Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

the Never ending loop of lenovo think pad edge 64bit

Started by Jbiggs , Jun 08 2012 09:44 PM

  • This topic is locked This topic is locked

#61
JSntgRvr
Posted 11 June 2012 - 11:28 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
I'll be checking on you in the am. Good night! :)
  • 0

Advertisements

#62
Jbiggs
Posted 12 June 2012 - 07:54 PM

Jbiggs

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
C:\Program Files (x86)\WhiteSmokeTranslator\WSRegistrationDictMode.exe probably a variant of Win32/WhiteSmoke application
C:\Program Files (x86)\WhiteSmokeTranslator\html\english\dictClientDic\index.html HTML/WhiteSmoke application
C:\Program Files (x86)\Windows Live\Messenger\msimg32.dll Win32/Toolbar.MyWebSearch application
C:\Program Files (x86)\Windows Live\Messenger\riched20.dll Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3CJPEG.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3DTACTL.DLL.vir Win32/FunWeb application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3HISTSW.DLL.vir Win32/FunWeb application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3HKSTUB.DLL.vir Win32/Toolbar.MyWebSearch.G application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3HTMLMU.DLL.vir Win32/Toolbar.MyWebSearch.B application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3HTTPCT.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3IMSTUB.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3POPSWT.DLL.vir Win32/FunWeb application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3PSSAVR.SCR.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3REGHK.DLL.vir Win32/Toolbar.MyWebSearch.G application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3REPROX.DLL.vir Win32/Toolbar.MyWebSearch.D application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3RESTUB.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3SCHMON.EXE.vir Win32/FunWeb application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3SCRCTR.DLL.vir Win32/Toolbar.MyWebSearch.P application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\F3WPHOOK.DLL.vir Win32/FunWeb application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3AUXSTB.DLL.vir Win32/Toolbar.MyWebSearch.H application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3DLGHK.DLL.vir Win32/Toolbar.MyWebSearch.I application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3HTML.DLL.vir Win32/Toolbar.MyWebSearch.F application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3IDLE.DLL.vir Win32/Toolbar.MyWebSearch.P application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3IEOVR.DLL.vir Win32/Toolbar.MyWebSearch.P application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3IMPIPE.EXE.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3MSG.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3OUTLCN.DLL.vir Win32/Toolbar.MyWebSearch.J application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3PLUGIN.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3SKIN.DLL.vir Win32/Toolbar.MyWebSearch.P application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3SKPLAY.EXE.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3SLSRCH.EXE.vir Win32/Toolbar.MyWebSearch.J application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3SRCHMN.EXE.vir Win32/Toolbar.MyWebSearch.I application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3TPINST.DLL.vir Win32/Toolbar.MyWebSearch.I application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\M3UNPAT.DLL.vir a variant of Win32/Toolbar.MyWebSearch.I application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSBAR.DLL.vir Win32/Toolbar.MyWebSearch.K application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSMLBTN.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEPLG.DLL.vir Win32/Toolbar.MyWebSearch.J application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOESTB.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSVC.EXE.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\MWSUABTN.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\MyWebSearch\bar\1.bin\NPMYWEBS.DLL.vir Win32/Toolbar.MyWebSearch application
C:\Qoobox\Quarantine\C\Program Files (x86)\Search Toolbar\SearchToolbar.dll.vir Win32/Toolbar.Zugo application
C:\Qoobox\Quarantine\C\Windows\SysWOW64\f3PSSavr.scr.vir Win32/Toolbar.MyWebSearch application
C:\Users\Connor Biggs\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\L7SEI71Q\season-3-episode-10-?-vampires-vs-zombies[1].htm HTML/ScrInject.B.Gen virus
C:\Users\Connor Biggs\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\L7SEI71Q\setup[1].exe a variant of Win32/PSW.WOW.NUO trojan
C:\Users\Connor Biggs\AppData\LocalLow\FunWebProducts\Installr\Cache\0A74107A.exe a variant of Win32/Toolbar.MyWebSearch.O application
C:\Users\Connor Biggs\AppData\LocalLow\MyWebSearch\bar\Cache\01007D10.exe a variant of Win32/Toolbar.MyWebSearch.K application
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\43296140-6295d604 a variant of Java/TrojanDownloader.Agent.ME trojan
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\46bc6b82-7215cdab multiple threats
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\5d3d8a42-6276f421 multiple threats
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\58ce481b-52dbeb48 a variant of Java/TrojanDownloader.Agent.ME trojan
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\37db3fe2-1241cc62 Java/TrojanDownloader.Agent.ME trojan
C:\Users\Connor Biggs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\1b2b2668-69576f70 multiple threats



sorry about the late reply emergancie at work and they needed me all day
  • 0

#63
JSntgRvr
Posted 12 June 2012 - 09:36 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
White Smoke Translator has a very poor reputation. If you have no use for it, I would suggest you remove it.

Download TFC by OldTimer to your desktop
  • Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Download the enclosed file:

Save it next to Combofix.

Posted Image

Once saved, referring to the picture above, drag CFScript.txt into ComboFix.exe, and post back the resulting report.
  • 0

