1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Virus has HiJacked User Account

Discussion in 'Virus & Other Malware Removal' started by Karl-TX, Dec 10, 2011.

Thread Status:
Not open for further replies.
  1. Karl-TX

    Karl-TX Thread Starter

    Joined:
    Dec 10, 2011
    Messages:
    2
    Browseing a website i suddenly had two warnings from McAfee pop up about an IP trying to access my computer, then suddendly i had many pop-ups claiming my HD was full and my RAM was maxed out. It wouldnt let me do anything so i had to reboot.

    Issues:
    -I reboot and the computer is extremely slow
    -non of my start up's load
    -cannot access the run command, or the control panel they are both gone
    -all my desktop items are gone
    -the only thing avaliable is notepad
    -i cant access any of my files or programs, from the menu or anywhere else

    However, i know the files are there, i have since tried to fix the issue myself yet im still "locked out". Im currently writing this from another user account i created that seems to work fine, except i cant access my main user account, i cant get to any of the files from this account either. I somehow lack the "administrative rights". I have run several anti-virus/malware programs, i have run combofix as well.

    It seems that i have been able to remove the virus, the CPU isnt running at 100% now on the secondary account i made and even when i log into my main it runs better but i still have all the above issues.

    HiJackThis Log:

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 8:10:43 PM, on 12/10/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
    C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\ATI\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\ATI\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Documents and Settings\NEWZ\Desktop\HijackThis.exe
    C:\Program Files\internet explorer\iexplore.exe
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: (no name) - {074C1DC5-9320-4A9A-947D-C042949C6216} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll (file missing)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111210104227.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: (no name) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - (no file)
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\mcsniepl.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
    O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
    O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
    O23 - Service: WDFMEService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
    O23 - Service: WDRulesService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
    --
    End of file - 10330 bytes

    DDS LOG:

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702
    Run by NEWZ at 20:11:06 on 2011-12-10
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2041 [GMT -6:00]
    .
    AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
    FW: McAfee Firewall *Enabled*
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
    C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\System32\DLA\DLACTRLW.EXE
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\ATI\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\ATI\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Documents and Settings\NEWZ\Desktop\HijackThis.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    .
    ============== Pseudo HJT Report ===============
    .
    uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    BHO: {074C1DC5-9320-4A9A-947D-C042949C6216} - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
    BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
    BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20111210104227.dll
    BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
    BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
    TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
    TB: {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - No File
    TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [SigmatelSysTrayApp] stsystra.exe
    mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
    mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
    mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
    mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
    mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
    mRun: [StartCCC] "c:\program files\ati\ati.ace\core-static\CLIStart.exe" MSRun
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
    mRunOnce: [Malwarebytes' Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
    IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    TCP: DhcpNameServer = 192.168.1.254
    TCP: Interfaces\{1AF6970A-04AC-4CA0-8A86-DB0C5B70ABDE} : DhcpNameServer = 192.168.1.254
    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\McSnIePl.dll
    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
    Notify: AtiExtEvent - Ati2evxx.dll
    Notify: WB - c:\program files\alienguise\fastload.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath -
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2010-4-14 464176]
    R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-6-26 89792]
    R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-12-10 366152]
    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-6-26 214904]
    R2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-6-26 214904]
    R2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-6-26 214904]
    R2 McProxy;McAfee Proxy Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-6-26 214904]
    R2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-6-26 166288]
    R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-6-26 160608]
    R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\common files\mcafee\systemcore\mfevtps.exe [2010-6-26 150856]
    R2 WDDMService;WDDMService;c:\program files\western digital\wd smartware\WDDMService.exe [2011-6-29 263056]
    R2 WDFMEService;WDFMEService;c:\program files\western digital\wd smartware\WDFME.exe [2011-6-29 1592208]
    R2 WDRulesService;WDRulesService;c:\program files\western digital\wd smartware\WDRulesEngine.exe [2011-6-29 1091984]
    R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-6-26 57600]
    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-12-10 22216]
    R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-6-26 180816]
    R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2010-6-26 59456]
    R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-6-26 338176]
    R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-6-26 83856]
    R4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-12-10 41272]
    S0 nielprt;Nielsen Patch Service;c:\windows\system32\drivers\nielprt.sys --> c:\windows\system32\drivers\nielprt.sys [?]
    S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\eaglexnt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
    S3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\drivers\ivusb.sys --> c:\windows\system32\drivers\ivusb.sys [?]
    S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-6-26 83856]
    S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-6-26 87656]
    S3 NielGfx;Nielsen USB GFX;c:\windows\system32\drivers\nielgfx.sys --> c:\windows\system32\drivers\nielgfx.sys [?]
    S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2011-8-7 11520]
    .
    =============== Created Last 30 ================
    .
    2011-12-11 00:58:36 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2011-12-11 00:57:48 -------- d-----w- c:\documents and settings\newz\application data\Malwarebytes
    2011-12-11 00:57:32 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-12-10 17:36:21 -------- d-sh--w- c:\documents and settings\newz\PrivacIE
    2011-12-10 17:34:11 -------- d-----w- c:\documents and settings\newz\local settings\application data\ATI
    2011-12-10 17:33:51 -------- d-sh--w- c:\documents and settings\newz\IETldCache
    2011-12-10 01:15:22 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
    2011-12-10 01:07:34 -------- d-----w- c:\documents and settings\all users\application data\MFAData
    .
    ==================== Find3M ====================
    .
    2011-12-06 14:32:35 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-15 19:16:16 9608 ----a-w- c:\windows\system32\drivers\mfeclnk.sys
    2011-10-15 19:16:16 89792 ----a-w- c:\windows\system32\drivers\mfetdi2k.sys
    2011-10-15 19:16:16 87656 ----a-w- c:\windows\system32\drivers\mferkdet.sys
    2011-10-15 19:16:16 83856 ----a-w- c:\windows\system32\drivers\mfendisk.sys
    2011-10-15 19:16:16 59456 ----a-w- c:\windows\system32\drivers\mfebopk.sys
    2011-10-15 19:16:16 57600 ----a-w- c:\windows\system32\drivers\cfwids.sys
    2011-10-15 19:16:16 464176 ----a-w- c:\windows\system32\drivers\mfehidk.sys
    2011-10-15 19:16:16 338176 ----a-w- c:\windows\system32\drivers\mfefirek.sys
    2011-10-15 19:16:16 180816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
    2011-10-15 19:16:16 121256 ----a-w- c:\windows\system32\drivers\mfeapfk.sys
    2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 16:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 16:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 16:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    .
    ============= FINISH: 20:19:28.48 ===============

    COMBOFIX LOG:

