1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Can not connect to internet after virus/malware removal

Discussion in 'Virus & Other Malware Removal' started by MrWmnHtr, May 20, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    Nothing with malware. But I just discovered that when I use one of the two front mounted USB ports. It gave me a Delayed Write Failed message. I removed the flash drive and tried the other one it worked fine. The one that failed now says windows does not reconize the device. Its the same flash drive I have been using for these repairs. Bad Socket?
     
  2. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    Can you upload a screen shot of that message please?
     
  3. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    I couldn't get it to bring up the two errors again.

    (I Googled Delayed Write Failed and looked for the exact message I had seen and this is it: Windows - Delayed Write Failed : Windows was unable to save all the data for the file [name_of_the_file_you_want_to_save].
    The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
    )

    (The 2nd error above is the same message as the 4th error below.)

    So I restarted the computer, inserted the flash drive and got a 3rd error message that is in this attachment. I hit Print Screen and pasted into Paint. Saved to desk top and tried to drag and drop onto the Flash Drive. A 4th error message said that it couldn't copy the file because the path was unknown. But the file is on the flash drive.

    I transfered the flash drive to my computer and I got a message that the disk needed to be checked so I let check and it said there were no errors. I tried to open the screenshot and it said it could not open cuz it may be corrupted.

    I went back to the computer we are working with inserted the flash drive into the problem port and the Safely Remove Hardware Icon started flashing on the taskbar. I opened My Computer and the Flash Drive was flashing on and off there also. I took a screenshot of this (4th) error. I removed the Flash drive and inserted it into one of the rear ports that I have been using. I transfered the screenshots (3rd & 4th errors) to the flash drive. I'm attaching them here. (USB.jpg is the 3rd error. USb2.jpg is the 2nd and 4th error message/the flashing error.)
     

    Attached Files:

    • usb.jpg
      usb.jpg
      File size:
      284.3 KB
      Views:
      6
    • usb2.jpg
      usb2.jpg
      File size:
      284.3 KB
      Views:
      5
  4. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    Ok i got confused. The 2nd and 4th errors are NOT the same. I stated what the 2nd error message said "couldn't copy the file because the path was unknown." The 4th error is as in the attachment USB2.jpg. Sorry.
     
  5. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    That could be indicative of an infection. Perhaps the flash drive is infected. Are you experiencing any symptoms like no shortcuts in the start menu or if you open C:\Windows\System32 it appears to be empty?

    Let's check the Event Viewer to see if there are any genuine errors that were generated.

    Please go to Start - Run - type in eventvwr.msc to open the event viewer. Look under both "Application" and "System" for recent (the last 48 hours or so) errors (shown in red) and if found, do this for each one.

    Double-click the error to open it up and then click on the icon that looks like two pieces of paper. This will copy the full error. Then "paste" the error into Notepad. Do this for each one until you have them all listed in Notepad and then copy and paste the list in a reply here please.
     
  6. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    I got a Unicode Format Error when I tried to save the notebook file. Attached.

    APPLICATION ERRORS

    Event Type: Error
    Event Source: crypt32
    Event Category: None
    Event ID: 11
    Date: 6/2/2012
    Time: 1:45:30 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Failed extract of third-party root list from auto

    update cab at:

    <http://www.download.windowsupdate.com/msdownload/updat

    e/v3/static/trustedr/en/authrootstl.cab> with error: A

    required certificate is not within its validity period

    when verifying against the current system clock or the

    timestamp in the signed file.


    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: crypt32
    Event Category: None
    Event ID: 11
    Date: 6/2/2012
    Time: 1:45:30 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Failed extract of third-party root list from auto

    update cab at:

    <http://www.download.windowsupdate.com/msdownload/updat

    e/v3/static/trustedr/en/authrootstl.cab> with error: A

    required certificate is not within its validity period

    when verifying against the current system clock or the

    timestamp in the signed file.


    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: crypt32
    Event Category: None
    Event ID: 11
    Date: 6/2/2012
    Time: 1:45:30 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Failed extract of third-party root list from auto

    update cab at:

    <http://www.download.windowsupdate.com/msdownload/updat

    e/v3/static/trustedr/en/authrootstl.cab> with error: A

    required certificate is not within its validity period

    when verifying against the current system clock or the

    timestamp in the signed file.


    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.



    Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3001
    Date: 6/1/2012
    Time: 8:54:14 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The performance counter name string value in the

    registry is incorrectly formatted. The bogus string is

    9008, the bogus index value is the first DWORD in Data

    section while the last valid index values are the

    second and third DWORD in Data section.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 30 23 00 00 2e 23 00 00 0#...#..
    0008: 2f 23 00 00 97 02 00 00 /#..&#151;...



    Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3011
    Date: 6/1/2012
    Time: 8:54:14 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Unloading the performance counter strings for service

    aspnet_state (ASP.NET State Service) failed. The Error

    code is the first DWORD in Data section.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: f2 03 00 00 3b 07 00 00 ò...;...


    Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3001
    Date: 6/1/2012
    Time: 8:54:14 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The performance counter name string value in the

    registry is incorrectly formatted. The bogus string is

    9008, the bogus index value is the first DWORD in Data

    section while the last valid index values are the

    second and third DWORD in Data section.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 30 23 00 00 2e 23 00 00 0#...#..
    0008: 2f 23 00 00 cf 01 00 00 /#..Ï...


    Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3011
    Date: 6/1/2012
    Time: 8:54:12 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Unloading the performance counter strings for service

    ASP.NET_2.0.50727 (ASP.NET_2.0.50727) failed. The Error

    code is the first DWORD in Data section.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: f2 03 00 00 3b 07 00 00 ò...;...


    Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3001
    Date: 6/1/2012
    Time: 8:54:12 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The performance counter name string value in the

    registry is incorrectly formatted. The bogus string is

    9008, the bogus index value is the first DWORD in Data

    section while the last valid index values are the

    second and third DWORD in Data section.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 30 23 00 00 2e 23 00 00 0#...#..
    0008: 2f 23 00 00 cf 01 00 00 /#..Ï...


    Event Type: Error
    Event Source: HotFixInstaller
    Event Category: None
    Event ID: 5000
    Date: 6/1/2012
    Time: 8:37:34 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    EventType visualstudio8setup, P1 microsoft .net

    framework 2.0-kb2604092, P2 1033, P3 1618, P4 msi, P5

    f, P6 9.0.40215.0, P7 install, P8 x86, P9 xp, P10 0.

    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 76 00 69 00 73 00 75 00 v.i.s.u.
    0008: 61 00 6c 00 73 00 74 00 a.l.s.t.
    0010: 75 00 64 00 69 00 6f 00 u.d.i.o.
    0018: 38 00 73 00 65 00 74 00 8.s.e.t.
    0020: 75 00 70 00 2c 00 20 00 u.p.,. .
    0028: 6d 00 69 00 63 00 72 00 m.i.c.r.
    0030: 6f 00 73 00 6f 00 66 00 o.s.o.f.
    0038: 74 00 20 00 2e 00 6e 00 t. ...n.
    0040: 65 00 74 00 20 00 66 00 e.t. .f.
    0048: 72 00 61 00 6d 00 65 00 r.a.m.e.
    0050: 77 00 6f 00 72 00 6b 00 w.o.r.k.
    0058: 20 00 32 00 2e 00 30 00 .2...0.
    0060: 2d 00 6b 00 62 00 32 00 -.k.b.2.
    0068: 36 00 30 00 34 00 30 00 6.0.4.0.
    0070: 39 00 32 00 2c 00 20 00 9.2.,. .
    0078: 31 00 30 00 33 00 33 00 1.0.3.3.
    0080: 2c 00 20 00 31 00 36 00 ,. .1.6.
    0088: 31 00 38 00 2c 00 20 00 1.8.,. .
    0090: 6d 00 73 00 69 00 2c 00 m.s.i.,.
    0098: 20 00 66 00 2c 00 20 00 .f.,. .
    00a0: 39 00 2e 00 30 00 2e 00 9...0...
    00a8: 34 00 30 00 32 00 31 00 4.0.2.1.
    00b0: 35 00 2e 00 30 00 2c 00 5...0.,.
    00b8: 20 00 69 00 6e 00 73 00 .i.n.s.
    00c0: 74 00 61 00 6c 00 6c 00 t.a.l.l.
    00c8: 2c 00 20 00 78 00 38 00 ,. .x.8.
    00d0: 36 00 2c 00 20 00 78 00 6.,. .x.
    00d8: 70 00 20 00 30 00 0d 00 p. .0...
    00e0: 0a 00 ..


    Event Type: Error
    Event Source: HotFixInstaller
    Event Category: None
    Event ID: 5000
    Date: 6/1/2012
    Time: 8:35:59 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    EventType visualstudio8setup, P1 microsoft .net

    framework 3.5-kb2657424, P2 1033, P3 1618, P4 msi, P5

    f, P6 9.0.40215.0, P7 install, P8 x86, P9 xp, P10 0.

    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 76 00 69 00 73 00 75 00 v.i.s.u.
    0008: 61 00 6c 00 73 00 74 00 a.l.s.t.
    0010: 75 00 64 00 69 00 6f 00 u.d.i.o.
    0018: 38 00 73 00 65 00 74 00 8.s.e.t.
    0020: 75 00 70 00 2c 00 20 00 u.p.,. .
    0028: 6d 00 69 00 63 00 72 00 m.i.c.r.
    0030: 6f 00 73 00 6f 00 66 00 o.s.o.f.
    0038: 74 00 20 00 2e 00 6e 00 t. ...n.
    0040: 65 00 74 00 20 00 66 00 e.t. .f.
    0048: 72 00 61 00 6d 00 65 00 r.a.m.e.
    0050: 77 00 6f 00 72 00 6b 00 w.o.r.k.
    0058: 20 00 33 00 2e 00 35 00 .3...5.
    0060: 2d 00 6b 00 62 00 32 00 -.k.b.2.
    0068: 36 00 35 00 37 00 34 00 6.5.7.4.
    0070: 32 00 34 00 2c 00 20 00 2.4.,. .
    0078: 31 00 30 00 33 00 33 00 1.0.3.3.
    0080: 2c 00 20 00 31 00 36 00 ,. .1.6.
    0088: 31 00 38 00 2c 00 20 00 1.8.,. .
    0090: 6d 00 73 00 69 00 2c 00 m.s.i.,.
    0098: 20 00 66 00 2c 00 20 00 .f.,. .
    00a0: 39 00 2e 00 30 00 2e 00 9...0...
    00a8: 34 00 30 00 32 00 31 00 4.0.2.1.
    00b0: 35 00 2e 00 30 00 2c 00 5...0.,.
    00b8: 20 00 69 00 6e 00 73 00 .i.n.s.
    00c0: 74 00 61 00 6c 00 6c 00 t.a.l.l.
    00c8: 2c 00 20 00 78 00 38 00 ,. .x.8.
    00d0: 36 00 2c 00 20 00 78 00 6.,. .x.
    00d8: 70 00 20 00 30 00 0d 00 p. .0...
    00e0: 0a 00 ..


    Event Type: Error
    Event Source: HotFixInstaller
    Event Category: None
    Event ID: 5000
    Date: 6/1/2012
    Time: 8:35:04 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    EventType visualstudio8setup, P1 microsoft .net

    framework 2.0-kb2656352, P2 1033, P3 1618, P4 msi, P5

    f, P6 9.0.40215.0, P7 install, P8 x86, P9 xp, P10 0.

    For more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 76 00 69 00 73 00 75 00 v.i.s.u.
    0008: 61 00 6c 00 73 00 74 00 a.l.s.t.
    0010: 75 00 64 00 69 00 6f 00 u.d.i.o.
    0018: 38 00 73 00 65 00 74 00 8.s.e.t.
    0020: 75 00 70 00 2c 00 20 00 u.p.,. .
    0028: 6d 00 69 00 63 00 72 00 m.i.c.r.
    0030: 6f 00 73 00 6f 00 66 00 o.s.o.f.
    0038: 74 00 20 00 2e 00 6e 00 t. ...n.
    0040: 65 00 74 00 20 00 66 00 e.t. .f.
    0048: 72 00 61 00 6d 00 65 00 r.a.m.e.
    0050: 77 00 6f 00 72 00 6b 00 w.o.r.k.
    0058: 20 00 32 00 2e 00 30 00 .2...0.
    0060: 2d 00 6b 00 62 00 32 00 -.k.b.2.
    0068: 36 00 35 00 36 00 33 00 6.5.6.3.
    0070: 35 00 32 00 2c 00 20 00 5.2.,. .
    0078: 31 00 30 00 33 00 33 00 1.0.3.3.
    0080: 2c 00 20 00 31 00 36 00 ,. .1.6.
    0088: 31 00 38 00 2c 00 20 00 1.8.,. .
    0090: 6d 00 73 00 69 00 2c 00 m.s.i.,.
    0098: 20 00 66 00 2c 00 20 00 .f.,. .
    00a0: 39 00 2e 00 30 00 2e 00 9...0...
    00a8: 34 00 30 00 32 00 31 00 4.0.2.1.
    00b0: 35 00 2e 00 30 00 2c 00 5...0.,.
    00b8: 20 00 69 00 6e 00 73 00 .i.n.s.
    00c0: 74 00 61 00 6c 00 6c 00 t.a.l.l.
    00c8: 2c 00 20 00 78 00 38 00 ,. .x.8.
    00d0: 36 00 2c 00 20 00 78 00 6.,. .x.
    00d8: 70 00 20 00 30 00 0d 00 p. .0...
    00e0: 0a 00 ..


    SYSTEM ERRORS

    Event Type: Error
    Event Source: DCOM
    Event Category: None
    Event ID: 10005
    Date: 6/3/2012
    Time: 2:52:00 AM
    User: NT AUTHORITY\SYSTEM
    Computer: JEFF-2E0A22FF48
    Description:
    DCOM got error "The service cannot be started, either

    because it is disabled or because it has no enabled

    devices associated with it. " attempting to start the

    service gupdate with arguments "/comsvc" in order to

    run the server:
    {4EB61BAC-A3B6-4760-9581-655041EF4D69}

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: DCOM
    Event Category: None
    Event ID: 10005
    Date: 6/2/2012
    Time: 9:52:00 PM
    User: NT AUTHORITY\SYSTEM
    Computer: JEFF-2E0A22FF48
    Description:
    DCOM got error "The service cannot be started, either

    because it is disabled or because it has no enabled

    devices associated with it. " attempting to start the

    service gupdate with arguments "/comsvc" in order to

    run the server:
    {4EB61BAC-A3B6-4760-9581-655041EF4D69}

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 7:34:09 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Bdfsdrv service terminated with the following

    error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/2/2012
    Time: 7:34:09 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: DCOM
    Event Category: None
    Event ID: 10005
    Date: 6/2/2012
    Time: 4:52:00 PM
    User: NT AUTHORITY\SYSTEM
    Computer: JEFF-2E0A22FF48
    Description:
    DCOM got error "The service cannot be started, either

    because it is disabled or because it has no enabled

    devices associated with it. " attempting to start the

    service gupdate with arguments "/comsvc" in order to

    run the server:
    {4EB61BAC-A3B6-4760-9581-655041EF4D69}

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 2:46:13 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Bdfsdrv service terminated with the following

    error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/2/2012
    Time: 2:46:13 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:53 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:53 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:52 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:51 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:51 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:51 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:51 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.

    You can see the pattern here there are 9 or 10 of these

    every second for the next 10 seconds. I will post the

    first one next. This is probably the flashing Safely

    Remove Hardware Icon. (Desending Order)


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 1:44:42 PM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Application Management service terminated with the

    following error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/2/2012
    Time: 10:52:52 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Bdfsdrv service terminated with the following

    error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/2/2012
    Time: 10:52:52 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/1/2012
    Time: 9:11:54 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Bdfsdrv service terminated with the following

    error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/1/2012
    Time: 9:11:54 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.

    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/1/2012
    Time: 9:11:54 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Windows Update Agent
    Event Category: Installation
    Event ID: 20
    Date: 6/1/2012
    Time: 8:37:40 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Installation Failure: Windows failed to install the

    following update with error 0x80070643: Security Update

    for Microsoft .NET Framework 2.0 SP2 on Windows Server

    2003 and Windows XP x86 (KB2604092).

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 57 69 6e 33 32 48 52 65 Win32HRe
    0008: 73 75 6c 74 3d 30 78 38 sult=0x8
    0010: 30 30 37 30 36 34 33 20 0070643
    0018: 55 70 64 61 74 65 49 44 UpdateID
    0020: 3d 7b 33 45 39 35 32 42 ={3E952B
    0028: 43 35 2d 41 41 44 32 2d C5-AAD2-
    0030: 34 31 31 37 2d 41 42 36 4117-AB6
    0038: 35 2d 41 34 32 46 39 36 5-A42F96
    0040: 32 39 38 38 36 38 7d 20 298868}
    0048: 52 65 76 69 73 69 6f 6e Revision
    0050: 4e 75 6d 62 65 72 3d 31 Number=1
    0058: 30 35 20 00 05 .


    Event Type: Error
    Event Source: Windows Update Agent
    Event Category: Installation
    Event ID: 20
    Date: 6/1/2012
    Time: 8:36:05 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Installation Failure: Windows failed to install the

    following update with error 0x80070643: Security Update

    for Microsoft .NET Framework 3.5 SP1 on Windows XP,

    Server 2003, Vista, Server 2008 x86 (KB2657424).

    For

    more information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 57 69 6e 33 32 48 52 65 Win32HRe
    0008: 73 75 6c 74 3d 30 78 38 sult=0x8
    0010: 30 30 37 30 36 34 33 20 0070643
    0018: 55 70 64 61 74 65 49 44 UpdateID
    0020: 3d 7b 30 36 36 30 42 33 ={0660B3
    0028: 39 39 2d 46 37 34 34 2d 99-F744-
    0030: 34 42 31 36 2d 41 39 43 4B16-A9C
    0038: 46 2d 46 43 38 30 45 31 F-FC80E1
    0040: 46 30 34 30 46 33 7d 20 F040F3}
    0048: 52 65 76 69 73 69 6f 6e Revision
    0050: 4e 75 6d 62 65 72 3d 31 Number=1
    0058: 30 34 20 00 04 .


    Event Type: Error
    Event Source: Windows Update Agent
    Event Category: Installation
    Event ID: 20
    Date: 6/1/2012
    Time: 8:35:46 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    Installation Failure: Windows failed to install the

    following update with error 0x80070643: Security Update

    for Microsoft .NET Framework 2.0 SP2 on Windows Server

    2003 and Windows XP x86 (KB2656352).

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 57 69 6e 33 32 48 52 65 Win32HRe
    0008: 73 75 6c 74 3d 30 78 38 sult=0x8
    0010: 30 30 37 30 36 34 33 20 0070643
    0018: 55 70 64 61 74 65 49 44 UpdateID
    0020: 3d 7b 38 39 31 34 44 31 ={8914D1
    0028: 38 37 2d 44 30 43 37 2d 87-D0C7-
    0030: 34 43 37 45 2d 39 38 32 4C7E-982
    0038: 34 2d 43 46 43 46 46 34 4-CFCFF4
    0040: 43 38 33 37 37 44 7d 20 C8377D}
    0048: 52 65 76 69 73 69 6f 6e Revision
    0050: 4e 75 6d 62 65 72 3d 31 Number=1
    0058: 30 35 20 00 05 .


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 6/1/2012
    Time: 8:26:39 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Bdfsdrv service terminated with the following

    error:
    The specified module could not be found.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.


    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7000
    Date: 6/1/2012
    Time: 8:26:39 AM
    User: N/A
    Computer: JEFF-2E0A22FF48
    Description:
    The Zune Bus Enumerator Driver service failed to start

    due to the following error:
    The system cannot find the file specified.

    For more

    information, see Help and Support Center at

    http://go.microsoft.com/fwlink/events.asp.
     

    Attached Files:

  7. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    The Application Management error is a known issue on XP Home. We just need to disable that service so please do the following:

    Go to Start - Run - type in services.msc and click Enter.

    Double-click on the Application Management service and then change the startup type to "Disabled" then click "Apply".

    Do the same for the Bdfsdrv service.


    Please scan with DDS again and post the new logs.
     
  8. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_32
    Run by Jeff Miller at 16:47:40 on 2012-06-03
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.1627 [GMT -7:00]
    .
    AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
    C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\WINDOWS\System32\svchost.exe -k HPZ12
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AVAST Software\Avast\avastUI.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.myqwest.com/
    uURLSearchHooks: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users.windows\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
    BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\pc tools security\bdt\PCTBrowserDefender.dll
    TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
    mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
    dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10x_ActiveX.exe -update activex
    uPolicies-explorer: NoInstrumentation = 1 (0x1)
    IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\jeff miller\start menu\programs\imvu\Run IMVU.lnk
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\npjpi160_32.dll
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - hxxps://webdl.symantec.com/activex/symdlmgr.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: DhcpNameServer = 192.168.0.1 205.171.3.25
    TCP: Interfaces\{DFE920CD-B641-4BEE-B3F8-93836BBCF81C} : DhcpNameServer = 192.168.0.1 205.171.3.25
    Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\jeff miller\application data\mozilla\firefox\profiles\mnjbclzh.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
    FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm003YYus&ptb=25ED6A07-570C-49B5-89DA-8DD593C3EA9E&psa=&ind=2011012800&ptnrS=XPxdm003YYus&si=&st=kwd&n=77dd9ec0&searchfor=
    FF - prefs.js: network.proxy.http - 127.0.0.1
    FF - prefs.js: network.proxy.type - 0
    FF - component: c:\documents and settings\all users.windows\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll
    FF - component: c:\documents and settings\all users.windows\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordlegacyext.dll
    FF - component: c:\program files\pc tools security\bdt\firefox\platform\winnt_x86-msvc\components\libheuristic.dll
    FF - plugin: c:\documents and settings\all users.windows\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll
    FF - plugin: c:\documents and settings\all users.windows\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
    FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
    FF - plugin: c:\windows\system32\npdeployJava1.dll
    FF - plugin: c:\windows\system32\npptools.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: browser.cache.memory.capacity - 16000
    FF - user.js: browser.chrome.favicons - false
    FF - user.js: browser.display.show_image_placeholders - true
    FF - user.js: browser.turbo.enabled - true
    FF - user.js: browser.urlbar.autocomplete.enabled - true
    FF - user.js: browser.urlbar.autofill - true
    FF - user.js: content.max.tokenizing.time - 3000000
    FF - user.js: content.maxtextrun - 4095
    FF - user.js: content.notify.backoffcount - 5
    FF - user.js: content.notify.interval - 1000000
    FF - user.js: content.notify.ontimer - true
    FF - user.js: content.switch.threshold - 1000000
    FF - user.js: dom.disable_window_status_change - true
    FF - user.js: network.http.max-connections - 48
    FF - user.js: network.http.max-connections-per-server - 16
    FF - user.js: network.http.max-persistent-connections-per-proxy - 16
    FF - user.js: network.http.max-persistent-connections-per-server - 8
    FF - user.js: network.http.pipelining - true
    FF - user.js: network.http.pipelining.firstrequest - true
    FF - user.js: network.http.pipelining.maxrequests - 8
    FF - user.js: network.http.proxy.pipelining - true
    FF - user.js: network.http.request.max-start-delay - 0
    FF - user.js: nglayout.initialpaint.delay - 1000
    FF - user.js: plugin.expose_full_path - true
    FF - user.js: ui.submenuDelay - 0
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [2011-3-28 13496]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-6-2 612184]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-6-2 337880]
    R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-17 12880]
    R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664]
    R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2010-6-29 116608]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-6-2 20696]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-6-2 44768]
    R3 LucentSoftModem;Lucent Technologies Soft Modem;c:\windows\system32\drivers\LTSM.sys [2009-10-1 802683]
    S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
    S4 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\iobit\advanced systemcare 5\ASCService.exe [2012-5-8 913752]
    S4 Browser Defender Update Service;Browser Defender Update Service;c:\program files\pc tools security\bdt\BDTUpdateService.exe [2011-3-27 337872]
    S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-2 135664]
    S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-2 135664]
    S4 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-2 129976]
    S4 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2011-4-18 993848]
    S4 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2011-4-18 399416]
    .
    =============== Created Last 30 ================
    .
    2012-06-02 20:46:46 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-06-02 20:46:08 41184 ----a-w- c:\windows\avastSS.scr
    2012-06-02 20:45:46 -------- d-----w- c:\program files\AVAST Software
    2012-06-01 15:49:38 73728 ----a-w- c:\windows\system32\javacpl.cpl
    2012-06-01 15:49:38 476960 ----a-w- c:\windows\system32\npdeployJava1.dll
    2012-06-01 06:36:47 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
    2012-06-01 06:36:47 3072 ------w- c:\windows\system32\iacenc.dll
    2012-05-28 05:06:05 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
    2012-05-28 05:06:02 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
    2012-05-28 05:06:01 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
    2012-05-28 05:04:59 12415 -c--a-w- c:\windows\system32\dllcache\wadv01nt.sys
    2012-05-28 05:03:56 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
    2012-05-28 05:02:57 42496 -c--a-w- c:\windows\system32\dllcache\tp4res.dll
    2012-05-28 05:01:59 28384 -c--a-w- c:\windows\system32\dllcache\sym_hi.sys
    2012-05-28 05:00:59 114688 -c--a-w- c:\windows\system32\dllcache\sonypi.dll
    2012-05-28 04:59:58 238592 -c--a-w- c:\windows\system32\dllcache\sisgrv.dll
    2012-05-28 04:58:56 75392 -c--a-w- c:\windows\system32\dllcache\s3savmxm.sys
    2012-05-28 04:57:56 19584 -c--a-w- c:\windows\system32\dllcache\rasirda.sys
    2012-05-28 04:56:56 121344 -c--a-w- c:\windows\system32\dllcache\phvfwext.dll
    2012-05-28 04:55:58 351616 -c--a-w- c:\windows\system32\dllcache\ovcodek2.sys
    2012-05-28 04:54:57 60480 -c--a-w- c:\windows\system32\dllcache\neo20xx.dll
    2012-05-28 04:53:56 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
    2012-05-28 04:52:57 70730 -c--a-w- c:\windows\system32\dllcache\lne100tx.sys
    2012-05-28 04:51:58 372824 -c--a-w- c:\windows\system32\dllcache\iconf32.dll
    2012-05-28 04:50:59 9759 -c--a-w- c:\windows\system32\dllcache\hsf_inst.dll
    2012-05-28 04:49:58 1733120 -c--a-w- c:\windows\system32\dllcache\g400d.dll
    2012-05-28 04:48:59 40704 -c--a-w- c:\windows\system32\dllcache\es1371mp.sys
    2012-05-28 04:47:59 6729 -c--a-w- c:\windows\system32\dllcache\disrvci.dll
    2012-05-28 04:46:59 13952 -c--a-w- c:\windows\system32\dllcache\cmbatt.sys
    2012-05-28 04:45:59 75136 -c--a-w- c:\windows\system32\dllcache\atimpae.sys
    2012-05-28 04:44:47 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
    2012-05-27 16:23:31 -------- d-----w- C:\_OTS
    2012-05-26 00:15:07 -------- d-----w- c:\windows\XSxS
    2012-05-25 05:26:02 162816 -c--a-w- c:\windows\system32\dllcache\netbt.sys
    2012-05-25 05:26:02 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
    2012-05-25 04:57:49 -------- d-sha-r- C:\cmdcons
    2012-05-25 04:31:57 98816 ----a-w- c:\windows\sed.exe
    2012-05-25 04:31:57 518144 ----a-w- c:\windows\SWREG.exe
    2012-05-25 04:31:57 256000 ----a-w- c:\windows\PEV.exe
    2012-05-25 04:31:57 208896 ----a-w- c:\windows\MBR.exe
    2012-05-18 14:00:54 -------- d-----w- c:\program files\Xenocode
    2012-05-18 10:11:46 46976 ----a-w- c:\windows\system32\drivers\R8139n51.sys
    2012-05-18 08:05:42 -------- d-----w- c:\windows\system32\wbem\repository\FS
    2012-05-18 08:05:42 -------- d-----w- c:\windows\system32\wbem\Repository
    2012-05-17 00:25:33 -------- d-----w- c:\windows\system32\NtmsData
    2012-05-16 18:31:32 -------- d-----w- c:\windows\OPTIONS
    2012-05-16 18:24:57 21736 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
    2012-05-16 02:56:25 -------- d-----w- c:\documents and settings\jeff miller\local settings\application data\Xenocode
    2012-05-11 07:31:24 -------- d-----w- c:\documents and settings\all users.windows\application data\WEBREG
    2012-05-09 23:02:02 21336 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
    2012-05-08 20:04:25 -------- d-----w- c:\documents and settings\all users.windows\application data\IObit
    2012-05-08 19:57:16 -------- d-----w- c:\documents and settings\all users.windows\application data\AVAST Software
    .
    ==================== Find3M ====================
    .
    2012-06-01 15:49:19 472864 -c--a-w- c:\windows\system32\deployJava1.dll
    2012-04-11 13:12:06 1862272 ----a-w- c:\windows\system32\win32k.sys
    2012-04-11 13:10:58 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
    2012-04-11 12:35:52 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2012-04-04 22:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-03-06 18:49:04 404640 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    .
    ============= FINISH: 16:50:43.73 ===============