#64
Jbiggs
Posted 12 June 2012 - 09:59 PM

Jbiggs

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
ComboFix 12-06-12.03 - Connor Biggs 06/12/2012 21:56:33.3.2 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3838.2789 [GMT -6:00]
Running from: c:\users\John Connor Biggs\Downloads\ComboFix.exe
Command switches used :: c:\users\John Connor Biggs\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Connor Biggs\AppData\LocalLow\FunWebProducts\Installr\Cache\0A74107A.exe"
"c:\users\Connor Biggs\AppData\LocalLow\MyWebSearch\bar\Cache\01007D10.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Connor Biggs\AppData\LocalLow\FunWebProducts\Installr\Cache\0A74107A.exe
c:\users\Connor Biggs\AppData\LocalLow\MyWebSearch\bar\Cache\01007D10.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-05-13 to 2012-06-13 )))))))))))))))))))))))))))))))
.
.
2012-06-13 04:08 . 2012-06-13 04:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-06-13 04:08 . 2012-06-13 04:08 -------- d-----w- c:\users\Connor Biggs\AppData\Local\temp
2012-06-12 09:07 . 2012-05-08 16:02 8955792 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{739B09EB-2C23-48E0-840E-13F77DD77BE8}\mpengine.dll
2012-06-12 09:07 . 2012-06-12 09:07 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-06-12 09:06 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-06-12 09:06 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll
2012-06-12 09:06 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2012-06-12 09:06 . 2012-03-01 06:38 220672 ----a-w- c:\windows\system32\wintrust.dll
2012-06-12 09:06 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2012-06-12 09:06 . 2012-03-01 05:37 172544 ----a-w- c:\windows\SysWow64\wintrust.dll
2012-06-12 09:06 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2012-06-12 05:20 . 2012-06-12 05:20 -------- d--h--w- c:\windows\AxInstSV
2012-06-12 05:11 . 2012-06-12 05:11 -------- d-----w- c:\users\Connor Biggs\AppData\Roaming\Malwarebytes
2012-06-12 05:11 . 2012-06-12 05:11 -------- d-----w- c:\programdata\Malwarebytes
2012-06-12 05:11 . 2012-06-12 05:11 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-06-12 05:11 . 2012-04-04 21:56 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-12 05:01 . 2012-06-12 05:01 -------- d-----w- C:\Nexon
2012-06-12 03:33 . 2012-06-12 03:33 -------- d-----w- c:\users\John Connor Biggs\AppData\Roaming\PwrMgr
2012-06-12 01:53 . 2011-11-21 10:40 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-06-12 01:47 . 2012-03-31 04:39 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-06-12 01:45 . 2012-03-30 11:35 1918320 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-06-12 01:45 . 2012-03-31 05:42 1732096 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2012-06-12 01:45 . 2012-03-31 05:40 1367552 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-06-12 01:45 . 2012-03-31 05:40 1393664 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2012-06-12 01:45 . 2012-03-31 04:29 936960 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-06-12 01:45 . 2012-03-31 05:40 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2012-06-12 01:45 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-06-12 01:45 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-06-12 01:23 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-06-12 01:23 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-06-12 01:19 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-06-12 01:19 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-06-12 01:19 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-12 01:19 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-06-12 00:49 . 2012-06-12 00:49 -------- d-----w- c:\users\John Connor Biggs\AppData\Local\Apple
2012-06-11 06:44 . 2012-06-11 06:45 -------- d-----w- C:\FRST
2012-05-30 19:59 . 2012-05-30 19:59 4966600 ----a-w- c:\program files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-21 02:44 . 2011-04-27 22:25 98688 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2012-03-21 02:44 . 2011-04-18 20:18 203888 ----a-w- c:\windows\system32\drivers\MpFilter.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-12_04.00.09 )))))))))))))))))))))))))))))))))))))))))
.
- 2011-06-07 02:51 . 2010-11-20 12:08 96768 c:\windows\SysWOW64\sspicli.dll
+ 2012-06-12 01:48 . 2011-11-17 05:28 96768 c:\windows\SysWOW64\sspicli.dll
- 2011-06-07 02:51 . 2010-11-20 12:21 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-06-12 01:48 . 2011-11-17 05:34 22016 c:\windows\SysWOW64\secur32.dll
+ 2012-06-12 09:12 . 2012-02-28 01:03 72704 c:\windows\SysWOW64\mshtmled.dll
- 2011-12-24 10:01 . 2011-11-03 22:32 72704 c:\windows\SysWOW64\mshtmled.dll
+ 2012-06-12 09:12 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
- 2011-12-24 10:01 . 2011-11-03 22:37 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
- 2011-12-24 10:01 . 2011-11-03 22:37 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2012-06-12 09:12 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll
- 2009-07-14 04:54 . 2012-06-12 03:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-06-13 03:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-06-13 03:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-12 03:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-12 03:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-13 03:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-31 06:39 . 2011-05-31 06:39 58368 c:\windows\SysWOW64\bdmpegv.dll
+ 2011-05-31 06:38 . 2011-05-31 06:38 15360 c:\windows\SysWOW64\bdmjpeg.dll
+ 2009-07-14 05:10 . 2012-06-13 03:54 48958 c:\windows\system64\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2012-06-12 01:48 . 2011-11-17 06:35 29184 c:\windows\system64\sspisrv.dll
- 2011-06-07 02:51 . 2010-11-20 13:27 29184 c:\windows\system64\sspisrv.dll
- 2011-06-07 02:51 . 2010-11-20 13:27 28160 c:\windows\system64\secur32.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 28160 c:\windows\system64\secur32.dll
+ 2012-06-12 01:23 . 2011-11-19 14:58 77312 c:\windows\system64\packager.dll
+ 2012-06-12 09:12 . 2012-02-28 06:43 96256 c:\windows\system64\mshtmled.dll
- 2011-12-24 10:01 . 2011-11-04 01:35 96256 c:\windows\system64\mshtmled.dll
+ 2012-06-12 09:12 . 2012-02-28 06:47 86528 c:\windows\system64\migration\WininetPlugin.dll
- 2011-12-24 10:01 . 2011-11-04 01:41 86528 c:\windows\system64\migration\WininetPlugin.dll
- 2009-07-13 23:20 . 2009-07-14 01:39 31232 c:\windows\system64\lsass.exe
+ 2012-06-12 01:48 . 2011-11-17 06:33 31232 c:\windows\system64\lsass.exe
- 2011-12-24 10:01 . 2011-11-04 01:41 85504 c:\windows\system64\jsproxy.dll
+ 2012-06-12 09:12 . 2012-02-28 06:47 85504 c:\windows\system64\jsproxy.dll
+ 2012-06-12 09:06 . 2012-03-01 06:33 81408 c:\windows\system64\imagehlp.dll
- 2009-07-14 00:16 . 2009-07-14 00:16 23552 c:\windows\system64\drivers\tdtcp.sys
+ 2012-06-12 01:19 . 2012-02-17 04:57 23552 c:\windows\system64\drivers\tdtcp.sys
+ 2012-06-12 01:47 . 2012-03-17 07:58 75120 c:\windows\system64\drivers\partmgr.sys
+ 2011-04-27 22:25 . 2012-03-21 02:44 98688 c:\windows\system64\drivers\NisDrvWFP.sys
+ 2012-06-12 05:11 . 2012-04-04 21:56 24904 c:\windows\system64\drivers\mbam.sys
+ 2012-06-12 01:48 . 2011-11-17 06:49 95600 c:\windows\system64\drivers\ksecdd.sys
+ 2012-06-12 09:06 . 2012-03-01 06:46 23408 c:\windows\system64\drivers\fs_rec.sys
+ 2010-12-26 11:14 . 2012-06-13 02:37 16384 c:\windows\system64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-26 11:14 . 2012-06-12 02:17 16384 c:\windows\system64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-26 11:14 . 2012-06-12 02:17 32768 c:\windows\system64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-12-26 11:14 . 2012-06-13 02:37 32768 c:\windows\system64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-12 02:17 32768 c:\windows\system64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-13 02:37 32768 c:\windows\system64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-31 06:39 . 2011-05-31 06:39 62464 c:\windows\system64\bdmpegv64.dll
+ 2011-05-31 06:38 . 2011-05-31 06:38 17920 c:\windows\system64\bdmjpeg64.dll
+ 2009-07-14 05:10 . 2012-06-13 03:54 48958 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2011-06-07 02:51 . 2010-11-20 13:27 29184 c:\windows\system32\sspisrv.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 29184 c:\windows\system32\sspisrv.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 28160 c:\windows\system32\secur32.dll
- 2011-06-07 02:51 . 2010-11-20 13:27 28160 c:\windows\system32\secur32.dll
- 2011-12-24 10:01 . 2011-11-04 01:35 96256 c:\windows\system32\mshtmled.dll
+ 2012-06-12 09:12 . 2012-02-28 06:43 96256 c:\windows\system32\mshtmled.dll
- 2011-12-24 10:01 . 2011-11-04 01:41 86528 c:\windows\system32\migration\WininetPlugin.dll
+ 2012-06-12 09:12 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll
- 2009-07-13 23:20 . 2009-07-14 01:39 31232 c:\windows\system32\lsass.exe
+ 2012-06-12 01:48 . 2011-11-17 06:33 31232 c:\windows\system32\lsass.exe
- 2011-12-24 10:01 . 2011-11-04 01:41 85504 c:\windows\system32\jsproxy.dll
+ 2012-06-12 09:12 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll
+ 2012-06-12 01:47 . 2012-03-17 07:58 75120 c:\windows\system32\drivers\partmgr.sys
+ 2012-06-12 01:48 . 2011-11-17 06:49 95600 c:\windows\system32\drivers\ksecdd.sys
- 2010-12-26 11:14 . 2012-06-12 02:17 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-12-26 11:14 . 2012-06-13 02:37 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-12-26 11:14 . 2012-06-12 02:17 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-12-26 11:14 . 2012-06-13 02:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-06-13 02:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-06-12 02:17 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-31 06:39 . 2011-05-31 06:39 62464 c:\windows\system32\bdmpegv64.dll
+ 2011-05-31 06:38 . 2011-05-31 06:38 17920 c:\windows\system32\bdmjpeg64.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-01-02 03:40 . 2012-06-12 09:15 17922 c:\windows\Installer\{90510409-6D54-11D4-BEE3-00C04F990354}\VisioIcon.exe
- 2011-01-02 03:40 . 2011-12-29 18:40 17922 c:\windows\Installer\{90510409-6D54-11D4-BEE3-00C04F990354}\VisioIcon.exe
+ 2011-01-02 03:40 . 2012-06-12 09:15 34304 c:\windows\Installer\{90510409-6D54-11D4-BEE3-00C04F990354}\misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
