1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Possible Infection?

Discussion in 'Malware and Virus Removal Archive' started by FettyG, 2010/08/08.

  1. 2010/08/08
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    [Resolved] Possible Infection?

    I have recently been having a number of problems with my laptop and was hoping you might be able to help me solve them!

    When using the internet I often have a new internet window randomly pop-up. It does not matter what site I am currently viewing. If I go to the Google homepage and just let it sit open for long enough (seems to be random) I get a random pop-up that is either a clone of whatever page I am currently on or is some irritating ad.

    I also often recieve a message that says "A generic host process WIN32 has encountered and error and must close ", after which my taskbar seems to take on the appearance of windows 98 (the older style with poor colors and everything) and sounds no longer work properly.

    Finally, my computer now takes between 6-8 minutes to start up properly. It loads to the Windows welcome screen, then loads the desktop with my icons and shortcuts, the mouse works and I can click on things, but nothing will open and the computer acts as if frozen for another few minutes. Eventually the icon for my local area connection appears (internet) after which I can then use the computer normally.

    I have tried running a few scans with Norton Security Suite (which found nothing wrong) as well as optimizing (defragmenter etc), but nothing seems to fix it.

    Any help would be greatly appreciated!

    Here are the logs requested:


    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 1/14/2010 6:59:21 PM
    System Uptime: 8/8/2010 7:51:31 PM (1 hours ago)

    Motherboard: Dell Inc. | |
    Processor: Intel(R) Core(TM)2 CPU T7200 @ 2.00GHz | Microprocessor | 998/166mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 75 GiB total, 27.638 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP167: 6/18/2010 1:46:04 AM - System Checkpoint
    RP168: 6/19/2010 3:16:15 AM - System Checkpoint
    RP169: 6/21/2010 1:41:06 AM - System Checkpoint
    RP170: 6/22/2010 2:00:45 AM - System Checkpoint
    RP171: 6/23/2010 2:29:51 AM - System Checkpoint
    RP172: 6/24/2010 3:00:39 AM - System Checkpoint
    RP173: 6/29/2010 3:12:15 AM - System Checkpoint
    RP174: 7/13/2010 2:34:24 AM - System Checkpoint
    RP175: 7/14/2010 3:00:18 AM - Software Distribution Service 3.0
    RP176: 7/15/2010 3:00:17 AM - Software Distribution Service 3.0
    RP177: 7/15/2010 3:50:53 AM - Software Distribution Service 3.0
    RP178: 7/15/2010 12:08:41 PM - Software Distribution Service 3.0
    RP179: 7/16/2010 2:02:05 PM - System Checkpoint
    RP180: 7/16/2010 7:57:55 PM - Installed DirectX
    RP181: 7/16/2010 7:59:24 PM - Installed Bloodline Champions Beta
    RP182: 7/19/2010 4:11:07 PM - System Checkpoint
    RP183: 7/20/2010 5:20:24 PM - System Checkpoint
    RP184: 7/21/2010 6:34:50 PM - System Checkpoint
    RP185: 7/22/2010 7:30:03 PM - System Checkpoint
    RP186: 7/24/2010 1:02:30 AM - System Checkpoint
    RP187: 7/25/2010 11:28:53 AM - System Checkpoint
    RP188: 7/26/2010 12:55:14 PM - System Checkpoint
    RP189: 7/27/2010 1:25:53 PM - System Checkpoint
    RP190: 7/28/2010 3:01:35 PM - System Checkpoint
    RP191: 7/29/2010 4:12:40 PM - System Checkpoint
    RP192: 7/31/2010 1:23:52 PM - System Checkpoint
    RP193: 8/1/2010 2:39:35 PM - System Checkpoint
    RP194: 8/2/2010 3:21:42 PM - System Checkpoint
    RP195: 8/3/2010 12:04:54 PM - Software Distribution Service 3.0
    RP196: 8/4/2010 4:58:51 PM - System Checkpoint
    RP197: 8/5/2010 6:39:45 PM - System Checkpoint
    RP198: 8/7/2010 12:24:41 PM - System Checkpoint
    RP199: 8/8/2010 2:04:00 PM - System Checkpoint

    ==== Installed Programs ======================

    µTorrent
    32 Bit HP CIO Components Installer
    Adobe Acrobat 4.0
    Adobe Download Manager
    Adobe Flash Player 10 ActiveX
    Adobe Photoshop 7.0
    Adobe Reader 9.3.3
    AIO_Scan
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Bloodline Champions Beta
    Bonjour
    Broadcom 440x 10/100 Integrated Controller
    BufferChm
    C7200
    C7200_Help
    Cards_Calendar_OrderGift_DoMorePlugout
    Compatibility Pack for the 2007 Office system
    Conexant HDA D110 MDC V.92 Modem
    Copy
    Dell Mobile Broadband Card Utility
    Dell Resource CD
    Destination Component
    DeviceDiscovery
    DeviceManagementQFolder
    DivX Setup
    DocProc
    DocProcQFolder
    eSupportQFolder
    Fax
    Game Booster
    GPBaseService
    High Definition Audio Driver Package - KB835221
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Player 10 (KB903157)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    HP Imaging Device Functions 10.0
    HP Photosmart All-In-One Driver Software 10.0 Rel .2
    HP Photosmart Essential 2.5
    HP Smart Web Printing
    HP Solution Center 10.0
    HP Update
    HPPhotoSmartDiscLabel_PaperLabel
    HPPhotoSmartDiscLabel_PrintOnDisc
    HPPhotoSmartDiscLabelContent1
    hpphotosmartdisclabelplugin
    HPPhotoSmartPhotobookWebPack1
    HPProductAssistant
    Intel(R) PROSet/Wireless Software
    iTunes
    Java Auto Updater
    Java(TM) 6 Update 18
    mCore
    mDriver
    mDrWiFi
    mHlpDell
    Microsoft .NET Framework 1.0 Hotfix (KB979904)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Corporation
    Microsoft IntelliPoint 7.0
    Microsoft IntelliType Pro 7.1
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft LifeCam
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Standard Edition 2003
    Microsoft Visual C++ 2005 Redistributable
    Microsoft XNA Framework Redistributable 3.1
    mIWA
    mLogView
    mMHouse
    Modem Helper
    Move Media Player
    mPfMgr
    mPfWiz
    mProSafe
    mSSO
    MSXML 4.0 SP2 (KB973688)
    MSXML 6.0 Parser (KB933579)
    mWlsSafe
    mWMI
    mXML
    mZConfig
    Norton Security Suite
    NVIDIA Drivers
    OCR Software by I.R.I.S. 10.0
    Octoshape add-in for Adobe Flash Player
    Octoshape Streaming Services
    Otto
    PanoStandAlone
    PHOTOfunSTUDIO HD Edition
    PS_AIO_02_ProductContext
    PS_AIO_02_Software
    PS_AIO_02_Software_Min
    PSSWCORE
    QuickSet
    QuickTime
    Scan
    Security Update for Windows Internet Explorer 7 (KB938127-v2)
    Security Update for Windows Internet Explorer 7 (KB976325)
    Security Update for Windows Internet Explorer 7 (KB978207)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB981349)
    SigmaTel Audio
    Skype web features
    Skypeâ„¢ 4.1
    SmartWebPrintingOC
    SolutionCenter
    Sonic Encoders
    Status
    Synaptics Pointing Device Driver
    Toolbox
    TrayApp
    UnloadSupport
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 7 (KB980182)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Internet Explorer 8 (KB980302)
    Update for Windows Media Player 10 (KB913800)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Update Rollup 2 for Windows XP Media Center Edition 2005
    VC80CRTRedist - 8.0.50727.4053
    Ventrilo Client
    VideoLAN VLC media player 0.8.4a
    VideoToolkit01
    ViewSonic Monitor Drivers
    WebFldrs XP
    WebReg
    Windows Driver Package - Ricoh Company Memorystick Host Controller (07/09/2005 1.00.01.12)
    Windows Driver Package - Ricoh Company MMC Host Controller (07/14/2005 1.00.00.06)
    Windows Driver Package - Ricoh Company xD-Picture Card/SmartMedia Host Controller (07/14/2005 1.00.02.04)
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Media Format 11 runtime
    Windows PowerShell(TM) 1.0
    Windows Presentation Foundation
    Windows XP Media Center Edition 2005 KB908250
    Windows XP Media Center Edition 2005 KB973768
    Windows XP Service Pack 3
    WinRAR archiver
    World of Warcraft
    XML Paper Specification Shared Components Pack 1.0
    XviD & MP3 Codec Pack (remove only)
    XviD MPEG-4 Video Codec

    ==== Event Viewer Messages From Past Week ========

    8/8/2010 4:01:28 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the SharedAccess service.
    8/5/2010 5:04:23 PM, error: Service Control Manager [7023] - The IPSEC Services service terminated with the following error: Only one usage of each socket address (protocol/network address/port) is normally permitted.
    8/5/2010 11:42:00 AM, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.
    8/5/2010 11:40:30 AM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
    8/5/2010 11:40:30 AM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
    8/3/2010 5:15:04 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the stisvc service.

    ==== End Of File ===========================




    DDS (Ver_10-03-17.01) - NTFSx86
    Run by Administrator at 20:01:24.73 on Sun 08/08/2010
    Internet Explorer: 8.0.6001.18702
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1322 [GMT -6:00]

    AV: Norton Security Suite *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Security Suite *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\WINDOWS\system32\bgsvcgen.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccSvcHst.exe
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\rpcnet.exe
    svchost.exe
    C:\WINDOWS\system32\stacsv.exe
    C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccSvcHst.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Administrator\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.google.com/
    uInternet Settings,ProxyOverride = *.local
    BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
    BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton security suite\engine\4.2.0.12\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton security suite\engine\4.2.0.12\IPSBHO.DLL
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton security suite\engine\4.2.0.12\coIEPlg.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
    mRun: [ehTray] c:\windows\ehome\ehtray.exe
    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
    mRun: [NVHotkey] rundll32.exe nvHotkey.dll,Start
    mRun: [SigmatelSysTrayApp] stsystra.exe
    mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe "
    mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe "
    mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {5067A26B-1337-4436-8AFE-EE169C2DA79F} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
    IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
    DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ============= SERVICES / DRIVERS ===============

    R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\0402000.00c\symds.sys [2010-6-2 328752]
    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0402000.00c\symefa.sys [2010-6-2 173104]
    R1 BHDrvx86;BHDrvx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\bashdefs\20100719.001\BHDrvx86.sys [2010-7-19 692272]
    R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0402000.00c\cchpx86.sys [2010-6-2 501888]
    R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\0402000.00c\ironx86.sys [2010-6-2 116784]
    R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
    R2 N360;Norton Security Suite;c:\program files\norton security suite\engine\4.2.0.12\ccsvchst.exe [2010-6-2 126392]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-5-27 102448]
    R3 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\ipsdefs\20100805.004\IDSXpx86.sys [2010-8-5 331640]
    R3 MSHUSBVideo;NX6000/NX3000/VX5000/VX5500/VX2000/VX7000 Filter Driver;c:\windows\system32\drivers\nx6000.sys [2010-1-15 30560]
    R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\virusdefs\20100808.003\NAVENG.SYS [2010-8-8 85424]
    R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_4.0.0.127\definitions\virusdefs\20100808.003\NAVEX15.SYS [2010-8-8 1362608]

    =============== Created Last 30 ================

    2010-07-30 00:35:02 0 d-----w- c:\program files\iPod
    2010-07-30 00:34:49 0 d-----w- c:\docume~1\alluse~1\applic~1\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    2010-07-30 00:17:47 0 d-----w- c:\program files\Bonjour
    2010-07-29 00:36:33 0 d-----w- c:\program files\IObit
    2010-07-17 01:59:33 0 d-----w- c:\program files\Stunlock Studios
    2010-07-17 01:58:11 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
    2010-07-17 01:58:11 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
    2010-07-17 01:58:09 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
    2010-07-17 01:58:08 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
    2010-07-17 01:57:46 0 d-----w- c:\windows\Logs
    2010-07-17 01:57:42 0 d-----w- c:\program files\Microsoft XNA
    2010-07-17 01:52:31 0 d-----w- c:\program files\uTorrent
    2010-07-17 01:51:49 0 d-----w- c:\docume~1\admini~1\applic~1\uTorrent
    2010-07-15 09:21:03 174 ----a-w- c:\windows\system32\MRT.INI
    2010-07-15 06:55:36 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
    2010-07-14 20:45:15 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll

    ==================== Find3M ====================

    2010-08-09 01:52:23 17408 ----a-w- c:\windows\system32\rpcnetp.exe
    2010-08-09 01:52:21 57752 ----a-w- c:\windows\system32\rpcnet.dll
    2010-07-30 21:54:25 67752 ----a-w- c:\windows\system32\nvModes.dat
    2010-06-02 10:04:09 1675 ----a-w- c:\windows\unins000.dat
    2010-06-02 10:04:08 641021 ----a-w- c:\windows\unins000.exe
    2010-05-27 01:18:20 17408 ----a-w- c:\windows\system32\rpcnetp.dll
    2010-05-22 03:20:08 13160 ----a-w- c:\windows\system32\Upgrd.exe
    2010-05-22 03:19:59 57752 ------w- c:\windows\system32\rpcnet.exe
    2010-05-18 22:35:16 91424 ----a-w- c:\windows\system32\dnssd.dll
    2010-05-18 22:35:16 197920 ----a-w- c:\windows\system32\dnssdX.dll
    2010-05-18 22:35:16 107808 ----a-w- c:\windows\system32\dns-sd.exe
    2010-05-18 13:49:16 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2010-05-18 13:46:08 81984 ----a-w- c:\windows\system32\bdod.bin
    2010-05-17 16:41:54 132 ----a-w- C:\httpdwl.dat
    2010-01-15 19:18:36 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012010011520100116\index.dat

    ============= FINISH: 20:02:44.67 ===============
     
  2. 2010/08/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    STEP 1. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/mbam.php to your desktop.
    (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform Quick Scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt


    STEP 2. Download GMER: http://www.gmer.net/files.php, by clicking on Download EXE button.
    Alternative downloads:
    - http://majorgeeks.com/GMER_d5198.html
    - http://www.softpedia.com/get/Interne...ers/GMER.shtml
    Double click on downloaded .exe file, select Rootkit tab and click the Scan button.
    Do NOT use the computer while GMER is running!
    When scan is completed, click Save button, and save the results as gmer.log
    Warning ! Please, do not select the "Show all" checkbox during the scan.
    Post the log to your next reply.

    IMPORTANT! If for some reason GMER refuses to run, try again.
    If it still fails, try to UN-check "Devices" in right pane.
    If still no joy, try to run it from Safe Mode.


    STEP 3. Download MBRCheck to your desktop

    Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
    It will show a black screen with some data on it.
    A report called MBRcheckxxxx.txt will be on your desktop
    Open this report and post its content in your next reply.



    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     

  3. to hide this advert.

  4. 2010/08/09
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    When I tried to run Malwarebytes' Anti-Malware I got an error message that said:

    mbam.exe - Unable to Locate Component
    This application has failed to start because MSVBVM60.DLL was not found. Re-installing the application may fix this problem.

    I tried installing the program from all three download locations listed on the link you provided and recieved the message after installing each time.

    I did not complete the other steps since I got not get Step 1 to work properly; any other ideas how to get that program or work, or is it okay to skip that step?

    Thank you for your time
     
  5. 2010/08/09
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Instead of MBAM....

    Download SUPERAntiSpyware Free for Home Users:
    http://www.superantispyware.com/

    * Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    * An icon will be created on your desktop. Double-click that icon to launch the program.
    * If asked to update the program definitions, click "Yes ". If not, update the definitions before scanning by selecting "Check for Updates ". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
    * Close SUPERAntiSpyware.

    Restart computer in Safe Mode.
    To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; pick Safe Mode; you'll see "Safe Mode" in all four corners of your screen

    * Open SUPERAntiSpyware.
    * Under "Configuration and Preferences ", click the Preferences button.
    * Click the Scanning Control tab.
    * Under Scanner Options make sure the following are checked (leave all others unchecked):

    • Close browsers before scanning.
      Scan for tracking cookies.
      Terminate memory threats before quarantining.
    * Click the "Close" button to leave the control center screen.
    * Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    * On the left, make sure you check C:\Fixed Drive.
    * On the right, under "Complete Scan ", choose Perform Complete Scan.
    * Click "Next" to start the scan. Please be patient while it scans your computer.
    * After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK ".
    * Make sure everything has a checkmark next to it and click "Next ".
    * A notification will appear that "Quarantine and Removal is Complete ". Click "OK" and then click the "Finish" button to return to the main menu.
    * If asked if you want to reboot, click "Yes ".
    * To retrieve the removal information after reboot, launch SUPERAntispyware again.

    • Click Preferences, then click the Statistics/Logs tab.
      Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
      If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
      Please copy and paste the Scan Log results in your next reply.
    * Click Close to exit the program.
    Post SUPERAntiSpyware log.
     