    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume1
    Install Date: 5/10/2009 10:35:34 AM
    System Uptime: 6/2/2012 7:33:12 PM (21 hours ago)
    .
    Motherboard: ECS | | 945GZ/CT-M
    Processor: Intel(R) Celeron(R) D CPU 3.33GHz | CPU 1 | 3325/133mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 149 GiB total, 108.662 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    I: is Removable
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
    Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
    Device ID: ACPI\PNP0303\4&2C575ACB&0
    Manufacturer: (Standard keyboards)
    Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
    PNP Device ID: ACPI\PNP0303\4&2C575ACB&0
    Service: i8042prt
    .
    ==== System Restore Points ===================
    .
    RP1: 5/24/2012 10:04:31 PM - System Checkpoint
    RP2: 5/26/2012 12:34:23 AM - System Checkpoint
    RP3: 5/27/2012 11:36:22 AM - System Checkpoint
    RP4: 5/28/2012 2:05:29 PM - System Checkpoint
    RP5: 5/29/2012 2:49:20 PM - System Checkpoint
    RP6: 5/30/2012 2:50:43 PM - System Checkpoint
    RP7: 5/31/2012 12:43:11 PM - Installed Realtek RTL8139/810x Fast Ethernet NIC Driver Setup
    RP8: 5/31/2012 11:36:42 PM - Software Distribution Service 3.0
    RP9: 6/1/2012 8:28:00 AM - Software Distribution Service 3.0
    RP10: 6/1/2012 8:48:38 AM - Removed Java(TM) 6 Update 24
    RP11: 6/1/2012 8:49:05 AM - Installed Java(TM) 6 Update 32
    RP12: 6/1/2012 8:51:09 AM - Software Distribution Service 3.0
    RP13: 6/2/2012 11:19:42 AM - System Checkpoint
    RP14: 6/2/2012 1:44:29 PM - Removed J2SE Runtime Environment 5.0 Update 1
    RP15: 6/2/2012 1:45:46 PM - avast! Free Antivirus Setup
    RP16: 6/3/2012 2:37:43 PM - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    32 Bit HP CIO Components Installer
    Acrobat.com
    Adobe AIR
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Reader 9.5.1
    Advanced SystemCare 5
    AiO_Scan
    avast! Free Antivirus
    Browser Defender 3.0
    BufferChm
    CameraDrivers
    CameraReadme
    Canon S750
    Critical Update for Windows Media Player 11 (KB959772)
    CustomerResearchQFolder
    DeviceDiscovery
    Google Chrome
    Google Update Helper
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB932716-v2)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    HP Customer Participation Program 8.0
    HP Imaging Device Functions 9.0
    HP Photosmart 8.0 Software
    HP Photosmart Cameras 9.0
    HP Photosmart Essential
    HP Photosmart Essential 2.01
    HP Photosmart Essential2.01
    HP Product Assistant
    HP Product Detection
    HP PSC & OfficeJet 5.3.B
    HP Solution Center 9.0
    HP Update
    hpicamDrvQFolder
    HPProductAssistant
    HPSSupply
    InstantShareDevicesMFC
    Java Auto Updater
    Java(TM) 6 Update 32
    Lucent Technologies Soft Modem AMR
    Malwarebytes Anti-Malware version 1.61.0.1400
    MarketResearch
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
    Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
    Microsoft Office Professional
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.9
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Windows XP Video Decoder Checkup Utility
    Microsoft WinUsb 1.0
    Mozilla Firefox 12.0 (x86 en-GB)
    Mozilla Maintenance Service
    MSN
    OpenOffice.org 3.1
    PanoStandAlone
    ps_app_ProductContext
    ps_app_software
    ps_app_software_req
    PSSWCORE
    Qwest Installer
    RealNetworks - Microsoft Visual C++ 2008 Runtime
    RealPlayer
    Realtek High Definition Audio Driver
    Realtek RTL8139/810x Fast Ethernet NIC Driver Setup
    RealUpgrade 1.1
    Scan
    Secunia PSI (2.0.0.3003)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2497640)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2675157)
    Security Update for Windows Internet Explorer 8 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB972260)
    Security Update for Windows Internet Explorer 8 (KB974455)
    Security Update for Windows Internet Explorer 8 (KB976325)
    Security Update for Windows Internet Explorer 8 (KB978207)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2479943)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2503658)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2506223)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2511455)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2584146)
    Security Update for Windows XP (KB2585542)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2598479)
    Security Update for Windows XP (KB2603381)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2619339)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2621440)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2631813)
    Security Update for Windows XP (KB2646524)
    Security Update for Windows XP (KB2653956)
    Security Update for Windows XP (KB2659262)
    Security Update for Windows XP (KB2661637)
    Security Update for Windows XP (KB2676562)
    Security Update for Windows XP (KB2686509)
    Security Update for Windows XP (KB2695962)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Security Update for Windows XP (KB982802)
    Smart Defrag 2
    SolutionCenter
    Status
    SUPERAntiSpyware
    Toolbox
    TrayApp
    UnloadSupport
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 8 (KB969497)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB976749)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB2641690)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971029)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    VideoToolkit01
    W Photo Studio
    WebFldrs XP
    WebReg
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Internet Explorer 8
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows PowerShell(TM) 1.0
    Windows XP Service Pack 3
    .
    ==== Event Viewer Messages From Past Week ========
    .
    6/2/2012 4:52:00 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service gupdate with arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}
    6/2/2012 1:44:42 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.
    6/1/2012 8:37:53 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243).
    6/1/2012 8:37:40 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2604092).
    6/1/2012 8:36:05 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista, Server 2008 x86 (KB2657424).
    6/1/2012 8:35:46 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 and Windows XP x86 (KB2656352).
    5/28/2012 1:45:47 PM, error: Service Control Manager [7023] - The Bdfsdrv service terminated with the following error: The specified module could not be found.
    5/28/2012 1:45:47 PM, error: Service Control Manager [7000] - The Zune Bus Enumerator Driver service failed to start due to the following error: The system cannot find the file specified.
    5/27/2012 9:23:32 AM, error: Service Control Manager [7034] - The Secunia PSI Agent service terminated unexpectedly. It has done this 1 time(s).
    5/27/2012 9:23:32 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
    5/27/2012 9:23:31 AM, error: Service Control Manager [7034] - The Secunia Update Agent service terminated unexpectedly. It has done this 1 time(s).
    5/27/2012 9:23:31 AM, error: Service Control Manager [7034] - The Browser Defender Update Service service terminated unexpectedly. It has done this 1 time(s).
    5/27/2012 9:23:31 AM, error: Service Control Manager [7034] - The Advanced SystemCare Service 5 service terminated unexpectedly. It has done this 1 time(s).
    5/27/2012 9:23:31 AM, error: Service Control Manager [7031] - The SAS Core Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
    .
    ==== End Of File ===========================
     
  9. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    Open Notepad and copy and paste the text in the code box below into it:

    Code:
    DirLook::
    c:\windows\OPTIONS
    c:\documents and settings\jeff miller\local settings\application data\Xenocode
    
    Firefox::
    FF - ProfilePath - c:\documents and settings\jeff miller\application data\mozilla\firefox\profiles\mnjbclzh.default\
    FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=XPxdm003YYus&ptb=25ED6A07-570C-49B5-89DA-8DD593C3EA9E&psa=&ind=2011012800&ptnrS=XPxdm003YYus&si=&st=kwd&n=77dd9ec0&s earchfor=
     
    Save the file to your desktop and name it CFScript.txt

    Referring to the picture below, drag CFScript.txt into ComboFix.exe

    [​IMG]


    This will start ComboFix again. It may ask to reboot. Post the contents of Combofix.txt in your next reply.

    Note: These instructions and script were created specifically for this user. If you are not this user, do NOT follow these instructions or use this script as it could damage the workings of your system.
     