- 2011-01-02 03:40 . 2011-12-29 18:40 34304 c:\windows\Installer\{90510409-6D54-11D4-BEE3-00C04F990354}\misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-11-30 19:25 . 2012-06-12 09:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-11-30 19:25 . 2011-10-13 09:07 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-10-20 22:32 . 2010-10-20 22:32 32160 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\SOCIALPROVIDER.DLL
+ 2012-06-12 09:23 . 2012-06-12 09:23 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 55808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\ae1aa0da6c3f69ae100effa75c1e2316\Microsoft.Office.Tools.v4.0.Framework.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 28160 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\3f51f3b0ffc904203234c8b32f98c31f\Microsoft.Office.Tools.ni.dll
+ 2012-06-12 09:13 . 2012-06-12 09:13 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
+ 2012-06-12 09:13 . 2012-06-12 09:13 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 21504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\d1863e1b75c767daef24a3b149faddac\Microsoft.Office.Tools.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 45056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\31173593560b0b4db1a7b6025dabc5e5\Microsoft.Office.Tools.v4.0.Framework.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\3f0b1e551bb3e2cb7b89a046fd3e3aae\System.Windows.Presentation.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\822bc4da24f840aae294cc8672891a4f\PresentationFontCache.ni.exe
+ 2012-06-12 09:39 . 2012-06-12 09:39 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\a505e7e7ba9b48ba5658212c2ce4d890\PresentationCFFRasterizer.ni.dll
+ 2012-06-12 09:38 . 2012-06-12 09:38 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\2f8c95cf4f6b7bca783e5aa2df1e6ded\UIAutomationProvider.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\447960e08dc64fe7ae4456572a3523ec\System.Windows.Presentation.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\d1b41976cc418d60e9aeb031ca6b3501\PresentationFontCache.ni.exe
+ 2012-06-12 09:38 . 2012-06-12 09:38 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\b1b12ace75e9886874c02a3940386e41\PresentationCFFRasterizer.ni.dll
- 2009-07-14 00:41 . 2009-07-14 01:33 5120 c:\windows\system64\wmi.dll
+ 2012-06-12 09:06 . 2012-03-01 06:28 5120 c:\windows\system64\wmi.dll
+ 2011-12-19 22:49 . 2012-06-13 03:54 4776 c:\windows\system64\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-154539003-3659347804-3267415899-1003_UserData.bin
+ 2011-12-19 22:49 . 2012-06-13 03:54 4776 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-154539003-3659347804-3267415899-1003_UserData.bin
- 2012-06-12 03:34 . 2012-06-12 03:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-13 03:52 . 2012-06-13 03:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-06-13 03:52 . 2012-06-13 03:52 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-06-12 03:34 . 2012-06-12 03:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-06-12 09:27 . 2012-06-12 09:27 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
- 2011-06-07 02:52 . 2010-11-20 12:21 314880 c:\windows\SysWOW64\webio.dll
+ 2012-06-12 01:48 . 2011-11-17 05:35 314880 c:\windows\SysWOW64\webio.dll
- 2011-12-24 10:01 . 2011-11-03 22:38 231936 c:\windows\SysWOW64\url.dll
+ 2012-06-12 09:12 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll
+ 2012-06-12 01:48 . 2011-11-17 05:34 224768 c:\windows\SysWOW64\schannel.dll
- 2011-06-07 02:52 . 2010-11-20 12:20 514560 c:\windows\SysWOW64\qdvd.dll
+ 2012-06-12 01:47 . 2011-10-26 04:32 514560 c:\windows\SysWOW64\qdvd.dll
+ 2012-06-12 01:47 . 2012-01-04 08:58 442880 c:\windows\SysWOW64\ntshrui.dll
- 2011-06-07 02:52 . 2010-11-20 12:20 442880 c:\windows\SysWOW64\ntshrui.dll
- 2009-07-13 23:12 . 2009-07-14 01:15 690688 c:\windows\SysWOW64\msvcrt.dll
+ 2012-06-12 01:47 . 2011-12-16 07:52 690688 c:\windows\SysWOW64\msvcrt.dll
- 2011-12-24 10:01 . 2011-11-03 22:34 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-06-12 09:12 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-06-12 09:12 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll
- 2011-12-24 10:01 . 2011-11-03 22:28 176640 c:\windows\SysWOW64\ieui.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 220672 c:\windows\system64\wintrust.dll
+ 2012-06-12 09:06 . 2012-03-01 06:38 220672 c:\windows\system64\wintrust.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 395776 c:\windows\system64\webio.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 395776 c:\windows\system64\webio.dll
+ 2010-12-25 07:35 . 2012-06-13 02:56 300394 c:\windows\system64\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2011-12-24 10:01 . 2011-11-04 01:43 237056 c:\windows\system64\url.dll
+ 2012-06-12 09:12 . 2012-02-28 06:48 237056 c:\windows\system64\url.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 136192 c:\windows\system64\sspicli.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 136192 c:\windows\system64\sspicli.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 340992 c:\windows\system64\schannel.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 340992 c:\windows\system64\schannel.dll
+ 2012-06-12 01:47 . 2011-10-26 05:25 366592 c:\windows\system64\qdvd.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 366592 c:\windows\system64\qdvd.dll
- 2009-07-14 02:36 . 2012-06-12 03:39 626540 c:\windows\system64\perfh009.dat
+ 2009-07-14 02:36 . 2012-06-13 04:00 626540 c:\windows\system64\perfh009.dat
+ 2009-07-14 02:36 . 2012-06-13 04:00 107784 c:\windows\system64\perfc009.dat
- 2009-07-14 02:36 . 2012-06-12 03:39 107784 c:\windows\system64\perfc009.dat
+ 2012-06-12 01:47 . 2012-01-04 10:44 509952 c:\windows\system64\ntshrui.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 509952 c:\windows\system64\ntshrui.dll
- 2009-07-13 23:19 . 2009-07-14 01:41 634880 c:\windows\system64\msvcrt.dll
+ 2012-06-12 01:47 . 2011-12-16 08:46 634880 c:\windows\system64\msvcrt.dll
- 2011-12-24 10:01 . 2011-11-04 01:39 818688 c:\windows\system64\jscript.dll
+ 2012-06-12 09:12 . 2012-02-28 06:45 818688 c:\windows\system64\jscript.dll
- 2011-12-24 10:01 . 2011-11-04 01:30 248320 c:\windows\system64\ieui.dll
+ 2012-06-12 09:12 . 2012-02-28 06:39 248320 c:\windows\system64\ieui.dll
+ 2009-07-14 04:45 . 2012-06-12 09:37 432656 c:\windows\system64\FNTCACHE.DAT
- 2009-07-14 04:45 . 2011-12-25 03:18 432656 c:\windows\system64\FNTCACHE.DAT
- 2011-06-07 02:52 . 2010-11-20 11:04 210944 c:\windows\system64\drivers\rdpwd.sys
+ 2012-06-12 01:19 . 2012-02-17 04:58 210944 c:\windows\system64\drivers\rdpwd.sys
+ 2011-04-18 20:18 . 2012-03-21 02:44 203888 c:\windows\system64\drivers\MpFilter.sys
+ 2012-06-12 01:48 . 2011-11-17 06:49 152432 c:\windows\system64\drivers\ksecpkg.sys
+ 2012-06-12 01:48 . 2011-11-17 06:44 459232 c:\windows\system64\drivers\cng.sys
+ 2012-06-12 01:47 . 2011-12-28 03:59 498688 c:\windows\system64\drivers\afd.sys
+ 2012-06-12 01:48 . 2011-11-17 06:35 395776 c:\windows\system32\webio.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 395776 c:\windows\system32\webio.dll
+ 2010-12-25 07:35 . 2012-06-13 02:56 300394 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2012-06-12 09:12 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll
- 2011-12-24 10:01 . 2011-11-04 01:43 237056 c:\windows\system32\url.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 136192 c:\windows\system32\sspicli.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 136192 c:\windows\system32\sspicli.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 340992 c:\windows\system32\schannel.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 340992 c:\windows\system32\schannel.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 366592 c:\windows\system32\qdvd.dll
+ 2012-06-12 01:47 . 2011-10-26 05:25 366592 c:\windows\system32\qdvd.dll
+ 2009-07-14 02:36 . 2012-06-13 04:00 626540 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-06-12 03:39 626540 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2012-06-12 03:39 107784 c:\windows\system32\perfc009.dat
+ 2009-07-14 02:36 . 2012-06-13 04:00 107784 c:\windows\system32\perfc009.dat
+ 2012-06-12 01:47 . 2012-01-04 10:44 509952 c:\windows\system32\ntshrui.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 509952 c:\windows\system32\ntshrui.dll
- 2009-07-13 23:19 . 2009-07-14 01:41 634880 c:\windows\system32\msvcrt.dll
+ 2012-06-12 01:47 . 2011-12-16 08:46 634880 c:\windows\system32\msvcrt.dll
+ 2012-06-12 09:12 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll
- 2011-12-24 10:01 . 2011-11-04 01:39 818688 c:\windows\system32\jscript.dll
- 2011-12-24 10:01 . 2011-11-04 01:30 248320 c:\windows\system32\ieui.dll
+ 2012-06-12 09:12 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll
- 2009-07-14 04:45 . 2011-12-25 03:18 432656 c:\windows\system32\FNTCACHE.DAT
+ 2009-07-14 04:45 . 2012-06-12 09:37 432656 c:\windows\system32\FNTCACHE.DAT
+ 2012-06-12 01:48 . 2011-11-17 06:49 152432 c:\windows\system32\drivers\ksecpkg.sys
+ 2012-06-12 01:48 . 2011-11-17 06:44 459232 c:\windows\system32\drivers\cng.sys
+ 2012-06-12 01:47 . 2011-12-28 03:59 498688 c:\windows\system32\drivers\afd.sys
+ 2009-07-14 04:46 . 2012-06-13 04:01 111520 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
- 2009-07-14 05:01 . 2012-06-12 01:41 399076 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-06-13 03:51 399076 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-15 20:01 . 2011-12-15 20:01 226600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 156440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2012-06-12 01:46 . 2012-02-10 23:29 172320 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 131360 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2012-02-09 13:27 . 2012-02-09 13:27 206848 c:\windows\Installer\cdc66c.msp
+ 2006-11-03 15:21 . 2006-11-03 15:21 817664 c:\windows\Installer\cdc5ae.msp
+ 2012-03-21 11:58 . 2012-03-21 11:58 133120 c:\windows\Installer\cdc502.msp
+ 2012-06-12 09:07 . 2012-06-12 09:07 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\SCEP.exe
+ 2012-06-12 09:07 . 2012-06-12 09:07 123352 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\MSE.exe
+ 2012-06-12 09:07 . 2012-06-12 09:07 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\INTUNE.exe
+ 2012-06-12 09:07 . 2012-06-12 09:07 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\FEP.exe
