1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Google Redirects

Discussion in 'Virus & Other Malware Removal' started by beyondthefeel, Aug 5, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    Hello I've been getting some Google redirects lately. The redirects only seem to happen on Firefox, Chrome seems to be unaffected. I don't know about IE as I never really used it. I already tried Malwarebytes and Microsoft Security Essentials. They both detected trojans but that did not solve my redirect problem. Both the Hijack this and DDS logs are below, I did not use gmer because I am running Windows 7 64bit. Thanks

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 3:07:55 PM, on 8/5/2012
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v9.00 (9.00.8112.16447)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
    C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
    C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\Downloads\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/USCON/1
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
    O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
    O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
    O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe" -u auto-update
    O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Google Update] "C:\Users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
    O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
    O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
    O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
    O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
    O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
    O23 - Service: CyberLink Product - 2011/11/03 17:32:48 (CLKMSVC10_9EC60124) - CyberLink - C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
    O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
    O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
    O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --
    End of file - 13460 bytes



    .
    DDS (Ver_2011-08-26.01) - NTFSAMD64
    Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_33
    Run by Wilson at 15:09:25 on 2012-08-05
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6051.3341 [GMT -4:00]
    .
    AV: Microsoft Security Essentials *Enabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: Microsoft Security Essentials *Enabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
    .
    ============== Running Processes ===============
    .
    C:\windows\system32\wininit.exe
    C:\windows\system32\lsm.exe
    C:\windows\system32\svchost.exe -k DcomLaunch
    C:\windows\system32\svchost.exe -k RPCSS
    c:\Program Files\Microsoft Security Client\MsMpEng.exe
    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\windows\system32\svchost.exe -k netsvcs
    C:\Program Files\IDT\WDM\STacSV64.exe
    C:\windows\system32\svchost.exe -k LocalService
    C:\windows\system32\svchost.exe -k NetworkService
    C:\windows\system32\WLANExt.exe
    C:\windows\system32\conhost.exe
    C:\windows\System32\spoolsv.exe
    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    C:\Program Files\IDT\WDM\AESTSr64.exe
    C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\windows\system32\svchost.exe -k bthsvcs
    C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
    C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    C:\windows\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\windows\system32\wbem\unsecapp.exe
    C:\windows\system32\wbem\wmiprvse.exe
    C:\windows\system32\taskhost.exe
    C:\windows\system32\Dwm.exe
    C:\windows\Explorer.EXE
    C:\Program Files\DellTPad\Apoint.exe
    C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\IDT\WDM\sttray64.exe
    C:\Program Files\Microsoft Security Client\msseces.exe
    C:\Program Files\Zune\ZuneLauncher.exe
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
    C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe
    C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Program Files\DellTPad\ApMsgFwd.exe
    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files\DellTPad\HidFind.exe
    C:\Program Files\DellTPad\Apntex.exe
    C:\windows\system32\conhost.exe
    C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
    C:\windows\system32\wbem\unsecapp.exe
    C:\windows\system32\SearchIndexer.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
    C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\windows\system32\wuauclt.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Wilson\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\windows\system32\sppsvc.exe
    C:\Users\Wilson\Downloads\HijackThis.exe
    C:\windows\system32\taskhost.exe
    C:\windows\system32\SearchProtocolHost.exe
    C:\windows\system32\SearchFilterHost.exe
    C:\windows\system32\DllHost.exe
    C:\windows\system32\DllHost.exe
    C:\windows\SysWOW64\cmd.exe
    C:\windows\system32\conhost.exe
    C:\windows\SysWOW64\cscript.exe
    C:\windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uInternet Settings,ProxyOverride = *.local
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    uRun: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
    uRun: [Google Update] "C:\Users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    uRun: [Spotify Web Helper] "C:\Users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
    mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
    mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    mRun: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
    mRun: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
    mRun: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe" -u auto-update
    StartupFolder: C:\Users\Wilson\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
    TCP: Interfaces\{64725F5D-1AD2-4E5D-83D1-4817D5574871} : DhcpNameServer = 209.18.47.61 209.18.47.62
    TCP: Interfaces\{CB65E5F9-68A5-48F9-90DA-C0A7CB1A61DD} : DhcpNameServer = 209.18.47.61 209.18.47.62
    TCP: Interfaces\{CB65E5F9-68A5-48F9-90DA-C0A7CB1A61DD}\24279676864735861627B6D27657563747 : DhcpNameServer = 209.18.47.61 209.18.47.62
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
    BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO-X64: AcroIEHelperStub - No File
    BHO-X64: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
    BHO-X64: Increase performance and video formats for your HTML5 <video> - No File
    BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO-X64: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    BHO-X64: SkypeIEPluginBHO - No File
    BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
    BHO-X64: URLRedirectionBHO - No File
    BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    mRun-x64: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
    mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    mRun-x64: [RemoteControl9] "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
    mRun-x64: [PDVD9LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
    mRun-x64: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe
    mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun-x64: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe" -u auto-update
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Wilson\AppData\Roaming\Mozilla\Firefox\Profiles\0j64ngo3.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\Users\Wilson\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
    FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    FF - plugin: C:\windows\SysWOW64\npdeployJava1.dll
    FF - plugin: C:\windows\SysWOW64\npmproxy.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: general.useragent.extra.brc -
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 MpFilter;Microsoft Malware Protection Driver;C:\windows\system32\DRIVERS\MpFilter.sys --> C:\windows\system32\DRIVERS\MpFilter.sys [?]
    R0 PxHlpa64;PxHlpa64;C:\windows\system32\Drivers\PxHlpa64.sys --> C:\windows\system32\Drivers\PxHlpa64.sys [?]
    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\windows\system32\DRIVERS\vwififlt.sys --> C:\windows\system32\DRIVERS\vwififlt.sys [?]
    R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-11 140672]
    R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
    R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-12-4 89600]
    R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-8-8 1166848]
    R2 Bluetooth Device Monitor;Bluetooth Device Monitor;C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-5-19 921664]
    R2 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-5-19 995392]
    R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-6-3 134928]
    R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-11-3 13336]
    R2 TurboB;Turbo Boost UI Monitor driver;C:\windows\system32\DRIVERS\TurboB.sys --> C:\windows\system32\DRIVERS\TurboB.sys [?]
    R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-11-3 2655768]
    R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;C:\windows\system32\DRIVERS\AMPPAL.sys --> C:\windows\system32\DRIVERS\AMPPAL.sys [?]
    R3 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-5-19 1335360]
    R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\windows\system32\DRIVERS\CtClsFlt.sys --> C:\windows\system32\DRIVERS\CtClsFlt.sys [?]
    R3 IntcDAud;Intel(R) Display Audio;C:\windows\system32\DRIVERS\IntcDAud.sys --> C:\windows\system32\DRIVERS\IntcDAud.sys [?]
    R3 iwdbus;IWD Bus Enumerator;C:\windows\system32\DRIVERS\iwdbus.sys --> C:\windows\system32\DRIVERS\iwdbus.sys [?]
    R3 MEIx64;Intel(R) Management Engine Interface;C:\windows\system32\DRIVERS\HECIx64.sys --> C:\windows\system32\DRIVERS\HECIx64.sys [?]
    R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\windows\system32\DRIVERS\NETwNs64.sys --> C:\windows\system32\DRIVERS\NETwNs64.sys [?]
    R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\windows\system32\DRIVERS\nusb3hub.sys --> C:\windows\system32\DRIVERS\nusb3hub.sys [?]
    R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\windows\system32\DRIVERS\nusb3xhc.sys --> C:\windows\system32\DRIVERS\nusb3xhc.sys [?]
    R3 RTL8167;Realtek 8167 NT Driver;C:\windows\system32\DRIVERS\Rt64win7.sys --> C:\windows\system32\DRIVERS\Rt64win7.sys [?]
    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\windows\system32\DRIVERS\vwifimp.sys --> C:\windows\system32\DRIVERS\vwifimp.sys [?]
    S2 CLKMSVC10_9EC60124;CyberLink Product - 2011/11/03 17:32:48;C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;C:\windows\system32\DRIVERS\amppal.sys --> C:\windows\system32\DRIVERS\amppal.sys [?]
    S3 btmaudio;Intel Bluetooth Audio Service;C:\windows\system32\drivers\btmaud.sys --> C:\windows\system32\drivers\btmaud.sys [?]
    S3 btmaux;Intel Bluetooth Auxiliary Service;C:\windows\system32\DRIVERS\btmaux.sys --> C:\windows\system32\DRIVERS\btmaux.sys [?]
    S3 btmhsf;btmhsf;C:\windows\system32\DRIVERS\btmhsf.sys --> C:\windows\system32\DRIVERS\btmhsf.sys [?]
    S3 iBtFltCoex;iBtFltCoex;C:\windows\system32\DRIVERS\iBtFltCoex.sys --> C:\windows\system32\DRIVERS\iBtFltCoex.sys [?]
    S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\windows\system32\drivers\intelaud.sys --> C:\windows\system32\drivers\intelaud.sys [?]
    S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-5 113120]
    S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-7-27 340240]
    S3 NisDrv;Microsoft Network Inspection System;C:\windows\system32\DRIVERS\NisDrvWFP.sys --> C:\windows\system32\DRIVERS\NisDrvWFP.sys [?]
    S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-3-26 291696]
    S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\windows\system32\Drivers\RtsUStor.sys --> C:\windows\system32\Drivers\RtsUStor.sys [?]
    S3 TsUsbFlt;TsUsbFlt;C:\windows\system32\drivers\tsusbflt.sys --> C:\windows\system32\drivers\tsusbflt.sys [?]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\system32\drivers\TsUsbGD.sys --> C:\windows\system32\drivers\TsUsbGD.sys [?]
    S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\system32\Drivers\usbaapl64.sys --> C:\windows\system32\Drivers\usbaapl64.sys [?]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\system32\Wat\WatAdminSvc.exe --> C:\windows\system32\Wat\WatAdminSvc.exe [?]
    S3 WMZuneComm;Zune Windows Mobile Connectivity Service;C:\Program Files\Zune\WMZuneComm.exe [2011-8-5 306400]
    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
    .
    =============== Created Last 30 ================
    .
    2012-08-04 19:45:39 9133488 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{44F08BFE-DBE9-4BB5-8423-4A0BA487883D}\mpengine.dll
    2012-08-03 15:45:22 9133488 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2012-07-30 00:35:07 476976 ----a-w- C:\windows\SysWow64\npdeployJava1.dll
    2012-07-28 15:05:58 -------- d-----w- C:\ProgramData\SUPERSetup
    2012-07-26 15:41:48 -------- d-----w- C:\Users\Wilson\AppData\Local\{88646415-D730-11E1-8270-B8AC6F996F26}
    2012-07-26 14:45:31 -------- d-----w- C:\Users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}
    2012-07-23 21:26:46 -------- d-----r- C:\Users\Wilson\Podcasts
    2012-07-23 21:26:02 -------- d-----w- C:\windows\System32\drivers\UMDF\ko-KR
    2012-07-23 21:26:01 -------- d-----w- C:\windows\System32\drivers\UMDF\ms-MY
    2012-07-23 21:26:00 -------- d-----w- C:\windows\System32\drivers\UMDF\id-ID
    2012-07-12 16:58:35 3148800 ----a-w- C:\windows\System32\win32k.sys
    2012-07-12 16:56:01 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb
    2012-07-12 16:56:01 2382848 ----a-w- C:\windows\System32\mshtml.tlb
    2012-07-12 00:59:25 2004480 ----a-w- C:\windows\System32\msxml6.dll
    .
    ==================== Find3M ====================
    .
    2012-07-30 00:35:00 472880 ----a-w- C:\windows\SysWow64\deployJava1.dll
    2012-07-03 17:46:44 24904 ----a-w- C:\windows\System32\drivers\mbam.sys
    2012-06-06 06:06:16 1881600 ----a-w- C:\windows\System32\msxml3.dll
    2012-06-06 06:02:54 1133568 ----a-w- C:\windows\System32\cdosys.dll
    2012-06-06 05:05:52 1390080 ----a-w- C:\windows\SysWow64\msxml6.dll
    2012-06-06 05:05:52 1236992 ----a-w- C:\windows\SysWow64\msxml3.dll
    2012-06-06 05:03:06 805376 ----a-w- C:\windows\SysWow64\cdosys.dll
    2012-06-02 22:15:31 2622464 ----a-w- C:\windows\System32\wucltux.dll
    2012-06-02 22:15:08 99840 ----a-w- C:\windows\System32\wudriver.dll
    2012-06-02 19:19:42 186752 ----a-w- C:\windows\System32\wuwebv.dll
    2012-06-02 19:15:12 36864 ----a-w- C:\windows\System32\wuapp.exe
    2012-06-02 12:12:17 2311680 ----a-w- C:\windows\System32\jscript9.dll
    2012-06-02 12:05:28 1392128 ----a-w- C:\windows\System32\wininet.dll
    2012-06-02 12:04:50 1494528 ----a-w- C:\windows\System32\inetcpl.cpl
    2012-06-02 12:01:40 173056 ----a-w- C:\windows\System32\ieUnatt.exe
    2012-06-02 08:33:25 1800192 ----a-w- C:\windows\SysWow64\jscript9.dll
    2012-06-02 08:25:08 1129472 ----a-w- C:\windows\SysWow64\wininet.dll
    2012-06-02 08:25:03 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl
    2012-06-02 08:20:33 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe
    2012-06-02 05:50:10 458704 ----a-w- C:\windows\System32\drivers\cng.sys
    2012-06-02 05:48:16 95600 ----a-w- C:\windows\System32\drivers\ksecdd.sys
    2012-06-02 05:48:16 151920 ----a-w- C:\windows\System32\drivers\ksecpkg.sys
    2012-06-02 05:45:31 340992 ----a-w- C:\windows\System32\schannel.dll
    2012-06-02 05:44:21 307200 ----a-w- C:\windows\System32\ncrypt.dll
    2012-06-02 04:40:42 22016 ----a-w- C:\windows\SysWow64\secur32.dll
    2012-06-02 04:40:39 225280 ----a-w- C:\windows\SysWow64\schannel.dll
    2012-06-02 04:39:10 219136 ----a-w- C:\windows\SysWow64\ncrypt.dll
    2012-06-02 04:34:09 96768 ----a-w- C:\windows\SysWow64\sspicli.dll
    .
    ============= FINISH: 15:10:18.07 ===============
     

    Attached Files:

  2. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hello there

    My name is [Jimbo] and I will be helping you.
    Please give me some time to look over your computer's log(s).

    You may want to keep the link to this topic in your favourites. Alternatively, you can visit this website and check through your account.

    Please take note of the following guidelines in the meantime:

    • In the meantime, please refrain from making any changes to your computer.
    • Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself.
    • If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
    • Old topics are closed after 3-5 days with no reply, and working topics are closed after 5-7 days. If for any reason you cannot complete instructions within that time, that's fine, just post back here so that we know you're still here.
    Regards Jimbo.
     
  3. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    Alright, thanks a lot man
     
  4. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi. Sorry for the delay.

    Please download and run TDSS scanner.

    Please read and follow these instructions carefully. We do not want it to fix anything yet (if found), we need to see a report first.

    Download TDSSKiller.exe and save it to your desktop
    • Execute TDSSKiller.exe by doubleclicking on it.
    • Press Start Scan
    • If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
    • Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt
    Next

    Please upload the most recent MBAM log, in fact it wouldn't hurt if you uploaded all but the most recent will be helpful

    • The log can also be found here:
      C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    • Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
    In your next reply, please post the following:

