21:47 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-07-03 16:21 . 2010-06-29 03:54 41224 ----a-w- c:\windows\avastSS.scr
2012-07-03 16:21 . 2009-12-07 21:47 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-06-02 20:19 . 2007-07-30 23:18 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 20:19 . 2007-07-30 23:19 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 20:19 . 2004-08-10 17:02 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 20:19 . 2004-08-10 17:02 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 20:19 . 2004-08-10 17:02 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 20:19 . 2007-07-30 23:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 20:19 . 2007-07-30 23:19 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 20:19 . 2004-08-10 17:02 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 20:19 . 2004-08-10 17:02 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 20:19 . 2004-08-10 16:50 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 20:19 . 2007-07-30 23:18 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 20:19 . 2004-08-10 17:02 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 20:19 . 2004-08-10 17:02 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 20:18 . 2008-02-14 01:10 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 20:18 . 2008-02-14 01:10 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 20:18 . 2008-02-14 01:10 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-01 20:04 . 2012-06-01 19:59 140952 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-01 20:04 . 2012-06-01 00:57 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-06-01 20:04 . 2012-06-01 20:04 298280 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-01 20:04 . 2012-06-01 19:58 298280 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-01 19:59 . 2012-06-01 19:59 138056 ----a-w- c:\documents and settings\Temp\Application Data\PnkBstrK.sys
2012-05-31 21:36 . 2012-06-01 00:57 3360624 ----a-w- c:\windows\system32\pbsvc.exe
2012-05-31 13:22 . 2004-08-10 16:50 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2004-08-10 16:51 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-16 05:33 . 2012-05-16 05:33 33824 ----a-w- c:\windows\system32\drivers\oreans32.sys
2012-05-15 13:20 . 2004-08-10 16:51 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-15 10:18 . 2012-05-31 21:20 65536 ----a-w- c:\windows\system32\OpenCL.dll
2012-05-15 10:18 . 2012-05-31 21:19 883008 ----a-w- c:\windows\system32\nvgenco32.dll
2012-05-15 10:18 . 2012-05-31 21:19 6012928 ----a-w- c:\windows\system32\nvcuda.dll
2012-05-15 10:18 . 2012-05-31 21:19 2530624 ----a-w- c:\windows\system32\nvcuvid.dll
2012-05-15 10:18 . 2012-05-31 21:19 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-05-15 10:18 . 2012-05-31 21:19 1000768 ----a-w- c:\windows\system32\nvdispco32.dll
2012-05-15 10:18 . 2012-05-31 21:19 17543168 ----a-w- c:\windows\system32\nvcompiler.dll
2012-05-15 09:40 . 2010-04-04 00:23 143680 ----a-w- c:\windows\system32\nvcolor.exe
2012-05-11 14:42 . 2004-08-10 16:51 43520 ------w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42 . 2004-08-10 16:51 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2004-08-10 16:51 385024 ------w- c:\windows\system32\html.iec
2012-05-04 13:16 . 2004-08-10 16:51 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 2004-08-04 02:59 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2004-08-10 17:01 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-18 19:02 . 2011-03-24 23:56 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
.
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
.
[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
.
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
.
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
.
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
.
[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
.
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
.
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
.
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
.
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 36739B39267914BA69AD0610A0299732 . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll
[-] 2005-08-22 . 3516D8A18B36784B1005B950B84232E1 . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll
.
[-] 2008-04-14 00:11 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 00:11 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\comres.dll
[-] 2008-04-14 00:11 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
[-] 2004-08-04 09:00 . 6728270CB7DBB776ED086F5AC4C82310 . 792064 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
.
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
.
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rpcss.dll
[-] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
.
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe
.
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-04 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[-] 2010-08-23 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2010-08-23 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
[-] 2010-08-23 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
[-] 2008-04-14 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2008-04-14 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\comctl32.dll
[-] 2006-08-25 . B0124CB21D28B1C9F678B566B6B57D92 . 617472 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2006-08-25 . C4E80875C1CF1222FC5EFD0314AE5C01 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
[-] 2004-08-04 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
[-] 2004-08-04 . 5AF68A5E44734A082442668E9C787743 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
.
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
.
[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\es.dll
[-] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
.
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
.
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\kernel32.dll
[-] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2006-07-05 . 0FDD84928A5DDE2510761B7EC76CCEC9 . 985088 . . [5.1.2600.2945] . . c:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll
.
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . 648BF0B4DDE4F7A1156DAE7174D36EFA . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . A1A688EE56CF3BBD24EDEB815D48E9BA . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
.
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
.
[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\asms\70\msft\windows\mswincrt\msvcrt.dll
[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
[-] 2004-08-04 . 98EC447E00229AFD88D5161A25D065DA . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
.
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mswsock.dll
.
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
.
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
.
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
.
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
.
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
.
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . 1418A3A6E76E5A2E3F5E43866E793A8B . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . FB78839B36025AA286A51289ED28B73E . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
.
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . 7AA4F6C00405DFC4B70ED4214E7D687B . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . B409909F6E2E8A7067076ED748ABF1E7 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
.
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
.
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
.
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
.
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\explorer.exe
[-] 2007-06-13 . 7712DF0CDDE3A5AC89843E61CD5B3658 . 1033216 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 . 97BD6515465659FF8F3B7BE375B2EA87 . 1033216 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
.
[-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\regedit.exe
[-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
[-] 2008-04-14 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\regedit.exe
[-] 2004-08-04 . 783AFC80383C176B22DBF8333343992D . 146432 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
.
[-] 2011-11-01 . 6BAD1BED9872E62049E487FB91AE2F3A . 1288704 . . [5.1.2600.6168] . . c:\windows\system32\ole32.dll
[-] 2011-11-01 . 6BAD1BED9872E62049E487FB91AE2F3A . 1288704 . . [5.1.2600.6168] . . c:\windows\system32\dllcache\ole32.dll
[-] 2011-11-01 . 7D9DDE1AB4B00DDB173F5A16E9206517 . 1289216 . . [5.1.2600.6168] . . c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll
[-] 2010-07-16 . 8D51FB47062F2A1A9EFECCEF338A4C46 . 1289216 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
[-] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ole32.dll
[-] 2005-07-26 . AB8231D13692AC5088EB9C226B0C0576 . 1285120 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\ole32.dll
[-] 2005-07-26 . A2F755E237FA2CDD748A80BFBE6657F3 . 1285632 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll
[-] 2005-04-28 . 7440D29F257B7E44329343F944F2142C . 1286144 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll
.
[-] 2010-04-16 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
[-] 2010-04-16 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
[-] 2010-04-16 . F8894BCC961D461674002B4BAE7AECC1 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
[-] 2008-04-14 . 7D7D8501F3CB45D0408CDEFA08CDAEFF . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
[-] 2008-04-14 . 7D7D8501F3CB45D0408CDEFA08CDAEFF . 406016 . . [1.0420.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\usp10.dll
[-] 2004-08-04 . 2EB58F9DCD6AB320B46744A4EA48B2D2 . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
.
[-] 2008-04-14 . 9B9F1C38D559047B8AC0DBA2D5FEBDE9 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
[-] 2008-04-14 . 9B9F1C38D559047B8AC0DBA2D5FEBDE9 . 4096 . . [5.3.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ksuser.dll
[-] 2008-04-14 . 9B9F1C38D559047B8AC0DBA2D5FEBDE9 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
[-] 2004-08-04 . CBCD254547689BFF80C9F547B20911E9 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
.
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
.
[-] 2009-07-27 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853] . . c:\windows\system32\shsvcs.dll
[-] 2009-07-27 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853] . . c:\windows\system32\dllcache\shsvcs.dll
[-] 2009-07-27 . 888CD7B39C37E13A2419BECFAAF0A28C . 135168 . . [6.00.2900.5853] . . c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\shsvcs.dll
[-] 2006-12-19 . 6815DEF9B810AEFAC107EEAF72DA6F82 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
[-] 2006-12-19 . 53D9184A21C5CBF600D918E51EF3A7E5 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
.
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
.
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
.
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
.
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
.
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ipsec.sys
[-] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
[-] 2004-08-04 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
.
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
.
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
.
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
.
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
.
[-] 2008-04-14 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
[-] 2008-04-14 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\hnetcfg.dll
[-] 2008-04-14 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
[-] 2004-08-04 . 765B30C776A1780B46B479FE614F707C . 344064 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
.
[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
.
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$NtServicePackUninstall$\aec.sys
.
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
[-] 2004-08-04 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys
.
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
.
[-] 2010-09-18 07:18 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
[-] 2010-09-18 06:53 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mfc40u.dll
[-] 2006-11-01 19:17 . 925F8B61ED301A317BA850EBEECBDAA0 . 927504 . . [4.1.0.61] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
.
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
.
[-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-19 02:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2005-01-28 17:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2005-01-28 17:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-04 09:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll
.
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-04 09:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
.
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . 36ACA6CDC19C95FF468A1426EB7F32F0 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . ACA5D98663D879C6BAAFCEA7E2F1B710 . 185344 . . [5.1.2600.3077] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
.
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
.
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
.
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
.
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-04 09:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
.
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\perfctrs.dll
[-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\version.dll
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
[-] 2004-08-04 . D38408967BE738D0C1B47005BCE8CEEB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
.
[-] 2008-04-14 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
[-] 2008-04-14 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\w32time.dll
[-] 2008-04-14 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
[-] 2004-08-04 . 2B281958F5D0CF99ED626E3EF39D5C8D . 174592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
.
[-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
[-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wiaservc.dll
[-] 2008-04-14 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
[-] 2006-12-19 . D9F097AA3B97034D3358A01B43E635B2 . 333824 . . [5.1.2600.3051] . . c:\windows\$hf_mig$\KB927802\SP2QFE\wiaservc.dll
[-] 2006-12-19 . B6763F8534AC547CF1AF98AFDFF2EDC8 . 333824 . . [5.1.2600.3051] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
.
[-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
[-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\midimap.dll
[-] 2008-04-14 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
[-] 2004-08-04 . 3B4702155BB2AE9DC00C06A68834BDFA . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
.
[-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
[-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rasadhlp.dll
[-] 2008-04-14 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
[-] 2006-06-26 . B5D08C96B2DADAF5171FB69E341B272B . 7680 . . [5.1.2600.2938] . . c:\windows\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll
[-] 2006-06-26 . 5F098BD2AE6B03044B085DECFFDF91EC . 8192 . . [5.1.2600.2938] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-07-03 16:21 121528 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Hardware Abstraction Layer"="c:\program files\Common Files\Logitech\khalshared\KHALMNPR.EXE" [2007-01-11 101136]
"SigmatelSysTrayApp"="stsystra.exe" [2006-07-24 282624]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-11 101136]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2012-07-03 4273976]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-27 8429568]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
.
c:\documents and settings\tamara\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [N/A]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NkbMonitor.exe.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\NkbMonitor.exe.lnk
backup=c:\windows\pss\NkbMonitor.exe.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TMMonitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\TMMonitor.lnk
backup=c:\windows\pss\TMMonitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^rob^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk]
path=c:\documents and settings\rob\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk
backup=c:\windows\pss\Picture Motion Browser Media Check Tool.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^rob^Start Menu^Programs^Startup^PictureProject In Touch.lnk]
path=c:\documents and settings\rob\Start Menu\Programs\Startup\PictureProject In Touch.lnk
backup=c:\windows\pss\PictureProject In Touch.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Temp^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\Temp\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Temp^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
path=c:\documents and settings\Temp\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
backup=c:\windows\pss\OpenOffice.org 3.3.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Playbryte Data Uninstall]
rd [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Playbryte Progam Files Data Uninstall]
rd [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 13:10 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2011-04-20 17:48 58656 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2006-03-22 01:30 1191936 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell DataSafe Scheduler]
2007-06-25 01:38 308464 -c--a-w- c:\program files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
2007-03-15 16:09 460784 ----a-w- c:\program files\DellSupport\DSAgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
2007-07-11 12:15 198704 ----a-w- c:\program files\Dell Support Center\bin\sprtcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
2005-10-05 07:12 94208 -c--a-w- c:\program files\Dell\Media Experience\DMXLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate]
2007-07-30 08:40 16384 ----a-w- c:\dell\dsca.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2006-07-06 11:15 151552 ----a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
2007-08-31 19:01 1037736 ----a-w- c:\program files\Microsoft IntelliPoint\ipoint.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2005-08-12 11:30 249856 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2005-08-12 11:30 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-04-14 16:32 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype]
2007-08-31 19:13 988584 ----a-w- c:\program files\Microsoft IntelliType Pro\itype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-06-27 17:29 1996200 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2010-04-17 04:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2007-05-27 18:21 8429568 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2007-05-27 18:21 81920 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe]
c:\program files\ooVoo\oovoo.exe [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
2006-03-21 19:19 69632 ----a-w- c:\program files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerBlock]
2010-11-07 03:24 1867888 ----a-w- c:\program files\PeerBlock\peerblock.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 22:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
2006-08-17 13:00 1116920 ----a-w- c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2006-11-05 15:22 221184 ----a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
2012-06-02 05:47 9478320 ----a-w- c:\documents and settings\Temp\Application Data\Spotify\spotify.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2012-06-02 05:47 932528 ----a-w- c:\documents and settings\Temp\Application Data\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2003-09-30 06:14 155648 ----a-r- c:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2012-05-05 22:51 1242448 ----a-w- c:\program files\Steam\Steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-12 04:56 273544 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VZWSUAM]
2011-06-24 04:47 196608 ----a-w- c:\documents and settings\Temp\Application Data\Verizon\SUA\VZWSUAM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"BthServ"=2 (0x2)
"Bonjour Service"=2 (0x2)
"WebClient"=2 (0x2)
"RoxWatch9"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5/14/2011 7:23 PM 721000]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12/7/2009 4:47 PM 353688]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [8/20/2011 12:26 AM 232512]
R1 oreans32;oreans32;c:\windows\system32\drivers\oreans32.sys [5/16/2012 12:33 AM 33824]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12/7/2009 4:47 PM 21256]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [6/27/2012 12:29 PM 1385896]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [6/19/2012 5:32 PM 3048136]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [10/3/2007 4:12 PM 24652]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/19/2011 5:20 PM 136176]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2/29/2012 8:50 AM 158856]
S2 VBoxDRV;PortableVBoxDRV;\??\o:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys --> o:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys [?]
S2 VBoxUSBMon;PortableVBoxUSBMon;\??\o:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys --> o:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys [?]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [6/7/2012 12:13 AM 250056]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [6/5/2008 10:26 PM 37296]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [10/18/2011 11:19 PM 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [10/18/2011 11:19 PM 8456]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [12/19/2011 5:20 PM 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [7/8/2012 2:40 PM 40776]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [6/12/2011 12:15 PM 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [4/25/2012 1:15 AM 113120]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [1/9/2010 10:37 PM 4640000]
S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [4/23/2012 9:02 AM 19056]
S3 wimmount;wimmount;c:\windows\system32\drivers\wimmount.sys [7/13/2009 10:20 AM 19024]
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-07 18:25]
.
2012-07-14 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\Alwil Software\Avast5\AvastEmUpdate.exe [2012-06-30 16:21]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-19 22:20]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-19 22:20]
.
2012-06-27 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-300104450-3783934304-527937018-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-300104450-3783934304-527937018-1008.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-300104450-3783934304-527937018-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-300104450-3783934304-527937018-1008.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 192.168.1.1
DPF: {0D8004AA-A1CB-4F92-BBEB-0A824B1EE2A2} - hxxp://ws.nopp.co.kr/Game/Common/HGLauncher.cab
FF - ProfilePath - c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\
FF - prefs.js: network.proxy.type - 0
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHANS REMOVED - - - -
.
BHO-{C335D693-C53A-45DC-A80D-7409E711F3D5} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
HKU-Default-Run-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKU-Default-Run-Citrix - c:\documents and settings\rob\Local Settings\Application Data\Geckofx\Citrix\ivnabfndt.dll
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-Citrix - c:\documents and settings\rob\Local Settings\Application Data\Geckofx\Citrix\ivnabfndt.dll
MSConfigStartUp-d042f5cf - c:\windows\system32\rqehblqv.dll
MSConfigStartUp-EaseUs Tray - c:\program files\EaseUS\Todo Backup\bin\TrayNotify.exe
MSConfigStartUp-EaseUs Watch - c:\program files\EaseUS\Todo Backup\bin\EuWatch.exe
MSConfigStartUp-Genie TimeLine Tray - c:\program files\Genie-Soft\Genie Timeline\GSTimeLineAgent.exe
MSConfigStartUp-nwiz - nwiz.exe
MSConfigStartUp-ooVoo - C\ooVoo.exe
MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre7\bin\jusched.exe
MSConfigStartUp-SweetIM - c:\program files\SweetIM\Messenger\SweetIM.exe
MSConfigStartUp-Sweetpacks Communicator - c:\program files\SweetIM\Communicator\SweetPacksUpdateManager.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
MSConfigStartUp-TomTomHOME - c:\program files\TomTom HOME 2\HOMERunner.exe
MSConfigStartUp-uTorrent - c:\documents and settings\rob\Desktop\utorrent.exe
MSConfigStartUp-vSide Pulse - c:\program files\vSide\Pulse\vSidePulse.exe
MSConfigStartUp-wmgmpr - c:\docume~1\Temp\LOCALS~1\Temp\wmgmpr.dll
AddRemove-Ease Audio Converter_is1 - c:\documents and settings\Temp\Desktop\MorePSP\EaseAudioConverter\unins000.exe
AddRemove-EASEUS Partition Master Home Edition_is1 - f:\program files (x86)\EASEUS\EASEUS Partition Master 9.1.0 Home Edition\unins000.exe
AddRemove-Guild Wars - f:\program files (x86)\Guild Wars\Gw.exe
AddRemove-LinuxLive USB Creator - f:\program files (x86)\LinuxLive USB Creator\Uninstall.exe
AddRemove-RPG Maker VX_is1 - f:\program files (x86)\Enterbrain\RPGVX\unins000.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-Network Addon Mod - c:\documents and settings\Temp\My Documents\SimCity 4\Plugins\Network Addon Mod\uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-14 01:02
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\FlashProp.FlashProp]
@DACL=(02 0000)
@="FlashProp Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\FlashProp.FlashProp.1]
@DACL=(02 0000)
@="FlashProp Class"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3200)
c:\windows\system32\WININET.dll
c:\windows\system32\msi.dll
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MI1933~1\Office14\1033\GrooveIntlResource.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Roxio\Drag-to-Disc\Shellex.dll
c:\windows\system32\DLAAPI_W.DLL
c:\windows\system32\CDRTC.DLL
c:\program files\Roxio\Drag-to-Disc\ShellRes.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\stsystra.exe
.
**************************************************************************
.
Completion time: 2012-07-14 01:13:41 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-14 06:13
.
Pre-Run: 139,023,896,576 bytes free
Post-Run: 144,957,714,432 bytes free
.
- - End Of File - - 28954F667A2DF09EDFB15978DC1134DC

#4 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 14 July 2012 - 08:38 AM

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#5 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 14 July 2012 - 11:54 AM

I actually ran TDSSKiller before coming here for help. I ran it again and it found no infections. This is so aggravating!
I am still getting redirects to click.get-answers-fast.com sites.
Thank you so much for you patience! My aswMBR log is below.

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-14 10:40:14
-----------------------------
10:40:14.406 OS Version: Windows 5.1.2600 Service Pack 3
10:40:14.406 Number of processors: 4 586 0xF0B
10:40:14.406 ComputerName: DADSOFFICE UserName: Temp
10:40:15.640 Initialize success
10:40:15.718 AVAST engine defs: 12071401
10:40:39.171 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2
10:40:39.171 Disk 0 Vendor: SAMSUNG_ CR10 Size: 476940MB BusType: 3
10:40:39.171 Disk 5 \Device\Harddisk5\DR8 -> \Device\0000007c
10:40:39.171 Disk 5 Vendor: Size: 476940MB BusType: 0
10:40:39.250 Disk 0 MBR read successfully
10:40:39.250 Disk 0 MBR scan
10:40:39.250 Disk 0 unknown MBR code
10:40:39.250 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 54 MB offset 63
10:40:39.250 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 473799 MB offset 112455
10:40:39.281 Disk 0 Partition 3 00 DB CP/M / CTOS Dell 8.0 3074 MB offset 970470585
10:40:39.281 Disk 0 scanning sectors +976768065
10:40:39.343 Disk 0 scanning C:\WINDOWS\system32\drivers
10:40:48.015 Service scanning
10:41:02.687 Modules scanning
10:41:05.078 Module: C:\WINDOWS\System32\drivers\dxgthk.sys **SUSPICIOUS**
10:41:06.125 Module: C:\WINDOWS\system32\ntdll.dll **SUSPICIOUS**
10:41:06.125 Disk 0 trace - called modules:
10:41:06.156 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
10:41:06.156 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8b3739c0]
10:41:06.156 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x8b374030]
10:41:07.234 AVAST engine scan C:\WINDOWS
10:41:11.593 AVAST engine scan C:\WINDOWS\system32
10:43:45.437 AVAST engine scan C:\WINDOWS\system32\drivers
10:44:06.265 AVAST engine scan C:\Documents and Settings\Temp
11:29:35.734 AVAST engine scan C:\Documents and Settings\All Users
11:37:34.406 Scan finished successfully
11:52:41.203 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Temp\Desktop\MBR.dat"
11:52:41.203 The log file has been saved successfully to "C:\Documents and Settings\Temp\Desktop\aswMBR.txt"

#6 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 14 July 2012 - 12:13 PM

greetings

In which browsers are you getting redirected - please verify all that are installed



Lets get a deeper look into the system and see if something shows up.

Download and run OTL

Download OTL by Old Timer and save it to your Desktop.
  • Double click on OTL.exe to run it.
  • Under Output, ensure that Minimal Output is selected.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <-- Will be opened and the that I need posted back here
    • Extra.txt <-- Will be minimized - save this one on your desktop in case I ask for it later
  • Please post the contents of OTL.txt in your next reply.

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#7 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 14 July 2012 - 01:53 PM

I'm only being redirected in Firefox.

I'm sorry. I cannot, for the life of me, get OTL to run. I've saved it to my desktop and even tried other folders, but I keep getting the error:
"OTL cannot be run from a temporary folder. Please download it to your desktop or other suitable location."

#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 14 July 2012 - 02:47 PM

Ok lets try this and then we will see if we need to run OTL


I want you to uninstall firefox and if asked about user data or settings remove them also (bookmarks may be backed up)

restart the computer and reinstall firefox - verify firefox and if no redirects then reinstate your bookmarks and verify again



Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 16 July 2012 - 08:46 PM

Sorry for the delay,

I tried this and am still being redirected.
Actually, I'm not sure if this is directly related, but this computer is unable to load "google.com". It can load any other country's version of google, however.

#10 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 16 July 2012 - 09:27 PM

Hello

Looks like you may have a broken catroot folder, lets do this to see if we can get it fixed

Repair Catroot

  • Click Start, click Run, type Notepad, and then click OK.
  • Copy the following text, and then paste the text into Notepad.
net stop wuauserv
cd %systemroot%\SoftwareDistribution
ren Download Download.old
net start wuauserv
net stop bits
net start bits
net stop cryptsvc
cd %systemroot%\system32
ren catroot2 catroot2old
net start cryptsvc
  • Click File, click Save As, and then type Repair.bat.
  • In the Save as type box, click All Files.
  • In the Save in box, click Desktop, and then click Save.
  • On the File menu, click Exit.
    Double-click the Repair.bat file

Now I need you to go to windows update and download any update that it wants you to download.

Once that is complete please rerun combofix for me and if it asks you to update please allow it to.
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#11 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 19 July 2012 - 12:08 AM

Google.com works, but loads very slow, and often gives inconclusive search results.. Google.XXX works fine.
Still being redirected.

