Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

svchost.exe

Started by wlrdew , Jul 23 2012 10:58 PM

Please log in to reply

#16
wlrdew

Posted 01 August 2012 - 11:28 AM

Member

Topic Starter
Member
19 posts

Hi WhiteHat...

Sorry for the incomplete file. How do I get back to it, to give hte whole thing?

There may be an issue with the ComboFix file.

The reason I had not posted it is..... LAst night, I was able to get through the scan, and the computer rebooted as you said. Afterwards, the blue box popped up and said ComboFix was "preparing the log." However, that stayed for a VERY long time, warning me not to do anything while it was showing. Finally, I went to sleep, assuming it would be finished when I woke. However, the computer looked the same...the same blue box etc. So I came to geekstogo.com to ask for help, but was given a SQL server error (I think). I tried opening geekstogo.com several ways---googling, clicking the link in my email, typing it in, but everytime was given that error.

It was not until you sent this message that I was finally able to open Geekstogo (yay!!!). So, I am not sure how to find hte log, or even if one was created. How should I proceed?

#17
WhiteHat

Posted 01 August 2012 - 11:35 AM

Trusted Helper

Retired Staff
1,925 posts

Hi wlrdew,

The reason I had not posted it is..... LAst night, I was able to get through the scan, and the computer rebooted as you said. Afterwards, the blue box popped up and said ComboFix was "preparing the log." However, that stayed for a VERY long time, warning me not to do anything while it was showing. Finally, I went to sleep, assuming it would be finished when I woke. However, the computer looked the same...the same blue box etc. So I came to geekstogo.com to ask for help, but was given a SQL server error (I think). I tried opening geekstogo.com several ways---googling, clicking the link in my email, typing it in, but everytime was given that error.

I was getting this error too.

See if you can find the log in C:\ComboFix.txt

And the OTL.txt is save in the same directory as the OTL.exe:

C:\Users\Wendy\Desktop

Edited by WhiteHat, 01 August 2012 - 11:35 AM.

#18
wlrdew

Posted 01 August 2012 - 12:23 PM

Member

Topic Starter
Member
19 posts

Ok..I think this is hte full OTL file...I am still looking for the Combofix file

OTL logfile created on: 7/31/2012 9:20:39 PM - Run 3
OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\Wendy\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19272)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.99 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 28.33% Memory free
8.16 Gb Paging File | 4.19 Gb Available in Paging File | 51.34% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 448.21 Gb Total Space | 252.68 Gb Free Space | 56.38% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 8.08 Gb Free Space | 53.86% Space Free | Partition Type: NTFS

Computer Name: WENDY-PC | User Name: Wendy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/07/29 14:48:16 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\Wendy\Desktop\OTL.exe
PRC - [2012/07/27 21:51:42 | 000,686,792 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe
PRC - [2012/05/30 22:35:45 | 000,296,056 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\real\realplayer\Update\realsched.exe
PRC - [2012/05/02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012/05/02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2012/05/02 00:31:38 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012/02/23 12:30:40 | 000,059,240 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
PRC - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

========== Modules (No Company Name) ==========

MOD - [2012/03/26 14:47:33 | 000,016,832 | ---- | M] () -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ViewerPS.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2009/10/14 14:31:44 | 000,116,224 | ---- | M] (WDC) [Auto | Running] -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe -- (WDDMService)
SRV:64bit: - [2008/12/18 04:58:44 | 000,032,768 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\WLTRYSVC.EXE -- (wltrysvc)
SRV:64bit: - [2008/05/19 00:46:40 | 000,122,880 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_bb0e6831\STacSV64.exe -- (STacSV)
SRV:64bit: - [2008/05/19 00:46:36 | 000,086,016 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_bb0e6831\AESTSr64.exe -- (AESTFilters)
SRV:64bit: - [2008/01/20 21:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012/07/27 21:51:45 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/05/02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012/05/02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/16 09:58:08 | 000,020,480 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe -- (WDSmartWareBackgroundService)
SRV - [2009/03/29 23:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/05/02 15:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2012/04/27 10:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\avipbb.sys -- (avipbb)
DRV:64bit: - [2012/04/25 00:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012/02/29 08:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009/09/02 17:45:38 | 000,254,464 | ---- | M] (Jungo) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\windrvr6.sys -- (WinDriver6)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/04/11 00:03:32 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:64bit: - [2008/12/18 04:58:20 | 000,022,520 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCM42RLY.sys -- (BCM42RLY)
DRV:64bit: - [2008/12/18 04:57:12 | 001,526,776 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\bcmwl664.sys -- (BCM43XX)
DRV:64bit: - [2008/10/23 00:23:20 | 000,057,856 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rixdpx64.sys -- (rismxdp)
DRV:64bit: - [2008/10/23 00:23:18 | 000,062,976 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimmpx64.sys -- (rimmptsk)
DRV:64bit: - [2008/10/23 00:23:16 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimspx64.sys -- (rimsptsk)
DRV:64bit: - [2008/09/25 08:23:08 | 000,402,456 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iastor.sys -- (iaStor)
DRV:64bit: - [2008/07/16 06:08:48 | 000,315,440 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:64bit: - [2008/05/27 06:13:38 | 000,059,136 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\MHIKEY10x64.sys -- (MHIKEY10)
DRV:64bit: - [2008/05/19 00:46:50 | 000,393,216 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2008/05/06 23:51:50 | 000,125,440 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV:64bit: - [2008/05/06 23:51:32 | 007,172,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\igdkmd64.sys -- (igfx)
DRV:64bit: - [2008/05/06 17:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wdcsam64.sys -- (WDC_SAM)
DRV:64bit: - [2008/05/06 00:35:46 | 000,219,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2008/05/05 07:30:32 | 000,012,288 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OEM02Vfx.sys -- (OEM02Vfx)
DRV:64bit: - [2008/05/05 07:30:26 | 000,266,624 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\OEM02Dev.sys -- (OEM02Dev)
DRV:64bit: - [2008/01/20 21:46:55 | 000,317,952 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\e1e6032e.sys -- (e1express)
DRV:64bit: - [2007/09/10 17:50:02 | 000,057,872 | ---- | M] (UPEK Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tcusb.sys -- (TcUsb)
DRV:64bit: - [2006/11/06 20:52:50 | 000,086,832 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:64bit: - [2006/11/06 18:13:44 | 000,020,016 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid)
DRV:64bit: - [2006/11/06 18:13:42 | 000,094,512 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:64bit: - [2006/11/02 02:48:50 | 002,488,320 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\atikmdag.sys -- (R300)
DRV - [2007/02/14 20:03:08 | 000,068,922 | ---- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\jl2005c.sys -- (JLTECH0227)
DRV - [2006/11/02 16:57:04 | 000,036,624 | ---- | M] (Sonic Solutions) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\pxhelp20.sys -- (PxHelp20)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=8
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}

IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\URLSearchHook: - No CLSID value found
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.c...fr&d=2011-10-13 18:21:14&v=10.0.0.7&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://search.yahoo....erms}&fr=mkg028
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-169169418-859736985-3299691791-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\[email protected]/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin.dll (Amazon.com, Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/05/30 22:36:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/05/30 22:36:18 | 000,000,000 | ---D | M]

[2010/01/14 18:23:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wendy\AppData\Roaming\Mozilla\Extensions
[2010/01/14 18:23:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wendy\AppData\Roaming\Mozilla\Extensions\[email protected]
[2012/05/01 21:33:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Wendy\AppData\Roaming\Mozilla\Firefox\Profiles\gbgovozp.default\extensions

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Wendy\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Wendy\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Wendy\AppData\Local\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: AmazonMP3DownloaderPlugin (Enabled) = C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Yahoo! activeX Plug-in Bridge (Enabled) = C:\Program Files (x86)\Yahoo!\Common\npyaxmpb.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: RealNetworks™ Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer™ HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Wendy\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll
CHR - Extension: YouTube = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: AVG Safe Search = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\
CHR - Extension: Gmail = C:\Users\Wendy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012/05/09 07:54:01 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-169169418-859736985-3299691791-1000..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O4 - HKU\S-1-5-21-169169418-859736985-3299691791-1000..\Run: [SPMTray] "C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe" File not found
O4 - HKU\S-1-5-21-169169418-859736985-3299691791-1000..\Run: [Windows Live Writer] RunDLL32.exe "C:\Users\Wendy\AppData\Local\Windows Live Writer\jmsqpfcv.dll",CS_lg_hyph_find File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableCAD = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-169169418-859736985-3299691791-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-169169418-859736985-3299691791-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..Trusted Domains: ebay.com ([signin] https in Trusted sites)
O15 - HKU\S-1-5-21-169169418-859736985-3299691791-1000\..Trusted Domains: ebay.com.my ([]https in Trusted sites)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.49.159.9 69.60.160.196
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B40A28C0-AA38-4E0A-9A4D-6FF74AAF35F8}: DhcpNameServer = 24.49.159.9 69.60.160.196
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\Windows\SysNative\vrlogon.dll (UPEK Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Wendy\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Wendy\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/07/30 12:42:49 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/07/29 19:51:28 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\Powercinema
[2012/07/29 15:21:57 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\Wendy\Desktop\aswMBR.exe
[2012/07/29 14:48:12 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Users\Wendy\Desktop\OTL.exe
[2012/07/28 00:38:47 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{4D932D0D-5111-48FC-A7C5-969CC8617E70}
[2012/07/28 00:38:45 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{2A890546-E16E-4351-980D-83D496C3E3F5}
[2012/07/23 22:48:30 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{C396F086-2422-41B7-8E1F-9C78195795C4}
[2012/07/23 22:48:28 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{296FC31E-A7FB-4A1E-8CFA-E76341FF9F95}
[2012/07/23 22:07:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2012/07/23 22:03:59 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2012/07/23 21:26:27 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{B0140E92-5179-4E08-910C-11CABD09AC12}
[2012/07/17 19:51:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/07/17 19:51:17 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/17 19:51:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/07/17 19:17:39 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{EB36A884-E40A-4473-9898-2DA9A594EAC8}
[2012/07/17 16:44:43 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{7C35BFA3-C484-44E8-974E-28C38C4AA1A6}
[2012/07/17 16:44:40 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{B745D436-E509-404D-B856-1F5B7932E6B9}
[2012/07/16 20:02:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPoints Point Finder
[2012/07/10 01:08:44 | 000,000,000 | ---D | C] -- C:\Users\Wendy\Documents\Dell Webcam Center
[2012/07/09 22:50:48 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{7E5EA904-5CB2-4A89-80AA-F84D4E7FFFE2}
[2012/07/09 22:50:43 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{50BEFED1-1EC5-4313-993A-BBEC115D73CE}
[2012/07/09 09:41:55 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{7694F664-D0C2-480D-AEC7-F719B2FCED76}
[2012/07/09 09:41:06 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{4E8BA8D3-BAD0-4C5A-8BC4-FB1FF3069315}
[2012/07/07 19:18:03 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{92FD3604-35E9-432B-8FA6-FBB33E1E4F37}
[2012/07/07 19:18:01 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{70691754-BAD8-44C7-8854-3FF87006BCCA}
[2012/07/06 12:56:51 | 000,000,000 | ---D | C] -- C:\Windows\Microsoft Antimalware
[2012/07/06 00:02:13 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{FC5560E1-D3B3-449B-8A22-88F0AE7F0969}
[2012/07/06 00:02:09 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{2F752085-A830-44A2-8C1B-4BB5EB63C10F}
[2012/07/05 11:34:41 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{81786F19-75CF-42BA-A122-DF544D13E025}
[2012/07/05 11:34:40 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{8EE38B87-2407-4DB0-9742-4469A6961652}
[2012/07/03 21:53:28 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{5E1083C5-D683-42CA-9EC6-51D8EA03D47C}
[2012/07/03 21:53:25 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{94D548C3-1E27-4B28-9937-F65D2B2BC3D5}
[2012/07/02 10:53:29 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{DD8EB13D-3897-4DBE-9A20-E01B3652DF8F}
[2012/07/02 10:53:27 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{3B22E124-8A3E-48C0-BB48-EE54133F4317}
[2012/07/01 23:42:18 | 000,016,200 | ---- | C] (McAfee, Inc.) -- C:\Windows\stinger.sys
[2012/07/01 23:41:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\stinger
[2012/07/01 22:17:26 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{F5BB9206-9D9A-4DCC-A91D-7230DE918E73}
[2012/07/01 22:17:23 | 000,000,000 | ---D | C] -- C:\Users\Wendy\AppData\Local\{A08912C0-ABBC-45D2-83D8-4C669F605020}
[2012/07/01 22:11:38 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro

========== Files - Modified Within 30 Days ==========

[2012/07/31 21:18:22 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/31 21:18:22 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/31 21:17:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/31 16:49:02 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/31 12:31:35 | 000,000,392 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A75BA43E-082E-4EF1-A0E6-94026D46C49B}.job
[2012/07/30 15:02:08 | 000,703,516 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/30 15:02:08 | 000,604,752 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/07/30 15:02:08 | 000,104,420 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/07/30 12:57:41 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/07/30 08:32:30 | 000,001,356 | ---- | M] () -- C:\Users\Wendy\AppData\Local\d3d9caps.dat
[2012/07/29 16:25:58 | 000,000,512 | ---- | M] () -- C:\Users\Wendy\Desktop\MBR.dat
[2012/07/29 15:22:08 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\Wendy\Desktop\aswMBR.exe
[2012/07/29 14:48:16 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\Wendy\Desktop\OTL.exe
[2012/07/29 14:45:15 | 000,001,245 | ---- | M] () -- C:\Windows\SysNative\mapisvc.inf
[2012/07/24 14:16:33 | 000,178,688 | ---- | M] () -- C:\Users\Wendy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/07/17 19:51:21 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/11 21:53:49 | 000,380,720 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/05 21:16:52 | 000,000,400 | ---- | M] () -- C:\Users\Wendy\Desktop\Avira-Backup.reg
[2012/07/03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/07/01 23:52:31 | 000,016,200 | ---- | M] (McAfee, Inc.) -- C:\Windows\stinger.sys

========== Files Created - No Company Name ==========

[2012/07/29 16:25:58 | 000,000,512 | ---- | C] () -- C:\Users\Wendy\Desktop\MBR.dat
[2012/07/23 22:30:23 | 000,002,041 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
[2012/07/17 19:51:21 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/01 22:01:23 | 000,000,400 | ---- | C] () -- C:\Users\Wendy\Desktop\Avira-Backup.reg
[2012/05/05 10:57:39 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012/05/05 10:57:39 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012/05/05 10:57:39 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012/05/05 10:57:39 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012/05/05 10:57:39 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/12/04 18:24:36 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2011/09/19 16:24:28 | 000,000,104 | ---- | C] () -- C:\Users\Wendy\Computer - Shortcut.lnk
[2011/06/29 20:46:19 | 000,000,732 | ---- | C] () -- C:\Users\Wendy\AppData\Local\d3d9caps64.dat
[2011/05/26 20:13:48 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\sysmwwod.dll
[2011/05/26 19:52:57 | 000,150,016 | ---- | C] () -- C:\Windows\SysWow64\bwmedia.dll
[2010/12/30 00:43:38 | 000,000,005 | ---- | C] () -- C:\Windows\SysWow64\SySavi2mpeg.dat
[2010/12/30 00:43:07 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2010/04/29 00:07:52 | 000,001,356 | ---- | C] () -- C:\Users\Wendy\AppData\Local\d3d9caps.dat
[2009/12/30 21:12:44 | 000,178,688 | ---- | C] () -- C:\Users\Wendy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== LOP Check ==========

[2010/01/23 23:24:22 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\Amazon
[2011/10/14 11:59:43 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\AVG
[2011/10/13 18:19:19 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\AVG2012
[2011/12/06 18:52:00 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\ICAClient
[2010/12/30 00:57:52 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\MPEG Streamclip
[2011/11/29 17:41:58 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\NCH Swift Sound
[2010/11/27 23:53:21 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\tmp
[2010/02/03 23:15:44 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\Walgreens
[2011/07/29 09:55:39 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\Western Digital
[2011/03/14 15:12:52 | 000,000,000 | ---D | M] -- C:\Users\Wendy\AppData\Roaming\Windows Live Writer
[2011/06/30 10:34:15 | 000,000,306 | ---- | M] () -- C:\Windows\Tasks\Hitman Pro 3.5 Boot Task.job
[2012/07/30 12:57:43 | 000,032,560 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/07/31 12:31:35 | 000,000,392 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{A75BA43E-082E-4EF1-A0E6-94026D46C49B}.job

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:0B4227B4

< End of report >

#19
wlrdew

Posted 01 August 2012 - 12:33 PM

Member

Topic Starter
Member
19 posts

I am hoping this is hte correct ComboFix file....

ComboFix 12-07-30.03 - Wendy 07/31/2012 21:56:09.3.2 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.4085.2390 [GMT -5:00]
Running from: C:\Users\Wendy\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\Users\Wendy\AppData\Local\temp\{2AE54359-24BF-4550-A1EB-57BBE2284A9E}\fpb.tmp
C:\Windows\svchost.exe

((((((((((((((((((((((((( Files Created from 2012-07-01 to 2012-08-01 )))))))))))))))))))))))))))))))

2012-08-01 03:10:35 . 2012-08-01 03:17:31 -------- d-----w- C:\Users\Wendy\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\Public\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\Default\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\AppData\AppData\Local\temp
2012-07-30 17:42:49 . 2012-07-30 17:42:49 -------- d-----w- C:\_OTL
2012-07-30 00:51:28 . 2012-07-30 00:51:28 -------- d-----w- C:\Users\Wendy\AppData\Local\Powercinema
2012-07-24 03:07:10 . 2012-07-24 03:30:21 -------- d-----w- C:\Program Files (x86)\Windows Live
2012-07-24 03:03:59 . 2012-07-24 03:03:59 -------- d-----w- C:\Windows\PCHEALTH
2012-07-18 00:51:17 . 2012-07-03 18:46:44 24904 ----a-w- C:\Windows\system32\drivers\mbam.sys
2012-07-18 00:51:16 . 2012-07-18 00:51:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-07-17 01:02:52 . 2012-07-23 18:22:46 -------- d-----w- C:\Program Files (x86)\MyPoints Point Finder
2012-07-12 02:43:44 . 2012-06-13 13:58:27 2769408 ----a-w- C:\Windows\system32\win32k.sys
2012-07-12 00:39:05 . 2012-06-05 16:22:28 974848 ----a-w- C:\Program Files\Common Files\System\ado\msado15.dll
2012-07-12 00:39:04 . 2012-06-05 16:47:10 708608 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2012-07-12 00:39:01 . 2012-06-05 16:47:28 1401856 ----a-w- C:\Windows\SysWow64\msxml6.dll
2012-07-12 00:39:01 . 2012-06-05 16:47:27 1248768 ----a-w- C:\Windows\SysWow64\msxml3.dll
2012-07-12 00:39:01 . 2012-06-05 16:22:47 1797120 ----a-w- C:\Windows\system32\msxml6.dll
2012-07-12 00:39:01 . 2012-06-05 16:22:46 1869824 ----a-w- C:\Windows\system32\msxml3.dll
2012-07-12 00:38:51 . 2012-06-04 15:29:59 516480 ----a-w- C:\Windows\system32\drivers\ksecdd.sys
2012-07-12 00:38:51 . 2012-06-02 00:22:56 347136 ----a-w- C:\Windows\system32\schannel.dll
2012-07-12 00:38:49 . 2012-06-02 00:22:10 254464 ----a-w- C:\Windows\system32\ncrypt.dll
2012-07-12 00:38:49 . 2012-06-02 00:05:11 77312 ----a-w- C:\Windows\SysWow64\secur32.dll
2012-07-12 00:38:49 . 2012-06-02 00:04:25 278528 ----a-w- C:\Windows\SysWow64\schannel.dll
2012-07-12 00:38:49 . 2012-06-02 00:03:42 204288 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2012-07-12 00:38:46 . 2012-06-08 17:59:03 12899840 ----a-w- C:\Windows\system32\shell32.dll
2012-07-06 17:56:51 . 2012-07-06 17:56:52 -------- d-----w- C:\Windows\Microsoft Antimalware
2012-07-02 04:42:18 . 2012-07-02 04:52:31 16200 ----a-w- C:\Windows\stinger.sys
2012-07-02 04:41:53 . 2012-07-02 05:04:26 -------- d-----w- C:\Program Files (x86)\stinger
.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2012-07-28 02:51:42 . 2012-04-21 04:09:18 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-07-28 02:51:42 . 2011-10-13 15:51:07 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-24 03:03:49 . 2011-03-28 23:36:46 19736 ----a-w- C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-07-12 02:45:52 . 2006-11-02 12:35:00 59701280 ----a-w- C:\Windows\system32\mrt.exe
2012-06-02 22:19:46 . 2012-06-22 16:20:18 38424 ----a-w- C:\Windows\system32\wups.dll
2012-06-02 22:19:43 . 2012-06-22 16:20:51 2428952 ----a-w- C:\Windows\system32\wuaueng.dll
2012-06-02 22:19:42 . 2012-06-22 16:20:52 57880 ----a-w- C:\Windows\system32\wuauclt.exe
2012-06-02 22:19:42 . 2012-06-22 16:20:52 44056 ----a-w- C:\Windows\system32\wups2.dll
2012-06-02 22:19:32 . 2012-06-22 16:20:18 35864 ----a-w- C:\Windows\SysWow64\wups.dll
2012-06-02 22:19:23 . 2012-06-22 16:20:18 701976 ----a-w- C:\Windows\system32\wuapi.dll
2012-06-02 22:19:23 . 2012-06-22 16:20:18 577048 ----a-w- C:\Windows\SysWow64\wuapi.dll
2012-06-02 22:15:31 . 2012-06-22 16:20:51 2622464 ----a-w- C:\Windows\system32\wucltux.dll
2012-06-02 22:15:08 . 2012-06-22 16:20:18 99840 ----a-w- C:\Windows\system32\wudriver.dll
2012-06-02 22:12:13 . 2012-06-22 16:20:18 88576 ----a-w- C:\Windows\SysWow64\wudriver.dll
2012-06-02 20:19:42 . 2012-06-22 16:20:03 186752 ----a-w- C:\Windows\system32\wuwebv.dll
2012-06-02 20:19:42 . 2012-06-22 16:20:03 171904 ----a-w- C:\Windows\SysWow64\wuwebv.dll
2012-06-02 20:15:12 . 2012-06-22 16:20:03 36864 ----a-w- C:\Windows\system32\wuapp.exe
2012-06-02 20:12:20 . 2012-06-22 16:20:03 33792 ----a-w- C:\Windows\SysWow64\wuapp.exe
2012-05-31 04:04:02 . 2012-06-26 16:46:06 9013136 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B225DA50-F3C3-4039-9884-A91284A91F62}\mpengine.dll
2012-05-31 03:35:42 . 2011-12-03 03:55:10 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2012-05-31 03:35:42 . 2011-12-03 03:55:09 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2012-05-15 06:37:49 . 2012-06-14 22:16:53 916992 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-15 06:32:25 . 2012-06-14 22:16:36 43520 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2012-05-15 06:32:00 . 2012-06-14 22:16:39 1469440 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-15 06:31:44 . 2012-06-14 22:16:36 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2012-05-15 06:31:43 . 2012-06-14 22:16:36 71680 ----a-w- C:\Windows\SysWow64\iesetup.dll
2012-05-15 05:01:56 . 2012-06-14 22:16:36 385024 ----a-w- C:\Windows\SysWow64\html.iec
2012-05-15 03:26:05 . 2012-06-14 22:16:36 133632 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-15 03:23:41 . 2012-06-14 22:16:35 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-05-15 02:19:57 . 2012-06-14 22:16:42 1147392 ----a-w- C:\Windows\system32\wininet.dll
2012-05-15 02:19:43 . 2012-06-14 22:16:43 1488384 ----a-w- C:\Windows\system32\urlmon.dll
2012-05-15 02:19:43 . 2012-06-14 22:16:37 108032 ----a-w- C:\Windows\system32\url.dll
2012-05-15 02:18:19 . 2012-06-14 22:16:41 243712 ----a-w- C:\Windows\system32\occache.dll
2012-05-15 02:16:23 . 2012-06-14 22:16:40 1062912 ----a-w- C:\Windows\system32\mstime.dll
2012-05-15 02:15:51 . 2012-06-14 22:16:51 9328640 ----a-w- C:\Windows\system32\mshtml.dll
2012-05-15 02:15:51 . 2012-06-14 22:16:43 98304 ----a-w- C:\Windows\system32\mshtmled.dll
2012-05-15 02:15:47 . 2012-06-14 22:16:44 742912 ----a-w- C:\Windows\system32\msfeeds.dll
2012-05-15 02:15:47 . 2012-06-14 22:16:40 71680 ----a-w- C:\Windows\system32\msfeedsbs.dll
2012-05-15 02:15:14 . 2012-06-14 22:16:39 56832 ----a-w- C:\Windows\system32\licmgr10.dll
2012-05-15 02:15:01 . 2012-06-14 22:16:39 31744 ----a-w- C:\Windows\system32\jsproxy.dll
2012-05-15 02:14:53 . 2012-06-14 22:16:39 1538560 ----a-w- C:\Windows\system32\inetcpl.cpl
2012-05-15 02:14:26 . 2012-06-14 22:16:41 2350592 ----a-w- C:\Windows\system32\iertutil.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:39 77312 ----a-w- C:\Windows\system32\iesetup.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:39 219136 ----a-w- C:\Windows\system32\ieui.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:36 132096 ----a-w- C:\Windows\system32\iesysprep.dll
2012-05-15 02:14:24 . 2012-06-14 22:16:39 72192 ----a-w- C:\Windows\system32\iernonce.dll
2012-05-15 02:14:23 . 2012-06-14 22:16:50 12508672 ----a-w- C:\Windows\system32\ieframe.dll
2012-05-15 02:14:23 . 2012-06-14 22:16:40 252416 ----a-w- C:\Windows\system32\iepeers.dll
2012-05-15 02:14:12 . 2012-06-14 22:16:41 459776 ----a-w- C:\Windows\system32\iedkcs32.dll
2012-05-15 01:21:55 . 2012-06-14 22:16:37 479232 ----a-w- C:\Windows\system32\html.iec
2012-05-15 00:40:32 . 2012-06-14 22:16:36 162816 ----a-w- C:\Windows\system32\ieUnatt.exe
2012-05-15 00:40:10 . 2012-06-14 22:16:35 70656 ----a-w- C:\Windows\system32\ie4uinit.exe
2012-05-15 00:39:38 . 2012-06-14 22:16:35 12288 ----a-w- C:\Windows\system32\msfeedssync.exe
2012-05-15 00:39:13 . 2012-06-14 22:16:35 1638912 ----a-w- C:\Windows\system32\mshtml.tlb

((((((((((((((((((((((((((((( SnapShot_2012-05-09_12.54.16 )))))))))))))))))))))))))))))))))))))))))