    - TDSS report

    Regards

    Jimbo
     
  5. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    10:37:45.0333 5860 TDSS rootkit removing tool 2.7.48.0 Jul 24 2012 13:16:32
    10:37:45.0604 5860 ============================================================
    10:37:45.0604 5860 Current date / time: 2012/08/06 10:37:45.0604
    10:37:45.0605 5860 SystemInfo:
    10:37:45.0605 5860
    10:37:45.0605 5860 OS Version: 6.1.7601 ServicePack: 1.0
    10:37:45.0605 5860 Product type: Workstation
    10:37:45.0605 5860 ComputerName: WILSON-PC
    10:37:45.0605 5860 UserName: Wilson
    10:37:45.0605 5860 Windows directory: C:\windows
    10:37:45.0605 5860 System windows directory: C:\windows
    10:37:45.0606 5860 Running under WOW64
    10:37:45.0606 5860 Processor architecture: Intel x64
    10:37:45.0606 5860 Number of processors: 4
    10:37:45.0606 5860 Page size: 0x1000
    10:37:45.0606 5860 Boot type: Normal boot
    10:37:45.0606 5860 ============================================================
    10:37:46.0315 5860 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    10:37:46.0326 5860 ============================================================
    10:37:46.0326 5860 \Device\Harddisk0\DR0:
    10:37:46.0327 5860 MBR partitions:
    10:37:46.0327 5860 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D4C000
    10:37:46.0327 5860 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D7E800, BlocksNum 0x48AD92B0
    10:37:46.0327 5860 ============================================================
    10:37:46.0387 5860 C: <-> \Device\Harddisk0\DR0\Partition1
    10:37:46.0387 5860 ============================================================
    10:37:46.0387 5860 Initialize success
    10:37:46.0387 5860 ============================================================
    10:37:47.0316 3236 ============================================================
    10:37:47.0317 3236 Scan started
    10:37:47.0317 3236 Mode: Manual;
    10:37:47.0317 3236 ============================================================
    10:37:48.0120 3236 !SASCORE (7d9d615201a483d6fa99491c2e655a5a) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    10:37:48.0149 3236 !SASCORE - ok
    10:37:48.0855 3236 1394ohci (a87d604aea360176311474c87a63bb88) C:\windows\system32\drivers\1394ohci.sys
    10:37:48.0874 3236 1394ohci - ok
    10:37:48.0918 3236 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\windows\system32\drivers\ACPI.sys
    10:37:48.0921 3236 ACPI - ok
    10:37:48.0963 3236 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\windows\system32\drivers\acpipmi.sys
    10:37:48.0964 3236 AcpiPmi - ok
    10:37:49.0350 3236 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    10:37:49.0355 3236 AdobeARMservice - ok
    10:37:49.0442 3236 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\drivers\adp94xx.sys
    10:37:49.0488 3236 adp94xx - ok
    10:37:49.0604 3236 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\drivers\adpahci.sys
    10:37:49.0608 3236 adpahci - ok
    10:37:49.0648 3236 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\drivers\adpu320.sys
    10:37:49.0664 3236 adpu320 - ok
    10:37:49.0818 3236 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\windows\System32\aelupsvc.dll
    10:37:49.0848 3236 AeLookupSvc - ok
    10:37:50.0107 3236 AESTFilters (a6fb9db8f1a86861d955fd6975977ae0) C:\Program Files\IDT\WDM\AESTSr64.exe
    10:37:50.0108 3236 AESTFilters - ok
    10:37:50.0240 3236 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\windows\system32\drivers\afd.sys
    10:37:50.0248 3236 AFD - ok
    10:37:50.0301 3236 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\drivers\agp440.sys
    10:37:50.0303 3236 agp440 - ok
    10:37:50.0341 3236 ALG (3290d6946b5e30e70414990574883ddb) C:\windows\System32\alg.exe
    10:37:50.0345 3236 ALG - ok
    10:37:50.0392 3236 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\drivers\aliide.sys
    10:37:50.0402 3236 aliide - ok
    10:37:50.0436 3236 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\drivers\amdide.sys
    10:37:50.0448 3236 amdide - ok
    10:37:50.0469 3236 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\drivers\amdk8.sys
    10:37:50.0471 3236 AmdK8 - ok
    10:37:50.0480 3236 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\drivers\amdppm.sys
    10:37:50.0481 3236 AmdPPM - ok
    10:37:50.0501 3236 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\windows\system32\drivers\amdsata.sys
    10:37:50.0505 3236 amdsata - ok
    10:37:50.0534 3236 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\drivers\amdsbs.sys
    10:37:50.0538 3236 amdsbs - ok
    10:37:50.0545 3236 amdxata (540daf1cea6094886d72126fd7c33048) C:\windows\system32\drivers\amdxata.sys
    10:37:50.0545 3236 amdxata - ok
    10:37:50.0637 3236 AMPPAL (7d9e301ab3247765702d0b65e2e47e50) C:\windows\system32\DRIVERS\AMPPAL.sys
    10:37:50.0666 3236 AMPPAL - ok
    10:37:50.0681 3236 AMPPALP (7d9e301ab3247765702d0b65e2e47e50) C:\windows\system32\DRIVERS\amppal.sys
    10:37:50.0693 3236 AMPPALP - ok
    10:37:51.0034 3236 AMPPALR3 (864c632b999be1237a3dc46736e71f27) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
    10:37:51.0092 3236 AMPPALR3 - ok
    10:37:51.0651 3236 ApfiltrService (24ed0eb2b2558970176ecee680f8f806) C:\windows\system32\DRIVERS\Apfiltr.sys
    10:37:51.0660 3236 ApfiltrService - ok
    10:37:51.0766 3236 AppID (89a69c3f2f319b43379399547526d952) C:\windows\system32\drivers\appid.sys
    10:37:51.0768 3236 AppID - ok
    10:37:51.0811 3236 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\windows\System32\appidsvc.dll
    10:37:51.0814 3236 AppIDSvc - ok
    10:37:51.0833 3236 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\windows\System32\appinfo.dll
    10:37:51.0836 3236 Appinfo - ok
    10:37:52.0054 3236 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    10:37:52.0058 3236 Apple Mobile Device - ok
    10:37:52.0128 3236 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\drivers\arc.sys
    10:37:52.0130 3236 arc - ok
    10:37:52.0153 3236 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\drivers\arcsas.sys
    10:37:52.0155 3236 arcsas - ok
    10:37:52.0375 3236 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    10:37:52.0378 3236 aspnet_state - ok
    10:37:52.0402 3236 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys
    10:37:52.0405 3236 AsyncMac - ok
    10:37:52.0447 3236 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\drivers\atapi.sys
    10:37:52.0448 3236 atapi - ok
    10:37:52.0539 3236 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
    10:37:52.0583 3236 AudioEndpointBuilder - ok
    10:37:52.0601 3236 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\windows\System32\Audiosrv.dll
    10:37:52.0612 3236 AudioSrv - ok
    10:37:52.0714 3236 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\windows\System32\AxInstSV.dll
    10:37:52.0724 3236 AxInstSV - ok
    10:37:52.0797 3236 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\drivers\bxvbda.sys
    10:37:52.0848 3236 b06bdrv - ok
    10:37:52.0884 3236 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys
    10:37:52.0899 3236 b57nd60a - ok
    10:37:52.0943 3236 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\windows\System32\bdesvc.dll
    10:37:52.0971 3236 BDESVC - ok
    10:37:52.0988 3236 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys
    10:37:52.0998 3236 Beep - ok
    10:37:53.0076 3236 BFE (82974d6a2fd19445cc5171fc378668a4) C:\windows\System32\bfe.dll
    10:37:53.0100 3236 BFE - ok
    10:37:53.0203 3236 BITS (1ea7969e3271cbc59e1730697dc74682) C:\windows\system32\qmgr.dll
    10:37:53.0218 3236 BITS - ok
    10:37:53.0347 3236 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys
    10:37:53.0348 3236 blbdrive - ok
    10:37:53.0670 3236 Bluetooth Device Monitor (5ff7b9916a10e8e69e7c0d16f0b4787a) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
    10:37:53.0685 3236 Bluetooth Device Monitor - ok
    10:37:53.0905 3236 Bluetooth Media Service (e43d73caf1023976efba1d0f0e69e271) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
    10:37:53.0911 3236 Bluetooth Media Service - ok
    10:37:54.0002 3236 Bluetooth OBEX Service (20427929646784a482df34ef8c4fed23) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
    10:37:54.0018 3236 Bluetooth OBEX Service - ok
    10:37:54.0148 3236 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
    10:37:54.0161 3236 Bonjour Service - ok
    10:37:54.0591 3236 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\windows\system32\DRIVERS\bowser.sys
    10:37:54.0594 3236 bowser - ok
    10:37:54.0625 3236 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\drivers\BrFiltLo.sys
    10:37:54.0628 3236 BrFiltLo - ok
    10:37:54.0638 3236 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\drivers\BrFiltUp.sys
    10:37:54.0640 3236 BrFiltUp - ok
    10:37:54.0702 3236 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\windows\System32\browser.dll
    10:37:54.0713 3236 Browser - ok
    10:37:54.0749 3236 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys
    10:37:54.0759 3236 Brserid - ok
    10:37:54.0773 3236 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys
    10:37:54.0776 3236 BrSerWdm - ok
    10:37:54.0803 3236 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys
    10:37:54.0806 3236 BrUsbMdm - ok
    10:37:54.0818 3236 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys
    10:37:54.0821 3236 BrUsbSer - ok
    10:37:54.0878 3236 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\windows\system32\drivers\BthEnum.sys
    10:37:54.0879 3236 BthEnum - ok
    10:37:54.0888 3236 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\drivers\bthmodem.sys
    10:37:54.0891 3236 BTHMODEM - ok
    10:37:54.0918 3236 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\windows\system32\DRIVERS\bthpan.sys
    10:37:54.0922 3236 BthPan - ok
    10:37:55.0012 3236 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\windows\system32\Drivers\BTHport.sys
    10:37:55.0028 3236 BTHPORT - ok
    10:37:55.0064 3236 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\windows\system32\bthserv.dll
    10:37:55.0066 3236 bthserv - ok
    10:37:55.0227 3236 BTHSSecurityMgr (9e2af97302b9f4bf97e952a865eb31ae) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
    10:37:55.0236 3236 BTHSSecurityMgr - ok
    10:37:55.0290 3236 BTHUSB (f188b7394d81010767b6df3178519a37) C:\windows\system32\Drivers\BTHUSB.sys
    10:37:55.0294 3236 BTHUSB - ok
    10:37:55.0322 3236 btmaudio (274e47bd9c1367bdbfa9df10c2e6c544) C:\windows\system32\drivers\btmaud.sys
    10:37:55.0326 3236 btmaudio - ok
    10:37:55.0335 3236 btmaux (75eab5aaf6e9f83739249ce60b4b9c39) C:\windows\system32\DRIVERS\btmaux.sys
    10:37:55.0356 3236 btmaux - ok
    10:37:55.0411 3236 btmhsf (0b1cc2221dc5990e4557a78ce9afad4f) C:\windows\system32\DRIVERS\btmhsf.sys
    10:37:55.0420 3236 btmhsf - ok
    10:37:55.0450 3236 catchme - ok
    10:37:55.0497 3236 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys
    10:37:55.0501 3236 cdfs - ok
    10:37:55.0541 3236 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\windows\system32\DRIVERS\cdrom.sys
    10:37:55.0546 3236 cdrom - ok
    10:37:55.0581 3236 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
    10:37:55.0582 3236 CertPropSvc - ok
    10:37:55.0589 3236 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\drivers\circlass.sys
    10:37:55.0590 3236 circlass - ok
    10:37:55.0631 3236 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys
    10:37:55.0634 3236 CLFS - ok
    10:37:55.0934 3236 CLKMSVC10_9EC60124 (730bf325e4cc1e3935b81943ac6da216) C:\Program Files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe
    10:37:55.0937 3236 CLKMSVC10_9EC60124 - ok
    10:37:56.0149 3236 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    10:37:56.0151 3236 clr_optimization_v2.0.50727_32 - ok
    10:37:56.0235 3236 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    10:37:56.0245 3236 clr_optimization_v2.0.50727_64 - ok
    10:37:56.0444 3236 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    10:37:56.0446 3236 clr_optimization_v4.0.30319_32 - ok
    10:37:56.0567 3236 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    10:37:56.0570 3236 clr_optimization_v4.0.30319_64 - ok
    10:37:57.0052 3236 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys
    10:37:57.0055 3236 CmBatt - ok
    10:37:57.0067 3236 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\drivers\cmdide.sys
    10:37:57.0069 3236 cmdide - ok
    10:37:57.0174 3236 CNG (9ac4f97c2d3e93367e2148ea940cd2cd) C:\windows\system32\Drivers\cng.sys
    10:37:57.0179 3236 CNG - ok
    10:37:57.0212 3236 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\drivers\compbatt.sys
    10:37:57.0212 3236 Compbatt - ok
    10:37:57.0222 3236 CompositeBus (03edb043586cceba243d689bdda370a8) C:\windows\system32\DRIVERS\CompositeBus.sys
    10:37:57.0223 3236 CompositeBus - ok
    10:37:57.0235 3236 COMSysApp - ok
    10:37:57.0247 3236 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\drivers\crcdisk.sys
    10:37:57.0251 3236 crcdisk - ok
    10:37:57.0320 3236 CryptSvc (4f5414602e2544a4554d95517948b705) C:\windows\system32\cryptsvc.dll
    10:37:57.0379 3236 CryptSvc - ok
    10:37:57.0485 3236 CtClsFlt (bc3d4f90978cd7c8eabd1baf3bf7873a) C:\windows\system32\DRIVERS\CtClsFlt.sys
    10:37:57.0502 3236 CtClsFlt - ok
    10:37:57.0581 3236 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
    10:37:57.0595 3236 DcomLaunch - ok
    10:37:57.0660 3236 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\windows\System32\defragsvc.dll
    10:37:57.0705 3236 defragsvc - ok
    10:37:57.0804 3236 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\windows\system32\Drivers\dfsc.sys
    10:37:57.0821 3236 DfsC - ok
    10:37:57.0896 3236 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\windows\system32\dhcpcore.dll
    10:37:57.0911 3236 Dhcp - ok
    10:37:57.0926 3236 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys
    10:37:57.0927 3236 discache - ok
    10:37:57.0944 3236 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\drivers\disk.sys
    10:37:57.0945 3236 Disk - ok
    10:37:57.0977 3236 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\windows\System32\dnsrslvr.dll
    10:37:57.0993 3236 Dnscache - ok
    10:37:58.0047 3236 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\windows\System32\dot3svc.dll
    10:37:58.0056 3236 dot3svc - ok
    10:37:58.0092 3236 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\windows\system32\dps.dll
    10:37:58.0112 3236 DPS - ok
    10:37:58.0159 3236 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys
    10:37:58.0160 3236 drmkaud - ok
    10:37:58.0275 3236 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\windows\System32\drivers\dxgkrnl.sys
    10:37:58.0280 3236 DXGKrnl - ok
    10:37:58.0329 3236 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\windows\System32\eapsvc.dll
    10:37:58.0331 3236 EapHost - ok
    10:37:58.0645 3236 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\drivers\evbda.sys
    10:37:58.0741 3236 ebdrv - ok
    10:37:59.0050 3236 EFS (c118a82cd78818c29ab228366ebf81c3) C:\windows\System32\lsass.exe
    10:37:59.0051 3236 EFS - ok
    10:37:59.0194 3236 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\windows\ehome\ehRecvr.exe
    10:37:59.0235 3236 ehRecvr - ok
    10:37:59.0246 3236 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\windows\ehome\ehsched.exe
    10:37:59.0248 3236 ehSched - ok
    10:37:59.0473 3236 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\drivers\elxstor.sys
    10:37:59.0513 3236 elxstor - ok
    10:37:59.0526 3236 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\drivers\errdev.sys
    10:37:59.0529 3236 ErrDev - ok
    10:37:59.0626 3236 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\windows\system32\es.dll
    10:37:59.0636 3236 EventSystem - ok
    10:38:00.0023 3236 EvtEng (e3a96d5ae6e5c7b5472011ba77353368) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    10:38:00.0068 3236 EvtEng - ok
    10:38:00.0604 3236 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys
    10:38:00.0639 3236 exfat - ok
    10:38:00.0668 3236 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys
    10:38:00.0675 3236 fastfat - ok
    10:38:00.0822 3236 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\windows\system32\fxssvc.exe
    10:38:00.0858 3236 Fax - ok
    10:38:00.0866 3236 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\drivers\fdc.sys
    10:38:00.0869 3236 fdc - ok
    10:38:00.0887 3236 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\windows\system32\fdPHost.dll
    10:38:00.0890 3236 fdPHost - ok
    10:38:00.0900 3236 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\windows\system32\fdrespub.dll
    10:38:00.0904 3236 FDResPub - ok
    10:38:00.0917 3236 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys
    10:38:00.0919 3236 FileInfo - ok
    10:38:00.0932 3236 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys
    10:38:00.0935 3236 Filetrace - ok
    10:38:00.0943 3236 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\drivers\flpydisk.sys
    10:38:00.0946 3236 flpydisk - ok
    10:38:00.0991 3236 FltMgr (da6b67270fd9db3697b20fce94950741) C:\windows\system32\drivers\fltmgr.sys
    10:38:01.0006 3236 FltMgr - ok
    10:38:01.0127 3236 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\windows\system32\FntCache.dll
    10:38:01.0156 3236 FontCache - ok
    10:38:01.0224 3236 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    10:38:01.0228 3236 FontCache3.0.0.0 - ok
    10:38:01.0343 3236 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys
    10:38:01.0347 3236 FsDepends - ok
    10:38:01.0386 3236 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\windows\system32\drivers\Fs_Rec.sys
    10:38:01.0387 3236 Fs_Rec - ok
    10:38:01.0422 3236 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\windows\system32\DRIVERS\fvevol.sys
    10:38:01.0424 3236 fvevol - ok
    10:38:01.0431 3236 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\drivers\gagp30kx.sys
    10:38:01.0433 3236 gagp30kx - ok
    10:38:01.0479 3236 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\windows\system32\DRIVERS\GEARAspiWDM.sys
    10:38:01.0480 3236 GEARAspiWDM - ok
    10:38:01.0581 3236 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\windows\System32\gpsvc.dll
    10:38:01.0605 3236 gpsvc - ok
    10:38:01.0639 3236 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys
    10:38:01.0642 3236 hcw85cir - ok
    10:38:01.0732 3236 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\windows\system32\drivers\HdAudio.sys
    10:38:01.0741 3236 HdAudAddService - ok
    10:38:01.0765 3236 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\windows\system32\DRIVERS\HDAudBus.sys
    10:38:01.0770 3236 HDAudBus - ok
    10:38:01.0780 3236 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\drivers\HidBatt.sys
    10:38:01.0783 3236 HidBatt - ok
    10:38:01.0797 3236 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\drivers\hidbth.sys
    10:38:01.0800 3236 HidBth - ok
    10:38:01.0835 3236 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\drivers\hidir.sys
    10:38:01.0836 3236 HidIr - ok
    10:38:01.0869 3236 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\windows\System32\hidserv.dll
    10:38:01.0876 3236 hidserv - ok
    10:38:01.0906 3236 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\windows\system32\DRIVERS\hidusb.sys
    10:38:01.0921 3236 HidUsb - ok
    10:38:01.0982 3236 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\windows\system32\kmsvc.dll
    10:38:01.0984 3236 hkmsvc - ok
    10:38:02.0019 3236 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\windows\system32\ListSvc.dll
    10:38:02.0026 3236 HomeGroupListener - ok
    10:38:02.0065 3236 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\windows\system32\provsvc.dll
    10:38:02.0073 3236 HomeGroupProvider - ok
    10:38:02.0082 3236 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\windows\system32\drivers\HpSAMD.sys
    10:38:02.0084 3236 HpSAMD - ok
    10:38:02.0168 3236 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\windows\system32\drivers\HTTP.sys
    10:38:02.0185 3236 HTTP - ok
    10:38:02.0198 3236 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\windows\system32\drivers\hwpolicy.sys
    10:38:02.0200 3236 hwpolicy - ok
    10:38:02.0234 3236 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys
    10:38:02.0237 3236 i8042prt - ok
    10:38:02.0310 3236 iaStor (d7921d5a870b11cc1adab198a519d50a) C:\windows\system32\DRIVERS\iaStor.sys
    10:38:02.0314 3236 iaStor - ok
    10:38:02.0499 3236 IAStorDataMgrSvc (8fff9083252c16fe3960173722605e9e) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    10:38:02.0499 3236 IAStorDataMgrSvc - ok
    10:38:02.0543 3236 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\windows\system32\drivers\iaStorV.sys
    10:38:02.0548 3236 iaStorV - ok
    10:38:02.0593 3236 iBtFltCoex (8a4ec1c3f10385181b1066120c610ae5) C:\windows\system32\DRIVERS\iBtFltCoex.sys
    10:38:02.0595 3236 iBtFltCoex - ok
    10:38:02.0767 3236 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    10:38:02.0789 3236 idsvc - ok
    10:38:03.0608 3236 igfx (174bcac474de13b2650e444cf124828e) C:\windows\system32\DRIVERS\igdkmd64.sys
    10:38:03.0858 3236 igfx - ok
    10:38:04.0300 3236 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\drivers\iirsp.sys
    10:38:04.0301 3236 iirsp - ok
    10:38:04.0409 3236 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\windows\System32\ikeext.dll
    10:38:04.0436 3236 IKEEXT - ok
    10:38:04.0478 3236 intaud_WaveExtensible (caddf0927dac63edae48f5c35a61d87d) C:\windows\system32\drivers\intelaud.sys
    10:38:04.0479 3236 intaud_WaveExtensible - ok
    10:38:04.0544 3236 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\windows\system32\DRIVERS\IntcDAud.sys
    10:38:04.0562 3236 IntcDAud - ok
    10:38:04.0573 3236 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\drivers\intelide.sys
    10:38:04.0575 3236 intelide - ok
    10:38:04.0595 3236 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys
    10:38:04.0597 3236 intelppm - ok
    10:38:04.0628 3236 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\windows\system32\ipbusenum.dll
    10:38:04.0651 3236 IPBusEnum - ok
    10:38:04.0662 3236 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\windows\system32\DRIVERS\ipfltdrv.sys
    10:38:04.0665 3236 IpFilterDriver - ok
    10:38:04.0709 3236 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\windows\System32\iphlpsvc.dll
    10:38:04.0720 3236 iphlpsvc - ok
    10:38:04.0726 3236 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\windows\system32\drivers\IPMIDrv.sys
    10:38:04.0728 3236 IPMIDRV - ok
    10:38:04.0737 3236 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys
    10:38:04.0739 3236 IPNAT - ok
    10:38:04.0926 3236 iPod Service (4472c8825b5e41d8697d5962f47ab1c9) C:\Program Files\iPod\bin\iPodService.exe
    10:38:04.0945 3236 iPod Service - ok
    10:38:04.0963 3236 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys
    10:38:04.0965 3236 IRENUM - ok
    10:38:04.0975 3236 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\drivers\isapnp.sys
    10:38:04.0977 3236 isapnp - ok
    10:38:05.0015 3236 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\windows\system32\drivers\msiscsi.sys
    10:38:05.0026 3236 iScsiPrt - ok
    10:38:05.0082 3236 iwdbus (716f66336f10885d935b08174dc54242) C:\windows\system32\DRIVERS\iwdbus.sys
    10:38:05.0083 3236 iwdbus - ok
    10:38:05.0097 3236 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys
    10:38:05.0097 3236 kbdclass - ok
    10:38:05.0102 3236 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\windows\system32\DRIVERS\kbdhid.sys
    10:38:05.0103 3236 kbdhid - ok
    10:38:05.0127 3236 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
    10:38:05.0128 3236 KeyIso - ok
    10:38:05.0159 3236 KSecDD (97a7070aea4c058b6418519e869a63b4) C:\windows\system32\Drivers\ksecdd.sys
    10:38:05.0160 3236 KSecDD - ok
    10:38:05.0204 3236 KSecPkg (26c43a7c2862447ec59deda188d1da07) C:\windows\system32\Drivers\ksecpkg.sys
    10:38:05.0205 3236 KSecPkg - ok
    10:38:05.0220 3236 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys
    10:38:05.0221 3236 ksthunk - ok
    10:38:05.0290 3236 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\windows\system32\msdtckrm.dll
    10:38:05.0304 3236 KtmRm - ok
    10:38:05.0391 3236 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\windows\System32\srvsvc.dll
    10:38:05.0403 3236 LanmanServer - ok
    10:38:05.0437 3236 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\windows\System32\wkssvc.dll
    10:38:05.0447 3236 LanmanWorkstation - ok
    10:38:05.0479 3236 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys
    10:38:05.0482 3236 lltdio - ok
    10:38:05.0537 3236 lltdsvc (c1185803384ab3feed115f79f109427f) C:\windows\System32\lltdsvc.dll
    10:38:05.0555 3236 lltdsvc - ok
    10:38:05.0565 3236 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\windows\System32\lmhsvc.dll
    10:38:05.0568 3236 lmhosts - ok
    10:38:05.0783 3236 LMS (0803906d607a9b83184447b75b60ecc2) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    10:38:05.0791 3236 LMS - ok
    10:38:05.0845 3236 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\drivers\lsi_fc.sys
    10:38:05.0867 3236 LSI_FC - ok
    10:38:05.0903 3236 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\drivers\lsi_sas.sys
    10:38:05.0908 3236 LSI_SAS - ok
    10:38:05.0925 3236 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\drivers\lsi_sas2.sys
    10:38:05.0929 3236 LSI_SAS2 - ok
    10:38:05.0953 3236 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\drivers\lsi_scsi.sys
    10:38:05.0958 3236 LSI_SCSI - ok
    10:38:06.0006 3236 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys
    10:38:06.0010 3236 luafv - ok
    10:38:06.0064 3236 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\windows\system32\Mcx2Svc.dll
    10:38:06.0089 3236 Mcx2Svc - ok
    10:38:06.0099 3236 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\drivers\megasas.sys
    10:38:06.0102 3236 megasas - ok
    10:38:06.0169 3236 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\drivers\MegaSR.sys
    10:38:06.0195 3236 MegaSR - ok
    10:38:06.0258 3236 MEIx64 (1c6e73fc46b509eff9d0086aa37132df) C:\windows\system32\DRIVERS\HECIx64.sys
    10:38:06.0260 3236 MEIx64 - ok
    10:38:06.0296 3236 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
    10:38:06.0301 3236 MMCSS - ok
    10:38:06.0313 3236 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys
    10:38:06.0316 3236 Modem - ok
    10:38:06.0350 3236 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys
    10:38:06.0352 3236 monitor - ok
    10:38:06.0366 3236 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys
    10:38:06.0367 3236 mouclass - ok
    10:38:06.0382 3236 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys
    10:38:06.0385 3236 mouhid - ok
    10:38:06.0399 3236 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\windows\system32\drivers\mountmgr.sys
    10:38:06.0402 3236 mountmgr - ok
    10:38:06.0595 3236 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    10:38:06.0618 3236 MozillaMaintenance - ok
    10:38:06.0701 3236 MpFilter (94c66ededcdb6a126880472f9a704d8e) C:\windows\system32\DRIVERS\MpFilter.sys
    10:38:06.0709 3236 MpFilter - ok
    10:38:06.0763 3236 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\windows\system32\drivers\mpio.sys
    10:38:06.0814 3236 mpio - ok
    10:38:06.0827 3236 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys
    10:38:06.0830 3236 mpsdrv - ok
    10:38:06.0952 3236 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\windows\system32\mpssvc.dll
    10:38:06.0978 3236 MpsSvc - ok
    10:38:06.0993 3236 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\windows\system32\drivers\mrxdav.sys
    10:38:06.0995 3236 MRxDAV - ok
    10:38:07.0036 3236 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\windows\system32\DRIVERS\mrxsmb.sys
    10:38:07.0042 3236 mrxsmb - ok
    10:38:07.0101 3236 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\windows\system32\DRIVERS\mrxsmb10.sys
    10:38:07.0119 3236 mrxsmb10 - ok
    10:38:07.0151 3236 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\windows\system32\DRIVERS\mrxsmb20.sys
    10:38:07.0172 3236 mrxsmb20 - ok
    10:38:07.0182 3236 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\windows\system32\drivers\msahci.sys
    10:38:07.0184 3236 msahci - ok
    10:38:07.0222 3236 msdsm (db801a638d011b9633829eb6f663c900) C:\windows\system32\drivers\msdsm.sys
    10:38:07.0240 3236 msdsm - ok
    10:38:07.0275 3236 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\windows\System32\msdtc.exe
    10:38:07.0287 3236 MSDTC - ok
    10:38:07.0296 3236 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys
    10:38:07.0299 3236 Msfs - ok
    10:38:07.0305 3236 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys
    10:38:07.0306 3236 mshidkmdf - ok
    10:38:07.0310 3236 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\drivers\msisadrv.sys
    10:38:07.0311 3236 msisadrv - ok
    10:38:07.0354 3236 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\windows\system32\iscsiexe.dll
    10:38:07.0365 3236 MSiSCSI - ok
    10:38:07.0368 3236 msiserver - ok
    10:38:07.0384 3236 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys
    10:38:07.0385 3236 MSKSSRV - ok
    10:38:07.0567 3236 MsMpSvc (59faaf2c83c8169ea20f9e335e418907) c:\Program Files\Microsoft Security Client\MsMpEng.exe
    10:38:07.0568 3236 MsMpSvc - ok
    10:38:07.0570 3236 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys
    10:38:07.0575 3236 MSPCLOCK - ok
    10:38:07.0578 3236 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys
    10:38:07.0580 3236 MSPQM - ok
    10:38:07.0613 3236 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\windows\system32\drivers\MsRPC.sys
    10:38:07.0616 3236 MsRPC - ok
    10:38:07.0622 3236 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys
    10:38:07.0623 3236 mssmbios - ok
    10:38:07.0627 3236 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys
    10:38:07.0628 3236 MSTEE - ok
    10:38:07.0632 3236 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\drivers\MTConfig.sys
    10:38:07.0633 3236 MTConfig - ok
    10:38:07.0661 3236 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys
    10:38:07.0661 3236 Mup - ok
    10:38:07.0867 3236 MyWiFiDHCPDNS (8f57db74bf5407a4cda6c8b005dc8dd0) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
    10:38:07.0914 3236 MyWiFiDHCPDNS - ok
    10:38:08.0037 3236 napagent (582ac6d9873e31dfa28a4547270862dd) C:\windows\system32\qagentRT.dll
    10:38:08.0089 3236 napagent - ok
    10:38:08.0213 3236 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys
    10:38:08.0228 3236 NativeWifiP - ok
    10:38:08.0365 3236 NDIS (c38b8ae57f78915905064a9a24dc1586) C:\windows\system32\drivers\ndis.sys
    10:38:08.0384 3236 NDIS - ok
    10:38:08.0397 3236 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys
    10:38:08.0400 3236 NdisCap - ok
    10:38:08.0416 3236 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys
    10:38:08.0418 3236 NdisTapi - ok
    10:38:08.0443 3236 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\windows\system32\DRIVERS\ndisuio.sys
    10:38:08.0445 3236 Ndisuio - ok
    10:38:08.0480 3236 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\windows\system32\DRIVERS\ndiswan.sys
    10:38:08.0504 3236 NdisWan - ok
    10:38:08.0511 3236 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\windows\system32\drivers\NDProxy.sys
    10:38:08.0515 3236 NDProxy - ok
    10:38:08.0528 3236 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys
    10:38:08.0531 3236 NetBIOS - ok
    10:38:08.0558 3236 NetBT (09594d1089c523423b32a4229263f068) C:\windows\system32\DRIVERS\netbt.sys
    10:38:08.0564 3236 NetBT - ok
    10:38:08.0605 3236 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
    10:38:08.0609 3236 Netlogon - ok
    10:38:08.0692 3236 Netman (847d3ae376c0817161a14a82c8922a9e) C:\windows\System32\netman.dll
    10:38:08.0706 3236 Netman - ok
    10:38:08.0935 3236 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    10:38:08.0958 3236 NetMsmqActivator - ok
    10:38:08.0969 3236 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    10:38:08.0972 3236 NetPipeActivator - ok
    10:38:09.0043 3236 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\windows\System32\netprofm.dll
    10:38:09.0064 3236 netprofm - ok
    10:38:09.0071 3236 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    10:38:09.0075 3236 NetTcpActivator - ok
    10:38:09.0084 3236 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    10:38:09.0087 3236 NetTcpPortSharing - ok
    10:38:10.0038 3236 NETwNs64 (50ad7f7040c22bb7caa59a0880875a21) C:\windows\system32\DRIVERS\NETwNs64.sys
    10:38:10.0167 3236 NETwNs64 - ok
    10:38:10.0568 3236 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\drivers\nfrd960.sys
    10:38:10.0569 3236 nfrd960 - ok
    10:38:10.0609 3236 NisDrv (91b4e0273d2f6c24ef845f2b41311289) C:\windows\system32\DRIVERS\NisDrvWFP.sys
    10:38:10.0611 3236 NisDrv - ok
    10:38:10.0787 3236 NisSrv (10a43829a9e606af3eef25a1c1665923) c:\Program Files\Microsoft Security Client\NisSrv.exe
    10:38:10.0798 3236 NisSrv - ok
    10:38:10.0881 3236 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\windows\System32\nlasvc.dll
    10:38:10.0899 3236 NlaSvc - ok
    10:38:10.0925 3236 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys
    10:38:10.0929 3236 Npfs - ok
    10:38:10.0945 3236 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\windows\system32\nsisvc.dll
    10:38:10.0949 3236 nsi - ok
    10:38:10.0972 3236 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys
    10:38:10.0974 3236 nsiproxy - ok
    10:38:11.0129 3236 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\windows\system32\drivers\Ntfs.sys
    10:38:11.0163 3236 Ntfs - ok
    10:38:11.0557 3236 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys
    10:38:11.0558 3236 Null - ok
    10:38:11.0605 3236 nusb3hub (158ad24745bd85ba9be3c51c38f48c32) C:\windows\system32\DRIVERS\nusb3hub.sys
    10:38:11.0607 3236 nusb3hub - ok
    10:38:11.0655 3236 nusb3xhc (d40a13b2c0891e218f9523b376955db6) C:\windows\system32\DRIVERS\nusb3xhc.sys
    10:38:11.0657 3236 nusb3xhc - ok
    10:38:11.0776 3236 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\windows\system32\drivers\nvraid.sys
    10:38:11.0807 3236 nvraid - ok
    10:38:11.0836 3236 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\windows\system32\drivers\nvstor.sys
    10:38:11.0841 3236 nvstor - ok
    10:38:11.0859 3236 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\drivers\nv_agp.sys
    10:38:11.0864 3236 nv_agp - ok
    10:38:11.0879 3236 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\drivers\ohci1394.sys
    10:38:11.0883 3236 ohci1394 - ok
    10:38:12.0079 3236 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    10:38:12.0088 3236 ose - ok
    10:38:12.0480 3236 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
    10:38:12.0612 3236 osppsvc - ok
    10:38:12.0985 3236 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
    10:38:12.0995 3236 p2pimsvc - ok
    10:38:13.0058 3236 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\windows\system32\p2psvc.dll
    10:38:13.0076 3236 p2psvc - ok
    10:38:13.0220 3236 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\drivers\parport.sys
    10:38:13.0244 3236 Parport - ok
    10:38:13.0290 3236 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\windows\system32\drivers\partmgr.sys
    10:38:13.0292 3236 partmgr - ok
    10:38:13.0353 3236 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\windows\System32\pcasvc.dll
    10:38:13.0369 3236 PcaSvc - ok
    10:38:13.0398 3236 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\windows\system32\drivers\pci.sys
    10:38:13.0402 3236 pci - ok
    10:38:13.0410 3236 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\drivers\pciide.sys
    10:38:13.0412 3236 pciide - ok
    10:38:13.0439 3236 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\drivers\pcmcia.sys
    10:38:13.0441 3236 pcmcia - ok
    10:38:13.0447 3236 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys
    10:38:13.0448 3236 pcw - ok
    10:38:13.0522 3236 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys
    10:38:13.0544 3236 PEAUTH - ok
    10:38:13.0797 3236 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\windows\SysWow64\perfhost.exe
    10:38:13.0799 3236 PerfHost - ok
    10:38:14.0186 3236 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\windows\system32\pla.dll
    10:38:14.0239 3236 pla - ok
    10:38:14.0325 3236 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\windows\system32\umpnpmgr.dll
    10:38:14.0347 3236 PlugPlay - ok
    10:38:14.0372 3236 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\windows\system32\pnrpauto.dll
    10:38:14.0377 3236 PNRPAutoReg - ok
    10:38:14.0426 3236 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\windows\system32\pnrpsvc.dll
    10:38:14.0437 3236 PNRPsvc - ok
    10:38:14.0493 3236 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\windows\System32\ipsecsvc.dll
    10:38:14.0504 3236 PolicyAgent - ok
    10:38:14.0550 3236 Power (6ba9d927dded70bd1a9caded45f8b184) C:\windows\system32\umpo.dll
    10:38:14.0553 3236 Power - ok
    10:38:14.0688 3236 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\windows\system32\DRIVERS\raspptp.sys
    10:38:14.0690 3236 PptpMiniport - ok
    10:38:14.0707 3236 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\drivers\processr.sys
    10:38:14.0708 3236 Processor - ok
    10:38:14.0752 3236 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\windows\system32\profsvc.dll
    10:38:14.0759 3236 ProfSvc - ok
    10:38:14.0783 3236 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
    10:38:14.0784 3236 ProtectedStorage - ok
    10:38:14.0831 3236 Psched (0557cf5a2556bd58e26384169d72438d) C:\windows\system32\DRIVERS\pacer.sys
    10:38:14.0832 3236 Psched - ok
    10:38:14.0884 3236 PxHlpa64 (87b04878a6d59d6c79251dc960c674c1) C:\windows\system32\Drivers\PxHlpa64.sys
    10:38:14.0887 3236 PxHlpa64 - ok
    10:38:15.0070 3236 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\drivers\ql2300.sys
    10:38:15.0130 3236 ql2300 - ok
    10:38:15.0530 3236 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\drivers\ql40xx.sys
    10:38:15.0549 3236 ql40xx - ok
    10:38:15.0588 3236 QWAVE (906191634e99aea92c4816150bda3732) C:\windows\system32\qwave.dll
    10:38:15.0605 3236 QWAVE - ok
    10:38:15.0611 3236 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys
    10:38:15.0612 3236 QWAVEdrv - ok
    10:38:15.0615 3236 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys
    10:38:15.0617 3236 RasAcd - ok
    10:38:15.0653 3236 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys
    10:38:15.0655 3236 RasAgileVpn - ok
    10:38:15.0675 3236 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\windows\System32\rasauto.dll
    10:38:15.0677 3236 RasAuto - ok
    10:38:15.0687 3236 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\windows\system32\DRIVERS\rasl2tp.sys
    10:38:15.0690 3236 Rasl2tp - ok
    10:38:15.0751 3236 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\windows\System32\rasmans.dll
    10:38:15.0774 3236 RasMan - ok
    10:38:15.0786 3236 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys
    10:38:15.0787 3236 RasPppoe - ok
    10:38:15.0799 3236 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys
    10:38:15.0800 3236 RasSstp - ok
    10:38:15.0876 3236 rdbss (77f665941019a1594d887a74f301fa2f) C:\windows\system32\DRIVERS\rdbss.sys
    10:38:15.0911 3236 rdbss - ok
    10:38:15.0920 3236 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\drivers\rdpbus.sys
    10:38:15.0925 3236 rdpbus - ok
    10:38:15.0933 3236 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys
    10:38:15.0934 3236 RDPCDD - ok
    10:38:15.0951 3236 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys
    10:38:15.0952 3236 RDPENCDD - ok
    10:38:15.0957 3236 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys
    10:38:15.0957 3236 RDPREFMP - ok
    10:38:16.0007 3236 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\windows\system32\drivers\RDPWD.sys
    10:38:16.0023 3236 RDPWD - ok
    10:38:16.0054 3236 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\windows\system32\drivers\rdyboost.sys
    10:38:16.0059 3236 rdyboost - ok
    10:38:16.0267 3236 RegSrvc (fd11c1287d38a46fb72353e14d50089c) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    10:38:16.0284 3236 RegSrvc - ok
    10:38:16.0327 3236 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\windows\System32\mprdim.dll
    10:38:16.0351 3236 RemoteAccess - ok
    10:38:16.0392 3236 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\windows\system32\regsvc.dll
    10:38:16.0410 3236 RemoteRegistry - ok
    10:38:16.0553 3236 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\windows\system32\DRIVERS\rfcomm.sys
    10:38:16.0559 3236 RFCOMM - ok
    10:38:16.0586 3236 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\windows\System32\RpcEpMap.dll
    10:38:16.0592 3236 RpcEptMapper - ok
    10:38:16.0629 3236 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\windows\system32\locator.exe
    10:38:16.0633 3236 RpcLocator - ok
    10:38:16.0712 3236 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\windows\system32\rpcss.dll
    10:38:16.0724 3236 RpcSs - ok
    10:38:16.0761 3236 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys
    10:38:16.0762 3236 rspndr - ok
    10:38:16.0855 3236 RSUSBSTOR (be29b0a3ac1e8bd02ffab8cee86badfa) C:\windows\system32\Drivers\RtsUStor.sys
    10:38:16.0857 3236 RSUSBSTOR - ok
    10:38:16.0915 3236 RTL8167 (2777226ee8bf50b059d7a7c90177e99c) C:\windows\system32\DRIVERS\Rt64win7.sys
    10:38:16.0917 3236 RTL8167 - ok
    10:38:16.0950 3236 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
    10:38:16.0951 3236 SamSs - ok
    10:38:17.0071 3236 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    10:38:17.0073 3236 SASDIFSV - ok
    10:38:17.0157 3236 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    10:38:17.0159 3236 SASKUTIL - ok
    10:38:17.0203 3236 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\windows\system32\drivers\sbp2port.sys
    10:38:17.0226 3236 sbp2port - ok
    10:38:17.0269 3236 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\windows\System32\SCardSvr.dll
    10:38:17.0284 3236 SCardSvr - ok
    10:38:17.0298 3236 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\windows\system32\DRIVERS\scfilter.sys
    10:38:17.0301 3236 scfilter - ok
    10:38:17.0423 3236 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\windows\system32\schedsvc.dll
    10:38:17.0459 3236 Schedule - ok
    10:38:17.0493 3236 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\windows\System32\certprop.dll
    10:38:17.0497 3236 SCPolicySvc - ok
    10:38:17.0538 3236 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\windows\System32\SDRSVC.dll
    10:38:17.0546 3236 SDRSVC - ok
    10:38:17.0796 3236 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys
    10:38:17.0830 3236 secdrv - ok
    10:38:17.0895 3236 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\windows\system32\seclogon.dll
    10:38:17.0900 3236 seclogon - ok
    10:38:17.0926 3236 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\windows\system32\sens.dll
    10:38:17.0930 3236 SENS - ok
    10:38:17.0949 3236 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\windows\system32\sensrsvc.dll
    10:38:17.0951 3236 SensrSvc - ok
    10:38:17.0955 3236 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\drivers\serenum.sys
    10:38:17.0956 3236 Serenum - ok
    10:38:17.0979 3236 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\drivers\serial.sys
    10:38:17.0982 3236 Serial - ok
    10:38:17.0986 3236 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\drivers\sermouse.sys
    10:38:17.0987 3236 sermouse - ok
    10:38:18.0007 3236 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\windows\system32\sessenv.dll
    10:38:18.0010 3236 SessionEnv - ok
    10:38:18.0014 3236 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\drivers\sffdisk.sys
    10:38:18.0015 3236 sffdisk - ok
    10:38:18.0019 3236 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\drivers\sffp_mmc.sys
    10:38:18.0020 3236 sffp_mmc - ok
    10:38:18.0024 3236 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\windows\system32\drivers\sffp_sd.sys
    10:38:18.0025 3236 sffp_sd - ok
    10:38:18.0030 3236 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\drivers\sfloppy.sys
    10:38:18.0033 3236 sfloppy - ok
    10:38:18.0151 3236 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\windows\System32\ipnathlp.dll
    10:38:18.0193 3236 SharedAccess - ok
    10:38:18.0255 3236 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\windows\System32\shsvcs.dll
    10:38:18.0267 3236 ShellHWDetection - ok
    10:38:18.0288 3236 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\drivers\SiSRaid2.sys
    10:38:18.0291 3236 SiSRaid2 - ok
    10:38:18.0308 3236 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\drivers\sisraid4.sys
    10:38:18.0312 3236 SiSRaid4 - ok
    10:38:18.0340 3236 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys
    10:38:18.0343 3236 Smb - ok
    10:38:18.0367 3236 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\windows\System32\snmptrap.exe
    10:38:18.0369 3236 SNMPTRAP - ok
    10:38:18.0373 3236 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys
    10:38:18.0373 3236 spldr - ok
    10:38:18.0432 3236 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\windows\System32\spoolsv.exe
    10:38:18.0448 3236 Spooler - ok
    10:38:18.0740 3236 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\windows\system32\sppsvc.exe
    10:38:18.0838 3236 sppsvc - ok
    10:38:19.0195 3236 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\windows\system32\sppuinotify.dll
    10:38:19.0202 3236 sppuinotify - ok
    10:38:19.0367 3236 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\windows\system32\DRIVERS\srv.sys
    10:38:19.0385 3236 srv - ok
    10:38:19.0419 3236 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\windows\system32\DRIVERS\srv2.sys
    10:38:19.0424 3236 srv2 - ok
    10:38:19.0449 3236 srvnet (27e461f0be5bff5fc737328f749538c3) C:\windows\system32\DRIVERS\srvnet.sys
    10:38:19.0462 3236 srvnet - ok
    10:38:19.0520 3236 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\windows\System32\ssdpsrv.dll
    10:38:19.0525 3236 SSDPSRV - ok
    10:38:19.0534 3236 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\windows\system32\sstpsvc.dll
    10:38:19.0537 3236 SstpSvc - ok
    10:38:19.0747 3236 STacSV (a6b2ec3a2b6ad7c3f7b2f3495cade4c0) C:\Program Files\IDT\WDM\STacSV64.exe
    10:38:19.0772 3236 STacSV - ok
    10:38:19.0882 3236 Steam Client Service - ok
    10:38:19.0918 3236 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\drivers\stexstor.sys
    10:38:19.0921 3236 stexstor - ok
    10:38:20.0036 3236 STHDA (eba98394a7d58f7552c52192bd8fa7e6) C:\windows\system32\DRIVERS\stwrt64.sys
    10:38:20.0055 3236 STHDA - ok
    10:38:20.0154 3236 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\windows\System32\wiaservc.dll
    10:38:20.0190 3236 stisvc - ok
    10:38:20.0202 3236 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys
    10:38:20.0209 3236 swenum - ok
    10:38:20.0300 3236 swprv (e08e46fdd841b7184194011ca1955a0b) C:\windows\System32\swprv.dll
    10:38:20.0340 3236 swprv - ok
    10:38:20.0537 3236 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\windows\system32\sysmain.dll
    10:38:20.0596 3236 SysMain - ok
    10:38:20.0926 3236 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\windows\System32\TabSvc.dll
    10:38:20.0952 3236 TabletInputService - ok
    10:38:20.0998 3236 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\windows\System32\tapisrv.dll
    10:38:21.0016 3236 TapiSrv - ok
    10:38:21.0038 3236 TBS (1be03ac720f4d302ea01d40f588162f6) C:\windows\System32\tbssvc.dll
    10:38:21.0045 3236 TBS - ok
    10:38:21.0383 3236 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\windows\system32\drivers\tcpip.sys
    10:38:21.0438 3236 Tcpip - ok
    10:38:22.0140 3236 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\windows\system32\DRIVERS\tcpip.sys
    10:38:22.0169 3236 TCPIP6 - ok
    10:38:22.0631 3236 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\windows\system32\drivers\tcpipreg.sys
    10:38:22.0633 3236 tcpipreg - ok
    10:38:22.0650 3236 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys
    10:38:22.0653 3236 TDPIPE - ok
    10:38:22.0717 3236 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\windows\system32\drivers\tdtcp.sys
    10:38:22.0720 3236 TDTCP - ok
    10:38:22.0738 3236 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\windows\system32\DRIVERS\tdx.sys
    10:38:22.0742 3236 tdx - ok
    10:38:22.0758 3236 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\windows\system32\DRIVERS\termdd.sys
    10:38:22.0760 3236 TermDD - ok
    10:38:22.0888 3236 TermService (2e648163254233755035b46dd7b89123) C:\windows\System32\termsrv.dll
    10:38:22.0945 3236 TermService - ok
    10:38:22.0963 3236 Themes (f0344071948d1a1fa732231785a0664c) C:\windows\system32\themeservice.dll
    10:38:22.0969 3236 Themes - ok
    10:38:23.0006 3236 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\windows\system32\mmcss.dll
    10:38:23.0010 3236 THREADORDER - ok
    10:38:23.0040 3236 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\windows\System32\trkwks.dll
    10:38:23.0061 3236 TrkWks - ok
    10:38:23.0134 3236 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\windows\servicing\TrustedInstaller.exe
    10:38:23.0148 3236 TrustedInstaller - ok
    10:38:23.0170 3236 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\windows\system32\DRIVERS\tssecsrv.sys
    10:38:23.0172 3236 tssecsrv - ok
    10:38:23.0196 3236 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\windows\system32\drivers\tsusbflt.sys
    10:38:23.0199 3236 TsUsbFlt - ok
    10:38:23.0216 3236 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\windows\system32\drivers\TsUsbGD.sys
    10:38:23.0218 3236 TsUsbGD - ok
    10:38:23.0241 3236 tunnel (3566a8daafa27af944f5d705eaa64894) C:\windows\system32\DRIVERS\tunnel.sys
    10:38:23.0243 3236 tunnel - ok
    10:38:23.0311 3236 TurboB (fd24f98d2898be093fe926604be7db99) C:\windows\system32\DRIVERS\TurboB.sys
    10:38:23.0313 3236 TurboB - ok
    10:38:23.0425 3236 TurboBoost (600b406a04d90f577fea8a88d7379f08) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
    10:38:23.0487 3236 TurboBoost - ok
    10:38:23.0503 3236 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\drivers\uagp35.sys
    10:38:23.0506 3236 uagp35 - ok
    10:38:23.0548 3236 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\windows\system32\DRIVERS\udfs.sys
    10:38:23.0570 3236 udfs - ok
    10:38:23.0618 3236 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\windows\system32\UI0Detect.exe
    10:38:23.0626 3236 UI0Detect - ok
    10:38:23.0641 3236 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\drivers\uliagpkx.sys
    10:38:23.0646 3236 uliagpkx - ok
    10:38:23.0679 3236 umbus (dc54a574663a895c8763af0fa1ff7561) C:\windows\system32\DRIVERS\umbus.sys
    10:38:23.0682 3236 umbus - ok
    10:38:23.0706 3236 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\drivers\umpass.sys
    10:38:23.0709 3236 UmPass - ok
    10:38:24.0169 3236 UNS (eb79c6c91a99930015ef29ae7fa802d1) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    10:38:24.0212 3236 UNS - ok
    10:38:24.0591 3236 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\windows\System32\upnphost.dll
    10:38:24.0608 3236 upnphost - ok
    10:38:24.0773 3236 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\windows\system32\Drivers\usbaapl64.sys
    10:38:24.0776 3236 USBAAPL64 - ok
    10:38:24.0844 3236 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\windows\system32\drivers\usbaudio.sys
    10:38:24.0867 3236 usbaudio - ok
    10:38:24.0905 3236 usbccgp (19ad7990c0b67e48dac5b26f99628223) C:\windows\system32\DRIVERS\usbccgp.sys
    10:38:24.0908 3236 usbccgp - ok
    10:38:24.0926 3236 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\drivers\usbcir.sys
    10:38:24.0930 3236 usbcir - ok
    10:38:24.0942 3236 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\windows\system32\DRIVERS\usbehci.sys
    10:38:24.0944 3236 usbehci - ok
    10:38:25.0005 3236 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\windows\system32\DRIVERS\usbhub.sys
    10:38:25.0031 3236 usbhub - ok
    10:38:25.0056 3236 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\windows\system32\drivers\usbohci.sys
    10:38:25.0059 3236 usbohci - ok
    10:38:25.0072 3236 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\drivers\usbprint.sys
    10:38:25.0074 3236 usbprint - ok
    10:38:25.0090 3236 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\windows\system32\DRIVERS\USBSTOR.SYS
    10:38:25.0094 3236 USBSTOR - ok
    10:38:25.0104 3236 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\windows\system32\drivers\usbuhci.sys
    10:38:25.0107 3236 usbuhci - ok
    10:38:25.0146 3236 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\windows\system32\Drivers\usbvideo.sys
    10:38:25.0168 3236 usbvideo - ok
    10:38:25.0188 3236 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\windows\System32\uxsms.dll
    10:38:25.0194 3236 UxSms - ok
    10:38:25.0227 3236 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\windows\system32\lsass.exe
    10:38:25.0231 3236 VaultSvc - ok
    10:38:25.0259 3236 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\drivers\vdrvroot.sys
    10:38:25.0261 3236 vdrvroot - ok
    10:38:25.0348 3236 vds (8d6b481601d01a456e75c3210f1830be) C:\windows\System32\vds.exe
    10:38:25.0358 3236 vds - ok
    10:38:25.0362 3236 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys
    10:38:25.0363 3236 vga - ok
    10:38:25.0368 3236 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys
    10:38:25.0369 3236 VgaSave - ok
    10:38:25.0397 3236 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\windows\system32\drivers\vhdmp.sys
    10:38:25.0403 3236 vhdmp - ok
    10:38:25.0415 3236 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\drivers\viaide.sys
    10:38:25.0422 3236 viaide - ok
    10:38:25.0435 3236 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\windows\system32\drivers\volmgr.sys
    10:38:25.0438 3236 volmgr - ok
    10:38:25.0484 3236 volmgrx (a255814907c89be58b79ef2f189b843b) C:\windows\system32\drivers\volmgrx.sys
    10:38:25.0492 3236 volmgrx - ok
    10:38:25.0545 3236 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\windows\system32\drivers\volsnap.sys
    10:38:25.0552 3236 volsnap - ok
    10:38:25.0576 3236 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\drivers\vsmraid.sys
    10:38:25.0581 3236 vsmraid - ok
    10:38:25.0880 3236 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\windows\system32\vssvc.exe
    10:38:25.0933 3236 VSS - ok
    10:38:26.0378 3236 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys
    10:38:26.0380 3236 vwifibus - ok
    10:38:26.0411 3236 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys
    10:38:26.0413 3236 vwififlt - ok
    10:38:26.0428 3236 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\windows\system32\DRIVERS\vwifimp.sys
    10:38:26.0429 3236 vwifimp - ok
    10:38:26.0502 3236 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\windows\system32\w32time.dll
    10:38:26.0519 3236 W32Time - ok
    10:38:26.0533 3236 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\drivers\wacompen.sys
    10:38:26.0536 3236 WacomPen - ok
    10:38:26.0566 3236 WANARP (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
    10:38:26.0569 3236 WANARP - ok
    10:38:26.0589 3236 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\windows\system32\DRIVERS\wanarp.sys
    10:38:26.0591 3236 Wanarpv6 - ok
    10:38:26.0770 3236 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\windows\system32\Wat\WatAdminSvc.exe
    10:38:26.0788 3236 WatAdminSvc - ok
    10:38:26.0946 3236 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\windows\system32\wbengine.exe
    10:38:26.0990 3236 wbengine - ok
    10:38:27.0313 3236 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\windows\System32\wbiosrvc.dll
    10:38:27.0330 3236 WbioSrvc - ok
    10:38:27.0357 3236 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\windows\System32\wcncsvc.dll
    10:38:27.0362 3236 wcncsvc - ok
    10:38:27.0375 3236 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\windows\System32\WcsPlugInService.dll
    10:38:27.0377 3236 WcsPlugInService - ok
    10:38:27.0516 3236 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\drivers\wd.sys
    10:38:27.0519 3236 Wd - ok
    10:38:27.0588 3236 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys
    10:38:27.0605 3236 Wdf01000 - ok
    10:38:27.0630 3236 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
    10:38:27.0654 3236 WdiServiceHost - ok
    10:38:27.0661 3236 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\windows\system32\wdi.dll
    10:38:27.0667 3236 WdiSystemHost - ok
    10:38:27.0757 3236 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\windows\System32\webclnt.dll
    10:38:27.0763 3236 WebClient - ok
    10:38:27.0840 3236 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\windows\system32\wecsvc.dll
    10:38:27.0860 3236 Wecsvc - ok
    10:38:27.0892 3236 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\windows\System32\wercplsupport.dll
    10:38:27.0918 3236 wercplsupport - ok
    10:38:27.0937 3236 WerSvc (6d137963730144698cbd10f202e9f251) C:\windows\System32\WerSvc.dll
    10:38:27.0944 3236 WerSvc - ok
    10:38:28.0078 3236 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys
    10:38:28.0080 3236 WfpLwf - ok
    10:38:28.0149 3236 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\windows\system32\DRIVERS\wimfltr.sys
    10:38:28.0167 3236 WimFltr - ok
    10:38:28.0179 3236 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys
    10:38:28.0183 3236 WIMMount - ok
    10:38:28.0260 3236 WinDefend - ok
    10:38:28.0288 3236 WinHttpAutoProxySvc - ok
    10:38:28.0436 3236 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\windows\system32\wbem\WMIsvc.dll
    10:38:28.0453 3236 Winmgmt - ok
    10:38:28.0651 3236 WinRM (bcb1310604aa415c4508708975b3931e) C:\windows\system32\WsmSvc.dll
    10:38:28.0720 3236 WinRM - ok
    10:38:29.0242 3236 WinUSB (fe88b288356e7b47b74b13372add906d) C:\windows\system32\DRIVERS\WinUSB.sys
    10:38:29.0246 3236 WinUSB - ok
    10:38:29.0416 3236 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\windows\System32\wlansvc.dll
    10:38:29.0450 3236 Wlansvc - ok
    10:38:29.0575 3236 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
    10:38:29.0578 3236 wlcrasvc - ok
    10:38:29.0927 3236 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    10:38:30.0044 3236 wlidsvc - ok
    10:38:30.0502 3236 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys
    10:38:30.0503 3236 WmiAcpi - ok
    10:38:30.0650 3236 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\windows\system32\wbem\WmiApSrv.exe
    10:38:30.0678 3236 wmiApSrv - ok
    10:38:30.0760 3236 WMPNetworkSvc - ok
    10:38:31.0060 3236 WMZuneComm (83b6ca03c846fcd47f9883d77d1eb27b) C:\Program Files\Zune\WMZuneComm.exe
    10:38:31.0078 3236 WMZuneComm - ok
    10:38:31.0101 3236 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\windows\System32\wpcsvc.dll
    10:38:31.0107 3236 WPCSvc - ok
    10:38:31.0131 3236 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\windows\system32\wpdbusenum.dll
    10:38:31.0137 3236 WPDBusEnum - ok
    10:38:31.0159 3236 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys
    10:38:31.0162 3236 ws2ifsl - ok
    10:38:31.0191 3236 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\windows\system32\wscsvc.dll
    10:38:31.0193 3236 wscsvc - ok
    10:38:31.0196 3236 WSearch - ok
    10:38:31.0461 3236 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\windows\system32\wuaueng.dll
    10:38:31.0533 3236 wuauserv - ok
    10:38:32.0003 3236 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\windows\system32\drivers\WudfPf.sys
    10:38:32.0027 3236 WudfPf - ok
    10:38:32.0076 3236 WUDFRd (cf8d590be3373029d57af80914190682) C:\windows\system32\DRIVERS\WUDFRd.sys
    10:38:32.0082 3236 WUDFRd - ok
    10:38:32.0125 3236 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\windows\System32\WUDFSvc.dll
    10:38:32.0151 3236 wudfsvc - ok
    10:38:32.0214 3236 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\windows\System32\wwansvc.dll
    10:38:32.0235 3236 WwanSvc - ok
    10:38:33.0131 3236 ZuneNetworkSvc (67b787c34fb2888d01b130ae007042d8) C:\Program Files\Zune\ZuneNss.exe
    10:38:33.0308 3236 ZuneNetworkSvc - ok
    10:38:33.0395 3236 ZuneWlanCfgSvc (4d89fc1c20cf655739efac5da81a67bc) C:\Program Files\Zune\ZuneWlanCfgSvc.exe
    10:38:33.0413 3236 ZuneWlanCfgSvc - ok
    10:38:33.0459 3236 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    10:38:33.0889 3236 \Device\Harddisk0\DR0 - ok
    10:38:33.0897 3236 Boot (0x1200) (17e6064b18aa88ed8319b3238fe06a25) \Device\Harddisk0\DR0\Partition0
    10:38:33.0900 3236 \Device\Harddisk0\DR0\Partition0 - ok
    10:38:33.0942 3236 Boot (0x1200) (723ffebde086355ce5f5c8e20d4fdb4a) \Device\Harddisk0\DR0\Partition1
    10:38:33.0946 3236 \Device\Harddisk0\DR0\Partition1 - ok
    10:38:33.0950 3236 ============================================================
    10:38:33.0950 3236 Scan finished
    10:38:33.0950 3236 ============================================================
    10:38:33.0958 3580 Detected object count: 0
    10:38:33.0958 3580 Actual detected object count: 0
     