  10. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    ComboFix 12-06-03.05 - Jeff Miller 06/04/2012 8:57.3.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.1666 [GMT -7:00]
    Running from: c:\documents and settings\Jeff Miller\Desktop\Repairs 052012\Repair Tools\ComboFix.exe
    Command switches used :: c:\documents and settings\Jeff Miller\Desktop\CFScript.txt
    AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\All Users.WINDOWS\Application Data\TEMP
    c:\windows\XSxS
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-05-04 to 2012-06-04 )))))))))))))))))))))))))))))))
    .
    .
    2012-06-04 15:46 . 2012-06-04 15:46 -------- d-----w- c:\windows\LastGood
    2012-06-02 20:46 . 2012-03-07 00:03 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2012-06-02 20:46 . 2012-03-07 00:01 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2012-06-02 20:46 . 2012-03-07 00:02 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2012-06-02 20:46 . 2012-03-07 00:01 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2012-06-02 20:46 . 2012-03-07 00:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-06-02 20:46 . 2012-03-07 00:01 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
    2012-06-02 20:46 . 2012-03-07 00:01 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
    2012-06-02 20:46 . 2012-03-06 23:58 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
    2012-06-02 20:46 . 2012-03-07 00:15 41184 ----a-w- c:\windows\avastSS.scr
    2012-06-02 20:46 . 2012-03-07 00:15 201352 ----a-w- c:\windows\system32\aswBoot.exe
    2012-06-02 20:45 . 2012-06-02 20:45 -------- d-----w- c:\program files\AVAST Software
    2012-06-01 15:49 . 2012-06-01 15:49 73728 ----a-w- c:\windows\system32\javacpl.cpl
    2012-06-01 15:49 . 2012-06-01 15:49 476960 ----a-w- c:\windows\system32\npdeployJava1.dll
    2012-06-01 06:36 . 2012-01-11 19:06 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
    2012-06-01 06:36 . 2012-01-11 19:06 3072 ------w- c:\windows\system32\iacenc.dll
    2012-05-28 05:06 . 2008-04-14 00:12 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
    2012-05-28 05:06 . 2001-08-18 05:36 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
    2012-05-28 05:06 . 2008-04-14 00:12 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
    2012-05-28 05:04 . 2004-08-04 05:29 12415 -c--a-w- c:\windows\system32\dllcache\wadv01nt.sys
    2012-05-28 05:03 . 2001-08-18 05:36 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll
    2012-05-28 05:02 . 2001-08-18 05:35 42496 -c--a-w- c:\windows\system32\dllcache\tp4res.dll
    2012-05-28 05:01 . 2001-08-17 21:07 28384 -c--a-w- c:\windows\system32\dllcache\sym_hi.sys
    2012-05-28 05:00 . 2001-08-18 05:36 114688 -c--a-w- c:\windows\system32\dllcache\sonypi.dll
    2012-05-28 04:59 . 2001-08-18 05:36 238592 -c--a-w- c:\windows\system32\dllcache\sisgrv.dll
    2012-05-28 04:58 . 2001-08-17 19:50 75392 -c--a-w- c:\windows\system32\dllcache\s3savmxm.sys
    2012-05-28 04:57 . 2001-08-17 20:51 19584 -c--a-w- c:\windows\system32\dllcache\rasirda.sys
    2012-05-28 04:56 . 2001-08-18 05:36 121344 -c--a-w- c:\windows\system32\dllcache\phvfwext.dll
    2012-05-28 04:55 . 2001-08-17 21:05 351616 -c--a-w- c:\windows\system32\dllcache\ovcodek2.sys
    2012-05-28 04:54 . 2001-08-18 05:36 60480 -c--a-w- c:\windows\system32\dllcache\neo20xx.dll
    2012-05-28 04:53 . 2001-08-17 21:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
    2012-05-28 04:52 . 2001-08-17 19:12 70730 -c--a-w- c:\windows\system32\dllcache\lne100tx.sys
    2012-05-28 04:51 . 2001-08-18 05:36 372824 -c--a-w- c:\windows\system32\dllcache\iconf32.dll
    2012-05-28 04:50 . 2001-08-18 05:36 9759 -c--a-w- c:\windows\system32\dllcache\hsf_inst.dll
    2012-05-28 04:49 . 2001-08-17 21:56 1733120 -c--a-w- c:\windows\system32\dllcache\g400d.dll
    2012-05-28 04:48 . 2001-08-17 19:19 40704 -c--a-w- c:\windows\system32\dllcache\es1371mp.sys
    2012-05-28 04:47 . 2001-08-18 05:36 6729 -c--a-w- c:\windows\system32\dllcache\disrvci.dll
    2012-05-28 04:46 . 2008-04-13 18:36 13952 -c--a-w- c:\windows\system32\dllcache\cmbatt.sys
    2012-05-28 04:45 . 2001-08-18 05:36 37376 -c--a-w- c:\windows\system32\dllcache\atievxx.exe
    2012-05-28 04:44 . 2001-08-17 21:56 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
    2012-05-27 16:23 . 2012-05-27 16:23 -------- d-----w- C:\_OTS
    2012-05-25 05:26 . 2008-04-13 19:21 162816 -c--a-w- c:\windows\system32\dllcache\netbt.sys
    2012-05-25 05:26 . 2008-04-13 19:21 162816 ----a-w- c:\windows\system32\drivers\netbt.sys
    2012-05-19 08:38 . 2012-05-19 08:39 -------- d-----w- c:\documents and settings\servicetech
    2012-05-18 14:00 . 2012-05-18 14:00 -------- d-----w- c:\program files\Xenocode
    2012-05-18 10:11 . 2003-06-23 02:57 46976 ----a-w- c:\windows\system32\drivers\R8139n51.sys
    2012-05-18 08:05 . 2012-05-18 08:05 -------- d-----w- c:\windows\system32\wbem\Repository
    2012-05-18 08:03 . 2012-05-18 08:03 -------- d-----w- c:\documents and settings\Jeff Miller\Application Data\InstallShield
    2012-05-17 00:25 . 2012-05-17 01:14 -------- d-----w- c:\windows\system32\NtmsData
    2012-05-16 18:31 . 2012-05-16 18:31 -------- d-----w- c:\windows\OPTIONS
    2012-05-16 18:24 . 2011-11-24 18:37 21736 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
    2012-05-16 02:56 . 2012-05-16 02:56 -------- d-----w- c:\documents and settings\Jeff Miller\Local Settings\Application Data\Xenocode
    2012-05-11 07:31 . 2012-05-11 07:31 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\WEBREG
    2012-05-09 23:02 . 2012-02-23 21:25 21336 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
    2012-05-09 02:43 . 2012-05-18 08:05 -------- d-----w- c:\documents and settings\Administrator.JEFF-2E0A22FF48
    2012-05-09 00:27 . 2012-05-09 00:27 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\IObit
    2012-05-08 20:04 . 2012-05-08 20:04 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\IObit
    2012-05-08 19:57 . 2012-06-02 20:45 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\AVAST Software
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-06-01 15:49 . 2011-05-30 17:08 472864 -c--a-w- c:\windows\system32\deployJava1.dll
    2012-04-11 13:12 . 2004-08-04 12:00 1862272 ----a-w- c:\windows\system32\win32k.sys
    2012-04-11 13:10 . 2004-08-04 12:00 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
    2012-04-11 12:35 . 2004-08-03 22:59 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2012-04-04 22:56 . 2011-05-29 13:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-03-08 19:52 . 2012-03-08 19:52 664 -c--a-w- c:\documents and settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\d3d9caps.tmp
    2012-03-06 18:49 . 2011-05-20 23:07 404640 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-06-02 20:26 . 2012-06-02 20:26 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    (((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    ---- Directory of c:\documents and settings\jeff miller\local settings\application data\Xenocode ----
    .
    2012-05-18 20:55 . 2012-05-18 20:55 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@APPDATA@\Microsoft\CLR Security Config\v2.0.50727.42\security.config.cch.new.__deleted__
    2012-05-18 20:55 . 2012-05-18 20:55 10598 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@APPDATA@\Microsoft\CLR Security Config\v2.0.50727.42\security.config.cch
    2012-05-18 14:55 . 2012-05-18 14:55 17408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Native\STUBEXE\8.0.1135\@SYSTEM@\ipconfig.exe
    2012-05-18 14:53 . 2012-05-18 14:53 69120 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    2012-05-18 14:52 . 2012-05-18 14:52 17408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Native\STUBEXE\8.0.1135\@SYSTEM@\PING.EXE
    2012-05-18 14:51 . 2012-05-18 14:51 572936 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    2012-05-18 14:51 . 2012-05-18 14:51 37896 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    2012-05-18 14:51 . 2012-05-18 14:51 372736 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    2012-05-18 14:51 . 2012-05-18 14:51 17408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\STUBEXE\8.0.1135\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    2012-05-18 14:51 . 2012-05-18 14:51 114688 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    2012-05-18 14:51 . 2012-05-18 14:51 99320 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\alink.dll
    2012-05-18 14:51 . 2012-05-18 14:51 145408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    2012-05-18 14:51 . 2012-05-18 14:51 17408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\STUBEXE\8.0.1135\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\csc.exe
    2012-05-18 14:51 . 2012-05-18 14:51 340992 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    2012-05-18 14:51 . 2012-05-18 14:51 10752 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    2012-05-18 14:51 . 2012-05-18 14:51 2068480 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    2012-05-18 14:51 . 2012-05-18 14:51 425984 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    2012-05-18 14:51 . 2012-05-18 14:51 630784 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    2012-05-18 14:51 . 2012-05-18 14:51 3076096 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    2012-05-18 14:51 . 2012-05-18 14:51 5013504 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    2012-05-18 14:51 . 2012-05-18 14:51 227 --sha-r- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\Desktop.ini
    2012-05-18 14:51 . 2012-05-18 14:51 95232 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    2012-05-18 14:51 . 2012-05-18 14:51 27136 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    2012-05-18 14:51 . 2012-05-18 14:51 18936 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    2012-05-18 14:51 . 2012-05-18 14:51 119296 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    2012-05-18 14:51 . 2012-05-18 14:51 348672 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    2012-05-18 14:51 . 2012-05-18 14:51 77312 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    2012-05-18 14:51 . 2012-05-18 14:51 4444160 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    2012-05-18 14:51 . 2012-05-18 14:51 5814784 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    2012-05-18 14:51 . 2012-05-18 14:51 479232 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\msvcm80.dll
    2012-05-18 14:51 . 2012-05-18 14:51 558080 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\msvcp80.dll
    2012-05-18 14:51 . 2012-05-18 14:51 635904 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\msvcr80.dll
    2012-05-18 14:51 . 2012-05-18 14:51 2074 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\Microsoft.VC80.CRT.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 2074 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 502 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 499 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\webengine.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 499 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 502 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\WMINet_Utils.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\shfusres.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 763 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\vbc.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 763 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\peverify.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\shfusion.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 501 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\perfcounter.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 501 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 503 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\normalization.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 503 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 764 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorwks.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 764 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\ngen.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscortim.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorsvw.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorsn.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorsvc.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorsec.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorpe.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorjit.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorld.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscorie.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscordbi.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 427 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\MSBuild.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 427 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 498 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\mscordbc.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 765 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\ilasm.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 765 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 502 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 496 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\fusion.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 496 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 495 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\dfdll.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 495 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 502 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\diasymreader.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 766 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\cvtres.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 766 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 496 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\cscomp.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 496 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 497 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\culture.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 763 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\csc.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 763 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 503 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\CORPerfMonExt.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 503 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\[email protected]
    2012-05-18 14:51 . 2012-05-18 14:51 769 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\[email protected]\applaunch@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 495 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\alink@1.0.0.0\alink.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 495 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\alink@1.0.0.0\alink@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 769 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\applaunch@1.0.0.0\applaunch.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 509 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Transactions@1.0.0.0\System.Transactions@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 509 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Transactions@1.0.0.0\System.Transactions.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices.Wrapper@1.0.0.0\System.EnterpriseServices.Wrapper.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices.Wrapper@1.0.0.0\System.EnterpriseServices.Wrapper@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 258048 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices@2.0.0.0\System.EnterpriseServices.dll
    2012-05-18 14:51 . 2012-05-18 14:51 113664 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices@2.0.0.0\System.EnterpriseServices.Wrapper.dll
    2012-05-18 14:51 . 2012-05-18 14:51 6879 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices@2.0.0.0\System.EnterpriseServices@2.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 514 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Data.OracleClient@1.0.0.0\System.Data.OracleClient@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 6879 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.EnterpriseServices@2.0.0.0\System.EnterpriseServices.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 514 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Data.OracleClient@1.0.0.0\System.Data.OracleClient.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 506 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\CustomMarshalers@1.0.0.0\CustomMarshalers@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 501 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Data@1.0.0.0\System.Data.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 501 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\System.Data@1.0.0.0\System.Data@1.0.0.0.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 506 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\CustomMarshalers@1.0.0.0\CustomMarshalers.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\dfshim.dll_0x94d8cf9c6284914e38f66023f1496fbb.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 468 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\XPThemes.manifest_0x46f522c77d1a514703a7fed0015fc623.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 524 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\webengine.dll_0x8e418892cfb4bdd8e6324ae8cc3580c7.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 527 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\WMINet_Utils.dll_0x86d78fe4ade59214ffe87919cfec72fc.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\ShFusRes.dll_0xed8c26a7fd0e36c8eea31099342ec510.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 788 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\vbc.exe_0x67f5238229333c061092f5a32e8c2ee1.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\peverify.dll_0x5142fc2dacc2819c6449f17809b8f5c1.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\RegAsm.exe_0xc08b53d25dab60ba0dba975b46d0b27a.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\RegSvcs.exe_0xfaa8ea9027ed6b6c875c247e59285270.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\shfusion.dll_0x08ed51f948992888c9fe0c4889c5c962.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorwks.dll_0x815361747d41db96902ba93568ca087a.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 789 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\ngen.exe_0xf9e14b8e4214fefe5750e84db483a50e.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 528 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\normalization.dll_0xd86b398bd1cad6b6f5f476e5474c9131.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 526 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\PerfCounter.dll_0xbf29787a2d4942f113fc635c8d29a32a.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscortim.dll_0xd1e76d6f20cb835de3f41dd5d4c7b29b.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 522 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorsn.dll_0x08617924913306d722b1eb415fcc5150.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorsvc.dll_0x904a4d6965b9efeedd1dfe9f75ac566d.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorsvw.exe_0x234b1bc2796483e1f5c3f26649fb3388.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorjit.dll_0x721809036f87cdc998dc059bdc250308.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 522 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorld.dll_0x0d90d965009a259f7480173718534b62.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 522 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorpe.dll_0x98a52a67af50e4c3d0705a8d0fd45a26.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorsec.dll_0xfd5ce6cec1d73a17ee598969a40dc1e2.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscordbc.dll_0x10711b4f073f71a20bfe1d5deaeb0e6d.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 523 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscordbi.dll_0x2de599c4b5a0dd4a57e3508f26a4328c.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 522 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\mscorie.dll_0x735b3c31c87f5f398159328f30ff72fe.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 419 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\MSBuild.exe_0x23c76ea46e425d20c1d08c67f0c4633f.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 521 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\fusion.dll_0x521f33a2b9857e7dfd8bd668926c8163.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\IEExec.exe_0x4f57cc6f0624be0d491310dd8003a2ba.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 790 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\ilasm.exe_0x5e50d119d8444ca154c7a87173b0bcf0.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\jsc.exe_0x62b5969df36894719c450c38409be8df.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 791 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\cvtres.exe_0xe0d21bee6dae44a7c6e1896d7a8c7463.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 520 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\dfdll.dll_0x7894268363ac71684c328c6553040164.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 362 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\dfsvc.exe_0x2c6eae9be4207d9b385b11b1bfd7d055.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 527 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\diasymreader.dll_0x25fbf89890485b2419414e74b6311895.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 521 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\cscomp.dll_0xfbe58302a04feacc0d45f97ff8631767.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 522 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\Culture.dll_0xc5ee683c50f6af4e93111f2655aef8e0.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 528 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\CORPerfMonExt.dll_0x401af75b25fcd185e599303ab807cf4e.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 788 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\csc.exe_0xe2f33cd871358aa99e53a62e1c927bb6.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 520 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\alink.dll_0x67833a8f10398cf2c08889f39e7d7636.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 794 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\AppLaunch.exe_0x170d73be3fe846e9070cfae530f5a31c.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 534 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.Transactions.dll_0x0773875b70a4a2da028d624382b6d1d2.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 468 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.Windows.Forms.dll_0x428414fcd23805381b7339990bc7ff4d.101.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 539 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.Data.OracleClient.dll_0xe57894c11258343adb0ca58d1e8fb8cf.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 6905 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.EnterpriseServices.dll_0xa346822baa7138022571b1084ac06570.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 548 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.EnterpriseServices.Wrapper.dll_0x4ab3b3a3e0a842de850d8d45ea88ace0.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 531 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\CustomMarshalers.dll_0xf2055ff9d81b2f595229e680816d8f5a.2.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 825 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\QwestActivationCDApp.exe_0xd12e242f914fe1de64b5297ff91e63c2.1.manifest
    2012-05-18 14:51 . 2012-05-18 14:51 526 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\SXS\Manifests\System.Data.dll_0x342e631d44e81404c73f204c61545da4.2.manifest
    2012-05-18 14:00 . 2012-05-18 14:00 17408 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\STUBEXE\8.0.1135\@APPDIR@\QwestActivationCDApp.exe
    2012-05-17 22:58 . 2012-05-17 22:58 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.3704.244453.__deleted__
    2012-05-17 22:58 . 2012-05-17 22:58 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.3704.244437.__deleted__
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.3180.13235953.__deleted__
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.3180.13235953.__deleted__
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.new.__deleted__
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.__deleted__
    2012-05-16 22:24 . 2012-05-17 22:58 39791 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.new.__deleted__
    2012-05-16 22:24 . 2012-05-16 22:24 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\DELETED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.__deleted__
    2012-05-16 22:24 . 2012-05-17 22:58 45577 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
    1601-01-01 00:00 . 1601-01-01 00:00 0 ----a-w- c:\documents and settings\jeff miller\local settings\application data\Xenocode\Sandbox\Qwest High-Speed Internet\7.1.0.0\2009.12.08T01.59\Virtual\MODIFIED\@WINDIR@\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    .
    ---- Directory of c:\windows\OPTIONS ----
    .
    2012-05-18 10:11 . 2003-06-23 02:57 46976 ------w- c:\windows\OPTIONS\CABS\R8139N51.SYS
    2012-05-18 10:11 . 2003-06-23 02:57 97521 ------w- c:\windows\OPTIONS\CABS\NETRTXPO.CAT
    2012-05-18 10:11 . 2003-06-23 02:57 80354 ------w- c:\windows\OPTIONS\CABS\NETRTXPO.INF
    2012-05-18 10:11 . 2002-12-12 22:51 38590 ----a-w- c:\windows\OPTIONS\CABS\rtlsetn5.exe
    2012-05-18 10:11 . 2002-12-31 00:08 711 ----a-w- c:\windows\OPTIONS\CABS\setup.iss
    2012-05-16 18:31 . 2001-10-12 02:59 2454 ----a-w- c:\windows\OPTIONS\CABS\SETUP.TXT
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2012-05-25_05.29.52 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-04-19 05:51 . 2011-04-19 05:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll
    - 2008-04-14 00:12 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
    + 2008-04-14 00:12 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
    + 2012-05-31 19:43 . 2003-06-23 02:57 46976 c:\windows\system32\ReinstallBackups\0027\DriverFiles\R8139n51.sys
    + 2004-08-04 12:00 . 2012-06-01 16:01 73682 c:\windows\system32\perfc009.dat
    + 2004-08-04 12:00 . 2011-11-18 12:35 60416 c:\windows\system32\packager.exe
    + 2004-08-04 12:00 . 2011-09-26 18:41 20480 c:\windows\system32\oleaccrc.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 66560 c:\windows\system32\mshtmled.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 66560 c:\windows\system32\mshtmled.dll
    - 2009-03-08 11:31 . 2011-02-22 23:06 55296 c:\windows\system32\msfeedsbs.dll
    + 2009-03-08 11:31 . 2012-03-01 11:01 55296 c:\windows\system32\msfeedsbs.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
    + 2004-08-04 12:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 43520 c:\windows\system32\licmgr10.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 43520 c:\windows\system32\licmgr10.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-04 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2012-05-28 05:05 . 2001-08-18 05:37 27648 c:\windows\system32\dllcache\xrxftplt.exe
    - 2009-06-11 22:08 . 2011-02-22 23:06 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2009-06-11 22:08 . 2012-03-01 11:01 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2012-05-28 05:05 . 2001-08-18 05:37 99865 c:\windows\system32\dllcache\xlog.exe
    + 2012-05-28 05:05 . 2001-08-17 19:11 16970 c:\windows\system32\dllcache\xem336n5.sys
    + 2004-08-04 00:56 . 2008-04-14 00:12 52736 c:\windows\system32\dllcache\wzcsapi.dll
    + 2012-05-28 05:05 . 2004-08-04 05:29 19455 c:\windows\system32\dllcache\wvchntxx.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 18432 c:\windows\system32\dllcache\wtsapi32.dll
    + 2012-05-28 05:05 . 2008-04-13 18:46 19200 c:\windows\system32\dllcache\wstcodec.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 22528 c:\windows\system32\dllcache\wsock32.dll
    + 2012-05-28 05:05 . 2004-08-04 05:29 12063 c:\windows\system32\dllcache\wsiintxx.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 19456 c:\windows\system32\dllcache\wshtcpip.dll
    + 2004-08-04 12:00 . 2008-05-09 10:53 90112 c:\windows\system32\dllcache\wshext.dll
    - 2008-05-09 10:53 . 2008-05-09 10:53 90112 c:\windows\system32\dllcache\wshext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 19968 c:\windows\system32\dllcache\ws2help.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 82432 c:\windows\system32\dllcache\ws2_32.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 95232 c:\windows\system32\dllcache\wmiutils.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 92672 c:\windows\system32\dllcache\wlnotify.dll
    + 2012-05-28 05:05 . 2001-08-17 19:12 34890 c:\windows\system32\dllcache\wlandrv2.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\winsta.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17408 c:\windows\system32\dllcache\winshfhc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 99328 c:\windows\system32\dllcache\winscard.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\dllcache\winrnr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 32256 c:\windows\system32\dllcache\winipsec.dll
    + 2012-05-28 05:05 . 2001-08-18 05:36 53760 c:\windows\system32\dllcache\wiamsmud.dll
    + 2012-05-28 05:05 . 2001-08-18 05:36 87040 c:\windows\system32\dllcache\wiafbdrv.dll
    - 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2004-08-04 12:00 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2012-05-28 05:05 . 2004-08-04 05:29 23615 c:\windows\system32\dllcache\wch7xxnt.sys
    + 2012-05-28 05:05 . 2008-04-13 18:45 31744 c:\windows\system32\dllcache\wceusbsh.sys
    + 2012-05-28 05:05 . 2001-08-17 19:10 35871 c:\windows\system32\dllcache\wbfirdma.sys
    + 2009-05-10 17:29 . 2008-04-14 00:12 43520 c:\windows\system32\dllcache\wbemsvc.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\wbemprox.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 71680 c:\windows\system32\dllcache\wbemcons.dll
    + 2012-05-28 05:05 . 2004-08-04 05:29 33599 c:\windows\system32\dllcache\watv04nt.sys
    + 2012-05-28 05:05 . 2004-08-04 05:29 19551 c:\windows\system32\dllcache\watv02nt.sys
    + 2012-05-28 05:05 . 2004-08-04 05:29 29311 c:\windows\system32\dllcache\watv01nt.sys
    + 2004-08-04 12:00 . 2008-04-13 18:44 17664 c:\windows\system32\dllcache\watchdog.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 34560 c:\windows\system32\dllcache\wanarp.sys
    + 2012-05-28 05:05 . 2004-08-04 05:29 11775 c:\windows\system32\dllcache\wadv05nt.sys
    + 2012-05-28 05:05 . 2004-08-04 05:29 12127 c:\windows\system32\dllcache\wadv02nt.sys
    + 2012-05-28 05:04 . 2001-08-17 19:13 16925 c:\windows\system32\dllcache\w940nd.sys
    + 2012-05-28 05:04 . 2001-08-17 19:13 19016 c:\windows\system32\dllcache\w926nd.sys
    + 2012-05-28 05:04 . 2001-08-17 19:13 19528 c:\windows\system32\dllcache\w840nd.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\dllcache\w3ssl.dll
    + 2012-05-28 05:04 . 2001-08-17 20:28 64605 c:\windows\system32\dllcache\vvoice.sys
    + 2004-08-04 12:00 . 2008-04-13 18:44 81664 c:\windows\system32\dllcache\videoprt.sys
    + 2012-05-28 05:04 . 2001-08-17 20:49 24576 c:\windows\system32\dllcache\viairda.sys
    + 2004-08-04 12:00 . 2008-04-13 18:44 20992 c:\windows\system32\dllcache\vga.sys
    + 2012-05-28 05:04 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\version.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 26112 c:\windows\system32\dllcache\userinit.exe
    + 2004-08-04 12:00 . 2008-04-13 18:45 20608 c:\windows\system32\dllcache\usbuhci.sys
    + 2012-05-28 05:04 . 2008-04-13 18:45 26112 c:\windows\system32\dllcache\usbser.sys
    + 2009-05-12 19:05 . 2008-04-13 18:47 25856 c:\windows\system32\dllcache\usbprint.sys
    + 2012-05-28 05:04 . 2008-04-13 18:45 17152 c:\windows\system32\dllcache\usbohci.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\dllcache\usbmon.dll
    + 2004-08-04 12:00 . 2008-04-13 18:45 59520 c:\windows\system32\dllcache\usbhub.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 30208 c:\windows\system32\dllcache\usbehci.sys
    + 2012-05-28 05:04 . 2008-04-13 18:45 60032 c:\windows\system32\dllcache\usbaudio.sys
    + 2012-05-28 05:04 . 2004-08-04 05:31 32384 c:\windows\system32\dllcache\usb101et.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 13824 c:\windows\system32\dllcache\uniplat.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 74240 c:\windows\system32\dllcache\unimdmat.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 28160 c:\windows\system32\dllcache\umaxu40.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 26624 c:\windows\system32\dllcache\umaxu22.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 69632 c:\windows\system32\dllcache\umaxu12.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 50688 c:\windows\system32\dllcache\umaxscan.dll
    + 2012-05-28 05:03 . 2001-08-17 20:58 22912 c:\windows\system32\dllcache\umaxpcls.sys
    + 2012-05-28 05:03 . 2001-08-18 05:36 50176 c:\windows\system32\dllcache\umaxp60.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 47616 c:\windows\system32\dllcache\umaxcam.dll
    + 2012-05-28 05:03 . 2001-08-17 20:52 36736 c:\windows\system32\dllcache\ultra.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 66048 c:\windows\system32\dllcache\udfs.sys
    + 2012-05-28 05:03 . 2001-08-17 20:48 11520 c:\windows\system32\dllcache\twotrack.sys
    + 2012-05-28 05:03 . 2001-08-17 19:12 34375 c:\windows\system32\dllcache\tpro4.sys
    + 2012-05-28 05:02 . 2008-04-14 00:12 82944 c:\windows\system32\dllcache\tp4mon.exe
    + 2012-05-28 05:02 . 2001-08-18 05:36 31744 c:\windows\system32\dllcache\tp4.dll
