ComboFix 12-08-13.01 - sanja 13/08/2012 15:47:32.2.2 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.3963.2657 [GMT -4:00] Running from: c:\users\sanja\Desktop\ComboFix.exe SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\assembly\GAC_32\Desktop.ini c:\windows\assembly\GAC_64\Desktop.ini . ---- Previous Run ------- . c:\program files (x86)\Mozilla Firefox\components\AskHPRFF.js . c:\windows\system32\Services.exe . . . is infected!! . . ((((((((((((((((((((((((( Files Created from 2012-07-13 to 2012-08-13 ))))))))))))))))))))))))))))))) . . 2012-08-13 21:03 . 2012-08-13 21:05 -------- d-----w- c:\users\sanja\AppData\Local\temp 2012-08-13 21:03 . 2012-08-13 21:03 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-08-13 18:43 . 2012-08-13 18:43 -------- d-----w- C:\_OTL 2012-08-13 17:57 . 2012-08-13 17:57 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-08-13 17:57 . 2012-07-03 17:46 24904 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-08-13 03:10 . 2012-08-13 03:10 -------- d-----w- c:\users\sanja\AppData\Roaming\SUPERAntiSpyware.com 2012-08-13 03:10 . 2012-08-13 03:10 -------- d-----w- c:\program files\SUPERAntiSpyware 2012-08-13 03:10 . 2012-08-13 03:10 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2012-08-13 02:12 . 2012-08-13 02:12 476976 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2012-08-05 21:54 . 2012-07-23 19:59 24960 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe 2012-08-02 23:30 . 2012-08-02 23:30 -------- d-sh--w- c:\windows\SysWow64\%APPDATA% 2012-08-02 23:27 . 2012-08-02 23:27 -------- d-----w- c:\programdata\IObit 2012-08-02 23:27 . 2012-08-02 23:27 -------- d-----w- c:\users\sanja\AppData\Roaming\IObit 2012-08-02 23:27 . 2012-08-02 23:27 -------- d-----w- c:\program files (x86)\IObit 2012-07-27 00:12 . 2012-07-27 00:12 -------- d-----w- c:\users\sanja\AppData\Roaming\ViiKiiDesktopPlugin.5E22EA0FF243470AB5EDDF282C0A5B52E9909C36.1 2012-07-27 00:12 . 2012-07-27 00:12 -------- d-----w- c:\program files (x86)\ViiKiiDesktopPlugin 2012-07-27 00:02 . 2012-07-27 00:02 -------- d-----w- c:\users\sanja\AppData\Local\Macromedia 2012-07-26 23:50 . 2012-08-03 01:09 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-07-26 23:50 . 2012-07-26 23:50 -------- d-----w- c:\windows\system32\Macromed . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-08-13 02:12 . 2010-07-14 19:48 472880 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-03 01:09 . 2011-09-04 16:05 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-07-12 02:04 . 2006-11-02 12:35 59701280 ----a-w- c:\windows\system32\mrt.exe 2012-06-25 20:04 . 2012-06-25 20:04 1394248 ----a-w- c:\windows\SysWow64\msxml4.dll 2012-06-13 13:58 . 2012-07-12 02:03 2769408 ----a-w- c:\windows\system32\win32k.sys 2012-06-08 17:59 . 2012-07-11 20:28 12899840 ----a-w- c:\windows\system32\shell32.dll 2012-06-05 16:47 . 2012-07-11 20:28 1401856 ----a-w- c:\windows\SysWow64\msxml6.dll 2012-06-05 16:47 . 2012-07-11 20:28 1248768 ----a-w- c:\windows\SysWow64\msxml3.dll 2012-06-05 16:22 . 2012-07-11 20:28 1797120 ----a-w- c:\windows\system32\msxml6.dll 2012-06-05 16:22 . 2012-07-11 20:28 1869824 ----a-w- c:\windows\system32\msxml3.dll 2012-06-04 15:29 . 2012-07-11 20:28 516480 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2012-06-02 22:19 . 2012-06-22 20:19 38424 ----a-w- c:\windows\system32\wups.dll 2012-06-02 22:19 . 2012-06-22 20:20 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2012-06-02 22:19 . 2012-06-22 20:20 57880 ----a-w- c:\windows\system32\wuauclt.exe 2012-06-02 22:19 . 2012-06-22 20:20 44056 ----a-w- c:\windows\system32\wups2.dll 2012-06-02 22:19 . 2012-06-22 20:19 35864 ----a-w- c:\windows\SysWow64\wups.dll 2012-06-02 22:19 . 2012-06-22 20:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2012-06-02 22:19 . 2012-06-22 20:19 577048 ----a-w- c:\windows\SysWow64\wuapi.dll 2012-06-02 22:15 . 2012-06-22 20:20 2622464 ----a-w- c:\windows\system32\wucltux.dll 2012-06-02 22:15 . 2012-06-22 20:19 99840 ----a-w- c:\windows\system32\wudriver.dll 2012-06-02 22:12 . 2012-06-22 20:19 88576 ----a-w- c:\windows\SysWow64\wudriver.dll 2012-06-02 19:19 . 2012-06-22 20:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2012-06-02 19:19 . 2012-06-22 20:19 171904 ----a-w- c:\windows\SysWow64\wuwebv.dll 2012-06-02 19:15 . 2012-06-22 20:19 36864 ----a-w- c:\windows\system32\wuapp.exe 2012-06-02 19:12 . 2012-06-22 20:19 33792 ----a-w- c:\windows\SysWow64\wuapp.exe 2012-06-02 00:22 . 2012-07-11 20:28 347136 ----a-w- c:\windows\system32\schannel.dll 2012-06-02 00:22 . 2012-07-11 20:28 254464 ----a-w- c:\windows\system32\ncrypt.dll 2012-06-02 00:05 . 2012-07-11 20:28 77312 ----a-w- c:\windows\SysWow64\secur32.dll 2012-06-02 00:04 . 2012-07-11 20:28 278528 ----a-w- c:\windows\SysWow64\schannel.dll 2012-06-02 00:03 . 2012-07-11 20:28 204288 ----a-w- c:\windows\SysWow64\ncrypt.dll 2012-05-31 16:25 . 2010-03-22 01:28 279656 ------w- c:\windows\system32\MpSigStub.exe 2012-05-31 04:04 . 2012-07-06 13:27 9013136 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{412849A8-A463-4935-ADAA-868D51D6F98B}\mpengine.dll . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [-] 2009-04-11 . BC81150939BD52DBC7A08C245F1FB229 . 384512 . . [6.0.6000.16386] .. c:\windows\system32\services.exe . ((((((((((((((((((((((((((((( SnapShot@2011-12-29_21.56.31 ))))))))))))))))))))))))))))))))))))))))) . + 2012-01-11 21:48 . 2011-11-18 17:47 66560 c:\windows\SysWOW64\packager.dll + 2012-06-19 00:05 . 2012-05-15 06:33 67072 c:\windows\SysWOW64\mshtmled.dll - 2011-12-15 22:21 . 2011-11-03 04:44 13312 c:\windows\SysWOW64\msfeedssync.exe + 2012-06-19 00:05 . 2012-05-15 03:24 13312 c:\windows\SysWOW64\msfeedssync.exe - 2011-12-15 22:21 . 2011-11-03 06:18 55296 c:\windows\SysWOW64\msfeedsbs.dll + 2012-06-19 00:05 . 2012-05-15 06:33 55296 c:\windows\SysWOW64\msfeedsbs.dll - 2011-12-15 22:21 . 2011-11-03 06:22 64512 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-06-19 00:05 . 2012-05-15 06:37 64512 c:\windows\SysWOW64\migration\WininetPlugin.dll - 2006-11-02 12:13 . 2006-11-02 09:46 23552 c:\windows\SysWOW64\mciseq.dll + 2012-01-11 21:49 . 2011-10-14 16:00 23552 c:\windows\SysWOW64\mciseq.dll + 2012-06-19 00:05 . 2012-05-15 06:32 43520 c:\windows\SysWOW64\licmgr10.dll - 2011-12-15 22:21 . 2011-11-03 06:17 43520 c:\windows\SysWOW64\licmgr10.dll - 2011-12-15 22:21 . 2011-11-03 06:17 25600 c:\windows\SysWOW64\jsproxy.dll + 2012-06-19 00:05 . 2012-05-15 06:32 25600 c:\windows\SysWOW64\jsproxy.dll - 2011-12-15 22:21 . 2011-11-03 06:17 71680 c:\windows\SysWOW64\iesetup.dll + 2012-06-19 00:05 . 2012-05-15 06:31 71680 c:\windows\SysWOW64\iesetup.dll - 2011-12-15 22:21 . 2011-11-03 06:17 55808 c:\windows\SysWOW64\iernonce.dll + 2012-06-19 00:05 . 2012-05-15 06:31 55808 c:\windows\SysWOW64\iernonce.dll - 2011-07-12 15:20 . 2011-07-12 15:20 73064 c:\windows\SysWOW64\dnssd.dll + 2011-08-31 04:05 . 2011-08-31 04:05 73064 c:\windows\SysWOW64\dnssd.dll + 2011-08-31 04:05 . 2011-08-31 04:05 83816 c:\windows\SysWOW64\dns-sd.exe - 2011-07-12 15:20 . 2011-07-12 15:20 83816 c:\windows\SysWOW64\dns-sd.exe + 2012-07-11 20:28 . 2012-04-23 16:00 98304 c:\windows\SysWOW64\cryptnet.dll + 2012-08-13 18:35 . 2012-08-13 19:32 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2012-08-03 00:33 . 2012-08-09 01:02 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat + 2012-08-02 23:29 . 2012-08-02 23:29 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT + 2012-08-02 23:30 . 2012-08-13 18:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat + 2012-08-02 23:30 . 2012-08-13 18:35 16384 c:\windows\SysWOW64\%APPDATA%\Microsoft\Windows\IETldCache\index.dat + 2008-01-21 02:23 . 2012-08-13 21:06 74786 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2006-11-02 15:45 . 2012-08-13 21:06 78926 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-10-21 12:10 . 2012-08-13 21:06 19990 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1181711447-2757771419-2931224057-1000_UserData.bin - 2006-11-02 15:04 . 2006-11-02 15:04 27648 c:\windows\system32\spool\prtprocs\x64\jnwppr.dll + 2012-05-11 00:43 . 2012-02-01 15:30 27648 c:\windows\system32\spool\prtprocs\x64\jnwppr.dll + 2008-10-21 12:39 . 2009-02-27 07:42 66440 c:\windows\system32\spool\drivers\x64\msonpui.dll + 2012-01-29 18:57 . 2011-11-16 16:42 94720 c:\windows\system32\secur32.dll - 2009-08-18 06:41 . 2009-06-15 15:12 94720 c:\windows\system32\secur32.dll + 2012-01-11 21:48 . 2011-11-18 18:07 76800 c:\windows\system32\packager.dll + 2012-06-19 00:05 . 2012-05-15 02:15 98304 c:\windows\system32\mshtmled.dll - 2011-12-15 22:21 . 2011-11-03 05:11 12288 c:\windows\system32\msfeedssync.exe + 2012-06-19 00:05 . 2012-05-15 00:39 12288 c:\windows\system32\msfeedssync.exe + 2012-06-19 00:05 . 2012-05-15 02:15 71680 c:\windows\system32\msfeedsbs.dll - 2011-12-15 22:21 . 2011-11-03 06:50 71680 c:\windows\system32\msfeedsbs.dll + 2012-06-19 00:05 . 2012-05-15 02:19 93184 c:\windows\system32\migration\WininetPlugin.dll - 2011-12-15 22:21 . 2011-11-03 06:55 93184 c:\windows\system32\migration\WininetPlugin.dll + 2012-01-11 21:49 . 2011-10-14 17:27 28672 c:\windows\system32\mciwave.dll - 2006-11-02 09:53 . 2006-11-02 11:17 28672 c:\windows\system32\mciwave.dll + 2012-01-11 21:49 . 2011-10-14 17:27 28160 c:\windows\system32\mciseq.dll - 2006-11-02 09:53 . 2006-11-02 11:17 28160 c:\windows\system32\mciseq.dll + 2012-01-11 21:49 . 2011-10-14 17:27 48128 c:\windows\system32\mcicda.dll - 2006-11-02 09:53 . 2006-11-02 11:17 48128 c:\windows\system32\mcicda.dll + 2012-01-29 18:57 . 2011-11-16 14:34 11264 c:\windows\system32\lsass.exe - 2009-08-18 06:42 . 2009-06-15 13:15 11264 c:\windows\system32\lsass.exe + 2012-06-19 00:05 . 2012-05-15 02:15 56832 c:\windows\system32\licmgr10.dll - 2011-12-15 22:21 . 2011-11-03 06:50 56832 c:\windows\system32\licmgr10.dll - 2011-12-15 22:21 . 2011-11-03 06:50 31744 c:\windows\system32\jsproxy.dll + 2012-06-19 00:05 . 2012-05-15 02:15 31744 c:\windows\system32\jsproxy.dll - 2006-11-02 15:04 . 2006-11-02 15:04 24576 c:\windows\system32\jnwmon.dll + 2012-05-11 00:43 . 2012-02-01 15:30 24576 c:\windows\system32\jnwmon.dll + 2012-04-11 07:05 . 2012-02-29 15:35 78848 c:\windows\system32\imagehlp.dll - 2011-12-15 22:21 . 2011-11-03 06:49 77312 c:\windows\system32\iesetup.dll + 2012-06-19 00:05 . 2012-05-15 02:14 77312 c:\windows\system32\iesetup.dll + 2012-06-19 00:05 . 2012-05-15 02:14 72192 c:\windows\system32\iernonce.dll - 2011-12-15 22:21 . 2011-11-03 06:49 72192 c:\windows\system32\iernonce.dll + 2012-06-19 00:05 . 2012-05-15 00:40 70656 c:\windows\system32\ie4uinit.exe - 2011-12-15 22:21 . 2011-11-03 05:11 70656 c:\windows\system32\ie4uinit.exe + 2012-02-15 16:01 . 2012-02-15 16:01 52736 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_8eb172ad\usbaapl64.sys + 2011-05-10 12:06 . 2011-05-10 12:06 22528 c:\windows\system32\DriverStore\FileRepository\netaapl64.inf_37ca2c1a\netaapl64.sys + 2012-02-15 16:01 . 2012-02-15 16:01 52736 c:\windows\system32\drivers\usbaapl64.sys + 2012-05-11 00:43 . 2012-03-20 23:34 72576 c:\windows\system32\drivers\partmgr.sys + 2011-05-10 12:06 . 2011-05-10 12:06 22528 c:\windows\system32\drivers\netaapl64.sys - 2008-01-21 02:51 . 2008-01-21 02:51 16384 c:\windows\system32\drivers\fs_rec.sys + 2012-04-11 07:05 . 2012-02-29 13:52 16384 c:\windows\system32\drivers\fs_rec.sys - 2011-07-12 15:34 . 2011-07-12 15:34 85864 c:\windows\system32\dnssd.dll + 2011-08-31 04:05 . 2011-08-31 04:05 85864 c:\windows\system32\dnssd.dll + 2011-08-31 04:05 . 2011-08-31 04:05 96104 c:\windows\system32\dns-sd.exe - 2011-07-12 15:34 . 2011-07-12 15:34 96104 c:\windows\system32\dns-sd.exe + 2008-10-21 12:06 . 2012-08-13 18:49 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-10-21 12:06 . 2011-12-29 14:41 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2012-08-13 18:49 . 2012-08-13 18:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-10-21 12:06 . 2011-12-29 14:41 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-10-21 12:06 . 2011-12-29 14:41 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2008-10-21 12:06 . 2012-08-13 18:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-11-04 18:14 . 2011-12-20 23:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-11-04 18:14 . 