+ 2012-06-12 09:07 . 2012-06-12 09:07 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\EPP.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 181096 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_X86.dll
+ 2010-03-18 21:27 . 2010-03-18 21:27 225640 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_AMD64.dll
+ 2010-12-21 08:58 . 2010-12-21 08:58 294768 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\SHAREPOINTPROVIDER.DLL
- 2011-06-07 02:52 . 2010-11-20 13:27 465920 c:\windows\ehome\mstvcapn.dll
+ 2012-06-12 01:47 . 2011-10-29 05:23 465920 c:\windows\ehome\mstvcapn.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 336896 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\342472450a587d22afebf6e7ecbbca5c\WindowsFormsIntegration.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\fb43d84bc59b21e8a7f3e36d616eea90\UIAutomationTypes.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\26f12a0a3baed2a227cf30aaeae03913\UIAutomationProvider.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\1c3c298326e9ac14796516ac1da09a16\UIAutomationClient.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\307eea660f877dc40ae90882ce554757\System.Xml.Linq.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\b4afa252d0f0e27b0b5e8fcb2cc5b3a7\System.Windows.Input.Manipulations.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\8c0ee7b970cc4e8c2986c7898af71661\System.Transactions.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\f67f5d2f51eecc45b68bf86d65a1624d\System.ServiceProcess.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\eb4fb369926faaffede7aaf317fd6532\System.ServiceModel.Channels.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e5ab3c37897bb578bdbfe6b7e0558ad8\System.ServiceModel.Routing.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\e48b6a8c491a96d1bc601795532af605\System.Security.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\7590828d50338d512b11a4d3f87d69a2\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\21d5b44ef01ccfa69e79674a51707de0\System.Runtime.Remoting.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\5f2bfb0585061dc256ee9587d430959f\System.Numerics.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\6996a415485a84fef2d2556b0462336f\System.Net.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\6e886c2e732ff69ae9eb1dc121b767d8\System.Messaging.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\92d266f677605e5475b7f39c063c4a9d\System.Management.Instrumentation.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\07a0e1efc063042be3e8faf62b413a12\System.IO.Log.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\7fd39b9a208214e6e5eba4e9396409f1\System.IdentityModel.Selectors.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.Wrapper.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\521f5bccf74318a4777597b0c01fda1e\System.Dynamic.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6a8bd7d373c988a585e90bb61c5ec8cc\System.DirectoryServices.Protocols.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\78dd02d104bb15bc3820c06bd2876239\System.Device.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\97d1aaf3733b107ecdbecb9d21050ff4\System.Data.DataSetExtensions.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c3d7a7ff58ff502887d8f1b77e61adbc\System.Configuration.Install.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\a4f91f2dfd1656ef2e42917963f6bf50\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 871936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\b1c67ee2e0e6e78c31985069fbc82596\System.AddIn.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\c69fb0f955adc7ca80cd5f2fd730edea\System.Activities.DurableInstancing.ni.dll
+ 2012-06-12 09:13 . 2012-06-12 09:13 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\11fc863fa4f5092fca4f2ce25a9ac361\SMSvcHost.ni.exe
+ 2012-06-12 09:19 . 2012-06-12 09:19 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\50e8e826488639e549589ba34666933e\SMDiagnostics.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\722c0236432dd5ccc047481d3ebbd49e\PresentationFramework.Royale.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\6739c3715c9e38dbdfbfd57b424a3094\PresentationFramework.Aero.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3e7359f5f0fb68565314f88f6ec2d67a\PresentationFramework.Luna.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\263748f3d18955b9e467710da1e8546f\PresentationFramework.Classic.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\e1725f0aad2d375efdcfeea0f428df59\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 864256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\d0e50cfb6d905c6e878d604ad65e2043\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 232448 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\cbaf843286694ed089b2a911c48f29d0\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 475136 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\ac6c6882341a572604fa25b32836a4c0\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 169984 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\45da98c4ff3a12f7438f2b7cd10752b9\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 992256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\136e31ba5378e99c0439d13a53b6227f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 422400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\634a00569f0fe8693873f42039aca35f\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\6480551111832c83ee88bcf756a72533\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\c1993abc53fd494f69a66df1c002a25c\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4733842548f5e5e369f5f4ee854b29bb\Microsoft.Office.Tools.Common.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4021eb8bcb78d1a52c66f2bbe27b4698\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 408064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\2b8e1aa6edb4d7b7556b968a14ae890a\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-06-12 09:13 . 2012-06-12 09:13 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\0e81a3996f7cbff23fc01bea4185a918\CustomMarshalers.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\c44ac264fef2a914248caa88a55d0c88\WindowsFormsIntegration.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\7a9f70fa774076a7ec19bc03e7064d0d\UIAutomationClient.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\4837a5c6204d53e7aa4f7dd94b98207c\System.Xml.Linq.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\c477bbff1e4662263255a1bf17bd9c2a\System.Windows.Input.Manipulations.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\d96e221bdd83feea8740868125d7bf65\System.ServiceProcess.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dc86fe1c7a6e3a7ce9e9c1f13d9b1e8e\System.ServiceModel.Routing.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\5a3beae8b211b91bfc620c029cf4c2d4\System.Security.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 762880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\65f0d70169a0e73b45307dddbd86f92b\System.Runtime.Remoting.ni.dll
+ 2012-06-12 09:11 . 2012-06-12 09:11 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\dd25ddcfa0417d40e3f1385e30abcd6f\System.Net.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\60f64e6d09e2c943944eded90b0514ad\System.Messaging.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\08397796343d5730a29f42e61c7f6ee7\System.Management.Instrumentation.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ff1250d2409bd16283c423650d6fd3f6\System.IO.Log.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e60675d3ba7fa94924489dc8466ebff5\System.IdentityModel.Selectors.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a9b1e597aaa263dea2cf8754440bd271\System.Dynamic.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e41e86da56bb60523251e0e08210a77b\System.DirectoryServices.Protocols.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94d45f7f28d81304d7fa83bcea849141\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4c50d8a951546d6dffdc8bcb23f47a7b\System.Device.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\7803f4398a527a87d5cace8023e93e8b\System.Data.DataSetExtensions.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\977c7c2badf6a9059ba8371a0f645fc8\System.Configuration.Install.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\877ef74350e6d374ca8f80b489a8cc8e\System.ComponentModel.Composition.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4330e93f9d0ef85f1a972e11c2ac5156\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0c67d9fc14856eb7d8b4e405aef79960\System.AddIn.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\2b046f2d5f056b906d7b25b75ca23575\System.Activities.DurableInstancing.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\4847f66153121ec4ed532909f7c152be\SMSvcHost.ni.exe
+ 2012-06-12 09:25 . 2012-06-12 09:25 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
+ 2012-06-12 09:14 . 2012-06-12 09:14 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ef6e3eb351fe12a5766be7c956c35d95\PresentationFramework.Classic.ni.dll
+ 2012-06-12 09:14 . 2012-06-12 09:14 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e49a124fdad0f1db135f03a49f18fb48\PresentationFramework.Royale.ni.dll
+ 2012-06-12 09:15 . 2012-06-12 09:15 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
+ 2012-06-12 09:14 . 2012-06-12 09:14 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\141f0a8fbfb83604fa3dd43dbe8fa0f4\PresentationFramework.Luna.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 210432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e4446a8d82b4412494e2409af7a4b645\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 364544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\bdfc721f7e94acba00c2e92153307b70\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b2adaa453df6c958d3cf66ae051787de\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 177152 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\76c2646d6cddec217d5d2f16bd5f4172\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 738304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6e4e81d647b98053d4b580d5afcf682f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 708096 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6436145cd57deecafff434e28a6e3d2a\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\71a317e85628917b1e67260adf87386b\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\01c5ff7a1ea0463414736df5d449e0a9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\fe95f582de10dd69fefdc5eb3d6c48c7\Microsoft.Office.Tools.Common.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 864768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\e81a95402a2987b4d4ae38bcb9458155\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\b0fbf20ee5981aa0fef03248709e8151\Microsoft.Office.Tools.Excel.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\9e9206804811dba44d2b1d62a5ab7355\Microsoft.Office.Tools.Outlook.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\589b4480d0edb6ce64b85af87311622c\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\40338e540dd0ab135e483dc7acb541fd\Microsoft.Office.Tools.Word.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\1f47c112876a29acde1513ad21c9acbb\WindowsFormsIntegration.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\624dbd47892e9494bb46acfc67cd62e1\UIAutomationProvider.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\5fb38c4dbb45b61ca9ccca415d17a292\UIAutomationClient.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\e22bc29b547d1e6952a4f0e986330855\PresentationFramework.Classic.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\8172e6651742b8a8c7aa5d82cff9520e\PresentationFramework.Luna.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\1455f469a6ad7709caad42ac4cce965d\PresentationFramework.Aero.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0b8d7139a9a6b036a67f0bb211668937\PresentationFramework.Royale.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\dc8177d0ca7cf87f8cc4c9f3df06f074\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\179a6d6e2f266e85e3b44a76e62517e6\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\4a8b09e4fa60cd2e85edb3ec174e6a56\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6a65bae68d25ebc23cbf802996ac698a\WindowsFormsIntegration.ni.dll
+ 2012-06-12 09:42 . 2012-06-12 09:42 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\689b491acc08da31b4539caa3cc35127\UIAutomationClient.ni.dll
+ 2012-06-12 09:42 . 2012-06-12 09:42 158208 c:\windows\assembly\NativeImages_v2.0.50727_32\PWMUIAux\3ab1f50a631e47d24e48fdb5d2d7fee9\PWMUIAux.ni.exe
+ 2012-06-12 09:42 . 2012-06-12 09:42 928768 c:\windows\assembly\NativeImages_v2.0.50727_32\PWMUI\7be78dd836ed8bcb1f8705de9727c833\PWMUI.ni.exe
+ 2012-06-12 09:39 . 2012-06-12 09:39 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ed2c7e566c25001fe3d8fc6d5fa6f92d\PresentationFramework.Classic.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c1fe31186398d13470747ef22bb44bf5\PresentationFramework.Aero.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b23f4963da6bcd6daa5f980a24696590\PresentationFramework.Royale.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9e982fe557a8635514a4dbf416ec2a69\PresentationFramework.Luna.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\46775226545e5a13ce92aa43dd70ce2a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\208c82ff95b85b747b05b8da9ef0eb90\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d43898503da8134cbb7c26fdd473c840\Microsoft.PowerShell.GraphicalHost.ni.dll
- 2011-06-07 02:53 . 2010-11-05 01:53 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-06-12 01:46 . 2012-02-10 23:29 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-06-07 02:52 . 2010-11-05 01:52 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-06-07 02:52 . 2010-11-05 01:53 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-12-24 10:01 . 2011-11-03 22:39 1127424 c:\windows\SysWOW64\wininet.dll
+ 2012-06-12 09:12 . 2012-02-28 01:11 1127424 c:\windows\SysWOW64\wininet.dll
+ 2012-06-12 09:12 . 2012-02-28 01:12 1103360 c:\windows\SysWOW64\urlmon.dll
- 2011-12-24 10:01 . 2011-11-03 22:40 1103360 c:\windows\SysWOW64\urlmon.dll
+ 2012-06-12 01:47 . 2011-10-26 04:32 1328128 c:\windows\SysWOW64\quartz.dll
- 2011-06-07 02:52 . 2010-11-20 12:20 1328128 c:\windows\SysWOW64\quartz.dll
+ 2012-06-12 01:47 . 2012-03-31 04:39 3968368 c:\windows\SysWOW64\ntkrnlpa.exe
+ 2012-06-12 09:12 . 2012-02-28 01:18 1799168 c:\windows\SysWOW64\jscript9.dll
+ 2012-06-12 09:12 . 2012-02-28 01:04 1792000 c:\windows\SysWOW64\iertutil.dll
- 2011-12-24 10:01 . 2011-11-03 22:32 1792000 c:\windows\SysWOW64\iertutil.dll
+ 2012-06-12 09:12 . 2012-02-28 01:27 9705984 c:\windows\SysWOW64\ieframe.dll
+ 2012-06-12 01:47 . 2012-03-03 05:31 1077248 c:\windows\SysWOW64\DWrite.dll
- 2011-12-24 10:01 . 2011-11-04 01:44 1390080 c:\windows\system64\wininet.dll
+ 2012-06-12 09:12 . 2012-02-28 06:49 1390080 c:\windows\system64\wininet.dll
+ 2012-06-12 01:48 . 2012-03-31 03:10 3146240 c:\windows\system64\win32k.sys
- 2011-12-24 10:01 . 2011-11-04 01:46 1345536 c:\windows\system64\urlmon.dll
+ 2012-06-12 09:12 . 2012-02-28 06:50 1345536 c:\windows\system64\urlmon.dll
- 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system64\spool\drivers\x64\3\JNWDRV.dll
+ 2012-06-12 01:45 . 2012-03-31 05:40 1402880 c:\windows\system64\spool\drivers\x64\3\JNWDRV.dll
- 2011-06-07 02:52 . 2010-11-20 13:27 1031680 c:\windows\system64\rdpcore.dll
+ 2012-06-12 01:19 . 2012-02-17 06:38 1031680 c:\windows\system64\rdpcore.dll
+ 2012-06-12 01:47 . 2011-10-26 05:25 1572864 c:\windows\system64\quartz.dll
+ 2012-06-12 01:48 . 2012-03-31 06:05 5559664 c:\windows\system64\ntoskrnl.exe
+ 2012-06-12 01:45 . 2011-11-17 06:41 1731920 c:\windows\system64\ntdll.dll
+ 2012-06-12 01:48 . 2011-11-17 06:35 1447936 c:\windows\system64\lsasrv.dll
- 2011-06-07 02:52 . 2010-11-20 13:26 1447936 c:\windows\system64\lsasrv.dll
+ 2012-06-12 09:12 . 2012-02-28 06:56 2311168 c:\windows\system64\jscript9.dll
+ 2012-06-12 09:12 . 2012-02-28 06:43 2144256 c:\windows\system64\iertutil.dll
- 2011-12-24 10:01 . 2011-11-04 01:36 2144256 c:\windows\system64\iertutil.dll
+ 2012-06-12 01:47 . 2012-03-03 06:35 1544704 c:\windows\system64\DWrite.dll
+ 2012-06-12 01:45 . 2012-03-30 11:35 1918320 c:\windows\system64\drivers\tcpip.sys
+ 2012-06-12 09:12 . 2012-02-28 06:49 1390080 c:\windows\system32\wininet.dll
- 2011-12-24 10:01 . 2011-11-04 01:44 1390080 c:\windows\system32\wininet.dll
+ 2012-06-12 01:48 . 2012-03-31 03:10 3146240 c:\windows\system32\win32k.sys
- 2011-12-24 10:01 . 2011-11-04 01:46 1345536 c:\windows\system32\urlmon.dll
+ 2012-06-12 09:12 . 2012-02-28 06:50 1345536 c:\windows\system32\urlmon.dll
+ 2012-06-12 01:45 . 2012-03-31 05:40 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
- 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
+ 2012-06-12 01:47 . 2011-10-26 05:25 1572864 c:\windows\system32\quartz.dll
+ 2012-06-12 01:48 . 2012-03-31 06:05 5559664 c:\windows\system32\ntoskrnl.exe
+ 2012-06-12 01:48 . 2011-11-17 06:35 1447936 c:\windows\system32\lsasrv.dll
- 2011-06-07 02:52 . 2010-11-20 13:26 1447936 c:\windows\system32\lsasrv.dll
+ 2012-06-12 09:12 . 2012-02-28 06:56 2311168 c:\windows\system32\jscript9.dll
+ 2012-06-12 09:12 . 2012-02-28 06:43 2144256 c:\windows\system32\iertutil.dll
- 2011-12-24 10:01 . 2011-11-04 01:36 2144256 c:\windows\system32\iertutil.dll
+ 2012-06-12 01:47 . 2012-03-03 06:35 1544704 c:\windows\system32\DWrite.dll
- 2009-07-14 04:45 . 2011-12-29 21:07 7568600 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2012-06-12 09:40 7568600 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
- 2011-05-31 02:30 . 2012-06-12 03:33 1490792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-05-31 02:30 . 2012-06-13 03:51 1490792 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-12-25 03:17 . 2012-06-13 03:51 2161608 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-154539003-3659347804-3267415899-1003-8192.dat
+ 2011-11-01 04:07 . 2012-06-13 03:51 1998392 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-154539003-3659347804-3267415899-1000-12288.dat
- 2011-11-01 04:07 . 2011-12-07 04:50 1998392 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-154539003-3659347804-3267415899-1000-12288.dat
+ 2012-01-19 19:08 . 2012-01-19 19:08 1369872 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 19:08 . 2012-01-19 19:08 6429992 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 19:52 . 2012-01-19 19:52 3825952 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 5029160 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 1512712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
+ 2011-12-15 20:01 . 2011-12-15 20:01 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2012-06-12 01:46 . 2012-02-10 23:29 2256152 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
+ 2012-01-19 19:08 . 2012-01-19 19:08 1369872 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 19:08 . 2012-01-19 19:08 6429992 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 19:08 . 2012-01-19 19:08 3790112 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 5029160 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-12-15 19:08 . 2011-12-15 19:08 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 1737496 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2011-11-19 00:52 . 2011-11-19 00:52 9183232 c:\windows\Installer\cdc696.msp
+ 2012-04-23 16:32 . 2012-04-23 16:32 3460096 c:\windows\Installer\cdc681.msp
+ 2012-03-07 21:01 . 2012-03-07 21:01 1907712 c:\windows\Installer\cdc657.msp
+ 2007-01-04 21:44 . 2007-01-04 21:44 4971520 c:\windows\Installer\cdc5f7.msp
+ 2006-07-11 02:32 . 2006-07-11 02:32 1748480 c:\windows\Installer\cdc5cb.msp
+ 2012-02-17 09:50 . 2012-02-17 09:50 1236480 c:\windows\Installer\cdc5c2.msp
+ 2012-03-27 01:21 . 2012-03-27 01:21 7622656 c:\windows\Installer\cdc5a4.msi
+ 2012-03-15 19:12 . 2012-03-15 19:12 4968960 c:\windows\Installer\cdc561.msp
+ 2012-03-15 19:11 . 2012-03-15 19:11 1989632 c:\windows\Installer\cdc535.msp
+ 2012-03-21 11:57 . 2012-03-21 11:57 1591808 c:\windows\Installer\cdc4fc.msp
+ 2012-06-12 04:59 . 2012-06-12 04:59 4460544 c:\windows\Installer\4d9094.msi
- 2010-12-26 07:04 . 2011-12-24 10:03 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 4525408 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 4525408 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
- 2010-12-26 07:04 . 2011-12-24 10:03 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-12-26 07:04 . 2012-06-12 09:20 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
+ 2011-03-17 07:22 . 2011-03-17 07:22 4301184 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\GRAPH.EXE
