ComboFix 12-07-11.03 - Tom 11/07/2012 21:45:24.2.4 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3956.3324 [GMT 2:00] Gestart vanuit: C:\Users\Tom\Desktop\ComboFix.exe * Nieuw herstelpunt werd aangemaakt (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) Besmet exemplaar van C:\Windows\system32\Services.exe werd aangetroffen en gedesinfecteerd Hersteld exemplaar van - C:\Windows\ERDNT\cache64\services.exe (((((((((((((((((((( Bestanden Gemaakt van 2012-06-11 to 2012-07-11 )))))))))))))))))))))))))))))) 2012-07-11 20:01:51 . 2012-07-11 20:01:51 -------- d-----w- C:\Users\Public\AppData\Local\temp 2012-07-11 20:01:51 . 2012-07-11 20:01:51 -------- d-----w- C:\Users\Default\AppData\Local\temp 2012-07-11 19:06:39 . 2012-07-11 19:06:39 -------- d-----w- C:\_OTL 2012-07-05 14:15:12 . 2012-07-05 14:15:25 -------- d-----w- C:\sh4ldr 2012-07-05 14:15:12 . 2012-07-05 14:15:12 110080 ----a-r- C:\Users\Tom\AppData\Roaming\Microsoft\Installer\{18F97AF0-4F88-4494-AFE2-5A5702E142CC}\IconF7A21AF7.exe 2012-07-05 14:15:12 . 2012-07-05 14:15:12 110080 ----a-r- C:\Users\Tom\AppData\Roaming\Microsoft\Installer\{18F97AF0-4F88-4494-AFE2-5A5702E142CC}\IconD7F16134.exe 2012-07-05 14:15:12 . 2012-07-05 14:15:12 110080 ----a-r- C:\Users\Tom\AppData\Roaming\Microsoft\Installer\{18F97AF0-4F88-4494-AFE2-5A5702E142CC}\Icon1226A4C5.exe 2012-07-05 14:15:12 . 2012-07-05 14:15:12 -------- d-----w- C:\Program Files\Enigma Software Group 2012-07-05 13:26:44 . 2012-07-05 13:26:44 -------- d-----w- C:\Users\Tom\AppData\Roaming\SpeedyPC Software 2012-07-05 13:26:44 . 2012-07-05 13:26:44 -------- d-----w- C:\Users\Tom\AppData\Roaming\DriverCure 2012-07-05 13:26:38 . 2012-07-05 13:26:39 -------- d-----w- C:\ProgramData\SpeedyPC Software 2012-07-05 13:26:38 . 2012-07-05 13:26:38 -------- d-----w- C:\Program Files (x86)\SpeedyPC Software 2012-07-05 13:26:38 . 2012-07-05 13:26:38 -------- d-----w- C:\Program Files (x86)\Common Files\SpeedyPC Software 2012-07-05 12:31:28 . 2012-07-05 12:31:28 -------- d-sh--w- C:\Windows\SysWow64\%APPDATA% 2012-07-04 22:12:33 . 2012-07-04 22:12:33 -------- d-----w- C:\Users\Tom\AppData\Local\Macromedia 2012-07-04 21:59:27 . 2012-07-04 22:00:18 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2012-07-04 21:59:19 . 2012-07-04 21:59:19 -------- d-----w- C:\Windows\system32\Macromed 2012-06-22 16:03:00 . 2012-06-22 16:03:00 770384 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcr100.dll 2012-06-22 16:03:00 . 2012-06-22 16:03:00 421200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcp100.dll 2012-06-21 06:15:16 . 2012-06-02 22:19:42 57880 ----a-w- C:\Windows\system32\wuauclt.exe 2012-06-21 06:15:16 . 2012-06-02 22:19:42 44056 ----a-w- C:\Windows\system32\wups2.dll 2012-06-21 06:15:15 . 2012-06-02 22:19:43 2428952 ----a-w- C:\Windows\system32\wuaueng.dll 2012-06-21 06:15:15 . 2012-06-02 22:15:31 2622464 ----a-w- C:\Windows\system32\wucltux.dll 2012-06-21 06:14:50 . 2012-06-02 22:19:46 38424 ----a-w- C:\Windows\system32\wups.dll 2012-06-21 06:14:50 . 2012-06-02 22:19:23 701976 ----a-w- C:\Windows\system32\wuapi.dll 2012-06-21 06:14:50 . 2012-06-02 22:15:08 99840 ----a-w- C:\Windows\system32\wudriver.dll 2012-06-21 06:14:34 . 2012-06-02 13:19:42 186752 ----a-w- C:\Windows\system32\wuwebv.dll 2012-06-21 06:14:34 . 2012-06-02 13:15:12 36864 ----a-w- C:\Windows\system32\wuapp.exe 2012-06-13 05:49:06 . 2012-04-26 05:41:56 77312 ----a-w- C:\Windows\system32\rdpwsx.dll 2012-06-13 05:49:06 . 2012-04-26 05:41:55 149504 ----a-w- C:\Windows\system32\rdpcorekmts.dll 2012-06-13 05:49:06 . 2012-04-26 05:34:27 9216 ----a-w- C:\Windows\system32\rdrmemptylst.exe . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) 2012-07-04 22:00:18 . 2011-05-24 09:00:42 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl ((((((((((((((((((((((((((((( SnapShot@2012-05-16_23.36.28 ))))))))))))))))))))))))))))))))))))))))) + 2012-06-14 05:07:35 . 2012-05-17 22:25:17 73216 C:\Windows\SysWOW64\mshtmled.dll + 2012-06-14 05:07:26 . 2012-05-17 22:31:34 66048 C:\Windows\SysWOW64\migration\WininetPlugin.dll - 2012-04-12 00:01:24 . 2012-02-28 01:08:26 66048 C:\Windows\SysWOW64\migration\WininetPlugin.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 98304 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwOnce.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 98304 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwOnce.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 86016 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwMenuX.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 86016 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwMenuX.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 77824 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwInit.exe + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 77824 C:\Windows\SysWOW64\Macromed\Shockwave 10\SwInit.exe + 2012-05-02 13:36:18 . 2012-05-02 13:36:18 64512 C:\Windows\SysWOW64\Macromed\Shockwave 10\gcapi_dll.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 24576 C:\Windows\SysWOW64\Macromed\Shockwave 10\DynaPlayer.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 24576 C:\Windows\SysWOW64\Macromed\Shockwave 10\DynaPlayer.dll - 2012-04-12 00:01:24 . 2012-02-28 01:08:15 65024 C:\Windows\SysWOW64\jsproxy.dll + 2012-06-14 05:07:26 . 2012-05-17 22:31:16 65024 C:\Windows\SysWOW64\jsproxy.dll + 2009-07-14 04:54:17 . 2012-07-11 19:06:15 49152 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54:17 . 2012-05-16 22:59:38 49152 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54:17 . 2012-05-16 22:59:38 49152 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54:17 . 2012-07-11 19:06:15 49152 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54:17 . 2012-05-16 22:59:38 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54:17 . 2012-07-11 19:06:15 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-02-03 10:28:55 . 2012-05-30 08:38:16 87952 C:\Windows\SysWOW64\Adobe\Shockwave 11\uninstaller.exe + 2012-04-26 13:05:40 . 2012-04-26 13:05:40 86016 C:\Windows\SysWOW64\Adobe\Shockwave 11\SwMenu.dll - 2012-02-21 14:03:18 . 2012-02-21 14:03:18 86016 C:\Windows\SysWOW64\Adobe\Shockwave 11\SwMenu.dll + 2012-04-26 12:50:24 . 2012-04-26 12:50:24 73408 C:\Windows\SysWOW64\Adobe\Shockwave 11\gtapi.dll - 2012-02-21 13:46:46 . 2012-02-21 13:46:46 73408 C:\Windows\SysWOW64\Adobe\Shockwave 11\gtapi.dll + 2012-04-26 12:50:30 . 2012-05-30 08:43:20 60344 C:\Windows\SysWOW64\Adobe\Shockwave 11\gt.exe - 2012-02-21 13:46:46 . 2012-02-21 13:46:46 64512 C:\Windows\SysWOW64\Adobe\Shockwave 11\gcapi_dll.dll + 2012-04-26 12:50:24 . 2012-04-26 12:50:24 64512 C:\Windows\SysWOW64\Adobe\Shockwave 11\gcapi_dll.dll - 2012-02-21 14:04:08 . 2012-02-21 14:04:08 12800 C:\Windows\SysWOW64\Adobe\Shockwave 11\DynaPlayer.dll + 2012-04-26 13:06:28 . 2012-04-26 13:06:28 12800 C:\Windows\SysWOW64\Adobe\Shockwave 11\DynaPlayer.dll + 2012-07-05 12:31:28 . 2012-07-11 19:06:15 16384 C:\Windows\SysWOW64\%APPDATA%\Microsoft\Windows\IETldCache\index.dat + 2009-11-05 00:35:53 . 2012-07-11 17:55:24 82334 C:\Windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10:35 . 2012-07-11 18:38:19 40318 C:\Windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-01-30 13:57:32 . 2012-07-11 18:38:19 27066 C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-761200818-1682720771-1100777243-1001_UserData.bin + 2012-06-14 05:07:36 . 2012-05-18 01:51:49 96768 C:\Windows\system32\mshtmled.dll - 2012-04-12 00:01:24 . 2012-02-28 06:47:23 86528 C:\Windows\system32\migration\WininetPlugin.dll + 2012-06-14 05:07:27 . 2012-05-18 01:56:58 86528 C:\Windows\system32\migration\WininetPlugin.dll - 2012-04-12 00:01:25 . 2012-02-28 06:47:09 85504 C:\Windows\system32\jsproxy.dll + 2012-06-14 05:07:28 . 2012-05-18 01:56:47 85504 C:\Windows\system32\jsproxy.dll + 2010-01-31 05:09:46 . 2012-07-11 14:57:40 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-01-31 05:09:46 . 2012-05-16 15:06:18 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54:19 . 2012-07-11 14:57:40 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54:19 . 2012-05-15 10:38:57 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:46:26 . 2012-06-26 16:56:51 96016 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2009-07-14 04:46:26 . 2012-05-15 13:48:16 96016 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat + 2010-01-30 13:22:50 . 2012-07-11 18:53:36 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-01-30 13:22:50 . 2012-05-16 23:35:39 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-05-10 15:56:14 . 2012-05-10 15:56:14 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 05:25:09 . 2012-06-14 05:25:09 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-05-10 15:56:14 . 2012-05-10 15:56:14 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-06-14 05:25:09 . 2012-06-14 05:25:09 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll - 2012-05-10 15:56:14 . 2012-05-10 15:56:14 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-14 05:25:09 . 2012-06-14 05:25:09 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-14 05:25:09 . 2012-06-14 05:25:09 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:14 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-14 05:24:56 . 2012-06-14 05:24:56 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2012-05-10 15:55:53 . 2012-05-10 15:55:53 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2012-06-14 05:24:50 . 2012-06-14 05:24:50 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2012-06-14 05:24:56 . 2012-06-14 05:24:56 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-06-14 05:24:55 . 2012-06-14 05:24:55 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-06-14 05:25:00 . 2012-06-14 05:25:00 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2012-05-10 15:56:04 . 2012-05-10 15:56:04 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2012-05-10 15:55:53 . 2012-05-10 15:55:53 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-06-14 05:24:50 . 2012-06-14 05:24:50 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-05-10 15:55:52 . 2012-05-10 15:55:52 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2012-06-14 05:24:46 . 2012-06-14 05:24:46 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-10 15:55:50 . 2012-05-10 15:55:50 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-05-10 15:55:52 . 2012-05-10 15:55:52 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-05-10 15:55:21 . 2012-05-10 15:55:21 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 05:24:14 . 2012-06-14 05:24:14 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-10 15:55:23 . 2012-05-10 15:55:23 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 05:24:17 . 2012-06-14 05:24:17 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 20:42:18 . 2012-06-14 20:42:18 54784 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll + 2012-06-14 20:43:07 . 2012-06-14 20:43:07 61440 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\876f4df16291d2b14c21e2a14afb60c9\WindowsLiveWriter.ni.exe + 2012-06-14 20:44:10 . 2012-06-14 20:44:10 36864 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll + 2012-04-11 09:21:26 . 2010-11-13 00:34:16 24576 C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_nl_b03f5f7f11d50a3a\System.Drawing.resources.dll - 2012-04-11 09:21:26 . 2010-11-12 23:33:29 24576 C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_nl_b03f5f7f11d50a3a\System.Drawing.resources.dll - 2010-02-01 23:08:27 . 2010-02-01 23:08:27 5632 C:\Windows\SysWOW64\pndx5032.dll + 2012-05-23 04:33:12 . 2012-05-23 04:33:12 5632 C:\Windows\SysWOW64\pndx5032.dll - 2010-02-01 23:08:27 . 2010-02-01 23:08:27 6656 C:\Windows\SysWOW64\pndx5016.dll + 2012-05-23 04:33:12 . 2012-05-23 04:33:12 6656 C:\Windows\SysWOW64\pndx5016.dll + 2012-07-11 20:03:17 . 2012-07-11 20:03:17 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-05-16 23:35:29 . 2012-05-16 23:35:29 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-07-11 20:03:17 . 2012-07-11 20:03:17 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-05-16 23:35:29 . 2012-05-16 23:35:29 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-04-12 00:01:26 . 2012-02-28 01:09:51 231936 C:\Windows\SysWOW64\url.dll + 2012-06-14 05:07:33 . 2012-05-17 22:33:08 231936 C:\Windows\SysWOW64\url.dll + 2012-05-23 04:33:21 . 2012-05-23 04:33:21 198832 C:\Windows\SysWOW64\rmoc3260.dll + 2012-05-23 04:33:11 . 2012-05-23 04:33:11 272896 C:\Windows\SysWOW64\pncrt.dll + 2012-05-17 14:06:04 . 2012-04-04 16:47:08 772504 C:\Windows\SysWOW64\npDeployJava1.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 279992 C:\Windows\SysWOW64\Macromed\Shockwave 10\SymCCIS.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 180224 C:\Windows\SysWOW64\Macromed\Shockwave 10\Proj.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 180224 C:\Windows\SysWOW64\Macromed\Shockwave 10\Proj.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 475136 C:\Windows\SysWOW64\Macromed\Shockwave 10\PluginPing.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 475136 C:\Windows\SysWOW64\Macromed\Shockwave 10\PluginPing.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 339968 C:\Windows\SysWOW64\Macromed\Shockwave 10\Plugin.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 339968 C:\Windows\SysWOW64\Macromed\Shockwave 10\Plugin.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 606208 C:\Windows\SysWOW64\Macromed\Shockwave 10\iml32X.dll + 2012-05-03 10:45:42 . 2012-05-03 10:45:42 606208 C:\Windows\SysWOW64\Macromed\Shockwave 10\iml32X.dll + 2012-05-03 10:45:40 . 2012-05-03 10:45:40 462848 C:\Windows\SysWOW64\Macromed\Shockwave 10\Control.dll + 2012-07-04 22:00:18 . 2012-07-04 22:00:18 686280 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe + 2012-07-04 21:59:26 . 2012-07-04 21:59:26 686280 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.exe + 2012-07-04 21:59:27 . 2012-07-04 21:59:27 465096 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.dll + 2012-07-04 21:59:27 . 2012-07-04 22:00:22 250056 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - 2012-04-12 00:01:26 . 2012-02-28 01:06:48 716800 C:\Windows\SysWOW64\jscript.dll + 2012-06-14 05:07:26 . 2012-05-17 22:29:30 716800 C:\Windows\SysWOW64\jscript.dll + 2012-05-17 14:06:04 . 2012-04-04 16:47:24 227720 C:\Windows\SysWOW64\javaws.exe + 2012-05-17 14:05:39 . 2012-05-17 14:05:12 174024 C:\Windows\SysWOW64\javaw.exe + 2012-05-17 14:05:39 . 2012-05-17 14:05:12 174024 C:\Windows\SysWOW64\java.exe - 2011-04-22 11:55:42 . 2011-04-22 11:55:42 142848 C:\Windows\SysWOW64\ieUnatt.exe + 2012-06-14 05:07:30 . 2012-05-17 22:29:45 142848 C:\Windows\SysWOW64\ieUnatt.exe + 2012-06-14 05:07:31 . 2012-05-17 22:20:42 176640 C:\Windows\SysWOW64\ieui.dll - 2012-04-12 00:01:26 . 2012-02-28 00:59:59 176640 C:\Windows\SysWOW64\ieui.dll + 2010-08-23 10:40:12 . 2012-04-04 16:47:02 687504 C:\Windows\SysWOW64\deployJava1.dll + 2012-06-13 05:48:41 . 2012-04-24 04:36:42 140288 C:\Windows\SysWOW64\cryptsvc.dll + 2012-06-13 05:48:40 . 2012-04-24 04:36:42 103936 C:\Windows\SysWOW64\cryptnet.dll + 2010-01-30 13:29:28 . 2012-07-11 18:34:01 262144 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2010-01-30 13:29:28 . 2012-05-16 22:59:38 262144 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2012-04-26 12:50:20 . 2012-04-26 12:50:20 284088 C:\Windows\SysWOW64\Adobe\Shockwave 11\SymCCIS.dll - 2012-02-21 14:03:20 . 2012-02-21 14:03:20 114176 C:\Windows\SysWOW64\Adobe\Shockwave 11\SwInit.exe + 2012-04-26 13:05:42 . 2012-04-26 13:05:42 114176 C:\Windows\SysWOW64\Adobe\Shockwave 11\SwInit.exe - 2012-02-21 14:04:22 . 2012-02-21 14:04:22 434176 C:\Windows\SysWOW64\Adobe\Shockwave 11\Proj.dll + 2012-04-26 13:06:40 . 2012-04-26 13:06:40 434176 C:\Windows\SysWOW64\Adobe\Shockwave 11\Proj.dll + 2012-04-26 13:06:12 . 2012-04-26 13:06:12 366592 C:\Windows\SysWOW64\Adobe\Shockwave 11\Plugin.dll - 2012-02-21 13:50:28 . 2012-02-21 13:50:28 990208 C:\Windows\SysWOW64\Adobe\Shockwave 11\iml32.dll + 2012-04-26 12:54:26 . 2012-04-26 12:54:26 990208 C:\Windows\SysWOW64\Adobe\Shockwave 11\iml32.dll + 2012-04-26 13:05:30 . 2012-04-26 13:05:30 544256 C:\Windows\SysWOW64\Adobe\Shockwave 11\Control.dll + 2012-04-26 13:12:10 . 2012-04-26 13:12:10 113592 C:\Windows\SysWOW64\Adobe\Director\SWDNLD.EXE - 2012-02-21 14:10:18 . 2012-02-21 14:10:18 113592 C:\Windows\SysWOW64\Adobe\Director\SWDNLD.EXE - 2012-02-21 14:10:10 . 2012-02-21 14:10:10 281016 C:\Windows\SysWOW64\Adobe\Director\SwDir.dll + 2012-04-26 13:12:02 . 2012-04-26 13:12:02 281016 C:\Windows\SysWOW64\Adobe\Director\SwDir.dll + 2012-04-26 13:06:22 . 2012-04-26 13:06:22 145920 C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - 2012-02-21 14:04:02 . 2012-02-21 14:04:02 145920 C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll + 2010-02-04 01:11:46 . 2012-06-20 04:37:53 272568 C:\Windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2010-01-31 22:31:25 . 2012-07-09 19:55:53 329364 C:\Windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2012-06-14 05:07:33 . 2012-05-18 01:58:15 237056 C:\Windows\system32\url.dll - 2012-04-12 00:01:26 . 2012-02-28 06:48:36 237056 C:\Windows\system32\url.dll - 2011-03-19 16:35:35 . 2010-11-20 13:27:23 209920 C:\Windows\system32\profsvc.dll + 2012-06-13 05:48:58 . 2012-05-01 05:40:20 209920 C:\Windows\system32\profsvc.dll + 2010-01-06 20:07:30 . 2012-07-11 19:40:23 804136 C:\Windows\system32\perfh013.dat + 2009-07-14 02:36:59 . 2012-07-11 19:40:23 646216 C:\Windows\system32\perfh009.dat + 2010-01-06 20:07:30 . 2012-07-11 19:40:23 166748 C:\Windows\system32\perfc013.dat + 2009-07-14 02:36:59 . 2012-07-11 19:40:23 135252 C:\Windows\system32\perfc009.dat + 2012-07-04 22:00:13 . 2012-07-04 22:00:13 417992 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_3_300_262_Plugin.exe + 2012-07-04 21:59:20 . 2012-07-04 21:59:20 417480 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_3_300_257_ActiveX.exe + 2012-07-04 21:59:20 . 2012-07-04 21:59:20 512200 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_3_300_257_ActiveX.dll - 2012-04-12 00:01:25 . 2012-02-28 06:45:47 818688 C:\Windows\system32\jscript.dll + 2012-06-14 05:07:26 . 2012-05-18 01:55:06 818688 C:\Windows\system32\jscript.dll + 2012-06-14 05:07:30 . 2012-05-18 01:55:22 173056 C:\Windows\system32\ieUnatt.exe - 2011-04-22 11:55:41 . 2011-04-22 11:55:41 173056 C:\Windows\system32\ieUnatt.exe + 2012-06-14 05:07:31 . 2012-05-18 01:47:42 248320 C:\Windows\system32\ieui.dll - 2012-04-12 00:01:26 . 2012-02-28 06:39:50 248320 C:\Windows\system32\ieui.dll + 2009-07-14 04:45:34 . 2012-06-14 15:30:19 500528 C:\Windows\system32\FNTCACHE.DAT - 2009-07-14 04:45:34 . 2012-05-11 09:33:20 500528 C:\Windows\system32\FNTCACHE.DAT + 2012-06-13 05:48:51 . 2012-04-28 03:55:21 210944 C:\Windows\system32\drivers\rdpwd.sys - 2012-03-14 09:30:19 . 2012-02-17 04:58:24 210944 C:\Windows\system32\drivers\rdpwd.sys + 2012-06-13 05:48:41 . 2012-04-24 05:37:37 184320 C:\Windows\system32\cryptsvc.dll + 2012-06-13 05:48:41 . 2012-04-24 05:37:37 140288 C:\Windows\system32\cryptnet.dll + 2009-07-14 05:12:52 . 2012-07-04 22:00:12 262144 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2009-07-14 05:12:52 . 2012-02-18 13:12:54 262144 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 05:01:48 . 2012-07-11 17:57:28 444024 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2009-07-14 05:01:48 . 2012-05-16 15:14:17 444024 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-04-21 09:03:36 . 2012-04-21 09:03:36 616024 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll - 2012-04-11 09:21:27 . 2012-01-26 23:31:27 630784 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-06-13 05:48:04 . 2012-04-23 22:33:25 630784 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-04-21 09:03:36 . 2012-04-21 09:03:36 616024 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll - 2012-04-11 09:21:27 . 2012-01-26 23:33:25 630784 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-06-13 05:48:04 . 2012-04-23 22:35:09 630784 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 350592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 350592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 163168 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 163168 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 138592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 138592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-10 15:56:08 . 2012-05-10 15:56:08 699224 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-06-14 05:25:04 . 2012-06-14 05:25:04 699224 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2012-05-10 15:56:08 . 2012-05-10 15:56:08 857960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-14 05:25:04 . 2012-06-14 05:25:04 857960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-14 05:25:04 . 2012-06-14 05:25:04 675672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2012-05-10 15:56:09 . 2012-05-10 15:56:09 675672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2012-06-14 05:24:53 . 2012-06-14 05:24:53 113512 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-05-10 15:55:56 . 2012-05-10 15:55:56 113512 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 129912 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 129912 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 390008 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 390008 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 505208 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 505208 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-14 05:24:53 . 2012-06-14 05:24:53 261472 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-05-10 15:55:56 . 2012-05-10 15:55:56 261472 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 122264 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 122264 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 291184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 291184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 349568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 349568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll + 2012-06-14 05:24:57 . 2012-06-14 05:24:57 236880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 236880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 253280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-06-14 05:25:03 . 2012-06-14 05:25:03 253280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2012-06-14 05:24:53 . 2012-06-14 05:24:53 378720 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-10 15:55:56 . 2012-05-10 15:55:56 378720 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 134528 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-06-14 05:24:57 . 2012-06-14 05:24:57 134528 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 123736 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 123736 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 392552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 392552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 125816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 125816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 120152 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2012-05-10 15:55:52 . 2012-05-10 15:55:52 120152 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-06-14 05:24:53 . 2012-06-14 05:24:53 616024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-14 05:24:52 . 2012-06-14 05:24:52 395120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-10 15:55:55 . 2012-05-10 15:55:55 395120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2012-06-14 05:24:52 . 2012-06-14 05:24:52 182144 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll - 2012-05-10 15:55:55 . 2012-05-10 15:55:55 182144 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-06-14 05:24:52 . 2012-06-14 05:24:52 285072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2012-05-10 15:55:55 . 2012-05-10 15:55:55 285072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2012-05-10 15:55:54 . 2012-05-10 15:55:54 829280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-06-14 05:24:52 . 2012-06-14 05:24:52 829280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-06-14 05:24:51 . 2012-06-14 05:24:51 747360 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2012-05-10 15:55:54 . 2012-05-10 15:55:54 747360 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-06-14 05:24:57 . 2012-06-14 05:24:57 436600 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll - 2012-05-10 15:56:01 . 2012-05-10 15:56:01 436600 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-06-14 05:24:57 . 2012-06-14 05:24:57 683872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2012-05-10 15:56:00 . 2012-05-10 15:56:00 683872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-06-14 05:24:50 . 2012-06-14 05:24:50 409448 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-10 15:55:53 . 2012-05-10 15:55:53 409448 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2012-06-14 05:24:56 . 2012-06-14 05:24:56 210816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 210816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 156440 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2012-06-14 05:24:56 . 2012-06-14 05:24:56 156440 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 122248 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 122248 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2012-05-10 15:56:04 . 2012-05-10 15:56:04 525704 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-06-14 05:25:00 . 2012-06-14 05:25:00 525704 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll - 2012-05-10 15:55:53 . 2012-05-10 15:55:53 112976 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-14 05:24:50 . 2012-06-14 05:24:50 112976 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:09 581464 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 581464 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 832856 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2012-05-10 15:56:12 . 2012-05-10 15:56:12 832856 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-06-14 05:25:07 . 2012-06-14 05:25:07 194424 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-05-10 15:56:12 . 2012-05-10 15:56:12 194424 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll + 2012-06-14 05:25:07 . 2012-06-14 05:25:07 478576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-05-10 15:56:12 . 2012-05-10 15:56:12 478576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2012-05-10 15:56:12 . 2012-05-10 15:56:12 167288 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-14 05:25:07 . 2012-06-14 05:25:07 167288 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2012-06-14 05:25:07 . 2012-06-14 05:25:07 232304 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2012-05-10 15:56:12 . 2012-05-10 15:56:12 232304 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-06-14 05:24:49 . 2012-06-14 05:24:49 661352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-10 15:55:53 . 2012-05-10 15:55:53 661352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 349576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2012-05-10 15:56:02 . 2012-05-10 15:56:02 349576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2012-05-10 15:56:02 . 2012-05-10 15:56:02 387960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 387960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-05-10 15:55:52 . 2012-05-10 15:55:52 746336 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-14 05:24:49 . 2012-06-14 05:24:49 746336 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2012-05-10 15:55:52 . 2012-05-10 15:55:52 505184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 505184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-05-10 15:56:07 . 2012-05-10 15:56:07 288616 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 05:25:04 . 2012-06-14 05:25:04 288616 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 05:25:04 . 2012-06-14 05:25:04 335712 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-10 15:56:09 . 2012-05-10 15:56:09 335712 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-10 15:55:51 . 2012-05-10 15:55:51 125440 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 125440 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 05:24:48 . 2012-06-14 05:24:48 237424 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-10 15:55:51 . 2012-05-10 15:55:51 237424 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-10 15:56:02 . 2012-05-10 15:56:02 187776 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-14 05:24:58 . 2012-06-14 05:24:58 187776 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-05-10 15:55:44 . 2012-05-10 15:55:44 269672 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 05:24:39 . 2012-06-14 05:24:39 269672 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 05:24:40 . 2012-06-14 05:24:40 334688 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-10 15:55:45 . 2012-05-10 15:55:45 334688 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-14 05:24:16 . 2012-06-14 05:24:16 109568 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-10 15:55:21 . 2012-05-10 15:55:21 109568 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 05:24:16 . 2012-06-14 05:24:16 246128 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-10 15:55:21 . 2012-05-10 15:55:21 246128 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-14 05:24:32 . 2012-06-14 05:24:32 170368 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-05-10 15:55:38 . 2012-05-10 15:55:38 170368 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-05-17 14:07:28 . 2012-05-17 14:07:28 179200 C:\Windows\Installer\fe6c28.msi + 2012-05-17 14:06:27 . 2012-05-17 14:06:27 461312 C:\Windows\Installer\fe6c1a.msi + 2012-05-23 04:31:35 . 2012-05-23 04:31:35 391104 C:\Windows\Installer\3e3d6.msi + 2012-06-14 10:34:48 . 2012-06-14 10:34:48 337408 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\08becdcc9bd647c4e4d07ceea7fe4895\WindowsFormsIntegration.ni.dll + 2012-06-14 10:34:37 . 2012-06-14 10:34:37 281088 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ca5505a49a075ee7ad2535f89d9ea992\System.ServiceProcess.ni.dll + 2012-06-14 10:34:35 . 2012-06-14 10:34:35 781824 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\0d8257087be3e57b071d1d5ccd705c2f\System.Messaging.ni.dll + 2012-06-14 10:34:31 . 2012-06-14 10:34:31 181760 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll + 2012-06-14 08:59:43 . 2012-06-14 08:59:43 422912 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\097137b03ff37196b4b8ba62db34d64a\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 10:36:10 . 2012-06-14 10:36:10 253952 C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\db6668b547e7504d74c3f345e2519b65\WindowsFormsIntegration.ni.dll + 2012-06-14 10:36:04 . 2012-06-14 10:36:04 221696 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\9ae3a257c347602d42ab80bb7a5ca3bb\System.ServiceProcess.ni.dll + 2012-06-14 10:36:02 . 2012-06-14 10:36:02 626176 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\7a5371c272b4008457a3af780bf65ae5\System.Messaging.ni.dll + 2012-06-14 10:36:00 . 2012-06-14 10:36:00 148480 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\0a0d6610975706aee94ec9f44191bab8\System.Configuration.Install.ni.dll + 2012-06-14 10:35:44 . 2012-06-14 10:35:44 303104 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\26599cf02308adfabdc81eff4b322a01\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 20:42:33 . 2012-06-14 20:42:33 329216 C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f4d304fcbfda323997083a1f88b83719\WindowsFormsIntegration.ni.dll + 2012-06-14 20:42:32 . 2012-06-14 20:42:32 304128 C:\Windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\681410f842337dccc72eb059738c3ced\TaskScheduler.ni.dll + 2012-06-14 20:42:16 . 2012-06-14 20:42:16 187392 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\72b4992e45d232251a273a59eb3333d5\System.Web.Routing.ni.dll + 2012-06-14 20:42:19 . 2012-06-14 20:42:19 449024 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b905eb57b631a30c60caa4d68c186963\System.Web.Entity.ni.dll + 2012-06-14 20:42:20 . 2012-06-14 20:42:20 398848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e412dfbf1aa49bbe345a02a4d23104f5\System.Web.Entity.Design.ni.dll + 2012-06-14 20:42:17 . 2012-06-14 20:42:17 753664 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\815769f953ebe3f84439d522c97317b8\System.Web.DynamicData.ni.dll + 2012-06-14 20:42:06 . 2012-06-14 20:42:06 204800 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c8144ee08dccdac183527e53c86aa901\System.Web.Abstractions.ni.dll + 2012-06-14 15:38:48 . 2012-06-14 15:38:48 295424 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f71d2f65d0f149c75ac7a569dbcc8500\System.ServiceProcess.ni.dll + 2012-06-14 20:40:18 . 2012-06-14 20:40:18 783360 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d5d612f7d372f500e3062e3814e79d75\System.Messaging.ni.dll + 2012-06-14 15:38:48 . 2012-06-14 15:38:48 288768 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\fbc02e9f5a14bb93082ebc88bc577413\System.Drawing.Design.ni.dll + 2012-06-14 15:38:48 . 2012-06-14 15:38:48 192000 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a88ca70ab9641b8236149bc5dd8d1564\System.Configuration.Install.ni.dll + 2012-06-14 20:41:57 . 2012-06-14 20:41:57 855040 C:\Windows\assembly\NativeImages_v2.0.50727_64\napsnap\2f1bad2fb963482a02443d5e7fece2b6\napsnap.ni.dll + 2012-06-14 20:41:57 . 2012-06-14 20:41:57 162816 C:\Windows\assembly\NativeImages_v2.0.50727_64\napinit\bb4947f0ecc925a7bcfd129b6eec8f9b\napinit.ni.dll + 2012-06-14 20:41:09 . 2012-06-14 20:41:09 417792 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\67240ddde494b9cc05cd732ccd099668\MMCFxCommon.ni.dll + 2012-06-14 20:41:06 . 2012-06-14 20:41:06 312320 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e29cbd30a31d3c8dae19eb17f70c4ec4\Microsoft.MediaCenter.iTv.ni.dll + 2012-06-14 20:41:06 . 2012-06-14 20:41:06 152576 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\409dae089f2e041343cff71f822cd505\Microsoft.MediaCenter.ITVVM.ni.dll + 2012-06-14 20:41:08 . 2012-06-14 20:41:08 798720 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\803188573fb19785a94284e097c48a67\Microsoft.ManagementConsole.ni.dll + 2012-06-14 20:41:18 . 2012-06-14 20:41:18 549376 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4ae6ccc32dafb4e3765b9db05585bd48\mcplayerinterop.ni.dll + 2012-06-14 20:41:18 . 2012-06-14 20:41:18 696320 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\b0db345fd62a84c98fd8b0bf3c72e8bb\mcGlidHostObj.ni.dll + 2012-06-14 20:41:08 . 2012-06-14 20:41:08 659456 C:\Windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bc5df15ee827e248dd6f819874a85718\EventViewer.ni.dll + 2012-06-14 20:40:20 . 2012-06-14 20:40:20 389120 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\08c9aa18b306aa47ddc0ae4a63b05d04\ehExtHost.ni.exe + 2012-06-14 20:43:21 . 2012-06-14 20:43:21 634368 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\62cec20b82795b936aa2ebe09cf390b3\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-06-14 20:43:21 . 2012-06-14 20:43:21 119296 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f061177fad83e0d31527ca85a7b9447d\WindowsLive.Writer.FileDestinations.ni.dll + 2012-06-14 20:43:13 . 2012-06-14 20:43:13 780800 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ebda5533597f76b6f088db06a3c9bf89\WindowsLive.Writer.Controls.ni.dll + 2012-06-14 20:43:17 . 2012-06-14 20:43:17 101376 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c9819eac00ff9d58e19599438e5ac742\WindowsLive.Writer.Api.ni.dll + 2012-06-14 20:43:19 . 2012-06-14 20:43:19 891392 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c1c69dc861cc74197d32851f14e7072a\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-06-14 20:43:15 . 2012-06-14 20:43:15 665600 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a4ebb53e20a38dcf5d65f12abffd64a8\WindowsLive.Writer.Interop.ni.dll + 2012-06-14 20:43:20 . 2012-06-14 20:43:20 871424 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9b8dc38b0c2427faeb5e306a453d251a\WindowsLive.Writer.BlogClient.ni.dll + 2012-06-14 20:43:19 . 2012-06-14 20:43:19 326144 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8c2ee846c46973e97e706f39bb72e2e8\WindowsLive.Writer.SpellChecker.ni.dll + 2012-06-14 20:43:16 . 2012-06-14 20:43:16 328192 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8aaba9a485b995efaac2c1a59051e676\WindowsLive.Writer.Mshtml.ni.dll + 2012-06-14 20:43:18 . 2012-06-14 20:43:18 122368 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\26a195621994dccb5a5f9c06ce1e5fd7\WindowsLive.Writer.Extensibility.ni.dll + 2012-06-14 20:43:16 . 2012-06-14 20:43:16 174080 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0ccb4a3228a1ca615f849ebfe8d4daee\WindowsLive.Writer.BrowserControl.ni.dll + 2012-06-14 20:43:21 . 2012-06-14 20:43:21 222720 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\ad66e359fad3f5ace031f71737b111a0\WindowsLive.Client.ni.dll + 2012-06-14 20:44:18 . 2012-06-14 20:44:18 240128 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll + 2012-06-14 20:44:17 . 2012-06-14 20:44:17 245248 C:\Windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\f3e052584df9c614407da662dd3c3df3\TaskScheduler.ni.dll + 2012-06-14 20:44:09 . 2012-06-14 20:44:09 129536 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\06e4119a0a3484bb0ca667a16145ce74\System.Web.Routing.ni.dll + 2012-06-14 20:44:12 . 2012-06-14 20:44:12 860160 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4f13c2c06fb97f6659473f02802b377b\System.Web.Extensions.Design.ni.dll + 2012-06-14 20:44:10 . 2012-06-14 20:44:10 328192 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bc239944bca7cc6b6ddb473259183c7d\System.Web.Entity.ni.dll + 2012-06-14 20:44:11 . 2012-06-14 20:44:11 301568 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\3701488fb9e601ebe963db25b784d684\System.Web.Entity.Design.ni.dll + 2012-06-14 20:44:09 . 2012-06-14 20:44:09 547328 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a09cc9877f51f16a4610b702155e8b70\System.Web.DynamicData.ni.dll + 2012-06-14 20:44:03 . 2012-06-14 20:44:03 141312 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c6aad1edcc51862ceb26b6b65dad1490\System.Web.Abstractions.ni.dll + 2012-06-14 15:36:14 . 2012-06-14 15:36:14 212992 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll + 2012-06-14 20:43:23 . 2012-06-14 20:43:23 593408 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\2b4d6976393bf5643a4ef2d8dffdf75b\System.Messaging.ni.dll + 2012-06-14 15:36:13 . 2012-06-14 15:36:13 208384 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll + 2012-06-14 15:36:14 . 2012-06-14 15:36:14 141312 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\498d2033c60fe5b777cf923b71b25972\System.Configuration.Install.ni.dll + 2012-06-14 20:43:56 . 2012-06-14 20:43:56 723456 C:\Windows\assembly\NativeImages_v2.0.50727_32\napsnap\acfafa161ea232928cb02b01c50acf1c\napsnap.ni.dll + 2012-06-14 20:43:55 . 2012-06-14 20:43:55 117760 C:\Windows\assembly\NativeImages_v2.0.50727_32\napinit\0abec246c5ca6ec4858bfd3ab84da0ec\napinit.ni.dll + 2012-06-14 20:43:32 . 2012-06-14 20:43:32 287232 C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1e03b7c2539c5376f0665a4aba04efbd\MMCFxCommon.ni.dll + 2012-06-14 20:43:32 . 2012-06-14 20:43:32 561664 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\622b582866fca37f113bd97ae4c6d1f6\Microsoft.ManagementConsole.ni.dll + 2012-06-14 20:43:31 . 2012-06-14 20:43:31 553472 C:\Windows\assembly\NativeImages_v2.0.50727_32\EventViewer\02577b78c6ed2f9bda301de888dccad8\EventViewer.ni.dll + 2012-06-14 20:43:25 . 2012-06-14 20:43:25 254464 C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a6b8eb80cfbdd927b2fa4ecb69fc0209\ehExtHost32.ni.exe - 2012-04-11 09:21:27 . 2012-01-26 23:33:25 630784 C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-13 05:48:04 . 2012-04-23 22:35:09 630784 C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2010-01-06 20:06:16 . 2010-01-06 20:06:16 544768 C:\Windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_nl_b03f5f7f11d50a3a\System.Design.resources.dll + 2012-06-13 05:49:00 . 2010-11-12 23:33:29 544768 C:\Windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_nl_b03f5f7f11d50a3a\System.Design.resources.dll + 2012-06-14 05:07:29 . 2012-05-17 22:35:47 1129472 C:\Windows\SysWOW64\wininet.dll + 2012-06-14 05:07:33 . 2012-05-17 22:36:06 1103872 C:\Windows\SysWOW64\urlmon.dll - 2012-05-09 16:38:17 . 2012-03-31 04:39:37 3913072 C:\Windows\SysWOW64\ntoskrnl.exe + 2012-06-13 05:48:55 . 2012-05-04 10:03:50 3913072 C:\Windows\SysWOW64\ntoskrnl.exe + 2012-06-13 05:48:54 . 2012-05-04 10:03:53 3968368 C:\Windows\SysWOW64\ntkrnlpa.exe - 2012-05-09 16:38:17 . 2012-03-31 04:39:37 3968368 C:\Windows\SysWOW64\ntkrnlpa.exe + 2012-06-13 05:48:49 . 2012-04-07 11:26:29 2342400 C:\Windows\SysWOW64\msi.dll + 2012-05-02 13:36:18 . 2012-05-02 13:36:18 1231872 C:\Windows\SysWOW64\Macromed\Shockwave 10\gi.dll + 2012-05-03 10:45:42 . 2012-05-03 10:45:42 1503232 C:\Windows\SysWOW64\Macromed\Shockwave 10\dirapiX.dll - 2011-10-05 10:19:08 . 2011-10-05 10:19:08 1503232 C:\Windows\SysWOW64\Macromed\Shockwave 10\dirapiX.dll + 2012-07-04 22:00:18 . 2012-07-04 22:00:18 9459912 C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll + 2012-07-04 22:00:18 . 2012-07-04 22:00:18 1535176 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe + 2012-06-14 05:07:27 . 2012-05-17 22:45:37 1800192 C:\Windows\SysWOW64\jscript9.dll + 2012-06-14 05:07:32 . 2012-05-17 22:27:18 1793024 C:\Windows\SysWOW64\iertutil.dll + 2012-06-14 05:07:20 . 2012-05-17 22:48:40 9737728 C:\Windows\SysWOW64\ieframe.dll + 2012-06-13 05:48:41 . 2012-04-24 04:36:42 1158656 C:\Windows\SysWOW64\crypt32.dll + 2012-04-26 13:11:54 . 2012-04-26 13:11:54 1040824 C:\Windows\SysWOW64\Adobe\Shockwave 11\SwHelper_1165635.exe + 2012-04-26 12:50:24 . 2012-04-26 12:50:24 1231360 C:\Windows\SysWOW64\Adobe\Shockwave 11\gi.dll - 2012-02-21 13:52:20 . 2012-02-21 13:52:20 1742336 C:\Windows\SysWOW64\Adobe\Shockwave 11\dirapi.dll + 2012-04-26 12:55:58 . 2012-04-26 12:55:58 1742336 C:\Windows\SysWOW64\Adobe\Shockwave 11\dirapi.dll + 2012-06-14 05:07:29 . 2012-05-18 01:59:14 1392128 C:\Windows\system32\wininet.dll + 2012-06-13 05:48:52 . 2012-05-15 01:32:33 3146752 C:\Windows\system32\win32k.sys + 2012-06-14 05:07:33 . 2012-05-18 01:59:52 1346048 C:\Windows\system32\urlmon.dll + 2012-06-13 05:48:57 . 2012-05-04 11:06:22 5559664 C:\Windows\system32\ntoskrnl.exe - 2012-05-09 16:38:19 . 2012-03-31 06:05:57 5559664 C:\Windows\system32\ntoskrnl.exe + 2012-06-13 05:48:50 . 2012-04-07 12:31:40 3216384 C:\Windows\system32\msi.dll + 2012-06-14 05:07:27 . 2012-05-18 02:06:48 2311680 C:\Windows\system32\jscript9.dll + 2012-06-14 05:07:32 . 2012-05-18 01:54:12 2144768 C:\Windows\system32\iertutil.dll + 2012-06-13 05:48:42 . 2012-04-24 05:37:36 1462272 C:\Windows\system32\crypt32.dll - 2009-07-14 04:45:55 . 2012-05-11 09:36:42 7163631 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45:55 . 2012-06-22 04:19:36 7163631 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat - 2010-02-01 00:30:15 . 2012-05-11 21:47:12 3981736 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2010-02-01 00:30:15 . 2012-06-18 23:34:21 3981736 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2010-10-27 23:22:47 . 2012-07-11 17:57:33 7917956 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-761200818-1682720771-1100777243-1001-8192.dat + 2011-05-02 23:43:30 . 2012-06-10 21:34:59 1921848 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-761200818-1682720771-1100777243-1001-12288.dat - 2011-05-02 23:43:30 . 2012-04-26 20:40:22 1921848 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-761200818-1682720771-1100777243-1001-12288.dat + 2012-03-15 11:17:58 . 2012-03-15 11:17:58 5029672 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll + 2012-06-13 05:49:04 . 2012-03-21 22:30:28 5025792 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2012-05-09 16:38:03 . 2012-01-04 03:34:39 5025792 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2012-06-13 05:49:04 . 2012-03-21 22:30:28 4927488 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll - 2011-03-19 16:34:20 . 2010-11-05 01:56:59 4927488 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-03-15 11:17:58 . 2012-03-15 11:17:58 5029672 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll - 2012-05-09 16:38:03 . 2012-01-04 02:51:04 5025792 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-06-13 05:49:04 . 2012-03-21 22:32:36 5025792 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-06-13 05:49:04 . 2012-03-21 22:32:36 4927488 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2011-03-19 16:34:20 . 2010-11-05 01:58:06 4927488 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2012-05-10 15:56:13 . 2012-05-10 15:56:13 1369872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-06-14 05:25:08 . 2012-06-14 05:25:08 1369872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-06-14 05:24:52 . 2012-06-14 05:24:52 3512072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2012-05-10 15:55:55 . 2012-05-10 15:55:56 3512072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2012-06-14 05:24:55 . 2012-06-14 05:24:55 2207568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2012-05-10 15:55:58 . 2012-05-10 15:55:58 2207568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-14 05:24:54 . 2012-06-14 05:24:54 5029672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-14 05:24:55 . 2012-06-14 05:24:55 1711496 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll - 2012-05-10 15:55:57 . 2012-05-10 15:55:58 1711496 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll - 2012-05-10 15:56:06 . 2012-05-10 15:56:06 6097256 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-06-14 05:25:02 . 2012-06-14 05:25:02 6097256 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-06-14 05:25:02 . 2012-06-14 05:25:02 1026936 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2012-05-10 15:56:05 . 2012-05-10 15:56:05 1026936 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2012-05-10 15:56:00 . 2012-05-10 15:56:00 4464480 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-06-14 05:24:57 . 2012-06-14 05:24:57 4464480 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll + 2012-06-14 05:24:56 . 2012-06-14 05:24:56 1354584 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-10 15:55:59 . 2012-05-10 15:55:59 1354584 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2012-05-10 15:56:04 . 2012-05-10 15:56:05 1199968 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-06-14 05:25:01 . 2012-06-14 05:25:01 1199968 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2012-05-10 15:56:04 . 2012-05-10 15:56:04 1462648 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2012-06-14 05:25:00 . 2012-06-14 05:25:01 1462648 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-05-10 15:56:10 . 2012-05-10 15:56:10 6429992 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-14 05:25:06 . 2012-06-14 05:25:06 6429992 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-06-14 05:24:50 . 2012-06-14 05:24:50 3116376 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-10 15:55:54 . 2012-05-10 15:55:54 3116376 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-14 05:25:05 . 2012-06-14 05:25:05 3825952 C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-10 15:56:09 . 2012-05-10 15:56:09 3825952 C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 05:24:46 . 2012-06-14 05:24:46 4970768 C:\Windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-10 15:55:51 . 2012-05-10 15:55:51 4970768 C:\Windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 05:24:59 . 2012-06-14 05:24:59 3563408 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-10 15:56:03 . 2012-05-10 15:56:03 3563408 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-10 15:55:25 . 2012-05-10 15:55:25 2975064 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-14 05:24:18 . 2012-06-14 05:24:19 2975064 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-10 15:55:45 . 2012-05-10 15:55:45 3790112 C:\Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 05:24:40 . 2012-06-14 05:24:40 3790112 C:\Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 05:24:14 . 2012-06-14 05:24:14 5201168 C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-10 15:55:21 . 2012-05-10 15:55:21 5201168 C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2012-05-10 15:55:38 . 2012-05-10 15:55:39 2989456 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-06-14 05:24:32 . 2012-06-14 05:24:32 2989456 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-04-22 20:46:00 . 2012-04-22 20:46:00 1187328 C:\Windows\Installer\996a3.msp + 2012-03-15 12:26:06 . 2012-03-15 12:26:06 4212736 C:\Windows\Installer\9969b.msp + 2012-05-23 04:31:35 . 2012-05-23 04:31:35 1412096 C:\Windows\Installer\3e3cd.msi + 2012-06-14 08:59:51 . 2012-06-14 08:59:51 5237248 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e286701acf74012d3aa4a21953f03b6b\WindowsBase.ni.dll + 2012-06-14 10:34:46 . 2012-06-14 10:34:46 5645824 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\950f64ba9fb22ca06c5b2b9cf6f5f4b4\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 10:34:13 . 2012-06-14 10:34:13 1467392 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Printing\d2de16284459454472a6875185c64d08\System.Printing.ni.dll + 2012-06-14 10:33:45 . 2012-06-14 10:33:45 2305024 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1225ef41527a975de83f22328d0a3b93\System.Drawing.ni.dll + 2012-06-14 10:33:48 . 2012-06-14 10:33:48 2403328 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\ad9ff5d55f7ea22e80c39e0ff0240984\System.Deployment.ni.dll + 2012-06-14 10:34:29 . 2012-06-14 10:34:30 5048832 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\707f90689caf41ad429bf3ad373503cb\System.Activities.Presentation.ni.dll + 2012-06-14 10:34:19 . 2012-06-14 10:34:20 4233216 C:\Windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\16c9569b75a9f47c38b60ba733936e1a\ReachFramework.ni.dll + 2012-06-14 10:33:42 . 2012-06-14 10:33:42 2056704 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\9c3d6b3ddef66cac069b6ab1fec514f8\PresentationUI.ni.dll + 2012-06-14 08:59:42 . 2012-06-14 08:59:42 1843712 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e4d308f69077903e24de92fe4fc06d29\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 08:59:37 . 2012-06-14 08:59:37 2317312 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\70e2694fe050bd480b9f61f935ca2da5\Microsoft.VisualBasic.ni.dll + 2012-06-14 05:25:49 . 2012-06-14 05:25:49 3858432 C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\1d3c2d83da69c30ba8edf5cfea3c0057\WindowsBase.ni.dll + 2012-06-14 10:36:08 . 2012-06-14 10:36:08 4587008 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\0927d75b05e9d3bfdae478155e8c0742\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 10:35:51 . 2012-06-14 10:35:51 1060864 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Printing\71e3d9751ca6679c5ce2d707ca173373\System.Printing.ni.dll + 2012-06-14 05:25:46 . 2012-06-14 05:25:47 1666048 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\29e48cb144e24a7b4335d1360cc06642\System.Drawing.ni.dll + 2012-06-14 10:35:50 . 2012-06-14 10:35:50 1880064 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e642f8e9415d53aa2bc08fc3af938236\System.Deployment.ni.dll + 2012-06-14 10:35:58 . 2012-06-14 10:35:59 3757568 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\4ff694358b3796883fea64e500c27169\System.Activities.Presentation.ni.dll + 2012-06-14 10:35:54 . 2012-06-14 10:35:54 2906624 C:\Windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\47f8023bf6e24604f908ebc472dbe3b6\ReachFramework.ni.dll + 2012-06-14 10:35:49 . 2012-06-14 10:35:49 1641984 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\de8350e990fc1123d26665588c7d68c7\PresentationUI.ni.dll + 2012-06-14 10:35:44 . 2012-06-14 10:35:44 1139712 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e3be750f68ac84f84240e86a5e1020af\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 10:35:41 . 2012-06-14 10:35:41 1838080 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\4cd09961cd45c4c3d3a079f3e81686f5\Microsoft.VisualBasic.ni.dll + 2012-06-14 20:42:31 . 2012-06-14 20:42:31 1818112 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\70cc5e8a5a3372fe0b104c1b20392cd2\System.WorkflowServices.ni.dll + 2012-06-14 15:39:05 . 2012-06-14 15:39:05 2711040 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\aa638ba79250284eb4af4adaa4a4117b\System.Workflow.Runtime.ni.dll + 2012-06-14 15:39:01 . 2012-06-14 15:39:01 5957632 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\996dc2af3b9e5c111130935f298908c6\System.Workflow.ComponentModel.ni.dll + 2012-06-14 15:38:54 . 2012-06-14 15:38:54 3895296 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\178797db84abae2eeaed835bd28ca52c\System.Workflow.Activities.ni.dll + 2012-06-14 15:38:35 . 2012-06-14 15:38:35 2292224 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\a32734087cd0db5607d5744ca63235d7\System.Web.Services.ni.dll + 2012-06-14 20:42:26 . 2012-06-14 20:42:26 3336704 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\af7689e8cbec5d2755497be23c30e293\System.Web.Mobile.ni.dll + 2012-06-14 20:42:11 . 2012-06-14 20:42:12 3044352 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\768ea257d75839979b4efb2d49d653f6\System.Web.Extensions.ni.dll + 2012-06-14 20:42:22 . 2012-06-14 20:42:22 1155072 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2c47bc5d426a7cf9ffef1425eda08184\System.Web.Extensions.Design.ni.dll + 2012-06-14 15:38:14 . 2012-06-14 15:38:14 1463808 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Printing\b964519964d302b4977e1380d8d15f1a\System.Printing.ni.dll + 2012-06-14 15:37:18 . 2012-06-14 15:37:18 2318848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\222eb8aa336953a6b0216db2b0c4770d\System.Drawing.ni.dll + 2012-06-14 15:37:16 . 2012-06-14 15:37:16 2444288 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\6e4e9b07f376d445df1718c0011fa99b\System.Deployment.ni.dll + 2012-06-14 15:38:12 . 2012-06-14 15:38:12 3116032 C:\Windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\1f88a3693c8ddd527a130aff49dc58b3\ReachFramework.ni.dll + 2012-06-14 15:38:08 . 2012-06-14 15:38:08 2109952 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\b91c32fab08ba62d8c7681cc596895be\PresentationUI.ni.dll + 2012-06-14 20:42:01 . 2012-06-14 20:42:01 3601920 C:\Windows\assembly\NativeImages_v2.0.50727_64\Narrator\ac1ba76ed19d668ce53a74593f040453\Narrator.ni.exe + 2012-06-14 20:41:55 . 2012-06-14 20:41:55 2327552 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCEx\df2557ab1b8e4389d846e13dc82eba57\MMCEx.ni.dll + 2012-06-14 20:41:15 . 2012-06-14 20:41:15 7970304 C:\Windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\61812970c4743b686a67f28687e1dcb6\MIGUIControls.ni.dll + 2012-06-14 20:41:51 . 2012-06-14 20:41:51 2131968 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1586ee919f86130df9771cf9b8d95d3a\Microsoft.VisualBasic.ni.dll + 2012-06-14 20:41:44 . 2012-06-14 20:41:44 5350912 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ca7e936eed0de2436d87b2601ee3a20a\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 20:41:37 . 2012-06-14 20:41:38 2176512 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6caa366471176a065a96d77e8ba01eeb\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 20:41:47 . 2012-06-14 20:41:47 2105344 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3040e2de07177c0a6a66a49de61fdc59\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 20:40:22 . 2012-06-14 20:40:22 1516544 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b2afc0af3d89ae00e973b4e6e9db382c\Microsoft.MediaCenter.ni.dll + 2012-06-14 20:41:31 . 2012-06-14 20:41:31 1508864 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\73bfbdccdc1b0ae87f70a0ec594fee3c\Microsoft.MediaCenter.Bml.ni.dll + 2012-06-14 20:40:32 . 2012-06-14 20:40:32 8979456 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\653e1ee01f10d658d52ca42e17e74283\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 20:41:29 . 2012-06-14 20:41:29 2365952 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\dac69844e6333484159a4cf544190906\Microsoft.Ink.ni.dll + 2012-06-14 20:41:23 . 2012-06-14 20:41:23 2218496 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4b362e9e25c33e371f06403edec8849a\Microsoft.Build.Tasks.ni.dll + 2012-06-14 20:41:26 . 2012-06-14 20:41:26 2682880 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\33730d136a34d2f4e56a0322f49ee9b6\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 20:40:35 . 2012-06-14 20:40:35 2801664 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstore\cc4844e7242c1e35d145bf2439f944c5\mcstore.ni.dll + 2012-06-14 20:40:13 . 2012-06-14 20:40:13 5746688 C:\Windows\assembly\NativeImages_v2.0.50727_64\AdWindows\f735957660f097d292c4a71b31fff75d\AdWindows.ni.dll + 2012-06-14 20:15:44 . 2012-06-14 20:15:44 2653184 C:\Windows\assembly\NativeImages_v2.0.50727_64\AcWindows\238a0ed4d66e84021c873a34c25038b0\AcWindows.ni.dll + 2012-06-14 20:15:41 . 2012-06-14 20:15:41 7745024 C:\Windows\assembly\NativeImages_v2.0.50727_64\acmgd\c1e3cf43b1e6f67b72db4ee025db440a\acmgd.ni.dll + 2012-06-14 20:15:31 . 2012-06-14 20:15:31 1818112 C:\Windows\assembly\NativeImages_v2.0.50727_64\AcLayer\9e2eb4112060e1d7fd172f21d03af6a6\AcLayer.ni.dll + 2012-06-14 19:45:52 . 2012-06-14 19:45:52 2170368 C:\Windows\assembly\NativeImages_v2.0.50727_64\AcCui\038ccf373b2d5d4ec38f47c5ac1a72fc\AcCui.ni.dll + 2012-06-14 20:43:16 . 2012-06-14 20:43:16 1346560 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fe29ec14034fcf7bd83f609ee5327f03\WindowsLive.Writer.Localization.ni.dll + 2012-06-14 20:43:18 . 2012-06-14 20:43:18 1285632 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ccb5629a16edaafb40d3bdec51c70451\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-06-14 20:43:15 . 2012-06-14 20:43:15 2193408 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\81c0c8525a9f6ff5c97e95a331eba69c\WindowsLive.Writer.CoreServices.ni.dll + 2012-06-14 20:43:12 . 2012-06-14 20:43:12 7025152 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\369eb9f2556436aadf9bc93610124d3b\WindowsLive.Writer.PostEditor.ni.dll + 2012-06-14 20:44:17 . 2012-06-14 20:44:17 1358336 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll + 2012-06-14 15:36:26 . 2012-06-14 15:36:26 1917952 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\88bfc62ac0195a8ae673c444a3339505\System.Workflow.Runtime.ni.dll + 2012-06-14 15:36:24 . 2012-06-14 15:36:24 4516352 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\cfb739be21092d5b8f7b4fde529e6aaa\System.Workflow.ComponentModel.ni.dll + 2012-06-14 15:36:20 . 2012-06-14 15:36:20 2994688 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\a815fffab98375c1919df68b5b292725\System.Workflow.Activities.ni.dll + 2012-06-14 15:36:03 . 2012-06-14 15:36:03 1840640 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll + 2012-06-14 20:44:14 . 2012-06-14 20:44:14 2209792 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a90802e36dee6e10d9bf54832cbf549\System.Web.Mobile.ni.dll + 2012-06-14 20:44:04 . 2012-06-14 20:44:04 2404352 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c45efc7ec92c1da8e67eb597559ec39c\System.Web.Extensions.ni.dll + 2012-06-14 15:35:46 . 2012-06-14 15:35:47 1044480 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Printing\991dbe40be5b114ed705bb5b48e6b330\System.Printing.ni.dll + 2012-06-14 15:34:54 . 2012-06-14 15:34:54 1591808 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll + 2012-06-14 15:34:14 . 2012-06-14 15:34:14 1806848 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll + 2012-06-14 15:35:45 . 2012-06-14 15:35:45 2157056 C:\Windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\87f73de6e080d37be93adfc7d5c31d7a\ReachFramework.ni.dll + 2012-06-14 15:35:43 . 2012-06-14 15:35:43 1658368 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\163517c8a195fb48f7ef6ee17c585bdb\PresentationUI.ni.dll + 2012-06-14 20:43:57 . 2012-06-14 20:43:57 2623488 C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\17add09c98fa34255142d42697db53df\Narrator.ni.exe + 2012-06-14 20:43:54 . 2012-06-14 20:43:54 1545216 C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCEx\21abde8efab609732b2ade3f05234e79\MMCEx.ni.dll + 2012-06-14 20:43:34 . 2012-06-14 20:43:35 6438912 C:\Windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\0e7da0df83f0619e3b0e0a7d7ee05fa3\MIGUIControls.ni.dll + 2012-06-14 20:43:51 . 2012-06-14 20:43:51 1670144 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll + 2012-06-14 20:43:42 . 2012-06-14 20:43:43 1681920 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\99ae5f32cd1dc3618659bc3c77f2b2a9\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 20:43:49 . 2012-06-14 20:43:49 1704960 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\77b5496d214dd5034294b058c0bb0e8d\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 20:43:47 . 2012-06-14 20:43:48 3724288 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\72765e5fab12761eb6d3f58180fa34d7\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 20:43:29 . 2012-06-14 20:43:29 6499840 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ce1d10f94b40f054017865757552f2d\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 20:43:25 . 2012-06-14 20:43:25 1009664 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\7fab1ec8f5ed6a55a8a73b2c590bd7cd\Microsoft.MediaCenter.ni.dll + 2012-06-14 20:43:39 . 2012-06-14 20:43:39 1361408 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4d381048e3b9c0914c0f72c6aa0a599d\Microsoft.Ink.ni.dll + 2012-06-14 20:43:37 . 2012-06-14 20:43:37 1620992 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3893fa9a19b52dee8b2cc424840d5d08\Microsoft.Build.Tasks.ni.dll + 2012-06-14 20:43:38 . 2012-06-14 20:43:38 1970176 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d2250044b1ecff755e26ed12f6d27cb\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 20:43:31 . 2012-06-14 20:43:31 2035712 C:\Windows\assembly\NativeImages_v2.0.50727_32\mcstore\3a4e56a8d1075cf0af0619c383b3e592\mcstore.ni.dll + 2012-06-13 05:49:04 . 2012-03-21 22:32:36 5025792 C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2012-05-09 16:38:03 . 2012-01-04 02:51:04 5025792 C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-03-19 16:34:20 . 2010-11-05 01:58:06 4927488 C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-13 05:49:04 . 2012-03-21 22:32:36 4927488 C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-14 05:07:24 . 2012-05-17 23:11:00 12314624 C:\Windows\SysWOW64\mshtml.dll - 2009-07-14 02:34:08 . 2012-05-11 09:32:23 11010048 C:\Windows\system32\SMI\Store\Machine\schema.dat + 2009-07-14 02:34:08 . 2012-06-21 06:31:56 11010048 C:\Windows\system32\SMI\Store\Machine\schema.dat + 2012-06-14 05:07:22 . 2012-05-18 02:47:36 17807360 C:\Windows\system32\mshtml.dll + 2010-01-31 21:14:31 . 2012-06-14 05:16:51 58957832 C:\Windows\system32\MRT.exe + 2012-07-04 22:00:12 . 2012-07-04 22:00:13 12310216 C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll + 2012-06-14 05:07:21 . 2012-05-18 02:16:11 10924032 C:\Windows\system32\ieframe.dll + 2012-05-17 14:04:11 . 2012-05-17 14:04:11 17379840 C:\Windows\Installer\fe6c16.msi + 2012-07-05 14:14:58 . 2012-07-05 14:14:58 33709056 C:\Windows\Installer\16209e.msi + 2012-06-14 10:34:09 . 2012-06-14 10:34:09 17355264 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\e883d90a0210bf99ca88f3b4ade53a24\System.Windows.Forms.ni.dll + 2012-06-14 10:33:33 . 2012-06-14 10:33:34 24407552 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a3c3789d54894008501ce5891f1eeb40\PresentationFramework.ni.dll + 2012-06-14 09:00:16 . 2012-06-14 09:00:16 15908864 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\9d69a7a407bbc43a1bcb2da603af5840\PresentationCore.ni.dll + 2012-06-14 05:25:56 . 2012-06-14 05:25:56 13198336 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c06946b464ae8dd22151e0a6f310c976\System.Windows.Forms.ni.dll + 2012-06-14 05:26:13 . 2012-06-14 05:26:13 18000896 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\bcec0e7db1d027328cc8cd702185fa66\PresentationFramework.ni.dll + 2012-06-14 05:25:59 . 2012-06-14 05:26:00 11451904 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b460188cf6862491550a006c3660e2e6\PresentationCore.ni.dll + 2012-06-14 15:37:35 . 2012-06-14 15:37:36 17383424 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\dc5bb74eefdbf954cdfb70dd534d5564\System.Windows.Forms.ni.dll + 2012-06-14 15:38:31 . 2012-06-14 15:38:31 15270912 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\95f38e7485bbe2b73b6055c45196fedd\System.Web.ni.dll + 2012-06-14 15:38:47 . 2012-06-14 15:38:47 13609472 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Design\582144c0ee317038621aebc626187b56\System.Design.ni.dll + 2012-06-14 15:38:05 . 2012-06-14 15:38:06 19198464 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\47054c4d5b7e522c21a9d57797410302\PresentationFramework.ni.dll + 2012-06-14 15:36:56 . 2012-06-14 15:36:57 16543232 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\3a9d13514a8c4c710fa5ce8e9b5393fe\PresentationCore.ni.dll + 2012-06-14 20:41:05 . 2012-06-14 20:41:05 25470976 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehshell\0c1f96a4136efe532bbb8eb91d3de300\ehshell.ni.dll + 2012-06-14 19:46:05 . 2012-06-14 19:46:05 14932480 C:\Windows\assembly\NativeImages_v2.0.50727_64\acdbmgd\f43ceba627134c0e5dd0779cf33d0e85\acdbmgd.ni.dll + 2012-06-14 15:35:07 . 2012-06-14 15:35:08 12436480 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll + 2012-06-14 15:35:59 . 2012-06-14 15:36:00 11833344 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll + 2012-06-14 15:36:11 . 2012-06-14 15:36:12 10580480 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll + 2012-06-14 15:35:39 . 2012-06-14 15:35:40 14340608 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll + 2012-06-14 15:34:10 . 2012-06-14 15:34:11 12237824 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll -- Snapshot teruggezet naar huidige datum -- ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 94208 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 94208 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 94208 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-09-11 05:41:42 120104 ----a-w- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-05 00:49:37 39408] "Gadwin PrintScreen"="C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe" [2011-05-03 09:18:01 487424] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-24 23:42:32 261888] "NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-25 00:31:08 588648] "EgisTecLiveUpdate"="C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 21:09:34 199464] "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-10 07:28:38 98304] "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" [2009-11-01 23:39:48 1094736] "ArcadeDeluxeAgent"="C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-10-29 11:47:34 419112] "PlayMovie"="C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2010-01-18 14:05:36 181480] "QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe" [2009-11-10 22:08:18 417792] "ConnectionCenter"="C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" [2009-09-12 22:09:10 103768] "YouTubeDownloader_upgrade"="C:\Program Files (x86)\E-Zsoft\YouTubeDownloader\YouTubeDownloader.exe" [2010-05-20 14:44:52 394240] "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 07:37:53 843712] "DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 23:08:12 1259376] "HP Software Update"="C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2010-06-09 18:55:54 49208] "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-17 09:07:54 252296] "TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2012-05-23 04:33:08 296056] C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ MagicDisc.lnk - C:\Program Files (x86)\MagicDisc\MagicDisc.exe [2011-1-20 576000] OneNote 2007 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] Registration Prince of Persia Warrior Within.LNK - C:\Program Files (x86)\Ubisoft\Prince of Persia Warrior Within\Support\Register\RegistrationReminder.exe [N/A] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ CodeMeter Control Center.lnk - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe [2010-6-30 6871440] Online plug-in.lnk - C:\Windows\Installer\{B8A2256E-6225-4D9E-B1C9-C26CA1E22FEB}\pnaico.exe.20FBBF0A_A7E5_4BDE_9798_9811C3D135AC.exe [2010-3-4 73728] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer] @="Service" R1 bdfwfpf;bdfwfpf;C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [2010-05-25 09:21:04 89680] R1 ctxusbm;Citrix USB Monitor Driver;C:\Windows\system32\DRIVERS\ctxusbm.sys [2009-09-08 17:13:16 87600] R1 eusk2par;EUTRON SmartKey Parallel Driver;C:\Windows\system32\Drivers\eusk2par-amd64.sys [2005-11-21 06:18:50 33792] R1 MIPFSv364;MIPFSv364;C:\Windows\system32\drivers\MIPFSv364.sys [2010-09-20 17:22:08 190504] R1 MIPv464;MIPv464;C:\Windows\system32\drivers\MIPv464.sys [2010-11-02 15:14:50 66680] R1 mwlPSDFilter;mwlPSDFilter;C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 03:15:30 22576] R1 mwlPSDNServ;mwlPSDNServ;C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 03:15:30 20016] R1 mwlPSDVDisk;mwlPSDVDisk;C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 03:15:30 60464] R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 13:10:42 63928] R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe [2009-07-14 01:39:46 27136] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe [2009-12-10 09:15:06 202752] R2 Application Updater;Application Updater;C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [x] R2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe [2012-02-10 09:28:06 193816] R2 BDVEDISK;BDVEDISK;C:\Program Files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-05-25 09:21:05 103944] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 12:27:14 138576] R2 CodeMeter.exe;CodeMeter Runtime Server;C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2010-06-30 02:20:00 2067344] R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-09-30 22:44:58 844320] R2 FlexNET SCIA;FlexNET SCIA;C:\Program Files (x86)\SCIA\FlexNET\lmgrd.exe [2009-11-21 00:50:30 1334096] R2 Greg_Service;GRegService;C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 09:38:58 1150496] R2 gupdate;Google Updateservice (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-30 13:34:09 135664] R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-09-24 23:42:28 62720] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 01:31:58 144640] R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 20:48:02 13784] R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 04:01:32 2320920] R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 02:47:12 240160] R2 vpnagent;Cisco AnyConnect VPN Agent;C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe [2009-02-03 20:39:09 427192] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-04 22:00:22 250056] R3 AmUStor;AM USB Stroage Driver;C:\Windows\system32\drivers\AmUStor.SYS [2009-07-22 22:06:26 40448] R3 Arrakis3;BitDefender Arrakis-server;C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 18:04:58 278224] R3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe [2012-02-10 09:28:06 240408] R3 BDFM;BDFM;C:\Windows\system32\DRIVERS\bdfm.sys [2010-01-29 12:47:04 163936] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-12-07 17:41:09 1436424] R3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-30 13:34:09 135664] R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 20:39:44 151936] R3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-22 16:03:00 113120] R3 MWLService;MyWinLocker Service;C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-11 05:42:46 305448] R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 01:31:46 50432] R3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 11:07:05 59392] R3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 20:48:18 126352] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 00:07:28 17920] R3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-27 23:07:19 1255736] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;C:\Windows\system32\DRIVERS\BdfNdisf6.sys [2010-05-25 09:21:04 88144] S1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 00:07:22 59904] S3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 20:54:54 56344] S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys [2009-08-06 12:43:58 320040] [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai Inhoud van de 'Gedeelde Taken' map 2012-07-11 C:\Windows\Tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-04 21:59:27 . 2012-07-04 22:00:22] 2012-07-11 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-30 13:34:13 . 2010-01-30 13:34:09] 2012-07-11 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-01-30 13:34:13 . 2010-01-30 13:34:09] 2012-07-05 C:\Windows\Tasks\SpeedyPC Pro.job - C:\Program Files (x86)\SpeedyPC Software\SpeedyPC\SpeedyPC.exe [2012-01-30 22:17:54 . 2012-01-30 22:17:54] 2012-07-10 C:\Windows\Tasks\SpeedyPC Registration3.job - C:\Windows\system32\rundll32.exe [2009-07-13 23:41:43 . 2009-07-14 01:14:31] 2012-07-05 C:\Windows\Tasks\SpeedyPC Update Version3.job - C:\Program Files (x86)\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe [2012-01-30 22:17:58 . 2012-01-30 22:17:58] --------- X64 Entries ----------- [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 97792 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 97792 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12:20 97792 ----a-w- C:\Users\Tom\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-09-11 05:44:06 137512 ----a-w- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-07-22 22:07:10 323072] "IAAnotif"="C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 03:03:32 186904] "mwlDaemon"="C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe" [2009-09-11 05:42:30 349480] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-29 02:57:38 8312352] "PLFSetI"="C:\Windows\PLFSetI.exe" [2010-01-06 20:18:19 200704] "SynTPEnh"="C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "Acer ePower Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 22:45:20 823840] "BitDefender Antiphishing Helper 32"="C:\Program Files\BitDefender\BitDefender 2010\Antispam32\IEShow.exe" [2009-10-19 15:05:24 71152] "BitDefender Antiphishing Helper"="C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 18:04:18 76296] "BDAgent"="C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" [2012-05-23 15:01:15 1702496] ------- Bijkomende Scan ------- uStart Page = hxxp://isearch.avg.com/?cid={A5339C52-B8D5-4733-9207-E6D3F10E42BC}&mid=e6e1564f5e7d47d19de9d16f6b9d3d2c-4940c124ba3ea5841cdecf5f298b20d514eeb295&lang=nl&ds=st011&pr=sa&d=2012-03-07 16:03:32&v=10.0.0.7&sap=hp uLocal Page = C:\Windows\system32\blank.htm mStart Page = about:blank mLocal Page = C:\Windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = 127.0.0.1:9421; IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 IE: Free YouTube Download - C:\Users\Tom\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm IE: Free YouTube to Mp3 Converter - C:\Users\Tom\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\sd9czh3v.default\ FF - prefs.js: browser.startup.homepage - hxxp://by159w.bay159.mail.live.com/default.aspx FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010000.10005&q= - - - - ORPHANS VERWIJDERD - - - - URLSearchHooks-{1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file) Wow6432Node-HKLM-Run-Freecorder FLV Service - C:\Program Files (x86)\Freecorder\FLVSrvc.exe [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai] "ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_4f7fccd.dll" --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-761200818-1682720771-1100777243-1001\Software\SecuROM\License information*] "datasecu"=hex:3b,41,47,b2,9f,83,06,cf,e8,31,98,a1,e6,01,ca,a6,24,82,96,6a,e4, 6f,4c,b3,cf,36,ae,5a,36,f0,d1,71,c0,f9,be,d5,59,43,c0,2b,b0,ea,ca,33,81,6e,\ "rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="C:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="C:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="C:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="C:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) ------------------------ Andere Aktieve Processen ------------------------ C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe ************************************************************************** Voltooingstijd: 2012-07-11 22:13:07 - machine werd herstart ComboFix-quarantined-files.txt 2012-07-11 20:13:07 ComboFix2.txt 2012-05-16 23:45:03