2012-08-11 20:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-11-04 18:14 . 2012-08-11 20:39 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-11-04 18:14 . 2011-12-20 23:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-01-11 21:48 . 2011-12-27 02:51 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe + 2012-01-11 21:48 . 2011-12-27 02:51 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2012-07-14 03:06 . 2012-07-14 03:06 22016 c:\windows\Installer\83d97fd.msi + 2012-08-11 19:22 . 2012-08-11 19:22 28672 c:\windows\Installer\2a3c7.msi + 2012-01-08 19:43 . 2012-01-08 19:43 19968 c:\windows\Installer\1b9ba8.msi + 2012-07-27 00:12 . 2012-07-27 00:12 21504 c:\windows\Installer\19705454.msi + 2012-05-11 21:39 . 2012-05-11 21:39 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe - 2011-12-16 08:15 . 2011-12-16 08:15 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2008-10-22 02:54 . 2011-12-16 08:14 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2008-10-22 02:54 . 2011-12-16 08:14 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2008-10-22 02:54 . 2012-07-12 12:39 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe - 2008-10-22 02:54 . 2011-12-16 08:14 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2012-05-11 21:54 . 2012-05-11 21:54 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe - 2011-12-16 08:15 . 2011-12-16 08:15 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe - 2010-06-04 22:03 . 2011-10-14 21:03 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll + 2010-06-04 22:03 . 2012-05-12 14:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll - 2008-10-21 12:35 . 2010-12-15 14:03 25214 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\MSWorks.exe + 2008-10-21 12:35 . 2012-04-11 07:09 25214 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\MSWorks.exe + 2012-02-21 02:28 . 2012-02-21 02:28 53608 c:\windows\Installer\$PatchCache$\Managed\057978BEDBCC3104FB5D20494DADB50D\2.1.7\pthreadVC2.dll + 2012-02-21 02:28 . 2012-02-21 02:28 23248 c:\windows\Installer\$PatchCache$\Managed\057978BEDBCC3104FB5D20494DADB50D\2.1.7\AppleVersions.dll + 2009-02-26 17:06 . 2009-02-26 17:06 16712 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.6612\PXBPROXY.DLL + 2009-02-26 17:06 . 2009-02-26 17:06 68488 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.6612\PXBCOM.EXE + 2009-02-26 17:09 . 2009-02-26 17:09 10120 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XLCALL32.DLL + 2009-02-26 22:43 . 2009-02-26 22:43 71520 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XL12CNVP.DLL + 2009-02-26 21:45 . 2009-02-26 21:45 20808 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\WRD12EXE.EXE + 2006-07-24 14:50 . 2006-07-24 14:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\VBAME.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 54104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SCANOST.EXE + 2011-07-20 10:28 . 2011-07-20 10:28 75624 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\RM.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 38248 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\RECALL.DLL + 2011-05-27 00:18 . 2011-05-27 00:18 52088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLVBA.DLL + 2009-02-26 16:09 . 2009-02-26 16:09 43352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLRPC.DLL + 2009-02-26 19:24 . 2009-02-26 19:24 71536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONFILTER.DLL + 2009-02-26 19:24 . 2009-02-26 19:24 97680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONENOTEM.EXE + 2006-07-24 14:50 . 2006-07-24 14:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSADDNDR.DLL + 2009-02-26 16:09 . 2009-02-26 16:09 20352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MLSHEXT.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 34208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\DUMPSTER.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 87408 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\DLGSETP.DLL + 2008-10-22 02:52 . 2008-10-22 02:52 35648 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLCTLPIA.DLL + 2006-10-27 00:13 . 2006-10-27 00:13 56192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECNFLT.EXE + 2009-02-26 22:43 . 2009-02-26 22:43 71520 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\XL12CNVP.DLL + 2009-02-26 21:45 . 2009-02-26 21:45 20808 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\WRD12EXE.EXE + 2009-02-26 17:06 . 2009-02-26 17:06 16712 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\PXBPROXY.DLL + 2009-02-26 17:06 . 2009-02-26 17:06 68488 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\PXBCOM.EXE - 2006-11-02 12:40 . 2011-07-14 23:02 86016 c:\windows\inf\infstor.dat + 2006-11-02 12:40 . 2012-03-10 17:20 86016 c:\windows\inf\infstor.dat + 2006-11-02 12:40 . 2012-08-05 16:24 51200 c:\windows\inf\infpub.dat - 2006-11-02 12:40 . 2011-07-14 23:02 51200 c:\windows\inf\infpub.dat + 2012-05-12 14:10 . 2012-05-12 14:10 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\026f4d4454607f5bbec73c593ab3a424\System.Windows.Presentation.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\45cea41d795fbfd7e085a8ad6671b7c8\System.Web.DynamicData.Design.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\c99a1202456cacd028ef4fbfe06e0b10\stdole.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\e63feb6efddcdf12daae60d590891049\PresentationFontCache.ni.exe + 2012-05-12 14:08 . 2012-05-12 14:08 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\9a6c5865c316af5d5c5126bb555c205d\PresentationCFFRasterizer.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\c10fc23b7ed1d3ff8fa87199afe2b0b9\Microsoft.VisualC.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 62464 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\d7d6d76032aff91ffe798dfd56e5ea23\ehiExtCOM.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 62976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtCOM\7775b2de4d10d1e92a7529d3843ecad5\ehExtCOM.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\e2e610c3777d0f7d404ac66225a24800\dfsvc.ni.exe + 2012-05-12 14:03 . 2012-05-12 14:03 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\b87e2b39f1a69c62790e8ddf2834059e\Accessibility.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\e9e57f91b04c53075c83a77892dd4e5e\WindowsLiveWriter.ni.exe + 2012-06-22 07:12 . 2012-06-22 07:12 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\b2428f7f9d90b7dca7f25f1a5381571e\WindowsLiveWriter.ni.exe + 2012-05-12 14:11 . 2012-05-12 14:11 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\984b00e04e9c45afb62e560b784f61c1\WindowsLive.Writer.Api.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\29d9bc858938fa4184fc07394cf50ace\WindowsLive.Writer.Api.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5fd0071c259b92078ced7cd752a14730\UIAutomationProvider.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\5f16ad1b918e728362ac0b0c45d565a1\System.Windows.Presentation.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a67c438b7d84874b002bbcf2bb31551d\System.Web.DynamicData.Design.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3e2877309499e4ab661dc95252da9e39\System.Web.DynamicData.Design.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\b3a6aed3f67ca5785385711cbf054016\System.ComponentModel.DataAnnotations.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\42ce9452c9f716b457088ac184472d59\System.AddIn.Contract.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b57a0cd0fae107256365e988c9fe3395\PresentationFontCache.ni.exe + 2012-05-12 14:11 . 2012-05-12 14:11 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\6e1aa62b07ad7a0f21448099927d3de2\PresentationCFFRasterizer.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 48640 c:\windows\assembly\NativeImages_v2.0.50727_32\PCDiag\a197e68fa713e39e0bd733d51a7acd8d\PCDiag.ni.exe + 2012-05-12 14:10 . 2012-05-12 14:10 48640 c:\windows\assembly\NativeImages_v2.0.50727_32\PCDiag\3bb2c84bd127f7b08fb4b6d6feb3ae07\PCDiag.ni.exe + 2012-05-12 14:13 . 2012-05-12 14:13 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\f35ea215449a9b2f3d1c281a83bf8db6\napcrypt.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\fb2cc92e2aa127fefa1672c78a5c6aaa\Microsoft.Vsa.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\be3c3ca8bfb03375bc89f799349b03f3\Microsoft.VisualC.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\68b8e8b34f49c3cf518afe015f658bf6\Microsoft.Build.Framework.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\5c46d310587bd60cdc5a1e6a3bcdef27\Microsoft.Build.Framework.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.PCDIAGLib\457364bbf663e1ba4d0c10cc8bb7164a\Interop.PCDIAGLib.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.BASICINFOLib\51821cb6ae4046a205704191714e46cf\Interop.BASICINFOLib.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 57856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\255a7647cad0ec58c01053d7bdddd928\ehiUserXp.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\005dde0bf145dbbd30b5e832feb956e9\dfsvc.ni.exe + 2012-06-22 07:12 . 2012-06-22 07:12 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.PCDIAGLib\9ee646c0a37285189ad7298e62e1cf64\AxInterop.PCDIAGLib.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.PCDIAGLib\7266f4d98e9c43014aa308c83804ebee\AxInterop.PCDIAGLib.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.BASICINFO#\d449d6df779e0f25486275a07fbc2c41\AxInterop.BASICINFOLib.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 22016 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.BASICINFO#\c358cd0c050af2e86d5ecced0615b57b\AxInterop.BASICINFOLib.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\1b337cf9a031145849bc48c11b2cfe58\Accessibility.ni.dll + 2012-03-29 21:12 . 2012-03-29 21:12 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll - 2009-06-24 14:26 . 2009-06-24 14:27 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2012-03-29 21:12 . 2012-03-29 21:12 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2012-03-29 21:12 . 2012-03-29 21:12 34696 c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll + 2012-04-11 07:05 . 2012-02-29 15:11 5120 c:\windows\SysWOW64\wmi.dll - 2006-11-02 12:12 . 2006-11-02 09:44 5120 c:\windows\SysWOW64\wmi.dll - 2008-01-21 02:51 . 2008-01-21 02:51 5632 c:\windows\system32\wmi.dll + 2012-04-11 07:05 . 2012-02-29 15:37 5632 c:\windows\system32\wmi.dll + 2009-01-10 03:00 . 2012-06-21 20:24 2350 c:\windows\system32\WDI\ERCQueuedResolutions.dat + 2012-08-13 21:05 . 2012-08-13 21:05 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-12-29 21:54 . 2011-12-29 21:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-08-13 21:05 . 2012-08-13 21:05 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-12-29 21:54 . 2011-12-29 21:54 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-05-11 00:44 . 2012-01-03 10:57 299280 c:\windows\SysWOW64\XPSViewer\XPSViewer.exe - 2010-04-14 12:31 . 2009-12-23 11:33 172032 c:\windows\SysWOW64\wintrust.dll + 2012-04-11 07:05 . 2012-02-29 15:11 172032 c:\windows\SysWOW64\wintrust.dll + 2012-01-11 21:49 . 2011-10-14 16:03 189952 c:\windows\SysWOW64\winmm.dll - 2009-09-18 13:34 . 2009-04-11 06:28 189952 c:\windows\SysWOW64\winmm.dll + 2012-06-19 00:05 . 2012-05-15 06:37 916992 c:\windows\SysWOW64\wininet.dll - 2011-12-15 22:21 . 2011-11-03 06:22 916992 c:\windows\SysWOW64\wininet.dll + 2012-01-29 18:57 . 2011-11-16 16:23 377344 c:\windows\SysWOW64\winhttp.dll - 2009-12-09 13:49 . 2009-08-24 11:36 377344 c:\windows\SysWOW64\winhttp.dll + 2012-06-19 00:05 . 2012-05-15 06:37 105984 c:\windows\SysWOW64\url.dll - 2011-12-15 22:21 . 2011-11-03 06:21 105984 c:\windows\SysWOW64\url.dll + 2012-03-14 12:02 . 2012-01-09 15:54 613376 c:\windows\SysWOW64\rdpencom.dll - 2009-09-18 13:34 . 2009-04-11 06:28 497152 c:\windows\SysWOW64\qdvd.dll + 2012-01-11 21:48 . 2011-10-25 15:58 497152 c:\windows\SysWOW64\qdvd.dll - 2011-12-15 22:21 . 2011-11-03 06:20 206848 c:\windows\SysWOW64\occache.dll + 2012-06-19 00:05 . 2012-05-15 06:35 206848 c:\windows\SysWOW64\occache.dll + 2012-02-16 22:08 . 2011-12-14 16:17 680448 c:\windows\SysWOW64\msvcrt.dll - 2011-12-15 22:21 . 2011-11-03 06:18 611840 c:\windows\SysWOW64\mstime.dll + 2012-06-19 00:05 . 2012-05-15 06:33 611840 c:\windows\SysWOW64\mstime.dll + 2012-06-19 00:05 . 2012-05-15 06:33 629760 c:\windows\SysWOW64\msfeeds.dll + 2012-08-03 01:09 . 2012-08-03 01:09 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_Plugin.exe + 2012-08-03 00:09 . 2012-08-03 00:09 686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.exe + 2012-08-03 00:09 . 2012-08-03 00:09 466632 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_270_ActiveX.dll + 2012-07-26 23:50 . 2012-08-03 01:09 250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe + 2012-08-13 02:12 . 2012-08-13 02:12 157488 c:\windows\SysWOW64\javaws.exe + 2012-08-13 02:12 . 2012-08-13 02:12 149296 c:\windows\SysWOW64\javaw.exe + 2012-08-13 02:12 . 2012-08-13 02:12 149296 c:\windows\SysWOW64\java.exe + 2012-04-11 07:05 . 2012-02-29 15:09 157696 c:\windows\SysWOW64\imagehlp.dll + 2012-06-19 00:05 . 2012-05-15 03:26 133632 c:\windows\SysWOW64\ieUnatt.exe - 2011-12-15 22:21 . 2011-11-03 04:45 133632 c:\windows\SysWOW64\ieUnatt.exe - 2011-12-15 22:21 . 2011-11-03 06:17 164352 c:\windows\SysWOW64\ieui.dll + 2012-06-19 00:05 . 2012-05-15 06:31 164352 c:\windows\SysWOW64\ieui.dll - 2011-12-15 22:21 . 2011-11-03 06:17 109056 c:\windows\SysWOW64\iesysprep.dll + 2012-06-19 00:05 . 2012-05-15 06:31 109056 c:\windows\SysWOW64\iesysprep.dll + 2012-06-19 00:05 . 2012-05-15 06:31 184320 c:\windows\SysWOW64\iepeers.dll - 2011-12-15 22:21 . 2011-11-03 06:17 184320 c:\windows\SysWOW64\iepeers.dll - 2011-12-15 22:21 . 2011-11-03 06:17 387584 c:\windows\SysWOW64\iedkcs32.dll + 2012-06-19 00:05 . 2012-05-15 06:31 387584 c:\windows\SysWOW64\iedkcs32.dll - 2011-12-15 22:21 . 2011-11-03 04:45 174080 c:\windows\SysWOW64\ie4uinit.exe + 2012-06-19 00:05 . 2012-05-15 03:25 174080 c:\windows\SysWOW64\ie4uinit.exe + 2011-08-31 04:05 . 2011-08-31 04:05 178536 c:\windows\SysWOW64\dnssdX.dll - 2011-07-12 15:20 . 2011-07-12 15:20 178536 c:\windows\SysWOW64\dnssdX.dll + 2012-07-11 20:28 . 2012-04-23 16:00 133120 c:\windows\SysWOW64\cryptsvc.dll + 2012-07-11 20:28 . 2012-04-23 16:00 984064 c:\windows\SysWOW64\crypt32.dll + 2009-07-14 22:01 . 2012-02-17 23:21 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2009-07-14 22:01 . 2011-04-15 13:06 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2008-01-21 03:20 . 2012-08-13 19:32 327680 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-11 07:05 . 2012-02-29 15:37 219136 c:\windows\system32\wintrust.dll - 2011-08-09 23:14 . 2011-06-17 16:16 451072 c:\windows\system32\winsrv.dll + 2012-01-11 21:49 . 2011-11-25 16:25 451072 c:\windows\system32\winsrv.dll - 2009-09-18 13:35 . 2009-04-11 07:11 211968 c:\windows\system32\winmm.dll + 2012-01-11 21:49 . 2011-10-14 17:31 211968 c:\windows\system32\winmm.dll - 2009-12-09 13:49 . 2009-08-24 11:47 442368 c:\windows\system32\winhttp.dll + 2012-01-29 18:57 . 2011-11-16 16:43 442368 c:\windows\system32\winhttp.dll + 2008-10-22 15:15 . 2012-08-13 05:59 222342 c:\windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2012-06-19 00:05 . 2012-05-15 02:19 108032 c:\windows\system32\url.dll - 2011-12-15 22:21 . 2011-11-03 06:54 108032 c:\windows\system32\url.dll + 2008-10-21 12:39 . 2009-02-27 07:42 863128 c:\windows\system32\spool\drivers\x64\msonpdrv.dll + 2012-03-14 12:02 . 2012-01-09 16:16 708096 c:\windows\system32\rdpencom.dll + 2012-01-11 21:48 . 2011-10-25 16:13 352256 c:\windows\system32\qdvd.dll - 2009-09-18 13:34 . 2009-04-11 07:11 352256 c:\windows\system32\qdvd.dll - 2006-11-02 12:46 . 2011-12-03 19:05 603282 c:\windows\system32\perfh009.dat + 2006-11-02 12:46 . 2012-08-13 19:22 603282 c:\windows\system32\perfh009.dat - 2006-11-02 12:46 . 2011-12-03 19:05 106696 c:\windows\system32\perfc009.dat + 2006-11-02 12:46 . 2012-08-13 19:22 106696 c:\windows\system32\perfc009.dat + 2012-06-19 00:05 . 2012-05-15 02:18 243712 c:\windows\system32\occache.dll - 2011-12-15 22:21 . 2011-11-03 06:53 243712 c:\windows\system32\occache.dll + 2012-02-16 22:08 . 2011-12-14 16:38 621056 c:\windows\system32\msvcrt.dll - 2009-09-18 13:36 . 2009-04-11 07:11 621056 c:\windows\system32\msvcrt.dll + 2012-06-19 00:05 . 2012-05-15 02:15 742912 c:\windows\system32\msfeeds.dll + 2012-08-03 01:09 . 2012-08-03 01:09 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_Plugin.exe + 2012-08-03 00:09 . 2012-08-03 00:09 417992 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_ActiveX.exe + 2012-08-03 00:09 . 2012-08-03 00:09 513224 c:\windows\system32\Macromed\Flash\FlashUtil64_11_3_300_270_ActiveX.dll - 2011-12-15 22:21 . 2011-11-03 05:11 162816 c:\windows\system32\ieUnatt.exe + 2012-06-19 00:05 . 2012-05-15 00:40 162816 c:\windows\system32\ieUnatt.exe - 2011-12-15 22:21 . 2011-11-03 06:49 219136 c:\windows\system32\ieui.dll + 2012-06-19 00:05 . 2012-05-15 02:14 219136 c:\windows\system32\ieui.dll - 2011-12-15 22:21 . 2011-11-03 06:49 132096 c:\windows\system32\iesysprep.dll + 2012-06-19 00:05 . 2012-05-15 02:14 132096 c:\windows\system32\iesysprep.dll - 2011-12-15 22:21 . 2011-11-03 06:49 252416 c:\windows\system32\iepeers.dll + 2012-06-19 00:05 . 2012-05-15 02:14 252416 c:\windows\system32\iepeers.dll - 2011-12-15 22:21 . 2011-11-03 06:49 459776 c:\windows\system32\iedkcs32.dll + 2012-06-19 00:05 . 2012-05-15 02:14 459776 c:\windows\system32\iedkcs32.dll - 2006-11-02 15:21 . 2011-12-16 08:33 412088 c:\windows\system32\FNTCACHE.DAT + 2006-11-02 15:21 . 2012-07-12 12:43 412088 c:\windows\system32\FNTCACHE.DAT - 2009-09-18 13:34 . 2009-04-11 05:48 209920 c:\windows\system32\drivers\rdpwd.sys + 2012-06-19 00:06 . 2012-05-01 14:29 209920 c:\windows\system32\drivers\rdpwd.sys + 2012-02-16 22:08 . 2012-01-03 14:25 404992 c:\windows\system32\drivers\afd.sys + 2011-08-31 04:05 . 2011-08-31 04:05 212840 c:\windows\system32\dnssdX.dll - 2011-07-12 15:34 . 2011-07-12 15:34 212840 c:\windows\system32\dnssdX.dll + 2012-07-11 20:28 . 2012-04-23 16:25 174592 c:\windows\system32\cryptsvc.dll + 2012-07-11 20:28 . 2012-04-23 16:25 132096 c:\windows\system32\cryptnet.dll - 2009-06-25 13:37 . 2011-06-13 00:49 245760 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-06-25 13:37 . 2012-08-08 00:48 245760 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2012-05-11 00:43 . 2012-02-13 11:02 171808 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll + 2012-01-11 21:48 . 2011-12-27 02:51 744720 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll + 2012-06-19 00:05 . 2012-04-23 11:01 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-05-11 00:43 . 2012-01-03 10:57 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll + 2012-05-11 00:43 . 2012-02-13 11:02 130848 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2012-01-11 21:48 . 2011-12-27 02:51 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2012-06-19 00:05 . 2012-04-23 11:01 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-05-11 00:43 . 2012-01-03 10:58 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2012-05-11 00:43 . 2012-01-03 10:57 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll + 2012-05-11 00:43 . 2012-01-03 10:57 989968 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2012-06-18 23:52 . 2012-06-18 23:52 552448 c:\windows\Installer\db0764.msi + 2011-12-22 21:01 . 2011-12-22 21:01 380416 c:\windows\Installer\8c92d.msp + 2012-08-13 02:11 . 2012-08-13 02:11 900608 c:\windows\Installer\7b4b7.msi + 2012-03-29 21:08 . 2012-03-29 21:08 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe - 2009-06-24 14:22 . 2009-06-24 14:22 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe + 2008-10-22 02:54 . 2012-07-12 12:39 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2008-10-22 02:54 . 2011-12-16 08:14 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2008-10-22 02:54 . 2011-12-16 08:14 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2008-10-22 02:54 . 2011-12-16 08:14 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2008-10-22 02:54 . 2012-07-12 12:39 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2008-10-22 02:54 . 2012-07-12 12:39 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2008-10-22 02:54 . 2011-12-16 08:14 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2008-10-22 02:54 . 2011-12-16 08:14 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2008-10-22 02:54 . 2011-12-16 08:14 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2008-10-22 02:54 . 2011-12-16 08:14 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2008-10-22 02:54 . 2012-07-12 12:39 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2012-02-18 03:54 . 2012-02-18 03:54 380928 c:\windows\Installer\{5E11C972-1E76-45FE-8F92-14E0D1140B1B}\iTunesIco.exe + 2008-10-21 12:35 . 2012-04-11 07:09 693600 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksWP.exe - 2008-10-21 12:35 . 2010-12-15 14:03 693600 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksWP.exe + 2008-10-21 12:35 . 2012-04-11 07:09 947552 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\wksss.exe - 2008-10-21 12:35 . 2010-12-15 14:03 947552 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\wksss.exe + 2008-10-21 12:35 . 2012-04-11 07:10 709984 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksCal.exe - 2008-10-21 12:35 . 2010-12-15 14:03 709984 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksCal.exe + 2012-02-15 16:02 . 2012-02-15 16:02 236904 c:\windows\Installer\$PatchCache$\Managed\A977DA8BAD2856347A0DDAD3FC5CC5FF\5.1.1\OutlookChangeNotifierAddIn_x64.dll + 2012-02-15 16:02 . 2012-02-15 16:02 227176 c:\windows\Installer\$PatchCache$\Managed\A977DA8BAD2856347A0DDAD3FC5CC5FF\5.1.1\OutlookChangeNotifierAddIn.dll + 2011-01-14 12:10 . 2011-01-14 12:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL + 2011-01-14 12:10 . 2011-01-14 12:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL + 2011-09-16 00:41 . 2011-09-16 00:41 408936 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\WINWORD.EXE + 2007-06-07 23:51 . 2007-06-07 23:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SSGEN.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 282032 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SCNPST64.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 273832 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SCNPST32.DLL + 2011-07-27 08:55 . 2011-07-27 08:55 410992 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\RTFHTML.DLL + 2011-07-20 11:06 . 2011-07-20 11:06 770480 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\REGFORM.EXE + 2011-07-20 10:28 . 2011-07-20 10:28 421736 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\PSTPRX32.DLL + 2011-05-31 20:15 . 2011-05-31 20:15 177040 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLPH.DLL + 2011-07-27 08:55 . 2011-07-27 08:55 596888 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLMIME.DLL + 2007-06-07 23:51 . 2007-06-07 23:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLFLTR.DLL + 2011-05-27 00:18 . 2011-05-27 00:18 136536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLCTL.DLL + 2011-07-27 10:03 . 2011-07-27 10:03 194448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OMSXP32.DLL + 2011-07-27 10:03 . 2011-07-27 10:03 661888 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OMSMAIN.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 253824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OLKFSTUB.DLL + 2008-03-19 10:27 . 2008-03-19 10:27 661536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OGALEGIT.DLL + 2006-07-24 14:50 . 2006-07-24 14:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSSTDFMT.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 340320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MIMEDIR.DLL + 2012-03-29 21:12 . 2012-03-29 21:12 117160 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IPOMINT.DLL + 2011-07-20 11:06 . 2011-07-20 11:06 176024 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IPOLK.DLL + 2011-07-20 10:28 . 2011-07-20 10:28 138088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IMPMAIL.DLL + 2008-10-25 10:18 . 2008-10-25 10:18 172880 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IEAWSDC.DLL + 2009-02-26 16:09 . 2009-02-26 16:09 154000 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ENVELOPE.DLL + 2011-05-27 00:18 . 2011-05-27 00:18 115584 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\EMABLT32.DLL + 2011-07-27 08:55 . 2011-07-27 08:55 128376 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\CONTAB32.DLL + 2006-10-27 19:35 . 2006-10-27 19:35 436512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\UMOUTLOOKADDIN.DLL + 2006-10-27 00:13 . 2006-10-27 00:13 764800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECNF.DLL + 2009-02-26 21:45 . 2009-02-26 21:45 509256 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\WRD12CVR.DLL - 2006-11-02 12:40 . 2011-07-14 23:02 143360 c:\windows\inf\infstrng.dat + 2006-11-02 12:40 . 2012-08-05 16:24 143360 c:\windows\inf\infstrng.dat + 2012-01-11 21:48 . 2011-11-01 16:35 196096 c:\windows\ehome\mstvcapn.dll + 2012-05-12 14:10 . 2012-05-12 14:10 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\1dfd1601fc59732f597caa79c910b655\WsatConfig.ni.exe + 2012-06-22 07:11 . 2012-06-22 07:11 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\80961515d3044ea901548167c32a5098\WindowsFormsIntegration.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 257024 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\d94ac496c39cc91368bbb3984a908b83\UIAutomationTypes.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 120320 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\b3cbed2453a8af62361c757e0d1a73ce\UIAutomationProvider.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 648704 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\30bb94fb15928ff1f73f37b656d55b62\UIAutomationClient.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 290304 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\3b418c7263e7bee8431e453c3d656213\TaskScheduler.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\2f7c7743ab72df5f6fe641cae4793b7b\System.Xml.Linq.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\7ed738c9e6e9fd019aefaac8f56c8369\System.Web.Routing.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\b43b3f2c6f87011a735ed829c9773f24\System.Web.RegularExpressions.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 449536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\00a0903af7c1c11be3cca7a98cb6ce18\System.Web.Entity.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\51ee514bc742cadcb78b85f0380db9df\System.Web.Entity.Design.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 754176 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\c2380ec5280efd702bfe2e25715d3c11\System.Web.DynamicData.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\2ed431cbe077cfcd288ecda76d4b96a0\System.Web.Abstractions.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 921088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\267e5fe3890005d11e96c274ec55a15c\System.Transactions.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\3684a5e85850ee745803ade3c6280f2d\System.ServiceProcess.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 929280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\1d6c1d98b1f53fbdb88252f011fe7e48\System.Security.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\0ccb8a5f9976a191dba0e75611170897\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 911872 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\8119cb6f78d6507676d644eae3848091\System.Net.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 782848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\f16066c5217b2bae461d1c3a36b6675a\System.Messaging.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\ccf8dd119ec158849c9d96ff955fa8bf\System.Management.Instrumentation.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 568832 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\50f935f4305692befe1f9ed3c8902f8c\System.IO.Log.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\98d5f2320cc8528a725761abce4a120e\System.IdentityModel.Selectors.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\aabb7eec932c72fa1d16815aa13f9cf7\System.EnterpriseServices.Wrapper.dll + 2012-06-22 07:05 . 2012-06-22 07:05 289280 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\bf139e01549b7cab9fab5bf9da914194\System.Drawing.Design.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 650240 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\74bee37eb83309e9a7f69168849b7720\System.DirectoryServices.Protocols.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 489472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\88b00cf0504accdeb888330221130a3e\System.Data.Services.Design.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\72e4a128dfa02af87a1b32215fa8b3c8\System.Data.DataSetExtensions.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 191488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\db0f34ab899b5e51777ea30d2aa41133\System.Configuration.Install.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 191488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\576f9dcaf73e3e48cb4bd57f88e44c33\System.Configuration.Install.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\b2dfb2995a587f1d3bc34d0c4a464f42\System.ComponentModel.DataAnnotations.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 890880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\54286dc52eb195e50f8d40061eae66d6\System.AddIn.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\2be06784be3f17710874c2544995a7d8\System.AddIn.Contract.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\371cc1adc0c179ab5ba0f06eb3884f67\sysglobl.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\8a529364ae4d72a09eb56c34f47c2d08\SMSvcHost.ni.exe + 2012-05-12 14:05 . 2012-05-12 14:05 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\5b48c5bfd97152c756fe2b1aa924928a\SMDiagnostics.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 438784 c:\windows\assembly\NativeImages_v2.0.50727_64\ServiceModelReg\df6534d3ecfaff14cb43409b9beef0e4\ServiceModelReg.ni.exe + 2012-05-12 13:59 . 2012-05-12 13:59 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\eb7c1f89fb2cb50a231080178038ef9e\PresentationFramework.Luna.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\de5ad28d2c21c33ab89eb2617a4502de\PresentationFramework.Aero.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\61f7ece0284fd50f0af280240a540996\PresentationFramework.Royale.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\3c151dcfc69e7e16a34ba1f81ca21175\PresentationFramework.Classic.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 852992 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\e9bd06b6e8d13de7688a7b8d9caae4be\napsnap.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 154112 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\d18aaabc1ed8e516fd6e15673ced499f\napinit.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 177152 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\dd6bc176f75dbf6b31cd725b9b659a22\naphlpr.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 126464 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\0b6fc10b5def29aff634cbc7346b699f\napcrypt.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\87f1ad3c3272a9933ee5d27eb1905d9a\MSBuild.ni.exe + 2012-06-22 07:09 . 2012-06-22 07:09 414720 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\d5f4f13114a618bff85ea70be9060c28\MMCFxCommon.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\b398bc7fbfb0506c47514856fefe2356\Microsoft.Vsa.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\830078e6d4e439b6cc7db359998bde32\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 946688 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ee2e10c10b4c2815e00e4d2cfdf491f8\Microsoft.MediaCenter.Sports.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 922624 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\88d5e48bd420abda27a8022ba3c6010a\Microsoft.MediaCenter.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\83c67531065ea33227c44ac0670ba22d\Microsoft.MediaCenter.Shell.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 794624 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\a4de1bbf800bcc9e700b80d51f26f91e\Microsoft.ManagementConsole.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\fa10a95ac846a6ffebf5db370d5df049\Microsoft.Build.Utilities.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 228864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\2515216970ed4ad43a748a43d9240105\Microsoft.Build.Utilities.v3.5.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\bb1ab6aaab50e4bbaa9d7de74226c469\Microsoft.Build.Framework.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\87af0a413e2fd0e293b6df8702c8b91d\Microsoft.Build.Framework.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\fb127beea8240028aaca7b0ded96881d\Microsoft.Build.Conversion.v3.5.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\525a5467202db4375966e6980fcbb202\Mcx2Dvcs.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 372224 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\a202fb59d72fae4899d8ea5ed3403452\mcupdate.ni.exe + 2012-05-12 14:06 . 2012-05-12 14:06 337920 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\c40487ec9875c6466bc74ec025e064f3\mcstoredb.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 882176 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\12f5d78aef3c7f0754c38915af7051d0\mcstore.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 108032 c:\windows\assembly\NativeImages_v2.0.50727_64\loadmxf\9804d3da72069bf0e01bd2c068920c45\loadmxf.ni.exe + 2012-06-22 07:09 . 2012-06-22 07:09 645120 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\cbaec0147fffacc1c80d7b03a74a7f9f\EventViewer.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\a138210d6477488bb84ca2efd2ff703d\ehiWUapi.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 927232 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\d939416dafca579cee4485849435fcf4\ehiwmp.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 138752 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\14640be0bdac94332d67083c2d181f55\ehiUserXp.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 151040 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiReplay\3131565b4f987f0c81a0ab269174b3f9\ehiReplay.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\15b42b0237d752f6fbae1060b3edeab4\ehiExtens.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 368640 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\d323c5eeb3881e4b64b2e77c54748348\ehExtHost.ni.exe + 2012-05-12 14:06 . 2012-05-12 14:06 409600 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepgdat\6febb13982fd951458499e27cc884b23\ehepgdat.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\ef300f1cd7026f2bb6782ea7d5b7c715\ehCIR.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\c138d5b075ddd3ae072d3d6ffb395754\CustomMarshalers.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\9cbb0f22ea6915f13c77bfafd90a0cba\ComSvcConfig.ni.exe + 2012-05-12 14:03 . 2012-05-12 14:03 568320 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\c94386cb50a62e0fbc8122355d10a7df\BDATunePIA.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\fbf74afe74e81261415b050305c2a870\WsatConfig.ni.exe + 2012-06-22 07:12 . 2012-06-22 07:12 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\e1cf632afd986630657a20df7f96b332\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\46ba08c91c1a9ea3a03a55a14b44956f\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fe17ecb3684be8d0b0b5fd16a06142a7\WindowsLive.Writer.Extensibility.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f4df35b4f3093e8ea4467dcb99bfefb3\WindowsLive.Writer.FileDestinations.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d6f062b6875ee5f00a7df07912c1f165\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d2a98583170deeffb94505136536d52e\WindowsLive.Writer.FileDestinations.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ce1df91a77db05b103ec1af6e9267509\WindowsLive.Writer.Localization.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bf364f82ccf62b1c070c8e041e6b222c\WindowsLive.Writer.Passport.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bd5bbb029fe6bc10c2b30de08e84af73\WindowsLive.Writer.Extensibility.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bbe27df04b1c8d54fe833418bd2665d4\WindowsLive.Writer.Controls.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8f2ab0b5f709c05fdcd969af6206861b\WindowsLive.Writer.Controls.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\88e08cc53c0689d5ed39f84ec8eb0f95\WindowsLive.Writer.Localization.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\87935c073db17c510eee54b445bf6073\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\82d4cd08dd4a53c59e6253f458bca327\WindowsLive.Writer.Interop.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\77128c28fc470d690f5c4cafa7886c1a\WindowsLive.Writer.SpellChecker.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6f6f8dca2505ebdbfa08bd2610755258\WindowsLive.Writer.SpellChecker.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\63736fdf4c4a22e34464504bdfce8a0a\WindowsLive.Writer.HtmlParser.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5d15f1d3d5d3b00663454ba8c85d2844\WindowsLive.Writer.Mshtml.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4785b6bead7e0fbd711496fe01bfee3f\WindowsLive.Writer.BlogClient.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\40e336baa553ee14581997ba0ce6816c\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\409bbf251d15df51e26f46a99d3b1f99\WindowsLive.Writer.Interop.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2977619a4a3c1edbe2f4472d2eb5fce2\WindowsLive.Writer.Mshtml.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\293fc576a13e08f5a8feea8b7549ccf8\WindowsLive.Writer.BlogClient.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\28e70b9566a8572547a1c644a2e66100\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\281cbd2529a8ff2e6ef28194581ea220\WindowsLive.Writer.BrowserControl.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2126a5a1a41702c2ad1a65ab4b7b35bf\WindowsLive.Writer.Instrumentation.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\09740d7a858e319a748b8185c72390b8\WindowsLive.Writer.BrowserControl.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\00852b8db69b2088e73d13b1da00162d\WindowsLive.Writer.Passport.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\19cf4a0d43b01189122125f052100243\WindowsLive.Client.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\161da7a1b7e457bc076366d9d0ddb6f4\WindowsLive.Client.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\be701ce708835e0162cb863d3a4eeb49\WindowsFormsIntegration.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\9104e78d8897df008eed3a2af3bda6a2\WindowsFormsIntegration.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\5ebaa15cccc356bc3afba0c8f56977f7\UIAutomationTypes.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\2250edc2c1512efa1c5788b787c93420\UIAutomationClient.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\dff98b9115ba5b0f796550c3604f3ac2\TaskScheduler.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\aaccc6d20e77e0f082e5af55a18079b8\TaskScheduler.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\936264838e338a08efce97deafe36f7a\System.Xml.Linq.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e7fd7f9f834a4d1109ddae84b1ea2823\System.Web.Routing.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\4d73bbe950309d7589e392c07e767981\System.Web.Routing.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\2b12e6b3c3c29fdcfd7675deb0286c51\System.Web.RegularExpressions.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c86e342ac46f4629a6db0616467880b5\System.Web.Extensions.Design.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c1a4d33fc32145339a8d6ecce8814a82\System.Web.Extensions.Design.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\f8313d1191728d85c9a2c28995421886\System.Web.Entity.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\855d5386fdc37c2ad61ffaa2926eedd4\System.Web.Entity.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\c332e16f64df41792d0cc94eff9a40cc\System.Web.Entity.Design.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\7b20cca4d5d57849928e2082c0dd7f63\System.Web.Entity.Design.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4cde6d0d5393e6e10ca5b56d88e6dd53\System.Web.DynamicData.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3acd7d1f09834f8ad2b6f7c97f12d275\System.Web.DynamicData.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6308ea7dcc6abd9aea29b448a03f0af3\System.Web.Abstractions.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\62c2cc065485dfd1b2f04935a9fd401c\System.Web.Abstractions.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\b6d83a652c94b32fc8f99a6df0acd7f4\System.Transactions.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\675632907c226b0c67a2407f2ddd4bf7\System.ServiceProcess.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\442135bc0b503b42ab2d752c23bea631\System.Security.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1ee6b56dc9985fbbdeb373b611ac4fb3\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\460a4c1c8337fc65fbeaf1eeda9400c1\System.Net.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\d93c05ef66a875441065ccce2a399577\System.Messaging.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\8ad39a1c48ba36b5210abe02ef03bc2a\System.Messaging.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\f3d4d5fe5ab848fbfcf91a49960dc8ae\System.Management.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\6f5e63b23d01ec96cc9cb8b1a5655abe\System.Management.Instrumentation.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\998dfe1266cf798e1ff574eb7fd2bfa8\System.IO.Log.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\75df548d77c2833a48c5da51424c93f1\System.IdentityModel.Selectors.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.Wrapper.dll + 2012-05-12 14:11 . 2012-05-12 14:11 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\4b5eaa70d2900b98ccf6fd9915f34d69\System.EnterpriseServices.ni.dll + 2012-06-22 07:07 . 2012-06-22 07:07 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\86d95330e670761c503f6f2e8cbe66b9\System.Drawing.Design.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\11dd8eecb9bcf7bcc550c50d68555588\System.Drawing.Design.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\99e4eb6fb13794d1a0b10e4f2b14d106\System.DirectoryServices.Protocols.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\0b62909f7dc195c5f96c8875ab9b9f09\System.DirectoryServices.AccountManagement.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bf32b9ca9f975a29297358d1ef962ffb\System.Data.Services.Client.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\320987c596593cc063273f8267e4dcc7\System.Data.Services.Design.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\a116f0efda5f51473aa18fd33bee2825\System.Data.Entity.Design.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\66eb4c36bd74adfb7000e3e7a02c688e\System.Data.DataSetExtensions.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f55611b6eee35375eaaf903f302e8a14\System.Configuration.Install.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\559eb472944e19bca4d034eda4bdfcb7\System.Configuration.Install.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\c73cd75550f72b34b3df79c02bfa1d53\System.AddIn.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\4440dde36b8d3ba20512beb05505451b\sysglobl.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\5d10dacced9bb34b5e0e6e0bdd0f7631\SMSvcHost.ni.exe + 2012-05-12 14:12 . 2012-05-12 14:12 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\521fb04fdfbb0039a34cc91111d11804\SMDiagnostics.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\90ee142ef8d567092c7afdf3c79c814b\ServiceModelReg.ni.exe + 2012-05-12 14:02 . 2012-05-12 14:02 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d81872939252c65b6f1127f331b84de0\PresentationFramework.Classic.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c8c3ab08933fef9fb6657da871395c46\PresentationFramework.Aero.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bbfbadb527a3ce339eef5f304a12f0c7\PresentationFramework.Luna.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\00112c66cb7cb4c8f8a284320a2fa2b1\PresentationFramework.Royale.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\3789569ab449cde6bea0dd89373cce05\napsnap.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\2840f96c0590375ed722b20354bcd554\napsnap.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\e1de44dda528f5126f251f146f30487a\napinit.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\cf7902ffe05aa8aa1781960b1f98daa9\napinit.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\fafb8f5ecc491637dd61c7efd321a68a\naphlpr.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\a81c612b82d52f37f2f1115ea8f297fe\MSBuild.ni.exe + 2012-05-12 14:12 . 2012-05-12 14:12 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\e8aacd74110db73e98fb9f66dd87a0cd\MMCFxCommon.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\9621076f8f44240e769dd03177d0c47f\MMCFxCommon.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\2561c194ae93e7d81c1921d7f8bc4d9d\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 582656 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\9e40e3ea2053c58e249156af788ba953\Microsoft.MediaCenter.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 582656 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\3b7a6b764dcd86499704a114f51e6084\Microsoft.MediaCenter.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\ef6a66d52d531be206ac416483aed2b8\Microsoft.ManagementConsole.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\7e0bd3eec312b342c4c1b718bb1ba0ae\Microsoft.ManagementConsole.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d95a01efdfbaa8e5a67b42cc7de9b389\Microsoft.Build.Utilities.v3.5.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\66b5642e7fb6c41c7c9f320c39cc04ad\Microsoft.Build.Utilities.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c424f04095959cd8a5c03f2904cbd698\Microsoft.Build.Engine.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\738fdb51771784d72225dd6a7aac40d5\Microsoft.Build.Conversion.v3.5.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\81fff530629c9ff044083998fc608618\EventViewer.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\11804905535690869865532b52f0454a\EventViewer.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\07d99efbb39707d01236f56cb1299524\ehiExtens.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\49c3d4209e4baf91fde49044420d566b\ehExtHost32.ni.exe + 2012-05-12 14:12 . 2012-05-12 14:12 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\28418952b9dde2b7dbe045e4a4bf0c5e\ehExtHost32.ni.exe + 2012-05-12 14:12 . 2012-05-12 14:12 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\8455a2be044530a091b714f5a6415d6b\CustomMarshalers.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\b434a5d366e71df6c19d51bfab284ed8\ComSvcConfig.ni.exe + 2012-06-19 00:05 . 2012-04-23 11:01 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2009-06-24 14:45 . 2009-06-24 14:45 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll + 2012-05-11 21:53 . 2012-05-11 21:53 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll - 2009-09-18 13:36 . 2009-02-18 18:39 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-05-11 00:43 . 2012-02-13 11:02 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2012-03-29 21:12 . 2012-03-29 21:12 608136 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll - 2009-09-18 13:36 . 2009-02-18 18:40 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-05-11 00:43 . 2012-02-13 11:02 357376 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll - 2009-09-18 13:36 . 2009-02-18 18:39 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-05-11 00:43 . 2012-02-13 11:02 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-07-12 02:04 . 2012-07-12 02:04 117160 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll + 2012-03-29 21:12 . 2012-03-29 21:12 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll - 2009-06-24 14:27 . 2009-06-24 14:27 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll + 2012-03-29 21:12 . 2012-03-29 21:12 149368 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll + 2012-06-19 00:05 . 2012-05-15 06:37 1212416 c:\windows\SysWOW64\urlmon.dll - 2011-12-15 22:21 . 2011-11-03 06:21 1212416 c:\windows\SysWOW64\urlmon.dll - 2010-02-10 13:01 . 2009-12-04 18:29 1314816 c:\windows\SysWOW64\quartz.dll + 2012-01-11 21:48 . 2011-10-25 15:58 1314816 c:\windows\SysWOW64\quartz.dll + 2012-01-11 21:49 . 2011-11-18 20:55 1167984 c:\windows\SysWOW64\ntdll.dll + 2012-06-19 00:05 . 