  6. 2010/08/09
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
  7. 2010/08/10
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    The time I made that post you linked was the last time I had any P2P programs on my computer. I uninstalled it during that fix process while working with someone on this site. I don't know how my computer got messed up this time.

    Here is the SuperAnti Spyware log:

    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 08/09/2010 at 10:13 PM

    Application Version : 4.41.1000

    Core Rules Database Version : 5338
    Trace Rules Database Version: 3150

    Scan type : Complete Scan
    Total Scan Time : 04:24:41

    Memory items scanned : 216
    Memory threats detected : 0
    Registry items scanned : 7015
    Registry threats detected : 0
    File items scanned : 70302
    File threats detected : 463

    Adware.Tracking Cookie
    C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@apmebf[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@apmebf[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@media6degrees[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adtech[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@bluestreak[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adserver.adtechus[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ru4[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adbrite[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@optimize.indieclick[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@pro-market[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ad.wsod[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@advertising.everywhereinternet[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@invitemedia[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@bs.serving-sys[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@interclick[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@content.yieldmanager[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@optimize.indieclick[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ads.infinisource[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@casalemedia[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@pointroll[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@gr.burstnet[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adlegend[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@mediaplex[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@advertising[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@content.yieldmanager[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ads.pointroll[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@specificclick[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@sexhoundlinks[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@insightexpressai[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt
    cdn2.themis-media.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    cdn4.specificclick.net [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    collegeboyporn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    convoad.technoratimedia.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    core.insightexpressai.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    crackle.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    demo.indieclick.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    galleries.hairyboyz.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    galleries.nakedsword.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    homemadegaysex.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    ia.media-imdb.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    ictv-ic-ec.indieclicktv.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    indieclick.3janecdn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    media.movieweb.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    media.mtvnservices.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    media.scanscout.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    media.xfire.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    media1.break.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    movies.privategayporn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    objects.tremormedia.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    rmd.atdmt.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    s0.2mdn.net [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    secure-us.imrworldwide.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    udn.specificclick.net [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    us.media.blizzard.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    www.brokestraightboyssex.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    www.freepornofreeporn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    www.gotgayporn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    www.uknakedmen.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    www.ygayporn.com [ C:\Documents and Settings\Administrator\Application Data\Macromedia\Flash Player\#SharedObjects\CYVC4QR6 ]
    cdn4.specificclick.net [ C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\SV32BM6K ]
    media.scanscout.com [ C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\SV32BM6K ]
    secure-us.imrworldwide.com [ C:\Documents and Settings\LocalService\Application Data\Macromedia\Flash Player\#SharedObjects\SV32BM6K ]
    C:\Documents and Settings\LocalService\Cookies\system@2o7[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@a1.interclick[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@ad.yieldmanager[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@adbrite[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@adbrite[3].txt
    C:\Documents and Settings\LocalService\Cookies\system@ads.addynamix[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@ads.bighealthtree[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@ads.undertone[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@ads.undertone[3].txt
    C:\Documents and Settings\LocalService\Cookies\system@advertise[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@atdmt[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@bizzclick[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@burstnet[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@click.fastpartner[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@clickpayz8.91469.blueseek[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@collective-media[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@content.yieldmanager[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@content.yieldmanager[3].txt
    C:\Documents and Settings\LocalService\Cookies\system@digitalentertainment.122.2o7[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@doubleclick[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@doubleclick[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@eyewonder[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@imrworldwide[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@insightexpressai[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@interclick[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@invitemedia[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@liveperson[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@liveperson[3].txt
    C:\Documents and Settings\LocalService\Cookies\system@questionmarket[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@sales.liveperson[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@www.burstnet[2].txt
    C:\Documents and Settings\LocalService\Cookies\system@zedo[1].txt
    C:\Documents and Settings\LocalService\Cookies\system@zedo[2].txt
    cdn4.specificclick.net [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    convoad.technoratimedia.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    core.insightexpressai.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    hs.interpolls.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media-glam.pictela.net [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media.foxsports.com.au [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media.heavy.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media.mtvnservices.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media.onsugar.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media.scanscout.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    media1.break.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    msnbcmedia.msn.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    objects.tremormedia.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    s0.2mdn.net [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    secure-us.imrworldwide.com [ C:\Documents and Settings\NetworkService\Application Data\Macromedia\Flash Player\#SharedObjects\2WUFPMY6 ]
    C:\Documents and Settings\NetworkService\Cookies\system@a1.interclick[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.candystand[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.jmg[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adbrite[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adcloudmedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adecn[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adlegend[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.basrv[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.basrv[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.bighealthtree[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.bighealthtree[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.bighealthtree[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.bighealthtree[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.bighealthtree[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.financialcontent[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.gamersmedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.gossipcenter[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.gossipcenter[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.gossipcenter[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.lycos[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pointroll[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pointroll[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pointroll[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pointroll[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pointroll[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.pubmatic[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.undertone[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ads.undertone[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserving.ezanga[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adserving.ezanga[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertise[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising.ezanga[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@advertising[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adweb2.hornymatches[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adxpose[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adxpose[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adxpose[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@adxpose[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@apmebf[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@at.atwola[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@atdmt[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@banner.adchemy[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bizzclick[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@burstbeacon[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@burstbeacon[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@burstnet[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@burstnet[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@burstnet[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@businessfind[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@businessfind[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@buycom.122.2o7[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@casalemedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@casalemedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@casalemedia[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn.jemamedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn.jemamedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn1.trafficmp[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn1.trafficmp[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn1.trafficmp[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn4.specificclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn4.specificclick[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@cdn4.specificclick[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@chitika[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickbank[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz1.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz3.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz4.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz4.91469.blueseek[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz4.91469.blueseek[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz6.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz7.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz9.91469.blueseek[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@clickpayz9.91469.blueseek[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@collective-media[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@d.jambomedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@d.jambomedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@doubleclick[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@edgeadx[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@edgeadx[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@enhance[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@eyewonder[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@eyewonder[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@eyewonder[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@fastclick[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@hornymatches[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@insightexpressai[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@insightexpressai[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@insightexpressai[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@interclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@legolas-media[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@legolas-media[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@mediaplex[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@myroitracking[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@myroitracking[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@optimize.indieclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@overture[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@overture[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@overture[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@pointroll[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@pointroll[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@pointroll[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@pointroll[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@pointroll[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@realmedia[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@revsci[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ru4[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ru4[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ru4[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@ru4[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@segainc.112.2o7[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[10].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[11].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[8].txt
    C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[9].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificclick[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificclick[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificclick[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificclick[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificmedia[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificmedia[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@specificmedia[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@statcounter[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@statcounter[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@statse.webtrendslive[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tacoda[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@top5countdown.mevio[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@totalbeauty.112.2o7[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tradedoubler[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@traffic.buyservices[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@trafficmp[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@trafficmp[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@trafficmp[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@trafficmp[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@traveladvertising[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[5].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[6].txt
    C:\Documents and Settings\NetworkService\Cookies\system@tribalfusion[7].txt
    C:\Documents and Settings\NetworkService\Cookies\system@trvlnet.adbureau[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@videoegg.adbureau[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@videoegg.adbureau[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@videoegg.adbureau[4].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.adserverforfree[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.burstbeacon[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.burstbeacon[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.burstnet[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.burstnet[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.burstnet[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.businessfind[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.businessfind[3].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.googleadservices[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@www.topdaofinder[2].txt
    C:\Documents and Settings\NetworkService\Cookies\system@xml.trafficengine[1].txt
    C:\Documents and Settings\NetworkService\Cookies\system@yieldmanager[1].txt
     
  8. 2010/08/10
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    You must think we're dumb :eek:
     
  9. 2010/08/10
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    What are you talking about? I DID remove limewire and looking over the add/remove program list it's definitely not there.
     
  10. 2010/08/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    What about uTorrent?

    I still need GMER and MBRCheck logs.
     
  11. 2010/08/11
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    I tried running GMER last night, but once it had completed the scan the program became "Not Responding" and I couldn't save the results. I will run the scan again later today (it seems to take nearly 5 hours to finish, is that normal?)

    I was instructed to download uTorrent when I was accepted into the BETA testing phase for a new game (Bloodline Champions). This was just two weeks ago (after I began having problems with my laptop) and I have not used the program since. After hearing how often P2P programs result in viruses I really have not used them to illegally download anything. I would hate for you to think I am trying to exploit this site and the help you offer as I really do appreciate it, particularly the fact that you do not charge for the help!
     
  12. 2010/08/11
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    .....
     
  13. 2010/08/17
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    I tried running Gmer again with "Devices" un-checked, but after completing the scan it once again went Not Responding so I couldn't save the results.

    I will be out of town for a few days and found a loaner laptop to use for the duration, when I get back I will be able to try again in safe-mode and hopefully get this laptop back in working order.

    Thank you for your patience!
     
  14. 2010/08/17
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    OK. Let me know.
     
  15. 2010/08/23
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    I ran GMER (successfully) in safe mode, but it found nothing. I saved the log just in case, but the log was totally blank. When I had previously run GMER (after a normal start up) it had a number of fhings listed after it finished scanning, but I could never get it to properly save the log.

    Here is the MBRCheck log:

    MBRCheck, version 1.2.3
    (c) 2010, AD

    Command-line:
    Windows Version: Windows XP Professional
    Windows Information: Service Pack 3 (build 2600)
    Logical Drives Mask: 0x0000000c

    Kernel Drivers (total 142):
    0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
    0x806E4000 \WINDOWS\system32\hal.dll
    0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
    0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
    0xB9F79000 ACPI.sys
    0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
    0xB9F68000 pci.sys
    0xBA0A8000 isapnp.sys
    0xBA0B8000 ohci1394.sys
    0xBA0C8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
    0xBA4BC000 compbatt.sys
    0xBA4C0000 \WINDOWS\system32\DRIVERS\BATTC.SYS
    0xBA670000 pciide.sys
    0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
    0xBA0D8000 MountMgr.sys
    0xB9F49000 ftdisk.sys
    0xBA5AC000 dmload.sys
    0xB9F23000 dmio.sys
    0xBA330000 PartMgr.sys
    0xBA0E8000 VolSnap.sys
    0xB9F0B000 atapi.sys
    0xBA338000 cercsr6.sys
    0xB9EF3000 \WINDOWS\System32\Drivers\SCSIPORT.SYS
    0xBA0F8000 disk.sys
    0xBA108000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
    0xB9ED3000 fltmgr.sys
    0xB9EC1000 sr.sys
    0xBA340000 PxHelp20.sys
    0xB9EAA000 KSecDD.sys
    0xB9E1D000 Ntfs.sys
    0xB9DF0000 NDIS.sys
    0xB9DD6000 Mup.sys
    0xBA318000 \SystemRoot\system32\DRIVERS\intelppm.sys
    0xB9DB2000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
    0xB9DAE000 \SystemRoot\system32\DRIVERS\CmBatt.sys
    0xB9091000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
    0xB907D000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
    0xB9057000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
    0xB8EFA000 \SystemRoot\system32\DRIVERS\w39n51.sys
    0xBA3F8000 \SystemRoot\system32\DRIVERS\usbuhci.sys
    0xB8ED6000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
    0xBA400000 \SystemRoot\system32\DRIVERS\usbehci.sys
    0xBA128000 \SystemRoot\system32\DRIVERS\bcm4sbxp.sys
    0xBA138000 \SystemRoot\system32\DRIVERS\nic1394.sys
    0xB8EC2000 \SystemRoot\system32\DRIVERS\sdbus.sys
    0xBA408000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
    0xBA148000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
    0xB8E76000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
    0xBA158000 \SystemRoot\system32\DRIVERS\i8042prt.sys
    0xB8E47000 \SystemRoot\system32\DRIVERS\SynTP.sys
    0xBA5CC000 \SystemRoot\system32\DRIVERS\USBD.SYS
    0xBA410000 \SystemRoot\system32\DRIVERS\mouclass.sys
    0xBA418000 \SystemRoot\system32\DRIVERS\kbdclass.sys
    0xBA168000 \SystemRoot\system32\DRIVERS\imapi.sys
    0xBA178000 \SystemRoot\System32\Drivers\cdrbsdrv.SYS
    0xBA188000 \SystemRoot\system32\DRIVERS\cdrom.sys
    0xBA198000 \SystemRoot\system32\DRIVERS\redbook.sys
    0xB8E24000 \SystemRoot\system32\DRIVERS\ks.sys
    0xBA420000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    0xBA7AB000 \SystemRoot\system32\DRIVERS\audstub.sys
    0xBA1A8000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
    0xB942D000 \SystemRoot\system32\DRIVERS\ndistapi.sys
    0xB8E0D000 \SystemRoot\system32\DRIVERS\ndiswan.sys
    0xBA1B8000 \SystemRoot\system32\DRIVERS\raspppoe.sys
    0xBA1C8000 \SystemRoot\system32\DRIVERS\raspptp.sys
    0xBA428000 \SystemRoot\system32\DRIVERS\TDI.SYS
    0xB8DFC000 \SystemRoot\system32\DRIVERS\psched.sys
    0xBA1D8000 \SystemRoot\system32\DRIVERS\msgpc.sys
    0xBA430000 \SystemRoot\system32\DRIVERS\ptilink.sys
    0xBA438000 \SystemRoot\system32\DRIVERS\raspti.sys
    0xB8D2C000 \SystemRoot\system32\DRIVERS\rdpdr.sys
    0xBA1E8000 \SystemRoot\system32\DRIVERS\termdd.sys
    0xB8CEC000 \SystemRoot\system32\DRIVERS\bdfndisf.sys
    0xBA5CE000 \SystemRoot\system32\DRIVERS\swenum.sys
    0xB8C8E000 \SystemRoot\system32\DRIVERS\update.sys
    0xBA548000 \SystemRoot\system32\DRIVERS\mssmbios.sys
    0xB8C68000 \SystemRoot\system32\DRIVERS\NWADIenum.sys
    0xBA1F8000 \SystemRoot\System32\Drivers\NDProxy.SYS
    0xB6AFF000 \SystemRoot\system32\drivers\sthda.sys
    0xB6ADB000 \SystemRoot\system32\drivers\portcls.sys
    0xBA208000 \SystemRoot\system32\drivers\drmk.sys
    0xB6AA1000 \SystemRoot\system32\DRIVERS\HSXHWAZL.sys
    0xB69AA000 \SystemRoot\system32\DRIVERS\HSX_DPV.sys
    0xB68F4000 \SystemRoot\system32\DRIVERS\HSX_CNXT.sys
    0xBA440000 \SystemRoot\System32\Drivers\Modem.SYS
    0xBA218000 \SystemRoot\system32\DRIVERS\usbhub.sys
    0xBA5DA000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
    0xBA6C4000 \SystemRoot\System32\Drivers\Null.SYS
    0xBA5DC000 \SystemRoot\System32\Drivers\Beep.SYS
    0xBA460000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    0xBA468000 \SystemRoot\System32\drivers\vga.sys
    0xBA5DE000 \SystemRoot\System32\Drivers\mnmdd.SYS
    0xBA5E0000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
    0xBA470000 \SystemRoot\system32\DRIVERS\usbccgp.sys
    0xBA480000 \SystemRoot\System32\Drivers\Msfs.SYS
    0xBA488000 \SystemRoot\System32\Drivers\Npfs.SYS
    0xBA5A0000 \SystemRoot\system32\DRIVERS\rasacd.sys
    0xB5BD9000 \SystemRoot\system32\DRIVERS\ipsec.sys
    0xB5B80000 \SystemRoot\system32\DRIVERS\tcpip.sys
    0xB5B60000 \??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys
    0xB5B38000 \SystemRoot\system32\DRIVERS\netbt.sys
    0xB5B12000 \SystemRoot\system32\DRIVERS\ipnat.sys
    0xBA248000 \SystemRoot\system32\DRIVERS\wanarp.sys
    0xBA258000 \SystemRoot\System32\Drivers\nx6000.sys
    0xB5AF0000 \SystemRoot\System32\drivers\afd.sys
    0xBA268000 \SystemRoot\system32\DRIVERS\netbios.sys
    0xB5AC5000 \SystemRoot\system32\DRIVERS\rdbss.sys
    0xB5A55000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
    0xBA278000 \SystemRoot\System32\Drivers\Fips.SYS
    0xB5A37000 \SystemRoot\System32\Drivers\usbvideo.sys
    0xBA288000 \SystemRoot\system32\DRIVERS\arp1394.sys
    0xBA298000 \SystemRoot\system32\drivers\usbaudio.sys
    0xB8C17000 \SystemRoot\system32\DRIVERS\hidusb.sys
    0xBA2A8000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    0xB8C0F000 \SystemRoot\system32\DRIVERS\kbdhid.sys
    0xBA564000 \SystemRoot\System32\Drivers\ASPI32.SYS
    0xB5C30000 \SystemRoot\system32\DRIVERS\mouhid.sys
    0xBA370000 \SystemRoot\system32\DRIVERS\point32.sys
    0xB5C2C000 \SystemRoot\SYSTEM32\DRIVERS\APPDRV.SYS
    0xB596F000 \SystemRoot\System32\Drivers\Cdfs.SYS
    0xBF800000 \SystemRoot\System32\win32k.sys
    0xB8D20000 \SystemRoot\System32\drivers\Dxapi.sys
    0xBA3D0000 \SystemRoot\System32\watchdog.sys
    0xBF000000 \SystemRoot\System32\drivers\dxg.sys
    0xBA74B000 \SystemRoot\System32\drivers\dxgthk.sys
    0xBF012000 \SystemRoot\System32\nv4_disp.dll
    0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
    0xBA450000 \SystemRoot\system32\DRIVERS\AegisP.sys
    0xB4016000 \SystemRoot\system32\DRIVERS\s24trans.sys
    0xB4926000 \SystemRoot\system32\DRIVERS\ndisuio.sys
    0xB3419000 \SystemRoot\system32\drivers\wdmaud.sys
    0xBA2F8000 \SystemRoot\system32\drivers\sysaudio.sys
    0xB3212000 \SystemRoot\system32\DRIVERS\mrxdav.sys
    0xB31D7000 \??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys
    0xB2E9E000 \SystemRoot\System32\Drivers\HTTP.sys
    0xB2E9A000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
    0xB2D57000 \SystemRoot\system32\DRIVERS\srv.sys
    0xB1F55000 \SystemRoot\system32\drivers\bdfsfltr.sys
    0xB2DB6000 \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys
    0xB1D5B000 \SystemRoot\system32\drivers\bdfm.sys
    0xB0E7B000 \SystemRoot\system32\drivers\kmixer.sys
    0x7C900000 \WINDOWS\system32\ntdll.dll