+ 2012-06-12 09:18 . 2012-06-12 09:18 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\4e962b1751cd3b039c5186963ad5f130\WindowsBase.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\6ee9d76d9f1e618cd6fb94b13355bcc9\UIAutomationClientsideProviders.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\28ca4f076264ab07f1d00a6c9623dc49\System.Xml.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\df013cbfec0defc7e9997cdaa90b89bc\System.Xaml.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\6003f51e67a2ae938571bf999135a05a\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 2236416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\bc6df78c506c89659ab7be738179b2ba\System.Web.Services.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\cd7c3aed4408c3554c30a8f0236b90e1\System.Speech.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\94289b88c5b494f572cd7114fa995487\System.ServiceModel.Activities.ni.dll
+ 2012-06-12 09:23 . 2012-06-12 09:23 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\2dbc7aabd92cc0d470acb455c498d919\System.ServiceModel.Discovery.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\affb28e2d9cc3c19de0758e7e8c68e8f\System.Runtime.Serialization.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\b37e6f4b1d742031f328504eb99d0f6c\System.Runtime.DurableInstancing.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\e29ea726977686cc14c3a57e351e8661\System.Printing.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\b83f2453b4538b2e80fe09cfd94dce00\System.Management.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\60bf6251873ef465abcebeb9a24b7932\System.IdentityModel.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 2290176 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\97b0b093e73d3a40aa4fd72f38bd5070\System.Drawing.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\a68116468a194678fd04167067134712\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\3a737af86a6a819af97a6d1a04c0e944\System.DirectoryServices.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\c66de888fa426d24e6ff4c4725aef1b0\System.Deployment.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\0ec8effb7b9d03ae69d37922813bc880\System.Data.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\0eb72df497fad5c273ff16f88b0fb950\System.Data.SqlXml.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 1799168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\536e12016ad3adc78e0708b77e6b9219\System.Data.Services.Client.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\86553c1d7f3e66c17fc3e0274de7a2de\System.Data.Linq.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\6aea67f24827961ce1d48356715389d8\System.Configuration.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\eac19ca5a18a6d08cd247e68b618ba68\System.ComponentModel.Composition.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\3869077874ba987242c791b3a18b2f8b\System.Activities.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\cffc381c37033e26f6aecc9de6f4f793\System.Activities.Presentation.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\96083298999a677341c98fc2bf01b248\System.Activities.Core.Presentation.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\36d8641ebc8601162adae65242087d85\ReachFramework.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\45b96dd6ea9eb2c7f16ea7b5a1ce6a94\PresentationUI.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e8180bc4b9fe2cfc2c4378fc1b24ccd0\Microsoft.VisualBasic.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1843200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\5f6c79d821e57c78ceeb90006382f5ff\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\16425c121db8083cbaa51f619c9e51e7\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\5284682fcf04815a86233bcaf696da66\Microsoft.Transactions.Bridge.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1117696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\4e13d19c5d01b40db3b681c8ff30c61c\Microsoft.Office.Tools.Common.Implementation.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 2034688 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\36df1ca5db288e7867f2d84a6992c5f4\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\35c0b45c2f6e74a962bd3c640d6aa798\Microsoft.Office.Tools.Word.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\03875e326e3e0fd7c4e73a57227a097b\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\4b1d24a96b3882f9e77445e48a7c59ee\Microsoft.JScript.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\1ff62486cdefbfc2dab41b686a9aa4e2\Microsoft.CSharp.ni.dll
+ 2012-06-12 09:14 . 2012-06-12 09:14 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\568a3f5fb8fba4184c0d60bfb40a205c\WindowsBase.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\24ed0e1df6a605cdb2088f87ae2ab8ff\UIAutomationClientsideProviders.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\dbf1ad6d474e9a53467a625d583df2ec\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 1885696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\b37cc0aa41e7feaba9f290da4da91d71\System.Web.Services.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\f368c85283c4e6c9650dd1c8d369dcc5\System.Speech.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ec057796972ce41b751eaa3a8306fbcb\System.ServiceModel.Discovery.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 1393152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5055b60e339143bbace5871f5fe4b114\System.ServiceModel.Activities.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\79ac99fe5274fb82ffcff2c15f71854c\System.Runtime.DurableInstancing.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\2a5d3d1de001807ca96c5853e8243df6\System.Printing.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\bd28f26b18b8ffeee1a0fbaa98f5810e\System.IdentityModel.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 1653248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\ee7975d7a04786153df726008c62d44b\System.Drawing.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0fe1e56d17858b6156a3a46330f75f27\System.DirectoryServices.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\fdbf117eb502bcf7ea9b4f5af98889ee\System.Deployment.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\99d0f7ba920eea1117e45dcd9fec0eb5\System.Data.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 2550272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\fdb98c6d783fe167c1dc0022f27b7cd6\System.Data.SqlXml.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\b894a1df3e6d58ada8f1aa303465ca23\System.Data.Services.Client.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\82c0c56ff8259e1440cfd0d5727a26d8\System.Data.Linq.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 7069184 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 4129280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\51025a1c89f6fd752a5396a059d608b2\System.Activities.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\b1ce26c14c922bdc5d45b0ab6b48e111\System.Activities.Presentation.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1546752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\66893548d2b2cad29cabf3b3578f356f\System.Activities.Core.Presentation.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\0b61a086e3bec9ddde1a1a4722a9142d\ReachFramework.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\6059daaa173546e091cb234a96132408\PresentationUI.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\75684af3794c47e8262049062eb0c8e8\Microsoft.VisualBasic.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\4ad379c4a003563baf0913d6c9dadce8\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\42a7f127f3fda82fb12c6a6e144d08c1\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9a37f4e64ce5b856ac3892fef064c7de\Microsoft.Transactions.Bridge.ni.dll
+ 2012-06-12 09:24 . 2012-06-12 09:24 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\780d2df643c4f16dd7b132442cbeac9f\Microsoft.Office.Tools.Excel.Implementation.ni.dll
+ 2012-06-12 09:25 . 2012-06-12 09:25 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\45495de82de6c139e1b737411377d1da\Microsoft.Office.Tools.Word.Implementation.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\cfcc92c125ddfaabad24abe61cfc0471\Microsoft.JScript.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 1616896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\9912b6d76c1017b5af6ef24730f550ca\Microsoft.CSharp.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\b667c13baac715f8bbe18c848f004d17\WindowsBase.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 1459712 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\64357bdb3e15af0dfd4b0c716eb2b80f\UIAutomationClientsideProviders.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\cad19ec720d3d5924238b182c7ca8f5c\System.Printing.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\bdc7cf3511ff966173d11f43c81349c7\System.Data.Services.Client.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\ab53bef2f8e4a71227a89b36e30ace22\ReachFramework.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\7a54871482106b866f172c4734f6ebec\PresentationUI.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\68e01ba6b95773788ff76416239e5136\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-06-12 09:44 . 2012-06-12 09:44 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\04c116dd4292d21e4c968c72cb191abe\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-12 09:38 . 2012-06-12 09:38 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6118deeff1762cbab137f3b1925c506d\WindowsBase.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\7eed2004e3492ce42a2f3af4dd462bff\UIAutomationClientsideProviders.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\66b26e0ff3702073d629e6ecf847dd66\System.Printing.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a47aa68c7d757ba8d0f809f8ba0b9bc2\System.Data.Services.Client.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\56998e7638aeb513e211abe21b8554b1\ReachFramework.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\63984ac1f3586df6773f88e06f58662a\PresentationUI.ni.dll
+ 2012-06-12 09:42 . 2012-06-12 09:42 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\fd74a470e395fc3c3ff57f71bcff7549\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-12 09:43 . 2012-06-12 09:43 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\0fa203fe56a01e0ea3abd17384f76365\Microsoft.PowerShell.GPowerShell.ni.dll