2012-05-15 06:33 6007808 c:\windows\SysWOW64\mshtml.dll + 2012-08-03 01:09 . 2012-08-03 01:09 9465032 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll + 2012-08-03 01:09 . 2012-08-03 01:09 1536712 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_270.exe + 2012-06-19 00:05 . 2012-05-15 06:31 2000384 c:\windows\SysWOW64\iertutil.dll - 2011-12-15 22:21 . 2011-11-03 06:17 2000384 c:\windows\SysWOW64\iertutil.dll + 2011-07-07 06:28 . 2011-07-07 06:28 1193320 c:\windows\SysWOW64\FM20.DLL + 2008-01-21 03:20 . 2012-08-13 19:32 1638400 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2011-12-15 22:21 . 2011-11-03 06:55 1147392 c:\windows\system32\wininet.dll + 2012-06-19 00:05 . 2012-05-15 02:19 1147392 c:\windows\system32\wininet.dll + 2011-04-08 18:59 . 2011-04-08 18:59 1721576 c:\windows\system32\wdfcoinstaller01009.dll + 2012-02-15 16:01 . 2012-02-15 16:01 4547944 c:\windows\system32\usbaaplrc.dll - 2011-12-15 22:21 . 2011-11-03 06:55 1488384 c:\windows\system32\urlmon.dll + 2012-06-19 00:05 . 2012-05-15 02:19 1488384 c:\windows\system32\urlmon.dll - 2008-01-21 02:52 . 2008-01-21 02:52 1500672 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll + 2012-05-11 00:43 . 2012-02-01 15:30 1500672 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll + 2012-01-11 21:48 . 2011-10-25 16:13 1570816 c:\windows\system32\quartz.dll - 2010-02-10 13:01 . 2009-12-04 18:51 1570816 c:\windows\system32\quartz.dll + 2012-05-11 00:43 . 2012-04-03 08:22 4699520 c:\windows\system32\ntoskrnl.exe + 2012-01-11 21:49 . 2011-11-18 20:55 1585152 c:\windows\system32\ntdll.dll - 2011-12-15 22:21 . 2011-11-03 06:51 1062912 c:\windows\system32\mstime.dll + 2012-06-19 00:05 . 2012-05-15 02:16 1062912 c:\windows\system32\mstime.dll + 2012-06-19 00:05 . 2012-05-15 02:15 9328640 c:\windows\system32\mshtml.dll + 2012-01-29 18:57 . 2011-11-16 16:41 1689600 c:\windows\system32\lsasrv.dll - 2009-08-18 06:42 . 2009-06-15 15:11 1689600 c:\windows\system32\lsasrv.dll - 2011-12-15 22:21 . 2011-11-03 06:49 2350592 c:\windows\system32\iertutil.dll + 2012-06-19 00:05 . 2012-05-15 02:14 2350592 c:\windows\system32\iertutil.dll + 2012-02-15 16:01 . 2012-02-15 16:01 4547944 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_8eb172ad\usbaaplrc.dll + 2011-04-08 18:59 . 2011-04-08 18:59 1721576 c:\windows\system32\DriverStore\FileRepository\netaapl64.inf_37ca2c1a\wdfcoinstaller01009.dll + 2012-05-11 00:44 . 2012-03-30 12:45 1423744 c:\windows\system32\drivers\tcpip.sys + 2012-07-11 20:28 . 2012-04-23 16:25 1267200 c:\windows\system32\crypt32.dll - 2008-10-22 01:43 . 2011-12-29 21:15 2600616 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2008-10-22 01:43 . 2012-08-13 21:03 2600616 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2012-05-11 00:43 . 2012-02-13 11:02 2255128 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2011-07-01 19:13 . 2011-03-29 10:52 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2012-01-11 21:48 . 2011-12-27 02:51 5259264 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll + 2012-05-11 00:43 . 2012-01-03 10:57 3186688 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll - 2009-09-18 13:37 . 2009-03-30 04:39 5062656 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5062656 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-05-11 00:43 . 2012-01-03 10:56 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll - 2011-10-13 21:47 . 2011-07-08 11:52 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll + 2012-05-11 00:43 . 2012-01-03 10:56 1577744 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll + 2012-05-11 00:43 . 2012-01-03 10:56 1765648 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll + 2012-05-11 00:43 . 2012-02-13 11:02 1736984 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2011-07-01 19:13 . 2011-03-29 10:53 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-01-11 21:48 . 2011-12-27 02:51 5251072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll + 2012-05-11 00:43 . 2012-01-03 10:58 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll - 2009-09-18 13:37 . 2009-03-30 04:42 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll + 2012-05-11 00:43 . 2012-01-03 10:57 5913872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - 2011-10-13 21:47 . 2011-07-08 11:53 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2012-05-11 00:43 . 2012-01-03 10:57 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll + 2012-03-27 04:28 . 2012-03-27 04:28 5009920 c:\windows\Installer\cedd5fa.msp + 2012-02-22 19:17 . 2012-02-22 19:17 2221568 c:\windows\Installer\cedd5e4.msp + 2012-03-23 18:59 . 2012-03-23 18:59 7899648 c:\windows\Installer\cedd5d5.msp + 2011-11-01 17:34 . 2011-11-01 17:34 1169920 c:\windows\Installer\cedd5be.msp + 2012-02-03 20:13 . 2012-02-03 20:13 4988928 c:\windows\Installer\bebe9.msp + 2012-03-10 17:20 . 2012-03-10 17:20 2189312 c:\windows\Installer\b0ff405.msi + 2012-03-10 17:17 . 2012-03-10 17:17 1530368 c:\windows\Installer\b0ff399.msi + 2012-04-05 02:38 . 2012-04-05 02:38 2831360 c:\windows\Installer\8c94d.msp + 2012-04-29 01:44 . 2012-04-29 01:44 9101824 c:\windows\Installer\8c944.msp + 2012-04-29 01:44 . 2012-04-29 01:44 9586176 c:\windows\Installer\8c924.msp + 2012-04-30 18:38 . 2012-04-30 18:38 5011456 c:\windows\Installer\8c90c.msp + 2012-04-05 02:38 . 2012-04-05 02:38 3620864 c:\windows\Installer\8c8d9.msp + 2012-03-15 06:24 . 2012-03-15 06:24 1795584 c:\windows\Installer\8c8d0.msp + 2012-04-29 01:43 . 2012-04-29 01:43 8459264 c:\windows\Installer\8c8a4.msp + 2012-02-17 12:45 . 2012-02-17 12:45 2299392 c:\windows\Installer\8c89b.msp + 2011-09-15 22:40 . 2011-09-15 22:40 7959552 c:\windows\Installer\6309e.msp + 2011-09-15 22:34 . 2011-09-15 22:34 8499712 c:\windows\Installer\6307d.msp + 2011-09-15 22:35 . 2011-09-15 22:35 1411072 c:\windows\Installer\62e86.msp + 2012-02-18 03:54 . 2012-02-18 03:54 5428224 c:\windows\Installer\62ce6.msi + 2012-02-18 03:44 . 2012-02-18 03:44 9474048 c:\windows\Installer\62253.msi + 2012-02-18 03:40 . 2012-02-18 03:40 2011136 c:\windows\Installer\61f9e.msi + 2012-05-12 15:33 . 2012-05-12 15:33 4028416 c:\windows\Installer\5a575e.msi + 2011-07-21 17:34 . 2011-07-21 17:34 3456000 c:\windows\Installer\5a27f.msp + 2012-05-30 11:18 . 2012-05-30 11:18 1739264 c:\windows\Installer\5338c32.msp + 2012-03-01 03:45 . 2012-03-01 03:45 4989440 c:\windows\Installer\30ee69.msp + 2012-06-19 16:54 . 2012-06-19 16:54 2239488 c:\windows\Installer\2edb1fe.msp + 2012-06-19 16:54 . 2012-06-19 16:54 5009920 c:\windows\Installer\2edb1e7.msp + 2012-04-05 02:37 . 2012-04-05 02:37 2540544 c:\windows\Installer\2edb1d0.msp + 2012-04-05 02:37 . 2012-04-05 02:37 3149824 c:\windows\Installer\2edb1b9.msp + 2012-05-30 11:17 . 2012-05-30 11:17 5010432 c:\windows\Installer\2027242.msp + 2011-12-25 10:48 . 2011-12-25 10:48 1505792 c:\windows\Installer\186300b.msp + 2011-12-09 00:24 . 2011-12-09 00:24 4989952 c:\windows\Installer\1863002.msp + 2008-10-22 02:54 . 2012-07-12 12:39 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2008-10-22 02:54 . 2011-12-16 08:14 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2008-10-22 02:54 . 2011-12-16 08:14 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2008-10-22 02:54 . 2012-07-12 12:39 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2008-10-21 12:35 . 2010-12-15 14:03 1099104 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksSb.exe + 2008-10-21 12:35 . 2012-04-11 07:09 1099104 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\WksSb.exe + 2008-10-21 12:35 . 2012-04-11 07:09 1242464 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\wksdb.exe - 2008-10-21 12:35 . 2010-12-15 14:03 1242464 c:\windows\Installer\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}\wksdb.exe + 2011-01-14 12:10 . 2011-01-14 12:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL + 2011-01-14 12:10 . 2011-01-14 12:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL + 2011-01-14 12:10 . 2011-01-14 12:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL + 2009-10-10 03:10 . 2009-10-10 03:10 2594632 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\VBE6.DLL + 2011-07-27 08:55 . 2011-07-27 08:55 3004800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OLMAPI32.DLL + 2011-07-07 06:58 . 2011-07-07 06:58 1616240 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OGL.DLL + 2011-08-03 04:14 . 2011-08-03 04:14 8579448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OARTCONV.DLL + 2011-07-27 09:09 . 2011-07-27 09:09 5310848 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IPEDITOR.DLL + 2011-07-27 09:09 . 2011-07-27 09:09 5484416 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\IPDESIGN.DLL + 2011-07-27 09:09 . 2011-07-27 09:09 1460088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\INFOPATH.EXE + 2006-10-27 00:25 . 2006-10-27 00:25 2172688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PSRCHFEA.DLL + 2011-08-17 13:49 . 2011-08-17 13:49 4683624 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\WRD12CNV.DLL + 2011-07-07 06:58 . 2011-07-07 06:58 1616240 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\OGL.DLL + 2011-08-03 04:14 . 2011-08-03 04:14 8579448 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\OARTCONV.DLL + 2012-05-12 13:58 . 2012-05-12 13:58 4925440 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\91b83259a8d2dce3cd9d3cb2dd952922\WindowsBase.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 1461248 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\19744d477564bf6c4df5a6f93a733e31\UIAutomationClientsideProviders.ni.dll + 2012-05-12 14:01 . 2012-05-12 14:01 6948352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\34e686abbb0da750a819929ab8b32afd\System.Xml.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 1754112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\5ef2b0292d6ef8f7a0b885a593aca44b\System.WorkflowServices.ni.dll + 2012-05-12 14:01 . 2012-05-12 14:01 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\74d70c80154c0a728a05614993443110\System.Workflow.Runtime.ni.dll + 2012-06-22 07:06 . 2012-06-22 07:06 2702848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\4b016f3679666af12f1ce0179765f22e\System.Workflow.Runtime.ni.dll + 2012-06-22 07:06 . 2012-06-22 07:06 5956096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\fe1ea6e5fd659ba3677c06282b0d636d\System.Workflow.ComponentModel.ni.dll + 2012-06-22 07:06 . 2012-06-22 07:06 3893248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\5416c21395744eef4c834dc561775b3c\System.Workflow.Activities.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\ffe8c5b57dc4df47a9053cb434f5598f\System.Web.Services.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\19c7bfd896bfd1b6e732d650da6e91b4\System.Web.Services.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\3b1523f87594c367b5020cf5913c078d\System.Web.Mobile.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 1154560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\c175d1ec8877250db87759686218afbf\System.Web.Extensions.Design.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 3046912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\5409d4a63b335ff02d51d50095e62288\System.Web.Extensions.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 2726912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\e98d38c2492d0205a87353a4851ad2fd\System.Speech.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 2239488 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\7af417ae6cfd42efc04e1bfc0dd0b16c\System.ServiceModel.Web.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 3072512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\468650a214c416b79f3efba02dc693f4\System.Runtime.Serialization.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 1022464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\ed4fe678be4126a3770cc9de5334817b\System.Runtime.Remoting.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 1453056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\6039d7884009694683589bc23a7ee995\System.Printing.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 1408000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\650cf4209770fc1aaf48a0e7f7a99a88\System.Management.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 1428992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\a63e4ae0cfc92d8ef5875622c58bf60f\System.IdentityModel.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\aabb7eec932c72fa1d16815aa13f9cf7\System.EnterpriseServices.ni.dll + 2012-06-22 07:05 . 2012-06-22 07:05 2319872 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\9efc0ccf635c1ce30d2981108e17b00f\System.Drawing.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 1219584 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\2fa6581654b28ad74c9a7e4a2c238a84\System.DirectoryServices.AccountManagement.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 1639936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\1cf88b8ca94b1feaae1bcb9c962f29ea\System.DirectoryServices.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\4a6752662cb45753081058a4e848dc4b\System.Deployment.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 8617984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\7cdbf5e1468a8ea47da976b55dbe9f4e\System.Data.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\f3498396404fc8bf1773d90c7f0a487f\System.Data.SqlXml.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 1845248 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\80dbff08c65fb51326258a5f590d4046\System.Data.Services.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 1277440 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\80dd4bf6bc9c40e111ddb4d189381311\System.Data.Services.Client.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 1512448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\5b5c5e17392e80c87da8003357b64ca1\System.Data.OracleClient.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\c7410f474a2e92b8e6b039c3031b239e\System.Data.Linq.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 1078272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\8865c0ae997231c53bbf1b5384c8617a\System.Data.Entity.Design.ni.dll + 2012-05-12 13:59 . 2012-05-12 13:59 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\a86df87c1da8f1a418b06dc5daa4755d\System.Core.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\17a1b0f95442878728ffdc238d872b88\System.Configuration.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 3101184 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\aedc7938e0a1ef8854e378f1224dfa7d\ReachFramework.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 2109440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\50abd377da62b8a687f7b41499a9db75\PresentationUI.ni.dll + 2012-05-12 14:08 . 2012-05-12 14:08 1882112 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\175e205aff9b1724ef4aa7a19a04b102\PresentationBuildTasks.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 3482112 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\c2f138d6fe09a7a865698e2070350263\Narrator.ni.exe + 2012-06-22 07:10 . 2012-06-22 07:10 2314240 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\5151cc16597c8f407d97883a8cfa4a50\MMCEx.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 7836672 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\b03b526fba0766ed6ada91d393e7a6fa\MIGUIControls.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 2173952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\96b6285fda67be4d456d2f6a4d75ab52\Microsoft.VisualBasic.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\0511014ebdf5f646a827d529a546928d\Microsoft.Transactions.Bridge.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 7710208 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\fce99d44205f434a96a7787176abdf60\Microsoft.MediaCenter.UI.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 3208704 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\dc3009f60a79e63198ca7709cb11099f\Microsoft.JScript.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 2357248 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\d565b0fb0bb312d5ca28046e25876645\Microsoft.Ink.ni.dll + 2012-06-22 07:10 . 2012-06-22 07:10 2575872 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\85a4473926ef1f94380ee9be95832772\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 2217984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\1b9d195833c5a57fab2ed4060df8e82f\Microsoft.Build.Tasks.ni.dll + 2012-05-12 14:07 . 2012-05-12 14:07 1188352 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\e583d1cc0875423fa3cb53555d2b161f\Microsoft.Build.Engine.ni.dll + 2012-05-12 14:04 . 2012-05-12 14:04 2433024 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\86ec05c1eee6dd5e0abd87639fa348e4\Microsoft.Build.Engine.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 2402304 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\8e158637ee451fd98bba68740a0a49dc\ehRecObj.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 2002432 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\0841f868af4462fdfeb1c5b434c31282\ehiVidCtl.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 2885120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\264c5491e6b4e10a3072d85c10e66b0b\ehiProxy.ni.dll + 2012-05-12 14:06 . 2012-05-12 14:06 1039872 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\309715e26c7a0ceced60ce1971d917b0\ehiPlay.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 3028480 c:\windows\assembly\NativeImages_v2.0.50727_64\ehepg\73418951d1b9812f5bcfa57b4e377bd7\ehepg.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fa9d3415a623f58b965773a5da57ab2a\WindowsLive.Writer.PostEditor.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eab24788de4a5b1d9a61f116a7463471\WindowsLive.Writer.CoreServices.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c2b3654af6fb0c147b4d3b243cbbd251\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b413a8d176b9c511f9ee1bd689fc5584\WindowsLive.Writer.PostEditor.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 2018816 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7b66c336289f915bd757f1a937fc68f0\WindowsLive.Writer.CoreServices.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\164d278ac13e7a647af2541224bd97a3\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\54426ee1881b42af5b090e223f43823c\WindowsBase.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\5554cc3dcd06e8820c9db3d509d9fae7\UIAutomationClientsideProviders.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b0c68df1300f0542e7284d2bbcd63258\System.WorkflowServices.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 1316864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\80bcadc0a0528583a82763610ce7d62e\System.WorkflowServices.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\e5b517ac742be27954c3093cfe6d1dd6\System.Workflow.Runtime.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\2b734aec63ce9276dfd271ef0a4458a0\System.Workflow.Runtime.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\865be11ce86f1882176810a3f909511b\System.Workflow.ComponentModel.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\414aa8fab914a3418860fb61a0746fd2\System.Workflow.ComponentModel.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\c4b6c4a3246cc0660008ad7701d888c6\System.Workflow.Activities.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\57a2f3b78edc0f5f088b210fabfe3bdc\System.Workflow.Activities.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:12 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\663112d3002034cf5126be253efff60d\System.Web.Services.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\24556241d64589a6b95b7eaa7432295b\System.Web.Services.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\0b90f82645cbd8de45ef8f5e467af156\System.Web.Mobile.ni.dll + 2012-05-12 14:15 . 2012-05-12 14:15 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\0978e723c6d6741c5f2d1c37e3660345\System.Web.Mobile.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\89d6ce3139daecdd517135b90e93498b\System.Web.Extensions.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\1eb2f7d836deab04547fc057ca5d58f2\System.Web.Extensions.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\7ed29e11a515872908672cb05b7ff4d3\System.Speech.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 1651200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\63dc7f1deb6f9b3ed0a21902246b46a9\System.ServiceModel.Web.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1619144e1a9eaca847e53b952b21820b\System.Runtime.Serialization.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\f95c423a31ac401b5d81c9cd455e3676\System.Printing.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\36fbb8064216ef11bd87afae6ee774dd\System.Printing.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\32983e3f4c5c20053e6673f37a58a874\System.IdentityModel.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5d8696f15e49aedf883dd945806a7049\System.Drawing.ni.dll + 2012-06-22 07:07 . 2012-06-22 07:07 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\18f9789aa214c657113e676b3a9015aa\System.Drawing.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2352398c304c3cb6c0909099e39cfb19\System.DirectoryServices.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\d374b09ce3f31ebd3e4cb3c64ca91a42\System.Deployment.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\18050fc0ebf2c4835d05ffd337aa1616\System.Deployment.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\bfdd10e0a0aacf46bac557ffc5d55ba5\System.Data.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\761fe0d0364a9a9515b8fd20b72150af\System.Data.SqlXml.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\14b0ceb4417cda80abc7eb74b9025d13\System.Data.Services.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\35930a8bda01bcaa3f992622bc63e17a\System.Data.OracleClient.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\5566f79f57430b924a55632d74ece617\System.Data.Linq.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\3134d578e36d7dceb0a62ae0f332b558\System.Data.Entity.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0b56e0ea0a4fca560a68607afae65ac9\System.Core.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\e840ddcecb65ec23d027b253950d5a00\ReachFramework.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3b1507e086784fb78e3d5e671aab1b0d\ReachFramework.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\f42d14201dfb29938d5c07468ae91df6\PresentationUI.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7cd9d41ca84c508d58475df4db9d220d\PresentationUI.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\fc59920e9bbba90d812714c1748e2cec\PresentationBuildTasks.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\ab99814c8ea65f32eb9be47c99323a5e\Narrator.ni.exe + 2012-05-12 14:13 . 2012-05-12 14:13 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\58ea4499bda4f431c806b96b13da4128\Narrator.ni.exe + 2012-05-12 14:13 . 2012-05-12 14:13 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\d91a5256dee77a6bdb2767c6c9e01a54\MMCEx.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\cb2db8c862e11358d3bb1b92f85d86bd\MMCEx.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\82a54c1a86466437495ab3dd91c58b63\MIGUIControls.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\085ec54d0a1e305de561b55836c5ec91\MIGUIControls.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3c92d4b3ec56936eab8e17ed81940c10\Microsoft.VisualBasic.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\2467a133aee73396c830b9b0a9c7ec0d\Microsoft.VisualBasic.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e606f5aa1e01220753f6a032c07b43a7\Microsoft.Transactions.Bridge.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 5475840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\a7589e2bc5818ee95481e3f4eab49b6b\Microsoft.MediaCenter.UI.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 5475840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8c05981367353979e931b15992077f6f\Microsoft.MediaCenter.UI.ni.dll + 2012-05-12 14:14 . 2012-05-12 14:14 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\47b205f629edc7e1065e1bd6c3d50834\Microsoft.JScript.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\c6fa5ed85e03c8437847bf51eefda7bb\Microsoft.Ink.ni.dll + 2012-06-22 07:13 . 2012-06-22 07:13 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\c420edef488501ffe0a8bd56d9756955\Microsoft.Ink.