    Processes (total 55):
    0 System Idle Process
    4 System
    1200 C:\WINDOWS\system32\smss.exe
    1324 csrss.exe
    1360 C:\WINDOWS\system32\winlogon.exe
    1412 C:\WINDOWS\system32\services.exe
    1424 C:\WINDOWS\system32\lsass.exe
    1604 C:\WINDOWS\system32\svchost.exe
    1716 svchost.exe
    1936 C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
    1952 C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
    2036 C:\WINDOWS\system32\svchost.exe
    316 C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    388 C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    472 C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
    792 svchost.exe
    1116 C:\WINDOWS\explorer.exe
    1156 svchost.exe
    628 C:\WINDOWS\system32\spoolsv.exe
    1148 svchost.exe
    1272 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    1840 C:\WINDOWS\system32\bgsvcgen.exe
    300 C:\WINDOWS\ehome\ehtray.exe
    532 C:\Program Files\Bonjour\mDNSResponder.exe
    776 C:\WINDOWS\system32\rundll32.exe
    788 C:\WINDOWS\stsystra.exe
    864 C:\WINDOWS\ehome\ehrecvr.exe
    896 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    1300 C:\Program Files\Microsoft IntelliType Pro\itype.exe
    1296 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    1548 C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
    1592 C:\WINDOWS\system32\ctfmon.exe
    1764 C:\WINDOWS\ehome\ehSched.exe
    2128 C:\WINDOWS\system32\svchost.exe
    2224 C:\Program Files\Java\jre6\bin\jqs.exe
    2292 C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    2404 C:\WINDOWS\system32\svchost.exe
    2440 C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
    2480 C:\WINDOWS\system32\nvsvc32.exe
    2556 C:\WINDOWS\system32\svchost.exe
    2676 C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    2852 C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
    2892 C:\WINDOWS\system32\rpcnet.exe
    3004 svchost.exe
    3048 C:\WINDOWS\system32\stacsv.exe
    3196 C:\WINDOWS\system32\svchost.exe
    3280 mcrdsvc.exe
    3128 wmiprvse.exe
    3240 C:\WINDOWS\system32\dllhost.exe
    824 alg.exe
    2520 C:\WINDOWS\ehome\ehmsas.exe
    348 C:\Program Files\Internet Explorer\iexplore.exe
    3964 C:\Program Files\Internet Explorer\iexplore.exe
    2952 C:\Program Files\Internet Explorer\iexplore.exe
    1800 C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4U8L4OY2\MBRCheck[1].exe

    \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

    PhysicalDrive0 Model Number: HitachiHTS541680J9SA00, Rev: SB2OC74P

    Size Device Name MBR Status
    --------------------------------------------
    74 GB \\.\PhysicalDrive0 Windows XP MBR code detected
    SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A
     
  16. 2010/08/23
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    So far, things look just fine....

    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    [color= "Blue"]**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**[/color]
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on [color= "Red"]this link[/color] to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • [color= "Red"]WARNING:[/color] Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
  17. 2010/08/24
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    The combofix report is too long for one post so I have broken it up.

    ComboFix 10-08-23.01 - Administrator 08/23/2010 20:29:27.2.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1614 [GMT -6:00]
    Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
    AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
    FW: BitDefender Firewall *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
    * Resident AV is active

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    Infected copy of c:\windows\system32\drivers\rdpcdd.sys was found and disinfected
    Restored copy from - Kitty had a snack :p
    .
    ((((((((((((((((((((((((( Files Created from 2010-07-24 to 2010-08-24 )))))))))))))))))))))))))))))))
    .

    2010-08-20 21:31 . 2010-08-20 21:31 -------- d-----w- c:\program files\Microsoft.NET
    2010-08-20 21:31 . 2010-08-20 21:31 -------- d-----w- c:\documents and settings\All Users\Microsoft
    2010-08-20 21:28 . 2010-08-20 21:28 -------- d-----w- c:\program files\Microsoft Analysis Services
    2010-08-20 21:27 . 2010-08-20 21:28 -------- d-----w- c:\windows\SHELLNEW
    2010-08-20 21:27 . 2010-08-20 21:27 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Microsoft Help
    2010-08-20 21:27 . 2010-08-20 21:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2010-08-20 21:26 . 2010-08-20 21:26 -------- d-----r- C:\MSOCache
    2010-08-17 19:22 . 2010-08-17 19:22 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitDefender
    2010-08-17 19:22 . 2010-08-17 19:22 -------- d-----w- C:\Binaries
    2010-08-11 20:45 . 2010-08-11 20:45 -------- d-----w- c:\documents and settings\Administrator\Application Data\IObit
    2010-08-09 23:37 . 2010-08-09 23:37 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2010-08-09 06:40 . 2010-08-09 06:40 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\WMTools Downloaded Files
    2010-08-08 19:39 . 2010-08-08 19:39 711168 ----a-w- c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\pmv307a-1007160-0-main.dll
    2010-07-30 00:35 . 2010-07-30 00:35 -------- d-----w- c:\program files\iPod
    2010-07-30 00:34 . 2010-07-30 00:36 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
    2010-07-30 00:26 . 2010-07-30 00:28 -------- d-----w- c:\program files\QuickTime
    2010-07-30 00:17 . 2010-07-30 00:17 -------- d-----w- c:\program files\Bonjour
    2010-07-30 00:14 . 2010-07-30 00:14 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.1.5\SetupAdmin.exe
    2010-07-29 07:52 . 2010-08-20 02:17 85152 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
    2010-07-29 00:36 . 2010-07-29 00:36 -------- d-----w- c:\program files\IObit

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-24 02:27 . 2010-01-14 18:32 17408 ----a-w- c:\windows\system32\rpcnetp.exe
    2010-08-24 02:26 . 2010-01-15 05:53 57752 ----a-w- c:\windows\system32\rpcnet.dll
    2010-08-24 02:25 . 2010-01-15 06:47 81984 ----a-w- c:\windows\system32\bdod.bin
    2010-08-24 01:22 . 2010-06-15 01:14 664 ----a-w- c:\windows\system32\d3d9caps.dat
    2010-08-23 22:51 . 2010-01-15 02:04 17408 ----a-w- c:\windows\system32\rpcnetp.dll
    2010-08-20 21:55 . 2010-01-15 04:41 49584 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2010-08-19 23:05 . 2010-01-15 08:04 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype
    2010-08-19 22:03 . 2010-01-23 19:11 -------- d-----w- c:\documents and settings\Administrator\Application Data\skypePM
    2010-08-17 19:35 . 2009-02-12 22:52 104456 ----a-w- c:\windows\system32\drivers\bdfndisf.sys
    2010-08-17 19:22 . 2010-01-15 06:10 -------- d-----w- c:\program files\BitDefender
    2010-08-17 19:22 . 2010-01-15 06:08 -------- d-----w- c:\program files\Common Files\BitDefender
    2010-08-17 19:15 . 2010-05-18 13:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
    2010-08-11 20:42 . 2010-01-15 04:09 -------- d-----w- c:\program files\World of Warcraft
    2010-08-10 07:43 . 2010-05-22 03:20 13160 ----a-w- c:\windows\system32\Upgrd.exe
    2010-08-10 07:43 . 2010-01-15 05:53 57752 ------w- c:\windows\system32\rpcnet.exe
    2010-07-30 21:54 . 2010-01-15 05:28 67752 ----a-w- c:\windows\system32\nvModes.dat
    2010-07-30 00:36 . 2010-01-15 07:01 -------- d-----w- c:\program files\iTunes
    2010-07-30 00:34 . 2010-01-15 06:59 -------- d-----w- c:\program files\Common Files\Apple
    2010-07-17 01:59 . 2010-07-17 01:59 -------- d-----w- c:\program files\Stunlock Studios
    2010-07-17 01:57 . 2010-07-17 01:57 -------- d-----w- c:\program files\Microsoft XNA
    2010-07-15 05:43 . 2010-01-15 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment
    2010-06-30 12:31 . 2004-08-10 11:00 149504 ----a-w- c:\windows\system32\schannel.dll
    2010-06-24 12:22 . 2006-03-04 03:33 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-06-23 13:44 . 2004-08-10 11:00 1851904 ----a-w- c:\windows\system32\win32k.sys
    2010-06-21 15:27 . 2004-08-10 11:00 354304 ----a-w- c:\windows\system32\drivers\srv.sys
    2010-06-17 14:03 . 2004-08-10 11:00 80384 ----a-w- c:\windows\system32\iccvid.dll
    2010-06-14 14:31 . 2010-01-15 01:52 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    2010-06-14 07:41 . 2004-08-10 11:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
    2010-06-03 10:04 . 2010-06-05 01:48 815104 ----a-w- c:\documents and settings\Administrator\Application Data\Octoshape\Octoshape Streaming Services\pmv307a-1005252-0-libOctoshapeClient.dll
    2010-06-02 10:04 . 2010-06-02 10:04 1675 ----a-w- c:\windows\unins000.dat
    2010-06-02 10:04 . 2010-06-02 10:04 641021 ----a-w- c:\windows\unins000.exe
    .

    ------- Sigcheck -------

    [7] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
    [-] 2004-08-10 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
    [-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
    [-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\drivers\atapi.sys