+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 51024 C:\Windows\SysWOW64\vcomp100.dll
+ 2012-03-08 23:50:28 . 2012-03-08 23:50:28 49016 C:\Windows\SysWOW64\sirenacm.dll
+ 2012-06-14 22:16:41 . 2012-05-15 06:33:11 67072 C:\Windows\SysWOW64\mshtmled.dll
+ 2012-06-14 22:16:35 . 2012-05-15 03:24:09 13312 C:\Windows\SysWOW64\msfeedssync.exe
- 2011-06-16 03:23:40 . 2011-05-28 04:32:15 13312 C:\Windows\SysWOW64\msfeedssync.exe
+ 2012-06-14 22:16:36 . 2012-05-15 06:33:07 55296 C:\Windows\SysWOW64\msfeedsbs.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:56 55296 C:\Windows\SysWOW64\msfeedsbs.dll
+ 2012-06-14 22:16:43 . 2012-05-15 06:37:49 64512 C:\Windows\SysWOW64\migration\WininetPlugin.dll
- 2011-06-16 03:23:46 . 2011-05-28 06:08:58 64512 C:\Windows\SysWOW64\migration\WininetPlugin.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 81744 C:\Windows\SysWOW64\mfcm100u.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 81744 C:\Windows\SysWOW64\mfcm100.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 60752 C:\Windows\SysWOW64\mfc100rus.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 43344 C:\Windows\SysWOW64\mfc100kor.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 43856 C:\Windows\SysWOW64\mfc100jpn.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 62288 C:\Windows\SysWOW64\mfc100ita.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 64336 C:\Windows\SysWOW64\mfc100fra.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 63824 C:\Windows\SysWOW64\mfc100esn.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 55120 C:\Windows\SysWOW64\mfc100enu.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 64336 C:\Windows\SysWOW64\mfc100deu.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 36176 C:\Windows\SysWOW64\mfc100cht.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 36176 C:\Windows\SysWOW64\mfc100chs.dll
- 2011-06-16 03:23:46 . 2011-05-28 06:04:22 25600 C:\Windows\SysWOW64\jsproxy.dll
+ 2012-06-14 22:16:47 . 2012-05-15 06:32:10 25600 C:\Windows\SysWOW64\jsproxy.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:31:42 55808 C:\Windows\SysWOW64\iernonce.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:02 55808 C:\Windows\SysWOW64\iernonce.dll
+ 2012-06-14 22:15:44 . 2012-04-23 16:00:53 98304 C:\Windows\SysWOW64\cryptnet.dll
+ 2008-01-21 03:20:35 . 2012-07-28 02:51:34 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-21 03:20:34 . 2012-07-28 02:51:34 65536 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-21 03:20:34 . 2012-05-09 00:41:38 65536 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-21 03:20:35 . 2012-07-28 02:51:34 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-21 02:23:20 . 2012-08-01 03:17:58 93544 C:\Windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-12-18 01:34:13 . 2012-08-01 03:18:01 24134 C:\Windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-169169418-859736985-3299691791-1000_UserData.bin
- 2006-11-02 15:04:04 . 2006-11-02 15:04:04 27648 C:\Windows\system32\spool\prtprocs\x64\jnwppr.dll
+ 2012-05-15 23:31:00 . 2012-02-01 15:30:34 27648 C:\Windows\system32\spool\prtprocs\x64\jnwppr.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:28:00 93184 C:\Windows\system32\migration\WininetPlugin.dll
+ 2012-06-14 22:16:35 . 2012-05-15 02:19:57 93184 C:\Windows\system32\migration\WininetPlugin.dll
- 2006-11-02 15:04:04 . 2006-11-02 15:04:04 24576 C:\Windows\system32\jnwmon.dll
+ 2012-05-15 23:31:00 . 2012-02-01 15:30:34 24576 C:\Windows\system32\jnwmon.dll
+ 2012-02-15 16:01:50 . 2012-02-15 16:01:50 52736 C:\Windows\system32\DriverStore\FileRepository\usbaapl64.inf_1002658f\usbaapl64.sys
+ 2011-05-10 13:06:14 . 2011-05-10 13:06:14 22528 C:\Windows\system32\DriverStore\FileRepository\netaapl64.inf_2ae71b6f\netaapl64.sys
+ 2012-05-15 23:22:32 . 2012-03-20 23:34:30 72576 C:\Windows\system32\drivers\partmgr.sys
+ 2012-06-27 22:18:43 . 2012-05-02 20:24:12 27760 C:\Windows\system32\drivers\avkmgr.sys
+ 2012-06-27 22:18:43 . 2012-04-25 05:32:27 98848 C:\Windows\system32\drivers\avgntflt.sys
+ 2009-12-18 01:34:13 . 2012-07-30 19:11:25 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-18 01:34:13 . 2012-05-09 02:29:22 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-18 01:34:09 . 2012-05-09 02:29:22 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-18 01:34:09 . 2012-07-30 19:11:25 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-18 01:34:13 . 2012-07-30 19:11:25 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-12-18 01:34:13 . 2012-05-09 02:29:22 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 32768 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 32768 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-20 20:49:29 . 2012-07-30 17:59:35 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-20 20:49:29 . 2011-06-28 00:32:54 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-20 20:49:29 . 2011-06-28 00:32:54 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-20 20:49:29 . 2012-07-30 17:59:35 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 68880 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 68880 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 57616 C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 57616 C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-04-11 08:14:23 . 2012-04-11 08:14:23 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-04-11 08:14:12 . 2012-04-11 08:14:12 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-04-11 08:14:00 . 2012-04-11 08:14:00 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-15 08:20:59 . 2012-06-15 08:20:59 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-11 08:13:51 . 2012-04-11 08:13:51 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-11 08:14:00 . 2012-04-11 08:14:00 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-04-11 08:13:59 . 2012-04-11 08:13:59 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-06-15 08:21:02 . 2012-06-15 08:21:02 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-04-11 08:14:07 . 2012-04-11 08:14:07 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-06-15 08:21:02 . 2012-06-15 08:21:02 62880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-04-11 08:14:07 . 2012-04-11 08:14:07 62880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-04-11 08:13:50 . 2012-04-11 08:13:50 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:04 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-04-11 08:13:49 . 2012-04-11 08:13:49 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-04-11 08:13:45 . 2012-04-11 08:13:45 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:49 . 2012-06-15 08:20:49 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-11 08:13:49 . 2012-04-11 08:13:49 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-04-11 08:13:02 . 2012-04-11 08:13:02 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:23 . 2012-06-15 08:20:23 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:25 . 2012-06-15 08:20:25 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-04-11 08:13:06 . 2012-04-11 08:13:06 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-31 03:36:29 . 2012-05-31 03:36:29 18944 C:\Windows\Installer\23eeb0c9.msi
+ 2012-05-31 03:35:40 . 2012-05-31 03:35:40 92672 C:\Windows\Installer\23eeb0be.msi
+ 2012-07-24 03:44:38 . 2012-07-24 03:44:38 23552 C:\Windows\Installer\1e3575.msi
+ 2012-07-24 03:41:13 . 2012-07-24 03:41:13 22528 C:\Windows\Installer\1e3566.msi
+ 2012-07-24 03:40:27 . 2012-07-24 03:40:27 29184 C:\Windows\Installer\1e3559.msi
+ 2012-07-24 03:38:20 . 2012-07-24 03:38:20 29184 C:\Windows\Installer\1e3555.msp
+ 2012-07-24 03:38:28 . 2012-07-24 03:38:28 22016 C:\Windows\Installer\1e354f.msi
+ 2012-07-24 03:17:35 . 2012-07-24 03:17:35 58880 C:\Windows\Installer\1e350a.msi
+ 2012-07-24 03:15:06 . 2012-07-24 03:15:06 22528 C:\Windows\Installer\1e34ed.msi
+ 2012-07-24 03:14:46 . 2012-07-24 03:14:46 22016 C:\Windows\Installer\1e34e5.msi
+ 2012-07-24 03:14:25 . 2012-07-24 03:14:25 71680 C:\Windows\Installer\1e34e1.msi
+ 2012-07-24 03:12:27 . 2012-07-24 03:12:27 30720 C:\Windows\Installer\1e34c9.msi
+ 2012-07-24 03:07:10 . 2012-07-24 03:07:10 23040 C:\Windows\Installer\1e34b6.msi
+ 2012-07-24 03:04:05 . 2012-07-24 03:04:05 23040 C:\Windows\Installer\1e34b2.msi
+ 2012-07-24 03:38:26 . 2012-07-24 03:38:26 80395 C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
- 2011-12-16 09:12:00 . 2011-12-16 09:12:00 49936 C:\Windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
+ 2012-05-15 23:42:45 . 2012-05-15 23:42:45 49936 C:\Windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 61440 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:47 61440 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 27136 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 27136 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 11264 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 11264 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 12288 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 12288 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 35088 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 35088 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 18704 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 18704 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 20240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 20240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-06-06 20:43:39 . 2012-02-16 09:07:56 49152 C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-06-06 20:43:39 . 2012-05-22 08:02:49 49152 C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2012-05-31 01:06:32 . 2012-05-31 01:06:32 53608 C:\Windows\Installer\$PatchCache$\Managed\C8FDA2211ADDC08499638CF882522B56\2.1.9\pthreadVC2.dll
+ 2012-05-31 01:06:18 . 2012-05-31 01:06:18 17256 C:\Windows\Installer\$PatchCache$\Managed\C8FDA2211ADDC08499638CF882522B56\2.1.9\AppleVersions.dll
- 2006-11-02 12:40:24 . 2012-03-11 22:21:26 51200 C:\Windows\inf\infpub.dat
+ 2006-11-02 12:40:24 . 2012-06-17 18:48:43 51200 C:\Windows\inf\infpub.dat
+ 2012-05-16 01:32:14 . 2012-05-16 01:32:14 10240 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
+ 2012-05-16 01:32:14 . 2012-05-16 01:32:14 43520 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
+ 2012-05-16 01:31:56 . 2012-05-16 01:31:56 86016 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
+ 2012-05-16 01:29:29 . 2012-05-16 01:29:29 97792 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
+ 2012-05-16 01:26:05 . 2012-05-16 01:26:05 14336 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
+ 2012-05-16 01:24:55 . 2012-05-16 01:24:55 10752 C:\Windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
+ 2012-05-16 01:24:55 . 2012-05-16 01:24:55 58368 C:\Windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
+ 2012-05-16 01:21:19 . 2012-05-16 01:21:19 96768 C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-05-16 01:23:50 . 2012-05-16 01:23:50 35328 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-05-16 01:23:40 . 2012-05-16 01:23:40 71680 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-05-16 01:23:34 . 2012-05-16 01:23:34 82432 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-05-16 01:21:41 . 2012-05-16 01:21:41 78848 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-05-16 01:21:03 . 2012-05-16 01:21:03 11776 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-05-16 01:20:51 . 2012-05-16 01:20:51 44544 C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-05-27 05:48:03 . 2012-05-27 05:48:03 59904 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\026f4d4454607f5bbec73c593ab3a424\System.Windows.Presentation.ni.dll
+ 2012-06-15 08:17:48 . 2012-06-15 08:17:48 54784 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\51b404ef8e47dfb0f4b2511f95c0a00b\System.Web.DynamicData.Design.ni.dll
+ 2012-06-15 08:50:42 . 2012-06-15 08:50:42 54784 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\45cea41d795fbfd7e085a8ad6671b7c8\System.Web.DynamicData.Design.ni.dll
+ 2012-05-21 21:42:19 . 2012-05-21 21:42:19 90624 C:\Windows\assembly\NativeImages_v2.0.50727_64\stdole\c99a1202456cacd028ef4fbfe06e0b10\stdole.ni.dll
+ 2012-05-27 03:49:41 . 2012-05-27 03:49:41 71680 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\77381569b20ec56a0bb3941c6a7a039b\PresentationFontCache.ni.exe
+ 2012-05-27 06:04:50 . 2012-05-27 06:04:50 61952 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\71e134d02ee35b870de5708699f3495b\PresentationCFFRasterizer.ni.dll
+ 2012-05-27 03:30:02 . 2012-05-27 03:30:02 33792 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\a439c31d650a90f61894d25beced8db6\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-27 06:03:43 . 2012-05-27 06:03:43 32256 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\c10fc23b7ed1d3ff8fa87199afe2b0b9\Microsoft.VisualC.ni.dll
+ 2012-05-21 22:00:11 . 2012-05-21 22:00:11 62464 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\d7d6d76032aff91ffe798dfd56e5ea23\ehiExtCOM.ni.dll
+ 2012-05-21 21:47:23 . 2012-05-21 21:47:23 61952 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehExtCOM\d07c9addb3a2a2754110655d8b42e296\ehExtCOM.ni.dll
+ 2012-05-21 21:41:40 . 2012-05-21 21:41:40 28672 C:\Windows\assembly\NativeImages_v2.0.50727_64\dfsvc\e2e610c3777d0f7d404ac66225a24800\dfsvc.ni.exe
+ 2012-05-27 06:10:02 . 2012-05-27 06:10:02 78848 C:\Windows\assembly\NativeImages_v2.0.50727_64\Accessibility\b87e2b39f1a69c62790e8ddf2834059e\Accessibility.ni.dll
+ 2012-05-27 03:08:34 . 2012-05-27 03:08:34 60928 C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5fd0071c259b92078ced7cd752a14730\UIAutomationProvider.ni.dll
+ 2012-05-27 03:00:39 . 2012-05-27 03:00:39 37888 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\5f16ad1b918e728362ac0b0c45d565a1\System.Windows.Presentation.ni.dll
+ 2012-07-18 01:40:53 . 2012-07-18 01:40:53 36864 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3e2877309499e4ab661dc95252da9e39\System.Web.DynamicData.Design.ni.dll
+ 2012-05-27 02:56:39 . 2012-05-27 02:56:39 96256 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\4f30dacc4b2a46ac023b03e577bc1c4a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-19 20:53:26 . 2012-05-19 20:53:26 82944 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\42ce9452c9f716b457088ac184472d59\System.AddIn.Contract.ni.dll
+ 2012-05-19 20:48:08 . 2012-05-19 20:48:08 47104 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\5b76c75938bc15bf44356eed06e17ad3\PresentationFontCache.ni.exe
+ 2012-05-27 03:09:06 . 2012-05-27 03:09:06 39424 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\9e2015be7c88f411a74666f930b1967a\PresentationCFFRasterizer.ni.dll
+ 2012-05-19 20:46:49 . 2012-05-19 20:46:49 79872 C:\Windows\assembly\NativeImages_v2.0.50727_32\napcrypt\f35ea215449a9b2f3d1c281a83bf8db6\napcrypt.ni.dll
+ 2012-05-19 20:44:53 . 2012-05-19 20:44:53 17920 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\ad1802357ee4933040563e7736dfb334\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-27 03:11:46 . 2012-05-27 03:11:46 55296 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\b6fb78b32536288605d28c293d0f21e1\Microsoft.Vsa.ni.dll
+ 2012-05-27 03:08:34 . 2012-05-27 03:08:34 15872 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\be3c3ca8bfb03375bc89f799349b03f3\Microsoft.VisualC.ni.dll
+ 2012-05-19 20:27:21 . 2012-05-19 20:27:21 74752 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\68b8e8b34f49c3cf518afe015f658bf6\Microsoft.Build.Framework.ni.dll
+ 2012-05-19 20:47:45 . 2012-05-19 20:47:45 65024 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\5c46d310587bd60cdc5a1e6a3bcdef27\Microsoft.Build.Framework.ni.dll
+ 2012-05-19 20:29:38 . 2012-05-19 20:29:38 57856 C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\255a7647cad0ec58c01053d7bdddd928\ehiUserXp.ni.dll
+ 2012-05-19 20:25:09 . 2012-05-19 20:25:09 14336 C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\005dde0bf145dbbd30b5e832feb956e9\dfsvc.ni.exe
+ 2012-05-27 03:11:36 . 2012-05-27 03:11:36 25600 C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\1b337cf9a031145849bc48c11b2cfe58\Accessibility.ni.dll
+ 2011-12-03 03:55:17 . 2012-05-31 03:35:56 5632 C:\Windows\SysWOW64\pndx5032.dll
- 2011-12-03 03:55:17 . 2011-12-03 03:55:17 5632 C:\Windows\SysWOW64\pndx5032.dll
+ 2011-12-03 03:55:17 . 2012-05-31 03:35:56 6656 C:\Windows\SysWOW64\pndx5016.dll
- 2011-12-03 03:55:17 . 2011-12-03 03:55:17 6656 C:\Windows\SysWOW64\pndx5016.dll
- 2009-12-26 05:27:44 . 2012-05-01 05:18:06 4820 C:\Windows\system32\WDI\ERCQueuedResolutions.dat
+ 2009-12-26 05:27:44 . 2012-06-09 18:14:38 4820 C:\Windows\system32\WDI\ERCQueuedResolutions.dat
- 2010-01-01 06:10:53 . 2012-03-27 15:13:34 1934 C:\Windows\system32\WDI\{95c162b7-5b71-44f8-82e4-abfd3108f40f}.bin
+ 2010-01-01 06:10:53 . 2012-06-09 03:31:51 1934 C:\Windows\system32\WDI\{95c162b7-5b71-44f8-82e4-abfd3108f40f}.bin
+ 2012-08-01 03:12:33 . 2012-08-01 03:12:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-09 02:26:10 . 2012-05-09 02:26:10 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-09 02:26:10 . 2012-05-09 02:26:10 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-01 03:12:33 . 2012-08-01 03:12:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 4096 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 4096 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2012-05-16 01:23:51 . 2012-05-16 01:23:51 9216 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
+ 2012-05-16 01:20:52 . 2012-05-16 01:20:52 9728 C:\Windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-05-16 00:14:43 . 2012-01-03 10:57:18 299280 C:\Windows\SysWOW64\XPSViewer\XPSViewer.exe
+ 2012-06-14 22:16:47 . 2012-05-15 06:37:28 105984 C:\Windows\SysWOW64\url.dll
- 2009-12-21 14:42:19 . 2009-03-08 11:34:26 105984 C:\Windows\SysWOW64\url.dll

#20
WhiteHat

Posted 01 August 2012 - 04:26 PM

Trusted Helper

Retired Staff
1,925 posts

Hi wlrdew,

I am hoping this is hte correct ComboFix file....

Yes, this is the correct file but he is incomplete.

Please, post the ComboFix.txt again. :thumbsup:

#21
wlrdew

Posted 01 August 2012 - 07:59 PM

Member

Topic Starter
Member
19 posts

My word--you are going to think I am a moron.....I'm not usually. LOL

Trying again... Combofix log. I made sure this time--the WHOlE thing!!

ComboFix 12-07-30.03 - Wendy 07/31/2012 21:56:09.3.2 - x64
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.4085.2390 [GMT -5:00]
Running from: C:\Users\Wendy\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\Users\Wendy\AppData\Local\temp\{2AE54359-24BF-4550-A1EB-57BBE2284A9E}\fpb.tmp
C:\Windows\svchost.exe

((((((((((((((((((((((((( Files Created from 2012-07-01 to 2012-08-01 )))))))))))))))))))))))))))))))

2012-08-01 03:10:35 . 2012-08-01 03:17:31 -------- d-----w- C:\Users\Wendy\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\Public\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\Default\AppData\Local\temp
2012-08-01 03:10:35 . 2012-08-01 03:10:35 -------- d-----w- C:\Users\AppData\AppData\Local\temp
2012-07-30 17:42:49 . 2012-07-30 17:42:49 -------- d-----w- C:\_OTL
2012-07-30 00:51:28 . 2012-07-30 00:51:28 -------- d-----w- C:\Users\Wendy\AppData\Local\Powercinema
2012-07-24 03:07:10 . 2012-07-24 03:30:21 -------- d-----w- C:\Program Files (x86)\Windows Live
2012-07-24 03:03:59 . 2012-07-24 03:03:59 -------- d-----w- C:\Windows\PCHEALTH
2012-07-18 00:51:17 . 2012-07-03 18:46:44 24904 ----a-w- C:\Windows\system32\drivers\mbam.sys
2012-07-18 00:51:16 . 2012-07-18 00:51:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-07-17 01:02:52 . 2012-07-23 18:22:46 -------- d-----w- C:\Program Files (x86)\MyPoints Point Finder
2012-07-12 02:43:44 . 2012-06-13 13:58:27 2769408 ----a-w- C:\Windows\system32\win32k.sys
2012-07-12 00:39:05 . 2012-06-05 16:22:28 974848 ----a-w- C:\Program Files\Common Files\System\ado\msado15.dll
2012-07-12 00:39:04 . 2012-06-05 16:47:10 708608 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2012-07-12 00:39:01 . 2012-06-05 16:47:28 1401856 ----a-w- C:\Windows\SysWow64\msxml6.dll
2012-07-12 00:39:01 . 2012-06-05 16:47:27 1248768 ----a-w- C:\Windows\SysWow64\msxml3.dll
2012-07-12 00:39:01 . 2012-06-05 16:22:47 1797120 ----a-w- C:\Windows\system32\msxml6.dll
2012-07-12 00:39:01 . 2012-06-05 16:22:46 1869824 ----a-w- C:\Windows\system32\msxml3.dll
2012-07-12 00:38:51 . 2012-06-04 15:29:59 516480 ----a-w- C:\Windows\system32\drivers\ksecdd.sys
2012-07-12 00:38:51 . 2012-06-02 00:22:56 347136 ----a-w- C:\Windows\system32\schannel.dll
2012-07-12 00:38:49 . 2012-06-02 00:22:10 254464 ----a-w- C:\Windows\system32\ncrypt.dll
2012-07-12 00:38:49 . 2012-06-02 00:05:11 77312 ----a-w- C:\Windows\SysWow64\secur32.dll
2012-07-12 00:38:49 . 2012-06-02 00:04:25 278528 ----a-w- C:\Windows\SysWow64\schannel.dll
2012-07-12 00:38:49 . 2012-06-02 00:03:42 204288 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2012-07-12 00:38:46 . 2012-06-08 17:59:03 12899840 ----a-w- C:\Windows\system32\shell32.dll
2012-07-06 17:56:51 . 2012-07-06 17:56:52 -------- d-----w- C:\Windows\Microsoft Antimalware
2012-07-02 04:42:18 . 2012-07-02 04:52:31 16200 ----a-w- C:\Windows\stinger.sys
2012-07-02 04:41:53 . 2012-07-02 05:04:26 -------- d-----w- C:\Program Files (x86)\stinger
.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2012-07-28 02:51:42 . 2012-04-21 04:09:18 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-07-28 02:51:42 . 2011-10-13 15:51:07 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-07-24 03:03:49 . 2011-03-28 23:36:46 19736 ----a-w- C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-07-12 02:45:52 . 2006-11-02 12:35:00 59701280 ----a-w- C:\Windows\system32\mrt.exe
2012-06-02 22:19:46 . 2012-06-22 16:20:18 38424 ----a-w- C:\Windows\system32\wups.dll
2012-06-02 22:19:43 . 2012-06-22 16:20:51 2428952 ----a-w- C:\Windows\system32\wuaueng.dll
2012-06-02 22:19:42 . 2012-06-22 16:20:52 57880 ----a-w- C:\Windows\system32\wuauclt.exe
2012-06-02 22:19:42 . 2012-06-22 16:20:52 44056 ----a-w- C:\Windows\system32\wups2.dll
2012-06-02 22:19:32 . 2012-06-22 16:20:18 35864 ----a-w- C:\Windows\SysWow64\wups.dll
2012-06-02 22:19:23 . 2012-06-22 16:20:18 701976 ----a-w- C:\Windows\system32\wuapi.dll
2012-06-02 22:19:23 . 2012-06-22 16:20:18 577048 ----a-w- C:\Windows\SysWow64\wuapi.dll
2012-06-02 22:15:31 . 2012-06-22 16:20:51 2622464 ----a-w- C:\Windows\system32\wucltux.dll
2012-06-02 22:15:08 . 2012-06-22 16:20:18 99840 ----a-w- C:\Windows\system32\wudriver.dll
2012-06-02 22:12:13 . 2012-06-22 16:20:18 88576 ----a-w- C:\Windows\SysWow64\wudriver.dll
2012-06-02 20:19:42 . 2012-06-22 16:20:03 186752 ----a-w- C:\Windows\system32\wuwebv.dll
2012-06-02 20:19:42 . 2012-06-22 16:20:03 171904 ----a-w- C:\Windows\SysWow64\wuwebv.dll
2012-06-02 20:15:12 . 2012-06-22 16:20:03 36864 ----a-w- C:\Windows\system32\wuapp.exe
2012-06-02 20:12:20 . 2012-06-22 16:20:03 33792 ----a-w- C:\Windows\SysWow64\wuapp.exe
2012-05-31 04:04:02 . 2012-06-26 16:46:06 9013136 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B225DA50-F3C3-4039-9884-A91284A91F62}\mpengine.dll
2012-05-31 03:35:42 . 2011-12-03 03:55:10 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2012-05-31 03:35:42 . 2011-12-03 03:55:09 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2012-05-15 06:37:49 . 2012-06-14 22:16:53 916992 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-15 06:32:25 . 2012-06-14 22:16:36 43520 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2012-05-15 06:32:00 . 2012-06-14 22:16:39 1469440 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-15 06:31:44 . 2012-06-14 22:16:36 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2012-05-15 06:31:43 . 2012-06-14 22:16:36 71680 ----a-w- C:\Windows\SysWow64\iesetup.dll
2012-05-15 05:01:56 . 2012-06-14 22:16:36 385024 ----a-w- C:\Windows\SysWow64\html.iec
2012-05-15 03:26:05 . 2012-06-14 22:16:36 133632 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-15 03:23:41 . 2012-06-14 22:16:35 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-05-15 02:19:57 . 2012-06-14 22:16:42 1147392 ----a-w- C:\Windows\system32\wininet.dll
2012-05-15 02:19:43 . 2012-06-14 22:16:43 1488384 ----a-w- C:\Windows\system32\urlmon.dll
2012-05-15 02:19:43 . 2012-06-14 22:16:37 108032 ----a-w- C:\Windows\system32\url.dll
2012-05-15 02:18:19 . 2012-06-14 22:16:41 243712 ----a-w- C:\Windows\system32\occache.dll
2012-05-15 02:16:23 . 2012-06-14 22:16:40 1062912 ----a-w- C:\Windows\system32\mstime.dll
2012-05-15 02:15:51 . 2012-06-14 22:16:51 9328640 ----a-w- C:\Windows\system32\mshtml.dll
2012-05-15 02:15:51 . 2012-06-14 22:16:43 98304 ----a-w- C:\Windows\system32\mshtmled.dll
2012-05-15 02:15:47 . 2012-06-14 22:16:44 742912 ----a-w- C:\Windows\system32\msfeeds.dll
2012-05-15 02:15:47 . 2012-06-14 22:16:40 71680 ----a-w- C:\Windows\system32\msfeedsbs.dll
2012-05-15 02:15:14 . 2012-06-14 22:16:39 56832 ----a-w- C:\Windows\system32\licmgr10.dll
2012-05-15 02:15:01 . 2012-06-14 22:16:39 31744 ----a-w- C:\Windows\system32\jsproxy.dll
2012-05-15 02:14:53 . 2012-06-14 22:16:39 1538560 ----a-w- C:\Windows\system32\inetcpl.cpl
2012-05-15 02:14:26 . 2012-06-14 22:16:41 2350592 ----a-w- C:\Windows\system32\iertutil.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:39 77312 ----a-w- C:\Windows\system32\iesetup.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:39 219136 ----a-w- C:\Windows\system32\ieui.dll
2012-05-15 02:14:26 . 2012-06-14 22:16:36 132096 ----a-w- C:\Windows\system32\iesysprep.dll
2012-05-15 02:14:24 . 2012-06-14 22:16:39 72192 ----a-w- C:\Windows\system32\iernonce.dll
2012-05-15 02:14:23 . 2012-06-14 22:16:50 12508672 ----a-w- C:\Windows\system32\ieframe.dll
2012-05-15 02:14:23 . 2012-06-14 22:16:40 252416 ----a-w- C:\Windows\system32\iepeers.dll
2012-05-15 02:14:12 . 2012-06-14 22:16:41 459776 ----a-w- C:\Windows\system32\iedkcs32.dll
2012-05-15 01:21:55 . 2012-06-14 22:16:37 479232 ----a-w- C:\Windows\system32\html.iec
2012-05-15 00:40:32 . 2012-06-14 22:16:36 162816 ----a-w- C:\Windows\system32\ieUnatt.exe
2012-05-15 00:40:10 . 2012-06-14 22:16:35 70656 ----a-w- C:\Windows\system32\ie4uinit.exe
2012-05-15 00:39:38 . 2012-06-14 22:16:35 12288 ----a-w- C:\Windows\system32\msfeedssync.exe
2012-05-15 00:39:13 . 2012-06-14 22:16:35 1638912 ----a-w- C:\Windows\system32\mshtml.tlb

((((((((((((((((((((((((((((( SnapShot_2012-05-09_12.54.16 )))))))))))))))))))))))))))))))))))))))))

+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 51024 C:\Windows\SysWOW64\vcomp100.dll
+ 2012-03-08 23:50:28 . 2012-03-08 23:50:28 49016 C:\Windows\SysWOW64\sirenacm.dll
+ 2012-06-14 22:16:41 . 2012-05-15 06:33:11 67072 C:\Windows\SysWOW64\mshtmled.dll
+ 2012-06-14 22:16:35 . 2012-05-15 03:24:09 13312 C:\Windows\SysWOW64\msfeedssync.exe
- 2011-06-16 03:23:40 . 2011-05-28 04:32:15 13312 C:\Windows\SysWOW64\msfeedssync.exe
+ 2012-06-14 22:16:36 . 2012-05-15 06:33:07 55296 C:\Windows\SysWOW64\msfeedsbs.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:56 55296 C:\Windows\SysWOW64\msfeedsbs.dll
+ 2012-06-14 22:16:43 . 2012-05-15 06:37:49 64512 C:\Windows\SysWOW64\migration\WininetPlugin.dll
- 2011-06-16 03:23:46 . 2011-05-28 06:08:58 64512 C:\Windows\SysWOW64\migration\WininetPlugin.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 81744 C:\Windows\SysWOW64\mfcm100u.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 81744 C:\Windows\SysWOW64\mfcm100.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 60752 C:\Windows\SysWOW64\mfc100rus.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 43344 C:\Windows\SysWOW64\mfc100kor.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 43856 C:\Windows\SysWOW64\mfc100jpn.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 62288 C:\Windows\SysWOW64\mfc100ita.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 64336 C:\Windows\SysWOW64\mfc100fra.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 63824 C:\Windows\SysWOW64\mfc100esn.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 55120 C:\Windows\SysWOW64\mfc100enu.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 64336 C:\Windows\SysWOW64\mfc100deu.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 36176 C:\Windows\SysWOW64\mfc100cht.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 36176 C:\Windows\SysWOW64\mfc100chs.dll
- 2011-06-16 03:23:46 . 2011-05-28 06:04:22 25600 C:\Windows\SysWOW64\jsproxy.dll
+ 2012-06-14 22:16:47 . 2012-05-15 06:32:10 25600 C:\Windows\SysWOW64\jsproxy.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:31:42 55808 C:\Windows\SysWOW64\iernonce.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:02 55808 C:\Windows\SysWOW64\iernonce.dll
+ 2012-06-14 22:15:44 . 2012-04-23 16:00:53 98304 C:\Windows\SysWOW64\cryptnet.dll
+ 2008-01-21 03:20:35 . 2012-07-28 02:51:34 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-01-21 03:20:34 . 2012-07-28 02:51:34 65536 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-21 03:20:34 . 2012-05-09 00:41:38 65536 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-21 03:20:35 . 2012-07-28 02:51:34 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-01-21 02:23:20 . 2012-08-01 03:17:58 93544 C:\Windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-12-18 01:34:13 . 2012-08-01 03:18:01 24134 C:\Windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-169169418-859736985-3299691791-1000_UserData.bin
- 2006-11-02 15:04:04 . 2006-11-02 15:04:04 27648 C:\Windows\system32\spool\prtprocs\x64\jnwppr.dll
+ 2012-05-15 23:31:00 . 2012-02-01 15:30:34 27648 C:\Windows\system32\spool\prtprocs\x64\jnwppr.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:28:00 93184 C:\Windows\system32\migration\WininetPlugin.dll
+ 2012-06-14 22:16:35 . 2012-05-15 02:19:57 93184 C:\Windows\system32\migration\WininetPlugin.dll
- 2006-11-02 15:04:04 . 2006-11-02 15:04:04 24576 C:\Windows\system32\jnwmon.dll
+ 2012-05-15 23:31:00 . 2012-02-01 15:30:34 24576 C:\Windows\system32\jnwmon.dll
+ 2012-02-15 16:01:50 . 2012-02-15 16:01:50 52736 C:\Windows\system32\DriverStore\FileRepository\usbaapl64.inf_1002658f\usbaapl64.sys
+ 2011-05-10 13:06:14 . 2011-05-10 13:06:14 22528 C:\Windows\system32\DriverStore\FileRepository\netaapl64.inf_2ae71b6f\netaapl64.sys
+ 2012-05-15 23:22:32 . 2012-03-20 23:34:30 72576 C:\Windows\system32\drivers\partmgr.sys
+ 2012-06-27 22:18:43 . 2012-05-02 20:24:12 27760 C:\Windows\system32\drivers\avkmgr.sys
+ 2012-06-27 22:18:43 . 2012-04-25 05:32:27 98848 C:\Windows\system32\drivers\avgntflt.sys
+ 2009-12-18 01:34:13 . 2012-07-30 19:11:25 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-18 01:34:13 . 2012-05-09 02:29:22 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-18 01:34:09 . 2012-05-09 02:29:22 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-18 01:34:09 . 2012-07-30 19:11:25 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-18 01:34:13 . 2012-07-30 19:11:25 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-12-18 01:34:13 . 2012-05-09 02:29:22 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 32768 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 32768 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-01-08 22:17:18 . 2011-06-28 03:04:37 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-01-08 22:17:18 . 2012-07-30 20:00:54 16384 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-20 20:49:29 . 2012-07-30 17:59:35 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-20 20:49:29 . 2011-06-28 00:32:54 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-20 20:49:29 . 2011-06-28 00:32:54 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-20 20:49:29 . 2012-07-30 17:59:35 16384 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 68880 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 68880 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 57616 C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 57616 C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 87408 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 93024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 35688 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-04-11 08:14:23 . 2012-04-11 08:14:23 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 11120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 17784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-04-11 08:14:22 . 2012-04-11 08:14:22 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-06-15 08:21:11 . 2012-06-15 08:21:11 58240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 44920 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-04-11 08:14:12 . 2012-04-11 08:14:12 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 37240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 64352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 51032 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-04-11 08:14:00 . 2012-04-11 08:14:00 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-15 08:20:59 . 2012-06-15 08:20:59 50552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-11 08:13:51 . 2012-04-11 08:13:51 81784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-04-11 08:14:00 . 2012-04-11 08:14:00 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 81800 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2012-04-11 08:13:59 . 2012-04-11 08:13:59 39784 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-06-15 08:21:02 . 2012-06-15 08:21:02 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-04-11 08:14:07 . 2012-04-11 08:14:07 68952 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-06-15 08:21:02 . 2012-06-15 08:21:02 62880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-04-11 08:14:07 . 2012-04-11 08:14:07 62880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-04-11 08:13:50 . 2012-04-11 08:13:50 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 12128 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:04 97680 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-04-11 08:13:49 . 2012-04-11 08:13:49 17240 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-04-11 08:13:45 . 2012-04-11 08:13:45 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:49 . 2012-06-15 08:20:49 94552 C:\Windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-04-11 08:13:49 . 2012-04-11 08:13:49 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 91488 C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-04-11 08:13:02 . 2012-04-11 08:13:02 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:23 . 2012-06-15 08:20:23 78168 C:\Windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 08:20:25 . 2012-06-15 08:20:25 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-04-11 08:13:06 . 2012-04-11 08:13:06 81248 C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-05-31 03:36:29 . 2012-05-31 03:36:29 18944 C:\Windows\Installer\23eeb0c9.msi
+ 2012-05-31 03:35:40 . 2012-05-31 03:35:40 92672 C:\Windows\Installer\23eeb0be.msi
+ 2012-07-24 03:44:38 . 2012-07-24 03:44:38 23552 C:\Windows\Installer\1e3575.msi
+ 2012-07-24 03:41:13 . 2012-07-24 03:41:13 22528 C:\Windows\Installer\1e3566.msi
+ 2012-07-24 03:40:27 . 2012-07-24 03:40:27 29184 C:\Windows\Installer\1e3559.msi
+ 2012-07-24 03:38:20 . 2012-07-24 03:38:20 29184 C:\Windows\Installer\1e3555.msp
+ 2012-07-24 03:38:28 . 2012-07-24 03:38:28 22016 C:\Windows\Installer\1e354f.msi
+ 2012-07-24 03:17:35 . 2012-07-24 03:17:35 58880 C:\Windows\Installer\1e350a.msi
+ 2012-07-24 03:15:06 . 2012-07-24 03:15:06 22528 C:\Windows\Installer\1e34ed.msi
+ 2012-07-24 03:14:46 . 2012-07-24 03:14:46 22016 C:\Windows\Installer\1e34e5.msi
+ 2012-07-24 03:14:25 . 2012-07-24 03:14:25 71680 C:\Windows\Installer\1e34e1.msi
+ 2012-07-24 03:12:27 . 2012-07-24 03:12:27 30720 C:\Windows\Installer\1e34c9.msi
+ 2012-07-24 03:07:10 . 2012-07-24 03:07:10 23040 C:\Windows\Installer\1e34b6.msi
+ 2012-07-24 03:04:05 . 2012-07-24 03:04:05 23040 C:\Windows\Installer\1e34b2.msi
+ 2012-07-24 03:38:26 . 2012-07-24 03:38:26 80395 C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}\MsblIco.Exe
- 2011-12-16 09:12:00 . 2011-12-16 09:12:00 49936 C:\Windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
+ 2012-05-15 23:42:45 . 2012-05-15 23:42:45 49936 C:\Windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 61440 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:47 61440 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 27136 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 27136 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 11264 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 11264 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 12288 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 12288 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 35088 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 35088 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 18704 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 18704 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 20240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 20240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-06-06 20:43:39 . 2012-02-16 09:07:56 49152 C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-06-06 20:43:39 . 2012-05-22 08:02:49 49152 C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2012-05-31 01:06:32 . 2012-05-31 01:06:32 53608 C:\Windows\Installer\$PatchCache$\Managed\C8FDA2211ADDC08499638CF882522B56\2.1.9\pthreadVC2.dll
+ 2012-05-31 01:06:18 . 2012-05-31 01:06:18 17256 C:\Windows\Installer\$PatchCache$\Managed\C8FDA2211ADDC08499638CF882522B56\2.1.9\AppleVersions.dll
- 2006-11-02 12:40:24 . 2012-03-11 22:21:26 51200 C:\Windows\inf\infpub.dat
+ 2006-11-02 12:40:24 . 2012-06-17 18:48:43 51200 C:\Windows\inf\infpub.dat
+ 2012-05-16 01:32:14 . 2012-05-16 01:32:14 10240 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
+ 2012-05-16 01:32:14 . 2012-05-16 01:32:14 43520 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
+ 2012-05-16 01:31:56 . 2012-05-16 01:31:56 86016 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
+ 2012-05-16 01:29:29 . 2012-05-16 01:29:29 97792 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
+ 2012-05-16 01:26:05 . 2012-05-16 01:26:05 14336 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
+ 2012-05-16 01:24:55 . 2012-05-16 01:24:55 10752 C:\Windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
+ 2012-05-16 01:24:55 . 2012-05-16 01:24:55 58368 C:\Windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
+ 2012-05-16 01:21:19 . 2012-05-16 01:21:19 96768 C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
+ 2012-05-16 01:23:50 . 2012-05-16 01:23:50 35328 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
+ 2012-05-16 01:23:40 . 2012-05-16 01:23:40 71680 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
+ 2012-05-16 01:23:34 . 2012-05-16 01:23:34 82432 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
+ 2012-05-16 01:21:41 . 2012-05-16 01:21:41 78848 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
+ 2012-05-16 01:21:03 . 2012-05-16 01:21:03 11776 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
+ 2012-05-16 01:20:51 . 2012-05-16 01:20:51 44544 C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
+ 2012-05-27 05:48:03 . 2012-05-27 05:48:03 59904 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\026f4d4454607f5bbec73c593ab3a424\System.Windows.Presentation.ni.dll
+ 2012-06-15 08:17:48 . 2012-06-15 08:17:48 54784 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\51b404ef8e47dfb0f4b2511f95c0a00b\System.Web.DynamicData.Design.ni.dll
+ 2012-06-15 08:50:42 . 2012-06-15 08:50:42 54784 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\45cea41d795fbfd7e085a8ad6671b7c8\System.Web.DynamicData.Design.ni.dll
+ 2012-05-21 21:42:19 . 2012-05-21 21:42:19 90624 C:\Windows\assembly\NativeImages_v2.0.50727_64\stdole\c99a1202456cacd028ef4fbfe06e0b10\stdole.ni.dll
+ 2012-05-27 03:49:41 . 2012-05-27 03:49:41 71680 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\77381569b20ec56a0bb3941c6a7a039b\PresentationFontCache.ni.exe
+ 2012-05-27 06:04:50 . 2012-05-27 06:04:50 61952 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\71e134d02ee35b870de5708699f3495b\PresentationCFFRasterizer.ni.dll
+ 2012-05-27 03:30:02 . 2012-05-27 03:30:02 33792 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\a439c31d650a90f61894d25beced8db6\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-27 06:03:43 . 2012-05-27 06:03:43 32256 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\c10fc23b7ed1d3ff8fa87199afe2b0b9\Microsoft.VisualC.ni.dll
+ 2012-05-21 22:00:11 . 2012-05-21 22:00:11 62464 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiExtCOM\d7d6d76032aff91ffe798dfd56e5ea23\ehiExtCOM.ni.dll
+ 2012-05-21 21:47:23 . 2012-05-21 21:47:23 61952 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehExtCOM\d07c9addb3a2a2754110655d8b42e296\ehExtCOM.ni.dll
+ 2012-05-21 21:41:40 . 2012-05-21 21:41:40 28672 C:\Windows\assembly\NativeImages_v2.0.50727_64\dfsvc\e2e610c3777d0f7d404ac66225a24800\dfsvc.ni.exe
+ 2012-05-27 06:10:02 . 2012-05-27 06:10:02 78848 C:\Windows\assembly\NativeImages_v2.0.50727_64\Accessibility\b87e2b39f1a69c62790e8ddf2834059e\Accessibility.ni.dll
+ 2012-05-27 03:08:34 . 2012-05-27 03:08:34 60928 C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5fd0071c259b92078ced7cd752a14730\UIAutomationProvider.ni.dll
+ 2012-05-27 03:00:39 . 2012-05-27 03:00:39 37888 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\5f16ad1b918e728362ac0b0c45d565a1\System.Windows.Presentation.ni.dll
+ 2012-07-18 01:40:53 . 2012-07-18 01:40:53 36864 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3e2877309499e4ab661dc95252da9e39\System.Web.DynamicData.Design.ni.dll
+ 2012-05-27 02:56:39 . 2012-05-27 02:56:39 96256 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\4f30dacc4b2a46ac023b03e577bc1c4a\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-19 20:53:26 . 2012-05-19 20:53:26 82944 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\42ce9452c9f716b457088ac184472d59\System.AddIn.Contract.ni.dll
+ 2012-05-19 20:48:08 . 2012-05-19 20:48:08 47104 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\5b76c75938bc15bf44356eed06e17ad3\PresentationFontCache.ni.exe
+ 2012-05-27 03:09:06 . 2012-05-27 03:09:06 39424 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\9e2015be7c88f411a74666f930b1967a\PresentationCFFRasterizer.ni.dll
+ 2012-05-19 20:46:49 . 2012-05-19 20:46:49 79872 C:\Windows\assembly\NativeImages_v2.0.50727_32\napcrypt\f35ea215449a9b2f3d1c281a83bf8db6\napcrypt.ni.dll
+ 2012-05-19 20:44:53 . 2012-05-19 20:44:53 17920 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\ad1802357ee4933040563e7736dfb334\Microsoft.WSMan.Runtime.ni.dll
+ 2012-05-27 03:11:46 . 2012-05-27 03:11:46 55296 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\b6fb78b32536288605d28c293d0f21e1\Microsoft.Vsa.ni.dll
+ 2012-05-27 03:08:34 . 2012-05-27 03:08:34 15872 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\be3c3ca8bfb03375bc89f799349b03f3\Microsoft.VisualC.ni.dll
+ 2012-05-19 20:27:21 . 2012-05-19 20:27:21 74752 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\68b8e8b34f49c3cf518afe015f658bf6\Microsoft.Build.Framework.ni.dll
+ 2012-05-19 20:47:45 . 2012-05-19 20:47:45 65024 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\5c46d310587bd60cdc5a1e6a3bcdef27\Microsoft.Build.Framework.ni.dll
+ 2012-05-19 20:29:38 . 2012-05-19 20:29:38 57856 C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\255a7647cad0ec58c01053d7bdddd928\ehiUserXp.ni.dll
+ 2012-05-19 20:25:09 . 2012-05-19 20:25:09 14336 C:\Windows\assembly\NativeImages_v2.0.50727_32\dfsvc\005dde0bf145dbbd30b5e832feb956e9\dfsvc.ni.exe
+ 2012-05-27 03:11:36 . 2012-05-27 03:11:36 25600 C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\1b337cf9a031145849bc48c11b2cfe58\Accessibility.ni.dll
+ 2011-12-03 03:55:17 . 2012-05-31 03:35:56 5632 C:\Windows\SysWOW64\pndx5032.dll
- 2011-12-03 03:55:17 . 2011-12-03 03:55:17 5632 C:\Windows\SysWOW64\pndx5032.dll
+ 2011-12-03 03:55:17 . 2012-05-31 03:35:56 6656 C:\Windows\SysWOW64\pndx5016.dll
- 2011-12-03 03:55:17 . 2011-12-03 03:55:17 6656 C:\Windows\SysWOW64\pndx5016.dll
- 2009-12-26 05:27:44 . 2012-05-01 05:18:06 4820 C:\Windows\system32\WDI\ERCQueuedResolutions.dat
+ 2009-12-26 05:27:44 . 2012-06-09 18:14:38 4820 C:\Windows\system32\WDI\ERCQueuedResolutions.dat
- 2010-01-01 06:10:53 . 2012-03-27 15:13:34 1934 C:\Windows\system32\WDI\{95c162b7-5b71-44f8-82e4-abfd3108f40f}.bin
+ 2010-01-01 06:10:53 . 2012-06-09 03:31:51 1934 C:\Windows\system32\WDI\{95c162b7-5b71-44f8-82e4-abfd3108f40f}.bin
+ 2012-08-01 03:12:33 . 2012-08-01 03:12:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-09 02:26:10 . 2012-05-09 02:26:10 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2012-05-09 02:26:10 . 2012-05-09 02:26:10 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-08-01 03:12:33 . 2012-08-01 03:12:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 4096 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 4096 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2012-05-16 01:23:51 . 2012-05-16 01:23:51 9216 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
+ 2012-05-16 01:20:52 . 2012-05-16 01:20:52 9728 C:\Windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
+ 2012-05-16 00:14:43 . 2012-01-03 10:57:18 299280 C:\Windows\SysWOW64\XPSViewer\XPSViewer.exe
+ 2012-06-14 22:16:47 . 2012-05-15 06:37:28 105984 C:\Windows\SysWOW64\url.dll
- 2009-12-21 14:42:19 . 2009-03-08 11:34:26 105984 C:\Windows\SysWOW64\url.dll
+ 2011-12-03 03:55:36 . 2012-05-31 03:36:08 198832 C:\Windows\SysWOW64\rmoc3260.dll
- 2011-12-03 03:55:36 . 2011-12-03 03:55:36 198832 C:\Windows\SysWOW64\rmoc3260.dll
- 2011-12-03 03:55:15 . 2011-12-03 03:55:15 272896 C:\Windows\SysWOW64\pncrt.dll
+ 2011-12-03 03:55:15 . 2012-05-31 03:35:49 272896 C:\Windows\SysWOW64\pncrt.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:07:19 206848 C:\Windows\SysWOW64\occache.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:35:37 206848 C:\Windows\SysWOW64\occache.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 773968 C:\Windows\SysWOW64\msvcr100.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 421200 C:\Windows\SysWOW64\msvcp100.dll
+ 2012-06-14 22:16:37 . 2012-05-15 06:33:44 611840 C:\Windows\SysWOW64\mstime.dll
- 2011-06-16 03:23:42 . 2011-05-28 06:05:27 611840 C:\Windows\SysWOW64\mstime.dll
+ 2012-06-14 22:16:44 . 2012-05-15 06:33:07 629760 C:\Windows\SysWOW64\msfeeds.dll
+ 2012-07-28 02:51:42 . 2012-07-28 02:51:42 686792 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe
+ 2012-07-28 02:51:42 . 2012-07-28 02:51:42 466632 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.dll
+ 2012-04-21 04:09:18 . 2012-07-28 02:51:45 250056 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
- 2011-04-16 00:02:16 . 2011-02-17 06:19:43 726528 C:\Windows\SysWOW64\jscript.dll
+ 2012-05-16 00:16:28 . 2011-10-18 06:18:56 726528 C:\Windows\SysWOW64\jscript.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:03 164352 C:\Windows\SysWOW64\ieui.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:31:44 164352 C:\Windows\SysWOW64\ieui.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:31:42 184320 C:\Windows\SysWOW64\iepeers.dll
- 2011-06-16 03:23:40 . 2011-05-28 06:04:02 184320 C:\Windows\SysWOW64\iepeers.dll
- 2011-06-16 03:23:41 . 2011-05-28 06:03:58 387584 C:\Windows\SysWOW64\iedkcs32.dll
+ 2012-06-14 22:16:36 . 2012-05-15 06:31:38 387584 C:\Windows\SysWOW64\iedkcs32.dll
+ 2012-06-14 22:16:35 . 2012-05-15 03:25:37 174080 C:\Windows\SysWOW64\ie4uinit.exe
- 2012-03-14 02:33:09 . 2012-02-14 15:45:30 219648 C:\Windows\SysWOW64\d3d10_1core.dll
+ 2012-05-15 23:27:29 . 2012-03-01 14:46:01 219648 C:\Windows\SysWOW64\d3d10_1core.dll
+ 2012-05-15 23:27:27 . 2012-03-01 14:46:01 160768 C:\Windows\SysWOW64\d3d10_1.dll
- 2012-03-14 02:33:09 . 2012-02-14 15:45:30 160768 C:\Windows\SysWOW64\d3d10_1.dll
+ 2012-05-15 23:27:27 . 2012-02-29 13:44:50 683008 C:\Windows\SysWOW64\d2d1.dll
- 2012-03-14 02:33:09 . 2012-02-13 13:47:57 683008 C:\Windows\SysWOW64\d2d1.dll
+ 2012-06-14 22:15:44 . 2012-04-23 16:00:53 133120 C:\Windows\SysWOW64\cryptsvc.dll
+ 2012-06-14 22:15:45 . 2012-04-23 16:00:53 984064 C:\Windows\SysWOW64\crypt32.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 138056 C:\Windows\SysWOW64\atl100.dll
+ 2009-12-18 23:17:12 . 2012-08-01 02:18:02 468634 C:\Windows\system32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 15:45:30 . 2012-08-01 03:18:00 117812 C:\Windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2006-11-02 12:46:18 . 2012-05-09 11:28:26 604752 C:\Windows\system32\perfh009.dat
+ 2006-11-02 12:46:18 . 2012-07-30 20:02:08 604752 C:\Windows\system32\perfh009.dat
- 2006-11-02 12:46:18 . 2012-05-09 11:28:26 104420 C:\Windows\system32\perfc009.dat
+ 2006-11-02 12:46:18 . 2012-07-30 20:02:08 104420 C:\Windows\system32\perfc009.dat
+ 2009-12-19 15:43:42 . 2012-02-23 15:18:36 279656 C:\Windows\system32\MpSigStub.exe
+ 2012-07-28 02:51:38 . 2012-07-28 02:51:38 417992 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_3_300_268_ActiveX.exe
+ 2012-07-28 02:51:38 . 2012-07-28 02:51:38 513224 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_3_300_268_ActiveX.dll
+ 2012-05-16 00:16:28 . 2011-10-18 06:50:27 817664 C:\Windows\system32\jscript.dll
- 2011-04-16 00:02:16 . 2011-02-17 07:15:30 817664 C:\Windows\system32\jscript.dll
+ 2006-11-02 15:21:45 . 2012-07-12 02:53:49 380720 C:\Windows\system32\FNTCACHE.DAT
- 2006-11-02 15:21:45 . 2012-05-05 18:46:45 380720 C:\Windows\system32\FNTCACHE.DAT
- 2012-03-14 02:18:08 . 2012-01-09 14:27:49 209920 C:\Windows\system32\drivers\rdpwd.sys
+ 2012-06-14 22:18:50 . 2012-05-01 14:29:44 209920 C:\Windows\system32\drivers\rdpwd.sys
+ 2012-06-27 22:18:43 . 2012-04-27 15:20:04 132832 C:\Windows\system32\drivers\avipbb.sys
+ 2012-05-15 23:27:28 . 2012-03-01 15:39:45 327680 C:\Windows\system32\d3d10_1core.dll
- 2012-03-14 02:33:09 . 2012-02-14 16:49:43 327680 C:\Windows\system32\d3d10_1core.dll
- 2012-03-14 02:33:08 . 2012-02-14 16:49:43 196096 C:\Windows\system32\d3d10_1.dll
+ 2012-05-15 23:27:27 . 2012-03-01 15:39:45 196096 C:\Windows\system32\d3d10_1.dll
- 2012-03-14 02:33:09 . 2012-02-13 14:06:48 834048 C:\Windows\system32\d2d1.dll
+ 2012-05-15 23:27:27 . 2012-02-29 14:09:35 834048 C:\Windows\system32\d2d1.dll
+ 2012-06-14 22:15:44 . 2012-04-23 16:25:30 174592 C:\Windows\system32\cryptsvc.dll
+ 2012-06-14 22:15:45 . 2012-04-23 16:25:30 132096 C:\Windows\system32\cryptnet.dll
- 2009-12-22 03:40:04 . 2011-04-16 08:39:35 262144 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-12-22 03:40:04 . 2012-05-16 03:13:50 262144 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2010-01-08 22:17:18 . 2012-05-18 01:13:15 262144 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2010-01-08 22:17:18 . 2011-04-16 21:20:43 262144 C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2012-07-06 18:06:25 . 2012-07-06 18:13:11 262144 C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2010-02-20 20:51:22 . 2010-08-14 03:25:12 262144 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2010-02-20 20:51:22 . 2012-05-16 03:11:02 262144 C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2012-07-06 17:58:19 . 2012-07-06 18:07:45 262144 C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
- 2010-10-25 05:04:51 . 2012-05-09 02:23:58 369376 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2010-10-25 05:04:51 . 2012-08-01 03:11:40 369376 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 226600 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2012-04-21 16:03:36 . 2012-04-21 16:03:36 616024 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 156440 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 598784 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 598784 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
+ 2012-05-16 00:00:09 . 2012-02-13 11:02:27 171808 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
- 2012-04-11 03:13:07 . 2012-01-26 11:00:27 630784 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-06-14 22:15:07 . 2012-04-23 11:01:47 630784 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
+ 2012-05-16 00:18:56 . 2012-01-03 10:57:50 486144 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 917272 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpftxt_v0400.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 182056 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2012-04-21 16:03:36 . 2012-04-21 16:03:36 616024 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 156440 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 518400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 518400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 957200 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 957200 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 386824 C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2012-05-16 00:00:09 . 2012-02-13 11:02:16 130848 C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
- 2012-04-11 03:13:07 . 2012-01-26 11:00:14 630784 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-06-14 22:15:07 . 2012-04-23 11:01:12 630784 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-05-16 00:18:56 . 2012-01-03 10:58:05 389888 C:\Windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2012-05-16 00:18:56 . 2012-01-03 10:57:07 364816 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2012-05-16 00:18:57 . 2012-01-03 10:57:03 989968 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 350592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 350592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 163168 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 163168 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 138592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-04-11 08:14:03 . 2012-04-11 08:14:03 138592 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
- 2012-04-11 08:14:15 . 2012-04-11 08:14:15 699224 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 699224 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-04-11 08:14:14 . 2012-04-11 08:14:14 857960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 857960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 675672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-04-11 08:14:15 . 2012-04-11 08:14:15 675672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-04-11 08:13:56 . 2012-04-11 08:13:56 113512 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-06-15 08:20:56 . 2012-06-15 08:20:56 113512 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-04-11 08:14:13 . 2012-04-11 08:14:13 129912 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 129912 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 390008 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-04-11 08:14:13 . 2012-04-11 08:14:13 390008 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-04-11 08:14:12 . 2012-04-11 08:14:12 505208 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 505208 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-04-11 08:13:56 . 2012-04-11 08:13:56 261472 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-15 08:20:56 . 2012-06-15 08:20:56 261472 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-04-11 08:14:13 . 2012-04-11 08:14:13 122264 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 122264 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 291184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-04-11 08:14:13 . 2012-04-11 08:14:13 291184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-06-15 08:21:04 . 2012-06-15 08:21:04 349568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-04-11 08:14:10 . 2012-04-11 08:14:10 349568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 236880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-04-11 08:14:02 . 2012-04-11 08:14:02 236880 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-04-11 08:14:13 . 2012-04-11 08:14:13 253280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-15 08:21:05 . 2012-06-15 08:21:05 253280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-04-11 08:13:56 . 2012-04-11 08:13:56 378720 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-15 08:20:56 . 2012-06-15 08:20:56 378720 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-04-11 08:14:02 . 2012-04-11 08:14:02 134528 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 134528 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-06-15 08:21:04 . 2012-06-15 08:21:04 123736 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-04-11 08:14:10 . 2012-04-11 08:14:10 123736 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-04-11 08:14:09 . 2012-04-11 08:14:09 392552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-06-15 08:21:03 . 2012-06-15 08:21:03 392552 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-04-11 08:14:09 . 2012-04-11 08:14:09 125816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-06-15 08:21:03 . 2012-06-15 08:21:03 125816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-04-11 08:13:48 . 2012-04-11 08:13:48 120152 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 120152 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-06-15 08:20:56 . 2012-06-15 08:20:56 616024 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-15 08:20:55 . 2012-06-15 08:20:55 395120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-11 08:13:53 . 2012-04-11 08:13:53 395120 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-04-11 08:13:54 . 2012-04-11 08:13:54 182144 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-06-15 08:20:55 . 2012-06-15 08:20:55 182144 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-04-11 08:13:53 . 2012-04-11 08:13:53 285072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-06-15 08:20:55 . 2012-06-15 08:20:55 285072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-06-15 08:20:54 . 2012-06-15 08:20:54 829280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-04-11 08:13:53 . 2012-04-11 08:13:53 829280 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-04-11 08:13:52 . 2012-04-11 08:13:52 747360 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-06-15 08:20:54 . 2012-06-15 08:20:54 747360 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-04-11 08:14:02 . 2012-04-11 08:14:02 436600 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 436600 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2012-04-11 08:14:02 . 2012-04-11 08:14:02 683872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2012-06-15 08:21:00 . 2012-06-15 08:21:00 683872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-04-11 08:13:51 . 2012-04-11 08:13:51 409448 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 409448 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-04-11 08:13:59 . 2012-04-11 08:13:59 210816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 210816 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 156440 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-06-15 08:21:03 . 2012-06-15 08:21:03 122248 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-04-11 08:14:09 . 2012-04-11 08:14:09 122248 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2012-06-15 08:21:02 . 2012-06-15 08:21:02 525704 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-04-11 08:14:07 . 2012-04-11 08:14:07 525704 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 112976 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-04-11 08:13:51 . 2012-04-11 08:13:51 112976 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-06-15 08:21:10 . 2012-06-15 08:21:10 581464 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-04-11 08:14:21 . 2012-04-11 08:14:21 581464 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2012-04-11 08:14:19 . 2012-04-11 08:14:19 832856 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-06-15 08:21:09 . 2012-06-15 08:21:09 832856 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2012-06-15 08:21:09 . 2012-06-15 08:21:09 194424 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-04-11 08:14:19 . 2012-04-11 08:14:19 194424 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-04-11 08:14:18 . 2012-04-11 08:14:19 478576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-06-15 08:21:09 . 2012-06-15 08:21:09 478576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-06-15 08:21:09 . 2012-06-15 08:21:09 167288 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-04-11 08:14:18 . 2012-04-11 08:14:18 167288 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2012-04-11 08:14:18 . 2012-04-11 08:14:18 232304 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-06-15 08:21:08 . 2012-06-15 08:21:08 232304 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2012-06-15 08:20:53 . 2012-06-15 08:20:53 661352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-04-11 08:13:50 . 2012-04-11 08:13:50 661352 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2012-04-11 08:14:04 . 2012-04-11 08:14:04 349576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 349576 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 387960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2012-04-11 08:14:05 . 2012-04-11 08:14:05 387960 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 746336 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-04-11 08:13:49 . 2012-04-11 08:13:49 746336 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-06-15 08:20:52 . 2012-06-15 08:20:52 505184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-04-11 08:13:48 . 2012-04-11 08:13:48 505184 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 288616 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-04-11 08:14:14 . 2012-04-11 08:14:14 288616 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-04-11 08:14:16 . 2012-04-11 08:14:16 335712 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-15 08:21:06 . 2012-06-15 08:21:06 335712 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-15 08:20:51 . 2012-06-15 08:20:51 125440 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-04-11 08:13:47 . 2012-04-11 08:13:47 125440 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 08:20:51 . 2012-06-15 08:20:51 237424 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-11 08:13:47 . 2012-04-11 08:13:47 237424 C:\Windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-11 08:14:05 . 2012-04-11 08:14:05 187776 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 187776 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-04-11 08:13:37 . 2012-04-11 08:13:37 269672 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-15 08:20:43 . 2012-06-15 08:20:43 269672 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-15 08:20:44 . 2012-06-15 08:20:44 334688 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-04-11 08:13:38 . 2012-04-11 08:13:38 334688 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-04-11 08:13:04 . 2012-04-11 08:13:04 109568 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 08:20:25 . 2012-06-15 08:20:25 109568 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 08:20:25 . 2012-06-15 08:20:25 246128 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-11 08:13:04 . 2012-04-11 08:13:04 246128 C:\Windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-04-11 08:13:28 . 2012-04-11 08:13:28 170368 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-06-15 08:20:36 . 2012-06-15 08:20:36 170368 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-07-06 17:56:52 . 2012-07-06 20:03:54 585728 C:\Windows\Microsoft Antimalware\Support\MpWppTracing-07062012-095652-00000003-ffffffff.bin
+ 2012-07-06 17:56:52 . 2012-07-06 17:56:52 311296 C:\Windows\Microsoft Antimalware\Scans\History\CacheManager\MpScanCache-0.bin
+ 2012-05-15 22:54:32 . 2012-05-15 22:54:32 160768 C:\Windows\Installer\24d10a.msi
+ 2012-07-24 03:41:25 . 2012-07-24 03:41:25 468480 C:\Windows\Installer\1e3570.msp
+ 2012-07-24 03:40:51 . 2012-07-24 03:40:51 625664 C:\Windows\Installer\1e3562.msp
+ 2012-07-24 03:30:29 . 2012-07-24 03:30:29 417792 C:\Windows\Installer\1e3537.msi
+ 2012-07-24 03:20:17 . 2012-07-24 03:20:17 200192 C:\Windows\Installer\1e3516.msi
+ 2012-07-24 03:18:05 . 2012-07-24 03:18:05 715264 C:\Windows\Installer\1e3512.msp
+ 2012-07-24 03:16:32 . 2012-07-24 03:16:32 212992 C:\Windows\Installer\1e34fa.msi
+ 2012-07-24 03:15:24 . 2012-07-24 03:15:24 136704 C:\Windows\Installer\1e34f6.msp
+ 2012-07-24 03:15:16 . 2012-07-24 03:15:16 238080 C:\Windows\Installer\1e34f1.msi
+ 2012-07-24 03:15:04 . 2012-07-24 03:15:04 191488 C:\Windows\Installer\1e34e9.msi
+ 2012-07-24 03:04:01 . 2012-07-24 03:04:01 445952 C:\Windows\Installer\1e34ae.msi
+ 2011-12-22 22:01:28 . 2011-12-22 22:01:28 380416 C:\Windows\Installer\19b84b.msp
+ 2012-05-29 05:03:29 . 2012-05-29 05:03:29 897024 C:\Windows\Installer\{C779648B-410E-4BBA-B75B-5815BCEFE71D}\SafariIco.exe
+ 2011-12-04 23:24:09 . 2012-07-12 02:44:48 135168 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2011-12-04 23:24:09 . 2012-04-11 08:06:42 135168 C:\Windows\Installer\{91190409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 888080 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 888080 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 922384 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 922384 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 217864 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 217864 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 184080 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 184080 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
+ 2012-06-17 18:54:06 . 2012-06-17 18:54:06 380928 C:\Windows\Installer\{840A3BAA-4C68-4581-9C7A-6F8D6CF531B9}\iTunesIco.exe
+ 2012-05-24 18:29:10 . 2012-05-24 18:29:10 236904 C:\Windows\Installer\$PatchCache$\Managed\FAEB67A6F1D637247AB9AD48012A5EB6\5.2.0\OutlookChangeNotifierAddIn_x64.dll
+ 2012-05-24 18:29:10 . 2012-05-24 18:29:10 227176 C:\Windows\Installer\$PatchCache$\Managed\FAEB67A6F1D637247AB9AD48012A5EB6\5.2.0\OutlookChangeNotifierAddIn.dll
+ 2010-03-18 18:16:28 . 2010-03-18 18:16:28 181096 C:\Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_X86.dll
+ 2010-03-18 19:27:14 . 2010-03-18 19:27:14 225640 C:\Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_AMD64.dll
+ 2011-09-16 02:41:56 . 2011-09-16 02:41:56 408936 C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\WINWORD.EXE
+ 2006-11-02 12:40:24 . 2012-06-17 18:48:43 143360 C:\Windows\inf\infstrng.dat
- 2006-11-02 12:40:24 . 2012-03-11 22:21:26 143360 C:\Windows\inf\infstrng.dat
- 2006-11-02 12:40:24 . 2012-03-11 22:21:26 143360 C:\Windows\inf\infstor.dat
+ 2006-11-02 12:40:24 . 2012-06-17 18:48:43 143360 C:\Windows\inf\infstor.dat
+ 2012-06-15 08:27:39 . 2012-06-15 08:27:39 337408 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\08becdcc9bd647c4e4d07ceea7fe4895\WindowsFormsIntegration.ni.dll
+ 2012-05-16 01:28:24 . 2012-05-16 01:28:24 231424 C:\Windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\fb43d84bc59b21e8a7f3e36d616eea90\UIAutomationTypes.ni.dll
+ 2012-05-16 01:28:23 . 2012-05-16 01:28:23 122368 C:\Windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\26f12a0a3baed2a227cf30aaeae03913\UIAutomationProvider.ni.dll
+ 2012-05-16 01:32:16 . 2012-05-16 01:32:16 645120 C:\Windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\1c3c298326e9ac14796516ac1da09a16\UIAutomationClient.ni.dll
+ 2012-05-16 01:27:50 . 2012-05-16 01:27:50 528896 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\307eea660f877dc40ae90882ce554757\System.Xml.Linq.ni.dll
+ 2012-05-16 01:28:24 . 2012-05-16 01:28:24 256000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\b4afa252d0f0e27b0b5e8fcb2cc5b3a7\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-16 01:28:01 . 2012-05-16 01:28:01 903168 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\8c0ee7b970cc4e8c2986c7898af71661\System.Transactions.ni.dll
+ 2012-06-15 08:27:23 . 2012-06-15 08:27:23 281088 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ca5505a49a075ee7ad2535f89d9ea992\System.ServiceProcess.ni.dll
+ 2012-05-16 01:31:47 . 2012-05-16 01:31:47 108032 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\eb4fb369926faaffede7aaf317fd6532\System.ServiceModel.Channels.ni.dll
+ 2012-05-16 01:31:51 . 2012-05-16 01:31:51 517120 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e5ab3c37897bb578bdbfe6b7e0558ad8\System.ServiceModel.Routing.ni.dll
+ 2012-05-16 01:25:47 . 2012-05-16 01:25:47 946688 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Security\e48b6a8c491a96d1bc601795532af605\System.Security.ni.dll
+ 2012-05-16 01:28:09 . 2012-05-16 01:28:09 376832 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\7590828d50338d512b11a4d3f87d69a2\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-16 01:28:08 . 2012-05-16 01:28:08 987648 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\21d5b44ef01ccfa69e79674a51707de0\System.Runtime.Remoting.ni.dll
+ 2012-05-16 01:25:47 . 2012-05-16 01:25:47 176640 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\5f2bfb0585061dc256ee9587d430959f\System.Numerics.ni.dll
+ 2012-05-16 01:31:00 . 2012-05-16 01:31:00 933376 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Net\6996a415485a84fef2d2556b0462336f\System.Net.ni.dll
+ 2012-06-15 08:27:19 . 2012-06-15 08:27:19 781824 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\0d8257087be3e57b071d1d5ccd705c2f\System.Messaging.ni.dll
+ 2012-05-16 01:30:49 . 2012-05-16 01:30:49 521728 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\92d266f677605e5475b7f39c063c4a9d\System.Management.Instrumentation.ni.dll
+ 2012-05-16 01:30:48 . 2012-05-16 01:30:48 531456 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\07a0e1efc063042be3e8faf62b413a12\System.IO.Log.ni.dll
+ 2012-05-16 01:30:47 . 2012-05-16 01:30:47 290816 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\7fd39b9a208214e6e5eba4e9396409f1\System.IdentityModel.Selectors.ni.dll
+ 2012-05-16 01:28:03 . 2012-05-16 01:28:03 348672 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.Wrapper.dll
+ 2012-05-16 01:25:48 . 2012-05-16 01:25:48 512000 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\521f5bccf74318a4777597b0c01fda1e\System.Dynamic.ni.dll
+ 2012-05-16 01:30:43 . 2012-05-16 01:30:43 632832 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6a8bd7d373c988a585e90bb61c5ec8cc\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-16 01:30:40 . 2012-05-16 01:30:40 141824 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Device\78dd02d104bb15bc3820c06bd2876239\System.Device.ni.dll
+ 2012-05-16 01:29:33 . 2012-05-16 01:29:33 176128 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\97d1aaf3733b107ecdbecb9d21050ff4\System.Data.DataSetExtensions.ni.dll
+ 2012-06-15 08:27:11 . 2012-06-15 08:27:11 181760 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll
+ 2012-05-16 01:29:31 . 2012-05-16 01:29:31 255488 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\a4f91f2dfd1656ef2e42917963f6bf50\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-16 01:29:28 . 2012-05-16 01:29:28 871936 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\b1c67ee2e0e6e78c31985069fbc82596\System.AddIn.ni.dll
+ 2012-05-16 01:29:19 . 2012-05-16 01:29:19 560640 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\c69fb0f955adc7ca80cd5f2fd730edea\System.Activities.DurableInstancing.ni.dll
+ 2012-05-16 01:24:59 . 2012-05-16 01:24:59 432128 C:\Windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\11fc863fa4f5092fca4f2ce25a9ac361\SMSvcHost.ni.exe
+ 2012-05-16 01:27:57 . 2012-05-16 01:27:57 185344 C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\50e8e826488639e549589ba34666933e\SMDiagnostics.ni.dll
+ 2012-05-16 01:27:37 . 2012-05-16 01:27:37 428032 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\722c0236432dd5ccc047481d3ebbd49e\PresentationFramework.Royale.ni.dll
+ 2012-05-16 01:27:34 . 2012-05-16 01:27:34 622592 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\6739c3715c9e38dbdfbfd57b424a3094\PresentationFramework.Aero.ni.dll
+ 2012-05-16 01:27:36 . 2012-05-16 01:27:36 802304 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3e7359f5f0fb68565314f88f6ec2d67a\PresentationFramework.Luna.ni.dll
+ 2012-05-16 01:27:35 . 2012-05-16 01:27:35 349184 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\263748f3d18955b9e467710da1e8546f\PresentationFramework.Classic.ni.dll
+ 2012-06-15 08:18:51 . 2012-06-15 08:18:51 422912 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\58441b4216f3051caa7041fa1cd9476d\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-06-15 08:24:20 . 2012-06-15 08:24:20 422912 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\097137b03ff37196b4b8ba62db34d64a\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-16 01:25:52 . 2012-05-16 01:25:52 600064 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\6480551111832c83ee88bcf756a72533\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-16 01:25:00 . 2012-05-16 01:25:00 279552 C:\Windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\0e81a3996f7cbff23fc01bea4185a918\CustomMarshalers.ni.dll
+ 2012-06-15 08:31:48 . 2012-06-15 08:31:48 253952 C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll
+ 2012-05-16 01:21:20 . 2012-05-16 01:21:20 196096 C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
+ 2012-05-16 01:23:52 . 2012-05-16 01:23:52 484352 C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\7a9f70fa774076a7ec19bc03e7064d0d\UIAutomationClient.ni.dll
+ 2012-05-16 01:21:08 . 2012-05-16 01:21:08 393216 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\4837a5c6204d53e7aa4f7dd94b98207c\System.Xml.Linq.ni.dll
+ 2012-05-16 01:21:20 . 2012-05-16 01:21:20 189440 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\c477bbff1e4662263255a1bf17bd9c2a\System.Windows.Input.Manipulations.ni.dll
+ 2012-05-16 01:21:14 . 2012-05-16 01:21:14 649728 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
+ 2012-06-15 08:31:38 . 2012-06-15 08:31:38 221696 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll
+ 2012-05-16 01:23:36 . 2012-05-16 01:23:36 369664 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dc86fe1c7a6e3a7ce9e9c1f13d9b1e8e\System.ServiceModel.Routing.ni.dll
+ 2012-05-16 00:44:46 . 2012-05-16 00:44:46 736768 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Security\5a3beae8b211b91bfc620c029cf4c2d4\System.Security.ni.dll
+ 2012-05-16 01:21:19 . 2012-05-16 01:21:19 311296 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-16 01:21:18 . 2012-05-16 01:21:18 762880 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\65f0d70169a0e73b45307dddbd86f92b\System.Runtime.Remoting.ni.dll
+ 2012-05-16 00:43:56 . 2012-05-16 00:43:56 145408 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
+ 2012-05-16 01:23:10 . 2012-05-16 01:23:10 657408 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net\dd25ddcfa0417d40e3f1385e30abcd6f\System.Net.ni.dll
+ 2012-06-15 08:31:33 . 2012-06-15 08:31:33 626176 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll
+ 2012-05-16 01:23:04 . 2012-05-16 01:23:04 395264 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\08397796343d5730a29f42e61c7f6ee7\System.Management.Instrumentation.ni.dll
+ 2012-05-16 01:23:04 . 2012-05-16 01:23:04 413696 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ff1250d2409bd16283c423650d6fd3f6\System.IO.Log.ni.dll
+ 2012-05-16 01:23:03 . 2012-05-16 01:23:03 229888 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e60675d3ba7fa94924489dc8466ebff5\System.IdentityModel.Selectors.ni.dll
+ 2012-05-16 01:21:15 . 2012-05-16 01:21:15 236032 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
+ 2012-05-16 01:21:15 . 2012-05-16 01:21:15 787456 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
+ 2012-05-16 00:44:47 . 2012-05-16 00:44:47 377856 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a9b1e597aaa263dea2cf8754440bd271\System.Dynamic.ni.dll
+ 2012-05-16 01:23:00 . 2012-05-16 01:23:00 470528 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e41e86da56bb60523251e0e08210a77b\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-16 01:23:00 . 2012-05-16 01:23:00 913920 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94d45f7f28d81304d7fa83bcea849141\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-16 01:22:58 . 2012-05-16 01:22:58 112640 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Device\4c50d8a951546d6dffdc8bcb23f47a7b\System.Device.ni.dll
+ 2012-05-16 01:21:43 . 2012-05-16 01:21:43 134656 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\7803f4398a527a87d5cace8023e93e8b\System.Data.DataSetExtensions.ni.dll
+ 2012-05-16 00:44:41 . 2012-05-16 00:44:41 982528 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
+ 2012-06-15 08:31:29 . 2012-06-15 08:31:29 148480 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll
+ 2012-05-16 00:44:53 . 2012-05-16 00:44:53 693760 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\877ef74350e6d374ca8f80b489a8cc8e\System.ComponentModel.Composition.ni.dll
+ 2012-05-16 01:21:41 . 2012-05-16 01:21:41 194048 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4330e93f9d0ef85f1a972e11c2ac5156\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-16 01:21:40 . 2012-05-16 01:21:40 624128 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0c67d9fc14856eb7d8b4e405aef79960\System.AddIn.ni.dll
+ 2012-05-16 01:21:36 . 2012-05-16 01:21:36 411136 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\2b046f2d5f056b906d7b25b75ca23575\System.Activities.DurableInstancing.ni.dll
+ 2012-05-16 01:20:53 . 2012-05-16 01:20:53 317952 C:\Windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\4847f66153121ec4ed532909f7c152be\SMSvcHost.ni.exe
+ 2012-05-16 01:21:12 . 2012-05-16 01:21:12 143360 C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
+ 2012-05-16 00:55:49 . 2012-05-16 00:55:49 309760 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ef6e3eb351fe12a5766be7c956c35d95\PresentationFramework.Classic.ni.dll
+ 2012-05-16 00:55:49 . 2012-05-16 00:55:49 387072 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e49a124fdad0f1db135f03a49f18fb48\PresentationFramework.Royale.ni.dll
+ 2012-05-16 00:55:50 . 2012-05-16 00:55:50 595968 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
+ 2012-05-16 00:55:50 . 2012-05-16 00:55:50 755712 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\141f0a8fbfb83604fa3dd43dbe8fa0f4\PresentationFramework.Luna.ni.dll
+ 2012-06-15 08:31:09 . 2012-06-15 08:31:09 303104 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8cc4dd9babffe370cf375925fba15f84\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-05-16 01:20:56 . 2012-05-16 01:20:56 418816 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\01c5ff7a1ea0463414736df5d449e0a9\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-16 01:20:53 . 2012-05-16 01:20:53 194048 C:\Windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
+ 2012-05-27 06:08:15 . 2012-05-27 06:08:15 469504 C:\Windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\90ba12801d7c96159aade6d0dc4ae734\WsatConfig.ni.exe
+ 2012-06-15 08:51:00 . 2012-06-15 08:51:00 329216 C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\80961515d3044ea901548167c32a5098\WindowsFormsIntegration.ni.dll
+ 2012-06-15 08:18:12 . 2012-06-15 08:18:12 329216 C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\7abedc6a15e80e3c212baa95941bf58f\WindowsFormsIntegration.ni.dll
+ 2012-05-27 06:03:44 . 2012-05-27 06:03:44 257024 C:\Windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\d94ac496c39cc91368bbb3984a908b83\UIAutomationTypes.ni.dll
+ 2012-05-27 06:03:43 . 2012-05-27 06:03:43 120320 C:\Windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\b3cbed2453a8af62361c757e0d1a73ce\UIAutomationProvider.ni.dll
+ 2012-05-27 05:58:03 . 2012-05-27 05:58:03 648704 C:\Windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\833fe37913dbbc64308d3c75a2e0ff2d\UIAutomationClient.ni.dll
+ 2012-06-15 08:18:10 . 2012-06-15 08:18:10 290304 C:\Windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\d3d3488e1e7b49196219986409296048\TaskScheduler.ni.dll
+ 2012-06-15 08:50:58 . 2012-06-15 08:50:58 290304 C:\Windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\3b418c7263e7bee8431e453c3d656213\TaskScheduler.ni.dll
+ 2012-05-27 05:49:28 . 2012-05-27 05:49:28 556544 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\932715f58f2867b3d60da0b329eaa82b\System.Xml.Linq.ni.dll
+ 2012-05-27 05:46:34 . 2012-05-27 05:46:34 189440 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\d18260aa3d83c7faa6a86c2131abe1dc\System.Web.Routing.ni.dll
+ 2012-05-27 06:07:36 . 2012-05-27 06:07:36 266240 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\46a7834650869cb4f4ebe114b8a0b3a2\System.Web.RegularExpressions.ni.dll
+ 2012-06-15 08:17:50 . 2012-06-15 08:17:50 449536 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\f6a69a1f5c711efbc718cda849d6512d\System.Web.Entity.ni.dll
+ 2012-06-15 08:50:44 . 2012-06-15 08:50:44 398848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\a03d0c22e122d7f4ac4fa7edc76c45f9\System.Web.Entity.Design.ni.dll
+ 2012-06-15 08:17:51 . 2012-06-15 08:17:51 398848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\8a26fd97c6f787cc34e32973f0db4326\System.Web.Entity.Design.ni.dll
+ 2012-06-15 08:50:42 . 2012-06-15 08:50:42 754176 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\a245d514376d54ed78727d2f8d2b3d88\System.Web.DynamicData.ni.dll
+ 2012-06-15 08:17:48 . 2012-06-15 08:17:48 754176 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\222d741a335355b1eccc6627b5e66917\System.Web.DynamicData.ni.dll
+ 2012-05-27 05:46:20 . 2012-05-27 05:46:20 218624 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c7549e43eb08559f29529e150392f6c6\System.Web.Abstractions.ni.dll
+ 2012-05-27 06:05:50 . 2012-05-27 06:05:50 922112 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f32e819afe98d052c684cbb95ef2dac3\System.Transactions.ni.dll
+ 2012-06-15 08:14:41 . 2012-06-15 08:14:41 295424 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8363064608e30064d2740d8d84c0117a\System.ServiceProcess.ni.dll
+ 2012-06-15 08:48:59 . 2012-06-15 08:48:59 295424 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\3684a5e85850ee745803ade3c6280f2d\System.ServiceProcess.ni.dll
+ 2012-05-27 06:09:00 . 2012-05-27 06:09:00 932864 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Security\6022bd045b122b20c31fdd00e7ea0ca3\System.Security.ni.dll
+ 2012-05-27 06:09:04 . 2012-05-27 06:09:04 396288 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\0ccb8a5f9976a191dba0e75611170897\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-27 05:08:35 . 2012-05-27 05:08:35 915456 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Net\bfd1ee942c5ff31e48d53b48ced260fd\System.Net.ni.dll
+ 2012-06-15 08:49:01 . 2012-06-15 08:49:01 782848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\f16066c5217b2bae461d1c3a36b6675a\System.Messaging.ni.dll
+ 2012-06-15 08:14:42 . 2012-06-15 08:14:42 782848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\4432d66cfd92f7294b99e7c0b8d5d4e2\System.Messaging.ni.dll
+ 2012-05-27 05:03:06 . 2012-05-27 05:03:06 534528 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\dfe6c8811e5ed78753216f0d3620666b\System.Management.Instrumentation.ni.dll
+ 2012-05-27 04:53:37 . 2012-05-27 04:53:37 581632 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\03ce6290565660ae96cac54be6745604\System.IO.Log.ni.dll
+ 2012-05-27 05:31:39 . 2012-05-27 05:31:39 294400 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\55c0ac8ecdf22b8b5b1b9a1b3534510a\System.IdentityModel.Selectors.ni.dll
+ 2012-05-27 06:05:54 . 2012-05-27 06:05:54 446464 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\323242ea556a272dca9dc2019258264a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 08:45:55 . 2012-06-15 08:45:55 289280 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\bf139e01549b7cab9fab5bf9da914194\System.Drawing.Design.ni.dll
+ 2012-06-15 08:07:27 . 2012-06-15 08:07:27 289280 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\4fe5c7e6ca867dc10be89bb2057d13a7\System.Drawing.Design.ni.dll
+ 2012-05-27 06:07:38 . 2012-05-27 06:07:38 651264 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\9a4193d115c2bace6af1e7e6a0056b77\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-27 04:37:10 . 2012-05-27 04:37:10 494080 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\54f38a0687a4f444546084c93dc6a7b5\System.Data.Services.Design.ni.dll
+ 2012-05-27 04:26:18 . 2012-05-27 04:26:18 196096 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\e337b23de41eb95b523735d22f6d6a3a\System.Data.DataSetExtensions.ni.dll
+ 2012-05-27 06:09:02 . 2012-05-27 06:09:02 192512 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\ac579701e0a23c8481b33c4513057390\System.Configuration.Install.ni.dll
+ 2012-06-15 08:48:59 . 2012-06-15 08:48:59 191488 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\576f9dcaf73e3e48cb4bd57f88e44c33\System.Configuration.Install.ni.dll
+ 2012-05-27 05:39:21 . 2012-05-27 05:39:21 134656 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\d51e323dda81bc2a42786b4f03d17006\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-05-27 05:47:51 . 2012-05-27 05:47:51 890368 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\896ecfd2ea75daf294f1664a15bf1bd9\System.AddIn.ni.dll
+ 2012-05-27 04:21:27 . 2012-05-27 04:21:27 156672 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\2be06784be3f17710874c2544995a7d8\System.AddIn.Contract.ni.dll
+ 2012-05-27 05:34:27 . 2012-05-27 05:34:27 297984 C:\Windows\assembly\NativeImages_v2.0.50727_64\sysglobl\371cc1adc0c179ab5ba0f06eb3884f67\sysglobl.ni.dll
+ 2012-05-27 04:13:45 . 2012-05-27 04:13:45 525312 C:\Windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\3d9d453d3903f8ff7e61f580403936e3\SMSvcHost.ni.exe
+ 2012-05-27 05:27:45 . 2012-05-27 05:27:45 354304 C:\Windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\a59f828c2b188053e271f46903a6da02\SMDiagnostics.ni.dll
+ 2012-05-27 04:11:40 . 2012-05-27 04:11:40 438784 C:\Windows\assembly\NativeImages_v2.0.50727_64\ServiceModelReg\512e10a83afd7ba9afe667bd62aab538\ServiceModelReg.ni.exe
+ 2012-05-16 03:23:35 . 2012-05-16 03:23:35 620544 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\eb7c1f89fb2cb50a231080178038ef9e\PresentationFramework.Luna.ni.dll
+ 2012-05-16 03:23:33 . 2012-05-16 03:23:33 463360 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\de5ad28d2c21c33ab89eb2617a4502de\PresentationFramework.Aero.ni.dll
+ 2012-05-16 03:23:36 . 2012-05-16 03:23:36 317440 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\61f7ece0284fd50f0af280240a540996\PresentationFramework.Royale.ni.dll
+ 2012-05-16 03:23:34 . 2012-05-16 03:23:34 279040 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\3c151dcfc69e7e16a34ba1f81ca21175\PresentationFramework.Classic.ni.dll
+ 2012-06-15 08:50:19 . 2012-06-15 08:50:19 852992 C:\Windows\assembly\NativeImages_v2.0.50727_64\napsnap\e9bd06b6e8d13de7688a7b8d9caae4be\napsnap.ni.dll
+ 2012-06-15 08:17:16 . 2012-06-15 08:17:16 852992 C:\Windows\assembly\NativeImages_v2.0.50727_64\napsnap\3c2d0e2498e965850c59c3fa49d805db\napsnap.ni.dll
+ 2012-06-15 08:50:18 . 2012-06-15 08:50:18 154112 C:\Windows\assembly\NativeImages_v2.0.50727_64\napinit\d18aaabc1ed8e516fd6e15673ced499f\napinit.ni.dll
+ 2012-06-15 08:17:15 . 2012-06-15 08:17:15 154112 C:\Windows\assembly\NativeImages_v2.0.50727_64\napinit\ae67752c0a44317b61c0070bf9469be5\napinit.ni.dll
+ 2012-05-27 03:41:43 . 2012-05-27 03:41:43 177152 C:\Windows\assembly\NativeImages_v2.0.50727_64\naphlpr\dd6bc176f75dbf6b31cd725b9b659a22\naphlpr.ni.dll
+ 2012-05-27 03:41:42 . 2012-05-27 03:41:42 126464 C:\Windows\assembly\NativeImages_v2.0.50727_64\napcrypt\0b6fc10b5def29aff634cbc7346b699f\napcrypt.ni.dll
+ 2012-05-21 21:38:07 . 2012-05-21 21:38:07 184320 C:\Windows\assembly\NativeImages_v2.0.50727_64\MSBuild\9d40a5b9f92f0b6227aa500f96ad77c5\MSBuild.ni.exe
+ 2012-06-15 08:49:10 . 2012-06-15 08:49:10 414720 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\d5f4f13114a618bff85ea70be9060c28\MMCFxCommon.ni.dll
+ 2012-06-15 08:15:52 . 2012-06-15 08:15:52 414720 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\a89f24a37e86820513a964c8c35b933b\MMCFxCommon.ni.dll
+ 2012-05-27 03:23:51 . 2012-05-27 03:23:51 657920 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\6e39325691b6032b8b5ec358cfde830a\Microsoft.WSMan.Management.ni.dll
+ 2012-05-27 06:10:24 . 2012-05-27 06:10:24 105984 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\775fd87e903a96a3bbfd22e527960c7c\Microsoft.Vsa.ni.dll
+ 2012-05-27 03:15:29 . 2012-05-27 03:15:29 584192 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\c731ca6bc9d60516a42b1ba2b6801b82\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-24 01:03:36 . 2012-05-24 01:03:36 417280 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\9987fdf4b74510634bcb89b658b45acb\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-24 01:23:25 . 2012-05-24 01:23:25 225280 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\4793df25d6d022ab4427eba45bbf864a\Microsoft.PowerShell.Security.ni.dll
+ 2012-05-24 01:08:52 . 2012-05-24 01:08:52 711680 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\109bc9faa38e710cc82ee11292511a8c\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-06-15 08:15:09 . 2012-06-15 08:15:09 933376 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\571c66f0a8ca17316e9b6e1a7f71640b\Microsoft.MediaCenter.ni.dll
+ 2012-05-22 08:04:40 . 2012-05-22 08:04:40 324608 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\32fd79d24cdb424fa64c1120652ea8d8\Microsoft.MediaCenter.Shell.ni.dll
+ 2012-05-22 08:01:19 . 2012-05-22 08:01:19 946176 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\105eb667adbd2e4700d2f97c3040719e\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-06-15 08:15:51 . 2012-06-15 08:15:51 794624 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\e37340446b8b435f5facfbbd67d7226c\Microsoft.ManagementConsole.ni.dll
+ 2012-06-15 08:49:09 . 2012-06-15 08:49:10 794624 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\a4de1bbf800bcc9e700b80d51f26f91e\Microsoft.ManagementConsole.ni.dll
+ 2012-05-21 22:15:20 . 2012-05-21 22:15:20 228864 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\e9f827bd432f723d708290dd4522a4c9\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-27 03:47:15 . 2012-05-27 03:47:15 199168 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\cc22d595065482d26147e0a33e5fb387\Microsoft.Build.Utilities.ni.dll
+ 2012-05-21 22:14:17 . 2012-05-21 22:14:17 142336 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\bb1ab6aaab50e4bbaa9d7de74226c469\Microsoft.Build.Framework.ni.dll
+ 2012-05-27 03:47:15 . 2012-05-27 03:47:15 120832 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\87af0a413e2fd0e293b6df8702c8b91d\Microsoft.Build.Framework.ni.dll
+ 2012-05-21 22:13:57 . 2012-05-21 22:13:57 295424 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\dac2a4e5ec26ef0fac5fd3f219205d72\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-05-21 22:11:54 . 2012-05-21 22:11:54 372224 C:\Windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\81d0e4c55ab2af17b6b54ef3508a5f9d\Mcx2Dvcs.ni.dll
+ 2012-05-21 22:09:33 . 2012-05-21 22:09:33 372736 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcupdate\6cc6cddfc77e5848011b252e3f09d967\mcupdate.ni.exe
+ 2012-05-22 08:04:23 . 2012-05-22 08:04:23 340992 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\4b25a31262ee5a9a04dd65bad171ac42\mcstoredb.ni.dll
+ 2012-05-22 08:01:24 . 2012-05-22 08:01:24 897024 C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstore\b9ef3cec474476b24ab4cab97e5cfaf5\mcstore.ni.dll
+ 2012-05-21 22:11:40 . 2012-05-21 22:11:40 108032 C:\Windows\assembly\NativeImages_v2.0.50727_64\loadmxf\8edd0aae857a644e2f661ed1d10315b1\loadmxf.ni.exe
+ 2012-06-15 08:49:08 . 2012-06-15 08:49:08 645120 C:\Windows\assembly\NativeImages_v2.0.50727_64\EventViewer\cbaec0147fffacc1c80d7b03a74a7f9f\EventViewer.ni.dll
+ 2012-06-15 08:15:50 . 2012-06-15 08:15:50 645120 C:\Windows\assembly\NativeImages_v2.0.50727_64\EventViewer\4d0dfe6d2f6f1d7aaf9e2ed09ba62831\EventViewer.ni.dll
+ 2012-05-21 22:00:14 . 2012-05-21 22:00:14 313856 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\a138210d6477488bb84ca2efd2ff703d\ehiWUapi.ni.dll
+ 2012-05-21 21:59:42 . 2012-05-21 21:59:42 927232 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\d939416dafca579cee4485849435fcf4\ehiwmp.ni.dll
+ 2012-05-22 08:04:55 . 2012-05-22 08:04:55 138752 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\14640be0bdac94332d67083c2d181f55\ehiUserXp.ni.dll
+ 2012-05-21 21:59:44 . 2012-05-21 21:59:44 151040 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiReplay\3131565b4f987f0c81a0ab269174b3f9\ehiReplay.ni.dll
+ 2012-05-21 21:52:19 . 2012-05-21 21:52:19 397824 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\15b42b0237d752f6fbae1060b3edeab4\ehiExtens.ni.dll
+ 2012-06-15 08:15:15 . 2012-06-15 08:15:15 368640 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\b2ae3bbc46f1352799b35d8674a9f993\ehExtHost.ni.exe