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 1873408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\db447c03dfb2f740c7eff1137b76341e\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-22 07:12 . 2012-06-22 07:12 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\304acbf276a1820a1c11f6f923d52745\Microsoft.Build.Tasks.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\26e5108aa22d39b2054c544eca7f7023\Microsoft.Build.Tasks.ni.dll + 2012-05-12 14:13 . 2012-05-12 14:13 1873408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\2660705a38c3a92b0cccea270b1fe275\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 1778176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e7431c4a290fee0db5bcbfba41e030ba\Microsoft.Build.Engine.ni.dll + 2012-05-12 14:10 . 2012-05-12 14:10 1667072 c:\windows\assembly\NativeImages_v2.0.50727_32\cfmain\3cc38c5fc1e0633f0b008eb77d3e6079\cfmain.ni.exe + 2012-05-11 00:43 . 2012-02-13 11:02 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll - 2010-06-23 20:47 . 2010-04-05 12:19 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-05-11 00:43 . 2012-01-03 10:58 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2011-07-01 19:13 . 2011-03-29 10:53 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-01-12 08:04 . 2012-01-12 08:04 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll - 2010-10-06 07:02 . 2010-10-06 07:02 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll + 2012-06-19 00:06 . 2012-03-22 11:02 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2009-09-18 13:37 . 2009-03-30 04:42 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-05-11 00:43 . 2012-02-13 11:02 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2012-01-11 21:48 . 2011-12-27 02:51 5259264 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2012-05-11 00:43 . 2012-02-13 11:02 2255128 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll + 2012-05-11 00:43 . 2012-02-13 11:02 3997184 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-05-11 00:43 . 2012-01-03 10:56 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-10-13 21:47 . 2011-07-08 11:52 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-01-11 21:48 . 2011-12-27 02:51 5251072 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll + 2012-05-11 00:43 . 2012-02-13 11:02 1736984 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll - 2010-06-23 20:47 . 2010-04-05 12:19 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-05-11 00:43 . 2012-02-13 11:02 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-05-11 00:43 . 2012-01-03 10:57 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-10-13 21:47 . 2011-07-08 11:53 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-03-29 21:12 . 2012-03-29 21:12 1279864 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll + 2012-07-11 20:28 . 2012-06-08 17:47 11586048 c:\windows\SysWOW64\shell32.dll - 2011-02-09 02:56 . 2011-01-21 16:35 11586048 c:\windows\SysWOW64\shell32.dll + 2012-06-19 00:05 . 2012-05-15 06:31 11111424 c:\windows\SysWOW64\ieframe.dll + 2006-11-02 12:33 . 2012-07-22 04:36 11796480 c:\windows\system32\SMI\Store\Machine\schema.dat - 2006-11-02 12:33 . 2011-12-16 08:31 11796480 c:\windows\system32\SMI\Store\Machine\schema.dat + 2012-08-03 01:09 . 2012-08-03 01:09 12315336 c:\windows\system32\Macromed\Flash\NPSWF64_11_3_300_270.dll + 2012-06-19 00:05 . 2012-05-15 02:14 12508672 c:\windows\system32\ieframe.dll + 2012-05-11 00:43 . 2012-01-03 10:57 10021648 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll + 2012-02-17 22:42 . 2012-02-17 22:42 20333056 c:\windows\Installer\bebf5.msp + 2012-05-11 21:28 . 2012-05-11 21:28 20343808 c:\windows\Installer\8c886.msp + 2012-05-12 14:00 . 2012-05-12 14:00 23771136 c:\windows\Installer\678d1.msp + 2011-09-15 22:37 . 2011-09-15 22:37 38176256 c:\windows\Installer\630b5.msp + 2011-09-15 22:39 . 2011-09-15 22:39 11163136 c:\windows\Installer\63094.msp + 2011-09-15 22:38 . 2011-09-15 22:38 10838528 c:\windows\Installer\63088.msp + 2011-09-15 22:37 . 2011-09-15 22:37 16691712 c:\windows\Installer\62e8e.msp + 2011-09-15 22:37 . 2011-09-15 22:37 34428416 c:\windows\Installer\62e87.msp + 2011-09-15 22:37 . 2011-09-15 22:37 37148160 c:\windows\Installer\62e7a.msp + 2012-05-30 11:18 . 2012-05-30 11:18 11885056 c:\windows\Installer\5338c62.msp + 2011-09-16 00:42 . 2011-09-16 00:42 18115432 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\WWLIB.DLL + 2011-08-03 22:18 . 2011-08-03 22:18 12997488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLOOK.EXE + 2011-08-17 14:01 . 2011-08-17 14:01 16149352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OART.DLL + 2011-08-03 23:53 . 2011-08-03 23:53 17324928 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSO.DLL + 2011-08-03 23:53 . 2011-08-03 23:53 17324928 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6612\MSO.DLL + 2012-05-12 13:57 . 2012-05-12 13:57 10603008 c:\windows\assembly\NativeImages_v2.0.50727_64\System\02b082509a73afd38691bf4626b10922\System.ni.dll + 2012-06-22 07:06 . 2012-06-22 07:06 17380352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\9e0a0b099890de9edadbf6d021aa7576\System.Windows.Forms.ni.dll + 2012-06-22 07:08 . 2012-06-22 07:08 15245824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\5ded60c9ec9be6b40e91234e7af20647\System.Web.ni.dll + 2012-05-12 14:05 . 2012-05-12 14:05 23813632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\4bec022899ae4f622be359120249a43c\System.ServiceModel.ni.dll + 2012-06-22 07:04 . 2012-06-22 07:04 13718528 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\efa17c5d88fbdaddabd553ec285cf7d9\System.Design.ni.dll + 2012-05-12 14:09 . 2012-05-12 14:09 13758976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\4bf31e69758786ca40ba37a5c6ebb543\System.Data.Entity.ni.dll + 2012-06-22 07:04 . 2012-06-22 07:04 19179520 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\55afb0f9be76fd75182e8db465ecfc2b\PresentationFramework.ni.dll + 2012-06-21 02:32 . 2012-06-21 02:32 16516608 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\254dd327ade27917470bcdd76d0999d5\PresentationCore.ni.dll + 2012-05-12 13:57 . 2012-05-12 13:57 15566848 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\2587f61ee62de33378f07668140b362b\mscorlib.ni.dll + 2012-06-22 07:09 . 2012-06-22 07:09 15813632 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\3cff457b25a166eafeacd2ba3c21516e\ehshell.ni.dll + 2012-01-12 08:04 . 2012-01-12 08:04 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP41C8.tmp\System.Design.dll + 2012-06-22 07:08 . 2012-06-22 07:08 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f2691cfa7671cdc58179e56ba9227591\System.Windows.Forms.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e4d54640bacd18e047a4573cb4611bd3\System.Windows.Forms.ni.dll + 2012-05-12 14:11 . 2012-05-12 14:11 11820032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\ef684a2ee2f7276eec3973a0654d2bd4\System.Web.ni.dll + 2012-06-22 07:11 . 2012-06-22 07:11 11820032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\508b444db523c5cf20ff12c7f440837b\System.Web.ni.dll + 2012-05-12 14:12 . 2012-05-12 14:12 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1dac5ff29f483e19c77b23b00ba533f9\System.ServiceModel.ni.dll + 2012-05-12 14:03 . 2012-05-12 14:03 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\b03386569c9ce7b2079f3fb3aaf370e6\System.Design.ni.dll + 2012-06-22 07:07 . 2012-06-22 07:07 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\02ccd8236a942b3f89411fab5d2b594a\System.Design.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c466fbf8e50c7c11b2fa994707124290\PresentationFramework.ni.dll + 2012-06-22 07:07 . 2012-06-22 07:07 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7343fbab1ba137db2f8b284047ef3f3c\PresentationFramework.ni.dll + 2012-05-12 14:02 . 2012-05-12 14:02 12219392 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b4ade6954a61a7626858c123dc951ba6\PresentationCore.ni.dll + 2012-06-22 07:06 . 2012-06-22 07:06 12219392 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\7b6293b0c23321c255c2530aea8e32bb\PresentationCore.ni.dll + 2012-05-12 14:01 . 2012-05-12 14:01 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll + 2011-09-15 22:34 . 2011-09-15 22:34 428804608 c:\windows\Installer\6306f.msp . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968] "BitTorrent DNA"="c:\users\sanja\Program Files (x86)\DNA\btdna.exe" [2009-11-07 323392] "ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2007-08-30 205480] "MobileDocuments"="c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 59240] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-10-21 68856] "Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-05-28 288128] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-07-09 5661056] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "NDSTray.exe"="NDSTray.exe" [BU] "Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2008-04-29 417792] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "TkBellExe"="c:\program files (x86)\Common Files\Real\Update_OB\realsched.exe" [2010-01-02 198160] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672] "PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2011-03-15 650080] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-01-16 421736] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] . c:\users\sanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] ViiKiiDesktopPlugin.lnk - c:\program files (x86)\ViiKiiDesktopPlugin\ViiKiiDesktopPlugin.exe [2012-7-26 142848] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ \0 . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-03 250056] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Contents of the 'Scheduled Tasks' folder . 2012-08-13 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-26 01:09] . 2012-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-02 13:34] . 2012-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-02-02 13:34] . 2012-08-13 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task b89ea438-9161-45ca-8632-bcf2363f0534.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2011-05-04 17:52] . 2012-08-13 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task c9c71027-d5d9-4ca5-8a6a-d7735a8d2203.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2011-05-04 17:52] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1216808] "RtHDVCpl"="RAVCpl64.exe" [2008-04-08 6156288] "Skytel"="Skytel.exe" [2007-11-20 1826816] "LtMoh"="c:\program files\ltmoh\Ltmoh.exe" [2007-01-09 191552] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-25 151064] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-25 209432] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-25 181784] "TPwrMain"="c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE" [BU] "SmoothView"="c:\program files (x86)\Toshiba\SmoothView\SmoothView.exe" [BU] "00TCrdMain"="c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe" [BU] . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 LSP: mswsock.dll TCP: DhcpNameServer = 64.71.255.198 CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll FF - ProfilePath - c:\users\sanja\AppData\Roaming\Mozilla\Firefox\Profiles\q2dgay51.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/ . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\software\McAfee] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\software\Network Associates] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . ------------------------ Other Running Processes ------------------------ . c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe c:\program files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe c:\program files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe c:\program files (x86)\TOSHIBA\ConfigFree\NDSTray.exe c:\program files\Camera Assistant Software for Toshiba\CEC_MAIN.exe . ************************************************************************** . Completion time: 2012-08-13 17:16:42 - machine was rebooted ComboFix-quarantined-files.txt 2012-08-13 21:16 ComboFix2.txt 2011-12-29 22:04 ComboFix3.txt 2011-06-06 00:00 . Pre-Run: 178,905,870,336 bytes free Post-Run: 178,755,055,616 bytes free . - - End Of File - - F633FC62297E250A91C709C87C9A9A41