    [7] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
    [-] 2004-08-04 05:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
    [-] 2004-08-04 05:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\system32\drivers\aec.sys
    .
    ((((((((((((((((((((((((((((( SnapShot@2010-03-21_05.26.05 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-12 07:02 . 2009-07-12 07:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
    + 2009-07-12 07:05 . 2009-07-12 07:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
    + 2009-07-12 07:05 . 2009-07-12 07:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    + 2006-12-02 06:08 . 2006-12-02 06:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    - 2006-12-02 07:08 . 2006-12-02 07:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2006-12-02 06:26 . 2006-12-02 06:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    - 2006-12-02 07:26 . 2006-12-02 07:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    + 2006-12-02 06:25 . 2006-12-02 06:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    - 2006-12-02 07:25 . 2006-12-02 07:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2009-07-12 02:41 . 2009-07-12 02:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll
    - 2009-06-29 06:42 . 2009-06-29 06:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    + 2009-06-29 05:42 . 2009-06-29 05:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
    + 2010-08-24 02:26 . 2010-08-24 02:26 16384 c:\windows\Temp\Perflib_Perfdata_7b0.dat
    + 2010-07-17 01:58 . 2009-03-16 20:18 69448 c:\windows\system32\XAPOFX1_3.dll
    + 2010-07-17 01:58 . 2009-03-16 20:18 22360 c:\windows\system32\X3DAudio1_6.dll
    + 2010-06-02 10:04 . 1999-09-10 02:06 45056 c:\windows\system32\WNASPI32.DLL
    + 2010-04-18 23:14 . 2007-11-01 04:48 20992 c:\windows\system32\windowspowershell\v1.0\pwrshsip.dll
    + 2010-02-18 03:42 . 2010-02-18 03:42 51584 c:\windows\system32\VBAME.DLL
    - 2010-01-15 06:22 . 2010-01-23 08:11 46080 c:\windows\system32\tzchange.exe
    + 2010-01-15 06:22 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
    + 2010-01-15 02:15 . 2009-01-07 08:21 26144 c:\windows\system32\spupdsvc.exe
    + 2010-08-20 21:34 . 2010-03-30 02:26 54656 c:\windows\system32\spool\drivers\w32x86\SendToOneNoteUI.dll
    + 2010-08-20 21:34 . 2010-03-30 02:26 94088 c:\windows\system32\spool\drivers\w32x86\SendToOneNoteFilter.dll
    + 2010-08-20 21:34 . 2010-03-30 02:26 54656 c:\windows\system32\spool\drivers\w32x86\3\SendToOneNoteUI.dll
    + 2010-08-20 21:34 . 2010-03-30 02:26 94088 c:\windows\system32\spool\drivers\w32x86\3\SendToOneNoteFilter.dll
    + 2010-01-16 00:41 . 2009-01-07 08:20 16928 c:\windows\system32\spmsg.dll
    + 2010-03-31 06:16 . 2010-03-31 06:16 99176 c:\windows\system32\PresentationHostProxy.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 46592 c:\windows\system32\pngfilt.dll
    + 2004-08-10 11:00 . 2010-08-17 23:23 61058 c:\windows\system32\perfc009.dat
    + 2006-06-29 15:05 . 2009-01-07 08:20 23552 c:\windows\system32\normaliz.dll
    - 2006-06-29 15:05 . 2006-06-29 15:05 23552 c:\windows\system32\normaliz.dll
    + 2006-06-29 00:59 . 2009-01-07 08:20 24576 c:\windows\system32\nlsdl.dll
    - 2006-06-29 00:59 . 2006-06-29 00:59 24576 c:\windows\system32\nlsdl.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 49488 c:\windows\system32\netfxperf.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 11600 c:\windows\system32\mui\0409\mscorees.dll
    + 2009-07-21 06:05 . 2009-07-21 06:05 91656 c:\windows\system32\msxml4r.dll
    - 2002-01-05 10:38 . 2002-01-05 10:38 54784 c:\windows\system32\msvci70.dll
    + 2002-01-05 09:38 . 2002-01-05 09:38 54784 c:\windows\system32\msvci70.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 48128 c:\windows\system32\mshtmler.dll
    - 2004-08-10 11:00 . 2007-08-14 01:01 48128 c:\windows\system32\mshtmler.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 66560 c:\windows\system32\mshtmled.dll
    - 2004-08-10 11:00 . 2007-08-14 01:32 45568 c:\windows\system32\mshta.exe
    + 2004-08-10 11:00 . 2009-03-07 18:31 45568 c:\windows\system32\mshta.exe
    + 2007-08-14 01:36 . 2009-03-07 18:31 13312 c:\windows\system32\msfeedssync.exe
    + 2007-08-14 01:54 . 2010-06-24 12:21 55296 c:\windows\system32\msfeedsbs.dll
    + 2004-08-10 11:00 . 2009-03-07 18:34 43008 c:\windows\system32\licmgr10.dll
    + 2004-08-10 11:00 . 2010-06-24 12:21 25600 c:\windows\system32\jsproxy.dll
    + 2006-03-04 03:33 . 2009-03-07 18:32 94720 c:\windows\system32\inseng.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 34816 c:\windows\system32\imgutil.dll
    + 2007-08-14 01:39 . 2009-03-07 18:32 36864 c:\windows\system32\ieudinit.exe
    + 2004-08-10 11:00 . 2009-03-07 18:32 71680 c:\windows\system32\iesetup.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 55808 c:\windows\system32\iernonce.dll
    - 2006-06-29 15:05 . 2006-06-29 15:05 26112 c:\windows\system32\idndl.dll
    + 2006-06-29 15:05 . 2009-01-07 08:20 26112 c:\windows\system32\idndl.dll
    + 2007-08-14 01:36 . 2009-03-07 18:31 59904 c:\windows\system32\icardie.dll
    + 2010-02-20 23:20 . 2010-02-20 23:20 31616 c:\windows\system32\FM20ENU.DLL
    + 2010-07-30 00:19 . 2010-04-20 02:47 41984 c:\windows\system32\DRVSTORE\usbaapl_3822718F9E2E86C3752D30561ECA5A855A4A3F7D\usbaapl.sys
    + 2010-07-30 00:19 . 2010-04-20 02:29 18432 c:\windows\system32\DRVSTORE\netaapl_3A00C5601D92D37DDCB0AE45518D6B42BE1588E6\netaapl.sys
    - 2010-01-15 07:02 . 2009-05-18 21:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
    + 2010-01-15 07:02 . 2009-05-18 22:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
    + 2010-01-15 06:59 . 2010-04-20 02:47 41984 c:\windows\system32\drivers\usbaapl.sys
    - 2010-01-15 07:02 . 2009-05-18 21:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
    + 2010-01-15 07:02 . 2009-05-18 22:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
    + 2008-10-07 00:16 . 2008-10-07 00:16 82696 c:\windows\system32\drivers\BDVEDISK.sys
    - 2008-10-07 01:16 . 2008-10-07 01:16 82696 c:\windows\system32\drivers\BDVEDISK.sys
    + 2010-06-02 10:04 . 1999-09-10 02:06 25244 c:\windows\system32\drivers\ASPI32.SYS
    + 2010-05-18 22:35 . 2010-05-18 22:35 91424 c:\windows\system32\dnssd.dll
    + 2010-04-18 14:57 . 2010-06-24 12:22 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 46592 c:\windows\system32\dllcache\pngfilt.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 48128 c:\windows\system32\dllcache\mshtmler.dll
    - 2004-08-10 11:00 . 2007-08-14 01:01 48128 c:\windows\system32\dllcache\mshtmler.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 45568 c:\windows\system32\dllcache\mshta.exe
    - 2004-08-10 11:00 . 2007-08-14 01:32 45568 c:\windows\system32\dllcache\mshta.exe
    + 2010-01-15 06:51 . 2010-06-24 12:21 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2004-08-10 11:00 . 2009-03-07 18:34 43008 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-10 11:00 . 2010-06-24 12:21 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2006-03-04 03:33 . 2009-03-07 18:32 94720 c:\windows\system32\dllcache\inseng.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 34816 c:\windows\system32\dllcache\imgutil.dll
    - 2010-01-15 06:51 . 2009-12-31 15:33 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2010-01-15 06:51 . 2010-03-10 13:18 13824 c:\windows\system32\dllcache\ieudinit.exe
    + 2004-08-10 11:00 . 2009-03-07 18:32 71680 c:\windows\system32\dllcache\iesetup.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 55808 c:\windows\system32\dllcache\iernonce.dll
    + 2010-04-18 14:54 . 2010-02-16 04:50 64000 c:\windows\system32\dllcache\iecompat.dll
    + 2010-01-15 06:51 . 2009-03-07 18:31 59904 c:\windows\system32\dllcache\icardie.dll
    + 2010-01-15 01:51 . 2009-03-07 18:24 68608 c:\windows\system32\dllcache\hmmapi.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 18944 c:\windows\system32\dllcache\corpol.dll
    + 2010-01-13 14:01 . 2010-01-13 14:01 86016 c:\windows\system32\dllcache\cabview.dll
    + 2010-03-05 14:37 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 72704 c:\windows\system32\dllcache\admparse.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 18944 c:\windows\system32\corpol.dll
    + 2010-05-19 14:17 . 2010-05-19 00:47 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2010-01-15 19:18 . 2010-01-16 22:26 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2010-01-15 19:18 . 2010-05-19 00:47 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2010-01-15 19:18 . 2010-01-16 22:26 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2010-05-19 14:17 . 2010-05-19 00:47 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2004-08-10 11:00 . 2010-01-13 14:01 86016 c:\windows\system32\cabview.dll
    + 2004-08-10 11:00 . 2010-03-05 14:37 65536 c:\windows\system32\asycfilt.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 72704 c:\windows\system32\admparse.dll
    + 2010-04-08 05:48 . 2010-04-08 05:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2008-07-30 02:16 . 2008-07-30 02:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2010-03-23 11:31 . 2010-03-23 11:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2010-04-01 17:42 . 2010-04-01 17:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2008-05-28 07:49 . 2008-05-28 07:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2010-03-31 20:51 . 2010-03-31 20:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2008-05-28 07:49 . 2008-05-28 07:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2010-03-31 20:51 . 2010-03-31 20:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    - 2008-05-28 07:49 . 2008-05-28 07:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-03-31 20:51 . 2010-03-31 20:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2010-03-31 21:32 . 2010-03-31 21:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2008-05-28 08:30 . 2008-05-28 08:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2010-03-31 21:32 . 2010-03-31 21:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    - 2003-02-21 02:19 . 2003-02-21 02:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2009-06-24 19:56 . 2009-06-24 17:56 86016 c:\windows\Microsoft.NET\Framework\v1.0.3705\ToGac.exe
    + 2010-01-15 01:50 . 2010-02-10 00:22 81920 c:\windows\Microsoft.NET\Framework\v1.0.3705\System.Security.dll
    + 2009-06-24 19:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.0.3705\SetRegNI.exe
    + 2009-11-07 07:07 . 2009-11-07 07:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2010-08-20 21:29 . 2010-08-20 21:29 47616 c:\windows\Installer\b24717.msi
    + 2010-08-18 00:00 . 2010-08-18 00:00 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
    - 2010-01-15 06:41 . 2010-01-15 06:41 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
    + 2010-05-04 13:10 . 2010-05-04 13:10 34632 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
    + 2010-08-18 00:00 . 2010-08-18 00:00 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    - 2010-01-15 06:42 . 2010-01-15 06:42 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
    + 2010-08-17 19:23 . 2010-08-17 19:23 57344 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\texticon.exe
    - 2010-01-15 06:11 . 2010-01-15 06:11 57344 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\texticon.exe
    + 2010-08-17 19:23 . 2010-08-17 19:23 22486 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\register_icon.exe
    - 2010-01-15 06:11 . 2010-01-15 06:11 22486 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\register_icon.exe
    - 2010-01-15 06:11 . 2010-01-15 06:11 32768 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\maintenance_icon.exe
    + 2010-08-17 19:23 . 2010-08-17 19:23 32768 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\maintenance_icon.exe
    - 2010-01-15 06:11 . 2010-01-15 06:11 61440 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\helpicon.exe
    + 2010-08-17 19:23 . 2010-08-17 19:23 61440 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\helpicon.exe
    + 2009-12-22 03:09 . 2009-12-22 03:09 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\ViewerPS.dll
    + 2009-12-22 08:57 . 2009-12-22 08:57 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\reader_sl.exe
    + 2009-12-22 03:02 . 2009-12-22 03:02 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlr.dll
    + 2009-12-22 06:21 . 2009-12-22 06:21 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\eula.exe
    + 2009-12-22 06:37 . 2009-12-22 06:37 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acrotextextractor.exe
    + 2009-12-22 01:39 . 2009-12-22 01:39 15288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32Info.exe
    + 2009-12-22 01:27 . 2009-12-22 01:27 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acroiehelpershim.dll
    + 2009-12-22 01:27 . 2009-12-22 01:27 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroIEHelper.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
    + 2010-04-18 15:04 . 2009-03-07 18:33 12288 c:\windows\ie8updates\KB980182-IE8\xpshims.dll
    + 2010-04-18 15:04 . 2009-03-07 18:31 55296 c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll
    + 2010-04-18 15:04 . 2009-03-07 18:33 25600 c:\windows\ie8updates\KB980182-IE8\jsproxy.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
    + 2010-04-18 15:01 . 2009-03-08 04:23 58464 c:\windows\ie8\spuninst\iecustom.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 44544 c:\windows\ie8\pngfilt.dll
    + 2010-04-18 14:59 . 2007-08-14 01:01 48128 c:\windows\ie8\mshtmler.dll
    + 2010-04-18 14:59 . 2007-08-14 01:32 45568 c:\windows\ie8\mshta.exe
    + 2010-04-18 15:00 . 2007-08-14 01:36 12288 c:\windows\ie8\msfeedssync.exe
    + 2010-04-18 14:59 . 2010-03-11 12:38 52224 c:\windows\ie8\msfeedsbs.dll
    + 2010-04-18 14:59 . 2007-08-14 01:44 40960 c:\windows\ie8\licmgr10.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 27648 c:\windows\ie8\jsproxy.dll
    + 2010-04-18 14:59 . 2007-08-14 01:39 92672 c:\windows\ie8\inseng.dll
    + 2010-04-18 14:59 . 2007-08-14 01:36 36352 c:\windows\ie8\imgutil.dll
    + 2010-04-18 14:59 . 2007-08-14 01:39 55296 c:\windows\ie8\iesetup.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 44544 c:\windows\ie8\iernonce.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 78336 c:\windows\ie8\ieencode.dll
    + 2010-04-18 14:59 . 2010-03-10 13:18 70656 c:\windows\ie8\ie4uinit.exe
    + 2010-04-18 14:59 . 2010-03-11 12:38 63488 c:\windows\ie8\icardie.dll
    + 2010-04-18 14:59 . 2007-08-14 01:18 60416 c:\windows\ie8\hmmapi.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 17408 c:\windows\ie8\corpol.dll
    + 2010-04-18 14:59 . 2007-08-14 01:39 71680 c:\windows\ie8\admparse.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 44544 c:\windows\ie7updates\KB980182-IE7\pngfilt.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 52224 c:\windows\ie7updates\KB980182-IE7\msfeedsbs.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 27648 c:\windows\ie7updates\KB980182-IE7\jsproxy.dll
    + 2010-04-01 05:01 . 2009-12-31 15:33 13824 c:\windows\ie7updates\KB980182-IE7\ieudinit.exe
    + 2010-04-01 05:01 . 2010-01-05 10:00 44544 c:\windows\ie7updates\KB980182-IE7\iernonce.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 78336 c:\windows\ie7updates\KB980182-IE7\ieencode.dll
    + 2010-04-01 05:01 . 2009-12-31 15:33 70656 c:\windows\ie7updates\KB980182-IE7\ie4uinit.exe
    + 2010-04-01 05:01 . 2010-01-05 10:00 63488 c:\windows\ie7updates\KB980182-IE7\icardie.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 17408 c:\windows\ie7updates\KB980182-IE7\corpol.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_188c34b5\System.Drawing.Design.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_8ca7438a\CustomMarshalers.dll
    + 2010-07-15 18:12 . 2010-07-15 18:12 90112 c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing.Design\1.0.3300.0__b03f5f7f11d50a3a_3f6e2825\System.Drawing.Design.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\aada360296a42e0413579a19c771ec2d\System.Web.DynamicData.Design.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
    + 2010-08-12 22:22 . 2010-08-12 22:22 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d20457ade760abf3c463c7b113f5cc42\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\c0779981ef792a515fbe1bf087ceb273\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 28672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ab8f5f0f4ff9a2e0c23755d261bc656f\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a6e5656621a6b9b15ca2b895ab8ce146\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\89b260c050c738a550c46bc48ab2e34d\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5507b9230c506c5bc62182719a432995\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3343e10ee93e5704e37f6b18e1e9d283\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\32551d6d9c0ee50a7f3cd6f2754267dc\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 54784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1c164ca5f33c7e3a8400f18622e74a8d\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 84992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\15d6801ba2124cd615e9c6ece49711b1\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\f5ff3e17f6e213811a108110f7b74ce0\Microsoft.PowerShell.Commands.Utility.resources.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\671fd43afa00654c9a8c2b9587a08eca\Microsoft.PowerShell.Security.resources.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 19456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\34fba6455956a34ed45c4fc20743d5c4\Microsoft.PowerShell.Commands.Management.resources.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\19ca3a2c95ca0893c952d37e74c039ad\Microsoft.PowerShell.ConsoleHost.resources.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
    + 2010-08-12 22:22 . 2010-08-12 22:22 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2010-07-15 09:06 . 2010-07-15 09:06 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2010-01-16 09:31 . 2010-01-16 09:31 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 11104 c:\windows\assembly\GAC_MSIL\Policy.12.0.office\14.0.0.0__71e9bce111e9429c\Policy.12.0.Office.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 11640 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Vbe.Interop.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Word\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Word.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.SmartTag.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.PowerPoint\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.PowerPoint.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Graph.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 11656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Excel.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 11664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.Dao.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 11104 c:\windows\assembly\GAC_MSIL\Policy.11.0.office\14.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 11640 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Word\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11664 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11664 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.PowerPoint\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 11656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 86016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 53248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 36864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 49152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 65536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 81920 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 77824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 40960 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll
     