+ 2012-05-21 22:00:18 . 2012-05-21 22:00:18 410112 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehepgdat\299aab5d579402d2bb1fd1b8c9fbd775\ehepgdat.ni.dll
+ 2012-05-21 21:41:59 . 2012-05-21 21:41:59 310784 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehCIR\f31fa2031f22d2f076141c723f76eccc\ehCIR.ni.dll
+ 2012-05-21 21:41:40 . 2012-05-21 21:41:40 348672 C:\Windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\c138d5b075ddd3ae072d3d6ffb395754\CustomMarshalers.ni.dll
+ 2012-05-21 21:38:47 . 2012-05-21 21:38:47 639488 C:\Windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\60131d46d2b3105c92872aef95794419\ComSvcConfig.ni.exe
+ 2012-05-22 08:04:48 . 2012-05-22 08:04:48 568320 C:\Windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\fba114b6beecb6211e8cefdffaffbe7f\BDATunePIA.ni.dll
+ 2012-05-27 03:10:47 . 2012-05-27 03:10:47 322048 C:\Windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\2c11a241b9d6f1b945ee152836831795\WsatConfig.ni.exe
+ 2012-07-18 01:48:15 . 2012-07-18 01:48:15 240128 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\9104e78d8897df008eed3a2af3bda6a2\WindowsFormsIntegration.ni.dll
+ 2012-05-27 03:08:35 . 2012-05-27 03:08:35 187904 C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\5ebaa15cccc356bc3afba0c8f56977f7\UIAutomationTypes.ni.dll
+ 2012-05-27 03:05:44 . 2012-05-27 03:05:44 447488 C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c66242e9614361aed44d1cf4dbb0bf93\UIAutomationClient.ni.dll
+ 2012-07-18 01:48:09 . 2012-07-18 01:48:09 235520 C:\Windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\dff98b9115ba5b0f796550c3604f3ac2\TaskScheduler.ni.dll
+ 2012-05-27 03:01:23 . 2012-05-27 03:01:25 420864 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\10e419f1971d097ecfc17eeca6a5f125\System.Xml.Linq.ni.dll
+ 2012-05-27 02:59:56 . 2012-05-27 02:59:56 131072 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\0a2600a3d2b704a0b794439ed1a9db43\System.Web.Routing.ni.dll
+ 2012-05-27 03:10:26 . 2012-05-27 03:10:26 206336 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\57b0a265016f6f80ea27a5517be2140a\System.Web.RegularExpressions.ni.dll
+ 2012-07-18 01:41:02 . 2012-07-18 01:41:02 859648 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c1a4d33fc32145339a8d6ecce8814a82\System.Web.Extensions.Design.ni.dll
+ 2012-06-15 08:30:43 . 2012-06-15 08:30:43 328704 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bca360f19a5fb37b0df37cb610087eca\System.Web.Entity.ni.dll
+ 2012-07-18 01:40:58 . 2012-07-18 01:40:58 301056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\030aac080d7b1a398344cdb6545c0ced\System.Web.Entity.Design.ni.dll
+ 2012-07-18 01:40:50 . 2012-07-18 01:40:50 547328 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ed649ec7f6f658bef9888ddd9f8f74b3\System.Web.DynamicData.ni.dll
+ 2012-05-27 02:59:50 . 2012-05-27 02:59:50 154112 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\3c3de9fa62ccb10e606e36def54d3b34\System.Web.Abstractions.ni.dll
+ 2012-05-27 03:09:37 . 2012-05-27 03:09:37 627712 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\27227eec50eeb9135ffc5c9439dd9b09\System.Transactions.ni.dll
+ 2012-06-15 08:52:15 . 2012-06-15 08:52:15 212992 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8bbcd31ecc8edc7d1f9cdd83ef2bb2d3\System.ServiceProcess.ni.dll
+ 2012-05-27 03:11:08 . 2012-05-27 03:11:08 684032 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\f078949bf057721f3935e1e4f39c14ce\System.Security.ni.dll
+ 2012-05-27 03:11:11 . 2012-05-27 03:11:11 311296 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1ee6b56dc9985fbbdeb373b611ac4fb3\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-05-27 03:09:41 . 2012-05-27 03:09:41 774144 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\9bf01d13726da14742ef5f8d3b04f9c5\System.Runtime.Remoting.ni.dll
+ 2012-05-24 03:18:13 . 2012-05-24 03:18:13 625152 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Net\7c717e252df1d58ae09fc4de1b22ec71\System.Net.ni.dll
+ 2012-06-15 08:52:28 . 2012-06-15 08:52:28 593408 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\8ad39a1c48ba36b5210abe02ef03bc2a\System.Messaging.ni.dll
+ 2012-05-24 03:17:13 . 2012-05-24 03:17:13 331264 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\57cdcc5f6fc3533f5c087fdd9c898315\System.Management.Instrumentation.ni.dll
+ 2012-05-24 03:15:22 . 2012-05-24 03:15:22 390144 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\6b572ce498da46d4f4b5dac8ec16b2f2\System.IO.Log.ni.dll
+ 2012-05-24 03:22:34 . 2012-05-24 03:22:34 212992 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\105cc14e7a163f9bbaeb8dce971a6093\System.IdentityModel.Selectors.ni.dll
+ 2012-05-27 03:09:39 . 2012-05-27 03:09:39 280064 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\050412745be225661e8d7d7929a0892f\System.EnterpriseServices.Wrapper.dll
+ 2012-05-27 03:09:39 . 2012-05-27 03:09:39 628224 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\050412745be225661e8d7d7929a0892f\System.EnterpriseServices.ni.dll
+ 2012-06-15 08:47:24 . 2012-06-15 08:47:24 208384 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\86d95330e670761c503f6f2e8cbe66b9\System.Drawing.Design.ni.dll
+ 2012-05-27 03:10:28 . 2012-05-27 03:10:28 457728 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b3938b007fc773b07e24c5bdb3db15b5\System.DirectoryServices.Protocols.ni.dll
+ 2012-05-19 20:56:59 . 2012-05-19 20:56:59 882176 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\67b3ed2c88ec5afeb10e84e8305979ff\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-19 20:56:26 . 2012-05-19 20:56:26 359936 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\f3bf389d1551df47ea847cd2efe9f823\System.Data.Services.Design.ni.dll
+ 2012-05-19 20:56:17 . 2012-05-19 20:56:17 945664 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\6a7a6399a17484309034558aa6e1c3c2\System.Data.Services.Client.ni.dll
+ 2012-05-19 20:55:06 . 2012-05-19 20:55:06 762880 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\807fcfa93885e23d813a8d6886181ee6\System.Data.Entity.Design.ni.dll
+ 2012-05-19 20:54:14 . 2012-05-19 20:54:14 137216 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\6275f38154233cc28dc2b5ffbb2f6830\System.Data.DataSetExtensions.ni.dll
+ 2012-05-27 03:10:49 . 2012-05-27 03:10:49 978432 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ac40d23be2c4ad58c8d22eca5a8297f1\System.Configuration.ni.dll
+ 2012-06-15 08:52:15 . 2012-06-15 08:52:15 141312 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\559eb472944e19bca4d034eda4bdfcb7\System.Configuration.Install.ni.dll
+ 2012-05-27 03:00:32 . 2012-05-27 03:00:32 634880 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\ecd688788217752d024205f8e7532938\System.AddIn.ni.dll
+ 2012-05-24 03:23:08 . 2012-05-24 03:23:08 232448 C:\Windows\assembly\NativeImages_v2.0.50727_32\sysglobl\4440dde36b8d3ba20512beb05505451b\sysglobl.ni.dll
+ 2012-05-19 20:52:09 . 2012-05-19 20:52:09 366592 C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\93c542f601fe5c5b549362cbb09ed49c\SMSvcHost.ni.exe
+ 2012-05-24 03:21:51 . 2012-05-24 03:21:51 259072 C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8b1ee9314c040c38109900ff7fcd0376\SMDiagnostics.ni.dll
+ 2012-05-19 20:51:48 . 2012-05-19 20:51:48 321536 C:\Windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\8a2d8e40ea6675a7f796adf06e9c9606\ServiceModelReg.ni.exe
+ 2012-05-16 03:15:19 . 2012-05-16 03:15:19 224768 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d81872939252c65b6f1127f331b84de0\PresentationFramework.Classic.ni.dll
+ 2012-05-16 03:15:16 . 2012-05-16 03:15:16 368128 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c8c3ab08933fef9fb6657da871395c46\PresentationFramework.Aero.ni.dll
+ 2012-05-16 03:15:25 . 2012-05-16 03:15:25 539648 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bbfbadb527a3ce339eef5f304a12f0c7\PresentationFramework.Luna.ni.dll
+ 2012-05-16 03:15:26 . 2012-05-16 03:15:26 258048 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\00112c66cb7cb4c8f8a284320a2fa2b1\PresentationFramework.Royale.ni.dll
+ 2012-07-18 01:34:35 . 2012-07-18 01:34:35 724992 C:\Windows\assembly\NativeImages_v2.0.50727_32\napsnap\2840f96c0590375ed722b20354bcd554\napsnap.ni.dll
+ 2012-07-18 01:34:33 . 2012-07-18 01:34:33 110080 C:\Windows\assembly\NativeImages_v2.0.50727_32\napinit\e1de44dda528f5126f251f146f30487a\napinit.ni.dll
+ 2012-05-19 20:46:50 . 2012-05-19 20:46:50 115712 C:\Windows\assembly\NativeImages_v2.0.50727_32\naphlpr\fafb8f5ecc491637dd61c7efd321a68a\naphlpr.ni.dll
+ 2012-05-19 20:23:47 . 2012-05-19 20:23:47 133632 C:\Windows\assembly\NativeImages_v2.0.50727_32\MSBuild\851772495962947c84dafc27eeac4510\MSBuild.ni.exe
+ 2012-06-15 08:52:32 . 2012-06-15 08:52:32 285184 C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\9621076f8f44240e769dd03177d0c47f\MMCFxCommon.ni.dll
+ 2012-05-19 20:43:51 . 2012-05-19 20:43:51 509440 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\97cd662b29c02c8d23e831da0235560e\Microsoft.WSMan.Management.ni.dll
+ 2012-05-19 20:42:26 . 2012-05-19 20:42:26 387584 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\763717a3487d07dbd524b1470a787afd\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-05-19 20:40:00 . 2012-05-19 20:40:00 731648 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ddfac1ee068f398710da506669ac9035\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-19 20:31:40 . 2012-05-19 20:31:40 292864 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d203370646454c3b34e73764c6f4c3a1\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-05-19 20:31:46 . 2012-05-19 20:31:46 740352 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\be8151779ec3aa687dd5ec486ce77b80\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-05-19 20:40:06 . 2012-05-19 20:40:06 156672 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8e39e102ba9ef9cec19d9e59535e80e2\Microsoft.PowerShell.Security.ni.dll
+ 2012-06-15 08:29:30 . 2012-06-15 08:29:30 593408 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\f22e7365e7527cd3c3f707218d8e3a10\Microsoft.MediaCenter.ni.dll
+ 2012-06-15 08:52:31 . 2012-06-15 08:52:31 558592 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\ef6a66d52d531be206ac416483aed2b8\Microsoft.ManagementConsole.ni.dll
+ 2012-05-19 20:47:45 . 2012-05-19 20:47:45 144896 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\8dda16165e62a9f414a674eb4939e7e2\Microsoft.Build.Utilities.ni.dll
+ 2012-05-19 20:27:48 . 2012-05-19 20:27:48 162304 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4312eef079d18779a16b5528d6e2cb72\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-05-19 20:27:19 . 2012-05-19 20:27:19 888832 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\085f10d651e8c80c516911c87436b697\Microsoft.Build.Engine.ni.dll
+ 2012-05-19 20:27:12 . 2012-05-19 20:27:12 223232 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a1f9f1217adf0a5f627e5b8fd9007361\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-07-18 01:33:31 . 2012-07-18 01:33:31 543744 C:\Windows\assembly\NativeImages_v2.0.50727_32\EventViewer\11804905535690869865532b52f0454a\EventViewer.ni.dll
+ 2012-05-19 20:26:08 . 2012-05-19 20:26:08 160768 C:\Windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\07d99efbb39707d01236f56cb1299524\ehiExtens.ni.dll
+ 2012-06-15 08:29:05 . 2012-06-15 08:29:05 243200 C:\Windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\dd7fe12b0ee02626a53b9053f8669141\ehExtHost32.ni.exe
+ 2012-05-19 20:25:08 . 2012-05-19 20:25:08 220672 C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\8455a2be044530a091b714f5a6415d6b\CustomMarshalers.ni.dll
+ 2012-05-19 20:23:54 . 2012-05-19 20:23:54 410624 C:\Windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\8ea697a039fc11829aa0815ff9126ee7\ComSvcConfig.ni.exe
+ 2012-06-14 22:15:07 . 2012-04-23 11:01:12 630784 C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-04-11 03:13:07 . 2012-01-26 11:00:14 630784 C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2009-04-24 19:18:54 . 2009-04-24 19:18:54 163840 C:\Windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-05-15 23:43:40 . 2012-05-15 23:43:40 163840 C:\Windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
- 2009-12-19 18:05:53 . 2009-02-18 18:39:18 532480 C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-05-16 00:00:08 . 2012-02-13 11:02:13 532480 C:\Windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2009-12-19 18:05:24 . 2009-02-18 18:40:01 357376 C:\Windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-16 00:00:08 . 2012-02-13 11:02:26 357376 C:\Windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-05-16 00:00:08 . 2012-02-13 11:02:14 368640 C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2009-12-19 18:05:25 . 2009-02-18 18:39:19 368640 C:\Windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-06-14 22:16:53 . 2012-05-15 06:37:29 1212416 C:\Windows\SysWOW64\urlmon.dll
+ 2012-06-14 22:16:47 . 2012-05-15 06:33:11 6007808 C:\Windows\SysWOW64\mshtml.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 4422992 C:\Windows\SysWOW64\mfc100u.dll
+ 2011-06-11 06:58:52 . 2011-06-11 06:58:52 4397384 C:\Windows\SysWOW64\mfc100.dll
+ 2012-06-14 22:16:52 . 2012-05-15 06:31:43 2000384 C:\Windows\SysWOW64\iertutil.dll
+ 2012-05-15 23:27:31 . 2012-02-29 13:41:40 1069056 C:\Windows\SysWOW64\DWrite.dll
+ 2012-05-15 23:27:28 . 2012-02-29 14:08:47 1172480 C:\Windows\SysWOW64\d3d10warp.dll
- 2012-03-14 02:33:09 . 2012-02-13 14:12:08 1172480 C:\Windows\SysWOW64\d3d10warp.dll
+ 2012-05-15 23:31:03 . 2012-02-01 15:30:33 1500672 C:\Windows\system32\spool\drivers\x64\3\JNWDRV.dll
- 2008-01-21 02:52:11 . 2008-01-21 02:52:12 1500672 C:\Windows\system32\spool\drivers\x64\3\JNWDRV.dll
- 2012-04-11 08:05:36 . 2012-03-06 06:44:22 4699520 C:\Windows\system32\ntoskrnl.exe
+ 2012-05-16 00:14:49 . 2012-04-03 08:22:15 4699520 C:\Windows\system32\ntoskrnl.exe
+ 2012-05-15 23:27:30 . 2012-02-29 14:06:08 1556480 C:\Windows\system32\DWrite.dll
+ 2012-02-15 16:01:50 . 2012-02-15 16:01:50 4547944 C:\Windows\system32\DriverStore\FileRepository\usbaapl64.inf_1002658f\usbaaplrc.dll
+ 2010-04-20 02:29:22 . 2010-04-20 02:29:22 1721576 C:\Windows\system32\DriverStore\FileRepository\netaapl64.inf_2ae71b6f\wdfcoinstaller01009.dll
+ 2012-05-15 23:42:51 . 2012-03-30 12:45:03 1423744 C:\Windows\system32\drivers\tcpip.sys
- 2012-03-14 02:33:09 . 2012-02-13 14:38:31 2002944 C:\Windows\system32\d3d10warp.dll
+ 2012-05-15 23:27:28 . 2012-02-29 14:40:31 2002944 C:\Windows\system32\d3d10warp.dll
+ 2012-06-14 22:15:45 . 2012-04-23 16:25:30 1267200 C:\Windows\system32\crypt32.dll
+ 2010-10-25 05:04:52 . 2012-07-30 17:57:48 1278692 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-169169418-859736985-3299691791-1000-8192.dat
+ 2012-01-19 18:52:22 . 2012-01-19 18:52:22 1222936 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\wpftxt_v0400.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 1369872 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 6429992 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 18:52:22 . 2012-01-19 18:52:22 3825952 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
+ 2012-03-15 18:17:58 . 2012-03-15 18:17:58 5029672 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 3512072 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 3512072 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 4970768 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 4970768 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 1455376 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 1455376 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 1515792 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 1515792 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 1512712 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
- 2011-11-22 05:57:40 . 2011-11-22 05:57:40 9793280 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2011-12-15 19:01:34 . 2011-12-15 19:01:34 9793280 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
+ 2012-05-16 00:00:09 . 2012-02-13 11:02:28 2255128 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
+ 2012-06-14 22:18:39 . 2012-03-22 11:02:13 5025792 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
- 2011-06-16 03:37:07 . 2011-03-29 10:52:39 5025792 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
- 2012-02-16 02:59:44 . 2011-11-01 11:24:15 3186688 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2012-05-16 00:18:58 . 2012-01-03 10:57:52 3186688 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
- 2009-12-19 18:06:25 . 2009-03-30 04:39:56 5062656 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
+ 2012-06-14 22:18:37 . 2012-03-22 11:02:10 5062656 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
- 2011-10-13 02:16:50 . 2011-07-08 11:52:04 4567040 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-05-16 00:18:58 . 2012-01-03 10:56:51 4567040 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
+ 2012-05-16 00:18:55 . 2012-01-03 10:56:44 1577744 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
+ 2012-05-16 00:18:56 . 2012-01-03 10:56:38 1765648 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 1369872 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 6429992 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2012-01-19 18:08:56 . 2012-01-19 18:08:56 3790112 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2012-03-15 18:17:58 . 2012-03-15 18:17:58 5029672 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 3512072 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 3512072 C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 5201168 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 5201168 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 1143568 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 1143568 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
- 2011-11-22 04:31:18 . 2011-11-22 04:31:18 6727424 C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2011-12-15 18:08:30 . 2011-12-15 18:08:30 6727424 C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2012-05-16 00:00:08 . 2012-02-13 11:02:19 1736984 C:\Windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
- 2011-06-16 03:37:07 . 2011-03-29 10:53:25 5025792 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2012-06-14 22:18:39 . 2012-03-22 11:02:38 5025792 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2012-02-16 02:59:43 . 2011-11-01 11:23:33 3186688 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-05-16 00:18:58 . 2012-01-03 10:58:08 3186688 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-06-14 22:18:37 . 2012-03-22 11:02:33 5062656 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2009-12-19 18:06:25 . 2009-03-30 04:42:18 5062656 C:\Windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-05-16 00:18:59 . 2012-01-03 10:57:30 5913872 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2011-10-13 02:16:50 . 2011-07-08 11:53:06 4550656 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-05-16 00:18:57 . 2012-01-03 10:57:17 4550656 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2012-06-15 08:21:09 . 2012-06-15 08:21:09 1369872 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-04-11 08:13:54 . 2012-04-11 08:13:54 3512072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-15 08:20:55 . 2012-06-15 08:20:55 3512072 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-15 08:20:57 . 2012-06-15 08:20:57 2207568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-04-11 08:13:58 . 2012-04-11 08:13:58 2207568 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-15 08:20:56 . 2012-06-15 08:20:56 5029672 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-15 08:20:57 . 2012-06-15 08:20:57 1711496 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2012-04-11 08:13:58 . 2012-04-11 08:13:58 1711496 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2012-04-11 08:14:11 . 2012-04-11 08:14:11 6097256 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2012-06-15 08:21:04 . 2012-06-15 08:21:04 6097256 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-04-11 08:14:10 . 2012-04-11 08:14:10 1026936 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-06-15 08:21:04 . 2012-06-15 08:21:04 1026936 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-04-11 08:14:01 . 2012-04-11 08:14:01 4464480 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-06-15 08:20:59 . 2012-06-15 08:20:59 4464480 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-04-11 08:14:00 . 2012-04-11 08:14:00 1354584 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-06-15 08:20:58 . 2012-06-15 08:20:58 1354584 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2012-04-11 08:14:08 . 2012-04-11 08:14:08 1199968 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-06-15 08:21:03 . 2012-06-15 08:21:03 1199968 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-06-15 08:21:03 . 2012-06-15 08:21:03 1462648 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-04-11 08:14:08 . 2012-04-11 08:14:08 1462648 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-06-15 08:21:08 . 2012-06-15 08:21:08 6429992 C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2012-04-11 08:13:52 . 2012-04-11 08:13:52 3116376 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 08:20:54 . 2012-06-15 08:20:54 3116376 C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 08:21:07 . 2012-06-15 08:21:07 3825952 C:\Windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-06-15 08:20:50 . 2012-06-15 08:20:50 4970768 C:\Windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-11 08:13:46 . 2012-04-11 08:13:46 4970768 C:\Windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-04-11 08:14:06 . 2012-04-11 08:14:06 3563408 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-06-15 08:21:01 . 2012-06-15 08:21:01 3563408 C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-04-11 08:13:08 . 2012-04-11 08:13:08 2975064 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 08:20:27 . 2012-06-15 08:20:27 2975064 C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 08:20:45 . 2012-06-15 08:20:45 3790112 C:\Windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-04-11 08:13:02 . 2012-04-11 08:13:02 5201168 C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-15 08:20:23 . 2012-06-15 08:20:23 5201168 C:\Windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-15 08:20:37 . 2012-06-15 08:20:37 2989456 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-04-11 08:13:28 . 2012-04-11 08:13:28 2989456 C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-07-06 17:58:08 . 2012-06-18 11:12:50 9013136 C:\Windows\Microsoft Antimalware\Definition Updates\{0BA1208F-E69D-4C53-B4A7-01CB3FAE55C8}\mpengine.dll
+ 2011-06-29 02:27:28 . 2011-06-29 02:27:28 4028928 C:\Windows\Installer\a30104.msp
+ 2012-07-29 19:45:15 . 2012-07-29 19:45:16 4028416 C:\Windows\Installer\88ef864.msi
+ 2012-06-17 18:54:05 . 2012-06-17 18:54:05 4827136 C:\Windows\Installer\433e9ff.msi
+ 2012-06-17 18:48:45 . 2012-06-17 18:48:45 2189312 C:\Windows\Installer\433de32.msi
+ 2012-06-17 18:46:19 . 2012-06-17 18:46:20 1530368 C:\Windows\Installer\433ddff.msi
+ 2012-04-23 03:46:00 . 2012-04-23 03:46:00 1187328 C:\Windows\Installer\3492700.msp
+ 2012-03-15 19:26:06 . 2012-03-15 19:26:06 4212736 C:\Windows\Installer\34926f8.msp
+ 2012-02-17 13:45:24 . 2012-02-17 13:45:24 2299392 C:\Windows\Installer\310981.msp
+ 2012-04-05 03:38:44 . 2012-04-05 03:38:44 2831360 C:\Windows\Installer\26bba8.msp
+ 2012-04-29 02:44:02 . 2012-04-29 02:44:02 9101824 C:\Windows\Installer\26bb96.msp
+ 2012-04-29 02:44:02 . 2012-04-29 02:44:02 9586176 C:\Windows\Installer\26bb84.msp
+ 2012-07-24 03:48:03 . 2012-07-24 03:48:03 5124096 C:\Windows\Installer\1e357f.msp
+ 2012-07-24 03:38:16 . 2012-07-24 03:38:16 5535744 C:\Windows\Installer\1e354a.msp
+ 2012-07-24 03:22:18 . 2012-07-24 03:22:18 3312128 C:\Windows\Installer\1e3532.msp
+ 2012-07-24 03:17:07 . 2012-07-24 03:17:07 1139712 C:\Windows\Installer\1e3506.msp
+ 2012-07-24 03:14:09 . 2012-07-24 03:14:09 2932224 C:\Windows\Installer\1e34dd.msp
+ 2012-07-24 03:10:24 . 2012-07-24 03:10:24 4426240 C:\Windows\Installer\1e34c5.msp
+ 2012-07-24 03:03:47 . 2012-07-24 03:03:47 5442048 C:\Windows\Installer\1e34aa.msi
+ 2012-06-19 17:54:40 . 2012-06-19 17:54:40 2239488 C:\Windows\Installer\1bd26624.msp
+ 2012-04-05 03:37:40 . 2012-04-05 03:37:40 2540544 C:\Windows\Installer\1bd26613.msp
+ 2012-06-29 19:33:46 . 2012-06-29 19:33:46 6063616 C:\Windows\Installer\1bd26601.msp
+ 2012-05-29 05:03:28 . 2012-05-29 05:03:28 3666432 C:\Windows\Installer\19f1ab1c.msi
+ 2012-05-29 04:26:11 . 2012-05-29 04:26:11 9474048 C:\Windows\Installer\19ceb310.msi
+ 2012-04-05 03:38:16 . 2012-04-05 03:38:16 3620864 C:\Windows\Installer\19b832.msp
+ 2012-03-20 03:02:30 . 2012-03-20 03:02:30 6695936 C:\Windows\Installer\19b829.msp
+ 2012-03-15 07:24:28 . 2012-03-15 07:24:28 1795584 C:\Windows\Installer\19b81b.msp
+ 2012-04-29 02:43:58 . 2012-04-29 02:43:58 8459264 C:\Windows\Installer\19b809.msp
+ 2009-12-27 03:42:21 . 2012-07-12 02:48:06 1172240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
- 2009-12-27 03:42:21 . 2012-04-11 08:07:32 1172240 C:\Windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2011-07-07 08:58:32 . 2011-07-07 08:58:32 1616240 C:\Windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.6612\OGL.DLL
+ 2011-08-17 15:49:46 . 2011-08-17 15:49:46 4683624 C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\WRD12CNV.DLL
+ 2011-07-27 11:09:28 . 2011-07-27 11:09:28 5310848 C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\IPEDITOR.DLL
+ 2012-05-16 01:26:14 . 2012-05-16 01:26:14 5237248 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e41f5739292f4771c64a55940369efd2\WindowsBase.ni.dll
+ 2012-06-15 08:24:29 . 2012-06-15 08:24:29 5237248 C:\Windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e286701acf74012d3aa4a21953f03b6b\WindowsBase.ni.dll
+ 2012-05-16 01:32:18 . 2012-05-16 01:32:18 1430016 C:\Windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\6ee9d76d9f1e618cd6fb94b13355bcc9\UIAutomationClientsideProviders.ni.dll
+ 2012-05-16 01:25:38 . 2012-05-16 01:25:38 7037952 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\28ca4f076264ab07f1d00a6c9623dc49\System.Xml.ni.dll
+ 2012-05-16 01:27:45 . 2012-05-16 01:27:45 2449408 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\df013cbfec0defc7e9997cdaa90b89bc\System.Xaml.ni.dll
+ 2012-06-15 08:27:35 . 2012-06-15 08:27:35 5645824 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\950f64ba9fb22ca06c5b2b9cf6f5f4b4\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-16 01:32:03 . 2012-05-16 01:32:03 2236416 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\bc6df78c506c89659ab7be738179b2ba\System.Web.Services.ni.dll
+ 2012-05-16 01:31:55 . 2012-05-16 01:31:55 2735616 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Speech\cd7c3aed4408c3554c30a8f0236b90e1\System.Speech.ni.dll
+ 2012-05-16 01:31:46 . 2012-05-16 01:31:46 1918976 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\94289b88c5b494f572cd7114fa995487\System.ServiceModel.Activities.ni.dll
+ 2012-05-16 01:31:50 . 2012-05-16 01:31:50 1579008 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\2dbc7aabd92cc0d470acb455c498d919\System.ServiceModel.Discovery.ni.dll
+ 2012-05-16 01:27:56 . 2012-05-16 01:27:56 3412992 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\affb28e2d9cc3c19de0758e7e8c68e8f\System.Runtime.Serialization.ni.dll
+ 2012-05-16 01:27:59 . 2012-05-16 01:27:59 1348096 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\b37e6f4b1d742031f328504eb99d0f6c\System.Runtime.DurableInstancing.ni.dll
+ 2012-06-15 08:26:45 . 2012-06-15 08:26:45 1467392 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Printing\d2de16284459454472a6875185c64d08\System.Printing.ni.dll
+ 2012-05-16 01:28:55 . 2012-05-16 01:28:55 1467392 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Printing\682ea473b36fc9043d982c4f5a667568\System.Printing.ni.dll
+ 2012-05-16 01:30:52 . 2012-05-16 01:30:52 1470464 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Management\b83f2453b4538b2e80fe09cfd94dce00\System.Management.ni.dll
+ 2012-05-16 01:30:46 . 2012-05-16 01:30:46 1416192 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\60bf6251873ef465abcebeb9a24b7932\System.IdentityModel.ni.dll
+ 2012-05-16 01:28:03 . 2012-05-16 01:28:03 1098752 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.ni.dll
+ 2012-05-16 01:27:49 . 2012-05-16 01:27:49 2303488 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\dadeee26c90fecbf3196eba10dc077b4\System.Drawing.ni.dll
+ 2012-06-15 08:26:10 . 2012-06-15 08:26:10 2305024 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1225ef41527a975de83f22328d0a3b93\System.Drawing.ni.dll
+ 2012-05-16 01:30:42 . 2012-05-16 01:30:42 1217024 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\a68116468a194678fd04167067134712\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-16 01:28:06 . 2012-05-16 01:28:06 1622528 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\3a737af86a6a819af97a6d1a04c0e944\System.DirectoryServices.ni.dll
+ 2012-06-15 08:26:13 . 2012-06-15 08:26:13 2403328 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\ad9ff5d55f7ea22e80c39e0ff0240984\System.Deployment.ni.dll
+ 2012-06-15 08:19:21 . 2012-06-15 08:19:21 2403328 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\8fce722dc334f83b7695e7f64a629986\System.Deployment.ni.dll
+ 2012-05-16 01:28:23 . 2012-05-16 01:28:23 8601600 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data\0ec8effb7b9d03ae69d37922813bc880\System.Data.ni.dll
+ 2012-05-16 01:25:45 . 2012-05-16 01:25:45 3390976 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\0eb72df497fad5c273ff16f88b0fb950\System.Data.SqlXml.ni.dll
+ 2012-05-16 01:30:39 . 2012-05-16 01:30:39 1799168 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\536e12016ad3adc78e0708b77e6b9219\System.Data.Services.Client.ni.dll
+ 2012-05-16 01:30:36 . 2012-05-16 01:30:36 3386368 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\86553c1d7f3e66c17fc3e0274de7a2de\System.Data.Linq.ni.dll
+ 2012-05-16 01:25:27 . 2012-05-16 01:25:27 1257472 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\6aea67f24827961ce1d48356715389d8\System.Configuration.ni.dll
+ 2012-05-16 01:29:30 . 2012-05-16 01:29:30 1007616 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\eac19ca5a18a6d08cd247e68b618ba68\System.ComponentModel.Composition.ni.dll
+ 2012-05-16 01:29:13 . 2012-05-16 01:29:13 5695488 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Activities\3869077874ba987242c791b3a18b2f8b\System.Activities.ni.dll
+ 2012-06-15 08:27:08 . 2012-06-15 08:27:08 5048832 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\707f90689caf41ad429bf3ad373503cb\System.Activities.Presentation.ni.dll
+ 2012-05-16 01:29:17 . 2012-05-16 01:29:17 2064896 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\96083298999a677341c98fc2bf01b248\System.Activities.Core.Presentation.ni.dll
+ 2012-05-16 01:29:03 . 2012-05-16 01:29:03 4233216 C:\Windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\fe1704ff12348776e6b70dd4a2c69163\ReachFramework.ni.dll
+ 2012-06-15 08:26:54 . 2012-06-15 08:26:54 4233216 C:\Windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\16c9569b75a9f47c38b60ba733936e1a\ReachFramework.ni.dll
+ 2012-06-15 08:26:06 . 2012-06-15 08:26:06 2056704 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\9c3d6b3ddef66cac069b6ab1fec514f8\PresentationUI.ni.dll
+ 2012-06-15 08:19:15 . 2012-06-15 08:19:15 2056704 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\32bece98175466e5a63d120d96e33269\PresentationUI.ni.dll
+ 2012-06-15 08:18:48 . 2012-06-15 08:18:48 1843712 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\f866554cae3c9bf97ef2fa2e90f4ebda\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-06-15 08:24:19 . 2012-06-15 08:24:19 1843712 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e4d308f69077903e24de92fe4fc06d29\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-06-15 08:24:13 . 2012-06-15 08:24:13 2317312 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\70e2694fe050bd480b9f61f935ca2da5\Microsoft.VisualBasic.ni.dll
+ 2012-06-15 08:18:40 . 2012-06-15 08:18:40 2317312 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\44f8907ea08f9c7ff390b17a925a98fd\Microsoft.VisualBasic.ni.dll
+ 2012-05-16 01:26:00 . 2012-05-16 01:26:00 1623040 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\16425c121db8083cbaa51f619c9e51e7\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-05-16 01:25:51 . 2012-05-16 01:25:51 1526784 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\5284682fcf04815a86233bcaf696da66\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-16 01:30:57 . 2012-05-16 01:30:57 3313664 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\4b1d24a96b3882f9e77445e48a7c59ee\Microsoft.JScript.ni.dll
+ 2012-05-16 01:25:24 . 2012-05-16 01:25:24 2009600 C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\1ff62486cdefbfc2dab41b686a9aa4e2\Microsoft.CSharp.ni.dll
+ 2012-06-15 08:22:00 . 2012-06-15 08:22:00 3858432 C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
+ 2012-05-16 01:23:53 . 2012-05-16 01:23:53 1063424 C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\24ed0e1df6a605cdb2088f87ae2ab8ff\UIAutomationClientsideProviders.ni.dll
+ 2012-05-16 00:44:02 . 2012-05-16 00:44:02 9091584 C:\Windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
+ 2012-05-16 00:44:11 . 2012-05-16 00:44:11 5617664 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
+ 2012-05-16 01:21:07 . 2012-05-16 01:21:08 1782272 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
+ 2012-06-15 08:31:43 . 2012-06-15 08:31:43 4587008 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-05-16 01:23:44 . 2012-05-16 01:23:44 1885696 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\b37cc0aa41e7feaba9f290da4da91d71\System.Web.Services.ni.dll
+ 2012-05-16 01:23:39 . 2012-05-16 01:23:39 2012160 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Speech\f368c85283c4e6c9650dd1c8d369dcc5\System.Speech.ni.dll
+ 2012-05-16 01:23:35 . 2012-05-16 01:23:35 1140736 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ec057796972ce41b751eaa3a8306fbcb\System.ServiceModel.Discovery.ni.dll
+ 2012-05-16 01:23:33 . 2012-05-16 01:23:33 1393152 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5055b60e339143bbace5871f5fe4b114\System.ServiceModel.Activities.ni.dll
+ 2012-05-16 01:21:11 . 2012-05-16 01:21:11 2647040 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
+ 2012-05-16 01:21:13 . 2012-05-16 01:21:13 1021952 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\79ac99fe5274fb82ffcff2c15f71854c\System.Runtime.DurableInstancing.ni.dll
+ 2012-06-15 08:31:15 . 2012-06-15 08:31:15 1060864 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll
+ 2012-05-16 01:23:06 . 2012-05-16 01:23:06 1218560 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
+ 2012-05-16 01:23:02 . 2012-05-16 01:23:02 1072640 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\bd28f26b18b8ffeee1a0fbaa98f5810e\System.IdentityModel.ni.dll
+ 2012-06-15 08:21:57 . 2012-06-15 08:21:57 1666048 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
+ 2012-05-16 01:21:16 . 2012-05-16 01:21:16 1172992 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0fe1e56d17858b6156a3a46330f75f27\System.DirectoryServices.ni.dll
+ 2012-06-15 08:31:13 . 2012-06-15 08:31:13 1880064 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll
+ 2012-05-16 00:44:36 . 2012-05-16 00:44:36 6815232 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\99d0f7ba920eea1117e45dcd9fec0eb5\System.Data.ni.dll
+ 2012-05-16 00:44:44 . 2012-05-16 00:44:45 2550272 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\fdb98c6d783fe167c1dc0022f27b7cd6\System.Data.SqlXml.ni.dll
+ 2012-05-16 01:22:58 . 2012-05-16 01:22:58 1343488 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\b894a1df3e6d58ada8f1aa303465ca23\System.Data.Services.Client.ni.dll
+ 2012-05-16 00:44:26 . 2012-05-16 00:44:26 2517504 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\82c0c56ff8259e1440cfd0d5727a26d8\System.Data.Linq.ni.dll
+ 2012-05-16 00:44:22 . 2012-05-16 00:44:22 7069184 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
+ 2012-05-16 01:21:32 . 2012-05-16 01:21:32 4129280 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Activities\51025a1c89f6fd752a5396a059d608b2\System.Activities.ni.dll
+ 2012-06-15 08:31:27 . 2012-06-15 08:31:27 3757568 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll
+ 2012-05-16 01:21:34 . 2012-05-16 01:21:34 1546752 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\66893548d2b2cad29cabf3b3578f356f\System.Activities.Core.Presentation.ni.dll
+ 2012-06-15 08:31:19 . 2012-06-15 08:31:19 2906624 C:\Windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll
+ 2012-06-15 08:31:11 . 2012-06-15 08:31:11 1641984 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll
+ 2012-05-16 01:20:59 . 2012-05-16 01:20:59 1172480 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\42a7f127f3fda82fb12c6a6e144d08c1\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-06-15 08:31:07 . 2012-06-15 08:31:08 1139712 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2ed0173a2e75b1a3943bd2d96649a50c\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-06-15 08:31:04 . 2012-06-15 08:31:04 1838080 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll
+ 2012-05-16 01:20:55 . 2012-05-16 01:20:55 1085952 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9a37f4e64ce5b856ac3892fef064c7de\Microsoft.Transactions.Bridge.ni.dll
+ 2012-05-16 01:23:08 . 2012-05-16 01:23:08 2452480 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\cfcc92c125ddfaabad24abe61cfc0471\Microsoft.JScript.ni.dll
+ 2012-05-16 00:44:40 . 2012-05-16 00:44:40 1616896 C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\9912b6d76c1017b5af6ef24730f550ca\Microsoft.CSharp.ni.dll
+ 2012-05-27 06:01:15 . 2012-05-27 06:01:15 4957184 C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\09985a85d707482a00cfe0544cab57f1\WindowsBase.ni.dll
+ 2012-05-27 05:56:59 . 2012-05-27 05:56:59 1461760 C:\Windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\9971e8a4e97ecd860c7dca0b36c17f8f\UIAutomationClientsideProviders.ni.dll
+ 2012-05-27 06:08:44 . 2012-05-27 06:08:44 6953472 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\74a1c70f40e24cc88453f24d07d68e82\System.Xml.ni.dll
+ 2012-06-15 08:18:09 . 2012-06-15 08:18:09 1754112 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\e8d16e0da135ebf65b5be7b48556ce2e\System.WorkflowServices.ni.dll
+ 2012-06-15 08:50:56 . 2012-06-15 08:50:56 1754112 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\5ef2b0292d6ef8f7a0b885a593aca44b\System.WorkflowServices.ni.dll
+ 2012-05-16 03:29:53 . 2012-05-16 03:29:53 2745344 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\9d0288f7d01c7c404490a8c81fd5f8e4\System.Workflow.Runtime.ni.dll
+ 2012-06-15 08:46:44 . 2012-06-15 08:46:44 2702848 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\4b016f3679666af12f1ce0179765f22e\System.Workflow.Runtime.ni.dll
+ 2012-06-15 08:46:38 . 2012-06-15 08:46:38 5956096 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\fe1ea6e5fd659ba3677c06282b0d636d\System.Workflow.ComponentModel.ni.dll
+ 2012-06-15 08:08:20 . 2012-06-15 08:08:20 5956096 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\5d04339e6e9c3509a43400eabac9b1ec\System.Workflow.ComponentModel.ni.dll
+ 2012-06-15 08:08:08 . 2012-06-15 08:08:08 3893248 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\b5b17aa58a38b7c4e8b1f6a5d585ff58\System.Workflow.Activities.ni.dll
+ 2012-06-15 08:46:27 . 2012-06-15 08:46:27 3893248 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\5416c21395744eef4c834dc561775b3c\System.Workflow.Activities.ni.dll
+ 2012-05-27 06:06:52 . 2012-05-27 06:06:52 2296320 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\821949ca3fd431f2087ae624ae47e8f1\System.Web.Services.ni.dll
+ 2012-06-15 08:48:56 . 2012-06-15 08:48:56 2291712 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\19c7bfd896bfd1b6e732d650da6e91b4\System.Web.Services.ni.dll
+ 2012-06-15 08:18:00 . 2012-06-15 08:18:00 3335680 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\78b713edbe4ea0d93a1894f85a716fdf\System.Web.Mobile.ni.dll
+ 2012-06-15 08:50:52 . 2012-06-15 08:50:52 3335680 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\3b1523f87594c367b5020cf5913c078d\System.Web.Mobile.ni.dll
+ 2012-06-15 08:50:46 . 2012-06-15 08:50:46 1154560 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\c175d1ec8877250db87759686218afbf\System.Web.Extensions.Design.ni.dll
+ 2012-06-15 08:17:54 . 2012-06-15 08:17:54 1154560 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\902cb1388076b343bf8c9940fbd648c7\System.Web.Extensions.Design.ni.dll
+ 2012-06-15 08:17:46 . 2012-06-15 08:17:46 3046912 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\7a3d3b6783470ff8d46cc012d2bbd775\System.Web.Extensions.ni.dll
+ 2012-06-15 08:50:40 . 2012-06-15 08:50:40 3046912 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\5cb55b6c417c699a9a73e982461968ed\System.Web.Extensions.ni.dll
+ 2012-05-27 05:33:41 . 2012-05-27 05:33:41 2733568 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Speech\ca64100ac67e6947e0515043093b0307\System.Speech.ni.dll
+ 2012-05-27 05:32:26 . 2012-05-27 05:32:26 2243072 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\e6474a9899b317a89218a57cd2295e9c\System.ServiceModel.Web.ni.dll
+ 2012-05-27 05:27:57 . 2012-05-27 05:27:57 3073536 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\740ed6d2b4048766bc1452c6f7056976\System.Runtime.Serialization.ni.dll
+ 2012-05-27 06:05:58 . 2012-05-27 06:05:58 1024512 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\4bad8696533f1d274ed26ecc8a3053c2\System.Runtime.Remoting.ni.dll
+ 2012-06-15 08:17:01 . 2012-06-15 08:17:01 1453056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Printing\6039d7884009694683589bc23a7ee995\System.Printing.ni.dll
+ 2012-05-27 06:10:13 . 2012-05-27 06:10:13 1429504 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\eb4bebd3e53daacbf0e1c5616f40055a\System.Management.ni.dll
+ 2012-05-27 05:31:35 . 2012-05-27 05:31:35 1433600 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\a7ab3e176c0f989247806a17344f5704\System.IdentityModel.ni.dll
+ 2012-05-27 06:05:54 . 2012-05-27 06:05:54 1081344 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\323242ea556a272dca9dc2019258264a\System.EnterpriseServices.ni.dll
+ 2012-06-15 08:07:26 . 2012-06-15 08:07:26 2319872 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\9efc0ccf635c1ce30d2981108e17b00f\System.Drawing.ni.dll
+ 2012-05-27 04:40:38 . 2012-05-27 04:40:38 1220096 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\df35c4149d87b7492815855c831ed801\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-05-27 06:05:19 . 2012-05-27 06:05:19 1642496 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\10fb4063a892576634c1d816985bfc07\System.DirectoryServices.ni.dll
+ 2012-06-15 08:14:39 . 2012-06-15 08:14:39 2433024 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\f79607fce169ac91cbe1a52e03df9933\System.Deployment.ni.dll
+ 2012-06-15 08:48:58 . 2012-06-15 08:48:58 2433024 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\4a6752662cb45753081058a4e848dc4b\System.Deployment.ni.dll
+ 2012-05-27 06:05:46 . 2012-05-27 06:05:46 8651776 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data\2b12257e6ad0b59512fc8e6d8bd68d6d\System.Data.ni.dll
+ 2012-05-27 06:08:57 . 2012-05-27 06:08:57 3494912 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\fe25e4565224ddd9d5a980389d4a8d6b\System.Data.SqlXml.ni.dll
+ 2012-05-27 04:35:29 . 2012-05-27 04:35:29 1844224 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\f8498306aec0d5aab56fb1153fd3ee47\System.Data.Services.ni.dll
+ 2012-05-27 04:36:21 . 2012-05-27 04:36:21 1284096 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\51eeb696959510b45cbae6503ca99300\System.Data.Services.Client.ni.dll
+ 2012-05-27 06:07:34 . 2012-05-27 06:07:34 1525760 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\af2f047f1d7a4bcf887163bab25a3bfa\System.Data.OracleClient.ni.dll
+ 2012-05-16 03:25:58 . 2012-05-16 03:25:59 3499520 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\ef2b7ebb20ad086df9fb61e7126b5555\System.Data.Linq.ni.dll
+ 2012-05-27 04:29:21 . 2012-05-27 04:29:21 1084928 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\08a69beec79dfe06a5b161cf5c736d00\System.Data.Entity.Design.ni.dll
+ 2012-05-27 05:49:26 . 2012-05-27 05:49:26 3314176 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\dab7dbb33ba56d802ea25db0d50818dc\System.Core.ni.dll
+ 2012-05-27 06:08:20 . 2012-05-27 06:08:20 1315328 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\c143376d9097c4de2325b15619521947\System.Configuration.ni.dll
+ 2012-06-15 08:16:58 . 2012-06-15 08:16:58 3101184 C:\Windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\aedc7938e0a1ef8854e378f1224dfa7d\ReachFramework.ni.dll
+ 2012-06-15 08:16:51 . 2012-06-15 08:16:51 2109440 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\f6c852c8f7fea1e8df4b33e8d0fcc1ae\PresentationUI.ni.dll
+ 2012-06-15 08:49:53 . 2012-06-15 08:49:53 2109440 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\50abd377da62b8a687f7b41499a9db75\PresentationUI.ni.dll
+ 2012-05-27 03:46:23 . 2012-05-27 03:46:23 1889792 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\55fe3a9d5d5e40b1dc0f2e5a7a218f2a\PresentationBuildTasks.ni.dll
+ 2012-06-15 08:50:24 . 2012-06-15 08:50:24 3482112 C:\Windows\assembly\NativeImages_v2.0.50727_64\Narrator\c2f138d6fe09a7a865698e2070350263\Narrator.ni.exe
+ 2012-06-15 08:17:22 . 2012-06-15 08:17:22 3482112 C:\Windows\assembly\NativeImages_v2.0.50727_64\Narrator\2717ec9a97cc1f636c01243f8cfd754c\Narrator.ni.exe
+ 2012-06-15 08:17:14 . 2012-06-15 08:17:14 2314240 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCEx\8fe4ad0eb64d45b5d291adf215666e22\MMCEx.ni.dll
+ 2012-06-15 08:50:17 . 2012-06-15 08:50:17 2314240 C:\Windows\assembly\NativeImages_v2.0.50727_64\MMCEx\5151cc16597c8f407d97883a8cfa4a50\MMCEx.ni.dll
+ 2012-06-15 08:49:20 . 2012-06-15 08:49:20 7836672 C:\Windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\b03b526fba0766ed6ada91d393e7a6fa\MIGUIControls.ni.dll
+ 2012-06-15 08:16:02 . 2012-06-15 08:16:02 7836672 C:\Windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\503f4e11fc338b7960d67e82f5371383\MIGUIControls.ni.dll
+ 2012-06-15 08:17:08 . 2012-06-15 08:17:08 2173952 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\dce1c91304c3c14cb874dbfeb5a41abb\Microsoft.VisualBasic.ni.dll
+ 2012-06-15 08:50:11 . 2012-06-15 08:50:11 2173952 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\96b6285fda67be4d456d2f6a4d75ab52\Microsoft.VisualBasic.ni.dll
+ 2012-05-27 05:31:44 . 2012-05-27 05:31:44 1603072 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\587ae9f5072b8ac3386611afef4868ab\Microsoft.Transactions.Bridge.ni.dll
+ 2012-06-15 08:50:04 . 2012-06-15 08:50:05 5346816 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\cdc5230f1a47ff0aa945f267fb2bac71\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-15 08:16:30 . 2012-06-15 08:16:30 2101248 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\af22d8142f2dad659d4647792f9a5197\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-06-15 08:16:47 . 2012-06-15 08:16:47 5346816 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a78ef9e1338af61bd003574bc3ae575f\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-15 08:49:57 . 2012-06-15 08:49:57 2104832 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\97cd884f6f751cdd2d9e32d5b123744a\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-05-24 01:15:28 . 2012-05-24 01:15:28 2109440 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\95a2b436b5fbb4b205c04db8d6086353\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-05-24 01:23:10 . 2012-05-24 01:23:10 1003520 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\89a062216f0f9a9d8fd94d7be9a2a443\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-05-24 01:03:53 . 2012-05-24 01:03:53 1084416 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\782ed7706b3cad2fe6b0e153ae7c0f26\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-06-15 08:14:59 . 2012-06-15 08:15:00 7721472 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\20a7e859ee7ee6b6037466a0d8a8be2f\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-27 06:10:23 . 2012-05-27 06:10:23 3209216 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\d50eaeeed8620ded9f42fc18bf8d8239\Microsoft.JScript.ni.dll
+ 2012-06-15 08:49:35 . 2012-06-15 08:49:35 2357248 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\d565b0fb0bb312d5ca28046e25876645\Microsoft.Ink.ni.dll
+ 2012-06-15 08:16:19 . 2012-06-15 08:16:19 2357248 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\9393721e8605d95f4a4483c80dfd0880\Microsoft.Ink.ni.dll
+ 2012-06-15 08:49:31 . 2012-06-15 08:49:31 2575872 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\85a4473926ef1f94380ee9be95832772\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-06-15 08:16:15 . 2012-06-15 08:16:15 2575872 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\430b0cec2b9bbd9ab4a4a97078319831\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-06-15 08:49:27 . 2012-06-15 08:49:27 2217984 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\1b9d195833c5a57fab2ed4060df8e82f\Microsoft.Build.Tasks.ni.dll
+ 2012-06-15 08:16:10 . 2012-06-15 08:16:10 2217984 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\0b374589dc0cbfa9ef0f5897e1d9f513\Microsoft.Build.Tasks.ni.dll
+ 2012-05-21 22:14:13 . 2012-05-21 22:14:13 1189376 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\cbcfd58aad59cca9762fbbf545c73838\Microsoft.Build.Engine.ni.dll
+ 2012-05-21 22:14:16 . 2012-05-21 22:14:16 2433024 C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\86ec05c1eee6dd5e0abd87639fa348e4\Microsoft.Build.Engine.ni.dll
+ 2012-05-21 22:00:18 . 2012-05-21 22:00:18 2417664 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\7d425610c1a9700aac834c64dfc896fd\ehRecObj.ni.dll
+ 2012-05-21 22:00:13 . 2012-05-21 22:00:13 2002432 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\0841f868af4462fdfeb1c5b434c31282\ehiVidCtl.ni.dll
+ 2012-05-22 08:04:47 . 2012-05-22 08:04:47 2885120 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\264c5491e6b4e10a3072d85c10e66b0b\ehiProxy.ni.dll
+ 2012-05-21 21:59:34 . 2012-05-21 21:59:34 1039872 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehiPlay\309715e26c7a0ceced60ce1971d917b0\ehiPlay.ni.dll
+ 2012-05-22 08:04:53 . 2012-05-22 08:04:53 3040768 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehepg\3f69e2eb2056673c6716eb76f954d9a8\ehepg.ni.dll
+ 2012-05-27 03:07:16 . 2012-05-27 03:07:16 3355648 C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\228876324c50c6e1db11fc8a57a67ee2\WindowsBase.ni.dll
+ 2012-05-27 03:05:13 . 2012-05-27 03:05:13 1050112 C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\7bc9046ebb07552e1a53c2a9b486ca12\UIAutomationClientsideProviders.ni.dll
+ 2012-06-15 08:13:15 . 2012-06-15 08:13:15 7953408 C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll
+ 2012-05-27 03:10:59 . 2012-05-27 03:11:00 5457408 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\2c3e80bf92ccaab8fa9102919c60e419\System.Xml.ni.dll
+ 2012-07-18 01:48:05 . 2012-07-18 01:48:05 1316864 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b0c68df1300f0542e7284d2bbcd63258\System.WorkflowServices.ni.dll
+ 2012-07-18 01:47:56 . 2012-07-18 01:47:56 1911296 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\e5b517ac742be27954c3093cfe6d1dd6\System.Workflow.Runtime.ni.dll
+ 2012-07-18 01:41:23 . 2012-07-18 01:41:23 4514304 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\865be11ce86f1882176810a3f909511b\System.Workflow.ComponentModel.ni.dll
+ 2012-07-18 01:41:16 . 2012-07-18 01:41:16 2992640 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\57a2f3b78edc0f5f088b210fabfe3bdc\System.Workflow.Activities.ni.dll
+ 2012-06-15 08:52:14 . 2012-06-15 08:52:14 1840640 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\663112d3002034cf5126be253efff60d\System.Web.Services.ni.dll
+ 2012-07-18 01:41:06 . 2012-07-18 01:41:06 2209280 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\0b90f82645cbd8de45ef8f5e467af156\System.Web.Mobile.ni.dll
+ 2012-06-15 08:53:32 . 2012-06-15 08:53:33 2405888 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e32cd4390580125dd830ea561960040a\System.Web.Extensions.ni.dll
+ 2012-05-24 03:23:00 . 2012-05-24 03:23:00 1923072 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Speech\6fbdd5ddc0e98637357ee10d9258ed53\System.Speech.ni.dll
+ 2012-05-24 03:22:44 . 2012-05-24 03:22:44 1654272 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\6e2744a68da29fe8f100a046e15f6c9a\System.ServiceModel.Web.ni.dll
+ 2012-05-24 03:21:53 . 2012-05-24 03:21:53 2350080 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f63fa5fefe8faad149a73b8653c77ca4\System.Runtime.Serialization.ni.dll
+ 2012-06-15 08:30:02 . 2012-06-15 08:30:03 1035776 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Printing\36fbb8064216ef11bd87afae6ee774dd\System.Printing.ni.dll
+ 2012-05-27 03:11:40 . 2012-05-27 03:11:41 1013248 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\fff514068a8efd9d3f1f67e93c56661e\System.Management.ni.dll
+ 2012-05-24 03:15:46 . 2012-05-24 03:15:46 8365056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\03086891ff7da180ccb0d8ca1f3f7400\System.Management.Automation.ni.dll
+ 2012-05-24 03:22:33 . 2012-05-24 03:22:33 1074176 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\f641d4b15877efb6dc51fa7ee18d4fb4\System.IdentityModel.ni.dll
+ 2012-06-15 08:14:25 . 2012-06-15 08:14:25 1592320 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\18f9789aa214c657113e676b3a9015aa\System.Drawing.ni.dll
+ 2012-05-27 03:09:22 . 2012-05-27 03:09:22 1120256 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\1ea7ec7d1353ee607356b6cdb0523915\System.DirectoryServices.ni.dll
+ 2012-06-15 08:51:51 . 2012-06-15 08:51:51 1801216 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\18050fc0ebf2c4835d05ffd337aa1616\System.Deployment.ni.dll
+ 2012-05-27 03:09:35 . 2012-05-27 03:09:35 6648832 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\d24a8571f48e7155abfdb095267ca269\System.Data.ni.dll
+ 2012-05-27 03:11:06 . 2012-05-27 03:11:06 2538496 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\804535762cc86cd849a406b58a330750\System.Data.SqlXml.ni.dll
+ 2012-05-19 20:56:07 . 2012-05-19 20:56:07 1330688 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e74146d4e0752d13fbf359727f8d6245\System.Data.Services.ni.dll
+ 2012-05-27 03:10:25 . 2012-05-27 03:10:25 1132544 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\602c898387fb60370b99b16c0504ab71\System.Data.OracleClient.ni.dll
+ 2012-05-16 03:16:37 . 2012-05-16 03:16:37 2534912 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\38f8ec8ff7b0b0e4ceb6839fde2b3ee1\System.Data.Linq.ni.dll
+ 2012-05-19 20:54:56 . 2012-05-19 20:54:56 9933824 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\928e804524d09182bb35936932f28b4b\System.Data.Entity.ni.dll
+ 2012-05-27 03:01:21 . 2012-05-27 03:01:21 2296320 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\a47b8fe82e0eba450a61cd9bbadf330d\System.Core.ni.dll
+ 2012-06-15 08:30:01 . 2012-06-15 08:30:01 2146816 C:\Windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3b1507e086784fb78e3d5e671aab1b0d\ReachFramework.ni.dll
+ 2012-06-15 08:52:52 . 2012-06-15 08:52:53 1657856 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\f42d14201dfb29938d5c07468ae91df6\PresentationUI.ni.dll
+ 2012-05-19 20:47:36 . 2012-05-19 20:47:36 1458176 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\aa58021907662f2462678ee963f983b4\PresentationBuildTasks.ni.dll
+ 2012-06-15 08:53:10 . 2012-06-15 08:53:10 2538496 C:\Windows\assembly\NativeImages_v2.0.50727_32\Narrator\ab99814c8ea65f32eb9be47c99323a5e\Narrator.ni.exe
+ 2012-06-15 08:53:06 . 2012-06-15 08:53:06 1536512 C:\Windows\assembly\NativeImages_v2.0.50727_32\MMCEx\cb2db8c862e11358d3bb1b92f85d86bd\MMCEx.ni.dll
+ 2012-06-15 08:52:35 . 2012-06-15 08:52:35 6340096 C:\Windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\82a54c1a86466437495ab3dd91c58b63\MIGUIControls.ni.dll
+ 2012-07-18 01:34:24 . 2012-07-18 01:34:24 1711616 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\2467a133aee73396c830b9b0a9c7ec0d\Microsoft.VisualBasic.ni.dll
+ 2012-05-24 03:22:36 . 2012-05-24 03:22:36 1096704 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\6e165515196313617129fa3c39d05be6\Microsoft.Transactions.Bridge.ni.dll
+ 2012-06-15 08:29:47 . 2012-06-15 08:29:47 1609728 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\cf16c88f8fbb1020031774cf9134c045\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-07-18 01:34:10 . 2012-07-18 01:34:10 1704448 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\16dc159df194ef2fbb4ae593623dea73\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-07-18 01:34:14 . 2012-07-18 01:34:14 3722752 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\09d3142890c6ef56f7c742be21421fc2\Microsoft.PowerShell.Editor.ni.dll
+ 2012-06-15 08:29:40 . 2012-06-15 08:29:40 5486080 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\cf100c0c1510f5c7bb1e17f2f359883c\Microsoft.MediaCenter.UI.ni.dll
+ 2012-05-27 03:11:45 . 2012-05-27 03:11:45 2335232 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\97dbf999b492ec12f7aeeae76c401d99\Microsoft.JScript.ni.dll
+ 2012-06-15 08:52:43 . 2012-06-15 08:52:43 1356288 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\c420edef488501ffe0a8bd56d9756955\Microsoft.Ink.ni.dll
+ 2012-07-18 01:33:41 . 2012-07-18 01:33:41 1620992 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\304acbf276a1820a1c11f6f923d52745\Microsoft.Build.Tasks.ni.dll
+ 2012-05-19 20:27:21 . 2012-05-19 20:27:21 1778176 C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\e7431c4a290fee0db5bcbfba41e030ba\Microsoft.Build.Engine.ni.dll
- 2010-06-23 14:35:48 . 2010-04-05 12:19:27 1249280 C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-05-16 00:00:09 . 2012-02-13 11:02:15 1249280 C:\Windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-02-16 02:59:43 . 2011-11-01 11:23:33 3186688 C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-05-16 00:18:58 . 2012-01-03 10:58:08 3186688 C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-14 22:18:39 . 2012-03-22 11:02:38 5025792 C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-06-16 03:37:07 . 2011-03-29 10:53:25 5025792 C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-06-14 22:18:37 . 2012-03-22 11:02:33 5062656 C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2009-12-19 18:06:25 . 2009-03-30 04:42:18 5062656 C:\Windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-05-16 00:00:13 . 2012-02-13 11:02:09 5283840 C:\Windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-05-16 00:00:09 . 2012-02-13 11:02:28 2255128 C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
+ 2012-05-16 00:00:11 . 2012-02-13 11:02:18 3997184 C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-10-13 02:16:50 . 2011-07-08 11:52:04 4567040 C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-16 00:18:58 . 2012-01-03 10:56:51 4567040 C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-05-16 00:00:08 . 2012-02-13 11:02:19 1736984 C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
- 2010-06-23 14:35:47 . 2010-04-05 12:19:06 4214784 C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-16 00:00:11 . 2012-02-13 11:02:04 4214784 C:\Windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-05-16 00:18:57 . 2012-01-03 10:57:17 4550656 C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-10-13 02:16:50 . 2011-07-08 11:53:06 4550656 C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-02-11 01:29:58 . 2011-01-21 16:35:22 11586048 C:\Windows\SysWOW64\shell32.dll
+ 2012-07-12 00:38:44 . 2012-06-08 17:47:00 11586048 C:\Windows\SysWOW64\shell32.dll
+ 2012-06-14 22:16:44 . 2012-05-15 06:31:42 11111424 C:\Windows\SysWOW64\ieframe.dll
+ 2006-11-02 12:33:39 . 2012-07-12 02:51:08 11010048 C:\Windows\system32\SMI\Store\Machine\schema.dat
- 2006-11-02 12:33:39 . 2012-05-09 02:27:01 11010048 C:\Windows\system32\SMI\Store\Machine\schema.dat
+ 2012-05-16 00:19:01 . 2012-01-03 10:57:06 10021648 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
+ 2012-05-22 08:01:16 . 2012-05-22 08:01:16 23771136 C:\Windows\Installer\d29c688.msp
+ 2012-05-15 22:19:52 . 2012-05-15 22:19:52 20343808 C:\Windows\Installer\52f82.msp
+ 2012-01-19 19:20:42 . 2012-01-19 19:20:42 11997696 C:\Windows\Installer\26bb72.msp
+ 2011-12-15 19:54:16 . 2011-12-15 19:54:16 39732736 C:\Windows\Installer\26bb64.msp
+ 2011-09-16 02:42:00 . 2011-09-16 02:42:00 18115432 C:\Windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6612\WWLIB.DLL
+ 2012-05-16 00:43:18 . 2012-05-16 00:43:18 11880448 C:\Windows\assembly\NativeImages_v4.0.30319_64\System\935aea6e7eae16674abdd96a68ec97af\System.ni.dll
+ 2012-06-15 08:26:41 . 2012-06-15 08:26:41 17355264 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\e883d90a0210bf99ca88f3b4ade53a24\System.Windows.Forms.ni.dll
+ 2012-05-16 01:31:42 . 2012-05-16 01:31:42 24551936 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\c4cc7eb7733c4221c32caccfd66ae320\System.ServiceModel.ni.dll
+ 2012-05-16 01:30:28 . 2012-05-16 01:30:28 18479616 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\9df4e7ae75baa7bbb1af30c8061a6e9b\System.Data.Entity.ni.dll
+ 2012-05-16 01:25:19 . 2012-05-16 01:25:20 10440192 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\b64f213e823a591607c45fac4997801e\System.Core.ni.dll
+ 2012-06-15 08:25:59 . 2012-06-15 08:26:00 24407552 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a3c3789d54894008501ce5891f1eeb40\PresentationFramework.ni.dll
+ 2012-05-16 01:27:30 . 2012-05-16 01:27:31 24407552 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\34c2013b5f730680bd610d6a98d2977f\PresentationFramework.ni.dll
+ 2012-06-15 08:25:05 . 2012-06-15 08:25:05 15908864 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\9d69a7a407bbc43a1bcb2da603af5840\PresentationCore.ni.dll
+ 2012-05-16 01:26:44 . 2012-05-16 01:26:44 15908864 C:\Windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\4464e9df7184e3393b4cbb0f6dc286ba\PresentationCore.ni.dll
+ 2012-05-16 00:42:54 . 2012-05-16 00:42:54 19353600 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\6087fce8f76d9af69af496cb10b7d1ee\mscorlib.ni.dll
+ 2012-06-15 08:22:08 . 2012-06-15 08:22:09 13198336 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
+ 2012-05-16 01:23:29 . 2012-05-16 01:23:30 18058752 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\cfece6f67593b4d8bb58d23b7fdcc470\System.ServiceModel.ni.dll
+ 2012-05-16 01:22:54 . 2012-05-16 01:22:55 13345792 C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\7aa839fb16503243d6ae454ab334bcf4\System.Data.Entity.ni.dll
+ 2012-06-15 08:22:33 . 2012-06-15 08:22:34 18000896 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
+ 2012-06-15 08:22:15 . 2012-06-15 08:22:16 11451904 C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
+ 2012-05-16 00:43:53 . 2012-05-16 00:43:53 14412800 C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
+ 2012-06-15 08:04:24 . 2012-06-15 08:04:24 10603008 C:\Windows\assembly\NativeImages_v2.0.50727_64\System\02b082509a73afd38691bf4626b10922\System.ni.dll
+ 2012-06-15 08:46:19 . 2012-06-15 08:46:19 17380352 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\9e0a0b099890de9edadbf6d021aa7576\System.Windows.Forms.ni.dll
+ 2012-06-15 08:07:57 . 2012-06-15 08:07:58 17377792 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\0b336aa7125c56e4cd21c716e0f9d2f3\System.Windows.Forms.ni.dll
+ 2012-06-15 08:14:34 . 2012-06-15 08:14:35 15245824 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\e8edde233435289b5e5e6aa7c370904c\System.Web.ni.dll
+ 2012-06-15 08:48:50 . 2012-06-15 08:48:50 15245824 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\5ded60c9ec9be6b40e91234e7af20647\System.Web.ni.dll
+ 2012-05-27 05:26:56 . 2012-05-27 05:26:57 23856128 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\09d860537ad5bccf48bcbb1966885748\System.ServiceModel.ni.dll
+ 2012-05-27 04:55:30 . 2012-05-27 04:55:31 11248640 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\181b985463652265870d8b9ab984cb08\System.Management.Automation.ni.dll
+ 2012-06-15 08:45:49 . 2012-06-15 08:45:49 13718528 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Design\efa17c5d88fbdaddabd553ec285cf7d9\System.Design.ni.dll
+ 2012-06-15 08:07:21 . 2012-06-15 08:07:21 13718016 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Design\54d039c0b426868dfbf516b163453fc8\System.Design.ni.dll
+ 2012-05-27 04:28:30 . 2012-05-27 04:28:30 13788672 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\1c02335a6eeda4ce4294950f3f770bc1\System.Data.Entity.ni.dll
+ 2012-06-15 08:06:50 . 2012-06-15 08:06:50 19182592 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\39b4930ab1f1ac372ca0819c2ca6acdc\PresentationFramework.ni.dll
+ 2012-06-15 08:05:57 . 2012-06-15 08:05:58 16517120 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\b34e214c688ffe4c2d68e149000f91b9\PresentationCore.ni.dll
+ 2012-05-16 03:20:06 . 2012-05-16 03:20:07 15566848 C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\2587f61ee62de33378f07668140b362b\mscorlib.ni.dll
+ 2012-06-15 08:23:40 . 2012-06-15 08:23:40 15825920 C:\Windows\assembly\NativeImages_v2.0.50727_64\ehshell\6f4f44ed69a8813df0caf5f19c7912b1\ehshell.ni.dll
+ 2012-06-15 08:47:32 . 2012-06-15 08:47:33 12433920 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f2691cfa7671cdc58179e56ba9227591\System.Windows.Forms.ni.dll
+ 2012-06-15 08:52:11 . 2012-06-15 08:52:11 11820032 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\508b444db523c5cf20ff12c7f440837b\System.Web.ni.dll
+ 2012-05-24 03:21:41 . 2012-05-24 03:21:42 17447424 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\55854ad2478ee0fb835decad0997c9fb\System.ServiceModel.ni.dll
+ 2012-06-15 08:47:20 . 2012-06-15 08:47:20 10683392 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Design\02ccd8236a942b3f89411fab5d2b594a\System.Design.ni.dll
+ 2012-06-15 08:14:09 . 2012-06-15 08:14:10 14331392 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b86f6fc659a10f0b966554e4cbcda727\PresentationFramework.ni.dll
+ 2012-06-15 08:13:51 . 2012-06-15 08:13:52 12219904 C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9e2891d1eb4fefe0e5a782ee9aa441be\PresentationCore.ni.dll
+ 2012-05-16 03:13:38 . 2012-05-16 03:13:39 11492352 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll

-- Snapshot reset to current date --

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MobileDocuments"="C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 17:30:40 59240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe" [2012-04-19 01:56:22 421888]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2012-05-31 03:35:45 296056]
"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-31 01:06:18 59280]
"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [2012-06-08 00:33:22 421776]
"avgnt"="C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-05-02 05:31:38 348624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"disableCAD"= 1 (0x1)

#22
WhiteHat

Posted 02 August 2012 - 11:13 AM

Trusted Helper

Retired Staff
1,925 posts

Trying again... Combofix log. I made sure this time--the WHOlE thing!!

ComboFix.txt is still incomplete. :happy:

Try to compress the file using winrar and attach the file to your next reply.

Other alternative is use the Pastebin

Just copy and past the contents of the combofix.txt and in your next reply, send me the URL.

Edited by WhiteHat, 02 August 2012 - 11:14 AM.

#23
wlrdew

Posted 02 August 2012 - 12:19 PM

Member

Topic Starter
Member
19 posts

What I posted is all there is. I double checked. Maybe it did not finish the log? It kep saying "Preparing the log" but never said it was done.

#24
wlrdew

Posted 02 August 2012 - 12:28 PM

Member

Topic Starter
Member
19 posts

Here is hte URL to Pastebin (I had bever heard of that before! What a cool site!)

I checked and doublechecked, but I think it is still incomplete. Perhaps ComboFix did not finish the log?

http://pastebin.com/DnJV5Vin

#25
WhiteHat

Posted 02 August 2012 - 06:09 PM

Trusted Helper

Retired Staff
1,925 posts

Hi,

Download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click the Start Scan button.
If a suspicious object is detected, the default action will be Skip, click on Continue.
If malicious objects are found, they will show in the Scan results and offer three (3) options.
Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
Get the report by selecting Reports

A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.

#26
wlrdew

Posted 02 August 2012 - 07:24 PM

Member

Topic Starter
Member
19 posts

Here is the TDSSKiller File. Thank you!

19:56:10.0333 0892 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
19:56:12.0335 0892 ============================================================
19:56:12.0335 0892 Current date / time: 2012/08/02 19:56:12.0335
19:56:12.0335 0892 SystemInfo:
19:56:12.0335 0892
19:56:12.0336 0892 OS Version: 6.0.6002 ServicePack: 2.0
19:56:12.0336 0892 Product type: Workstation
19:56:12.0336 0892 ComputerName: WENDY-PC
19:56:12.0336 0892 UserName: Wendy
19:56:12.0336 0892 Windows directory: C:\Windows
19:56:12.0336 0892 System windows directory: C:\Windows
19:56:12.0336 0892 Running under WOW64
19:56:12.0336 0892 Processor architecture: Intel x64
19:56:12.0336 0892 Number of processors: 2
19:56:12.0336 0892 Page size: 0x1000
19:56:12.0336 0892 Boot type: Normal boot
19:56:12.0336 0892 ============================================================
19:56:13.0794 0892 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:56:13.0813 0892 ============================================================
19:56:13.0813 0892 \Device\Harddisk0\DR0:
19:56:13.0813 0892 MBR partitions:
19:56:13.0813 0892 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1B800, BlocksNum 0x1E00000
19:56:13.0813 0892 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E1B800, BlocksNum 0x38069000
19:56:13.0813 0892 ============================================================
19:56:13.0873 0892 C: <-> \Device\Harddisk0\DR0\Partition1
19:56:13.0908 0892 D: <-> \Device\Harddisk0\DR0\Partition0
19:56:13.0908 0892 ============================================================
19:56:13.0908 0892 Initialize success
19:56:13.0908 0892 ============================================================
19:57:16.0541 5044 ============================================================
19:57:16.0541 5044 Scan started
19:57:16.0541 5044 Mode: Manual; SigCheck; TDLFS;
19:57:16.0541 5044 ============================================================
19:57:19.0733 5044 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
19:57:19.0982 5044 ACPI - ok
19:57:20.0149 5044 AdobeFlashPlayerUpdateSvc (f19c98ad81d2c0e1bbfd8153d2c80ee8) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:57:20.0164 5044 AdobeFlashPlayerUpdateSvc - ok
19:57:20.0344 5044 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
19:57:20.0383 5044 adp94xx - ok
19:57:20.0454 5044 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
19:57:20.0481 5044 adpahci - ok
19:57:20.0519 5044 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
19:57:20.0538 5044 adpu160m - ok
19:57:20.0576 5044 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
19:57:20.0599 5044 adpu320 - ok
19:57:20.0685 5044 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll
19:57:20.0887 5044 AeLookupSvc - ok
19:57:21.0023 5044 AESTFilters (05f4262fdbdfaeca7ef9b3f0807508fc) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_bb0e6831\AESTSr64.exe
19:57:21.0091 5044 AESTFilters - ok
19:57:21.0166 5044 AFD (c4f6ce6087760ad70960c9eb130e7943) C:\Windows\system32\drivers\afd.sys
19:57:21.0284 5044 AFD - ok
19:57:21.0347 5044 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
19:57:21.0363 5044 agp440 - ok
19:57:21.0433 5044 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
19:57:21.0449 5044 aic78xx - ok
19:57:21.0472 5044 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe
19:57:21.0665 5044 ALG - ok
19:57:21.0687 5044 aliide (9544c2c55541c0c6bfd7b489d0e7d430) C:\Windows\system32\drivers\aliide.sys
19:57:21.0703 5044 aliide - ok
19:57:21.0751 5044 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
19:57:21.0766 5044 amdide - ok
19:57:21.0811 5044 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
19:57:21.0893 5044 AmdK8 - ok
19:57:22.0132 5044 AntiVirSchedulerService (0a1cc583e8147004e4ad4625d7fbf88c) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
19:57:22.0157 5044 AntiVirSchedulerService - ok
19:57:22.0200 5044 AntiVirService (c9a36ef935aced86aedf93e97e606911) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
19:57:22.0220 5044 AntiVirService - ok
19:57:22.0289 5044 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll
19:57:22.0376 5044 Appinfo - ok
19:57:22.0494 5044 Apple Mobile Device (f401929ee0cc92bfe7f15161ca535383) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:57:22.0508 5044 Apple Mobile Device - ok
19:57:22.0583 5044 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
19:57:22.0599 5044 arc - ok
19:57:22.0623 5044 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
19:57:22.0641 5044 arcsas - ok
19:57:22.0681 5044 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
19:57:22.0758 5044 AsyncMac - ok
19:57:22.0799 5044 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
19:57:22.0818 5044 atapi - ok
19:57:22.0913 5044 AudioEndpointBuilder (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
19:57:22.0972 5044 AudioEndpointBuilder - ok
19:57:22.0978 5044 AudioSrv (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
19:57:23.0018 5044 AudioSrv - ok
19:57:23.0105 5044 avgntflt (26e38b5a58c6c55fafbc563eeddb0867) C:\Windows\system32\DRIVERS\avgntflt.sys
19:57:23.0129 5044 avgntflt - ok
19:57:23.0215 5044 avipbb (9d1f00beff84cbbf46d7f052bc7e0565) C:\Windows\system32\DRIVERS\avipbb.sys
19:57:23.0231 5044 avipbb - ok
19:57:23.0260 5044 avkmgr (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys
19:57:23.0285 5044 avkmgr - ok
19:57:23.0355 5044 b57nd60a (635868361f9878ea65ab417628f834ef) C:\Windows\system32\DRIVERS\b57nd60a.sys
19:57:23.0452 5044 b57nd60a - ok
19:57:23.0519 5044 BCM42RLY (a7c9995ba861fce78b2ceaae61d39fd7) C:\Windows\system32\drivers\BCM42RLY.sys
19:57:23.0540 5044 BCM42RLY - ok
19:57:23.0884 5044 BCM43XX (d32f962b71fee6bdaaee630bb2c17280) C:\Windows\system32\DRIVERS\bcmwl664.sys
19:57:23.0974 5044 BCM43XX - ok
19:57:24.0219 5044 Beep - ok
19:57:24.0315 5044 BFE (ffb96c2589ffa60473ead78b39fbde29) C:\Windows\System32\bfe.dll
19:57:24.0435 5044 BFE - ok
19:57:24.0587 5044 BITS (6d316f4859634071cc25c4fd4589ad2c) C:\Windows\system32\qmgr.dll
19:57:24.0732 5044 BITS - ok
19:57:24.0868 5044 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
19:57:24.0951 5044 blbdrive - ok
19:57:25.0245 5044 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
19:57:25.0276 5044 Bonjour Service - ok
19:57:25.0309 5044 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
19:57:25.0391 5044 bowser - ok
19:57:25.0480 5044 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
19:57:25.0549 5044 BrFiltLo - ok
19:57:25.0554 5044 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
19:57:25.0610 5044 BrFiltUp - ok
19:57:25.0673 5044 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll
19:57:25.0751 5044 Browser - ok
19:57:25.0873 5044 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
19:57:26.0097 5044 Brserid - ok
19:57:26.0162 5044 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
19:57:26.0241 5044 BrSerWdm - ok
19:57:26.0245 5044 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
19:57:26.0341 5044 BrUsbMdm - ok
19:57:26.0395 5044 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
19:57:26.0471 5044 BrUsbSer - ok
19:57:26.0528 5044 BthEnum (09f926a0d9c0bafd8417a4307d2ed13c) C:\Windows\system32\DRIVERS\BthEnum.sys
19:57:26.0595 5044 BthEnum - ok
19:57:26.0679 5044 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
19:57:26.0788 5044 BTHMODEM - ok
19:57:26.0860 5044 BthPan (befc5311736b475ac5b60c14ff7c775a) C:\Windows\system32\DRIVERS\bthpan.sys
19:57:26.0919 5044 BthPan - ok
19:57:26.0978 5044 BTHPORT (c09fc81debec904c4ba4efa1081415d8) C:\Windows\system32\Drivers\BTHport.sys
19:57:27.0042 5044 BTHPORT - ok
19:57:27.0100 5044 BthServ (22e65ffd640f16968f855f5b3528d366) C:\Windows\System32\bthserv.dll
19:57:27.0157 5044 BthServ - ok
19:57:27.0181 5044 BTHUSB (970192cded77a128e7e30722e5ee6b9c) C:\Windows\system32\Drivers\BTHUSB.sys
19:57:27.0223 5044 BTHUSB - ok
19:57:27.0330 5044 btwaudio (3f9e2fa99c1604ba4d099116c49d2be9) C:\Windows\system32\drivers\btwaudio.sys
19:57:27.0345 5044 btwaudio - ok
19:57:27.0353 5044 btwavdt (5cff0f47e1372445f7d6cda161ca8269) C:\Windows\system32\drivers\btwavdt.sys
19:57:27.0367 5044 btwavdt - ok
19:57:27.0377 5044 btwrchid (65864e5020e608bfba6729c11e4ee9e9) C:\Windows\system32\DRIVERS\btwrchid.sys
19:57:27.0389 5044 btwrchid - ok
19:57:27.0573 5044 catchme - ok
19:57:27.0602 5044 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
19:57:27.0677 5044 cdfs - ok
19:57:27.0745 5044 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
19:57:27.0826 5044 cdrom - ok
19:57:27.0892 5044 CertPropSvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
19:57:27.0960 5044 CertPropSvc - ok
19:57:28.0101 5044 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
19:57:28.0197 5044 circlass - ok
19:57:28.0806 5044 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
19:57:28.0912 5044 CLFS - ok
19:57:29.0433 5044 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:57:29.0587 5044 clr_optimization_v2.0.50727_32 - ok
19:57:30.0508 5044 clr_optimization_v2.0.50727_64 (ce07a466201096f021cd09d631b21540) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:57:30.0545 5044 clr_optimization_v2.0.50727_64 - ok
19:57:30.0889 5044 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:57:30.0904 5044 clr_optimization_v4.0.30319_32 - ok
19:57:31.0056 5044 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:57:31.0119 5044 clr_optimization_v4.0.30319_64 - ok
19:57:31.0186 5044 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
19:57:31.0248 5044 CmBatt - ok
19:57:31.0383 5044 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
19:57:31.0396 5044 cmdide - ok
19:57:31.0447 5044 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
19:57:31.0460 5044 Compbatt - ok
19:57:31.0468 5044 COMSysApp - ok
19:57:31.0500 5044 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
19:57:31.0519 5044 crcdisk - ok
19:57:31.0582 5044 CryptSvc (62740b9d2a137e8ced41a9e4239a7a31) C:\Windows\system32\cryptsvc.dll
19:57:31.0663 5044 CryptSvc - ok
19:57:31.0760 5044 DcomLaunch (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll
19:57:31.0818 5044 DcomLaunch - ok
19:57:32.0059 5044 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
19:57:32.0181 5044 DfsC - ok
19:57:32.0433 5044 DFSR (c647f468f7de343df8c143655c5557d4) C:\Windows\system32\DFSR.exe
19:57:32.0708 5044 DFSR - ok
19:57:33.0339 5044 Dhcp (3ed0321127ce70acdaabbf77e157c2a7) C:\Windows\System32\dhcpcsvc.dll
19:57:33.0415 5044 Dhcp - ok
19:57:33.0527 5044 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
19:57:33.0543 5044 disk - ok
19:57:33.0618 5044 Dnscache (06230f1b721494a6df8d47fd395bb1b0) C:\Windows\System32\dnsrslvr.dll
19:57:33.0690 5044 Dnscache - ok
19:57:33.0726 5044 dot3svc (1a7156dd1e850e9914e5e991e3225b94) C:\Windows\System32\dot3svc.dll
19:57:33.0796 5044 dot3svc - ok
19:57:33.0866 5044 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll
19:57:33.0948 5044 DPS - ok
19:57:34.0016 5044 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
19:57:34.0060 5044 drmkaud - ok
19:57:34.0664 5044 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
19:57:34.0720 5044 DXGKrnl - ok
19:57:34.0821 5044 e1express (17d40652ef3e55eeae187a89df40965a) C:\Windows\system32\DRIVERS\e1e6032e.sys
19:57:34.0918 5044 e1express - ok
19:57:35.0040 5044 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
19:57:35.0181 5044 E1G60 - ok
19:57:35.0296 5044 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll
19:57:35.0400 5044 EapHost - ok
19:57:35.0471 5044 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
19:57:35.0498 5044 Ecache - ok
19:57:35.0624 5044 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe
19:57:35.0707 5044 ehRecvr - ok
19:57:35.0774 5044 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe
19:57:35.0829 5044 ehSched - ok
19:57:35.0892 5044 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll
19:57:35.0968 5044 ehstart - ok
19:57:36.0117 5044 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
19:57:36.0184 5044 elxstor - ok
19:57:36.0292 5044 EMDMgmt (a9b18b63a4fd6baab83326706d857fab) C:\Windows\system32\emdmgmt.dll
19:57:36.0376 5044 EMDMgmt - ok
19:57:36.0466 5044 ErrDev (991fab6aa066e1214efb5b496fb7959a) C:\Windows\system32\drivers\errdev.sys
19:57:36.0534 5044 ErrDev - ok
19:57:36.0613 5044 EventSystem (e12f22b73f153dece721cd45ec05b4af) C:\Windows\system32\es.dll
19:57:36.0698 5044 EventSystem - ok
19:57:36.0744 5044 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
19:57:36.0845 5044 exfat - ok
19:57:36.0935 5044 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
19:57:37.0009 5044 fastfat - ok
19:57:37.0080 5044 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
19:57:37.0182 5044 fdc - ok
19:57:37.0217 5044 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll
19:57:37.0290 5044 fdPHost - ok
19:57:37.0318 5044 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll
19:57:37.0426 5044 FDResPub - ok
19:57:37.0560 5044 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
19:57:37.0592 5044 FileInfo - ok
19:57:37.0625 5044 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
19:57:37.0683 5044 Filetrace - ok
19:57:37.0757 5044 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
19:57:37.0845 5044 flpydisk - ok
19:57:37.0896 5044 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
19:57:37.0928 5044 FltMgr - ok
19:57:38.0094 5044 FontCache (be1c5bd1ca7ed015bc6fa1ae67e592c8) C:\Windows\system32\FntCache.dll
19:57:38.0245 5044 FontCache - ok
19:57:38.0313 5044 FontCache3.0.0.0 (bc5b0be5af3510b0fd8c140ee42c6d3e) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:57:38.0380 5044 FontCache3.0.0.0 - ok
19:57:38.0458 5044 Fs_Rec (5779b86cd8b32519fbecb136394d946a) C:\Windows\system32\drivers\Fs_Rec.sys
19:57:38.0531 5044 Fs_Rec - ok
19:57:38.0575 5044 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
19:57:38.0599 5044 gagp30kx - ok
19:57:38.0653 5044 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
19:57:38.0675 5044 GEARAspiWDM - ok
19:57:38.0755 5044 gpsvc (a0e1b575ba8f504968cd40c0faeb2384) C:\Windows\System32\gpsvc.dll
19:57:38.0819 5044 gpsvc - ok
19:57:39.0012 5044 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
19:57:39.0161 5044 HDAudBus - ok
19:57:39.0251 5044 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
19:57:39.0381 5044 HidBth - ok
19:57:39.0454 5044 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
19:57:39.0569 5044 HidIr - ok
19:57:39.0597 5044 hidserv (59361d38a297755d46a540e450202b2a) C:\Windows\System32\hidserv.dll
19:57:39.0661 5044 hidserv - ok
19:57:39.0717 5044 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
19:57:39.0778 5044 HidUsb - ok
19:57:39.0867 5044 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll
19:57:39.0939 5044 hkmsvc - ok
19:57:40.0036 5044 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
19:57:40.0053 5044 HpCISSs - ok
19:57:40.0168 5044 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
19:57:40.0285 5044 HTTP - ok
19:57:40.0321 5044 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
19:57:40.0344 5044 i2omp - ok
19:57:40.0400 5044 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
19:57:40.0479 5044 i8042prt - ok
19:57:40.0535 5044 iaStor (fc28e90f2204d8fd147fa9bfa8a51c01) C:\Windows\system32\drivers\iastor.sys
19:57:40.0559 5044 iaStor - ok
19:57:40.0668 5044 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
19:57:40.0687 5044 iaStorV - ok
19:57:41.0070 5044 idsvc (749f5f8cedca70f2a512945325fc489d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:57:41.0222 5044 idsvc - ok
19:57:42.0291 5044 igfx (50f15f9aee2e7692dfe58917e2d40498) C:\Windows\system32\DRIVERS\igdkmd64.sys
19:57:42.0695 5044 igfx - ok
19:57:43.0012 5044 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
19:57:43.0033 5044 iirsp - ok
19:57:43.0082 5044 IKEEXT (0c9ea6e654e7b0471741e343a6c671af) C:\Windows\System32\ikeext.dll
19:57:43.0176 5044 IKEEXT - ok
19:57:43.0251 5044 IntcHdmiAddService (574dbb0a69845e90c8ba1a2aa8beb527) C:\Windows\system32\drivers\IntcHdmi.sys
19:57:43.0319 5044 IntcHdmiAddService - ok
19:57:43.0383 5044 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\DRIVERS\intelide.sys
19:57:43.0405 5044 intelide - ok
19:57:43.0419 5044 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
19:57:43.0501 5044 intelppm - ok
19:57:43.0553 5044 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll
19:57:43.0645 5044 IPBusEnum - ok
19:57:43.0683 5044 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:57:43.0745 5044 IpFilterDriver - ok
19:57:43.0968 5044 iphlpsvc (bf0dbfa9792c5c14fa00f61c75116c1b) C:\Windows\System32\iphlpsvc.dll
19:57:44.0022 5044 iphlpsvc - ok
19:57:44.0027 5044 IpInIp - ok
19:57:44.0058 5044 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
19:57:44.0148 5044 IPMIDRV - ok
19:57:44.0222 5044 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
19:57:44.0295 5044 IPNAT - ok
19:57:44.0762 5044 iPod Service (a9ab99ee7d39725eafec82732d2b3271) C:\Program Files\iPod\bin\iPodService.exe
19:57:44.0889 5044 iPod Service - ok
19:57:44.0996 5044 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
19:57:45.0069 5044 IRENUM - ok
19:57:45.0164 5044 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
19:57:45.0177 5044 isapnp - ok
19:57:45.0656 5044 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
19:57:45.0675 5044 iScsiPrt - ok
19:57:45.0700 5044 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
19:57:45.0713 5044 iteatapi - ok
19:57:45.0789 5044 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
19:57:45.0802 5044 iteraid - ok
19:57:45.0841 5044 JLTECH0227 - ok
19:57:45.0908 5044 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
19:57:45.0922 5044 kbdclass - ok
19:57:45.0946 5044 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
19:57:45.0990 5044 kbdhid - ok
19:57:46.0029 5044 KeyIso (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
19:57:46.0083 5044 KeyIso - ok
19:57:46.0189 5044 KSecDD (88956ad9fa510848ad176777a6c6c1f5) C:\Windows\system32\Drivers\ksecdd.sys
19:57:46.0215 5044 KSecDD - ok
19:57:46.0278 5044 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
19:57:46.0352 5044 ksthunk - ok
19:57:46.0428 5044 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll
19:57:46.0496 5044 KtmRm - ok
19:57:46.0543 5044 LanmanServer (50c7a3cb427e9bb5ed0708a669956ab5) C:\Windows\System32\srvsvc.dll
19:57:46.0593 5044 LanmanServer - ok
19:57:46.0666 5044 LanmanWorkstation (caf86fc1388be1e470f1a7b43e348adb) C:\Windows\System32\wkssvc.dll
19:57:46.0720 5044 LanmanWorkstation - ok
19:57:46.0770 5044 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
19:57:46.0848 5044 lltdio - ok
19:57:46.0954 5044 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll
19:57:47.0034 5044 lltdsvc - ok
19:57:47.0055 5044 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll
19:57:47.0113 5044 lmhosts - ok
19:57:47.0247 5044 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
19:57:47.0271 5044 LSI_FC - ok
19:57:47.0306 5044 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
19:57:47.0324 5044 LSI_SAS - ok
19:57:47.0386 5044 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
19:57:47.0402 5044 LSI_SCSI - ok
19:57:47.0441 5044 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
19:57:47.0513 5044 luafv - ok
19:57:47.0634 5044 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll
19:57:47.0676 5044 Mcx2Svc - ok
19:57:47.0755 5044 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
19:57:47.0769 5044 megasas - ok
19:57:47.0821 5044 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
19:57:47.0848 5044 MegaSR - ok
19:57:47.0929 5044 MHIKEY10 (1c049b43538887334cc27450bfd05dbf) C:\Windows\system32\Drivers\MHIKEY10x64.sys
19:57:47.0980 5044 MHIKEY10 - ok
19:57:48.0010 5044 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
19:57:48.0072 5044 MMCSS - ok
19:57:48.0121 5044 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
19:57:48.0186 5044 Modem - ok
19:57:48.0217 5044 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
19:57:48.0259 5044 monitor - ok
19:57:48.0292 5044 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
19:57:48.0308 5044 mouclass - ok
19:57:48.0368 5044 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
19:57:48.0428 5044 mouhid - ok
19:57:48.0460 5044 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
19:57:48.0474 5044 MountMgr - ok
19:57:48.0561 5044 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
19:57:48.0577 5044 mpio - ok
19:57:48.0604 5044 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
19:57:48.0659 5044 mpsdrv - ok
19:57:48.0807 5044 MpsSvc (897e3baf68ba406a61682ae39c83900c) C:\Windows\system32\mpssvc.dll
19:57:48.0885 5044 MpsSvc - ok
19:57:48.0939 5044 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
19:57:48.0952 5044 Mraid35x - ok
19:57:48.0993 5044 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
19:57:49.0036 5044 MRxDAV - ok
19:57:49.0074 5044 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
19:57:49.0128 5044 mrxsmb - ok
19:57:49.0168 5044 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:57:49.0211 5044 mrxsmb10 - ok
19:57:49.0245 5044 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:57:49.0277 5044 mrxsmb20 - ok
19:57:49.0315 5044 msahci (730b784962d22d2c6481eae2370e7c8c) C:\Windows\system32\drivers\msahci.sys
19:57:49.0329 5044 msahci - ok
19:57:49.0357 5044 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
19:57:49.0374 5044 msdsm - ok
19:57:49.0420 5044 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe
19:57:49.0500 5044 MSDTC - ok
19:57:49.0560 5044 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
19:57:49.0627 5044 Msfs - ok
19:57:49.0690 5044 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
19:57:49.0707 5044 msisadrv - ok
19:57:49.0748 5044 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll
19:57:49.0832 5044 MSiSCSI - ok
19:57:49.0838 5044 msiserver - ok
19:57:49.0867 5044 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
19:57:49.0946 5044 MSKSSRV - ok
19:57:50.0318 5044 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
19:57:50.0379 5044 MSPCLOCK - ok
19:57:50.0416 5044 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
19:57:50.0495 5044 MSPQM - ok
19:57:50.0639 5044 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
19:57:50.0671 5044 MsRPC - ok
19:57:50.0699 5044 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
19:57:50.0721 5044 mssmbios - ok
19:57:50.0741 5044 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
19:57:50.0819 5044 MSTEE - ok
19:57:50.0861 5044 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
19:57:50.0886 5044 Mup - ok
19:57:50.0931 5044 napagent (a5b10c845e7538c60c0f5d87a57cb3f5) C:\Windows\system32\qagentRT.dll
19:57:51.0027 5044 napagent - ok
19:57:51.0099 5044 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
19:57:51.0154 5044 NativeWifiP - ok
19:57:51.0231 5044 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
19:57:51.0279 5044 NDIS - ok
19:57:51.0312 5044 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
19:57:51.0385 5044 NdisTapi - ok
19:57:51.0416 5044 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
19:57:51.0474 5044 Ndisuio - ok
19:57:51.0507 5044 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
19:57:51.0569 5044 NdisWan - ok
19:57:51.0674 5044 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
19:57:51.0746 5044 NDProxy - ok
19:57:51.0776 5044 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
19:57:51.0836 5044 NetBIOS - ok
19:57:51.0880 5044 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
19:57:51.0949 5044 netbt - ok
19:57:51.0985 5044 Netlogon (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
19:57:52.0008 5044 Netlogon - ok
19:57:52.0061 5044 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll
19:57:52.0177 5044 Netman - ok
19:57:52.0210 5044 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll
19:57:52.0292 5044 netprofm - ok
19:57:52.0377 5044 NetTcpPortSharing (74751dda198165947fd7454d83f49825) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:57:52.0431 5044 NetTcpPortSharing - ok
19:57:52.0492 5044 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
19:57:52.0513 5044 nfrd960 - ok
19:57:52.0552 5044 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll
19:57:52.0633 5044 NlaSvc - ok
19:57:52.0676 5044 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
19:57:52.0735 5044 Npfs - ok
19:57:52.0765 5044 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll
19:57:52.0845 5044 nsi - ok
19:57:52.0881 5044 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
19:57:52.0959 5044 nsiproxy - ok
19:57:53.0102 5044 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
19:57:53.0180 5044 Ntfs - ok
19:57:53.0308 5044 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
19:57:53.0388 5044 Null - ok
19:57:53.0428 5044 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
19:57:53.0453 5044 nvraid - ok
19:57:53.0487 5044 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
19:57:53.0511 5044 nvstor - ok
19:57:53.0522 5044 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
19:57:53.0548 5044 nv_agp - ok
19:57:53.0553 5044 NwlnkFlt - ok
19:57:53.0559 5044 NwlnkFwd - ok
19:57:53.0738 5044 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:57:53.0818 5044 odserv - ok
19:57:53.0900 5044 OEM02Dev (44a9473d72983dd484b4f1bf0d946571) C:\Windows\system32\DRIVERS\OEM02Dev.sys
19:57:53.0958 5044 OEM02Dev - ok
19:57:54.0030 5044 OEM02Vfx (766f689564bc30e5a91f8621ce65ad68) C:\Windows\system32\DRIVERS\OEM02Vfx.sys
19:57:54.0071 5044 OEM02Vfx - ok
19:57:54.0131 5044 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
19:57:54.0198 5044 ohci1394 - ok
19:57:54.0279 5044 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:57:54.0333 5044 ose - ok
19:57:54.0559 5044 p2pimsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
19:57:54.0689 5044 p2pimsvc - ok
19:57:54.0699 5044 p2psvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
19:57:54.0726 5044 p2psvc - ok
19:57:54.0773 5044 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
19:57:54.0867 5044 Parport - ok
19:57:54.0935 5044 partmgr (b43751085e2abe389da466bc62a4b987) C:\Windows\system32\drivers\partmgr.sys
19:57:54.0951 5044 partmgr - ok
19:57:54.0968 5044 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll
19:57:55.0019 5044 PcaSvc - ok
19:57:55.0095 5044 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
19:57:55.0134 5044 pci - ok
19:57:55.0164 5044 pciide (2657f6c0b78c36d95034be109336e382) C:\Windows\system32\drivers\pciide.sys
19:57:55.0186 5044 pciide - ok
19:57:55.0306 5044 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
19:57:55.0342 5044 pcmcia - ok
19:57:55.0504 5044 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
19:57:55.0681 5044 PEAUTH - ok
19:57:55.0888 5044 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe
19:57:56.0005 5044 PerfHost - ok
19:57:56.0367 5044 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll
19:57:56.0549 5044 pla - ok
19:57:56.0792 5044 PlugPlay (fe6b0f59215c9fd9f9d26539c58c8b82) C:\Windows\system32\umpnpmgr.dll
19:57:56.0863 5044 PlugPlay - ok
19:57:57.0093 5044 PNRPAutoReg (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
19:57:57.0135 5044 PNRPAutoReg - ok
19:57:57.0149 5044 PNRPsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
19:57:57.0191 5044 PNRPsvc - ok
19:57:57.0252 5044 PolicyAgent (89a5560671c2d8b4a4b51f3e1aa069d8) C:\Windows\System32\ipsecsvc.dll
19:57:57.0319 5044 PolicyAgent - ok
19:57:57.0430 5044 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
19:57:57.0499 5044 PptpMiniport - ok
19:57:57.0533 5044 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
19:57:57.0593 5044 Processor - ok
19:57:57.0634 5044 ProfSvc (e058ce4fc2449d8bfa14739c83b7ff2a) C:\Windows\system32\profsvc.dll
19:57:57.0682 5044 ProfSvc - ok
19:57:57.0707 5044 ProtectedStorage (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
19:57:57.0730 5044 ProtectedStorage - ok
19:57:57.0762 5044 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
19:57:57.0808 5044 PSched - ok
19:57:57.0813 5044 PxHelp20 - ok
19:57:58.0292 5044 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
19:57:58.0409 5044 ql2300 - ok
19:57:58.0539 5044 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
19:57:58.0562 5044 ql40xx - ok
19:57:58.0627 5044 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll
19:57:58.0694 5044 QWAVE - ok
19:57:58.0725 5044 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
19:57:58.0784 5044 QWAVEdrv - ok
19:57:59.0389 5044 R300 (2a09a6b271d1f50adf5e33b37d460de6) C:\Windows\system32\DRIVERS\atikmdag.sys
19:58:00.0160 5044 R300 - ok
19:58:00.0392 5044 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
19:58:00.0439 5044 RasAcd - ok
19:58:00.0972 5044 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll
19:58:01.0071 5044 RasAuto - ok
19:58:01.0527 5044 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
19:58:01.0655 5044 Rasl2tp - ok
19:58:01.0800 5044 RasMan (3ad83e4046c43be510de681588acb8af) C:\Windows\System32\rasmans.dll
19:58:01.0882 5044 RasMan - ok
19:58:02.0003 5044 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
19:58:02.0030 5044 RasPppoe - ok
19:58:02.0067 5044 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
19:58:02.0107 5044 RasSstp - ok
19:58:02.0160 5044 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
19:58:02.0198 5044 rdbss - ok
19:58:02.0218 5044 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
19:58:02.0257 5044 RDPCDD - ok
19:58:02.0304 5044 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
19:58:02.0390 5044 rdpdr - ok
19:58:02.0420 5044 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
19:58:02.0459 5044 RDPENCDD - ok
19:58:02.0680 5044 RDPWD (ae4bd9e1c33d351d8e607fc81f15160c) C:\Windows\system32\drivers\RDPWD.sys
19:58:02.0780 5044 RDPWD - ok
19:58:02.0832 5044 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll
19:58:02.0897 5044 RemoteAccess - ok
19:58:02.0939 5044 RemoteRegistry (44b9d8ec2f3ef3a0efb00857af70d861) C:\Windows\system32\regsvc.dll
19:58:03.0001 5044 RemoteRegistry - ok
19:58:03.0049 5044 RFCOMM (cd71e053d7260e4102d99a28f9196070) C:\Windows\system32\DRIVERS\rfcomm.sys
19:58:03.0113 5044 RFCOMM - ok
19:58:03.0159 5044 rimmptsk (d13d70fac45fc1df69f88559b1f72f0a) C:\Windows\system32\DRIVERS\rimmpx64.sys
19:58:03.0207 5044 rimmptsk - ok
19:58:03.0280 5044 rimsptsk (bb9edc55b0b8cb4fcd713428820e0776) C:\Windows\system32\DRIVERS\rimspx64.sys
19:58:03.0293 5044 rimsptsk - ok
19:58:03.0313 5044 rismxdp (481c3fdeacaae04b74c58288dbc91df9) C:\Windows\system32\DRIVERS\rixdpx64.sys
19:58:03.0334 5044 rismxdp - ok
19:58:03.0362 5044 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe
19:58:03.0429 5044 RpcLocator - ok
19:58:03.0481 5044 RpcSs (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\System32\rpcss.dll
19:58:03.0520 5044 RpcSs - ok
19:58:03.0572 5044 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
19:58:03.0610 5044 rspndr - ok
19:58:03.0641 5044 SamSs (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
19:58:03.0659 5044 SamSs - ok
19:58:03.0691 5044 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
19:58:03.0710 5044 sbp2port - ok
19:58:03.0763 5044 SCardSvr (fd1cdcf108d5ef3366f00d18b70fb89b) C:\Windows\System32\SCardSvr.dll
19:58:03.0818 5044 SCardSvr - ok
19:58:03.0954 5044 Schedule (0f838c811ad295d2a4489b9993096c63) C:\Windows\system32\schedsvc.dll
19:58:04.0101 5044 Schedule - ok
19:58:04.0138 5044 SCPolicySvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
19:58:04.0174 5044 SCPolicySvc - ok
19:58:04.0281 5044 sdbus (be100bc2be2513314c717bb2c4cfff10) C:\Windows\system32\DRIVERS\sdbus.sys
19:58:04.0331 5044 sdbus - ok
19:58:04.0390 5044 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll
19:58:04.0433 5044 SDRSVC - ok
19:58:04.0516 5044 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
19:58:04.0598 5044 secdrv - ok
19:58:04.0633 5044 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll
19:58:04.0693 5044 seclogon - ok
19:58:04.0722 5044 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\system32\sens.dll
19:58:04.0777 5044 SENS - ok
19:58:04.0890 5044 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
19:58:04.0980 5044 Serenum - ok
19:58:05.0094 5044 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
19:58:05.0180 5044 Serial - ok
19:58:05.0271 5044 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
19:58:05.0400 5044 sermouse - ok
19:58:05.0446 5044 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll
19:58:05.0516 5044 SessionEnv - ok
19:58:05.0555 5044 sffdisk (3a19c899bcf0ea24cfec2038e6a489db) C:\Windows\system32\DRIVERS\sffdisk.sys
19:58:05.0626 5044 sffdisk - ok
19:58:05.0680 5044 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
19:58:05.0759 5044 sffp_mmc - ok
19:58:05.0855 5044 sffp_sd (fdca63a2eee528585eb66ceac183ec22) C:\Windows\system32\DRIVERS\sffp_sd.sys
19:58:05.0926 5044 sffp_sd - ok
19:58:05.0988 5044 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
19:58:06.0116 5044 sfloppy - ok
19:58:06.0198 5044 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll
19:58:06.0277 5044 SharedAccess - ok
19:58:06.0358 5044 ShellHWDetection (56793271ecdedd350c5add305603e963) C:\Windows\System32\shsvcs.dll
19:58:06.0423 5044 ShellHWDetection - ok
19:58:06.0491 5044 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
19:58:06.0521 5044 SiSRaid2 - ok
19:58:06.0553 5044 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
19:58:06.0577 5044 SiSRaid4 - ok
19:58:07.0089 5044 slsvc (a9a27a8e257b45a604fdad4f26fe7241) C:\Windows\system32\SLsvc.exe
19:58:07.0319 5044 slsvc - ok
19:58:07.0867 5044 SLUINotify (fd74b4b7c2088e390a30c85a896fc3af) C:\Windows\system32\SLUINotify.dll
19:58:07.0937 5044 SLUINotify - ok
19:58:08.0084 5044 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
19:58:08.0173 5044 Smb - ok
19:58:08.0208 5044 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe
19:58:08.0237 5044 SNMPTRAP - ok
19:58:08.0271 5044 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
19:58:08.0308 5044 spldr - ok
19:58:08.0565 5044 Spooler (f66ff751e7efc816d266977939ef5dc3) C:\Windows\System32\spoolsv.exe
19:58:08.0673 5044 Spooler - ok
19:58:08.0720 5044 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
19:58:08.0808 5044 srv - ok
19:58:08.0844 5044 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
19:58:08.0904 5044 srv2 - ok
19:58:08.0923 5044 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
19:58:08.0943 5044 srvnet - ok
19:58:08.0979 5044 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll
19:58:09.0048 5044 SSDPSRV - ok
19:58:09.0180 5044 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll
19:58:09.0217 5044 SstpSvc - ok
19:58:09.0421 5044 STacSV (f883003ac6715537950d0b3e4c609c42) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_bb0e6831\STacSV64.exe
19:58:09.0464 5044 STacSV - ok
19:58:09.0562 5044 STHDA (e964db5400cfd56fc99cd2ab1b21213f) C:\Windows\system32\drivers\stwrt64.sys
19:58:09.0604 5044 STHDA - ok
19:58:09.0702 5044 stisvc (15825c1fbfb8779992cb65087f316af5) C:\Windows\System32\wiaservc.dll
19:58:09.0734 5044 stisvc - ok
19:58:09.0777 5044 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
19:58:09.0796 5044 swenum - ok
19:58:09.0884 5044 swprv (6de37f4de19d4efd9c48c43addbc949a) C:\Windows\System32\swprv.dll
19:58:09.0993 5044 swprv - ok
19:58:10.0069 5044 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
19:58:10.0090 5044 Symc8xx - ok
19:58:10.0110 5044 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
19:58:10.0137 5044 Sym_hi - ok
19:58:10.0148 5044 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
19:58:10.0176 5044 Sym_u3 - ok
19:58:10.0271 5044 SynTP (b2a7d0790246e6fcdbdd256c4fcc4975) C:\Windows\system32\DRIVERS\SynTP.sys
19:58:10.0295 5044 SynTP - ok
19:58:10.0384 5044 SysMain (92d7a8b0f87b036f17d25885937897a6) C:\Windows\system32\sysmain.dll
19:58:10.0480 5044 SysMain - ok
19:58:10.0594 5044 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll
19:58:10.0653 5044 TabletInputService - ok
19:58:10.0850 5044 TapiSrv (cc2562b4d55e0b6a4758c65407f63b79) C:\Windows\System32\tapisrv.dll
19:58:10.0902 5044 TapiSrv - ok
19:58:10.0942 5044 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll
19:58:11.0003 5044 TBS - ok
19:58:11.0263 5044 Tcpip (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\drivers\tcpip.sys
19:58:11.0378 5044 Tcpip - ok
19:58:11.0392 5044 Tcpip6 (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\DRIVERS\tcpip.sys
19:58:11.0435 5044 Tcpip6 - ok
19:58:11.0490 5044 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
19:58:11.0575 5044 tcpipreg - ok
19:58:11.0689 5044 TcUsb (c050f120451b08fbf79588f66bf51ccd) C:\Windows\system32\Drivers\tcusb.sys
19:58:11.0708 5044 TcUsb - ok
19:58:11.0747 5044 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
19:58:11.0812 5044 TDPIPE - ok
19:58:11.0857 5044 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
19:58:11.0915 5044 TDTCP - ok
19:58:11.0974 5044 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
19:58:12.0042 5044 tdx - ok
19:58:12.0091 5044 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
19:58:12.0115 5044 TermDD - ok
19:58:12.0217 5044 TermService (5cdd30bc217082dac71a9878d9bfd566) C:\Windows\System32\termsrv.dll
19:58:12.0292 5044 TermService - ok
19:58:12.0382 5044 Themes (56793271ecdedd350c5add305603e963) C:\Windows\system32\shsvcs.dll
19:58:12.0411 5044 Themes - ok
19:58:12.0492 5044 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
19:58:12.0550 5044 THREADORDER - ok
19:58:12.0670 5044 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll
19:58:12.0754 5044 TrkWks - ok
19:58:12.0848 5044 TrustedInstaller (66328b08ef5a9305d8ede36b93930369) C:\Windows\servicing\TrustedInstaller.exe
19:58:12.0923 5044 TrustedInstaller - ok
19:58:12.0971 5044 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
19:58:13.0048 5044 tssecsrv - ok
19:58:13.0087 5044 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
19:58:13.0181 5044 tunmp - ok
19:58:13.0236 5044 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
19:58:13.0289 5044 tunnel - ok
19:58:13.0381 5044 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
19:58:13.0405 5044 uagp35 - ok
19:58:13.0451 5044 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
19:58:13.0531 5044 udfs - ok
19:58:13.0588 5044 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe
19:58:13.0656 5044 UI0Detect - ok
19:58:13.0703 5044 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
19:58:13.0720 5044 uliagpkx - ok
19:58:13.0740 5044 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
19:58:13.0764 5044 uliahci - ok
19:58:13.0782 5044 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
19:58:13.0803 5044 UlSata - ok
19:58:13.0820 5044 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
19:58:13.0840 5044 ulsata2 - ok
19:58:13.0876 5044 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
19:58:13.0916 5044 umbus - ok
19:58:13.0963 5044 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll
19:58:14.0032 5044 upnphost - ok
19:58:14.0106 5044 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
19:58:14.0161 5044 usbccgp - ok
19:58:14.0239 5044 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
19:58:14.0366 5044 usbcir - ok
19:58:14.0445 5044 usbehci (b1c7edb07f61bdee587831b440fc7656) C:\Windows\system32\DRIVERS\usbehci.sys
19:58:14.0475 5044 usbehci - ok
19:58:14.0510 5044 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
19:58:14.0579 5044 usbhub - ok
19:58:14.0635 5044 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
19:58:14.0745 5044 usbohci - ok
19:58:14.0775 5044 usbprint (acfee697af477021bb3ec78c5431fed2) C:\Windows\system32\drivers\usbprint.sys
19:58:14.0853 5044 usbprint - ok
19:58:14.0884 5044 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:58:14.0931 5044 USBSTOR - ok
19:58:14.0966 5044 usbuhci (c8d88a2a3587a8424b4b17a6f7eb67fa) C:\Windows\system32\DRIVERS\usbuhci.sys
19:58:15.0006 5044 usbuhci - ok
19:58:15.0049 5044 UxSms (d76e231e4850bb3f88a3d9a78df191e3) C:\Windows\System32\uxsms.dll
19:58:15.0095 5044 UxSms - ok
19:58:15.0173 5044 vds (294945381dfa7ce58cecf0a9896af327) C:\Windows\System32\vds.exe
19:58:15.0350 5044 vds - ok
19:58:15.0461 5044 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
19:58:15.0530 5044 vga - ok
19:58:15.0550 5044 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
19:58:15.0740 5044 VgaSave - ok
19:58:15.0791 5044 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
19:58:15.0808 5044 viaide - ok
19:58:16.0176 5044 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
19:58:16.0219 5044 volmgr - ok
19:58:16.0341 5044 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
19:58:16.0369 5044 volmgrx - ok
19:58:16.0432 5044 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
19:58:16.0461 5044 volsnap - ok
19:58:16.0519 5044 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
19:58:16.0536 5044 vsmraid - ok
19:58:16.0623 5044 VSS (b75232dad33bfd95bf6f0a3e6bff51e1) C:\Windows\system32\vssvc.exe
19:58:16.0761 5044 VSS - ok
19:58:16.0854 5044 W32Time (f14a7de2ea41883e250892e1e5230a9a) C:\Windows\system32\w32time.dll
19:58:16.0913 5044 W32Time - ok
19:58:17.0008 5044 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
19:58:17.0092 5044 WacomPen - ok
19:58:17.0139 5044 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
19:58:17.0194 5044 Wanarp - ok
19:58:17.0202 5044 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
19:58:17.0232 5044 Wanarpv6 - ok
19:58:17.0289 5044 wcncsvc (b4e4c37d0aa6100090a53213ee2bf1c1) C:\Windows\System32\wcncsvc.dll
19:58:17.0347 5044 wcncsvc - ok
19:58:17.0394 5044 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll
19:58:17.0427 5044 WcsPlugInService - ok
19:58:17.0546 5044 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
19:58:17.0564 5044 Wd - ok
19:58:17.0625 5044 WDC_SAM (a3d04ebf5227886029b4532f20d026f7) C:\Windows\system32\DRIVERS\wdcsam64.sys
19:58:17.0681 5044 WDC_SAM - ok
19:58:17.0829 5044 WDDMService (fa24fbe15a8036387ecc013d06094f3d) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
19:58:17.0866 5044 WDDMService ( UnsignedFile.Multi.Generic ) - warning
19:58:17.0866 5044 WDDMService - detected UnsignedFile.Multi.Generic (1)
19:58:17.0922 5044 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
19:58:17.0957 5044 Wdf01000 - ok
19:58:18.0006 5044 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
19:58:18.0065 5044 WdiServiceHost - ok
19:58:18.0072 5044 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
19:58:18.0111 5044 WdiSystemHost - ok
19:58:18.0274 5044 WDSmartWareBackgroundService (138ab06adbbf300aa804d7974a5aec82) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
19:58:18.0313 5044 WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - warning
19:58:18.0313 5044 WDSmartWareBackgroundService - detected UnsignedFile.Multi.Generic (1)
19:58:18.0406 5044 WebClient (3e6d05381cf35f75ebb055544a8ed9ac) C:\Windows\System32\webclnt.dll
19:58:18.0455 5044 WebClient - ok
19:58:18.0501 5044 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll
19:58:18.0559 5044 Wecsvc - ok
19:58:18.0601 5044 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll
19:58:18.0630 5044 wercplsupport - ok
19:58:18.0649 5044 WerSvc (66b9ecebc46683f47edc06333c075fef) C:\Windows\System32\WerSvc.dll
19:58:18.0704 5044 WerSvc - ok
19:58:18.0747 5044 WinDefend - ok
19:58:18.0917 5044 WinDriver6 (4de7d61cf51f4c8261d119cfbdb70243) C:\Windows\system32\drivers\windrvr6.sys
19:58:18.0962 5044 WinDriver6 - ok
19:58:18.0971 5044 WinHttpAutoProxySvc - ok
19:58:19.0046 5044 Winmgmt (d2e7296ed1bd26d8db2799770c077a02) C:\Windows\system32\wbem\WMIsvc.dll
19:58:19.0091 5044 Winmgmt - ok
19:58:19.0306 5044 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll
19:58:19.0466 5044 WinRM - ok
19:58:19.0699 5044 Wlansvc (ec339c8115e91baed835957e9a677f16) C:\Windows\System32\wlansvc.dll
19:58:19.0767 5044 Wlansvc - ok
19:58:20.0226 5044 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:58:20.0329 5044 wlidsvc - ok
19:58:20.0404 5044 wltrysvc - ok
19:58:20.0466 5044 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
19:58:20.0501 5044 WmiAcpi - ok
19:58:20.0665 5044 wmiApSrv (21fa389e65a852698b6a1341f36ee02d) C:\Windows\system32\wbem\WmiApSrv.exe
19:58:20.0707 5044 wmiApSrv - ok
19:58:20.0746 5044 WMPNetworkSvc - ok
19:58:20.0780 5044 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll
19:58:20.0849 5044 WPCSvc - ok
19:58:20.0918 5044 WPDBusEnum (490a18b4e4d53dc10879deaa8e8b70d9) C:\Windows\system32\wpdbusenum.dll
19:58:20.0990 5044 WPDBusEnum - ok
19:58:21.0367 5044 WPFFontCache_v0400 (991e2c2cf3bc204c2bb2ee1476149e4e) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:58:21.0533 5044 WPFFontCache_v0400 - ok
19:58:22.0024 5044 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
19:58:22.0100 5044 ws2ifsl - ok
19:58:22.0129 5044 wscsvc (9ea3e6d0ef7a5c2b9181961052a4b01a) C:\Windows\system32\wscsvc.dll
19:58:22.0159 5044 wscsvc - ok
19:58:22.0163 5044 WSearch - ok
19:58:22.0329 5044 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
19:58:22.0408 5044 wuauserv - ok
19:58:22.0542 5044 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
19:58:22.0607 5044 WUDFRd - ok
19:58:22.0647 5044 wudfsvc (6cbd51ff913c851d56ed9dc7f2a27dde) C:\Windows\System32\WUDFSvc.dll
19:58:22.0715 5044 wudfsvc - ok
19:58:22.0827 5044 YahooAUService (dd0042f0c3b606a6a8b92d49afb18ad6) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
19:58:22.0856 5044 YahooAUService - ok
19:58:22.0919 5044 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
19:58:22.0979 5044 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - infected
19:58:22.0979 5044 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.c (0)
19:58:23.0814 5044 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
19:58:23.0814 5044 \Device\Harddisk0\DR0 - detected TDSS File System (1)
19:58:23.0847 5044 Boot (0x1200) (4ea8ef6562c63d1168a54428ec057b74) \Device\Harddisk0\DR0\Partition0
19:58:23.0850 5044 \Device\Harddisk0\DR0\Partition0 - ok
19:58:23.0868 5044 Boot (0x1200) (2d9eca9fb0a92b6b8658439b377ae9dc) \Device\Harddisk0\DR0\Partition1
19:58:23.0870 5044 \Device\Harddisk0\DR0\Partition1 - ok
19:58:23.0870 5044 ============================================================
19:58:23.0871 5044 Scan finished
19:58:23.0871 5044 ============================================================
19:58:23.0890 2204 Detected object count: 4
19:58:23.0890 2204 Actual detected object count: 4
20:01:13.0607 2204 WDDMService ( UnsignedFile.Multi.Generic ) - skipped by user
20:01:13.0608 2204 WDDMService ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:01:13.0611 2204 WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - skipped by user
20:01:13.0611 2204 WDSmartWareBackgroundService ( UnsignedFile.Multi.Generic ) - User select action: Skip
20:01:14.0461 2204 \Device\Harddisk0\DR0\# - copied to quarantine
20:01:14.0461 2204 \Device\Harddisk0\DR0 - copied to quarantine
20:01:14.0520 2204 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine
20:01:14.0522 2204 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine
20:01:14.0527 2204 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine
20:01:14.0532 2204 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine
20:01:14.0545 2204 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
20:01:14.0551 2204 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
20:01:14.0553 2204 \Device\Harddisk0\DR0\TDLFS\servers.dat - copied to quarantine
20:01:14.0555 2204 \Device\Harddisk0\DR0\TDLFS\config.ini - copied to quarantine
20:01:14.0557 2204 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine
20:01:14.0561 2204 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
20:01:14.0565 2204 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
20:01:14.0567 2204 \Device\Harddisk0\DR0\TDLFS\s - copied to quarantine
20:01:14.0570 2204 \Device\Harddisk0\DR0\TDLFS\ldrm - copied to quarantine
20:01:14.0616 2204 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - will be cured on reboot
20:01:14.0643 2204 \Device\Harddisk0\DR0 - ok
20:01:14.0664 2204 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - User select action: Cure
20:01:14.0664 2204 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
20:01:14.0665 2204 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
20:01:29.0120 6092 Deinitialize success

#27
WhiteHat

Posted 03 August 2012 - 12:11 PM

Trusted Helper

Retired Staff
1,925 posts

Hi,

Do you have the Windows Vista DVD?
I need to know if you have the Recovery Console in your computer. To see this, follow these steps:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
See if the option Repair your computer exist:

#28
wlrdew

Posted 03 August 2012 - 09:58 PM

Member

Topic Starter
Member
19 posts

I am not certain where the Vista DVD is. Is that important?

I DO have the "Repair your Computer" option.

Is my computer VERY bad if it needs the Vista CD?

#29
WhiteHat

Posted 04 August 2012 - 12:46 PM

Trusted Helper

Retired Staff
1,925 posts

Hi,

Is my computer VERY bad if it needs the Vista CD?

There are two ways to access the recovery console and one is using the DVD, but as you already have the RC installed, will not be necessary to use the DVD.

For the next step, you will need an USB stick.

Download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select English as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

On the System Recovery Options menu you will get the following options:Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt[*]Select Command Prompt[*]In the command window type in notepad and press Enter.[*]The notepad opens. Under File menu select Open.[*]Select "Computer" and find your flash drive letter and close the notepad.[*]In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.[*]The tool will start to run.[*]When the tool opens click Yes to disclaimer.[*]Press Scan button.[*]It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.[/list]