- 2011-06-07 02:53 . 2010-11-05 01:53 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-06-12 01:46 . 2012-02-10 23:29 2256152 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
+ 2012-06-12 01:46 . 2012-02-10 23:29 3998208 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 1737496 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
- 2011-06-07 02:53 . 2010-11-05 01:53 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-12 01:46 . 2012-02-10 23:31 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-12-29 18:44 . 2011-08-30 04:21 12872704 c:\windows\SysWOW64\shell32.dll
+ 2012-06-12 01:47 . 2012-01-04 08:59 12872704 c:\windows\SysWOW64\shell32.dll
+ 2012-06-12 09:12 . 2012-02-28 01:52 12281856 c:\windows\SysWOW64\mshtml.dll
+ 2009-07-14 02:34 . 2012-06-12 09:36 11010048 c:\windows\system64\SMI\Store\Machine\schema.dat
+ 2012-06-12 01:47 . 2012-01-04 10:44 14172672 c:\windows\system64\shell32.dll
+ 2012-06-12 09:12 . 2012-02-28 07:34 17790976 c:\windows\system64\mshtml.dll
+ 2011-01-03 09:02 . 2012-04-27 02:03 57848688 c:\windows\system64\MRT.exe
+ 2012-06-12 09:12 . 2012-02-28 07:02 10888704 c:\windows\system64\ieframe.dll
+ 2009-07-14 02:34 . 2012-06-12 09:36 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2012-06-12 01:47 . 2012-01-04 10:44 14172672 c:\windows\system32\shell32.dll
+ 2012-06-12 09:12 . 2012-02-28 07:34 17790976 c:\windows\system32\mshtml.dll
+ 2011-01-03 09:02 . 2012-04-27 02:03 57848688 c:\windows\system32\MRT.exe
+ 2012-06-12 09:12 . 2012-02-28 07:02 10888704 c:\windows\system32\ieframe.dll
+ 2012-03-07 21:03 . 2012-03-07 21:03 23710208 c:\windows\Installer\cdc64f.msp
+ 2010-10-11 07:12 . 2010-10-11 07:12 11338240 c:\windows\Installer\cdc635.msp
+ 2012-01-19 20:20 . 2012-01-19 20:20 11997696 c:\windows\Installer\cdc625.msp
+ 2011-12-15 20:54 . 2011-12-15 20:54 39732736 c:\windows\Installer\cdc619.msp
+ 2012-03-15 19:09 . 2012-03-15 19:09 17165312 c:\windows\Installer\cdc5e7.msp
+ 2012-03-15 19:11 . 2012-03-15 19:11 66812928 c:\windows\Installer\cdc54b.msp
+ 2011-11-22 06:42 . 2011-11-22 06:42 33189888 c:\windows\Installer\cdc521.msp
+ 2012-06-12 09:01 . 2012-06-12 09:01 20343808 c:\windows\Installer\cdc50d.msp
+ 2012-06-12 09:09 . 2012-06-12 09:09 15659008 c:\windows\assembly\NativeImages_v4.0.30319_64\Temp\14ac-0\PresentationCore.dll
+ 2012-06-12 09:11 . 2012-06-12 09:11 11880448 c:\windows\assembly\NativeImages_v4.0.30319_64\System\935aea6e7eae16674abdd96a68ec97af\System.ni.dll
+ 2012-06-12 09:20 . 2012-06-12 09:20 17291264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\3e1fa07a8e487acceef1c22275f08779\System.Windows.Forms.ni.dll
+ 2012-06-12 09:22 . 2012-06-12 09:22 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\c4cc7eb7733c4221c32caccfd66ae320\System.ServiceModel.ni.dll
+ 2012-06-12 09:21 . 2012-06-12 09:21 18479616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\9df4e7ae75baa7bbb1af30c8061a6e9b\System.Data.Entity.ni.dll
+ 2012-06-12 09:17 . 2012-06-12 09:17 10440192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\b64f213e823a591607c45fac4997801e\System.Core.ni.dll
+ 2012-06-12 09:19 . 2012-06-12 09:19 24407552 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\5eb97ad52c10035367b07021f1febe97\PresentationFramework.ni.dll
+ 2012-06-12 09:18 . 2012-06-12 09:18 15908864 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\c750a4d32ab6ff508c2a8825cc7c9e7d\PresentationCore.ni.dll
+ 2012-06-12 09:11 . 2012-06-12 09:11 19353600 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\6087fce8f76d9af69af496cb10b7d1ee\mscorlib.ni.dll
+ 2012-06-12 09:12 . 2012-06-12 09:12 13138432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\57a4cb79e5e78482ed20705145cdece9\System.Windows.Forms.ni.dll
+ 2012-06-12 09:27 . 2012-06-12 09:27 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\cfece6f67593b4d8bb58d23b7fdcc470\System.ServiceModel.ni.dll
+ 2012-06-12 09:26 . 2012-06-12 09:26 13345792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\7aa839fb16503243d6ae454ab334bcf4\System.Data.Entity.ni.dll
+ 2012-06-12 09:15 . 2012-06-12 09:15 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7e2238b8fa0f33ae39b63de73d5024a0\PresentationFramework.ni.dll
+ 2012-06-12 09:15 . 2012-06-12 09:15 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e5b4cfcb67e63b4fc7119c4ac1072603\PresentationCore.ni.dll
+ 2012-06-12 09:11 . 2012-06-12 09:11 14412800 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
+ 2012-06-12 09:40 . 2012-06-12 09:40 19198464 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\72023da4177692c4326046b873179c44\PresentationFramework.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 16543232 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\fb3ed8745cf2eacaad480e5376169b86\PresentationCore.ni.dll
+ 2012-06-12 09:39 . 2012-06-12 09:39 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\17b7543905a157dc4ea05c3c418d1bc3\PresentationFramework.ni.dll
+ 2012-06-12 09:38 . 2012-06-12 09:38 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\d11d5e6c86e8f372e80ceacbb85841c9\PresentationCore.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 19:51 3911776 ------w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{981e53ba-6df4-4d99-8c33-6c398f5c139e}]
2010-12-09 19:51 3911776 ------w- c:\program files (x86)\ProfileSong\tbProf.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{981e53ba-6df4-4d99-8c33-6c398f5c139e}"= "c:\program files (x86)\ProfileSong\tbProf.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{981e53ba-6df4-4d99-8c33-6c398f5c139e}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-01-02 39408]
"Facebook Update"="c:\users\Connor Biggs\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-09-12 137536]
"Skype"="c:\users\Connor Biggs\Desktop\Skype.exe" [2011-01-27 15026056]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe" [2011-08-22 6276408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"PWMTRV"="c:\progra~2\ThinkPad\UTILIT~1\PWMTR64V.DLL" [2011-10-04 1631296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-11-13 421736]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2012-04-04 1082440]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\ThinkPad\Bluetooth Software\BTTray.exe [2010-2-18 1083680]
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-02 136176]
R2 lxedCATSCustConnectService;lxedCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxedserv.exe [2010-04-15 45736]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-05-30 3048136]
R3 5U877;USB Video Device;c:\windows\system32\DRIVERS\5U877.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-02 136176]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-27 291696]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 PCDSRVC{127174DC-C366ED8B-06020200}_0;PCDSRVC{127174DC-C366ED8B-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\pc-doctor\pcdsrvc_x64.pkms [2011-06-27 25584]
R3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2011-10-04 89152]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [2011-10-04 175168]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys [x]
S1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\DRIVERS\smiifx64.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 LENOVO.CAMMUTE;Lenovo Camera Mute;c:\program files\Lenovo\Communications Utility\CAMMUTE.exe [2010-07-27 50536]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [2011-07-12 101736]
S2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;c:\program files\Lenovo\Communications Utility\TPKNRSVC.exe [2010-07-27 74088]
S2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;c:\program files\LENOVO\VIRTSCRL\lvvsst.exe [2011-07-12 133992]
S2 lxed_device;lxed_device;c:\windows\system32\lxedcoms.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [2012-01-13 103440]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2010-07-15 199272]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [2011-07-12 145256]
S2 TPHKSVC;On Screen Display;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [2011-07-12 142696]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-06-13 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-154539003-3659347804-3267415899-1000Core.job
- c:\users\Connor Biggs\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-12 01:32]
.
2012-06-13 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-154539003-3659347804-3267415899-1000UA.job
- c:\users\Connor Biggs\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-12 01:32]
.
2012-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-02 07:19]
.
2012-06-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-02 07:19]
.
2012-06-12 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\PC-Doctor\uaclauncher.exe [2011-06-27 15:06]
.
2012-06-13 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\PC-Doctor\uaclauncher.exe [2011-06-27 15:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-15 11049576]
"TpShocks"="TpShocks.exe" [2011-03-29 380776]
"LENOVO.TPKNRRES"="c:\program files\Lenovo\Communications Utility\TPKNRRES.exe" [2010-07-27 62312]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"AcWin7Hlpr"="c:\program files (x86)\Lenovo\Access Connections\AcTBenabler.exe" [2011-10-20 33344]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-27 1271168]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://www.yahoo.com/?ilc=8
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: Send image to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.2.1 192.168.2.1
FF - ProfilePath - c:\users\Connor Biggs\AppData\Roaming\Mozilla\Firefox\Profiles\mt91m29m.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=mkg030&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/?ilc=8
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZLxdm3158UUS&ptb=D2VKKxxH4wn0e1quPw19Kg&ind=2011051417&ptnrS=ZLxdm3158UUS&si=100290&n=77de3599&psa=&st=kwd&searchfor=
FF - user.js: general.useragent.extra.brc -
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
WebBrowser-{981E53BA-6DF4-4D99-8C33-6C398F5C139E} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{127174DC-C366ED8B-06020200}_0]
"ImagePath"="\??\c:\program files\pc-doctor\pcdsrvc_x64.pkms"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-06-12 22:24:52
ComboFix-quarantined-files.txt 2012-06-13 04:24
ComboFix2.txt 2012-06-12 04:23
.
Pre-Run: 326,009,544,704 bytes free
Post-Run: 325,076,819,968 bytes free
.
- - End Of File - - 29FCE6D167FA5375DBE6442A3025D1B8

Edited by Jbiggs, 12 June 2012 - 10:27 PM.

  • 0

#65
Jbiggs
Posted 13 June 2012 - 08:06 AM

Jbiggs

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
ok
  • 0

#66
JSntgRvr
Posted 13 June 2012 - 08:25 AM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
How is the computer doing, Jbiggs?
  • 0

#67
Jbiggs
Posted 13 June 2012 - 08:46 PM

Jbiggs

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
the computer is fantastic i posted the report you wanted me to but it is running faster then it did b4 it crashed just just a hare slower then when it wa new 2 years ago best shap i have seen it in sense i bought it
  • 0

#68
JSntgRvr
Posted 13 June 2012 - 11:45 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
Congratulations.

Since the tools we used to scan the computer, as well as tools to delete files and folders, are no longer needed, they should be removed, as well as the folders created by these tools.

Follow these steps to uninstall Combofix.

  • Rename Combofix to Uninstall and click on it. That should remove the application.

Delete the C:\FRST folder.

Manually remove any tool left.

Here are some suggestions:

  • Always keep your JAVA updated. Older versions will make your computer vulnerable.
  • Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.

Create a Windows 7 System Repair Disc

Note: the below can only be done if your machine has a a type of CD/R or DVD/R optical drive installed. Also depending on the exact type of OEM your machine has you may be unable to actually create a SRD.

  • Click on Start(Windows 7 Orb) >> Run...(or the Windows key and R together) to bring up the Run box, then copy/paste the following command into the box and click on OK:

    recdisc.exe

  • Allow the UAC(User Account Control) prompt via selecting Yes.
  • You should now see a menu like the below:-
Posted Image

  • Put a blank rewritable CD/DVD in your optical(CD/DVD) drive and then click on Create disc.
  • Note: If a AutoPlay window pops up, just close it.
  • When the SRD has been created you will see the below:-
Posted Image

  • Now click on Close >> OK. Leave the disc in the drive as we will be using it shortly.
  • You now have a Windows 7 System Repair Disc.

To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Miekiemoes.

Best wishes! Posted Image
  • 0

#69
Jbiggs
Posted 14 June 2012 - 08:05 AM

Jbiggs

    Member

  • Topic Starter
  • Member
  • PipPip
  • 49 posts
thanks so much have a great year and life!
  • 0

#70
JSntgRvr
Posted 01 July 2012 - 08:38 PM

JSntgRvr

    Global Moderator

  • Global Moderator
  • 11,579 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0

Advertisements

Back to Computer Won't Boot - Malware Related · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Computer Won't Boot - Malware Related

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP