Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Probably a variant of Win32/Ponmocup.AA


  • This topic is locked This topic is locked
27 replies to this topic

#1 southamericanrocker

southamericanrocker

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 03 August 2012 - 12:00 AM

Hello. ESET antivirus shows this message "Probably a variant of Win32/Ponmocup.AA unable to clean it". The main problem is that results by Google are redirected to other malicious pages. I've tried Malwarebytes, CCleaner and Kaspersky with no success. My PC has Windows XP SP3.I'd appreciate your help.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_29
Run by Usuario at 23:12:54 on 2012-08-02
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.1792.967 [GMT -4:00]
.
AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
============== Running Processes ===============
.
C:\windows\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\windows\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\windows\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\windows\system32\WgaTray.exe
svchost.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nlssrv32.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\Archivos de programa\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe
C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe
C:\Archivos de programa\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe
C:\windows\Mixer.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Facebook\Update\FacebookUpdate.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Akamai\netsession_win.exe
C:\windows\system32\ctfmon.exe
C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Akamai\netsession_win.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\ARCHIV~1\Yahoo!\Messenger\ymsgr_tray.exe
C:\Archivos de programa\Banda Ancha Movil\Banda Ancha Movil.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Archivos de programa\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\windows\explorer.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Usuario\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://isearch.glarysoft.com/?src=iehome
mStart Page = hxxp://isearch.glarysoft.com/?src=iehome
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\archiv~1\micros~2\office12\GRA8E1~1.DLL
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\archivos de programa\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\archivos de programa\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll
uRun: [Messenger (Yahoo!)] "c:\archiv~1\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [Facebook Update] "c:\documents and settings\usuario\configuración local\datos de programa\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [Akamai NetSession Interface] "c:\documents and settings\usuario\configuración local\datos de programa\akamai\netsession_win.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [msnmsgr] "c:\archivos de programa\windows live\messenger\msnmsgr.exe" /background
mRun: [Adobe ARM] "c:\archivos de programa\archivos comunes\adobe\arm\1.0\AdobeARM.exe"
mRun: [egui] "c:\archivos de programa\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [GrooveMonitor] "c:\archivos de programa\microsoft office\office12\GrooveMonitor.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\archivos de programa\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\archivos de programa\adobe\acrobat 10.0\acrobat\Acrotray.exe"
mRun: [C-Media Mixer] Mixer.exe /startup
mRun: [AdobeAAMUpdater-1.0] "c:\archivos de programa\archivos comunes\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\usuario\menini~1\progra~1\inicio\recort~1.lnk - c:\archivos de programa\microsoft office\office12\ONENOTEM.EXE
IE: Append Link Target to Existing PDF - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportar a Microsoft Excel - c:\archiv~1\micros~2\office12\EXCEL.EXE/3000
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\usuario\menú inicio\programas\imvu\Run IMVU.lnk
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\archivos de programa\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\archiv~1\micros~2\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\archiv~1\micros~2\office12\REFIEBAR.DLL
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} - hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1343926253531
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} - hxxp://ax.emsisoft.com/asquared.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
TCP: DhcpNameServer = 200.63.56.6 200.63.56.5
TCP: Interfaces\{50507BC7-C78C-4C19-B15A-05E6872803E3} : DhcpNameServer = 200.63.56.3 200.63.56.5
TCP: Interfaces\{6E53582C-4CE9-4F75-BA5B-1AB4EA877820} : DhcpNameServer = 200.63.56.5 200.63.56.3
TCP: Interfaces\{7A5E5C59-2D32-4B17-A664-041177A2CCA3} : DhcpNameServer = 200.63.56.6 200.63.56.5
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\archiv~1\micros~2\office12\GR99D3~1.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\archiv~1\archiv~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\archiv~1\micros~2\office12\GRA8E1~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\usuario\datos de programa\mozilla\firefox\profiles\t1opf7rt.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cl/
FF - plugin: c:\archivos de programa\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\archivos de programa\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\archivos de programa\google\update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: c:\archivos de programa\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\archivos de programa\microsoft silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: c:\documents and settings\usuario\configuraciã³n local\datos de programa\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\documents and settings\usuario\configuraciã³n local\datos de programa\google\update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: c:\documents and settings\usuario\datos de programa\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\usuario\datos de programa\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_268.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SMR300;Symantec SMR Utility Service 3.0.0;c:\windows\system32\drivers\SMR300.SYS [2012-8-2 83064]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2010-4-7 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2010-4-7 95872]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 ekrn;ESET Service;c:\archivos de programa\eset\eset nod32 antivirus\ekrn.exe [2010-4-7 810120]
R2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [2012-1-6 66560]
R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [2011-10-31 45440]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2011-9-14 117504]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [2011-10-31 56960]
S2 gupdate;Google Update Servicio (gupdate);c:\archivos de programa\google\update\GoogleUpdate.exe [2011-10-16 136176]
S2 SkypeUpdate;Skype Updater;c:\archivos de programa\skype\updater\Updater.exe [2012-6-7 160944]
S3 ADM851X;ADM851X USB To Fast Ethernet Adapter;c:\windows\system32\drivers\ADM851X.SYS [2011-9-13 27135]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-12 250056]
S3 gupdatem;Google Update Servicio (gupdatem);c:\archivos de programa\google\update\GoogleUpdate.exe [2011-10-16 136176]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [2011-9-14 100992]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\archivos de programa\mozilla maintenance service\maintenanceservice.exe [2012-4-24 113120]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2012-08-03 02:10:01 15112 ----a-w- c:\documents and settings\usuario\datos de programa\microsoft\identitycrl\production\ppcrlconfig.dll
2012-08-03 01:59:52 20 ----a-w- c:\windows\system32\drivers\SMR300.dat
2012-08-03 01:59:50 83064 ----a-w- c:\windows\system32\drivers\SMR300.SYS
2012-08-03 00:59:48 -------- d-----w- c:\documents and settings\usuario\configuración local\datos de programa\NPE
2012-08-03 00:59:48 -------- d-----w- c:\documents and settings\all users\datos de programa\Norton
2012-08-03 00:07:24 -------- d-----w- c:\documents and settings\usuario\datos de programa\QuickScan
2012-08-02 19:12:16 -------- d-----w- c:\windows\ie8updates
2012-08-02 18:47:37 629760 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-08-02 18:47:33 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-08-02 18:47:32 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-08-02 18:47:32 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-08-02 18:47:25 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2012-08-02 18:47:25 2000384 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-08-02 18:47:23 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-08-02 18:27:24 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-08-02 17:45:36 -------- d-----w- c:\archivos de programa\Panda Security
2012-08-02 17:06:32 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-08-02 17:06:32 3072 ------w- c:\windows\system32\iacenc.dll
2012-08-02 16:51:37 15896 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-08-02 03:55:25 -------- d-s---w- C:\ComboFix
2012-08-01 20:30:10 -------- d-sha-r- C:\cmdcons
2012-08-01 20:26:35 98816 ----a-w- c:\windows\sed.exe
2012-08-01 20:26:35 518144 ----a-w- c:\windows\SWREG.exe
2012-08-01 20:26:35 256000 ----a-w- c:\windows\PEV.exe
2012-08-01 20:26:35 208896 ----a-w- c:\windows\MBR.exe
2012-08-01 20:20:26 -------- d-----w- C:\TDSSKiller_Quarantine
2012-08-01 19:22:45 -------- d-----w- c:\windows\system32\wbem\repository\FS
2012-08-01 19:22:45 -------- d-----w- c:\windows\system32\wbem\Repository
2012-08-01 18:07:35 110592 --sha-r- c:\windows\system32\ssmypicsm.dll
.
==================== Find3M ====================
.
2012-08-03 00:20:40 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-03 00:20:40 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-03 17:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-13 13:55:05 1866240 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:49:25 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49:25 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32:02 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 19:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19:24 24088 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19:18 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:19:18 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-05-31 13:21:55 605184 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08:41 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:43:20 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:43:20 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38:14 385024 ----a-w- c:\windows\system32\html.iec
2012-05-05 03:14:28 2195072 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-05 03:14:28 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
============= FINISH: 23:14:28,57 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 05 August 2012 - 05:17 PM

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your computer problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

  • Please do not run any tools unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
  • Please do not attach logs or use code boxes, just copy and paste the text.
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
  • Please read every post completely before doing anything.
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
  • Please provide feedback about your experience as we go.
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.
NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Security Check

  • Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.



Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following
  • Log from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now?

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#3 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 02:28 PM

Thanks for your reply. Computer is slower. Google's results still redirect to unrelated pages. The forth attempt is successful. Here is the information you have requested:

Check up log

Results of screen317's Security Check version 0.99.43
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
ESET NOD32 Antivirus 4.2
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.62.0.1300
CCleaner
Java™ 6 Update 14
Java™ 6 Update 29
Java version out of Date!
Adobe Flash Player 11.3.300.270
Adobe Reader X (10.1.3)
Mozilla Firefox (9.0.1)
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 22% Defragment your hard drive soon!
````````````````````End of Log``````````````````````

#4 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 02:30 PM

Combo fix log:


ComboFix 12-08-05.02 - Usuario 06-08-2012 14:47:09.4.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.768.269 [GMT -4:00]
Running from: c:\documents and settings\Usuario\Escritorio\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-07-06 to 2012-08-06 )))))))))))))))))))))))))))))))
.
.
2012-08-03 00:59 . 2012-08-03 02:00 -------- d-----w- c:\documents and settings\Usuario\Configuración local\Datos de programa\NPE
2012-08-03 00:59 . 2012-08-03 00:59 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Norton
2012-08-03 00:07 . 2012-08-03 00:07 -------- d-----w- c:\documents and settings\Usuario\Datos de programa\QuickScan
2012-08-02 23:20 . 2012-08-02 23:20 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2012-08-02 19:12 . 2012-08-02 20:16 -------- d-----w- c:\windows\ie8updates
2012-08-02 18:47 . 2012-05-11 14:43 629760 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-08-02 18:47 . 2012-05-11 14:43 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-08-02 18:47 . 2012-05-11 14:43 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-08-02 18:47 . 2012-05-11 14:43 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-08-02 18:47 . 2012-05-11 14:43 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2012-08-02 18:47 . 2012-05-11 14:43 2000384 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-08-02 18:47 . 2012-05-11 14:43 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-08-02 18:27 . 2011-07-15 13:29 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-08-02 17:45 . 2012-08-02 23:13 -------- d-----w- c:\archivos de programa\Panda Security
2012-08-02 17:06 . 2012-01-11 19:06 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-08-02 17:06 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
2012-08-02 16:51 . 2012-06-02 19:19 15896 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-08-02 00:26 . 2012-08-02 00:26 -------- d-----w- c:\documents and settings\Administrador.WINDOWS-4BD25BD
2012-08-01 20:20 . 2012-08-01 21:43 -------- d-----w- C:\TDSSKiller_Quarantine
2012-08-01 19:22 . 2012-08-01 19:22 -------- d-----w- c:\windows\system32\wbem\Repository
2012-08-01 18:07 . 2012-08-01 18:07 110592 --sha-r- c:\windows\system32\ssmypicsm.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-03 00:20 . 2012-05-12 14:19 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-03 00:20 . 2011-09-14 13:32 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-03 17:46 . 2011-10-13 17:49 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-13 13:55 . 2008-04-14 08:00 1866240 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 08:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 08:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 21:35 . 2011-09-13 21:10 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-04 04:32 . 2008-04-14 08:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 19:19 . 2011-09-13 21:10 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 19:19 . 2011-09-13 21:10 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19 . 2011-09-13 21:10 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 19:19 . 2011-09-13 21:10 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 19:19 . 2009-08-06 22:24 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 19:19 . 2008-04-14 08:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 19:19 . 2011-09-13 21:10 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 19:19 . 2009-08-06 22:23 24088 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19 . 2011-09-13 21:10 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 19:19 . 2009-08-06 22:23 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:19 . 2009-08-06 22:23 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-05-31 13:21 . 2008-04-14 08:00 605184 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2008-04-14 08:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:43 . 2008-04-14 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:43 . 2008-04-14 08:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2008-04-14 08:00 385024 ----a-w- c:\windows\system32\html.iec
2011-12-21 07:24 . 2012-06-28 20:06 121816 ----a-w- c:\archivos de programa\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2009-11-27 . A984FD70323F1BADC33C170F60DBD5F6 . 1572352 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2012-08-01_20.38.58 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-29 03:42 . 2009-06-29 03:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
- 2012-01-06 21:10 . 2012-01-06 21:10 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
+ 2012-08-06 17:46 . 2012-08-06 17:46 16384 c:\windows\Temp\Perflib_Perfdata_790.dat
+ 2008-04-14 08:00 . 2008-05-09 10:55 90112 c:\windows\system32\wshext.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\wshext.dll
+ 2008-04-14 08:00 . 2009-06-25 08:26 54272 c:\windows\system32\wdigest.dll
+ 2008-04-14 08:00 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
+ 2008-04-14 08:00 . 2009-06-15 10:44 81920 c:\windows\system32\tlntsess.exe
+ 2008-04-14 08:00 . 2009-06-15 10:44 78336 c:\windows\system32\telnet.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\strmfilt.dll
+ 2008-04-14 08:00 . 2009-10-21 05:39 75776 c:\windows\system32\strmfilt.dll
+ 2008-04-14 08:00 . 2010-08-27 05:53 99840 c:\windows\system32\srvsvc.dll
+ 2008-04-14 08:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
+ 2012-08-02 16:51 . 2012-06-02 19:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll
+ 2012-08-02 16:51 . 2012-06-02 19:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll
+ 2008-04-14 08:00 . 2009-06-25 08:26 56832 c:\windows\system32\secur32.dll
+ 2008-04-14 08:00 . 2009-02-06 10:39 35328 c:\windows\system32\sc.exe
+ 2008-04-14 08:00 . 2009-10-12 13:39 79872 c:\windows\system32\raschap.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 79872 c:\windows\system32\raschap.dll
- 2008-04-14 08:00 . 2012-07-28 13:42 88542 c:\windows\system32\perfc009.dat
+ 2008-04-14 08:00 . 2012-08-03 15:29 88542 c:\windows\system32\perfc009.dat
+ 2008-04-14 08:00 . 2011-11-20 06:12 61440 c:\windows\system32\packager.exe
+ 2008-04-14 08:00 . 2011-09-26 15:41 22528 c:\windows\system32\oleaccrc.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 91648 c:\windows\system32\mtxoci.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 91648 c:\windows\system32\mtxoci.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\mtxclu.dll
+ 2008-04-14 08:00 . 2008-06-12 14:22 66560 c:\windows\system32\mtxclu.dll
+ 2008-04-14 07:48 . 2009-11-27 17:13 17920 c:\windows\system32\msyuv.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 28672 c:\windows\system32\msvidc32.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 11264 c:\windows\system32\msrle32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\msrle32.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 67072 c:\windows\system32\mshtmled.dll
- 2009-03-08 08:31 . 2009-03-08 08:31 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 08:31 . 2012-05-11 14:43 55296 c:\windows\system32\msfeedsbs.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 58880 c:\windows\system32\msdtclog.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 58880 c:\windows\system32\msdtclog.dll
+ 2008-04-14 08:00 . 2008-06-24 16:44 74240 c:\windows\system32\mscms.dll
+ 2008-04-14 08:00 . 2009-09-04 21:04 58880 c:\windows\system32\msasn1.dll
+ 2008-04-14 08:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\mciseq.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 25600 c:\windows\system32\jsproxy.dll
- 2008-04-14 08:00 . 2009-03-08 08:33 25600 c:\windows\system32\jsproxy.dll
+ 2008-04-14 07:48 . 2009-11-27 16:08 48128 c:\windows\system32\iyuv_32.dll
+ 2011-09-13 21:10 . 2010-11-18 18:15 86016 c:\windows\system32\isign32.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 86016 c:\windows\system32\isign32.dll
+ 2008-04-14 08:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 80384 c:\windows\system32\iccvid.dll
+ 2008-04-14 08:00 . 2009-10-21 05:39 25088 c:\windows\system32\httpapi.dll
+ 2008-04-14 08:00 . 2009-10-15 16:32 81920 c:\windows\system32\fontsub.dll
+ 2008-04-14 08:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
+ 2008-04-14 08:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
+ 2008-04-14 08:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
+ 2008-04-14 08:00 . 2009-04-20 17:18 45568 c:\windows\system32\dnsrslvr.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\dnsrslvr.dll
+ 2011-09-13 21:10 . 2012-06-02 19:19 35864 c:\windows\system32\dllcache\wups.dll
+ 2011-09-13 21:10 . 2012-06-02 19:19 53784 c:\windows\system32\dllcache\wuauclt.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 90112 c:\windows\system32\dllcache\wshext.dll
+ 2008-04-14 08:00 . 2008-05-09 10:55 90112 c:\windows\system32\dllcache\wshext.dll
+ 2008-04-14 08:00 . 2009-06-25 08:26 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2011-09-13 21:10 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
+ 2008-04-14 08:00 . 2009-06-15 10:44 81920 c:\windows\system32\dllcache\tlntsess.exe
+ 2008-04-14 08:00 . 2009-06-15 10:44 78336 c:\windows\system32\dllcache\telnet.exe
+ 2008-04-14 08:00 . 2009-10-21 05:39 75776 c:\windows\system32\dllcache\strmfilt.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2008-04-14 08:00 . 2010-08-27 05:53 99840 c:\windows\system32\dllcache\srvsvc.dll
+ 2008-04-14 08:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
+ 2008-04-14 08:00 . 2009-06-25 08:26 56832 c:\windows\system32\dllcache\secur32.dll
+ 2008-04-14 08:00 . 2009-02-06 10:39 35328 c:\windows\system32\dllcache\sc.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 79872 c:\windows\system32\dllcache\raschap.dll
+ 2008-04-14 08:00 . 2009-10-12 13:39 79872 c:\windows\system32\dllcache\raschap.dll
+ 2008-04-14 08:00 . 2011-11-20 06:12 61440 c:\windows\system32\dllcache\packager.exe
+ 2008-04-14 08:00 . 2011-09-26 15:41 22528 c:\windows\system32\dllcache\oleaccrc.dll
+ 2008-04-14 08:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
+ 2008-04-14 08:00 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
- 2011-09-13 21:08 . 2008-04-14 08:00 91648 c:\windows\system32\dllcache\mtxoci.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 91648 c:\windows\system32\dllcache\mtxoci.dll
+ 2008-04-14 08:00 . 2008-06-12 14:22 66560 c:\windows\system32\dllcache\mtxclu.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 66560 c:\windows\system32\dllcache\mtxclu.dll
+ 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\system32\dllcache\msyuv.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 28672 c:\windows\system32\dllcache\msvidc32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 67072 c:\windows\system32\dllcache\mshtmled.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 58880 c:\windows\system32\dllcache\msdtclog.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 58880 c:\windows\system32\dllcache\msdtclog.dll
+ 2008-04-14 08:00 . 2008-06-24 16:44 74240 c:\windows\system32\dllcache\mscms.dll
+ 2008-04-14 08:00 . 2009-09-04 21:04 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2008-04-14 08:00 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 23040 c:\windows\system32\dllcache\mciseq.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2008-04-14 08:00 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
+ 2008-04-14 08:00 . 2012-05-11 14:43 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2008-04-14 08:00 . 2009-03-08 08:33 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-11-27 16:08 . 2009-11-27 16:08 48128 c:\windows\system32\dllcache\iyuv_32.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 86016 c:\windows\system32\dllcache\isign32.dll
+ 2011-09-13 21:10 . 2010-11-18 18:15 86016 c:\windows\system32\dllcache\isign32.dll
+ 2008-04-14 08:00 . 2009-10-21 05:39 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2008-04-14 08:00 . 2009-10-15 16:32 81920 c:\windows\system32\dllcache\fontsub.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 45568 c:\windows\system32\dllcache\dnsrslvr.dll
+ 2008-04-14 08:00 . 2009-04-20 17:18 45568 c:\windows\system32\dllcache\dnsrslvr.dll
+ 2008-04-14 08:00 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
+ 2008-04-14 08:00 . 2012-06-02 19:19 97304 c:\windows\system32\dllcache\cdm.dll
+ 2008-04-14 08:00 . 2010-01-13 14:01 86528 c:\windows\system32\dllcache\cabview.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 85504 c:\windows\system32\dllcache\avifil32.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 85504 c:\windows\system32\dllcache\avifil32.dll
+ 2008-04-14 08:00 . 2009-07-17 19:03 58880 c:\windows\system32\dllcache\atl.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\dllcache\atl.dll
+ 2008-04-14 08:00 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2008-04-14 08:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
+ 2008-04-14 08:00 . 2010-01-13 14:01 86528 c:\windows\system32\cabview.dll
+ 2008-04-14 08:00 . 2009-11-27 16:08 85504 c:\windows\system32\avifil32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 85504 c:\windows\system32\avifil32.dll
+ 2008-04-14 08:00 . 2009-07-17 19:03 58880 c:\windows\system32\atl.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 58880 c:\windows\system32\atl.dll
+ 2008-04-14 08:00 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
- 2008-07-29 23:16 . 2008-07-29 23:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-04-08 03:48 . 2010-04-08 03:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2011-12-25 07:49 . 2011-12-25 07:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2009-06-24 23:56 . 2009-06-24 23:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2011-12-25 15:07 . 2011-12-25 15:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2003-02-20 22:09 . 2003-02-20 22:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2011-12-25 02:55 . 2011-12-25 02:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2003-02-20 22:09 . 2003-02-20 22:09 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2011-12-25 02:55 . 2011-12-25 02:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2011-12-25 02:55 . 2011-12-25 02:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2004-07-15 03:32 . 2004-07-15 03:32 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2011-12-25 03:49 . 2011-12-25 03:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2004-07-15 04:49 . 2004-07-15 04:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2011-12-25 03:49 . 2011-12-25 03:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 22:19 . 2003-02-20 22:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-08-02 20:41 . 2012-08-02 20:41 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
+ 2012-08-02 21:34 . 2012-08-02 21:34 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-01-06 21:01 . 2012-01-06 21:01 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-01-06 21:10 . 2012-01-06 21:10 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-08-02 19:12 . 2012-08-02 19:12 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2012-08-02 19:18 . 2012-08-02 19:18 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2012-08-02 20:16 . 2009-03-08 08:33 12288 c:\windows\ie8updates\KB2699988-IE8\xpshims.dll
+ 2012-08-02 20:16 . 2009-03-08 08:31 66560 c:\windows\ie8updates\KB2699988-IE8\mshtmled.dll
+ 2012-08-02 20:16 . 2009-03-08 08:31 55296 c:\windows\ie8updates\KB2699988-IE8\msfeedsbs.dll
+ 2012-08-02 20:16 . 2009-03-08 08:34 43008 c:\windows\ie8updates\KB2699988-IE8\licmgr10.dll
+ 2012-08-02 20:16 . 2009-03-08 08:33 25600 c:\windows\ie8updates\KB2699988-IE8\jsproxy.dll
+ 2009-11-27 17:13 . 2009-11-27 17:13 17920 c:\windows\Driver Cache\i386\msyuv.dll
+ 2009-11-27 16:08 . 2009-11-27 16:08 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
+ 2012-08-02 20:32 . 2012-08-02 20:32 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_64aa26d2\System.Drawing.Design.dll
+ 2012-08-02 20:31 . 2012-08-02 20:31 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_86e95c13\CustomMarshalers.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\4add87007e0864467659e6a248a7fe06\UIAutomationProvider.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\64032bf6e0ddb07ec8e374dae9afcd17\System.Web.ApplicationServices.ni.dll
+ 2012-08-03 16:42 . 2012-08-03 16:42 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\a5c37bc9caf315df294f8b680a1ccd6f\System.AddIn.Contract.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\2230558104bd60551fa131f923d837f9\Microsoft.Workflow.Compiler.ni.exe
+ 2012-08-03 16:40 . 2012-08-03 16:40 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\5ccc57bb582bf753166610089f204601\Microsoft.VisualC.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\414da765b5d5bb7fde97c0ea22de7d74\Accessibility.ni.dll
+ 2012-08-02 21:46 . 2012-08-02 21:46 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
+ 2012-08-02 21:40 . 2012-08-02 21:40 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
+ 2012-08-02 21:39 . 2012-08-02 21:39 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
+ 2012-08-02 22:37 . 2012-08-02 22:37 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-08-02 19:47 . 2012-08-02 19:47 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2011-09-13 21:58 . 2011-09-13 21:58 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-08-02 20:28 . 2012-08-02 20:28 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-08-02 19:12 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
+ 2012-08-02 19:12 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB982665\spmsg.dll
+ 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
+ 2012-08-02 19:55 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2012-08-02 19:55 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB979482\spmsg.dll
+ 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
+ 2012-08-02 19:49 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
+ 2012-08-02 19:49 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB979309\spmsg.dll
+ 2010-01-13 13:48 . 2010-01-13 13:48 86528 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB978706\spmsg.dll
+ 2012-08-02 19:50 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
+ 2012-08-02 19:50 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB978542\spmsg.dll
+ 2012-08-02 19:51 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
+ 2012-08-02 19:51 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB977914\spmsg.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 85504 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
+ 2012-08-02 19:10 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll
+ 2012-08-02 19:10 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB975467\spmsg.dll
+ 2012-08-02 20:20 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll
+ 2012-08-02 20:20 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB975025\spmsg.dll
+ 2012-08-02 19:53 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974392\update\spcustom.dll
+ 2012-08-02 19:53 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB974392\spmsg.dll
+ 2012-08-02 21:27 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974318\update\spcustom.dll
+ 2012-08-02 21:27 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB974318\spmsg.dll
+ 2009-10-12 13:29 . 2009-10-12 13:29 79872 c:\windows\$hf_mig$\KB974318\SP3QFE\raschap.dll
+ 2012-08-02 19:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973815\update\spcustom.dll
+ 2012-08-02 19:48 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB973815\spmsg.dll
+ 2012-08-02 19:52 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll
+ 2012-08-02 19:52 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB971029\spmsg.dll
+ 2012-08-02 19:10 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
+ 2012-08-02 19:10 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB968389\spmsg.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
+ 2009-06-24 10:28 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
+ 2012-08-02 21:16 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB961503\update\spcustom.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB961503\spmsg.dll
+ 2012-08-02 22:07 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB960859\update\spcustom.dll
+ 2012-08-02 22:07 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB960859\spmsg.dll
+ 2009-06-15 11:14 . 2009-06-15 11:14 81920 c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe
+ 2009-06-15 11:14 . 2009-06-15 11:14 78336 c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe
+ 2012-08-02 19:48 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB960803\update\spcustom.dll
+ 2012-08-02 19:48 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB960803\spmsg.dll
+ 2012-08-02 19:20 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2012-08-02 19:20 . 2008-07-08 13:02 18808 c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2012-08-02 22:09 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB952954\update\spcustom.dll
+ 2012-08-02 22:09 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB952954\spmsg.dll
+ 2008-06-24 16:53 . 2008-06-24 16:53 74240 c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2012-08-02 20:19 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB952004\update\spcustom.dll
+ 2012-08-02 20:19 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB952004\spmsg.dll
+ 2008-06-12 14:10 . 2008-06-12 14:10 91648 c:\windows\$hf_mig$\KB952004\SP3QFE\mtxoci.dll
+ 2008-06-12 14:10 . 2008-06-12 14:10 66560 c:\windows\$hf_mig$\KB952004\SP3QFE\mtxclu.dll
+ 2008-06-12 14:10 . 2008-06-12 14:10 58880 c:\windows\$hf_mig$\KB952004\SP3QFE\msdtclog.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 26488 c:\windows\$hf_mig$\KB950974\update\spcustom.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 18808 c:\windows\$hf_mig$\KB950974\spmsg.dll
+ 2012-08-02 19:19 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2509553\update\spcustom.dll
+ 2012-08-02 19:19 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2509553\spmsg.dll
+ 2009-04-20 17:08 . 2009-04-20 17:08 45568 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll
+ 2012-08-02 19:53 . 2010-07-05 13:16 26488 c:\windows\$hf_mig$\KB2508429\update\spcustom.dll
+ 2012-08-02 19:53 . 2010-07-05 13:16 18808 c:\windows\$hf_mig$\KB2508429\spmsg.dll
+ 2012-08-02 20:38 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll
+ 2012-08-02 20:38 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2507938\spmsg.dll
+ 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll
+ 2012-08-02 19:55 . 2010-07-05 13:16 26488 c:\windows\$hf_mig$\KB2507618\update\spcustom.dll
+ 2012-08-02 19:55 . 2010-07-05 13:16 18808 c:\windows\$hf_mig$\KB2507618\spmsg.dll
+ 2012-08-02 19:52 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2506212\update\spcustom.dll
+ 2012-08-02 19:52 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2506212\spmsg.dll
+ 2012-08-02 20:29 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2483185\update\spcustom.dll
+ 2012-08-02 20:29 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2483185\spmsg.dll
+ 2012-08-02 21:15 . 2010-07-05 13:16 26488 c:\windows\$hf_mig$\KB2481109\update\spcustom.dll
+ 2012-08-02 21:15 . 2010-07-05 13:16 18808 c:\windows\$hf_mig$\KB2481109\spmsg.dll
+ 2011-02-02 07:57 . 2011-02-02 07:57 53248 c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll
+ 2012-08-02 22:06 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2479943\update\spcustom.dll
+ 2012-08-02 22:06 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2479943\spmsg.dll
+ 2012-08-02 22:05 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2478971\update\spcustom.dll
+ 2012-08-02 22:05 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2478971\spmsg.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 26488 c:\windows\$hf_mig$\KB2478960\update\spcustom.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 18808 c:\windows\$hf_mig$\KB2478960\spmsg.dll
+ 2012-08-02 21:25 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
+ 2012-08-02 21:25 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2443105\spmsg.dll
+ 2010-11-18 18:15 . 2010-11-18 18:15 86016 c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
+ 2012-08-02 19:53 . 2010-02-22 14:24 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
+ 2012-08-02 19:53 . 2010-02-22 14:24 18808 c:\windows\$hf_mig$\KB2419632\spmsg.dll
+ 2012-08-02 20:29 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2012-08-02 20:29 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2012-08-02 21:47 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2115168\update\spcustom.dll
+ 2012-08-02 21:47 . 2009-05-26 11:40 18808 c:\windows\$hf_mig$\KB2115168\spmsg.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-08-13 21:44 . 2011-02-17 12:54 5632 c:\windows\system32\xpsp4res.dll
+ 2001-08-22 22:15 . 2009-11-27 16:08 8704 c:\windows\system32\tsbyuv.dll
+ 2009-11-27 16:08 . 2009-11-27 16:08 8704 c:\windows\system32\dllcache\tsbyuv.dll
+ 2011-09-14 13:34 . 2012-08-06 18:21 1744 c:\windows\system32\d3d9caps.dat
- 2011-09-14 13:34 . 2012-08-01 19:42 1744 c:\windows\system32\d3d9caps.dat
+ 2012-08-03 15:01 . 2012-08-03 15:01 1632 c:\windows\system32\d3d8caps.dat
+ 2009-11-27 16:08 . 2009-11-27 16:08 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\1361a05238cfe45d7da6cb4b367a986c\dfsvc.ni.exe
+ 2012-08-02 21:54 . 2012-08-02 21:54 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-09-13 21:56 . 2011-09-13 21:56 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-09-13 21:56 . 2011-09-13 21:56 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2009-11-27 16:29 . 2009-11-27 16:29 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
+ 2011-02-17 12:54 . 2011-02-17 12:54 5632 c:\windows\$hf_mig$\KB2508429\SP3QFE\sprv0c0a.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2012-04-06 03:13 . 2012-04-06 03:13 299080 c:\windows\system32\XPSViewer\XPSViewer.exe
+ 2008-04-14 08:00 . 2008-05-08 11:24 155648 c:\windows\system32\wscript.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 155648 c:\windows\system32\wscript.exe
+ 2008-04-14 08:00 . 2009-04-03 15:15 485376 c:\windows\system32\wmspdmod.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 485376 c:\windows\system32\wmspdmod.dll
+ 2008-04-14 08:00 . 2009-07-12 15:21 233472 c:\windows\system32\wmpdxm.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 233472 c:\windows\system32\wmpdxm.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 132096 c:\windows\system32\wkssvc.dll
+ 2008-04-14 08:00 . 2009-06-10 06:15 132096 c:\windows\system32\wkssvc.dll
+ 2008-04-14 08:00 . 2012-02-29 14:09 177664 c:\windows\system32\wintrust.dll
+ 2008-04-14 08:00 . 2011-11-25 21:57 293888 c:\windows\system32\winsrv.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 293888 c:\windows\system32\winsrv.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 180224 c:\windows\system32\winmm.dll
+ 2008-04-14 08:00 . 2011-10-14 14:47 180224 c:\windows\system32\winmm.dll
+ 2008-04-14 08:00 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
+ 2011-09-13 21:24 . 2009-03-11 02:18 969600 c:\windows\system32\WgaTray.exe
+ 2011-09-13 21:24 . 2009-03-11 02:18 265096 c:\windows\system32\WgaLogon.dll
+ 2011-09-13 21:08 . 2009-02-06 10:10 227840 c:\windows\system32\wbem\wmiprvse.exe
+ 2011-09-13 21:08 . 2009-02-09 10:52 453120 c:\windows\system32\wbem\wmiprvsd.dll
+ 2011-09-13 21:07 . 2009-02-09 10:52 473600 c:\windows\system32\wbem\fastprox.dll
+ 2008-04-14 08:00 . 2011-03-04 06:36 420864 c:\windows\system32\vbscript.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 406016 c:\windows\system32\usp10.dll
+ 2008-04-14 08:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll
- 2008-04-14 08:00 . 2009-03-08 08:34 105984 c:\windows\system32\url.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 105984 c:\windows\system32\url.dll
+ 2008-07-29 23:59 . 2011-09-26 15:41 613888 c:\windows\system32\uiautomationcore.dll
+ 2008-04-14 08:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll
+ 2008-04-14 08:00 . 2009-08-26 08:01 247326 c:\windows\system32\strmdll.dll
+ 2012-08-02 16:51 . 2012-06-02 19:19 577048 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.6.7600.256\wuapi.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 135168 c:\windows\system32\shsvcs.dll
+ 2008-04-14 08:00 . 2009-07-27 23:17 135168 c:\windows\system32\shsvcs.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 474624 c:\windows\system32\shlwapi.dll
+ 2008-04-14 08:00 . 2009-12-08 09:24 474624 c:\windows\system32\shlwapi.dll
+ 2008-04-14 08:00 . 2011-01-21 14:44 441344 c:\windows\system32\shimgvw.dll
+ 2008-04-14 08:00 . 2009-02-09 11:23 111104 c:\windows\system32\services.exe
+ 2008-04-14 08:00 . 2008-05-09 10:55 172032 c:\windows\system32\scrrun.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 172032 c:\windows\system32\scrrun.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 180224 c:\windows\system32\scrobj.dll
+ 2008-04-14 08:00 . 2008-05-09 10:55 180224 c:\windows\system32\scrobj.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 270848 c:\windows\system32\sbe.dll
+ 2008-04-14 08:00 . 2011-02-09 13:53 270848 c:\windows\system32\sbe.dll
+ 2008-04-14 08:00 . 2009-02-09 10:52 401408 c:\windows\system32\rpcss.dll
+ 2008-04-14 08:00 . 2010-08-16 08:44 590848 c:\windows\system32\rpcrt4.dll
+ 2008-04-14 08:00 . 2009-10-12 13:39 150016 c:\windows\system32\rastls.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 387072 c:\windows\system32\qdvd.dll
+ 2008-04-14 08:00 . 2011-11-03 15:28 387072 c:\windows\system32\qdvd.dll
- 2008-04-14 08:00 . 2012-07-28 13:42 573470 c:\windows\system32\perfh00A.dat
+ 2008-04-14 08:00 . 2012-08-03 15:29 573470 c:\windows\system32\perfh00A.dat
- 2008-04-14 08:00 . 2012-07-28 13:42 505044 c:\windows\system32\perfh009.dat
+ 2008-04-14 08:00 . 2012-08-03 15:29 505044 c:\windows\system32\perfh009.dat
- 2008-04-14 08:00 . 2012-07-28 13:42 112892 c:\windows\system32\perfc00A.dat
+ 2008-04-14 08:00 . 2012-08-03 15:29 112892 c:\windows\system32\perfc00A.dat
+ 2008-04-14 08:00 . 2009-03-06 14:20 286720 c:\windows\system32\pdh.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 286720 c:\windows\system32\pdh.dll
+ 2008-04-14 08:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 551936 c:\windows\system32\oleaut32.dll
+ 2008-04-14 08:00 . 2011-09-26 15:41 220160 c:\windows\system32\oleacc.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 249856 c:\windows\system32\odbc32.dll
+ 2008-04-14 08:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 206848 c:\windows\system32\occache.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 271360 c:\windows\system32\oakley.dll
+ 2008-04-14 08:00 . 2009-10-13 10:33 271360 c:\windows\system32\oakley.dll
+ 2008-04-14 08:00 . 2010-12-09 15:15 742912 c:\windows\system32\ntdll.dll
+ 2008-04-14 08:00 . 2008-10-15 16:36 337408 c:\windows\system32\netapi32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 337408 c:\windows\system32\netapi32.dll
+ 2008-04-14 08:00 . 2008-06-20 16:03 248320 c:\windows\system32\mswsock.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 248320 c:\windows\system32\mswsock.dll
+ 2008-04-14 08:00 . 2009-08-05 09:00 205312 c:\windows\system32\mswebdvd.dll
+ 2008-04-14 08:00 . 2009-09-11 14:18 136192 c:\windows\system32\msv1_0.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 677888 c:\windows\system32\mstsc.exe
+ 2011-09-13 21:08 . 2011-01-27 11:57 677888 c:\windows\system32\mstsc.exe
+ 2008-04-14 08:00 . 2012-05-11 14:43 611840 c:\windows\system32\mstime.dll
- 2008-04-14 08:00 . 2009-03-08 08:32 611840 c:\windows\system32\mstime.dll
+ 2011-09-13 21:08 . 2009-12-17 07:41 346624 c:\windows\system32\mspaint.exe
- 2011-09-13 21:08 . 2008-04-14 08:00 346624 c:\windows\system32\mspaint.exe
+ 2009-03-08 08:32 . 2012-05-11 14:43 629760 c:\windows\system32\msfeeds.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 161792 c:\windows\system32\msdtcuiu.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 161792 c:\windows\system32\msdtcuiu.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 956928 c:\windows\system32\msdtctm.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 956928 c:\windows\system32\msdtctm.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 428032 c:\windows\system32\msdtcprx.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 384512 c:\windows\system32\mp4sdmod.dll
+ 2008-04-14 08:00 . 2010-04-05 15:54 384512 c:\windows\system32\mp4sdmod.dll
+ 2008-04-14 08:00 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll
+ 2008-04-14 08:00 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll
+ 2008-04-14 08:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll
+ 2008-04-14 08:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll
+ 2012-08-03 00:20 . 2012-08-03 00:20 686792 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_270_Plugin.exe
+ 2012-08-02 23:20 . 2012-08-02 23:20 686792 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.exe
+ 2012-08-02 23:20 . 2012-08-02 23:20 466632 c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.dll
+ 2012-05-12 14:19 . 2012-08-03 00:20 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
- 2012-05-12 14:19 . 2012-07-27 15:19 250056 c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
+ 2008-04-14 08:00 . 2010-12-20 17:25 734720 c:\windows\system32\lsasrv.dll
+ 2008-04-14 08:00 . 2008-06-10 06:11 103936 c:\windows\system32\logagent.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 103936 c:\windows\system32\logagent.exe
+ 2008-04-14 08:00 . 2009-05-07 15:33 347648 c:\windows\system32\localspl.dll
+ 2008-04-14 08:00 . 2010-12-22 12:34 301568 c:\windows\system32\kerberos.dll
+ 2008-04-14 08:00 . 2011-03-04 06:36 726528 c:\windows\system32\jscript.dll
- 2008-04-14 08:00 . 2009-03-08 08:33 726528 c:\windows\system32\jscript.dll
+ 2011-09-13 21:10 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll
+ 2008-04-14 08:00 . 2012-02-29 14:09 148480 c:\windows\system32\imagehlp.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 184320 c:\windows\system32\iepeers.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 387584 c:\windows\system32\iedkcs32.dll
+ 2008-04-14 08:00 . 2012-05-11 11:38 174080 c:\windows\system32\ie4uinit.exe
+ 2008-04-14 08:00 . 2008-10-23 12:36 286720 c:\windows\system32\gdi32.dll
- 2011-11-11 16:51 . 2012-03-18 21:14 269392 c:\windows\system32\FNTCACHE.DAT
+ 2011-11-11 16:51 . 2012-08-02 22:24 269392 c:\windows\system32\FNTCACHE.DAT
+ 2008-04-14 08:00 . 2008-07-07 20:27 253952 c:\windows\system32\es.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 186880 c:\windows\system32\encdec.dll
+ 2008-04-14 08:00 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
+ 2008-04-14 08:00 . 2010-02-11 12:02 226880 c:\windows\system32\drivers\tcpip6.sys
+ 2008-04-14 08:00 . 2008-06-20 11:51 361600 c:\windows\system32\drivers\tcpip.sys
+ 2008-04-14 08:00 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys
+ 2008-04-14 08:00 . 2008-05-08 14:02 203136 c:\windows\system32\drivers\rmcast.sys
+ 2011-09-13 21:08 . 2012-05-02 13:46 139656 c:\windows\system32\drivers\rdpwd.sys
- 2011-09-13 21:08 . 2008-04-14 08:00 139656 c:\windows\system32\drivers\rdpwd.sys
+ 2008-04-14 08:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys
+ 2008-04-14 08:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
+ 2008-04-14 08:00 . 2009-10-20 16:20 265728 c:\windows\system32\drivers\http.sys
+ 2011-10-14 14:35 . 2008-06-14 17:33 272512 c:\windows\system32\drivers\bthport.sys
+ 2008-04-14 08:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
+ 2008-04-14 08:00 . 2011-03-03 06:54 149504 c:\windows\system32\dnsapi.dll
+ 2011-09-13 21:10 . 2012-06-04 21:35 210968 c:\windows\system32\dllcache\wuweb.dll
+ 2011-09-13 21:10 . 2012-06-02 19:19 329240 c:\windows\system32\dllcache\wucltui.dll
+ 2011-09-13 21:10 . 2012-06-02 19:19 577048 c:\windows\system32\dllcache\wuapi.dll
+ 2008-04-14 08:00 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 155648 c:\windows\system32\dllcache\wscript.exe
+ 2011-09-13 21:08 . 2010-07-16 11:57 221696 c:\windows\system32\dllcache\wordpad.exe
+ 2008-04-14 08:00 . 2009-04-03 15:15 485376 c:\windows\system32\dllcache\wmspdmod.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 485376 c:\windows\system32\dllcache\wmspdmod.dll
+ 2008-04-14 08:00 . 2009-07-12 15:21 233472 c:\windows\system32\dllcache\wmpdxm.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 233472 c:\windows\system32\dllcache\wmpdxm.dll
+ 2011-09-13 21:08 . 2009-02-06 10:10 227840 c:\windows\system32\dllcache\wmiprvse.exe
+ 2011-09-13 21:08 . 2009-02-09 10:52 453120 c:\windows\system32\dllcache\wmiprvsd.dll
+ 2008-04-14 08:00 . 2009-06-10 06:15 132096 c:\windows\system32\dllcache\wkssvc.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 132096 c:\windows\system32\dllcache\wkssvc.dll
+ 2008-04-14 08:00 . 2012-02-29 14:09 177664 c:\windows\system32\dllcache\wintrust.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 293888 c:\windows\system32\dllcache\winsrv.dll
+ 2008-04-14 08:00 . 2011-11-25 21:57 293888 c:\windows\system32\dllcache\winsrv.dll
+ 2008-04-14 08:00 . 2011-10-14 14:47 180224 c:\windows\system32\dllcache\winmm.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 180224 c:\windows\system32\dllcache\winmm.dll
+ 2008-04-14 08:00 . 2012-05-16 15:08 916992 c:\windows\system32\dllcache\wininet.dll
+ 2008-04-14 08:00 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2009-03-11 02:18 . 2009-03-11 02:18 265096 c:\windows\system32\dllcache\wgaLogon.dll
+ 2011-09-13 21:10 . 2011-04-30 03:00 758784 c:\windows\system32\dllcache\vgx.dll
+ 2008-04-14 08:00 . 2011-03-04 06:36 420864 c:\windows\system32\dllcache\vbscript.dll
+ 2008-04-14 08:00 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 406016 c:\windows\system32\dllcache\usp10.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 105984 c:\windows\system32\dllcache\url.dll
- 2008-04-14 08:00 . 2009-03-08 08:34 105984 c:\windows\system32\dllcache\url.dll
+ 2011-09-13 21:10 . 2009-06-21 21:47 153088 c:\windows\system32\dllcache\triedit.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 153088 c:\windows\system32\dllcache\triedit.dll
+ 2008-04-14 08:00 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
+ 2008-04-14 08:00 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\tcpip.sys
+ 2008-04-14 08:00 . 2010-08-27 08:03 119808 c:\windows\system32\dllcache\t2embed.dll
+ 2008-04-14 08:00 . 2009-08-26 08:01 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-04-14 08:00 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
+ 2008-04-14 08:00 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 135168 c:\windows\system32\dllcache\shsvcs.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 474624 c:\windows\system32\dllcache\shlwapi.dll
+ 2008-04-14 08:00 . 2009-12-08 09:24 474624 c:\windows\system32\dllcache\shlwapi.dll
+ 2008-04-14 08:00 . 2011-01-21 14:44 441344 c:\windows\system32\dllcache\shimgvw.dll
+ 2008-04-14 08:00 . 2009-02-09 11:23 111104 c:\windows\system32\dllcache\services.exe
+ 2008-04-14 08:00 . 2008-05-09 10:55 172032 c:\windows\system32\dllcache\scrrun.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 172032 c:\windows\system32\dllcache\scrrun.dll
+ 2008-04-14 08:00 . 2008-05-09 10:55 180224 c:\windows\system32\dllcache\scrobj.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 180224 c:\windows\system32\dllcache\scrobj.dll
+ 2008-04-14 08:00 . 2012-06-04 04:32 152576 c:\windows\system32\dllcache\schannel.dll
+ 2008-04-14 08:00 . 2011-02-09 13:53 270848 c:\windows\system32\dllcache\sbe.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 270848 c:\windows\system32\dllcache\sbe.dll
+ 2008-04-14 08:00 . 2009-02-09 10:52 401408 c:\windows\system32\dllcache\rpcss.dll
+ 2008-04-14 08:00 . 2010-08-16 08:44 590848 c:\windows\system32\dllcache\rpcrt4.dll
+ 2008-04-14 08:00 . 2008-05-08 14:02 203136 c:\windows\system32\dllcache\rmcast.sys
- 2011-09-13 21:08 . 2008-04-14 08:00 139656 c:\windows\system32\dllcache\rdpwd.sys
+ 2011-09-13 21:08 . 2012-05-02 13:46 139656 c:\windows\system32\dllcache\rdpwd.sys
+ 2008-04-14 08:00 . 2009-10-12 13:39 150016 c:\windows\system32\dllcache\rastls.dll
+ 2008-04-14 08:00 . 2011-11-03 15:28 387072 c:\windows\system32\dllcache\qdvd.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 387072 c:\windows\system32\dllcache\qdvd.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 286720 c:\windows\system32\dllcache\pdh.dll
+ 2008-04-14 08:00 . 2009-03-06 14:20 286720 c:\windows\system32\dllcache\pdh.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 551936 c:\windows\system32\dllcache\oleaut32.dll
+ 2008-04-14 08:00 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll
+ 2008-04-14 08:00 . 2011-09-26 15:41 220160 c:\windows\system32\dllcache\oleacc.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 249856 c:\windows\system32\dllcache\odbc32.dll
+ 2008-04-14 08:00 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 206848 c:\windows\system32\dllcache\occache.dll
+ 2008-04-14 08:00 . 2009-10-13 10:33 271360 c:\windows\system32\dllcache\oakley.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 271360 c:\windows\system32\dllcache\oakley.dll
+ 2008-04-14 08:00 . 2010-12-09 15:15 742912 c:\windows\system32\dllcache\ntdll.dll
+ 2008-04-14 08:00 . 2008-10-15 16:36 337408 c:\windows\system32\dllcache\netapi32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 337408 c:\windows\system32\dllcache\netapi32.dll
+ 2008-04-14 08:00 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys
- 2008-04-14 08:00 . 2008-04-14 08:00 248320 c:\windows\system32\dllcache\mswsock.dll
+ 2008-04-14 08:00 . 2008-06-20 16:03 248320 c:\windows\system32\dllcache\mswsock.dll
+ 2008-04-14 08:00 . 2009-08-05 09:00 205312 c:\windows\system32\dllcache\mswebdvd.dll
+ 2008-04-14 08:00 . 2009-09-11 14:18 136192 c:\windows\system32\dllcache\msv1_0.dll
- 2008-04-14 08:00 . 2009-03-08 08:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 611840 c:\windows\system32\dllcache\mstime.dll
+ 2011-09-13 21:08 . 2009-12-17 07:41 346624 c:\windows\system32\dllcache\mspaint.exe
- 2011-09-13 21:08 . 2008-04-14 08:00 346624 c:\windows\system32\dllcache\mspaint.exe
+ 2011-09-13 21:10 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 102400 c:\windows\system32\dllcache\msjro.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 161792 c:\windows\system32\dllcache\msdtcuiu.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 161792 c:\windows\system32\dllcache\msdtcuiu.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 956928 c:\windows\system32\dllcache\msdtctm.dll
- 2011-09-13 21:08 . 2008-04-14 08:00 956928 c:\windows\system32\dllcache\msdtctm.dll
+ 2011-09-13 21:08 . 2008-06-12 14:22 428032 c:\windows\system32\dllcache\msdtcprx.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 200704 c:\windows\system32\dllcache\msadox.dll
+ 2011-09-13 21:10 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
+ 2011-09-13 21:10 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 180224 c:\windows\system32\dllcache\msadomd.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 536576 c:\windows\system32\dllcache\msado15.dll
+ 2011-09-13 21:10 . 2012-05-28 18:16 536576 c:\windows\system32\dllcache\msado15.dll
+ 2011-09-13 21:10 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 143360 c:\windows\system32\dllcache\msadco.dll
+ 2011-09-13 21:10 . 2008-05-01 14:36 331776 c:\windows\system32\dllcache\msadce.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 331776 c:\windows\system32\dllcache\msadce.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 384512 c:\windows\system32\dllcache\mp4sdmod.dll
+ 2008-04-14 08:00 . 2010-04-05 15:54 384512 c:\windows\system32\dllcache\mp4sdmod.dll
+ 2008-04-14 08:00 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
+ 2008-04-14 08:00 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
+ 2008-04-14 08:00 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
+ 2008-04-14 08:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll
+ 2008-04-14 08:00 . 2010-12-20 17:25 734720 c:\windows\system32\dllcache\lsasrv.dll
+ 2008-04-14 08:00 . 2008-06-10 06:11 103936 c:\windows\system32\dllcache\logagent.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 103936 c:\windows\system32\dllcache\logagent.exe
+ 2008-04-14 08:00 . 2009-05-07 15:33 347648 c:\windows\system32\dllcache\localspl.dll
+ 2011-09-13 21:08 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
- 2011-09-13 21:08 . 2008-04-14 08:00 677888 c:\windows\system32\dllcache\lhmstsc.exe
+ 2008-04-14 08:00 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-04-14 08:00 . 2011-03-04 06:36 726528 c:\windows\system32\dllcache\jscript.dll
- 2008-04-14 08:00 . 2009-03-08 08:33 726528 c:\windows\system32\dllcache\jscript.dll
+ 2011-09-13 21:10 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2008-04-14 08:00 . 2012-02-29 14:09 148480 c:\windows\system32\dllcache\imagehlp.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-04-14 08:00 . 2012-05-11 11:38 174080 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2011-09-13 21:10 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
- 2011-09-13 21:10 . 2008-04-14 08:00 744448 c:\windows\system32\dllcache\helpsvc.exe
+ 2008-04-14 08:00 . 2008-10-23 12:36 286720 c:\windows\system32\dllcache\gdi32.dll
+ 2011-09-13 21:07 . 2009-02-09 10:52 473600 c:\windows\system32\dllcache\fastprox.dll
+ 2008-04-14 08:00 . 2008-07-07 20:27 253952 c:\windows\system32\dllcache\es.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 186880 c:\windows\system32\dllcache\encdec.dll
+ 2008-04-14 08:00 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
+ 2008-04-14 08:00 . 2011-03-03 06:54 149504 c:\windows\system32\dllcache\dnsapi.dll
+ 2008-04-14 08:00 . 2008-05-07 09:07 135168 c:\windows\system32\dllcache\cscript.exe
- 2008-04-14 08:00 . 2008-04-14 08:00 605184 c:\windows\system32\dllcache\crypt32.dll
+ 2008-04-14 08:00 . 2012-05-31 13:21 605184 c:\windows\system32\dllcache\crypt32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 617472 c:\windows\system32\dllcache\comctl32.dll
+ 2008-04-14 08:00 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
+ 2011-10-14 14:35 . 2008-06-14 17:33 272512 c:\windows\system32\dllcache\bthport.sys
+ 2008-04-14 08:00 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
+ 2008-04-14 08:00 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
- 2008-04-14 08:00 . 2008-04-14 08:00 685056 c:\windows\system32\dllcache\advapi32.dll
+ 2008-04-14 08:00 . 2009-02-09 10:52 685056 c:\windows\system32\dllcache\advapi32.dll
+ 2008-04-14 08:00 . 2009-11-21 15:58 471552 c:\windows\system32\dllcache\aclayers.dll
+ 2008-04-14 08:00 . 2010-02-12 04:34 100864 c:\windows\system32\dllcache\6to4svc.dll
+ 2008-04-14 08:00 . 2008-05-07 09:07 135168 c:\windows\system32\cscript.exe
+ 2008-04-14 08:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 617472 c:\windows\system32\comctl32.dll
+ 2008-04-14 08:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll
+ 2008-04-14 08:00 . 2009-02-09 10:52 685056 c:\windows\system32\advapi32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 685056 c:\windows\system32\advapi32.dll
+ 2008-04-14 08:00 . 2010-02-12 04:34 100864 c:\windows\system32\6to4svc.dll
+ 2011-09-13 21:10 . 2010-06-14 14:31 744448 c:\windows\pchealth\helpctr\binaries\helpsvc.exe
- 2011-09-13 21:10 . 2008-04-14 08:00 744448 c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
+ 2012-01-19 17:08 . 2012-01-19 17:08 917272 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpftxt_v0400.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
+ 2012-04-21 15:03 . 2012-04-21 15:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-26 08:39 . 2011-12-26 08:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2011-12-15 17:08 . 2011-12-15 17:08 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-04-06 03:52 . 2012-04-06 03:52 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-04-08 03:48 . 2010-04-08 03:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2008-07-29 23:16 . 2008-07-29 23:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-04-08 03:48 . 2010-04-08 03:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2011-12-25 07:49 . 2011-12-25 07:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-02-09 16:22 . 2010-02-09 16:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2012-04-21 11:15 . 2012-04-21 11:15 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2008-07-25 15:17 . 2008-07-25 15:17 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 989968 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2012-04-25 21:45 . 2012-04-25 21:45 471040 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2011-12-25 02:55 . 2011-12-25 02:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2004-07-15 03:33 . 2004-07-15 03:33 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-12-25 02:53 . 2011-12-25 02:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2004-07-15 03:25 . 2004-07-15 03:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2011-12-25 03:49 . 2011-12-25 03:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2004-07-15 04:49 . 2004-07-15 04:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-06 21:01 . 2012-01-06 21:01 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-12-22 20:50 . 2011-12-22 20:50 256000 c:\windows\Installer\1365ae7.msp
+ 2012-04-22 01:55 . 2012-04-22 01:55 980480 c:\windows\Installer\1365ae0.msp
+ 2008-12-13 13:58 . 2008-12-13 13:58 754688 c:\windows\Installer\1365ab2.msp
+ 2011-12-25 09:40 . 2011-12-25 09:40 819200 c:\windows\Installer\1365a95.msp
+ 2009-03-20 15:48 . 2009-03-20 15:48 183808 c:\windows\Installer\1365a71.msp
+ 2010-02-25 04:14 . 2010-02-25 04:14 543232 c:\windows\Installer\1365a15.msp
+ 2012-08-02 19:18 . 2012-08-02 19:18 432640 c:\windows\Installer\1365a07.msi
+ 2012-08-02 19:12 . 2012-08-02 19:12 429568 c:\windows\Installer\13659f8.msi
+ 2010-03-18 16:16 . 2010-03-18 16:16 915800 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\wpftxt_x86.dll
+ 2010-03-18 16:16 . 2010-03-18 16:16 181096 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\PresentationHostDLL_X86.dll
+ 2012-08-02 20:16 . 2009-03-08 08:34 914944 c:\windows\ie8updates\KB2699988-IE8\wininet.dll
+ 2012-08-02 20:16 . 2009-03-08 08:34 105984 c:\windows\ie8updates\KB2699988-IE8\url.dll
+ 2012-08-02 20:16 . 2010-07-05 13:16 401272 c:\windows\ie8updates\KB2699988-IE8\spuninst\updspapi.dll
+ 2012-08-02 20:16 . 2010-07-05 13:16 233848 c:\windows\ie8updates\KB2699988-IE8\spuninst\spuninst.exe
+ 2012-08-02 20:16 . 2009-03-08 08:34 109568 c:\windows\ie8updates\KB2699988-IE8\occache.dll
+ 2012-08-02 20:16 . 2009-03-08 08:32 611840 c:\windows\ie8updates\KB2699988-IE8\mstime.dll
+ 2012-08-02 20:16 . 2009-03-08 08:32 594432 c:\windows\ie8updates\KB2699988-IE8\msfeeds.dll
+ 2012-08-02 20:16 . 2009-03-08 08:35 521216 c:\windows\ie8updates\KB2699988-IE8\jsdbgui.dll
+ 2012-08-02 20:16 . 2009-03-08 08:33 246784 c:\windows\ie8updates\KB2699988-IE8\ieproxy.dll
+ 2012-08-02 20:16 . 2009-03-08 08:31 183808 c:\windows\ie8updates\KB2699988-IE8\iepeers.dll
+ 2012-08-02 20:16 . 2009-03-08 08:35 742912 c:\windows\ie8updates\KB2699988-IE8\iedvtool.dll
+ 2012-08-02 20:16 . 2009-03-08 18:09 391536 c:\windows\ie8updates\KB2699988-IE8\iedkcs32.dll
+ 2012-08-02 20:16 . 2009-03-08 08:32 173056 c:\windows\ie8updates\KB2699988-IE8\ie4uinit.exe
+ 2012-08-02 19:12 . 2009-03-08 08:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 401272 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 233848 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
+ 2012-08-02 19:18 . 2009-03-08 08:33 420352 c:\windows\ie8updates\KB2510531-IE8\vbscript.dll
+ 2012-08-02 19:18 . 2010-07-05 13:16 401272 c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll
+ 2012-08-02 19:18 . 2010-07-05 13:16 233848 c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe
+ 2012-08-02 19:18 . 2009-03-08 08:33 726528 c:\windows\ie8updates\KB2510531-IE8\jscript.dll
+ 2012-08-02 18:27 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2011-10-14 14:35 . 2008-06-14 17:33 272512 c:\windows\Driver Cache\i386\bthport.sys
+ 2012-06-26 20:09 . 2012-06-26 20:09 731688 c:\windows\Downloaded Program Files\qsax.dll
+ 2012-08-02 20:36 . 2012-08-02 20:36 843776

c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_e2565a1d\System.Drawing.dll
+ 2012-08-02 20:38 . 2012-08-02 20:38 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_f1536532\System.Drawing.Design.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c6953828\CustomMarshalers.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\7708e8673f6a5ddc3130203686db0b5b\WsatConfig.ni.exe
+ 2012-08-03 16:41 . 2012-08-03 16:41 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\6823effdbb0434f96511748697349862\UIAutomationTypes.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\738d3077763a0ce3ddf9228b5854e26d\System.Xml.Linq.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\eaa4a186f9f15fe9e94ce946b603e42e\System.Windows.Input.Manipulations.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\3b0ca1f01a1eaf48c8df7595e6d1f75c\System.Web.RegularExpressions.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\530e202cb070fa04243f083c48c7723c\System.Transactions.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\9f4f7e7199d4544f6621af546956e84d\System.ServiceProcess.ni.dll
+ 2012-08-02 20:07 . 2012-08-02 20:07 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\3a852d2bd1860c7e917dd7ae2676c97c\System.Security.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\1ea68db6df26604de2e14af08dde4adb\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\7f9313247dd8235f6d4b63672b9ae3ad\System.Runtime.Remoting.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\d95b1af6f53f75d4e336f3678dc0ce63\System.Runtime.Caching.ni.dll
+ 2012-08-02 20:07 . 2012-08-02 20:07 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\360e9c00572679f437fff0ae719a5886\System.Numerics.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\56d1e62510421b3721142688b44a581b\System.EnterpriseServices.Wrapper.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\56d1e62510421b3721142688b44a581b\System.EnterpriseServices.ni.dll
+ 2012-08-02 20:07 . 2012-08-02 20:07 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\f32323be4d8b7b9b47e3605ee2cfff18\System.Dynamic.ni.dll
+ 2012-08-02 21:37 . 2012-08-02 21:37 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\a9f00d46a2dce4447842d16ad10ffce4\System.Drawing.Design.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\c953921036f6785c65d591bf7308cb46\System.DirectoryServices.Protocols.ni.dll
+ 2012-08-03 16:42 . 2012-08-03 16:42 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\623f6a322d104b4424aae3a9fb34e13f\System.Data.DataSetExtensions.ni.dll
+ 2012-08-02 20:06 . 2012-08-02 20:06 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\4b1f1878bf47391d09f9e256fde70e4b\System.Configuration.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\844034ad233269c619264768179c154d\System.Configuration.Install.ni.dll
+ 2012-08-03 16:42 . 2012-08-03 16:42 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\86c524ba4d7c611933fd831482fc37b2\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-08-02 20:08 . 2012-08-02 20:08 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\1f22e510d8f22aebc2ad37944ae9e5b4\System.ComponentModel.Composition.ni.dll
+ 2012-08-03 16:42 . 2012-08-03 16:42 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\847a89aa3ca79dd380995cb43694d6e9\System.AddIn.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\48a515b17e8631c620aa0b293a0eb594\System.Activities.DurableInstancing.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\492f2a986cfa8ec67862fc9aef1d0a88\SMSvcHost.ni.exe
+ 2012-08-03 16:40 . 2012-08-03 16:40 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\13a7f21e234d2c7587f7a0b58a17d591\SMDiagnostics.ni.dll
+ 2012-08-02 21:14 . 2012-08-02 21:14 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e28fd0201f1e3003f2f6043b491c69b3\PresentationFramework.Luna.ni.dll
+ 2012-08-02 21:11 . 2012-08-02 21:11 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ae8a309e2b2ff2df84ad53a60c69d157\PresentationFramework.Royale.ni.dll
+ 2012-08-02 21:11 . 2012-08-02 21:11 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\53259db9c53023068d56fbfdb75e7f70\PresentationFramework.Classic.ni.dll
+ 2012-08-02 21:14 . 2012-08-02 21:14 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\124775115f8585454f2f7470b74a7d8d\PresentationFramework.Aero.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\8ca394271c3a83e44006fd273afee7be\MSBuild.ni.exe
+ 2012-08-03 16:40 . 2012-08-03 16:40 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\bd9580a3d2a498446fdca08e821e8ae2\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\7b9889431566039e4eda08930c626d67\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\b84df7b482345d61b9d1949a97ba184b\Microsoft.Build.Utilities.v4.0.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\bce6545fd12a8cbaa7d798fc1164f7d8\Microsoft.Build.Framework.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\1920a3e2ae25a5d02bb6cf10c38cf6fc\Microsoft.Build.Conversion.v4.0.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\8f0e78c2aa12e929ecf3b0c912ac8406\CustomMarshalers.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\c4b815c608a6a212b32fb598b4ca7dde\ComSvcConfig.ni.exe
+ 2012-08-03 16:38 . 2012-08-03 16:38 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\e8c8237c151f1c70994764b1df772bbc\AspNetMMCExt.ni.dll
+ 2012-08-02 22:35 . 2012-08-02 22:35 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ac4fc3032c19946f9b2729468888206d\WsatConfig.ni.exe
+ 2012-08-02 22:32 . 2012-08-02 22:32 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-08-02 21:46 . 2012-08-02 21:46 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll
+ 2012-08-02 21:45 . 2012-08-02 21:45 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\04e5e2be34a70ee7f4c87550238095a0\UIAutomationClient.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\1c13b08593e99d6f5bef49ae7939c78b\System.Xml.Linq.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6c7765c10516d375e9ddedad2dbab848\System.Web.RegularExpressions.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-08-03 15:34 . 2012-08-03 15:34 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
+ 2012-08-03 15:13 . 2012-08-03 15:13 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\41f6f6dd0c8427d4a8e6fd3915505a6b\System.Transactions.ni.dll
+ 2012-08-03 15:13 . 2012-08-03 15:13 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\129b15861e200613ff78ae15581f9093\System.Security.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a644ec04e18202b60f9d828bc207972b\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-08-03 15:13 . 2012-08-03 15:13 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\4a9eb43005a041959ddc5c7e586ab746\System.Net.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9080c8e8e7b6dfb502c1328673d636f8\System.Management.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\3182a049ba953010dec649cf290a9e90\System.Management.Instrumentation.ni.dll
+ 2012-08-02 21:47 . 2012-08-02 21:47 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8991f21d4b3676bf6f779110db8d4ac9\System.IO.Log.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cd9c60a35d4958e94d2e3dd2f778e2e9\System.IdentityModel.Selectors.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.Wrapper.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.ni.dll
+ 2012-08-02 22:29 . 2012-08-02 22:29 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ca484772955bc4db03b5dcb611c09423\System.DirectoryServices.Protocols.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ba5e68dddfd3279a8469d39eded48f3\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a0109fce606a3110a5e7f9a4773f517e\System.Data.Services.Design.ni.dll
+ 2012-08-03 14:52 . 2012-08-03 14:52 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3a68d0441f509ffa6f8f0fb9cfcc5780\System.Data.Services.Client.ni.dll
+ 2012-08-03 14:32 . 2012-08-03 14:32 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04440b3dd5d822da4973a525ee04b05d\System.Data.Entity.Design.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7bbb5d9e3b161b4d4b968e590442d3ae\System.Data.DataSetExtensions.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d5b7368bde0f65aa15d9f46b498cc89\System.Configuration.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\931a2bece4668863db4f852401c828cf\System.AddIn.ni.dll
+ 2012-08-02 22:35 . 2012-08-02 22:35 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6762f1ee780fa9c0b4ef66b285c64844\SMSvcHost.ni.exe
+ 2012-08-02 22:35 . 2012-08-02 22:35 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\660c4d6dd69ef22bc05587e1998cd135\SMDiagnostics.ni.dll
+ 2012-08-02 22:35 . 2012-08-02 22:35 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\47ed5bc9f42ea0054ce9acfde5e640b8\ServiceModelReg.ni.exe
+ 2012-08-02 21:42 . 2012-08-02 21:42 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll
+ 2012-08-02 21:42 . 2012-08-02 21:42 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll
+ 2012-08-02 21:42 . 2012-08-02 21:42 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll
+ 2012-08-02 21:42 . 2012-08-02 21:42 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5a121969a115d11b6256eb960c145686\MSBuild.ni.exe
+ 2012-08-02 22:35 . 2012-08-02 22:35 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\97c613d3899b320a6765793bdf490272\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dec22fb7d6b8929a41380e5359741a07\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1009b31c86a1b798fffa9e0127cec29c\Microsoft.Build.Utilities.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\21d88631ef629715d3eecdd08e62e0b8\Microsoft.Build.Engine.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a0f38c6478cca8297fb160291346c1c9\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll
+ 2012-08-02 22:34 . 2012-08-02 22:34 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\9869c02d18825fdd32e64135a3e7246b\ComSvcConfig.ni.exe
+ 2012-08-02 22:37 . 2012-08-02 22:37 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
- 2011-09-13 21:59 . 2011-09-13 21:59 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-09-13 21:57 . 2011-09-13 21:57 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-09-13 21:57 . 2011-09-13 21:57 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-08-02 19:47 . 2012-08-02 19:47 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-08-02 19:47 . 2012-08-02 19:47 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
- 2011-09-13 21:59 . 2011-09-13 21:59 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2011-09-13 21:59 . 2011-09-13 21:59 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-08-02 22:00 . 2012-08-02 22:00 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
- 2011-09-13 21:59 . 2011-09-13 21:59 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-09-13 21:58 . 2011-09-13 21:58 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2012-08-02 19:47 . 2012-08-02 19:47 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2012-08-02 20:15 . 2012-08-02 20:15 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-09-13 21:58 . 2011-09-13 21:58 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-08-02 20:15 . 2012-08-02 20:15 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-08-02 19:22 . 2012-08-02 19:22 471040 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-04-14 08:00 . 2009-11-21 15:58 471552 c:\windows\AppPatch\aclayers.dll
+ 2012-08-02 19:12 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB982665\update\updspapi.dll
+ 2012-08-02 19:12 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB982665\update\update.exe
+ 2012-08-02 19:12 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB982665\spuninst.exe
+ 2012-08-02 19:55 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2012-08-02 19:55 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2012-08-02 19:55 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:30 . 2010-04-16 15:30 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB979482\update\update.exe
+ 2012-08-02 19:49 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB979482\spuninst.exe
+ 2012-08-02 19:49 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB979309\update\update.exe
+ 2012-08-02 19:49 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB979309\spuninst.exe
+ 2012-08-02 19:49 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
+ 2012-08-02 19:49 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB978706\update\update.exe
+ 2012-08-02 19:49 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978706\spuninst.exe
+ 2009-12-17 07:38 . 2009-12-17 07:38 346624 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
+ 2012-08-02 19:50 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
+ 2012-08-02 19:50 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB978542\update\update.exe
+ 2012-08-02 19:50 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB978542\spuninst.exe
+ 2010-01-29 14:54 . 2010-01-29 14:54 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
+ 2012-08-02 19:51 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
+ 2012-08-02 19:51 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB977914\update\update.exe
+ 2012-08-02 19:51 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB977914\spuninst.exe
+ 2012-08-02 19:10 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2012-08-02 19:10 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2012-08-02 19:10 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:15 . 2009-09-11 14:15 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2012-08-02 20:20 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2012-08-02 20:20 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2012-08-02 20:20 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2012-08-02 19:53 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB974392\update\updspapi.dll
+ 2012-08-02 19:53 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB974392\update\update.exe
+ 2012-08-02 19:53 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974392\spuninst.exe
+ 2009-10-13 10:39 . 2009-10-13 10:39 271360 c:\windows\$hf_mig$\KB974392\SP3QFE\oakley.dll
+ 2012-08-02 21:27 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB974318\update\updspapi.dll
+ 2012-08-02 21:27 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB974318\update\update.exe
+ 2012-08-02 21:27 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974318\spuninst.exe
+ 2009-10-12 13:29 . 2009-10-12 13:29 150528 c:\windows\$hf_mig$\KB974318\SP3QFE\rastls.dll
+ 2012-08-02 19:48 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB973815\update\updspapi.dll
+ 2012-08-02 19:48 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB973815\update\update.exe
+ 2012-08-02 19:48 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973815\spuninst.exe
+ 2009-08-05 08:53 . 2009-08-05 08:53 205312 c:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
+ 2012-08-02 19:52 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB971029\update\updspapi.dll
+ 2012-08-02 19:52 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB971029\update\update.exe
+ 2012-08-02 19:52 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB971029\spuninst.exe
+ 2009-07-27 22:14 . 2009-07-27 22:14 135168 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
+ 2012-08-02 19:10 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2012-08-02 19:10 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2012-08-02 19:10 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-06-25 08:42 . 2009-06-25 08:42 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 09:42 . 2009-06-26 09:42 734720 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-06-25 08:42 . 2009-06-25 08:42 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 401272 c:\windows\$hf_mig$\KB961503\update\updspapi.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 764280 c:\windows\$hf_mig$\KB961503\update\update.exe
+ 2012-08-02 21:16 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB961503\spuninst.exe
+ 2012-08-02 22:07 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB960859\update\updspapi.dll
+ 2012-08-02 22:07 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB960859\update\update.exe
+ 2012-08-02 22:07 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB960859\spuninst.exe
+ 2012-08-02 19:48 . 2007-11-30 12:39 401272 c:\windows\$hf_mig$\KB960803\update\updspapi.dll
+ 2012-08-02 19:48 . 2007-11-30 12:39 764280 c:\windows\$hf_mig$\KB960803\update\update.exe
+ 2012-08-02 19:48 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB960803\spuninst.exe
+ 2008-12-16 12:23 . 2008-12-16 12:23 354304 c:\windows\$hf_mig$\KB960803\SP3QFE\winhttp.dll
+ 2012-08-02 19:20 . 2008-07-09 07:39 401272 c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2012-08-02 19:20 . 2008-07-09 07:39 764280 c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2012-08-02 19:20 . 2008-07-08 13:02 233848 c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-10-23 12:44 . 2008-10-23 12:44 286720 c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2012-08-02 22:09 . 2007-11-30 12:39 401272 c:\windows\$hf_mig$\KB952954\update\updspapi.dll
+ 2012-08-02 22:09 . 2007-11-30 12:39 764280 c:\windows\$hf_mig$\KB952954\update\update.exe
+ 2012-08-02 22:09 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB952954\spuninst.exe
+ 2012-08-02 20:19 . 2007-11-30 12:39 401272 c:\windows\$hf_mig$\KB952004\update\updspapi.dll
+ 2012-08-02 20:19 . 2007-11-30 12:39 764280 c:\windows\$hf_mig$\KB952004\update\update.exe
+ 2012-08-02 20:19 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB952004\spuninst.exe
+ 2008-06-12 14:10 . 2008-06-12 14:10 161792 c:\windows\$hf_mig$\KB952004\SP3QFE\msdtcuiu.dll
+ 2008-06-12 14:10 . 2008-06-12 14:10 956928 c:\windows\$hf_mig$\KB952004\SP3QFE\msdtctm.dll
+ 2008-06-12 14:10 . 2008-06-12 14:10 428032 c:\windows\$hf_mig$\KB952004\SP3QFE\msdtcprx.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 401272 c:\windows\$hf_mig$\KB950974\update\updspapi.dll
+ 2012-08-02 21:16 . 2007-11-30 12:39 764280 c:\windows\$hf_mig$\KB950974\update\update.exe
+ 2012-08-02 21:16 . 2007-11-30 12:39 233848 c:\windows\$hf_mig$\KB950974\spuninst.exe
+ 2008-07-07 20:25 . 2008-07-07 20:25 253952 c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2012-08-02 19:19 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2509553\update\updspapi.dll
+ 2012-08-02 19:19 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2509553\update\update.exe
+ 2012-08-02 19:19 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2509553\spuninst.exe
+ 2008-06-20 11:16 . 2008-06-20 11:16 225856 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys
+ 2008-06-20 11:59 . 2008-06-20 11:59 361600 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
+ 2008-06-20 17:44 . 2008-06-20 17:44 248320 c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
+ 2011-03-03 06:53 . 2011-03-03 06:53 149504 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll
+ 2008-10-16 15:07 . 2008-10-16 15:07 138496 c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys
+ 2012-08-02 19:53 . 2010-07-05 13:16 401272 c:\windows\$hf_mig$\KB2508429\update\updspapi.dll
+ 2012-08-02 19:53 . 2010-07-05 13:16 764280 c:\windows\$hf_mig$\KB2508429\update\update.exe
+ 2012-08-02 19:53 . 2010-07-05 13:16 233848 c:\windows\$hf_mig$\KB2508429\spuninst.exe
+ 2011-02-17 13:19 . 2011-02-17 13:19 357888 c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys
+ 2012-08-02 20:38 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll
+ 2012-08-02 20:38 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2507938\update\update.exe
+ 2012-08-02 20:38 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2507938\spuninst.exe
+ 2011-04-26 11:02 . 2011-04-26 11:02 293888 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll
+ 2012-08-02 19:55 . 2010-07-05 13:16 401272 c:\windows\$hf_mig$\KB2507618\update\updspapi.dll
+ 2012-08-02 19:55 . 2010-07-05 13:16 764280 c:\windows\$hf_mig$\KB2507618\update\update.exe
+ 2012-08-02 19:55 . 2010-07-05 13:16 233848 c:\windows\$hf_mig$\KB2507618\spuninst.exe
+ 2011-02-15 13:05 . 2011-02-15 13:05 290432 c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll
+ 2012-08-02 19:52 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2506212\update\updspapi.dll
+ 2012-08-02 19:52 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2506212\update\update.exe
+ 2012-08-02 19:52 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2506212\spuninst.exe
+ 2011-02-08 13:32 . 2011-02-08 13:32 974848 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42u.dll
+ 2011-02-08 13:32 . 2011-02-08 13:32 978944 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42.dll
+ 2012-08-02 20:29 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2483185\update\updspapi.dll
+ 2012-08-02 20:29 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2483185\update\update.exe
+ 2012-08-02 20:29 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2483185\spuninst.exe
+ 2011-01-21 14:42 . 2011-01-21 14:42 441856 c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll
+ 2012-08-02 21:15 . 2010-07-05 13:16 401272 c:\windows\$hf_mig$\KB2481109\update\updspapi.dll
+ 2012-08-02 21:15 . 2010-07-05 13:16 764280 c:\windows\$hf_mig$\KB2481109\update\update.exe
+ 2012-08-02 21:15 . 2010-07-05 13:16 233848 c:\windows\$hf_mig$\KB2481109\spuninst.exe
+ 2011-01-27 11:41 . 2011-01-27 11:41 677888 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe
+ 2011-02-02 07:57 . 2011-02-02 07:57 136192 c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll
+ 2012-08-02 22:06 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2479943\update\updspapi.dll
+ 2012-08-02 22:06 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2479943\update\update.exe
+ 2012-08-02 22:06 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2479943\spuninst.exe
+ 2011-02-09 13:52 . 2011-02-09 13:52 270848 c:\windows\$hf_mig$\KB2479943\SP3QFE\sbe.dll
+ 2011-02-09 13:52 . 2011-02-09 13:52 186880 c:\windows\$hf_mig$\KB2479943\SP3QFE\encdec.dll
+ 2012-08-02 22:05 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2478971\update\updspapi.dll
+ 2012-08-02 22:05 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2478971\update\update.exe
+ 2012-08-02 22:05 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2478971\spuninst.exe
+ 2010-12-22 12:32 . 2010-12-22 12:32 301568 c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 401272 c:\windows\$hf_mig$\KB2478960\update\updspapi.dll
+ 2012-08-02 19:12 . 2010-07-05 13:16 764280 c:\windows\$hf_mig$\KB2478960\update\update.exe
+ 2012-08-02 19:12 . 2010-07-05 13:16 233848 c:\windows\$hf_mig$\KB2478960\spuninst.exe
+ 2010-12-20 17:24 . 2010-12-20 17:24 734720 c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll
+ 2012-08-02 21:25 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
+ 2012-08-02 21:25 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2443105\update\update.exe
+ 2012-08-02 21:25 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2443105\spuninst.exe
+ 2012-08-02 19:53 . 2010-02-22 14:24 401272 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
+ 2012-08-02 19:53 . 2010-02-22 14:24 764280 c:\windows\$hf_mig$\KB2419632\update\update.exe
+ 2012-08-02 19:53 . 2010-02-22 14:24 233848 c:\windows\$hf_mig$\KB2419632\spuninst.exe
+ 2010-11-09 14:50 . 2010-11-09 14:50 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
+ 2010-11-09 14:50 . 2010-11-09 14:50 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
+ 2012-08-02 20:29 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2012-08-02 20:29 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2012-08-02 20:29 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2012-08-02 21:47 . 2009-05-26 11:40 401272 c:\windows\$hf_mig$\KB2115168\update\updspapi.dll
+ 2012-08-02 21:47 . 2009-05-26 11:40 764280 c:\windows\$hf_mig$\KB2115168\update\update.exe
+ 2012-08-02 21:47 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB2115168\spuninst.exe
+ 2012-08-02 18:28 . 2012-02-09 15:43 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
+ 2012-08-02 18:26 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2009-07-21 04:03 . 2009-07-21 04:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
+ 2008-09-30 20:42 . 2008-09-30 20:42 1286152 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2008-04-14 08:00 . 2010-04-08 17:03 2113536 c:\windows\system32\WMVCore.dll
+ 2008-04-14 08:00 . 2010-08-26 21:16 4886528 c:\windows\system32\wmp.dll
+ 2008-04-14 08:00 . 2008-06-10 09:11 1053696 c:\windows\system32\WMNetmgr.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 1212416 c:\windows\system32\urlmon.dll
+ 2008-04-14 08:00 . 2012-06-08 14:25 8504832 c:\windows\system32\shell32.dll
+ 2008-04-14 08:00 . 2009-07-17 16:16 1440256 c:\windows\system32\query.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 1440256 c:\windows\system32\query.dll
+ 2008-04-14 08:00 . 2011-11-03 15:28 1298432 c:\windows\system32\quartz.dll
+ 2008-04-14 08:00 . 2011-11-01 16:07 1288192 c:\windows\system32\ole32.dll
+ 2008-04-14 08:00 . 2012-05-05 03:14 2195072 c:\windows\system32\ntoskrnl.exe
+ 2008-04-14 07:27 . 2012-05-05 03:14 2071552 c:\windows\system32\ntkrnlpa.exe
+ 2009-07-21 04:05 . 2009-07-21 04:05 1348432 c:\windows\system32\msxml4.dll
+ 2011-09-13 21:08 . 2011-02-02 07:58 2067456 c:\windows\system32\mstscax.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 6007808 c:\windows\system32\mshtml.dll
+ 2012-08-03 00:20 . 2012-08-03 00:20 9465032 c:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll
+ 2011-09-13 21:24 . 2009-03-11 02:18 1482112 c:\windows\system32\LegitCheckControl.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 1042944 c:\windows\system32\kernel32.dll
+ 2008-04-14 08:00 . 2009-03-21 14:08 1042944 c:\windows\system32\kernel32.dll
+ 2009-03-08 08:32 . 2012-05-11 14:43 2000384 c:\windows\system32\iertutil.dll
+ 2011-09-13 21:10 . 2012-06-02 19:19 1933848 c:\windows\system32\dllcache\wuaueng.dll
+ 2008-04-14 08:00 . 2010-04-08 17:03 2113536 c:\windows\system32\dllcache\WMVCore.dll
+ 2008-04-14 08:00 . 2010-08-26 21:16 4886528 c:\windows\system32\dllcache\wmp.dll
+ 2008-04-14 08:00 . 2008-06-10 09:11 1053696 c:\windows\system32\dllcache\WMNetmgr.dll
+ 2008-04-14 08:00 . 2012-06-13 13:55 1866240 c:\windows\system32\dllcache\win32k.sys
+ 2008-04-14 08:00 . 2012-05-11 14:43 1212416 c:\windows\system32\dllcache\urlmon.dll
+ 2008-04-14 08:00 . 2012-06-08 14:25 8504832 c:\windows\system32\dllcache\shell32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 1440256 c:\windows\system32\dllcache\query.dll
+ 2008-04-14 08:00 . 2009-07-17 16:16 1440256 c:\windows\system32\dllcache\query.dll
+ 2008-04-14 08:00 . 2011-11-03 15:28 1298432 c:\windows\system32\dllcache\quartz.dll
+ 2008-04-14 08:00 . 2011-11-01 16:07 1288192 c:\windows\system32\dllcache\ole32.dll
+ 2011-10-14 14:05 . 2012-05-05 03:14 2195072 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2029056 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2150912 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-04-14 08:00 . 2012-06-05 15:49 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2008-04-14 08:00 . 2012-06-05 15:49 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-06-10 12:21 . 2009-06-10 12:21 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 2011-09-13 21:10 . 2010-01-29 15:00 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2008-04-14 08:00 . 2012-05-11 14:43 6007808 c:\windows\system32\dllcache\mshtml.dll
- 2011-09-13 21:10 . 2008-04-14 08:00 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2011-09-13 21:10 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2011-09-13 21:08 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
+ 2008-04-14 08:00 . 2009-03-21 14:08 1042944 c:\windows\system32\dllcache\kernel32.dll
- 2008-04-14 08:00 . 2008-04-14 08:00 1042944 c:\windows\system32\dllcache\kernel32.dll
+ 2012-01-19 17:08 . 2012-01-19 17:08 1369872 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 17:08 . 2012-01-19 17:08 6429992 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 17:08 . 2012-01-19 17:08 3790112 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2012-03-15 17:17 . 2012-03-15 17:17 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 1863464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
+ 2011-12-26 07:54 . 2011-12-26 07:54 5230864 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
+ 2011-04-28 15:06 . 2011-04-28 15:06 1749880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-12-15 17:08 . 2011-12-15 17:08 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2008-12-05 23:35 . 2008-12-05 23:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2010-04-08 03:48 . 2010-04-08 03:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2008-07-25 15:17 . 2008-07-25 15:17 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2012-03-20 09:23 . 2012-03-20 09:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2008-07-25 15:17 . 2008-07-25 15:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-03-20 09:23 . 2012-03-20 09:23 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 5913360 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2011-12-25 07:50 . 2011-12-25 07:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-04-26 06:32 . 2012-04-26 06:32 6385664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656370\M2656370Uninstall.msp
+ 2011-12-25 15:07 . 2011-12-25 15:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2011-12-25 15:06 . 2011-12-25 15:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2011-12-25 15:06 . 2011-12-25 15:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2011-12-25 02:54 . 2011-12-25 02:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2011-12-25 02:53 . 2011-12-25 02:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2011-12-25 15:06 . 2011-12-25 15:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
- 2012-01-06 21:10 . 2012-01-06 21:10 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-08-02 21:34 . 2012-08-02 21:34 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-01-06 21:02 . 2012-01-06 21:02 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-08-02 21:35 . 2012-08-02 21:35 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-03-15 17:43 . 2012-03-15 17:43 4216320 c:\windows\Installer\1365ada.msp
+ 2012-01-19 17:37 . 2012-01-19 17:37 8999936 c:\windows\Installer\1365ac8.msp
+ 2012-04-23 02:37 . 2012-04-23 02:37 1182720 c:\windows\Installer\1365abf.msp
+ 2011-04-28 21:51 . 2011-04-28 21:51 1375744 c:\windows\Installer\1365ab9.msp
+ 2008-12-13 13:57 . 2008-12-13 13:57 8397824 c:\windows\Installer\1365aa1.msp
+ 2011-12-26 13:59 . 2011-12-26 13:59 4368896 c:\windows\Installer\1365a67.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 2607104 c:\windows\Installer\1365a30.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 4210688 c:\windows\Installer\1365a2f.msp
+ 2011-12-26 09:06 . 2011-12-26 09:06 5115392 c:\windows\Installer\1365a1c.msp
+ 2012-04-25 23:32 . 2012-04-25 23:32 7069184 c:\windows\Installer\1365a0f.msp
+ 2012-03-21 03:57 . 2012-03-21 03:57 6188544 c:\windows\Installer\13659ff.msp
+ 2010-03-18 16:16 . 2010-03-18 16:16 1303896 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\WindowsBase_x86.dll
+ 2010-03-18 16:16 . 2010-03-18 16:16 6346600 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\PresentationFramework_x86.dll
+ 2010-03-18 16:16 . 2010-03-18 16:16 3545952 c:\windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319\PresentationCore_x86.dll
+ 2012-08-02 20:16 . 2009-03-08 08:34 1206784 c:\windows\ie8updates\KB2699988-IE8\urlmon.dll
+ 2012-08-02 20:16 . 2009-03-08 08:41 5937152 c:\windows\ie8updates\KB2699988-IE8\mshtml.dll
+ 2012-08-02 20:16 . 2009-03-08 08:32 1985024 c:\windows\ie8updates\KB2699988-IE8\iertutil.dll
+ 2011-10-14 14:05 . 2012-05-05 03:14 2195072 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2011-10-14 14:05 . 2012-05-05 03:14 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-08-02 20:31 . 2012-08-02 20:31 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_de6d41a1\System.dll
+ 2012-08-02 20:37 . 2012-08-02 20:37 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_26a5e6bc\System.dll
+ 2012-08-02 20:35 . 2012-08-02 20:35 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_864dc017\System.Xml.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2e9b0147\System.Xml.dll
+ 2012-08-02 20:40 . 2012-08-02 20:40 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_ff31535c\System.Windows.Forms.dll
+ 2012-08-02 20:35 . 2012-08-02 20:35 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_1cf29016\System.Windows.Forms.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 2252800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7bd1f230\System.Drawing.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_a2009aff\System.Design.dll
+ 2012-08-02 20:36 . 2012-08-02 20:36 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_94b1ac07\System.Design.dll
+ 2012-08-02 20:36 . 2012-08-02 20:36 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4f250f42\mscorlib.dll
+ 2012-08-02 20:41 . 2012-08-02 20:41 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_25ae147f\mscorlib.dll
+ 2012-08-02 21:12 . 2012-08-02 21:12 3856896 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\874de73de0aefaefe4d1226396d1b0c3\WindowsBase.ni.dll
+ 2012-08-02 20:03 . 2012-08-02 20:03 9090560 c:\windows\assembly\NativeImages_v4.0.30319_32\System\5339ecdda252537e37def11dc77c77aa\System.ni.dll
+ 2012-08-02 20:07 . 2012-08-02 20:07 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\6e70ff4b74bed30aa8751253ed8aee56\System.Xml.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\adf79290d55b53d72aaedf49dc0ab05c\System.Xaml.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 1897472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\e404c896d6d1a01caa638580ced9bec2\System.Web.Services.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0b065445b421ccf5e2beb5eecc45a48\System.Runtime.Serialization.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\3434c23fcc8dfcf056d06f0328d2225d\System.Runtime.DurableInstancing.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\8a66373a8576ba2937d601e9ac2163ba\System.Printing.ni.dll
+ 2012-08-02 20:56 . 2012-08-02 20:56 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3d0c73f63305fa092666e6488634d025\System.Drawing.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\2c7bd166899c82a07c0ae33f800166de\System.DirectoryServices.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\28a82e1ecfa3a9fcb0b9e2f0599672ff\System.Deployment.ni.dll
+ 2012-08-02 20:08 . 2012-08-02 20:08 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\6100a4d8635f4e12d3ab23545dbc7dcc\System.Data.ni.dll
+ 2012-08-02 20:07 . 2012-08-02 20:07 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\81916491a37ab590ae68cf4e2738d13b\System.Data.SqlXml.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\f42d5c793fc5910ec09ec558b2e6b6e3\System.Data.OracleClient.ni.dll
+ 2012-08-02 20:05 . 2012-08-02 20:05 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\a13bba7255b2e85af402b348801761ca\System.Data.Linq.ni.dll
+ 2012-08-02 20:05 . 2012-08-02 20:05 7052800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\0ad566912479454ed9ce37fb09de2715\System.Core.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 4121088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\69ed7b4d15e9637e3756f38833a8ae3a\System.Activities.ni.dll
+ 2012-08-03 16:42 . 2012-08-03 16:42 3755008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\2514311fe2bd97e63d383a1aa7481290\System.Activities.Presentation.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 1544192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\7c94adcec5f00ebe4357fc854e9568d3\System.Activities.Core.Presentation.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 2904576 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\86bfef5128f2b3cce7b7d8eabde5d99a\ReachFramework.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf5e39885f6ccd91fa9a178379403ae3\PresentationUI.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 1478144 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\c22b6b0e99517ee30a83e9e9954709ed\PresentationBuildTasks.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\f69a4dd37c018ac04d1317d6726ead72\Microsoft.VisualBasic.ni.dll
+ 2012-08-03 16:40 . 2012-08-03 16:40 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\abc212427a5052cfceda9768df2e5828\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\16becd1736af2b825937882589b46762\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\5530d1f5441182d07978e24d3c0125de\Microsoft.Transactions.Bridge.ni.dll
+ 2012-08-02 20:06 . 2012-08-02 20:06 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\c4ed07b3ab497d4b2f60f9935cbf3b08\Microsoft.CSharp.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 4243456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\9a35972d03946775e2fe3ea139b94529\Microsoft.Build.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 2868736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\3d7b46a4d8d43b3486e4322ccfb0820a\Microsoft.Build.Tasks.v4.0.ni.dll
+ 2012-08-03 16:39 . 2012-08-03 16:39 1929216 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\a16bc0965dbe5e5153e8085b75989104\Microsoft.Build.Engine.ni.dll
+ 2012-08-02 21:39 . 2012-08-02 21:39 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6d8bef0d008389874e55c0308f0c18e5\WindowsBase.ni.dll
+ 2012-08-02 21:46 . 2012-08-02 21:46 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\41a81b97625c113b591ed082c95276e2\UIAutomationClientsideProviders.ni.dll
+ 2012-08-02 21:38 . 2012-08-02 21:39 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
+ 2012-08-02 21:45 . 2012-08-02 21:45 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-08-03 16:38 . 2012-08-03 16:38 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-08-03 16:37 . 2012-08-03 16:37 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
+ 2012-08-02 21:44 . 2012-08-02 21:44 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5efb50c91f3c5e49be2079f625d933b7\System.Speech.ni.dll
+ 2012-08-03 15:13 . 2012-08-03 15:13 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\97d635f5c656ae43d94b55e67fc4ab50\System.ServiceModel.Web.ni.dll
+ 2012-08-02 21:49 . 2012-08-02 21:49 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\505e12638acd6fdb22e1fd2d4c6fc232\System.Runtime.Serialization.ni.dll
+ 2012-08-02 22:30 . 2012-08-02 22:30 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
+ 2012-08-02 21:47 . 2012-08-02 21:47 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e09496ddb2bf6f3b69707924f2e6b5ff\System.IdentityModel.ni.dll
+ 2012-08-02 22:29 . 2012-08-02 22:29 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b55887436d2cfbe1fb32dd18d554185b\System.DirectoryServices.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
+ 2012-08-02 21:43 . 2012-08-02 21:43 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\12c6fe8d4dd78f9bddf847d3b2821c03\System.Data.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\982b508698278c6ffb3d143bbe1e8bb8\System.Data.SqlXml.ni.dll
+ 2012-08-03 14:32 . 2012-08-03 14:32 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de7666b1cd0a1bc363726c9553dc39c\System.Data.Services.ni.dll
+ 2012-08-02 21:43 . 2012-08-02 21:43 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\44a5fc9e7c71b1fe1e2c79b03ecc3bc7\System.Data.Linq.ni.dll
+ 2012-08-03 14:32 . 2012-08-03 14:32 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\ca63096c1ecf977f509e2a565f4bcdac\System.Data.Entity.ni.dll
+ 2012-08-02 21:43 . 2012-08-02 21:43 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\38d07a5ac34b99d94fd14f42e779f625\System.Core.ni.dll
+ 2012-08-02 22:14 . 2012-08-02 22:14 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
+ 2012-08-02 22:13 . 2012-08-02 22:13 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-08-02 21:39 . 2012-08-02 21:39 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\8c509044eea2ab22689ea43926b30108\PresentationBuildTasks.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
+ 2012-08-02 22:35 . 2012-08-02 22:35 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\42145ebf75f77cabad442f0801a81c64\Microsoft.Transactions.Bridge.ni.dll
+ 2012-08-03 15:12 . 2012-08-03 15:12 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\cfe15312373b4668398404b5822bab7d\Microsoft.JScript.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-08-03 14:30 . 2012-08-03 14:30 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-08-02 22:37 . 2012-08-02 22:37 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5aa63a1cb41e3a5e1e8ed17072e60ec3\Microsoft.Build.Engine.ni.dll
+ 2012-08-02 20:15 . 2012-08-02 20:15 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-09-13 21:57 . 2011-09-13 21:57 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-08-02 20:30 . 2012-08-02 20:30 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2011-09-13 21:59 . 2011-09-13 21:59 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2012-08-02 19:47 . 2012-08-02 19:47 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-09-13 21:56 . 2011-09-13 21:56 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-08-02 20:15 . 2012-08-02 20:15 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2011-09-13 21:58 . 2011-09-13 21:58 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-08-02 21:54 . 2012-08-02 21:54 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2011-09-13 21:57 . 2011-09-13 21:57 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-08-02 20:15 . 2012-08-02 20:15 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-08-02 21:55 . 2012-08-02 21:55 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-08-02 20:28 . 2012-08-02 20:28 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2012-08-02 20:28 . 2012-08-02 20:28 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-08-02 20:28 . 2012-08-02 20:28 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-01-29 14:54 . 2010-01-29 14:54 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
+ 2009-07-27 22:14 . 2009-07-27 22:14 8504832 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll
+ 2011-01-21 14:42 . 2011-01-21 14:42 8505344 c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll
+ 2011-02-02 07:57 . 2011-02-02 07:57 2069504 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll
+ 2012-08-02 20:18 . 2012-07-03 07:13 57442464 c:\windows\system32\MRT.exe
+ 2009-03-08 08:39 . 2012-05-12 00:13 11111424 c:\windows\system32\ieframe.dll
+ 2012-05-12 00:13 . 2012-05-12 00:13 11111424 c:\windows\system32\dllcache\ieframe.dll
+ 2011-12-26 21:02 . 2011-12-26 21:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp
+ 2012-04-06 06:12 . 2012-04-06 06:12 15709696 c:\windows\Installer\1365aee.msp
+ 2012-01-04 06:25 . 2012-01-04 06:25 17751552 c:\windows\Installer\1365ad3.msp
+ 2008-12-13 14:21 . 2008-12-13 14:21 10473472 c:\windows\Installer\1365aa8.msp
+ 2011-12-26 13:02 . 2011-12-26 13:02 19677184 c:\windows\Installer\1365a8f.msp
+ 2010-03-31 05:23 . 2010-03-31 05:23 15638528 c:\windows\Installer\1365a77.msp
+ 2012-04-06 07:13 . 2012-04-06 07:13 16527872 c:\windows\Installer\1365a5d.msp
+ 2011-12-15 17:40 . 2011-12-15 17:40 23374336 c:\windows\Installer\1365a52.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 14599680 c:\windows\Installer\1365a3e.msp
+ 2012-08-02 20:16 . 2009-03-08 08:39 11063808 c:\windows\ie8updates\KB2699988-IE8\ieframe.dll
+ 2012-08-02 21:37 . 2012-08-02 21:37 13197824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\31649acbb300c306f8359f26e94572a9\System.Windows.Forms.ni.dll
+ 2012-08-03 16:41 . 2012-08-03 16:41 12076544 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\ecb254465d18012f0f80e56f3b6f70ab\System.Web.ni.dll
+ 2012-08-02 21:37 . 2012-08-02 21:37 11002880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\6caaae10f534d7fa6a2c14689a0bdb6f\System.Design.ni.dll
+ 2012-08-02 21:14 . 2012-08-02 21:14 17998848 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\2be5c267837bce48c2588db1cb45a218\PresentationFramework.ni.dll
+ 2012-08-02 21:13 . 2012-08-02 21:13 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\2dc4170e59c6defec194ce1d3b7e9b6e\PresentationCore.ni.dll
+ 2012-08-02 20:02 . 2012-08-02 20:02 14413824 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\1bdf7de454340e0ea9fc455aeaec49d9\mscorlib.ni.dll
+ 2012-08-02 22:31 . 2012-08-02 22:31 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
+ 2012-08-03 15:34 . 2012-08-03 15:34 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-08-02 22:34 . 2012-08-02 22:34 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\bc254d2fa26664898ae21d45643bc194\System.ServiceModel.ni.dll
+ 2012-08-02 22:15 . 2012-08-02 22:15 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
+ 2012-08-02 22:13 . 2012-08-02 22:13 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
+ 2012-08-02 22:07 . 2012-08-02 22:08 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
+ 2012-08-02 21:38 . 2012-08-02 21:38 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\archiv~1\Yahoo!\Messenger\YahooMessenger.exe" [2011-08-22 6276408]
"Facebook Update"="c:\documents and settings\Usuario\Configuración local\Datos de programa\Facebook\Update\FacebookUpdate.exe" [2012-07-11 138096]
"Akamai NetSession Interface"="c:\documents and settings\Usuario\Configuración local\Datos de programa\Akamai\netsession_win.exe" [2012-05-26 4327744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"egui"="c:\archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-08 2145000]
"GrooveMonitor"="c:\archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"Adobe Acrobat Speed Launcher"="c:\archivos de programa\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2010-10-25 36760]
"Acrobat Assistant 8.0"="c:\archivos de programa\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2010-10-25 821144]
"C-Media Mixer"="Mixer.exe" [2001-10-22 1216512]
"AdobeAAMUpdater-1.0"="c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-11-08 499608]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Usuario\Menú Inicio\Programas\Inicio\
Recorte de pantalla e Inicio rápido de OneNote 2007.lnk - c:\archivos de programa\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Akamai\\netsession_win.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1066:TCP"= 1066:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [07-04-2010 21:08 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [07-04-2010 21:09 95872]
R2 ekrn;ESET Service;c:\archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe [07-04-2010 21:08 810120]
R2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [06-01-2012 18:03 66560]
R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [31-10-2011 16:09 45440]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [14-09-2011 14:35 117504]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [31-10-2011 16:09 56960]
S2 gupdate;Google Update Servicio (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [16-10-2011 16:48 136176]
S3 ADM851X;ADM851X USB To Fast Ethernet Adapter;c:\windows\system32\drivers\ADM851X.SYS [13-09-2011 18:02 27135]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [12-05-2012 10:19 250056]
S3 gupdatem;Google Update Servicio (gupdatem);c:\archivos de programa\Google\Update\GoogleUpdate.exe [16-10-2011 16:48 136176]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [14-09-2011 14:35 100992]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe [24-04-2012 18:04 113120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 00:20]
.
2011-11-08 c:\windows\Tasks\AdobeAAMUpdater-1.0-WINDOWS-4BD25BD-Usuario.job
- c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-11-08 14:50]
.
2012-08-06 c:\windows\Tasks\dspzrzpac.job
- c:\windows\system32\ssmypicsm.dll [2012-08-01 18:07]
.
2012-08-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-10-16 20:47]
.
2012-08-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-10-16 20:47]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://isearch.glarysoft.com/?src=iehome
mStart Page = hxxp://isearch.glarysoft.com/?src=iehome
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
IE: Append Link Target to Existing PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Usuario\Menú Inicio\Programas\IMVU\Run IMVU.lnk
FF - ProfilePath - c:\documents and settings\Usuario\Datos de programa\Mozilla\Firefox\Profiles\t1opf7rt.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cl/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-06 14:56
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Datos de programa\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Archivos de programa\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000c0a
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{15D68340-6695-4C63-AE34-00AC4CDFBFA7}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.2.42.3"
"UniqueId"="004231EC4E6FD95E"
"ScannerBuild"=dword:00001aec
"ScannerVersionId"=dword:00001390
"ScannerVersion"="Locked/open ESET for status."
.
Completion time: 2012-08-06 15:00:45
ComboFix-quarantined-files.txt 2012-08-06 19:00
ComboFix2.txt 2012-08-02 03:54
ComboFix3.txt 2012-08-02 01:57
ComboFix4.txt 2012-08-01 20:42
.
Pre-Run: 8.698.220.544 bytes libres
Post-Run: 8.928.178.176 bytes libres
.
- - End Of File - - 839A8502F7EE0E378249AE999033F421

#5 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 06 August 2012 - 03:06 PM

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.
  • Download TDSSKiller and save it to your Desktop.
  • doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  • If an infected file is detected, the default action will be Cure, click on Continue.
  • If a suspicious file is detected, the default action will be Skip, click on Continue.
  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • it will ask to download extra definitions - ALLOW IT
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#6 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 07:20 PM

Hi there,

TDSSKiller didn't ask to reboot. Here are the logs:


19:09:01.0062 3160 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
19:09:03.0062 3160 ============================================================
19:09:03.0062 3160 Current date / time: 2012/08/06 19:09:03.0062
19:09:03.0062 3160 SystemInfo:
19:09:03.0062 3160
19:09:03.0062 3160 OS Version: 5.1.2600 ServicePack: 3.0
19:09:03.0062 3160 Product type: Workstation
19:09:03.0062 3160 ComputerName: WINDOWS-4BD25BD
19:09:03.0062 3160 UserName: Usuario
19:09:03.0062 3160 Windows directory: C:\windows
19:09:03.0062 3160 System windows directory: C:\windows
19:09:03.0062 3160 Processor architecture: Intel x86
19:09:03.0062 3160 Number of processors: 1
19:09:03.0062 3160 Page size: 0x1000
19:09:03.0062 3160 Boot type: Normal boot
19:09:03.0062 3160 ============================================================
19:09:06.0890 3160 Drive \Device\Harddisk0\DR0 - Size: 0x6FD590000 (27.96 Gb), SectorSize: 0x200, Cylinders: 0xE41, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:09:06.0906 3160 ============================================================
19:09:06.0906 3160 \Device\Harddisk0\DR0:
19:09:06.0906 3160 MBR partitions:
19:09:06.0906 3160 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x37E3E01
19:09:06.0906 3160 ============================================================
19:09:06.0968 3160 C: <-> \Device\Harddisk0\DR0\Partition0
19:09:07.0015 3160 ============================================================
19:09:07.0015 3160 Initialize success
19:09:07.0015 3160 ============================================================
19:09:12.0453 1092 ============================================================
19:09:12.0453 1092 Scan started
19:09:12.0453 1092 Mode: Manual;
19:09:12.0453 1092 ============================================================
19:09:15.0656 1092 Abiosdsk - ok
19:09:15.0671 1092 abp480n5 - ok
19:09:15.0765 1092 ACPI (cf2a07e1751a2d612d7e13aa431ab057) C:\windows\system32\DRIVERS\ACPI.sys
19:09:15.0781 1092 ACPI - ok
19:09:15.0828 1092 ACPIEC (1c905333c0b9f3d7c68ddf25e54b00f9) C:\windows\system32\drivers\ACPIEC.sys
19:09:15.0859 1092 ACPIEC - ok
19:09:15.0921 1092 ADM851X (e8b85009b41a010ee95fe3fc5c7808ad) C:\windows\system32\DRIVERS\ADM851X.SYS
19:09:15.0921 1092 ADM851X - ok
19:09:16.0046 1092 AdobeFlashPlayerUpdateSvc (f19c98ad81d2c0e1bbfd8153d2c80ee8) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:09:16.0062 1092 AdobeFlashPlayerUpdateSvc - ok
19:09:16.0078 1092 adpu160m - ok
19:09:16.0187 1092 aec (8bed39e3c35d6a489438b8141717a557) C:\windows\system32\drivers\aec.sys
19:09:16.0281 1092 aec - ok
19:09:16.0328 1092 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\windows\System32\drivers\afd.sys
19:09:16.0343 1092 AFD - ok
19:09:16.0375 1092 Aha154x - ok
19:09:16.0390 1092 aic78u2 - ok
19:09:16.0421 1092 aic78xx - ok
19:09:16.0468 1092 Alerter (fedca791a089d4e15084da10f38bce45) C:\windows\system32\alrsvc.dll
19:09:16.0468 1092 Alerter - ok
19:09:16.0515 1092 ALG (764b7a1e6ae2d70416a7932f3b97ac99) C:\windows\System32\alg.exe
19:09:16.0531 1092 ALG - ok
19:09:16.0546 1092 AliIde - ok
19:09:16.0562 1092 amsint - ok
19:09:16.0625 1092 AppMgmt (30cd42bfcdafefe8567b9e527dd3ae08) C:\windows\System32\appmgmts.dll
19:09:16.0640 1092 AppMgmt - ok
19:09:16.0656 1092 asc - ok
19:09:16.0671 1092 asc3350p - ok
19:09:16.0703 1092 asc3550 - ok
19:09:16.0937 1092 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
19:09:16.0953 1092 aspnet_state - ok
19:09:16.0984 1092 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\windows\system32\DRIVERS\asyncmac.sys
19:09:17.0046 1092 AsyncMac - ok
19:09:17.0109 1092 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\windows\system32\DRIVERS\atapi.sys
19:09:17.0109 1092 atapi - ok
19:09:17.0125 1092 Atdisk - ok
19:09:17.0171 1092 Atmarpc (9916c1225104ba14794209cfa8012159) C:\windows\system32\DRIVERS\atmarpc.sys
19:09:17.0218 1092 Atmarpc - ok
19:09:17.0265 1092 AudioSrv (a37f6480b06c37db69bbff045cf9f55b) C:\windows\System32\audiosrv.dll
19:09:17.0296 1092 AudioSrv - ok
19:09:17.0359 1092 audstub (d9f724aa26c010a217c97606b160ed68) C:\windows\system32\DRIVERS\audstub.sys
19:09:17.0390 1092 audstub - ok
19:09:17.0453 1092 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\windows\system32\drivers\Beep.sys
19:09:17.0515 1092 Beep - ok
19:09:17.0609 1092 BITS (8ee9639c01b92490e09638caa1b16c3c) C:\windows\system32\qmgr.dll
19:09:17.0640 1092 BITS - ok
19:09:17.0718 1092 Browser (e28818bd591f8af8fbe9897472b9665e) C:\windows\System32\browser.dll
19:09:17.0734 1092 Browser - ok
19:09:17.0968 1092 catchme - ok
19:09:18.0046 1092 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\windows\system32\drivers\cbidf2k.sys
19:09:18.0078 1092 cbidf2k - ok
19:09:18.0140 1092 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\windows\system32\DRIVERS\CCDECODE.sys
19:09:18.0171 1092 CCDECODE - ok
19:09:18.0187 1092 cd20xrnt - ok
19:09:18.0250 1092 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\windows\system32\drivers\Cdaudio.sys
19:09:18.0296 1092 Cdaudio - ok
19:09:18.0359 1092 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\windows\system32\drivers\Cdfs.sys
19:09:18.0421 1092 Cdfs - ok
19:09:18.0453 1092 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\windows\system32\DRIVERS\cdrom.sys
19:09:18.0515 1092 Cdrom - ok
19:09:18.0546 1092 Changer - ok
19:09:18.0593 1092 CiSvc (b0e3fec4ee7b935a7387fd6ef31ea780) C:\windows\system32\cisvc.exe
19:09:18.0593 1092 CiSvc - ok
19:09:18.0640 1092 ClipSrv (0c3bf68ab94cefd64b333b326f84510e) C:\windows\system32\clipsrv.exe
19:09:18.0640 1092 ClipSrv - ok
19:09:18.0750 1092 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:09:18.0796 1092 clr_optimization_v2.0.50727_32 - ok
19:09:18.0875 1092 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:09:18.0953 1092 clr_optimization_v4.0.30319_32 - ok
19:09:18.0968 1092 CmdIde - ok
19:09:19.0046 1092 cmpci (7be95cea894b50d48286b03b82c4618e) C:\windows\system32\drivers\cmaudio.sys
19:09:19.0062 1092 cmpci - ok
19:09:19.0078 1092 COMSysApp - ok
19:09:19.0125 1092 Cpqarray - ok
19:09:19.0187 1092 CryptSvc (e423c9c1946c656e0e4840210a0a8681) C:\windows\System32\cryptsvc.dll
19:09:19.0203 1092 CryptSvc - ok
19:09:19.0218 1092 dac2w2k - ok
19:09:19.0234 1092 dac960nt - ok
19:09:19.0312 1092 DcomLaunch (97869c55f562b777987100ea30ad8108) C:\windows\system32\rpcss.dll
19:09:19.0343 1092 DcomLaunch - ok
19:09:19.0406 1092 Dhcp (2ddfb3a5679fa02366686ecb1af622f0) C:\windows\System32\dhcpcsvc.dll
19:09:19.0421 1092 Dhcp - ok
19:09:19.0453 1092 Disk (044452051f3e02e7963599fc8f4f3e25) C:\windows\system32\DRIVERS\disk.sys
19:09:19.0500 1092 Disk - ok
19:09:19.0515 1092 dmadmin - ok
19:09:19.0593 1092 dmboot (c252a99c0a78b39faa2e2d1d048b1050) C:\windows\system32\drivers\dmboot.sys
19:09:19.0734 1092 dmboot - ok
19:09:19.0796 1092 dmio (33b4d4039cd2cb25351a7bf13b2988d9) C:\windows\system32\drivers\dmio.sys
19:09:19.0859 1092 dmio - ok
19:09:19.0890 1092 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\windows\system32\drivers\dmload.sys
19:09:19.0937 1092 dmload - ok
19:09:19.0984 1092 dmserver (40d0520ddaa9312c5dddd8c7c99d8325) C:\windows\System32\dmserver.dll
19:09:19.0984 1092 dmserver - ok
19:09:20.0046 1092 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\windows\system32\drivers\DMusic.sys
19:09:20.0062 1092 DMusic - ok
19:09:20.0140 1092 Dnscache (2e6d76cab5a402af257a963916fe05e7) C:\windows\System32\dnsrslvr.dll
19:09:20.0171 1092 Dnscache - ok
19:09:20.0234 1092 Dot3svc (412134c50e2063d882ef1634676e2b25) C:\windows\System32\dot3svc.dll
19:09:20.0250 1092 Dot3svc - ok
19:09:20.0281 1092 dpti2o - ok
19:09:20.0328 1092 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\windows\system32\drivers\drmkaud.sys
19:09:20.0375 1092 drmkaud - ok
19:09:20.0453 1092 eamon (c27953a5d0ed943ada90fbe74194ee69) C:\windows\system32\DRIVERS\eamon.sys
19:09:20.0515 1092 eamon - ok
19:09:20.0578 1092 EapHost (fc3fe3654588e597fff395c305062c46) C:\windows\System32\eapsvc.dll
19:09:20.0593 1092 EapHost - ok
19:09:20.0640 1092 ehdrv (2df598a794e0f046cb70df8e9fab9051) C:\windows\system32\DRIVERS\ehdrv.sys
19:09:20.0687 1092 ehdrv - ok
19:09:20.0843 1092 EhttpSrv (4db206a3787359ad12b54fd3642cc7f2) C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
19:09:20.0875 1092 EhttpSrv - ok
19:09:20.0968 1092 ekrn (fd4fc2088341a18e127cb652d3fc875f) C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
19:09:21.0046 1092 ekrn - ok
19:09:21.0140 1092 epfwtdir (36a46b3bbae89cb33d930d43d07d29ab) C:\windows\system32\DRIVERS\epfwtdir.sys
19:09:21.0234 1092 epfwtdir - ok
19:09:21.0281 1092 ERSvc (d96623dd7ce1ea9e4de7285d740e14f6) C:\windows\System32\ersvc.dll
19:09:21.0328 1092 ERSvc - ok
19:09:21.0406 1092 Eventlog (953df7327510df0de048b8e80e504ef9) C:\windows\system32\services.exe
19:09:21.0421 1092 Eventlog - ok
19:09:21.0578 1092 EventSystem (a225dd0d0489bd580781d19524a10b19) C:\WINDOWS\system32\es.dll
19:09:21.0593 1092 EventSystem - ok
19:09:21.0687 1092 ewusbnet (4fd02e31eac2cbc81eb08a1ce81e73a2) C:\windows\system32\DRIVERS\ewusbnet.sys
19:09:21.0734 1092 ewusbnet - ok
19:09:21.0828 1092 Fastfat (38d332a6d56af32635675f132548343e) C:\windows\system32\drivers\Fastfat.sys
19:09:21.0875 1092 Fastfat - ok
19:09:21.0921 1092 FastUserSwitchingCompatibility (1f617c5a76215c380478d750ce92cc73) C:\windows\System32\shsvcs.dll
19:09:21.0937 1092 FastUserSwitchingCompatibility - ok
19:09:21.0984 1092 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\windows\system32\DRIVERS\fdc.sys
19:09:22.0015 1092 Fdc - ok
19:09:22.0093 1092 FET5X86V (ef88fbdbb2c2ab084dcae4388921c898) C:\windows\system32\DRIVERS\fetnd5bv.sys
19:09:22.0125 1092 FET5X86V - ok
19:09:22.0187 1092 Fips (e5e61f2c07344e91dbfb7eafde549ab4) C:\windows\system32\drivers\Fips.sys
19:09:22.0234 1092 Fips - ok
19:09:22.0781 1092 FLEXnet Licensing Service (3d9b36631032fde0ffea0dc0260e4e35) C:\Archivos de programa\Archivos comunes\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
19:09:22.0875 1092 FLEXnet Licensing Service - ok
19:09:22.0937 1092 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\windows\system32\DRIVERS\flpydisk.sys
19:09:22.0984 1092 Flpydisk - ok
19:09:23.0062 1092 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\windows\system32\DRIVERS\fltMgr.sys
19:09:23.0109 1092 FltMgr - ok
19:09:23.0281 1092 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:09:23.0281 1092 FontCache3.0.0.0 - ok
19:09:23.0328 1092 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\windows\system32\drivers\Fs_Rec.sys
19:09:23.0375 1092 Fs_Rec - ok
19:09:23.0437 1092 Ftdisk (cc5f3af5711a1c7c8fa1d43bb16b401a) C:\windows\system32\DRIVERS\ftdisk.sys
19:09:23.0515 1092 Ftdisk - ok
19:09:23.0578 1092 gameenum (065639773d8b03f33577f6cdaea21063) C:\windows\system32\DRIVERS\gameenum.sys
19:09:23.0593 1092 gameenum - ok
19:09:23.0656 1092 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\windows\system32\DRIVERS\msgpc.sys
19:09:23.0687 1092 Gpc - ok
19:09:23.0796 1092 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Archivos de programa\Google\Update\GoogleUpdate.exe
19:09:23.0843 1092 gupdate - ok
19:09:23.0859 1092 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Archivos de programa\Google\Update\GoogleUpdate.exe
19:09:23.0859 1092 gupdatem - ok
19:09:23.0984 1092 helpsvc (6b5e1788abf15177a20c6c76c11382bb) C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:09:23.0984 1092 helpsvc - ok
19:09:24.0046 1092 HidServ (158aedf024cd58fea03be2d7d62abc9c) C:\windows\System32\hidserv.dll
19:09:24.0046 1092 HidServ - ok
19:09:24.0156 1092 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\windows\system32\DRIVERS\hidusb.sys
19:09:24.0187 1092 HidUsb - ok
19:09:24.0250 1092 hkmsvc (8f80b5fb68e1e767d872cb9a8cad5b5d) C:\windows\System32\kmsvc.dll
19:09:24.0281 1092 hkmsvc - ok
19:09:24.0296 1092 hpn - ok
19:09:24.0375 1092 HSFHWBS2 (970178e8e003eb1481293830069624b9) C:\windows\system32\DRIVERS\HSFBS2S2.sys
19:09:24.0406 1092 HSFHWBS2 - ok
19:09:24.0531 1092 HSF_DP (ebb354438a4c5a3327fb97306260714a) C:\windows\system32\DRIVERS\HSFDPSP2.sys
19:09:24.0750 1092 HSF_DP - ok
19:09:24.0812 1092 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\windows\system32\Drivers\HTTP.sys
19:09:24.0937 1092 HTTP - ok
19:09:25.0000 1092 HTTPFilter (0406b351908a8c143b6b6bb8834d4920) C:\windows\System32\w3ssl.dll
19:09:25.0015 1092 HTTPFilter - ok
19:09:25.0062 1092 hwdatacard (3e3bfe85b9fe3720bf4c108f57c945fb) C:\windows\system32\DRIVERS\ewusbmdm.sys
19:09:25.0109 1092 hwdatacard - ok
19:09:25.0171 1092 hwusbdev (131aee61223d980d600c96fb7b95cc12) C:\windows\system32\DRIVERS\ewusbdev.sys
19:09:25.0203 1092 hwusbdev - ok
19:09:25.0218 1092 i2omgmt - ok
19:09:25.0234 1092 i2omp - ok
19:09:25.0312 1092 i8042prt (4a2490a66e8271901e89dd5fb79748ae) C:\windows\system32\DRIVERS\i8042prt.sys
19:09:25.0390 1092 i8042prt - ok
19:09:25.0578 1092 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Archivos de programa\Archivos comunes\InstallShield\Driver\1050\Intel 32\IDriverT.exe
19:09:25.0609 1092 IDriverT - ok
19:09:25.0859 1092 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:09:25.0968 1092 idsvc - ok
19:09:26.0031 1092 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\windows\system32\DRIVERS\imapi.sys
19:09:26.0062 1092 Imapi - ok
19:09:26.0171 1092 ImapiService (e50abd04ca0c015017722014d1d9251e) C:\windows\system32\imapi.exe
19:09:26.0218 1092 ImapiService - ok
19:09:26.0234 1092 ini910u - ok
19:09:26.0265 1092 IntelIde - ok
19:09:26.0312 1092 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\windows\system32\DRIVERS\Ip6Fw.sys
19:09:26.0484 1092 Ip6Fw - ok
19:09:26.0515 1092 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\windows\system32\DRIVERS\ipfltdrv.sys
19:09:26.0609 1092 IpFilterDriver - ok
19:09:26.0625 1092 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\windows\system32\DRIVERS\ipinip.sys
19:09:26.0687 1092 IpInIp - ok
19:09:26.0750 1092 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\windows\system32\DRIVERS\ipnat.sys
19:09:26.0781 1092 IpNat - ok
19:09:26.0812 1092 IPSec (23c74d75e36e7158768dd63d92789a91) C:\windows\system32\DRIVERS\ipsec.sys
19:09:26.0875 1092 IPSec - ok
19:09:26.0937 1092 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\windows\system32\DRIVERS\irenum.sys
19:09:27.0000 1092 IRENUM - ok
19:09:27.0078 1092 isapnp (0f3d281b0410fe5d482aada37d20524b) C:\windows\system32\DRIVERS\isapnp.sys
19:09:27.0156 1092 isapnp - ok
19:09:27.0390 1092 JavaQuickStarterService (381b25dc8e958d905b33130d500bbf29) C:\Archivos de programa\Java\jre6\bin\jqs.exe
19:09:27.0406 1092 JavaQuickStarterService - ok
19:09:27.0500 1092 Kbdclass (188ddd286bc0daea6984858c6a4d7bbf) C:\windows\system32\DRIVERS\kbdclass.sys
19:09:27.0531 1092 Kbdclass - ok
19:09:27.0593 1092 kbdhid (72efebecf76eb1dccc5ba9ea746d90e8) C:\windows\system32\DRIVERS\kbdhid.sys
19:09:27.0625 1092 kbdhid - ok
19:09:27.0718 1092 kmixer (692bcf44383d056aed41b045a323d378) C:\windows\system32\drivers\kmixer.sys
19:09:27.0734 1092 kmixer - ok
19:09:27.0796 1092 KSecDD (b467646c54cc746128904e1654c750c1) C:\windows\system32\drivers\KSecDD.sys
19:09:27.0859 1092 KSecDD - ok
19:09:27.0921 1092 LanmanServer (ccfc469efd7ecddc8fc887bae7b8563f) C:\windows\System32\srvsvc.dll
19:09:27.0968 1092 LanmanServer - ok
19:09:28.0015 1092 lanmanworkstation (3db7b764f5066587dae58a71ae51292e) C:\windows\System32\wkssvc.dll
19:09:28.0031 1092 lanmanworkstation - ok
19:09:28.0062 1092 lbrtfdc - ok
19:09:28.0156 1092 LmHosts (01af2112ff79aa613b6621a75c4e9277) C:\windows\System32\lmhsvc.dll
19:09:28.0171 1092 LmHosts - ok
19:09:28.0234 1092 mdmxsdk (195741aee20369980796b557358cd774) C:\windows\system32\DRIVERS\mdmxsdk.sys
19:09:28.0265 1092 mdmxsdk - ok
19:09:28.0312 1092 Messenger (047e70b04b288439245ddc8dd1a31982) C:\windows\System32\msgsvc.dll
19:09:28.0312 1092 Messenger - ok
19:09:28.0531 1092 Microsoft Office Groove Audit Service (fafe367d032ed82e9332b4c741a20216) C:\Archivos de programa\Microsoft Office\Office12\GrooveAuditService.exe
19:09:28.0546 1092 Microsoft Office Groove Audit Service - ok
19:09:28.0609 1092 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\windows\system32\drivers\mnmdd.sys
19:09:28.0656 1092 mnmdd - ok
19:09:28.0703 1092 mnmsrvc (85ada209695a677c9d60962cde10696b) C:\WINDOWS\system32\mnmsrvc.exe
19:09:28.0703 1092 mnmsrvc - ok
19:09:28.0765 1092 Modem (9024556e739b8469d2b8f5f0e4c9bc9f) C:\windows\system32\drivers\Modem.sys
19:09:28.0765 1092 Modem - ok
19:09:28.0828 1092 Mouclass (6fd36b4994a2363659a65c9f970cfdb7) C:\windows\system32\DRIVERS\mouclass.sys
19:09:28.0890 1092 Mouclass - ok
19:09:28.0953 1092 mouhid (8ee532e516b2d23d686cfc1cc0a15c25) C:\windows\system32\DRIVERS\mouhid.sys
19:09:28.0984 1092 mouhid - ok
19:09:29.0046 1092 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\windows\system32\drivers\MountMgr.sys
19:09:29.0078 1092 MountMgr - ok
19:09:29.0203 1092 MozillaMaintenance (6380ff81dd4d78b23398752d2f46ea43) C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe
19:09:29.0234 1092 MozillaMaintenance - ok
19:09:29.0265 1092 mraid35x - ok
19:09:29.0328 1092 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\windows\system32\DRIVERS\mrxdav.sys
19:09:29.0468 1092 MRxDAV - ok
19:09:29.0546 1092 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\windows\system32\DRIVERS\mrxsmb.sys
19:09:29.0640 1092 MRxSmb - ok
19:09:29.0687 1092 MSDTC (975bd2762bf355a572597cc54d97ba93) C:\WINDOWS\system32\msdtc.exe
19:09:29.0687 1092 MSDTC - ok
19:09:29.0765 1092 Msfs (c941ea2454ba8350021d774daf0f1027) C:\windows\system32\drivers\Msfs.sys
19:09:29.0812 1092 Msfs - ok
19:09:29.0828 1092 MSIServer - ok
19:09:29.0890 1092 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\windows\system32\drivers\MSKSSRV.sys
19:09:29.0921 1092 MSKSSRV - ok
19:09:29.0984 1092 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\windows\system32\drivers\MSPCLOCK.sys
19:09:30.0015 1092 MSPCLOCK - ok
19:09:30.0062 1092 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\windows\system32\drivers\MSPQM.sys
19:09:30.0171 1092 MSPQM - ok
19:09:30.0218 1092 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\windows\system32\DRIVERS\mssmbios.sys
19:09:30.0234 1092 mssmbios - ok
19:09:30.0296 1092 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\windows\system32\drivers\MSTEE.sys
19:09:30.0328 1092 MSTEE - ok
19:09:30.0406 1092 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\windows\system32\drivers\Mup.sys
19:09:30.0421 1092 Mup - ok
19:09:30.0500 1092 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\windows\system32\DRIVERS\NABTSFEC.sys
19:09:30.0546 1092 NABTSFEC - ok
19:09:30.0625 1092 napagent (fd578fcc03bbd76af1e62202e6670d29) C:\windows\System32\qagentrt.dll
19:09:30.0640 1092 napagent - ok
19:09:30.0750 1092 NDIS (1df7f42665c94b825322fae71721130d) C:\windows\system32\drivers\NDIS.sys
19:09:30.0765 1092 NDIS - ok
19:09:30.0828 1092 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\windows\system32\DRIVERS\NdisIP.sys
19:09:30.0859 1092 NdisIP - ok
19:09:30.0921 1092 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\windows\system32\DRIVERS\ndistapi.sys
19:09:30.0921 1092 NdisTapi - ok
19:09:30.0968 1092 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\windows\system32\DRIVERS\ndisuio.sys
19:09:31.0015 1092 Ndisuio - ok
19:09:31.0046 1092 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\windows\system32\DRIVERS\ndiswan.sys
19:09:31.0140 1092 NdisWan - ok
19:09:31.0234 1092 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\windows\system32\drivers\NDProxy.sys
19:09:31.0234 1092 NDProxy - ok
19:09:31.0296 1092 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\windows\system32\DRIVERS\netbios.sys
19:09:31.0328 1092 NetBIOS - ok
19:09:31.0390 1092 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\windows\system32\DRIVERS\netbt.sys
19:09:31.0468 1092 NetBT - ok
19:09:31.0531 1092 NetDDE (96b009e5b163850cf94dc333ed2bee93) C:\windows\system32\netdde.exe
19:09:31.0562 1092 NetDDE - ok
19:09:31.0578 1092 NetDDEdsdm (96b009e5b163850cf94dc333ed2bee93) C:\windows\system32\netdde.exe
19:09:31.0578 1092 NetDDEdsdm - ok
19:09:31.0656 1092 Netlogon (671aca589da3733fac878a751c5bf0ed) C:\windows\system32\lsass.exe
19:09:31.0656 1092 Netlogon - ok
19:09:31.0734 1092 Netman (a48884c9359ee9f1fc8f3f0d93fb1d95) C:\windows\System32\netman.dll
19:09:31.0734 1092 Netman - ok
19:09:31.0953 1092 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:09:31.0984 1092 NetTcpPortSharing - ok
19:09:32.0046 1092 Nla (5e11d375c92a0dda7ac4d487fc4e1978) C:\windows\System32\mswsock.dll
19:09:32.0062 1092 Nla - ok
19:09:32.0218 1092 nlsX86cc (b1ef4686961986dffb7fe8f18e6fcb5b) C:\WINDOWS\system32\nlssrv32.exe
19:09:32.0234 1092 nlsX86cc - ok
19:09:32.0281 1092 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\windows\system32\drivers\Npfs.sys
19:09:32.0328 1092 Npfs - ok
19:09:32.0453 1092 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\windows\system32\drivers\Ntfs.sys
19:09:32.0625 1092 Ntfs - ok
19:09:32.0656 1092 NtLmSsp (671aca589da3733fac878a751c5bf0ed) C:\windows\system32\lsass.exe
19:09:32.0656 1092 NtLmSsp - ok
19:09:32.0765 1092 NtmsSvc (d60c40d71a4d874c903255e4827afa0c) C:\windows\system32\ntmssvc.dll
19:09:32.0875 1092 NtmsSvc - ok
19:09:32.0937 1092 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\windows\system32\drivers\Null.sys
19:09:33.0031 1092 Null - ok
19:09:33.0515 1092 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\windows\system32\DRIVERS\nv4_mini.sys
19:09:33.0656 1092 nv - ok
19:09:34.0234 1092 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\windows\system32\DRIVERS\nwlnkflt.sys
19:09:34.0281 1092 NwlnkFlt - ok
19:09:34.0296 1092 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\windows\system32\DRIVERS\nwlnkfwd.sys
19:09:34.0343 1092 NwlnkFwd - ok
19:09:34.0687 1092 odserv (84de1dd996b48b05ace31ad015fa108a) C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\ODSERV.EXE
19:09:34.0765 1092 odserv - ok
19:09:34.0921 1092 ose (5a432a042dae460abe7199b758e8606c) C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE
19:09:34.0937 1092 ose - ok
19:09:35.0015 1092 ousb2hub (5d3529e99b08dae7d93a1394ec37047f) C:\windows\system32\DRIVERS\ousb2hub.sys
19:09:35.0140 1092 ousb2hub - ok
19:09:35.0187 1092 ousbehci (f04f275c341ad05fdd0f2a55e58273a8) C:\windows\system32\Drivers\ousbehci.sys
19:09:35.0265 1092 ousbehci - ok
19:09:35.0328 1092 Parport (e7855cbd8bd1fda085a3f92cff7906e2) C:\windows\system32\DRIVERS\parport.sys
19:09:35.0406 1092 Parport - ok
19:09:35.0437 1092 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\windows\system32\drivers\PartMgr.sys
19:09:35.0484 1092 PartMgr - ok
19:09:35.0546 1092 ParVdm (fad44d704ecd7d39ad01415b8bb34204) C:\windows\system32\drivers\ParVdm.sys
19:09:35.0578 1092 ParVdm - ok
19:09:35.0640 1092 PCI (f11bc84ae6c7b003b5e0c8eeb4a1f444) C:\windows\system32\DRIVERS\pci.sys
19:09:35.0703 1092 PCI - ok
19:09:35.0718 1092 PCIDump - ok
19:09:35.0750 1092 PCIIde (33d63f0a9021acb4d75d83b646b93a30) C:\windows\system32\DRIVERS\pciide.sys
19:09:35.0796 1092 PCIIde - ok
19:09:35.0843 1092 Pcmcia (f50c27cca56dc97b3a45e7f0059bd2ba) C:\windows\system32\drivers\Pcmcia.sys
19:09:35.0953 1092 Pcmcia - ok
19:09:35.0968 1092 PDCOMP - ok
19:09:35.0984 1092 PDFRAME - ok
19:09:36.0015 1092 PDRELI - ok
19:09:36.0031 1092 PDRFRAME - ok
19:09:36.0062 1092 perc2 - ok
19:09:36.0078 1092 perc2hib - ok
19:09:36.0187 1092 PlugPlay (953df7327510df0de048b8e80e504ef9) C:\windows\system32\services.exe
19:09:36.0187 1092 PlugPlay - ok
19:09:36.0234 1092 PolicyAgent (671aca589da3733fac878a751c5bf0ed) C:\windows\system32\lsass.exe
19:09:36.0234 1092 PolicyAgent - ok
19:09:36.0281 1092 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\windows\system32\DRIVERS\raspptp.sys
19:09:36.0343 1092 PptpMiniport - ok
19:09:36.0375 1092 Processor (d4d8634dfdae3eca83620ee4088f7aa9) C:\windows\system32\DRIVERS\processr.sys
19:09:36.0390 1092 Processor - ok
19:09:36.0406 1092 ProtectedStorage (671aca589da3733fac878a751c5bf0ed) C:\windows\system32\lsass.exe
19:09:36.0406 1092 ProtectedStorage - ok
19:09:36.0453 1092 PSched (09298ec810b07e5d582cb3a3f9255424) C:\windows\system32\DRIVERS\psched.sys
19:09:36.0562 1092 PSched - ok
19:09:36.0593 1092 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\windows\system32\DRIVERS\ptilink.sys
19:09:36.0640 1092 Ptilink - ok
19:09:36.0656 1092 ql1080 - ok
19:09:36.0687 1092 Ql10wnt - ok
19:09:36.0703 1092 ql12160 - ok
19:09:36.0734 1092 ql1240 - ok
19:09:36.0750 1092 ql1280 - ok
19:09:36.0828 1092 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\windows\system32\DRIVERS\rasacd.sys
19:09:36.0859 1092 RasAcd - ok
19:09:36.0906 1092 RasAuto (8345c6f52f38a95b950b9b3d064ae3ee) C:\windows\System32\rasauto.dll
19:09:36.0921 1092 RasAuto - ok
19:09:36.0968 1092 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\windows\system32\DRIVERS\rasl2tp.sys
19:09:37.0062 1092 Rasl2tp - ok
19:09:37.0109 1092 RasMan (b279f6a9ea3acb5844c103ed2db65b44) C:\windows\System32\rasmans.dll
19:09:37.0140 1092 RasMan - ok
19:09:37.0171 1092 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\windows\system32\DRIVERS\raspppoe.sys
19:09:37.0234 1092 RasPppoe - ok
19:09:37.0296 1092 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\windows\system32\DRIVERS\raspti.sys
19:09:37.0328 1092 Raspti - ok
19:09:37.0359 1092 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\windows\system32\DRIVERS\rdbss.sys
19:09:37.0593 1092 Rdbss - ok
19:09:37.0625 1092 RDPCDD (4912d5b403614ce99c28420f75353332) C:\windows\system32\DRIVERS\RDPCDD.sys
19:09:37.0671 1092 RDPCDD - ok
19:09:37.0765 1092 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\windows\system32\DRIVERS\rdpdr.sys
19:09:37.0828 1092 rdpdr - ok
19:09:37.0906 1092 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\windows\system32\drivers\RDPWD.sys
19:09:37.0921 1092 RDPWD - ok
19:09:38.0000 1092 RDSessMgr (6193e6b05336c277ea4db39afa46bc23) C:\WINDOWS\system32\sessmgr.exe
19:09:38.0015 1092 RDSessMgr - ok
19:09:38.0062 1092 redbook (20950948970a0ea329b4254052bcf093) C:\windows\system32\DRIVERS\redbook.sys
19:09:38.0125 1092 redbook - ok
19:09:38.0187 1092 RemoteAccess (1b7481d377bd7997452352f82f4cffed) C:\windows\System32\mprdim.dll
19:09:38.0203 1092 RemoteAccess - ok
19:09:38.0250 1092 RemoteRegistry (e424f05b07ac4357dc08d06218d76c7c) C:\windows\system32\regsvc.dll
19:09:38.0281 1092 RemoteRegistry - ok
19:09:38.0343 1092 RpcLocator (9fccbdbaa0cf915aac0132de1c9566b3) C:\windows\system32\locator.exe
19:09:38.0359 1092 RpcLocator - ok
19:09:38.0453 1092 RpcSs (97869c55f562b777987100ea30ad8108) C:\windows\System32\rpcss.dll
19:09:38.0468 1092 RpcSs - ok
19:09:38.0515 1092 RSVP (5e38212c2c00dc342e2281d2f6bfb746) C:\windows\system32\rsvp.exe
19:09:38.0531 1092 RSVP - ok
19:09:38.0593 1092 SamSs (671aca589da3733fac878a751c5bf0ed) C:\windows\system32\lsass.exe
19:09:38.0593 1092 SamSs - ok
19:09:38.0671 1092 SCardSvr (a50e4dd0e2a9df762807c84153b4953a) C:\windows\System32\SCardSvr.exe
19:09:38.0687 1092 SCardSvr - ok
19:09:38.0750 1092 Schedule (51be25c404d3dd344c6079de715e4977) C:\windows\system32\schedsvc.dll
19:09:38.0765 1092 Schedule - ok
19:09:38.0812 1092 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\DRIVERS\secdrv.sys
19:09:38.0859 1092 Secdrv - ok
19:09:38.0921 1092 seclogon (b62c489373a1e1b949fc0faa90f3b47a) C:\windows\System32\seclogon.dll
19:09:38.0921 1092 seclogon - ok
19:09:38.0953 1092 SENS (a95a27c874b0931a6f8f656924f4a14a) C:\windows\system32\sens.dll
19:09:38.0953 1092 SENS - ok
19:09:38.0984 1092 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\windows\system32\DRIVERS\serenum.sys
19:09:39.0015 1092 serenum - ok
19:09:39.0046 1092 Serial (f41b42b92ae9c1191858c3f80cc24a9c) C:\windows\system32\DRIVERS\serial.sys
19:09:39.0156 1092 Serial - ok
19:09:39.0250 1092 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\windows\system32\drivers\Sfloppy.sys
19:09:39.0296 1092 Sfloppy - ok
19:09:39.0406 1092 SharedAccess (4a4ef3ee166fad4a04b1d767ad986329) C:\windows\System32\ipnathlp.dll
19:09:39.0421 1092 SharedAccess - ok
19:09:39.0500 1092 ShellHWDetection (1f617c5a76215c380478d750ce92cc73) C:\windows\System32\shsvcs.dll
19:09:39.0500 1092 ShellHWDetection - ok
19:09:39.0515 1092 Simbad - ok
19:09:39.0578 1092 sisagp (61ca562def09a782d26b3e7edec5369a) C:\windows\system32\DRIVERS\SISAGPX.sys
19:09:39.0609 1092 sisagp - ok
19:09:39.0687 1092 SiSide (982fd755516012bfd582ef20c6a123ff) C:\windows\system32\DRIVERS\siside.sys
19:09:39.0718 1092 SiSide - ok
19:09:39.0750 1092 sisidex (5aed8bf3bf7df795d70146d4af4a2580) C:\windows\system32\drivers\sisidex.sys
19:09:39.0828 1092 sisidex - ok
19:09:39.0859 1092 sisperf (0e39feaa3799d77ad0b723676de58cf5) C:\windows\system32\drivers\sisperf.sys
19:09:39.0890 1092 sisperf - ok
19:09:39.0984 1092 SkypeUpdate (ddaa5f4a6b958fc313ebd02dd925752f) C:\Archivos de programa\Skype\Updater\Updater.exe
19:09:39.0984 1092 SkypeUpdate - ok
19:09:40.0046 1092 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\windows\system32\DRIVERS\SLIP.sys
19:09:40.0093 1092 SLIP - ok
19:09:40.0125 1092 Sparrow - ok
19:09:40.0187 1092 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\windows\system32\drivers\splitter.sys
19:09:40.0187 1092 splitter - ok
19:09:40.0250 1092 Spooler (60784f891563fb1b767f70117fc2428f) C:\windows\system32\spoolsv.exe
19:09:40.0250 1092 Spooler - ok
19:09:40.0312 1092 sr (ccb3065c3ee63a4515fe84af9e78d1dd) C:\windows\system32\DRIVERS\sr.sys
19:09:40.0375 1092 sr - ok
19:09:40.0437 1092 srservice (0f30eec6013fcf76693405ec4a7df899) C:\windows\system32\srsvc.dll
19:09:40.0468 1092 srservice - ok
19:09:40.0609 1092 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\windows\system32\DRIVERS\srv.sys
19:09:40.0734 1092 Srv - ok
19:09:40.0812 1092 SSDPSRV (b622a432ef02895de4aa38ac8b85fa4c) C:\windows\System32\ssdpsrv.dll
19:09:40.0843 1092 SSDPSRV - ok
19:09:40.0921 1092 stisvc (7226422c95fdf8aa6092ee964912b0df) C:\windows\system32\wiaservc.dll
19:09:41.0031 1092 stisvc - ok
19:09:41.0140 1092 streamip (77813007ba6265c4b6098187e6ed79d2) C:\windows\system32\DRIVERS\StreamIP.sys
19:09:41.0187 1092 streamip - ok
19:09:41.0218 1092 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\windows\system32\DRIVERS\swenum.sys
19:09:41.0250 1092 swenum - ok
19:09:41.0312 1092 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\windows\system32\drivers\swmidi.sys
19:09:41.0437 1092 swmidi - ok
19:09:41.0453 1092 SwPrv - ok
19:09:41.0484 1092 symc810 - ok
19:09:41.0500 1092 symc8xx - ok
19:09:41.0515 1092 sym_hi - ok
19:09:41.0531 1092 sym_u3 - ok
19:09:41.0609 1092 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\windows\system32\drivers\sysaudio.sys
19:09:41.0625 1092 sysaudio - ok
19:09:41.0687 1092 SysmonLog (f1f6ee807f0112aae2259b253b6ddf89) C:\windows\system32\smlogsvc.exe
19:09:41.0703 1092 SysmonLog - ok
19:09:41.0750 1092 TapiSrv (04a5b8ea326951db27df60a14f2999ff) C:\windows\System32\tapisrv.dll
19:09:41.0781 1092 TapiSrv - ok
19:09:41.0890 1092 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\windows\system32\DRIVERS\tcpip.sys
19:09:42.0015 1092 Tcpip - ok
19:09:42.0046 1092 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\windows\system32\drivers\TDPIPE.sys
19:09:42.0125 1092 TDPIPE - ok
19:09:42.0156 1092 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\windows\system32\drivers\TDTCP.sys
19:09:42.0203 1092 TDTCP - ok
19:09:42.0265 1092 TermDD (88155247177638048422893737429d9e) C:\windows\system32\DRIVERS\termdd.sys
19:09:42.0406 1092 TermDD - ok
19:09:42.0453 1092 TermService (288b20d56d5f0ec4bcc77fbfa5a81740) C:\windows\System32\termsrv.dll
19:09:42.0468 1092 TermService - ok
19:09:42.0515 1092 Themes (1f617c5a76215c380478d750ce92cc73) C:\windows\System32\shsvcs.dll
19:09:42.0531 1092 Themes - ok
19:09:42.0562 1092 TlntSvr (65bf170815c0df302be038fd8891c722) C:\WINDOWS\system32\tlntsvr.exe
19:09:42.0593 1092 TlntSvr - ok
19:09:42.0609 1092 TosIde - ok
19:09:42.0687 1092 TrkWks (321761d0d12ee5285ce79ac175cba672) C:\windows\system32\trkwks.dll
19:09:42.0703 1092 TrkWks - ok
19:09:42.0781 1092 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\windows\system32\drivers\Udfs.sys
19:09:42.0859 1092 Udfs - ok
19:09:42.0875 1092 ultra - ok
19:09:42.0968 1092 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\windows\system32\DRIVERS\update.sys
19:09:43.0093 1092 Update - ok
19:09:43.0156 1092 upnphost (7594203f459abdb5fe53c08d6b1bd53b) C:\windows\System32\upnphost.dll
19:09:43.0171 1092 upnphost - ok
19:09:43.0203 1092 UPS (575bafeb33af057b13a10579d0dc884a) C:\windows\System32\ups.exe
19:09:43.0203 1092 UPS - ok
19:09:43.0265 1092 usbaudio (e919708db44ed8543a7c017953148330) C:\windows\system32\drivers\usbaudio.sys
19:09:43.0343 1092 usbaudio - ok
19:09:43.0390 1092 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\windows\system32\DRIVERS\usbccgp.sys
19:09:43.0437 1092 usbccgp - ok
19:09:43.0468 1092 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\windows\system32\DRIVERS\usbehci.sys
19:09:43.0515 1092 usbehci - ok
19:09:43.0578 1092 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\windows\system32\DRIVERS\usbhub.sys
19:09:43.0671 1092 usbhub - ok
19:09:43.0781 1092 usbohci (0daecce65366ea32b162f85f07c6753b) C:\windows\system32\DRIVERS\usbohci.sys
19:09:43.0828 1092 usbohci - ok
19:09:43.0875 1092 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\windows\system32\DRIVERS\USBSTOR.SYS
19:09:43.0921 1092 USBSTOR - ok
19:09:44.0000 1092 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\windows\system32\Drivers\usbvideo.sys
19:09:44.0015 1092 usbvideo - ok
19:09:44.0078 1092 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\windows\System32\drivers\vga.sys
19:09:44.0125 1092 VgaSave - ok
19:09:44.0140 1092 ViaIde - ok
19:09:44.0187 1092 VolSnap (c41ffdc191e6c832e2e53c967eae0a16) C:\windows\system32\drivers\VolSnap.sys
19:09:44.0250 1092 VolSnap - ok
19:09:44.0312 1092 VSS (60f28de3fae525d026e4d66405b80db8) C:\windows\System32\vssvc.exe
19:09:44.0328 1092 VSS - ok
19:09:44.0375 1092 vulfnths (c9a8ba443f809b70bccccd60cc73fa5c) C:\windows\System32\Drivers\vulfnth.sys
19:09:44.0437 1092 vulfnths - ok
19:09:44.0500 1092 vulfntrs (2d8c55889616f7767e9fb8adee37a02a) C:\windows\System32\Drivers\vulfntr.sys
19:09:44.0531 1092 vulfntrs - ok
19:09:44.0578 1092 W32Time (c71cfacdbfadd819736f61f5738bddc1) C:\windows\system32\w32time.dll
19:09:44.0625 1092 W32Time - ok
19:09:44.0703 1092 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\windows\system32\DRIVERS\wanarp.sys
19:09:44.0750 1092 Wanarp - ok
19:09:44.0765 1092 WDICA - ok
19:09:44.0828 1092 wdmaud (6768acf64b18196494413695f0c3a00f) C:\windows\system32\drivers\wdmaud.sys
19:09:44.0921 1092 wdmaud - ok
19:09:44.0984 1092 WebClient (340a4fd9017d1ebd1f6dc435282a39dc) C:\windows\System32\webclnt.dll
19:09:45.0000 1092 WebClient - ok
19:09:45.0140 1092 winachsf (1225ebea76aac3c84df6c54fe5e5d8be) C:\windows\system32\DRIVERS\HSFCXTS2.sys
19:09:45.0296 1092 winachsf - ok
19:09:45.0421 1092 winmgmt (a5fc75cab140cf6a78e16c3681001872) C:\windows\system32\wbem\WMIsvc.dll
19:09:45.0437 1092 winmgmt - ok
19:09:45.0515 1092 WmdmPmSN (57cf215b0250de0c4ae36abc8ae31be4) C:\WINDOWS\system32\mspmsnsv.dll
19:09:45.0531 1092 WmdmPmSN - ok
19:09:45.0671 1092 Wmi (c40a0af014d54da0e729066845a2a6dc) C:\windows\System32\advapi32.dll
19:09:45.0734 1092 Wmi - ok
19:09:45.0843 1092 WmiApSrv (ca1a5270acc0062b13f62ca5a0cd8da8) C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:09:45.0875 1092 WmiApSrv - ok
19:09:46.0218 1092 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:09:46.0328 1092 WPFFontCache_v0400 - ok
19:09:46.0406 1092 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\windows\System32\drivers\ws2ifsl.sys
19:09:46.0437 1092 WS2IFSL - ok
19:09:46.0500 1092 wscsvc (8cd684fd248dfe208c2f8f5052838a81) C:\windows\system32\wscsvc.dll
19:09:46.0531 1092 wscsvc - ok
19:09:46.0593 1092 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\windows\system32\DRIVERS\WSTCODEC.SYS
19:09:46.0640 1092 WSTCODEC - ok
19:09:46.0703 1092 wuauserv (0b8fc4d0f9d6964713e81ad558b50a71) C:\WINDOWS\system32\wuauserv.dll
19:09:46.0703 1092 wuauserv - ok
19:09:46.0875 1092 WZCSVC (d2caf9ff9da12f0cc6398c6e331015e4) C:\windows\System32\wzcsvc.dll
19:09:46.0984 1092 WZCSVC - ok
19:09:47.0015 1092 xmlprov (14fdadcf05a37582399daf1da1de1c7b) C:\windows\System32\xmlprov.dll
19:09:47.0046 1092 xmlprov - ok
19:09:47.0281 1092 YahooAUService (dd0042f0c3b606a6a8b92d49afb18ad6) C:\Archivos de programa\Yahoo!\SoftwareUpdate\YahooAUService.exe
19:09:47.0484 1092 YahooAUService - ok
19:09:47.0609 1092 MBR (0x1B8) (3cc9cb9c659aaf8f62ba7b8310dbe906) \Device\Harddisk0\DR0
19:09:48.0546 1092 \Device\Harddisk0\DR0 - ok
19:09:48.0562 1092 Boot (0x1200) (88572839b1927fb735d410947f2e278c) \Device\Harddisk0\DR0\Partition0
19:09:48.0562 1092 \Device\Harddisk0\DR0\Partition0 - ok
19:09:48.0578 1092 ============================================================
19:09:48.0593 1092 Scan finished
19:09:48.0593 1092 ============================================================
19:09:48.0656 1460 Detected object count: 0
19:09:48.0656 1460 Actual detected object count: 0


This is the aswMBR report:

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-08-06 19:13:20
-----------------------------
19:13:20.953 OS Version: Windows 5.1.2600 Service Pack 3
19:13:20.953 Number of processors: 1 586 0x103
19:13:20.953 ComputerName: WINDOWS-4BD25BD UserName: Usuario
19:13:21.437 Initialize success
19:32:20.468 AVAST engine defs: 12080601
19:32:27.265 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
19:32:27.281 Disk 0 Vendor: WDC_WD300BB-00DEA0 05.03E05 Size: 28629MB BusType: 3
19:32:27.312 Disk 0 MBR read successfully
19:32:27.312 Disk 0 MBR scan
19:32:27.718 Disk 0 Windows XP default MBR code
19:32:27.765 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 28615 MB offset 63
19:32:27.859 Disk 0 scanning sectors +58605120
19:32:28.234 Disk 0 scanning C:\windows\system32\drivers
19:33:10.859 Service scanning
19:33:47.890 Modules scanning
19:34:01.234 Disk 0 trace - called modules:
19:34:01.250 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys siside.sys PCIIDEX.SYS
19:34:01.250 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x83bcdab8]
19:34:01.281 3 CLASSPNP.SYS[f756efd7] -> nt!IofCallDriver -> \Device\0000005e[0x83b82188]
19:34:01.296 5 ACPI.sys[f74e4620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x83ba6940]
19:34:02.078 AVAST engine scan C:\windows
19:34:35.828 AVAST engine scan C:\windows\system32
19:40:33.000 AVAST engine scan C:\windows\system32\drivers
19:40:59.906 AVAST engine scan C:\Documents and Settings\Usuario
19:47:51.281 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Usuario\Escritorio\MBR.dat"
19:47:51.796 The log file has been saved successfully to "C:\Documents and Settings\Usuario\Escritorio\aswMBR.txt"


aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-08-06 19:49:43
-----------------------------
19:49:43.625 OS Version: Windows 5.1.2600 Service Pack 3
19:49:43.625 Number of processors: 1 586 0x103
19:49:43.640 ComputerName: WINDOWS-4BD25BD UserName: Usuario
19:49:44.000 Initialize success
19:50:20.906 AVAST engine defs: 12080601
19:50:30.921 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
19:50:30.921 Disk 0 Vendor: WDC_WD300BB-00DEA0 05.03E05 Size: 28629MB BusType: 3
19:50:31.171 Disk 0 MBR read successfully
19:50:31.171 Disk 0 MBR scan
19:50:31.453 Disk 0 Windows XP default MBR code
19:50:31.484 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 28615 MB offset 63
19:50:31.546 Disk 0 scanning sectors +58605120
19:50:32.140 Disk 0 scanning C:\windows\system32\drivers
19:52:24.218 Service scanning
19:53:57.953 Modules scanning
19:54:39.187 Disk 0 trace - called modules:
19:54:39.218 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys siside.sys
19:54:39.218 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x83bcdab8]
19:54:39.734 3 CLASSPNP.SYS[f756efd7] -> nt!IofCallDriver -> \Device\0000005e[0x83b82188]
19:54:39.734 5 ACPI.sys[f74e4620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x83ba6940]
19:54:40.265 AVAST engine scan C:\windows
19:55:34.031 AVAST engine scan C:\windows\system32
20:03:49.390 AVAST engine scan C:\windows\system32\drivers
20:04:41.921 AVAST engine scan C:\Documents and Settings\Usuario
20:15:32.453 AVAST engine scan C:\Documents and Settings\All Users
20:16:24.406 Scan finished successfully
20:16:39.546 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Usuario\Escritorio\MBR.dat"
20:16:39.546 The log file has been saved successfully to "C:\Documents and Settings\Usuario\Escritorio\aswMBR.txt"


Something happened while running aswMBR

Eset antivirus showed this message:

Win32/Ponmocup.DP Troyano Cannot be desinfected - File deleted (after next reboot).

Before running the scan the message was "cannot be eliminated".

#7 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 07:36 PM

I've rebooted the PC and Eset is not showing the warning anymore. Google's results redirect fine. It seems everything is OK! =)

Edited by southamericanrocker, 06 August 2012 - 07:37 PM.


#8 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 06 August 2012 - 09:15 PM

Greetings

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

ClearJavaCache:: 

File::
c:\windows\system32\ssmypicsm.dll
c:\windows\Tasks\dspzrzpac.job

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe
Posted Image
This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

  • In your next post I need the following

  • report from Combofix
  • let me know of any problems you may have had
  • How is the computer doing now after running the script?

Gringo

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#9 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 10:17 PM

Gringo here is the report from Combofix:


ComboFix 12-08-05.02 - Usuario 06-08-2012 22:37:11.5.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.768.444 [GMT -4:00]
Running from: c:\documents and settings\Usuario\Mis documentos\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Usuario\Escritorio\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
FILE ::
"c:\windows\system32\ssmypicsm.dll"
"c:\windows\Tasks\dspzrzpac.job"
.
.
((((((((((((((((((((((((( Files Created from 2012-07-07 to 2012-08-07 )))))))))))))))))))))))))))))))
.
.
2012-08-03 00:59 . 2012-08-03 02:00 -------- d-----w- c:\documents and settings\Usuario\Configuración local\Datos de programa\NPE
2012-08-03 00:59 . 2012-08-03 00:59 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Norton
2012-08-03 00:07 . 2012-08-03 00:07 -------- d-----w- c:\documents and settings\Usuario\Datos de programa\QuickScan
2012-08-02 23:20 . 2012-08-02 23:20 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2012-08-02 19:12 . 2012-08-02 20:16 -------- d-----w- c:\windows\ie8updates
2012-08-02 18:47 . 2012-05-11 14:43 629760 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-08-02 18:47 . 2012-05-11 14:43 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-08-02 18:47 . 2012-05-11 14:43 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-08-02 18:47 . 2012-05-11 14:43 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-08-02 18:47 . 2012-05-11 14:43 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2012-08-02 18:47 . 2012-05-11 14:43 2000384 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-08-02 18:47 . 2012-05-11 14:43 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-08-02 18:27 . 2011-07-15 13:29 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-08-02 17:45 . 2012-08-02 23:13 -------- d-----w- c:\archivos de programa\Panda Security
2012-08-02 17:06 . 2012-01-11 19:06 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-08-02 17:06 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
2012-08-02 16:51 . 2012-06-02 19:19 15896 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-08-02 00:26 . 2012-08-02 00:26 -------- d-----w- c:\documents and settings\Administrador.WINDOWS-4BD25BD
2012-08-01 20:20 . 2012-08-01 21:43 -------- d-----w- C:\TDSSKiller_Quarantine
2012-08-01 19:22 . 2012-08-01 19:22 -------- d-----w- c:\windows\system32\wbem\Repository
2012-08-01 18:07 . 2012-08-01 18:07 110592 --sha-r- c:\windows\system32\ssmypicsm.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-03 00:20 . 2012-05-12 14:19 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-03 00:20 . 2011-09-14 13:32 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-03 17:46 . 2011-10-13 17:49 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-13 13:55 . 2008-04-14 08:00 1866240 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:49 . 2008-04-14 08:00 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:49 . 2008-04-14 08:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 21:35 . 2011-09-13 21:10 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-04 04:32 . 2008-04-14 08:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 19:19 . 2011-09-13 21:10 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 19:19 . 2011-09-13 21:10 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19 . 2011-09-13 21:10 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 19:19 . 2011-09-13 21:10 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 19:19 . 2009-08-06 22:24 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 19:19 . 2008-04-14 08:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 19:19 . 2011-09-13 21:10 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 19:19 . 2009-08-06 22:23 24088 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19 . 2011-09-13 21:10 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 19:19 . 2009-08-06 22:23 18456 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:19 . 2009-08-06 22:23 15896 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-05-31 13:21 . 2008-04-14 08:00 605184 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2008-04-14 08:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:43 . 2008-04-14 08:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:43 . 2008-04-14 08:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2008-04-14 08:00 385024 ----a-w- c:\windows\system32\html.iec
2011-12-21 07:24 . 2012-06-28 20:06 121816 ----a-w- c:\archivos de programa\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2009-11-27 . A984FD70323F1BADC33C170F60DBD5F6 . 1572352 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot_2012-08-06_18.56.48 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-08-07 02:27 . 2012-08-07 02:27 16384 c:\windows\Temp\Perflib_Perfdata_7bc.dat
+ 2008-04-14 08:00 . 2012-08-07 01:06 88406 c:\windows\system32\perfc009.dat
+ 2012-08-06 19:10 . 2012-08-06 19:10 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\ae762cdc59ea894dcea7c1f5b7e496dd\System.Xaml.Hosting.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\5172f64c070a65b834e61f5cd6d0e632\System.Windows.Presentation.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\94938a2770c5a8f8d5fe2eb4a78a1dd4\System.Web.Routing.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\3b25cac7d0e813760d06d71f4285a0aa\System.Web.DynamicData.Design.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\6f92f45d86d82065a08bb5c20312d9b1\System.Web.Abstractions.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\fe1aff4ad8dddc97204a371feba3599d\System.ServiceModel.ServiceMoniker40.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\76ba7b2f5232c390b8db9dfcd935af93\System.ServiceModel.Channels.ni.dll
+ 2011-09-14 13:34 . 2012-08-06 23:52 1744 c:\windows\system32\d3d9caps.dat
- 2011-09-14 13:34 . 2012-08-06 18:21 1744 c:\windows\system32\d3d9caps.dat
+ 2008-04-14 08:00 . 2012-08-07 01:06 573110 c:\windows\system32\perfh00A.dat
+ 2008-04-14 08:00 . 2012-08-07 01:06 504908 c:\windows\system32\perfh009.dat
+ 2008-04-14 08:00 . 2012-08-07 01:06 112674 c:\windows\system32\perfc00A.dat
+ 2012-08-06 19:12 . 2012-08-06 19:12 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\ca5aa92ac8de0c5e875c0af8a15bd1e9\XamlBuildTask.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\a64f6c2fbfed13a2bff7a4d5d00f700b\WindowsFormsIntegration.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\067c005d73ef58a2c3b85c1eb1f82468\UIAutomationClient.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\29d24fe44bdfa436ea463565028dc849\System.Windows.Forms.DataVisualization.Design.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 864256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\6adec34334da9c0762fe2e69f398b0df\System.Web.Extensions.Design.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 334848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\2559ef16c23dd644f60fa31f11521aaa\System.Web.Entity.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\5979cc4d4fe53dbf0919ea82370fe261\System.Web.Entity.Design.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\c6737478e64d305aa13ed952ac69543b\System.Web.DynamicData.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\19e49ece4814c78f87a6a4c1bbf58bd1\System.Web.DataVisualization.Design.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 425472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f066bf86e14ba530d4c11d8134ef0719\System.ServiceModel.Activation.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\c59256d906eb8bf251fdcade8d3e8db8\System.ServiceModel.Routing.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 652800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\24d2d4150f7c122d6c66cf7574db5b2f\System.Net.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\6816b81bbf5b0e4d948c7014270024e9\System.Messaging.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\5cb0d92749a57afb6f7fb8220fd5a23d\System.Management.Instrumentation.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ee6b0560b2f6fe2c590144b716767ac9\System.IO.Log.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\fc5861a7b6a55a0179ec33611a25725c\System.IdentityModel.Selectors.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\37878191c4d2cea35b7d78b3530f862b\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\6aaf2213386341b4c3d3b3ad0c6438dd\System.Device.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 508416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\8283fae01802be3191d597d68eaadf64\System.Data.Services.Design.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\699b33373dccad550e1c3816dd75c321\UIAutomationClientsideProviders.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 1211904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\eed3da66d4b3306d756d3115df0f6bb1\System.WorkflowServices.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 1969152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\0f273ab1c90c8ae0e99696d5775ceeaa\System.Workflow.Runtime.ni.dll
+ 2012-08-06 19:12 . 2012-08-06 19:12 4475904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\5acb45c358bf02fb59410bb895c9ec48\System.Workflow.ComponentModel.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\868856b522838fbf26dbe8cb705031b4\System.Workflow.Activities.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 4586496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\e4e27bb9487647504e4b9f5ed0711be6\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\f9f93f4c8b467bafeb32a325cfde622c\System.Web.Mobile.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 3123200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\5a5c95719bc244782badb71e93920dba\System.Web.Extensions.ni.dll
+ 2012-08-06 19:11 . 2012-08-06 19:11 4574720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\8d031a0cbe9ee927b5d99f0932065f0e\System.Web.DataVisualization.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 2010624 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\55ff552cd61d1c825e65660fa705df81\System.Speech.ni.dll
+ 2012-08-06 19:08 . 2012-08-06 19:08 1051648 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\fb1dafd33ea1f8f4c8ced2c9299bd366\System.ServiceModel.Web.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\cac970090ee40f6eb194fcc66391d99f\System.ServiceModel.Discovery.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\49d13cef799a2cbb948f3292a87995fe\System.ServiceModel.Activities.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\6a277b0dd5279e1f76d31604b4eeb31f\System.Management.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\9c5381e06b81e9859210d9164288cd8b\System.IdentityModel.ni.dll
+ 2012-08-06 19:08 . 2012-08-06 19:08 2018304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\65200fd86ad84cb83eab83777f75d882\System.Data.Services.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\cda5338af4bedb3a42d01451e0cc0784\System.Data.Services.Client.ni.dll
+ 2012-08-06 19:08 . 2012-08-06 19:08 1408000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\61f1d7775319b93374b3ec1989c9580e\System.Data.Entity.Design.ni.dll
+ 2012-08-06 19:10 . 2012-08-06 19:10 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\9f600932530e718cc45e80939bcc1966\Microsoft.JScript.ni.dll
+ 2012-08-06 19:09 . 2012-08-06 19:09 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\8be0d48c6312a96e2ff0fd5bafb70469\System.ServiceModel.ni.dll
+ 2012-08-06 19:08 . 2012-08-06 19:08 13324288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\4c3b8750cd9b5b61f300275a6dd9ed07\System.Data.Entity.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\archiv~1\Yahoo!\Messenger\YahooMessenger.exe" [2011-08-22 6276408]
"Facebook Update"="c:\documents and settings\Usuario\Configuración local\Datos de programa\Facebook\Update\FacebookUpdate.exe" [2012-07-11 138096]
"Akamai NetSession Interface"="c:\documents and settings\Usuario\Configuración local\Datos de programa\Akamai\netsession_win.exe" [2012-05-26 4327744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"egui"="c:\archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-08 2145000]
"GrooveMonitor"="c:\archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"Adobe Acrobat Speed Launcher"="c:\archivos de programa\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2010-10-25 36760]
"Acrobat Assistant 8.0"="c:\archivos de programa\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2010-10-25 821144]
"C-Media Mixer"="Mixer.exe" [2001-10-22 1216512]
"AdobeAAMUpdater-1.0"="c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-11-08 499608]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Usuario\Menú Inicio\Programas\Inicio\
Recorte de pantalla e Inicio rápido de OneNote 2007.lnk - c:\archivos de programa\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Akamai\\netsession_win.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Documents and Settings\\Usuario\\Configuración local\\Datos de programa\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1062:TCP"= 1062:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [07-04-2010 21:08 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [07-04-2010 21:09 95872]
R2 ekrn;ESET Service;c:\archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe [07-04-2010 21:08 810120]
R2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [06-01-2012 18:03 66560]
R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [31-10-2011 16:09 45440]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [14-09-2011 14:35 117504]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [14-09-2011 14:35 100992]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [31-10-2011 16:09 56960]
S2 gupdate;Google Update Servicio (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [16-10-2011 16:48 136176]
S2 SkypeUpdate;Skype Updater;c:\archivos de programa\Skype\Updater\Updater.exe [07-06-2012 19:12 160944]
S3 ADM851X;ADM851X USB To Fast Ethernet Adapter;c:\windows\system32\drivers\ADM851X.SYS [13-09-2011 18:02 27135]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [12-05-2012 10:19 250056]
S3 gupdatem;Google Update Servicio (gupdatem);c:\archivos de programa\Google\Update\GoogleUpdate.exe [16-10-2011 16:48 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe [24-04-2012 18:04 113120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 00:20]
.
2011-11-08 c:\windows\Tasks\AdobeAAMUpdater-1.0-WINDOWS-4BD25BD-Usuario.job
- c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-11-08 14:50]
.
2012-08-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-10-16 20:47]
.
2012-08-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-10-16 20:47]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://isearch.glarysoft.com/?src=iehome
mStart Page = hxxp://isearch.glarysoft.com/?src=iehome
uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
IE: Append Link Target to Existing PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Usuario\Menú Inicio\Programas\IMVU\Run IMVU.lnk
FF - ProfilePath - c:\documents and settings\Usuario\Datos de programa\Mozilla\Firefox\Profiles\t1opf7rt.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cl/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-06 22:46
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Datos de programa\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Archivos de programa\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000c0a
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{15D68340-6695-4C63-AE34-00AC4CDFBFA7}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.2.42.3"
"UniqueId"="004231EC4E6FD95E"
"ScannerBuild"=dword:00001aec
"ScannerVersionId"=dword:00001390
"ScannerVersion"="Locked/open ESET for status."
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3328)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
.
Completion time: 2012-08-06 22:49:18
ComboFix-quarantined-files.txt 2012-08-07 02:49
ComboFix2.txt 2012-08-06 19:00
ComboFix3.txt 2012-08-02 03:54
ComboFix4.txt 2012-08-02 01:57
ComboFix5.txt 2012-08-07 02:35
.
Pre-Run: 8.772.714.496 bytes libres
Post-Run: 8.881.840.128 bytes libres
.
- - End Of File - - 222B265469C2B53D15A07F5C3452DBD8


Google's results redirect fine. Before when I opened the browser (Chrome) it asked me if I wanted to make it my default browser (I had already chosen my default browser). Now, it doesn't ask that question. I have to confess that I run Malwarebytes and during the process ESET showed me this message: " file C:\WINDOWS\SYSTEM32\ssmypicsm.dll Win32/Ponmocup.DP Trojan couldn't be elimitated - file deleted (after booting)

#10 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 06 August 2012 - 10:26 PM

Blitzblank.

Download BlitzBlank and save it to your desktop. Open Blitzblank.exe

  • Click OK at the warning (and take note of it, this is a VERY powerful tool!).
  • Click the Script tab and copy/paste the following text there:
DeleteFile:
c:\windows\system32\ssmypicsm.dll
c:\windows\Tasks\dspzrzpac.job
  • Click Execute Now. Your computer will need to reboot in order to replace the files.
  • When done, post me the report created by Blitzblank. you can find it at the root of the drive Normaly C:\

Edited by gringo_pr, 06 August 2012 - 10:38 PM.

I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#11 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 10:33 PM

Gringo, it shows this message "Syntax error in line 3, Invalid File Path".

#12 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 06 August 2012 - 10:38 PM

try now
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#13 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 10:43 PM

Same message is shown.

#14 gringo_pr

gringo_pr

    Bleepin Gringo


  • Malware Response Team
  • 136,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Puerto rico
  • Local time:12:00 AM

Posted 06 August 2012 - 10:45 PM

did you use the new script I change it a little

gringo
I Close My Topics If You Have Not Replied In 5 Days If You Will Be Longer Please Let Me Know

If I Have Not Replied To One Of My Topics In 48 Hrs Please Bump The Topic



My help is free, however, if you wish to make a small donation to show your appreciation or to help me continue the fight against Malware, then click here -->btn_donate_SM.gif<-- Don't worry every little bit helps.

Proud Graduate Of Malware Removal University

#15 southamericanrocker

southamericanrocker
  • Topic Starter

  • Members
  • 15 posts
  • OFFLINE
  •  
  • Local time:11:00 PM

Posted 06 August 2012 - 10:48 PM

I've just copied the script

DeleteFile:
c:\windows\system32\ssmypicsm.dll
c:\windows\Tasks\dspzrzpac.job

with the same results.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users