  18. 2010/08/24
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    + 2010-08-20 21:32 . 2010-08-20 21:32 22016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 45056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 63336 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 65536 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 36864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.resources.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 32768 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.resources.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 11264 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.resources.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 19320 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 46968 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.OneNote\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 16248 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 79744 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2010-07-17 01:57 . 2010-07-17 01:57 98304 c:\windows\assembly\GAC_32\Microsoft.Xna.Framework.Game\3.1.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.Game.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2010-07-15 18:10 . 2010-07-15 18:10 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 81920 c:\windows\assembly\GAC\System.Security\1.0.3300.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 16384 c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    - 2010-01-15 03:28 . 2010-01-15 03:28 16384 c:\windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 13312 c:\windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
    + 2010-07-15 09:10 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe
    + 2010-07-15 09:10 . 2010-04-22 22:21 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
    + 2010-07-15 18:11 . 2007-12-17 12:00 66592 c:\windows\$NtUninstallKB979904$\togac.exe
    + 2010-07-15 18:11 . 2004-07-20 01:54 77824 c:\windows\$NtUninstallKB979904$\system.security.dll
    + 2010-07-15 18:11 . 2007-12-17 11:59 66592 c:\windows\$NtUninstallKB979904$\setregni.exe
    + 2010-07-15 09:51 . 2008-04-14 00:11 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
    + 2010-04-15 15:35 . 2008-04-14 00:11 84480 c:\windows\$NtUninstallKB979309$\cabview.dll
    + 2010-04-18 23:14 . 2007-10-22 07:08 20480 c:\windows\$NtUninstallKB926139-v2$\PSCustomSetupUtil.exe
    + 2010-07-15 09:09 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB982381-IE8\update\spcustom.dll
    + 2010-07-15 09:09 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB982381-IE8\spmsg.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 12800 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\xpshims.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 55296 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeedsbs.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 25600 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\jsproxy.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981349\update\spcustom.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981349\spmsg.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981332-IE8\update\spcustom.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981332-IE8\spmsg.dll
    + 2010-04-18 15:03 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980302-IE8\update\spcustom.dll
    + 2010-04-18 15:03 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980302-IE8\spmsg.dll
    + 2010-04-18 14:54 . 2010-02-16 04:50 64000 c:\windows\$hf_mig$\KB980302-IE8\SP3QFE\iecompat.dll
    + 2010-04-15 15:38 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll
    + 2010-04-15 15:38 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB980232\spmsg.dll
    + 2010-07-15 18:12 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
    + 2010-07-15 18:12 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980218\spmsg.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB980195\spmsg.dll
    + 2010-04-18 15:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980182-IE8\update\spcustom.dll
    + 2010-04-18 15:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980182-IE8\spmsg.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 12800 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\xpshims.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 55296 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeedsbs.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 25600 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\jsproxy.dll
    + 2010-04-01 05:01 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980182-IE7\update\spcustom.dll
    + 2010-04-01 05:01 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980182-IE7\spmsg.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 44544 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\pngfilt.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 52224 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msfeedsbs.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 27648 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\jsproxy.dll
    + 2010-03-10 14:05 . 2010-03-10 14:05 13824 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieudinit.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 44544 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iernonce.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 78336 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieencode.dll
    + 2010-03-10 14:05 . 2010-03-10 14:05 70656 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ie4uinit.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 63488 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\icardie.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 17408 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\corpol.dll
    + 2010-04-15 15:38 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
    + 2010-04-15 10:11 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
    + 2010-04-15 15:38 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979683\spmsg.dll
    + 2010-07-15 18:09 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
    + 2010-07-15 18:09 . 2009-05-26 09:01 17272 c:\windows\$hf_mig$\KB979559\spmsg.dll
    + 2010-07-15 09:51 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
    + 2010-07-15 09:51 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979482\spmsg.dll
    + 2010-03-05 14:52 . 2010-03-05 14:52 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB979309\spmsg.dll
    + 2010-01-13 13:48 . 2010-01-13 13:48 86016 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB978601\spmsg.dll
    + 2010-05-13 11:34 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
    + 2010-05-13 11:34 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978542\spmsg.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978338\spmsg.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977816\spmsg.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB976662-IE8\update\spcustom.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB976662-IE8\spmsg.dll
    + 2010-07-15 18:09 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
    + 2010-07-15 18:09 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB975562\spmsg.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971961-IE8\update\spcustom.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971961-IE8\spmsg.dll
    + 2010-07-15 09:21 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2229593\update\spcustom.dll
    + 2010-07-15 09:21 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2229593\spmsg.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2010-04-18 23:14 . 2007-06-30 18:49 4608 c:\windows\system32\windowspowershell\v1.0\pwrshmsg.dll
    + 2010-04-26 07:15 . 2001-08-17 03:56 7552 c:\windows\system32\drivers\SONYPVU1.SYS
    + 2010-04-26 07:15 . 2001-08-17 03:56 7552 c:\windows\system32\dllcache\sonypvu1.sys
    + 2004-08-10 11:00 . 2003-03-31 12:00 3584 c:\windows\system32\dllcache\comcat.dll
    - 2004-08-10 11:00 . 2004-08-10 11:00 3584 c:\windows\system32\dllcache\comcat.dll
    + 2004-08-10 11:00 . 2003-03-31 12:00 3584 c:\windows\system32\comcat.dll
    - 2004-08-10 11:00 . 2004-08-10 11:00 3584 c:\windows\system32\comcat.dll
    + 2010-06-02 10:04 . 1999-09-10 02:06 4672 c:\windows\system\WOWPOST.EXE
    + 2010-06-02 10:04 . 1999-09-10 02:06 5600 c:\windows\system\WINASPI.DLL
    + 2010-07-17 02:01 . 2010-07-17 02:01 5430 c:\windows\Installer\{BC90276B-BE38-451C-8E4D-FF28FF08ABF6}\_97FD91C37354ACBFB8109E.exe
    + 2010-07-17 02:01 . 2010-07-17 02:01 5430 c:\windows\Installer\{BC90276B-BE38-451C-8E4D-FF28FF08ABF6}\_6FEFF9B68218417F98F549.exe
    + 2010-07-17 02:01 . 2010-07-17 02:01 5430 c:\windows\Installer\{BC90276B-BE38-451C-8E4D-FF28FF08ABF6}\_03FE117FC2F9340045654C.exe
    + 2010-04-18 15:03 . 2009-03-07 18:35 2048 c:\windows\ie8updates\KB980302-IE8\iecompat.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 8704 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Security.resources.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 4096 c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
    - 2010-01-15 03:28 . 2010-01-15 03:28 4096 c:\windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 4608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
    + 2010-04-18 23:14 . 2007-10-30 09:15 7680 c:\windows\$NtUninstallKB926139-v2$\PSSetupNativeUtils.exe
    - 2010-01-16 22:33 . 2010-01-16 22:33 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-12 07:05 . 2009-07-12 07:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    + 2006-12-02 04:54 . 2006-12-02 04:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
    - 2006-12-02 05:54 . 2006-12-02 05:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
    - 2006-12-02 05:54 . 2006-12-02 05:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
    + 2006-12-02 04:54 . 2006-12-02 04:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
    - 2006-12-02 05:54 . 2006-12-02 05:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
    + 2006-12-02 04:54 . 2006-12-02 04:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
    + 2004-12-20 01:08 . 2004-12-20 01:08 155648 c:\windows\system32\xvidvfw.dll
    + 2004-12-20 01:03 . 2004-12-20 01:03 679936 c:\windows\system32\xvidcore.dll
    - 2007-01-31 21:50 . 2007-01-31 21:50 913408 c:\windows\system32\xreglib.dll
    + 2007-01-31 20:50 . 2007-01-31 20:50 913408 c:\windows\system32\xreglib.dll
    + 2010-01-15 06:54 . 2009-01-07 08:21 121856 c:\windows\system32\xmllite.dll
    - 2010-01-15 06:54 . 2008-04-14 00:12 121856 c:\windows\system32\xmllite.dll
    + 2010-07-17 01:58 . 2009-03-16 20:18 517448 c:\windows\system32\XAudio2_4.dll
    + 2010-07-17 01:58 . 2009-03-16 20:18 235352 c:\windows\system32\xactengine3_4.dll
    + 2004-08-04 13:56 . 2004-08-04 13:56 293376 c:\windows\system32\WISPTIS.EXE
    + 2004-08-10 11:00 . 2009-12-24 06:59 177664 c:\windows\system32\wintrust.dll
    + 2007-08-14 01:45 . 2009-03-07 18:34 208384 c:\windows\system32\WinFXDocObj.exe
    + 2010-04-18 23:14 . 2007-10-30 09:15 330240 c:\windows\system32\windowspowershell\v1.0\powershell.exe
    + 2004-08-10 11:00 . 2009-03-07 18:34 236544 c:\windows\system32\webcheck.dll
    + 2004-08-10 11:00 . 2010-03-10 06:15 420352 c:\windows\system32\vbscript.dll
    + 2004-08-10 11:00 . 2009-03-07 18:34 105984 c:\windows\system32\url.dll
    - 2004-08-10 11:00 . 2010-01-05 10:00 105984 c:\windows\system32\url.dll
    - 2008-10-09 23:31 . 2008-10-09 23:31 192512 c:\windows\system32\txmlutil.dll
    + 2008-10-09 22:31 . 2008-10-09 22:31 192512 c:\windows\system32\txmlutil.dll
    + 2010-08-20 21:34 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\unires.dll
    + 2010-08-20 21:34 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\unidrvui.dll
    + 2010-08-20 21:34 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\unidrv.dll
    + 2010-08-20 21:34 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\mxdwdrv.dll
    + 2010-05-17 16:21 . 2010-05-18 13:03 612312 c:\windows\system32\Restore\rstrlog.dat
    + 2010-03-31 06:10 . 2010-03-31 06:10 295264 c:\windows\system32\PresentationHost.exe
    + 2004-08-10 11:00 . 2010-08-17 23:23 394406 c:\windows\system32\perfh009.dat
    + 2004-08-10 11:00 . 2010-06-24 12:22 206848 c:\windows\system32\occache.dll
    - 2003-02-21 11:42 . 2003-02-21 11:42 348160 c:\windows\system32\msvcr71.dll
    + 2003-02-21 10:42 . 2003-02-21 10:42 348160 c:\windows\system32\msvcr71.dll
    - 2002-01-05 09:37 . 2002-01-05 09:37 344064 c:\windows\system32\msvcr70.dll
    + 2002-01-05 08:37 . 2002-01-05 08:37 344064 c:\windows\system32\msvcr70.dll
    + 2003-03-19 02:14 . 2003-03-19 02:14 499712 c:\windows\system32\msvcp71.dll
    - 2003-03-19 03:14 . 2003-03-19 03:14 499712 c:\windows\system32\msvcp71.dll
    - 2002-01-05 10:40 . 2002-01-05 10:40 487424 c:\windows\system32\msvcp70.dll
    + 2002-01-05 09:40 . 2002-01-05 09:40 487424 c:\windows\system32\msvcp70.dll
    + 2006-03-04 03:33 . 2010-06-24 12:22 611840 c:\windows\system32\mstime.dll
    + 2006-03-04 03:33 . 2009-03-07 18:34 193536 c:\windows\system32\msrating.dll
    + 2004-08-10 11:00 . 2009-03-07 18:22 156160 c:\windows\system32\msls31.dll
    - 2004-08-10 11:00 . 2007-08-14 01:54 156160 c:\windows\system32\msls31.dll
    + 2007-08-14 01:54 . 2010-06-24 12:21 599040 c:\windows\system32\msfeeds.dll
    + 2009-01-07 08:20 . 2009-01-07 08:20 265720 c:\windows\system32\msdbg2.dll
    + 2009-11-07 07:07 . 2009-11-07 07:07 297808 c:\windows\system32\mscoree.dll
    - 2002-01-05 10:36 . 2002-01-05 10:36 964608 c:\windows\system32\mfc70u.dll
    + 2002-01-05 09:36 . 2002-01-05 09:36 964608 c:\windows\system32\mfc70u.dll
    + 2002-01-05 09:48 . 2002-01-05 09:48 974848 c:\windows\system32\mfc70.dll
    - 2002-01-05 10:48 . 2002-01-05 10:48 974848 c:\windows\system32\mfc70.dll
    - 2004-03-31 20:28 . 2004-03-31 20:28 131072 c:\windows\system32\mapi32.dll
    + 2004-03-31 19:28 . 2004-03-31 19:28 131072 c:\windows\system32\mapi32.dll
    + 2010-08-19 20:14 . 2010-08-19 20:14 232912 c:\windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe
    + 2010-08-19 20:14 . 2010-08-19 20:14 311760 c:\windows\system32\Macromed\Flash\FlashUtil10i_ActiveX.dll
    + 2010-06-02 10:04 . 2004-07-26 02:12 166912 c:\windows\system32\Lame_enc.dll
    + 2010-06-02 10:04 . 2004-07-26 02:12 187904 c:\windows\system32\Lame.exe
    + 2004-08-10 11:00 . 2009-12-09 05:53 726528 c:\windows\system32\jscript.dll
    + 2004-08-04 13:56 . 2004-08-04 13:56 207360 c:\windows\system32\INKED.DLL
    - 2010-01-15 01:52 . 2008-04-11 19:04 691712 c:\windows\system32\inetcomm.dll
    + 2010-01-15 01:52 . 2010-01-29 15:01 691712 c:\windows\system32\inetcomm.dll
    + 2007-08-14 01:54 . 2009-03-07 18:22 164352 c:\windows\system32\ieui.dll
    + 2006-03-04 03:33 . 2010-06-24 12:21 184320 c:\windows\system32\iepeers.dll
    + 2004-08-10 11:00 . 2010-06-24 12:21 387584 c:\windows\system32\iedkcs32.dll
    + 2007-07-11 19:27 . 2009-03-07 18:11 445952 c:\windows\system32\ieapfltr.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 163840 c:\windows\system32\ieakui.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 229376 c:\windows\system32\ieaksie.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 125952 c:\windows\system32\ieakeng.dll
    + 2004-08-10 11:00 . 2010-06-23 12:08 173056 c:\windows\system32\ie4uinit.exe
    - 2010-01-15 07:02 . 2008-04-17 20:12 107368 c:\windows\system32\GEARAspi.dll
    + 2010-01-15 07:02 . 2008-04-17 21:12 107368 c:\windows\system32\GEARAspi.dll
    + 2010-01-14 18:32 . 2010-08-21 18:17 200144 c:\windows\system32\FNTCACHE.DAT
    - 2006-03-04 03:33 . 2010-01-05 10:00 133120 c:\windows\system32\extmgr.dll
    + 2006-03-04 03:33 . 2010-03-11 12:38 133120 c:\windows\system32\extmgr.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 216064 c:\windows\system32\dxtrans.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 348160 c:\windows\system32\dxtmsft.dll
    + 2010-01-15 07:02 . 2008-04-17 21:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
    - 2010-01-15 07:02 . 2008-04-17 20:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
    + 2004-08-10 11:00 . 2010-02-11 12:02 226880 c:\windows\system32\drivers\tcpip6.sys
    + 2004-08-10 11:00 . 2010-02-24 13:11 455680 c:\windows\system32\drivers\mrxsmb.sys
    - 2008-12-11 03:42 . 2008-12-11 03:42 242184 c:\windows\system32\drivers\bdfsfltr.sys
    + 2008-12-11 02:42 . 2008-12-11 02:42 242184 c:\windows\system32\drivers\bdfsfltr.sys
    - 2008-09-18 19:09 . 2008-09-18 19:09 111112 c:\windows\system32\drivers\bdfm.sys
    + 2008-09-18 18:09 . 2008-09-18 18:09 111112 c:\windows\system32\drivers\bdfm.sys
    + 2010-05-18 22:35 . 2010-05-18 22:35 197920 c:\windows\system32\dnssdX.dll
    + 2010-05-18 22:35 . 2010-05-18 22:35 107808 c:\windows\system32\dns-sd.exe
    + 2009-12-24 06:59 . 2009-12-24 06:59 177664 c:\windows\system32\dllcache\wintrust.dll
    + 2006-03-04 03:33 . 2010-06-24 12:22 916480 c:\windows\system32\dllcache\wininet.dll
    + 2004-08-10 11:00 . 2009-03-07 18:34 236544 c:\windows\system32\dllcache\webcheck.dll
    + 2010-01-15 01:52 . 2009-03-07 18:33 759296 c:\windows\system32\dllcache\VGX.dll
    + 2008-05-09 10:53 . 2010-03-10 06:15 420352 c:\windows\system32\dllcache\vbscript.dll
    - 2004-08-10 11:00 . 2010-01-05 10:00 105984 c:\windows\system32\dllcache\url.dll
    + 2004-08-10 11:00 . 2009-03-07 18:34 105984 c:\windows\system32\dllcache\url.dll
    + 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
    + 2010-01-15 06:19 . 2010-06-21 15:27 354304 c:\windows\system32\dllcache\srv.sys
    + 2009-01-07 08:20 . 2009-01-07 08:20 134144 c:\windows\system32\dllcache\sqmapi.dll
    + 2009-06-25 08:25 . 2010-06-30 12:31 149504 c:\windows\system32\dllcache\schannel.dll
    + 2004-08-10 11:00 . 2010-06-24 12:22 206848 c:\windows\system32\dllcache\occache.dll
    + 2006-03-04 03:33 . 2010-06-24 12:22 611840 c:\windows\system32\dllcache\mstime.dll
    + 2006-03-04 03:33 . 2009-03-07 18:34 193536 c:\windows\system32\dllcache\msrating.dll
    + 2004-08-10 11:00 . 2009-03-07 18:22 156160 c:\windows\system32\dllcache\msls31.dll
    - 2004-08-10 11:00 . 2007-08-14 01:54 156160 c:\windows\system32\dllcache\msls31.dll
    + 2010-01-15 06:51 . 2010-06-24 12:21 599040 c:\windows\system32\dllcache\msfeeds.dll
    + 2010-01-15 06:24 . 2010-02-24 13:11 455680 c:\windows\system32\dllcache\mrxsmb.sys
    + 2010-01-16 00:34 . 2009-12-09 05:53 726528 c:\windows\system32\dllcache\jscript.dll
    - 2010-01-15 06:24 . 2008-04-11 19:04 691712 c:\windows\system32\dllcache\inetcomm.dll
    + 2010-01-15 06:24 . 2010-01-29 15:01 691712 c:\windows\system32\dllcache\inetcomm.dll
    + 2010-01-15 01:51 . 2009-03-08 04:09 638816 c:\windows\system32\dllcache\iexplore.exe
    + 2010-04-18 14:57 . 2010-06-24 12:21 247808 c:\windows\system32\dllcache\ieproxy.dll
    + 2006-03-04 03:33 . 2010-06-24 12:21 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2010-07-14 20:45 . 2010-06-24 12:21 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2004-08-10 11:00 . 2010-06-24 12:21 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2010-01-15 06:51 . 2009-03-07 18:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 163840 c:\windows\system32\dllcache\ieakui.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 229376 c:\windows\system32\dllcache\ieaksie.dll
    + 2004-08-10 11:00 . 2009-03-07 18:33 125952 c:\windows\system32\dllcache\ieakeng.dll
    + 2004-08-10 11:00 . 2010-06-23 12:08 173056 c:\windows\system32\dllcache\ie4uinit.exe
    + 2010-07-15 06:55 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2006-03-04 03:33 . 2010-01-05 10:00 133120 c:\windows\system32\dllcache\extmgr.dll
    + 2006-03-04 03:33 . 2010-03-11 12:38 133120 c:\windows\system32\dllcache\extmgr.dll
    + 2006-03-04 03:33 . 2009-03-07 18:31 216064 c:\windows\system32\dllcache\dxtrans.dll
    + 2004-08-10 11:00 . 2009-03-07 18:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
    + 2010-04-20 05:30 . 2010-04-20 05:30 285696 c:\windows\system32\dllcache\atmfd.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 128512 c:\windows\system32\dllcache\advpack.dll
    + 2010-02-12 04:33 . 2010-02-12 04:33 100864 c:\windows\system32\dllcache\6to4svc.dll
    + 2010-05-15 14:32 . 2010-05-15 14:32 278528 c:\windows\system32\config\systemprofile\ntuser.dat
    + 2010-08-24 02:00 . 2010-08-24 02:25 262144 c:\windows\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
    - 2007-04-11 18:11 . 2007-04-11 18:11 511328 c:\windows\system32\capicom.dll
    + 2007-04-11 17:11 . 2007-04-11 17:11 511328 c:\windows\system32\capicom.dll
    + 2004-08-10 11:00 . 2010-04-20 05:30 285696 c:\windows\system32\atmfd.dll
    - 2004-08-10 11:00 . 2008-04-14 00:09 285696 c:\windows\system32\atmfd.dll
    + 2004-08-10 11:00 . 2009-03-07 18:32 128512 c:\windows\system32\advpack.dll
    + 2004-08-10 11:00 . 2010-02-12 04:33 100864 c:\windows\system32\6to4svc.dll
    + 2010-08-02 06:48 . 2010-02-16 07:14 178834 c:\windows\pchealth\helpctr\Config\Cache\Professional_32_1033.dat
    + 2010-03-31 06:16 . 2010-03-31 06:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2010-04-08 05:48 . 2010-04-08 05:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
    - 2008-07-30 02:16 . 2008-07-30 02:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2010-04-08 05:48 . 2010-04-08 05:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2010-03-23 11:31 . 2010-03-23 11:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2008-07-25 18:17 . 2008-07-25 18:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2010-02-09 18:22 . 2010-02-09 18:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2010-05-11 12:40 . 2010-05-11 12:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2009-08-08 06:51 . 2009-08-08 06:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2010-05-11 12:40 . 2010-05-11 12:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2008-05-28 07:49 . 2008-05-28 07:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2010-03-31 20:51 . 2010-03-31 20:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2008-05-28 07:48 . 2008-05-28 07:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2010-03-31 20:49 . 2010-03-31 20:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    - 2008-05-28 08:30 . 2008-05-28 08:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2010-03-31 21:32 . 2010-03-31 21:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2010-08-20 21:29 . 2010-08-20 21:29 647168 c:\windows\Installer\b2470e.msi
    + 2010-08-20 21:29 . 2010-08-20 21:29 647168 c:\windows\Installer\b246fe.msi
    + 2010-08-20 21:28 . 2010-08-20 21:28 653312 c:\windows\Installer\b246f9.msi
    + 2010-08-20 21:28 . 2010-08-20 21:28 664064 c:\windows\Installer\b246f4.msi
    + 2010-08-20 21:28 . 2010-08-20 21:28 659456 c:\windows\Installer\b246ef.msi
    + 2010-08-20 21:27 . 2010-08-20 21:27 647168 c:\windows\Installer\b246db.msi
    + 2010-08-18 00:00 . 2010-08-18 00:00 432640 c:\windows\Installer\36d77.msi
    + 2010-02-25 06:14 . 2010-02-25 06:14 543232 c:\windows\Installer\31f988d.msp
    + 2010-07-17 01:57 . 2010-07-17 01:57 892416 c:\windows\Installer\172d59d.msi
    + 2010-05-04 13:10 . 2010-05-04 13:10 381440 c:\windows\Installer\1442808.msi
    + 2010-07-30 00:16 . 2010-07-30 00:16 807424 c:\windows\Installer\123c311.msi
    + 2010-07-30 00:36 . 2010-07-30 00:36 372736 c:\windows\Installer\{91F7F3F3-CE80-48C3-8327-7D24A0A5716A}\iTunesIco.exe
    + 2010-08-20 21:27 . 2010-08-20 21:27 571232 c:\windows\Installer\{90140000-006E-0409-0000-0000000FF1CE}\misc.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-12-22 01:35 . 2009-12-22 01:35 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\pdfshell.dll
    + 2009-12-22 03:05 . 2009-12-22 03:05 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe
    + 2009-12-22 01:34 . 2009-12-22 01:34 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\nppdf32.dll
    + 2009-11-10 02:18 . 2009-11-10 02:18 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\JP2KLib.dll
    + 2009-12-22 03:02 . 2009-12-22 03:02 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AdobeCollabSync.exe
    + 2009-12-22 01:43 . 2009-12-22 01:43 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRdIF.dll
    + 2009-12-22 08:57 . 2009-12-22 08:57 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.exe
    + 2009-12-22 01:15 . 2009-12-22 01:15 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroPDF.dll
    + 2009-12-22 02:32 . 2009-12-22 02:32 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acrobroker.exe
    + 2009-12-22 02:15 . 2009-12-22 02:15 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\a3dutility.exe
    + 2010-07-15 09:09 . 2010-02-25 06:24 916480 c:\windows\ie8updates\KB982381-IE8\wininet.dll
    + 2010-07-15 09:09 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
    + 2010-07-15 09:09 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
    + 2010-07-15 09:09 . 2010-02-25 06:24 206848 c:\windows\ie8updates\KB982381-IE8\occache.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 247808 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 184320 c:\windows\ie8updates\KB982381-IE8\iepeers.dll
    + 2010-07-15 09:09 . 2009-03-07 18:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 387584 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
    + 2010-07-15 09:09 . 2010-02-24 09:54 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
    + 2010-04-19 14:48 . 2009-03-07 18:33 420352 c:\windows\ie8updates\KB981332-IE8\vbscript.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe
    + 2010-04-18 15:03 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB980302-IE8\spuninst\updspapi.dll
    + 2010-04-18 15:03 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB980302-IE8\spuninst\spuninst.exe
    + 2010-04-18 15:04 . 2009-03-07 18:34 914944 c:\windows\ie8updates\KB980182-IE8\wininet.dll
    + 2010-04-18 15:04 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB980182-IE8\spuninst\updspapi.dll
    + 2010-04-18 15:04 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB980182-IE8\spuninst\spuninst.exe
    + 2010-04-18 15:04 . 2009-03-07 18:34 109568 c:\windows\ie8updates\KB980182-IE8\occache.dll
    + 2010-04-18 15:04 . 2009-03-07 18:32 611840 c:\windows\ie8updates\KB980182-IE8\mstime.dll
    + 2010-04-18 15:04 . 2009-03-07 18:32 594432 c:\windows\ie8updates\KB980182-IE8\msfeeds.dll
    + 2010-04-18 15:04 . 2009-03-07 18:33 246784 c:\windows\ie8updates\KB980182-IE8\ieproxy.dll
    + 2010-04-18 15:04 . 2009-03-07 18:31 183808 c:\windows\ie8updates\KB980182-IE8\iepeers.dll
    + 2010-04-18 15:04 . 2009-03-08 04:09 391536 c:\windows\ie8updates\KB980182-IE8\iedkcs32.dll
    + 2010-04-18 15:04 . 2009-03-07 18:32 173056 c:\windows\ie8updates\KB980182-IE8\ie4uinit.exe
    + 2010-04-19 14:48 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
    + 2010-04-19 14:48 . 2009-06-22 06:44 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
    + 2010-04-19 14:48 . 2009-03-07 18:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 916480 c:\windows\ie8updates\KB2183461-IE8\wininet.dll
    + 2010-08-12 22:16 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB2183461-IE8\spuninst\updspapi.dll
    + 2010-08-12 22:16 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2183461-IE8\spuninst\spuninst.exe
    + 2010-08-12 22:16 . 2010-05-06 10:41 206848 c:\windows\ie8updates\KB2183461-IE8\occache.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 611840 c:\windows\ie8updates\KB2183461-IE8\mstime.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 599040 c:\windows\ie8updates\KB2183461-IE8\msfeeds.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 247808 c:\windows\ie8updates\KB2183461-IE8\ieproxy.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 184320 c:\windows\ie8updates\KB2183461-IE8\iepeers.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 743424 c:\windows\ie8updates\KB2183461-IE8\iedvtool.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 387584 c:\windows\ie8updates\KB2183461-IE8\iedkcs32.dll
    + 2010-08-12 22:16 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2183461-IE8\ie4uinit.exe
    + 2010-04-18 14:59 . 2010-03-11 12:38 832512 c:\windows\ie8\wininet.dll
    + 2010-04-18 15:00 . 2007-08-14 01:45 206336 c:\windows\ie8\winfxdocobj.exe
    + 2010-04-18 14:59 . 2010-03-11 12:38 233472 c:\windows\ie8\webcheck.dll
    + 2010-04-18 14:59 . 2008-05-27 17:23 765952 c:\windows\ie8\vgx.dll
    + 2010-04-18 14:59 . 2010-03-09 11:09 430080 c:\windows\ie8\vbscript.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 105984 c:\windows\ie8\url.dll
    + 2010-04-18 15:01 . 2009-01-07 08:21 382496 c:\windows\ie8\spuninst\updspapi.dll
    + 2010-04-18 15:01 . 2009-01-07 08:20 231456 c:\windows\ie8\spuninst\spuninst.exe
    + 2010-04-18 14:59 . 2006-09-07 00:43 213216 c:\windows\ie8\spuninst.exe
    + 2010-04-18 14:59 . 2010-03-11 12:38 102912 c:\windows\ie8\occache.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 671232 c:\windows\ie8\mstime.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 193024 c:\windows\ie8\msrating.dll
    + 2010-04-18 14:59 . 2007-08-14 01:54 156160 c:\windows\ie8\msls31.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 477696 c:\windows\ie8\mshtmled.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 459264 c:\windows\ie8\msfeeds.dll
    + 2010-04-18 14:59 . 2009-08-13 15:16 512000 c:\windows\ie8\jscript.dll
    + 2010-04-18 14:59 . 2010-02-23 05:20 634648 c:\windows\ie8\iexplore.exe
    + 2010-04-18 15:00 . 2007-08-14 01:54 180736 c:\windows\ie8\ieui.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 268288 c:\windows\ie8\iertutil.dll
    + 2010-04-18 15:00 . 2007-08-14 01:54 287744 c:\windows\ie8\ieproxy.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 192512 c:\windows\ie8\iepeers.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 385024 c:\windows\ie8\iedkcs32.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 380928 c:\windows\ie8\ieapfltr.dll
    + 2010-04-18 14:59 . 2010-02-23 05:18 161792 c:\windows\ie8\ieakui.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 230400 c:\windows\ie8\ieaksie.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 153088 c:\windows\ie8\ieakeng.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 214528 c:\windows\ie8\dxtrans.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 347136 c:\windows\ie8\dxtmsft.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 124928 c:\windows\ie8\advpack.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 832512 c:\windows\ie7updates\KB980182-IE7\wininet.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 233472 c:\windows\ie7updates\KB980182-IE7\webcheck.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 105984 c:\windows\ie7updates\KB980182-IE7\url.dll
    + 2010-04-01 05:01 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB980182-IE7\spuninst\updspapi.dll
    + 2010-04-01 05:01 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB980182-IE7\spuninst\spuninst.exe
    + 2010-04-01 05:01 . 2010-01-05 10:00 102912 c:\windows\ie7updates\KB980182-IE7\occache.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 671232 c:\windows\ie7updates\KB980182-IE7\mstime.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 193024 c:\windows\ie7updates\KB980182-IE7\msrating.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 477696 c:\windows\ie7updates\KB980182-IE7\mshtmled.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 459264 c:\windows\ie7updates\KB980182-IE7\msfeeds.dll
     
  19. 2010/08/24
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    + 2010-04-01 05:01 . 2009-12-18 13:05 634648 c:\windows\ie7updates\KB980182-IE7\iexplore.exe
    + 2010-04-01 05:01 . 2010-01-05 10:00 268288 c:\windows\ie7updates\KB980182-IE7\iertutil.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 192512 c:\windows\ie7updates\KB980182-IE7\iepeers.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 385024 c:\windows\ie7updates\KB980182-IE7\iedkcs32.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 380928 c:\windows\ie7updates\KB980182-IE7\ieapfltr.dll
    + 2010-04-01 05:01 . 2009-12-18 13:04 161792 c:\windows\ie7updates\KB980182-IE7\ieakui.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 230400 c:\windows\ie7updates\KB980182-IE7\ieaksie.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 153088 c:\windows\ie7updates\KB980182-IE7\ieakeng.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 133120 c:\windows\ie7updates\KB980182-IE7\extmgr.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 214528 c:\windows\ie7updates\KB980182-IE7\dxtrans.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 347136 c:\windows\ie7updates\KB980182-IE7\dxtmsft.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 124928 c:\windows\ie7updates\KB980182-IE7\advpack.dll
    + 2010-01-15 06:24 . 2010-02-24 13:11 455680 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2010-04-18 23:15 . 2010-03-26 22:07 560544 c:\windows\Downloaded Program Files\MSDCode.DLL
    + 2010-07-15 09:05 . 2010-07-15 09:05 113664 c:\windows\assembly\tmp\Z9HPX5DL\System.EnterpriseServices.Wrapper.dll
    + 2010-07-15 09:05 . 2010-07-15 09:05 258048 c:\windows\assembly\tmp\Z9HPX5DL\System.EnterpriseServices.dll
    + 2010-07-14 09:03 . 2010-07-14 09:03 113664 c:\windows\assembly\tmp\EQ09IS1B\System.EnterpriseServices.Wrapper.dll
    + 2010-07-14 09:03 . 2010-07-14 09:03 258048 c:\windows\assembly\tmp\EQ09IS1B\System.EnterpriseServices.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_4f5c183a\System.Drawing.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_422bf767\System.Drawing.Design.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_fb68f485\CustomMarshalers.dll
    + 2010-07-15 18:12 . 2010-07-15 18:12 847872 c:\windows\assembly\NativeImages1_v1.0.3705\System.Drawing\1.0.3300.0__b03f5f7f11d50a3a_c52449c7\System.Drawing.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
    + 2010-08-12 22:26 . 2010-08-12 22:26 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
    + 2010-08-12 22:26 . 2010-08-12 22:26 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\5e16c279496a553c988c6199f0cee8aa\System.Web.Routing.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\720b28d81e987b889180b291ea19b821\System.Web.Extensions.Design.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\da36fd678161cd3444ef547c894e3f35\System.Web.Entity.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\49ae7c73fac8827123d5db1714c22599\System.Web.Entity.Design.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ce3aa27d3c4c052845ac5abb1374defa\System.Web.DynamicData.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\95fab896ef2af14876e3e1524379773b\System.Web.Abstractions.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3de39eb60b9d32af46f32f6c7a88fc7f\System.Runtime.Remoting.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\97bd2a5d946aa3a824e4cfe5b6ef95aa\System.Messaging.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 160256 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\1d66495fd7a23500f7f8262b200c9b8b\System.Management.Automation.resources.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\488c4017d45e861644a34fae557aa80f\System.Data.Entity.Design.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\a055d54c458b7557d957c714551873c3\sysglobl.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
    + 2010-08-12 22:41 . 2010-08-12 22:41 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5aeb40ff7128df2881fb03c01d070b20\ServiceModelReg.ni.exe
    + 2010-08-12 22:23 . 2010-08-12 22:23 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
    + 2010-08-20 21:39 . 2010-08-20 21:39 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\ffd770a589118a6d76a047f95377dbde\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 183808 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f3e026235b21db12dc480406f60256f2\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 622080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\de88593e6e57c9725bda0fbf70a82ce1\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d1836a0de9204b650a69e31ab3f97841\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\b53bc4db7fd40421642e1732db6f9921\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\91f3b09dd0b87ec31fa510640d04dd9a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\87fd15f8fa59f99d684e8f3a5cee0e1e\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 365056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\835580577981018f1c9e2f5f62bff35e\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 664064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\7ddca5c18b0d729bce6f4cd87391b2d2\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\557152958c58d4020a27bd254f24eed8\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 192000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3fd2efbe3b7597fa33756eabc12b78ae\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\2da57395359d850ce2bbe9419793434b\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\22f42c7a264eefbaeda4a514fb89c9ec\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0e24b74bbabb432cdbd3527eef540f04\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0df0278154b6445142dcb4f2f863cdf6\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ddf0b43a5467013f826232fb4d059880\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 433664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c314791ced733fca0b01d97f87c1671b\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\95283aeaf043cf6550f525f7c2533344\Microsoft.PowerShell.Security.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 492032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\29b677e9d1a41f78bd85463edc26891e\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2010-08-20 21:38 . 2010-08-20 21:38 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\e61b019098b811e1369a2f1acfa74514\Microsoft.Office.Tools.Word.v9.0.ni.dll
    + 2010-08-20 21:38 . 2010-08-20 21:38 815616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\7716ba0fd739c927425263ec60d0b02a\Microsoft.Office.Tools.Common.v9.0.ni.dll
    + 2010-08-20 21:38 . 2010-08-20 21:38 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\748fafb097576417ddc93e0298cea72f\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
    + 2010-08-20 21:37 . 2010-08-20 21:37 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\1c82939cff6df9bea15625abe6345d1c\Microsoft.Office.Tools.v9.0.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
    + 2010-08-12 22:40 . 2010-08-12 22:40 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\56aec0938ef1bbdeca65b07a5fe8cd39\AspNetMMCExt.ni.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2010-07-15 09:06 . 2010-07-15 09:06 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 163840 c:\windows\assembly\GAC_MSIL\System.Management.Automation.resources\1.0.0.0_en_31bf3856ad364e35\System.Management.Automation.resources.dll
    + 2010-07-15 09:06 . 2010-07-15 09:06 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2010-01-16 09:31 . 2010-01-16 09:31 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2010-07-15 09:06 . 2010-07-15 09:06 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 448360 c:\windows\assembly\GAC_MSIL\office\14.0.0.0__71e9bce111e9429c\OFFICE.DLL
    + 2010-08-20 21:32 . 2010-08-20 21:32 385024 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 131072 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 212992 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 143360 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 176128 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 286720 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 374640 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 200704 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 294912 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 139264 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll
    + 2010-08-20 21:32 . 2010-08-20 21:32 299008 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Word.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Word.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 438272 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Excel.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Excel.v9.0.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 356352 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Common.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.v9.0.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 907120 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Word\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    + 2010-08-20 21:33 . 2010-08-20 21:33 386944 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.PowerPoint\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 149368 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2010-08-12 22:18 . 2010-08-12 22:18 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2010-01-15 03:28 . 2010-01-15 03:28 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
    + 2010-08-20 21:31 . 2010-08-20 21:31 229376 c:\windows\assembly\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
    + 2010-08-20 21:31 . 2010-08-20 21:31 110592 c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
    - 2010-01-15 03:28 . 2010-01-15 03:28 110592 c:\windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
    + 2010-07-15 09:10 . 2009-05-26 09:01 382840 c:\windows\$NtUninstallKB981793$\spuninst\updspapi.dll
    + 2010-07-15 09:10 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB981793$\spuninst\spuninst.exe
    + 2010-04-15 15:36 . 2008-05-09 10:53 430080 c:\windows\$NtUninstallKB981349$\vbscript.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981349$\spuninst\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981349$\spuninst\spuninst.exe
    + 2010-04-15 15:38 . 2009-05-26 09:01 382840 c:\windows\$NtUninstallKB980232$\spuninst\updspapi.dll
    + 2010-04-15 15:38 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB980232$\spuninst\spuninst.exe
    + 2010-04-15 15:38 . 2009-12-04 18:22 455424 c:\windows\$NtUninstallKB980232$\mrxsmb.sys
    + 2010-07-15 18:12 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB980218$\spuninst\updspapi.dll
    + 2010-07-15 18:12 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB980218$\spuninst\spuninst.exe
    + 2010-07-15 18:12 . 2008-04-14 00:09 285696 c:\windows\$NtUninstallKB980218$\atmfd.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB980195$\spuninst\updspapi.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB980195$\spuninst\spuninst.exe
    + 2010-07-15 18:11 . 2009-04-13 18:42 371424 c:\windows\$NtUninstallKB979904$\spuninst\updspapi.dll
    + 2010-07-15 18:11 . 2009-04-13 18:42 213216 c:\windows\$NtUninstallKB979904$\spuninst\spuninst.exe
    + 2010-04-15 15:38 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
    + 2010-04-15 15:38 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
    + 2010-07-15 18:09 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979559$\spuninst\updspapi.dll
    + 2010-07-15 18:09 . 2009-05-26 09:01 231288 c:\windows\$NtUninstallKB979559$\spuninst\spuninst.exe
    + 2010-07-15 09:51 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979482$\spuninst\updspapi.dll
    + 2010-07-15 09:51 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB979482$\spuninst\spuninst.exe
    + 2010-04-15 15:35 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
    + 2010-04-15 15:35 . 2008-04-14 00:12 176640 c:\windows\$NtUninstallKB978601$\wintrust.dll
    + 2010-04-15 15:35 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
    + 2010-04-15 15:35 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
    + 2010-05-13 11:34 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978542$\spuninst\updspapi.dll
    + 2010-05-13 11:34 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978542$\spuninst\spuninst.exe
    + 2010-05-13 11:34 . 2008-04-11 19:04 691712 c:\windows\$NtUninstallKB978542$\inetcomm.dll
    + 2010-04-15 15:36 . 2008-06-20 11:08 225856 c:\windows\$NtUninstallKB978338$\tcpip6.sys
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
    + 2010-04-15 15:36 . 2008-04-14 00:11 100352 c:\windows\$NtUninstallKB978338$\6to4svc.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
    + 2010-07-15 18:09 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB975562$\spuninst\updspapi.dll
    + 2010-07-15 18:09 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB975562$\spuninst\spuninst.exe
    + 2010-04-18 23:14 . 2007-03-06 01:23 371424 c:\windows\$NtUninstallKB926139-v2$\spuninst\updspapi.dll
    + 2010-04-18 23:14 . 2007-03-06 01:22 213216 c:\windows\$NtUninstallKB926139-v2$\spuninst\spuninst.exe
    + 2010-07-15 09:21 . 2010-02-23 01:53 382840 c:\windows\$NtUninstallKB2229593$\spuninst\updspapi.dll
    + 2010-07-15 09:21 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB2229593$\spuninst\spuninst.exe
    + 2010-07-15 09:21 . 2008-04-14 00:12 744448 c:\windows\$NtUninstallKB2229593$\helpsvc.exe
    + 2010-07-15 09:09 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB982381-IE8\update\updspapi.dll
    + 2010-07-15 09:09 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB982381-IE8\update\update.exe
    + 2010-07-15 09:09 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB982381-IE8\spuninst.exe
    + 2010-07-14 20:45 . 2010-05-06 10:36 919040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 206848 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\occache.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 611840 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mstime.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 599040 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeeds.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 247808 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieproxy.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 184320 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iepeers.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 743424 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedvtool.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 387584 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iedkcs32.dll
    + 2010-07-14 20:45 . 2010-05-05 13:55 173056 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ie4uinit.exe
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981349\update\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981349\update\update.exe
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981349\spuninst.exe
    + 2010-03-09 11:06 . 2010-03-09 11:06 430080 c:\windows\$hf_mig$\KB981349\SP3QFE\vbscript.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981332-IE8\update\updspapi.dll
    + 2010-04-19 14:48 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981332-IE8\update\update.exe
    + 2010-04-19 14:48 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981332-IE8\spuninst.exe
    + 2010-04-19 14:35 . 2010-03-10 06:18 420352 c:\windows\$hf_mig$\KB981332-IE8\SP3QFE\vbscript.dll
    + 2010-04-18 15:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980302-IE8\update\updspapi.dll
    + 2010-04-18 15:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980302-IE8\update\update.exe
    + 2010-04-18 15:03 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980302-IE8\spuninst.exe
    + 2010-04-15 15:38 . 2009-05-26 09:01 382840 c:\windows\$hf_mig$\KB980232\update\updspapi.dll
    + 2010-04-15 15:38 . 2009-05-26 09:01 755576 c:\windows\$hf_mig$\KB980232\update\update.exe
    + 2010-04-15 15:38 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB980232\spuninst.exe
    + 2010-04-15 10:08 . 2010-02-24 11:57 457216 c:\windows\$hf_mig$\KB980232\SP3QFE\mrxsmb.sys
    + 2010-07-15 18:12 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980218\update\updspapi.dll
    + 2010-07-15 18:12 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980218\update\update.exe
    + 2010-07-15 18:12 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980218\spuninst.exe
    + 2010-04-20 05:37 . 2010-04-20 05:37 285824 c:\windows\$hf_mig$\KB980218\SP3QFE\atmfd.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB980195\update\updspapi.dll
    + 2010-07-15 18:11 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB980195\update\update.exe
    + 2010-07-15 18:11 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB980195\spuninst.exe
    + 2010-04-18 15:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980182-IE8\update\updspapi.dll
    + 2010-04-18 15:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980182-IE8\update\update.exe
    + 2010-04-18 15:04 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980182-IE8\spuninst.exe
    + 2010-04-18 14:57 . 2010-02-25 06:19 919040 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 206848 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\occache.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 611840 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mstime.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 594432 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeeds.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 247808 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieproxy.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 184320 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iepeers.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 387584 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iedkcs32.dll
    + 2010-04-18 14:57 . 2010-02-24 09:34 173056 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ie4uinit.exe
    + 2010-04-01 05:01 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980182-IE7\update\updspapi.dll
    + 2010-04-01 05:01 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980182-IE7\update\update.exe
    + 2010-04-01 05:01 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980182-IE7\spuninst.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 841216 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 233472 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\webcheck.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 105984 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\url.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 102912 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\occache.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 671232 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mstime.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 193024 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msrating.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 477696 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtmled.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 459264 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msfeeds.dll
    + 2010-02-23 05:19 . 2010-02-23 05:19 634648 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iexplore.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 268288 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iertutil.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 193024 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iepeers.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 388608 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iedkcs32.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 380928 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieapfltr.dll
    + 2010-02-23 05:18 . 2010-02-23 05:18 161792 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieakui.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 230400 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieaksie.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 153088 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieakeng.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 132608 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\extmgr.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 214528 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\dxtrans.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 347136 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\dxtmsft.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 124928 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\advpack.dll
    + 2010-04-15 15:38 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979683\update\updspapi.dll
    + 2010-04-15 15:38 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979683\update\update.exe
    + 2010-04-15 15:38 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB979683\spuninst.exe
    + 2010-07-15 18:09 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979559\update\updspapi.dll
    + 2010-07-15 18:09 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979559\update\update.exe
    + 2010-07-15 18:09 . 2009-05-26 09:01 231288 c:\windows\$hf_mig$\KB979559\spuninst.exe
    + 2010-07-15 09:51 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979482\update\updspapi.dll
    + 2010-07-15 09:51 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979482\update\update.exe
    + 2010-07-15 09:51 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB979482\spuninst.exe
    + 2010-04-15 15:35 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
    + 2010-04-15 15:35 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979309\update\update.exe
    + 2010-04-15 15:35 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB979309\spuninst.exe
    + 2010-04-15 15:35 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978601\update\updspapi.dll
    + 2010-04-15 15:35 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978601\update\update.exe
    + 2010-04-15 15:35 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB978601\spuninst.exe
    + 2009-12-24 06:42 . 2009-12-24 06:42 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
    + 2010-05-13 11:34 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978542\update\updspapi.dll
    + 2010-05-13 11:34 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978542\update\update.exe
    + 2010-05-13 11:34 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978542\spuninst.exe
    + 2010-01-29 14:53 . 2010-01-29 14:53 691712 c:\windows\$hf_mig$\KB978542\SP3QFE\inetcomm.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978338\update\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978338\update\update.exe
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978338\spuninst.exe
    + 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
    + 2010-02-12 04:27 . 2010-02-12 04:27 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB977816\update\updspapi.dll
    + 2010-04-15 15:36 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB977816\update\update.exe
    + 2010-04-15 15:36 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB977816\spuninst.exe
    + 2010-04-19 14:48 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB976662-IE8\update\updspapi.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB976662-IE8\update\update.exe
    + 2010-04-19 14:48 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB976662-IE8\spuninst.exe
    + 2010-04-19 14:37 . 2009-12-09 05:51 726528 c:\windows\$hf_mig$\KB976662-IE8\SP3QFE\jscript.dll
    + 2010-07-15 18:09 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB975562\update\updspapi.dll
    + 2010-07-15 18:09 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB975562\update\update.exe
    + 2010-07-15 18:09 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB975562\spuninst.exe
    + 2010-04-19 14:48 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB971961-IE8\update\updspapi.dll
    + 2010-04-19 14:48 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB971961-IE8\update\update.exe
    + 2010-04-19 14:48 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971961-IE8\spuninst.exe
    + 2010-04-19 14:38 . 2009-06-22 06:47 726528 c:\windows\$hf_mig$\KB971961-IE8\SP3QFE\jscript.dll
    + 2010-07-15 09:21 . 2010-02-23 01:53 382840 c:\windows\$hf_mig$\KB2229593\update\updspapi.dll
    + 2010-07-15 09:21 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2229593\update\update.exe
    + 2010-07-15 09:21 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2229593\spuninst.exe
    + 2010-07-15 06:55 . 2010-06-14 14:38 744448 c:\windows\$hf_mig$\KB2229593\SP3QFE\helpsvc.exe
    + 2009-07-12 07:02 . 2009-07-12 07:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
    + 2009-07-12 07:02 . 2009-07-12 07:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
    - 2006-12-02 07:25 . 2006-12-02 07:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    + 2006-12-02 06:25 . 2006-12-02 06:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    - 2006-12-02 07:25 . 2006-12-02 07:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    + 2006-12-02 06:25 . 2006-12-02 06:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    - 2009-07-21 07:03 . 2009-07-21 07:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
    + 2009-07-21 06:03 . 2009-07-21 06:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
    - 2008-09-30 23:42 . 2008-09-30 23:42 1286152 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2008-09-30 22:42 . 2008-09-30 22:42 1286152 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
    + 2010-01-15 06:59 . 2010-04-20 02:47 3062048 c:\windows\system32\usbaaplrc.dll
    + 2006-03-18 11:09 . 2010-06-24 12:22 1210368 c:\windows\system32\urlmon.dll
    + 2010-08-20 21:34 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\XpsSvcs.dll
    + 2004-08-10 11:00 . 2010-07-27 06:30 8462336 c:\windows\system32\shell32.dll
    - 2004-08-10 11:00 . 2009-11-27 17:11 1291776 c:\windows\system32\quartz.dll
    + 2004-08-10 11:00 . 2010-02-05 18:27 1291776 c:\windows\system32\quartz.dll
    + 2005-03-30 01:21 . 2010-04-27 13:59 2146304 c:\windows\system32\ntoskrnl.exe
    + 2005-03-30 01:01 . 2010-04-27 13:05 2024448 c:\windows\system32\ntkrnlpa.exe
    - 2009-07-21 07:05 . 2009-07-21 07:05 1348432 c:\windows\system32\msxml4.dll
    + 2009-07-21 06:05 . 2009-07-21 06:05 1348432 c:\windows\system32\msxml4.dll
    + 2006-03-23 17:32 . 2010-06-24 12:22 5951488 c:\windows\system32\mshtml.dll
    + 2003-03-19 03:12 . 2003-03-19 03:12 1047552 c:\windows\system32\mfc71u.dll
    - 2003-03-19 04:12 . 2003-03-19 04:12 1047552 c:\windows\system32\mfc71u.dll
    - 2003-03-19 04:20 . 2003-03-19 04:20 1060864 c:\windows\system32\mfc71.dll
    + 2003-03-19 03:20 . 2003-03-19 03:20 1060864 c:\windows\system32\mfc71.dll
    + 2007-08-14 01:34 . 2010-06-24 12:21 1986560 c:\windows\system32\iertutil.dll
    + 2007-02-12 23:10 . 2009-02-06 11:07 3698584 c:\windows\system32\ieapfltr.dat
    + 2010-02-20 23:20 . 2010-02-20 23:20 1207144 c:\windows\system32\FM20.DLL
    + 2010-07-30 00:19 . 2010-04-20 02:47 3062048 c:\windows\system32\DRVSTORE\usbaapl_3822718F9E2E86C3752D30561ECA5A855A4A3F7D\usbaaplrc.dll
    + 2010-07-30 00:19 . 2010-04-20 02:29 1461992 c:\windows\system32\DRVSTORE\netaapl_3A00C5601D92D37DDCB0AE45518D6B42BE1588E6\wdfcoinstaller01009.dll
    + 2009-08-14 13:21 . 2010-06-23 13:44 1851904 c:\windows\system32\dllcache\win32k.sys
    + 2006-03-18 11:09 . 2010-06-24 12:22 1210368 c:\windows\system32\dllcache\urlmon.dll
    + 2008-06-17 19:02 . 2010-07-27 06:30 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2009-01-07 08:20 . 2009-01-07 08:20 1497088 c:\windows\system32\dllcache\shdocvw.dll
    - 2009-06-03 19:09 . 2009-11-27 17:11 1291776 c:\windows\system32\dllcache\quartz.dll
    + 2009-06-03 19:09 . 2010-02-05 18:27 1291776 c:\windows\system32\dllcache\quartz.dll
    + 2010-01-15 06:23 . 2010-04-28 02:25 2189952 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2010-01-15 06:23 . 2010-04-27 13:05 2024448 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2009-02-08 02:02 . 2010-04-27 13:05 2066816 c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2010-01-15 06:23 . 2010-04-27 13:59 2146304 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2004-08-10 11:00 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
    - 2004-08-10 11:00 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
    - 2010-01-15 06:19 . 2009-07-10 13:27 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2010-01-15 06:19 . 2010-01-29 15:01 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2006-03-23 17:32 . 2010-06-24 12:22 5951488 c:\windows\system32\dllcache\mshtml.dll
    + 2010-03-12 05:14 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2010-03-12 05:14 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
    + 2010-01-15 06:51 . 2010-06-24 12:21 1986560 c:\windows\system32\dllcache\iertutil.dll
    + 2010-01-15 06:51 . 2009-02-06 11:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
    + 2009-01-07 08:20 . 2009-01-07 08:20 1022976 c:\windows\system32\dllcache\browseui.dll
    + 2009-11-07 07:06 . 2009-11-07 07:06 1130824 c:\windows\system32\dfshim.dll
    + 2010-04-08 05:48 . 2010-04-08 05:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
    + 2010-03-23 11:32 . 2010-03-23 11:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2008-11-25 11:59 . 2008-11-25 11:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2010-03-23 11:32 . 2010-03-23 11:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2010-05-11 12:40 . 2010-05-11 12:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2009-08-08 06:51 . 2009-08-08 06:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2010-05-11 12:40 . 2010-05-11 12:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2008-05-28 08:35 . 2008-05-28 08:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-04-01 17:42 . 2010-04-01 17:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2010-04-01 17:42 . 2010-04-01 17:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2008-05-28 08:35 . 2008-05-28 08:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2008-05-28 07:48 . 2008-05-28 07:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2010-03-31 20:50 . 2010-03-31 20:50 2514944
     
  20. 2010/08/24
    FettyG

    FettyG Inactive Thread Starter

    Joined:
    2009/01/23
    Messages:
    57
    Likes Received:
    0
    + 2010-03-31 20:50 . 2010-03-31 20:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2010-03-31 20:50 . 2010-03-31 20:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2010-04-01 17:42 . 2010-04-01 17:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    - 2008-05-28 07:43 . 2008-05-28 07:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2010-06-20 08:01 . 2010-06-20 08:01 8040960 c:\windows\Installer\f7d18.msp
    + 2010-08-20 21:30 . 2010-08-20 21:30 1816064 c:\windows\Installer\b24721.msi
    + 2010-08-20 21:29 . 2010-08-20 21:29 1807872 c:\windows\Installer\b2471c.msi
    + 2010-08-20 21:29 . 2010-08-20 21:29 1809920 c:\windows\Installer\b24709.msi
    + 2010-08-20 21:29 . 2010-08-20 21:29 1797120 c:\windows\Installer\b24703.msi
    + 2010-08-20 21:28 . 2010-08-20 21:28 2112000 c:\windows\Installer\b246ea.msi
    + 2010-08-20 21:28 . 2010-08-20 21:28 1798656 c:\windows\Installer\b246e5.msi
    + 2010-08-20 21:27 . 2010-08-20 21:27 1797120 c:\windows\Installer\b246e0.msi
    + 2010-08-20 21:27 . 2010-08-20 21:27 2859520 c:\windows\Installer\b246d6.msi
    + 2009-11-09 06:25 . 2009-11-09 06:25 1935360 c:\windows\Installer\77b9ca.msp
    + 2010-04-12 04:17 . 2010-04-12 04:17 2607104 c:\windows\Installer\77b9a2.msp
    + 2010-04-12 04:17 . 2010-04-12 04:17 4210688 c:\windows\Installer\77b9a1.msp
    + 2010-07-17 02:01 . 2010-07-17 02:01 1059840 c:\windows\Installer\172d5a1.msi
    + 2010-07-30 00:36 . 2010-07-30 00:36 5731328 c:\windows\Installer\123d28d.msi
    + 2010-07-30 00:27 . 2010-07-30 00:27 9472000 c:\windows\Installer\123caf2.msi
    + 2010-07-30 00:19 . 2010-07-30 00:19 3089408 c:\windows\Installer\123c373.msi
    + 2010-07-30 00:17 . 2010-07-30 00:17 1984000 c:\windows\Installer\123c336.msi
    + 2010-08-20 21:34 . 2010-08-20 21:34 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 4520288 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
    + 2010-08-20 21:34 . 2010-08-20 21:34 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-12-22 01:29 . 2009-12-22 01:29 2409880 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\rt3d.dll
    + 2009-12-22 06:31 . 2009-12-22 06:31 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AGM.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 1209344 c:\windows\ie8updates\KB982381-IE8\urlmon.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 5944832 c:\windows\ie8updates\KB982381-IE8\mshtml.dll
    + 2010-07-15 09:09 . 2010-02-25 06:24 1985536 c:\windows\ie8updates\KB982381-IE8\iertutil.dll
    + 2010-04-18 15:04 . 2009-03-07 18:34 1206784 c:\windows\ie8updates\KB980182-IE8\urlmon.dll
    + 2010-04-18 15:04 . 2009-03-07 18:41 5937152 c:\windows\ie8updates\KB980182-IE8\mshtml.dll
    + 2010-04-18 15:04 . 2009-03-07 18:32 1985024 c:\windows\ie8updates\KB980182-IE8\iertutil.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 1209344 c:\windows\ie8updates\KB2183461-IE8\urlmon.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 5950976 c:\windows\ie8updates\KB2183461-IE8\mshtml.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 1985536 c:\windows\ie8updates\KB2183461-IE8\iertutil.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 1168384 c:\windows\ie8\urlmon.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 3599872 c:\windows\ie8\mshtml.dll
    + 2010-04-18 14:59 . 2010-03-11 12:38 6067200 c:\windows\ie8\ieframe.dll
    + 2010-04-18 14:59 . 2009-06-29 08:33 2452872 c:\windows\ie8\ieapfltr.dat
    + 2010-04-01 05:01 . 2010-01-05 10:00 1168384 c:\windows\ie7updates\KB980182-IE7\urlmon.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 3599360 c:\windows\ie7updates\KB980182-IE7\mshtml.dll
    + 2010-04-01 05:01 . 2010-01-05 10:00 6067200 c:\windows\ie7updates\KB980182-IE7\ieframe.dll
    + 2010-01-15 06:23 . 2010-04-28 02:25 2189952 c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2010-01-15 06:23 . 2010-04-27 13:05 2024448 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2009-02-08 02:02 . 2010-04-27 13:05 2066816 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2010-01-15 06:23 . 2010-04-27 13:59 2146304 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2010-07-15 18:11 . 2010-07-15 18:11 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_e5166062\System.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_c1082fca\System.dll
    + 2010-07-15 18:17 . 2010-07-15 18:17 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_aa4ffc80\System.Xml.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_14957009\System.Xml.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b6ef2525\System.Windows.Forms.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_92d533ef\System.Windows.Forms.dll
    + 2010-07-15 18:17 . 2010-07-15 18:17 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_d6657916\System.Drawing.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_c503bc79\System.Design.dll
    + 2010-07-15 18:17 . 2010-07-15 18:17 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b45df414\System.Design.dll
    + 2010-07-15 18:11 . 2010-07-15 18:11 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_6baa45a3\mscorlib.dll
    + 2010-07-15 18:17 . 2010-07-15 18:17 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_689e8cdd\mscorlib.dll
    + 2010-07-15 18:12 . 2010-07-15 18:12 2027520 c:\windows\assembly\NativeImages1_v1.0.3705\System.Xml\1.0.3300.0__b77a5c561934e089_c7b01dea\System.Xml.dll
    + 2010-07-15 18:12 . 2010-07-15 18:12 2953216 c:\windows\assembly\NativeImages1_v1.0.3705\System.Windows.Forms\1.0.3300.0__b77a5c561934e089_f29383f8\System.Windows.Forms.dll
    + 2010-07-15 18:12 . 2010-07-15 18:12 1454080 c:\windows\assembly\NativeImages1_v1.0.3705\System.Design\1.0.3300.0__b03f5f7f11d50a3a_c37727ff\System.Design.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
    + 2010-08-12 22:26 . 2010-08-12 22:26 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\60b3c9a63b2065a6952d16256545c25d\System.WorkflowServices.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5cc2a23ce8ac371c7a97b5e542ee27ed\System.Workflow.Runtime.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\c0aabf67e7ef98dc10c3e174c136731b\System.Workflow.ComponentModel.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\66682c8a064608ba4ffd0463cf09aef9\System.Workflow.Activities.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\2d662564b8d9c57a34c588cc2970902b\System.Web.Services.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\9b455702c9b7b02c5708406f87986751\System.Web.Mobile.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\49c7a1c78ed9502ba97c11e6bd993f63\System.Web.Extensions.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\f5790a1b7b41e7b8d05f01b549c80f39\System.ServiceModel.Web.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 4949504 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\cf2f92b2b626f7e53e80146b17bd7bed\System.Management.Automation.ni.dll
    + 2010-08-12 22:40 . 2010-08-12 22:40 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\0885f31c21b796465fde6297dba20981\System.IdentityModel.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\23cf0498f2ebe4c8ffa5cc79efca2dc5\System.Data.Services.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll
    + 2010-08-12 22:26 . 2010-08-12 22:26 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
    + 2010-08-12 22:24 . 2010-08-12 22:24 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
    + 2010-08-20 21:39 . 2010-08-20 21:39 1301504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\55b46ce396b0d784da786dca08cb6ab0\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
    + 2010-08-12 22:42 . 2010-08-12 22:42 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\9732a7c993055f82040642966db07ccf\Microsoft.VisualBasic.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
    + 2010-08-20 21:38 . 2010-08-20 21:38 1354240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\c3abf45e7df765ff52eedf687d432ed2\Microsoft.Office.Tools.Excel.v9.0.ni.dll
    + 2010-08-12 22:43 . 2010-08-12 22:43 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
    + 2010-07-15 09:16 . 2010-07-15 09:16 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2010-08-12 22:18 . 2010-08-12 22:18 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2010-07-15 09:06 . 2010-07-15 09:06 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2010-04-18 23:14 . 2010-04-18 23:14 1564672 c:\windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2010-07-15 09:16 . 2010-07-15 09:16 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 1550200 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-08-12 22:18 . 2010-08-12 22:18 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2010-01-16 22:33 . 2010-01-16 22:33 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2010-07-15 09:16 . 2010-07-15 09:16 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2010-01-16 09:31 . 2010-01-16 09:31 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2010-08-12 22:19 . 2010-08-12 22:19 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2010-07-17 01:57 . 2010-07-17 01:57 1034752 c:\windows\assembly\GAC_32\Microsoft.Xna.Framework\3.1.0.0__6d5c3888ef60e27d\Microsoft.Xna.Framework.dll
    + 2010-07-15 18:10 . 2010-07-15 18:10 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2010-01-15 06:45 . 2010-01-15 06:45 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2010-01-15 06:45 . 2010-01-15 06:45 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-07-15 18:10 . 2010-07-15 18:10 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2010-08-20 21:31 . 2010-08-20 21:31 8007680 c:\windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
    + 2010-04-15 15:38 . 2009-12-08 19:26 2145280 c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
    + 2010-04-15 15:38 . 2009-12-08 18:43 2023936 c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
    + 2010-04-15 15:38 . 2009-12-08 18:43 2023936 c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
    + 2010-04-15 15:38 . 2009-12-08 19:26 2145280 c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
    + 2010-07-15 18:09 . 2009-08-14 13:21 1850624 c:\windows\$NtUninstallKB979559$\win32k.sys
    + 2010-05-13 11:34 . 2009-07-10 13:27 1315328 c:\windows\$NtUninstallKB978542$\msoe.dll
    + 2010-07-15 18:09 . 2009-11-27 17:11 1291776 c:\windows\$NtUninstallKB975562$\quartz.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 1209856 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\urlmon.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 5953024 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
    + 2010-07-14 20:45 . 2010-05-06 10:36 1986048 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\iertutil.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 1209856 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\urlmon.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 5946880 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 1986048 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\iertutil.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 1171968 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\urlmon.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 3602944 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 6070784 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieframe.dll
    + 2010-04-01 04:39 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieapfltr.dat
    + 2010-04-15 10:11 . 2010-02-16 12:52 2190080 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    + 2010-04-15 10:11 . 2010-02-16 12:12 2024448 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
    + 2010-04-15 10:11 . 2010-02-16 12:12 2066944 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    + 2010-04-15 10:11 . 2010-02-16 12:50 2146304 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
    + 2010-05-02 06:34 . 2010-05-02 06:34 1860352 c:\windows\$hf_mig$\KB979559\SP3QFE\win32k.sys
    + 2010-01-29 14:53 . 2010-01-29 14:53 1315328 c:\windows\$hf_mig$\KB978542\SP3QFE\msoe.dll
    + 2010-02-05 18:29 . 2010-02-05 18:29 1291776 c:\windows\$hf_mig$\KB975562\SP3QFE\quartz.dll
    + 2010-01-15 06:48 . 2010-08-03 18:09 35962312 c:\windows\system32\MRT.exe
    + 2007-08-14 01:54 . 2010-06-24 23:51 11077120 c:\windows\system32\ieframe.dll
    + 2010-01-15 06:51 . 2010-06-24 23:51 11077120 c:\windows\system32\dllcache\ieframe.dll
    + 2010-04-03 01:29 . 2010-04-03 01:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
    + 2010-08-13 18:09 . 2010-08-13 18:09 12263936 c:\windows\Installer\cea07e.msp
    + 2010-08-20 21:34 . 2010-08-20 21:34 26600960 c:\windows\Installer\b2474e.msi
    + 2010-03-31 07:23 . 2010-03-31 07:23 15638528 c:\windows\Installer\77b9d6.msp
    + 2010-04-12 04:17 . 2010-04-12 04:17 14599680 c:\windows\Installer\77b9b0.msp
    + 2010-08-17 19:23 . 2010-08-17 19:23 12248064 c:\windows\Installer\5992d.msi
    + 2010-04-02 18:30 . 2010-04-02 18:30 17456640 c:\windows\Installer\4030a4.msp
    + 2010-05-19 19:08 . 2010-05-19 19:08 11408896 c:\windows\Installer\2ab225.msp
    + 2010-04-04 06:54 . 2010-04-04 06:54 11850240 c:\windows\Installer\1222d8a.msp
    + 2009-12-22 06:21 . 2009-12-22 06:21 20436408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.dll
    + 2010-07-15 09:09 . 2010-02-25 01:54 11070976 c:\windows\ie8updates\KB982381-IE8\ieframe.dll
    + 2010-04-18 15:04 . 2009-03-07 18:39 11063808 c:\windows\ie8updates\KB980182-IE8\ieframe.dll
    + 2010-08-12 22:16 . 2010-05-06 10:41 11076096 c:\windows\ie8updates\KB2183461-IE8\ieframe.dll
    + 2010-07-15 09:49 . 2010-07-15 09:49 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B3.tmp\System.ServiceModel.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 11798016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\411a627d6f5cb83509332253406988e5\System.Web.ni.dll
    + 2010-08-12 22:41 . 2010-08-12 22:41 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\f523a69e7c93ee4f245c996eac4b3a57\System.ServiceModel.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\b307acf63075b997d02a97a7492d0d9c\System.Design.ni.dll
    + 2010-08-12 22:23 . 2010-08-12 22:23 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
    + 2010-08-12 22:22 . 2010-08-12 22:22 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
    + 2010-08-12 22:21 . 2010-08-12 22:21 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
    + 2010-05-06 22:06 . 2010-05-06 22:06 11078144 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\ieframe.dll
    + 2010-04-18 14:57 . 2010-02-25 06:19 11073024 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
    2010-02-28 08:20 561552 ----a-w- c:\progra~1\MICROS~2\Office14\URLREDIR.DLL

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray "= "c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
    "NvCplDaemon "= "c:\windows\system32\NvCpl.dll" [2006-03-22 7557120]
    "NVHotkey "= "nvHotkey.dll" [2006-03-22 73728]
    "SigmatelSysTrayApp "= "stsystra.exe" [2006-03-25 282624]
    "IntelliPoint "= "c:\program files\Microsoft IntelliPoint\ipoint.exe" [2009-06-01 1468296]
    "itype "= "c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-11-12 1505144]
    "SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" [2010-03-19 421888]
    "BDAgent "= "c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2010-08-17 782336]
    "BitDefender Antiphishing Helper "= "c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-02-23 69632]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-1-18 113664]

    [HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
    path=c:\documents and settings\Administrator\Start Menu\Programs\Startup\LimeWire On Startup.lnk
    backup=c:\windows\pss\LimeWire On Startup.lnkStartup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
    backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
    c:\windows\system32\dumprep 0 -k [X]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
    2010-03-05 15:32 1135912 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
    2007-10-15 04:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
    2007-08-22 23:31 80896 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelWireless]
    2005-12-28 18:56 602182 ----a-w- c:\program files\Intel\Wireless\Bin\iFrmewrk.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelZeroConfig]
    2005-12-28 18:55 667718 ----a-w- c:\program files\Intel\Wireless\Bin\ZCfgSvc.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2010-07-21 21:53 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
    2009-03-17 21:24 157552 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
    2006-03-22 03:03 1519616 ----a-w- c:\windows\system32\nwiz.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2010-03-19 04:16 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2010-02-18 00:43 248040 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall "= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "c:\\Program Files\\Ventrilo\\Ventrilo.exe "=
    "c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe "=
    "c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe "=
    "c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe "=
    "c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe "=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe "=
    "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe "=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe "=
    "c:\\Program Files\\iTunes\\iTunes.exe "=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe "=
    "c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE "=

    R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [10/6/2008 6:16 PM 82696]
    R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [9/18/2008 12:09 PM 111112]
    R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [2/12/2009 4:52 PM 104456]
    R3 MSHUSBVideo;NX6000/NX3000/VX5000/VX5500/VX2000/VX7000 Filter Driver;c:\windows\system32\drivers\nx6000.sys [1/15/2010 6:04 PM 30560]
    S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [1/20/2009 7:16 PM 172032]
    S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [1/9/2010 9:37 PM 4640000]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    getPlusHelper REG_MULTI_SZ getPlusHelper
    bdx REG_MULTI_SZ scan
    .
    Contents of the 'Scheduled Tasks' folder

    2010-08-20 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    .
    - - - - ORPHANS REMOVED - - - -

    ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-08-23 20:41
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-1417001333-602162358-682003330-500\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (Administrator)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977 "=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,68,b6,ac,69,82,2f,66,43,85,84,db,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81 "=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,68,b6,ac,69,82,2f,66,43,85,84,db,\

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @= "FlashBroker "
    "LocalizedString "= "@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101 "

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @= "c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe "

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @= "IFlashBroker4 "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @= "{00020424-0000-0000-C000-000000000046} "

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
    "Version "= "1.0 "
    .
    Completion time: 2010-08-23 20:44:26
    ComboFix-quarantined-files.txt 2010-08-24 02:44
    ComboFix2.txt 2010-03-21 05:27

    Pre-Run: 26,132,692,992 bytes free
    Post-Run: 27,871,338,496 bytes free
     
  21. 2010/08/24
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    FCopy::
    c:\windows\ServicePackFiles\i386\atapi.sys | c:\windows\system32\drivers\atapi.sys
    c:\windows\ServicePackFiles\i386\aec.sys | c:\windows\system32\drivers\aec.sys
    

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.