ComboFix 12-07-18.04 - Temp 07/18/2012 18:39:08.2.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2424 [GMT -5:00]
Running from: c:\documents and settings\Temp\My Documents\Downloads\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\test.txt
.
Infected copy of c:\windows\system32\userinit.exe was found and disinfected
Restored copy from - c:\windows\ServicePackFiles\i386\userinit.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-06-19 to 2012-07-19 )))))))))))))))))))))))))))))))
.
.
2012-07-18 23:26 . 2012-07-18 23:26 -------- d-sh--w- c:\documents and settings\Temp\IECompatCache
2012-07-17 04:57 . 2012-07-18 23:35 -------- d-----w- c:\windows\system32\CatRoot2
2012-07-15 05:01 . 2012-07-15 05:03 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\ArmA 2 Free
2012-07-11 18:50 . 2012-07-14 06:23 -------- d-----w- c:\program files\1ClickDownload
2012-07-11 03:45 . 2012-07-11 03:47 -------- d-----w- c:\documents and settings\Temp\Application Data\DTA Archiver
2012-07-10 16:08 . 2012-07-10 16:08 -------- d-----w- c:\program files\MultiExtractor Pro
2012-07-10 03:10 . 2012-07-10 03:10 -------- d-----w- c:\documents and settings\All Users\Application Data\easetech
2012-07-09 18:16 . 2000-09-28 20:00 110592 ----a-w- c:\windows\system32\atrac3.acm
2012-07-09 18:13 . 2012-07-09 18:19 -------- d-----w- c:\program files\GoldWave
2012-07-09 16:05 . 2012-07-09 16:05 -------- d--h--w- c:\windows\PIF
2012-07-08 20:08 . 2012-07-08 20:08 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Focus Home Interactive
2012-07-08 19:40 . 2012-07-08 20:39 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-07-08 06:02 . 2012-07-08 06:02 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\fontconfig
2012-07-08 06:02 . 2012-07-08 06:06 -------- d-----w- c:\documents and settings\Temp\.gimp-2.8
2012-07-08 06:02 . 2012-07-08 06:02 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\gegl-0.2
2012-07-08 05:59 . 2012-07-08 06:01 -------- d-----w- c:\program files\GIMP 2
2012-07-08 04:58 . 2001-11-05 14:30 165376 ----a-w- c:\windows\UNWISE.EXE
2012-07-08 04:58 . 2012-07-08 04:58 -------- d-----w- c:\program files\Borland
2012-07-08 04:44 . 2012-07-08 04:44 40960 ----a-r- c:\documents and settings\Temp\Application Data\Microsoft\Installer\{5E08B15D-7C97-4FC9-8500-BD7EDA18C66A}\NewShortcut1_5E08B15D7C974FC98500BD7EDA18C66A.exe
2012-07-08 04:44 . 2012-07-08 05:33 -------- d-----w- C:\microdem
2012-07-08 04:44 . 2012-07-08 05:01 -------- d-----w- C:\mapdata
2012-07-08 04:06 . 2012-07-08 04:06 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2012-07-04 00:17 . 2012-06-05 07:37 256904 ----a-w- c:\windows\system32\drivers\tmcomm.sys
2012-06-30 17:44 . 2012-07-01 05:13 -------- d-----w- c:\program files\Traffic Simulator Configuration Tool
2012-06-30 03:09 . 2012-06-30 03:09 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-06-28 19:17 . 2012-06-28 19:17 -------- d-----w- c:\program files\GOGcom
2012-06-28 19:02 . 2012-06-28 19:11 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\GOG.com
2012-06-28 19:01 . 2012-06-28 19:01 -------- d-----w- c:\program files\GOG.com
2012-06-27 20:22 . 2012-06-27 20:22 -------- d-----w- c:\documents and settings\Temp\Application Data\Atari
2012-06-27 20:13 . 2012-06-27 20:13 -------- d-----w- c:\documents and settings\All Users\Application Data\SecuROM
2012-06-27 20:13 . 2012-06-27 20:13 -------- d-----w- c:\program files\SecuROM
2012-06-27 19:46 . 2012-06-27 22:12 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2012-06-27 19:12 . 2012-06-27 19:12 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Geckofx
2012-06-27 19:10 . 2012-06-27 19:10 -------- d-----w- c:\documents and settings\Temp\Local Settings\Application Data\Playbryte
2012-06-27 18:50 . 2012-06-27 18:50 -------- d-----w- c:\documents and settings\Temp\Application Data\Leadertech
2012-06-27 18:44 . 2012-06-27 18:44 -------- d-----w- c:\program files\Atari
2012-06-27 18:43 . 2005-04-04 04:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2012-06-27 18:43 . 2005-04-04 04:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2012-06-27 18:43 . 2005-04-04 04:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2012-06-27 18:43 . 2005-04-04 03:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2012-06-27 18:43 . 2005-04-04 04:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2012-06-27 18:43 . 2012-06-27 18:43 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2012-06-27 18:43 . 2012-06-27 18:43 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2012-06-27 02:28 . 2012-06-27 02:28 -------- d-----w- c:\documents and settings\Temp\Application Data\Sony Corporation
2012-06-23 14:28 . 2012-06-23 14:28 -------- d-----w- c:\program files\ConvertHelper
2012-06-19 22:35 . 2012-06-19 22:35 4967624 ----a-w- c:\program files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 18:25 . 2012-06-07 05:13 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-12 18:25 . 2011-06-04 23:29 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-03 16:21 . 2010-06-29 03:54 41224 ----a-w- c:\windows\avastSS.scr
2012-06-13 13:19 . 2004-08-10 16:51 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:50 . 2008-08-30 02:06 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:50 . 2004-08-10 16:51 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 22:35 . 2008-02-14 01:10 222448 ----a-w- c:\windows\system32\muweb.dll
2012-06-04 04:32 . 2004-08-10 16:51 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 20:19 . 2007-07-30 23:18 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 20:19 . 2007-07-30 23:19 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 20:19 . 2004-08-10 17:02 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 20:19 . 2004-08-10 17:02 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 20:19 . 2004-08-10 17:02 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 20:19 . 2007-07-30 23:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 20:19 . 2007-07-30 23:19 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 20:19 . 2004-08-10 17:02 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 20:19 . 2004-08-10 17:02 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 20:19 . 2004-08-10 16:50 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 20:19 . 2007-07-30 23:18 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 20:19 . 2004-08-10 17:02 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 20:19 . 2004-08-10 17:02 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 20:18 . 2008-02-14 01:10 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 20:18 . 2008-02-14 01:10 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-01 20:04 . 2012-06-01 19:59 140952 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-06-01 20:04 . 2012-06-01 00:57 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-06-01 20:04 . 2012-06-01 20:04 298280 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-06-01 20:04 . 2012-06-01 19:58 298280 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-06-01 19:59 . 2012-06-01 19:59 138056 ----a-w- c:\documents and settings\Temp\Application Data\PnkBstrK.sys
2012-05-31 21:36 . 2012-06-01 00:57 3360624 ----a-w- c:\windows\system32\pbsvc.exe
2012-05-31 13:22 . 2004-08-10 16:50 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2004-08-10 16:51 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-16 05:33 . 2012-05-16 05:33 33824 ----a-w- c:\windows\system32\drivers\oreans32.sys
2012-05-15 10:18 . 2012-05-31 21:20 65536 ----a-w- c:\windows\system32\OpenCL.dll
2012-05-15 10:18 . 2012-05-31 21:19 883008 ----a-w- c:\windows\system32\nvgenco32.dll
2012-05-15 10:18 . 2012-05-31 21:19 6012928 ----a-w- c:\windows\system32\nvcuda.dll
2012-05-15 10:18 . 2012-05-31 21:19 2530624 ----a-w- c:\windows\system32\nvcuvid.dll
2012-05-15 10:18 . 2012-05-31 21:19 2445120 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-05-15 10:18 . 2012-05-31 21:19 1000768 ----a-w- c:\windows\system32\nvdispco32.dll
2012-05-15 10:18 . 2012-05-31 21:19 17543168 ----a-w- c:\windows\system32\nvcompiler.dll
2012-05-15 09:40 . 2010-04-04 00:23 143680 ----a-w- c:\windows\system32\nvcolor.exe
2012-05-11 14:42 . 2004-08-10 16:51 43520 ------w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42 . 2004-08-10 16:51 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2004-08-10 16:51 385024 ------w- c:\windows\system32\html.iec
2012-05-04 13:16 . 2004-08-10 16:51 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 2004-08-04 02:59 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2004-08-10 17:01 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-14 22:20 . 2012-07-14 23:37 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-07-14_06.02.29 )))))))))))))))))))))))))))))))))))))))))
.
- 2012-05-15 09:11 . 2012-05-15 09:11 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
+ 2012-07-18 23:18 . 2012-07-18 23:18 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
+ 2012-07-19 00:04 . 2012-07-19 00:04 16384 c:\windows\Temp\Perflib_Perfdata_4f4.dat
- 2007-09-02 22:59 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
+ 2007-09-02 22:59 . 2008-04-13 17:45 32128 c:\windows\system32\drivers\usbccgp.sys
- 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
+ 2012-06-01 17:28 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
+ 2011-04-06 21:48 . 2011-04-06 21:48 11120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Serialization.dll
+ 2011-05-17 13:44 . 2011-05-17 13:44 98152 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Caching.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 39808 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll
+ 2011-05-17 14:27 . 2011-05-17 14:27 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
- 2010-03-18 18:16 . 2010-03-18 18:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 30048 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
- 2010-03-18 21:47 . 2010-03-18 21:47 30048 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
- 2012-05-15 09:11 . 2012-05-15 09:11 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
- 2012-05-15 09:11 . 2012-05-15 09:11 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-07-18 23:16 . 2012-07-18 23:16 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-06-14 09:14 . 2012-06-14 09:14 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-05-15 09:11 . 2012-05-15 09:11 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-02 00:25 . 2012-07-15 09:18 34144 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 34144 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 42848 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 42848 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\msouc.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 19296 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 19296 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2011-02-04 19:40 . 2011-02-04 19:40 49488 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\VBAJET32.DLL
+ 2010-12-21 06:48 . 2010-12-21 06:48 44992 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACERCLR.DLL
+ 2012-07-19 00:11 . 2012-07-19 00:11 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
- 2012-05-15 09:17 . 2012-05-15 09:17 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\4185d95173b2ad3cd57c5a8140a29784\System.Xaml.Hosting.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\d8f7bf8ce78d0785e68c589c1e64a6dd\System.Web.Routing.ni.dll
- 2012-05-15 09:21 . 2012-05-15 09:21 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\d8f7bf8ce78d0785e68c589c1e64a6dd\System.Web.Routing.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\be0023b0814db0cd39b177e21632f8e9\System.Web.DynamicData.Design.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\31ec874a9482ad1a99ba24ca4a6ec914\System.Web.Abstractions.ni.dll
- 2012-05-15 09:20 . 2012-05-15 09:20 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\31ec874a9482ad1a99ba24ca4a6ec914\System.Web.Abstractions.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\703ffb7a271059d40edeff9eb0e2b7e3\System.ServiceModel.ServiceMoniker40.ni.dll
- 2012-05-15 09:18 . 2012-05-15 09:18 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\f519738a47ffedaa4c04ec6e16a6b7b1\Microsoft.Workflow.Compiler.ni.exe
- 2012-05-15 09:17 . 2012-05-15 09:17 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
- 2012-05-15 09:16 . 2012-05-15 09:16 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\62f3fe491f17f4f2e39887270fd04497\WiaProxy32.ni.exe
- 2012-06-14 09:21 . 2012-06-14 09:21 24064 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\62f3fe491f17f4f2e39887270fd04497\WiaProxy32.ni.exe
- 2012-05-11 09:12 . 2012-05-11 09:12 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
- 2012-05-11 09:11 . 2012-05-11 09:11 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
+ 2012-07-18 23:13 . 2012-07-18 23:13 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
- 2012-05-11 09:10 . 2012-05-11 09:10 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e9a06237ecde61251d8bf446bd76f9d0\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e9a06237ecde61251d8bf446bd76f9d0\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e2b4d60136d8c33d02a43ade5e7df7c7\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
- 2012-05-11 09:13 . 2012-05-11 09:13 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d044a8659ddade7b532b28f48055bede\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d044a8659ddade7b532b28f48055bede\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c7f38437990df09602f36c198f23d0fc\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c7f38437990df09602f36c198f23d0fc\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9cd39d3fb0d0f92abe8a6c16017d8419\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9cd39d3fb0d0f92abe8a6c16017d8419\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\89fdb48c23f6885cfbec8b7ee55fa8a1\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\89fdb48c23f6885cfbec8b7ee55fa8a1\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\619d4ed5f741c327caa3ceb37f4d3c13\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\619d4ed5f741c327caa3ceb37f4d3c13\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\47ad7470b0c69329cc3ffcd47d450a4e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\47ad7470b0c69329cc3ffcd47d450a4e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c8ea208d5974948251b09a4c8bad37a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
- 2012-05-11 09:13 . 2012-05-11 09:13 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c8ea208d5974948251b09a4c8bad37a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\18873930a77450a2fb3479b840201784\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
- 2012-05-11 09:13 . 2012-05-11 09:13 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\18873930a77450a2fb3479b840201784\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\f00a18225430e7531135589688d650a1\Microsoft.VisualC.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\f00a18225430e7531135589688d650a1\Microsoft.VisualC.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\2d6d833e8b201c5f11892ea32fe62676\Microsoft.Office.InfoPath.Permission.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\2d6d833e8b201c5f11892ea32fe62676\Microsoft.Office.InfoPath.Permission.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\ipdmctrl\4ed28c35596431dc4ee9602bd59525eb\ipdmctrl.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\ipdmctrl\4ed28c35596431dc4ee9602bd59525eb\ipdmctrl.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\4f91feffa9545521cbb853e1da011297\Interop.WIA.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\4f91feffa9545521cbb853e1da011297\Interop.WIA.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
+ 2012-07-18 23:53 . 2012-07-18 23:53 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
- 2012-05-11 09:13 . 2012-05-11 09:13 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
- 2012-05-15 09:16 . 2012-05-15 09:16 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-07-19 00:10 . 2012-07-19 00:10 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-07-18 23:16 . 2012-07-18 23:16 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2004-08-10 16:51 . 2012-07-18 23:18 603240 c:\windows\system32\perfh009.dat
+ 2004-08-10 16:51 . 2012-07-18 23:18 122582 c:\windows\system32\perfc009.dat
- 2004-08-10 16:57 . 2012-07-08 19:31 343424 c:\windows\system32\FNTCACHE.DAT
+ 2004-08-10 16:57 . 2012-07-15 09:38 343424 c:\windows\system32\FNTCACHE.DAT
+ 2008-12-05 06:54 . 2012-06-04 04:32 152576 c:\windows\system32\dllcache\schannel.dll
- 2004-08-10 17:02 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
+ 2004-08-10 17:02 . 2012-05-28 18:16 536576 c:\windows\system32\dllcache\msado15.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 326000 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Web.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 175992 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Activation.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 236880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Net.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 810352 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Entity.Design.dll
- 2010-03-18 21:47 . 2010-03-18 21:47 181584 c:\windows\Microsoft.NET\Framework\v4.0.30319\peverify.dll
+ 2011-05-17 13:44 . 2011-05-17 13:44 181584 c:\windows\Microsoft.NET\Framework\v4.0.30319\peverify.dll
+ 2011-05-17 14:27 . 2011-05-17 14:27 413520 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-05-15 21:23 . 2012-05-15 21:23 371272 c:\windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
+ 2012-07-15 03:42 . 2012-07-15 03:42 371272 c:\windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe
- 2012-06-27 02:28 . 2012-06-27 02:28 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\NewShortcut1_8DB1196CC49445FC8FC84B1BFFC527D6.exe
+ 2012-06-27 02:28 . 2012-07-18 01:53 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\NewShortcut1_8DB1196CC49445FC8FC84B1BFFC527D6.exe
- 2012-06-27 02:28 . 2012-06-27 02:28 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\CMA.exe_1F057286209E4927B4FE61FAE35CE3ED.exe
+ 2012-06-27 02:28 . 2012-07-18 01:53 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\CMA.exe_1F057286209E4927B4FE61FAE35CE3ED.exe
+ 2012-06-27 02:28 . 2012-07-18 01:53 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\ARPPRODUCTICON.exe
- 2012-06-27 02:28 . 2012-06-27 02:28 358328 c:\windows\Installer\{BE841724-78F0-44D6-B6C4-C3D53708293B}\ARPPRODUCTICON.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 415584 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 415584 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 303456 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 303456 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 571232 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 571232 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 326496 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 326496 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\joticon.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 470616 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 178528 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 178528 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\grvicons.exe
+ 2011-03-16 15:42 . 2011-03-16 15:42 407336 c:\windows\Installer\$PatchCache$\Managed\9C8928403D4AB094F99FBA20A329833F\1.0.0\SteamService.exe
+ 2011-02-05 05:52 . 2011-02-05 05:52 403320 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\OFFXML.DLL
+ 2010-10-20 22:06 . 2010-10-20 22:06 169352 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\IPOLK.DLL
+ 2011-02-04 19:40 . 2011-02-04 19:40 452936 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\EXPSRV.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 362904 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEXBE.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 220560 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACETXT.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 527776 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEREP.DLL
+ 2010-12-21 06:48 . 2010-12-21 06:48 329624 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACER3X.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 383904 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEOLEDB.DLL
+ 2010-12-21 06:48 . 2010-12-21 06:48 278448 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEODBC.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 644504 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEEXCL.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 334752 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEEXCH.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 686504 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEES.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEDAO.DLL
+ 2010-12-28 06:49 . 2010-12-28 06:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACACEDAO.DLL
+ 2012-07-19 00:14 . 2012-07-19 00:14 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\09f78ad9517d5d19de8498bac32fc9f8\XamlBuildTask.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\a61f64155e6b58da21013a5e4d6805c2\WsatConfig.ni.exe
+ 2012-07-19 00:14 . 2012-07-19 00:14 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll
- 2012-05-15 09:17 . 2012-05-15 09:17 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\7a9f70fa774076a7ec19bc03e7064d0d\UIAutomationClient.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\4837a5c6204d53e7aa4f7dd94b98207c\System.Xml.Linq.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\c477bbff1e4662263255a1bf17bd9c2a\System.Windows.Input.Manipulations.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\122b5ef2b93132bd770c2c5d753d73ee\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\ea0b825a2dd1a056f6171170eb072d4a\System.Web.RegularExpressions.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\c85b43405ac9aa403a714af716ef3c5e\System.Web.Extensions.Design.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\a0abe24dff94a2fb2c27c631a45aa95f\System.Web.Entity.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\951b0d1b999b49a47fb06f4011565ffa\System.Web.Entity.Design.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\ae2121b64d021313d3c1ddd621e4d472\System.Web.DynamicData.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\15e5acbd2196d1d4bde8466ff690aa76\System.Web.DataVisualization.Design.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f8fa8f3947b4f9b6819d121537e39050\System.ServiceModel.Activation.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dc86fe1c7a6e3a7ce9e9c1f13d9b1e8e\System.ServiceModel.Routing.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\5a3beae8b211b91bfc620c029cf4c2d4\System.Security.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\94b346f2ab12d38efb1331ded5783396\System.Runtime.Remoting.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 244736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\d8b4dcd719a3805ab0bce3c8cdfe8288\System.Runtime.Caching.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
- 2012-05-15 09:09 . 2012-05-15 09:09 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\dd25ddcfa0417d40e3f1385e30abcd6f\System.Net.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\08397796343d5730a29f42e61c7f6ee7\System.Management.Instrumentation.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ff1250d2409bd16283c423650d6fd3f6\System.IO.Log.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e60675d3ba7fa94924489dc8466ebff5\System.IdentityModel.Selectors.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a9b1e597aaa263dea2cf8754440bd271\System.Dynamic.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\0640b7fe359ea63a1799465631aa691a\System.Drawing.Design.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e41e86da56bb60523251e0e08210a77b\System.DirectoryServices.Protocols.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94d45f7f28d81304d7fa83bcea849141\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4c50d8a951546d6dffdc8bcb23f47a7b\System.Device.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\9242a5a839c4ae4f203c32b409dc7c42\System.Data.Services.Design.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\7803f4398a527a87d5cace8023e93e8b\System.Data.DataSetExtensions.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\877ef74350e6d374ca8f80b489a8cc8e\System.ComponentModel.Composition.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4330e93f9d0ef85f1a972e11c2ac5156\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0c67d9fc14856eb7d8b4e405aef79960\System.AddIn.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\2b046f2d5f056b906d7b25b75ca23575\System.Activities.DurableInstancing.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\4847f66153121ec4ed532909f7c152be\SMSvcHost.ni.exe
+ 2012-07-19 00:11 . 2012-07-19 00:11 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ef6e3eb351fe12a5766be7c956c35d95\PresentationFramework.Classic.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e49a124fdad0f1db135f03a49f18fb48\PresentationFramework.Royale.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\141f0a8fbfb83604fa3dd43dbe8fa0f4\PresentationFramework.Luna.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\d47740fc85ad70c686adc9fc9dc6e7f5\MSBuild.ni.exe
+ 2012-07-19 00:11 . 2012-07-19 00:11 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8cc4dd9babffe370cf375925fba15f84\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\01c5ff7a1ea0463414736df5d449e0a9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\3ad065635e1e0cd413081be61993cd38\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\71a3a98ff5fb128d3abf6ecc3224ba6b\Microsoft.Build.Framework.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 136192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\f18a2a149b3e7f9cf74de1263c2ee337\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
- 2012-05-15 09:17 . 2012-05-15 09:17 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\7186c9237e315a433d3c6a31fea48310\ComSvcConfig.ni.exe
+ 2012-07-19 00:10 . 2012-07-19 00:10 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\b02ad189fc3de84d6361f0bf0cfafbf5\AspNetMMCExt.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ac4fc3032c19946f9b2729468888206d\WsatConfig.ni.exe
+ 2012-07-18 23:54 . 2012-07-18 23:54 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ac4fc3032c19946f9b2729468888206d\WsatConfig.ni.exe
- 2012-06-14 09:19 . 2012-06-14 09:19 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll
- 2012-05-11 09:12 . 2012-05-11 09:12 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\04e5e2be34a70ee7f4c87550238095a0\UIAutomationClient.ni.dll
- 2012-05-11 09:12 . 2012-05-11 09:12 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\04e5e2be34a70ee7f4c87550238095a0\UIAutomationClient.ni.dll
- 2012-05-11 09:20 . 2012-05-11 09:20 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\1c13b08593e99d6f5bef49ae7939c78b\System.Xml.Linq.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\1c13b08593e99d6f5bef49ae7939c78b\System.Xml.Linq.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6c7765c10516d375e9ddedad2dbab848\System.Web.RegularExpressions.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6c7765c10516d375e9ddedad2dbab848\System.Web.RegularExpressions.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\41f6f6dd0c8427d4a8e6fd3915505a6b\System.Transactions.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\41f6f6dd0c8427d4a8e6fd3915505a6b\System.Transactions.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\129b15861e200613ff78ae15581f9093\System.Security.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\129b15861e200613ff78ae15581f9093\System.Security.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a644ec04e18202b60f9d828bc207972b\System.Runtime.Serialization.Formatters.Soap.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a644ec04e18202b60f9d828bc207972b\System.Runtime.Serialization.Formatters.Soap.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\4a9eb43005a041959ddc5c7e586ab746\System.Net.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\4a9eb43005a041959ddc5c7e586ab746\System.Net.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9080c8e8e7b6dfb502c1328673d636f8\System.Management.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9080c8e8e7b6dfb502c1328673d636f8\System.Management.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\3182a049ba953010dec649cf290a9e90\System.Management.Instrumentation.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\3182a049ba953010dec649cf290a9e90\System.Management.Instrumentation.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8991f21d4b3676bf6f779110db8d4ac9\System.IO.Log.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8991f21d4b3676bf6f779110db8d4ac9\System.IO.Log.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cd9c60a35d4958e94d2e3dd2f778e2e9\System.IdentityModel.Selectors.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cd9c60a35d4958e94d2e3dd2f778e2e9\System.IdentityModel.Selectors.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.Wrapper.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.Wrapper.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.ni.dll
- 2012-06-14 09:19 . 2012-06-14 09:19 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ca484772955bc4db03b5dcb611c09423\System.DirectoryServices.Protocols.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ca484772955bc4db03b5dcb611c09423\System.DirectoryServices.Protocols.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ba5e68dddfd3279a8469d39eded48f3\System.DirectoryServices.AccountManagement.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ba5e68dddfd3279a8469d39eded48f3\System.DirectoryServices.AccountManagement.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a0109fce606a3110a5e7f9a4773f517e\System.Data.Services.Design.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a0109fce606a3110a5e7f9a4773f517e\System.Data.Services.Design.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3a68d0441f509ffa6f8f0fb9cfcc5780\System.Data.Services.Client.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3a68d0441f509ffa6f8f0fb9cfcc5780\System.Data.Services.Client.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04440b3dd5d822da4973a525ee04b05d\System.Data.Entity.Design.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04440b3dd5d822da4973a525ee04b05d\System.Data.Entity.Design.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7bbb5d9e3b161b4d4b968e590442d3ae\System.Data.DataSetExtensions.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7bbb5d9e3b161b4d4b968e590442d3ae\System.Data.DataSetExtensions.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d5b7368bde0f65aa15d9f46b498cc89\System.Configuration.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d5b7368bde0f65aa15d9f46b498cc89\System.Configuration.ni.dll
- 2012-06-14 09:13 . 2012-06-14 09:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\931a2bece4668863db4f852401c828cf\System.AddIn.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\931a2bece4668863db4f852401c828cf\System.AddIn.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6762f1ee780fa9c0b4ef66b285c64844\SMSvcHost.ni.exe
- 2012-05-11 09:17 . 2012-05-11 09:17 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6762f1ee780fa9c0b4ef66b285c64844\SMSvcHost.ni.exe
- 2012-05-11 09:17 . 2012-05-11 09:17 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\660c4d6dd69ef22bc05587e1998cd135\SMDiagnostics.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\660c4d6dd69ef22bc05587e1998cd135\SMDiagnostics.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\47ed5bc9f42ea0054ce9acfde5e640b8\ServiceModelReg.ni.exe
- 2012-05-11 09:17 . 2012-05-11 09:17 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\47ed5bc9f42ea0054ce9acfde5e640b8\ServiceModelReg.ni.exe
+ 2012-07-18 23:13 . 2012-07-18 23:13 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\4be87653774c84227d0c36afa637eb82\PaintDotNet.SystemLayer.Native.x86.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\4be87653774c84227d0c36afa637eb82\PaintDotNet.SystemLayer.Native.x86.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 902144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\28b422c88114c22be760cf99a2392212\PaintDotNet.SystemLayer.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 902144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\28b422c88114c22be760cf99a2392212\PaintDotNet.SystemLayer.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 389632 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\72836a1e77b8043cf28e37ca14f0ed54\PaintDotNet.Resources.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 389632 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\72836a1e77b8043cf28e37ca14f0ed54\PaintDotNet.Resources.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 813568 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\b7b04dd0445ba8e778231d5a9bd7b938\PaintDotNet.Effects.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 813568 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\b7b04dd0445ba8e778231d5a9bd7b938\PaintDotNet.Effects.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 582144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\1a9caa026c151786bf2b23c48ca4920c\PaintDotNet.Data.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 582144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\1a9caa026c151786bf2b23c48ca4920c\PaintDotNet.Data.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 862720 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\6540e702912c28d0326ff3736ff85600\PaintDotNet.Base.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 862720 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\6540e702912c28d0326ff3736ff85600\PaintDotNet.Base.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5a121969a115d11b6256eb960c145686\MSBuild.ni.exe
- 2012-05-11 09:17 . 2012-05-11 09:17 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5a121969a115d11b6256eb960c145686\MSBuild.ni.exe
- 2012-05-11 09:18 . 2012-05-11 09:18 650240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d24cbf79470dc8ce89d12ba7cda8dc54\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 650240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d24cbf79470dc8ce89d12ba7cda8dc54\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c8d84838a2077f89a49398a551aa2c2a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c8d84838a2077f89a49398a551aa2c2a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ab2c5393e792856e51eb55717b740ddd\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ab2c5393e792856e51eb55717b740ddd\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9f6c4c1b4caff940f941505f18570637\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
- 2012-05-11 09:13 . 2012-05-11 09:13 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9f6c4c1b4caff940f941505f18570637\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9d640faedb6b020277279344493ab941\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8da0e8457640aa17cd086d7fd447cc74\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8da0e8457640aa17cd086d7fd447cc74\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b96908ef5c99f671bc8640b10662efa\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\8b96908ef5c99f671bc8640b10662efa\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\83d91288503b19139d67b6ecd14e795e\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\83d91288503b19139d67b6ecd14e795e\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7bba9a53f213351e6c5c24ac22c0db22\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7890a368ee51d54493c067e3a01f3ca0\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7890a368ee51d54493c067e3a01f3ca0\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6dee6901c2203722252fe4928fbbdea5\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6dee6901c2203722252fe4928fbbdea5\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3d6fee296ceb8b0b245bea96382b8ec7\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3d6fee296ceb8b0b245bea96382b8ec7\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\235e030028c0232c1ab90524b58a8f59\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\235e030028c0232c1ab90524b58a8f59\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0ce6271a834d100f659e8f1218fda496\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
- 2012-06-14 09:20 . 2012-06-14 09:20 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0ce6271a834d100f659e8f1218fda496\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0942ee91cafd60e9e99210b17e298a43\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\97c613d3899b320a6765793bdf490272\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\97c613d3899b320a6765793bdf490272\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 815616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\f668bc17505b047b4c967430c998fe1b\Microsoft.Office.Tools.Common.v9.0.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 815616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\f668bc17505b047b4c967430c998fe1b\Microsoft.Office.Tools.Common.v9.0.ni.dll
- 2012-06-14 09:20 . 2012-06-14 09:20 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\e206de6271bec5512973017fd4dfa281\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-07-18 23:50 . 2012-07-18 23:50 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\e206de6271bec5512973017fd4dfa281\Microsoft.Office.Tools.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\d81ee5ecf6b78df53df9c4abdd4e612e\Microsoft.Office.Tools.Word.v9.0.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\d81ee5ecf6b78df53df9c4abdd4e612e\Microsoft.Office.Tools.Word.v9.0.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\58e248b72b51c93081e9357feb14cd5a\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\58e248b72b51c93081e9357feb14cd5a\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 375808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\de8ce5d8886580a5c60b65258fded078\Microsoft.Office.Interop.InfoPath.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 375808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\de8ce5d8886580a5c60b65258fded078\Microsoft.Office.Interop.InfoPath.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 206848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\bf4377a61157c724bf5fce35fa21957e\Microsoft.Office.InfoPath.Client.Internal.Host.Interop.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 206848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\bf4377a61157c724bf5fce35fa21957e\Microsoft.Office.InfoPath.Client.Internal.Host.Interop.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\795f3e690c670c944e8333d11659fa73\Microsoft.Office.InfoPath.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\795f3e690c670c944e8333d11659fa73\Microsoft.Office.InfoPath.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 268800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\c9a1464be3757f9cf8eb17e56be4a129\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 268800 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\c9a1464be3757f9cf8eb17e56be4a129\Microsoft.Office.BusinessApplications.Diagnostics.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 343040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\b7325d6222fb2c8e86008664f7ec8671\Microsoft.BusinessData.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 343040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessD#\b7325d6222fb2c8e86008664f7ec8671\Microsoft.BusinessData.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dec22fb7d6b8929a41380e5359741a07\Microsoft.Build.Utilities.v3.5.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dec22fb7d6b8929a41380e5359741a07\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1009b31c86a1b798fffa9e0127cec29c\Microsoft.Build.Utilities.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1009b31c86a1b798fffa9e0127cec29c\Microsoft.Build.Utilities.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\21d88631ef629715d3eecdd08e62e0b8\Microsoft.Build.Engine.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\21d88631ef629715d3eecdd08e62e0b8\Microsoft.Build.Engine.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a0f38c6478cca8297fb160291346c1c9\Microsoft.Build.Conversion.v3.5.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a0f38c6478cca8297fb160291346c1c9\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 547840 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\b786edc4c2b897f21541c2324e7a8539\ICSharpCode.SharpZipLib.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 547840 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\b786edc4c2b897f21541c2324e7a8539\ICSharpCode.SharpZipLib.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\9869c02d18825fdd32e64135a3e7246b\ComSvcConfig.ni.exe
+ 2012-07-18 23:54 . 2012-07-18 23:54 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\9869c02d18825fdd32e64135a3e7246b\ComSvcConfig.ni.exe
+ 2012-07-18 23:50 . 2012-07-18 23:50 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
- 2012-06-14 09:20 . 2012-06-14 09:20 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:01 . 2012-07-15 05:01 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2004-08-10 16:51 . 2012-06-08 14:26 8462848 c:\windows\system32\shell32.dll
+ 2008-10-14 22:58 . 2012-06-13 13:19 1866112 c:\windows\system32\dllcache\win32k.sys
+ 2008-06-17 19:02 . 2012-06-08 14:26 8462848 c:\windows\system32\dllcache\shell32.dll
+ 2008-09-05 00:20 . 2012-06-05 15:50 1372672 c:\windows\system32\dllcache\msxml6.dll
- 2008-09-05 00:20 . 2009-07-31 16:05 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2007-08-30 04:33 . 2012-06-05 15:50 1172480 c:\windows\system32\dllcache\msxml3.dll
- 2007-08-30 04:33 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
- 2010-03-18 18:16 . 2010-03-18 18:16 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 2261832 c:\windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
- 2010-03-18 18:16 . 2010-03-18 18:16 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 6097256 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.dll
+ 2011-05-17 13:44 . 2011-05-17 13:44 5097816 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Design.dll
+ 2011-05-17 14:27 . 2011-05-17 14:27 2975064 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.dll
+ 2011-04-06 21:48 . 2011-04-06 21:48 1354584 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
+ 2011-04-06 21:16 . 2011-04-06 21:16 1069936 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-07-18 23:18 . 2012-07-18 23:18 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-05-15 09:11 . 2012-05-15 09:11 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-07-18 23:16 . 2012-07-18 23:16 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-06-14 09:15 . 2012-06-14 09:15 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-07-18 23:17 . 2012-07-18 23:17 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-06-20 06:29 . 2012-06-20 06:29 5262848 c:\windows\Installer\e37b91.msp
+ 2012-06-20 07:00 . 2012-06-20 07:00 3461120 c:\windows\Installer\e37b77.msp
+ 2012-04-05 06:56 . 2012-04-05 06:56 2820096 c:\windows\Installer\e37b60.msp
+ 2012-04-05 06:54 . 2012-04-05 06:54 8301056 c:\windows\Installer\e37b49.msp
+ 2012-06-20 07:06 . 2012-06-20 07:06 1839104 c:\windows\Installer\e37b30.msp
+ 2012-07-15 03:42 . 2012-07-15 03:42 1648640 c:\windows\Installer\4ad6699.msi
+ 2012-02-02 00:25 . 2012-07-15 09:18 1479520 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 1479520 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 1858400 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 1858400 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 3792736 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 3792736 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2012-02-02 00:25 . 2012-06-14 09:18 1449312 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2012-02-02 00:25 . 2012-07-15 09:18 1449312 c:\windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-03-18 18:16 . 2010-03-18 18:16 1663320 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\wpfgfx_x86.dll
+ 2010-10-22 23:12 . 2010-10-22 23:12 5496688 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\IPEDITOR.DLL
+ 2011-01-13 02:33 . 2011-01-13 02:33 5867896 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\IPDESIGN.DLL
+ 2010-10-22 23:12 . 2010-10-22 23:12 1734000 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\INFOPATH.EXE
+ 2010-10-23 00:55 . 2010-10-23 00:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACEWDAT.DLL
+ 2011-03-11 23:46 . 2011-03-11 23:46 2194312 c:\windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.6029\ACECORE.DLL
+ 2012-07-18 23:12 . 2012-07-18 23:12 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\24ed0e1df6a605cdb2088f87ae2ab8ff\UIAutomationClientsideProviders.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 1226752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\6831f648f5b925f1194f691b0b491662\System.WorkflowServices.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\b0d4852fc57aed572307b110107affa0\System.Workflow.Runtime.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 4476416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\a1705962a6725e5f40066496222d67e7\System.Workflow.ComponentModel.ni.dll
+ 2012-07-19 00:14 . 2012-07-19 00:14 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\ec819e8a7e4585ffc87ae93d3b0662d8\System.Workflow.Activities.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\dbe597aa9c12df5d08fb2f3f9872b834\System.Web.Services.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\98709826ecf4cc93d6b85c8fe2c009b7\System.Web.Mobile.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 3127296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\27b66f127250f2ba37f9bf1d519c6039\System.Web.Extensions.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 4575232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\794ebda123b04ccc874a5624bdced900\System.Web.DataVisualization.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\f368c85283c4e6c9650dd1c8d369dcc5\System.Speech.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f42c2acdb000001066c78acfc6cd8655\System.ServiceModel.Web.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ec057796972ce41b751eaa3a8306fbcb\System.ServiceModel.Discovery.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1393152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5055b60e339143bbace5871f5fe4b114\System.ServiceModel.Activities.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\79ac99fe5274fb82ffcff2c15f71854c\System.Runtime.DurableInstancing.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\bd28f26b18b8ffeee1a0fbaa98f5810e\System.IdentityModel.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0fe1e56d17858b6156a3a46330f75f27\System.DirectoryServices.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\99d0f7ba920eea1117e45dcd9fec0eb5\System.Data.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 2550272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\fdb98c6d783fe167c1dc0022f27b7cd6\System.Data.SqlXml.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 2026496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\9b0a11f0270b5bbeae593ca5c584afaa\System.Data.Services.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\b894a1df3e6d58ada8f1aa303465ca23\System.Data.Services.Client.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\d62b53e7a5528b03ff512c624a1fdb83\System.Data.OracleClient.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\82c0c56ff8259e1440cfd0d5727a26d8\System.Data.Linq.ni.dll
+ 2012-07-19 00:12 . 2012-07-19 00:12 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\56e7e8cf5ba51bc1d284209d75a194a4\System.Data.Entity.Design.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 7069184 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 4129280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\51025a1c89f6fd752a5396a059d608b2\System.Activities.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1546752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\66893548d2b2cad29cabf3b3578f356f\System.Activities.Core.Presentation.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\96e437d1e82e54e63ed96af50e96d03d\PresentationBuildTasks.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\42a7f127f3fda82fb12c6a6e144d08c1\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\41acde5834988268e2cdbed499715066\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9a37f4e64ce5b856ac3892fef064c7de\Microsoft.Transactions.Bridge.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\cfcc92c125ddfaabad24abe61cfc0471\Microsoft.JScript.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 1616896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\9912b6d76c1017b5af6ef24730f550ca\Microsoft.CSharp.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 4248064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\5246fa832baabf6e3706fd537fe19062\Microsoft.Build.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\545d26502454316492990b42b093e673\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\520f23eeaf6b5241a74a56338e8b89f8\Microsoft.Build.Engine.ni.dll
- 2012-05-11 09:10 . 2012-05-11 09:10 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6d8bef0d008389874e55c0308f0c18e5\WindowsBase.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6d8bef0d008389874e55c0308f0c18e5\WindowsBase.ni.dll
- 2012-05-11 09:12 . 2012-05-11 09:12 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\41a81b97625c113b591ed082c95276e2\UIAutomationClientsideProviders.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\41a81b97625c113b591ed082c95276e2\UIAutomationClientsideProviders.ni.dll
- 2012-05-11 09:10 . 2012-05-11 09:10 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
- 2012-05-11 09:12 . 2012-05-11 09:12 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
+ 2012-07-19 00:10 . 2012-07-19 00:10 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
- 2012-06-14 09:14 . 2012-06-14 09:14 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
- 2012-05-11 09:12 . 2012-05-11 09:12 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5efb50c91f3c5e49be2079f625d933b7\System.Speech.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5efb50c91f3c5e49be2079f625d933b7\System.Speech.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\97d635f5c656ae43d94b55e67fc4ab50\System.ServiceModel.Web.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\97d635f5c656ae43d94b55e67fc4ab50\System.ServiceModel.Web.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\505e12638acd6fdb22e1fd2d4c6fc232\System.Runtime.Serialization.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\505e12638acd6fdb22e1fd2d4c6fc232\System.Runtime.Serialization.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
- 2012-06-14 09:19 . 2012-06-14 09:19 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
- 2012-05-11 09:16 . 2012-05-11 09:16 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e09496ddb2bf6f3b69707924f2e6b5ff\System.IdentityModel.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e09496ddb2bf6f3b69707924f2e6b5ff\System.IdentityModel.ni.dll
- 2012-06-14 09:19 . 2012-06-14 09:19 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b55887436d2cfbe1fb32dd18d554185b\System.DirectoryServices.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b55887436d2cfbe1fb32dd18d554185b\System.DirectoryServices.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\12c6fe8d4dd78f9bddf847d3b2821c03\System.Data.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\12c6fe8d4dd78f9bddf847d3b2821c03\System.Data.ni.dll
+ 2012-07-18 23:51 . 2012-07-18 23:51 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\982b508698278c6ffb3d143bbe1e8bb8\System.Data.SqlXml.ni.dll
- 2012-05-11 09:14 . 2012-05-11 09:14 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\982b508698278c6ffb3d143bbe1e8bb8\System.Data.SqlXml.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de7666b1cd0a1bc363726c9553dc39c\System.Data.Services.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de7666b1cd0a1bc363726c9553dc39c\System.Data.Services.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\44a5fc9e7c71b1fe1e2c79b03ecc3bc7\System.Data.Linq.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\44a5fc9e7c71b1fe1e2c79b03ecc3bc7\System.Data.Linq.ni.dll
+ 2012-07-18 23:56 . 2012-07-18 23:56 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\ca63096c1ecf977f509e2a565f4bcdac\System.Data.Entity.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\38d07a5ac34b99d94fd14f42e779f625\System.Core.ni.dll
- 2012-05-11 09:11 . 2012-05-11 09:11 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\38d07a5ac34b99d94fd14f42e779f625\System.Core.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
- 2012-06-14 09:18 . 2012-06-14 09:18 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
- 2012-06-14 09:18 . 2012-06-14 09:18 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\4ff6600c1fd3415ef0b058cf28814cb6\PresentationBuildTasks.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 3212288 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\075345973160481d969a9b530bc754c4\PaintDotNet.ni.exe
- 2012-06-14 09:21 . 2012-06-14 09:21 3212288 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\075345973160481d969a9b530bc754c4\PaintDotNet.ni.exe
- 2012-06-14 09:21 . 2012-06-14 09:21 1932800 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\ce38307385f5e928f3f977a4351e292b\PaintDotNet.Core.ni.dll
+ 2012-07-18 23:52 . 2012-07-18 23:52 1932800 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\ce38307385f5e928f3f977a4351e292b\PaintDotNet.Core.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6509ea5a794dabe6979cbf0434bcc290\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
- 2012-05-11 09:18 . 2012-05-11 09:18 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6509ea5a794dabe6979cbf0434bcc290\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\42145ebf75f77cabad442f0801a81c64\Microsoft.Transactions.Bridge.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\42145ebf75f77cabad442f0801a81c64\Microsoft.Transactions.Bridge.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1354240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\045007c3f8fbcdd36408921fd83bd7eb\Microsoft.Office.Tools.Excel.v9.0.ni.dll
+ 2012-07-18 23:55 . 2012-07-18 23:55 1354240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\045007c3f8fbcdd36408921fd83bd7eb\Microsoft.Office.Tools.Excel.v9.0.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 1184256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\76f680454c0930b060727da8b8d21e38\Microsoft.Office.Interop.InfoPath.SemiTrust.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1184256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\76f680454c0930b060727da8b8d21e38\Microsoft.Office.Interop.InfoPath.SemiTrust.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\757eaf7616ca34d1e785a6dc6e1aa8d7\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1787904 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\757eaf7616ca34d1e785a6dc6e1aa8d7\Microsoft.Office.InfoPath.Client.Internal.Host.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1564160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\e5d87a749942fc51ae2cb64c8ed73c01\Microsoft.Office.BusinessApplications.Runtime.ni.dll
- 2012-06-14 09:12 . 2012-06-14 09:12 1564160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\e5d87a749942fc51ae2cb64c8ed73c01\Microsoft.Office.BusinessApplications.Runtime.ni.dll
- 2012-06-14 09:13 . 2012-06-14 09:13 3237376 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\cf714fa6d5a8c561a47b298400b21610\Microsoft.Office.BusinessData.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 3237376 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\cf714fa6d5a8c561a47b298400b21610\Microsoft.Office.BusinessData.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 2091008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\ae4d0447ab04182f5bcee2038c345e8b\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 2091008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\ae4d0447ab04182f5bcee2038c345e8b\Microsoft.Office.BusinessApplications.RuntimeUi.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 4751872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\a0e0d01ebd55398ab7d21752e1526854\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 4751872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.Bu#\a0e0d01ebd55398ab7d21752e1526854\Microsoft.Office.BusinessApplications.SyncServices.ni.dll
- 2012-05-11 09:19 . 2012-05-11 09:19 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\cfe15312373b4668398404b5822bab7d\Microsoft.JScript.ni.dll
+ 2012-07-18 23:57 . 2012-07-18 23:57 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\cfe15312373b4668398404b5822bab7d\Microsoft.JScript.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
- 2012-06-14 09:21 . 2012-06-14 09:21 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-07-18 23:54 . 2012-07-18 23:54 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5aa63a1cb41e3a5e1e8ed17072e60ec3\Microsoft.Build.Engine.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5aa63a1cb41e3a5e1e8ed17072e60ec3\Microsoft.Build.Engine.ni.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2012-06-01 00:57 . 2012-06-01 00:57 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2012-07-15 05:00 . 2012-07-15 05:00 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2007-09-02 23:31 . 2012-07-15 09:09 57442464 c:\windows\system32\MRT.exe
+ 2011-11-22 04:07 . 2011-11-22 04:07 17191936 c:\windows\Installer\11b925a.msp
+ 2011-05-19 03:55 . 2011-05-19 03:55 19624448 c:\windows\Installer\11b922c.msp
+ 2012-07-18 23:13 . 2012-07-18 23:13 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
+ 2012-07-19 00:11 . 2012-07-19 00:11 12079616 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\fdb5565e4c807a8cd79de9f40c0cd644\System.Web.ni.dll
+ 2012-07-19 00:13 . 2012-07-19 00:13 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\cfece6f67593b4d8bb58d23b7fdcc470\System.ServiceModel.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 11021824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\ecde3362b4d67a0025c3c9d5b9525f4a\System.Design.ni.dll
+ 2012-07-19 00:12 . 2012-07-19 00:12 13345792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\7aa839fb16503243d6ae454ab334bcf4\System.Data.Entity.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
+ 2012-07-18 23:12 . 2012-07-18 23:12 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
+ 2012-07-18 23:09 . 2012-07-18 23:09 14412800 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
- 2012-05-15 09:09 . 2012-05-15 09:09 14412800 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
- 2012-06-14 09:19 . 2012-06-14 09:19 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
- 2012-06-14 09:22 . 2012-06-14 09:22 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-07-18 23:58 . 2012-07-18 23:58 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-07-18 23:53 . 2012-07-18 23:53 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\bc254d2fa26664898ae21d45643bc194\System.ServiceModel.ni.dll
- 2012-05-11 09:17 . 2012-05-11 09:17 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\bc254d2fa26664898ae21d45643bc194\System.ServiceModel.ni.dll
+ 2012-07-18 23:14 . 2012-07-18 23:14 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
- 2012-06-14 09:19 . 2012-06-14 09:19 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
- 2012-06-14 09:18 . 2012-06-14 09:18 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
- 2012-06-14 09:18 . 2012-06-14 09:18 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
- 2012-05-11 09:10 . 2012-05-11 09:10 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
+ 2012-07-18 23:13 . 2012-07-18 23:13 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
+ 2011-04-07 02:43 . 2011-04-07 02:43 123313664 c:\windows\Installer\11b9246.msp
.
-- Snapshot reset to current date --
.

Edited by Casee, 19 July 2012 - 12:09 AM.


#12 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 19 July 2012 - 12:09 AM

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#13 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 19 July 2012 - 12:09 AM

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Logitech Hardware Abstraction Layer"="c:\program files\Common Files\Logitech\khalshared\KHALMNPR.EXE" [2007-01-11 101136]
"SigmatelSysTrayApp"="stsystra.exe" [2006-07-24 282624]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-11 101136]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-27 8429568]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
.
c:\documents and settings\tamara\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [N/A]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Content Manager Assistant for PlayStation®.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Content Manager Assistant for PlayStation®.lnk
backup=c:\windows\pss\Content Manager Assistant for PlayStation®.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NkbMonitor.exe.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\NkbMonitor.exe.lnk
backup=c:\windows\pss\NkbMonitor.exe.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TMMonitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\TMMonitor.lnk
backup=c:\windows\pss\TMMonitor.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^rob^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk]
path=c:\documents and settings\rob\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk
backup=c:\windows\pss\Picture Motion Browser Media Check Tool.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^rob^Start Menu^Programs^Startup^PictureProject In Touch.lnk]
path=c:\documents and settings\rob\Start Menu\Programs\Startup\PictureProject In Touch.lnk
backup=c:\windows\pss\PictureProject In Touch.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Temp^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\Temp\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Temp^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
path=c:\documents and settings\Temp\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
backup=c:\windows\pss\OpenOffice.org 3.3.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Playbryte Data Uninstall]
rd [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Playbryte Progam Files Data Uninstall]
rd [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-03 13:10 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
2011-04-20 17:48 58656 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2012-02-21 02:28 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync]
2010-03-13 20:54 91520 ----a-w- c:\program files\Microsoft Office\Office14\BCSSync.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2006-03-22 01:30 1191936 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell DataSafe Scheduler]
2007-06-25 01:38 308464 -c--a-w- c:\program files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
2007-03-15 16:09 460784 ----a-w- c:\program files\DellSupport\DSAgnt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
2007-07-11 12:15 198704 ----a-w- c:\program files\Dell Support Center\bin\sprtcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]
2005-10-05 07:12 94208 -c--a-w- c:\program files\Dell\Media Experience\DMXLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate]
2007-07-30 08:40 16384 ----a-w- c:\dell\dsca.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2006-07-06 11:15 151552 ----a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
2007-08-31 19:01 1037736 ----a-w- c:\program files\Microsoft IntelliPoint\ipoint.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2005-08-12 11:30 249856 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2005-08-12 11:30 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-04-14 16:32 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\itype]
2007-08-31 19:13 988584 ----a-w- c:\program files\Microsoft IntelliType Pro\itype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-06-27 17:29 1996200 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2010-04-17 04:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2007-05-27 18:21 8429568 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2007-05-27 18:21 81920 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ooVoo.exe]
c:\program files\ooVoo\oovoo.exe [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
2006-03-21 19:19 69632 ----a-w- c:\program files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerBlock]
2010-11-07 03:24 1867888 ----a-w- c:\program files\PeerBlock\peerblock.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 22:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxioDragToDisc]
2006-08-17 13:00 1116920 ----a-w- c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2006-11-05 15:22 221184 ----a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
2012-06-02 05:47 9478320 ----a-w- c:\documents and settings\Temp\Application Data\Spotify\spotify.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2012-06-02 05:47 932528 ----a-w- c:\documents and settings\Temp\Application Data\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2003-09-30 06:14 155648 ----a-r- c:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2012-07-17 04:04 1242448 ----a-w- c:\program files\Steam\Steam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-12 04:56 273544 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VZWSUAM]
2011-06-24 04:47 196608 ----a-w- c:\documents and settings\Temp\Application Data\Verizon\SUA\VZWSUAM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"BthServ"=2 (0x2)
"Bonjour Service"=2 (0x2)
"WebClient"=2 (0x2)
"RoxWatch9"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\arma 2 free\\ArmA2Free.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\skyrim\\SkyrimLauncher.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\Sid Meier's Civilization V\\Launcher.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [8/20/2011 12:26 AM 232512]
R1 oreans32;oreans32;c:\windows\system32\drivers\oreans32.sys [5/16/2012 12:33 AM 33824]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [6/27/2012 12:29 PM 1385896]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [6/19/2012 5:32 PM 3048136]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [10/3/2007 4:12 PM 24652]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/19/2011 5:20 PM 136176]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [7/3/2012 1:19 PM 160944]
S2 VBoxDRV;PortableVBoxDRV;\??\o:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys --> o:\virtualbox\Portable-VirtualBox\app32\drivers\VBoxDrv\VBoxDrv.sys [?]
S2 VBoxUSBMon;PortableVBoxUSBMon;\??\o:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys --> o:\virtualbox\Portable-VirtualBox\app32\drivers\USB\filter\VBoxUSBMon.sys [?]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [6/7/2012 12:13 AM 250056]
S3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [6/5/2008 10:26 PM 37296]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [10/18/2011 11:19 PM 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [10/18/2011 11:19 PM 8456]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [12/19/2011 5:20 PM 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [7/8/2012 2:40 PM 40776]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [6/12/2011 12:15 PM 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [7/14/2012 6:37 PM 113120]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [1/9/2010 10:37 PM 4640000]
S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [4/23/2012 9:02 AM 19056]
S3 wimmount;wimmount;c:\windows\system32\drivers\wimmount.sys [7/13/2009 10:20 AM 19024]
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-07 18:25]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-19 22:20]
.
2012-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-19 22:20]
.
2012-06-27 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-300104450-3783934304-527937018-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-300104450-3783934304-527937018-1008.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-300104450-3783934304-527937018-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
2012-06-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-300104450-3783934304-527937018-1008.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 15:47]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
DPF: {0D8004AA-A1CB-4F92-BBEB-0A824B1EE2A2} - hxxp://ws.nopp.co.kr/Game/Common/HGLauncher.cab
FF - ProfilePath - c:\documents and settings\Temp\Application Data\Mozilla\Firefox\Profiles\etsi8std.default\
FF - prefs.js: network.proxy.type - 0
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-BattlEye A2 Free - c:\program files\steam\steamapps\common\arma 2 freeBattlEye\UnInstallBE.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-18 23:45
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\FlashProp.FlashProp]
@DACL=(02 0000)
@="FlashProp Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\FlashProp.FlashProp.1]
@DACL=(02 0000)
@="FlashProp Class"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(756)
c:\windows\system32\WININET.dll
.
- - - - - - - > 'winlogon.exe'(3772)
c:\windows\system32\WININET.dll
.
- - - - - - - > 'lsass.exe'(824)
c:\windows\system32\WININET.dll
.
- - - - - - - > 'explorer.exe'(3472)
c:\windows\system32\WININET.dll
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MI1933~1\Office14\1033\GrooveIntlResource.dll
c:\program files\iTunes\iTunesMiniPlayer.dll
c:\program files\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll
c:\program files\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Roxio\Drag-to-Disc\Shellex.dll
c:\windows\system32\DLAAPI_W.DLL
c:\windows\system32\CDRTC.DLL
c:\program files\Roxio\Drag-to-Disc\ShellRes.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
- - - - - - - > 'explorer.exe'(3640)
c:\windows\system32\WININET.dll
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MI1933~1\Office14\1033\GrooveIntlResource.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Roxio\Drag-to-Disc\Shellex.dll
c:\windows\system32\DLAAPI_W.DLL
c:\windows\system32\CDRTC.DLL
c:\program files\Roxio\Drag-to-Disc\ShellRes.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\stsystra.exe
c:\program files\Mozilla Firefox\firefox.exe
c:\program files\Mozilla Firefox\plugin-container.exe
c:\windows\stsystra.exe
.
**************************************************************************
.
Completion time: 2012-07-18 23:59:37 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-19 04:59
ComboFix2.txt 2012-07-14 06:13
.
Pre-Run: 142,392,406,016 bytes free
Post-Run: 143,490,990,080 bytes free
.
- - End Of File - - 9A7A10A1865D83C74E81B19B71AE8DA1

#14 Casee

Casee
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:06:00 PM

Posted 19 July 2012 - 01:04 AM

Finally, I think we're onto something.
Google loads quickly, though I'm still being redirected.

TDSSKiller Log:

00:11:11.0843 2504 TDSS rootkit removing tool 2.7.46.0 Jul 16 2012 22:10:11
00:11:12.0187 2504 ============================================================
00:11:12.0187 2504 Current date / time: 2012/07/19 00:11:12.0187
00:11:12.0187 2504 SystemInfo:
00:11:12.0187 2504
00:11:12.0187 2504 OS Version: 5.1.2600 ServicePack: 3.0
00:11:12.0187 2504 Product type: Workstation
00:11:12.0187 2504 ComputerName: DADSOFFICE
00:11:12.0187 2504 UserName: Temp
00:11:12.0187 2504 Windows directory: C:\WINDOWS
00:11:12.0187 2504 System windows directory: C:\WINDOWS
00:11:12.0187 2504 Processor architecture: Intel x86
00:11:12.0187 2504 Number of processors: 4
00:11:12.0187 2504 Page size: 0x1000
00:11:12.0187 2504 Boot type: Normal boot
00:11:12.0187 2504 ============================================================
00:11:12.0421 2504 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
00:11:12.0453 2504 Drive \Device\Harddisk5\DR8 - Size: 0x7470C05E00 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
00:11:17.0968 2504 ============================================================
00:11:17.0968 2504 \Device\Harddisk0\DR0:
00:11:17.0968 2504 MBR partitions:
00:11:17.0968 2504 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1B747, BlocksNum 0x39D63EB1
00:11:17.0968 2504 \Device\Harddisk5\DR8:
00:11:17.0968 2504 MBR partitions:
00:11:17.0968 2504 \Device\Harddisk5\DR8\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C41
00:11:17.0968 2504 ============================================================
00:11:18.0015 2504 C: <-> \Device\Harddisk0\DR0\Partition0
00:11:18.0046 2504 N: <-> \Device\Harddisk5\DR8\Partition0
00:11:18.0046 2504 ============================================================
00:11:18.0046 2504 Initialize success
00:11:18.0046 2504 ============================================================
00:11:31.0375 0896 ============================================================
00:11:31.0375 0896 Scan started
00:11:31.0375 0896 Mode: Manual;
00:11:31.0375 0896 ============================================================
00:11:31.0890 0896 Abiosdsk - ok
00:11:31.0953 0896 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
00:11:31.0953 0896 abp480n5 - ok
00:11:32.0062 0896 ACDaemon (adc420616c501b45d26c0fd3ef1e54e4) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
00:11:32.0062 0896 ACDaemon - ok
00:11:32.0125 0896 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
00:11:32.0125 0896 ACPI - ok
00:11:32.0125 0896 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
00:11:32.0125 0896 ACPIEC - ok
00:11:32.0203 0896 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
00:11:32.0218 0896 AdobeFlashPlayerUpdateSvc - ok
00:11:32.0234 0896 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
00:11:32.0234 0896 adpu160m - ok
00:11:32.0281 0896 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
00:11:32.0281 0896 aec - ok
00:11:32.0296 0896 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
00:11:32.0296 0896 Afc - ok
00:11:32.0359 0896 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
00:11:32.0359 0896 AFD - ok
00:11:32.0406 0896 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
00:11:32.0406 0896 agp440 - ok
00:11:32.0406 0896 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
00:11:32.0406 0896 agpCPQ - ok
00:11:32.0406 0896 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
00:11:32.0406 0896 Aha154x - ok
00:11:32.0421 0896 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
00:11:32.0421 0896 aic78u2 - ok
00:11:32.0421 0896 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
00:11:32.0421 0896 aic78xx - ok
00:11:32.0453 0896 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
00:11:32.0453 0896 Alerter - ok
00:11:32.0484 0896 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
00:11:32.0484 0896 ALG - ok
00:11:32.0484 0896 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
00:11:32.0484 0896 AliIde - ok
00:11:32.0500 0896 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
00:11:32.0515 0896 alim1541 - ok
00:11:32.0515 0896 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
00:11:32.0515 0896 amdagp - ok
00:11:32.0515 0896 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
00:11:32.0515 0896 amsint - ok
00:11:32.0640 0896 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
00:11:32.0640 0896 Apple Mobile Device - ok
00:11:32.0640 0896 AppMgmt - ok
00:11:32.0656 0896 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
00:11:32.0656 0896 asc - ok
00:11:32.0656 0896 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
00:11:32.0656 0896 asc3350p - ok
00:11:32.0671 0896 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
00:11:32.0671 0896 asc3550 - ok
00:11:32.0781 0896 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
00:11:32.0781 0896 aspnet_state - ok
00:11:32.0843 0896 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
00:11:32.0843 0896 AsyncMac - ok
00:11:32.0875 0896 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
00:11:32.0875 0896 atapi - ok
00:11:32.0890 0896 Atdisk - ok
00:11:33.0000 0896 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
00:11:33.0000 0896 Atmarpc - ok
00:11:33.0046 0896 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
00:11:33.0062 0896 AudioSrv - ok
00:11:33.0062 0896 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
00:11:33.0062 0896 audstub - ok
00:11:33.0109 0896 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
00:11:33.0109 0896 Beep - ok
00:11:33.0187 0896 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
00:11:33.0187 0896 BITS - ok
00:11:33.0250 0896 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
00:11:33.0250 0896 Bonjour Service - ok
00:11:33.0312 0896 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
00:11:33.0312 0896 Browser - ok
00:11:33.0312 0896 btaudio - ok
00:11:33.0312 0896 BTDriver - ok
00:11:33.0328 0896 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
00:11:33.0328 0896 BthEnum - ok
00:11:33.0343 0896 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys
00:11:33.0343 0896 BthPan - ok
00:11:33.0406 0896 BTHPORT (662bfd909447dd9cc15b1a1c366583b4) C:\WINDOWS\system32\Drivers\BTHport.sys
00:11:33.0406 0896 BTHPORT - ok
00:11:33.0437 0896 BthServ (f4c43c66471b87996d95db7a3a664a37) C:\WINDOWS\System32\bthserv.dll
00:11:33.0437 0896 BthServ - ok
00:11:33.0437 0896 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys
00:11:33.0437 0896 BTHUSB - ok
00:11:33.0453 0896 btusbflt (24b6f65f80ebe0111e7807769ae3d6c0) C:\WINDOWS\system32\drivers\btusbflt.sys
00:11:33.0453 0896 btusbflt - ok
00:11:33.0453 0896 btwhid - ok
00:11:33.0453 0896 BTWUSB - ok
00:11:33.0453 0896 catchme - ok
00:11:33.0468 0896 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
00:11:33.0468 0896 cbidf - ok
00:11:33.0484 0896 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
00:11:33.0484 0896 cbidf2k - ok
00:11:33.0546 0896 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
00:11:33.0546 0896 CCDECODE - ok
00:11:33.0546 0896 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
00:11:33.0546 0896 cd20xrnt - ok
00:11:33.0656 0896 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
00:11:33.0656 0896 Cdaudio - ok
00:11:33.0703 0896 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
00:11:33.0703 0896 Cdfs - ok
00:11:33.0718 0896 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
00:11:33.0718 0896 Cdrom - ok
00:11:33.0718 0896 Changer - ok
00:11:33.0781 0896 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
00:11:33.0781 0896 CiSvc - ok
00:11:33.0828 0896 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
00:11:33.0828 0896 ClipSrv - ok
00:11:33.0921 0896 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:11:33.0921 0896 clr_optimization_v2.0.50727_32 - ok
00:11:34.0046 0896 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
00:11:34.0062 0896 clr_optimization_v4.0.30319_32 - ok
00:11:34.0062 0896 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
00:11:34.0062 0896 CmdIde - ok
00:11:34.0062 0896 COMSysApp - ok
00:11:34.0062 0896 CO_Mon (6be1d6403727bdd8a2b2568dbe6bfb8b) C:\WINDOWS\system32\Drivers\CO_Mon.sys
00:11:34.0062 0896 CO_Mon - ok
00:11:34.0062 0896 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
00:11:34.0062 0896 Cpqarray - ok
00:11:34.0093 0896 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
00:11:34.0093 0896 CryptSvc - ok
00:11:34.0171 0896 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
00:11:34.0171 0896 dac2w2k - ok
00:11:34.0171 0896 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
00:11:34.0171 0896 dac960nt - ok
00:11:34.0234 0896 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
00:11:34.0250 0896 DcomLaunch - ok
00:11:34.0296 0896 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
00:11:34.0296 0896 Dhcp - ok
00:11:34.0343 0896 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
00:11:34.0343 0896 Disk - ok
00:11:34.0390 0896 DLABMFSM (0659e6e0a95564f958d9df7313f7701e) C:\WINDOWS\system32\DLA\DLABMFSM.SYS
00:11:34.0390 0896 DLABMFSM - ok
00:11:34.0390 0896 DLABOIOM (8691c78908f0bd66170669db268369f2) C:\WINDOWS\system32\DLA\DLABOIOM.SYS
00:11:34.0390 0896 DLABOIOM - ok
00:11:34.0390 0896 DLACDBHM (76167b5eb2dffc729edc36386876b40b) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
00:11:34.0390 0896 DLACDBHM - ok
00:11:34.0406 0896 DLADResM (5615744a1056933b90e6ac54feb86f35) C:\WINDOWS\system32\DLA\DLADResM.SYS
00:11:34.0406 0896 DLADResM - ok
00:11:34.0406 0896 DLAIFS_M (1aeca2afa5005ce4a550cf8eb55a8c88) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS
00:11:34.0421 0896 DLAIFS_M - ok
00:11:34.0421 0896 DLAOPIOM (840e7f6abb885c72b9ffddb022ef5b6d) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
00:11:34.0421 0896 DLAOPIOM - ok
00:11:34.0421 0896 DLAPoolM (0294d18731ac05da80132ce88f8a876b) C:\WINDOWS\system32\DLA\DLAPoolM.SYS
00:11:34.0421 0896 DLAPoolM - ok
00:11:34.0421 0896 DLARTL_M (91886fed52a3f9966207bce46cfd794f) C:\WINDOWS\system32\Drivers\DLARTL_M.SYS
00:11:34.0421 0896 DLARTL_M - ok
00:11:34.0437 0896 DLAUDFAM (cca4e121d599d7d1706a30f603731e59) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
00:11:34.0437 0896 DLAUDFAM - ok
00:11:34.0437 0896 DLAUDF_M (7dab85c33135df24419951da4e7d38e5) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
00:11:34.0437 0896 DLAUDF_M - ok
00:11:34.0437 0896 dmadmin - ok
00:11:34.0531 0896 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
00:11:34.0546 0896 dmboot - ok
00:11:34.0562 0896 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
00:11:34.0562 0896 dmio - ok
00:11:34.0593 0896 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
00:11:34.0593 0896 dmload - ok
00:11:34.0609 0896 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
00:11:34.0609 0896 dmserver - ok
00:11:34.0640 0896 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
00:11:34.0640 0896 DMusic - ok
00:11:34.0671 0896 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
00:11:34.0671 0896 Dnscache - ok
00:11:34.0703 0896 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
00:11:34.0703 0896 Dot3svc - ok
00:11:34.0703 0896 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
00:11:34.0703 0896 dpti2o - ok
00:11:34.0718 0896 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
00:11:34.0718 0896 drmkaud - ok
00:11:34.0750 0896 DRVMCDB (c00440385cf9f3d142917c63f989e244) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
00:11:34.0750 0896 DRVMCDB - ok
00:11:34.0765 0896 DRVNDDM (6e6ab29d3c06e64ce81feacda85394b5) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
00:11:34.0765 0896 DRVNDDM - ok
00:11:34.0859 0896 DSBrokerService (245f62a2aa67f4a61f10174bf1017327) C:\Program Files\DellSupport\brkrsvc.exe
00:11:34.0859 0896 DSBrokerService - ok
00:11:34.0875 0896 DSproct (413f2d5f9d802688242c23b38f767ecb) C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys
00:11:34.0875 0896 DSproct - ok
00:11:34.0890 0896 dsunidrv (dfeabb7cfffadea4a912ab95bdc3177a) C:\WINDOWS\system32\DRIVERS\dsunidrv.sys
00:11:34.0890 0896 dsunidrv - ok
00:11:34.0937 0896 dtsoftbus01 (c0c7ceccb6c85994c2bc92d58e52d3f2) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
00:11:34.0937 0896 dtsoftbus01 - ok
00:11:34.0953 0896 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys
00:11:34.0953 0896 E100B - ok
00:11:35.0015 0896 e1express (d0e8dd3f56bd8488995f67b80ff51461) C:\WINDOWS\system32\DRIVERS\e1e5132.sys
00:11:35.0031 0896 e1express - ok
00:11:35.0031 0896 EagleXNt - ok
00:11:35.0062 0896 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
00:11:35.0062 0896 EapHost - ok
00:11:35.0078 0896 epmntdrv (f07ba56b0235f15eff8f10dc6389c42e) C:\WINDOWS\system32\epmntdrv.sys
00:11:35.0078 0896 epmntdrv - ok
00:11:35.0093 0896 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
00:11:35.0093 0896 ERSvc - ok
00:11:35.0125 0896 EuGdiDrv (1f2f4ab15ce03ecc257feb2f6dc5a013) C:\WINDOWS\system32\EuGdiDrv.sys
00:11:35.0125 0896 EuGdiDrv - ok
00:11:35.0156 0896 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
00:11:35.0156 0896 Eventlog - ok
00:11:35.0203 0896 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\system32\es.dll
00:11:35.0203 0896 EventSystem - ok
00:11:35.0218 0896 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
00:11:35.0218 0896 Fastfat - ok
00:11:35.0265 0896 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
00:11:35.0265 0896 FastUserSwitchingCompatibility - ok
00:11:35.0328 0896 Fax (e97d6a8684466df94ff3bc24fb787a07) C:\WINDOWS\system32\fxssvc.exe
00:11:35.0328 0896 Fax - ok
00:11:35.0328 0896 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
00:11:35.0328 0896 Fdc - ok
00:11:35.0375 0896 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
00:11:35.0375 0896 Fips - ok
00:11:35.0500 0896 FLEXnet Licensing Service (bb0667b0171b632b97ea759515476f07) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
00:11:35.0500 0896 FLEXnet Licensing Service - ok
00:11:35.0515 0896 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
00:11:35.0515 0896 Flpydisk - ok
00:11:35.0546 0896 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
00:11:35.0546 0896 FltMgr - ok
00:11:35.0671 0896 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
00:11:35.0671 0896 FontCache3.0.0.0 - ok
00:11:35.0687 0896 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
00:11:35.0687 0896 Fs_Rec - ok
00:11:35.0687 0896 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
00:11:35.0687 0896 Ftdisk - ok
00:11:35.0718 0896 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
00:11:35.0718 0896 GEARAspiWDM - ok
00:11:35.0765 0896 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
00:11:35.0765 0896 Gpc - ok
00:11:35.0859 0896 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
00:11:35.0859 0896 gupdate - ok
00:11:35.0875 0896 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
00:11:35.0875 0896 gupdatem - ok
00:11:35.0906 0896 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
00:11:35.0906 0896 hamachi - ok
00:11:36.0000 0896 Hamachi2Svc (f31d7f8a7699575dbb3b3a3ab4aa6216) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
00:11:36.0015 0896 Hamachi2Svc - ok
00:11:36.0187 0896 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
00:11:36.0187 0896 HDAudBus - ok
00:11:36.0296 0896 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
00:11:36.0296 0896 helpsvc - ok
00:11:36.0328 0896 HidServ (deb04da35cc871b6d309b77e1443c796) C:\WINDOWS\System32\hidserv.dll
00:11:36.0328 0896 HidServ - ok
00:11:36.0375 0896 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
00:11:36.0375 0896 HidUsb - ok
00:11:36.0421 0896 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
00:11:36.0421 0896 hkmsvc - ok
00:11:36.0453 0896 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
00:11:36.0453 0896 hpn - ok
00:11:36.0515 0896 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
00:11:36.0515 0896 HTTP - ok
00:11:36.0562 0896 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
00:11:36.0562 0896 HTTPFilter - ok
00:11:36.0562 0896 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
00:11:36.0562 0896 i2omgmt - ok
00:11:36.0578 0896 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
00:11:36.0578 0896 i2omp - ok
00:11:36.0609 0896 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
00:11:36.0609 0896 i8042prt - ok
00:11:36.0781 0896 IAANTMON (b122be74e283a2bc7febc180bfd2efd5) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
00:11:36.0781 0896 IAANTMON - ok
00:11:36.0828 0896 iaStor (019cf5f31c67030841233c545a0e217a) C:\WINDOWS\system32\drivers\iaStor.sys
00:11:36.0843 0896 iaStor - ok
00:11:36.0937 0896 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
00:11:36.0953 0896 IDriverT - ok
00:11:37.0062 0896 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:11:37.0062 0896 idsvc - ok
00:11:37.0187 0896 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
00:11:37.0187 0896 Imapi - ok
00:11:37.0250 0896 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
00:11:37.0250 0896 ImapiService - ok
00:11:37.0250 0896 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
00:11:37.0250 0896 ini910u - ok
00:11:37.0296 0896 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
00:11:37.0296 0896 IntelIde - ok
00:11:37.0328 0896 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
00:11:37.0328 0896 intelppm - ok
00:11:37.0343 0896 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
00:11:37.0343 0896 Ip6Fw - ok
00:11:37.0375 0896 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
00:11:37.0375 0896 IpFilterDriver - ok
00:11:37.0406 0896 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
00:11:37.0406 0896 IpInIp - ok
00:11:37.0453 0896 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
00:11:37.0453 0896 IpNat - ok
00:11:37.0546 0896 iPod Service (ca9d4b998bff311a539604ed87318fa0) C:\Program Files\iPod\bin\iPodService.exe
00:11:37.0546 0896 iPod Service - ok
00:11:37.0625 0896 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
00:11:37.0640 0896 IPSec - ok
00:11:37.0656 0896 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
00:11:37.0656 0896 IRENUM - ok
00:11:37.0687 0896 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
00:11:37.0687 0896 isapnp - ok
00:11:37.0796 0896 JavaQuickStarterService (11f541e125e31956b62c67c5c6871b75) C:\Program Files\Java\jre7\bin\jqs.exe
00:11:37.0796 0896 JavaQuickStarterService - ok
00:11:37.0843 0896 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
00:11:37.0843 0896 Kbdclass - ok
00:11:37.0859 0896 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
00:11:37.0859 0896 kbdhid - ok
00:11:37.0875 0896 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
00:11:37.0875 0896 kmixer - ok
00:11:37.0906 0896 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
00:11:37.0906 0896 KSecDD - ok
00:11:37.0921 0896 lanmanserver (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
00:11:37.0921 0896 lanmanserver - ok
00:11:37.0968 0896 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
00:11:37.0968 0896 lanmanworkstation - ok
00:11:37.0968 0896 lbrtfdc - ok
00:11:38.0015 0896 LHidFilt (597d79382c154cedb638a65012925a23) C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
00:11:38.0015 0896 LHidFilt - ok
00:11:38.0078 0896 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
00:11:38.0093 0896 LmHosts - ok
00:11:38.0125 0896 LMouFilt (9ead053d28182bd6acb19d5f58202194) C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
00:11:38.0125 0896 LMouFilt - ok
00:11:38.0156 0896 LUsbFilt (931d2dd3485fc045766edddb6405f9dc) C:\WINDOWS\system32\Drivers\LUsbFilt.Sys
00:11:38.0156 0896 LUsbFilt - ok
00:11:38.0187 0896 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
00:11:38.0187 0896 MBAMSwissArmy - ok
00:11:38.0203 0896 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
00:11:38.0203 0896 Messenger - ok
00:11:38.0250 0896 Microsoft SharePoint Workspace Audit Service - ok
00:11:38.0265 0896 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
00:11:38.0265 0896 mnmdd - ok
00:11:38.0296 0896 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\system32\mnmsrvc.exe
00:11:38.0296 0896 mnmsrvc - ok
00:11:38.0343 0896 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
00:11:38.0343 0896 Modem - ok
00:11:38.0375 0896 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
00:11:38.0375 0896 Mouclass - ok
00:11:38.0406 0896 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
00:11:38.0406 0896 mouhid - ok
00:11:38.0421 0896 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
00:11:38.0421 0896 MountMgr - ok
00:11:38.0468 0896 MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
00:11:38.0468 0896 MozillaMaintenance - ok
00:11:38.0500 0896 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
00:11:38.0500 0896 mraid35x - ok
00:11:38.0515 0896 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
00:11:38.0515 0896 MRxDAV - ok
00:11:38.0593 0896 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
00:11:38.0593 0896 MRxSmb - ok
00:11:38.0625 0896 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\system32\msdtc.exe
00:11:38.0625 0896 MSDTC - ok
00:11:38.0640 0896 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
00:11:38.0640 0896 Msfs - ok
00:11:38.0640 0896 MSIServer - ok
00:11:38.0671 0896 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
00:11:38.0671 0896 MSKSSRV - ok
00:11:38.0671 0896 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
00:11:38.0671 0896 MSPCLOCK - ok
00:11:38.0703 0896 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
00:11:38.0703 0896 MSPQM - ok
00:11:38.0703 0896 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
00:11:38.0703 0896 mssmbios - ok
00:11:38.0750 0896 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
00:11:38.0750 0896 MSTEE - ok
00:11:38.0750 0896 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
00:11:38.0765 0896 Mup - ok
00:11:38.0812 0896 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
00:11:38.0812 0896 NABTSFEC - ok
00:11:38.0859 0896 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
00:11:38.0875 0896 napagent - ok
00:11:38.0875 0896 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
00:11:38.0875 0896 NDIS - ok
00:11:38.0937 0896 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
00:11:38.0937 0896 NdisIP - ok
00:11:38.0984 0896 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
00:11:38.0984 0896 NdisTapi - ok
00:11:39.0031 0896 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
00:11:39.0031 0896 Ndisuio - ok
00:11:39.0046 0896 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:11:39.0046 0896 NdisWan - ok
00:11:39.0093 0896 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
00:11:39.0093 0896 NDProxy - ok
00:11:39.0125 0896 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
00:11:39.0125 0896 NetBIOS - ok
00:11:39.0140 0896 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
00:11:39.0140 0896 NetBT - ok
00:11:39.0171 0896 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
00:11:39.0171 0896 NetDDE - ok
00:11:39.0171 0896 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
00:11:39.0171 0896 NetDDEdsdm - ok
00:11:39.0203 0896 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
00:11:39.0203 0896 Netlogon - ok
00:11:39.0265 0896 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
00:11:39.0265 0896 Netman - ok
00:11:39.0375 0896 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:11:39.0390 0896 NetTcpPortSharing - ok
00:11:39.0421 0896 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
00:11:39.0421 0896 Nla - ok
00:11:39.0453 0896 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
00:11:39.0453 0896 Npfs - ok
00:11:39.0468 0896 npggsvc - ok
00:11:39.0515 0896 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
00:11:39.0531 0896 Ntfs - ok
00:11:39.0531 0896 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
00:11:39.0531 0896 NtLmSsp - ok
00:11:39.0593 0896 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
00:11:39.0593 0896 NtmsSvc - ok
00:11:39.0625 0896 NuidFltr (cf7e041663119e09d2e118521ada9300) C:\WINDOWS\system32\DRIVERS\NuidFltr.sys
00:11:39.0625 0896 NuidFltr - ok
00:11:39.0671 0896 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
00:11:39.0671 0896 Null - ok
00:11:40.0031 0896 nv (b702be0aa72ea2e1d644baef9123a4ce) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
00:11:40.0109 0896 nv - ok
00:11:40.0250 0896 NVSvc (e2fcbf957405ac17668c7dacce537f1e) C:\WINDOWS\system32\nvsvc32.exe
00:11:40.0250 0896 NVSvc - ok
00:11:40.0328 0896 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
00:11:40.0328 0896 NwlnkFlt - ok
00:11:40.0328 0896 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
00:11:40.0328 0896 NwlnkFwd - ok
00:11:40.0375 0896 oreans32 (b99575d16f887883b821d372ff292c20) C:\WINDOWS\system32\drivers\oreans32.sys
00:11:40.0375 0896 oreans32 - ok
00:11:40.0453 0896 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:11:40.0453 0896 ose - ok
00:11:40.0781 0896 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
00:11:40.0828 0896 osppsvc - ok
00:11:40.0953 0896 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
00:11:40.0968 0896 Parport - ok
00:11:40.0968 0896 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
00:11:40.0968 0896 PartMgr - ok
00:11:40.0968 0896 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
00:11:40.0968 0896 ParVdm - ok
00:11:41.0078 0896 pbfilter (61a5701e3f543861b21bbe0932c4cc03) C:\Program Files\PeerBlock\pbfilter.sys
00:11:41.0078 0896 pbfilter - ok
00:11:41.0125 0896 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
00:11:41.0125 0896 PCI - ok
00:11:41.0125 0896 PCIDump - ok
00:11:41.0140 0896 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
00:11:41.0140 0896 PCIIde - ok
00:11:41.0156 0896 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
00:11:41.0156 0896 Pcmcia - ok
00:11:41.0156 0896 PDCOMP - ok
00:11:41.0156 0896 PDFRAME - ok
00:11:41.0171 0896 PDRELI - ok
00:11:41.0171 0896 PDRFRAME - ok
00:11:41.0171 0896 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
00:11:41.0171 0896 perc2 - ok
00:11:41.0171 0896 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
00:11:41.0171 0896 perc2hib - ok
00:11:41.0218 0896 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
00:11:41.0218 0896 PlugPlay - ok
00:11:41.0281 0896 PnkBstrA (205e1b699fd3f2f9b036eea2ec30c620) C:\WINDOWS\system32\PnkBstrA.exe
00:11:41.0281 0896 PnkBstrA - ok
00:11:41.0328 0896 Point32 (b4f59a953ef9e507f0d00c3a68580b8b) C:\WINDOWS\system32\DRIVERS\point32.sys
00:11:41.0328 0896 Point32 - ok
00:11:41.0359 0896 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
00:11:41.0359 0896 PolicyAgent - ok
00:11:41.0406 0896 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
00:11:41.0406 0896 PptpMiniport - ok
00:11:41.0406 0896 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
00:11:41.0406 0896 ProtectedStorage - ok
00:11:41.0406 0896 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
00:11:41.0421 0896 PSched - ok
00:11:41.0421 0896 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
00:11:41.0421 0896 Ptilink - ok
00:11:41.0437 0896 PxHelp20 (1962166e0ceb740704f30fa55ad3d509) C:\WINDOWS\system32\Drivers\PxHelp20.sys
00:11:41.0437 0896 PxHelp20 - ok
00:11:41.0453 0896 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
00:11:41.0453 0896 ql1080 - ok
00:11:41.0453 0896 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
00:11:41.0453 0896 Ql10wnt - ok
00:11:41.0453 0896 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
00:11:41.0453 0896 ql12160 - ok
00:11:41.0500 0896 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
00:11:41.0500 0896 ql1240 - ok
00:11:41.0515 0896 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
00:11:41.0515 0896 ql1280 - ok
00:11:41.0531 0896 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
00:11:41.0531 0896 RasAcd - ok
00:11:41.0562 0896 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
00:11:41.0562 0896 RasAuto - ok
00:11:41.0593 0896 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
00:11:41.0593 0896 Rasl2tp - ok
00:11:41.0671 0896 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
00:11:41.0671 0896 RasMan - ok
00:11:41.0671 0896 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
00:11:41.0671 0896 RasPppoe - ok
00:11:41.0671 0896 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
00:11:41.0687 0896 Raspti - ok
00:11:41.0703 0896 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
00:11:41.0703 0896 Rdbss - ok
00:11:41.0718 0896 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
00:11:41.0718 0896 RDPCDD - ok
00:11:41.0734 0896 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
00:11:41.0734 0896 rdpdr - ok
00:11:41.0796 0896 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
00:11:41.0796 0896 RDPWD - ok
00:11:41.0812 0896 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
00:11:41.0812 0896 RDSessMgr - ok
00:11:41.0859 0896 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
00:11:41.0859 0896 redbook - ok
00:11:41.0890 0896 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
00:11:41.0906 0896 RemoteAccess - ok
00:11:41.0921 0896 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
00:11:41.0921 0896 RFCOMM - ok
00:11:42.0109 0896 RoxMediaDB9 (ebcde8b48fadc6479d96a56d0a432160) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
00:11:42.0125 0896 RoxMediaDB9 - ok
00:11:42.0171 0896 RoxWatch9 (ab2b1de1c8f31efce2384b14b3dc4260) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
00:11:42.0187 0896 RoxWatch9 - ok
00:11:42.0187 0896 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\system32\locator.exe
00:11:42.0187 0896 RpcLocator - ok
00:11:42.0250 0896 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\System32\rpcss.dll
00:11:42.0250 0896 RpcSs - ok
00:11:42.0281 0896 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\system32\rsvp.exe
00:11:42.0281 0896 RSVP - ok
00:11:42.0328 0896 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
00:11:42.0328 0896 SamSs - ok
00:11:42.0359 0896 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
00:11:42.0375 0896 SCardSvr - ok
00:11:42.0421 0896 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
00:11:42.0437 0896 Schedule - ok
00:11:42.0484 0896 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
00:11:42.0484 0896 Secdrv - ok
00:11:42.0546 0896 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
00:11:42.0546 0896 seclogon - ok
00:11:42.0578 0896 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
00:11:42.0593 0896 SENS - ok
00:11:42.0609 0896 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
00:11:42.0609 0896 serenum - ok
00:11:42.0671 0896 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
00:11:42.0671 0896 Serial - ok
00:11:42.0687 0896 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
00:11:42.0687 0896 Sfloppy - ok
00:11:42.0750 0896 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
00:11:42.0765 0896 SharedAccess - ok
00:11:42.0812 0896 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
00:11:42.0812 0896 ShellHWDetection - ok
00:11:42.0812 0896 Simbad - ok
00:11:42.0828 0896 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
00:11:42.0828 0896 sisagp - ok
00:11:43.0156 0896 Skype C2C Service (2a99850c2a6edd6c6602e822c716edaf) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
00:11:43.0203 0896 Skype C2C Service - ok
00:11:43.0328 0896 SkypeUpdate (ea396139541706b4b433641d62ea53ce) C:\Program Files\Skype\Updater\Updater.exe
00:11:43.0328 0896 SkypeUpdate - ok
00:11:43.0468 0896 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
00:11:43.0468 0896 SLIP - ok
00:11:43.0500 0896 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
00:11:43.0500 0896 Sparrow - ok
00:11:43.0500 0896 spcstb - ok
00:11:43.0531 0896 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
00:11:43.0531 0896 splitter - ok
00:11:43.0578 0896 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
00:11:43.0578 0896 Spooler - ok
00:11:43.0609 0896 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
00:11:43.0609 0896 sr - ok
00:11:43.0671 0896 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
00:11:43.0671 0896 srservice - ok
00:11:43.0734 0896 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
00:11:43.0750 0896 Srv - ok
00:11:43.0781 0896 sscdbus (ffe42941e0326c322f40b0b79a46493c) C:\WINDOWS\system32\DRIVERS\sscdbus.sys
00:11:43.0796 0896 sscdbus - ok
00:11:43.0796 0896 sscdmdfl (a68e7d87adfbb8c50d88cd58230c6819) C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys
00:11:43.0812 0896 sscdmdfl - ok
00:11:43.0828 0896 sscdmdm (b534b24151281856ec2f69ed3d6d60dd) C:\WINDOWS\system32\DRIVERS\sscdmdm.sys
00:11:43.0843 0896 sscdmdm - ok
00:11:43.0859 0896 sscdserd (d04bd59f28c78e2e66632092cafc0a2b) C:\WINDOWS\system32\DRIVERS\sscdserd.sys
00:11:43.0859 0896 sscdserd - ok
00:11:43.0890 0896 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
00:11:43.0890 0896 SSDPSRV - ok
00:11:43.0921 0896 Steam Client Service - ok
00:11:44.0015 0896 STHDA (797fcc1d859b203958e915bb82528da9) C:\WINDOWS\system32\drivers\sthda.sys
00:11:44.0031 0896 STHDA - ok
00:11:44.0062 0896 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
00:11:44.0062 0896 stisvc - ok
00:11:44.0125 0896 stllssvr (51778fd315c9882f1cbd932743e62a72) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
00:11:44.0125 0896 stllssvr - ok
00:11:44.0203 0896 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
00:11:44.0203 0896 streamip - ok
00:11:44.0234 0896 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
00:11:44.0234 0896 swenum - ok
00:11:44.0250 0896 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
00:11:44.0250 0896 swmidi - ok
00:11:44.0250 0896 SwPrv - ok
00:11:44.0281 0896 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
00:11:44.0281 0896 symc810 - ok
00:11:44.0296 0896 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
00:11:44.0296 0896 symc8xx - ok
00:11:44.0312 0896 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
00:11:44.0312 0896 sym_hi - ok
00:11:44.0328 0896 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
00:11:44.0328 0896 sym_u3 - ok
00:11:44.0343 0896 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
00:11:44.0343 0896 sysaudio - ok
00:11:44.0375 0896 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
00:11:44.0375 0896 SysmonLog - ok
00:11:44.0406 0896 taphss (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\WINDOWS\system32\DRIVERS\taphss.sys
00:11:44.0406 0896 taphss - ok
00:11:44.0437 0896 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
00:11:44.0453 0896 TapiSrv - ok
00:11:44.0515 0896 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
00:11:44.0515 0896 Tcpip - ok
00:11:44.0546 0896 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
00:11:44.0546 0896 TDPIPE - ok
00:11:44.0562 0896 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
00:11:44.0562 0896 TDTCP - ok
00:11:44.0593 0896 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
00:11:44.0593 0896 TermDD - ok
00:11:44.0625 0896 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
00:11:44.0625 0896 TermService - ok
00:11:44.0671 0896 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
00:11:44.0671 0896 Themes - ok
00:11:44.0703 0896 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys
00:11:44.0703 0896 TosIde - ok
00:11:44.0703 0896 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
00:11:44.0718 0896 TrkWks - ok
00:11:44.0750 0896 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
00:11:44.0750 0896 Udfs - ok
00:11:44.0781 0896 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
00:11:44.0781 0896 ultra - ok
00:11:44.0843 0896 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
00:11:44.0843 0896 Update - ok
00:11:44.0875 0896 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
00:11:44.0875 0896 upnphost - ok
00:11:44.0875 0896 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
00:11:44.0890 0896 UPS - ok
00:11:44.0937 0896 USBAAPL (eafe1e00739afe6c51487a050e772e17) C:\WINDOWS\system32\Drivers\usbaapl.sys
00:11:44.0937 0896 USBAAPL - ok
00:11:44.0968 0896 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
00:11:44.0968 0896 usbaudio - ok
00:11:45.0031 0896 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
00:11:45.0031 0896 usbccgp - ok
00:11:45.0062 0896 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
00:11:45.0062 0896 usbehci - ok
00:11:45.0093 0896 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
00:11:45.0093 0896 usbhub - ok
00:11:45.0125 0896 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
00:11:45.0125 0896 usbprint - ok
00:11:45.0140 0896 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
00:11:45.0140 0896 usbscan - ok
00:11:45.0187 0896 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
00:11:45.0187 0896 USBSTOR - ok
00:11:45.0234 0896 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
00:11:45.0234 0896 usbuhci - ok
00:11:45.0265 0896 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
00:11:45.0265 0896 usbvideo - ok
00:11:45.0281 0896 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys
00:11:45.0281 0896 usb_rndisx - ok
00:11:45.0281 0896 VBoxDRV - ok
00:11:45.0281 0896 VBoxUSBMon - ok
00:11:45.0312 0896 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
00:11:45.0312 0896 VgaSave - ok
00:11:45.0328 0896 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
00:11:45.0328 0896 viaagp - ok
00:11:45.0343 0896 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
00:11:45.0343 0896 ViaIde - ok
00:11:45.0421 0896 Viewpoint Manager Service (5f974fde801c73952770736becde11e7) C:\Program Files\Viewpoint\Common\ViewpointService.exe
00:11:45.0421 0896 Viewpoint Manager Service - ok
00:11:45.0484 0896 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
00:11:45.0484 0896 VolSnap - ok
00:11:45.0500 0896 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
00:11:45.0500 0896 VSS - ok
00:11:45.0578 0896 w32time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
00:11:45.0578 0896 w32time - ok
00:11:45.0578 0896 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
00:11:45.0593 0896 Wanarp - ok
00:11:45.0656 0896 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
00:11:45.0671 0896 Wdf01000 - ok
00:11:45.0671 0896 WDICA - ok
00:11:45.0687 0896 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
00:11:45.0687 0896 wdmaud - ok
00:11:45.0703 0896 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
00:11:45.0718 0896 WebClient - ok
00:11:45.0734 0896 wimmount (05fb36a51e04a6c6b3a5f125fa692e6b) C:\WINDOWS\system32\DRIVERS\wimmount.sys
00:11:45.0734 0896 wimmount - ok
00:11:45.0812 0896 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
00:11:45.0812 0896 winmgmt - ok
00:11:46.0031 0896 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
00:11:46.0046 0896 wlidsvc - ok
00:11:46.0156 0896 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
00:11:46.0171 0896 WmdmPmSN - ok
00:11:46.0234 0896 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\system32\wbem\wmiapsrv.exe
00:11:46.0234 0896 WmiApSrv - ok
00:11:46.0375 0896 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
00:11:46.0390 0896 WMPNetworkSvc - ok
00:11:46.0437 0896 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
00:11:46.0437 0896 WpdUsb - ok
00:11:46.0640 0896 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
00:11:46.0656 0896 WPFFontCache_v0400 - ok
00:11:46.0671 0896 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
00:11:46.0671 0896 WS2IFSL - ok
00:11:46.0718 0896 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
00:11:46.0718 0896 wscsvc - ok
00:11:46.0750 0896 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
00:11:46.0750 0896 WSTCODEC - ok
00:11:46.0781 0896 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
00:11:46.0781 0896 wuauserv - ok
00:11:46.0828 0896 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
00:11:46.0828 0896 WudfPf - ok
00:11:46.0875 0896 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
00:11:46.0875 0896 WudfRd - ok
00:11:46.0890 0896 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
00:11:46.0906 0896 WudfSvc - ok
00:11:46.0968 0896 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
00:11:46.0968 0896 WZCSVC - ok
00:11:47.0015 0896 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
00:11:47.0031 0896 xmlprov - ok
00:11:47.0046 0896 MBR (0x1B8) (da6dd627419019a20d453d613214beb3) \Device\Harddisk0\DR0
00:11:47.0062 0896 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - infected
00:11:47.0062 0896 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.c (0)
00:11:47.0078 0896 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk5\DR8
00:11:47.0078 0896 \Device\Harddisk5\DR8 - ok
00:11:47.0109 0896 Boot (0x1200) (bebee3d7fa90530033167baa5e1dd0f0) \Device\Harddisk0\DR0\Partition0
00:11:47.0109 0896 \Device\Harddisk0\DR0\Partition0 - ok
00:11:47.0109 0896 Boot (0x1200) (ca5023d3c5df8a5165a5020c18fb6c98) \Device\Harddisk5\DR8\Partition0
00:11:47.0109 0896 \Device\Harddisk5\DR8\Partition0 - ok
00:11:47.0109 0896 ============================================================
00:11:47.0109 0896 Scan finished
00:11:47.0109 0896 ============================================================
00:11:47.0109 3660 Detected object count: 1
00:11:47.0109 3660 Actual detected object count: 1
00:12:01.0515 3660 \Device\Harddisk0\DR0\# - copied to quarantine
00:12:01.0515 3660 \Device\Harddisk0\DR0 - copied to quarantine
00:12:01.0546 3660 \Device\Harddisk0\DR0\TDLFS\ldrm - copied to quarantine
00:12:01.0609 3660 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine
00:12:01.0609 3660 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine
00:12:01.0609 3660 \Device\Harddisk0\DR0\TDLFS\config.ini - copied to quarantine
00:12:01.0625 3660 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine
00:12:01.0625 3660 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\servers.dat - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
00:12:01.0640 3660 \Device\Harddisk0\DR0\TDLFS\s - copied to quarantine
00:12:01.0656 3660 \Device\Harddisk0\DR0\TDLFS\u - copied to quarantine
00:12:01.0656 3660 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine
00:12:01.0656 3660 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - will be cured on reboot
00:12:01.0656 3660 \Device\Harddisk0\DR0 - ok
00:12:02.0843 3660 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - User select action: Cure
00:12:19.0843 2128 Deinitialize success





AswMBR Log:
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-19 00:19:16
-----------------------------
00:19:16.421 OS Version: Windows 5.1.2600 Service Pack 3
00:19:16.421 Number of processors: 4 586 0xF0B
00:19:16.421 ComputerName: DADSOFFICE UserName: Temp
00:19:17.375 Initialize success
00:20:09.156 AVAST engine defs: 12071900
00:21:49.781 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2
00:21:49.781 Disk 0 Vendor: SAMSUNG_ CR10 Size: 476940MB BusType: 3
00:21:49.796 Disk 0 MBR read successfully
00:21:49.796 Disk 0 MBR scan
00:21:49.843 Disk 0 unknown MBR code
00:21:49.843 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 54 MB offset 63
00:21:49.859 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 473799 MB offset 112455
00:21:49.890 Disk 0 Partition 3 00 DB CP/M / CTOS Dell 8.0 3074 MB offset 970470585
00:21:49.890 Disk 0 scanning sectors +976768065
00:21:49.968 Disk 0 scanning C:\WINDOWS\system32\drivers
00:22:01.046 Service scanning
00:22:21.562 Modules scanning
00:22:26.921 Disk 0 trace - called modules:
00:22:26.953 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
00:22:26.953 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8b3a2030]
00:22:26.953 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-2[0x8ae7e030]
00:22:27.890 AVAST engine scan C:\WINDOWS
00:22:33.562 AVAST engine scan C:\WINDOWS\system32
00:26:12.359 AVAST engine scan C:\WINDOWS\system32\drivers
00:26:34.578 AVAST engine scan C:\Documents and Settings\Temp
00:54:01.078 AVAST engine scan C:\Documents and Settings\All Users
00:58:16.875 Scan finished successfully
01:03:31.734 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Temp\Desktop\MBR.dat"
01:03:31.734 The log file has been saved successfully to "C:\Documents and Settings\Temp\Desktop\aswMBR.txt"

#15 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:08:00 PM

Posted 19 July 2012 - 01:14 AM

greetings


yes now it looks like we are going in the right direction


At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

ClearJavaCache::

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe
Posted Image
This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following

  • report from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now after running the script?

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users