    + 2012-05-28 05:02 . 2001-08-17 19:10 28232 c:\windows\system32\dllcache\tos4mo.sys
    + 2012-05-28 05:02 . 2001-08-17 21:56 81408 c:\windows\system32\dllcache\tgiul50.dll
    + 2009-05-10 17:29 . 2008-04-14 00:13 40840 c:\windows\system32\dllcache\termdd.sys
    - 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2004-08-04 12:00 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2012-05-28 05:02 . 2001-08-17 19:13 17129 c:\windows\system32\dllcache\tdkcd31.sys
    + 2012-05-28 05:02 . 2001-08-17 19:13 37961 c:\windows\system32\dllcache\tdk100b.sys
    + 2004-08-04 12:00 . 2008-04-13 19:00 19072 c:\windows\system32\dllcache\tdi.sys
    + 2007-04-02 16:36 . 2007-04-02 16:36 16384 c:\windows\system32\dllcache\tcptsat.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 32827 c:\windows\system32\dllcache\tcptest.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 45568 c:\windows\system32\dllcache\tcpmon.dll
    + 2012-05-28 05:02 . 2001-08-17 20:49 30464 c:\windows\system32\dllcache\tbatm155.sys
    + 2012-05-28 05:02 . 2001-08-17 19:50 36640 c:\windows\system32\dllcache\t2r4mini.sys
    + 2012-05-28 05:02 . 2001-08-17 21:07 32640 c:\windows\system32\dllcache\symc8xx.sys
    + 2012-05-28 05:02 . 2001-08-17 21:07 16256 c:\windows\system32\dllcache\symc810.sys
    + 2012-05-28 05:02 . 2001-08-17 21:07 30688 c:\windows\system32\dllcache\sym_u3.sys
    + 2012-05-28 05:01 . 2001-08-18 05:36 94293 c:\windows\system32\dllcache\sxports.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 10240 c:\windows\system32\dllcache\swpidflt.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 10240 c:\windows\system32\dllcache\swpdflt2.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 53760 c:\windows\system32\dllcache\sw_wheel.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 41472 c:\windows\system32\dllcache\sw_effct.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 14336 c:\windows\system32\dllcache\svchost.exe
    + 2004-08-04 12:00 . 2009-10-21 05:38 75776 c:\windows\system32\dllcache\strmfilt.dll
    - 2009-10-21 05:38 . 2009-10-21 05:38 75776 c:\windows\system32\dllcache\strmfilt.dll
    + 2012-05-28 05:01 . 2008-04-13 18:46 15232 c:\windows\system32\dllcache\streamip.sys
    + 2012-05-28 05:01 . 2001-08-18 05:36 53248 c:\windows\system32\dllcache\stlncoin.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 68096 c:\windows\system32\dllcache\sti.dll
    + 2012-05-28 05:01 . 2001-08-17 20:51 16896 c:\windows\system32\dllcache\stcusb.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 71680 c:\windows\system32\dllcache\ssdpsrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 34816 c:\windows\system32\dllcache\ssdpapi.dll
    + 2012-05-28 05:01 . 2001-08-17 19:11 48736 c:\windows\system32\dllcache\srwlnd5.sys
    - 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2004-08-04 12:00 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 99328 c:\windows\system32\dllcache\srusd.dll
    + 2009-05-10 17:30 . 2008-04-14 00:12 67584 c:\windows\system32\dllcache\srclient.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 24660 c:\windows\system32\dllcache\spxupchk.dll
    + 2004-08-04 12:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    - 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 75264 c:\windows\system32\dllcache\spoolss.dll
    + 2012-05-28 05:01 . 2001-08-17 20:51 61824 c:\windows\system32\dllcache\speed.sys
    + 2012-05-28 05:01 . 2001-08-17 21:07 19072 c:\windows\system32\dllcache\sparrow.sys
    + 2012-05-28 05:01 . 2001-08-17 19:51 37040 c:\windows\system32\dllcache\sonypi.sys
    + 2012-05-28 05:00 . 2001-08-17 19:51 20752 c:\windows\system32\dllcache\sonync.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 39936 c:\windows\system32\dllcache\snmpthrd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\snmpapi.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 33280 c:\windows\system32\dllcache\snmp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 50688 c:\windows\system32\dllcache\smss.exe
    + 2012-05-28 05:00 . 2001-08-17 19:51 58368 c:\windows\system32\dllcache\smiminib.sys
    + 2012-05-28 05:00 . 2001-08-17 19:12 25034 c:\windows\system32\dllcache\smcpwr2n.sys
    + 2012-05-28 05:00 . 2001-08-17 19:10 35913 c:\windows\system32\dllcache\smcirda.sys
    + 2012-05-28 05:00 . 2001-08-17 19:12 24576 c:\windows\system32\dllcache\smc8000n.sys
    + 2012-05-28 05:00 . 2008-04-13 18:36 16000 c:\windows\system32\dllcache\smbbatt.sys
    + 2012-05-28 05:00 . 2001-08-18 05:36 45568 c:\windows\system32\dllcache\smb3w.dll
    + 2012-05-28 05:00 . 2001-08-18 05:36 33792 c:\windows\system32\dllcache\smb0w.dll
    + 2012-05-28 05:00 . 2001-08-18 05:36 28672 c:\windows\system32\dllcache\sma0w.dll
    + 2012-05-28 05:00 . 2001-08-18 05:36 28160 c:\windows\system32\dllcache\sm91w.dll
    + 2012-05-28 05:00 . 2008-04-13 18:46 11136 c:\windows\system32\dllcache\slip.sys
    + 2012-05-28 05:00 . 2004-08-04 05:31 63547 c:\windows\system32\dllcache\sla30nd5.sys
    + 2012-05-28 05:00 . 2001-08-17 19:12 91294 c:\windows\system32\dllcache\skfpwin.sys
    + 2012-05-28 05:00 . 2001-08-17 19:12 94698 c:\windows\system32\dllcache\sk98xwin.sys
    + 2012-05-28 05:00 . 2001-08-17 19:50 50432 c:\windows\system32\dllcache\sisv.sys
    + 2012-05-28 05:00 . 2004-08-04 05:31 32768 c:\windows\system32\dllcache\sisnic.sys
    + 2012-05-28 04:59 . 2001-08-17 19:50 68608 c:\windows\system32\dllcache\sis6306p.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 19456 c:\windows\system32\dllcache\shutdown.exe
    + 2008-04-14 00:12 . 2008-04-14 00:12 16437 c:\windows\system32\dllcache\shtml.exe
    + 2008-04-14 00:12 . 2008-04-14 00:12 20536 c:\windows\system32\dllcache\shtml.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 27648 c:\windows\system32\dllcache\shscrap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 65024 c:\windows\system32\dllcache\shimeng.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 68096 c:\windows\system32\dllcache\shgina.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\dllcache\shfolder.dll
    + 2012-05-28 04:59 . 2001-07-21 21:29 18400 c:\windows\system32\dllcache\sgsmld.sys
    + 2012-05-28 04:59 . 2001-08-17 19:51 98080 c:\windows\system32\dllcache\sgiulnt5.sys
    + 2012-05-28 04:59 . 2001-08-17 19:19 36480 c:\windows\system32\dllcache\sfmanm.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 11392 c:\windows\system32\dllcache\sfloppy.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 23040 c:\windows\system32\dllcache\setup.exe
    + 2012-05-28 04:59 . 2001-08-17 20:48 17664 c:\windows\system32\dllcache\sermouse.sys
    + 2004-08-04 12:00 . 2008-04-13 19:15 64512 c:\windows\system32\dllcache\serial.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 15744 c:\windows\system32\dllcache\serenum.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 39424 c:\windows\system32\dllcache\sens.dll
    + 2004-08-04 12:00 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    - 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\seclogon.dll
    + 2012-05-28 04:59 . 2008-04-13 18:45 11520 c:\windows\system32\dllcache\scsiscan.sys
    + 2012-05-28 04:59 . 2001-08-17 20:52 11648 c:\windows\system32\dllcache\scsiprnt.sys
    + 2012-05-28 04:59 . 2001-08-17 20:51 17280 c:\windows\system32\dllcache\scr111.sys
    + 2012-05-28 04:59 . 2001-08-17 20:51 16640 c:\windows\system32\dllcache\scmstcs.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 20480 c:\windows\system32\dllcache\sclgntfy.dll
    + 2012-05-28 04:59 . 2001-08-17 20:51 23936 c:\windows\system32\dllcache\sccmusbm.sys
    + 2012-05-28 04:59 . 2001-08-17 20:51 23936 c:\windows\system32\dllcache\sccmn50m.sys
    + 2012-05-28 04:59 . 2008-04-13 18:40 43904 c:\windows\system32\dllcache\sbp2port.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 64000 c:\windows\system32\dllcache\samlib.dll
    + 2012-05-28 04:58 . 2001-08-17 19:50 77824 c:\windows\system32\dllcache\s3sav4m.sys
    + 2012-05-28 04:58 . 2001-08-17 19:50 61504 c:\windows\system32\dllcache\s3sav3dm.sys
    + 2012-05-28 04:58 . 2001-08-18 05:36 62496 c:\windows\system32\dllcache\s3mtrio.dll
    + 2012-05-28 04:58 . 2001-08-17 19:50 41216 c:\windows\system32\dllcache\s3mt3d.sys
    + 2012-05-28 04:58 . 2001-08-17 20:57 65664 c:\windows\system32\dllcache\s3legacy.sys
    + 2012-05-28 04:58 . 2001-08-18 05:36 82432 c:\windows\system32\dllcache\rwia450.dll
    + 2012-05-28 04:58 . 2001-08-18 05:36 79872 c:\windows\system32\dllcache\rwia430.dll
    + 2012-05-28 04:58 . 2008-04-14 00:12 29696 c:\windows\system32\dllcache\rw450ext.dll
    + 2012-05-28 04:58 . 2008-04-14 00:12 27648 c:\windows\system32\dllcache\rw430ext.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 29184 c:\windows\system32\dllcache\rw330ext.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 27648 c:\windows\system32\dllcache\rw001ext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 33280 c:\windows\system32\dllcache\rundll32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 44032 c:\windows\system32\dllcache\rtutils.dll
    + 2009-05-10 10:22 . 2004-08-03 22:31 20992 c:\windows\system32\dllcache\rtl8139.sys
    + 2012-05-28 04:58 . 2001-08-17 19:12 19017 c:\windows\system32\dllcache\rtl8029.sys
    + 2012-05-28 04:58 . 2001-08-17 19:19 30720 c:\windows\system32\dllcache\rthwcls.sys
    + 2012-05-28 04:58 . 2008-04-13 18:40 79104 c:\windows\system32\dllcache\rocket.sys
    + 2012-05-28 04:58 . 2001-08-17 19:12 37563 c:\windows\system32\dllcache\rlnet5.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 58880 c:\windows\system32\dllcache\resutils.dll
    + 2012-05-28 04:58 . 2001-08-18 05:36 86097 c:\windows\system32\dllcache\reslog32.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 60416 c:\windows\system32\dllcache\remotepg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11776 c:\windows\system32\dllcache\regsvr32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 49664 c:\windows\system32\dllcache\regapi.dll
    + 2009-05-10 10:23 . 2008-04-13 18:40 57600 c:\windows\system32\dllcache\redbook.sys
    + 2009-05-10 17:29 . 2008-04-14 00:12 67072 c:\windows\system32\dllcache\rdshost.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 58368 c:\windows\system32\dllcache\rastapi.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 61952 c:\windows\system32\dllcache\rasqec.dll
    + 2004-08-04 12:00 . 2008-04-13 19:19 48384 c:\windows\system32\dllcache\raspptp.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 41472 c:\windows\system32\dllcache\raspppoe.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 61440 c:\windows\system32\dllcache\rasman.dll
    + 2004-08-04 12:00 . 2008-04-13 19:19 51328 c:\windows\system32\dllcache\rasl2tp.sys
    - 2009-10-12 13:38 . 2009-10-12 13:38 79872 c:\windows\system32\dllcache\raschap.dll
    + 2004-08-04 12:00 . 2009-10-12 13:38 79872 c:\windows\system32\dllcache\raschap.dll
    + 2008-04-13 18:41 . 2008-04-13 18:41 20736 c:\windows\system32\dllcache\ramdisk.sys
    + 2012-05-28 04:57 . 2001-08-18 05:36 41472 c:\windows\system32\dllcache\qvusd.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 76800 c:\windows\system32\dllcache\qutil.dll
    + 2009-05-10 17:31 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\qmgrprxy.dll
    + 2012-05-28 04:57 . 2001-08-17 20:52 49024 c:\windows\system32\dllcache\ql1280.sys
    + 2012-05-28 04:57 . 2001-08-17 20:52 40448 c:\windows\system32\dllcache\ql1240.sys
    + 2012-05-28 04:57 . 2001-08-17 20:52 45312 c:\windows\system32\dllcache\ql12160.sys
    + 2012-05-28 04:57 . 2001-08-17 20:52 33152 c:\windows\system32\dllcache\ql10wnt.sys
    + 2012-05-28 04:57 . 2001-08-17 20:52 40320 c:\windows\system32\dllcache\ql1080.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 34304 c:\windows\system32\dllcache\pstorsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 43520 c:\windows\system32\dllcache\pstorec.dll
    + 2012-05-28 04:57 . 2001-08-18 05:36 35328 c:\windows\system32\dllcache\psisload.dll
    + 2012-05-28 04:57 . 2001-08-17 20:51 16128 c:\windows\system32\dllcache\pscr.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 69120 c:\windows\system32\dllcache\psched.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 96768 c:\windows\system32\dllcache\psbase.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 23040 c:\windows\system32\dllcache\psapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 27648 c:\windows\system32\dllcache\profmap.dll
    + 2012-05-28 04:57 . 2008-04-13 18:41 17664 c:\windows\system32\dllcache\ppa3.sys
    + 2012-05-28 04:57 . 2001-08-17 20:53 17792 c:\windows\system32\dllcache\ppa.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 17408 c:\windows\system32\dllcache\powrprof.dll
    + 2004-08-04 00:56 . 2008-04-14 00:12 15360 c:\windows\system32\dllcache\pjlmon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\dllcache\ping.exe
    + 2012-05-28 04:56 . 2001-08-17 21:07 19840 c:\windows\system32\dllcache\philtune.sys
    + 2012-05-28 04:56 . 2001-08-17 21:04 92416 c:\windows\system32\dllcache\phildec.sys
    + 2012-05-28 04:56 . 2001-08-17 21:04 75776 c:\windows\system32\dllcache\philcam1.sys
    + 2012-05-28 04:56 . 2001-08-18 05:36 16384 c:\windows\system32\dllcache\philcam1.dll
    + 2012-05-28 04:56 . 2008-04-13 18:44 28032 c:\windows\system32\dllcache\perm3.sys
    + 2012-05-28 04:56 . 2008-04-13 18:44 27904 c:\windows\system32\dllcache\perm2.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\dllcache\perfos.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 15872 c:\windows\system32\dllcache\perfmon.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\dllcache\perfdisk.dll
    + 2012-05-28 04:56 . 2001-08-17 21:07 27296 c:\windows\system32\dllcache\perc2.sys
    + 2012-05-28 04:56 . 2001-08-18 05:36 86016 c:\windows\system32\dllcache\pctspk.exe
    + 2012-05-28 04:56 . 2001-08-17 19:11 35328 c:\windows\system32\dllcache\pcntpci5.sys
    + 2012-05-28 04:56 . 2001-08-17 19:11 29769 c:\windows\system32\dllcache\pcntn5m.sys
    + 2012-05-28 04:56 . 2001-08-17 19:11 30282 c:\windows\system32\dllcache\pcntn5hl.sys
    + 2012-05-28 04:56 . 2001-08-17 19:12 26153 c:\windows\system32\dllcache\pcmlm56.sys
    + 2009-05-10 17:31 . 2008-04-14 00:12 38400 c:\windows\system32\dllcache\pchsvc.dll
    + 2012-05-28 04:56 . 2004-08-04 05:31 29502 c:\windows\system32\dllcache\pca200e.sys
    + 2012-05-28 04:56 . 2001-08-17 19:12 30495 c:\windows\system32\dllcache\pc100nds.sys
    + 2004-08-03 22:59 . 2008-04-13 18:40 80128 c:\windows\system32\dllcache\parport.sys
    + 2004-08-04 12:00 . 2011-11-18 12:35 60416 c:\windows\system32\dllcache\packager.exe
    + 2012-05-28 04:56 . 2001-08-18 05:36 41984 c:\windows\system32\dllcache\ovui2rc.dll
    + 2012-05-28 04:56 . 2001-08-18 05:36 44544 c:\windows\system32\dllcache\ovui2.dll
    + 2012-05-28 04:56 . 2001-08-17 21:05 25216 c:\windows\system32\dllcache\ovsound2.sys
    + 2012-05-28 04:56 . 2001-08-18 05:36 39424 c:\windows\system32\dllcache\ovcoms.exe
    + 2012-05-28 04:56 . 2001-08-18 05:36 20480 c:\windows\system32\dllcache\ovcomc.dll
    + 2012-05-28 04:55 . 2001-08-17 21:05 31872 c:\windows\system32\dllcache\ovce.sys
    + 2012-05-28 04:55 . 2001-08-17 21:05 28032 c:\windows\system32\dllcache\ovcd.sys
    + 2012-05-28 04:55 . 2001-08-17 21:05 48000 c:\windows\system32\dllcache\ovcam2.sys
    + 2012-05-28 04:55 . 2001-08-17 21:05 25088 c:\windows\system32\dllcache\ovca.sys
    + 2012-05-28 04:55 . 2001-08-17 20:28 54186 c:\windows\system32\dllcache\otcsercb.sys
    + 2012-05-28 04:55 . 2001-08-17 19:12 43689 c:\windows\system32\dllcache\otceth5.sys
    + 2012-05-28 04:55 . 2001-08-17 19:12 27209 c:\windows\system32\dllcache\otc06x5.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\dllcache\osuninst.dll
    + 2012-05-28 04:55 . 2001-08-17 19:20 54528 c:\windows\system32\dllcache\opl3sax.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 84992 c:\windows\system32\dllcache\olepro32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 37376 c:\windows\system32\dllcache\olecnv32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 74752 c:\windows\system32\dllcache\olecli32.dll
    + 2004-08-04 12:00 . 2011-09-26 18:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2012-05-28 04:55 . 2008-04-13 18:46 61696 c:\windows\system32\dllcache\ohci1394.sys
    + 2004-08-04 12:00 . 2008-04-13 17:26 94208 c:\windows\system32\dllcache\odbcint.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 44032 c:\windows\system32\dllcache\ntlanman.dll
    + 2012-05-28 04:55 . 2001-08-17 19:49 51552 c:\windows\system32\dllcache\ntgrip.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 67072 c:\windows\system32\dllcache\ntdsapi.dll
    + 2012-05-28 04:55 . 2008-04-13 18:54 28672 c:\windows\system32\dllcache\nscirda.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 30848 c:\windows\system32\dllcache\npfs.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 69120 c:\windows\system32\dllcache\notepad.exe
    - 2009-05-10 10:20 . 2008-04-14 00:12 69120 c:\windows\system32\dllcache\notepad.exe
    + 2012-05-28 04:55 . 2001-08-17 19:20 87040 c:\windows\system32\dllcache\nm6wdm.sys
    + 2012-05-28 04:55 . 2001-08-17 19:12 32840 c:\windows\system32\dllcache\ngrpci.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 80896 c:\windows\system32\dllcache\netui0.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 11776 c:\windows\system32\dllcache\netrap.dll
    + 2012-05-28 04:55 . 2001-08-17 19:11 65278 c:\windows\system32\dllcache\netflx3.sys
    + 2004-08-04 12:00 . 2008-04-13 18:56 34688 c:\windows\system32\dllcache\netbios.sys
    + 2012-05-28 04:55 . 2001-08-17 19:50 39264 c:\windows\system32\dllcache\neo20xx.sys
    + 2012-05-28 04:54 . 2001-08-17 20:49 15872 c:\windows\system32\dllcache\ne2000.sys
    + 2004-08-04 12:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    - 2010-12-16 00:07 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2004-08-04 12:00 . 2008-04-13 19:20 91520 c:\windows\system32\dllcache\ndiswan.sys
    + 2004-08-03 23:03 . 2008-04-13 18:55 14592 c:\windows\system32\dllcache\ndisuio.sys
    + 2004-08-04 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    + 2012-05-28 04:54 . 2008-04-13 18:46 10880 c:\windows\system32\dllcache\ndisip.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\dllcache\nddeapi.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 47104 c:\windows\system32\dllcache\ncprov.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 36352 c:\windows\system32\dllcache\ncobjapi.dll
    + 2012-05-28 04:54 . 2008-04-13 18:46 85248 c:\windows\system32\dllcache\nabtsfec.sys
    + 2012-05-28 04:54 . 2001-08-17 21:56 91488 c:\windows\system32\dllcache\n9i3disp.dll
    + 2012-05-28 04:54 . 2001-08-17 19:50 27936 c:\windows\system32\dllcache\n9i3d.sys
    + 2012-05-28 04:54 . 2001-08-17 19:50 33088 c:\windows\system32\dllcache\n9i128v2.sys
    + 2012-05-28 04:54 . 2001-08-18 05:36 59104 c:\windows\system32\dllcache\n9i128v2.dll
    + 2012-05-28 04:54 . 2001-08-17 19:50 13664 c:\windows\system32\dllcache\n9i128.sys
    + 2012-05-28 04:54 . 2001-08-17 21:56 35392 c:\windows\system32\dllcache\n9i128.dll
    + 2012-05-28 04:54 . 2001-08-17 19:11 52255 c:\windows\system32\dllcache\n1000nt5.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 90624 c:\windows\system32\dllcache\mydocs.dll
    + 2012-05-28 04:54 . 2001-08-17 20:50 75520 c:\windows\system32\dllcache\mxport.sys
    + 2012-05-28 04:54 . 2001-08-17 20:49 19968 c:\windows\system32\dllcache\mxnic.sys
    + 2012-05-28 04:54 . 2001-08-18 05:36 19968 c:\windows\system32\dllcache\mxicfg.dll
    + 2012-05-28 04:54 . 2001-08-17 20:50 21888 c:\windows\system32\dllcache\mxcard.sys
    - 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2004-08-04 12:00 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2004-08-04 00:56 . 2009-11-27 17:11 17920 c:\windows\system32\dllcache\msyuv.dll
    - 2009-11-27 17:11 . 2009-11-27 17:11 17920 c:\windows\system32\dllcache\msyuv.dll
    + 2004-08-04 12:00 . 2008-04-13 18:30 61440 c:\windows\system32\dllcache\msvcrt40.dll
    + 2012-05-28 04:54 . 2008-04-13 18:46 49024 c:\windows\system32\dllcache\mstape.sys
    + 2004-08-03 23:07 . 2008-04-13 18:36 15488 c:\windows\system32\dllcache\mssmbios.sys
    - 2009-11-27 16:07 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2012-05-28 04:54 . 2001-08-17 20:48 12416 c:\windows\system32\dllcache\msriffwv.sys
    + 2004-08-04 12:00 . 2008-04-13 16:23 48128 c:\windows\system32\dllcache\msprivs.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 29696 c:\windows\system32\dllcache\mspatcha.dll
    + 2009-05-10 17:31 . 2008-04-14 00:12 29184 c:\windows\system32\dllcache\msoobe.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 15360 c:\windows\system32\dllcache\msisip.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 40960 c:\windows\system32\dllcache\msiregmv.exe
    + 2012-05-28 04:54 . 2008-04-13 18:54 22016 c:\windows\system32\dllcache\msircomm.sys
    + 2007-09-06 05:24 . 2008-04-14 00:12 60416 c:\windows\system32\dllcache\msimn.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 78848 c:\windows\system32\dllcache\msiexec.exe
    - 2004-08-04 12:00 . 2011-02-22 23:06 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 12:00 . 2008-04-13 18:56 35072 c:\windows\system32\dllcache\msgpc.sys
    + 2004-08-04 12:00 . 2008-04-13 18:32 19072 c:\windows\system32\dllcache\msfs.sys
    - 2009-07-28 20:34 . 2011-02-22 23:06 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2009-07-28 20:34 . 2012-03-01 11:01 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2012-05-28 04:53 . 2008-04-13 18:46 51200 c:\windows\system32\dllcache\msdv.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 14336 c:\windows\system32\dllcache\msdmo.dll
    + 2004-08-04 12:00 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    - 2008-06-24 16:43 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    - 2009-09-04 21:03 . 2009-09-04 21:03 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2004-08-04 12:00 . 2009-09-04 21:03 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 86016 c:\windows\system32\dllcache\msapsspc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 71680 c:\windows\system32\dllcache\msacm32.dll
    + 2012-05-28 04:53 . 2001-08-17 20:52 17280 c:\windows\system32\dllcache\mraid35x.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 87040 c:\windows\system32\dllcache\mprapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 59904 c:\windows\system32\dllcache\mpr.dll
    + 2012-05-28 04:53 . 2008-04-13 18:46 15232 c:\windows\system32\dllcache\mpe.sys
    + 2004-08-03 22:58 . 2008-04-13 18:39 23040 c:\windows\system32\dllcache\mouclass.sys
    + 2012-05-28 04:53 . 2001-08-17 20:57 16128 c:\windows\system32\dllcache\modemcsa.sys
    + 2004-08-03 23:08 . 2008-04-13 19:00 30080 c:\windows\system32\dllcache\modem.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 18944 c:\windows\system32\dllcache\midimap.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 22528 c:\windows\system32\dllcache\mfcsubs.dll
    + 2012-05-28 04:53 . 2008-04-13 18:41 26112 c:\windows\system32\dllcache\memstpci.sys
    + 2012-05-28 04:53 . 2001-08-18 05:36 47616 c:\windows\system32\dllcache\memgrp.dll
    + 2004-08-04 12:00 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
    - 2004-08-04 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\dllcache\mciseq.dll
    + 2012-05-28 04:53 . 2001-08-17 19:19 48768 c:\windows\system32\dllcache\maestro.sys
    + 2012-05-28 04:53 . 2001-08-18 05:36 58880 c:\windows\system32\dllcache\m3092dc.dll
    + 2012-05-28 04:53 . 2001-08-18 05:36 58368 c:\windows\system32\dllcache\m3091dc.dll
    + 2012-05-28 04:53 . 2001-08-17 19:49 22848 c:\windows\system32\dllcache\lwusbhid.sys
    + 2012-05-28 04:53 . 2004-08-04 05:39 20864 c:\windows\system32\dllcache\lwadihid.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 13312 c:\windows\system32\dllcache\lsass.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 18944 c:\windows\system32\dllcache\lprmon.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 22528 c:\windows\system32\dllcache\lpdsvc.dll
    + 2012-05-28 04:52 . 2001-08-17 19:12 20573 c:\windows\system32\dllcache\lne100.sys
    + 2012-05-28 04:52 . 2001-08-17 19:11 25065 c:\windows\system32\dllcache\lmndis3.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 33792 c:\windows\system32\dllcache\lmmib2.dll
    + 2012-05-28 04:52 . 2001-08-17 20:51 15744 c:\windows\system32\dllcache\lit220p.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 19968 c:\windows\system32\dllcache\linkinfo.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 43520 c:\windows\system32\dllcache\licmgr10.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2012-05-28 04:52 . 2008-04-13 18:40 34688 c:\windows\system32\dllcache\lbrtfdc.sys
    + 2012-05-28 04:52 . 2001-08-17 19:12 26442 c:\windows\system32\dllcache\lanepic5.sys
    + 2012-05-28 04:52 . 2001-08-17 19:12 19016 c:\windows\system32\dllcache\ktc111.sys
    + 2012-05-28 04:52 . 2001-08-18 05:36 37376 c:\windows\system32\dllcache\kousd.dll
    + 2012-05-28 04:52 . 2008-04-14 00:11 48640 c:\windows\system32\dllcache\kdsui.dll
    + 2004-08-04 12:00 . 2008-04-13 18:39 24576 c:\windows\system32\dllcache\kbdclass.sys
    + 2004-08-04 12:00 . 2012-03-01 11:01 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2009-11-27 16:07 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
    + 2004-08-04 00:56 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
    + 2012-05-28 04:52 . 2001-08-17 20:49 26624 c:\windows\system32\dllcache\irstusb.sys
    + 2012-05-28 04:52 . 2001-08-17 20:51 18688 c:\windows\system32\dllcache\irsir.sys
    + 2012-05-28 04:52 . 2008-04-14 00:11 28160 c:\windows\system32\dllcache\irmon.dll
    + 2012-05-28 04:52 . 2001-08-17 20:49 23552 c:\windows\system32\dllcache\irmk7.sys
    + 2012-05-28 04:52 . 2008-04-13 18:54 88192 c:\windows\system32\dllcache\irda.sys
    + 2004-08-04 12:00 . 2008-04-13 19:19 75264 c:\windows\system32\dllcache\ipsec.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 35328 c:\windows\system32\dllcache\iprip.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 94720 c:\windows\system32\dllcache\iphlpapi.dll
    + 2012-05-28 04:52 . 2001-08-17 19:12 45632 c:\windows\system32\dllcache\ip5515.sys
    + 2012-05-28 04:52 . 2001-08-18 05:36 90200 c:\windows\system32\dllcache\io8ports.dll
    + 2012-05-28 04:52 . 2001-08-17 20:50 38784 c:\windows\system32\dllcache\io8.sys
    + 2004-08-04 12:00 . 2008-04-13 18:31 36352 c:\windows\system32\dllcache\intelppm.sys
    + 2012-05-28 04:52 . 2001-08-17 20:47 13056 c:\windows\system32\dllcache\inport.sys
    + 2012-05-28 04:52 . 2001-08-17 20:52 16000 c:\windows\system32\dllcache\ini910u.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 75264 c:\windows\system32\dllcache\inetpp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32768 c:\windows\system32\dllcache\inetmib1.dll
    + 2004-08-04 12:00 . 2008-04-13 18:40 42112 c:\windows\system32\dllcache\imapi.sys
    + 2012-05-28 04:51 . 2001-08-18 05:36 20480 c:\windows\system32\dllcache\icam5ext.dll
    + 2012-05-28 04:51 . 2001-08-18 05:36 45056 c:\windows\system32\dllcache\icam5com.dll
    + 2012-05-28 04:51 . 2001-08-18 05:36 61952 c:\windows\system32\dllcache\icam4ext.dll
    + 2012-05-28 04:51 . 2001-08-18 05:36 91136 c:\windows\system32\dllcache\icam4com.dll
    + 2012-05-28 04:51 . 2001-08-18 05:36 26624 c:\windows\system32\dllcache\icam3ext.dll
    + 2009-05-10 17:29 . 2008-04-14 00:11 11264 c:\windows\system32\dllcache\icaapi.dll
    + 2012-05-28 04:51 . 2001-08-17 21:06 38528 c:\windows\system32\dllcache\ibmvcap.sys
    + 2012-05-28 04:51 . 2001-08-17 19:11 28700 c:\windows\system32\dllcache\ibmexmp.sys
    + 2004-08-04 12:00 . 2008-04-13 19:18 52480 c:\windows\system32\dllcache\i8042prt.sys
    + 2012-05-28 04:51 . 2001-08-17 19:49 58592 c:\windows\system32\dllcache\i740nt5.sys
    + 2012-05-28 04:51 . 2008-04-13 18:41 18560 c:\windows\system32\dllcache\i2omp.sys
    - 2009-10-21 05:38 . 2009-10-21 05:38 25088 c:\windows\system32\dllcache\httpapi.dll
    + 2004-08-04 12:00 . 2009-10-21 05:38 25088 c:\windows\system32\dllcache\httpapi.dll
    + 2012-05-28 04:51 . 2001-08-17 20:28 50751 c:\windows\system32\dllcache\hsf_tone.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 73279 c:\windows\system32\dllcache\hsf_spkp.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 44863 c:\windows\system32\dllcache\hsf_soar.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 57471 c:\windows\system32\dllcache\hsf_samp.sys
    + 2012-05-28 04:50 . 2001-08-17 20:28 67167 c:\windows\system32\dllcache\hsf_bsc2.sys
    + 2012-05-28 04:50 . 2001-08-18 05:36 19456 c:\windows\system32\dllcache\hr1w.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 13312 c:\windows\system32\dllcache\hpsjmcro.dll
    + 2012-05-28 04:50 . 2001-08-17 21:07 25952 c:\windows\system32\dllcache\hpn.sys
    + 2012-05-28 04:50 . 2001-08-18 05:36 32768 c:\windows\system32\dllcache\hpgtmcro.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 68608 c:\windows\system32\dllcache\hpgt53tk.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 31232 c:\windows\system32\dllcache\hpgt42tk.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 93696 c:\windows\system32\dllcache\hpgt42.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 48128 c:\windows\system32\dllcache\hpgt33tk.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 89088 c:\windows\system32\dllcache\hpgt33.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 83968 c:\windows\system32\dllcache\hpgt21.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 39936 c:\windows\system32\dllcache\hostmib.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 72704 c:\windows\system32\dllcache\hlink.dll
    + 2004-08-04 12:00 . 2008-04-13 18:45 24960 c:\windows\system32\dllcache\hidparse.sys
    + 2004-08-04 12:00 . 2008-04-13 18:45 36864 c:\windows\system32\dllcache\hidclass.sys
    + 2012-05-28 04:50 . 2008-04-13 18:36 20352 c:\windows\system32\dllcache\hidbatt.sys
    + 2004-08-04 00:56 . 2008-04-14 00:11 20992 c:\windows\system32\dllcache\hid.dll
    + 2012-05-28 04:50 . 2008-04-13 18:40 28288 c:\windows\system32\dllcache\grserial.sys
    + 2012-05-28 04:50 . 2001-08-17 20:51 82304 c:\windows\system32\dllcache\grclass.sys
    + 2012-05-28 04:50 . 2001-08-17 20:51 17408 c:\windows\system32\dllcache\gpr400.sys
    + 2012-05-28 04:50 . 2008-04-13 18:45 59136 c:\windows\system32\dllcache\gckernel.sys
    + 2012-05-28 04:50 . 2008-04-13 18:45 10624 c:\windows\system32\dllcache\gameenum.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 23552 c:\windows\system32\dllcache\fxsmon.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 23552 c:\windows\system32\dllcache\fxsext32.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 55296 c:\windows\system32\dllcache\fxsevent.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 26624 c:\windows\system32\dllcache\fxsdrv.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 72192 c:\windows\system32\dllcache\fxscom.dll
    + 2012-05-28 04:49 . 2001-08-18 05:36 92160 c:\windows\system32\dllcache\fuusd.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 20538 c:\windows\system32\dllcache\fpremadm.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 20541 c:\windows\system32\dllcache\fpexedll.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 94208 c:\windows\system32\dllcache\fpencode.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 20541 c:\windows\system32\dllcache\fpadmdll.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 24632 c:\windows\system32\dllcache\fpadmcgi.exe
    + 2008-04-14 00:12 . 2008-04-14 00:12 15120 c:\windows\system32\dllcache\fp98sadm.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 49212 c:\windows\system32\dllcache\fp4awebs.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 32826 c:\windows\system32\dllcache\fp4avss.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 41020 c:\windows\system32\dllcache\fp4avnb.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 49210 c:\windows\system32\dllcache\fp4areg.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 82035 c:\windows\system32\dllcache\fp4anscp.dll
    + 2012-05-28 04:49 . 2004-08-04 05:31 34173 c:\windows\system32\dllcache\forehe.sys
    + 2012-05-28 04:49 . 2001-08-18 05:36 71680 c:\windows\system32\dllcache\fnfilter.dll
    + 2009-05-10 17:30 . 2008-04-14 00:11 16896 c:\windows\system32\dllcache\fltlib.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 87552 c:\windows\system32\dllcache\fldrclnr.dll
    + 2004-08-04 12:00 . 2008-04-13 18:33 44544 c:\windows\system32\dllcache\fips.sys
    + 2012-05-28 04:49 . 2001-08-17 19:13 27165 c:\windows\system32\dllcache\fetnd5.sys
    + 2012-05-28 04:49 . 2001-08-17 19:10 22090 c:\windows\system32\dllcache\fem556n5.sys
    + 2004-08-04 12:00 . 2008-04-13 18:40 27392 c:\windows\system32\dllcache\fdc.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 80384 c:\windows\system32\dllcache\faultrep.dll
    + 2012-05-28 04:49 . 2001-08-17 19:12 24618 c:\windows\system32\dllcache\fa410nd5.sys
    + 2012-05-28 04:49 . 2001-08-17 19:12 16074 c:\windows\system32\dllcache\fa312nd5.sys
    + 2012-05-28 04:49 . 2001-08-17 19:11 11850 c:\windows\system32\dllcache\f3ab18xj.sys
    + 2012-05-28 04:49 . 2001-08-17 19:11 12362 c:\windows\system32\dllcache\f3ab18xi.sys
    + 2012-05-28 04:49 . 2001-08-17 19:12 16998 c:\windows\system32\dllcache\ex10.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 92160 c:\windows\system32\dllcache\evntwin.exe
    + 2008-04-14 00:12 . 2008-04-14 00:12 24064 c:\windows\system32\dllcache\evntcmd.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 56320 c:\windows\system32\dllcache\eventlog.dll
    + 2012-05-28 04:49 . 2001-08-18 05:36 45568 c:\windows\system32\dllcache\esunib.dll
    + 2012-05-28 04:49 . 2001-08-18 05:36 45568 c:\windows\system32\dllcache\esuni.dll
    + 2012-05-28 04:49 . 2001-08-18 05:36 34816 c:\windows\system32\dllcache\esuimg.dll
    + 2012-05-28 04:49 . 2001-08-18 05:36 43008 c:\windows\system32\dllcache\esucm.dll
    + 2012-05-28 04:49 . 2001-08-17 19:19 63360 c:\windows\system32\dllcache\ess.sys
    + 2012-05-28 04:49 . 2001-08-17 19:19 72192 c:\windows\system32\dllcache\es1969.sys
    + 2012-05-28 04:48 . 2001-08-17 19:19 37120 c:\windows\system32\dllcache\es1370mp.sys
    + 2012-05-28 04:48 . 2001-08-18 05:36 61952 c:\windows\system32\dllcache\eqnloop.exe
    + 2012-05-28 04:48 . 2001-08-18 05:36 51200 c:\windows\system32\dllcache\eqnlogr.exe
    + 2012-05-28 04:48 . 2001-08-18 05:36 53248 c:\windows\system32\dllcache\eqndiag.exe
    + 2012-05-28 04:48 . 2001-08-17 19:12 18503 c:\windows\system32\dllcache\epro4.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 19996 c:\windows\system32\dllcache\em556n4.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 25159 c:\windows\system32\dllcache\elnk3.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 70174 c:\windows\system32\dllcache\el98xn5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 66591 c:\windows\system32\dllcache\el90xbc5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 77386 c:\windows\system32\dllcache\el656nd5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 69194 c:\windows\system32\dllcache\el656cd5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 26141 c:\windows\system32\dllcache\el589nd5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 69692 c:\windows\system32\dllcache\el575nd5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 24653 c:\windows\system32\dllcache\el574nd4.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 55999 c:\windows\system32\dllcache\el556nd5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:10 44103 c:\windows\system32\dllcache\el515.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\system32\dllcache\eappprxy.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 30720 c:\windows\system32\dllcache\eapolqec.dll
    + 2012-05-28 04:48 . 2001-08-17 19:12 19594 c:\windows\system32\dllcache\e100isa4.sys
    + 2012-05-28 04:48 . 2001-08-17 19:12 50719 c:\windows\system32\dllcache\e1000nt5.sys
    + 2004-08-04 12:00 . 2008-04-13 18:38 71168 c:\windows\system32\dllcache\dxg.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 10752 c:\windows\system32\dllcache\dumprep.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 92672 c:\windows\system32\dllcache\dskquota.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 14336 c:\windows\system32\dllcache\drprov.dll
    + 2012-05-28 04:48 . 2001-08-17 21:07 20192 c:\windows\system32\dllcache\dpti2o.sys
    + 2012-05-28 04:48 . 2001-08-17 19:12 28062 c:\windows\system32\dllcache\dp83820.sys
    + 2012-05-28 04:48 . 2001-08-17 20:47 23808 c:\windows\system32\dllcache\dot4usb.sys
    + 2012-05-28 04:48 . 2001-08-17 20:47 12928 c:\windows\system32\dllcache\dot4prt.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 26112 c:\windows\system32\dllcache\dot3api.dll
    - 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2004-08-04 12:00 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2012-05-28 04:48 . 2001-08-17 19:11 29696 c:\windows\system32\dllcache\dm9pci5.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 26698 c:\windows\system32\dllcache\dlh5xnd5.sys
    + 2012-05-28 04:48 . 2001-08-18 05:36 29768 c:\windows\system32\dllcache\divasu.dll
    + 2012-05-28 04:48 . 2001-08-18 05:36 37962 c:\windows\system32\dllcache\divaprop.dll
    + 2012-05-28 04:48 . 2001-08-18 05:36 38985 c:\windows\system32\dllcache\disrvsu.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 31305 c:\windows\system32\dllcache\disrvpp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 32768 c:\windows\system32\dllcache\dispex.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 19456 c:\windows\system32\dllcache\dimsntfy.dll
    + 2012-05-28 04:47 . 2001-08-17 19:13 91305 c:\windows\system32\dllcache\dimaint.sys
    + 2012-05-28 04:47 . 2001-08-17 19:17 42432 c:\windows\system32\dllcache\digirlpt.sys
    + 2012-05-28 04:47 . 2001-08-17 19:14 21606 c:\windows\system32\dllcache\digiisdn.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 41046 c:\windows\system32\dllcache\digiisdn.dll
    + 2012-05-28 04:47 . 2001-08-17 19:17 90525 c:\windows\system32\dllcache\digifep5.sys
    + 2012-05-28 04:47 . 2001-08-17 19:13 37735 c:\windows\system32\dllcache\digiasyn.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 65622 c:\windows\system32\dllcache\digiasyn.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 68608 c:\windows\system32\dllcache\digest.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 32256 c:\windows\system32\dllcache\diapi2NT.dll
    + 2012-05-28 04:47 . 2001-08-17 19:17 29531 c:\windows\system32\dllcache\dgapci.sys
    + 2012-05-28 04:47 . 2001-08-17 19:11 24649 c:\windows\system32\dllcache\dfe650d.sys
    + 2012-05-28 04:47 . 2001-08-17 19:11 24648 c:\windows\system32\dllcache\dfe650.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 24064 c:\windows\system32\dllcache\devldr32.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 59904 c:\windows\system32\dllcache\devenum.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 25088 c:\windows\system32\dllcache\defrag.exe
    + 2012-05-28 04:47 . 2001-08-17 19:11 20928 c:\windows\system32\dllcache\defpa.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 27136 c:\windows\system32\dllcache\ddrawex.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 86016 c:\windows\system32\dllcache\dc240usd.dll
    + 2012-05-28 04:47 . 2001-08-17 19:12 63208 c:\windows\system32\dllcache\dc21x4.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 80896 c:\windows\system32\dllcache\dc210usd.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 25600 c:\windows\system32\dllcache\dc210_32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 25088 c:\windows\system32\dllcache\davclnt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 54272 c:\windows\system32\dllcache\dataclen.dll
    + 2012-05-28 04:47 . 2001-08-17 20:52 14720 c:\windows\system32\dllcache\dac960nt.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 27648 c:\windows\system32\dllcache\cyzports.dll
    + 2012-05-28 04:47 . 2001-08-17 20:50 49792 c:\windows\system32\dllcache\cyzport.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 27136 c:\windows\system32\dllcache\cyzcoins.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 27648 c:\windows\system32\dllcache\cyyports.dll
    + 2012-05-28 04:47 . 2001-08-17 20:50 50176 c:\windows\system32\dllcache\cyyport.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 28672 c:\windows\system32\dllcache\cyycoins.dll
    + 2012-05-28 04:47 . 2001-08-17 20:50 14848 c:\windows\system32\dllcache\cyclom-y.sys
    + 2012-05-28 04:47 . 2001-08-17 20:50 17152 c:\windows\system32\dllcache\cyclad-z.sys
    + 2012-05-28 04:47 . 2004-08-04 05:32 48640 c:\windows\system32\dllcache\cwrwdm.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 93952 c:\windows\system32\dllcache\cwcwdm.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 72832 c:\windows\system32\dllcache\cwbwdm.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 96256 c:\windows\system32\dllcache\ctlsb16.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\dllcache\ctfmon.exe
    + 2004-08-04 12:00 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2009-12-14 07:08 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 62464 c:\windows\system32\dllcache\cryptsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 64512 c:\windows\system32\dllcache\cryptnet.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 53760 c:\windows\system32\dllcache\cryptext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 33280 c:\windows\system32\dllcache\cryptdll.dll
    + 2012-05-28 04:47 . 2001-08-17 19:19 42112 c:\windows\system32\dllcache\crtaud.sys
    + 2012-05-28 04:47 . 2001-08-17 19:11 60970 c:\windows\system32\dllcache\cpqtrnd5.sys
    + 2012-05-28 04:47 . 2001-08-17 19:13 21533 c:\windows\system32\dllcache\cpqndis5.sys
    + 2012-05-28 04:47 . 2001-08-17 20:52 14976 c:\windows\system32\dllcache\cpqarray.sys
    + 2012-05-28 04:47 . 2008-04-13 18:36 10240 c:\windows\system32\dllcache\compbatt.sys
    + 2009-05-10 17:29 . 2008-04-14 00:11 60416 c:\windows\system32\dllcache\colbact.dll
    + 2012-05-28 04:47 . 2001-08-17 19:11 39936 c:\windows\system32\dllcache\cnxt1803.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 44032 c:\windows\system32\dllcache\cnusd.dll
    + 2004-08-04 00:56 . 2008-04-14 00:11 47104 c:\windows\system32\dllcache\cnbjmon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 39424 c:\windows\system32\dllcache\cmutil.dll
    + 2012-05-28 04:47 . 2001-08-17 20:51 20736 c:\windows\system32\dllcache\cmbp0wdm.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 58368 c:\windows\system32\dllcache\clusapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 64000 c:\windows\system32\dllcache\cleanmgr.exe
    + 2012-05-28 04:46 . 2001-08-17 20:57 45696 c:\windows\system32\dllcache\cirrus.sys
    + 2012-05-28 04:46 . 2001-08-17 21:56 91264 c:\windows\system32\dllcache\cirrus.dll
    + 2004-08-04 12:00 . 2008-04-14 00:09 16896 c:\windows\system32\dllcache\cfgmgr32.dll
    + 2012-05-28 04:46 . 2001-08-17 19:13 49182 c:\windows\system32\dllcache\cem56n5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 22044 c:\windows\system32\dllcache\cem33n5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 22044 c:\windows\system32\dllcache\cem28n5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 27164 c:\windows\system32\dllcache\ce3n5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 21530 c:\windows\system32\dllcache\ce2n5.sys
    + 2004-08-04 12:00 . 2008-04-13 19:14 63744 c:\windows\system32\dllcache\cdfs.sys
    + 2001-08-17 13:52 . 2004-08-04 12:00 18688 c:\windows\system32\dllcache\cdaudio.sys
    + 2012-05-28 04:46 . 2008-04-13 18:46 17024 c:\windows\system32\dllcache\ccdecode.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 46108 c:\windows\system32\dllcache\cben5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:12 39680 c:\windows\system32\dllcache\cb325.sys
    + 2012-05-28 04:46 . 2001-08-17 19:12 37916 c:\windows\system32\dllcache\cb102.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 74240 c:\windows\system32\dllcache\camexo20.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 60416 c:\windows\system32\dllcache\cabinet.dll
    + 2012-05-28 04:46 . 2001-08-17 20:51 13824 c:\windows\system32\dllcache\bulltlp3.sys
    + 2012-05-28 04:46 . 2001-08-17 19:11 31529 c:\windows\system32\dllcache\brzwlan.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 10368 c:\windows\system32\dllcache\brusbscn.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 11008 c:\windows\system32\dllcache\brusbmdm.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 60416 c:\windows\system32\dllcache\brserwdm.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 39552 c:\windows\system32\dllcache\brparwdm.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 77824 c:\windows\system32\dllcache\browser.dll
    + 2004-08-04 12:00 . 2008-04-13 17:03 63488 c:\windows\system32\dllcache\browselc.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 41472 c:\windows\system32\dllcache\brmfusb.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 32256 c:\windows\system32\dllcache\brmfrsmg.exe
    + 2012-05-28 04:46 . 2001-08-18 05:36 29696 c:\windows\system32\dllcache\brmflpt.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 81408 c:\windows\system32\dllcache\brmfcwia.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 15360 c:\windows\system32\dllcache\brmfbidi.dll
    + 2012-05-28 04:46 . 2001-08-17 20:12 12160 c:\windows\system32\dllcache\brfiltlo.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 12800 c:\windows\system32\dllcache\brevif.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 19456 c:\windows\system32\dllcache\brbidiif.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 71680 c:\windows\system32\dllcache\blastcln.exe
    + 2012-05-28 04:46 . 2008-04-13 18:46 11776 c:\windows\system32\dllcache\bdasup.sys
    + 2012-05-28 04:46 . 2001-08-17 19:11 26568 c:\windows\system32\dllcache\bcm4e5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:11 54271 c:\windows\system32\dllcache\bcm42xx5.sys
    + 2012-05-28 04:46 . 2001-08-17 19:11 66557 c:\windows\system32\dllcache\bcm42u.sys
    + 2012-05-28 04:46 . 2008-04-13 18:36 14208 c:\windows\system32\dllcache\battc.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 29184 c:\windows\system32\dllcache\batmeter.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 52736 c:\windows\system32\dllcache\basesrv.dll
    + 2012-05-28 04:46 . 2001-08-17 19:48 36128 c:\windows\system32\dllcache\banshee.sys
    + 2012-05-28 04:46 . 2001-08-17 19:11 96640 c:\windows\system32\dllcache\b57xp32.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 89952 c:\windows\system32\dllcache\b1cbase.sys
    + 2012-05-28 04:46 . 2001-08-17 19:19 36992 c:\windows\system32\dllcache\aztw2320.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 37568 c:\windows\system32\dllcache\avmwan.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 87552 c:\windows\system32\dllcache\avmcoxp.dll
    - 2009-06-10 14:13 . 2009-11-27 16:07 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-08-04 12:00 . 2009-11-27 16:07 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2012-05-28 04:46 . 2008-04-13 18:46 13696 c:\windows\system32\dllcache\avcstrm.sys
    + 2012-05-28 04:46 . 2001-08-17 21:01 36096 c:\windows\system32\dllcache\avcaudio.sys
    + 2012-05-28 04:46 . 2008-04-13 18:46 38912 c:\windows\system32\dllcache\avc.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 62464 c:\windows\system32\dllcache\authz.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 16439 c:\windows\system32\dllcache\author.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 20540 c:\windows\system32\dllcache\author.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 42496 c:\windows\system32\dllcache\audiosrv.dll
    + 2004-08-04 12:00 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
    - 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\system32\dllcache\atl.dll
    + 2012-05-28 04:46 . 2001-08-17 19:49 23552 c:\windows\system32\dllcache\atixbar.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 26624 c:\windows\system32\dllcache\ativxbar.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 19456 c:\windows\system32\dllcache\ativttxx.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 17152 c:\windows\system32\dllcache\atitvsnd.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 17152 c:\windows\system32\dllcache\atitunep.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 26880 c:\windows\system32\dllcache\atirtsnd.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 49920 c:\windows\system32\dllcache\atirtcap.sys
    + 2012-05-28 04:46 . 2001-08-17 19:48 70528 c:\windows\system32\dllcache\atiragem.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 10240 c:\windows\system32\dllcache\atipcxxx.sys
    + 2012-05-28 04:45 . 2001-08-17 19:49 75136 c:\windows\system32\dllcache\atimpae.sys
    + 2012-05-28 04:45 . 2001-08-17 19:49 46464 c:\windows\system32\dllcache\atibt829.sys
    + 2012-05-28 04:45 . 2001-08-17 20:57 77568 c:\windows\system32\dllcache\ati.sys
    + 2012-05-28 04:45 . 2001-08-17 21:55 96128 c:\windows\system32\dllcache\ati.dll
    + 2004-08-04 12:00 . 2008-04-13 18:40 96512 c:\windows\system32\dllcache\atapi.sys
    + 2004-08-04 12:00 . 2008-04-13 18:57 14336 c:\windows\system32\dllcache\asyncmac.sys
    + 2012-05-28 04:45 . 2001-08-17 19:12 97354 c:\windows\system32\dllcache\aspndis3.sys
    + 2012-05-28 04:45 . 2001-08-17 20:51 14848 c:\windows\system32\dllcache\asc3550.sys
    + 2012-05-28 04:45 . 2001-08-17 20:52 22400 c:\windows\system32\dllcache\asc3350p.sys
    + 2012-05-28 04:45 . 2001-08-17 20:52 26496 c:\windows\system32\dllcache\asc.sys
    + 2012-05-28 04:45 . 2004-08-04 05:31 36224 c:\windows\system32\dllcache\an983.sys
    + 2012-05-28 04:45 . 2001-08-17 20:52 12032 c:\windows\system32\dllcache\amsint.sys
    + 2012-05-28 04:45 . 2001-08-17 19:11 16969 c:\windows\system32\dllcache\amb8002.sys
    + 2012-05-28 04:45 . 2001-08-17 20:49 26624 c:\windows\system32\dllcache\alifir.sys
    + 2012-05-28 04:45 . 2001-08-17 19:11 27678 c:\windows\system32\dllcache\ali5261.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 44544 c:\windows\system32\dllcache\alg.exe
    + 2012-05-28 04:45 . 2001-08-17 21:07 56960 c:\windows\system32\dllcache\aic78xx.sys
    + 2012-05-28 04:45 . 2001-08-17 21:07 55168 c:\windows\system32\dllcache\aic78u2.sys
    + 2012-05-28 04:45 . 2001-08-17 20:52 12800 c:\windows\system32\dllcache\aha154x.sys
    + 2007-04-02 18:26 . 2007-04-02 18:26 19456 c:\windows\system32\dllcache\agt040d.dll
    + 2007-04-02 18:25 . 2007-04-02 18:25 19456 c:\windows\system32\dllcache\agt0401.dll
    + 2012-05-28 04:45 . 2001-08-17 19:11 46112 c:\windows\system32\dllcache\adptsf50.sys
    + 2012-05-28 04:45 . 2004-08-04 05:32 10880 c:\windows\system32\dllcache\admjoy.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 16439 c:\windows\system32\dllcache\admin.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 20540 c:\windows\system32\dllcache\admin.dll
    + 2012-05-28 04:45 . 2001-08-17 19:11 20160 c:\windows\system32\dllcache\adm8511.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 98304 c:\windows\system32\dllcache\actxprxy.dll
    + 2012-05-28 04:45 . 2001-08-18 05:36 61440 c:\windows\system32\dllcache\acerscad.dll
    + 2012-05-28 04:45 . 2004-08-04 05:32 84480 c:\windows\system32\dllcache\ac97via.sys
    + 2012-05-28 04:45 . 2001-08-17 19:20 96256 c:\windows\system32\dllcache\ac97intc.sys
    + 2012-05-28 04:45 . 2001-08-17 20:52 23552 c:\windows\system32\dllcache\abp480n5.sys
    + 2012-05-28 04:45 . 2001-08-18 05:36 98304 c:\windows\system32\dllcache\a3d.dll
    + 2012-05-28 04:45 . 2001-08-17 21:55 38400 c:\windows\system32\dllcache\8514a.dll
    + 2012-05-28 04:45 . 2008-04-13 18:46 48128 c:\windows\system32\dllcache\61883.sys
    + 2012-05-28 04:45 . 2008-04-13 18:40 12288 c:\windows\system32\dllcache\4mmdat.sys
    + 2012-05-28 04:45 . 2001-08-17 21:06 11264 c:\windows\system32\dllcache\1394vdbg.sys
    + 2012-05-28 04:45 . 2008-04-13 18:46 53376 c:\windows\system32\dllcache\1394bus.sys
    - 2004-08-04 12:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll
    + 2004-08-04 12:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
    + 2012-05-27 18:21 . 2012-06-01 15:29 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2009-05-10 17:36 . 2012-05-18 18:44 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-05-10 17:36 . 2012-06-01 15:29 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2012-05-27 18:21 . 2012-06-01 15:29 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2011-12-25 10:49 . 2011-12-25 10:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2010-08-06 02:28 . 2012-06-01 15:32 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    - 2010-08-06 02:28 . 2011-04-21 10:01 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2012-01-03 16:45 . 2012-01-03 16:45 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\ViewerPS.dll
    + 2012-01-04 05:51 . 2012-01-04 05:51 37296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\reader_sl.exe
    + 2012-01-03 16:44 . 2012-01-03 16:44 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\PDFPrevHndlr.dll
    + 2012-01-04 05:15 . 2012-01-04 05:15 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\eula.exe
    + 2012-01-04 04:52 . 2012-01-04 04:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acrotextextractor.exe
    + 2012-01-03 15:19 . 2012-01-03 15:19 16824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32Info.exe
    + 2012-01-03 15:16 . 2012-01-03 15:16 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acroiehelpershim.dll
    + 2012-01-03 15:16 . 2012-01-03 15:16 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroIEHelper.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 12800 c:\windows\ie8updates\KB2675157-IE8\xpshims.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 66560 c:\windows\ie8updates\KB2675157-IE8\mshtmled.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 55296 c:\windows\ie8updates\KB2675157-IE8\msfeedsbs.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 43520 c:\windows\ie8updates\KB2675157-IE8\licmgr10.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 25600 c:\windows\ie8updates\KB2675157-IE8\jsproxy.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\7aac1fe67890463655aeeb3b8e4f2884\System.Web.DynamicData.Design.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
    + 2012-06-01 16:12 . 2012-06-01 16:12 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
    + 2012-06-01 16:12 . 2012-06-01 16:12 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c8fc74b6f19de1a403f0e557a11aa9ca\Microsoft.PowerShell.Commands.Utility.resources.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a2bb2449699f12ceb3eaff60a5a0632d\Microsoft.PowerShell.ConsoleHost.resources.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3056b7bb6c5f44fd998e89d397f6fc79\Microsoft.PowerShell.Security.resources.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 19456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\0a5d8c3e21d8683958868496373bb435\Microsoft.PowerShell.Commands.Management.resources.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
    + 2012-06-01 16:20 . 2012-06-01 16:20 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2012-05-28 05:05 . 2001-08-18 05:37 4608 c:\windows\system32\dllcache\xrxflnch.exe
    + 2012-05-28 05:05 . 2008-04-14 00:12 8192 c:\windows\system32\dllcache\wshirda.dll
    + 2012-05-28 05:05 . 2008-04-13 18:36 8832 c:\windows\system32\dllcache\wmiacpi.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 5632 c:\windows\system32\dllcache\wmi.dll
    + 2012-05-28 05:04 . 2008-04-13 18:40 5376 c:\windows\system32\dllcache\viaide.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 7556 c:\windows\system32\dllcache\usroslba.sys
    + 2004-08-04 12:00 . 2004-08-04 12:00 4736 c:\windows\system32\dllcache\usbd.sys
    - 2009-11-27 16:07 . 2009-11-27 16:07 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2001-08-17 22:36 . 2009-11-27 16:07 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2012-05-28 05:02 . 2001-08-17 20:51 4992 c:\windows\system32\dllcache\toside.sys
    + 2012-05-28 05:02 . 2001-08-17 20:52 7040 c:\windows\system32\dllcache\tandqic.sys
    + 2012-05-28 05:01 . 2001-08-17 21:02 3968 c:\windows\system32\dllcache\swusbflt.sys
    + 2004-08-03 22:58 . 2008-04-13 18:39 4352 c:\windows\system32\dllcache\swenum.sys
    + 2012-05-28 05:01 . 2001-08-17 20:56 7552 c:\windows\system32\dllcache\sonypvu1.sys
    + 2012-05-28 05:00 . 2001-08-17 20:53 9600 c:\windows\system32\dllcache\sonymc.sys
    + 2012-05-28 05:00 . 2008-04-13 18:40 7552 c:\windows\system32\dllcache\sonyait.sys
    + 2012-05-28 05:00 . 2001-08-17 20:53 7040 c:\windows\system32\dllcache\snyaitmc.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 8704 c:\windows\system32\dllcache\snmptrap.exe
    + 2008-04-14 00:12 . 2008-04-14 00:12 6144 c:\windows\system32\dllcache\snmpmib.dll
    + 2012-05-28 05:00 . 2001-08-17 20:57 6784 c:\windows\system32\dllcache\smbhc.sys
    + 2012-05-28 05:00 . 2008-04-13 18:36 6912 c:\windows\system32\dllcache\smbclass.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 5120 c:\windows\system32\dllcache\sfc.dll
    + 2012-05-28 04:59 . 2001-08-17 20:53 6784 c:\windows\system32\dllcache\serscan.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 7168 c:\windows\system32\dllcache\sensapi.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 5632 c:\windows\system32\dllcache\security.dll
    + 2012-05-28 04:59 . 2001-08-17 20:53 6912 c:\windows\system32\dllcache\seaddsmc.sys
    + 2012-05-28 04:58 . 2001-08-18 05:36 9216 c:\windows\system32\dllcache\rsmgrstr.dll
    + 2012-05-28 04:58 . 2001-08-17 19:19 3840 c:\windows\system32\dllcache\rpfun.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 7680 c:\windows\system32\dllcache\rasadhlp.dll
    + 2012-05-28 04:57 . 2001-08-17 20:53 3328 c:\windows\system32\dllcache\qv2kux.sys
    + 2012-05-28 04:57 . 2008-04-13 18:40 6016 c:\windows\system32\dllcache\qic157.sys
    + 2012-05-28 04:57 . 2001-08-18 05:36 5632 c:\windows\system32\dllcache\ptpusb.dll
    + 2012-05-28 04:57 . 2008-04-13 18:40 8832 c:\windows\system32\dllcache\powerfil.sys
    + 2012-05-28 04:57 . 2001-08-17 20:53 7168 c:\windows\system32\dllcache\pnrmc.sys
    + 2012-05-28 04:56 . 2001-08-17 21:07 5504 c:\windows\system32\dllcache\perc2hib.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 8192 c:\windows\system32\dllcache\ntlsapi.dll
    + 2012-05-28 04:55 . 2001-08-17 20:47 9344 c:\windows\system32\dllcache\ntapm.sys
    + 2012-05-28 04:55 . 2001-08-17 20:53 7552 c:\windows\system32\dllcache\nsmmc.sys
    + 2012-05-28 04:54 . 2001-08-18 05:36 7168 c:\windows\system32\dllcache\mxport.dll
    + 2012-05-28 04:54 . 2008-04-13 18:39 5504 c:\windows\system32\dllcache\mstee.sys
    + 2012-05-28 04:54 . 2001-08-17 21:00 2944 c:\windows\system32\dllcache\msmpu401.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 4608 c:\windows\system32\dllcache\msimg32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 6656 c:\windows\system32\dllcache\msidle.dll
    + 2012-05-28 04:53 . 2001-08-17 20:48 6016 c:\windows\system32\dllcache\msfsio.sys
    + 2012-05-28 04:53 . 2001-08-17 20:52 6528 c:\windows\system32\dllcache\miniqic.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\system32\dllcache\migregdb.exe
    + 2012-05-28 04:53 . 2001-08-17 20:58 8320 c:\windows\system32\dllcache\memcard.sys
    + 2012-05-28 04:53 . 2001-08-17 20:52 7424 c:\windows\system32\dllcache\mammoth.sys
    + 2012-05-28 04:53 . 2008-04-13 18:40 7040 c:\windows\system32\dllcache\ltotape.sys
    + 2012-05-28 04:53 . 2001-08-17 20:53 4992 c:\windows\system32\dllcache\loop.sys
    + 2012-05-28 04:52 . 2008-04-13 18:40 5504 c:\windows\system32\dllcache\intelide.sys
    + 2012-05-28 04:51 . 2001-08-18 05:34 9216 c:\windows\system32\dllcache\ibmsgnet.dll
    + 2012-05-28 04:51 . 2008-04-13 18:41 8576 c:\windows\system32\dllcache\i2omgmt.sys
    + 2012-05-28 04:50 . 2001-08-17 20:52 5760 c:\windows\system32\dllcache\hpt4qic.sys
    + 2012-05-28 04:50 . 2001-08-17 21:02 2688 c:\windows\system32\dllcache\hidswvd.sys
    + 2012-05-28 04:50 . 2001-08-17 21:02 8576 c:\windows\system32\dllcache\hidgame.sys
    + 2008-04-14 00:09 . 2008-04-14 00:09 6656 c:\windows\system32\dllcache\fxsres.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 8704 c:\windows\system32\dllcache\fxsperf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:09 9344 c:\windows\system32\dllcache\framebuf.dll
    + 2012-05-28 04:49 . 2001-08-17 20:52 7040 c:\windows\system32\dllcache\exabyte2.sys
    + 2012-05-28 04:48 . 2001-08-17 20:46 6400 c:\windows\system32\dllcache\enum1394.sys
    + 2012-05-28 04:48 . 2001-08-17 20:53 7296 c:\windows\system32\dllcache\elmsmc.sys
    + 2012-05-28 04:48 . 2001-08-17 20:47 8704 c:\windows\system32\dllcache\dot4scan.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 9216 c:\windows\system32\dllcache\dot3dlg.dll
    + 2012-05-28 04:48 . 2008-04-13 18:40 8320 c:\windows\system32\dllcache\dlttape.sys
    + 2012-05-28 04:48 . 2001-08-18 05:36 6216 c:\windows\system32\dllcache\divaci.dll
    + 2012-05-28 04:47 . 2001-08-17 20:52 7424 c:\windows\system32\dllcache\ddsmc.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 8704 c:\windows\system32\dllcache\dciman32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 8192 c:\windows\system32\dllcache\d3d8thk.dll
    + 2012-05-28 04:47 . 2001-08-17 19:19 3584 c:\windows\system32\dllcache\cwcosnt5.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 3072 c:\windows\system32\dllcache\cwbmidi.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 3072 c:\windows\system32\dllcache\cwbase.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 4096 c:\windows\system32\dllcache\ctwdm32.dll
    + 2012-05-28 04:47 . 2001-08-17 19:19 3712 c:\windows\system32\dllcache\ctljystk.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 6912 c:\windows\system32\dllcache\ctlfacem.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 6144 c:\windows\system32\dllcache\csrss.exe
    + 2012-05-28 04:47 . 2001-08-17 20:51 6656 c:\windows\system32\dllcache\cmdide.sys
    + 2012-05-28 04:46 . 2008-04-13 18:40 8192 c:\windows\system32\dllcache\changer.sys
    + 2012-05-28 04:46 . 2001-08-17 20:52 7680 c:\windows\system32\dllcache\cd20xrnt.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 9728 c:\windows\system32\dllcache\brserif.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 5120 c:\windows\system32\dllcache\brscnrsm.dll
    + 2012-05-28 04:46 . 2001-08-17 20:12 3168 c:\windows\system32\dllcache\brparimg.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 3968 c:\windows\system32\dllcache\brfiltup.sys
    + 2012-05-28 04:46 . 2001-08-17 20:12 2944 c:\windows\system32\dllcache\brfilt.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 9728 c:\windows\system32\dllcache\brcoinst.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 7168 c:\windows\system32\dllcache\bitsprx4.dll
    + 2009-05-10 10:23 . 2001-08-17 13:59 3072 c:\windows\system32\dllcache\audstub.sys
    + 2012-05-28 04:46 . 2001-08-17 19:49 9472 c:\windows\system32\dllcache\ativmdcd.sys
    + 2012-05-28 04:45 . 2001-08-17 20:47 6272 c:\windows\system32\dllcache\apmbatt.sys
    + 2012-05-28 04:45 . 2001-08-17 20:51 5248 c:\windows\system32\dllcache\aliide.sys
    + 2012-05-28 04:45 . 2001-08-17 20:53 7424 c:\windows\system32\dllcache\adicvls.sys
    - 2011-04-15 10:05 . 2011-04-15 10:05 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll
    + 2012-04-06 06:13 . 2012-04-06 06:13 299080 c:\windows\system32\XPSViewer\XPSViewer.exe
    - 2004-08-04 12:00 . 2009-12-24 06:59 177664 c:\windows\system32\wintrust.dll
    + 2004-08-04 12:00 . 2012-02-29 14:10 177664 c:\windows\system32\wintrust.dll
    - 2004-08-04 12:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
    + 2004-08-04 12:00 . 2011-11-25 21:57 293376 c:\windows\system32\winsrv.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12 176128 c:\windows\system32\winmm.dll
    + 2004-08-04 12:00 . 2011-10-14 14:47 176128 c:\windows\system32\winmm.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 916992 c:\windows\system32\wininet.dll
    + 2004-08-04 12:00 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
    - 2004-08-04 12:00 . 2009-08-25 09:17 354816 c:\windows\system32\winhttp.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 105984 c:\windows\system32\url.dll
    - 2004-08-04 12:00 . 2009-03-08 11:34 105984 c:\windows\system32\url.dll
    + 2008-07-30 02:59 . 2011-09-26 18:41 611328 c:\windows\system32\uiautomationcore.dll
    + 2004-08-04 12:00 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll
    + 2004-08-04 12:00 . 2011-11-03 15:28 386048 c:\windows\system32\qdvd.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12 386048 c:\windows\system32\qdvd.dll
    + 2004-08-04 12:00 . 2012-06-01 16:01 447596 c:\windows\system32\perfh009.dat
    + 2004-08-04 12:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll
    + 2004-08-04 12:00 . 2011-09-26 18:41 220160 c:\windows\system32\oleacc.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 206848 c:\windows\system32\occache.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 206848 c:\windows\system32\occache.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 611840 c:\windows\system32\mstime.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 611840 c:\windows\system32\mstime.dll
    - 2009-03-08 11:32 . 2011-02-22 23:06 602112 c:\windows\system32\msfeeds.dll
    + 2009-03-08 11:32 . 2012-03-01 11:01 602112 c:\windows\system32\msfeeds.dll
    - 2011-05-30 17:08 . 2011-05-30 17:07 157472 c:\windows\system32\javaws.exe
    + 2012-06-01 15:49 . 2012-06-01 15:49 157472 c:\windows\system32\javaws.exe
    + 2012-06-01 15:49 . 2012-06-01 15:49 149280 c:\windows\system32\javaw.exe
    + 2012-06-01 15:49 . 2012-06-01 15:49 149280 c:\windows\system32\java.exe
    - 2009-05-10 17:30 . 2011-03-07 05:33 692736 c:\windows\system32\inetcomm.dll
    + 2009-05-10 17:30 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll
    + 2004-08-04 12:00 . 2012-02-29 14:10 148480 c:\windows\system32\imagehlp.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 184320 c:\windows\system32\iepeers.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 184320 c:\windows\system32\iepeers.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-04 12:00 . 2012-02-29 12:17 174080 c:\windows\system32\ie4uinit.exe
    - 2009-05-10 10:19 . 2011-04-15 10:22 141240 c:\windows\system32\FNTCACHE.DAT
    + 2009-05-10 10:19 . 2012-06-01 16:11 141240 c:\windows\system32\FNTCACHE.DAT
    - 2004-08-04 12:00 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
    + 2004-08-04 12:00 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
    + 2009-05-10 17:29 . 2012-01-09 16:20 139784 c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-04 12:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys
    + 2004-08-04 12:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
    - 2004-08-04 12:00 . 2008-10-16 14:43 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-04 12:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 338432 c:\windows\system32\dllcache\zipfldr.dll
    + 2008-04-13 17:39 . 2008-04-13 17:39 689152 c:\windows\system32\dllcache\xpsp3res.dll
    + 2004-08-04 12:00 . 2008-04-13 17:39 187392 c:\windows\system32\dllcache\xpsp1res.dll
    + 2004-08-04 12:00 . 2008-04-13 17:39 438784 c:\windows\system32\dllcache\xpob2res.dll
    + 2004-08-04 00:56 . 2008-04-14 00:12 483840 c:\windows\system32\dllcache\wzcsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 264192 c:\windows\system32\dllcache\wow32.dll
    + 2007-09-06 05:23 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
    - 2009-05-12 21:33 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
    + 2009-05-10 17:29 . 2008-04-14 00:12 144896 c:\windows\system32\dllcache\wmisvc.dll
    - 2009-05-12 21:34 . 2009-02-06 10:10 227840 c:\windows\system32\dllcache\wmiprvse.exe
    + 2009-05-10 17:29 . 2009-02-06 10:10 227840 c:\windows\system32\dllcache\wmiprvse.exe
    + 2009-05-10 17:29 . 2009-02-09 12:10 453120 c:\windows\system32\dllcache\wmiprvsd.dll
    - 2009-05-12 21:34 . 2009-02-09 12:10 453120 c:\windows\system32\dllcache\wmiprvsd.dll
    + 2012-05-28 05:05 . 2004-08-04 05:31 154624 c:\windows\system32\dllcache\wlluc48.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 172032 c:\windows\system32\dllcache\wldap32.dll
    + 2004-08-04 12:00 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
    - 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
    + 2004-08-04 12:00 . 2012-02-29 14:10 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2009-12-24 06:59 . 2009-12-24 06:59 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-08-04 12:00 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 146432 c:\windows\system32\dllcache\winspool.drv
    - 2009-05-10 10:20 . 2008-04-14 00:12 146432 c:\windows\system32\dllcache\winspool.drv
    + 2004-08-04 12:00 . 2011-10-14 14:47 176128 c:\windows\system32\dllcache\winmm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 507904 c:\windows\system32\dllcache\winlogon.exe
    + 2004-08-04 12:00 . 2012-03-01 11:01 916992 c:\windows\system32\dllcache\wininet.dll
    - 2008-12-16 12:30 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll
    + 2004-08-04 12:00 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
    + 2012-05-28 05:05 . 2001-08-17 20:28 771581 c:\windows\system32\dllcache\winacisa.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 102400 c:\windows\system32\dllcache\win32spl.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 589312 c:\windows\system32\dllcache\wiashext.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 333824 c:\windows\system32\dllcache\wiaservc.dll
    + 2012-05-28 05:05 . 2001-08-17 20:28 701386 c:\windows\system32\dllcache\wdhaalba.sys
    + 2009-05-10 17:29 . 2008-04-14 00:12 273920 c:\windows\system32\dllcache\wbemess.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 178176 c:\windows\system32\dllcache\wbemdisp.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 531456 c:\windows\system32\dllcache\wbemcore.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 214528 c:\windows\system32\dllcache\wbemcomn.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 175104 c:\windows\system32\dllcache\w32time.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 430592 c:\windows\system32\dllcache\vssapi.dll
    + 2012-05-28 05:04 . 2001-08-17 20:28 397502 c:\windows\system32\dllcache\vpctcom.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 604253 c:\windows\system32\dllcache\vmodem.sys
    + 2012-05-28 05:04 . 2001-08-17 19:14 249402 c:\windows\system32\dllcache\vinwm.sys
    + 2007-09-06 05:25 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 218624 c:\windows\system32\dllcache\uxtheme.dll
    + 2012-05-28 05:04 . 2001-08-17 20:28 687999 c:\windows\system32\dllcache\usrwdxjs.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 765884 c:\windows\system32\dllcache\usrti.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 113762 c:\windows\system32\dllcache\usrpda.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 224802 c:\windows\system32\dllcache\usr1807a.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 794399 c:\windows\system32\dllcache\usr1806v.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 793598 c:\windows\system32\dllcache\usr1806.sys
    + 2012-05-28 05:04 . 2001-08-17 20:28 794654 c:\windows\system32\dllcache\usr1801.sys
    + 2004-08-04 12:00 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
    - 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 727040 c:\windows\system32\dllcache\userenv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 578560 c:\windows\system32\dllcache\user32.dll
    + 2004-08-04 12:00 . 2008-04-13 18:45 143872 c:\windows\system32\dllcache\usbport.sys
    + 2004-08-04 12:00 . 2012-03-01 11:01 105984 c:\windows\system32\dllcache\url.dll
    - 2004-08-04 12:00 . 2009-03-08 11:34 105984 c:\windows\system32\dllcache\url.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 185856 c:\windows\system32\dllcache\upnphost.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 133632 c:\windows\system32\dllcache\upnp.dll
    + 2004-08-04 12:00 . 2008-04-13 18:39 384768 c:\windows\system32\dllcache\update.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 123392 c:\windows\system32\dllcache\umpnpmgr.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 211968 c:\windows\system32\dllcache\um54scan.dll
    + 2012-05-28 05:03 . 2001-08-18 05:36 216064 c:\windows\system32\dllcache\um34scan.dll
    - 2009-09-14 19:12 . 2009-06-21 21:44 153088 c:\windows\system32\dllcache\triedit.dll
    + 2007-09-06 05:24 . 2009-06-21 21:44 153088 c:\windows\system32\dllcache\triedit.dll
    + 2012-05-28 05:03 . 2001-08-17 19:51 166784 c:\windows\system32\dllcache\tridxpm.sys
    + 2012-05-28 05:03 . 2001-08-18 05:36 525568 c:\windows\system32\dllcache\tridxp.dll
    + 2012-05-28 05:03 . 2001-08-17 19:51 159232 c:\windows\system32\dllcache\tridkbm.sys
    + 2012-05-28 05:03 . 2001-08-17 21:56 440576 c:\windows\system32\dllcache\tridkb.dll
    + 2012-05-28 05:03 . 2001-08-17 19:51 222336 c:\windows\system32\dllcache\trid3dm.sys
    + 2012-05-28 05:03 . 2001-08-17 21:56 315520 c:\windows\system32\dllcache\trid3d.dll
    + 2012-05-28 05:02 . 2001-08-17 21:02 230912 c:\windows\system32\dllcache\tosdvd03.sys
    + 2012-05-28 05:02 . 2001-08-17 21:01 241664 c:\windows\system32\dllcache\tosdvd02.sys
    + 2012-05-28 05:02 . 2001-08-17 19:14 123995 c:\windows\system32\dllcache\tjisdn.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 385536 c:\windows\system32\dllcache\themeui.dll
    + 2012-05-28 05:02 . 2001-08-17 19:51 138528 c:\windows\system32\dllcache\tgiulnt5.sys
    + 2012-05-28 05:02 . 2008-04-13 18:40 149376 c:\windows\system32\dllcache\tffsport.sys
    + 2009-05-10 17:29 . 2008-04-14 00:12 295424 c:\windows\system32\dllcache\termsrv.dll
    - 2008-06-20 11:51 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\tcpip.sys
    + 2004-08-04 12:00 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\tcpip.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 249856 c:\windows\system32\dllcache\tapisrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 181760 c:\windows\system32\dllcache\tapi32.dll
    + 2012-05-28 05:02 . 2001-08-17 21:56 172768 c:\windows\system32\dllcache\t2r4disp.dll
    - 2009-06-16 14:36 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-08-04 12:00 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 713216 c:\windows\system32\dllcache\sxs.dll
    + 2012-05-28 05:01 . 2001-08-17 20:50 103936 c:\windows\system32\dllcache\sx.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 121856 c:\windows\system32\dllcache\stobject.dll
    + 2012-05-28 05:01 . 2001-08-18 05:36 155648 c:\windows\system32\dllcache\stlnprop.dll
    + 2012-05-28 05:01 . 2001-08-17 19:18 285760 c:\windows\system32\dllcache\stlnata.sys
    + 2004-08-04 12:00 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    - 2009-05-12 21:34 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    + 2009-05-10 17:30 . 2008-04-14 00:12 171008 c:\windows\system32\dllcache\srsvc.dll
    + 2009-05-10 17:30 . 2008-04-14 00:12 239104 c:\windows\system32\dllcache\srrstr.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 250368 c:\windows\system32\dllcache\sptip.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 538624 c:\windows\system32\dllcache\spider.exe
    + 2012-05-28 05:01 . 2001-08-18 05:36 106584 c:\windows\system32\dllcache\spdports.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 188416 c:\windows\system32\dllcache\snmpsmir.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 358400 c:\windows\system32\dllcache\snmpincl.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 259072 c:\windows\system32\dllcache\snmpcl.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 456192 c:\windows\system32\dllcache\smtpsvc.dll
    + 2012-05-28 05:00 . 2001-08-17 21:56 147200 c:\windows\system32\dllcache\smidispb.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 236544 c:\windows\system32\dllcache\smi2smir.exe
    + 2012-05-28 05:00 . 2001-08-17 21:56 157696 c:\windows\system32\dllcache\sisv256.dll
    + 2012-05-28 04:59 . 2001-08-17 19:50 104064 c:\windows\system32\dllcache\sisgrp.sys
    + 2012-05-28 04:59 . 2001-08-17 21:56 150144 c:\windows\system32\dllcache\sis6306v.dll
    + 2012-05-28 04:59 . 2001-08-17 21:56 252032 c:\windows\system32\dllcache\sis300iv.dll
    + 2012-05-28 04:59 . 2001-08-17 19:50 101760 c:\windows\system32\dllcache\sis300ip.sys
    + 2004-08-04 12:00 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
    - 2009-07-27 23:17 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
    + 2004-08-04 12:00 . 2009-12-08 09:23 474112 c:\windows\system32\dllcache\shlwapi.dll
    - 2009-12-08 09:23 . 2009-12-08 09:23 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-08-04 12:00 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    - 2011-01-21 14:44 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    + 2004-08-04 12:00 . 2008-04-13 17:03 549376 c:\windows\system32\dllcache\shdoclc.dll
    + 2012-05-28 04:59 . 2001-07-21 21:29 161568 c:\windows\system32\dllcache\sgsmusb.sys
    + 2012-05-28 04:59 . 2001-08-18 05:36 386560 c:\windows\system32\dllcache\sgiul50.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 140288 c:\windows\system32\dllcache\sfc_os.dll
    + 2004-08-04 12:00 . 2008-04-14 12:42 985088 c:\windows\system32\dllcache\setupapi.dll
    + 2004-08-04 12:00 . 2009-02-06 11:11 110592 c:\windows\system32\dllcache\services.exe
    - 2009-05-12 21:34 . 2009-02-06 11:11 110592 c:\windows\system32\dllcache\services.exe
    - 2008-05-09 10:53 . 2008-05-09 10:53 180224 c:\windows\system32\dllcache\scrobj.dll
    + 2004-08-04 12:00 . 2008-05-09 10:53 180224 c:\windows\system32\dllcache\scrobj.dll
    + 2009-05-10 17:30 . 2008-04-14 00:12 192512 c:\windows\system32\dllcache\schedsvc.dll
    + 2004-08-04 12:00 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 314880 c:\windows\system32\dllcache\scesrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 181248 c:\windows\system32\dllcache\scecli.dll
    + 2012-05-28 04:59 . 2001-08-18 05:36 495616 c:\windows\system32\dllcache\sblfx.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 415744 c:\windows\system32\dllcache\samsrv.dll
    + 2012-05-28 04:58 . 2001-08-17 21:56 245632 c:\windows\system32\dllcache\s3savmx.dll
    + 2012-05-28 04:58 . 2001-08-17 21:56 198400 c:\windows\system32\dllcache\s3sav4.dll
    + 2012-05-28 04:58 . 2001-08-17 21:56 179264 c:\windows\system32\dllcache\s3sav3d.dll
    + 2012-05-28 04:58 . 2001-08-17 21:56 210496 c:\windows\system32\dllcache\s3mvirge.dll
    + 2012-05-28 04:58 . 2001-08-17 21:56 182272 c:\windows\system32\dllcache\s3mt3d.dll
    + 2012-05-28 04:58 . 2001-08-17 19:50 166720 c:\windows\system32\dllcache\s3m.sys
    + 2004-08-04 12:00 . 2008-04-13 17:37 208384 c:\windows\system32\dllcache\rsaenh.dll
    + 2004-08-04 12:00 . 2009-02-09 12:10 401408 c:\windows\system32\dllcache\rpcss.dll
    - 2009-05-12 21:34 . 2009-02-09 12:10 401408 c:\windows\system32\dllcache\rpcss.dll
    - 2009-04-15 14:51 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
    + 2004-08-04 12:00 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 433664 c:\windows\system32\dllcache\riched20.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 178176 c:\windows\system32\dllcache\repdrvfs.dll
    + 2009-05-10 17:29 . 2012-01-09 16:20 139784 c:\windows\system32\dllcache\rdpwd.sys
    + 2004-08-04 12:00 . 2008-04-13 19:28 175744 c:\windows\system32\dllcache\rdbss.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 102400 c:\windows\system32\dllcache\rcbdyctl.dll
    + 2004-08-04 12:00 . 2009-10-12 13:38 149504 c:\windows\system32\dllcache\rastls.dll
    - 2009-10-12 13:38 . 2009-10-12 13:38 149504 c:\windows\system32\dllcache\rastls.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 210944 c:\windows\system32\dllcache\rasppp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 186368 c:\windows\system32\dllcache\rasmans.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 658432 c:\windows\system32\dllcache\rasdlg.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 237056 c:\windows\system32\dllcache\rasapi32.dll
    + 2012-05-28 04:57 . 2001-08-17 20:28 714762 c:\windows\system32\dllcache\r2mdmkxx.sys
    + 2012-05-28 04:57 . 2001-08-17 20:28 899146 c:\windows\system32\dllcache\r2mdkxga.sys
    + 2009-05-10 17:31 . 2008-04-14 00:12 409088 c:\windows\system32\dllcache\qmgr.dll
    + 2004-08-04 12:00 . 2011-11-03 15:28 386048 c:\windows\system32\dllcache\qdvd.dll
    - 2004-08-04 12:00 . 2008-04-14 00:12 386048 c:\windows\system32\dllcache\qdvd.dll
    + 2012-05-28 04:57 . 2001-08-17 20:28 130942 c:\windows\system32\dllcache\ptserlv.sys
    + 2012-05-28 04:57 . 2001-08-17 20:28 112574 c:\windows\system32\dllcache\ptserlp.sys
    + 2012-05-28 04:57 . 2001-08-17 20:28 128286 c:\windows\system32\dllcache\ptserli.sys
    + 2012-05-28 04:57 . 2008-04-14 00:12 159232 c:\windows\system32\dllcache\ptpusd.dll
    + 2012-05-28 04:57 . 2008-04-14 00:12 363520 c:\windows\system32\dllcache\psisdecd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 560640 c:\windows\system32\dllcache\printui.dll
    + 2012-05-28 04:56 . 2001-08-17 21:04 173696 c:\windows\system32\dllcache\philcam2.sys
    + 2012-05-28 04:56 . 2008-04-14 00:10 259328 c:\windows\system32\dllcache\perm3dd.dll
    + 2012-05-28 04:56 . 2008-04-14 00:10 211584 c:\windows\system32\dllcache\perm2dll.dll
    - 2009-05-12 21:34 . 2009-03-06 14:22 284160 c:\windows\system32\dllcache\pdh.dll
    + 2004-08-04 12:00 . 2009-03-06 14:22 284160 c:\windows\system32\dllcache\pdh.dll
    + 2012-05-28 04:56 . 2004-08-04 05:06 169984 c:\windows\system32\dllcache\pcx500.sys
    + 2009-05-10 17:31 . 2008-04-14 00:12 102912 c:\windows\system32\dllcache\pchshell.dll
    + 2012-05-28 04:55 . 2001-08-18 05:36 116736 c:\windows\system32\dllcache\ovcodec2.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 144384 c:\windows\system32\dllcache\onex.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 122880 c:\windows\system32\dllcache\oledlg.dll
    + 2004-08-04 12:00 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll
    + 2004-08-04 12:00 . 2011-09-26 18:41 220160 c:\windows\system32\dllcache\oleacc.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    + 2004-08-04 12:00 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 206848 c:\windows\system32\dllcache\occache.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 206848 c:\windows\system32\dllcache\occache.dll
    - 2009-10-13 10:30 . 2009-10-13 10:30 270336 c:\windows\system32\dllcache\oakley.dll
    + 2004-08-04 12:00 . 2009-10-13 10:30 270336 c:\windows\system32\dllcache\oakley.dll
    + 2012-05-28 04:55 . 2001-08-17 19:50 198144 c:\windows\system32\dllcache\nv3.sys
    + 2012-05-28 04:55 . 2001-08-18 05:36 123776 c:\windows\system32\dllcache\nv3.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 420864 c:\windows\system32\dllcache\ntvdm.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 143360 c:\windows\system32\dllcache\ntshrui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 118784 c:\windows\system32\dllcache\ntmarta.dll
    - 2009-05-12 21:34 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    + 2004-08-04 12:00 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    + 2007-09-06 05:24 . 2008-04-14 00:12 188416 c:\windows\system32\dllcache\nmwb.dll
    + 2007-09-06 05:24 . 2008-04-14 00:12 229376 c:\windows\system32\dllcache\nmas.dll
    + 2012-05-28 04:55 . 2001-08-17 19:20 126080 c:\windows\system32\dllcache\nm5a2wdm.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 247808 c:\windows\system32\dllcache\newdev.dll
    + 2012-05-28 04:55 . 2004-08-04 05:31 132695 c:\windows\system32\dllcache\netwlan5.sys
    + 2004-08-04 12:00 . 2008-04-14 00:12 245760 c:\windows\system32\dllcache\netui1.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 198144 c:\windows\system32\dllcache\netman.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 407040 c:\windows\system32\dllcache\netlogon.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 139264 c:\windows\system32\dllcache\netid.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 622592 c:\windows\system32\dllcache\netcfgx.dll
    - 2009-05-12 21:33 . 2008-10-15 16:34 337408 c:\windows\system32\dllcache\netapi32.dll
    + 2004-08-04 12:00 . 2008-10-15 16:34 337408 c:\windows\system32\dllcache\netapi32.dll
    + 2012-05-28 04:54 . 2001-08-17 19:11 128000 c:\windows\system32\dllcache\n100325.sys
    + 2004-08-04 12:00 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys
    + 2012-05-28 04:54 . 2001-08-17 19:50 103296 c:\windows\system32\dllcache\mtxvideo.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 119808 c:\windows\system32\dllcache\mtstocom.exe
    + 2004-08-04 12:00 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
    - 2008-06-20 17:46 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 121344 c:\windows\system32\dllcache\msvfw32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 343040 c:\windows\system32\dllcache\msvcrt.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 413696 c:\windows\system32\dllcache\msvcp60.dll
    - 2009-06-25 08:25 . 2009-09-11 14:18 136192 c:\windows\system32\dllcache\msv1_0.dll
    + 2004-08-04 12:00 . 2009-09-11 14:18 136192 c:\windows\system32\dllcache\msv1_0.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 195072 c:\windows\system32\dllcache\msutb.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 116224 c:\windows\system32\dllcache\mstlsapi.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 611840 c:\windows\system32\dllcache\mstime.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 611840 c:\windows\system32\dllcache\mstime.dll
    + 2009-05-10 17:30 . 2008-04-14 00:12 274944 c:\windows\system32\dllcache\mstask.dll
    + 2009-05-10 17:29 . 2009-12-16 18:43 343040 c:\windows\system32\dllcache\mspaint.exe
    - 2009-12-16 18:43 . 2009-12-16 18:43 343040 c:\windows\system32\dllcache\mspaint.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 290816 c:\windows\system32\dllcache\msnsspc.dll
    + 2009-05-10 17:30 . 2008-04-14 00:11 376832 c:\windows\system32\dllcache\msinfo.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 159232 c:\windows\system32\dllcache\msimtf.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 997376 c:\windows\system32\dllcache\msgina.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 539136 c:\windows\system32\dllcache\msftedit.dll
    + 2009-07-28 20:34 . 2012-03-01 11:01 602112 c:\windows\system32\dllcache\msfeeds.dll
    - 2009-07-28 20:34 . 2011-02-22 23:06 602112 c:\windows\system32\dllcache\msfeeds.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 297984 c:\windows\system32\dllcache\msctf.dll
    + 2007-09-06 05:24 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    + 2004-08-04 12:00 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys
    + 2004-08-04 12:00 . 2008-04-13 16:45 216064 c:\windows\system32\dllcache\moricons.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 153600 c:\windows\system32\dllcache\modemui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 143360 c:\windows\system32\dllcache\mobsync.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 163328 c:\windows\system32\dllcache\mmcbase.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 586240 c:\windows\system32\dllcache\mlang.dll
    + 2012-05-28 04:53 . 2001-08-17 19:50 320384 c:\windows\system32\dllcache\mgaum.sys
    + 2012-05-28 04:53 . 2001-08-17 21:56 235648 c:\windows\system32\dllcache\mgaud.dll
    - 2010-09-18 19:23 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2004-08-04 12:00 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2012-05-28 04:53 . 2001-08-17 19:12 164586 c:\windows\system32\dllcache\mdgndis5.sys
    + 2012-05-28 04:53 . 2001-08-17 20:28 797500 c:\windows\system32\dllcache\ltsmt.sys
    + 2012-05-28 04:53 . 2004-08-04 05:41 420992 c:\windows\system32\dllcache\ltmdmntt.sys
    + 2012-05-28 04:53 . 2001-08-17 20:28 576746 c:\windows\system32\dllcache\ltmdmntl.sys
    + 2012-05-28 04:53 . 2004-08-04 05:41 606684 c:\windows\system32\dllcache\ltmdmnt.sys
    + 2012-05-28 04:53 . 2001-08-17 20:28 727786 c:\windows\system32\dllcache\ltck000c.sys
    - 2009-05-12 21:34 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2004-08-04 12:00 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 514560 c:\windows\system32\dllcache\logonui.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 220672 c:\windows\system32\dllcache\logon.scr
    + 2004-08-04 12:00 . 2009-05-07 15:32 345600 c:\windows\system32\dllcache\localspl.dll
    - 2009-05-07 15:32 . 2009-05-07 15:32 345600 c:\windows\system32\dllcache\localspl.dll
    - 2009-03-21 14:06 . 2009-03-21 14:06 989696 c:\windows\system32\dllcache\kernel32.dll
    + 2004-08-04 12:00 . 2009-03-21 14:06 989696 c:\windows\system32\dllcache\kernel32.dll
    + 2004-08-04 12:00 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    - 2009-06-25 08:25 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2012-05-28 04:52 . 2008-04-14 00:11 253952 c:\windows\system32\dllcache\kdsusd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 138240 c:\windows\system32\dllcache\itss.dll
    + 2012-05-28 04:52 . 2008-04-14 00:12 151552 c:\windows\system32\dllcache\irftp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 183808 c:\windows\system32\dllcache\ipsecsvc.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 331264 c:\windows\system32\dllcache\ipnathlp.dll
    + 2004-08-04 12:00 . 2008-04-13 18:57 152832 c:\windows\system32\dllcache\ipnat.sys
    - 2009-05-10 17:30 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2009-05-10 17:30 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 110080 c:\windows\system32\dllcache\imm32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 150528 c:\windows\system32\dllcache\imapi.exe
    + 2004-08-04 12:00 . 2012-02-29 14:10 148480 c:\windows\system32\dllcache\imagehlp.dll
    - 2009-06-11 22:08 . 2011-02-22 23:06 247808 c:\windows\system32\dllcache\ieproxy.dll
    + 2009-06-11 22:08 . 2012-03-01 11:01 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 184320 c:\windows\system32\dllcache\iepeers.dll
    - 2010-06-10 03:49 . 2011-02-22 23:06 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2010-06-10 03:49 . 2012-03-01 11:01 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 387584 c:\windows\system32\dllcache\iedkcs32.dll
    - 2004-08-04 12:00 . 2011-02-22 23:06 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2004-08-04 12:00 . 2012-02-29 12:17 174080 c:\windows\system32\dllcache\ie4uinit.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 254976 c:\windows\system32\dllcache\icm32.dll
    + 2012-05-28 04:51 . 2001-08-17 21:06 100992 c:\windows\system32\dllcache\icam5usb.sys
    + 2012-05-28 04:51 . 2001-08-17 21:06 154496 c:\windows\system32\dllcache\icam4usb.sys
    + 2012-05-28 04:51 . 2001-08-17 21:05 141056 c:\windows\system32\dllcache\icam3.sys
    + 2012-05-28 04:51 . 2001-08-17 19:12 109085 c:\windows\system32\dllcache\ibmtrp.sys
    + 2012-05-28 04:51 . 2001-08-17 19:12 100936 c:\windows\system32\dllcache\ibmtok.sys
    + 2012-05-28 04:51 . 2004-08-04 05:29 161020 c:\windows\system32\dllcache\i81xnt5.sys
    + 2012-05-28 04:51 . 2008-04-14 00:11 702845 c:\windows\system32\dllcache\i81xdnt5.dll
    + 2012-05-28 04:51 . 2001-08-17 21:56 353184 c:\windows\system32\dllcache\i740dnt5.dll
    - 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
    + 2004-08-04 12:00 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 488383 c:\windows\system32\dllcache\hsf_v124.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 542879 c:\windows\system32\dllcache\hsf_msft.sys
    + 2012-05-28 04:51 . 2001-08-17 20:28 391199 c:\windows\system32\dllcache\hsf_k56k.sys
    + 2012-05-28 04:50 . 2001-08-17 20:28 115807 c:\windows\system32\dllcache\hsf_fsks.sys
    + 2012-05-28 04:50 . 2001-08-17 20:28 199711 c:\windows\system32\dllcache\hsf_faxx.sys
    + 2012-05-28 04:50 . 2001-08-17 20:28 289887 c:\windows\system32\dllcache\hsf_fall.sys
    + 2012-05-28 04:50 . 2001-08-17 20:28 150239 c:\windows\system32\dllcache\hsf_amos.sys
    + 2012-05-28 04:50 . 2001-08-18 05:36 324608 c:\windows\system32\dllcache\hpojwia.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 165888 c:\windows\system32\dllcache\hpgt53.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 126976 c:\windows\system32\dllcache\hpgt34tk.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 101376 c:\windows\system32\dllcache\hpgt34.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 123392 c:\windows\system32\dllcache\hpgt21tk.dll
    + 2012-05-28 04:50 . 2001-08-18 05:36 119296 c:\windows\system32\dllcache\hpdigwia.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 344064 c:\windows\system32\dllcache\hnetcfg.dll
    - 2010-07-14 19:04 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    + 2009-05-10 17:30 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    + 2009-05-10 17:30 . 2008-04-14 00:12 769024 c:\windows\system32\dllcache\helpctr.exe
    + 2012-05-28 04:50 . 2001-08-17 20:28 907456 c:\windows\system32\dllcache\hcf_msft.sys
    - 2008-10-23 12:36 . 2008-10-23 12:36 286720 c:\windows\system32\dllcache\gdi32.dll
    + 2004-08-04 12:00 . 2008-10-23 12:36 286720 c:\windows\system32\dllcache\gdi32.dll
    + 2012-05-28 04:50 . 2001-08-17 19:49 322432 c:\windows\system32\dllcache\g400m.sys
    + 2012-05-28 04:49 . 2001-08-17 19:49 320384 c:\windows\system32\dllcache\g200m.sys
    + 2012-05-28 04:49 . 2001-08-17 21:56 470144 c:\windows\system32\dllcache\g200d.dll
    + 2012-05-28 04:49 . 2001-08-17 19:15 454912 c:\windows\system32\dllcache\fxusbase.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 400384 c:\windows\system32\dllcache\fxsxp32.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 192512 c:\windows\system32\dllcache\fxswzrd.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 154112 c:\windows\system32\dllcache\fxsui.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 397312 c:\windows\system32\dllcache\fxstiff.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 246272 c:\windows\system32\dllcache\fxst30.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 267776 c:\windows\system32\dllcache\fxssvc.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 562176 c:\windows\system32\dllcache\fxsst.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 229376 c:\windows\system32\dllcache\fxscover.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 285184 c:\windows\system32\dllcache\fxscomex.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 142848 c:\windows\system32\dllcache\fxsclnt.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 451584 c:\windows\system32\dllcache\fxsapi.dll
    + 2012-05-28 04:49 . 2001-08-17 19:15 455296 c:\windows\system32\dllcache\fusbbase.sys
    + 2012-05-28 04:49 . 2001-08-17 19:15 455680 c:\windows\system32\dllcache\fus2base.sys
    + 2009-05-10 17:29 . 2008-04-14 00:11 185344 c:\windows\system32\dllcache\framedyn.dll
    + 2012-05-28 04:49 . 2001-08-17 19:15 442240 c:\windows\system32\dllcache\fpnpbase.sys
    + 2007-04-02 16:36 . 2007-04-02 16:36 208896 c:\windows\system32\dllcache\fpmmcsat.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 598071 c:\windows\system32\dllcache\fpmmc.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 188494 c:\windows\system32\dllcache\fpcount.exe
    + 2012-05-28 04:49 . 2001-08-17 19:14 441728 c:\windows\system32\dllcache\fpcmbase.sys
    + 2012-05-28 04:49 . 2001-08-17 19:14 444416 c:\windows\system32\dllcache\fpcibase.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 109840 c:\windows\system32\dllcache\fp98swin.exe
    + 2008-04-14 00:11 . 2008-04-14 00:11 876653 c:\windows\system32\dllcache\fp4awel.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 102509 c:\windows\system32\dllcache\fp4atxt.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 147513 c:\windows\system32\dllcache\fp4apws.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 184435 c:\windows\system32\dllcache\fp4amsft.dll
    - 2009-05-12 21:34 . 2009-02-09 12:10 473600 c:\windows\system32\dllcache\fastprox.dll
    + 2009-05-10 17:29 . 2009-02-09 12:10 473600 c:\windows\system32\dllcache\fastprox.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 125952 c:\windows\system32\dllcache\exts.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 101888 c:\windows\system32\dllcache\evntagnt.dll
    + 2012-05-28 04:49 . 2004-08-04 05:32 137088 c:\windows\system32\dllcache\essm2e.sys
    + 2009-05-10 17:29 . 2008-04-14 00:11 247808 c:\windows\system32\dllcache\esscli.dll
    + 2012-05-28 04:49 . 2001-08-17 20:28 347550 c:\windows\system32\dllcache\es56tpi.sys
    + 2012-05-28 04:49 . 2001-08-17 20:28 594238 c:\windows\system32\dllcache\es56hpi.sys
    + 2012-05-28 04:49 . 2001-08-17 20:28 595647 c:\windows\system32\dllcache\es56cvmp.sys
    + 2012-05-28 04:49 . 2001-08-17 19:19 174464 c:\windows\system32\dllcache\es198x.sys
    - 2008-07-07 20:26 . 2008-07-07 20:26 253952 c:\windows\system32\dllcache\es.dll
    + 2004-08-04 12:00 . 2008-07-07 20:26 253952 c:\windows\system32\dllcache\es.dll
    + 2012-05-28 04:48 . 2001-08-17 19:17 629952 c:\windows\system32\dllcache\eqn.sys
    + 2012-05-28 04:48 . 2001-08-17 20:50 114944 c:\windows\system32\dllcache\epstw2k.sys
    + 2012-05-28 04:48 . 2001-08-17 20:50 144896 c:\windows\system32\dllcache\epcfw2k.sys
    - 2004-08-04 12:00 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    + 2004-08-04 12:00 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
    + 2012-05-28 04:48 . 2001-08-17 19:19 283904 c:\windows\system32\dllcache\emu10k1m.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 171520 c:\windows\system32\dllcache\el99xn51.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 455199 c:\windows\system32\dllcache\el985n51.sys
    + 2012-05-28 04:48 . 2001-08-17 19:11 153631 c:\windows\system32\dllcache\el90xnd5.sys
    + 2012-05-28 04:48 . 2001-08-17 20:28 241206 c:\windows\system32\dllcache\el656se5.sys
    + 2012-05-28 04:48 . 2001-08-17 20:28 634134 c:\windows\system32\dllcache\el656ct5.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 126976 c:\windows\system32\dllcache\eappcfg.dll
    + 2012-05-28 04:48 . 2001-08-17 19:12 117760 c:\windows\system32\dllcache\e100b325.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 304128 c:\windows\system32\dllcache\duser.dll
    + 2004-08-04 12:00 . 2008-04-13 17:37 138752 c:\windows\system32\dllcache\dssenh.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 367616 c:\windows\system32\dllcache\dsound.dll
    + 2012-05-28 04:48 . 2001-08-17 19:20 334208 c:\windows\system32\dllcache\ds1wdm.sys
    + 2004-08-04 12:00 . 2008-04-13 21:00 103424 c:\windows\system32\dllcache\dpcdll.dll
    + 2012-05-28 04:48 . 2008-04-13 18:39 206976 c:\windows\system32\dllcache\dot4.sys
    + 2004-08-04 12:00 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    - 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    + 2012-05-28 04:48 . 2001-08-17 19:14 952007 c:\windows\system32\dllcache\diwan.sys
    + 2012-05-28 04:48 . 2001-08-18 05:36 236060 c:\windows\system32\dllcache\ditrace.exe
    + 2012-05-28 04:47 . 2001-08-18 05:36 614429 c:\windows\system32\dllcache\digiview.exe
    + 2012-05-28 04:47 . 2001-08-18 05:36 110621 c:\windows\system32\dllcache\digirlpt.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 102484 c:\windows\system32\dllcache\digiinf.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 159828 c:\windows\system32\dllcache\digihlc.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 229462 c:\windows\system32\dllcache\digifwrk.dll
    + 2012-05-28 04:47 . 2001-08-17 19:13 103044 c:\windows\system32\dllcache\digidxb.sys
    + 2012-05-28 04:47 . 2001-08-18 05:36 131156 c:\windows\system32\dllcache\digidbp.dll
    + 2012-05-28 04:46 . 2001-08-17 19:13 164923 c:\windows\system32\dllcache\diapi2.sys
    + 2007-09-06 05:23 . 2008-04-14 00:12 539136 c:\windows\system32\dllcache\dialer.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 126976 c:\windows\system32\dllcache\dhcpcsvc.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 419357 c:\windows\system32\dllcache\dgconfig.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 105472 c:\windows\system32\dllcache\dfrgntfs.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 282624 c:\windows\system32\dllcache\devmgr.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 256512 c:\windows\system32\dllcache\devcon32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 279552 c:\windows\system32\dllcache\ddraw.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 110592 c:\windows\system32\dllcache\dc260usd.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 640000 c:\windows\system32\dllcache\dbghelp.dll
    + 2012-05-28 04:47 . 2001-08-17 20:52 179584 c:\windows\system32\dllcache\dac2w2k.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 824320 c:\windows\system32\dllcache\d3dim700.dll
    + 2012-05-28 04:47 . 2001-08-17 19:12 117760 c:\windows\system32\dllcache\d100ib5.sys
    + 2012-05-28 04:47 . 2001-08-17 19:19 111872 c:\windows\system32\dllcache\cwcspud.sys
    + 2012-05-28 04:47 . 2008-04-14 00:11 249856 c:\windows\system32\dllcache\ctmasetp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 326656 c:\windows\system32\dllcache\cscui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 101888 c:\windows\system32\dllcache\cscdll.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 175104 c:\windows\system32\dllcache\csamsp.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 512512 c:\windows\system32\dllcache\cryptui.dll
    + 2004-08-04 12:00 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 163840 c:\windows\system32\dllcache\credui.dll
    + 2012-05-28 04:47 . 2001-08-18 05:36 216064 c:\windows\system32\dllcache\cpscan.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 792064 c:\windows\system32\dllcache\comres.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 229376 c:\windows\system32\dllcache\compstui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 252928 c:\windows\system32\dllcache\compatui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 276992 c:\windows\system32\dllcache\comdlg32.dll
    + 2004-08-04 12:00 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    - 2010-10-13 21:10 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 389120 c:\windows\system32\dllcache\cmd.exe
    + 2009-05-10 17:29 . 2008-04-14 00:11 498688 c:\windows\system32\dllcache\clbcatq.dll
    + 2012-05-28 04:46 . 2001-08-17 20:57 248064 c:\windows\system32\dllcache\cl546xm.sys
    + 2012-05-28 04:46 . 2001-08-17 21:56 170880 c:\windows\system32\dllcache\cl546x.dll
    + 2012-05-28 04:46 . 2001-08-17 21:56 111232 c:\windows\system32\dllcache\cl5465.dll
    + 2012-05-28 04:46 . 2001-08-17 21:02 272640 c:\windows\system32\dllcache\cinemclc.sys
    + 2012-05-28 04:46 . 2001-08-17 19:13 980034 c:\windows\system32\dllcache\cicap.sys
    + 2008-04-14 00:12 . 2008-04-14 00:12 188480 c:\windows\system32\dllcache\cfgwiz.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 194560 c:\windows\system32\dllcache\certcli.dll
    + 2012-05-28 04:46 . 2001-08-17 20:28 714698 c:\windows\system32\dllcache\cbmdmkxx.sys
    + 2009-05-10 17:29 . 2008-04-14 00:11 625664 c:\windows\system32\dllcache\catsrvut.dll
    + 2009-05-10 17:29 . 2008-04-14 00:11 226304 c:\windows\system32\dllcache\catsrv.dll
    + 2012-05-28 04:46 . 2008-04-14 00:11 121856 c:\windows\system32\dllcache\camext30.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 236032 c:\windows\system32\dllcache\camext20.dll
    + 2012-05-28 04:46 . 2001-08-17 21:04 171264 c:\windows\system32\dllcache\camdrv30.sys
    + 2012-05-28 04:46 . 2001-08-17 21:04 223232 c:\windows\system32\dllcache\camdrv21.sys
    + 2012-05-28 04:46 . 2001-08-17 21:05 314752 c:\windows\system32\dllcache\camdro21.sys
    + 2012-05-28 04:46 . 2001-08-18 05:36 102400 c:\windows\system32\dllcache\binlsvc.dll
    + 2012-05-28 04:46 . 2001-08-17 20:28 871388 c:\windows\system32\dllcache\bcmdm.sys
    + 2012-05-28 04:46 . 2001-08-17 21:56 342336 c:\windows\system32\dllcache\banshee.dll
    + 2012-05-28 04:46 . 2001-08-18 05:36 144384 c:\windows\system32\dllcache\avmenum.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 588800 c:\windows\system32\dllcache\autochk.exe
    + 2004-08-04 12:00 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
    - 2010-04-20 05:30 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
    + 2012-05-28 04:46 . 2001-08-17 21:56 104832 c:\windows\system32\dllcache\atiraged.dll
    + 2012-05-28 04:46 . 2001-08-17 19:48 281600 c:\windows\system32\dllcache\atimtai.sys
    + 2012-05-28 04:45 . 2001-08-17 19:48 289664 c:\windows\system32\dllcache\atimpab.sys
    + 2012-05-28 04:45 . 2001-08-17 21:56 268160 c:\windows\system32\dllcache\atidvai.dll
    + 2012-05-28 04:45 . 2001-08-17 21:56 137216 c:\windows\system32\dllcache\atidrae.dll
    + 2012-05-28 04:45 . 2001-08-17 21:55 382592 c:\windows\system32\dllcache\atidrab.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 331264 c:\windows\system32\dllcache\aqueue.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 125952 c:\windows\system32\dllcache\apphelp.dll
    - 2004-08-04 12:00 . 2008-10-16 14:43 138496 c:\windows\system32\dllcache\afd.sys
    + 2004-08-04 12:00 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
    + 2004-08-04 12:00 . 2009-02-09 12:10 617472 c:\windows\system32\dllcache\advapi32.dll
    - 2009-05-12 21:34 . 2009-02-09 12:10 617472 c:\windows\system32\dllcache\advapi32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 143360 c:\windows\system32\dllcache\adsldpc.dll
    + 2012-05-28 04:45 . 2001-08-17 21:07 101888 c:\windows\system32\dllcache\adpu160m.sys
    + 2012-05-28 04:45 . 2001-08-17 19:19 747392 c:\windows\system32\dllcache\adm8830.sys
    + 2012-05-28 04:45 . 2001-08-17 19:19 553984 c:\windows\system32\dllcache\adm8820.sys
    + 2012-05-28 04:45 . 2001-08-17 19:19 584448 c:\windows\system32\dllcache\adm8810.sys
    + 2004-08-04 12:00 . 2008-04-14 00:11 193536 c:\windows\system32\dllcache\activeds.dll
    - 2010-01-12 21:17 . 2009-11-21 15:51 471552 c:\windows\system32\dllcache\aclayers.dll
    + 2004-08-04 12:00 . 2009-11-21 15:51 471552 c:\windows\system32\dllcache\aclayers.dll
    + 2009-05-10 17:29 . 2008-04-14 00:12 184320 c:\windows\system32\dllcache\accwiz.exe
    + 2012-05-28 04:45 . 2001-08-17 19:20 297728 c:\windows\system32\dllcache\ac97sis.sys
    + 2012-05-28 04:45 . 2004-08-04 05:32 231552 c:\windows\system32\dllcache\ac97ali.sys
    + 2012-05-28 04:45 . 2001-08-18 05:36 462848 c:\windows\system32\dllcache\a3dapi.dll
    + 2012-05-28 04:45 . 2001-08-17 19:48 148352 c:\windows\system32\dllcache\3dfxvsm.sys
    + 2012-05-28 04:45 . 2001-08-17 21:55 689216 c:\windows\system32\dllcache\3dfxvs.dll
    + 2012-05-28 04:45 . 2001-08-17 20:28 762780 c:\windows\system32\dllcache\3cwmcru.sys
    - 2004-08-04 12:00 . 2008-04-14 00:11 599040 c:\windows\system32\crypt32.dll
    + 2004-08-04 12:00 . 2011-09-28 07:06 599040 c:\windows\system32\crypt32.dll
    + 2012-04-06 06:52 . 2012-04-06 06:52 131168 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2011-12-25 10:49 . 2011-12-25 10:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2012-01-31 10:38 . 2012-01-31 10:38 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 989968 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2012-06-01 15:50 . 2012-06-01 15:50 203776 c:\windows\Installer\4d623.msi
    + 2012-06-01 15:49 . 2012-06-01 15:49 900096 c:\windows\Installer\4d60f.msi
    + 2011-12-22 23:50 . 2011-12-22 23:50 256000 c:\windows\Installer\4d382.msp
    + 2012-06-01 16:01 . 2012-06-01 16:01 223744 c:\windows\Installer\176df6.msi
    + 2012-02-03 06:56 . 2012-02-03 06:56 963584 c:\windows\Installer\176ddc.msp
    + 2011-12-25 12:40 . 2011-12-25 12:40 819200 c:\windows\Installer\176dd2.msp
    + 2012-01-03 15:23 . 2012-01-03 15:23 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\pdfshell.dll
    + 2012-01-03 16:44 . 2012-01-03 16:44 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\PDFPrevHndlrShim.exe
    + 2012-01-03 15:22 . 2012-01-03 15:22 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\nppdf32.dll
    + 2012-01-03 16:43 . 2012-01-03 16:43 550360 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AdobeCollabSync.exe
    + 2012-01-03 15:40 . 2012-01-03 15:40 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRdIF.dll
    + 2012-01-04 05:50 . 2012-01-04 05:50 357808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32.exe
    + 2012-01-03 15:16 . 2012-01-03 15:16 665008 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroPDF.dll
    + 2012-01-03 16:38 . 2012-01-03 16:38 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acrobroker.exe
    + 2012-01-03 16:08 . 2012-01-03 16:08 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\a3dutility.exe
    + 2012-06-01 15:42 . 2011-02-22 23:06 916480 c:\windows\ie8updates\KB2675157-IE8\wininet.dll
    + 2012-06-01 15:42 . 2009-03-08 11:34 105984 c:\windows\ie8updates\KB2675157-IE8\url.dll
    + 2012-06-01 15:42 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2675157-IE8\spuninst\updspapi.dll
    + 2012-06-01 15:42 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2675157-IE8\spuninst\spuninst.exe
    + 2012-06-01 15:42 . 2011-02-22 23:06 206848 c:\windows\ie8updates\KB2675157-IE8\occache.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 611840 c:\windows\ie8updates\KB2675157-IE8\mstime.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 602112 c:\windows\ie8updates\KB2675157-IE8\msfeeds.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 247808 c:\windows\ie8updates\KB2675157-IE8\ieproxy.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 184320 c:\windows\ie8updates\KB2675157-IE8\iepeers.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 743424 c:\windows\ie8updates\KB2675157-IE8\iedvtool.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 387584 c:\windows\ie8updates\KB2675157-IE8\iedkcs32.dll
    + 2012-06-01 15:42 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2675157-IE8\ie4uinit.exe
    + 2012-06-01 15:30 . 2009-03-08 11:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
    + 2012-06-01 15:30 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
    + 2012-06-01 15:30 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
    + 2009-05-12 21:34 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2012-06-01 16:21 . 2012-06-01 16:21 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ac4fc3032c19946f9b2729468888206d\WsatConfig.ni.exe
    + 2012-06-01 16:14 . 2012-06-01 16:14 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\6198de2c5b8f7d89404c2ba39d69ae56\WindowsFormsIntegration.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\be27ab5913cec2b292a019c2a13ec701\UIAutomationTypes.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\04e5e2be34a70ee7f4c87550238095a0\UIAutomationClient.ni.dll
    + 2012-06-01 16:24 . 2012-06-01 16:24 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\1c13b08593e99d6f5bef49ae7939c78b\System.Xml.Linq.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\8bffbaa5d5abe40674d0bc124dfe8622\System.Web.Routing.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\6c7765c10516d375e9ddedad2dbab848\System.Web.RegularExpressions.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\a7908debe80c209b599529685a159fa0\System.Web.Extensions.Design.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\44ecb9f7be54a2ba46e6102d343e2e7e\System.Web.Entity.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\fee8237aa2daa36e48aec379ee642422\System.Web.Entity.Design.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\40d90d2c1484164b786067320ce778f4\System.Web.DynamicData.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6b4ce8cf2c3307b75ea7ebe77258bb26\System.Web.Abstractions.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\41f6f6dd0c8427d4a8e6fd3915505a6b\System.Transactions.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8dc4a28c456f81ee7399da21bd9d55aa\System.ServiceProcess.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\129b15861e200613ff78ae15581f9093\System.Security.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a644ec04e18202b60f9d828bc207972b\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\4a9eb43005a041959ddc5c7e586ab746\System.Net.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9080c8e8e7b6dfb502c1328673d636f8\System.Management.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\3182a049ba953010dec649cf290a9e90\System.Management.Instrumentation.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 160256 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\565bc89beb2fb404b1612721a9d56d3a\System.Management.Automation.resources.ni.dll
    + 2012-06-01 16:20 . 2012-06-01 16:20 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\8991f21d4b3676bf6f779110db8d4ac9\System.IO.Log.ni.dll
    + 2012-06-01 16:20 . 2012-06-01 16:20 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cd9c60a35d4958e94d2e3dd2f778e2e9\System.IdentityModel.Selectors.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.Wrapper.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\29bce0113d611084a9329349e33528ac\System.EnterpriseServices.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\88aa4f80c7e5ac25f06f8950e42a1678\System.Drawing.Design.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ca484772955bc4db03b5dcb611c09423\System.DirectoryServices.Protocols.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\8ba5e68dddfd3279a8469d39eded48f3\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\a0109fce606a3110a5e7f9a4773f517e\System.Data.Services.Design.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3a68d0441f509ffa6f8f0fb9cfcc5780\System.Data.Services.Client.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04440b3dd5d822da4973a525ee04b05d\System.Data.Entity.Design.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7bbb5d9e3b161b4d4b968e590442d3ae\System.Data.DataSetExtensions.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3d5b7368bde0f65aa15d9f46b498cc89\System.Configuration.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\bf7d6af03e1230ccad546a8659245ae9\System.Configuration.Install.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\931a2bece4668863db4f852401c828cf\System.AddIn.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6762f1ee780fa9c0b4ef66b285c64844\SMSvcHost.ni.exe
    + 2012-06-01 16:21 . 2012-06-01 16:21 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\660c4d6dd69ef22bc05587e1998cd135\SMDiagnostics.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\47ed5bc9f42ea0054ce9acfde5e640b8\ServiceModelReg.ni.exe
    + 2012-06-01 16:13 . 2012-06-01 16:13 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a4706b850df9a3483f2fc439b6abe616\PresentationFramework.Royale.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8b873631a0855fb6aa0ad25f1d9de7fe\PresentationFramework.Luna.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7416fe825e6e49a87fa8ff60c8971813\PresentationFramework.Classic.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\186c27fbd7b38b5551889274f6fa2ccd\PresentationFramework.Aero.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5a121969a115d11b6256eb960c145686\MSBuild.ni.exe
    + 2012-06-01 16:21 . 2012-06-01 16:21 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\97c613d3899b320a6765793bdf490272\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 492032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d4375675fc5879a48c22dc8d7c80e841\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b0ec75b69d7a18a98de94e7b635d5b44\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\937d2550dddbd2e5995ec8f93083f357\Microsoft.PowerShell.Security.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 433664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\15b7846d6acc551a7afdf5cc3de7547b\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\dec22fb7d6b8929a41380e5359741a07\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1009b31c86a1b798fffa9e0127cec29c\Microsoft.Build.Utilities.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\21d88631ef629715d3eecdd08e62e0b8\Microsoft.Build.Engine.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a0f38c6478cca8297fb160291346c1c9\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bb26dd100d656605c576881a1a823667\CustomMarshalers.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\9869c02d18825fdd32e64135a3e7246b\ComSvcConfig.ni.exe
    + 2012-06-01 16:20 . 2012-06-01 16:20 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e414683ec4cff1cac0c77aaefd67144e\AspNetMMCExt.ni.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2009-08-16 10:07 . 2009-08-16 10:07 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2012-06-01 15:40 . 2012-06-01 15:40 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2012-06-01 15:33 . 2012-06-01 15:33 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2009-08-16 10:05 . 2009-08-16 10:05 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-06-01 15:33 . 2012-06-01 15:33 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2012-06-01 06:40 . 2012-02-09 15:43 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\GdiPlus.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll
    + 2011-04-19 05:51 . 2011-04-19 05:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 1212416 c:\windows\system32\urlmon.dll
    + 2004-08-04 12:00 . 2011-11-03 15:28 1292288 c:\windows\system32\quartz.dll
    + 2004-08-04 12:00 . 2011-11-01 16:07 1288704 c:\windows\system32\ole32.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 5978624 c:\windows\system32\mshtml.dll
    + 2009-03-08 11:32 . 2012-03-01 11:01 2000384 c:\windows\system32\iertutil.dll
    + 2004-08-04 12:00 . 2008-04-13 17:39 2897920 c:\windows\system32\dllcache\xpsp2res.dll
    + 2007-09-06 05:25 . 2008-04-14 00:12 4256768 c:\windows\system32\dllcache\wmm2res.dll
    + 2004-08-04 12:00 . 2012-04-11 13:12 1862272 c:\windows\system32\dllcache\win32k.sys
    + 2004-08-04 12:00 . 2012-03-01 11:01 1212416 c:\windows\system32\dllcache\urlmon.dll
    - 2008-06-17 19:02 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2004-08-04 12:00 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 1499136 c:\windows\system32\dllcache\shdocvw.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 1614848 c:\windows\system32\dllcache\sfcfiles.dll
    + 2004-08-04 12:00 . 2011-11-03 15:28 1292288 c:\windows\system32\dllcache\quartz.dll
    + 2004-08-04 12:00 . 2011-11-01 16:07 1288704 c:\windows\system32\dllcache\ole32.dll
    + 2004-08-04 12:00 . 2012-04-11 13:10 2192640 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2009-05-12 21:34 . 2012-04-11 12:35 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2004-08-03 22:59 . 2012-04-11 12:35 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2009-05-12 21:34 . 2012-04-11 13:14 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2004-08-04 12:00 . 2008-04-14 00:12 1703936 c:\windows\system32\dllcache\netshell.dll
    + 2004-08-04 12:00 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
    - 2009-05-12 21:33 . 2010-06-14 07:41 1172480 c:\windows\system32\dllcache\msxml3.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 2843136 c:\windows\system32\dllcache\msi.dll
    + 2004-08-04 12:00 . 2012-03-01 11:01 5978624 c:\windows\system32\dllcache\mshtml.dll
    + 2007-09-06 05:25 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
    - 2010-03-10 09:30 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
    + 2009-05-10 17:29 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    - 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    + 2009-06-11 22:08 . 2012-03-01 11:01 2000384 c:\windows\system32\dllcache\iertutil.dll
    + 2004-08-04 12:00 . 2008-04-14 00:12 1033728 c:\windows\system32\dllcache\explorer.exe
    + 2004-08-04 12:00 . 2008-04-14 00:11 1082368 c:\windows\system32\dllcache\esent.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 1689088 c:\windows\system32\dllcache\d3d9.dll
    + 2007-09-06 05:24 . 2008-04-14 00:12 1032192 c:\windows\system32\dllcache\conf.exe
    + 2009-05-10 17:29 . 2008-04-14 00:11 1267200 c:\windows\system32\dllcache\comsvcs.dll
    + 2009-05-10 17:29 . 2008-04-14 00:11 1358848 c:\windows\system32\dllcache\cimwin32.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2004-08-04 12:00 . 2008-04-14 00:11 1852928 c:\windows\system32\dllcache\acgenral.dll
    - 2008-07-25 18:17 . 2008-07-25 18:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 5913360 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2011-01-18 11:39 . 2011-01-18 11:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2011-12-25 10:50 . 2011-12-25 10:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2012-03-27 15:47 . 2012-03-27 15:47 4959232 c:\windows\Installer\4d379.msp
    + 2012-06-01 15:37 . 2012-06-01 15:37 3947520 c:\windows\Installer\4d2f2.msi
    + 2011-12-26 16:59 . 2011-12-26 16:59 4368896 c:\windows\Installer\176dc8.msp
    + 2012-01-03 15:18 . 2012-01-03 15:18 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\rt3d.dll
    + 2011-11-17 23:50 . 2011-11-17 23:50 6543872 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\authplay.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 1210880 c:\windows\ie8updates\KB2675157-IE8\urlmon.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 5962240 c:\windows\ie8updates\KB2675157-IE8\mshtml.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 1991680 c:\windows\ie8updates\KB2675157-IE8\iertutil.dll
    + 2009-05-12 21:34 . 2012-04-11 13:10 2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2009-05-12 21:34 . 2012-04-11 12:35 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2009-02-08 02:02 . 2012-04-11 12:35 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2009-05-12 21:34 . 2012-04-11 13:14 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2012-06-01 16:12 . 2012-06-01 16:12 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6d8bef0d008389874e55c0308f0c18e5\WindowsBase.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\41a81b97625c113b591ed082c95276e2\UIAutomationClientsideProviders.ni.dll
    + 2012-06-01 16:12 . 2012-06-01 16:12 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e4b5afc4da43b1c576f9322f9f2e1bfe\System.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3bba1b8b0b5ef0be238b011cc7a0575e\System.Xml.ni.dll
    + 2012-06-01 16:24 . 2012-06-01 16:24 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\33fa6a2055bf857bff2e31020279b5e9\System.WorkflowServices.ni.dll
    + 2012-06-01 16:24 . 2012-06-01 16:24 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5eccf6fef6bee8a2f93bc65ff33699bb\System.Workflow.Runtime.ni.dll
    + 2012-06-01 16:24 . 2012-06-01 16:24 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\62bd2e1bf98b04ceca2102c8f54aab9d\System.Workflow.ComponentModel.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\8215548b3d4aabbaa0557ab747700778\System.Workflow.Activities.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\3e11aea7d742b5eddbd0b6bd1012f7df\System.Web.Services.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\ff995dde9cd34ff1e8ac7ab55fc92d32\System.Web.Mobile.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\8899d1091e64a4d0b6ae69060197091a\System.Web.Extensions.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5efb50c91f3c5e49be2079f625d933b7\System.Speech.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\97d635f5c656ae43d94b55e67fc4ab50\System.ServiceModel.Web.ni.dll
    + 2012-06-01 16:20 . 2012-06-01 16:20 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\505e12638acd6fdb22e1fd2d4c6fc232\System.Runtime.Serialization.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\1d6707a5a9da16c1d1b88529837884d6\System.Printing.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 4950016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\c1b3a38c1e1528e22b8f5531d7b3700c\System.Management.Automation.ni.dll
    + 2012-06-01 16:20 . 2012-06-01 16:20 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\e09496ddb2bf6f3b69707924f2e6b5ff\System.IdentityModel.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8ca00132a08c69697adf1cda32ebd835\System.Drawing.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\b55887436d2cfbe1fb32dd18d554185b\System.DirectoryServices.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\832196527f0497078f085eaf9189265f\System.Deployment.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\12c6fe8d4dd78f9bddf847d3b2821c03\System.Data.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\982b508698278c6ffb3d143bbe1e8bb8\System.Data.SqlXml.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2de7666b1cd0a1bc363726c9553dc39c\System.Data.Services.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\44a5fc9e7c71b1fe1e2c79b03ecc3bc7\System.Data.Linq.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\772c94f595cd87b7fa187d592ef46fcf\System.Data.Entity.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\38d07a5ac34b99d94fd14f42e779f625\System.Core.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\2ecefd16184a78f19aaf0f02cc0a7e1f\ReachFramework.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\51204805c71113e0db2103faa064b313\PresentationUI.ni.dll
    + 2012-06-01 16:12 . 2012-06-01 16:12 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\8c509044eea2ab22689ea43926b30108\PresentationBuildTasks.ni.dll
    + 2012-06-01 16:22 . 2012-06-01 16:22 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\b49dd780ba8e3501b0adcf108b431e7b\Microsoft.VisualBasic.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\42145ebf75f77cabad442f0801a81c64\Microsoft.Transactions.Bridge.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\cfe15312373b4668398404b5822bab7d\Microsoft.JScript.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\f3fcd65eca42d13b746cf3f5bd993ee0\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\2091903cd9b359e96f05ac2d6d25ef4e\Microsoft.Build.Tasks.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5aa63a1cb41e3a5e1e8ed17072e60ec3\Microsoft.Build.Engine.ni.dll
    + 2012-06-01 15:33 . 2012-06-01 15:33 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    - 2010-06-24 10:03 . 2010-06-24 10:03 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2012-06-01 15:54 . 2012-06-01 15:54 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    - 2010-10-06 10:03 . 2010-10-06 10:03 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    - 2011-04-15 10:04 . 2011-04-15 10:04 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-06-01 15:33 . 2012-06-01 15:33 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2012-06-01 15:33 . 2012-06-01 15:33 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2011-04-15 10:05 . 2011-04-15 10:05 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-06-01 16:00 . 2012-06-01 16:00 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-05-12 18:33 . 2012-04-27 03:08 55656824 c:\windows\system32\MRT.exe
    + 2009-03-08 11:39 . 2012-03-02 13:01 11082752 c:\windows\system32\ieframe.dll
    + 2009-06-11 22:08 . 2012-03-02 13:01 11082752 c:\windows\system32\dllcache\ieframe.dll
    + 2012-04-06 09:12 . 2012-04-06 09:12 15709696 c:\windows\Installer\4d38c.msp
    + 2012-04-06 10:13 . 2012-04-06 10:13 16527872 c:\windows\Installer\4d1be.msp
    + 2012-06-01 15:30 . 2012-06-01 15:30 20343808 c:\windows\Installer\4d1b0.msp
    + 2012-01-04 09:25 . 2012-01-04 09:25 17751552 c:\windows\Installer\176dec.msp
    + 2012-01-04 05:15 . 2012-01-04 05:15 20559288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32.dll
    + 2012-06-01 15:42 . 2011-02-22 23:06 11080704 c:\windows\ie8updates\KB2675157-IE8\ieframe.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\995fcf39ead2c2a53e084505c2c67d49\System.Windows.Forms.ni.dll
    + 2012-06-01 16:23 . 2012-06-01 16:23 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\7861cd979ea5db3fb7d30ed94fb0edd2\System.Web.ni.dll
    + 2012-06-01 16:21 . 2012-06-01 16:21 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\bc254d2fa26664898ae21d45643bc194\System.ServiceModel.ni.dll
    + 2012-06-01 16:14 . 2012-06-01 16:14 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\a9256d2ad7e4be2bbb4e9b18c3997b84\System.Design.ni.dll
    + 2012-06-01 16:13 . 2012-06-01 16:13 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5b8ff47c1db373a2a4c638ca31988bd2\PresentationFramework.ni.dll
    + 2012-06-01 16:12 . 2012-06-01 16:12 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\4eb3cd1f1d5a83617524a9dfb96a657d\PresentationCore.ni.dll
    + 2012-06-01 16:12 . 2012-06-01 16:12 11492352 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\e337c89bc9f81b69d7237aa70e935900\mscorlib.ni.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2012-03-07 00:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-06-01 3905920]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10x_ActiveX.exe" [2011-09-27 243360]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-09-26 113024]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2012-01-02 17:07 843712 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2012-03-27 12:41 37296 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
    2012-03-07 01:39 574296 ----a-w- c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
    2005-05-04 01:43 69632 ----a-w- c:\windows\ALCMTR.EXE
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    2008-04-14 00:12 15360 ----a-w- c:\windows\system32\ctfmon.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
    2007-03-12 04:34 49152 -c--a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    2008-04-14 00:12 1695232 ------w- c:\program files\Messenger\msmsgs.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTools FGuard]
    2011-01-07 21:54 108496 ----a-w- c:\program files\PC Tools Security\BDT\FGuard.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QwestTouchPointAgent]
    2010-08-27 04:59 45992 ----a-w- c:\program files\Qwest\Desktop\QwestTouchPointAgent.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
    2005-09-22 20:36 14854144 ----a-w- c:\windows\RTHDCPL.EXE
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    2011-10-29 20:01 273528 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "gusvc"=3 (0x3)
    "ZuneNetworkSvc"=3 (0x3)
    "TelevisionFanaticService"=2 (0x2)
    "AdvancedSystemCareService"=2 (0x2)
    "6to4"=2 (0x2)
    "MozillaMaintenance"=3 (0x3)
    "WMPNetworkSvc"=3 (0x3)
    "Secunia Update Agent"=2 (0x2)
    "Secunia PSI Agent"=2 (0x2)
    "JavaQuickStarterService"=2 (0x2)
    "idsvc"=3 (0x3)
    "gupdatem"=3 (0x3)
    "gupdate"=2 (0x2)
    "Browser Defender Update Service"=2 (0x2)
    "AdvancedSystemCareService5"=2 (0x2)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "DisableNotifications"= 1 (0x1)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    .
    R0 SmartDefragDriver;SmartDefragDriver;c:\windows\system32\drivers\SmartDefragDriver.sys [3/28/2011 12:41 AM 13496]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [6/2/2012 1:46 PM 612184]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [6/2/2012 1:46 PM 337880]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2/17/2010 11:25 AM 12880]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 11:41 AM 67664]
    R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [6/29/2010 10:48 AM 116608]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [6/2/2012 1:46 PM 20696]
    R3 LucentSoftModem;Lucent Technologies Soft Modem;c:\windows\system32\drivers\LTSM.sys [10/1/2009 7:04 AM 802683]
    S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [9/1/2010 1:30 AM 15544]
    S4 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [5/8/2012 1:04 PM 913752]
    S4 Browser Defender Update Service;Browser Defender Update Service;c:\program files\PC Tools Security\BDT\BDTUpdateService.exe [3/27/2011 9:35 PM 337872]
    S4 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/2/2010 9:19 AM 135664]
    S4 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/2/2010 9:19 AM 135664]
    S4 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [6/2/2012 1:26 PM 129976]
    S4 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia\PSI\psia.exe [4/18/2011 11:44 PM 993848]
    S4 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia\PSI\sua.exe [4/18/2011 11:44 PM 399416]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    Freedom
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 16:19]
    .
    2012-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 16:19]
    .
    2012-06-04 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1614895754-1336601894-725345543-1004.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-09-27 20:40]
    .
    2012-06-04 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1614895754-1336601894-725345543-1004.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2011-09-27 20:40]
    .
    2012-06-03 c:\windows\Tasks\WebReg Photosmart A440 series.job
    - c:\program files\HP\Digital Imaging\bin\hpqwrg.exe [2007-03-12 04:27]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.myqwest.com/
    IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Jeff Miller\Start Menu\Programs\IMVU\Run IMVU.lnk
    TCP: DhcpNameServer = 192.168.0.1 205.171.3.25
    FF - ProfilePath - c:\documents and settings\Jeff Miller\Application Data\Mozilla\Firefox\Profiles\mnjbclzh.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
    FF - prefs.js: network.proxy.http - 127.0.0.1
    FF - prefs.js: network.proxy.type - 0
    FF - user.js: browser.cache.memory.capacity - 16000
    FF - user.js: browser.chrome.favicons - false
    FF - user.js: browser.display.show_image_placeholders - true
    FF - user.js: browser.turbo.enabled - true
    FF - user.js: browser.urlbar.autocomplete.enabled - true
    FF - user.js: browser.urlbar.autofill - true
    FF - user.js: content.max.tokenizing.time - 3000000
    FF - user.js: content.maxtextrun - 4095
    FF - user.js: content.notify.backoffcount - 5
    FF - user.js: content.notify.interval - 1000000
    FF - user.js: content.notify.ontimer - true
    FF - user.js: content.switch.threshold - 1000000
    FF - user.js: dom.disable_window_status_change - true
    FF - user.js: network.http.max-connections - 48
    FF - user.js: network.http.max-connections-per-server - 16
    FF - user.js: network.http.max-persistent-connections-per-proxy - 16
    FF - user.js: network.http.max-persistent-connections-per-server - 8
    FF - user.js: network.http.pipelining - true
    FF - user.js: network.http.pipelining.firstrequest - true
    FF - user.js: network.http.pipelining.maxrequests - 8
    FF - user.js: network.http.proxy.pipelining - true
    FF - user.js: network.http.request.max-start-delay - 0
    FF - user.js: nglayout.initialpaint.delay - 1000
    FF - user.js: plugin.expose_full_path - true
    FF - user.js: ui.submenuDelay - 0
    .
    - - - - ORPHANS REMOVED - - - -
    .
    MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-06-04 09:08
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (LocalSystem)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2b,35,b4,b2,63,08,b7,45,bc,60,ad,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2b,35,b4,b2,63,08,b7,45,bc,60,ad,\
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'winlogon.exe'(632)
    c:\program files\SUPERAntiSpyware\SASWINLO.DLL
    c:\windows\system32\WININET.dll
    .
    - - - - - - - > 'explorer.exe'(4040)
    c:\windows\system32\WININET.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    Completion time: 2012-06-04 09:10:39
    ComboFix-quarantined-files.txt 2012-06-04 16:10
    ComboFix2.txt 2012-05-25 23:46
    ComboFix3.txt 2012-05-25 05:33
    .
    Pre-Run: 116,642,177,024 bytes free
    Post-Run: 116,711,616,512 bytes free
    .
    - - End Of File - - FED74B4B7493AF2BA82834ED52237B0F
     
  11. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    Can you see if Avast interferred with the scan? I stopped the Service but it didn't allow me to disable the Service. I can uninstall Avast and try again if needed.
     
  12. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    No, I don't think it interfered.

    Are you still having problems with the flash drive?
     
  13. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    Yes. I inserted the flash drive into the USb port. The Safely Remove Hardware (SRH) comes on. I open My Computer and open the flash drive. I can see the files inside and My Computer suddenly closes. SRH icon goes away. SRH icon comes back on. I open My Computer and open the flash drive. I can see the files inside and My Computer suddenly closes. SRH icon goes away. SRH icon comes back on. I do nothing and SRH icon stays on while I type this. I'm a slow typer. I open My Computer and open the flash drive. I can see the files inside. I wait and I wait. Maybe a minute but My Computer doesn't close. I try to open a Music file and Media Player opens but encounters and error with the file. SRH icon starts flashing.
     
  14. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,710
    Please insert the flash drive before doing the following.

    I'm attaching a MountPoints Diagnostic.zip file to this post. Save it to your desktop. Unzjip it and double click the MountPoints Diagnostic.bat file and let it run. It will create a report in Notepad named Diagnostic.txt. Please upload the Diagnostic.txt file as an attachment.
     

    Attached Files:

  15. MrWmnHtr

    MrWmnHtr Thread Starter

    Joined:
    Feb 18, 2010
    Messages:
    80
    I'm guessing a hardware problem because if it was software wouldn't it effect the rear ports instead of just the front ports?
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1054008