    ComboFix 11-12-10.01 - NEWZ 12/10/2011 12:15:00.2.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3070.2452 [GMT -6:00]
    Running from: c:\documents and settings\NEWZ\Desktop\ComboFix.exe
    AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
    FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\CSC\d6
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-11-10 to 2011-12-10 )))))))))))))))))))))))))))))))
    .
    .
    2011-12-10 18:01 . 2011-12-10 18:01 -------- d-----w- c:\windows\LastGood
    2011-12-10 17:31 . 2011-12-10 17:36 -------- d-----w- c:\documents and settings\NEWZ
    2011-12-10 01:15 . 2011-12-10 01:15 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
    2011-12-10 01:13 . 2011-12-10 18:02 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG2012
    2011-12-10 01:12 . 2011-12-10 01:12 -------- d-----w- c:\program files\AVG
    2011-12-10 01:07 . 2011-12-10 18:04 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
    2011-11-16 03:56 . 2011-11-16 03:56 -------- d-----w- c:\program files\Microsoft Works
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-12-06 14:32 . 2011-06-29 02:50 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-15 19:16 . 2010-06-27 01:41 9608 ----a-w- c:\windows\system32\drivers\mfeclnk.sys
    2011-10-15 19:16 . 2010-06-27 01:41 89792 ----a-w- c:\windows\system32\drivers\mfetdi2k.sys
    2011-10-15 19:16 . 2010-06-27 01:41 87656 ----a-w- c:\windows\system32\drivers\mferkdet.sys
    2011-10-15 19:16 . 2010-06-27 01:41 83856 ----a-w- c:\windows\system32\drivers\mfendisk.sys
    2011-10-15 19:16 . 2010-06-27 01:41 59456 ----a-w- c:\windows\system32\drivers\mfebopk.sys
    2011-10-15 19:16 . 2010-06-27 01:41 57600 ----a-w- c:\windows\system32\drivers\cfwids.sys
    2011-10-15 19:16 . 2010-06-27 01:41 338176 ----a-w- c:\windows\system32\drivers\mfefirek.sys
    2011-10-15 19:16 . 2010-06-27 01:41 180816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
    2011-10-15 19:16 . 2010-04-14 17:50 464176 ----a-w- c:\windows\system32\drivers\mfehidk.sys
    2011-10-15 19:16 . 2010-04-14 17:50 121256 ----a-w- c:\windows\system32\drivers\mfeapfk.sys
    2011-10-10 14:22 . 2010-06-08 21:31 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06 . 2004-08-04 10:00 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 16:41 . 2008-07-30 00:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 16:41 . 2004-08-04 10:00 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 16:41 . 2004-08-04 10:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    2011-11-12 06:21 . 2011-06-04 19:23 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    2011-04-14 19:01 . 2011-06-05 08:48 24376 ----a-w- c:\program files\mozilla firefox\components\Scriptff.dll
    .
    .
    ((((((((((((((((((((((((((((( [email protected]_15.54.24 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-12-10 17:31 . 2011-12-10 17:31 16384 c:\windows\Temp\Perflib_Perfdata_734.dat
    + 2010-06-12 17:07 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
    - 2010-06-12 17:07 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
    + 2011-10-13 03:46 . 2010-12-15 00:51 41984 c:\windows\system32\ReinstallBackups\0026\DriverFiles\usbaapl.sys
    + 2004-08-04 10:00 . 2011-11-07 17:15 72274 c:\windows\system32\perfc009.dat
    - 2006-03-04 03:33 . 2011-02-22 23:06 66560 c:\windows\system32\mshtmled.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 66560 c:\windows\system32\mshtmled.dll
    + 2009-03-08 09:31 . 2011-08-22 23:48 55296 c:\windows\system32\msfeedsbs.dll
    - 2009-03-08 09:31 . 2011-02-22 23:06 55296 c:\windows\system32\msfeedsbs.dll
    - 2004-08-04 10:00 . 2009-06-25 18:36 95744 c:\windows\system32\mqsec.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 95744 c:\windows\system32\mqsec.dll
    + 2010-06-12 03:58 . 2011-10-11 03:31 70512 c:\windows\system32\mlfcache.dat
    - 2004-08-04 10:00 . 2011-02-22 23:06 43520 c:\windows\system32\licmgr10.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 43520 c:\windows\system32\licmgr10.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 25600 c:\windows\system32\jsproxy.dll
    + 2011-08-08 01:23 . 2011-02-16 22:53 14464 c:\windows\system32\DRVSTORE\wdcsam_F5ECA3724132FF2217E9617E72C83E990C29DB1D\wdcsam64.sys
    + 2011-08-08 01:23 . 2011-02-16 22:52 11520 c:\windows\system32\DRVSTORE\wdcsam_F5ECA3724132FF2217E9617E72C83E990C29DB1D\wdcsam.sys
    + 2011-10-13 03:46 . 2011-08-02 22:38 42496 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaapl.sys
    + 2011-10-13 03:46 . 2011-08-02 22:38 18432 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\netaapl.sys
    - 2008-05-06 21:06 . 2009-02-13 17:02 11520 c:\windows\system32\drivers\wdcsam.sys
    + 2011-08-08 01:23 . 2011-02-16 22:52 11520 c:\windows\system32\drivers\wdcsam.sys
    + 2010-06-10 03:22 . 2011-08-02 22:38 42496 c:\windows\system32\drivers\usbaapl.sys
    + 2004-08-04 10:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2011-08-31 04:05 . 2011-08-31 04:05 73064 c:\windows\system32\dnssd.dll
    + 2011-08-31 04:05 . 2011-08-31 04:05 83816 c:\windows\system32\dns-sd.exe
    - 2010-06-11 04:37 . 2011-02-22 23:06 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2010-06-11 04:37 . 2011-08-22 23:48 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 91648 c:\windows\system32\dllcache\xactsrv.dll
    + 2004-08-04 00:56 . 2008-04-14 00:12 52736 c:\windows\system32\dllcache\wzcsapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 18432 c:\windows\system32\dllcache\wtsapi32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 22528 c:\windows\system32\dllcache\wsock32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 19456 c:\windows\system32\dllcache\wshtcpip.dll
    - 2008-05-09 10:53 . 2008-05-09 10:53 90112 c:\windows\system32\dllcache\wshext.dll
    + 2004-08-04 10:00 . 2008-05-09 10:53 90112 c:\windows\system32\dllcache\wshext.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 19968 c:\windows\system32\dllcache\ws2help.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 82432 c:\windows\system32\dllcache\ws2_32.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 95232 c:\windows\system32\dllcache\wmiutils.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\winsta.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 17408 c:\windows\system32\dllcache\winshfhc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 99328 c:\windows\system32\dllcache\winscard.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 16896 c:\windows\system32\dllcache\winrnr.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 32256 c:\windows\system32\dllcache\winipsec.dll
    + 2010-06-08 21:42 . 2008-04-13 19:17 83072 c:\windows\system32\dllcache\wdmaud.sys
    + 2004-08-04 00:56 . 2008-04-14 00:12 23552 c:\windows\system32\dllcache\wdmaud.drv
    + 2004-08-04 10:00 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    - 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\system32\dllcache\wdigest.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 43520 c:\windows\system32\dllcache\wbemsvc.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\wbemprox.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 71680 c:\windows\system32\dllcache\wbemcons.dll
    - 2010-12-15 23:39 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    + 2010-06-08 21:31 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    + 2004-08-04 10:00 . 2008-04-13 18:41 52352 c:\windows\system32\dllcache\volsnap.sys
    + 2010-06-10 02:49 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\vfwwdm32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\version.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 26112 c:\windows\system32\dllcache\vdmdbg.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 50176 c:\windows\system32\dllcache\utilman.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 26112 c:\windows\system32\dllcache\userinit.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 16896 c:\windows\system32\dllcache\usbmon.dll
    + 2004-08-04 10:00 . 2008-04-13 18:45 59520 c:\windows\system32\dllcache\usbhub.sys
    + 2010-06-10 02:49 . 2008-04-13 18:45 32128 c:\windows\system32\dllcache\usbccgp.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 18432 c:\windows\system32\dllcache\ups.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 13824 c:\windows\system32\dllcache\uniplat.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 74240 c:\windows\system32\dllcache\unimdmat.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 26624 c:\windows\system32\dllcache\udhisapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 50688 c:\windows\system32\dllcache\twain_32.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 93696 c:\windows\system32\dllcache\tscfgwmi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 73216 c:\windows\system32\dllcache\tlntsvr.exe
    + 2004-08-04 10:00 . 2009-06-12 12:31 80896 c:\windows\system32\dllcache\tlntsess.exe
    - 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\system32\dllcache\tlntsess.exe
    - 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2004-08-04 10:00 . 2009-06-12 12:31 76288 c:\windows\system32\dllcache\telnet.exe
    + 2004-08-04 10:00 . 2008-04-13 19:00 19072 c:\windows\system32\dllcache\tdi.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 45568 c:\windows\system32\dllcache\tcpmon.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 33792 c:\windows\system32\dllcache\tabletoc.dll
    + 2010-06-08 21:42 . 2008-04-13 19:15 60800 c:\windows\system32\dllcache\sysaudio.sys
    + 2010-06-08 21:42 . 2008-04-13 18:45 56576 c:\windows\system32\dllcache\swmidi.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 14336 c:\windows\system32\dllcache\svchost.exe
    - 2009-10-21 05:38 . 2009-10-21 05:38 75776 c:\windows\system32\dllcache\strmfilt.dll
    + 2004-08-04 10:00 . 2009-10-21 05:38 75776 c:\windows\system32\dllcache\strmfilt.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 68096 c:\windows\system32\dllcache\sti.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 86528 c:\windows\system32\dllcache\stdprov.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 34816 c:\windows\system32\dllcache\ssdpapi.dll
    - 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2004-08-04 10:00 . 2010-08-27 05:57 99840 c:\windows\system32\dllcache\srvsvc.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 67584 c:\windows\system32\dllcache\srclient.dll
    + 2010-06-08 21:31 . 2008-04-13 18:36 73472 c:\windows\system32\dllcache\sr.sys
    + 2004-08-04 10:00 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    - 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 75264 c:\windows\system32\dllcache\spoolss.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\snmpapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 50688 c:\windows\system32\dllcache\smss.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 89600 c:\windows\system32\dllcache\smlogsvc.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 98304 c:\windows\system32\dllcache\slbiop.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 65024 c:\windows\system32\dllcache\shimeng.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 68096 c:\windows\system32\dllcache\shgina.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 25088 c:\windows\system32\dllcache\shfolder.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 39424 c:\windows\system32\dllcache\sens.dll
    - 2009-02-03 19:59 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    + 2004-08-04 10:00 . 2009-06-25 08:25 56832 c:\windows\system32\dllcache\secur32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 95744 c:\windows\system32\dllcache\scardsvr.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 69632 c:\windows\system32\dllcache\scarddlg.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 64000 c:\windows\system32\dllcache\samlib.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 33280 c:\windows\system32\dllcache\rundll32.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 44032 c:\windows\system32\dllcache\rtutils.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 92672 c:\windows\system32\dllcache\rsvpsp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 58880 c:\windows\system32\dllcache\resutils.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 11776 c:\windows\system32\dllcache\regsvr32.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 49664 c:\windows\system32\dllcache\regapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 35840 c:\windows\system32\dllcache\rcimlby.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 58368 c:\windows\system32\dllcache\rastapi.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 61952 c:\windows\system32\dllcache\rasqec.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 61440 c:\windows\system32\dllcache\rasman.dll
    - 2009-10-12 13:38 . 2009-10-12 13:38 79872 c:\windows\system32\dllcache\raschap.dll
    + 2004-08-04 10:00 . 2009-10-12 13:38 79872 c:\windows\system32\dllcache\raschap.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 76800 c:\windows\system32\dllcache\qutil.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 18944 c:\windows\system32\dllcache\qmgrprxy.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 23040 c:\windows\system32\dllcache\psapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 17408 c:\windows\system32\dllcache\powrprof.dll
    + 2004-08-04 00:56 . 2008-04-14 00:12 15360 c:\windows\system32\dllcache\pjlmon.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 24064 c:\windows\system32\dllcache\pidgen.dll
    + 2004-08-04 10:00 . 2008-04-13 18:36 68224 c:\windows\system32\dllcache\pci.sys
    + 2004-08-04 10:00 . 2008-04-13 18:40 19712 c:\windows\system32\dllcache\partmgr.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 84992 c:\windows\system32\dllcache\olepro32.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 65536 c:\windows\system32\dllcache\oledb32r.dll
    + 2004-08-04 10:00 . 2011-09-26 16:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2004-08-04 10:00 . 2008-04-13 18:46 61696 c:\windows\system32\dllcache\ohci1394.sys
    + 2004-08-04 10:00 . 2008-04-13 17:26 94208 c:\windows\system32\dllcache\odbcint.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 17408 c:\windows\system32\dllcache\ocmsn.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 67584 c:\windows\system32\dllcache\ocmanage.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 15360 c:\windows\system32\dllcache\ocgen.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 62976 c:\windows\system32\dllcache\ntoc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 44032 c:\windows\system32\dllcache\ntlanman.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 67072 c:\windows\system32\dllcache\ntdsapi.dll
    + 2004-08-04 10:00 . 2008-04-13 18:32 30848 c:\windows\system32\dllcache\npfs.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 69120 c:\windows\system32\dllcache\notepad.exe
    + 2004-08-03 22:58 . 2008-04-13 18:51 61824 c:\windows\system32\dllcache\nic1394.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 80896 c:\windows\system32\dllcache\netui0.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 11776 c:\windows\system32\dllcache\netrap.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 77312 c:\windows\system32\dllcache\netoc.dll
    + 2004-08-04 10:00 . 2008-04-13 18:56 34688 c:\windows\system32\dllcache\netbios.sys
    - 2010-12-15 23:40 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2004-08-04 10:00 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2004-08-04 10:00 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 36352 c:\windows\system32\dllcache\ncobjapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 53760 c:\windows\system32\dllcache\narrator.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 90624 c:\windows\system32\dllcache\mydocs.dll
    + 2010-06-08 21:30 . 2008-06-12 14:23 91648 c:\windows\system32\dllcache\mtxoci.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\system32\dllcache\mtxoci.dll