    Attached Files:

  6. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi there. Sorry for the delay. Please download and run Combo Fix.

    Download ComboFix from this location:

    Link 1



    * IMPORTANT- Save ComboFix.exe to your Desktop

    ====================================================


    Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal. If you are unsure how to do this, please refer to this topic How to disable your security applications


    ====================================================


    Double click on combofix.exe & follow the prompts.


    When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

    *Note - if after running ComboFix you see a message similar to 'registry key marked for deletion..' rebooting the machine will resolve that.

    In your next reply, please post the following:

    - Combofix log
     
  7. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
    SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Created a new restore point
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Wilson\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C9C30615-F6D0-4273-B007-DFF41429BE78}.xps
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-07-09 to 2012-08-09 )))))))))))))))))))))))))))))))
    .
    .
    2012-08-09 14:47 . 2012-08-09 14:47 -------- d-----w- c:\users\Public\AppData\Local\temp
    2012-08-09 14:47 . 2012-08-09 14:47 -------- d-----w- c:\users\Default\AppData\Local\temp
    2012-08-08 13:48 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1FE58464-E1B6-471D-B4D3-3470E7A63217}\mpengine.dll
    2012-08-06 23:05 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2012-07-30 00:35 . 2012-07-30 00:35 476976 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
    2012-07-30 00:34 . 2012-07-30 00:34 -------- d-----w- c:\program files (x86)\Java
    2012-07-28 15:05 . 2012-07-28 15:06 -------- d-----w- c:\programdata\SUPERSetup
    2012-07-26 15:41 . 2012-07-26 15:41 -------- d-----w- c:\users\Wilson\AppData\Local\{88646415-D730-11E1-8270-B8AC6F996F26}
    2012-07-26 14:45 . 2012-07-26 14:45 -------- d-----w- c:\users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----r- c:\users\Wilson\Podcasts
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\ko-KR
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\ms-MY
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\id-ID
    2012-07-23 21:24 . 2012-07-23 21:26 -------- d-----w- c:\program files\Zune
    2012-07-12 16:58 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys
    2012-07-12 16:56 . 2012-06-02 11:57 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2012-07-12 16:56 . 2012-06-02 08:16 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
    2012-07-12 16:56 . 2012-06-02 11:57 96768 ----a-w- c:\windows\system32\mshtmled.dll
    2012-07-12 00:59 . 2012-06-06 06:06 2004480 ----a-w- c:\windows\system32\msxml6.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-07-30 00:35 . 2011-11-03 21:49 472880 ----a-w- c:\windows\SysWow64\deployJava1.dll
    2012-07-03 17:46 . 2011-12-17 22:11 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-06-02 22:19 . 2012-06-21 14:17 38424 ----a-w- c:\windows\system32\wups.dll
    2012-06-02 22:19 . 2012-06-21 14:17 2428952 ----a-w- c:\windows\system32\wuaueng.dll
    2012-06-02 22:19 . 2012-06-21 14:17 57880 ----a-w- c:\windows\system32\wuauclt.exe
    2012-06-02 22:19 . 2012-06-21 14:17 44056 ----a-w- c:\windows\system32\wups2.dll
    2012-06-02 22:19 . 2012-06-21 14:17 701976 ----a-w- c:\windows\system32\wuapi.dll
    2012-06-02 22:15 . 2012-06-21 14:17 2622464 ----a-w- c:\windows\system32\wucltux.dll
    2012-06-02 22:15 . 2012-06-21 14:17 99840 ----a-w- c:\windows\system32\wudriver.dll
    2012-06-02 19:19 . 2012-06-21 14:16 186752 ----a-w- c:\windows\system32\wuwebv.dll
    2012-06-02 19:15 . 2012-06-21 14:16 36864 ----a-w- c:\windows\system32\wuapp.exe
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-12-18_05.38.45 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2012-03-03 18:50 . 2010-06-02 09:55 74072 c:\windows\SysWOW64\XAPOFX1_5.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 70992 c:\windows\SysWOW64\XAPOFX1_2.dll
    + 2012-03-03 18:49 . 2008-07-31 15:41 68616 c:\windows\SysWOW64\XAPOFX1_1.dll
    + 2012-03-03 18:49 . 2008-05-30 19:17 65032 c:\windows\SysWOW64\XAPOFX1_0.dll
    + 2012-01-02 18:39 . 2010-02-04 15:01 22360 c:\windows\SysWOW64\X3DAudio1_7.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 22360 c:\windows\SysWOW64\X3DAudio1_6.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 23376 c:\windows\SysWOW64\X3DAudio1_5.dll
    + 2012-03-03 18:49 . 2008-05-30 19:17 25608 c:\windows\SysWOW64\X3DAudio1_4.dll
    + 2012-03-03 18:49 . 2008-03-05 21:00 25608 c:\windows\SysWOW64\X3DAudio1_3.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 96768 c:\windows\SysWOW64\sspicli.dll
    + 2012-07-12 00:59 . 2012-06-02 04:34 96768 c:\windows\SysWOW64\sspicli.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 22016 c:\windows\SysWOW64\secur32.dll
    + 2012-07-12 00:59 . 2012-06-02 04:40 22016 c:\windows\SysWOW64\secur32.dll
    + 2012-01-11 11:56 . 2011-11-19 14:01 67072 c:\windows\SysWOW64\packager.dll
    + 2012-07-12 16:56 . 2012-06-02 08:17 73216 c:\windows\SysWOW64\mshtmled.dll
    - 2011-12-16 11:58 . 2011-11-03 22:37 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
    + 2012-07-12 16:55 . 2012-06-02 08:22 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
    - 2011-12-16 11:58 . 2011-11-03 22:37 65024 c:\windows\SysWOW64\jsproxy.dll
    + 2012-07-12 16:55 . 2012-06-02 08:21 65024 c:\windows\SysWOW64\jsproxy.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 67072 c:\windows\system32\ZuneTcp2Udp.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 60928 c:\windows\system32\ZuneRegUtil.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 45568 c:\windows\system32\ZunePTDNS.dll
    + 2012-03-03 18:50 . 2010-06-02 09:55 77656 c:\windows\system32\XAPOFX1_5.dll
    + 2012-03-03 18:49 . 2009-09-04 22:44 73544 c:\windows\system32\XAPOFX1_3.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 74576 c:\windows\system32\XAPOFX1_2.dll
    + 2012-03-03 18:49 . 2008-07-31 15:41 72200 c:\windows\system32\XAPOFX1_1.dll
    + 2012-03-03 18:49 . 2008-05-30 19:17 68104 c:\windows\system32\XAPOFX1_0.dll
    + 2012-03-03 18:50 . 2010-02-04 15:01 24920 c:\windows\system32\X3DAudio1_7.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 24920 c:\windows\system32\X3DAudio1_6.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 25936 c:\windows\system32\X3DAudio1_5.dll
    + 2012-03-03 18:49 . 2008-05-30 19:16 28168 c:\windows\system32\X3DAudio1_4.dll
    + 2012-03-03 18:49 . 2008-03-05 21:00 28168 c:\windows\system32\X3DAudio1_3.dll
    + 2010-11-21 03:09 . 2012-08-09 02:57 54742 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2009-07-14 05:10 . 2012-08-09 13:21 38852 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2011-12-01 02:32 . 2012-08-08 13:42 11888 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2657531003-3759727383-2673836086-1000_UserData.bin
    - 2010-11-21 03:24 . 2010-11-21 03:24 29184 c:\windows\system32\sspisrv.dll
    + 2012-01-31 21:35 . 2011-11-17 06:35 29184 c:\windows\system32\sspisrv.dll
    + 2012-01-31 21:35 . 2011-11-17 06:35 28160 c:\windows\system32\secur32.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 28160 c:\windows\system32\secur32.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 77312 c:\windows\system32\rdpwsx.dll
    + 2012-06-14 11:46 . 2012-04-26 05:41 77312 c:\windows\system32\rdpwsx.dll
    + 2012-01-11 11:56 . 2011-11-19 14:58 77312 c:\windows\system32\packager.dll
    + 2012-07-12 16:55 . 2012-06-02 12:03 86528 c:\windows\system32\migration\WininetPlugin.dll
    - 2011-12-16 11:58 . 2011-11-04 01:41 86528 c:\windows\system32\migration\WininetPlugin.dll
    - 2009-07-13 23:20 . 2009-07-14 01:39 31232 c:\windows\system32\lsass.exe
    + 2012-01-31 21:35 . 2011-11-17 06:33 31232 c:\windows\system32\lsass.exe
    - 2011-12-07 12:08 . 2011-12-07 03:56 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
    + 2011-12-07 12:08 . 2012-07-15 16:21 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
    + 2012-07-12 16:55 . 2012-06-02 12:03 85504 c:\windows\system32\jsproxy.dll
    - 2011-12-16 11:58 . 2011-11-04 01:41 85504 c:\windows\system32\jsproxy.dll
    + 2012-04-12 04:37 . 2012-03-01 06:33 81408 c:\windows\system32\imagehlp.dll
    - 2009-07-14 05:30 . 2011-12-12 21:11 86016 c:\windows\system32\DriverStore\infpub.dat
    + 2009-07-14 05:30 . 2012-07-23 21:28 86016 c:\windows\system32\DriverStore\infpub.dat
    + 2011-08-05 23:46 . 2011-08-05 23:46 67072 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneTcp2Udp.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 60928 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneRegUtil.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 45568 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZunePTDNS.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 67072 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneTcp2Udp.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 60928 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneRegUtil.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 45568 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZunePTDNS.dll
    + 2010-11-21 03:23 . 2010-11-21 03:23 41984 c:\windows\system32\drivers\winusb.sys
    + 2012-03-13 22:14 . 2012-02-17 04:57 23552 c:\windows\system32\drivers\tdtcp.sys
    - 2009-07-14 00:16 . 2009-07-14 00:16 23552 c:\windows\system32\drivers\tdtcp.sys
    + 2012-05-11 00:31 . 2012-03-17 07:58 75120 c:\windows\system32\drivers\partmgr.sys
    + 2011-04-27 20:25 . 2012-03-21 00:44 98688 c:\windows\system32\drivers\NisDrvWFP.sys
    + 2012-07-12 00:59 . 2012-06-02 05:48 95600 c:\windows\system32\drivers\ksecdd.sys
    + 2012-04-12 04:37 . 2012-03-01 06:46 23408 c:\windows\system32\drivers\fs_rec.sys
    - 2011-12-01 02:33 . 2011-12-13 21:42 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2011-12-01 02:33 . 2012-07-19 03:11 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2011-12-01 02:33 . 2011-12-13 21:42 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2011-12-01 02:33 . 2012-07-19 03:11 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-07-14 04:54 . 2012-07-19 03:11 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-14 04:54 . 2011-12-13 21:42 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-07-14 04:46 . 2012-08-05 19:07 99680 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
    + 2011-12-26 10:18 . 2011-12-26 10:18 16656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 68880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    + 2011-12-26 10:18 . 2011-12-26 10:18 41744 c:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe
    + 2012-01-11 11:56 . 2011-12-25 20:40 43280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
    + 2011-12-26 08:54 . 2011-12-26 08:54 15120 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 57616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    + 2011-12-26 08:54 . 2011-12-26 08:54 33552 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
    + 2012-01-11 11:56 . 2011-12-25 20:42 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2012-03-07 11:56 . 2012-03-07 11:56 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 98152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 17920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.Video\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Video.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 20992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.Storage\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Storage.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 54272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.Net\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Net.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 23040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.Input.Touch\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Input.Touch.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 71680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.GamerServices\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.GamerServices.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 24576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Xna.Framework.Avatar\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Avatar.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
    - 2011-11-03 22:16 . 2011-11-03 22:16 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
    + 2012-06-15 13:53 . 2012-06-15 13:53 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 75776 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Xna.Framework.Xact\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Xact.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 75264 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Xna.Framework.Game\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Game.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-12-14 03:06 . 2012-07-12 16:57 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 34144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 42848 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 19296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
    + 2011-11-03 22:28 . 2012-05-11 10:46 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    - 2011-11-03 22:28 . 2011-12-02 22:20 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2011-09-05 15:04 . 2011-09-05 15:04 64952 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\armsvc.exe
    + 2011-02-04 18:40 . 2011-02-04 18:40 49488 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\VBAJET32.DLL
    + 2010-12-21 05:48 . 2010-12-21 05:48 44992 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACERCLR.DLL
    + 2012-05-25 00:23 . 2012-05-25 00:23 10240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
    + 2012-05-25 00:21 . 2012-05-25 00:21 70656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml.Hosting\d1fd7c6fa53fa174d2136462c2dadfd6\System.Xaml.Hosting.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Routing\df33d56dcdde38c15a777ebc79836fc5\System.Web.Routing.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\18508512df40a77e8697bde9f4be5967\System.Web.DynamicData.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\11c324b9616d95c2685716fbae9324ab\System.Web.DynamicData.Design.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 26112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Abstract#\4f6bef518b1bb0ae5d892588eccdcf25\System.Web.Abstractions.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 13824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\a8258e28b61cad85c49c97273a2aae55\System.ServiceModel.ServiceMoniker40.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
    + 2012-05-19 00:29 . 2012-05-19 00:29 47616 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Workflow.#\c74328b7d9f2b5cf7f74cd4b55041ee7\Microsoft.Workflow.Compiler.ni.exe
    + 2012-05-19 00:28 . 2012-05-19 00:28 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 55808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\ae1aa0da6c3f69ae100effa75c1e2316\Microsoft.Office.Tools.v4.0.Framework.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 28160 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\3f51f3b0ffc904203234c8b32f98c31f\Microsoft.Office.Tools.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
    + 2012-05-19 00:27 . 2012-05-19 00:27 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 55808 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\4185d95173b2ad3cd57c5a8140a29784\System.Xaml.Hosting.ni.dll
    + 2012-05-21 22:21 . 2012-05-21 22:21 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
    + 2012-05-21 22:21 . 2012-05-21 22:21 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\d8f7bf8ce78d0785e68c589c1e64a6dd\System.Web.Routing.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\be0023b0814db0cd39b177e21632f8e9\System.Web.DynamicData.Design.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\31ec874a9482ad1a99ba24ca4a6ec914\System.Web.Abstractions.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\703ffb7a271059d40edeff9eb0e2b7e3\System.ServiceModel.ServiceMoniker40.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\f519738a47ffedaa4c04ec6e16a6b7b1\Microsoft.Workflow.Compiler.ni.exe
    + 2012-05-19 14:03 . 2012-05-19 14:03 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 21504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\d1863e1b75c767daef24a3b149faddac\Microsoft.Office.Tools.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 45056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\31173593560b0b4db1a7b6025dabc5e5\Microsoft.Office.Tools.v4.0.Framework.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
    + 2012-07-23 21:25 . 2012-07-23 21:25 73728 c:\windows\assembly\NativeImages_v2.0.50727_64\UIXControls\06a00b053b8b2b76e787c73c289e71ec\UIXControls.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\fb4bc14964a1d415bdbe55b62ce73a52\System.Windows.Presentation.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\ee709a01b51c82626f4b2c1173f2db28\stdole.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\78f495970511b726a0ca7b8119360e25\PresentationFontCache.ni.exe
    + 2012-05-12 01:04 . 2012-05-12 01:04 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\1a359e9b908a2565c546a8ca04b241c2\PresentationCFFRasterizer.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\9d57c4bbbc0b3243046fc7839da71b00\Microsoft.WSMan.Runtime.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d6578432220dbabf2b15027681327bf8\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\66deb65a87750efddf62d1e0c0655352\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4b6402dc918e41b8de8c501f29833d91\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\28545d2b6a0aaef4aa168f9808603bc5\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\1d8a17a2c1416a8ad4d6ad2a28b4c5fd\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\0abc7256549c204f39af7dcc52c9e5d5\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d84c14e69b88aeac74de3f6805b900e7\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 71680 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\abd9d2880ca61bf077d60419f5ec1114\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\90084df18546aa62b4341a272ea71d30\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 93696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\75909fbd25e848d0425e03df4c06a00b\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7003996ae5bd140e50c6a12a7c419910\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 86016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\397ef046a0d464801359654f6df589be\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\317ca97e8f47080ea7950654db36ece0\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 84992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\2d07593d9552f036c38c9b15b6355390\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
    + 2012-05-16 22:32 . 2012-05-16 22:32 87040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\07f7dae1df42a6bce3126ce63ea0564e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\3c3a6cce983114e7406e0a6e6116ecd8\Microsoft.VisualC.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\6ab0575bf49b60fd4b697d47e1754072\Microsoft.MediaCenter.iTv.Hosting.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\1569a004b1f41193818e3b3777f2c73d\LoadMxf.ni.exe
    + 2012-05-16 22:34 . 2012-05-16 22:34 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\3ee98e8b2084e27d65953bbd7e362bf8\ehiUPnP.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\1cd9f92749d29b9fd61fcb1c4ae84294\ehiTVMSMusic.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\0811f67973c32efb2bfad62a4a2592b5\dfsvc.ni.exe
    + 2012-05-12 01:04 . 2012-05-12 01:04 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\ae9311dcb0e713330a2a86b04cf361dc\Accessibility.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\fbca78795c4dd2a0df1fbc45cef56513\WindowsLiveWriter.ni.exe
    + 2012-05-16 00:22 . 2012-05-16 00:22 81408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\20225dde0701a809f23364e1c3492449\WindowsLive.Writer.Passport.ni.dll
    + 2012-05-12 01:08 . 2012-05-12 01:08 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ca2eff60beb3ba00a529a2d42dceca22\UIAutomationProvider.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\66d750f3f8dde0cc865f921497ab3545\System.Windows.Presentation.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\543b0e12423bcec010bdd2ac27c5dc04\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f34410ab8e82063735d876533db26c49\System.AddIn.Contract.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\d246780b91fd9f6393e85fb13bde94a6\stdole.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\d24744f15243e28ea541a459ff7ff5d5\PresentationFontCache.ni.exe
    + 2012-05-12 01:08 . 2012-05-12 01:08 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5a9d0ff936810991cedd098fe006a9be\PresentationCFFRasterizer.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\87a30ba337ed55d0905f19742e2985bc\napcrypt.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\9f2e8e0df9ff39ad21088f1d66cfadb1\Microsoft.WSMan.Runtime.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d797123d55bb7b823120d0a7ffbbc2a7\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb8ad29814d9e5589bd400d38e7a0b10\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb42a0f25b7608b2675080081b03f6e5\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c6e9143be5afb36345875d56b61c444f\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\91767cf3facefe10e00734c815e925ad\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\66cd99d2f576cde047074e98bd5e1848\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 86528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4308e1bdc640e1c3f1ea966e84e48900\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\06fcf2fbbe38d9425fc49d935498ec93\Microsoft.Vsa.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\be59506a77d76e325dbb02a4ef651eff\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 66560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a516cad7285e7506dc477e03c7468aac\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a3d7d37ccd26595b9858116ac8e78e42\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 58368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a306bdd890d9250b9cb4c03876f3b146\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9e572d1a5f468ae4226d9c74a54dbf5a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 43008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4d661ba2b6ac1a23427070f799fd540c\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\443eceb48c4c76162ef874395f612590\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\35979c199c0bc4c272dddd69a9a6b5a7\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 42496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\11852ce9e3c8a47a9f194e2671a2597f\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 28160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\03f7e17a9422755c383ec2100e178a32\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\55c57057dc81a5e8c5bde3a230f0bcb9\Microsoft.VisualC.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e3ef400b1f37e4d3b79a42a8a602ea02\Microsoft.Build.Framework.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2095344bf8c40f8baa94ba53a993fb4c\Microsoft.Build.Framework.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\65191c7d58ab0c3666d5d9f26d3b899b\IAStorDataMgrSvc.ni.exe
    + 2012-05-16 00:22 . 2012-05-16 00:22 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\3b2b9f4ec1819e4b95792d92f56d26f9\IAStorCommon.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\dc93539af5a961641a26ada75f730136\ehiUserXp.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\53d03b0e238c77cf7e5ac88e02aecd2c\dfsvc.ni.exe
    + 2012-05-12 01:08 . 2012-05-12 01:08 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 11264 c:\windows\assembly\GAC_MSIL\cli_basetypes\1.0.18.0__ce2cb7e279207b9e\cli_basetypes.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 64000 c:\windows\assembly\GAC_32\cli_cppuhelper\1.0.21.0__ce2cb7e279207b9e\cli_cppuhelper.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2009-07-14 00:19 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wmi.dll
    + 2012-04-12 04:37 . 2012-03-01 05:29 5120 c:\windows\SysWOW64\wmi.dll
    + 2012-07-12 00:59 . 2010-06-26 03:24 2048 c:\windows\SysWOW64\msxml3r.dll
    - 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\msxml3r.dll
    - 2009-07-14 00:41 . 2009-07-14 01:33 5120 c:\windows\system32\wmi.dll
    + 2012-04-12 04:37 . 2012-03-01 06:28 5120 c:\windows\system32\wmi.dll
    + 2012-06-14 11:46 . 2012-04-26 05:34 9216 c:\windows\system32\rdrmemptylst.exe
    + 2012-01-22 01:01 . 2012-01-22 01:01 9560 c:\windows\system32\NetworkList\Icons\{3A95010A-6382-4A88-A061-3CEE5170FCB8}_48.bin
    + 2012-01-22 01:01 . 2012-01-22 01:01 4280 c:\windows\system32\NetworkList\Icons\{3A95010A-6382-4A88-A061-3CEE5170FCB8}_32.bin
    + 2012-01-22 01:01 . 2012-01-22 01:01 2456 c:\windows\system32\NetworkList\Icons\{3A95010A-6382-4A88-A061-3CEE5170FCB8}_24.bin
    + 2012-07-12 00:59 . 2010-06-26 03:55 2048 c:\windows\system32\msxml3r.dll
    - 2009-07-14 00:41 . 2009-07-14 01:30 2048 c:\windows\system32\msxml3r.dll
    + 2012-08-09 13:19 . 2012-08-09 13:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-12-18 05:11 . 2011-12-18 05:11 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2012-08-09 13:19 . 2012-08-09 13:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2011-12-18 05:11 . 2011-12-18 05:11 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-12-02 22:17 . 2012-07-22 03:07 4297 c:\windows\checkip.dat
    + 2012-05-21 22:22 . 2012-05-21 22:22 9216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
    + 2012-02-16 02:43 . 2012-02-16 02:43 3072 c:\windows\assembly\GAC_MSIL\policy.1.0.cli_uretypes\7.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_uretypes.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 3072 c:\windows\assembly\GAC_MSIL\policy.1.0.cli_ure\21.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_ure.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 3072 c:\windows\assembly\GAC_MSIL\policy.1.0.cli_oootypes\7.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_oootypes.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 3072 c:\windows\assembly\GAC_MSIL\policy.1.0.cli_basetypes\18.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_basetypes.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 7680 c:\windows\assembly\GAC_MSIL\cli_ure\1.0.21.0__ce2cb7e279207b9e\cli_ure.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 3072 c:\windows\assembly\GAC_32\policy.1.0.cli_cppuhelper\21.0.0.0__ce2cb7e279207b9e\policy.1.0.cli_cppuhelper.dll
    + 2012-03-04 16:43 . 2012-03-04 16:43 2560 c:\windows\_MSRSTRT.EXE
    + 2012-03-03 18:50 . 2010-06-02 09:55 527192 c:\windows\SysWOW64\XAudio2_7.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 517448 c:\windows\SysWOW64\XAudio2_4.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 514384 c:\windows\SysWOW64\XAudio2_3.dll
    + 2012-03-03 18:49 . 2008-07-31 15:40 509448 c:\windows\SysWOW64\XAudio2_2.dll
    + 2012-03-03 18:49 . 2008-05-30 19:19 507400 c:\windows\SysWOW64\XAudio2_1.dll
    + 2012-03-03 18:49 . 2008-03-05 21:03 479752 c:\windows\SysWOW64\XAudio2_0.dll
    + 2012-03-03 18:50 . 2010-06-02 09:55 239960 c:\windows\SysWOW64\xactengine3_7.dll
    + 2012-01-02 18:39 . 2010-02-04 15:01 238936 c:\windows\SysWOW64\xactengine3_6.dll
    + 2012-03-03 18:50 . 2009-09-04 22:44 238936 c:\windows\SysWOW64\xactengine3_5.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 235352 c:\windows\SysWOW64\xactengine3_4.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 235856 c:\windows\SysWOW64\xactengine3_3.dll
    + 2012-03-03 18:49 . 2008-07-31 15:41 238088 c:\windows\SysWOW64\xactengine3_2.dll
    + 2012-03-03 18:49 . 2008-05-30 19:18 238088 c:\windows\SysWOW64\xactengine3_1.dll
    + 2012-03-03 18:49 . 2008-03-05 21:03 238088 c:\windows\SysWOW64\xactengine3_0.dll
    + 2012-04-12 04:37 . 2012-03-01 05:37 172544 c:\windows\SysWOW64\wintrust.dll
    + 2012-01-31 21:35 . 2011-11-17 05:35 314880 c:\windows\SysWOW64\webio.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 314880 c:\windows\SysWOW64\webio.dll
    + 2012-07-12 16:55 . 2012-06-02 08:23 231936 c:\windows\SysWOW64\url.dll
    - 2011-12-16 11:58 . 2011-11-03 22:38 231936 c:\windows\SysWOW64\url.dll
    + 2012-07-12 00:59 . 2012-06-02 04:40 225280 c:\windows\SysWOW64\schannel.dll
    + 2012-03-13 22:14 . 2012-02-17 05:34 826880 c:\windows\SysWOW64\rdpcore.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 514560 c:\windows\SysWOW64\qdvd.dll
    + 2012-01-11 11:56 . 2011-10-26 04:32 514560 c:\windows\SysWOW64\qdvd.dll
    + 2012-02-15 12:01 . 2012-01-04 08:58 442880 c:\windows\SysWOW64\ntshrui.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 442880 c:\windows\SysWOW64\ntshrui.dll
    - 2009-07-13 23:33 . 2009-07-14 01:16 219136 c:\windows\SysWOW64\ncrypt.dll
    + 2012-07-12 00:59 . 2012-06-02 04:39 219136 c:\windows\SysWOW64\ncrypt.dll
    - 2009-07-13 23:12 . 2009-07-14 01:15 690688 c:\windows\SysWOW64\msvcrt.dll
    + 2012-02-15 12:01 . 2011-12-16 07:52 690688 c:\windows\SysWOW64\msvcrt.dll
    + 2012-02-25 17:35 . 2012-02-25 17:35 250016 c:\windows\SysWOW64\Macromed\Flash\FlashUtil11f_Plugin.exe
    - 2011-12-16 11:58 . 2011-11-03 22:34 716800 c:\windows\SysWOW64\jscript.dll
    + 2012-07-12 16:55 . 2012-06-02 08:19 716800 c:\windows\SysWOW64\jscript.dll
    + 2012-07-30 00:35 . 2012-07-30 00:35 157488 c:\windows\SysWOW64\javaws.exe
    + 2012-07-30 00:35 . 2012-07-30 00:35 149296 c:\windows\SysWOW64\javaw.exe
    + 2012-07-30 00:35 . 2012-07-30 00:35 149296 c:\windows\SysWOW64\java.exe
    + 2012-04-12 04:37 . 2012-03-01 05:33 159232 c:\windows\SysWOW64\imagehlp.dll
    - 2011-11-03 21:50 . 2011-11-03 21:50 142848 c:\windows\SysWOW64\ieUnatt.exe
    + 2012-07-12 16:55 . 2012-06-02 08:20 142848 c:\windows\SysWOW64\ieUnatt.exe
    + 2012-07-12 16:55 . 2012-06-02 08:14 176640 c:\windows\SysWOW64\ieui.dll
    - 2011-12-16 11:58 . 2011-11-03 22:28 176640 c:\windows\SysWOW64\ieui.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 248672 c:\windows\SysWOW64\d3dx11_43.dll
    + 2012-03-03 18:49 . 2009-09-04 22:29 235344 c:\windows\SysWOW64\d3dx11_42.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 470880 c:\windows\SysWOW64\d3dx10_43.dll
    + 2012-03-03 18:49 . 2008-10-15 11:22 452440 c:\windows\SysWOW64\d3dx10_40.dll
    + 2012-03-03 18:49 . 2008-07-10 16:01 467984 c:\windows\SysWOW64\d3dx10_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 467984 c:\windows\SysWOW64\d3dx10_38.dll
    + 2012-03-03 18:49 . 2008-02-06 04:07 462864 c:\windows\SysWOW64\d3dx10_37.dll
    + 2012-06-14 11:45 . 2012-04-24 04:36 140288 c:\windows\SysWOW64\cryptsvc.dll
    + 2012-06-14 11:45 . 2012-04-24 04:36 103936 c:\windows\SysWOW64\cryptnet.dll
    + 2012-07-12 00:59 . 2012-06-06 05:03 805376 c:\windows\SysWOW64\cdosys.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 805376 c:\windows\SysWOW64\cdosys.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 149504 c:\windows\system32\ZuneUsbTransport.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 405504 c:\windows\system32\ZuneNetProxy.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 249344 c:\windows\system32\ZuneMTPZ.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 354304 c:\windows\system32\ZuneCoInst.dll
    + 2012-03-03 18:50 . 2010-06-02 09:55 518488 c:\windows\system32\XAudio2_7.dll
    + 2012-03-03 18:50 . 2009-09-04 22:44 517960 c:\windows\system32\XAudio2_5.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 521560 c:\windows\system32\XAudio2_4.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 518480 c:\windows\system32\XAudio2_3.dll
    + 2012-03-03 18:49 . 2008-07-31 15:40 513544 c:\windows\system32\XAudio2_2.dll
    + 2012-03-03 18:49 . 2008-05-30 19:19 511496 c:\windows\system32\XAudio2_1.dll
    + 2012-03-03 18:49 . 2008-03-05 21:04 489480 c:\windows\system32\XAudio2_0.dll
    + 2012-03-03 18:50 . 2010-06-02 09:55 176984 c:\windows\system32\xactengine3_7.dll
    + 2012-03-03 18:50 . 2010-02-04 15:01 176984 c:\windows\system32\xactengine3_6.dll
    + 2012-03-03 18:50 . 2009-09-04 22:44 176968 c:\windows\system32\xactengine3_5.dll
    + 2012-03-03 18:49 . 2009-03-16 19:18 174936 c:\windows\system32\xactengine3_4.dll
    + 2012-03-03 18:49 . 2008-10-27 15:04 175440 c:\windows\system32\xactengine3_3.dll
    + 2012-03-03 18:49 . 2008-07-31 15:41 177672 c:\windows\system32\xactengine3_2.dll
    + 2012-03-03 18:49 . 2008-05-30 19:18 177672 c:\windows\system32\xactengine3_1.dll
    + 2012-03-03 18:49 . 2008-03-05 21:03 177672 c:\windows\system32\xactengine3_0.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 708168 c:\windows\system32\WinUSBCoInstaller.dll
    + 2012-04-12 04:37 . 2012-03-01 06:38 220672 c:\windows\system32\wintrust.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 220672 c:\windows\system32\wintrust.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 395776 c:\windows\system32\webio.dll
    + 2012-01-31 21:35 . 2011-11-17 06:35 395776 c:\windows\system32\webio.dll
    + 2011-12-02 22:14 . 2012-08-09 03:52 235192 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
    + 2011-12-01 22:11 . 2012-08-09 04:19 259622 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
    - 2011-12-16 11:58 . 2011-11-04 01:43 237056 c:\windows\system32\url.dll
    + 2012-07-12 16:55 . 2012-06-02 12:04 237056 c:\windows\system32\url.dll
    + 2012-01-31 21:35 . 2011-11-17 06:35 136192 c:\windows\system32\sspicli.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 136192 c:\windows\system32\sspicli.dll
    + 2012-07-12 00:59 . 2012-06-02 05:45 340992 c:\windows\system32\schannel.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 340992 c:\windows\system32\schannel.dll
    + 2012-06-14 11:46 . 2012-04-26 05:41 149504 c:\windows\system32\rdpcorekmts.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 149504 c:\windows\system32\rdpcorekmts.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 366592 c:\windows\system32\qdvd.dll
    + 2012-01-11 11:56 . 2011-10-26 05:25 366592 c:\windows\system32\qdvd.dll
    + 2012-06-14 11:46 . 2012-05-01 05:40 209920 c:\windows\system32\profsvc.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 209920 c:\windows\system32\profsvc.dll
    + 2009-07-14 02:36 . 2012-08-09 04:22 662446 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2012-08-09 04:22 122242 c:\windows\system32\perfc009.dat
    - 2010-11-21 03:23 . 2010-11-21 03:23 509952 c:\windows\system32\ntshrui.dll
    + 2012-02-15 12:01 . 2012-01-04 10:44 509952 c:\windows\system32\ntshrui.dll
    + 2012-07-12 00:59 . 2012-06-02 05:44 307200 c:\windows\system32\ncrypt.dll
    - 2009-07-13 23:49 . 2009-07-14 01:41 307200 c:\windows\system32\ncrypt.dll
    - 2009-07-13 23:19 . 2009-07-14 01:41 634880 c:\windows\system32\msvcrt.dll
    + 2012-02-15 12:01 . 2011-12-16 08:46 634880 c:\windows\system32\msvcrt.dll
    + 2010-11-21 03:27 . 2012-01-31 12:44 279656 c:\windows\system32\MpSigStub.exe
    + 2012-02-25 17:34 . 2012-02-25 17:35 465056 c:\windows\system32\Macromed\Flash\FlashUtil64_11_1_102_Plugin.exe
    + 2012-07-12 16:55 . 2012-06-02 12:00 818688 c:\windows\system32\jscript.dll
    - 2011-12-16 11:58 . 2011-11-04 01:39 818688 c:\windows\system32\jscript.dll
    - 2011-11-03 21:50 . 2011-11-03 21:50 173056 c:\windows\system32\ieUnatt.exe
    + 2012-07-12 16:55 . 2012-06-02 12:01 173056 c:\windows\system32\ieUnatt.exe
    + 2012-07-12 16:55 . 2012-06-02 11:54 248320 c:\windows\system32\ieui.dll
    - 2011-12-16 11:58 . 2011-11-04 01:30 248320 c:\windows\system32\ieui.dll
    + 2009-07-14 04:45 . 2012-07-12 21:02 367344 c:\windows\system32\FNTCACHE.DAT
    - 2009-07-14 05:30 . 2011-12-12 21:11 143360 c:\windows\system32\DriverStore\infstrng.dat
    + 2009-07-14 05:30 . 2012-07-23 21:28 143360 c:\windows\system32\DriverStore\infstrng.dat
    - 2009-07-14 05:30 . 2011-12-04 21:22 143360 c:\windows\system32\DriverStore\infstor.dat
    + 2009-07-14 05:30 . 2012-07-23 21:28 143360 c:\windows\system32\DriverStore\infstor.dat
    + 2011-08-05 23:46 . 2011-08-05 23:46 149504 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneUsbTransport.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 405504 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneNetProxy.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 249344 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneMTPZ.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 128000 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneIPTransport.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 354304 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneCoInst.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 708168 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\WinUSBCoInstaller.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 149504 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneUsbTransport.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 405504 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneNetProxy.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 249344 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneMTPZ.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 128000 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneIPTransport.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 354304 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneCoInst.dll
    + 2011-06-06 17:49 . 2011-06-06 17:49 708168 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\WinUSBCoInstaller.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 708168 c:\windows\system32\DriverStore\FileRepository\wmzuneserusb.inf_amd64_neutral_93610d3774bed3ba\WinUSBCoInstaller.dll
    + 2011-06-06 17:49 . 2011-06-06 17:49 708168 c:\windows\system32\DriverStore\FileRepository\wmzuneserusb.inf_amd64_neutral_0612991c2e85953e\WinUSBCoInstaller.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 210944 c:\windows\system32\drivers\rdpwd.sys
    + 2012-06-14 11:46 . 2012-04-28 03:55 210944 c:\windows\system32\drivers\rdpwd.sys
    + 2011-04-18 18:18 . 2012-03-21 00:44 203888 c:\windows\system32\drivers\MpFilter.sys
    + 2012-07-12 00:59 . 2012-06-02 05:48 151920 c:\windows\system32\drivers\ksecpkg.sys
    + 2012-07-12 00:59 . 2012-06-02 05:50 458704 c:\windows\system32\drivers\cng.sys
    + 2012-02-15 12:01 . 2011-12-28 03:59 498688 c:\windows\system32\drivers\afd.sys
    + 2012-03-03 18:50 . 2010-05-26 16:41 276832 c:\windows\system32\d3dx11_43.dll
    + 2012-03-03 18:49 . 2009-09-04 22:29 285024 c:\windows\system32\d3dx11_42.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 511328 c:\windows\system32\d3dx10_43.dll
    + 2012-03-03 18:49 . 2009-03-09 20:27 520544 c:\windows\system32\d3dx10_41.dll
    + 2012-03-03 18:49 . 2008-10-15 11:22 519000 c:\windows\system32\d3dx10_40.dll
    + 2012-03-03 18:49 . 2008-07-10 16:00 540688 c:\windows\system32\d3dx10_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 540688 c:\windows\system32\d3dx10_38.dll
    + 2012-03-03 18:49 . 2008-02-06 04:07 529424 c:\windows\system32\d3dx10_37.dll
    + 2012-06-14 11:45 . 2012-04-24 05:37 184320 c:\windows\system32\cryptsvc.dll
    + 2012-06-14 11:45 . 2012-04-24 05:37 140288 c:\windows\system32\cryptnet.dll
    + 2009-07-14 05:01 . 2012-08-09 04:24 364920 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2011-12-15 18:01 . 2011-12-15 18:01 226600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationHost_v0400.dll
    + 2011-12-26 10:18 . 2011-12-26 10:18 721680 c:\windows\Microsoft.NET\Framework64\v4.0.30319\webengine4.dll
    + 2012-04-21 15:03 . 2012-04-21 15:03 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 156440 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.AddIn.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 598784 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
    + 2011-12-26 10:47 . 2011-12-26 10:47 261912 c:\windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe
    + 2012-05-11 00:31 . 2012-02-10 23:29 172320 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationHostDLL.dll
    + 2012-01-11 11:56 . 2011-12-25 20:40 746256 c:\windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
    + 2012-06-14 11:45 . 2012-04-23 22:33 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 486144 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 182056 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
    + 2011-12-26 08:54 . 2011-12-26 08:54 496400 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
    + 2012-04-21 15:03 . 2012-04-21 15:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 156440 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 518400 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    + 2011-12-26 09:39 . 2011-12-26 09:39 192792 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
    + 2011-12-15 17:08 . 2011-12-15 17:08 957200 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 386824 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 131360 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
    + 2012-01-11 11:56 . 2011-12-25 20:42 437520 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2012-06-14 11:45 . 2012-04-23 22:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2012-05-11 00:32 . 2012-01-04 02:51 389888 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2012-05-11 00:32 . 2012-01-04 02:50 364816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2012-05-11 00:32 . 2012-01-04 02:50 996624 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 326000 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 175992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 810352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 512368 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 672768 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Xna.Framework\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.dll
    + 2012-01-02 18:39 . 2012-01-02 18:39 427008 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Xna.Framework.Graphics\v4.0_4.0.0.0__842cf8be1de50553\Microsoft.Xna.Framework.Graphics.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2012-03-03 19:10 . 2012-03-03 19:10 207360 c:\windows\Installer\7e5f7c.msi
    + 2011-08-05 19:04 . 2011-08-05 19:04 147456 c:\windows\Installer\6f3c6f.msi
    + 2011-08-05 19:16 . 2011-08-05 19:16 167936 c:\windows\Installer\6f3c6a.msi
    + 2011-08-05 18:32 . 2011-08-05 18:32 167936 c:\windows\Installer\6f3c65.msi
    + 2011-08-05 20:39 . 2011-08-05 20:39 172032 c:\windows\Installer\6f3c60.msi
    + 2011-08-05 19:28 . 2011-08-05 19:28 172032 c:\windows\Installer\6f3c5b.msi
    + 2011-08-05 18:20 . 2011-08-05 18:20 184320 c:\windows\Installer\6f3c56.msi
    + 2011-08-05 17:57 . 2011-08-05 17:57 176128 c:\windows\Installer\6f3c51.msi
    + 2011-08-05 17:34 . 2011-08-05 17:34 196608 c:\windows\Installer\6f3c4c.msi
    + 2011-08-05 17:14 . 2011-08-05 17:14 176128 c:\windows\Installer\6f3c47.msi
    + 2011-08-05 17:01 . 2011-08-05 17:01 184320 c:\windows\Installer\6f3c42.msi
    + 2011-08-05 21:01 . 2011-08-05 21:01 143360 c:\windows\Installer\6f3c3d.msi
    + 2011-08-05 20:27 . 2011-08-05 20:27 184320 c:\windows\Installer\6f3c38.msi
    + 2011-08-05 19:52 . 2011-08-05 19:52 188416 c:\windows\Installer\6f3c33.msi
    + 2011-08-05 20:50 . 2011-08-05 20:50 143360 c:\windows\Installer\6f3c2e.msi
    + 2011-08-05 18:53 . 2011-08-05 18:53 151552 c:\windows\Installer\6f3c29.msi
    + 2011-08-05 20:06 . 2011-08-05 20:06 176128 c:\windows\Installer\6f3c24.msi
    + 2011-08-05 20:16 . 2011-08-05 20:16 180224 c:\windows\Installer\6f3c1f.msi
    + 2011-08-05 19:40 . 2011-08-05 19:40 180224 c:\windows\Installer\6f3c1a.msi
    + 2011-08-05 18:42 . 2011-08-05 18:42 176128 c:\windows\Installer\6f3c15.msi
    + 2011-08-05 17:25 . 2011-08-05 17:25 184320 c:\windows\Installer\6f3c10.msi
    + 2011-08-05 18:08 . 2011-08-05 18:08 180224 c:\windows\Installer\6f3c0b.msi
    + 2011-08-05 17:46 . 2011-08-05 17:46 180224 c:\windows\Installer\6f3c06.msi
    + 2011-08-05 21:14 . 2011-08-05 21:14 458752 c:\windows\Installer\6f3c01.msi
    + 2011-12-23 23:55 . 2011-12-23 23:55 245760 c:\windows\Installer\553a66.msi
    + 2012-03-21 09:58 . 2012-03-21 09:58 133120 c:\windows\Installer\1fe50c.msp
    + 2012-02-09 11:27 . 2012-02-09 11:27 206848 c:\windows\Installer\1b5b574.msp
    + 2012-04-30 10:29 . 2012-04-30 10:29 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\SCEP.exe
    + 2012-04-30 10:29 . 2012-04-30 10:29 123352 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\MSE.exe
    + 2012-04-30 10:29 . 2012-04-30 10:29 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\INTUNE.exe
    + 2012-04-30 10:29 . 2012-04-30 10:29 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\FEP.exe
    + 2012-04-30 10:29 . 2012-04-30 10:29 109563 c:\windows\Installer\{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}\EPP.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 415584 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pubs.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 303456 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\outicon.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 571232 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\misc.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 326496 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\joticon.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 181096 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_X86.dll
    + 2010-03-18 19:27 . 2010-03-18 19:27 225640 c:\windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\PresentationHostDLL_AMD64.dll
    + 2011-09-05 15:04 . 2011-09-05 15:04 102808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\AcroRdIF.dll
    + 2010-12-21 06:30 . 2010-12-21 06:30 579968 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\VPREVIEW.EXE
    + 2011-09-02 06:15 . 2011-09-02 06:15 140656 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ONENOTEMANAGED.DLL
    + 2011-09-02 06:15 . 2011-09-02 06:15 227712 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ONENOTEM.EXE
    + 2011-02-05 04:52 . 2011-02-05 04:52 403320 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\OFFXML.DLL
    + 2011-09-02 06:13 . 2011-09-02 06:13 577960 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\IECONTENTSERVICE.EXE
    + 2011-02-04 18:40 . 2011-02-04 18:40 452936 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\EXPSRV.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 362904 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEXBE.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 220560 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACETXT.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 527776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEREP.DLL
    + 2010-12-21 05:48 . 2010-12-21 05:48 329624 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACER3X.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 383904 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEOLEDB.DLL
    + 2010-12-21 05:48 . 2010-12-21 05:48 278448 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEODBC.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 644504 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEEXCL.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 334752 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEEXCH.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 686504 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEES.DLL
    + 2010-12-28 05:49 . 2010-12-28 05:49 548792 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEDAO.DLL
    + 2012-01-11 11:56 . 2011-10-29 05:23 465920 c:\windows\ehome\mstvcapn.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 465920 c:\windows\ehome\mstvcapn.dll
    + 2012-05-25 23:39 . 2012-05-25 23:39 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\XamlBuildTask\d7ba8f0a500f25cbed7daa07e8d748ec\XamlBuildTask.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 462336 c:\windows\assembly\NativeImages_v4.0.30319_64\WsatConfig\c87183cbec623926230118ddb9c93662\WsatConfig.ni.exe
    + 2012-05-25 23:38 . 2012-05-25 23:38 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\65f25960625d91ca79a40f9067adc021\WindowsFormsIntegration.ni.dll
    + 2012-06-19 22:59 . 2012-06-19 22:59 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\08becdcc9bd647c4e4d07ceea7fe4895\WindowsFormsIntegration.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\fb43d84bc59b21e8a7f3e36d616eea90\UIAutomationTypes.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\26f12a0a3baed2a227cf30aaeae03913\UIAutomationProvider.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\1c3c298326e9ac14796516ac1da09a16\UIAutomationClient.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\307eea660f877dc40ae90882ce554757\System.Xml.Linq.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\b4afa252d0f0e27b0b5e8fcb2cc5b3a7\System.Windows.Input.Manipulations.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\99cb318f961215576faaa1545dda4f49\System.Windows.Forms.DataVisualization.Design.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\91675145e39e0f08e99261ae13fab748\System.Windows.Forms.DataVisualization.Design.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 314880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.RegularE#\31c9a177e71d9ded2a09252d362bab1d\System.Web.RegularExpressions.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\319e75d7f46269746bf9b0e90bb6bd72\System.Web.Entity.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\11f44ba4e33e44c2079c241d6204c1a0\System.Web.Entity.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\c68fbb58da2a3fe9457aa5ccd0696e4b\System.Web.Entity.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\36a0e6286d72d98d39588687815731bb\System.Web.Entity.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\4167c5a7841a7d28d41c1c3729b3924c\System.Web.DynamicData.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\2a18e601c2e39b63340a37586b41f9dd\System.Web.DynamicData.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 331776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\5e6731a238b759d83bc05c32866c273c\System.Web.DataVisualization.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 331776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\3e3b88c0768491811650ffae55afb0cb\System.Web.DataVisualization.Design.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\8c0ee7b970cc4e8c2986c7898af71661\System.Transactions.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ca5505a49a075ee7ad2535f89d9ea992\System.ServiceProcess.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\85810fe277a718273eb946a460ae8010\System.ServiceProcess.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\eb4fb369926faaffede7aaf317fd6532\System.ServiceModel.Channels.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\e5ab3c37897bb578bdbfe6b7e0558ad8\System.ServiceModel.Routing.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 587776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\8f896864a26d75c339216f339a14f1a1\System.ServiceModel.Activation.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\e48b6a8c491a96d1bc601795532af605\System.Security.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\7590828d50338d512b11a4d3f87d69a2\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 995328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\57f6833522c9820223bbf4a9a343f739\System.Runtime.Remoting.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 311296 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Cach#\f13c2516bc89d916d39d3746e5d668e1\System.Runtime.Caching.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\5f2bfb0585061dc256ee9587d430959f\System.Numerics.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\6996a415485a84fef2d2556b0462336f\System.Net.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\a3849a373beeb3509d8c22d5751dfad3\System.Messaging.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\0d8257087be3e57b071d1d5ccd705c2f\System.Messaging.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\92d266f677605e5475b7f39c063c4a9d\System.Management.Instrumentation.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\07a0e1efc063042be3e8faf62b413a12\System.IO.Log.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\7fd39b9a208214e6e5eba4e9396409f1\System.IdentityModel.Selectors.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.Wrapper.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\521f5bccf74318a4777597b0c01fda1e\System.Dynamic.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\cfe9bb29ab62c2263c904bc321a26bec\System.Drawing.Design.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\b296ac056fd009b084b03fdfc9559b92\System.Drawing.Design.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\6a8bd7d373c988a585e90bb61c5ec8cc\System.DirectoryServices.Protocols.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\78dd02d104bb15bc3820c06bd2876239\System.Device.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 662528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\a7528e9723fb3c77bba4ce617a9c9e03\System.Data.Services.Design.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\97d1aaf3733b107ecdbecb9d21050ff4\System.Data.DataSetExtensions.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\c3d7a7ff58ff502887d8f1b77e61adbc\System.Configuration.Install.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\a4f91f2dfd1656ef2e42917963f6bf50\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 871936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\b1c67ee2e0e6e78c31985069fbc82596\System.AddIn.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\c69fb0f955adc7ca80cd5f2fd730edea\System.Activities.DurableInstancing.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\11fc863fa4f5092fca4f2ce25a9ac361\SMSvcHost.ni.exe
    + 2012-05-19 00:30 . 2012-05-19 00:30 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\50e8e826488639e549589ba34666933e\SMDiagnostics.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\722c0236432dd5ccc047481d3ebbd49e\PresentationFramework.Royale.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\6739c3715c9e38dbdfbfd57b424a3094\PresentationFramework.Aero.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3e7359f5f0fb68565314f88f6ec2d67a\PresentationFramework.Luna.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\263748f3d18955b9e467710da1e8546f\PresentationFramework.Classic.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 364544 c:\windows\assembly\NativeImages_v4.0.30319_64\MSBuild\d448d55698c8471a921d17e20c0ac885\MSBuild.ni.exe
    + 2012-05-19 00:29 . 2012-05-19 00:29 864768 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\e4aa78e299b615e1fc92ba19a78071b8\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
    + 2012-05-19 00:29 . 2012-05-19 00:29 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\e1725f0aad2d375efdcfeea0f428df59\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 232960 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\db2b738efe91eed6c4413faf44707248\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 232960 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\b3f49d9c0a98c18ef8ed20a3acdbebb7\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\b3b3284d16359533332c3424e1330c5c\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 475136 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\ac6c6882341a572604fa25b32836a4c0\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 169984 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\45da98c4ff3a12f7438f2b7cd10752b9\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 864768 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\13f2ca7a3f3c6cf653896f76a7b167b6\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 992256 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\136e31ba5378e99c0439d13a53b6227f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6493bbb60833072904ad141a5a4d08ac\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\097137b03ff37196b4b8ba62db34d64a\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\6480551111832c83ee88bcf756a72533\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\f669d7c64bbabbc41a4dc0221b5e8fb9\Microsoft.Office.Tools.Common.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\90d90e963577dcdcf1474cb98bd76781\Microsoft.Office.Tools.Outlook.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\73487c1ce2fd1b35d59ae1e54c76520d\Microsoft.Office.Tools.Outlook.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\644f5d4e386c5f2d2602e7348cc8a4a5\Microsoft.Office.Tools.Excel.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 408576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\642d70ad7ce61bb9bebc6fe7a799db37\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\63be7108c18a21c22b8305b24c57473e\Microsoft.Office.Tools.Common.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\40323c86511b6413f4192e4e589b723a\Microsoft.Office.Tools.Excel.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 408576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\149c5d1df4ccb7c3fbef1dda43057354\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
    + 2012-05-19 00:29 . 2012-05-19 00:29 851456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Uti#\0e541d178a5797ec61d0b97058e6cc2e\Microsoft.Build.Utilities.v4.0.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 353792 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Fra#\60fcea7acc6c048071451efa6d2f5fa6\Microsoft.Build.Framework.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\0e81a3996f7cbff23fc01bea4185a918\CustomMarshalers.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 661504 c:\windows\assembly\NativeImages_v4.0.30319_64\ComSvcConfig\8ac8c91963eaf605a1bb1791e7d7f7e3\ComSvcConfig.ni.exe
    + 2012-05-21 22:22 . 2012-05-21 22:22 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\09f78ad9517d5d19de8498bac32fc9f8\XamlBuildTask.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\a61f64155e6b58da21013a5e4d6805c2\WsatConfig.ni.exe
    + 2012-06-19 15:58 . 2012-06-19 15:58 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\0a80fd3af7e48eb9cc9099fee5814dff\UIAutomationTypes.ni.dll
    + 2012-05-21 22:22 . 2012-05-21 22:22 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\7a9f70fa774076a7ec19bc03e7064d0d\UIAutomationClient.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\4837a5c6204d53e7aa4f7dd94b98207c\System.Xml.Linq.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\c477bbff1e4662263255a1bf17bd9c2a\System.Windows.Input.Manipulations.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\122b5ef2b93132bd770c2c5d753d73ee\System.Windows.Forms.DataVisualization.Design.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\ea0b825a2dd1a056f6171170eb072d4a\System.Web.RegularExpressions.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\c85b43405ac9aa403a714af716ef3c5e\System.Web.Extensions.Design.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\a0abe24dff94a2fb2c27c631a45aa95f\System.Web.Entity.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\951b0d1b999b49a47fb06f4011565ffa\System.Web.Entity.Design.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\ae2121b64d021313d3c1ddd621e4d472\System.Web.DynamicData.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\15e5acbd2196d1d4bde8466ff690aa76\System.Web.DataVisualization.Design.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 432640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f8fa8f3947b4f9b6819d121537e39050\System.ServiceModel.Activation.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\dc86fe1c7a6e3a7ce9e9c1f13d9b1e8e\System.ServiceModel.Routing.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\5a3beae8b211b91bfc620c029cf4c2d4\System.Security.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5a4d233916a69d48fa12a9f7f103d893\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 771584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\94b346f2ab12d38efb1331ded5783396\System.Runtime.Remoting.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 244736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\d8b4dcd719a3805ab0bce3c8cdfe8288\System.Runtime.Caching.ni.dll
    + 2012-05-11 10:53 . 2012-05-11 10:53 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\7b7719d46a4da2e91e8c501347e48ab9\System.Numerics.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\dd25ddcfa0417d40e3f1385e30abcd6f\System.Net.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\08397796343d5730a29f42e61c7f6ee7\System.Management.Instrumentation.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\ff1250d2409bd16283c423650d6fd3f6\System.IO.Log.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e60675d3ba7fa94924489dc8466ebff5\System.IdentityModel.Selectors.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\a9b1e597aaa263dea2cf8754440bd271\System.Dynamic.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\0640b7fe359ea63a1799465631aa691a\System.Drawing.Design.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\e41e86da56bb60523251e0e08210a77b\System.DirectoryServices.Protocols.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94d45f7f28d81304d7fa83bcea849141\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\4c50d8a951546d6dffdc8bcb23f47a7b\System.Device.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 508928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\9242a5a839c4ae4f203c32b409dc7c42\System.Data.Services.Design.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\7803f4398a527a87d5cace8023e93e8b\System.Data.DataSetExtensions.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\877ef74350e6d374ca8f80b489a8cc8e\System.ComponentModel.Composition.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4330e93f9d0ef85f1a972e11c2ac5156\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 624128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\0c67d9fc14856eb7d8b4e405aef79960\System.AddIn.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\2b046f2d5f056b906d7b25b75ca23575\System.Activities.DurableInstancing.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\4847f66153121ec4ed532909f7c152be\SMSvcHost.ni.exe
    + 2012-05-19 14:03 . 2012-05-19 14:03 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
    + 2012-05-11 10:56 . 2012-05-11 10:56 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ef6e3eb351fe12a5766be7c956c35d95\PresentationFramework.Classic.ni.dll
    + 2012-05-11 10:56 . 2012-05-11 10:56 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e49a124fdad0f1db135f03a49f18fb48\PresentationFramework.Royale.ni.dll
    + 2012-05-11 10:56 . 2012-05-11 10:56 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
    + 2012-05-11 10:56 . 2012-05-11 10:56 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\141f0a8fbfb83604fa3dd43dbe8fa0f4\PresentationFramework.Luna.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\d47740fc85ad70c686adc9fc9dc6e7f5\MSBuild.ni.exe
    + 2012-06-19 15:57 . 2012-06-19 15:57 708608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f120c1f17850a7b8d105f22907a09dd0\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 364544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\bdfc721f7e94acba00c2e92153307b70\Microsoft.VisualStudio.Tools.Applications.Hosting.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b2adaa453df6c958d3cf66ae051787de\Microsoft.VisualStudio.Tools.Applications.Runtime.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 177152 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\740410269afdf2276525e1dfd870fee8\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 738304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6e4e81d647b98053d4b580d5afcf682f\Microsoft.VisualStudio.Tools.Applications.ServerDocument.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 210432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\39817a23777554d968852971b91a4f78\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8cc4dd9babffe370cf375925fba15f84\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\01c5ff7a1ea0463414736df5d449e0a9\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 864768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\ec9a55a16c6613554d1a7409811b7a2c\Microsoft.Office.Tools.Common.Implementation.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\54ab02cb617ed9070723032361c72de6\Microsoft.Office.Tools.Common.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\42a5e49641bff019e55a8228560fc541\Microsoft.Office.Tools.Outlook.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\282f3b9bd8dc8a67787e210a9b0e78e3\Microsoft.Office.Tools.Excel.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\14ae412fbc10916dda33ce1616a63cf1\Microsoft.Office.Tools.Word.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\0ee0cdfd20143083471e3e3cad2890e0\Microsoft.Office.Tools.Outlook.Implementation.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\3ad065635e1e0cd413081be61993cd38\Microsoft.Build.Utilities.v4.0.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\71a3a98ff5fb128d3abf6ecc3224ba6b\Microsoft.Build.Framework.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 136192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\f18a2a149b3e7f9cf74de1263c2ee337\Microsoft.Build.Conversion.v4.0.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\f11d5fea7ded12068e8cdb8b2f1bdbd9\CustomMarshalers.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 475136 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\7186c9237e315a433d3c6a31fea48310\ComSvcConfig.ni.exe
    + 2012-06-19 15:56 . 2012-06-19 15:56 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\b02ad189fc3de84d6361f0bf0cfafbf5\AspNetMMCExt.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\ad7f43afb4f124acae4d503b40f591c1\WsatConfig.ni.exe
    + 2012-06-19 02:48 . 2012-06-19 02:48 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f4d304fcbfda323997083a1f88b83719\WindowsFormsIntegration.ni.dll
    + 2012-05-12 01:04 . 2012-05-12 01:04 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\bf634b0e2e28466c6ed6ae1eb602b09f\UIAutomationTypes.ni.dll
    + 2012-05-12 01:04 . 2012-05-12 01:04 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\1ff8fb81d6f045f1dc6f50be95444292\UIAutomationProvider.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\1f36e020c3563e0ff414f13138e238e1\UIAutomationClient.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\681410f842337dccc72eb059738c3ced\TaskScheduler.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\de45d043775d8c805f6feca40d7a9ed2\System.Xml.Linq.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\72b4992e45d232251a273a59eb3333d5\System.Web.Routing.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\76662ce36d2141e45513e64386073cc2\System.Web.RegularExpressions.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b905eb57b631a30c60caa4d68c186963\System.Web.Entity.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e412dfbf1aa49bbe345a02a4d23104f5\System.Web.Entity.Design.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\815769f953ebe3f84439d522c97317b8\System.Web.DynamicData.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c8144ee08dccdac183527e53c86aa901\System.Web.Abstractions.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\ec95ad2463c5588fc8ef552b3f375ee6\System.Transactions.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f71d2f65d0f149c75ac7a569dbcc8500\System.ServiceProcess.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\1875b50d0228f29aef00bed38ab594d6\System.Security.ni.dll
    + 2012-05-12 01:04 . 2012-05-12 01:04 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\807759890a40e4047c35a24e64dc76d5\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\3b3581851a728bef36f319e9d4c72499\System.Net.ni.dll
    + 2012-06-19 02:17 . 2012-06-19 02:17 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d5d612f7d372f500e3062e3814e79d75\System.Messaging.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\599954438a668c94dd38e8e7e506ac2a\System.Management.Instrumentation.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 569856 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\fd51741bfd973ad507bbd141e98932f8\System.IO.Log.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\ef6abe121bb11bff2514bfdfb7e76b7a\System.IdentityModel.Selectors.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d50cde53634ccbb5e0231738784ff4b8\System.EnterpriseServices.Wrapper.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\fbc02e9f5a14bb93082ebc88bc577413\System.Drawing.Design.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\4bb1134d9b166434327385ddf3c5dd54\System.DirectoryServices.Protocols.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 629760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\7c4ce1b8a2f83ef29aa6d5f126ab5b71\System.Data.Services.Design.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\19d1414f1ca718ce4d0c07e7305b3450\System.Data.DataSetExtensions.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a88ca70ab9641b8236149bc5dd8d1564\System.Configuration.Install.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\9536bb262c4f1ea389d287ab669767d4\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 890880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\84262138e2e9f34c88fd282caa82baa5\System.AddIn.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\176899be7b920fb20408ff49e636a776\System.AddIn.Contract.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\ee0608cd62dfb37016016884fc39e425\sysglobl.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\9fa1abf006689e262527ae50d452e97e\SMSvcHost.ni.exe
    + 2012-05-16 22:33 . 2012-05-16 22:33 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\2eac9c598de3341eba5c16787c74f220\SMDiagnostics.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 282624 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\89de197bdde5984658045ade41c2c9b9\PresentationFramework.Classic.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\7ffb91db770d0b09921f623bc5d68b4f\PresentationFramework.Luna.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\4f3567165e2a444fc9a62980c4d0ea82\PresentationFramework.Aero.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\205bb33cef9ae6b906ceadd6f2861c86\PresentationFramework.Royale.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\2f1bad2fb963482a02443d5e7fece2b6\napsnap.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\bb4947f0ecc925a7bcfd129b6eec8f9b\napinit.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\5f0ae15f9d1cade37fbfaacff7e64bff\naphlpr.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\5346ceca518baf5e5fa3fed9f900f792\napcrypt.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\8f792883d0adad8c7beccf24aed65817\MSBuild.ni.exe
    + 2012-06-19 02:18 . 2012-06-19 02:18 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\67240ddde494b9cc05cd732ccd099668\MMCFxCommon.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 681984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\b78beede8a3c9720095dde4a4a162acc\Microsoft.WSMan.Management.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\83222514e209f186ad3a1c3794168bfd\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\a843956bb452503139683304de4cc8f6\Microsoft.Vsa.ni.dll
    + 2012-06-18 23:05 . 2012-06-18 23:05 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\fda2f68162063c54d2e669e85de7dfb1\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 202752 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f91011762717be2cbc01f328a806c37c\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 270336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\f1c8c15af86da898756fa72b891d04fa\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
    + 2012-06-18 23:05 . 2012-06-18 23:05 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\e7f66e039216f06bfc145d31c9fc9e7c\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 232448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d506bcf38b89f1fb1cd41e01a7d94298\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 226304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d1ffef140ded6229eb2681594a992395\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 209920 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\cfaa030ecf4e968aecd91ddca97d650e\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 225280 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\cf9c858a00058974b41c67bbd68e45c4\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\c8c461dbe6ab47066c7890e6546a8907\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 956416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\9522b90955f403c723b945cf1b201cf5\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 499200 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\902522b8368cc353596494d2e51bd34c\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 495616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7521a6224a26851550e2c903367e7a3b\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 390656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\639acfa01f065f3a0f8d41648ed5e1bc\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\3adbee43498cd363d94881c0a329d519\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 124928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\38de3c6b8a2e434f503db48a85c9b58e\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
    + 2012-06-18 23:05 . 2012-06-18 23:05 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\027a0d0979a1eeea044e82750c747fa9\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\c56d6513e4b239b1b1dbe29b0588321a\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\fb0d102ca78bd05fe7064b9e6be30fc7\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b21fa6ff448b99a97319e18c166c03e2\Microsoft.PowerShell.Security.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6c3fe42a14ac5b48ebd43be290973d24\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\2572e94f9d0b412cdc529c8d74fdb689\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 222208 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\a9e8e3a05f30dfb97e14fec3d233e3a8\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
    + 2012-06-18 23:05 . 2012-06-18 23:05 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\795e07cc078bee3396f1d946f734c871\Microsoft.Office.Tools.v9.0.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f04ccbbf5199d2b264f1b1175be44686\Microsoft.MediaCenter.Mheg.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f015188310f7613f819fcf032f98705a\Microsoft.MediaCenter.iTv.Media.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e29cbd30a31d3c8dae19eb17f70c4ec4\Microsoft.MediaCenter.iTv.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\6dbd502a13b5e3caae0b1f2b4847612f\Microsoft.MediaCenter.Playback.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\514667153fd74307d21e7f50b79858c9\Microsoft.MediaCenter.Interop.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\409dae089f2e041343cff71f822cd505\Microsoft.MediaCenter.ITVVM.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\18367b9a0b9e9261d1d9e371230af87c\Microsoft.MediaCenter.Sports.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\803188573fb19785a94284e097c48a67\Microsoft.ManagementConsole.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 244736 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\d68a27daca73749e4438a47e61643c3c\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\3151235c1c38db94fd44e3c6f290ff38\Microsoft.Build.Utilities.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 121344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\cf5e9b5d10682467a9e03358a6d6258f\Microsoft.Build.Framework.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\0f233d0eb396065719e83ab573a72cc5\Microsoft.Build.Framework.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\2416af06edb993f98a751acb69f67016\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\69286d5692277a166404cb897a8b2e7a\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\74e4adc90675c3b1365825c7e78b5ce9\Mcx2Dvcs.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\4a1f9a648a3928d42b77a91666d9aa8a\mcupdate.ni.exe
    + 2012-05-16 22:34 . 2012-05-16 22:34 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\40d70417c04f9ccb5fdecb5b9be5a6a3\mcstoredb.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4ae6ccc32dafb4e3765b9db05585bd48\mcplayerinterop.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\b0db345fd62a84c98fd8b0bf3c72e8bb\mcGlidHostObj.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\3fc113fe40d0145cd87afca2d107bf6d\MCESidebarCtrl.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bc5df15ee827e248dd6f819874a85718\EventViewer.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\584d419d4c837ea19f7f450a807b0273\ehRecObj.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\20c3505378a50f4859c9b2e7dcbb5fa2\ehiWUapi.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\2f9f48ad6496c9103043db1c21a651fd\ehiwmp.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\0955237aa3c1cb3a643248b8c58ec34c\ehiUserXp.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\7998173654fa518876cc97e37b86d465\ehiiTv.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\6c97aa6908f96ac9816ce74e4f6251ac\ehiExtens.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\a501747a95523297a8a1f119df8b1642\ehiBmlDataCarousel.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\414bbac4e1d7761a336bb9d74b9b243a\ehiActivScp.ni.dll
    + 2012-06-19 02:17 . 2012-06-19 02:17 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\08c9aa18b306aa47ddc0ae4a63b05d04\ehExtHost.ni.exe
    + 2012-05-16 22:33 . 2012-05-16 22:33 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\ff7ef4caed03d6934669d1a39877a8ac\ehCIR.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\b7916689137fd0bc9ba1ba5a27e2a38a\CustomMarshalers.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\cc6e6febcd804604bf4d92d0eb8ec6ae\ComSvcConfig.ni.exe
    + 2012-05-16 22:32 . 2012-05-16 22:32 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\d18719c2df1334364cac199bb9c86adf\BDATunePIA.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\9d60139fdead64a892985181d663989f\WsatConfig.ni.exe
    + 2012-06-18 01:17 . 2012-06-18 01:17 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\5b4b71fd140484201d0e285a14cce17a\WindowsLiveLocal.WriterPlugin.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e92c100773e1aa6e0094ac430b496ace\WindowsLive.Writer.Mshtml.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e35141184454c11a98f333c5b7b5c4c3\WindowsLive.Writer.BlogClient.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dbbb5914ff727ce0f6793177c4da31ba\WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 146432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c3902b80bdc944a554776f5d6c07cff9\WindowsLive.Writer.Instrumentation.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ac47170bea9a3515287134ce8c3dae4a\WindowsLive.Writer.Interop.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 156672 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\aab0bad2dc60d6748745835dc38c52c6\WindowsLive.Writer.HtmlParser.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8adf64dec1f056a5c36720ac34045370\WindowsLive.Writer.BrowserControl.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\882aeb909ff121fae01034b7e9627936\WindowsLive.Writer.Extensibility.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8437eb811a83c1d04c10c6d91abc606b\WindowsLive.Writer.HtmlEditor.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6f110f192197df8fd4d84e270edf7825\WindowsLive.Writer.SpellChecker.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 374272 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\43f78ae7292b5d31b471b9ecf89430af\WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3e388ec2100141e62e0f3cb81aa42ce0\WindowsLive.Writer.FileDestinations.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2bfd2895928710d7cf422c48b6e915d0\WindowsLive.Writer.Controls.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1af8e0bd9d63b6263bda26b9ffc1f053\WindowsLive.Writer.Api.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 223232 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\c5d63c774d84fccad17b4215692d4f02\WindowsLive.Client.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll
    + 2012-05-12 01:08 . 2012-05-12 01:08 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\d8af9a65cf0ed85d47360796e2645a06\UIAutomationTypes.ni.dll
    + 2012-05-19 02:08 . 2012-05-19 02:08 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\779b08c46960a1824503aa6f089673fa\UIAutomationClient.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\f3e052584df9c614407da662dd3c3df3\TaskScheduler.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\64de6810023adccdc56ddae13bdd6b03\System.Xml.Linq.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\06e4119a0a3484bb0ca667a16145ce74\System.Web.Routing.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\2b129372a27469195acbe3b6b81786ef\System.Web.RegularExpressions.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4f13c2c06fb97f6659473f02802b377b\System.Web.Extensions.Design.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bc239944bca7cc6b6ddb473259183c7d\System.Web.Entity.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\3701488fb9e601ebe963db25b784d684\System.Web.Entity.Design.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a09cc9877f51f16a4610b702155e8b70\System.Web.DynamicData.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c6aad1edcc51862ceb26b6b65dad1490\System.Web.Abstractions.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 680448 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\054fcff18035c210487b0888e6461192\System.Security.ni.dll
    + 2012-05-12 01:08 . 2012-05-12 01:08 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\2ff4e90c5842525f7a7456639de090d8\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
    + 2012-05-19 14:01 . 2012-05-19 14:01 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\0b5f082230e3486412e0fa333290e85a\System.Net.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\2b4d6976393bf5643a4ef2d8dffdf75b\System.Messaging.ni.dll
    + 2012-05-19 14:01 . 2012-05-19 14:01 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\8280490a2939075b726fd051d9010cc0\System.Management.Instrumentation.ni.dll
    + 2012-05-19 14:01 . 2012-05-19 14:01 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\a03191ed937f6c1dc827b53d94ea0176\System.IO.Log.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\100d39c2f8985cb93e26feef86ba5212\System.IdentityModel.Selectors.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.Wrapper.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\55545e89f96539ef93375524d1145a6f\System.DirectoryServices.Protocols.ni.dll
    + 2012-05-19 02:10 . 2012-05-19 02:10 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4d73a7649876bb6e54a01ccbf235919b\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-05-19 02:10 . 2012-05-19 02:10 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e36e03067b12bc35fcc3787dc81022c8\System.Data.Services.Design.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 763392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\5a29fff52e2c3d13ec15e8701027ab17\System.Data.Entity.Design.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\940f62a5d077405e0b324422afb6ff2c\System.Data.DataSetExtensions.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\498d2033c60fe5b777cf923b71b25972\System.Configuration.Install.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\a90ec436f1d2c5cb0133a53c2e47d61a\System.AddIn.ni.dll
    + 2012-05-19 14:01 . 2012-05-19 14:01 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\1ed79278fe139272e868e3a53d736f22\sysglobl.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\1b0b19607668635281fa260707f4352f\SMSvcHost.ni.exe
    + 2012-05-16 00:23 . 2012-05-16 00:23 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9e7bf69d97febe4ed1a288c787e5d9ca\SMDiagnostics.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 226816 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae55e761d480fe15781156d1311a1837\PresentationFramework.Classic.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7df1f379457aa5f39183903d115b5479\PresentationFramework.Royale.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\496bc57a53989bb83ec58865fa34be1d\PresentationFramework.Luna.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\acfafa161ea232928cb02b01c50acf1c\napsnap.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\0abec246c5ca6ec4858bfd3ab84da0ec\napinit.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\e0c40329b9cdd7f141a3702d79eb4bda\naphlpr.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\74a8b6419deb005337a1e43ec2502134\MSBuild.ni.exe
    + 2012-06-18 01:17 . 2012-06-18 01:17 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1e03b7c2539c5376f0665a4aba04efbd\MMCFxCommon.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 531968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\070505350ec9daa3343b3cd2bc8cf59e\Microsoft.WSMan.Management.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\e439c12c9e047a5252fc0870a0edad57\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll
    + 2012-06-18 01:16 . 2012-06-18 01:16 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\db97eae0f81ed9d7d8d910e524859990\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll
    + 2012-06-18 01:16 . 2012-06-18 01:16 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d7f1a24f4ab28ff9859120d65b72d688\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 337408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\cbaa2c3a4e91129440a784827d1d26bb\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v9.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a9f6c9b07b5450581322eada5a828b89\Microsoft.VisualStudio.Tools.Applications.Hosting.v9.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 303104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\913fce36cb050a091d692e8d090ee3ae\Microsoft.VisualStudio.Tools.Office.AppInfoDocument.v9.0.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\787f2a870ba9d0895455ccd8578f1a20\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 133120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\783a4e24531ee190eb826509f8cc2a45\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 179200 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\741efbef9881bf62eced2bca3397366b\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 112128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\6c7ccf3f7fa572b45a31097585b9be71\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 161792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5cdbdb1386f3060d12c31352910d59d3\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\54aa66ae5ce18ece1133102c5de4a105\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 650752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4bc310439d3df869c82d0064c3e1180a\Microsoft.VisualStudio.Tools.Applications.ServerDocument.v10.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 363008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\3d016be961a0f7e1941e0ceca394ed9d\Microsoft.VisualStudio.Tools.Applications.Hosting.v10.0.ni.dll
    + 2012-06-18 01:16 . 2012-06-18 01:16 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\1e4f25c361064c9bddc86a0f0da2b561\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\1e639225ba30d7f182b893ddacea506b\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-05-16 23:01 . 2012-05-16 23:01 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d4c36b363fcd1ca494218e74ba606e99\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2012-05-19 02:08 . 2012-05-19 02:08 786432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ba2ca86f5d270f493501848843d2f227\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\607324a312b1c6d7fbede8300e8cee91\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1f1185444c8a12ace85ba4c2d49f41f8\Microsoft.PowerShell.Security.ni.dll
    + 2012-05-19 02:08 . 2012-05-19 02:08 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\12715b7e3e89758161053520b57764b2\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 854528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\b70bc4c745dd9a2e5e90e46bcedfe1dc\Microsoft.Office.Tools.Word.v9.0.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 816128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\78dd5caf7a28d0b1b122483818205cf0\Microsoft.Office.Tools.Common.v9.0.ni.dll
    + 2012-06-18 01:16 . 2012-06-18 01:16 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\51ad304ce7ae5aa72a6afdbce7661195\Microsoft.Office.Tools.v9.0.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\4e2f6641a251a23a544fcbcc91a63e92\Microsoft.Office.Tools.Outlook.v9.0.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\622b582866fca37f113bd97ae4c6d1f6\Microsoft.ManagementConsole.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\7e59b3b84ca3c61adfc0dc74a65ea177\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\07e346ee0e3f7433f2de7a72fadd6713\Microsoft.Build.Utilities.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\432160eff3b1f9301c6a74c2e647e03d\Microsoft.Build.Engine.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\8297305de86377d0070a983d99a7f943\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\541a5bb4d0f8490e506f885a4b435566\mcstoredb.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 169472 c:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\76632f5376aa57887b9cd7a5662c6d4f\IsdiInterop.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 475648 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2e16482769fcdf856919e292a968f16c\IAStorUtil.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 219136 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\d30c0ec7210484cba6db59882aaaba1a\IAStorDataMgr.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\02577b78c6ed2f9bda301de888dccad8\EventViewer.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\5ae5c6732ef8e7115baaeb66fd69cdd2\ehRecObj.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\c4a5ce4f89c53b9601d13d22d01cf0bf\ehiVidCtl.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\cbf3a07d3ab873b19f47d6a24f06c796\ehiProxy.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\5cc4a5672758f4732ef430b3431f47fc\ehiExtens.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a6b8eb80cfbdd927b2fa4ecb69fc0209\ehExtHost32.ni.exe
    + 2012-05-16 00:23 . 2012-05-16 00:23 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\626d0ac2f4ada682d7ca6c4ebf821469\CustomMarshalers.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\3912b69593af13d0922279a063e5af66\ComSvcConfig.ni.exe
    + 2012-05-16 00:22 . 2012-05-16 00:22 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\e1c3540ffb669448747187f76c6ebe82\BDATunePIA.ni.dll
    + 2012-06-14 11:45 . 2012-04-23 22:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2012-05-11 00:32 . 2012-01-04 02:50 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    - 2010-11-21 03:25 . 2010-11-21 03:25 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 532480 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 118784 c:\windows\assembly\GAC_MSIL\cli_uretypes\1.0.7.0__ce2cb7e279207b9e\cli_uretypes.dll
    + 2012-02-16 02:43 . 2012-02-16 02:43 892928 c:\windows\assembly\GAC_MSIL\cli_oootypes\1.0.7.0__ce2cb7e279207b9e\cli_oootypes.dll
    + 2012-05-11 00:31 . 2012-02-10 23:29 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 358912 c:\windows\assembly\GAC_64\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 372736 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2012-07-12 16:55 . 2012-06-02 08:25 1129472 c:\windows\SysWOW64\wininet.dll
    + 2012-07-12 16:55 . 2012-06-02 08:26 1103872 c:\windows\SysWOW64\urlmon.dll
    + 2012-01-11 11:56 . 2011-10-26 04:32 1328128 c:\windows\SysWOW64\quartz.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 1328128 c:\windows\SysWOW64\quartz.dll
    + 2012-06-14 11:46 . 2012-05-04 10:03 3913072 c:\windows\SysWOW64\ntoskrnl.exe
    + 2012-06-14 11:46 . 2012-05-04 10:03 3968368 c:\windows\SysWOW64\ntkrnlpa.exe
    + 2012-01-11 11:56 . 2011-11-17 05:38 1292080 c:\windows\SysWOW64\ntdll.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 1390080 c:\windows\SysWOW64\msxml6.dll
    + 2012-07-12 00:59 . 2012-06-06 05:05 1390080 c:\windows\SysWOW64\msxml6.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 1236992 c:\windows\SysWOW64\msxml3.dll
    + 2012-07-12 00:59 . 2012-06-06 05:05 1236992 c:\windows\SysWOW64\msxml3.dll
    + 2012-06-14 11:46 . 2012-04-07 11:26 2342400 c:\windows\SysWOW64\msi.dll
    - 2011-11-03 21:49 . 2011-12-08 22:10 8527008 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    + 2011-11-03 21:49 . 2012-02-25 17:35 8527008 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    + 2012-07-12 16:55 . 2012-06-02 08:33 1800192 c:\windows\SysWOW64\jscript9.dll
    + 2012-07-12 16:55 . 2012-06-02 08:19 1793024 c:\windows\SysWOW64\iertutil.dll
    + 2012-07-12 16:55 . 2012-06-02 08:43 9737728 c:\windows\SysWOW64\ieframe.dll
    + 2012-05-11 00:32 . 2012-03-03 05:31 1077248 c:\windows\SysWOW64\DWrite.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 1998168 c:\windows\SysWOW64\D3DX9_43.dll
    + 2012-01-02 18:39 . 2009-03-09 20:27 4178264 c:\windows\SysWOW64\D3DX9_41.dll
    + 2012-03-03 18:49 . 2008-07-10 16:00 3851784 c:\windows\SysWOW64\D3DX9_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 3850760 c:\windows\SysWOW64\D3DX9_38.dll
    + 2012-03-03 18:49 . 2008-03-05 20:56 3786760 c:\windows\SysWOW64\D3DX9_37.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 1868128 c:\windows\SysWOW64\d3dcsx_43.dll
    + 2012-03-03 18:49 . 2009-09-04 22:29 5501792 c:\windows\SysWOW64\d3dcsx_42.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 2106216 c:\windows\SysWOW64\D3DCompiler_43.dll
    + 2012-03-03 18:49 . 2008-10-15 11:22 2036576 c:\windows\SysWOW64\D3DCompiler_40.dll
    + 2012-03-03 18:49 . 2008-07-10 16:00 1493528 c:\windows\SysWOW64\D3DCompiler_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 1491992 c:\windows\SysWOW64\D3DCompiler_38.dll
    + 2012-03-03 18:49 . 2008-03-05 20:56 1420824 c:\windows\SysWOW64\D3DCompiler_37.dll
    + 2012-06-14 11:45 . 2012-04-24 04:36 1158656 c:\windows\SysWOW64\crypt32.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 2152176 c:\windows\system32\WUDFUpdate_01009.dll
    + 2012-07-12 16:55 . 2012-06-02 12:05 1392128 c:\windows\system32\wininet.dll
    + 2012-07-12 16:55 . 2012-06-02 12:05 1346048 c:\windows\system32\urlmon.dll
    - 2009-07-14 00:03 . 2009-07-14 01:41 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
    + 2012-05-11 00:30 . 2012-03-31 05:40 1402880 c:\windows\system32\spool\drivers\x64\3\JNWDRV.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 1031680 c:\windows\system32\rdpcore.dll
    + 2012-03-13 22:14 . 2012-02-17 06:38 1031680 c:\windows\system32\rdpcore.dll
    + 2012-01-11 11:56 . 2011-10-26 05:25 1572864 c:\windows\system32\quartz.dll
    + 2012-06-14 11:46 . 2012-05-04 11:06 5559664 c:\windows\system32\ntoskrnl.exe
    + 2012-01-11 11:56 . 2011-11-17 06:41 1731920 c:\windows\system32\ntdll.dll
    + 2012-07-12 00:59 . 2012-06-06 06:06 1881600 c:\windows\system32\msxml3.dll
    + 2012-06-14 11:46 . 2012-04-07 12:31 3216384 c:\windows\system32\msi.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 1447936 c:\windows\system32\lsasrv.dll
    + 2012-01-31 21:35 . 2011-11-17 06:35 1447936 c:\windows\system32\lsasrv.dll
    + 2012-07-12 16:55 . 2012-06-02 12:12 2311680 c:\windows\system32\jscript9.dll
    + 2012-07-12 16:55 . 2012-06-02 11:59 2144768 c:\windows\system32\iertutil.dll
    + 2012-05-11 00:32 . 2012-03-03 06:35 1544704 c:\windows\system32\DWrite.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 1093632 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\ZuneDriver.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 2152176 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\WUDFUpdate_01009.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 1721576 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_c37ddf020a6ab988\WdfCoInstaller01009.dll
    + 2011-07-22 20:47 . 2011-07-22 20:47 1093632 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\ZuneDriver.dll
    + 2011-06-06 17:49 . 2011-06-06 17:49 2152176 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\WUDFUpdate_01009.dll
    + 2011-06-06 17:49 . 2011-06-06 17:49 1721576 c:\windows\system32\DriverStore\FileRepository\zune.inf_amd64_neutral_bae1a2a65e3c2cfb\WdfCoInstaller01009.dll
    + 2011-06-07 00:48 . 2011-06-07 00:48 1721576 c:\windows\system32\DriverStore\FileRepository\wmzuneserusb.inf_amd64_neutral_93610d3774bed3ba\WdfCoInstaller01009.dll
    + 2011-06-06 17:49 . 2011-06-06 17:49 1721576 c:\windows\system32\DriverStore\FileRepository\wmzuneserusb.inf_amd64_neutral_0612991c2e85953e\WdfCoInstaller01009.dll
    + 2011-08-05 23:46 . 2011-08-05 23:46 1093632 c:\windows\system32\drivers\UMDF\ZuneDriver.dll
    + 2012-05-11 00:30 . 2012-03-30 11:35 1918320 c:\windows\system32\drivers\tcpip.sys
    + 2012-03-03 18:50 . 2010-05-26 16:41 2401112 c:\windows\system32\D3DX9_43.dll
    + 2012-03-03 18:49 . 2009-03-09 20:27 5425496 c:\windows\system32\D3DX9_41.dll
    + 2012-03-03 18:49 . 2008-10-15 11:22 5631312 c:\windows\system32\D3DX9_40.dll
    + 2012-03-03 18:49 . 2008-07-10 16:00 4992520 c:\windows\system32\D3DX9_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 4991496 c:\windows\system32\D3DX9_38.dll
    + 2012-03-03 18:49 . 2008-03-05 20:56 4910088 c:\windows\system32\D3DX9_37.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 1907552 c:\windows\system32\d3dcsx_43.dll
    + 2012-03-03 18:49 . 2009-09-04 22:29 5554512 c:\windows\system32\d3dcsx_42.dll
    + 2012-03-03 18:50 . 2010-05-26 16:41 2526056 c:\windows\system32\D3DCompiler_43.dll
    + 2012-03-03 18:49 . 2009-03-09 20:27 2430312 c:\windows\system32\D3DCompiler_41.dll
    + 2012-03-03 18:49 . 2008-10-15 11:22 2605920 c:\windows\system32\D3DCompiler_40.dll
    + 2012-03-03 18:49 . 2008-07-10 16:00 1942552 c:\windows\system32\D3DCompiler_39.dll
    + 2012-03-03 18:49 . 2008-05-30 19:11 1941528 c:\windows\system32\D3DCompiler_38.dll
    + 2012-03-03 18:49 . 2008-03-05 20:56 1860120 c:\windows\system32\D3DCompiler_37.dll
    + 2012-06-14 11:45 . 2012-04-24 05:37 1462272 c:\windows\system32\crypt32.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 1133568 c:\windows\system32\cdosys.dll
    + 2012-07-12 00:59 . 2012-06-06 06:02 1133568 c:\windows\system32\cdosys.dll
    - 2009-07-14 04:45 . 2011-12-16 23:53 7294260 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    + 2009-07-14 04:45 . 2012-07-12 21:05 7294260 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    + 2011-12-01 23:18 . 2012-07-17 21:54 1635832 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
    + 2011-12-01 04:09 . 2012-06-30 17:44 6231736 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2657531003-3759727383-2673836086-1000-12288.dat
    + 2012-01-19 17:08 . 2012-01-19 17:08 1369872 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WindowsBase.dll
    + 2012-01-19 17:08 . 2012-01-19 17:08 6429992 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationFramework.dll
    + 2012-01-19 17:52 . 2012-01-19 17:52 3825952 c:\windows\Microsoft.NET\Framework64\v4.0.30319\WPF\PresentationCore.dll
    + 2012-03-15 17:17 . 2012-03-15 17:17 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll
    + 2011-12-26 08:54 . 2011-12-26 08:54 1863464 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.Extensions.dll
    + 2011-12-26 10:18 . 2011-12-26 10:18 5200656 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Web.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 3512072 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 4970768 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 1455376 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 1515792 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 1512712 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    + 2011-12-15 18:01 . 2011-12-15 18:01 9793280 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    + 2012-05-11 00:31 . 2012-02-10 23:29 2256152 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll
    - 2011-11-03 22:14 . 2011-03-29 22:32 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
    + 2012-06-14 11:46 . 2012-03-21 22:30 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll
    + 2012-01-11 11:56 . 2011-12-25 20:40 5263360 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Web.dll
    - 2011-11-03 22:18 . 2011-05-04 22:31 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 3190784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
    + 2012-06-14 11:46 . 2012-03-21 22:30 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
    - 2010-11-21 03:23 . 2010-11-21 03:23 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 9992464 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    - 2011-12-01 21:40 . 2011-07-08 22:31 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 1577232 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 1756432 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
    + 2012-01-19 17:08 . 2012-01-19 17:08 1369872 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
    + 2012-01-19 17:08 . 2012-01-19 17:08 6429992 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
    + 2012-01-19 17:08 . 2012-01-19 17:08 3790112 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
    + 2012-03-15 17:17 . 2012-03-15 17:17 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
    + 2011-12-26 08:54 . 2011-12-26 08:54 1863464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
    + 2011-12-26 08:54 . 2011-12-26 08:54 5230864 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 3512072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 5201168 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 1143568 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
    + 2011-12-15 17:08 . 2011-12-15 17:08 6727424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 1737496 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
    + 2012-06-14 11:46 . 2012-03-21 22:32 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2011-11-03 22:14 . 2011-03-29 22:33 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2012-01-11 11:56 . 2011-12-25 20:42 5255168 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2012-05-11 00:32 . 2012-01-04 02:51 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2011-11-03 22:18 . 2011-05-04 22:32 3190784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2012-06-14 11:46 . 2012-03-21 22:32 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2012-05-11 00:32 . 2012-01-04 02:51 5925136 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2012-05-11 00:32 . 2012-01-04 02:50 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2011-12-01 21:40 . 2011-07-08 22:33 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1863464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 5097816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
    - 2011-11-03 22:16 . 2011-11-03 22:16 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 1069936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 5200656 c:\windows\Microsoft.NET\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2012-03-07 11:56 . 2012-03-07 11:56 5230864 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2012-06-15 13:52 . 2012-06-15 13:52 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-06-15 13:53 . 2012-06-15 13:53 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    - 2011-12-02 21:56 . 2011-12-02 21:56 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-11-18 23:52 . 2011-11-18 23:52 9183232 c:\windows\Installer\8673b.msp
    + 2012-01-05 11:21 . 2012-01-05 11:21 4964864 c:\windows\Installer\86726.msp
    + 2012-01-25 06:32 . 2012-01-25 06:32 3458560 c:\windows\Installer\86711.msp
    + 2011-10-26 21:36 . 2011-10-26 21:36 2829312 c:\windows\Installer\866fd.msp
    + 2012-05-17 06:58 . 2012-05-17 06:58 3462144 c:\windows\Installer\82ada.msp
    + 2012-04-23 02:46 . 2012-04-23 02:46 1187328 c:\windows\Installer\82ac6.msp
    + 2012-03-15 18:26 . 2012-03-15 18:26 4212736 c:\windows\Installer\82abe.msp
    + 2012-04-23 14:32 . 2012-04-23 14:32 3460096 c:\windows\Installer\65786.msp
    + 2012-03-15 17:12 . 2012-03-15 17:12 4968960 c:\windows\Installer\6571f.msp
    + 2012-03-15 17:11 . 2012-03-15 17:11 1989632 c:\windows\Installer\656f3.msp
    + 2011-12-12 21:13 . 2011-12-12 21:13 3461120 c:\windows\Installer\554296.msp
    + 2011-12-26 11:24 . 2011-12-26 11:24 8835072 c:\windows\Installer\554274.msp
    + 2012-03-26 23:21 . 2012-03-26 23:21 7622656 c:\windows\Installer\4f845.msi
    + 2012-06-20 05:29 . 2012-06-20 05:29 5262848 c:\windows\Installer\4e611.msp
    + 2012-06-20 06:00 . 2012-06-20 06:00 3461120 c:\windows\Installer\4e5f9.msp
    + 2012-04-05 05:56 . 2012-04-05 05:56 2820096 c:\windows\Installer\4e5e4.msp
    + 2012-06-20 06:06 . 2012-06-20 06:06 1839104 c:\windows\Installer\4e5cf.msp
    + 2012-03-01 03:55 . 2012-03-01 03:55 3462656 c:\windows\Installer\4aa07.msp
    + 2012-01-02 15:35 . 2012-01-02 15:35 7054336 c:\windows\Installer\380c15.msi
    + 2011-01-18 09:06 . 2011-01-18 09:06 2994176 c:\windows\Installer\377cf3.msi
    + 2012-04-01 20:27 . 2012-04-01 20:27 3463168 c:\windows\Installer\1fe536.msp
    + 2012-02-17 07:50 . 2012-02-17 07:50 1236480 c:\windows\Installer\1fe521.msp
    + 2012-03-21 09:57 . 2012-03-21 09:57 1591808 c:\windows\Installer\1fe506.msp
    + 2012-01-22 14:20 . 2012-01-22 14:20 1707520 c:\windows\Installer\1b5b57d.msp
    + 2012-03-07 19:01 . 2012-03-07 19:01 1907712 c:\windows\Installer\1b5b56d.msp
    + 2011-12-14 03:06 . 2012-07-12 16:57 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 1479520 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 1858400 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 4525408 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 4525408 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\promoicon.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 3792736 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\pptico.exe
    + 2011-12-14 03:06 . 2012-07-12 16:57 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
    - 2011-12-14 03:06 . 2011-12-17 12:26 1449312 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\accicons.exe
    + 2010-10-20 18:35 . 2010-10-20 18:35 1479520 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\XLICONS.EXE
    + 2010-10-22 22:12 . 2010-10-22 22:12 5496688 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\IPEDITOR.DLL
    + 2011-03-17 06:22 . 2011-03-17 06:22 4301184 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\GRAPH.EXE
    + 2010-10-22 23:55 . 2010-10-22 23:55 3049376 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACEWDAT.DLL
    + 2011-03-11 22:46 . 2011-03-11 22:46 2194312 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACECORE.DLL
    + 2012-05-19 00:29 . 2012-05-19 00:29 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e41f5739292f4771c64a55940369efd2\WindowsBase.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e286701acf74012d3aa4a21953f03b6b\WindowsBase.ni.dll
    + 2012-05-25 23:38 . 2012-05-25 23:38 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\6ee9d76d9f1e618cd6fb94b13355bcc9\UIAutomationClientsideProviders.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\28ca4f076264ab07f1d00a6c9623dc49\System.Xml.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\df013cbfec0defc7e9997cdaa90b89bc\System.Xaml.ni.dll
    + 2012-06-19 22:59 . 2012-06-19 22:59 1602560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\fb9bda76fdb95462be5964d24b3a3694\System.WorkflowServices.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 1602560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\e92e21c0bb943f4c4c0e6ba57f2e8b11\System.WorkflowServices.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 2887168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Run#\ab44c8403068d477d3ccb63a7b99c796\System.Workflow.Runtime.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 5922304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\7e21b535d75b72744702755d91df3e04\System.Workflow.ComponentModel.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 5922304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\257cccbbdf957827420366018bb8b2bb\System.Workflow.ComponentModel.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\788eeff916be29e97c39ceed908b36c1\System.Workflow.Activities.ni.dll
    + 2012-05-25 00:23 . 2012-05-25 00:23 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\6f15c76d1133159cfb4233680d7a672d\System.Workflow.Activities.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\9e50e3bca6cb19f9acab815d46f5e7e5\System.Windows.Forms.DataVisualization.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\950f64ba9fb22ca06c5b2b9cf6f5f4b4\System.Windows.Forms.DataVisualization.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 2287104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\d27c82130281d30a958f94d9f7027e34\System.Web.Services.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 2964992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\99fec8397616a4999470ea72bd8cac46\System.Web.Mobile.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 2964992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\1991b901c67dc756a410b4352a0b82d5\System.Web.Mobile.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\bd863273330792b63f9c4f1639d96543\System.Web.Extensions.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 1101312 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\a08563ecdd9d8c25776f7697b82441b8\System.Web.Extensions.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\4e3d591d1ffa8ce8d8659f6b096a968e\System.Web.Extensions.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 1101312 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\0fd3a003f2e5f8272afbe7079fc837fb\System.Web.Extensions.Design.ni.dll
    + 2012-06-19 22:58 . 2012-06-19 22:58 5618688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\1d5dfd6fd8c797913853b3bb7b58e340\System.Web.DataVisualization.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 5618688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\13b948ccfa64afed6fcb2cb282207d17\System.Web.DataVisualization.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\cd7c3aed4408c3554c30a8f0236b90e1\System.Speech.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\94289b88c5b494f572cd7114fa995487\System.ServiceModel.Activities.ni.dll
    + 2012-05-21 22:25 . 2012-05-21 22:25 1506816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\755b7b34d1055295c619713f010f17b9\System.ServiceModel.Web.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\2dbc7aabd92cc0d470acb455c498d919\System.ServiceModel.Discovery.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\affb28e2d9cc3c19de0758e7e8c68e8f\System.Runtime.Serialization.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\b37e6f4b1d742031f328504eb99d0f6c\System.Runtime.DurableInstancing.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\d2de16284459454472a6875185c64d08\System.Printing.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\682ea473b36fc9043d982c4f5a667568\System.Printing.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\b83f2453b4538b2e80fe09cfd94dce00\System.Management.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\60bf6251873ef465abcebeb9a24b7932\System.IdentityModel.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\8e10d4f2a408dc5a9740f8d0df5cebac\System.EnterpriseServices.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 2303488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\dadeee26c90fecbf3196eba10dc077b4\System.Drawing.ni.dll
    + 2012-06-19 16:26 . 2012-06-19 16:26 2305024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1225ef41527a975de83f22328d0a3b93\System.Drawing.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\a68116468a194678fd04167067134712\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\3a737af86a6a819af97a6d1a04c0e944\System.DirectoryServices.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\f20144fba069563333d0f6be2e0b6e06\System.Deployment.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\ad9ff5d55f7ea22e80c39e0ff0240984\System.Deployment.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\0ec8effb7b9d03ae69d37922813bc880\System.Data.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\0eb72df497fad5c273ff16f88b0fb950\System.Data.SqlXml.ni.dll
    + 2012-05-21 22:25 . 2012-05-21 22:25 2703360 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Services\ef77bd7c278e00372440bc2a2d6bfef0\System.Data.Services.ni.dll
    + 2012-05-25 00:22 . 2012-05-25 00:22 1799168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\536e12016ad3adc78e0708b77e6b9219\System.Data.Services.Client.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 1498112 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.OracleC#\9ae2ebd5a18f5e129b09e1691126fce4\System.Data.OracleClient.ni.dll
    + 2012-05-21 22:25 . 2012-05-21 22:25 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\86553c1d7f3e66c17fc3e0274de7a2de\System.Data.Linq.ni.dll
    + 2012-05-21 22:25 . 2012-05-21 22:25 1750528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity.#\4997c69ce25208cb230a7f6f81c4dc83\System.Data.Entity.Design.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\6aea67f24827961ce1d48356715389d8\System.Configuration.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\eac19ca5a18a6d08cd247e68b618ba68\System.ComponentModel.Composition.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\3869077874ba987242c791b3a18b2f8b\System.Activities.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\a7c19841c70fbce3b17ad3a46ee410d8\System.Activities.Presentation.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\707f90689caf41ad429bf3ad373503cb\System.Activities.Presentation.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\96083298999a677341c98fc2bf01b248\System.Activities.Core.Presentation.ni.dll
    + 2012-05-21 22:24 . 2012-05-21 22:24 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\fe1704ff12348776e6b70dd4a2c69163\ReachFramework.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\16c9569b75a9f47c38b60ba733936e1a\ReachFramework.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\b0b05b1ecbfb813474f685de13027585\PresentationUI.ni.dll
    + 2012-06-19 16:25 . 2012-06-19 16:25 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\9c3d6b3ddef66cac069b6ab1fec514f8\PresentationUI.ni.dll
    + 2012-05-19 00:29 . 2012-05-19 00:29 1891328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationBuildTa#\f1a22e22627669cfa6df30d1b4051988\PresentationBuildTasks.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e6329450cf7a40ada7414ca9326aca56\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\93536d93a44ce7d5a60faf1aeb55f49e\Microsoft.VisualBasic.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\70e2694fe050bd480b9f61f935ca2da5\Microsoft.VisualBasic.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\16425c121db8083cbaa51f619c9e51e7\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\06b302bc4d53d2abace0e35c7c6ac340\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\5284682fcf04815a86233bcaf696da66\Microsoft.Transactions.Bridge.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\8da91be67f85f2d15c39ff4857bf123e\Microsoft.Office.Tools.Word.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\89590f3fddae29ecefb7634902f65ff8\Microsoft.Office.Tools.Word.Implementation.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\64488f73778ae69882d5616392b945b3\Microsoft.Office.Tools.Word.Implementation.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1118208 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\5b1ef2b21c91e7023613fa6453ea1917\Microsoft.Office.Tools.Common.Implementation.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\2addc9e043f4007adc64e3a617c780e0\Microsoft.Office.Tools.Word.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 2035200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\28413a8e25bf01ffea8c732832773e18\Microsoft.Office.Tools.Excel.Implementation.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 2035200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\1c0970a7e9104b9cb8648454e8d929fc\Microsoft.Office.Tools.Excel.Implementation.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 1118208 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\0c6e82dd514f710f91aba5c5b09c81a8\Microsoft.Office.Tools.Common.Implementation.ni.dll
    + 2012-05-25 00:21 . 2012-05-25 00:21 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\4b1d24a96b3882f9e77445e48a7c59ee\Microsoft.JScript.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\1ff62486cdefbfc2dab41b686a9aa4e2\Microsoft.CSharp.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 6004736 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build\8186ee6e68fbefb30dca7b41ec0386c4\Microsoft.Build.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 3821056 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\9857693ea27b34f5c8d00356eddefb9b\Microsoft.Build.Tasks.v4.0.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 3821056 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\32f1bdccbbc1086196ee0b16802659dd\Microsoft.Build.Tasks.v4.0.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 2521088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Eng#\d0d3c1cf8ab4b8b5534a1e5a77d34f09\Microsoft.Build.Engine.ni.dll
    + 2012-05-19 00:27 . 2012-05-19 00:27 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\7441ee48816f9fdce14c5dad25008d28\AspNetMMCExt.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\582c7d14b9ce7ac950f2a432a0809270\AspNetMMCExt.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
    + 2012-05-21 22:22 . 2012-05-21 22:22 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\24ed0e1df6a605cdb2088f87ae2ab8ff\UIAutomationClientsideProviders.ni.dll
    + 2012-05-11 10:53 . 2012-05-11 10:54 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 1226752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\6831f648f5b925f1194f691b0b491662\System.WorkflowServices.ni.dll
    + 2012-05-21 22:22 . 2012-05-21 22:22 1971712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\b0d4852fc57aed572307b110107affa0\System.Workflow.Runtime.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 4476416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\a1705962a6725e5f40066496222d67e7\System.Workflow.ComponentModel.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\ec819e8a7e4585ffc87ae93d3b0662d8\System.Workflow.Activities.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1925632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\dbe597aa9c12df5d08fb2f3f9872b834\System.Web.Services.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\98709826ecf4cc93d6b85c8fe2c009b7\System.Web.Mobile.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 3127296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\27b66f127250f2ba37f9bf1d519c6039\System.Web.Extensions.ni.dll
    + 2012-06-19 15:58 . 2012-06-19 15:58 4575232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\794ebda123b04ccc874a5624bdced900\System.Web.DataVisualization.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\f368c85283c4e6c9650dd1c8d369dcc5\System.Speech.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 1086464 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f42c2acdb000001066c78acfc6cd8655\System.ServiceModel.Web.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ec057796972ce41b751eaa3a8306fbcb\System.ServiceModel.Discovery.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 1393152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\5055b60e339143bbace5871f5fe4b114\System.ServiceModel.Activities.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\79ac99fe5274fb82ffcff2c15f71854c\System.Runtime.DurableInstancing.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\0c2b0d52156447592f33edf4116b7e7d\System.Management.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\bd28f26b18b8ffeee1a0fbaa98f5810e\System.IdentityModel.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0fe1e56d17858b6156a3a46330f75f27\System.DirectoryServices.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\99d0f7ba920eea1117e45dcd9fec0eb5\System.Data.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 2550272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\fdb98c6d783fe167c1dc0022f27b7cd6\System.Data.SqlXml.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 2026496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\9b0a11f0270b5bbeae593ca5c584afaa\System.Data.Services.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\b894a1df3e6d58ada8f1aa303465ca23\System.Data.Services.Client.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\d62b53e7a5528b03ff512c624a1fdb83\System.Data.OracleClient.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\82c0c56ff8259e1440cfd0d5727a26d8\System.Data.Linq.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 1424384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\56e7e8cf5ba51bc1d284209d75a194a4\System.Data.Entity.Design.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 7069184 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 4129280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\51025a1c89f6fd752a5396a059d608b2\System.Activities.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1546752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\66893548d2b2cad29cabf3b3578f356f\System.Activities.Core.Presentation.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1479168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\96e437d1e82e54e63ed96af50e96d03d\PresentationBuildTasks.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\42a7f127f3fda82fb12c6a6e144d08c1\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\41acde5834988268e2cdbed499715066\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll
    + 2012-05-19 14:03 . 2012-05-19 14:03 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\9a37f4e64ce5b856ac3892fef064c7de\Microsoft.Transactions.Bridge.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\8804742046c49b3ea4635c44e853f822\Microsoft.Office.Tools.Word.Implementation.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\7cfb808ac13b9432c5b771d64ff37f8d\Microsoft.Office.Tools.Excel.Implementation.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\cfcc92c125ddfaabad24abe61cfc0471\Microsoft.JScript.ni.dll
    + 2012-05-11 10:54 . 2012-05-11 10:54 1616896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\9912b6d76c1017b5af6ef24730f550ca\Microsoft.CSharp.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 4248064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\5246fa832baabf6e3706fd537fe19062\Microsoft.Build.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\545d26502454316492990b42b093e673\Microsoft.Build.Tasks.v4.0.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 1931264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\520f23eeaf6b5241a74a56338e8b89f8\Microsoft.Build.Engine.ni.dll
    + 2012-07-23 21:25 . 2012-07-23 21:25 5660672 c:\windows\assembly\NativeImages_v2.0.50727_64\ZuneShell\ab8fc72e8a9373dc5138ddd5e971949b\ZuneShell.ni.dll
    + 2012-07-23 21:25 . 2012-07-23 21:25 3635712 c:\windows\assembly\NativeImages_v2.0.50727_64\ZuneDBApi\4e166bf1c0246de09382a8013e1d0164\ZuneDBApi.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 4962816 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\4bcc5a6e9e9d25e068fc304bd7eda6af\WindowsBase.ni.dll
    + 2012-07-23 21:25 . 2012-07-23 21:25 6220288 c:\windows\assembly\NativeImages_v2.0.50727_64\UIX\be6346434fc9c9ea2f97833d26354308\UIX.ni.dll
    + 2012-07-23 21:25 . 2012-07-23 21:25 2632704 c:\windows\assembly\NativeImages_v2.0.50727_64\UIX.RenderApi\cd060f5dbb750fe0f4c150e5d8773b5b\UIX.RenderApi.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 1459712 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\783df1ee260d3df406fa80afa38502d4\UIAutomationClientsideProviders.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\24d1b7ccbedaa3602bae6a6acea9929e\System.Xml.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\70cc5e8a5a3372fe0b104c1b20392cd2\System.WorkflowServices.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\aa638ba79250284eb4af4adaa4a4117b\System.Workflow.Runtime.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\996dc2af3b9e5c111130935f298908c6\System.Workflow.ComponentModel.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\178797db84abae2eeaed835bd28ca52c\System.Workflow.Activities.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\a32734087cd0db5607d5744ca63235d7\System.Web.Services.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\af7689e8cbec5d2755497be23c30e293\System.Web.Mobile.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\768ea257d75839979b4efb2d49d653f6\System.Web.Extensions.ni.dll
    + 2012-06-19 02:48 . 2012-06-19 02:48 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2c47bc5d426a7cf9ffef1425eda08184\System.Web.Extensions.Design.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\ca51f026916139f886519fdf6d6c73e9\System.Speech.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\56ee9b5f220583c1c7374a61ad904044\System.ServiceModel.Web.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\265531568722647aab229a2cec195b3d\System.Runtime.Serialization.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\2a02b172fa4cf3d93ce7388b67b2a199\System.Runtime.Remoting.ni.dll
    + 2012-06-15 16:44 . 2012-06-15 16:44 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\b964519964d302b4977e1380d8d15f1a\System.Printing.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 1472000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\fd4a8227569e64d657b80483da8ffe78\System.Management.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 1444352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\d1f21a29e79e73b5401fae156f339f67\System.IdentityModel.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d50cde53634ccbb5e0231738784ff4b8\System.EnterpriseServices.ni.dll
    + 2012-06-15 16:43 . 2012-06-15 16:43 2318848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\222eb8aa336953a6b0216db2b0c4770d\System.Drawing.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 1230848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\39d16229a3d5c6e7c1594ef10758bf75\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\152ef61928f1c300fdad8fa6d5905880\System.DirectoryServices.ni.dll
    + 2012-06-15 16:43 . 2012-06-15 16:43 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\6e4e9b07f376d445df1718c0011fa99b\System.Deployment.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 8681472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\ea1848ec07c70f3d3c3445f4fbdae87a\System.Data.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 3463680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\7f6f74f1cc0ea6c40a2d6707b12af818\System.Data.SqlXml.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 2805760 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\0679fe5f3f9164f499e50cdade962ba3\System.Data.Services.ni.dll
    + 2012-05-16 22:37 . 2012-05-16 22:37 1868288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\2e9de1acfb7974cad94b747442ca325f\System.Data.Services.Client.ni.dll
    + 2012-05-12 01:05 . 2012-05-12 01:05 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\97429a1c70c94c49850be3f944a32a2e\System.Data.OracleClient.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\2ec3d436b861d35c586b710a570e170d\System.Data.Linq.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\b7b5364bc524988f7ca5b8c20a24119d\System.Data.Entity.Design.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 3315200 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\766ce7ee1a2e4f2a85fd90e7572f5d53\System.Core.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\193d03ca60573c92f92d9b07fa5bc243\System.Configuration.ni.dll
    + 2012-06-15 16:44 . 2012-06-15 16:44 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\1f88a3693c8ddd527a130aff49dc58b3\ReachFramework.ni.dll
    + 2012-06-15 16:44 . 2012-06-15 16:44 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\b91c32fab08ba62d8c7681cc596895be\PresentationUI.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 1884160 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\4fbff79b8ebf082d08c0080923ff5036\PresentationBuildTasks.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\ac1ba76ed19d668ce53a74593f040453\Narrator.ni.exe
    + 2012-06-19 02:19 . 2012-06-19 02:19 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\df2557ab1b8e4389d846e13dc82eba57\MMCEx.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\61812970c4743b686a67f28687e1dcb6\MIGUIControls.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 1877504 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\1dcc7a3940f5e4be8da3dd0b66bc38c0\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1586ee919f86130df9771cf9b8d95d3a\Microsoft.VisualBasic.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 1598976 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\28ba52bc122353647f1b547506e2df7c\Microsoft.Transactions.Bridge.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f5790625975320b1ffad63b476da9132\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ca7e936eed0de2436d87b2601ee3a20a\Microsoft.PowerShell.Editor.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6caa366471176a065a96d77e8ba01eeb\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3040e2de07177c0a6a66a49de61fdc59\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 1186304 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\91391297ea9428993774313f05e98dd2\Microsoft.Office.Tools.Word.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 1875456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\6ecfa88a42ba7c5c3a4580cd479d0d21\Microsoft.Office.Tools.Excel.v9.0.ni.dll
    + 2012-06-19 02:19 . 2012-06-19 02:19 1093632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\0929a1a8f19d58cca0ff9bf5f9086dc1\Microsoft.Office.Tools.Common.v9.0.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c057be8bb6614cce013af3721fe34983\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
    + 2012-06-19 02:17 . 2012-06-19 02:17 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b2afc0af3d89ae00e973b4e6e9db382c\Microsoft.MediaCenter.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\73bfbdccdc1b0ae87f70a0ec594fee3c\Microsoft.MediaCenter.Bml.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\653e1ee01f10d658d52ca42e17e74283\Microsoft.MediaCenter.UI.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\260d83ee2128a3388051cf416d4450b0\Microsoft.MediaCenter.Shell.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 3213312 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\094f6a515ca31504f96b4bad5848d692\Microsoft.JScript.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\dac69844e6333484159a4cf544190906\Microsoft.Ink.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4b362e9e25c33e371f06403edec8849a\Microsoft.Build.Tasks.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\33730d136a34d2f4e56a0322f49ee9b6\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\f1a0df6a86ceb708c5e50338f12b77ba\Microsoft.Build.Engine.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\6b727c7aa69ae3e04a869908bfbae696\Microsoft.Build.Engine.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\cc4844e7242c1e35d145bf2439f944c5\mcstore.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 4088320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\596902addad034f4df2caf291b12d61d\mcepg.ni.dll
    + 2012-05-16 22:34 . 2012-05-16 22:34 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\cdad46cd58389f53308b735e6f29ce1f\ehiVidCtl.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\0423915e377ec85d71ac216fafa77ab0\ehiProxy.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 7026176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d3ded9525743f5484dd86c7806ec5553\WindowsLive.Writer.PostEditor.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bb47137b3e002d82dc7c9f97eeec2c93\WindowsLive.Writer.CoreServices.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7605419cce72fcf91bb7dbc31ebbbca5\WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\328780f2db847d458362c28dfcb62bcd\WindowsLive.Writer.Localization.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 3347968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
    + 2012-05-19 14:02 . 2012-05-19 14:02 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\3b452cde57280624e1085699fe8beb03\UIAutomationClientsideProviders.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 7967232 c:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c764ad83cd3287fc59a3dc02e08ad1ea\System.Xml.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\88bfc62ac0195a8ae673c444a3339505\System.Workflow.Runtime.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\cfb739be21092d5b8f7b4fde529e6aaa\System.Workflow.ComponentModel.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\a815fffab98375c1919df68b5b292725\System.Workflow.Activities.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a90802e36dee6e10d9bf54832cbf549\System.Web.Mobile.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c45efc7ec92c1da8e67eb597559ec39c\System.Web.Extensions.ni.dll
    + 2012-05-19 14:01 . 2012-05-19 14:01 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\83053c3eeb3255672d84c1ddc0ce8ef3\System.Speech.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 1707008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\ed560b26f2f86b3f07b7f6d384f92275\System.ServiceModel.Web.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\72a24b45e11d64eb2bc840aae9419ba5\System.Runtime.Serialization.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\991dbe40be5b114ed705bb5b48e6b330\System.Printing.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 1051136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll
    + 2012-05-19 02:08 . 2012-05-19 02:08 8872960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\a8495b797e6f7adddc5811a4e1f97db5\System.Management.Automation.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 1083392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2ce8210219c7123610072357358df470\System.IdentityModel.ni.dll
    + 2012-06-15 16:46 . 2012-06-15 16:46 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\ef0d8a4790c24a3a091170958bc7b976\System.DirectoryServices.ni.dll
    + 2012-06-15 16:46 . 2012-06-15 16:46 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 6611456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\1e8aadc5b2e725e2370348a1ab6806c8\System.Data.SqlXml.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 2029568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\3285887b33030a7ce453573d3bed4e95\System.Data.Services.ni.dll
    + 2012-05-19 02:10 . 2012-05-19 02:10 1378816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\330d3ad45a00455b537047183e128def\System.Data.Services.Client.ni.dll
    + 2012-05-12 01:09 . 2012-05-12 01:09 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\0f4e07fb8b1b7e7133a98f478856f70c\System.Data.OracleClient.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\2fe1658f05b0a96fe25c956a31d27b06\System.Data.Linq.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 9921536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\51a2589d5ee1c9c40fb6c56391570f9e\System.Data.Entity.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 2297856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\dfd33f59a5803a3c73cf408362e6e0b7\System.Core.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\87f73de6e080d37be93adfc7d5c31d7a\ReachFramework.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\163517c8a195fb48f7ef6ee17c585bdb\PresentationUI.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 1451520 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b3f13707cbd5d48aabaa9ef5264c8a30\PresentationBuildTasks.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\17add09c98fa34255142d42697db53df\Narrator.ni.exe
    + 2012-06-19 15:56 . 2012-06-19 15:56 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\21abde8efab609732b2ade3f05234e79\MMCEx.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\0e7da0df83f0619e3b0e0a7d7ee05fa3\MIGUIControls.ni.dll
    + 2012-05-19 02:09 . 2012-05-19 02:09 1300992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0849dd848383994c63dc00278f64ddae\Microsoft.VisualStudio.Tools.Applications.Adapter.v9.0.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\cd9e47effec6549cdec61eb3aef99f7c\Microsoft.Transactions.Bridge.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\99ae5f32cd1dc3618659bc3c77f2b2a9\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\77b5496d214dd5034294b058c0bb0e8d\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2012-06-19 15:56 . 2012-06-19 15:56 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\72765e5fab12761eb6d3f58180fa34d7\Microsoft.PowerShell.Editor.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 1354752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\63513a219edd166209b039f0681f1d59\Microsoft.Office.Tools.Excel.v9.0.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ce1d10f94b40f054017865757552f2d\Microsoft.MediaCenter.UI.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\7fab1ec8f5ed6a55a8a73b2c590bd7cd\Microsoft.MediaCenter.ni.dll
    + 2012-05-16 00:22 . 2012-05-16 00:22 2335744 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\e3d2577e00aef6bc9b3e235eb83634f3\Microsoft.JScript.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4d381048e3b9c0914c0f72c6aa0a599d\Microsoft.Ink.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3893fa9a19b52dee8b2cc424840d5d08\Microsoft.Build.Tasks.ni.dll
    + 2012-06-19 15:55 . 2012-06-19 15:55 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d2250044b1ecff755e26ed12f6d27cb\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6b66f52dbd8f87e53c3c9a1de7ca5bba\Microsoft.Build.Engine.ni.dll
    + 2012-06-18 01:17 . 2012-06-18 01:17 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\3a4e56a8d1075cf0af0619c383b3e592\mcstore.ni.dll
    + 2012-05-16 23:00 . 2012-05-16 23:00 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\69b8de21b08c3412422c5918399ed702\mcepg.ni.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 1253376 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2012-05-11 00:32 . 2012-01-04 02:51 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-11-03 22:18 . 2011-05-04 22:32 3190784 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-11-03 22:14 . 2011-03-29 22:33 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2012-06-14 11:46 . 2012-03-21 22:32 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2010-11-21 03:25 . 2010-11-21 03:25 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2012-01-11 11:56 . 2011-12-25 20:42 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2012-06-14 11:46 . 2012-03-21 22:32 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2012-01-11 11:56 . 2011-12-25 20:40 5263360 c:\windows\assembly\GAC_64\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-05-11 00:31 . 2012-02-10 23:29 2256152 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
    + 2012-05-11 00:31 . 2012-02-10 23:29 3998208 c:\windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2012-05-11 00:32 . 2012-01-04 03:34 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-12-01 21:40 . 2011-07-08 22:31 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-01-11 11:56 . 2011-12-25 20:42 5255168 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 1737496 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\wpfgfx_v0300.dll
    - 2010-11-21 03:24 . 2010-11-21 03:24 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2012-05-11 00:31 . 2012-02-10 23:31 4218880 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2012-05-11 00:32 . 2012-01-04 02:50 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-12-01 21:40 . 2011-07-08 22:33 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2011-11-03 22:04 . 2011-11-03 22:04 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-03-03 18:55 . 2012-03-03 18:55 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2012-07-12 00:59 . 2012-06-09 04:41 12873728 c:\windows\SysWOW64\shell32.dll
    + 2012-07-12 16:55 . 2012-06-02 09:07 12314624 c:\windows\SysWOW64\mshtml.dll
    + 2009-07-14 02:34 . 2012-07-12 18:18 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT
    + 2012-07-12 00:59 . 2012-06-09 05:43 14172672 c:\windows\system32\shell32.dll
    + 2012-07-12 16:55 . 2012-06-02 12:49 17807360 c:\windows\system32\mshtml.dll
    + 2012-02-25 17:34 . 2012-02-25 17:34 11350688 c:\windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll
    + 2012-07-12 16:55 . 2012-06-02 12:17 10924032 c:\windows\system32\ieframe.dll
    + 2011-12-01 04:09 . 2012-08-09 04:24 28877008 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2657531003-3759727383-2673836086-1000-8192.dat
    + 2012-01-03 17:58 . 2012-01-03 17:58 20320256 c:\windows\Installer\87530.msp
    + 2012-02-16 12:06 . 2012-02-16 12:06 20333056 c:\windows\Installer\866f5.msp
    + 2012-04-04 13:34 . 2012-04-04 13:34 20549632 c:\windows\Installer\81519.msp
    + 2012-07-29 23:49 . 2012-07-29 23:49 12945920 c:\windows\Installer\7a4246.msi
    + 2011-08-05 21:14 . 2011-08-05 21:14 52322304 c:\windows\Installer\6f3bfc.msi
    + 2012-03-03 18:47 . 2012-03-03 18:47 26969088 c:\windows\Installer\6aa4eb.msi
    + 2012-01-19 18:20 . 2012-01-19 18:20 11997696 c:\windows\Installer\65772.msp
    + 2011-12-15 18:54 . 2011-12-15 18:54 39732736 c:\windows\Installer\65766.msp
    + 2012-03-15 17:09 . 2012-03-15 17:09 17165312 c:\windows\Installer\6573c.msp
    + 2012-03-15 17:11 . 2012-03-15 17:11 66812928 c:\windows\Installer\65709.msp
    + 2012-05-11 10:45 . 2012-05-11 10:45 20343808 c:\windows\Installer\656df.msp
    + 2011-11-22 05:42 . 2011-11-22 05:42 33189888 c:\windows\Installer\486de.msp
    + 2012-03-07 19:03 . 2012-03-07 19:03 23710208 c:\windows\Installer\1b5b567.msp
    + 2012-05-11 10:53 . 2012-05-11 10:53 11880448 c:\windows\assembly\NativeImages_v4.0.30319_64\System\935aea6e7eae16674abdd96a68ec97af\System.ni.dll
    + 2012-06-19 22:57 . 2012-06-19 22:57 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\e883d90a0210bf99ca88f3b4ade53a24\System.Windows.Forms.ni.dll
    + 2012-05-21 22:23 . 2012-05-21 22:23 17353728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\401ebcc2dd54ce1e0d63a544f7ed7b8a\System.Windows.Forms.ni.dll
    + 2012-06-19 16:26 . 2012-06-19 16:26 15761920 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\be472c4f636fc5b8fc38476dbfe01358\System.Web.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 15761920 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\b7c097a32df012a0786ae236c7563031\System.Web.ni.dll
    + 2012-05-23 23:48 . 2012-05-23 23:48 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\c4cc7eb7733c4221c32caccfd66ae320\System.ServiceModel.ni.dll
    + 2012-05-19 14:13 . 2012-05-19 14:13 13314048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\c5673f9907d635d3dbaec5d240acd47d\System.Design.ni.dll
    + 2012-06-19 22:56 . 2012-06-19 22:56 13314048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\2cf901cb93fe6a24b4466094390ec73a\System.Design.ni.dll
    + 2012-05-21 22:25 . 2012-05-21 22:25 18479616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\9df4e7ae75baa7bbb1af30c8061a6e9b\System.Data.Entity.ni.dll
    + 2012-05-19 00:28 . 2012-05-19 00:28 10440192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\b64f213e823a591607c45fac4997801e\System.Core.ni.dll
    + 2012-06-19 16:25 . 2012-06-19 16:25 24407552 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a3c3789d54894008501ce5891f1eeb40\PresentationFramework.ni.dll
    + 2012-05-19 00:30 . 2012-05-19 00:30 24407552 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\34c2013b5f730680bd610d6a98d2977f\PresentationFramework.ni.dll
    + 2012-06-19 15:59 . 2012-06-19 15:59 15908864 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\9d69a7a407bbc43a1bcb2da603af5840\PresentationCore.ni.dll
    + 2012-05-19 00:29 . 2012-05-19 00:29 15908864 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\4464e9df7184e3393b4cbb0f6dc286ba\PresentationCore.ni.dll
    + 2012-05-11 10:53 . 2012-05-11 10:53 19353600 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\6087fce8f76d9af69af496cb10b7d1ee\mscorlib.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 12079616 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\fdb5565e4c807a8cd79de9f40c0cd644\System.Web.ni.dll
    + 2012-05-19 14:05 . 2012-05-19 14:05 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\cfece6f67593b4d8bb58d23b7fdcc470\System.ServiceModel.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 11021824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\ecde3362b4d67a0025c3c9d5b9525f4a\System.Design.ni.dll
    + 2012-05-19 14:04 . 2012-05-19 14:04 13345792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\7aa839fb16503243d6ae454ab334bcf4\System.Data.Entity.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
    + 2012-06-15 13:54 . 2012-06-15 13:54 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
    + 2012-05-11 10:53 . 2012-05-11 10:53 14412800 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
    + 2012-06-19 15:57 . 2012-06-19 15:57 21167616 c:\windows\assembly\NativeImages_v4.0.30319_32\KNFB.Reader\b5d969b81d7809970f6a58c0df3ebafe\KNFB.Reader.ni.exe
    + 2012-01-14 05:04 . 2012-01-14 05:04 24663552 c:\windows\assembly\NativeImages_v2.0.50727_64\Temp\ZAPEAEE.tmp\ehshell.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 10624512 c:\windows\assembly\NativeImages_v2.0.50727_64\System\c40ec0f4cd203c880298f94c0427dd54\System.ni.dll
    + 2012-06-15 16:43 . 2012-06-15 16:43 17383424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\dc5bb74eefdbf954cdfb70dd534d5564\System.Windows.Forms.ni.dll
    + 2012-06-15 16:44 . 2012-06-15 16:44 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\95f38e7485bbe2b73b6055c45196fedd\System.Web.ni.dll
    + 2012-05-16 22:33 . 2012-05-16 22:33 23913984 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\f74b2d1b8cf279ff6bfe479f79e70fe9\System.ServiceModel.ni.dll
    + 2012-05-16 22:35 . 2012-05-16 22:35 11900928 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\00c4a761d0a5cafc00f34d763fe76ac4\System.Management.Automation.ni.dll
    + 2012-06-15 16:45 . 2012-06-15 16:45 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\582144c0ee317038621aebc626187b56\System.Design.ni.dll
    + 2012-05-16 22:36 . 2012-05-16 22:36 13760000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\daaff9fe9c85fc171d426a3cb6766dbb\System.Data.Entity.ni.dll
    + 2012-06-15 16:44 . 2012-06-15 16:44 19198464 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\47054c4d5b7e522c21a9d57797410302\PresentationFramework.ni.dll
    + 2012-06-15 16:43 . 2012-06-15 16:43 16543232 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\3a9d13514a8c4c710fa5ce8e9b5393fe\PresentationCore.ni.dll
    + 2012-05-12 01:03 . 2012-05-12 01:03 15570944 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\f73f0a9c9a83dcd3ff428be509a7992f\mscorlib.ni.dll
    + 2012-06-19 02:18 . 2012-06-19 02:18 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\0c1f96a4136efe532bbb8eb91d3de300\ehshell.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 12436480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll
    + 2012-05-16 00:23 . 2012-05-16 00:23 17478656 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\107779ca2708d2b31b2e1560e47f6d15\System.ServiceModel.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll
    + 2012-06-15 16:47 . 2012-06-15 16:47 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
    + 2012-06-15 16:46 . 2012-06-15 16:46 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
    + 2012-05-12 01:07 . 2012-05-12 01:07 11492864 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Steam"="c:\program files (x86)\Steam\steam.exe" [2012-08-04 1353080]
    "Spotify Web Helper"="c:\users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-19 932528]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
    "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
    "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
    "RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
    "PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]
    "BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-29 75048]
    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-04-04 35736]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-11-13 421736]
    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jaureg.exe" [2012-01-18 239336]
    .
    c:\users\Wilson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
    R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
    R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/11/03 17:32;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
    R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
    R3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
    R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
    R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-07-19 282624]
    R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-07-19 59904]
    R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-22 113120]
    R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-21 98688]
    R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
    R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
    R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
    R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-08-02 51712]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-02 1255736]
    R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
    S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
    S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
    S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
    S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
    S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
    S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-08 1166848]
    S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
    S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
    S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
    S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
    S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
    S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
    S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
    S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
    S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [2011-08-03 8604672]
    S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
    S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-10-26 406632]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - CLKMDRV10_9EC60124
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-08-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2657531003-3759727383-2673836086-1000Core.job
    - c:\users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-01 02:37]
    .
    2012-08-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2657531003-3759727383-2673836086-1000UA.job
    - c:\users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-01 02:37]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
    "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
    "IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
    "BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
    "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-05-27 1128448]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
    "Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
    TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
    FF - ProfilePath - c:\users\Wilson\AppData\Roaming\Mozilla\Firefox\Profiles\0j64ngo3.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - user.js: general.useragent.extra.brc -
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
    "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
    @Denied: (A) (Everyone)
    "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
    @Denied: (A) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
    "Key"="ActionsPane3"
    "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2012-08-09 10:49:07
    ComboFix-quarantined-files.txt 2012-08-09 14:49
    ComboFix2.txt 2011-12-18 19:25
    ComboFix3.txt 2011-12-18 05:40
    .
    Pre-Run: 506,718,015,488 bytes free
    Post-Run: 507,925,405,696 bytes free
    .
    - - End Of File - - D85604AB2781CA8B4B712F95391BA8A6
     
  8. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    Hey its been a while since you responded am i still being helped?
     
  9. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi there, yes you are, sorry for the delay.

    I have been quite busy the last few days and forgot about this thread. I have posted my recommendation to my instructor and he will confirm it soon and I will post it here after.
     
  10. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi there. Sorry for the delay.

    Please run an online scan to check whether there is infection still present on your machine.

    Run ESET Online Scan

    1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
      ESET OnlineScan
    2. Click the [​IMG] button.
    3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
      1. Click on [​IMG] to download the ESET Smart Installer. Save it to your desktop.
      2. Double click on the [​IMG] icon on your desktop.
    4. Check [​IMG]
    5. Click the [​IMG] button.
    6. Accept any security warnings from your browser.
    7. Check [​IMG]
    8. Push the Start button.
    9. Make sure that the option Remove found threats is unticked, and the option Scan unwanted applications is checked
    10. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    11. When the scan completes, push [​IMG]
    12. Push [​IMG], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    13. Push the [​IMG] button.
    14. Push [​IMG]
    You can refer to this animation by neomage if needed.

    Also, are you still getting redirects on Firefox?
     
  11. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    C:\Qoobox\Quarantine\C\Users\Wilson\AppData\Roaming\Mozilla\Firefox\Profiles\0j64ngo3.default\extensions\{7e4c8b61-1bf3-4354-b383-e164735cd4f9}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan
    C:\Users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}\chrome\content\browser.xul JS/Redirector.NIQ trojan

    Eset found some threats, but i didn't remove them yet. I'm still getting redirects atm.
     
  12. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi. Sorry for the delay. We need to use Combofix to remove a file.

    Disable any antivirus/antimalware/firewall realtime protection or script blocking in the same way you did previously before running combofix & remember to re-enable it when it has finished

    • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
      Code:
      ClearJavaCache::
      
      File::
      C:\Users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}\chrome\content\browser.xul
      
    • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

      [​IMG]
    • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
    • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
    • When finished, it shall produce a log for you at C:\ComboFix.txt.
    • Copy and paste the contents of the log in your next reply.
    CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

    Also, please tell me if you are still being redirected after performing the above and the browser you are using.
     
  13. beyondthefeel

    beyondthefeel Thread Starter

    Joined:
    Aug 5, 2012
    Messages:
    7
    ComboFix 12-08-17.03 - Wilson 08/18/2012 9:50.6.4 - x64
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6051.4469 [GMT -4:00]
    Running from: c:\users\Wilson\Downloads\ComboFix.exe
    Command switches used :: c:\users\Wilson\Desktop\CFScript.txt
    AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
    SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Created a new restore point
    .
    FILE ::
    "c:\users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}\chrome\content\browser.xul"
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}\chrome\content\browser.xul
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-07-18 to 2012-08-18 )))))))))))))))))))))))))))))))
    .
    .
    2012-08-18 13:55 . 2012-08-18 13:55 -------- d-----w- c:\users\Public\AppData\Local\temp
    2012-08-18 13:55 . 2012-08-18 13:55 -------- d-----w- c:\users\Default\AppData\Local\temp
    2012-08-17 14:59 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{FE990BF6-BBD6-42B9-9144-610BC290CD2F}\mpengine.dll
    2012-08-16 14:57 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2012-08-16 14:54 . 2012-07-06 20:07 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
    2012-08-15 14:20 . 2012-05-05 08:36 503808 ----a-w- c:\windows\system32\srcore.dll
    2012-08-15 14:20 . 2012-05-05 07:46 43008 ----a-w- c:\windows\SysWow64\srclient.dll
    2012-08-15 14:20 . 2012-02-11 06:43 751104 ----a-w- c:\windows\system32\win32spl.dll
    2012-08-15 14:20 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
    2012-08-15 14:20 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
    2012-08-15 14:20 . 2012-02-11 05:43 492032 ----a-w- c:\windows\SysWow64\win32spl.dll
    2012-08-15 14:20 . 2012-07-04 22:16 73216 ----a-w- c:\windows\system32\netapi32.dll
    2012-08-15 14:20 . 2012-07-04 22:13 59392 ----a-w- c:\windows\system32\browcli.dll
    2012-08-15 14:20 . 2012-07-04 22:13 136704 ----a-w- c:\windows\system32\browser.dll
    2012-08-15 14:20 . 2012-07-04 21:14 41984 ----a-w- c:\windows\SysWow64\browcli.dll
    2012-08-15 14:20 . 2012-07-18 18:15 3148800 ----a-w- c:\windows\system32\win32k.sys
    2012-08-15 14:20 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll
    2012-08-14 01:20 . 2012-08-14 01:20 -------- d-----w- c:\program files (x86)\ESET
    2012-07-30 00:35 . 2012-07-30 00:35 476976 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
    2012-07-30 00:34 . 2012-07-30 00:34 -------- d-----w- c:\program files (x86)\Java
    2012-07-28 15:05 . 2012-07-28 15:06 -------- d-----w- c:\programdata\SUPERSetup
    2012-07-26 15:41 . 2012-07-26 15:41 -------- d-----w- c:\users\Wilson\AppData\Local\{88646415-D730-11E1-8270-B8AC6F996F26}
    2012-07-26 14:45 . 2012-07-26 14:45 -------- d-----w- c:\users\Wilson\AppData\Local\{88643238-D730-11E1-8270-B8AC6F996F26}
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----r- c:\users\Wilson\Podcasts
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\ko-KR
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\ms-MY
    2012-07-23 21:26 . 2012-07-23 21:26 -------- d-----w- c:\windows\system32\drivers\UMDF\id-ID
    2012-07-23 21:24 . 2012-07-23 21:26 -------- d-----w- c:\program files\Zune
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-07-30 00:35 . 2011-11-03 21:49 472880 ----a-w- c:\windows\SysWow64\deployJava1.dll
    2012-07-03 17:46 . 2011-12-17 22:11 24904 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-06-09 05:43 . 2012-07-12 00:59 14172672 ----a-w- c:\windows\system32\shell32.dll
    2012-06-06 12:49 . 2012-06-06 12:49 1070152 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
    2012-06-06 06:06 . 2012-07-12 00:59 2004480 ----a-w- c:\windows\system32\msxml6.dll
    2012-06-06 06:06 . 2012-07-12 00:59 1881600 ----a-w- c:\windows\system32\msxml3.dll
    2012-06-06 06:02 . 2012-07-12 00:59 1133568 ----a-w- c:\windows\system32\cdosys.dll
    2012-06-06 05:05 . 2012-07-12 00:59 1390080 ----a-w- c:\windows\SysWow64\msxml6.dll
    2012-06-06 05:05 . 2012-07-12 00:59 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
    2012-06-06 05:03 . 2012-07-12 00:59 805376 ----a-w- c:\windows\SysWow64\cdosys.dll
    2012-06-02 22:19 . 2012-06-21 14:17 38424 ----a-w- c:\windows\system32\wups.dll
    2012-06-02 22:19 . 2012-06-21 14:17 2428952 ----a-w- c:\windows\system32\wuaueng.dll
    2012-06-02 22:19 . 2012-06-21 14:17 57880 ----a-w- c:\windows\system32\wuauclt.exe
    2012-06-02 22:19 . 2012-06-21 14:17 44056 ----a-w- c:\windows\system32\wups2.dll
    2012-06-02 22:19 . 2012-06-21 14:17 701976 ----a-w- c:\windows\system32\wuapi.dll
    2012-06-02 22:15 . 2012-06-21 14:17 2622464 ----a-w- c:\windows\system32\wucltux.dll
    2012-06-02 22:15 . 2012-06-21 14:17 99840 ----a-w- c:\windows\system32\wudriver.dll
    2012-06-02 19:19 . 2012-06-21 14:16 186752 ----a-w- c:\windows\system32\wuwebv.dll
    2012-06-02 19:15 . 2012-06-21 14:16 36864 ----a-w- c:\windows\system32\wuapp.exe
    2012-06-02 05:50 . 2012-07-12 00:59 458704 ----a-w- c:\windows\system32\drivers\cng.sys
    2012-06-02 05:48 . 2012-07-12 00:59 95600 ----a-w- c:\windows\system32\drivers\ksecdd.sys
    2012-06-02 05:48 . 2012-07-12 00:59 151920 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
    2012-06-02 05:45 . 2012-07-12 00:59 340992 ----a-w- c:\windows\system32\schannel.dll
    2012-06-02 05:44 . 2012-07-12 00:59 307200 ----a-w- c:\windows\system32\ncrypt.dll
    2012-06-02 04:40 . 2012-07-12 00:59 22016 ----a-w- c:\windows\SysWow64\secur32.dll
    2012-06-02 04:40 . 2012-07-12 00:59 225280 ----a-w- c:\windows\SysWow64\schannel.dll
    2012-06-02 04:39 . 2012-07-12 00:59 219136 ----a-w- c:\windows\SysWow64\ncrypt.dll
    2012-06-02 04:34 . 2012-07-12 00:59 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot_2012-08-17_02.53.07 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2010-11-21 03:09 . 2012-08-17 00:58 54910 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2010-11-21 03:09 . 2012-08-18 13:39 54910 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
    - 2009-07-14 05:10 . 2012-08-17 00:58 39008 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2009-07-14 05:10 . 2012-08-18 13:39 39008 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    - 2011-12-01 02:32 . 2012-08-15 20:56 11904 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2657531003-3759727383-2673836086-1000_UserData.bin
    + 2011-12-01 02:32 . 2012-08-18 00:20 11904 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2657531003-3759727383-2673836086-1000_UserData.bin
    - 2011-12-01 02:33 . 2012-07-19 03:11 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2011-12-01 02:33 . 2012-08-17 23:31 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2011-12-01 02:33 . 2012-07-19 03:11 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2011-12-01 02:33 . 2012-08-17 23:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-07-14 04:54 . 2012-07-19 03:11 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-07-14 04:54 . 2012-08-17 23:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2012-08-17 00:56 . 2012-08-17 00:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2012-08-18 13:37 . 2012-08-18 13:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2012-08-17 00:56 . 2012-08-17 00:56 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2012-08-18 13:37 . 2012-08-18 13:37 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-12-02 22:14 . 2012-08-17 22:06 235674 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
    + 2011-12-01 22:11 . 2012-08-17 23:31 260616 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
    - 2009-07-14 02:36 . 2012-08-16 00:35 662446 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2012-08-18 00:22 662446 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2012-08-18 00:22 122242 c:\windows\system32\perfc009.dat
    - 2009-07-14 02:36 . 2012-08-16 00:35 122242 c:\windows\system32\perfc009.dat
    - 2009-07-14 05:01 . 2012-08-16 15:14 365408 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2009-07-14 05:01 . 2012-08-18 04:07 365408 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2011-12-01 04:09 . 2012-08-18 04:07 29455540 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2657531003-3759727383-2673836086-1000-8192.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Steam"="c:\program files (x86)\Steam\steam.exe" [2012-08-04 1353080]
    "Spotify Web Helper"="c:\users\Wilson\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-19 932528]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2011-04-13 503942]
    "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-11-06 283160]
    "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
    "RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
    "PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]
    "BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-29 75048]
    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-04-04 35736]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-11-13 421736]
    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jaureg.exe" [2012-01-18 239336]
    .
    c:\users\Wilson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
    R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
    R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/11/03 17:32;c:\program files (x86)\Cyberlink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
    R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
    R3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [2011-05-19 51712]
    R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
    R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2011-07-19 282624]
    R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2011-07-19 59904]
    R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]
    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-22 113120]
    R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-21 98688]
    R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
    R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-10-30 250984]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
    R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
    R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-08-02 51712]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-02 1255736]
    R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2011-08-05 306400]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
    S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
    S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
    S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-11 140672]
    S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
    S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
    S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-08 1166848]
    S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]
    S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
    S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
    S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
    S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2011-01-20 176096]
    S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
    S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]
    S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
    S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [2011-08-03 8604672]
    S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-10 80384]
    S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-10 181248]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-10-26 406632]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - CLKMDRV10_9EC60124
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-08-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2657531003-3759727383-2673836086-1000Core.job
    - c:\users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-01 02:37]
    .
    2012-08-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2657531003-3759727383-2673836086-1000UA.job
    - c:\users\Wilson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-01 02:37]
    .
    .
    --------- X64 Entries -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
    "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
    "IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
    "BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
    "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-05-27 1128448]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168]
    "Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
    TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
    FF - ProfilePath - c:\users\Wilson\AppData\Roaming\Mozilla\Firefox\Profiles\0j64ngo3.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - user.js: general.useragent.extra.brc -
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
    "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
    @Denied: (A) (Everyone)
    "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
    @Denied: (A) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
    "Key"="ActionsPane3"
    "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2012-08-18 09:57:20
    ComboFix-quarantined-files.txt 2012-08-18 13:57
    ComboFix2.txt 2012-08-17 03:04
    ComboFix3.txt 2012-08-17 02:54
    ComboFix4.txt 2012-08-09 14:49
    ComboFix5.txt 2012-08-18 13:48
    .
    Pre-Run: 503,172,739,072 bytes free
    Post-Run: 504,568,836,096 bytes free
    .
    - - End Of File - - 0465220A0C1DCE3FBB1C167E1D0FA425
     
  14. jimbo100

    jimbo100 Malware Trainee

    Joined:
    Jul 1, 2011
    Messages:
    185
    Hi there,

    Are you still being redirected in all the browsers after running the CFscript?
     
  15. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1063936