    + 2004-08-04 10:00 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2004-08-04 00:56 . 2009-11-27 17:11 17920 c:\windows\system32\dllcache\msyuv.dll
    - 2009-11-27 17:11 . 2009-11-27 17:11 17920 c:\windows\system32\dllcache\msyuv.dll
    + 2004-08-04 10:00 . 2008-04-13 18:30 61440 c:\windows\system32\dllcache\msvcrt40.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 57344 c:\windows\system32\dllcache\msvcirt.dll
    + 2004-08-03 23:07 . 2008-04-13 18:36 15488 c:\windows\system32\dllcache\mssmbios.sys
    - 2009-11-27 16:07 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2004-08-04 10:00 . 2009-11-27 16:07 11264 c:\windows\system32\dllcache\msrle32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 29696 c:\windows\system32\dllcache\mspatcha.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 15360 c:\windows\system32\dllcache\msisip.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 60416 c:\windows\system32\dllcache\msimn.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 78848 c:\windows\system32\dllcache\msiexec.exe
    - 2006-03-04 03:33 . 2011-02-22 23:06 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 15360 c:\windows\system32\dllcache\msgrocm.dll
    + 2004-08-04 10:00 . 2008-04-13 18:32 19072 c:\windows\system32\dllcache\msfs.sys
    + 2010-06-11 04:37 . 2011-08-22 23:48 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    - 2010-06-11 04:37 . 2011-02-22 23:06 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 90112 c:\windows\system32\dllcache\msdtcstp.dll
    + 2010-06-08 21:30 . 2008-06-12 14:23 58880 c:\windows\system32\dllcache\msdtclog.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\system32\dllcache\msdtclog.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 14336 c:\windows\system32\dllcache\msdmo.dll
    - 2008-06-24 16:43 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    + 2004-08-04 10:00 . 2008-06-24 16:43 74240 c:\windows\system32\dllcache\mscms.dll
    + 2004-08-04 10:00 . 2009-09-04 21:03 58880 c:\windows\system32\dllcache\msasn1.dll
    - 2009-09-04 21:03 . 2009-09-04 21:03 58880 c:\windows\system32\dllcache\msasn1.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 86016 c:\windows\system32\dllcache\msapsspc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 71680 c:\windows\system32\dllcache\msacm32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 95744 c:\windows\system32\dllcache\mqsec.dll
    - 2004-08-04 10:00 . 2009-06-25 18:36 95744 c:\windows\system32\dllcache\mqsec.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 87040 c:\windows\system32\dllcache\mprapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 59904 c:\windows\system32\dllcache\mpr.dll
    + 2004-08-04 10:00 . 2008-04-13 18:39 42368 c:\windows\system32\dllcache\mountmgr.sys
    + 2004-08-03 23:08 . 2008-04-13 19:00 30080 c:\windows\system32\dllcache\modem.sys
    + 2010-06-08 21:31 . 2008-04-14 00:12 32768 c:\windows\system32\dllcache\mnmsrvc.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 18944 c:\windows\system32\dllcache\midimap.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 22528 c:\windows\system32\dllcache\mfcsubs.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 16896 c:\windows\system32\dllcache\medctroc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 72704 c:\windows\system32\dllcache\magnify.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 13312 c:\windows\system32\dllcache\lsass.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 22016 c:\windows\system32\dllcache\lpk.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 75264 c:\windows\system32\dllcache\locator.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 97280 c:\windows\system32\dllcache\loadperf.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 19968 c:\windows\system32\dllcache\linkinfo.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 58880 c:\windows\system32\dllcache\licwmi.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-04 10:00 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    - 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
    + 2004-08-04 10:00 . 2008-04-13 18:39 14592 c:\windows\system32\dllcache\kbdhid.sys
    + 2004-08-04 10:00 . 2008-04-13 18:39 24576 c:\windows\system32\dllcache\kbdclass.sys
    + 2004-08-04 10:00 . 2011-08-22 23:48 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2004-08-04 00:56 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
    - 2009-11-27 16:07 . 2009-11-27 16:07 48128 c:\windows\system32\dllcache\iyuv_32.dll
    + 2010-06-08 21:31 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
    - 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
    + 2004-08-04 10:00 . 2008-04-13 18:36 37248 c:\windows\system32\dllcache\isapnp.sys
    + 2004-08-04 10:00 . 2008-04-14 00:11 94720 c:\windows\system32\dllcache\iphlpapi.dll
    + 2010-06-08 21:31 . 2008-04-13 16:22 48128 c:\windows\system32\dllcache\inetres.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 75264 c:\windows\system32\dllcache\inetpp.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 11264 c:\windows\system32\dllcache\icaapi.dll
    + 2004-08-04 10:00 . 2009-10-21 05:38 25088 c:\windows\system32\dllcache\httpapi.dll
    - 2009-10-21 05:38 . 2009-10-21 05:38 25088 c:\windows\system32\dllcache\httpapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 72704 c:\windows\system32\dllcache\hlink.dll
    + 2004-08-04 10:00 . 2008-04-13 18:45 10368 c:\windows\system32\dllcache\hidusb.sys
    + 2010-06-10 02:49 . 2008-04-14 00:11 21504 c:\windows\system32\dllcache\hidserv.dll
    + 2004-08-04 10:00 . 2008-04-13 18:45 24960 c:\windows\system32\dllcache\hidparse.sys
    + 2004-08-04 10:00 . 2008-04-13 18:45 36864 c:\windows\system32\dllcache\hidclass.sys
    + 2004-08-04 00:56 . 2008-04-14 00:11 20992 c:\windows\system32\dllcache\hid.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 10752 c:\windows\system32\dllcache\hh.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 32828 c:\windows\system32\dllcache\fp40ext.dll
    + 2004-08-04 10:00 . 2009-10-15 16:28 81920 c:\windows\system32\dllcache\fontsub.dll
    - 2010-06-12 17:09 . 2009-10-15 16:28 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 21504 c:\windows\system32\dllcache\feclient.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 80384 c:\windows\system32\dllcache\faultrep.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\system32\dllcache\eappprxy.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 30720 c:\windows\system32\dllcache\eapolqec.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 10752 c:\windows\system32\dllcache\dumprep.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 92672 c:\windows\system32\dllcache\dskquota.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 14336 c:\windows\system32\dllcache\drprov.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 26112 c:\windows\system32\dllcache\dot3api.dll
    + 2004-08-04 10:00 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    - 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2010-06-08 21:42 . 2008-04-13 18:45 52864 c:\windows\system32\dllcache\dmusic.sys
    + 2004-08-04 10:00 . 2008-04-13 18:40 36352 c:\windows\system32\dllcache\disk.sys
    + 2004-08-04 10:00 . 2008-04-14 00:11 68608 c:\windows\system32\dllcache\digest.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 59904 c:\windows\system32\dllcache\devenum.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 25088 c:\windows\system32\dllcache\defrag.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 27136 c:\windows\system32\dllcache\ddrawex.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 25088 c:\windows\system32\dllcache\davclnt.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 15360 c:\windows\system32\dllcache\ctfmon.exe
    - 2009-12-14 07:08 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2004-08-04 10:00 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 64512 c:\windows\system32\dllcache\cryptnet.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 33280 c:\windows\system32\dllcache\cryptdll.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 74752 c:\windows\system32\dllcache\cryptdlg.dll
    + 2004-08-04 00:56 . 2008-04-14 00:11 47104 c:\windows\system32\dllcache\cnbjmon.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 58368 c:\windows\system32\dllcache\clusapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 33280 c:\windows\system32\dllcache\clipsrv.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 64000 c:\windows\system32\dllcache\cleanmgr.exe
    + 2004-08-04 10:00 . 2008-04-13 19:16 49536 c:\windows\system32\dllcache\classpnp.sys
    + 2004-08-04 10:00 . 2008-04-14 00:09 16896 c:\windows\system32\dllcache\cfgmgr32.dll
    + 2004-08-04 10:00 . 2008-04-13 19:14 63744 c:\windows\system32\dllcache\cdfs.sys
    - 2010-06-09 13:18 . 2010-01-13 14:01 86016 c:\windows\system32\dllcache\cabview.dll
    + 2004-08-04 10:00 . 2010-01-13 14:01 86016 c:\windows\system32\dllcache\cabview.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 60416 c:\windows\system32\dllcache\cabinet.dll
    + 2004-08-04 10:00 . 2008-04-13 17:03 63488 c:\windows\system32\dllcache\browselc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 29184 c:\windows\system32\dllcache\batmeter.dll
    + 2004-08-04 10:00 . 2009-11-27 16:07 84992 c:\windows\system32\dllcache\avifil32.dll
    - 2009-11-27 16:07 . 2009-11-27 16:07 84992 c:\windows\system32\dllcache\avifil32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 62464 c:\windows\system32\dllcache\authz.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 30208 c:\windows\system32\dllcache\atmlib.dll
    + 2004-08-04 10:00 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
    - 2010-03-05 14:37 . 2010-03-05 14:37 65536 c:\windows\system32\dllcache\asycfilt.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 44544 c:\windows\system32\dllcache\alg.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 98304 c:\windows\system32\dllcache\actxprxy.dll
    + 2004-08-04 10:00 . 2008-04-13 18:46 53376 c:\windows\system32\dllcache\1394bus.sys
    + 2004-08-04 10:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
    - 2004-08-04 10:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll
    + 2011-06-05 18:01 . 2011-12-10 16:40 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2010-06-08 21:36 . 2011-12-10 16:40 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2010-06-08 21:36 . 2011-06-05 13:05 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2010-06-08 21:36 . 2011-06-05 13:05 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2011-06-05 18:01 . 2011-12-10 16:40 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat
    - 2010-09-23 20:55 . 2010-09-23 20:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    + 2011-07-08 19:00 . 2011-07-08 19:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2011-07-07 17:03 . 2011-07-07 17:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2011-07-07 18:09 . 2011-07-07 18:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2010-09-23 08:17 . 2010-09-23 08:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2011-07-07 18:09 . 2011-07-07 18:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    - 2010-09-23 08:17 . 2010-09-23 08:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2011-12-10 18:01 . 2011-09-13 12:30 32592 c:\windows\LastGood\system32\DRIVERS\avgrkx86.sys
    + 2011-12-10 18:01 . 2011-08-08 12:08 40016 c:\windows\LastGood\system32\DRIVERS\avgmfx86.sys
    + 2011-12-10 18:01 . 2011-10-04 12:21 16720 c:\windows\LastGood\system32\DRIVERS\AVGIDSShim.sys
    + 2011-12-10 18:01 . 2011-07-11 07:14 24272 c:\windows\LastGood\system32\DRIVERS\AVGIDSFilter.sys
    + 2011-12-10 18:01 . 2011-07-11 07:14 23120 c:\windows\LastGood\system32\DRIVERS\AVGIDSEH.sys
    + 2011-12-08 02:00 . 2011-12-08 02:00 30208 c:\windows\Installer\79e7d85.msi
    + 2011-10-13 03:19 . 2011-10-13 03:19 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
    + 2011-10-13 08:02 . 2011-06-23 18:36 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_47107ced\System.Drawing.Design.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_2d05acca\CustomMarshalers.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
    + 2011-06-28 08:06 . 2011-06-28 08:06 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\1492e9393417d6e91b5ddc746b5ef320\UIAutomationProvider.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\343c52b741531ce9ae874ea7508831a7\System.Windows.Presentation.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90\System.Web.DynamicData.Design.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\246110974e3c48733458819b07464b23\System.Web.DynamicData.Design.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ace861fe8dbf146c3e449abaa7691e9f\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
    + 2011-06-28 08:08 . 2011-06-28 08:08 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\177a17af98d803ab79006d6785706462\System.AddIn.Contract.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe
    + 2011-08-10 08:05 . 2011-08-10 08:05 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\40ee65aacd9d7472cd6f8dddbfca604b\PresentationFontCache.ni.exe
    + 2011-10-13 08:07 . 2011-10-13 08:07 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\12c424eed7ee0e9c017bf72ff09eb78c\PresentationCFFRasterizer.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f9c514544c8e23220493cd42a0e20678\Microsoft.Vsa.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\eaa8d72317e5b8047e413939cc71ffba\Microsoft.Vsa.ni.dll
    + 2011-06-28 08:08 . 2011-06-28 08:08 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\f5057c30d89ad8d99e38c946a68def9e\Microsoft.Build.Framework.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll
    + 2011-06-28 08:08 . 2011-06-28 08:08 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\623c05a555ac0719a1367f511d4a9270\Microsoft.Build.Framework.ni.dll
    + 2011-06-28 08:08 . 2011-06-28 08:08 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\c40d3caad8bff3c52db7e7562286406a\dfsvc.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe
    + 2011-06-28 08:07 . 2011-06-28 08:07 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d9228d58804dfd75fd92a4d12ffac8af\Accessibility.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2010-10-06 08:00 . 2010-10-06 08:00 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-08-24 08:00 . 2010-11-03 13:12 46080 c:\windows\$NtUninstallKB2570791$\tzchange.exe
    + 2011-08-24 08:00 . 2011-07-09 00:32 16896 c:\windows\$NtUninstallKB2570791$\spuninst\tzchange.dll
    + 2011-08-10 08:00 . 2008-04-13 18:57 10112 c:\windows\$NtUninstallKB2566454$\ndistapi.sys
    + 2011-10-13 08:06 . 2004-08-04 10:00 16896 c:\windows\$NtUninstallKB2564958$\oleaccrc.dll
    + 2011-07-13 08:03 . 2010-12-09 14:30 33280 c:\windows\$NtUninstallKB2507938$\csrsrv.dll
    + 2011-09-14 22:49 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll
    + 2011-09-14 22:49 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2616676\spmsg.dll
    + 2011-09-07 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll
    + 2011-09-07 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2607712\spmsg.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2592799\spmsg.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll
    + 2011-09-14 22:47 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll
    + 2011-09-14 22:47 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570947\spmsg.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570222\spmsg.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567680\spmsg.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2566454\spmsg.dll
    + 2011-08-10 07:21 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys
    + 2011-08-10 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2562937\spmsg.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll
    + 2011-07-13 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll
    + 2011-07-13 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2555917\spmsg.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893\spmsg.dll
    + 2011-11-10 06:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893-v2\update\spcustom.dll
    + 2011-11-10 06:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893-v2\spmsg.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544521-IE8\update\spcustom.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544521-IE8\spmsg.dll
    + 2011-06-29 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll
    + 2011-06-29 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2541763\spmsg.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276\spmsg.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2535512\spmsg.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2530548-IE8\update\spcustom.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2530548-IE8\spmsg.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 12800 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\xpshims.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 66560 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtmled.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 55296 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeedsbs.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 43520 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\licmgr10.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 25600 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\jsproxy.dll
    + 2011-07-13 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll
    + 2011-07-13 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507938\spmsg.dll
    + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503665\spmsg.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476490\spmsg.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 6656 c:\windows\system32\dllcache\wuauserv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 5632 c:\windows\system32\dllcache\wmi.dll
    - 2009-11-27 16:37 . 2009-11-27 16:07 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2001-08-17 22:36 . 2009-11-27 16:07 8704 c:\windows\system32\dllcache\tsbyuv.dll
    + 2010-06-08 21:42 . 2008-04-13 18:45 6272 c:\windows\system32\dllcache\splitter.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 5120 c:\windows\system32\dllcache\sfc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 7168 c:\windows\system32\dllcache\sensapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 5632 c:\windows\system32\dllcache\security.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 7680 c:\windows\system32\dllcache\rasadhlp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 8192 c:\windows\system32\dllcache\ntlsapi.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 4608 c:\windows\system32\dllcache\msimg32.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 6144 c:\windows\system32\dllcache\msdtc.exe
    + 2004-08-04 10:00 . 2008-04-14 00:09 3584 c:\windows\system32\dllcache\icmp.dll
    + 2010-06-08 21:42 . 2008-04-13 18:45 2944 c:\windows\system32\dllcache\drmkaud.sys
    + 2008-04-14 00:11 . 2008-04-14 00:11 9216 c:\windows\system32\dllcache\dot3dlg.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 5120 c:\windows\system32\dllcache\dllhost.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 8704 c:\windows\system32\dllcache\dciman32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 8192 c:\windows\system32\dllcache\d3d8thk.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 6144 c:\windows\system32\dllcache\csrss.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 5632 c:\windows\system32\dllcache\cisvc.exe
    + 2011-06-28 08:04 . 2011-08-10 08:04 5632 c:\windows\assembly\temp\KWMC2R2K2S\Microsoft.VisualC.Dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2011-06-28 08:04 . 2011-10-13 08:06 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2010-10-06 08:02 . 2011-04-15 08:04 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-05-14 06:17 . 2011-05-14 06:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
    + 2011-05-14 06:12 . 2011-05-14 06:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
    + 2011-05-14 06:11 . 2011-05-14 06:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll
    - 2004-08-04 10:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
    + 2004-08-04 10:00 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 916480 c:\windows\system32\wininet.dll
    - 2006-03-04 03:33 . 2011-02-22 23:06 916480 c:\windows\system32\wininet.dll
    - 2004-08-04 10:00 . 2009-03-08 09:34 105984 c:\windows\system32\url.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 105984 c:\windows\system32\url.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 170496 c:\windows\system32\Setup\msmqocm.dll
    + 2004-08-04 10:00 . 2011-04-29 17:25 151552 c:\windows\system32\schannel.dll
    + 2011-05-14 17:16 . 2011-07-03 19:14 266752 c:\windows\system32\PnkBstrB.exe
    - 2011-05-14 17:16 . 2011-05-15 22:49 266752 c:\windows\system32\PnkBstrB.exe
    + 2004-08-04 10:00 . 2011-11-07 17:15 444016 c:\windows\system32\perfh009.dat
    - 2004-08-04 10:00 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll
    + 2004-08-04 10:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 206848 c:\windows\system32\occache.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 206848 c:\windows\system32\occache.dll
    - 2006-03-04 03:33 . 2011-02-22 23:06 611840 c:\windows\system32\mstime.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 611840 c:\windows\system32\mstime.dll
    + 2009-03-08 09:32 . 2011-08-22 23:48 602112 c:\windows\system32\msfeeds.dll
    - 2009-03-08 09:32 . 2011-02-22 23:06 602112 c:\windows\system32\msfeeds.dll
    - 2004-08-04 10:00 . 2009-06-25 18:36 471552 c:\windows\system32\mqutil.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 471552 c:\windows\system32\mqutil.dll
    + 2011-12-06 14:32 . 2011-12-06 14:32 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe
    + 2006-03-04 03:33 . 2011-08-22 23:48 184320 c:\windows\system32\iepeers.dll
    - 2006-03-04 03:33 . 2011-02-22 23:06 184320 c:\windows\system32\iepeers.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 387584 c:\windows\system32\iedkcs32.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-04 10:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe
    - 2010-06-08 21:30 . 2008-04-14 00:13 139656 c:\windows\system32\drivers\rdpwd.sys
    + 2010-06-08 21:30 . 2011-06-24 14:10 139656 c:\windows\system32\drivers\rdpwd.sys
    - 2011-05-14 17:16 . 2011-05-15 22:49 140624 c:\windows\system32\drivers\PnkBstrK.sys
    + 2011-05-14 17:16 . 2011-07-03 19:14 140624 c:\windows\system32\drivers\PnkBstrK.sys
    + 2004-08-04 10:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys
    + 2004-08-04 10:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
    + 2004-08-04 10:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
    - 2004-08-04 10:00 . 2008-10-16 14:43 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 338432 c:\windows\system32\dllcache\zipfldr.dll
    + 2010-06-08 21:33 . 2008-04-13 17:39 689152 c:\windows\system32\dllcache\xpsp3res.dll
    + 2004-08-04 00:56 . 2008-04-14 00:12 483840 c:\windows\system32\dllcache\wzcsvc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 383488 c:\windows\system32\dllcache\wzcdlg.dll
    + 2004-08-04 10:00 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
    - 2008-05-08 11:24 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
    - 2010-06-11 22:27 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
    + 2010-06-08 21:30 . 2010-07-12 12:55 218112 c:\windows\system32\dllcache\wordpad.exe
    - 2010-06-12 17:09 . 2009-02-06 10:10 227840 c:\windows\system32\dllcache\wmiprvse.exe
    + 2010-06-08 21:30 . 2009-02-06 10:10 227840 c:\windows\system32\dllcache\wmiprvse.exe
    + 2010-06-08 21:30 . 2009-02-09 12:10 453120 c:\windows\system32\dllcache\wmiprvsd.dll
    - 2010-06-12 17:09 . 2009-02-09 12:10 453120 c:\windows\system32\dllcache\wmiprvsd.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 156672 c:\windows\system32\dllcache\wmipcima.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 126464 c:\windows\system32\dllcache\wmiapsrv.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 172032 c:\windows\system32\dllcache\wldap32.dll
    + 2004-08-04 10:00 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
    - 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\system32\dllcache\wkssvc.dll
    - 2010-06-09 13:45 . 2009-12-24 06:59 177664 c:\windows\system32\dllcache\wintrust.dll
    + 2004-08-04 10:00 . 2009-12-24 06:59 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-08-04 10:00 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 146432 c:\windows\system32\dllcache\winspool.drv
    + 2004-08-04 10:00 . 2008-04-14 00:12 176128 c:\windows\system32\dllcache\winmm.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 507904 c:\windows\system32\dllcache\winlogon.exe
    - 2006-03-04 03:33 . 2011-02-22 23:06 916480 c:\windows\system32\dllcache\wininet.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 916480 c:\windows\system32\dllcache\wininet.dll
    - 2008-12-16 12:30 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll
    + 2004-08-04 10:00 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 102400 c:\windows\system32\dllcache\win32spl.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 589312 c:\windows\system32\dllcache\wiashext.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 124416 c:\windows\system32\dllcache\wiadss.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 433664 c:\windows\system32\dllcache\wiaacmgr.exe
    + 2010-06-08 21:30 . 2008-04-14 00:12 178176 c:\windows\system32\dllcache\wbemdisp.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 214528 c:\windows\system32\dllcache\wbemcomn.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 175104 c:\windows\system32\dllcache\w32time.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 289792 c:\windows\system32\dllcache\vssvc.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 430592 c:\windows\system32\dllcache\vssapi.dll
    + 2010-06-08 21:31 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 218624 c:\windows\system32\dllcache\uxtheme.dll
    + 2004-08-04 10:00 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
    - 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\system32\dllcache\usp10.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 727040 c:\windows\system32\dllcache\userenv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 578560 c:\windows\system32\dllcache\user32.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 105984 c:\windows\system32\dllcache\url.dll
    - 2004-08-04 10:00 . 2009-03-08 09:34 105984 c:\windows\system32\dllcache\url.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 185856 c:\windows\system32\dllcache\upnphost.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 133632 c:\windows\system32\dllcache\upnp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 130048 c:\windows\system32\dllcache\tsoc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 347136 c:\windows\system32\dllcache\tourstrt.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 385536 c:\windows\system32\dllcache\themeui.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 295424 c:\windows\system32\dllcache\termsrv.dll
    - 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
    + 2004-08-04 10:00 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
    + 2004-08-04 10:00 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\tcpip.sys
    - 2008-06-20 11:51 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\tcpip.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 135680 c:\windows\system32\dllcache\taskmgr.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 249856 c:\windows\system32\dllcache\tapisrv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 181760 c:\windows\system32\dllcache\tapi32.dll
    - 2010-06-12 17:09 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-08-04 10:00 . 2010-08-27 08:02 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 990208 c:\windows\system32\dllcache\syssetup.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 713216 c:\windows\system32\dllcache\sxs.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 121856 c:\windows\system32\dllcache\stobject.dll
    + 2004-08-04 10:00 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    - 2010-06-12 17:10 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    + 2010-06-08 21:31 . 2008-04-14 00:12 239104 c:\windows\system32\dllcache\srrstr.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 250368 c:\windows\system32\dllcache\sptip.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 538624 c:\windows\system32\dllcache\spider.exe
    + 2010-06-08 21:30 . 2008-04-14 00:12 131584 c:\windows\system32\dllcache\sndrec32.exe
    + 2004-08-04 10:00 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
    - 2009-07-27 23:17 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
    - 2009-12-08 09:23 . 2009-12-08 09:23 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2006-03-04 03:33 . 2009-12-08 09:23 474112 c:\windows\system32\dllcache\shlwapi.dll
    + 2004-08-04 10:00 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    - 2011-01-21 14:44 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    + 2004-08-04 10:00 . 2008-04-13 17:03 549376 c:\windows\system32\dllcache\shdoclc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 140288 c:\windows\system32\dllcache\sfc_os.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 101376 c:\windows\system32\dllcache\setupqry.dll
    + 2004-08-04 10:00 . 2008-04-14 10:42 985088 c:\windows\system32\dllcache\setupapi.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 141312 c:\windows\system32\dllcache\sessmgr.exe
    - 2010-06-12 17:09 . 2009-02-06 11:11 110592 c:\windows\system32\dllcache\services.exe
    + 2004-08-04 10:00 . 2009-02-06 11:11 110592 c:\windows\system32\dllcache\services.exe
    + 2004-08-04 10:00 . 2008-05-09 10:53 172032 c:\windows\system32\dllcache\scrrun.dll
    - 2008-05-09 10:53 . 2008-05-09 10:53 172032 c:\windows\system32\dllcache\scrrun.dll
    - 2008-05-09 10:53 . 2008-05-09 10:53 180224 c:\windows\system32\dllcache\scrobj.dll
    + 2004-08-04 10:00 . 2008-05-09 10:53 180224 c:\windows\system32\dllcache\scrobj.dll
    + 2004-08-04 10:00 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 171008 c:\windows\system32\dllcache\sccsccp.dll
    + 2004-08-04 10:00 . 2011-02-09 13:53 270848 c:\windows\system32\dllcache\sbe.dll
    - 2011-02-09 13:53 . 2011-02-09 13:53 270848 c:\windows\system32\dllcache\sbe.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 380416 c:\windows\system32\dllcache\rstrui.exe
    + 2004-08-04 10:00 . 2008-04-13 17:37 208384 c:\windows\system32\dllcache\rsaenh.dll
    - 2010-06-12 17:09 . 2009-02-09 12:10 401408 c:\windows\system32\dllcache\rpcss.dll
    + 2004-08-04 10:00 . 2009-02-09 12:10 401408 c:\windows\system32\dllcache\rpcss.dll
    + 2004-08-04 10:00 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
    - 2009-04-15 14:51 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
    - 2010-06-12 17:06 . 2008-05-08 14:02 203136 c:\windows\system32\dllcache\rmcast.sys
    + 2004-08-04 10:00 . 2008-05-08 14:02 203136 c:\windows\system32\dllcache\rmcast.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 433664 c:\windows\system32\dllcache\riched20.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 146432 c:\windows\system32\dllcache\regedit.exe
    + 2010-06-08 21:30 . 2011-06-24 14:10 139656 c:\windows\system32\dllcache\rdpwd.sys
    + 2004-08-04 10:00 . 2008-04-13 19:28 175744 c:\windows\system32\dllcache\rdbss.sys
    + 2004-08-04 10:00 . 2009-10-12 13:38 149504 c:\windows\system32\dllcache\rastls.dll
    - 2009-10-12 13:38 . 2009-10-12 13:38 149504 c:\windows\system32\dllcache\rastls.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 210944 c:\windows\system32\dllcache\rasppp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 186368 c:\windows\system32\dllcache\rasmans.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 658432 c:\windows\system32\dllcache\rasdlg.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 237056 c:\windows\system32\dllcache\rasapi32.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 409088 c:\windows\system32\dllcache\qmgr.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 237056 c:\windows\system32\dllcache\provthrd.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 560640 c:\windows\system32\dllcache\printui.dll
    - 2010-06-12 17:09 . 2009-03-06 14:22 284160 c:\windows\system32\dllcache\pdh.dll
    + 2004-08-04 10:00 . 2009-03-06 14:22 284160 c:\windows\system32\dllcache\pdh.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 215552 c:\windows\system32\dllcache\osk.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 713728 c:\windows\system32\dllcache\opengl32.dll
    + 2008-04-14 00:12 . 2008-04-14 00:12 144384 c:\windows\system32\dllcache\onex.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 122880 c:\windows\system32\dllcache\oledlg.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 487424 c:\windows\system32\dllcache\oledb32.dll
    + 2004-08-04 10:00 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll
    + 2004-08-04 10:00 . 2011-09-26 16:41 220160 c:\windows\system32\dllcache\oleacc.dll
    + 2004-08-04 10:00 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 206848 c:\windows\system32\dllcache\occache.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 206848 c:\windows\system32\dllcache\occache.dll
    + 2004-08-04 10:00 . 2009-10-13 10:30 270336 c:\windows\system32\dllcache\oakley.dll
    - 2009-10-13 10:30 . 2009-10-13 10:30 270336 c:\windows\system32\dllcache\oakley.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 142336 c:\windows\system32\dllcache\nwprovau.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 143360 c:\windows\system32\dllcache\ntshrui.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 118784 c:\windows\system32\dllcache\ntmarta.dll
    + 2004-08-04 10:00 . 2008-04-13 19:15 574976 c:\windows\system32\dllcache\ntfs.sys
    + 2010-06-08 21:30 . 2008-04-14 00:12 212992 c:\windows\system32\dllcache\ntevt.dll
    + 2004-08-04 10:00 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    - 2010-06-12 17:09 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 247808 c:\windows\system32\dllcache\newdev.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 245760 c:\windows\system32\dllcache\netui1.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 198144 c:\windows\system32\dllcache\netman.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 622592 c:\windows\system32\dllcache\netcfgx.dll
    - 2010-06-12 17:06 . 2008-10-15 16:34 337408 c:\windows\system32\dllcache\netapi32.dll
    + 2004-08-04 10:00 . 2008-10-15 16:34 337408 c:\windows\system32\dllcache\netapi32.dll
    + 2004-08-04 10:00 . 2008-04-13 19:20 182656 c:\windows\system32\dllcache\ndis.sys
    + 2004-08-04 10:00 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys
    - 2008-06-20 17:46 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
    + 2004-08-04 10:00 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
    + 2004-08-04 10:00 . 2009-08-05 09:01 204800 c:\windows\system32\dllcache\mswebdvd.dll
    - 2009-08-05 09:01 . 2009-08-05 09:01 204800 c:\windows\system32\dllcache\mswebdvd.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 121344 c:\windows\system32\dllcache\msvfw32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 343040 c:\windows\system32\dllcache\msvcrt.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 413696 c:\windows\system32\dllcache\msvcp60.dll
    + 2004-08-04 10:00 . 2009-09-11 14:18 136192 c:\windows\system32\dllcache\msv1_0.dll
    - 2009-06-25 08:25 . 2009-09-11 14:18 136192 c:\windows\system32\dllcache\msv1_0.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 195072 c:\windows\system32\dllcache\msutb.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 116224 c:\windows\system32\dllcache\mstlsapi.dll
    - 2006-03-04 03:33 . 2011-02-22 23:06 611840 c:\windows\system32\dllcache\mstime.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 611840 c:\windows\system32\dllcache\mstime.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 274944 c:\windows\system32\dllcache\mstask.dll
    - 2009-12-16 18:43 . 2009-12-16 18:43 343040 c:\windows\system32\dllcache\mspaint.exe
    + 2010-06-08 21:30 . 2009-12-16 18:43 343040 c:\windows\system32\dllcache\mspaint.exe
    + 2010-06-08 21:31 . 2008-04-14 00:12 105984 c:\windows\system32\dllcache\msoert2.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 290816 c:\windows\system32\dllcache\msnsspc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 170496 c:\windows\system32\dllcache\msmqocm.dll
    + 2010-06-08 21:31 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 159232 c:\windows\system32\dllcache\msimtf.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 997376 c:\windows\system32\dllcache\msgina.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 539136 c:\windows\system32\dllcache\msftedit.dll
    + 2010-06-11 04:37 . 2011-08-22 23:48 602112 c:\windows\system32\dllcache\msfeeds.dll
    - 2010-06-11 04:37 . 2011-02-22 23:06 602112 c:\windows\system32\dllcache\msfeeds.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 161792 c:\windows\system32\dllcache\msdtcuiu.dll
    + 2010-06-08 21:30 . 2008-06-12 14:23 161792 c:\windows\system32\dllcache\msdtcuiu.dll
    + 2010-06-08 21:30 . 2008-06-12 14:23 956928 c:\windows\system32\dllcache\msdtctm.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 956928 c:\windows\system32\dllcache\msdtctm.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 428032 c:\windows\system32\dllcache\msdtcprx.dll
    + 2010-06-08 21:30 . 2008-06-12 14:23 428032 c:\windows\system32\dllcache\msdtcprx.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 151552 c:\windows\system32\dllcache\msdart.dll
    + 2010-06-08 21:31 . 2008-04-14 00:11 204800 c:\windows\system32\dllcache\msdaps.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 297984 c:\windows\system32\dllcache\msctf.dll
    + 2010-06-08 21:31 . 2008-04-14 00:12 169984 c:\windows\system32\dllcache\msconfig.exe
    - 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    + 2010-06-08 21:31 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    + 2010-06-08 21:31 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
    + 2010-06-08 21:31 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
    + 2010-06-08 21:31 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
    - 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
    + 2004-08-04 10:00 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys
    + 2004-08-04 10:00 . 2008-04-13 18:32 180608 c:\windows\system32\dllcache\mrxdav.sys
    - 2004-08-04 10:00 . 2009-06-25 18:36 471552 c:\windows\system32\dllcache\mqutil.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 471552 c:\windows\system32\dllcache\mqutil.dll
    + 2004-08-04 10:00 . 2008-04-13 16:45 216064 c:\windows\system32\dllcache\moricons.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 153600 c:\windows\system32\dllcache\modemui.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 143360 c:\windows\system32\dllcache\mobsync.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 586240 c:\windows\system32\dllcache\mlang.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 245248 c:\windows\system32\dllcache\migwiz.exe
    - 2010-09-18 17:23 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2004-08-04 10:00 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2004-08-04 10:00 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
    - 2010-10-14 21:38 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
    - 2010-10-14 21:38 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
    + 2004-08-04 10:00 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
    + 2004-08-04 10:00 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    - 2010-06-12 17:09 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 514560 c:\windows\system32\dllcache\logonui.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 220672 c:\windows\system32\dllcache\logon.scr
    + 2004-08-04 10:00 . 2009-05-07 15:32 345600 c:\windows\system32\dllcache\localspl.dll
    - 2009-05-07 15:32 . 2009-05-07 15:32 345600 c:\windows\system32\dllcache\localspl.dll
    + 2004-08-04 10:00 . 2008-04-14 10:41 423936 c:\windows\system32\dllcache\licdll.dll
    + 2010-06-08 21:30 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
    - 2011-01-27 11:57 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
    + 2010-06-08 21:42 . 2008-04-13 18:45 172416 c:\windows\system32\dllcache\kmixer.sys
    - 2009-03-21 14:06 . 2009-03-21 14:06 989696 c:\windows\system32\dllcache\kernel32.dll
    + 2004-08-04 10:00 . 2009-03-21 14:06 989696 c:\windows\system32\dllcache\kernel32.dll
    - 2009-06-25 08:25 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2004-08-04 10:00 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2004-08-04 10:00 . 2008-04-13 18:57 152832 c:\windows\system32\dllcache\ipnat.sys
    + 2004-08-04 10:00 . 2008-04-14 00:11 147456 c:\windows\system32\dllcache\initpki.dll
    - 2010-01-29 15:01 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2010-06-08 21:31 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 123392 c:\windows\system32\dllcache\imsinsnt.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 110080 c:\windows\system32\dllcache\imm32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 150528 c:\windows\system32\dllcache\imapi.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 144384 c:\windows\system32\dllcache\imagehlp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 505344 c:\windows\system32\dllcache\iis.dll
    + 2010-06-11 04:37 . 2011-08-22 23:48 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2010-06-11 04:37 . 2011-02-22 23:06 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2006-03-04 03:33 . 2011-02-22 23:06 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2006-03-04 03:33 . 2011-08-22 23:48 184320 c:\windows\system32\dllcache\iepeers.dll
    - 2010-06-11 04:37 . 2011-02-22 23:06 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2010-06-11 04:37 . 2011-08-22 23:48 743424 c:\windows\system32\dllcache\iedvtool.dll
    + 2004-08-04 10:00 . 2011-08-22 23:48 387584 c:\windows\system32\dllcache\iedkcs32.dll
    - 2004-08-04 10:00 . 2011-02-22 23:06 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2004-08-04 10:00 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 254976 c:\windows\system32\dllcache\icm32.dll
    - 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
    + 2004-08-04 10:00 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
    + 2004-08-04 10:00 . 2008-04-14 00:11 344064 c:\windows\system32\dllcache\hnetcfg.dll
    + 2010-06-08 21:31 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    - 2010-07-14 20:34 . 2010-06-14 14:31 744448 c:\windows\system32\dllcache\helpsvc.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 122880 c:\windows\system32\dllcache\glu32.dll
    + 2004-08-04 10:00 . 2008-10-23 12:36 286720 c:\windows\system32\dllcache\gdi32.dll
    - 2008-10-23 12:36 . 2008-10-23 12:36 286720 c:\windows\system32\dllcache\gdi32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 132608 c:\windows\system32\dllcache\fxsocm.dll
    + 2004-08-04 10:00 . 2004-08-04 10:00 125056 c:\windows\system32\dllcache\ftdisk.sys
    + 2010-06-08 21:30 . 2008-04-14 00:11 185344 c:\windows\system32\dllcache\framedyn.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 382976 c:\windows\system32\dllcache\fontext.dll
    + 2010-06-08 21:31 . 2008-04-13 18:32 129792 c:\windows\system32\dllcache\fltmgr.sys
    + 2010-06-08 21:30 . 2009-02-09 12:10 473600 c:\windows\system32\dllcache\fastprox.dll
    - 2010-06-12 17:09 . 2009-02-09 12:10 473600 c:\windows\system32\dllcache\fastprox.dll
    + 2004-08-04 10:00 . 2008-04-13 19:14 143744 c:\windows\system32\dllcache\fastfat.sys
    + 2004-08-04 10:00 . 2008-04-14 00:11 125952 c:\windows\system32\dllcache\exts.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 247808 c:\windows\system32\dllcache\esscli.dll
    + 2004-08-04 10:00 . 2008-07-07 20:26 253952 c:\windows\system32\dllcache\es.dll
    - 2008-07-07 20:26 . 2008-07-07 20:26 253952 c:\windows\system32\dllcache\es.dll
    + 2004-08-04 10:00 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    - 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    + 2008-04-14 00:11 . 2008-04-14 00:11 126976 c:\windows\system32\dllcache\eappcfg.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 180224 c:\windows\system32\dllcache\dwwin.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 304128 c:\windows\system32\dllcache\duser.dll
    + 2004-08-04 10:00 . 2008-04-13 17:37 138752 c:\windows\system32\dllcache\dssenh.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 367616 c:\windows\system32\dllcache\dsound.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 102912 c:\windows\system32\dllcache\dpcdll.dll
    - 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    + 2004-08-04 10:00 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    + 2004-08-04 10:00 . 2008-04-13 18:44 153344 c:\windows\system32\dllcache\dmio.sys
    + 2004-08-04 10:00 . 2008-04-14 00:12 224768 c:\windows\system32\dllcache\dmadmin.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 126976 c:\windows\system32\dllcache\dhcpcsvc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 105472 c:\windows\system32\dllcache\dfrgntfs.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 282624 c:\windows\system32\dllcache\devmgr.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 279552 c:\windows\system32\dllcache\ddraw.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 640000 c:\windows\system32\dllcache\dbghelp.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 824320 c:\windows\system32\dllcache\d3dim700.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 326656 c:\windows\system32\dllcache\cscui.dll
    - 2008-05-07 09:07 . 2008-05-07 09:07 135168 c:\windows\system32\dllcache\cscript.exe
    + 2004-08-04 10:00 . 2008-05-07 09:07 135168 c:\windows\system32\dllcache\cscript.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 101888 c:\windows\system32\dllcache\cscdll.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 512512 c:\windows\system32\dllcache\cryptui.dll
    + 2004-08-04 10:00 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 163840 c:\windows\system32\dllcache\credui.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 274944 c:\windows\system32\dllcache\comsetup.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 792064 c:\windows\system32\dllcache\comres.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 229376 c:\windows\system32\dllcache\compstui.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 276992 c:\windows\system32\dllcache\comdlg32.dll
    - 2010-10-14 21:37 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-08-04 10:00 . 2010-08-23 16:12 617472 c:\windows\system32\dllcache\comctl32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 389120 c:\windows\system32\dllcache\cmd.exe
    + 2010-06-08 21:30 . 2008-04-14 00:11 498688 c:\windows\system32\dllcache\clbcatq.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 625664 c:\windows\system32\dllcache\catsrvut.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 226304 c:\windows\system32\dllcache\catsrv.dll
    + 2008-10-03 22:40 . 2010-08-26 01:56 300544 c:\windows\system32\dllcache\ati2dvag.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 125952 c:\windows\system32\dllcache\apphelp.dll
    + 2004-08-04 10:00 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
    - 2008-06-20 11:40 . 2008-10-16 14:43 138496 c:\windows\system32\dllcache\afd.sys
    + 2010-06-08 21:42 . 2008-04-13 16:39 142592 c:\windows\system32\dllcache\aec.sys
    - 2010-06-12 17:09 . 2009-02-09 12:10 617472 c:\windows\system32\dllcache\advapi32.dll
    + 2004-08-04 10:00 . 2009-02-09 12:10 617472 c:\windows\system32\dllcache\advapi32.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 143360 c:\windows\system32\dllcache\adsldpc.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 193536 c:\windows\system32\dllcache\activeds.dll
    + 2004-08-04 10:00 . 2008-04-13 18:36 187776 c:\windows\system32\dllcache\acpi.sys
    + 2004-08-04 10:00 . 2009-11-21 15:51 471552 c:\windows\system32\dllcache\aclayers.dll
    - 2010-06-12 17:09 . 2009-11-21 15:51 471552 c:\windows\system32\dllcache\aclayers.dll
    + 2010-06-08 21:30 . 2008-04-14 00:12 184320 c:\windows\system32\dllcache\accwiz.exe
    - 2010-02-12 04:33 . 2010-02-12 04:33 100864 c:\windows\system32\dllcache\6to4svc.dll
    + 2004-08-04 10:00 . 2010-02-12 04:33 100864 c:\windows\system32\dllcache\6to4svc.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2011-01-18 09:39 . 2011-01-18 09:39 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-03-25 11:15 . 2011-03-25 11:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2011-01-18 09:39 . 2011-01-18 09:39 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2011-01-18 09:39 . 2011-01-18 09:39 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2010-09-23 07:25 . 2010-09-23 07:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2011-07-07 17:01 . 2011-07-07 17:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2011-07-07 18:09 . 2011-07-07 18:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2010-09-23 08:17 . 2010-09-23 08:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2011-12-10 18:01 . 2011-07-11 07:14 295248 c:\windows\LastGood\system32\DRIVERS\avgtdix.sys
    + 2011-12-10 18:01 . 2011-10-07 12:23 230608 c:\windows\LastGood\system32\DRIVERS\avgldx86.sys
    + 2011-12-10 18:01 . 2011-07-11 07:14 134608 c:\windows\LastGood\system32\DRIVERS\AVGIDSDriver.sys
    + 2011-08-08 01:20 . 2011-08-08 01:20 728064 c:\windows\Installer\35c8d.msi
    + 2011-08-08 01:23 . 2011-08-08 01:23 410598 c:\windows\Installer\{BCFA4EDC-2544-4826-99E5-DECB23D4A8F7}\WDSmartWare_1.exe
    + 2011-08-08 01:20 . 2011-08-08 01:20 410598 c:\windows\Installer\{6A001CC0-2B9B-48EB-88F8-AF9821B05B02}\WD_SmartWare_Upgrader.exe
    + 2011-10-13 03:50 . 2011-10-13 03:50 380928 c:\windows\Installer\{29ED20C9-5E15-4969-9279-25BF3727A3DA}\iTunesIco.exe
    + 2011-10-13 08:02 . 2011-06-23 18:36 916480 c:\windows\ie8updates\KB2586448-IE8\wininet.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe
    + 2011-10-13 08:02 . 2011-06-23 18:36 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll
    + 2011-10-13 08:02 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe
    + 2011-08-10 08:00 . 2011-04-25 16:11 916480 c:\windows\ie8updates\KB2559049-IE8\wininet.dll
    + 2011-08-10 08:00 . 2009-03-08 09:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe
    + 2011-08-10 08:00 . 2011-04-25 16:11 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll
    + 2011-08-10 08:00 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe
    + 2011-06-17 08:00 . 2009-03-08 09:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
    + 2011-06-17 08:00 . 2011-02-22 23:06 916480 c:\windows\ie8updates\KB2530548-IE8\wininet.dll
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe
    + 2011-06-17 08:00 . 2011-02-22 23:06 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll
    + 2011-06-17 08:00 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe
    + 2010-06-12 17:09 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2010-10-06 08:01 . 2010-10-06 08:01 835584 c:\windows\assembly\temp\R527C9EBFD\System.Drawing.dll
    + 2011-06-28 08:04 . 2011-08-10 08:04 261632 c:\windows\assembly\temp\6BFYH0BN6P\System.Transactions.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_b75bad81\System.Drawing.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_73751370\System.Drawing.Design.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_dbeb5603\CustomMarshalers.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\cc14c69205b984edba1db26fd5e421ac\WsatConfig.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfig.ni.exe
    + 2011-10-13 08:08 . 2011-10-13 08:08 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\39ce0c9c9cc294c0ee26c4ff01522961\WindowsFormsIntegration.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
    + 2011-06-28 08:06 . 2011-06-28 08:06 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\3740d6db28af31a6523a79fcdd71fbeb\UIAutomationTypes.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\431e918aee8da919f5b9e3a5195ccf93\UIAutomationClient.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\946eefb99bc116ee68e0e7c69a5a8a5c\System.Xml.Linq.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\566b2e11e7f3f6d973b17b86cf42f9bc\System.Xml.Linq.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\a82eef3128b9527dc05b3c8667e713bc\System.Web.Routing.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\3533d614ebecd4344efbee619dd11a74\System.Web.Routing.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\203c148c913357bfc2ae9d209101f2b3\System.Web.RegularExpressions.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c\System.Web.RegularExpressions.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\f89fe39468ea6faf71c4257c89cf3c54\System.Web.Extensions.Design.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9\System.Web.Extensions.Design.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\93b5d1b77a74b76ac73cbf51ec871c01\System.Web.Entity.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\2314ff800782dc85224e69e802a073f7\System.Web.Entity.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f690a8f5d784a5bb20f2cbaa7277eb6c\System.Web.Entity.Design.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d06a7d5872bbe85795f947f6c75d38c6\System.Web.Entity.Design.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\c5c96400424b85536443623f96f64581\System.Web.DynamicData.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ad0851438a18bf730d974c9b2f5f776a\System.Web.DynamicData.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878\System.Web.Abstractions.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\5f8e87b47465a038403e73012c6d102a\System.Web.Abstractions.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8efcd633af87989355382b5039f1b7df\System.Transactions.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\846dd505f97805f00999ee26aec9bf75\System.Transactions.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\70a1400affdc775d7c7398e036359286\System.ServiceProcess.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\de9cd25ccb24bcf8a0316756e766721f\System.Security.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\21248037960cf6dfa2ce401d355bd6c9\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\480ea914e13fe41cdd8fb542bb1f7e81\System.Net.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e\System.Management.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\6e563a58e6fc0117070d5b8fd59e4e1b\System.Management.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f36eded354122da9555a6c7cdbdb5431\System.Management.Instrumentation.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\dc72c7581f1b3794c0ea595ba02ff7ad\System.Management.Instrumentation.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\fcf8612a210d1f76e0b37dc8467b4696\System.IO.Log.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\ec017b5a95d02fccaefd835490ef1e14\System.IdentityModel.Selectors.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\75f452279422a7898e840ee5768c9d2e\System.EnterpriseServices.Wrapper.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\75f452279422a7898e840ee5768c9d2e\System.EnterpriseServices.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\f7cd3d07c15366b76fe4c38d24455d6b\System.Drawing.Design.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07\System.Drawing.Design.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\822c996e6ad4901219b7de399a6f78bf\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b\System.DirectoryServices.Protocols.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\1ffe911e62f482e42be2c4428bd08c10\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e5ada332a9bc3c982e6aede6ba354196\System.Data.Services.Client.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e1c009b2c9becdb732a2ea45f32a46b8\System.Data.Services.Design.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3f179f373f31817a914b639a56cc0497\System.Data.Services.Design.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1defd94e1662a4478ccf2cd0b1b4e6a6\System.Data.Services.Client.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091\System.Data.Entity.Design.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\04267c1dbdcdd8ec37e1518126767ead\System.Data.Entity.Design.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\f2a6d41b3f6e26eea6dcac9298aa637b\System.Data.DataSetExtensions.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da\System.Data.DataSetExtensions.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\77df2cd21a5b85a1605b335aa9ad9d44\System.Configuration.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\585e68739b2a8aff61ee6b2786513245\System.Configuration.Install.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73\System.Configuration.Install.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\fbf6ef12d1456058acde29f2640092fb\System.AddIn.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\896e42071939e038008b0bbbfed1213c\SMSvcHost.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe
    + 2011-08-10 08:08 . 2011-08-10 08:08 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ca07e9cf488af1290d2340d682574a24\SMDiagnostics.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217\ServiceModelReg.ni.exe
    + 2011-08-10 08:08 . 2011-08-10 08:08 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a5aa977dd575a6beb3a416bd480b98a7\ServiceModelReg.ni.exe
    + 2011-08-10 08:05 . 2011-08-10 08:05 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f52e48f55258d0a04fbab3a1f93752e9\PresentationFramework.Classic.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\cf812b99f587ab514afb36fa9d4c1567\PresentationFramework.Aero.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b7795999cc67f3a6cec40f5b24005e00\PresentationFramework.Luna.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\09f5af61ea2af04eb32c04b3091ffc86\PresentationFramework.Royale.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\2d89c7b72bc8e527b26d5b6f3b931012\MSBuild.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\39e9d172f0cf5eec30b1b67212cc032b\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2\Microsoft.Build.Utilities.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\f1b0ec3ccde9142e67ac681fb521ac66\Microsoft.Build.Utilities.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\9250f038410f0d6432e3ccb0b046862b\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682\Microsoft.Build.Engine.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\a4672179aba638cd78bdfe268391b47b\Microsoft.Build.Engine.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\37db660a84ee52b61a7ca55812581bbd\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-06-28 08:08 . 2011-06-28 08:08 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\80bd17388778c90f301746ad88700758\CustomMarshalers.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\fe9a21b94803f74697bb42b9d1fdea5b\ComSvcConfig.ni.exe
    + 2011-10-13 08:10 . 2011-10-13 08:10 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe
    + 2011-08-10 08:08 . 2011-08-10 08:08 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\f160c8e40b60edd47ae74b0b911fece1\AspNetMMCExt.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetMMCExt.ni.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2010-10-06 08:02 . 2011-04-15 08:04 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2011-06-28 08:04 . 2011-10-13 08:06 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-10-06 08:02 . 2011-04-15 08:04 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2011-09-14 22:49 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2616676$\spuninst\updspapi.dll
    + 2011-09-14 22:49 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2616676$\spuninst\spuninst.exe
    + 2011-09-14 22:49 . 2011-09-03 10:17 599040 c:\windows\$NtUninstallKB2616676$\crypt32.dll
    + 2011-09-07 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2607712$\spuninst\updspapi.dll
    + 2011-09-07 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2607712$\spuninst\spuninst.exe
    + 2011-09-07 08:00 . 2008-04-14 00:11 599040 c:\windows\$NtUninstallKB2607712$\crypt32.dll
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2592799$\spuninst\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2592799$\spuninst\spuninst.exe
    + 2011-10-13 08:02 . 2011-02-16 13:22 138496 c:\windows\$NtUninstallKB2592799$\afd.sys
    + 2011-09-14 22:47 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570947$\spuninst\updspapi.dll
    + 2011-09-14 22:47 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570947$\spuninst\spuninst.exe
    + 2011-08-24 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570791$\spuninst\updspapi.dll
    + 2011-08-24 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570791$\spuninst\spuninst.exe
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570222$\spuninst\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570222$\spuninst\spuninst.exe
    + 2011-08-10 08:02 . 2008-04-14 00:13 139656 c:\windows\$NtUninstallKB2570222$\rdpwd.sys
    + 2011-08-10 08:02 . 2011-04-26 11:07 293376 c:\windows\$NtUninstallKB2567680$\winsrv.dll
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567680$\spuninst\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567680$\spuninst\spuninst.exe
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567053$\spuninst\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567053$\spuninst\spuninst.exe
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2566454$\spuninst\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2566454$\spuninst\spuninst.exe
    + 2011-10-13 08:06 . 2008-07-30 00:59 161296 c:\windows\$NtUninstallKB2564958$\uiautomationcore.dll
    + 2011-10-13 08:06 . 2011-08-12 18:51 382840 c:\windows\$NtUninstallKB2564958$\spuninst\updspapi.dll
    + 2011-10-13 08:06 . 2011-08-12 18:51 231288 c:\windows\$NtUninstallKB2564958$\spuninst\spuninst.exe
    + 2011-10-13 08:06 . 2004-08-04 10:00 163328 c:\windows\$NtUninstallKB2564958$\oleacc.dll
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2562937$\spuninst\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2562937$\spuninst\spuninst.exe
    + 2011-07-13 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2555917$\spuninst\updspapi.dll
    + 2011-07-13 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2555917$\spuninst\spuninst.exe
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2544893$\spuninst\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2544893$\spuninst\spuninst.exe
    + 2011-06-17 08:00 . 2011-03-07 05:33 692736 c:\windows\$NtUninstallKB2544893$\inetcomm.dll
    + 2011-11-10 06:03 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2544893-v2$\spuninst\updspapi.dll
    + 2011-11-10 06:03 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe
    + 2011-11-10 06:03 . 2011-05-02 15:31 692736 c:\windows\$NtUninstallKB2544893-v2$\inetcomm.dll
    + 2011-06-29 08:00 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2541763$\spuninst\updspapi.dll
    + 2011-06-29 08:00 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2541763$\spuninst\spuninst.exe
    + 2011-06-29 08:00 . 2010-06-30 12:31 149504 c:\windows\$NtUninstallKB2541763$\schannel.dll
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2536276$\spuninst\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2536276$\spuninst\spuninst.exe
    + 2011-06-17 08:01 . 2011-02-17 13:18 455936 c:\windows\$NtUninstallKB2536276$\mrxsmb.sys
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2536276-v2$\spuninst\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe
    + 2011-08-10 08:02 . 2011-04-29 16:19 456320 c:\windows\$NtUninstallKB2536276-v2$\mrxsmb.sys
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2535512$\spuninst\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2535512$\spuninst\spuninst.exe
    + 2011-06-17 08:01 . 2008-04-13 19:17 105344 c:\windows\$NtUninstallKB2535512$\mup.sys
    + 2011-07-13 08:03 . 2010-06-18 17:45 293376 c:\windows\$NtUninstallKB2507938$\winsrv.dll
    + 2011-07-13 08:03 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2507938$\spuninst\updspapi.dll
    + 2011-07-13 08:03 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2507938$\spuninst\spuninst.exe
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2503665$\spuninst\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2503665$\spuninst\spuninst.exe
    + 2011-06-17 08:01 . 2008-10-16 14:43 138496 c:\windows\$NtUninstallKB2503665$\afd.sys
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2476490$\spuninst\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2476490$\spuninst\spuninst.exe
    + 2011-06-17 08:01 . 2008-04-14 00:12 551936 c:\windows\$NtUninstallKB2476490$\oleaut32.dll
    + 2011-09-14 22:49 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll
    + 2011-09-14 22:49 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2616676\update\update.exe
    + 2011-09-14 22:49 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2616676\spuninst.exe
    + 2011-09-09 09:11 . 2011-09-09 09:11 599552 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll
    + 2011-09-07 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll
    + 2011-09-07 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2607712\update\update.exe
    + 2011-09-07 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2607712\spuninst.exe
    + 2011-09-03 10:16 . 2011-09-03 10:16 599552 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2592799\update\update.exe
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2592799\spuninst.exe
    + 2011-10-13 04:01 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe
    + 2011-10-13 04:07 . 2011-08-22 23:47 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll
    + 2011-10-13 04:07 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe
    + 2011-09-14 22:47 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll
    + 2011-09-14 22:47 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570947\update\update.exe
    + 2011-09-14 22:47 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570947\spuninst.exe
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570222\update\update.exe
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570222\spuninst.exe
    + 2011-08-10 07:22 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567680\update\update.exe
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567680\spuninst.exe
    + 2011-06-20 17:43 . 2011-06-20 17:43 293376 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll
    + 2011-10-13 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll
    + 2011-10-13 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe
    + 2011-10-13 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2566454\update\update.exe
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2566454\spuninst.exe
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2562937\update\update.exe
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2562937\spuninst.exe
    + 2011-08-10 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll
    + 2011-08-10 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe
    + 2011-08-10 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe
    + 2011-08-10 07:22 . 2011-06-23 18:33 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll
    + 2011-08-10 07:22 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe
    + 2011-07-13 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll
    + 2011-07-13 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2555917\update\update.exe
    + 2011-07-13 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2555917\spuninst.exe
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893\update\update.exe
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893\spuninst.exe
    + 2011-06-16 11:36 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll
    + 2011-11-10 06:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893-v2\update\updspapi.dll
    + 2011-11-10 06:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893-v2\update\update.exe
    + 2011-11-10 06:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893-v2\spuninst.exe
    + 2011-10-10 14:21 . 2011-10-10 14:21 692736 c:\windows\$hf_mig$\KB2544893-v2\SP3QFE\inetcomm.dll
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544521-IE8\update\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544521-IE8\update\update.exe
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544521-IE8\spuninst.exe
    + 2011-06-16 11:37 . 2011-04-30 02:59 758784 c:\windows\$hf_mig$\KB2544521-IE8\SP3QFE\vgx.dll
    + 2011-06-29 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll
    + 2011-06-29 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2541763\update\update.exe
    + 2011-06-29 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2541763\spuninst.exe
    + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276\update\update.exe
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276\spuninst.exe
    + 2011-06-16 11:37 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys
    + 2011-08-10 08:02 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll
    + 2011-08-10 08:02 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe
    + 2011-08-10 08:02 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe
    + 2011-08-10 07:22 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2535512\update\update.exe
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2535512\spuninst.exe
    + 2011-06-16 11:36 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys
    + 2011-06-17 08:00 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2530548-IE8\update\updspapi.dll
    + 2011-06-17 08:00 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2530548-IE8\update\update.exe
    + 2011-06-17 08:00 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2530548-IE8\spuninst.exe
    + 2011-06-16 11:37 . 2011-04-25 16:09 919552 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 206848 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\occache.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 611840 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mstime.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 602112 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeeds.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 247808 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieproxy.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 184320 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iepeers.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 743424 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedvtool.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 387584 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedkcs32.dll
    + 2011-06-16 11:37 . 2011-04-25 11:37 173568 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ie4uinit.exe
    + 2011-07-13 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll
    + 2011-07-13 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507938\update\update.exe
    + 2011-07-13 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507938\spuninst.exe
    + 2011-04-26 11:02 . 2011-04-26 11:02 293376 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503665\update\update.exe
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503665\spuninst.exe
    + 2011-06-16 11:36 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys
    + 2011-06-17 08:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll
    + 2011-06-17 08:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476490\update\update.exe
    + 2011-06-17 08:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476490\spuninst.exe
    + 2011-06-16 11:37 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll
    + 2004-08-04 10:00 . 2011-09-06 13:20 1858944 c:\windows\system32\win32k.sys
    + 2010-06-10 03:22 . 2011-08-02 22:38 4517664 c:\windows\system32\usbaaplrc.dll
    + 2006-03-18 11:09 . 2011-08-22 23:48 1212416 c:\windows\system32\urlmon.dll
    + 2011-10-13 03:46 . 2010-12-15 00:51 4184352 c:\windows\system32\ReinstallBackups\0026\DriverFiles\usbaaplrc.dll
    + 2006-03-23 17:32 . 2011-10-03 08:35 5971456 c:\windows\system32\mshtml.dll
    + 2008-09-03 22:55 . 2011-12-06 14:32 8527008 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2009-03-08 09:32 . 2011-08-22 23:48 2000384 c:\windows\system32\iertutil.dll
    + 2010-06-08 16:24 . 2011-10-13 08:23 2216480 c:\windows\system32\FNTCACHE.DAT
    + 2011-10-13 03:46 . 2011-08-02 22:38 4517664 c:\windows\system32\DRVSTORE\usbaapl_091115F4EDEB41DBA0EC91574CE905B4E0482482\usbaaplrc.dll
    + 2011-10-13 03:46 . 2010-04-20 01:29 1461992 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\wdfcoinstaller01009.dll
    + 2004-08-04 10:00 . 2008-04-13 17:39 2897920 c:\windows\system32\dllcache\xpsp2res.dll
    + 2004-08-04 10:00 . 2011-09-06 13:20 1858944 c:\windows\system32\dllcache\win32k.sys
    + 2006-03-18 11:09 . 2011-08-22 23:48 1212416 c:\windows\system32\dllcache\urlmon.dll
    - 2008-06-17 19:02 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2004-08-04 10:00 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2006-03-30 09:16 . 2008-04-14 00:12 1499136 c:\windows\system32\dllcache\shdocvw.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 1614848 c:\windows\system32\dllcache\sfcfiles.dll
    - 2009-07-17 16:22 . 2009-07-17 16:22 1435648 c:\windows\system32\dllcache\query.dll
    + 2004-08-04 10:00 . 2009-07-17 16:22 1435648 c:\windows\system32\dllcache\query.dll
    + 2004-08-04 10:00 . 2010-02-05 18:27 1291776 c:\windows\system32\dllcache\quartz.dll
    - 2009-11-27 17:11 . 2010-02-05 18:27 1291776 c:\windows\system32\dllcache\quartz.dll
    - 2010-07-16 12:05 . 2010-07-16 12:05 1288192 c:\windows\system32\dllcache\ole32.dll
    + 2004-08-04 10:00 . 2010-07-16 12:05 1288192 c:\windows\system32\dllcache\ole32.dll
    + 2005-03-30 01:01 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    - 2010-06-12 17:09 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2005-03-30 01:21 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    - 2010-06-12 17:09 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 1200640 c:\windows\system32\dllcache\ntbackup.exe
    + 2004-08-04 10:00 . 2008-04-14 00:12 1703936 c:\windows\system32\dllcache\netshell.dll
    + 2010-06-08 21:31 . 2010-01-29 15:01 1315328 c:\windows\system32\dllcache\msoe.dll
    - 2010-01-29 15:01 . 2010-01-29 15:01 1315328 c:\windows\system32\dllcache\msoe.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 2843136 c:\windows\system32\dllcache\msi.dll
    + 2006-03-23 17:32 . 2011-10-03 08:35 5971456 c:\windows\system32\dllcache\mshtml.dll
    + 2010-06-08 21:30 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    - 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    + 2010-06-11 04:37 . 2011-08-22 23:48 2000384 c:\windows\system32\dllcache\iertutil.dll
    + 2004-08-04 10:00 . 2008-04-14 00:12 1033728 c:\windows\system32\dllcache\explorer.exe
    + 2004-08-04 10:00 . 2008-04-14 00:11 1082368 c:\windows\system32\dllcache\esent.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 1689088 c:\windows\system32\dllcache\d3d9.dll
    + 2010-06-08 21:30 . 2008-04-14 00:11 1358848 c:\windows\system32\dllcache\cimwin32.dll
    + 2006-03-04 03:33 . 2008-04-14 00:11 1025024 c:\windows\system32\dllcache\browseui.dll
    + 2004-08-04 10:00 . 2008-04-14 00:11 1852928 c:\windows\system32\dllcache\acgenral.dll
    + 2011-03-25 11:15 . 2011-03-25 11:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2008-07-25 16:17 . 2008-07-25 16:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2011-04-29 02:50 . 2011-04-29 02:50 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2010-03-23 10:32 . 2010-03-23 10:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2011-01-18 09:39 . 2011-01-18 09:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2011-07-07 17:02 . 2011-07-07 17:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2011-07-07 17:02 . 2011-07-07 17:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2011-10-13 03:19 . 2011-10-13 03:19 1769984 c:\windows\Installer\f18066.msi
    + 2011-01-19 04:36 . 2011-01-19 04:36 2687488 c:\windows\Installer\cc2e5e2.msp
    + 2011-05-02 05:06 . 2011-05-02 05:06 2705920 c:\windows\Installer\bafdeb8.msp
    + 2011-12-10 01:14 . 2011-12-10 01:14 4671488 c:\windows\Installer\a1a93.msi
    + 2011-12-10 01:12 . 2011-12-10 01:12 2186240 c:\windows\Installer\a1a8f.msi
    + 2011-08-08 01:23 . 2011-08-08 01:23 1232896 c:\windows\Installer\36681.msi
    + 2011-10-13 03:50 . 2011-10-13 03:50 5235200 c:\windows\Installer\1093d3c.msi
    + 2011-10-13 03:47 . 2011-10-13 03:47 1717248 c:\windows\Installer\109349d.msi
    + 2011-10-13 03:46 . 2011-10-13 03:46 2002432 c:\windows\Installer\1093440.msi
    + 2011-10-13 03:45 . 2011-10-13 03:45 1532928 c:\windows\Installer\10933f5.msi
    + 2011-10-13 08:02 . 2011-06-23 18:36 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll
    + 2011-10-13 08:02 . 2011-07-25 15:17 5969920 c:\windows\ie8updates\KB2586448-IE8\mshtml.dll
    + 2011-10-13 08:02 . 2011-06-23 18:36 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll
    + 2011-08-10 08:00 . 2011-05-30 22:19 5964800 c:\windows\ie8updates\KB2559049-IE8\mshtml.dll
    + 2011-08-10 08:00 . 2011-04-25 16:11 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 5962240 c:\windows\ie8updates\KB2530548-IE8\mshtml.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll
    + 2010-10-06 08:01 . 2010-10-06 08:01 3018752 c:\windows\assembly\temp\WDINLQOTYI\System.Windows.Forms.dll
    + 2010-10-06 08:00 . 2010-10-06 08:00 1232896 c:\windows\assembly\temp\UPGECA1590\System.dll
    + 2011-06-28 08:04 . 2011-08-10 08:04 2933248 c:\windows\assembly\temp\GQ9R2DAL4F\System.Data.dll
    + 2010-10-06 08:01 . 2010-10-06 08:01 2088960 c:\windows\assembly\temp\BEJHMRW1Y3\System.Xml.dll
    + 2010-10-06 08:00 . 2010-10-06 08:00 1966080 c:\windows\assembly\temp\9QNSQV0X2Z\System.dll
    + 2010-10-06 08:01 . 2010-10-06 08:01 3391488 c:\windows\assembly\temp\07KIV161Y3\mscorlib.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_accf1ae6\System.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_78701b1c\System.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_e8de6e4d\System.Xml.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_2ca2944e\System.Xml.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_6cda94b7\System.Windows.Forms.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_2008e69d\System.Windows.Forms.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_18b7fe3d\System.Drawing.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_bf6c180a\System.Design.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_3418d22e\System.Design.dll
    + 2011-10-13 08:02 . 2011-10-13 08:02 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_990a6d14\mscorlib.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_120b0701\mscorlib.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd6e0cd6f124a6d041ef1b4c9a5f080b\WindowsBase.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\162600dde59fbaa0c048a949158ecba3\UIAutomationClientsideProviders.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xml.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\22229a30650a9afbac984e1093898b13\System.WorkflowServices.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e\System.WorkflowServices.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f\System.Workflow.Runtime.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\4d6b3cc1fc7a4788612241af7966715a\System.Workflow.Runtime.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\e4c9853af945c9cfede19f3faf18af6e\System.Workflow.ComponentModel.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09\System.Workflow.ComponentModel.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\ab4b50c7c789e46a485903365765fde8\System.Workflow.Activities.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\921629dc69a5a895101097c88ae67897\System.Workflow.Activities.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a2392c995b1bb6b63079091259222357\System.Web.Services.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6303e256d2ac0843c3e4c24172c90544\System.Web.Services.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274\System.Web.Mobile.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\3da92a0b9b8ac97e11ca8bf4df671a78\System.Web.Mobile.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\ccaf6bdd256a9b5079fedadcc8993327\System.Web.Extensions.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\01f4d6aa3299a41b8578b7e96afdcfb1\System.Web.Extensions.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\e1208f0d981c420fc59f806bfbaa713b\System.Speech.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7\System.ServiceModel.Web.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\27e1b8dfd5e1ccf2c5b9efc51f674c69\System.ServiceModel.Web.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dece01bd9e9c32e47630fdfc78d3bd32\System.Runtime.Serialization.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\90b444d02047ef27921153d46967ef0e\System.Printing.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69\System.IdentityModel.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\a50e2fc92db32751857fb8d297f9d7bc\System.IdentityModel.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\7ed09623172a292eaee51e2e3bcaf784\System.Drawing.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7\System.DirectoryServices.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\259ecf480769f4e60514b7ae2abaa6f1\System.DirectoryServices.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f\System.Deployment.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\71cf3eb40fc38e6ac8fba09e872d2878\System.Deployment.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c\System.Data.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\db2d84e279807592a680ef4135e9fe9a\System.Data.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb\System.Data.SqlXml.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\0b16305773369cf740c6a2b1f1d785b2\System.Data.SqlXml.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\c1b9b8ce390548dcca661a5e6a908408\System.Data.Services.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\541142d8742e6e88f1e729fafee04e71\System.Data.Services.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a\System.Data.Linq.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\571af34939797a7c1cd05b0b925a45bf\System.Data.Linq.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a3ce22c2a84fdcb008d72d230ee0b2c0\System.Data.Entity.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\2b58cc071d6bf0c741e91f86c09de5d7\System.Data.Entity.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e54e013315849f5e34d8f2a8e7fdb450\System.Core.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\24ab0cacc77e8696ceff3157942a2de4\ReachFramework.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\fac1ca86f4fea17de40d7fdaba38563e\PresentationUI.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730\PresentationBuildTasks.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b187becbc388c4ce7f33ede4da76e7b1\PresentationBuildTasks.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\c6b19db2534042d435ede580f92bc75c\Microsoft.VisualBasic.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\08594c4ba9ea0253a836fe1d8d341984\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-13 08:11 . 2011-10-13 08:11 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8ad32b72258899177c07dc5912b5b748\Microsoft.JScript.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\345abd035c9378667b1cac54c1f21c97\Microsoft.JScript.ni.dll
    + 2011-08-10 08:09 . 2011-08-10 08:09 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\906cd5555b79e4e0486dc8ef2a748b13\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\7baff7d694394aaba490082c88d48fd2\Microsoft.Build.Tasks.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095\Microsoft.Build.Tasks.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\235a22e1ae9742bb724d411629dd99d5\Microsoft.Build.Engine.ni.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2011-04-15 08:04 . 2011-04-15 08:04 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-10-13 08:06 . 2011-10-13 08:06 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-06-28 08:04 . 2011-10-13 08:06 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2010-10-06 08:02 . 2011-04-15 08:04 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-06-28 08:04 . 2011-10-13 08:06 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-10-06 08:02 . 2011-04-15 08:04 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-10-06 08:00 . 2010-10-06 08:00 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    + 2011-10-13 08:01 . 2011-10-13 08:01 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    - 2010-10-06 08:00 . 2010-10-06 08:00 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-10-13 08:02 . 2011-06-02 14:02 1858944 c:\windows\$NtUninstallKB2567053$\win32k.sys
    + 2011-07-13 08:00 . 2011-03-03 13:21 1857920 c:\windows\$NtUninstallKB2555917$\win32k.sys
    + 2011-10-13 04:07 . 2011-08-22 23:47 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll
    + 2011-10-13 04:07 . 2011-10-03 08:34 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll
    + 2011-10-13 04:02 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys
    + 2011-08-10 07:22 . 2011-06-23 18:33 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll
    + 2011-08-10 07:22 . 2011-07-25 15:15 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
    + 2011-08-10 07:22 . 2011-06-23 18:33 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll
    + 2011-06-02 14:07 . 2011-06-02 14:07 1867904 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys
    + 2011-06-16 11:37 . 2011-04-25 16:09 1213952 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\urlmon.dll
    + 2011-06-16 11:37 . 2011-05-30 22:17 5967360 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 1992192 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iertutil.dll
    + 2010-06-11 04:37 . 2011-11-10 06:01 50295240 c:\windows\system32\MRT.exe
    + 2009-03-08 09:39 . 2011-08-23 22:48 11081728 c:\windows\system32\ieframe.dll
    + 2010-06-11 04:37 . 2011-08-23 22:48 11081728 c:\windows\system32\dllcache\ieframe.dll
    + 2011-07-13 03:49 . 2011-07-13 03:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067\M2572067Uninstall.msp
    + 2011-03-28 08:27 . 2011-03-28 08:27 15456256 c:\windows\Installer\cc2e5ee.msp
    + 2011-07-12 01:43 . 2011-07-12 01:43 11641344 c:\windows\Installer\1f35316.msp
    + 2011-07-12 20:50 . 2011-07-12 20:50 17555968 c:\windows\Installer\1f3530d.msp
    + 2011-10-13 08:02 . 2011-06-23 18:36 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll
    + 2011-08-10 08:00 . 2011-04-26 15:11 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll
    + 2011-06-17 08:00 . 2011-02-22 23:06 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d00cc387e462e4c3cdcd112b137cac87\System.Windows.Forms.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll
    + 2011-10-13 08:12 . 2011-10-13 08:12 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll
    + 2011-08-10 08:10 . 2011-08-10 08:10 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\40893760431f8f0dcce3e18630e45b23\System.Web.ni.dll
    + 2011-08-10 08:08 . 2011-08-10 08:08 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\e3a0205acab2215fbad7927d9d483aeb\System.ServiceModel.ni.dll
    + 2011-10-13 08:10 . 2011-10-13 08:10 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\System.ServiceModel.ni.dll
    + 2011-10-13 08:08 . 2011-10-13 08:08 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558\System.Design.ni.dll
    + 2011-08-10 08:06 . 2011-08-10 08:06 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\63ad0cd9b5e038c8e2e41415657db8fc\System.Design.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\704556e34128441ea9f1a81cc89f8a79\PresentationFramework.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\054488924fcc579cce9fa0209dafe28b\PresentationFramework.ni.dll
    + 2011-10-13 08:07 . 2011-10-13 08:07 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96\PresentationCore.ni.dll
    + 2011-08-10 08:05 . 2011-08-10 08:05 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\5f332c48d03eca57419c4f0e884092ee\PresentationCore.ni.dll
    + 2011-10-13 08:06 . 2011-10-13 08:07 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
    + 2011-06-28 08:04 . 2011-06-28 08:04 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll
    + 2011-10-13 04:07 . 2011-08-22 23:47 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll
    + 2011-06-25 06:03 . 2011-06-25 06:03 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll
    + 2011-06-16 11:37 . 2011-04-25 16:09 11083776 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SigmatelSysTrayApp"="stsystra.exe" [2006-03-20 282624]
    "DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-11-07 122940]
    "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
    "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
    "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-09-17 1318552]
    "StartCCC"="c:\program files\ATI\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-07 102400]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
    "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "AvgUninstallURL"="start http://www.avg.com/ww.special-unins...441b-4db59eea453d5075d5b17b21efb104bc6f619484" [?]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
    2001-12-21 04:34 24576 ----a-w- c:\program files\AlienGUIse\fastload.dll
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^Karl Wanke^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
    path=c:\documents and settings\Karl Wanke\Start Menu\Programs\Startup\LimeWire On Startup.lnk
    backup=c:\windows\pss\LimeWire On Startup.lnkStartup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^Karl Wanke^Start Menu^Programs^Startup^MagicDisc.lnk]
    path=c:\documents and settings\Karl Wanke\Start Menu\Programs\Startup\MagicDisc.lnk
    backup=c:\windows\pss\MagicDisc.lnkStartup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
    2010-09-22 23:11 640440 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
    2011-01-31 05:36 38840 ----a-w- c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
    2011-04-16 04:27 611712 ----a-w- c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2011-10-09 23:06 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2010-11-29 23:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
    "c:\\Documents and Settings\\All Users\\Application Data\\NexonUS\\NGM\\NGM.exe"=
    "c:\\Nexon\\Combat Arms\\NMService.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
    "c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
    "c:\nexon\Combat Arms\CombatArms.exe"= c:\nexon\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe
    "c:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
    "c:\nexon\Combat Arms\Engine.exe"= c:\nexon\Combat Arms\Engine.exe:*Enabled:Engine.exe
    "c:\\Program Files\\Common Files\\Mcafee\\McSvcHost\\McSvHost.exe"=
    "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "57267:TCP"= 57267:TCP:pando Media Booster
    "57267:UDP"= 57267:UDP:pando Media Booster
    "5353:TCP"= 5353:TCP:Adobe CSI CS4
    .
    R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [6/26/2010 7:41 PM 89792]
    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [6/26/2010 7:41 PM 214904]
    R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [6/26/2010 7:41 PM 214904]
    R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [6/26/2010 7:41 PM 214904]
    R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\Mcafee\SystemCore\mfefire.exe [6/26/2010 7:41 PM 160608]
    R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\Mcafee\SystemCore\mfevtps.exe [6/26/2010 7:41 PM 150856]
    R2 WDDMService;WDDMService;c:\program files\Western Digital\WD SmartWare\WDDMService.exe [6/29/2011 7:01 AM 263056]
    R2 WDFMEService;WDFMEService;c:\program files\Western Digital\WD SmartWare\WDFME.exe [6/29/2011 7:01 AM 1592208]
    R2 WDRulesService;WDRulesService;c:\program files\Western Digital\WD SmartWare\WDRulesEngine.exe [6/29/2011 7:01 AM 1091984]
    R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [6/26/2010 7:41 PM 57600]
    R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [6/26/2010 7:41 PM 338176]
    R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [6/26/2010 7:41 PM 83856]
    R4 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys --> c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [?]
    R4 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys --> c:\windows\system32\DRIVERS\AVGIDSEH.Sys [?]
    R4 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys --> c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [?]
    R4 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\AVGIDSShim.Sys --> c:\windows\system32\DRIVERS\AVGIDSShim.Sys [?]
    R4 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys --> c:\windows\system32\DRIVERS\avgrkx86.sys [?]
    R4 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys --> c:\windows\system32\DRIVERS\avgtdix.sys [?]
    S0 nielprt;Nielsen Patch Service;c:\windows\system32\DRIVERS\nielprt.sys --> c:\windows\system32\DRIVERS\nielprt.sys [?]
    S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
    S3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys --> c:\windows\system32\DRIVERS\ivusb.sys [?]
    S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [6/26/2010 7:41 PM 83856]
    S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [6/26/2010 7:41 PM 87656]
    S3 NielGfx;Nielsen USB GFX;c:\windows\system32\drivers\nielgfx.sys --> c:\windows\system32\drivers\nielgfx.sys [?]
    S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [8/7/2011 7:23 PM 11520]
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - Avgldx86
    *Deregistered* - mfeavfk01
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-12-09 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 22:57]
    .
    .
    ------- Supplementary Scan -------
    .
    IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath -
    .
    - - - - ORPHANS REMOVED - - - -
    .
    AddRemove-{26918E50-6EDC-4A59-A31E-E9C1EF06F1BC}_is1 - c:\documents and settings\Karl Wanke\Local Settings\Application Data\Batchwork\Xls-2-Xls\unins000.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2011-12-10 12:44
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-1993962763-436374069-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
    @Denied: (Full) (LocalSystem)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'winlogon.exe'(1356)
    c:\windows\system32\Ati2evxx.dll
    c:\windows\system32\atiadlxx.dll
    c:\program files\AlienGUIse\fastload.dll
    c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
    .
    - - - - - - - > 'explorer.exe'(4860)
    c:\windows\system32\WININET.dll
    c:\progra~1\mcafee\SITEAD~1\saHook.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
    .
    Completion time: 2011-12-10 12:59:32
    ComboFix-quarantined-files.txt 2011-12-10 18:59
    ComboFix2.txt 2011-06-05 15:59
    .
    Pre-Run: 427,829,936,128 bytes free
    Post-Run: 432,584,171,520 bytes free
    .
    - - End Of File - - 5D4CF24943FA96B3347CD87D4ADA3BF9
     

    Attached Files:

  2. Karl-TX

    Karl-TX Thread Starter

    Joined:
    Dec 10, 2011
    Messages:
    2
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1030680

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice