1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Virus Removal and Restoring TCP/IP

Discussion in 'Virus & Other Malware Removal' started by NotEnoughSand, Dec 9, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    I'd like to request some help.

    Yesterday, my Inspiron 600m (Windows XP Service Pack 3) was infected with TR/Rootkit.Gen 2, BDS/Backdoor.Gen5, and HTML/Infected.WebPage.Gen. During the infection, my browser was being intermittently redirected. Eventually, after running several scans with Avira, MalwareBytes, and Super Anti-Spyware, several instances of the infection were removed and my internet connections stopped functioning. Since the latest removal, wireless and ethernet connections sit at the "acquiring network address" step without ever establishing a true connection.

    I would appreciate any advice you can provide on eliminating the infection and restoring my internet connections. Thanks in advance!

    --------------------------
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:38:05 PM, on 12/9/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
    C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\Notebook Hardware Control\nhc.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\WINDOWS\system32\conime.exe
    C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    c:\program files\avira\antivir desktop\avcenter.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngin0.dll
    O2 - BHO: ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files\ATLAS V13\ATLIECP.DLL
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Vuze Remote - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: ATLAS Toolbar - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files\ATLAS V13\ATLIECP.DLL
    O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll
    O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngin0.dll
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
    O4 - HKLM\..\Run: [NotebookHardwareControl] "C:\Program Files\Notebook Hardware Control\nhc.exe" -quiet
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - Startup: 2WireSetup.lnk = C:\Program Files\2Wire\WebWorks.exe
    O8 - Extra context menu item: &Translate with ATLAS - C:\Program Files\ATLAS V13\Atlscript.html
    O8 - Extra context menu item: ATLAS Translation &Editor - C:\Program Files\ATLAS V13\AtlscriptEdit.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: ATLAS Translation - {B7707A72-4355-11D4-82BD-00000EBBEF8D} - C:\Program Files\ATLAS V13\Atlscript.html
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.insightbb.com
    O15 - ESC Trusted Zone: http://*.update.microsoft.com
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\common\yinsthelper.dll
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6087.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.112.159,85.255.112.16
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: dlbu_device - Dell - C:\WINDOWS\system32\dlbucoms.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (file missing)
    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    --
    End of file - 8876 bytes
    ----------------------------------------------
    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26
    Run by Ken at 13:39:16 on 2011-12-09
    Microsoft Windows XP Professional 5.1.2600.3.932.81.1033.18.1023.596 [GMT -6:00]
    .
    AV: Norton AntiVirus *Disabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
    AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k eapsvcs
    C:\WINDOWS\System32\svchost.exe -k dot3svc
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    svchost.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
    C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    svchost.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\Notebook Hardware Control\nhc.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\WINDOWS\system32\conime.exe
    C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    c:\program files\avira\antivir desktop\avcenter.exe
    C:\WINDOWS\System32\NOTEPAD.EXE
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.drudgereport.com/
    uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
    BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
    BHO: Conduit Engine : {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\prxConduitEngin0.dll
    BHO: ATLAS Toolbar: {3c6301ed-0f78-4af2-8150-d9c052361a8e} - c:\program files\atlas v13\ATLIECP.DLL
    BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
    BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuz0.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: ATLAS Toolbar: {3c6301ed-0f78-4af2-8150-d9c052361a8e} - c:\program files\atlas v13\ATLIECP.DLL
    TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuz0.dll
    TB: Conduit Engine : {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\prxConduitEngin0.dll
    TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
    TB: {9D425283-D487-4337-BAB6-AB8354A81457} - No File
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
    mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
    mRun: [IntelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe"
    mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
    mRun: [dellsupportcenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P dellsupportcenter
    mRun: [NotebookHardwareControl] "c:\program files\notebook hardware control\nhc.exe" -quiet
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    StartupFolder: c:\docume~1\ken\startm~1\programs\startup\2wires~1.lnk - c:\program files\2wire\WebWorks.exe
    IE: &Translate with ATLAS - c:\program files\atlas v13\Atlscript.html
    IE: ATLAS Translation &Editor - c:\program files\atlas v13\AtlscriptEdit.html
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
    IE: {B7707A72-4355-11D4-82BD-00000EBBEF8D} - c:\program files\atlas v13\Atlscript.html
    IE: {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
    DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
    DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
    DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6087.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
    DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxps://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    TCP: DhcpNameServer = 192.168.1.254
    TCP: Interfaces\{459CF2DB-DA0C-4EE3-A306-3DF30846A3E8} : DhcpNameServer = 192.168.1.254
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
    Notify: AtiExtEvent - Ati2evxx.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\ken\application data\mozilla\firefox\profiles\rdge76fq.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - www.drudgereport.com
    FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=ZUGO&form=ZGAADF&q=
    FF - prefs.js: keyword.enabled - false
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: c:\documents and settings\ken\application data\facebook\npfbplugin_1_0_1.dll
    FF - plugin: c:\documents and settings\ken\application data\facebook\npfbplugin_1_0_3.dll
    FF - plugin: c:\documents and settings\ken\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
    FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\NPMCult3DP.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
    FF - plugin: c:\windows\system32\cult3d\NPMCult3DP.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-11-22 11608]
    R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
    R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-2-17 66632]
    R1 vcdrom;Virtual CD-ROM Device Driver;c:\windows\system32\drivers\VCdRom.sys [2010-3-31 8576]
    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-11-22 136360]
    R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-11-22 269480]
    R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-11-22 66616]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\vmlaunch\buddyvm.sys --> c:\program files\vmlaunch\BuddyVM.sys [?]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-17 135664]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-17 135664]
    S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-17 12872]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
    S4 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\logmein hamachi\hamachi-2.exe [2010-12-6 1238408]
    .
    =============== Created Last 30 ================
    .
    2011-12-09 18:06:22 -------- d-----w- c:\program files\Stellar Phoenix Password Recovery
    2011-12-08 07:04:59 64512 ----a-w- c:\windows\system32\drivers\serial.sys
    2011-12-08 07:04:59 64512 ----a-w- c:\windows\system32\dllcache\serial.sys
    2011-11-16 04:21:09 -------- d-----w- c:\documents and settings\ken\application data\Trillian
    .
    ==================== Find3M ====================
    .
    2011-12-09 19:17:11 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
    2011-12-02 01:45:14 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-23 16:14:08 4608 ----a-w- c:\windows\system32\w95inf32.dll
    2011-10-23 16:14:08 2272 ----a-w- c:\windows\system32\w95inf16.dll
    2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-30 03:06:09 89680 ----a-w- c:\documents and settings\ken\MSSSerif120.fon
    2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 16:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 16:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 16:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    .
    ============= FINISH: 13:40:56.39 ===============

    ----------------------------------------------\
    GMER 1.0.15.15641 - http://www.gmer.net
    Rootkit scan 2011-12-09 17:35:14
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 TOSHIBA_MK4026GAX rev.PA102D
    Running: 6q6oqztc.exe; Driver: C:\DOCUME~1\Ken\LOCALS~1\Temp\uxriyfoc.sys

    ---- System - GMER 1.0.15 ----
    SSDT F7ECB644 ZwClose
    SSDT F7ECB5FE ZwCreateKey
    SSDT F7ECB64E ZwCreateSection
    SSDT F7ECB5F4 ZwCreateThread
    SSDT F7ECB603 ZwDeleteKey
    SSDT F7ECB60D ZwDeleteValueKey
    SSDT F7ECB63F ZwDuplicateObject
    SSDT F7ECB612 ZwLoadKey
    SSDT F7ECB5E0 ZwOpenProcess
    SSDT F7ECB5E5 ZwOpenThread
    SSDT F7ECB61C ZwReplaceKey
    SSDT F7ECB617 ZwRestoreKey
    SSDT F7ECB653 ZwSetContextThread
    SSDT F7ECB608 ZwSetValueKey
    SSDT F7ECB5EF ZwTerminateProcess
    ---- Kernel code sections - GMER 1.0.15 ----
    ? C:\DOCUME~1\Ken\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !
    ---- Devices - GMER 1.0.15 ----
    Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)
    Device F1289D20
    AttachedDevice fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
    Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    Device Cdfs.SYS (CD-ROM File System Driver/Microsoft Corporation)
    Device tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
    ---- Registry - GMER 1.0.15 ----
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] C:\Program Files\DAEMON Tools\
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] 0
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\[email protected] 0x0F 0x9C 0x24 0x52 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x00 0xCA 0xAF 0x09 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\[email protected] 0x83 0x31 0xF3 0x56 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\[email protected] C:\Program Files\DAEMON Tools\
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\[email protected] 0
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\[email protected] 0x0F 0x9C 0x24 0x52 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x00 0xCA 0xAF 0x09 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\[email protected] 0x83 0x31 0xF3 0x56 ...
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\[email protected] C:\Program Files\DAEMON Tools\
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\[email protected] 0
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\[email protected] 0x0F 0x9C 0x24 0x52 ...
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\[email protected] 0x00 0xCA 0xAF 0x09 ...
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\[email protected] 0x83 0x31 0xF3 0x56 ...
    Reg HKLM\SOFTWARE\Classes\CLSID\{33D9A760-90C8-11d0-BD43-00A0C911CE86}\Instance\Indeo
    Reg HKLM\SOFTWARE\Classes\CLSID\{33D9A760-90C8-11d0-BD43-00A0C911CE86}\Instance\[email protected] Indeo? video 5.10 Compression Filter
    Reg HKLM\SOFTWARE\Classes\CLSID\{33D9A760-90C8-11d0-BD43-00A0C911CE86}\Instance\[email protected] {1F73E9B1-8C3A-11D0-A3BE-00A0C9244436}
    Reg HKLM\SOFTWARE\Classes\CLSID\{33D9A760-90C8-11d0-BD43-00A0C911CE86}\Instance\[email protected] 0x02 0x00 0x00 0x00 ...
    Reg HKLM\SOFTWARE\Classes\CLSID\{33D9A760-90C8-11d0-BD43-00A0C911CE86}\Instance\[email protected] 1
    ---- Files - GMER 1.0.15 ----
    File C:\WINDOWS\$NtUninstallKB1513$\3873757271 0 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746 0 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\@ 2048 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\bckfg.tmp 851 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\cfg.ini 199 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\Desktop.ini 4608 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\keywords 72 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\kwrd.dll 223744 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\L 0 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\L\iahonoel 138496 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\lsflt7.ver 5176 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U 0 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\[email protected] 2048 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\[email protected] 224768 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\[email protected] 1024 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\8[email protected] 1024 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\[email protected] 12800 bytes
    File C:\WINDOWS\$NtUninstallKB1513$\446373746\U\[email protected] 98304 bytes
    ---- EOF - GMER 1.0.15 ----
     

    Attached Files:

  2. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Allowable post 24-hour bump =)
     
  3. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    GMER is indicating ZeroAccess rootkit is still on your system. You also have two AV programs installed, as Norton is outdated you should uninstall that,

    Do you have access to another PC to d/l and transfer to the infected system, if so do the following:

    You will have to d/l and save to USB or other media and transfer to infected PC.

    Delete any versions of Combofix that you may have on your Desktop, download a fresh copy from either of the following links :-

    Link 1
    Link 2

    • Ensure that Combofix is saved directly to the Desktop <--- Very important

      Before saving Combofix to the Desktop re-name to Gotcha.exe as below:

      [​IMG]

    • Disable all security programs as they will have a negative effect on Combofix, instructions available Here if required. Be aware the list may not have all programs listed, if you need more help please ask.
    • Close any open browsers and any other programs you might have running
    • Double click the [​IMG] icon to run the tool (Vista or Windows 7 users right click and select "Run as Administrator)
    • Instructions for running Combofix available Here if required.
    • If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to install?" Please select yes & let it download the files it needs to do this. Once the recovery console is installed Combofix will then offer to scan for malware. Select continue or yes.
    • When finished, it will produce a report for you. Please post the "C:\ComboFix.txt" for further review

    ****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****

    Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
    Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell us when you reply. Read Here why disabling autoruns is recommended.

    *EXTRA NOTES*
    • If Combofix detects any Rootkit/Bootkit activity on your system it will give a warning and prompt for a reboot, you must allow it to do so.
    • If Combofix reboot's due to a rootkit, the screen may stay black for several minutes on reboot, this is normal
    • If after running Combofix you receive any type of warning message about registry key's being listed for deletion when trying to open certain items, reboot the system and this will fix the issue (Those items will not be deleted)

    Post the log in next reply please...

    Kevin
     
  4. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Thank you, Kevin.

    Ran Combofix. Please be advised that even though I disabled Avira before running Combofix, Combofix reported that Avira was enabled. Combofix detected Rootkit.ZeroAccess and ran through several reboot cycles to eliminate it. Internet access was not restored after ComboFix was finished, so I gave it one more reboot as advised by ComboFix, but both wired and wireless internet remains down.

    Side notes:
    Regarding Norton, I uninstalled Norton and ran the Norton Removal Utility quite some time ago. I can't explain why artifacts of it remain on the system.
    I've also noticed that Windows Firewall cannot be enabled; the Windows Firewall/Internet Connection Service is disabled and cannot be activated from Windows Security Center.


    ComboFix 11-12-08.01 - Ken 1/2011 Sun 11:14:35.5.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.932.81.1033.18.1023.577 [GMT -6:00]
    Running from: c:\documents and settings\Ken\Desktop\Gotcha.exe
    AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
    AV: Norton AntiVirus *Disabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
    * Created a new restore point
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\All Users\Application Data\TEMP
    c:\documents and settings\Ken\WINDOWS
    c:\program files\Search Toolbar
    c:\program files\Search Toolbar\icon.ico
    c:\program files\Search Toolbar\SearchToolbarUninstall.exe
    c:\program files\Search Toolbar\SearchToolbarUpdater.exe
    c:\windows\$NtUninstallKB1513$
    c:\windows\$NtUninstallKB1513$\3873757271
    c:\windows\$NtUninstallKB1513$\446373746\@
    c:\windows\$NtUninstallKB1513$\446373746\bckfg.tmp
    c:\windows\$NtUninstallKB1513$\446373746\cfg.ini
    c:\windows\$NtUninstallKB1513$\446373746\Desktop.ini
    c:\windows\$NtUninstallKB1513$\446373746\keywords
    c:\windows\$NtUninstallKB1513$\446373746\kwrd.dll
    c:\windows\$NtUninstallKB1513$\446373746\L\iahonoel
    c:\windows\$NtUninstallKB1513$\446373746\lsflt7.ver
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\$NtUninstallKB1513$\446373746\U\[email protected]
    c:\windows\CSC\d6
    c:\windows\system32\MSMAsk32.ocx
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-11-11 to 2011-12-11 )))))))))))))))))))))))))))))))
    .
    .
    2011-12-09 18:06 . 2011-12-09 18:06 -------- d-----w- c:\program files\Stellar Phoenix Password Recovery
    2011-12-08 07:04 . 2008-04-13 20:15 64512 ----a-w- c:\windows\system32\drivers\serial.sys
    2011-12-08 07:04 . 2008-04-13 20:15 64512 ----a-w- c:\windows\system32\dllcache\serial.sys
    2011-11-16 04:21 . 2011-11-18 03:01 -------- d-----w- c:\documents and settings\Ken\Application Data\Trillian
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-12-11 17:36 . 2011-02-12 00:18 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
    2011-12-09 23:38 . 2005-10-30 18:22 89680 ----a-w- c:\documents and settings\Ken\MSSSerif120.fon
    2011-12-02 01:45 . 2011-06-30 21:49 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-23 16:14 . 2011-10-23 16:14 4608 ----a-w- c:\windows\system32\w95inf32.dll
    2011-10-23 16:14 . 2011-10-23 16:14 2272 ----a-w- c:\windows\system32\w95inf16.dll
    2011-10-10 14:22 . 2004-08-11 22:12 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06 . 2004-08-11 22:00 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 16:41 . 2008-07-30 00:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 16:41 . 2004-08-11 22:00 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 16:41 . 2004-08-11 22:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    2011-11-11 04:48 . 2011-09-30 00:23 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((( [email protected]_21.13.43 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2010-07-16 00:00 . 1996-06-09 18:52 34864 c:\windows\YDKJ2\UNWISE.EXE
    + 2011-08-26 05:58 . 1996-06-09 18:52 34864 c:\windows\YDKJ2\UNWISE.EXE
    + 2011-08-26 05:58 . 1996-10-12 06:49 88516 c:\windows\YDKJ2\UNINST.EXE
    - 2010-07-16 00:00 . 1996-10-12 06:49 88516 c:\windows\YDKJ2\UNINST.EXE
    + 2011-08-11 12:13 . 2011-08-11 12:13 21880 c:\windows\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
    + 2011-12-11 17:30 . 2011-12-11 17:30 16384 c:\windows\Temp\Perflib_Perfdata_c90.dat
    + 2011-12-11 17:32 . 2011-12-11 17:32 16384 c:\windows\Temp\Perflib_Perfdata_670.dat
    + 2011-12-11 17:32 . 2011-12-11 17:32 16384 c:\windows\Temp\Perflib_Perfdata_614.dat
    - 2010-07-09 19:04 . 2010-07-09 19:04 41872 c:\windows\system32\xfcodec.dll
    + 2011-04-16 16:51 . 2011-04-16 16:51 41872 c:\windows\system32\xfcodec.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 38400 c:\windows\system32\wpdshextres.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 38400 c:\windows\system32\wpdshextres.dll
    - 2006-10-19 00:00 . 2006-10-19 00:00 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2006-10-19 00:00 . 2009-01-30 22:21 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2005-08-25 09:38 . 2009-01-31 01:35 63488 c:\windows\system32\wpdmtpus.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 63488 c:\windows\system32\wpdmtpus.dll
    + 2005-08-25 09:38 . 2009-01-31 01:35 35840 c:\windows\system32\wpdconns.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 35840 c:\windows\system32\wpdconns.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 99840 c:\windows\system32\wmpshell.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 99840 c:\windows\system32\wmpshell.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 37376 c:\windows\system32\wmdmps.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 37376 c:\windows\system32\wmdmps.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 33792 c:\windows\system32\wmdmlog.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 33792 c:\windows\system32\wmdmlog.dll
    + 2005-01-12 06:00 . 2009-04-28 20:20 96752 c:\windows\system32\VXBLOCK.dll
    + 2011-10-23 16:14 . 1998-08-17 09:21 10240 c:\windows\system32\vidx16.dll
    + 2011-10-23 16:14 . 1998-09-02 08:28 63488 c:\windows\system32\unam4ie.exe
    - 2007-01-29 08:58 . 2010-06-21 14:46 46080 c:\windows\system32\tzchange.exe
    + 2007-01-29 08:58 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe
    + 2011-07-12 18:02 . 2010-07-05 13:15 17272 c:\windows\system32\spmsg.dll
    - 2009-12-04 05:36 . 2009-12-09 21:22 21840 c:\windows\system32\SIntfNT.dll
    + 2009-12-04 05:36 . 2011-03-06 04:20 21840 c:\windows\system32\SIntfNT.dll
    + 2009-12-04 05:36 . 2011-03-06 04:20 17212 c:\windows\system32\SIntf32.dll
    - 2009-12-04 05:36 . 2009-12-09 21:22 17212 c:\windows\system32\SIntf32.dll
    + 2010-12-07 22:58 . 2011-03-06 04:20 12067 c:\windows\system32\SIntf16.dll
    + 2005-08-25 10:19 . 2009-04-28 20:20 66032 c:\windows\system32\pxinsa64.exe
    + 2005-08-25 10:19 . 2009-04-28 20:20 72176 c:\windows\system32\pxhpinst.exe
    + 2005-08-25 10:19 . 2009-04-28 20:20 66544 c:\windows\system32\pxcpya64.exe
    + 2004-08-11 22:00 . 2011-11-07 06:16 97816 c:\windows\system32\perfc009.dat
    + 2011-10-23 16:13 . 1999-07-16 20:53 57856 c:\windows\system32\PCDS.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 27136 c:\windows\system32\mspmsnsv.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 27136 c:\windows\system32\mspmsnsv.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 66560 c:\windows\system32\mshtmled.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 66560 c:\windows\system32\mshtmled.dll
    + 2006-11-08 02:03 . 2011-08-22 23:48 55296 c:\windows\system32\msfeedsbs.dll
    - 2006-11-08 02:03 . 2010-09-10 05:58 55296 c:\windows\system32\msfeedsbs.dll
    + 2011-10-23 16:14 . 1998-08-17 09:21 11776 c:\windows\system32\mciqtz.drv
    + 2011-10-23 16:13 . 1998-12-01 18:58 35840 c:\windows\system32\lttwn10N.dll
    + 2011-10-23 16:14 . 1998-09-02 08:28 38160 c:\windows\system32\LMRTREND.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 43520 c:\windows\system32\licmgr10.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 43520 c:\windows\system32\licmgr10.dll
    + 2011-10-23 16:13 . 1998-11-30 18:55 27648 c:\windows\system32\lfwpg10N.dll
    + 2011-10-23 16:13 . 1998-12-01 19:00 58368 c:\windows\system32\lfwmf10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:55 27136 c:\windows\system32\lfwfx10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:54 27648 c:\windows\system32\lftga10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:54 26112 c:\windows\system32\lfras10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:54 56320 c:\windows\system32\lfpsd10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:53 33280 c:\windows\system32\lfpcx10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:53 31232 c:\windows\system32\lfpct10N.dll
    + 2011-10-23 16:13 . 1998-12-01 19:00 26112 c:\windows\system32\lfpcd10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:53 26112 c:\windows\system32\lfmsp10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:52 25600 c:\windows\system32\lfmac10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:52 27136 c:\windows\system32\lfimg10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:52 46592 c:\windows\system32\lfica10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:51 77824 c:\windows\system32\lffax10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:59 31232 c:\windows\system32\lfeps10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:51 27136 c:\windows\system32\lfcal10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:59 34304 c:\windows\system32\lfbmp10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:59 28672 c:\windows\system32\lfawd10N.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 11264 c:\windows\system32\LAPRXY.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 11264 c:\windows\system32\LAPRXY.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 25600 c:\windows\system32\jsproxy.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 25600 c:\windows\system32\jsproxy.dll
    + 2004-08-11 22:12 . 2010-11-18 18:12 81920 c:\windows\system32\isign32.dll
    - 2004-08-11 22:12 . 2008-04-14 00:11 81920 c:\windows\system32\isign32.dll
    - 2010-02-06 16:59 . 2010-02-03 20:56 26176 c:\windows\system32\hamachi.sys
    + 2010-02-06 16:59 . 2009-03-18 22:35 26176 c:\windows\system32\hamachi.sys
    + 2010-03-18 18:16 . 2010-03-18 18:16 70472 c:\windows\system32\dxva2.dll
    - 2005-08-25 09:38 . 2006-10-19 00:00 38528 c:\windows\system32\drivers\wpdusb.sys
    + 2005-08-25 09:38 . 2009-01-30 22:20 38528 c:\windows\system32\drivers\wpdusb.sys
    + 2004-08-04 04:08 . 2008-04-13 19:45 49408 c:\windows\system32\drivers\stream.sys
    - 2004-08-04 04:08 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
    + 2005-01-26 07:03 . 2009-04-28 20:20 44944 c:\windows\system32\drivers\pxhelp20.sys
    + 2004-08-11 22:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
    + 2004-08-11 22:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    + 2010-11-23 22:38 . 2011-08-31 23:00 22216 c:\windows\system32\drivers\mbam.sys
    + 2005-08-25 09:44 . 2008-04-13 19:45 60160 c:\windows\system32\drivers\drmk.sys
    - 2005-08-25 09:44 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
    + 2010-11-23 03:45 . 2011-06-28 16:50 66616 c:\windows\system32\drivers\avgntflt.sys
    + 2004-08-11 22:00 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll
    - 2004-08-11 22:00 . 2008-04-14 00:11 45568 c:\windows\system32\dnsrslvr.dll
    - 2010-06-11 13:46 . 2010-09-10 05:58 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2010-06-11 13:46 . 2011-08-22 23:48 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 99840 c:\windows\system32\dllcache\wmpshell.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 99840 c:\windows\system32\dllcache\wmpshell.dll
    + 2004-08-11 22:12 . 2009-01-31 01:30 64512 c:\windows\system32\dllcache\wmplayer.exe
    + 2004-08-11 22:12 . 2009-01-31 01:34 96256 c:\windows\system32\dllcache\wmpband.dll
    - 2004-08-11 22:12 . 2006-10-19 01:47 96256 c:\windows\system32\dllcache\wmpband.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 37376 c:\windows\system32\dllcache\wmdmps.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 37376 c:\windows\system32\dllcache\wmdmps.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 33792 c:\windows\system32\dllcache\wmdmlog.dll
    + 2010-12-14 20:16 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
    + 2004-08-04 04:08 . 2008-04-13 19:45 49408 c:\windows\system32\dllcache\stream.sys
    + 2011-09-26 16:41 . 2011-09-26 16:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2010-12-14 20:18 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
    + 2011-08-10 09:27 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    - 2004-08-11 22:00 . 2006-10-19 01:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 27136 c:\windows\system32\dllcache\mspmsnsv.dll
    - 2006-05-10 05:23 . 2010-09-10 05:58 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2006-05-10 05:23 . 2011-08-22 23:48 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2007-05-26 08:33 . 2011-08-22 23:48 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    - 2007-05-26 08:33 . 2010-09-10 05:58 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2006-10-17 17:05 . 2011-08-22 23:48 43520 c:\windows\system32\dllcache\licmgr10.dll
    - 2006-10-17 17:05 . 2010-09-10 05:58 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 11264 c:\windows\system32\dllcache\LAPRXY.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
    + 2006-05-10 05:22 . 2011-08-22 23:48 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2006-05-10 05:22 . 2010-09-10 05:58 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\system32\dllcache\isign32.dll
    + 2005-08-25 09:44 . 2008-04-13 19:45 60160 c:\windows\system32\dllcache\drmk.sys
    + 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll
    + 2009-12-14 07:08 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2009-12-14 07:08 . 2009-12-14 07:08 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2004-08-11 22:00 . 2009-12-14 07:08 33280 c:\windows\system32\csrsrv.dll
    + 2004-08-11 22:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 17760 c:\windows\system32\aspnet_counters.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 97624 c:\windows\Microsoft.NET\Framework\v4.0.30319\XamlBuildTask.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 87408 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsFormsIntegration.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 93024 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationTypes.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 35688 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationProvider.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 17784 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Windows.Presentation.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 58240 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 67912 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PenIMC.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 31576 c:\windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 14160 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 69960 c:\windows\Microsoft.NET\Framework\v4.0.30319\TLBREF.DLL
    + 2010-03-18 21:47 . 2010-03-18 21:47 29544 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xaml.Hosting.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 70040 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.DataVisualization.Design.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 24928 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Routing.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 81272 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.RegularExpressions.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 33144 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DynamicData.Design.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 93576 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.Design.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 44920 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.ApplicationServices.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 24944 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Abstractions.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 28024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.WasHosting.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 12168 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.ServiceMoniker40.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 37240 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Channels.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 95592 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Caching.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 64352 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Numerics.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 45952 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.Thunk.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 86888 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.Design.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 51032 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Device.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 50552 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.DataSetExtensions.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 81784 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Configuration.Install.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 81800 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ComponentModel.DataAnnotations.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 39784 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.Contract.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 68952 c:\windows\Microsoft.NET\Framework\v4.0.30319\SMDiagnostics.dll
    + 2010-03-18 19:58 . 2010-03-18 19:58 96088 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\SetupUtility.exe
    + 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 15192 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 15704 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 16728 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\SetupResources.dll
    + 2010-03-18 19:58 . 2010-03-18 19:58 96088 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUtility.exe
    + 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 15192 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 15704 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 16728 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\SetupResources.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\SetupResources.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 17256 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceMonikerSupport.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\v4.0.30319\SbsNclPerf.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 58192 c:\windows\Microsoft.NET\Framework\v4.0.30319\regtlibv12.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 32592 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 52040 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 21336 c:\windows\Microsoft.NET\Framework\v4.0.30319\normalization.dll
    + 2011-07-09 14:30 . 2011-07-09 14:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 27984 c:\windows\Microsoft.NET\Framework\v4.0.30319\MUI\0409\mscorsecr.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 15184 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsn.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 40784 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorpe.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 20816 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreeis.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 96592 c:\windows\Microsoft.NET\Framework\v4.0.30319\MmcAspExt.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 21880 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Workflow.Compiler.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 40304 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualC.STLCLR.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 12128 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualC.Dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 97680 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 38784 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Data.Entity.Build.Tasks.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 67968 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Conversion.v4.0.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 36168 c:\windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 78168 c:\windows\Microsoft.NET\Framework\v4.0.30319\ISymWrapper.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 58200 c:\windows\Microsoft.NET\Framework\v4.0.30319\InstallUtilLib.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 27992 c:\windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
    + 2011-06-22 15:45 . 2010-03-18 18:16 87408 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\WindowsFormsIntegration.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 93024 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\UIAutomationTypes.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 35688 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\UIAutomationProvider.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 17784 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Windows.Presentation.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 58240 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Windows.Input.Manipulations.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 44920 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Web.ApplicationServices.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 37240 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceModel.Channels.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 64352 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Numerics.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 51032 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Device.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 50552 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.DataSetExtensions.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 81784 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Configuration.Install.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 81800 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ComponentModel.DataAnnotations.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 39784 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.AddIn.Contract.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 68952 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\SMDiagnostics.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 12128 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.VisualC.Dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 97680 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 78168 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\ISymWrapper.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 81248 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\CustomMarshalers.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Accessibility.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 42312 c:\windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 84296 c:\windows\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 11592 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 88904 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfdll.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 60248 c:\windows\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 31048 c:\windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 81248 c:\windows\Microsoft.NET\Framework\v4.0.30319\CustomMarshalers.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 95048 c:\windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 32592 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 35160 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 30040 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 19808 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 78160 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_rc.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 30040 c:\windows\Microsoft.NET\Framework\v4.0.30319\Aspnet_perf.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_isapi.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 24408 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_filter.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 30048 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 29008 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 29528 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 29016 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Accessibility.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 11608 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\FileTrackerUI.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 10064 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\CvtResUI.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 24400 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\alinkui.dll
    + 2011-07-08 19:00 . 2011-07-08 19:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2011-07-07 17:03 . 2011-07-07 17:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    + 2011-07-07 18:09 . 2011-07-07 18:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2010-09-23 08:17 . 2010-09-23 08:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2011-07-07 18:09 . 2011-07-07 18:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    - 2010-09-23 08:17 . 2010-09-23 08:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorlib.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 13648 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 97624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\XamlBuildTask\v4.0_4.0.0.0__31bf3856ad364e35\XamlBuildTask.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 29544 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml.Hosting\v4.0_4.0.0.0__31bf3856ad364e35\System.Xaml.Hosting.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 70040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.Design.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 24928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 81272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.RegularExpressions\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 33144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 93576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.Design.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 24944 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Abstractions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 28024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.WasHosting\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 12168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.ServiceMoniker40\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.ServiceMoniker40.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 95592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Caching\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Caching.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 86888 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 21880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe
    + 2011-10-14 11:41 . 2011-10-14 11:41 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 40304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\v4.0_2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 67968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Conversion.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v4.0.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2011-10-14 11:40 . 2011-10-14 11:40 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-22 06:10 . 2011-10-22 06:10 22016 c:\windows\Installer\25350b0b.msi
    + 2011-06-21 06:21 . 2011-06-21 06:21 53248 c:\windows\Installer\171886dd.msi
    - 2010-01-14 21:49 . 2010-11-10 09:09 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 35088 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 18704 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 20240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
    - 2010-08-17 08:01 . 2010-09-29 23:44 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2010-08-17 08:01 . 2011-10-14 12:21 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
    + 2011-04-05 04:10 . 2011-04-05 04:10 10134 c:\windows\Installer\{7A755114-0A3F-484E-AE66-8E7D7EADD44A}\_F64A00EA2AD02D2F989138.exe
    + 2011-04-05 04:10 . 2011-04-05 04:10 23558 c:\windows\Installer\{7A755114-0A3F-484E-AE66-8E7D7EADD44A}\_B3160DF936B0916781E586.exe
    + 2011-04-05 04:10 . 2011-04-05 04:10 23558 c:\windows\Installer\{7A755114-0A3F-484E-AE66-8E7D7EADD44A}\_8E4C7673677278766B8C5E.exe
    + 2011-04-05 04:10 . 2011-04-05 04:10 10134 c:\windows\Installer\{7A755114-0A3F-484E-AE66-8E7D7EADD44A}\_248E16091FE329556411C6.exe
    + 2011-05-27 14:53 . 2011-05-27 14:53 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\ViewerPS.dll
    + 2011-05-27 19:52 . 2011-05-27 19:52 40368 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\reader_sl.exe
    + 2011-05-27 14:52 . 2011-05-27 14:52 67016 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\PDFPrevHndlrShim.exe
    + 2011-05-27 14:52 . 2011-05-27 14:52 83376 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\PDFPrevHndlr.dll
    + 2011-05-27 14:01 . 2011-05-27 14:01 95672 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\nppdf32.dll
    + 2011-05-27 14:10 . 2011-05-27 14:10 13752 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AcroRd32Info.exe
    + 2011-10-14 11:57 . 2011-06-23 18:36 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 12800 c:\windows\ie8updates\KB2497640-IE8\xpshims.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 66560 c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 55296 c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 43520 c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 25600 c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 43520 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 12800 c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 66560 c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 55296 c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 43520 c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 25600 c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
    + 2011-10-14 11:35 . 2011-10-14 11:35 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_bb2788d0\System.Drawing.Design.dll
    + 2011-10-14 11:35 . 2011-10-14 11:35 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_027ba618\CustomMarshalers.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\c1a16b24c374f3e835dc898b4d218a56\UIAutomationProvider.ni.dll
    + 2011-10-14 12:15 . 2011-10-14 12:15 54784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml.Hosting\673e9700b2b779315b0511deec819898\System.Xaml.Hosting.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\9d503fe180434569447214c95b75e126\System.Windows.Presentation.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 24064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Routing\9acd725eddb15fb2fba761d0bed8a06d\System.Web.Routing.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\cc1d5ebee12d78db4a4874b260163b98\System.Web.DynamicData.Design.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9ca8b0ca20d6b7a706823b6cccdb2dd4\System.Web.ApplicationServices.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 24576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Abstract#\ab767234f994a61f74b10187f87ed66e\System.Web.Abstractions.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 12288 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e3882caf4c166d8d0b13b2a50a2c22c8\System.ServiceModel.ServiceMoniker40.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\777d3351112f6bc9536a80d9ec6e7e25\System.ServiceModel.Channels.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\44dd94daf4159e360f926ddfde3fcb22\System.AddIn.Contract.ni.dll
    + 2011-10-14 12:01 . 2011-10-14 12:01 37888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Workflow.#\fbf19bc8f33c2cb2051d740a5c92c340\Microsoft.Workflow.Compiler.ni.exe
    + 2011-10-14 12:01 . 2011-10-14 12:01 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\540667de7d19ecd49a1763feed42630d\Microsoft.VisualC.ni.dll
    + 2011-10-14 11:57 . 2011-10-14 11:57 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\efffe8ce8e65b6e65790d7c93551b1e6\Accessibility.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90\System.Web.DynamicData.Design.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe
    + 2011-10-14 12:21 . 2011-10-14 12:21 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\eaa8d72317e5b8047e413939cc71ffba\Microsoft.Vsa.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll
    + 2011-10-14 12:25 . 2011-10-14 12:25 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\MetaGen\8d0a07a1d3f51db45299ebcacc3b797d\MetaGen.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe
    + 2011-10-14 12:25 . 2011-10-14 12:25 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 10096 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 10096 c:\windows\assembly\GAC_MSIL\policy.3.5.System.Data.SqlServerCe.Entity\3.5.0.0__89845dcd8080cc91\policy.3.5.System.Data.SqlServerCe.Entity.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 92016 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.SqlServerCe.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-10-14 11:35 . 2011-10-14 11:35 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    - 2010-10-06 08:06 . 2010-10-06 08:06 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-02-25 09:03 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll
    + 2011-02-25 09:03 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971029\spmsg.dll
    + 2011-11-11 13:19 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2641690\update\spcustom.dll
    + 2011-11-11 13:19 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2641690\spmsg.dll
    + 2011-09-16 16:08 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll
    + 2011-09-16 16:08 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2616676\spmsg.dll
    + 2011-09-07 13:06 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll
    + 2011-09-07 13:06 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2607712\spmsg.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2592799\spmsg.dll
    + 2011-10-14 11:58 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll
    + 2011-10-14 11:58 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll
    + 2011-09-16 15:57 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll
    + 2011-09-16 15:57 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570947\spmsg.dll
    + 2011-08-11 12:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll
    + 2011-08-11 12:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570222\spmsg.dll
    + 2011-08-11 12:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll
    + 2011-08-11 12:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567680\spmsg.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll
    + 2011-08-11 11:46 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll
    + 2011-08-11 11:46 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2566454\spmsg.dll
    + 2011-08-10 09:27 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys
    + 2011-08-11 11:45 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
    + 2011-08-11 11:45 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2562937\spmsg.dll
    + 2011-08-11 11:47 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll
    + 2011-08-11 11:47 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll
    + 2011-07-14 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll
    + 2011-07-14 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2555917\spmsg.dll
    + 2011-06-16 16:36 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll
    + 2011-06-16 16:36 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893\spmsg.dll
    + 2011-11-09 12:34 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893-v2\update\spcustom.dll
    + 2011-11-09 12:34 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893-v2\spmsg.dll
    + 2011-06-16 16:35 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544521-IE8\update\spcustom.dll
    + 2011-06-16 16:35 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544521-IE8\spmsg.dll
    + 2011-06-30 08:08 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll
    + 2011-06-30 08:08 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2541763\spmsg.dll
    + 2011-06-16 17:06 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll
    + 2011-06-16 17:06 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276\spmsg.dll
    + 2011-08-11 12:15 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll
    + 2011-08-11 12:15 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll
    + 2011-06-16 17:08 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll
    + 2011-06-16 17:08 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2535512\spmsg.dll
    + 2011-06-16 17:04 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2530548-IE8\update\spcustom.dll
    + 2011-06-16 17:04 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2530548-IE8\spmsg.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 12800 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\xpshims.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 66560 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtmled.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 55296 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeedsbs.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 43520 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\licmgr10.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 25600 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\jsproxy.dll
    + 2011-03-24 08:03 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2524375\update\spcustom.dll
    + 2011-03-24 08:03 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2524375\spmsg.dll
    + 2011-04-13 08:16 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2511455\update\spcustom.dll
    + 2011-04-13 08:16 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2511455\spmsg.dll
    + 2011-04-13 08:06 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2510531-IE8\update\spcustom.dll
    + 2011-04-13 08:06 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2510531-IE8\spmsg.dll
    + 2011-04-13 08:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2509553\update\spcustom.dll
    + 2011-04-13 08:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2509553\spmsg.dll
    + 2009-04-20 17:06 . 2009-04-20 17:06 45568 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2508429\update\spcustom.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2508429\spmsg.dll
    + 2011-04-13 08:19 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2508272\update\spcustom.dll
    + 2011-04-13 08:19 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2508272\spmsg.dll
    + 2011-07-14 08:10 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll
    + 2011-07-14 08:10 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507938\spmsg.dll
    + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507618\update\spcustom.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507618\spmsg.dll
    + 2011-04-13 08:32 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2506223\update\spcustom.dll
    + 2011-04-13 08:32 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2506223\spmsg.dll
    + 2011-04-13 08:15 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2506212\update\spcustom.dll
    + 2011-04-13 08:15 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2506212\spmsg.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503665\spmsg.dll
    + 2011-04-13 08:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503658\update\spcustom.dll
    + 2011-04-13 08:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503658\spmsg.dll
    + 2011-04-13 08:30 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2497640-IE8\update\spcustom.dll
    + 2011-04-13 08:30 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2497640-IE8\spmsg.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 12800 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\xpshims.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 66560 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtmled.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 55296 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeedsbs.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 43520 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\licmgr10.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 25600 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\jsproxy.dll
    + 2011-04-13 08:35 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2491683\update\spcustom.dll
    + 2011-04-13 08:35 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2491683\spmsg.dll
    + 2011-04-13 08:33 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2485663\update\spcustom.dll
    + 2011-04-13 08:33 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2485663\spmsg.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2485376\update\spcustom.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2485376\spmsg.dll
    + 2011-02-10 17:06 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2483185\update\spcustom.dll
    + 2011-02-10 17:06 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2483185\spmsg.dll
    + 2011-02-10 16:58 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2482017-IE8\update\spcustom.dll
    + 2011-02-10 16:58 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2482017-IE8\spmsg.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 12800 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\xpshims.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 66560 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtmled.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 55296 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeedsbs.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 43520 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\licmgr10.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 25600 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\jsproxy.dll
    + 2011-03-10 09:04 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2481109\update\spcustom.dll
    + 2011-03-10 09:04 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2481109\spmsg.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57 53248 c:\windows\$hf_mig$\KB2481109\SP3QFE\tsgqec.dll
    + 2011-03-10 09:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2479943\update\spcustom.dll
    + 2011-03-10 09:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2479943\spmsg.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2479628\update\spcustom.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2479628\spmsg.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478971\update\spcustom.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478971\spmsg.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2478960\update\spcustom.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2478960\spmsg.dll
    + 2011-02-10 16:57 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476687\update\spcustom.dll
    + 2011-02-10 16:57 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476687\spmsg.dll
    + 2010-12-09 14:29 . 2010-12-09 14:29 33280 c:\windows\$hf_mig$\KB2476687\SP3QFE\csrsrv.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476490\spmsg.dll
    + 2010-12-15 09:15 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2467659\update\spcustom.dll
    + 2010-12-15 09:15 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2467659\spmsg.dll
    + 2010-12-15 09:17 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2443105\update\spcustom.dll
    + 2010-12-15 09:17 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2443105\spmsg.dll
    + 2010-11-18 18:12 . 2010-11-18 18:12 81920 c:\windows\$hf_mig$\KB2443105\SP3QFE\isign32.dll
    + 2010-12-15 09:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2440591\update\spcustom.dll
    + 2010-12-15 09:15 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2440591\spmsg.dll
    + 2010-12-14 20:18 . 2010-11-03 05:55 40960 c:\windows\$hf_mig$\KB2440591\SP3QFE\ndproxy.sys
    + 2010-12-15 09:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2436673\update\spcustom.dll
    + 2010-12-15 09:15 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2436673\spmsg.dll
    + 2010-12-15 09:07 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2423089\update\spcustom.dll
    + 2010-12-15 09:07 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2423089\spmsg.dll
    + 2010-12-14 20:16 . 2010-10-11 14:55 45568 c:\windows\$hf_mig$\KB2423089\SP3QFE\wab.exe
    + 2011-01-13 20:22 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2419632\update\spcustom.dll
    + 2011-01-13 20:22 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2419632\spmsg.dll
    + 2010-12-15 09:16 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2416400-IE8\update\spcustom.dll
    + 2010-12-15 09:16 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2416400-IE8\spmsg.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 12800 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\xpshims.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 66560 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtmled.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 55296 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeedsbs.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 43520 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\licmgr10.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 25600 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\jsproxy.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2393802\update\spcustom.dll
    + 2011-02-09 17:14 . 2010-12-09 15:15 16896 c:\windows\$hf_mig$\KB2393802\update\mpsyschk.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2393802\spmsg.dll
    + 2010-12-15 09:18 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2296199\update\spcustom.dll
    + 2010-12-15 09:18 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2296199\spmsg.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2009-04-17 15:57 . 2010-08-26 12:52 5120 c:\windows\system32\xpsp4res.dll
    + 2009-04-17 15:57 . 2011-02-17 12:32 5120 c:\windows\system32\xpsp4res.dll
    + 2004-08-11 22:00 . 2009-01-31 01:35 4096 c:\windows\system32\wmvdmoe2.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\wmvdmoe2.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\wmvdmod.dll
    + 2004-08-11 22:00 . 2009-01-31 01:35 4096 c:\windows\system32\wmvdmod.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 4096 c:\windows\system32\WMVADVE.DLL
    - 2005-08-25 09:38 . 2006-10-19 01:47 4096 c:\windows\system32\WMVADVE.DLL
    - 2005-08-25 09:38 . 2006-10-19 01:47 4096 c:\windows\system32\WMVADVD.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 4096 c:\windows\system32\WMVADVD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\wmsdmoe2.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 4096 c:\windows\system32\wmsdmoe2.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 4096 c:\windows\system32\wmsdmod.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\wmsdmod.dll
    - 2005-08-25 09:38 . 2006-10-19 01:58 8704 c:\windows\system32\wdfmgr.exe
    + 2005-08-25 09:38 . 2009-02-03 01:01 8704 c:\windows\system32\wdfmgr.exe
    - 2005-08-25 09:38 . 2006-10-19 01:47 4096 c:\windows\system32\wdfapi.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 4096 c:\windows\system32\wdfapi.dll
    - 2005-08-25 09:38 . 2006-10-19 01:58 8704 c:\windows\system32\uwdf.exe
    + 2005-08-25 09:38 . 2009-02-03 01:01 8704 c:\windows\system32\uwdf.exe
    + 2004-08-11 22:00 . 2009-01-31 01:33 4096 c:\windows\system32\MPG4DMOD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\MPG4DMOD.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 4096 c:\windows\system32\MP4SDMOD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\MP4SDMOD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\MP43DMOD.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 4096 c:\windows\system32\MP43DMOD.dll
    - 2005-08-25 09:44 . 2008-04-14 00:11 4096 c:\windows\system32\ksuser.dll
    + 2005-08-25 09:44 . 2008-04-14 01:11 4096 c:\windows\system32\ksuser.dll
    + 2004-08-11 22:00 . 2009-01-31 01:35 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
    + 2004-08-11 22:00 . 2009-01-31 01:35 4096 c:\windows\system32\dllcache\wmvdmod.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\dllcache\wmvdmod.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 4096 c:\windows\system32\dllcache\wmsdmod.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 4096 c:\windows\system32\dllcache\wmsdmod.dll
    + 2005-08-25 09:44 . 2008-04-14 01:11 4096 c:\windows\system32\dllcache\ksuser.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 7168 c:\windows\system32\dllcache\asferror.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 7168 c:\windows\system32\dllcache\asferror.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 7168 c:\windows\system32\asferror.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 7168 c:\windows\system32\asferror.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.3082.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.3076.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.2070.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8024 c:\windows\Microsoft.NET\NETFXRepair.2052.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1055.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1053.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1049.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1046.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1045.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1044.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1043.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1042.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1041.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1040.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1038.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1037.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1036.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1035.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1033.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1032.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1031.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1030.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1029.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8024 c:\windows\Microsoft.NET\NETFXRepair.1028.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1025.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8032 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelRegUI.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8040 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 8032 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll
    + 2011-10-14 11:58 . 2011-10-14 11:58 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\938fd0d906a77a569c46c6c142bb7c29\dfsvc.ni.exe
    - 2010-10-06 08:22 . 2010-10-06 08:22 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2011-02-17 12:32 . 2011-02-17 12:32 5120 c:\windows\$hf_mig$\KB2508429\SP3QFE\xpsp4res.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2011-10-23 16:13 . 1998-02-07 03:37 299520 c:\windows\uninst.exe
    + 2005-08-25 09:38 . 2009-01-31 01:35 356352 c:\windows\system32\wpdsp.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 356352 c:\windows\system32\wpdsp.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 133632 c:\windows\system32\WPDShServiceObj.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 133632 c:\windows\system32\WPDShServiceObj.dll
    + 2005-08-25 09:38 . 2009-01-31 01:35 154624 c:\windows\system32\wpdmtp.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 154624 c:\windows\system32\wpdmtp.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 629760 c:\windows\system32\wpd_ci.dll
    + 2005-08-25 09:38 . 2009-01-31 01:35 629760 c:\windows\system32\wpd_ci.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 656896 c:\windows\system32\WMVXENCD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 656896 c:\windows\system32\WMVXENCD.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 767488 c:\windows\system32\WMVSENCD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 767488 c:\windows\system32\WMVSENCD.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 204288 c:\windows\system32\wmpsrcwp.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 204288 c:\windows\system32\wmpsrcwp.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 130048 c:\windows\system32\wmpps.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 130048 c:\windows\system32\wmpps.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 613376 c:\windows\system32\wmpmde.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 613376 c:\windows\system32\wmpmde.dll
    - 2006-10-19 01:47 . 2008-06-24 23:12 295936 c:\windows\system32\wmpeffects.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 295936 c:\windows\system32\wmpeffects.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 211456 c:\windows\system32\wmpasf.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 938496 c:\windows\system32\WMNetMgr.dll
    - 2004-08-11 22:00 . 2008-06-18 11:03 938496 c:\windows\system32\WMNetmgr.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 157184 c:\windows\system32\wmidx.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 157184 c:\windows\system32\wmidx.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 227328 c:\windows\system32\wmerror.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 227328 c:\windows\system32\wmerror.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 535040 c:\windows\system32\wmdrmsdk.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 535040 c:\windows\system32\wmdrmsdk.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 348672 c:\windows\system32\wmdrmnet.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 348672 c:\windows\system32\wmdrmnet.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 429056 c:\windows\system32\wmdrmdev.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 429056 c:\windows\system32\wmdrmdev.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 222208 c:\windows\system32\WMASF.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 757248 c:\windows\system32\WMADMOD.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 757248 c:\windows\system32\WMADMOD.dll
    + 2004-08-11 22:00 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll
    - 2004-08-11 22:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 916480 c:\windows\system32\wininet.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 916480 c:\windows\system32\wininet.dll
    + 2004-08-11 22:00 . 2011-03-04 06:37 420864 c:\windows\system32\vbscript.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 105984 c:\windows\system32\url.dll
    - 2004-08-11 22:00 . 2009-03-08 09:34 105984 c:\windows\system32\url.dll
    + 2004-08-11 22:00 . 2009-07-27 23:17 135168 c:\windows\system32\shsvcs.dll
    - 2004-08-11 22:00 . 2008-04-14 00:12 135168 c:\windows\system32\shsvcs.dll
    + 2004-08-11 22:00 . 2011-01-21 14:44 439296 c:\windows\system32\shimgvw.dll
    + 2004-08-11 22:00 . 2011-04-29 17:25 151552 c:\windows\system32\schannel.dll
    + 2004-08-11 22:00 . 2011-02-09 13:53 270848 c:\windows\system32\sbe.dll
    - 2004-08-11 22:00 . 2008-04-14 00:12 270848 c:\windows\system32\sbe.dll
    + 2011-10-23 16:14 . 1998-09-02 08:02 194320 c:\windows\system32\qcut.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 211456 c:\windows\system32\qasf.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 211456 c:\windows\system32\qasf.dll
    + 2005-01-26 19:34 . 2009-04-28 20:20 436720 c:\windows\system32\PxWave.dll
    + 2005-01-26 19:35 . 2009-04-28 20:20 219632 c:\windows\system32\PxMas.dll
    + 2005-02-04 06:01 . 2009-04-28 20:20 551408 c:\windows\system32\pxdrv.dll
    + 2011-02-20 01:24 . 2009-04-28 20:20 129520 c:\windows\system32\pxafs.dll
    + 2005-01-26 19:36 . 2009-04-28 20:20 670192 c:\windows\system32\Px.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 199168 c:\windows\system32\PortableDeviceWMDRM.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 199168 c:\windows\system32\PortableDeviceWMDRM.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 166912 c:\windows\system32\PortableDeviceTypes.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 166912 c:\windows\system32\PortableDeviceTypes.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 101888 c:\windows\system32\PortableDeviceClassExtension.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 101888 c:\windows\system32\PortableDeviceClassExtension.dll
    + 2006-10-19 01:47 . 2009-01-31 01:34 254976 c:\windows\system32\PortableDeviceApi.dll
    + 2004-08-11 22:00 . 2011-11-07 06:16 525202 c:\windows\system32\perfh009.dat
    + 2004-08-11 22:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll
    - 2004-08-11 22:00 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll
    + 2004-08-11 22:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
    - 2004-08-11 22:00 . 2008-04-14 00:12 249856 c:\windows\system32\odbc32.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 206848 c:\windows\system32\occache.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 206848 c:\windows\system32\occache.dll
    + 2004-08-11 22:00 . 2010-12-09 15:15 718336 c:\windows\system32\ntdll.dll
    - 2004-08-11 22:00 . 2008-06-20 17:46 245248 c:\windows\system32\mswsock.dll
    + 2004-08-11 22:00 . 2008-06-20 16:02 245248 c:\windows\system32\mswsock.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 321536 c:\windows\system32\mswmdm.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 321536 c:\windows\system32\mswmdm.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 771424 c:\windows\system32\msvcr100_clr0400.dll
    - 2004-08-11 22:11 . 2008-04-14 00:12 677888 c:\windows\system32\mstsc.exe
    + 2004-08-11 22:11 . 2011-01-27 11:57 677888 c:\windows\system32\mstsc.exe
    - 2004-08-11 22:00 . 2010-09-10 05:58 611840 c:\windows\system32\mstime.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 611840 c:\windows\system32\mstime.dll
    - 2004-08-11 22:00 . 2006-12-04 20:21 414720 c:\windows\system32\msscp.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 414720 c:\windows\system32\msscp.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 175616 c:\windows\system32\mspmsp.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 175616 c:\windows\system32\mspmsp.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 179712 c:\windows\system32\msnetobj.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 179712 c:\windows\system32\msnetobj.dll
    - 2006-11-08 02:03 . 2010-09-10 05:58 602112 c:\windows\system32\msfeeds.dll
    + 2006-11-08 02:03 . 2011-08-22 23:48 602112 c:\windows\system32\msfeeds.dll
    + 2009-09-24 05:30 . 2009-09-24 05:30 156488 c:\windows\system32\mscorier.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 259072 c:\windows\system32\MPG4DECD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:33 259072 c:\windows\system32\MPG4DECD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:33 259072 c:\windows\system32\MP43DECD.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 259072 c:\windows\system32\MP43DECD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:33 212992 c:\windows\system32\MFPLAT.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 212992 c:\windows\system32\MFPLAT.dll
    - 2004-08-11 22:00 . 2010-09-18 17:23 974848 c:\windows\system32\mfc42u.dll
    + 2004-08-11 22:00 . 2011-02-08 13:33 974848 c:\windows\system32\mfc42u.dll
    + 2004-08-11 22:00 . 2011-02-08 13:33 978944 c:\windows\system32\mfc42.dll
    + 2011-12-02 01:45 . 2011-12-02 01:45 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe
    + 2011-11-07 06:25 . 2011-11-07 06:25 247968 c:\windows\system32\Macromed\Flash\FlashUtil11c_Plugin.exe
    + 2011-10-23 16:13 . 1998-12-01 19:00 148480 c:\windows\system32\ltvid10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:58 297472 c:\windows\system32\ltkrn10N.dll
    + 2011-10-23 16:13 . 1998-11-30 18:09 114176 c:\windows\system32\ltimg10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:58 103424 c:\windows\system32\ltfil10N.DLL
    + 2011-10-23 16:13 . 1998-11-30 18:08 221696 c:\windows\system32\ltefx10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:58 263168 c:\windows\system32\ltdlg10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:58 231424 c:\windows\system32\LTDIS10N.dll
    + 2011-10-23 16:13 . 1998-12-01 18:58 257024 c:\windows\system32\ltann10N.dll
    - 2004-08-11 22:00 . 2009-06-25 08:25 730112 c:\windows\system32\lsasrv.dll
    + 2004-08-11 22:00 . 2010-12-20 17:26 730112 c:\windows\system32\lsasrv.dll
    + 2004-08-11 22:00 . 2009-01-30 22:37 100864 c:\windows\system32\logagent.exe
    - 2004-08-11 22:00 . 2008-06-18 07:09 100864 c:\windows\system32\logagent.exe
    + 2011-10-23 16:13 . 1998-12-01 19:00 122368 c:\windows\system32\lftif10N.dll
    + 2011-10-23 16:13 . 1998-12-01 19:00 134144 c:\windows\system32\lfpng10N.dll
    + 2011-10-23 16:13 . 1997-09-30 19:30 122880 c:\windows\system32\LFKODAK.DLL
    + 2011-10-23 16:13 . 1997-11-21 23:03 338944 c:\windows\system32\lffpx7.dll
    + 2011-10-23 16:13 . 1998-12-01 18:59 100352 c:\windows\system32\lffpx10N.dll
    + 2011-10-23 16:13 . 1998-12-01 19:00 266752 c:\windows\system32\LFCMP10N.DLL
    + 2006-09-15 20:24 . 2006-09-15 20:24 421888 c:\windows\system32\launchpad.dll
    + 2004-08-11 22:00 . 2010-12-22 12:34 301568 c:\windows\system32\kerberos.dll
    - 2004-08-11 22:00 . 2009-06-25 08:25 301568 c:\windows\system32\kerberos.dll
    - 2004-08-11 22:00 . 2009-12-09 05:53 726528 c:\windows\system32\jscript.dll
    + 2004-08-11 22:00 . 2011-03-04 06:37 726528 c:\windows\system32\jscript.dll
    + 2011-06-15 21:25 . 2011-05-04 09:52 157472 c:\windows\system32\javaws.exe
    - 2010-02-23 01:21 . 2010-02-23 01:20 145184 c:\windows\system32\javaw.exe
    + 2011-06-15 21:25 . 2011-05-04 09:52 145184 c:\windows\system32\javaw.exe
    + 2011-06-15 21:25 . 2011-05-04 09:52 145184 c:\windows\system32\java.exe
    - 2010-02-23 01:21 . 2010-02-23 01:20 145184 c:\windows\system32\java.exe
    - 2004-08-11 22:00 . 2010-09-10 05:58 184320 c:\windows\system32\iepeers.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 184320 c:\windows\system32\iepeers.dll
    - 2004-08-11 22:00 . 2010-09-10 05:58 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-11 22:00 . 2011-08-22 23:48 387584 c:\windows\system32\iedkcs32.dll
    + 2004-08-11 22:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe
    + 2004-08-11 22:11 . 2011-02-11 13:25 229888 c:\windows\system32\fxscover.exe
    + 2004-08-11 22:06 . 2011-10-15 00:23 294864 c:\windows\system32\FNTCACHE.DAT
    + 2010-03-18 18:16 . 2010-03-18 18:16 486216 c:\windows\system32\evr.dll
    - 2004-08-11 22:00 . 2008-04-14 00:11 186880 c:\windows\system32\encdec.dll
    + 2004-08-11 22:00 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
    + 2011-07-29 06:15 . 2011-07-29 06:15 302592 c:\windows\system32\EAREMOVE.EXE
    + 2011-10-23 16:14 . 1998-08-27 04:51 182032 c:\windows\system32\dxtmsft3.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 991744 c:\windows\system32\drmv2clt.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 991744 c:\windows\system32\drmv2clt.dll
    + 2006-10-19 00:00 . 2009-01-30 22:23 249856 c:\windows\system32\drmupgds.exe
    - 2006-10-19 00:00 . 2006-10-19 00:00 249856 c:\windows\system32\drmupgds.exe
    + 2006-10-19 01:47 . 2009-01-31 01:35 671232 c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 671232 c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
    - 2005-08-25 09:36 . 2004-11-15 19:37 264440 c:\windows\system32\drivers\stac97.sys
    + 2005-08-25 09:36 . 2004-11-15 21:37 264440 c:\windows\system32\drivers\stac97.sys
    + 2005-08-25 09:35 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys
    - 2004-08-11 22:11 . 2008-04-14 00:13 139656 c:\windows\system32\drivers\rdpwd.sys
    + 2004-08-11 22:11 . 2011-06-24 14:10 139656 c:\windows\system32\drivers\rdpwd.sys
    + 2005-08-25 09:44 . 2008-04-13 20:19 146048 c:\windows\system32\drivers\portcls.sys
    - 2005-08-25 09:44 . 2008-04-13 19:19 146048 c:\windows\system32\drivers\portcls.sys
    + 2004-08-11 22:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys
    + 2005-08-25 09:35 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
    + 2004-08-04 04:15 . 2008-04-13 20:16 141056 c:\windows\system32\drivers\ks.sys
    - 2004-08-04 04:15 . 2008-04-13 19:16 141056 c:\windows\system32\drivers\ks.sys
    + 2010-11-23 03:45 . 2011-06-28 16:50 138192 c:\windows\system32\drivers\avipbb.sys
    - 2004-08-11 22:00 . 2008-08-14 10:04 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-11 22:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
    + 2004-08-11 22:00 . 2011-03-03 06:55 149504 c:\windows\system32\dnsapi.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 211456 c:\windows\system32\dllcache\wmpasf.dll
    - 2004-08-11 22:00 . 2008-06-18 11:03 938496 c:\windows\system32\dllcache\WMNetmgr.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 938496 c:\windows\system32\dllcache\WMNetMgr.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 157184 c:\windows\system32\dllcache\wmidx.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 157184 c:\windows\system32\dllcache\wmidx.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 227328 c:\windows\system32\dllcache\wmerror.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 227328 c:\windows\system32\dllcache\wmerror.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 222208 c:\windows\system32\dllcache\WMASF.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 757248 c:\windows\system32\dllcache\WMADMOD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 757248 c:\windows\system32\dllcache\WMADMOD.dll
    - 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2010-06-18 17:45 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2006-05-10 05:23 . 2011-08-22 23:48 916480 c:\windows\system32\dllcache\wininet.dll
    - 2006-05-10 05:23 . 2010-09-10 05:58 916480 c:\windows\system32\dllcache\wininet.dll
    + 2006-09-18 14:15 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37 420864 c:\windows\system32\dllcache\vbscript.dll
    - 2006-10-17 17:05 . 2009-03-08 09:34 105984 c:\windows\system32\dllcache\url.dll
    + 2006-10-17 17:05 . 2011-08-22 23:48 105984 c:\windows\system32\dllcache\url.dll
    - 2004-08-11 22:00 . 2007-06-27 02:10 317440 c:\windows\system32\dllcache\unregmp2.exe
    + 2004-08-11 22:00 . 2009-01-30 22:40 317440 c:\windows\system32\dllcache\unregmp2.exe
    + 2008-10-22 02:00 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys
    + 2009-07-27 23:17 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll
    + 2011-01-21 14:44 . 2011-01-21 14:44 439296 c:\windows\system32\dllcache\shimgvw.dll
    + 2008-12-05 06:54 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll
    + 2011-02-09 13:53 . 2011-02-09 13:53 270848 c:\windows\system32\dllcache\sbe.dll
    + 2011-08-10 09:28 . 2011-06-24 14:10 139656 c:\windows\system32\dllcache\rdpwd.sys
    - 2004-08-11 22:00 . 2006-10-19 01:47 211456 c:\windows\system32\dllcache\qasf.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 211456 c:\windows\system32\dllcache\qasf.dll
    + 2005-08-25 09:44 . 2008-04-13 20:19 146048 c:\windows\system32\dllcache\portcls.sys
    + 2010-12-20 17:32 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll
    + 2011-09-26 16:41 . 2011-09-26 16:41 220160 c:\windows\system32\dllcache\oleacc.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
    + 2006-10-17 17:04 . 2011-08-22 23:48 206848 c:\windows\system32\dllcache\occache.dll
    - 2006-10-17 17:04 . 2010-09-10 05:58 206848 c:\windows\system32\dllcache\occache.dll
    + 2009-04-17 15:58 . 2010-12-09 15:15 718336 c:\windows\system32\dllcache\ntdll.dll
    + 2011-06-15 17:05 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys
    - 2008-06-20 17:46 . 2008-06-20 17:46 245248 c:\windows\system32\dllcache\mswsock.dll
    + 2008-06-20 17:46 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 321536 c:\windows\system32\dllcache\mswmdm.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 321536 c:\windows\system32\dllcache\mswmdm.dll
    - 2006-05-10 05:23 . 2010-09-10 05:58 611840 c:\windows\system32\dllcache\mstime.dll
    + 2006-05-10 05:23 . 2011-08-22 23:48 611840 c:\windows\system32\dllcache\mstime.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 414720 c:\windows\system32\dllcache\msscp.dll
    - 2004-08-11 22:00 . 2006-12-04 20:21 414720 c:\windows\system32\dllcache\msscp.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 175616 c:\windows\system32\dllcache\mspmsp.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 175616 c:\windows\system32\dllcache\mspmsp.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 179712 c:\windows\system32\dllcache\msnetobj.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 179712 c:\windows\system32\dllcache\msnetobj.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
    + 2007-05-26 08:33 . 2011-08-22 23:48 602112 c:\windows\system32\dllcache\msfeeds.dll
    - 2007-05-26 08:33 . 2010-09-10 05:58 602112 c:\windows\system32\dllcache\msfeeds.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
    + 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
    + 2008-11-13 06:07 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys
    - 2004-08-11 22:12 . 2006-10-19 01:47 243712 c:\windows\system32\dllcache\mpvis.dll
    + 2004-08-11 22:12 . 2009-01-31 01:33 243712 c:\windows\system32\dllcache\mpvis.dll
    + 2006-10-14 08:13 . 2011-02-08 13:33 974848 c:\windows\system32\dllcache\mfc42u.dll
    - 2006-10-14 08:13 . 2010-09-18 17:23 974848 c:\windows\system32\dllcache\mfc42u.dll
    + 2010-10-13 03:36 . 2011-02-08 13:33 978944 c:\windows\system32\dllcache\mfc42.dll
    - 2009-04-17 15:58 . 2009-06-25 08:25 730112 c:\windows\system32\dllcache\lsasrv.dll
    + 2009-04-17 15:58 . 2010-12-20 17:26 730112 c:\windows\system32\dllcache\lsasrv.dll
    - 2004-08-11 22:00 . 2008-06-18 07:09 100864 c:\windows\system32\dllcache\logagent.exe
    + 2004-08-11 22:00 . 2009-01-30 22:37 100864 c:\windows\system32\dllcache\logagent.exe
    + 2011-01-27 11:57 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
    + 2004-08-04 04:15 . 2008-04-13 20:16 141056 c:\windows\system32\dllcache\ks.sys
    - 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2009-06-25 08:25 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
    + 2008-05-09 10:53 . 2011-03-04 06:37 726528 c:\windows\system32\dllcache\jscript.dll
    - 2008-05-09 10:53 . 2009-12-09 05:53 726528 c:\windows\system32\dllcache\jscript.dll
    - 2008-08-19 15:24 . 2010-06-09 07:43 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2008-08-19 15:24 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
    - 2010-06-11 13:46 . 2010-09-10 05:58 247808 c:\windows\system32\dllcache\ieproxy.dll
    + 2010-06-11 13:46 . 2011-08-22 23:48 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2006-05-10 05:22 . 2010-09-10 05:58 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2006-05-10 05:22 . 2011-08-22 23:48 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2010-06-11 13:46 . 2011-08-22 23:48 743424 c:\windows\system32\dllcache\iedvtool.dll
    - 2010-06-11 13:46 . 2010-09-10 05:58 743424 c:\windows\system32\dllcache\iedvtool.dll
    - 2006-11-07 08:27 . 2010-09-10 05:58 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2006-11-07 08:27 . 2011-08-22 23:48 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2006-11-07 08:26 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe
    + 2011-02-11 13:25 . 2011-02-11 13:25 229888 c:\windows\system32\dllcache\fxscover.exe
    + 2011-02-09 13:53 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 991744 c:\windows\system32\dllcache\drmv2clt.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 991744 c:\windows\system32\dllcache\drmv2clt.dll
    + 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll
    + 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 229376 c:\windows\system32\dllcache\cewmdm.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 229376 c:\windows\system32\dllcache\cewmdm.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 542720 c:\windows\system32\dllcache\blackbox.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 542720 c:\windows\system32\dllcache\blackbox.dll
    + 2010-04-20 05:30 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll
    + 2004-08-11 22:00 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
    - 2008-06-20 11:40 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys
    + 2010-12-22 05:11 . 2011-05-04 09:52 472808 c:\windows\system32\deployJava1.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 229376 c:\windows\system32\cewmdm.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 229376 c:\windows\system32\cewmdm.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 542720 c:\windows\system32\blackbox.dll
    + 2004-08-11 22:00 . 2009-01-31 01:33 542720 c:\windows\system32\blackbox.dll
    + 2005-08-25 09:38 . 2009-01-31 01:33 276992 c:\windows\system32\audiodev.dll
    - 2005-08-25 09:38 . 2006-10-19 01:47 276992 c:\windows\system32\audiodev.dll
    + 2004-08-11 22:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll
    + 2011-02-11 13:25 . 2011-02-11 13:25 229888 c:\windows\ServicePackFiles\ServicePackCache\i386\fxscover.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 114520 c:\windows\Microsoft.NET\NETFXRepair.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 142672 c:\windows\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 915800 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpftxt_v0400.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 753504 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 350592 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationClientsideProviders.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 163168 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationClient.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 675672 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Speech.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 334688 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Printing.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 581464 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ReachFramework.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 832856 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationUI.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 801136 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 181096 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 194424 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Royale.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 478576 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Luna.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 167288 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Classic.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 232304 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Aero.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 587624 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationBuildTasks.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 807264 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NaturalLanguage6.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 492368 c:\windows\Microsoft.NET\Framework\v4.0.30319\webengine4.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 138592 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Linq.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 699224 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xaml.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 431984 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.WorkflowServices.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 511344 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Workflow.Runtime.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 857960 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Services.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 826208 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Mobile.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 321912 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.Design.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 137568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Entity.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 132464 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Entity.Design.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 237928 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DynamicData.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 269672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Transactions.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 113512 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceProcess.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 316272 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Web.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 129912 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Routing.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 390008 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Discovery.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 505208 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Activities.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 170872 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Activation.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 261472 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Security.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 122264 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 291184 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Remoting.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 349568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.DurableInstancing.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 231760 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Net.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 253280 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Messaging.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 134528 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Management.Instrumentation.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 378720 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 123736 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IO.Log.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 125816 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IdentityModel.Selectors.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 392552 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IdentityModel.dll
    + 2010-03-18 05:51 . 2010-03-18 05:51 109568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.Wrapper.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 246128 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 120152 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Dynamic.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 607064 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 182144 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.Protocols.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 395120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 285072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.AccountManagement.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 829280 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Deployment.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 747360 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.SqlXml.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 683368 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Services.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 178040 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Services.Design.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 436600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Services.Client.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 495984 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.OracleClient.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 683872 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Linq.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 804720 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Entity.Design.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 409448 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.configuration.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 210816 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ComponentModel.Composition.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 149848 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 122248 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.DurableInstancing.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 525704 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.Core.Presentation.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 112976 c:\windows\Microsoft.NET\Framework\v4.0.30319\sysglobl.dll
    + 2011-07-09 14:30 . 2011-07-09 14:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 124240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
    + 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\sqmapi.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\SetupUi.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\SetupEngine.dll
    + 2010-03-18 23:55 . 2010-03-18 23:55 495616 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\netfx_extended_x86.msi
    + 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\sqmapi.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUi.dll
    + 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupEngine.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 173920 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
    + 2010-03-18 21:47 . 2010-03-18 21:47 181584 c:\windows\Microsoft.NET\Framework\v4.0.30319\peverify.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 121688 c:\windows\Microsoft.NET\Framework\v4.0.30319\PerfCounter.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 150856 c:\windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 130384 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 335184 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 110936 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsecimpl.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 372048 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 145752 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 413008 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    + 2011-07-09 14:30 . 2011-07-09 14:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 132944 c:\windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 661352 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 349576 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 170368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Transactions.Bridge.Dtc.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 387960 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Transactions.Bridge.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 746336 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 505184 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.CSharp.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 220024 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Utilities.v4.0.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 107376 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Framework.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 714600 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Engine.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 294728 c:\windows\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
    + 2011-06-22 15:45 . 2010-03-18 18:16 350592 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\UIAutomationClientsideProviders.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 163168 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\UIAutomationClient.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 138592 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Xml.Linq.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 699224 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Xaml.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 857960 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Web.Services.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 269672 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Transactions.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 675672 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Speech.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 113512 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceProcess.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 129912 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceModel.Routing.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 390008 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceModel.Discovery.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 505208 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceModel.Activities.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 261472 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Security.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 122264 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 291184 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Runtime.Remoting.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 349568 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Runtime.DurableInstancing.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 334688 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Printing.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 231760 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Net.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 253280 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Messaging.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 134528 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Management.Instrumentation.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 378720 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Management.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 123736 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.IO.Log.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 125816 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.IdentityModel.Selectors.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 392552 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.IdentityModel.dll
    + 2011-06-22 15:42 . 2010-03-18 05:51 109568 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.EnterpriseServices.Wrapper.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 246128 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.EnterpriseServices.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 120152 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Dynamic.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 607064 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Drawing.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 182144 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.DirectoryServices.Protocols.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 395120 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.DirectoryServices.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 285072 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.DirectoryServices.AccountManagement.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 829280 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Deployment.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 747360 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.SqlXml.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 436600 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.Services.Client.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 683872 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.Linq.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 409448 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.configuration.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 210816 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ComponentModel.Composition.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 149848 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.AddIn.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 122248 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Activities.DurableInstancing.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 525704 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Activities.Core.Presentation.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 112976 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\sysglobl.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 581464 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\ReachFramework.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 832856 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationUI.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 194424 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationFramework.Royale.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 478576 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationFramework.Luna.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 167288 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationFramework.Classic.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 232304 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationFramework.Aero.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 661352 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.VisualBasic.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 349576 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.VisualBasic.Compatibility.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 170368 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.Transactions.Bridge.Dtc.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 387960 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.Transactions.Bridge.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 746336 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.JScript.dll
    + 2011-06-22 15:42 . 2010-03-18 18:16 505184 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.CSharp.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 173400 c:\windows\Microsoft.NET\Framework\v4.0.30319\FileTracker.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 794464 c:\windows\Microsoft.NET\Framework\v4.0.30319\EventLogMessages.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 688472 c:\windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 129880 c:\windows\Microsoft.NET\Framework\v4.0.30319\CORPerfMonExt.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 163672 c:\windows\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe
    + 2011-04-12 20:11 . 2011-04-12 20:11 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 498520 c:\windows\Microsoft.NET\Framework\v4.0.30319\AspNetMMCExt.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 102744 c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 105808 c:\windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 105288 c:\windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 139088 c:\windows\Microsoft.NET\Framework\v4.0.30319\AdoNetDiag.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 255304 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\vbc7ui.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 255896 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\Microsoft.VisualBasic.Activities.CompilerUI.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 182088 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
    - 2010-05-11 11:40 . 2010-05-11 11:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-03-25 11:15 . 2011-03-25 11:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2010-05-11 11:40 . 2010-05-11 11:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2011-07-07 17:04 . 2011-07-07 17:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    + 2011-07-07 17:01 . 2011-07-07 17:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    - 2010-09-23 07:25 . 2010-09-23 07:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2011-07-07 18:09 . 2011-07-07 18:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2010-09-23 08:17 . 2010-09-23 08:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 431984 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.WorkflowServices\v4.0_4.0.0.0__31bf3856ad364e35\System.WorkflowServices.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 511344 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Runtime\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 826208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Mobile\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 321912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions.Design\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 137568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 132464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 237928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DynamicData\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 316272 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 170872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activation\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activation.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 683368 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 178040 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Design.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 804720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity.Design\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 587624 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationBuildTasks\v4.0_4.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 220024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Utilities.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v4.0.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 107376 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 714600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Engine\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 498520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\AspNetMMCExt\v4.0_4.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 495984 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data.OracleClient\v4.0_4.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2010-12-22 05:11 . 2010-12-22 05:11 676352 c:\windows\Installer\6f379e3.msi
    + 2011-09-06 19:14 . 2011-09-06 19:14 509952 c:\windows\Installer\5b03c8bf.msi
    + 2011-09-06 19:13 . 2011-09-06 19:13 905216 c:\windows\Installer\5b03c8b7.msi
    + 2011-03-18 01:03 . 2011-03-18 01:03 308736 c:\windows\Installer\365190a4.msp
    + 2011-04-05 04:10 . 2011-04-05 04:10 512512 c:\windows\Installer\32a5dbed.msi
    + 2011-06-15 21:26 . 2011-06-15 21:26 203776 c:\windows\Installer\32316add.msi
    + 2010-12-15 18:16 . 2010-12-15 18:16 886784 c:\windows\Installer\2d13a.msi
    + 2011-09-24 04:48 . 2011-09-24 04:48 509952 c:\windows\Installer\254d6956.msi
    + 2010-07-23 07:03 . 2010-07-23 07:03 338432 c:\windows\Installer\1fa4bc84.msp
    + 2010-11-25 14:01 . 2010-11-25 14:01 510464 c:\windows\Installer\1e2b82dd.msp
    + 2011-06-21 06:45 . 2011-06-21 06:45 492544 c:\windows\Installer\1724b861.msi
    + 2011-06-15 21:34 . 2011-11-12 19:07 295606 c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A83000000003}\SC_Reader.exe
    + 2011-11-07 06:19 . 2011-11-07 06:19 371272 c:\windows\Installer\{AA59DDE4-B672-4621-A016-4C248204957A}\SkypeIcon.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 888080 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 272648 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 922384 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 845584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 217864 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 159504 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
    + 2011-05-27 14:06 . 2011-05-27 14:06 372736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\pdfshell.dll
    + 2011-05-27 13:20 . 2011-05-27 13:20 140728 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AdobeUpdateCheck.exe
    + 2011-05-27 14:51 . 2011-05-27 14:51 738776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AdobeCollabSync.exe
    + 2011-05-27 14:42 . 2011-05-27 14:42 112048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AcroRdIF.dll
    + 2011-05-27 19:52 . 2011-05-27 19:52 345520 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AcroRd32.exe
    + 2011-05-27 13:24 . 2011-05-27 13:24 632240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AcroPDF.dll
    + 2008-11-04 10:13 . 2008-11-04 10:13 118128 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6425\MSCONV97.DLL
    - 2004-08-11 22:00 . 2007-06-27 02:10 317440 c:\windows\inf\unregmp2.exe
    + 2004-08-11 22:00 . 2009-01-30 22:40 317440 c:\windows\inf\unregmp2.exe
    + 2011-10-14 11:57 . 2011-06-23 18:36 916480 c:\windows\ie8updates\KB2586448-IE8\wininet.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll
    + 2011-10-14 11:58 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll
    + 2011-10-14 11:58 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe
    + 2011-10-14 11:57 . 2011-06-23 18:36 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll
    + 2011-10-14 11:57 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe
    + 2011-08-11 11:47 . 2011-04-25 16:11 916480 c:\windows\ie8updates\KB2559049-IE8\wininet.dll
    + 2011-08-11 11:47 . 2009-03-08 09:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll
    + 2011-08-11 11:47 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll
    + 2011-08-11 11:47 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe
    + 2011-08-11 11:47 . 2011-04-25 16:11 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll
    + 2011-08-11 11:47 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe
    + 2011-06-16 16:35 . 2009-03-08 09:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
    + 2011-06-16 16:35 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
    + 2011-06-16 16:35 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
    + 2011-06-16 17:04 . 2011-02-22 23:06 916480 c:\windows\ie8updates\KB2530548-IE8\wininet.dll
    + 2011-06-16 17:04 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll
    + 2011-06-16 17:04 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe
    + 2011-06-16 17:04 . 2011-02-22 23:06 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll
    + 2011-06-16 17:04 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe
    + 2011-04-13 08:06 . 2010-03-10 06:15 420352 c:\windows\ie8updates\KB2510531-IE8\vbscript.dll
    + 2011-04-13 08:06 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll
    + 2011-04-13 08:06 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe
    + 2011-04-13 08:06 . 2009-12-09 05:53 726528 c:\windows\ie8updates\KB2510531-IE8\jscript.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 916480 c:\windows\ie8updates\KB2497640-IE8\wininet.dll
    + 2011-04-13 08:30 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2497640-IE8\spuninst\updspapi.dll
    + 2011-04-13 08:30 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2497640-IE8\spuninst\spuninst.exe
    + 2011-04-13 08:29 . 2010-12-20 23:59 206848 c:\windows\ie8updates\KB2497640-IE8\occache.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 611840 c:\windows\ie8updates\KB2497640-IE8\mstime.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 602112 c:\windows\ie8updates\KB2497640-IE8\msfeeds.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 247808 c:\windows\ie8updates\KB2497640-IE8\ieproxy.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 184320 c:\windows\ie8updates\KB2497640-IE8\iepeers.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 743424 c:\windows\ie8updates\KB2497640-IE8\iedvtool.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 387584 c:\windows\ie8updates\KB2497640-IE8\iedkcs32.dll
    + 2011-04-13 08:29 . 2010-12-20 12:55 173568 c:\windows\ie8updates\KB2497640-IE8\ie4uinit.exe
    + 2011-02-10 16:58 . 2010-11-06 00:26 916480 c:\windows\ie8updates\KB2482017-IE8\wininet.dll
    + 2011-02-10 16:58 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
    + 2011-02-10 16:58 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
    + 2011-02-10 16:58 . 2010-11-06 00:26 206848 c:\windows\ie8updates\KB2482017-IE8\occache.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 611840 c:\windows\ie8updates\KB2482017-IE8\mstime.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 602112 c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 247808 c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 184320 c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 743424 c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 387584 c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
    + 2011-02-10 16:58 . 2010-11-03 12:26 173568 c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
    + 2010-12-15 09:16 . 2010-09-10 05:58 916480 c:\windows\ie8updates\KB2416400-IE8\wininet.dll
    + 2010-12-15 09:16 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2416400-IE8\spuninst\updspapi.dll
    + 2010-12-15 09:16 . 2010-02-22 14:23 231288 c:\windows\ie8updates\KB2416400-IE8\spuninst\spuninst.exe
    + 2010-12-15 09:16 . 2010-09-10 05:58 206848 c:\windows\ie8updates\KB2416400-IE8\occache.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 611840 c:\windows\ie8updates\KB2416400-IE8\mstime.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 602112 c:\windows\ie8updates\KB2416400-IE8\msfeeds.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 247808 c:\windows\ie8updates\KB2416400-IE8\ieproxy.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 184320 c:\windows\ie8updates\KB2416400-IE8\iepeers.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 743424 c:\windows\ie8updates\KB2416400-IE8\iedvtool.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 387584 c:\windows\ie8updates\KB2416400-IE8\iedkcs32.dll
    + 2010-12-15 09:16 . 2010-08-26 12:22 173056 c:\windows\ie8updates\KB2416400-IE8\ie4uinit.exe
    + 2008-11-13 06:07 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2011-10-14 11:36 . 2011-10-14 11:36 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_a76f7c0e\System.Drawing.dll
    + 2011-10-15 00:28 . 2011-10-15 00:28 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_fb113a29\System.Drawing.Design.dll
    + 2011-10-15 00:27 . 2011-10-15 00:27 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7797ab53\CustomMarshalers.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 404480 c:\windows\assembly\NativeImages_v4.0.30319_32\XamlBuildTask\2281cc4a597f792398d8d8686914b968\XamlBuildTask.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 356864 c:\windows\assembly\NativeImages_v4.0.30319_32\WsatConfig\78bc943efc4cec6b7b62fe054c0b1bd1\WsatConfig.ni.exe
    + 2011-10-15 00:57 . 2011-10-15 00:57 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\93b5fea40a9f6e58a9b2bbba42c5aaa9\WindowsFormsIntegration.ni.dll
    + 2011-10-14 12:04 . 2011-10-14 12:04 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\6c54eb83d261d9454a06d3693ffbcc5d\UIAutomationTypes.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\ea5a765a680294f4f0c8d011b976aeff\UIAutomationClient.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\ac83dccb7190da6411e8d3a9fcd0a1c6\System.Xml.Linq.ni.dll
    + 2011-10-14 12:04 . 2011-10-14 12:04 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\fafffa7ce3e8d0f5b1188f932f3a3ab7\System.Windows.Input.Manipulations.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7e96699da682fefbcc483375a2857405\System.Windows.Forms.DataVisualization.Design.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 224256 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.RegularE#\1839940888742006191d9d3c5a01043a\System.Web.RegularExpressions.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 861696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\e38e93c447c3f69c4b81e07f670e7d85\System.Web.Extensions.Design.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 332800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\0ee5eee999d082d4e96dd01747419ce4\System.Web.Entity.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 297472 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\6130732c03d66393116d173df563bb7f\System.Web.Entity.Design.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 705536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\eac277ddce09a6c1846b64d40d2b8361\System.Web.DynamicData.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 259072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\980f56d5f112e3d98f7db4751396b29f\System.Web.DataVisualization.Design.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\070a151cbc5431c55285c6ff523c031c\System.Transactions.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\875b95dc500e77c28937d51f34855b9f\System.ServiceProcess.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\bfbbd49def302da34b0ed6f0d96272e7\System.ServiceModel.Routing.ni.dll
    + 2011-10-14 12:14 . 2011-10-14 12:14 422912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\1254321b4598084b1556aaa2dd476879\System.ServiceModel.Activation.ni.dll
    + 2011-10-14 11:48 . 2011-10-14 11:48 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\c9d0ef417413a38b9c31a62f50f92603\System.Security.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5012594ebdbad61f88643388bced4ed9\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 770560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\6c3904e449c88c948ca8ff73fe5ed6e2\System.Runtime.Remoting.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 241664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Cach#\0a5cc355e6463d0b74ee38984f9729d6\System.Runtime.Caching.ni.dll
    + 2011-10-14 11:48 . 2011-10-14 11:48 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\127cd56ff9ff9cda3a1e45150db90e61\System.Numerics.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\3decd215ccac00fdb5be0fbcf32d39ee\System.Net.ni.dll
    + 2011-10-14 12:14 . 2011-10-14 12:14 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\93e3ac82bbebb9bae9c6e04853e4e560\System.Messaging.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\cb90ad2dc67e44861c0a4f45afc35c40\System.Management.Instrumentation.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\1ed626085b903b1840bec5901ea3843b\System.IO.Log.ni.dll
    + 2011-10-14 12:14 . 2011-10-14 12:14 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\eba3e1687ea4e2040f9d5c70427b00b4\System.IdentityModel.Selectors.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\2562ccd20af2a4a4de3f813b15584e35\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\2562ccd20af2a4a4de3f813b15584e35\System.EnterpriseServices.ni.dll
    + 2011-10-14 11:48 . 2011-10-14 11:48 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\059a89ceaf53b2d8074b006f825c272e\System.Dynamic.ni.dll
    + 2011-10-14 11:51 . 2011-10-14 11:51 224768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\40488f5799247196680206b3bebfa949\System.Drawing.Design.ni.dll
    + 2011-10-15 00:55 . 2011-10-15 00:55 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\ce3df3e760f21409d3d95968532d3d2c\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\668555c22baf1b88c3ee78f7bdde0ebd\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-15 00:55 . 2011-10-15 00:55 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\ed718f4ed711e46ad33414be5ceadae9\System.Device.ni.dll
    + 2011-10-15 00:55 . 2011-10-15 00:55 507904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\6dbf127f75e81d11a17b2cef8535b4bd\System.Data.Services.Design.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\91decd6bfe1817da5d9d7b3e94b1702f\System.Data.DataSetExtensions.ni.dll
    + 2011-10-14 11:47 . 2011-10-14 11:47 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\7b52ca47938281b88a02ed867b09e741\System.Configuration.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\2172fc86e94fa155d2f53ca31bbab889\System.Configuration.Install.ni.dll
    + 2011-10-14 11:46 . 2011-10-14 11:46 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\652fb4a2a2e712b35deeb9bfd87cdec0\System.ComponentModel.Composition.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\0746ffa417268a093a644ac3cd246efe\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\9755aa9c724053770ee421133dc6cdf8\System.AddIn.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\8d999ffc5409c3d491b642da34beb11d\System.Activities.DurableInstancing.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\ccc91fb0e36afaa25ffcbfe22ea05985\SMSvcHost.ni.exe
    + 2011-10-14 12:02 . 2011-10-14 12:02 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\8594810edda3dde205fddaba2490cb41\SMDiagnostics.ni.dll
    + 2011-10-14 11:46 . 2011-10-14 11:46 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\baaa2825007711cc73cfd32c7f51b601\PresentationFramework.Classic.ni.dll
    + 2011-10-14 11:49 . 2011-10-14 11:49 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9985d6b48e5f919795b4e8e74b524325\PresentationFramework.Luna.ni.dll
    + 2011-10-14 11:48 . 2011-10-14 11:48 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\13a05e33662f9fc724864e791f59366c\PresentationFramework.Royale.ni.dll
    + 2011-10-14 11:47 . 2011-10-14 11:47 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\0d23e87e85afebf2709b361993d9ef42\PresentationFramework.Aero.ni.dll
    + 2011-10-14 11:58 . 2011-10-14 11:58 274432 c:\windows\assembly\NativeImages_v4.0.30319_32\MSBuild\341865269bf054acb4e124e016662d59\MSBuild.ni.exe
    + 2011-10-14 12:00 . 2011-10-14 12:00 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\4d631671285051523d216909733beacb\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-10-14 12:00 . 2011-10-14 12:00 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\97c66782877b034bb138a98499138f10\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 631808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Uti#\4a544cdb4865a539a50bb01edb0a29f3\Microsoft.Build.Utilities.v4.0.ni.dll
    + 2011-10-14 11:58 . 2011-10-14 11:58 258048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Fra#\a9e02732a11dfb0dc776ead102392796\Microsoft.Build.Framework.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 135680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Con#\a39232e94702bcd7ce8647f3cff6c428\Microsoft.Build.Conversion.v4.0.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e922f130d06bc435ca620d885c8067ce\CustomMarshalers.ni.dll
    + 2011-10-14 11:58 . 2011-10-14 11:58 474624 c:\windows\assembly\NativeImages_v4.0.30319_32\ComSvcConfig\1840aa38dd2142faae7122b59bf54425\ComSvcConfig.ni.exe
    + 2011-10-14 11:58 . 2011-10-14 11:58 846336 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\c2c94bf9574042aa6a1bbbaf678f4845\AspNetMMCExt.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfig.ni.exe
    + 2011-10-14 12:24 . 2011-10-14 12:24 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll
    + 2011-06-17 02:58 . 2011-06-17 02:58 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP11E.tmp\ComSvcConfig.exe
    + 2011-10-15 00:54 . 2011-10-15 00:54 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\566b2e11e7f3f6d973b17b86cf42f9bc\System.Xml.Linq.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\3533d614ebecd4344efbee619dd11a74\System.Web.Routing.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c\System.Web.RegularExpressions.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9\System.Web.Extensions.Design.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\93b5d1b77a74b76ac73cbf51ec871c01\System.Web.Entity.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d06a7d5872bbe85795f947f6c75d38c6\System.Web.Entity.Design.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ad0851438a18bf730d974c9b2f5f776a\System.Web.DynamicData.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878\System.Web.Abstractions.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8efcd633af87989355382b5039f1b7df\System.Transactions.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e\System.Management.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f36eded354122da9555a6c7cdbdb5431\System.Management.Instrumentation.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07\System.Drawing.Design.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b\System.DirectoryServices.Protocols.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e5ada332a9bc3c982e6aede6ba354196\System.Data.Services.Client.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3f179f373f31817a914b639a56cc0497\System.Data.Services.Design.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091\System.Data.Entity.Design.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da\System.Data.DataSetExtensions.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73\System.Configuration.Install.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe
    + 2011-10-14 12:27 . 2011-10-14 12:27 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217\ServiceModelReg.ni.exe
    + 2011-10-14 12:22 . 2011-10-14 12:22 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe
    + 2011-10-14 12:27 . 2011-10-14 12:27 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2\Microsoft.Build.Utilities.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682\Microsoft.Build.Engine.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-10-14 12:25 . 2011-10-14 12:25 573440 c:\windows\assembly\NativeImages_v2.0.50727_32\EnvDTE\83df165591a70f483cf17864e062eda4\EnvDTE.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe
    + 2011-10-14 12:25 . 2011-10-14 12:25 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetMMCExt.ni.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2010-10-06 08:23 . 2010-10-06 08:23 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2010-10-06 08:23 . 2010-10-06 08:23 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 296816 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 296816 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.0.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 231280 c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe.Entity\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.Entity.dll
    - 2010-10-06 08:23 . 2010-10-06 08:23 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-09-21 06:31 . 2011-09-21 06:31 111232 c:\windows\assembly\GAC_MSIL\Microsoft.WindowsAPICodePack\1.1.0.0__31bf3856ad364e35\Microsoft.WindowsAPICodePack.dll
    + 2011-09-21 06:31 . 2011-09-21 06:31 547968 c:\windows\assembly\GAC_MSIL\Microsoft.WindowsAPICodePack.Shell\1.1.0.0__31bf3856ad364e35\Microsoft.WindowsAPICodePack.Shell.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2011-06-21 06:21 . 2011-06-21 06:21 272264 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.PowerPacks.Vs\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.PowerPacks.Vs.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.dll
    + 2011-09-06 19:13 . 2011-09-06 19:13 115744 c:\windows\assembly\GAC_MSIL\Microsoft.Synchronization.Data.Server\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.Data.Server.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2011-02-25 09:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971029\update\updspapi.dll
    + 2011-02-25 09:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971029\update\update.exe
    + 2011-02-25 09:03 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971029\spuninst.exe
    + 2009-07-27 22:13 . 2009-07-27 22:13 135168 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
    + 2011-11-11 13:19 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2641690\update\updspapi.dll
    + 2011-11-11 13:19 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2641690\update\update.exe
    + 2011-11-11 13:19 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2641690\spuninst.exe
    + 2011-09-28 07:05 . 2011-09-28 07:05 599552 c:\windows\$hf_mig$\KB2641690\SP3QFE\crypt32.dll
    + 2011-09-16 16:08 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll
    + 2011-09-16 16:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2616676\update\update.exe
    + 2011-09-16 16:08 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2616676\spuninst.exe
    + 2011-09-09 09:11 . 2011-09-09 09:11 599552 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll
    + 2011-09-07 13:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll
    + 2011-09-07 13:06 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2607712\update\update.exe
    + 2011-09-07 13:06 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2607712\spuninst.exe
    + 2011-09-03 10:16 . 2011-09-03 10:16 599552 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll
    + 2011-10-14 12:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2592799\update\update.exe
    + 2011-10-14 12:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2592799\spuninst.exe
    + 2011-10-14 04:36 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys
    + 2011-10-14 11:58 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll
    + 2011-10-14 11:58 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe
    + 2011-10-14 11:58 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe
    + 2011-10-14 04:35 . 2011-08-22 23:47 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll
    + 2011-10-14 04:34 . 2011-08-22 23:47 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll
    + 2011-10-14 04:35 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe
    + 2011-09-16 15:57 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll
    + 2011-09-16 15:57 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570947\update\update.exe
    + 2011-09-16 15:57 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570947\spuninst.exe
    + 2011-08-11 12:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll
    + 2011-08-11 12:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570222\update\update.exe
    + 2011-08-11 12:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570222\spuninst.exe
    + 2011-08-10 09:28 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys
    + 2011-08-11 12:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll
    + 2011-08-11 12:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567680\update\update.exe
    + 2011-08-11 12:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567680\spuninst.exe
    + 2011-06-20 17:43 . 2011-06-20 17:43 293376 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll
    + 2011-10-14 12:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll
    + 2011-10-14 12:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe
    + 2011-10-14 12:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe
    + 2011-08-11 11:46 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll
    + 2011-08-11 11:46 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2566454\update\update.exe
    + 2011-08-11 11:46 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2566454\spuninst.exe
    + 2011-08-11 11:45 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll
    + 2011-08-11 11:45 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2562937\update\update.exe
    + 2011-08-11 11:45 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2562937\spuninst.exe
    + 2011-08-11 11:47 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll
    + 2011-08-11 11:47 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe
    + 2011-08-11 11:47 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe
    + 2011-08-10 09:28 . 2011-06-23 18:33 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll
    + 2011-08-10 09:28 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe
    + 2011-07-14 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll
    + 2011-07-14 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2555917\update\update.exe
    + 2011-07-14 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2555917\spuninst.exe
    + 2011-06-16 16:36 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll
    + 2011-06-16 16:36 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893\update\update.exe
    + 2011-06-16 16:36 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893\spuninst.exe
    + 2011-06-15 17:02 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll
    + 2011-11-09 12:34 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893-v2\update\updspapi.dll
    + 2011-11-09 12:34 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893-v2\update\update.exe
    + 2011-11-09 12:34 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893-v2\spuninst.exe
    + 2011-10-10 14:21 . 2011-10-10 14:21 692736 c:\windows\$hf_mig$\KB2544893-v2\SP3QFE\inetcomm.dll
    + 2011-06-16 16:35 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544521-IE8\update\updspapi.dll
    + 2011-06-16 16:35 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544521-IE8\update\update.exe
    + 2011-06-16 16:35 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544521-IE8\spuninst.exe
    + 2011-06-15 17:01 . 2011-04-30 02:59 758784 c:\windows\$hf_mig$\KB2544521-IE8\SP3QFE\vgx.dll
    + 2011-06-30 08:08 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll
    + 2011-06-30 08:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2541763\update\update.exe
    + 2011-06-30 08:08 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2541763\spuninst.exe
    + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll
    + 2011-06-16 17:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll
    + 2011-06-16 17:06 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276\update\update.exe
    + 2011-06-16 17:06 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276\spuninst.exe
    + 2011-06-15 17:04 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys
    + 2011-08-11 12:15 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll
    + 2011-08-11 12:15 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe
    + 2011-08-11 12:15 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe
    + 2011-08-10 09:28 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys
    + 2011-06-16 17:08 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll
    + 2011-06-16 17:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2535512\update\update.exe
    + 2011-06-16 17:08 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2535512\spuninst.exe
    + 2011-06-15 17:05 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys
    + 2011-06-16 17:04 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2530548-IE8\update\updspapi.dll
    + 2011-06-16 17:04 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2530548-IE8\update\update.exe
    + 2011-06-16 17:04 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2530548-IE8\spuninst.exe
    + 2011-06-15 17:04 . 2011-04-25 16:09 919552 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 206848 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\occache.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 611840 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mstime.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 602112 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeeds.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 247808 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieproxy.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 184320 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iepeers.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 743424 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedvtool.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 387584 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedkcs32.dll
    + 2011-06-15 17:04 . 2011-04-25 11:37 173568 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ie4uinit.exe
    + 2011-03-24 08:03 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2524375\update\updspapi.dll
    + 2011-03-24 08:03 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2524375\update\update.exe
    + 2011-03-24 08:03 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2524375\spuninst.exe
    + 2011-04-13 08:16 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2511455\update\updspapi.dll
    + 2011-04-13 08:16 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2511455\update\update.exe
    + 2011-04-13 08:16 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2511455\spuninst.exe
    + 2011-04-12 21:17 . 2011-02-17 13:19 457472 c:\windows\$hf_mig$\KB2511455\SP3QFE\mrxsmb.sys
    + 2011-04-13 08:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2510531-IE8\update\updspapi.dll
    + 2011-04-13 08:06 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2510531-IE8\update\update.exe
    + 2011-04-13 08:06 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2510531-IE8\spuninst.exe
    + 2011-04-12 21:16 . 2011-03-04 06:35 420864 c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\vbscript.dll
    + 2011-04-12 21:16 . 2011-03-04 06:35 726528 c:\windows\$hf_mig$\KB2510531-IE8\SP3QFE\jscript.dll
    + 2011-04-13 08:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2509553\update\updspapi.dll
    + 2011-04-13 08:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2509553\update\update.exe
    + 2011-04-13 08:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2509553\spuninst.exe
    + 2008-06-20 11:16 . 2008-06-20 11:16 225856 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys
    + 2008-06-20 11:59 . 2008-06-20 11:59 361600 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
    + 2008-06-20 17:43 . 2008-06-20 17:43 245248 c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
    + 2011-03-03 06:53 . 2011-03-03 06:53 149504 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll
    + 2008-10-16 15:07 . 2008-10-16 15:07 138496 c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys
    + 2011-04-13 08:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2508429\update\updspapi.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2508429\update\update.exe
    + 2011-04-13 08:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2508429\spuninst.exe
    + 2011-02-17 13:19 . 2011-02-17 13:19 357888 c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys
    + 2011-04-13 08:19 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2508272\update\updspapi.dll
    + 2011-04-13 08:19 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2508272\update\update.exe
    + 2011-04-13 08:19 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2508272\spuninst.exe
    + 2011-07-14 08:10 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll
    + 2011-07-14 08:10 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507938\update\update.exe
    + 2011-07-14 08:10 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507938\spuninst.exe
    + 2011-04-26 11:02 . 2011-04-26 11:02 293376 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll
    + 2011-04-13 08:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507618\update\updspapi.dll
    + 2011-04-13 08:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507618\update\update.exe
    + 2011-04-13 08:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507618\spuninst.exe
    + 2011-02-15 13:05 . 2011-02-15 13:05 290432 c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll
    + 2011-04-13 08:32 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2506223\update\updspapi.dll
    + 2011-04-13 08:32 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2506223\update\update.exe
    + 2011-04-13 08:32 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2506223\spuninst.exe
    + 2011-04-13 08:15 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2506212\update\updspapi.dll
    + 2011-04-13 08:15 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2506212\update\update.exe
    + 2011-04-13 08:15 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2506212\spuninst.exe
    + 2011-02-08 13:32 . 2011-02-08 13:32 974848 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42u.dll
    + 2011-02-08 13:32 . 2011-02-08 13:32 978944 c:\windows\$hf_mig$\KB2506212\SP3QFE\mfc42.dll
    + 2011-06-16 17:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503665\update\update.exe
    + 2011-06-16 17:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503665\spuninst.exe
    + 2011-06-15 17:05 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys
    + 2011-04-13 08:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503658\update\updspapi.dll
    + 2011-04-13 08:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503658\update\update.exe
    + 2011-04-13 08:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503658\spuninst.exe
    + 2011-03-07 05:31 . 2011-03-07 05:31 692736 c:\windows\$hf_mig$\KB2503658\SP3QFE\inetcomm.dll
    + 2011-04-13 08:30 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2497640-IE8\update\updspapi.dll
    + 2011-04-13 08:30 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2497640-IE8\update\update.exe
    + 2011-04-13 08:30 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2497640-IE8\spuninst.exe
    + 2011-04-12 21:19 . 2011-02-22 23:27 919552 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 206848 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\occache.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 611840 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mstime.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 602112 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\msfeeds.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 247808 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieproxy.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 184320 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iepeers.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 743424 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedvtool.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 387584 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iedkcs32.dll
    + 2011-04-12 21:19 . 2011-02-22 12:08 173568 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ie4uinit.exe
    + 2011-04-13 08:35 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2491683\update\updspapi.dll
    + 2011-04-13 08:35 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2491683\update\update.exe
    + 2011-04-13 08:35 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2491683\spuninst.exe
    + 2011-02-11 13:22 . 2011-02-11 13:22 229888 c:\windows\$hf_mig$\KB2491683\SP3QFE\fxscover.exe
    + 2011-04-13 08:33 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2485663\update\updspapi.dll
    + 2011-04-13 08:33 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2485663\update\update.exe
    + 2011-04-13 08:33 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2485663\spuninst.exe
    + 2011-02-10 17:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2485376\update\updspapi.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2485376\update\update.exe
    + 2011-02-10 17:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2485376\spuninst.exe
    + 2011-01-07 14:09 . 2011-01-07 14:09 290048 c:\windows\$hf_mig$\KB2485376\SP3QFE\atmfd.dll
    + 2011-02-10 17:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2483185\update\updspapi.dll
    + 2011-02-10 17:06 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2483185\update\update.exe
    + 2011-02-10 17:06 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2483185\spuninst.exe
    + 2011-01-21 14:42 . 2011-01-21 14:42 439808 c:\windows\$hf_mig$\KB2483185\SP3QFE\shimgvw.dll
    + 2011-02-10 16:58 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2482017-IE8\update\updspapi.dll
    + 2011-02-10 16:58 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2482017-IE8\update\update.exe
    + 2011-02-10 16:58 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2482017-IE8\spuninst.exe
    + 2011-02-09 17:16 . 2010-12-20 23:58 919552 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 206848 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\occache.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 611840 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mstime.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 602112 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\msfeeds.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 247808 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieproxy.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 184320 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iepeers.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 743424 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedvtool.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 387584 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iedkcs32.dll
    + 2011-02-09 17:16 . 2010-12-20 12:48 173568 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ie4uinit.exe
    + 2011-03-10 09:04 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2481109\update\updspapi.dll
    + 2011-03-10 09:04 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2481109\update\update.exe
    + 2011-03-10 09:04 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2481109\spuninst.exe
    + 2011-01-27 11:41 . 2011-01-27 11:41 677888 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstsc.exe
    + 2011-02-02 07:57 . 2011-02-02 07:57 136192 c:\windows\$hf_mig$\KB2481109\SP3QFE\aaclient.dll
    + 2011-03-10 09:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2479943\update\updspapi.dll
    + 2011-03-10 09:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2479943\update\update.exe
    + 2011-03-10 09:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2479943\spuninst.exe
    + 2011-02-09 13:52 . 2011-02-09 13:52 270848 c:\windows\$hf_mig$\KB2479943\SP3QFE\sbe.dll
    + 2011-02-09 13:52 . 2011-02-09 13:52 186880 c:\windows\$hf_mig$\KB2479943\SP3QFE\encdec.dll
    + 2011-02-10 17:07 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2479628\update\updspapi.dll
    + 2011-02-10 17:07 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2479628\update\update.exe
    + 2011-02-10 17:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2479628\spuninst.exe
    + 2011-02-10 17:08 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478971\update\updspapi.dll
    + 2011-02-10 17:08 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478971\update\update.exe
    + 2011-02-10 17:07 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478971\spuninst.exe
    + 2010-12-22 12:32 . 2010-12-22 12:32 301568 c:\windows\$hf_mig$\KB2478971\SP3QFE\kerberos.dll
    + 2011-02-10 16:54 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2478960\update\updspapi.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2478960\update\update.exe
    + 2011-02-10 16:54 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2478960\spuninst.exe
    + 2010-12-20 17:24 . 2010-12-20 17:24 730112 c:\windows\$hf_mig$\KB2478960\SP3QFE\lsasrv.dll
    + 2011-02-10 16:57 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476687\update\updspapi.dll
    + 2011-02-10 16:57 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476687\update\update.exe
    + 2011-02-10 16:57 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476687\spuninst.exe
    + 2011-06-16 17:09 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll
    + 2011-06-16 17:09 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476490\update\update.exe
    + 2011-06-16 17:09 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476490\spuninst.exe
    + 2010-12-20 17:30 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll
    + 2010-12-15 09:15 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2467659\update\updspapi.dll
    + 2010-12-15 09:15 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2467659\update\update.exe
    + 2010-12-15 09:15 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2467659\spuninst.exe
    + 2010-12-15 09:17 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2443105\update\updspapi.dll
    + 2010-12-15 09:17 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2443105\update\update.exe
    + 2010-12-15 09:17 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2443105\spuninst.exe
    + 2010-12-15 09:15 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2440591\update\updspapi.dll
    + 2010-12-15 09:15 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2440591\update\update.exe
    + 2010-12-15 09:15 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2440591\spuninst.exe
    + 2010-12-15 09:15 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2436673\update\updspapi.dll
    + 2010-12-15 09:15 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2436673\update\update.exe
    + 2010-12-15 09:15 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2436673\spuninst.exe
    + 2010-12-15 09:07 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2423089\update\updspapi.dll
    + 2010-12-15 09:07 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2423089\update\update.exe
    + 2010-12-15 09:07 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2423089\spuninst.exe
    + 2011-01-13 20:22 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2419632\update\updspapi.dll
    + 2011-01-13 20:22 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2419632\update\update.exe
    + 2011-01-13 20:22 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2419632\spuninst.exe
    + 2010-11-09 14:50 . 2010-11-09 14:50 253952 c:\windows\$hf_mig$\KB2419632\SP3QFE\odbc32.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 102400 c:\windows\$hf_mig$\KB2419632\SP3QFE\msjro.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 200704 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadox.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 180224 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadomd.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 565248 c:\windows\$hf_mig$\KB2419632\SP3QFE\msado15.dll
    + 2010-11-09 14:50 . 2010-11-09 14:50 143360 c:\windows\$hf_mig$\KB2419632\SP3QFE\msadco.dll
    + 2010-12-15 09:16 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2416400-IE8\update\updspapi.dll
    + 2010-12-15 09:16 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2416400-IE8\update\update.exe
    + 2010-12-15 09:16 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2416400-IE8\spuninst.exe
    + 2010-12-14 20:18 . 2010-11-06 00:27 919552 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 206848 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\occache.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 611840 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mstime.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 602112 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\msfeeds.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 247808 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieproxy.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 184320 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iepeers.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 743424 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedvtool.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 387584 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iedkcs32.dll
    + 2010-12-14 20:18 . 2010-11-03 12:01 173568 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ie4uinit.exe
    + 2011-02-10 16:54 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2393802\update\updspapi.dll
    + 2011-02-10 16:54 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2393802\update\update.exe
    + 2011-02-10 16:54 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2393802\spuninst.exe
    + 2011-02-09 17:14 . 2010-12-09 15:15 718336 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll
    + 2010-12-15 09:18 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2296199\update\updspapi.dll
    + 2010-12-15 09:18 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2296199\update\update.exe
    + 2010-12-15 09:18 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2296199\spuninst.exe
    + 2010-10-28 13:08 . 2010-10-28 13:08 290048 c:\windows\$hf_mig$\KB2296199\SP3QFE\atmfd.dll
    + 2011-04-12 21:18 . 2010-10-23 00:51 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 2603008 c:\windows\system32\WpdShext.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 2603008 c:\windows\system32\WpdShext.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 1382912 c:\windows\system32\WMVSDECD.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 1382912 c:\windows\system32\WMVSDECD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 1575424 c:\windows\system32\WMVENCOD.dll
    + 2006-10-19 01:47 . 2009-01-31 01:35 1543680 c:\windows\system32\WMVDECOD.dll
    - 2006-10-19 01:47 . 2006-10-19 01:47 1543680 c:\windows\system32\WMVDECOD.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 1329152 c:\windows\system32\WMSPDMOE.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 1329152 c:\windows\system32\WMSPDMOE.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 8231936 c:\windows\system32\wmploc.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 8231936 c:\windows\system32\wmploc.dll
    + 2005-08-25 09:38 . 2009-01-31 01:34 1661952 c:\windows\system32\wmpencen.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 1117696 c:\windows\system32\WMADMOE.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 1117696 c:\windows\system32\WMADMOE.dll
    + 2004-08-11 22:00 . 2011-09-06 13:20 1858944 c:\windows\system32\win32k.sys
    + 2004-08-11 22:00 . 2011-08-22 23:48 1212416 c:\windows\system32\urlmon.dll
    + 2004-08-11 22:00 . 2011-01-21 14:44 8462336 c:\windows\system32\shell32.dll
    - 2004-08-11 22:00 . 2010-07-27 06:30 8462336 c:\windows\system32\shell32.dll
    + 2010-02-20 10:54 . 2011-12-09 17:56 2753224 c:\windows\system32\Restore\rstrlog.dat
    + 2011-03-05 22:04 . 2005-11-11 05:09 6684672 c:\windows\system32\ReinstallBackups\0001\DriverFiles\atioglx1.dll
    + 2005-01-26 19:39 . 2009-04-28 20:20 1858032 c:\windows\system32\PxSFS.DLL
    + 2004-08-11 22:00 . 2010-12-09 13:38 2192768 c:\windows\system32\ntoskrnl.exe
    + 2004-08-04 03:59 . 2010-12-09 13:07 2069376 c:\windows\system32\ntkrnlpa.exe
    + 2004-08-11 22:11 . 2011-02-02 07:58 2067456 c:\windows\system32\mstscax.dll
    + 2004-08-11 22:00 . 2011-10-03 08:35 5971456 c:\windows\system32\mshtml.dll
    + 2010-11-17 05:22 . 2011-12-02 01:45 8527008 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2006-10-17 16:57 . 2011-08-22 23:48 2000384 c:\windows\system32\iertutil.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 8231936 c:\windows\system32\dllcache\wmploc.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 8231936 c:\windows\system32\dllcache\wmploc.dll
    + 2004-08-11 22:00 . 2009-01-31 01:34 1117696 c:\windows\system32\dllcache\WMADMOE.dll
    - 2004-08-11 22:00 . 2006-10-19 01:47 1117696 c:\windows\system32\dllcache\WMADMOE.dll
    + 2008-10-22 01:59 . 2011-09-06 13:20 1858944 c:\windows\system32\dllcache\win32k.sys
    + 2006-05-10 05:23 . 2011-08-22 23:48 1212416 c:\windows\system32\dllcache\urlmon.dll
    - 2008-06-17 19:02 . 2010-07-27 06:30 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2008-06-17 19:02 . 2011-01-21 14:44 8462336 c:\windows\system32\dllcache\shell32.dll
    + 2004-08-11 22:12 . 2009-01-30 22:40 1669632 c:\windows\system32\dllcache\setup_wm.exe
    + 2008-10-22 01:58 . 2010-12-09 13:38 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-10-22 01:58 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-10-22 01:58 . 2010-12-09 13:07 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
    + 2008-10-22 01:58 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2006-05-19 15:08 . 2011-10-03 08:35 5971456 c:\windows\system32\dllcache\mshtml.dll
    + 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
    + 2007-05-26 08:33 . 2011-08-22 23:48 2000384 c:\windows\system32\dllcache\iertutil.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1303896 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 6346600 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 3545952 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 2650464 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 4881752 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsData0009.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 2199880 c:\windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
    + 2010-03-18 18:16 . 2010-03-18 18:16 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 1587064 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Workflow.ComponentModel.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 1070960 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Workflow.Activities.dll
    + 2011-04-12 20:11 . 2011-04-12 20:11 5028200 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1711496 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.DataVisualization.dll
    + 2010-09-22 10:55 . 2010-09-22 10:55 1836904 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Extensions.dll
    + 2010-09-22 10:55 . 2010-09-22 10:55 5176144 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.dll
    + 2011-04-28 16:06 . 2011-04-28 16:06 1749880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.DataVisualization.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 6067048 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1026936 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
    + 2011-04-28 13:48 . 2011-04-28 13:48 3510600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 5078360 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Design.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 4464480 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Entity.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 2970968 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1339736 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1462648 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.Presentation.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1199968 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.dll
    + 2010-03-18 20:26 . 2010-03-18 20:26 1163264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\netfx_core_x86.msi
    + 2011-07-09 14:30 . 2011-07-09 14:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    + 2011-07-09 14:30 . 2011-07-09 14:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 2989456 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 1064816 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.Tasks.v4.0.dll
    + 2010-03-18 21:47 . 2010-03-18 21:47 1327968 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Build.dll
    + 2011-06-22 15:45 . 2010-03-18 18:16 1303896 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\WindowsBase.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.XML.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 4982120 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Windows.Forms.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 1711496 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Windows.Forms.DataVisualization.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 6067048 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.ServiceModel.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 1026936 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Runtime.Serialization.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 3481928 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 4464480 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.Entity.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 2970968 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Data.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 1339736 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Core.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 1462648 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Activities.Presentation.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 1199968 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\System.Activities.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 6346600 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationFramework.dll
    + 2011-06-22 15:44 . 2010-03-18 18:16 3545952 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\PresentationCore.dll
    + 2011-06-22 15:42 . 2011-02-10 09:10 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\mscorlib.dll
    + 2011-06-22 15:43 . 2010-03-18 18:16 2989456 c:\windows\Microsoft.NET\Framework\v4.0.30319\GAC28818\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2010-03-18 18:16 . 2010-03-18 18:16 1972552 c:\windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
    + 2011-07-09 14:30 . 2011-07-09 14:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    - 2008-07-25 16:17 . 2008-07-25 16:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2011-03-25 11:15 . 2011-03-25 11:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2010-03-23 10:32 . 2010-03-23 10:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-04-29 02:50 . 2011-04-29 02:50 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2010-05-11 11:40 . 2010-05-11 11:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2011-07-07 10:18 . 2011-07-07 10:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    - 2010-09-23 07:26 . 2010-09-23 07:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2011-07-07 17:02 . 2011-07-07 17:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2011-07-07 17:02 . 2011-07-07 17:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    - 2010-09-23 20:55 . 2010-09-23 20:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2011-07-08 18:59 . 2011-07-08 18:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2011-10-14 11:43 . 2011-10-14 11:43 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 1587064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.ComponentModel\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
    + 2011-08-11 12:14 . 2011-08-11 12:14 1070960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Workflow.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 1836904 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 1749880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.DataVisualization.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 5078360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Design\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 1327968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 1064816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Tasks.v4.0\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v4.0.dll
    + 2011-08-11 12:13 . 2011-08-11 12:13 5176144 c:\windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-10-14 11:41 . 2011-10-14 11:41 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-10-14 11:40 . 2011-10-14 11:40 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-10-14 11:42 . 2011-10-14 11:42 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-01-11 23:52 . 2011-01-11 23:52 3360768 c:\windows\Installer\faccce9.msp
    + 2011-05-02 05:06 . 2011-05-02 05:06 2705920 c:\windows\Installer\ebd6f.msp
    + 2011-07-27 12:42 . 2011-07-27 12:42 4985856 c:\windows\Installer\ebd66.msp
    + 2011-04-28 22:51 . 2011-04-28 22:51 1375744 c:\windows\Installer\ebd51.msp
    + 2011-04-28 15:54 . 2011-04-28 15:54 2720768 c:\windows\Installer\ebd49.msp
    + 2011-08-31 05:33 . 2011-08-31 05:33 3550208 c:\windows\Installer\748957.msp
    + 2011-11-07 06:20 . 2011-11-07 06:20 1252864 c:\windows\Installer\68b29.msi
    + 2011-11-07 06:19 . 2011-11-07 06:19 1527808 c:\windows\Installer\68b1f.msi
    + 2010-12-17 06:17 . 2010-12-17 06:17 3362304 c:\windows\Installer\561f3e6.msp
    + 2011-04-29 17:31 . 2011-04-29 17:31 9006080 c:\windows\Installer\36519081.msp
    + 2011-04-29 17:28 . 2011-04-29 17:28 1995264 c:\windows\Installer\36519062.msp
    + 2011-04-29 17:33 . 2011-04-29 17:33 8173568 c:\windows\Installer\36519038.msp
    + 2011-01-19 04:36 . 2011-01-19 04:36 2687488 c:\windows\Installer\36519022.msp
    + 2011-06-15 21:34 . 2011-06-15 21:34 4272128 c:\windows\Installer\32316e0b.msi
    + 2011-08-10 22:43 . 2011-08-10 22:43 3795968 c:\windows\Installer\2ec72f2b.msp
    + 2011-09-07 02:46 . 2011-09-07 02:46 9006080 c:\windows\Installer\2ec72f17.msp
    + 2011-08-24 11:37 . 2011-08-24 11:37 4985856 c:\windows\Installer\2ec72f03.msp
    + 2011-08-10 22:42 . 2011-08-10 22:42 7070208 c:\windows\Installer\2ec72eef.msp
    + 2011-09-07 02:48 . 2011-09-07 02:48 8181248 c:\windows\Installer\2ec72edb.msp
    + 2011-07-27 12:39 . 2011-07-27 12:39 9892352 c:\windows\Installer\2ec72eac.msp
    + 2011-06-21 17:01 . 2011-06-21 17:01 4991488 c:\windows\Installer\257e337f.msp
    + 2010-10-22 00:10 . 2010-10-22 00:10 3995136 c:\windows\Installer\1fa4bcb4.msp
    + 2010-11-21 05:35 . 2010-11-21 05:35 3359744 c:\windows\Installer\1fa4bc9a.msp
    + 2010-09-22 20:02 . 2010-09-22 20:02 4076032 c:\windows\Installer\1e2b82e6.msp
    + 2011-02-16 19:54 . 2011-02-16 19:54 4992000 c:\windows\Installer\1b2331b.msp
    + 2011-09-21 21:18 . 2011-09-21 21:18 4985856 c:\windows\Installer\18c8b19.msp
    + 2011-03-18 01:05 . 2011-03-18 01:05 4989440 c:\windows\Installer\182c83e.msp
    + 2011-01-11 22:49 . 2011-01-11 22:49 9003008 c:\windows\Installer\182c828.msp
    + 2010-11-21 04:32 . 2010-11-21 04:32 4165120 c:\windows\Installer\182c812.msp
    + 2011-03-18 01:01 . 2011-03-18 01:01 9563648 c:\windows\Installer\182c7ee.msp
    + 2011-01-11 22:50 . 2011-01-11 22:50 8177152 c:\windows\Installer\182c7d8.msp
    + 2010-11-21 04:33 . 2010-11-21 04:33 1980928 c:\windows\Installer\182c7c2.msp
    + 2011-06-21 06:38 . 2011-06-21 06:38 1160192 c:\windows\Installer\1724b85a.msi
    + 2011-04-29 17:27 . 2011-04-29 17:27 4158464 c:\windows\Installer\1523651.msp
    + 2011-04-28 10:42 . 2011-04-28 10:42 4990976 c:\windows\Installer\152363b.msp
    + 2010-01-14 21:49 . 2011-10-14 12:01 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 1172240 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
    - 2010-01-14 21:49 . 2010-11-10 09:09 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    + 2010-01-14 21:49 . 2011-10-14 12:01 1165584 c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
    + 2011-05-27 13:22 . 2011-05-27 13:22 1953792 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\rt3d.dll
    + 2009-04-04 00:21 . 2009-04-04 00:21 8543096 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6425\OARTCONV.DLL
    + 2011-10-14 11:57 . 2011-06-23 18:36 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll
    + 2011-10-14 11:57 . 2011-07-25 15:17 5969920 c:\windows\ie8updates\KB2586448-IE8\mshtml.dll
    + 2011-10-14 11:57 . 2011-06-23 18:36 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll
    + 2011-08-11 11:47 . 2011-05-30 22:19 5964800 c:\windows\ie8updates\KB2559049-IE8\mshtml.dll
    + 2011-08-11 11:47 . 2011-04-25 16:11 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 5962240 c:\windows\ie8updates\KB2530548-IE8\mshtml.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 1210880 c:\windows\ie8updates\KB2497640-IE8\urlmon.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 5961216 c:\windows\ie8updates\KB2497640-IE8\mshtml.dll
    + 2011-04-13 08:29 . 2010-12-20 23:59 1991680 c:\windows\ie8updates\KB2497640-IE8\iertutil.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 1210880 c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 5959168 c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 1991680 c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 1210880 c:\windows\ie8updates\KB2416400-IE8\urlmon.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 5957120 c:\windows\ie8updates\KB2416400-IE8\mshtml.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 1986560 c:\windows\ie8updates\KB2416400-IE8\iertutil.dll
    + 2008-10-22 01:58 . 2010-12-09 13:38 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
    + 2008-10-22 01:58 . 2010-12-09 13:07 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-22 01:58 . 2010-12-09 13:07 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-10-22 01:58 . 2010-12-09 13:42 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2011-10-14 11:35 . 2011-10-14 11:35 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_97a85332\System.dll
    + 2011-10-15 00:26 . 2011-10-15 00:26 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_87896311\System.dll
    + 2011-10-15 00:30 . 2011-10-15 00:30 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_f95ca761\System.Xml.dll
    + 2011-10-14 11:36 . 2011-10-14 11:36 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_1d30d720\System.Xml.dll
    + 2011-10-15 00:29 . 2011-10-15 00:29 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_e9d1d02b\System.Windows.Forms.dll
    + 2011-10-14 11:36 . 2011-10-14 11:36 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_31fae214\System.Windows.Forms.dll
    + 2011-10-15 00:31 . 2011-10-15 00:31 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_b2fa57b7\System.Drawing.dll
    + 2011-10-14 11:36 . 2011-10-14 11:36 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ea7bebf6\System.Design.dll
    + 2011-10-15 00:30 . 2011-10-15 00:30 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_73a2fa13\System.Design.dll
    + 2011-10-15 00:31 . 2011-10-15 00:31 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_78f3a440\mscorlib.dll
    + 2011-10-14 11:36 . 2011-10-14 11:36 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_3bd0d8e0\mscorlib.dll
    + 2011-10-14 11:46 . 2011-10-14 11:46 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\87066b3003282046ff0366ee18ad6265\WindowsBase.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\75e497a4cfbcafa986b05b3f1d6915ef\UIAutomationClientsideProviders.ni.dll
    + 2011-10-14 11:45 . 2011-10-14 11:45 9085952 c:\windows\assembly\NativeImages_v4.0.30319_32\System\b01681b48ad57dac61803e137a3db00a\System.ni.dll
    + 2011-10-14 11:47 . 2011-10-14 11:47 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\8a05d1bb5b1c7c4761672f8702fde117\System.Xml.ni.dll
    + 2011-10-14 11:58 . 2011-10-14 11:58 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cc80381aabbaca6c7f6c89458278d741\System.Xaml.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 1208320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\a73264f527beef37a552958d8d716184\System.WorkflowServices.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 1968640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Run#\37a426b6fee262f7533363c826f36f33\System.Workflow.Runtime.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 4461568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\ca1d7f5f8d048c11895f09ebcdc0a4bc\System.Workflow.ComponentModel.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 2870272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\36fa16869dde0de7617792947ce63954\System.Workflow.Activities.ni.dll
    + 2011-10-15 00:57 . 2011-10-15 00:57 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\8a59b33600b378d4a704f2a0ca467be5\System.Windows.Forms.DataVisualization.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 1895424 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\6d42efdff4b5bfa8e08079df5b1e0895\System.Web.Services.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 2328576 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\1974c327337bd27ae0cb348a85a8c1f7\System.Web.Mobile.ni.dll
    + 2011-10-14 12:15 . 2011-10-14 12:16 3087872 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\3fb678918c7165321bc848cd621cccc1\System.Web.Extensions.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 4531712 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\fe81ab62bc5375492a311844aa8dd1eb\System.Web.DataVisualization.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 2011136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\ba7584f5b6aeb247fcd6727210f7bd4a\System.Speech.ni.dll
    + 2011-10-14 12:11 . 2011-10-14 12:11 1050624 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f1ff686c0a0b2903a8daa0b56242ad6c\System.ServiceModel.Web.ni.dll
    + 2011-10-15 00:56 . 2011-10-15 00:56 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\a48a8f82316e4d5acf868c0e0d151a0b\System.ServiceModel.Discovery.ni.dll
    + 2011-10-14 12:14 . 2011-10-14 12:14 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\62899a18fb67a26a0e17383deaca2b08\System.ServiceModel.Activities.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\37bae915decd60731ec180455b121e0c\System.Runtime.Serialization.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\5022c9d5d71ecd11b2e1c25feb8cc2f1\System.Runtime.DurableInstancing.ni.dll
    + 2011-10-14 12:04 . 2011-10-14 12:04 1050112 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\1ec720f0c76c3503d12542e54239aaa7\System.Printing.ni.dll
    + 2011-10-14 12:14 . 2011-10-14 12:14 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\2dfbbd5dfb0eb635b4680c82165e5ea8\System.Management.ni.dll
    + 2011-10-14 12:13 . 2011-10-14 12:13 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\f70fb29b6c0c8407a3f3cca230bdeea9\System.IdentityModel.ni.dll
    + 2011-10-14 11:48 . 2011-10-14 11:48 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b42e50ce58cb6fad49a54c1f23872480\System.Drawing.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\bcdee2efed57110ce85db43ec4d604f1\System.DirectoryServices.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 12:00 1878016 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\ca3c5c4ef4c5e50eca03946791a8af03\System.Deployment.ni.dll
    + 2011-10-14 11:50 . 2011-10-14 11:50 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\1c29a664f4471efe20a919d8da8a2806\System.Data.ni.dll
    + 2011-10-14 11:47 . 2011-10-14 11:47 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\0678315e9d4ba15e47fa58e8c2c23072\System.Data.SqlXml.ni.dll
    + 2011-10-14 12:10 . 2011-10-14 12:10 2018304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Services\864c6d0d16b4586fb64ee167b8851af7\System.Data.Services.ni.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\2f96ecdc5f06e396f6885f22a03d708f\System.Data.Services.Client.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 1189376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.OracleC#\79330a3366cc293f6a8c78758e8192a1\System.Data.OracleClient.ni.dll
    + 2011-10-14 11:49 . 2011-10-14 11:49 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\c4bc58e2784d3d4b301894001d3f5c50\System.Data.Linq.ni.dll
    + 2011-10-14 12:10 . 2011-10-14 12:10 1408000 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity.#\eff4448b2eeccabbb9fac1e92f610889\System.Data.Entity.Design.ni.dll
    + 2011-10-14 11:45 . 2011-10-14 11:45 7054336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\4ff6e3bbae41f08203c7a7d40b8a02d2\System.Core.ni.dll
    + 2011-10-14 12:05 . 2011-10-14 12:05 4121088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\cb450374867ee8b936760075be308076\System.Activities.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 3713024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\e368625a98cdb0abbd196c03313b1430\System.Activities.Presentation.ni.dll
    + 2011-10-14 12:06 . 2011-10-14 12:06 1518080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\90dccc5f48597f1aaa9f35f49bd3ba92\System.Activities.Core.Presentation.ni.dll
    + 2011-10-14 12:05 . 2011-10-14 12:05 2859008 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\b482101761d5d1a4bc66d3a0af53d83f\ReachFramework.ni.dll
    + 2011-10-14 12:02 . 2011-10-14 12:02 1630208 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\6eeabf171791bc207396c12e3eb890dd\PresentationUI.ni.dll
    + 2011-10-14 12:01 . 2011-10-14 12:01 1478144 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationBuildTa#\a419b6186ccaff3a5672b913ae249f20\PresentationBuildTasks.ni.dll
    + 2011-10-14 12:00 . 2011-10-14 12:00 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e9853fdf237d27d2d08c080eb6cdb9a6\Microsoft.VisualBasic.ni.dll
    + 2011-10-14 12:00 . 2011-10-14 12:00 1138688 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\937921f93ebf6e64573780c7f5317372\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2011-10-14 12:00 . 2011-10-14 12:00 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\9355625d1fc04f6f6947bd162cc3f8b5\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2011-10-14 12:00 . 2011-10-14 12:00 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\35bb096b11dc8a0d68abbc31e9c5a1a6\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-14 12:15 . 2011-10-14 12:15 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\43ada806d7ab8075481314a20b848983\Microsoft.JScript.ni.dll
    + 2011-10-14 11:47 . 2011-10-14 11:47 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\a6ca8fe97c8f022d8c28f6adb4086937\Microsoft.CSharp.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 4243456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build\4e7c9f19916a15c42c4e155bec855b5a\Microsoft.Build.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 2868736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\7f137f7d29a7b459a8aed2c29044fe9c\Microsoft.Build.Tasks.v4.0.ni.dll
    + 2011-10-14 11:59 . 2011-10-14 11:59 1929216 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Eng#\4488e1cdf437567f30cb30be5d9a6fd2\Microsoft.Build.Engine.ni.dll
    + 2011-10-14 12:21 . 2011-10-14 12:21 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll
    + 2011-06-16 17:36 . 2011-06-16 17:36 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2B16.tmp\System.Xml.dll
    + 2011-10-14 12:21 . 2011-10-14 12:21 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll
    + 2011-10-15 00:54 . 2011-10-15 00:54 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e\System.WorkflowServices.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f\System.Workflow.Runtime.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09\System.Workflow.ComponentModel.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\921629dc69a5a895101097c88ae67897\System.Workflow.Activities.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6303e256d2ac0843c3e4c24172c90544\System.Web.Services.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274\System.Web.Mobile.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\ccaf6bdd256a9b5079fedadcc8993327\System.Web.Extensions.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7\System.ServiceModel.Web.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69\System.IdentityModel.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7\System.DirectoryServices.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f\System.Deployment.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c\System.Data.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb\System.Data.SqlXml.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\541142d8742e6e88f1e729fafee04e71\System.Data.Services.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a\System.Data.Linq.ni.dll
    + 2011-10-14 12:28 . 2011-10-14 12:28 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\b70adfee3b5ed7e0688d13f24cbec556\System.Data.Entity.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll
    + 2011-10-14 12:21 . 2011-10-14 12:21 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\37fd70ad5f3726031995041b246fe862\PresentationBuildTasks.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 4868096 c:\windows\assembly\NativeImages_v2.0.50727_32\nhc\6e7a8c4ec02ab0f71ed9edff66870425\nhc.ni.exe
    + 2011-10-14 12:27 . 2011-10-14 12:27 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll
    + 2011-10-14 12:26 . 2011-10-14 12:26 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8ad32b72258899177c07dc5912b5b748\Microsoft.JScript.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095\Microsoft.Build.Tasks.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2010-10-06 08:21 . 2010-10-06 08:21 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2011-10-14 12:16 . 2011-10-14 12:16 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2010-10-06 08:20 . 2010-10-06 08:20 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-10-14 12:17 . 2011-10-14 12:17 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2010-10-06 08:22 . 2010-10-06 08:23 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-06-16 17:47 . 2011-10-14 12:17 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-10-06 08:22 . 2010-10-06 08:22 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-10-06 08:06 . 2010-10-06 08:06 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    + 2011-10-14 11:35 . 2011-10-14 11:35 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2010-10-06 08:06 . 2010-10-06 08:06 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2011-10-14 11:35 . 2011-10-14 11:35 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-07-27 22:13 . 2009-07-27 22:13 8462848 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll
    + 2011-10-14 04:34 . 2011-08-22 23:47 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll
    + 2011-10-14 04:34 . 2011-10-03 08:34 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
    + 2011-10-14 04:35 . 2011-08-22 23:47 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll
    + 2011-09-06 13:25 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys
    + 2011-08-10 09:28 . 2011-06-23 18:33 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll
    + 2011-08-10 09:28 . 2011-07-25 15:15 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
    + 2011-08-10 09:28 . 2011-06-23 18:33 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll
    + 2011-06-02 14:07 . 2011-06-02 14:07 1867904 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys
    + 2011-06-15 17:04 . 2011-04-25 16:09 1213952 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\urlmon.dll
    + 2011-06-15 17:03 . 2011-05-30 22:17 5967360 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll
    + 2011-06-15 17:04 . 2011-04-25 16:09 1992192 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iertutil.dll
    + 2011-03-03 13:27 . 2011-03-03 13:27 1866880 c:\windows\$hf_mig$\KB2506223\SP3QFE\win32k.sys
    + 2011-04-12 21:19 . 2011-02-22 23:27 1212928 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\urlmon.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 5964800 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll
    + 2011-04-12 21:19 . 2011-02-22 23:27 1992192 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\iertutil.dll
    + 2011-01-21 14:42 . 2011-01-21 14:42 8463360 c:\windows\$hf_mig$\KB2483185\SP3QFE\shell32.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 1211904 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\urlmon.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 5962240 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 1992192 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\iertutil.dll
    + 2011-02-02 07:57 . 2011-02-02 07:57 2069504 c:\windows\$hf_mig$\KB2481109\SP3QFE\lhmstscx.dll
    + 2010-12-31 13:14 . 2010-12-31 13:14 1864064 c:\windows\$hf_mig$\KB2479628\SP3QFE\win32k.sys
    + 2010-10-26 13:27 . 2010-10-26 13:27 1862272 c:\windows\$hf_mig$\KB2436673\SP3QFE\win32k.sys
    + 2010-12-14 20:18 . 2010-11-06 00:27 1211904 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\urlmon.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 5960704 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll
    + 2010-12-14 20:18 . 2010-11-06 00:27 1992192 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\iertutil.dll
    + 2011-02-09 17:14 . 2010-12-09 13:43 2192768 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
    + 2011-02-09 17:14 . 2010-12-09 13:09 2027008 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrpamp.exe
    + 2010-12-10 00:39 . 2010-12-10 00:39 2069376 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
    + 2011-02-09 17:14 . 2010-12-09 13:47 2148864 c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlmp.exe
    + 2005-09-02 04:03 . 2011-11-09 12:22 50295240 c:\windows\system32\MRT.exe
    + 2006-11-08 02:03 . 2011-08-23 22:48 11081728 c:\windows\system32\ieframe.dll
    + 2007-05-26 08:33 . 2011-08-23 22:48 11081728 c:\windows\system32\dllcache\ieframe.dll
    + 2011-07-13 03:49 . 2011-07-13 03:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067\M2572067Uninstall.msp
    + 2011-02-16 18:13 . 2011-02-16 18:13 20308992 c:\windows\Installer\8349b17.msp
    + 2010-12-21 19:06 . 2010-12-21 19:06 11570688 c:\windows\Installer\561f3d0.msp
    + 2011-04-13 16:37 . 2011-04-13 16:37 19201024 c:\windows\Installer\4ff318d.msp
    + 2011-03-28 08:27 . 2011-03-28 08:27 15456256 c:\windows\Installer\3651908f.msp
    + 2011-06-16 17:10 . 2011-06-16 17:10 20333056 c:\windows\Installer\36519045.msp
    + 2011-07-27 12:37 . 2011-07-27 12:37 11592192 c:\windows\Installer\2ec72ec7.msp
    + 2011-04-21 08:00 . 2011-04-21 08:00 20314624 c:\windows\Installer\27300387.msp
    + 2010-10-09 04:07 . 2010-10-09 04:07 11559424 c:\windows\Installer\1fa4bc6e.msp
    + 2010-12-26 18:09 . 2010-12-26 18:09 20304384 c:\windows\Installer\1e55c315.msp
    + 2011-02-11 13:43 . 2011-02-11 13:43 10951168 c:\windows\Installer\1e2b82ce.msp
    + 2011-10-14 12:19 . 2011-10-14 12:19 20333568 c:\windows\Installer\18c8b32.msp
    + 2011-07-12 01:43 . 2011-07-12 01:43 11641344 c:\windows\Installer\18c8b25.msp
    + 2011-07-11 22:19 . 2011-07-11 22:19 10619904 c:\windows\Installer\18c8b05.msp
    + 2011-07-12 20:50 . 2011-07-12 20:50 17555968 c:\windows\Installer\18c8af8.msp
    + 2011-02-12 01:47 . 2011-02-12 01:47 12028928 c:\windows\Installer\182c7fb.msp
    + 2011-02-24 20:15 . 2011-02-24 20:15 11551232 c:\windows\Installer\182c7a4.msp
    + 2011-04-23 00:41 . 2011-04-23 00:41 11507712 c:\windows\Installer\152366b.msp
    + 2011-05-27 19:29 . 2011-05-27 19:29 13338040 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7448A0300000030\8.3.0\AcroRd32.dll
    + 2009-04-04 00:21 . 2009-04-04 00:21 16037736 c:\windows\Installer\$PatchCache$\Managed\00002109110000000000000000F01FEC\12.0.6425\OART.DLL
    + 2011-10-14 11:57 . 2011-06-23 18:36 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll
    + 2011-08-11 11:47 . 2011-04-26 15:11 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll
    + 2011-06-16 17:04 . 2011-02-22 23:06 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll
    + 2011-04-13 08:29 . 2010-12-21 11:29 11080704 c:\windows\ie8updates\KB2497640-IE8\ieframe.dll
    + 2011-02-10 16:58 . 2010-11-06 00:26 11080704 c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
    + 2010-12-15 09:16 . 2010-09-10 05:58 11080192 c:\windows\ie8updates\KB2416400-IE8\ieframe.dll
    + 2011-08-11 11:51 . 2011-08-11 11:51 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\Temp\18c-0\mscorlib.dll
    + 2011-10-14 11:49 . 2011-10-14 11:49 13137920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\d9d11906bf2979a016dccee585ebc1fc\System.Windows.Forms.ni.dll
    + 2011-10-14 12:03 . 2011-10-14 12:03 11993088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\a754170333dce27fc8bd51e86d847203\System.Web.ni.dll
    + 2011-10-14 12:12 . 2011-10-14 12:13 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\b6f517c9ad698926224cf86f58efcb1d\System.ServiceModel.ni.dll
    + 2011-10-14 11:51 . 2011-10-14 11:51 10969088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\d741c636159416a56add0695c882ea60\System.Design.ni.dll
    + 2011-10-14 12:10 . 2011-10-14 12:10 13325312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\c2b684cfdd105548718baf750efd1d3f\System.Data.Entity.ni.dll
    + 2011-10-14 11:50 . 2011-10-14 11:50 17671168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7e9cda80cc6623b3bb338796f530d879\PresentationFramework.ni.dll
    + 2011-10-14 11:46 . 2011-10-14 11:46 11106816 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\0cec426995ee5cfdc5d7daaffd285728\PresentationCore.ni.dll
    + 2011-10-14 11:44 . 2011-10-14 11:44 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\301c38cee04ca02dd826e5da73fb6358\mscorlib.ni.dll
    + 2011-10-14 12:24 . 2011-10-14 12:24 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll
    + 2011-10-14 12:29 . 2011-10-14 12:29 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll
    + 2011-10-14 12:27 . 2011-10-14 12:27 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\System.ServiceModel.ni.dll
    + 2011-10-14 12:23 . 2011-10-14 12:23 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558\System.Design.ni.dll
    + 2011-10-14 12:22 . 2011-10-14 12:22 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\054488924fcc579cce9fa0209dafe28b\PresentationFramework.ni.dll
    + 2011-10-14 12:21 . 2011-10-14 12:21 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96\PresentationCore.ni.dll
    + 2011-10-14 12:20 . 2011-10-14 12:20 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
    + 2011-10-14 04:34 . 2011-08-22 23:47 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll
    + 2011-06-25 06:03 . 2011-06-25 06:03 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll
    + 2011-06-15 17:03 . 2011-04-25 16:09 11083776 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieframe.dll
    + 2011-02-23 09:57 . 2011-02-23 09:57 11082752 c:\windows\$hf_mig$\KB2497640-IE8\SP3QFE\ieframe.dll
    + 2011-02-09 17:16 . 2010-12-20 23:58 11082752 c:\windows\$hf_mig$\KB2482017-IE8\SP3QFE\ieframe.dll
    + 2010-11-06 11:57 . 2010-11-06 11:57 11082752 c:\windows\$hf_mig$\KB2416400-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
    2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngin0.dll
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    2011-01-17 14:54 175912 ----a-w- c:\program files\Vuze_Remote\prxtbVuz0.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-01-17 175912]
    "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngin0.dll" [2011-01-17 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    .
    [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
    .
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-01-17 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
    @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
    @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
    @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
    @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
    @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
    @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
    @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
    @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
    @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2009-01-30 204288]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-11 344064]
    "dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
    "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-02-21 819200]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
    "dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
    "NotebookHardwareControl"="c:\program files\Notebook Hardware Control\nhc.exe" [2007-05-04 2629632]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
    .
    c:\documents and settings\Ken\Start Menu\Programs\Startup\
    2WireSetup.lnk - c:\program files\2Wire\WebWorks.exe [2009-4-17 626688]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
    backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
    backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ymetray.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ymetray.lnk
    backup=c:\windows\pss\ymetray.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^Ken^Start Menu^Programs^Startup^Trillian.lnk]
    path=c:\documents and settings\Ken\Start Menu\Programs\Startup\Trillian.lnk
    backup=c:\windows\pss\Trillian.lnkStartup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2011-03-30 02:59 937920 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    2005-06-07 04:46 57344 ----a-w- c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2011-08-31 01:57 40368 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
    2008-10-31 19:22 50480 ----a-w- c:\program files\AIM6\aim6.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
    2005-01-31 21:35 155648 ----a-w- c:\program files\Apoint\Apoint.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Photo AIO Printer 942]
    2005-04-28 12:08 294912 ----a-w- c:\program files\Dell Photo AIO Printer 942\dlbubmgr.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellMCM]
    2004-07-27 19:08 262144 ----a-w- c:\program files\Dell Photo AIO Printer 942\memcard.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
    2008-08-13 23:32 206064 ----a-w- c:\program files\Dell Support Center\bin\sprtcmd.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
    2005-02-23 21:19 53248 ------w- c:\program files\CyberLink\PowerDVD\DVDLauncher.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW4]
    2005-08-29 18:51 629872 ----a-w- c:\program files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW6]
    2011-06-08 15:45 822456 ----a-w- c:\program files\The Weather Channel FW\Desktop\DesktopWeather.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
    2004-07-27 21:50 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
    2004-07-27 21:50 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
    2010-12-06 14:31 1910152 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NotebookHardwareControl]
    2007-05-04 16:16 2629632 ----a-w- c:\program files\Notebook Hardware Control\nhc.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2007-02-16 14:54 282624 ----a-w- c:\program files\QuickTime\qttask.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
    2006-09-21 13:08 214448 ----a-w- c:\program files\Real\RealPlayer\realplay.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    2011-10-13 15:27 17351304 ----a-r- c:\program files\Skype\Phone\Skype.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
    2011-10-18 12:05 6710912 ----a-w- c:\documents and settings\Ken\Application Data\Spotify\spotify.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
    2010-02-18 21:40 2012912 ----a-w- c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    2006-09-21 13:08 185784 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "Hamachi2Svc"=2 (0x2)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Trillian\\trillian.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
    "c:\\Program Files\\AIM6\\aim6.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
    "c:\\WINDOWS\\system32\\dpnsvr.exe"=
    "c:\\Program Files\\Sonalysts Combat Simulations\\Dangerous Waters Current\\dangerouswaters.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
    "c:\\Program Files\\Empire Earth\\Empire Earth.exe"=
    "c:\\Program Files\\Xfire\\xfire.exe"=
    "c:\\Documents and Settings\\Ken\\Application Data\\Spotify\\spotify.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "c:\\Program Files\\Trillian\\plugins\\skypekit.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "21:TCP"= 21:TCP:EE update
    "15101:TCP"= 15101:TCP:EE Update
    "15104:TCP"= 15104:TCP:EE Update
    .
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 9:25 AM 12872]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2/17/2010 9:15 AM 66632]
    R1 vcdrom;Virtual CD-ROM Device Driver;c:\windows\system32\drivers\VCdRom.sys [3/31/2010 4:48 AM 8576]
    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [11/22/2010 9:45 PM 136360]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 12:16 PM 130384]
    S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
    S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\VMLaunch\BuddyVM.sys --> c:\program files\VMLaunch\BuddyVM.sys [?]
    S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/17/2010 11:14 AM 135664]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/17/2010 11:14 AM 135664]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2/17/2010 9:15 AM 12872]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 12:16 PM 753504]
    S4 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [12/6/2010 8:31 AM 1238408]
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-11-20 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 22:13]
    .
    2011-12-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 17:14]
    .
    2011-12-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 17:14]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.drudgereport.com/
    uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
    IE: &Translate with ATLAS - c:\program files\ATLAS V13\Atlscript.html
    IE: ATLAS Translation &Editor - c:\program files\ATLAS V13\AtlscriptEdit.html
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath - c:\documents and settings\Ken\Application Data\Mozilla\Firefox\Profiles\rdge76fq.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - www.drudgereport.com
    FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=ZUGO&form=ZGAADF&q=
    FF - prefs.js: keyword.enabled - false
    FF - prefs.js: network.proxy.type - 0
    .
    - - - - ORPHANS REMOVED - - - -
    .
    MSConfigStartUp-DMXLauncher - c:\program files\Dell\Media Experience\DMXLauncher.exe
    MSConfigStartUp-mmtask - c:\program files\Musicmatch\Musicmatch Jukebox\mmtask.exe
    AddRemove-Winamp - e:\program files\Winamp\UninstWA.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2011-12-11 11:33
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-2843613848-293874205-746590682-1007\Software\Microsoft\SystemCertificates\AddressBook*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'winlogon.exe'(528)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\WININET.dll
    c:\windows\system32\Ati2evxx.dll
    .
    - - - - - - - > 'explorer.exe'(3524)
    c:\windows\system32\WININET.dll
    c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    c:\program files\TortoiseSVN\bin\TortoiseStub.dll
    c:\program files\TortoiseSVN\bin\TortoiseSVN.dll
    c:\program files\TortoiseSVN\bin\intl3_tsvn.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\Ati2evxx.exe
    c:\program files\Intel\Wireless\Bin\EvtEng.exe
    c:\windows\system32\Ati2evxx.exe
    c:\program files\Intel\Wireless\Bin\S24EvMon.exe
    c:\program files\Intel\Wireless\Bin\WLKeeper.exe
    c:\windows\system32\LEXBCES.EXE
    c:\windows\system32\LEXPPS.EXE
    c:\windows\System32\SCardSvr.exe
    c:\windows\system32\conime.exe
    c:\program files\Avira\AntiVir Desktop\avguard.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Avira\AntiVir Desktop\avshadow.exe
    c:\program files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
    c:\program files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    c:\program files\Intel\Wireless\Bin\RegSrvc.exe
    c:\program files\Dell Support Center\bin\sprtsvc.exe
    c:\windows\system32\wscntfy.exe
    c:\program files\TortoiseSVN\bin\TSVNCache.exe
    c:\program files\Intel\Wireless\Bin\Dot1XCfg.exe
    .
    **************************************************************************
    .
    Completion time: 2011-12-11 11:45:30 - machine was rebooted
    ComboFix-quarantined-files.txt 2011-12-11 17:45
    ComboFix2.txt 2010-11-23 21:16
    ComboFix3.txt 2010-06-11 00:34
    ComboFix4.txt 2010-02-24 04:40
    .
    Pre-Run: 2,379,247,616 bytes free
    Post-Run: 2,869,055,488 bytes free
    .
    - - End Of File - - 6C924544C1D7BD62927361A62DA7FF5A
     
  5. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Update: Avira just detected and removed TR/Rootkit.Gen2 while the computer was idle. I have not been doing anything with the system since the previous post.
     
  6. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    OK, do the following :-

    Step 1

    1. Close any open browsers.

    2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

    3. Open notepad and copy/paste the text in the Codebox below into it:

    Code:
    KillAll::
    ClearJavaCache::
    SecCenter::
    Norton AntiVirus *Disabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
    Folder::
    c:\program files\ConduitEngine
    Registry::
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
    [-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
    
    Save this as CFScript.txt, and as Type: All Files (*.*) in the same location as ComboFix.exe

    [​IMG]

    [​IMG]

    Refering to the picture above, drag CFScript into ComboFix.exe

    When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

    Step 2

    Select > start > run > in the open run box type or copy paste services.msc In the new wind scroll down to "Windows Firwall" right click on that entry and select "Properties" Change the "Start up type" to "Automatic" and start it, click apply then OK. See if the firewall starts,

    Step 3

    You will need to d/l Farbar Service Scanner and transfer to infected system

    Please download Farbar Service Scanner and run it on the computer with the issue.

    [​IMG]
    • Check "Include All Files" option.
    • Press "Scan".
    • It will create a log (FSS.txt) in the same directory the tool is run.
    • Please copy and paste the log to your reply.
     
  7. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Ran Combofix using the dropped script:


    Windows Firewall is already set to Automatic startup type. While at the Properties page, I clicked the Start button just to see what would happen, and received this error: " Error 10050: A socket operation encountered a dead network". Sounds like damage from the Rootkit...

    Combofix log:
    ComboFix 11-12-08.01 - Ken 1/2011 Sun 13:53:34.7.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.932.81.1033.18.1023.587 [GMT -6:00]
    Running from: c:\documents and settings\Ken\Desktop\Gotcha.exe
    Command switches used :: F:\CFScript.txt
    AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-11-11 to 2011-12-11 )))))))))))))))))))))))))))))))
    .
    .
    2011-12-09 18:06 . 2011-12-09 18:06 -------- d-----w- c:\program files\Stellar Phoenix Password Recovery
    2011-12-08 07:04 . 2008-04-13 20:15 64512 ----a-w- c:\windows\system32\drivers\serial.sys
    2011-12-08 07:04 . 2008-04-13 20:15 64512 ----a-w- c:\windows\system32\dllcache\serial.sys
    2011-11-16 04:21 . 2011-11-18 03:01 -------- d-----w- c:\documents and settings\Ken\Application Data\Trillian
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-12-11 20:09 . 2011-02-12 00:18 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
    2011-12-09 23:38 . 2005-10-30 18:22 89680 ----a-w- c:\documents and settings\Ken\MSSSerif120.fon
    2011-12-02 01:45 . 2011-06-30 21:49 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2011-10-23 16:14 . 2011-10-23 16:14 4608 ----a-w- c:\windows\system32\w95inf32.dll
    2011-10-23 16:14 . 2011-10-23 16:14 2272 ----a-w- c:\windows\system32\w95inf16.dll
    2011-10-10 14:22 . 2004-08-11 22:12 692736 ----a-w- c:\windows\system32\inetcomm.dll
    2011-09-28 07:06 . 2004-08-11 22:00 599040 ----a-w- c:\windows\system32\crypt32.dll
    2011-09-26 16:41 . 2008-07-30 00:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
    2011-09-26 16:41 . 2004-08-11 22:00 220160 ----a-w- c:\windows\system32\oleacc.dll
    2011-09-26 16:41 . 2004-08-11 22:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll
    2011-11-11 04:48 . 2011-09-30 00:23 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot_2011-12-11_17.34.04 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-12-11 20:05 . 2011-12-11 20:05 16384 c:\windows\temp\Perflib_Perfdata_bc.dat
    + 2011-12-11 20:03 . 2011-12-11 20:03 16384 c:\windows\temp\Perflib_Perfdata_9dc.dat
    + 2011-12-11 20:05 . 2011-12-11 20:05 16384 c:\windows\temp\Perflib_Perfdata_154.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    2011-01-17 14:54 175912 ----a-w- c:\program files\Vuze_Remote\prxtbVuz0.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-01-17 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    .
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-01-17 175912]
    .
    [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
    @="{C5994560-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
    @="{C5994561-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
    @="{C5994562-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
    @="{C5994563-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
    @="{C5994564-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
    @="{C5994565-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
    @="{C5994566-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
    @="{C5994567-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
    @="{C5994568-53D9-4125-87C9-F193FC689CB2}"
    [HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
    2010-03-21 13:55 87304 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2009-01-30 204288]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-11-11 344064]
    "dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-12-06 127035]
    "IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-02-21 819200]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768]
    "dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
    "NotebookHardwareControl"="c:\program files\Notebook Hardware Control\nhc.exe" [2007-05-04 2629632]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
    .
    c:\documents and settings\Ken\Start Menu\Programs\Startup\
    2WireSetup.lnk - c:\program files\2Wire\WebWorks.exe [2009-4-17 626688]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
    backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
    backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ymetray.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ymetray.lnk
    backup=c:\windows\pss\ymetray.lnkCommon Startup
    .
    [HKLM\~\startupfolder\C:^Documents and Settings^Ken^Start Menu^Programs^Startup^Trillian.lnk]
    path=c:\documents and settings\Ken\Start Menu\Programs\Startup\Trillian.lnk
    backup=c:\windows\pss\Trillian.lnkStartup
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2011-03-30 02:59 937920 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
    2005-06-07 04:46 57344 ----a-w- c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2011-08-31 01:57 40368 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6]
    2008-10-31 19:22 50480 ----a-w- c:\program files\AIM6\aim6.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
    2005-01-31 21:35 155648 ----a-w- c:\program files\Apoint\Apoint.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Photo AIO Printer 942]
    2005-04-28 12:08 294912 ----a-w- c:\program files\Dell Photo AIO Printer 942\dlbubmgr.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellMCM]
    2004-07-27 19:08 262144 ----a-w- c:\program files\Dell Photo AIO Printer 942\memcard.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
    2008-08-13 23:32 206064 ----a-w- c:\program files\Dell Support Center\bin\sprtcmd.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
    2005-02-23 21:19 53248 ------w- c:\program files\CyberLink\PowerDVD\DVDLauncher.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW4]
    2005-08-29 18:51 629872 ----a-w- c:\program files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW6]
    2011-06-08 15:45 822456 ----a-w- c:\program files\The Weather Channel FW\Desktop\DesktopWeather.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
    2004-07-27 21:50 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
    2004-07-27 21:50 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
    2010-12-06 14:31 1910152 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NotebookHardwareControl]
    2007-05-04 16:16 2629632 ----a-w- c:\program files\Notebook Hardware Control\nhc.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2007-02-16 14:54 282624 ----a-w- c:\program files\QuickTime\qttask.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
    2006-09-21 13:08 214448 ----a-w- c:\program files\Real\RealPlayer\realplay.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    2011-10-13 15:27 17351304 ----a-r- c:\program files\Skype\Phone\Skype.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
    2011-10-18 12:05 6710912 ----a-w- c:\documents and settings\Ken\Application Data\Spotify\spotify.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
    2010-02-18 21:40 2012912 ----a-w- c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    2006-09-21 13:08 185784 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "Hamachi2Svc"=2 (0x2)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Trillian\\trillian.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
    "c:\\Program Files\\AIM6\\aim6.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
    "c:\\WINDOWS\\system32\\dpnsvr.exe"=
    "c:\\Program Files\\Sonalysts Combat Simulations\\Dangerous Waters Current\\dangerouswaters.exe"=
    "c:\\Program Files\\Vuze\\Azureus.exe"=
    "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
    "c:\\Program Files\\Empire Earth\\Empire Earth.exe"=
    "c:\\Program Files\\Xfire\\xfire.exe"=
    "c:\\Documents and Settings\\Ken\\Application Data\\Spotify\\spotify.exe"=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "c:\\Program Files\\Trillian\\plugins\\skypekit.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "21:TCP"= 21:TCP:EE update
    "15101:TCP"= 15101:TCP:EE Update
    "15104:TCP"= 15104:TCP:EE Update
    .
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 9:25 AM 12872]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2/17/2010 9:15 AM 66632]
    R1 vcdrom;Virtual CD-ROM Device Driver;c:\windows\system32\drivers\VCdRom.sys [3/31/2010 4:48 AM 8576]
    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [11/22/2010 9:45 PM 136360]
    S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
    S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;\??\c:\program files\VMLaunch\BuddyVM.sys --> c:\program files\VMLaunch\BuddyVM.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 12:16 PM 130384]
    S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/17/2010 11:14 AM 135664]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/17/2010 11:14 AM 135664]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2/17/2010 9:15 AM 12872]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 12:16 PM 753504]
    S4 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [12/6/2010 8:31 AM 1238408]
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-11-20 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 22:13]
    .
    2011-12-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 17:14]
    .
    2011-12-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 17:14]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.drudgereport.com/
    uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway
    IE: &Translate with ATLAS - c:\program files\ATLAS V13\Atlscript.html
    IE: ATLAS Translation &Editor - c:\program files\ATLAS V13\AtlscriptEdit.html
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath - c:\documents and settings\Ken\Application Data\Mozilla\Firefox\Profiles\rdge76fq.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - www.drudgereport.com
    FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=ZUGO&form=ZGAADF&q=
    FF - prefs.js: keyword.enabled - false
    FF - prefs.js: network.proxy.type - 0
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2011-12-11 14:08
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\S-1-5-21-2843613848-293874205-746590682-1007\Software\Microsoft\SystemCertificates\AddressBook*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    .
    - - - - - - - > 'winlogon.exe'(532)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\WININET.dll
    c:\windows\system32\Ati2evxx.dll
    .
    - - - - - - - > 'explorer.exe'(3412)
    c:\windows\system32\WININET.dll
    c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
    c:\program files\TortoiseSVN\bin\TortoiseStub.dll
    c:\program files\TortoiseSVN\bin\TortoiseSVN.dll
    c:\program files\TortoiseSVN\bin\intl3_tsvn.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\Ati2evxx.exe
    c:\program files\Intel\Wireless\Bin\EvtEng.exe
    c:\windows\system32\Ati2evxx.exe
    c:\program files\Intel\Wireless\Bin\S24EvMon.exe
    c:\program files\Intel\Wireless\Bin\WLKeeper.exe
    c:\windows\system32\conime.exe
    c:\windows\system32\LEXBCES.EXE
    c:\windows\system32\LEXPPS.EXE
    c:\windows\System32\SCardSvr.exe
    c:\program files\Avira\AntiVir Desktop\avguard.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
    c:\program files\Avira\AntiVir Desktop\avshadow.exe
    c:\program files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    c:\program files\Intel\Wireless\Bin\RegSrvc.exe
    c:\program files\TortoiseSVN\bin\TSVNCache.exe
    c:\program files\Dell Support Center\bin\sprtsvc.exe
    c:\windows\system32\fxssvc.exe
    c:\windows\system32\wscntfy.exe
    c:\program files\Intel\Wireless\Bin\Dot1XCfg.exe
    .
    **************************************************************************
    .
    Completion time: 2011-12-11 14:17:25 - machine was rebooted
    ComboFix-quarantined-files.txt 2011-12-11 20:17
    ComboFix2.txt 2011-12-11 19:34
    ComboFix3.txt 2011-12-11 17:45
    ComboFix4.txt 2010-11-23 21:16
    ComboFix5.txt 2011-12-11 19:51
    .
    Pre-Run: 2,860,908,544 bytes free
    Post-Run: 2,844,467,200 bytes free
    .
    - - End Of File - - 094797F3BA71B57FC02536B7EA82E1DA

    FSS Log:

    Farbar Service Scanner
    Ran by Ken (administrator) on 11-12-2011 at 14:19:31
    Microsoft Windows XP Professional Service Pack 3 (X86)
    ********************************************************
    Service Check:
    ==============
    Dhcp Service is not running. Checking service configuration:
    The start type of Dhcp service is OK.
    The ImagePath of Dhcp service is OK.
    The ServiceDll of Dhcp service is OK.
    afd Service is not running. Checking service configuration:
    Checking Start type: Attention! Unable to retrieve start type of afd. The value does not exist.
    Checking ImagePath: Attention! Unable to retrieve ImagePath of afd. The value does not exist.

    File Check:
    ===========
    C:\WINDOWS\system32\svchost.exe => MD5 is legit
    C:\WINDOWS\system32\rpcss.dll => MD5 is legit
    C:\WINDOWS\system32\services.exe => MD5 is legit
    C:\WINDOWS\system32\dhcpcsvc.dll => MD5 is legit
    C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
    C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
    C:\WINDOWS\system32\dnsrslvr.dll => MD5 is legit
    Connection Status:
    ==================
    Localhost is accessible.
    There is no connection to network.
    Attempt to access Google IP returned error: Google IP is unreachable
    Attempt to access Yahoo IP returend error: Yahoo IP is unreachable
    **** End of log ****

    Interesting side note: At least with the first run, multiple reboot cycles were required. With each bootup, unless Combofix does something to prevent this, Avira automatically re-enables. So it's possible that Avira is interfering even though it's being disabled before the scan. I think only one reboot was required for the latest round. ComboFix did have to run some operations after the reboot.
     
  8. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    We need to back up the registry incase we have issues after this fix...

    • Download ERUNT Transfer to sick pc.
      (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
    • Install ERUNT by following the prompts
      (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
    • Start ERUNT
      (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
    • Choose a location for the backup
      (the default location is C:\WINDOWS\ERDNT which is acceptable).
    • Make sure that at least the first two check boxes are ticked
    • Press OK
    • Press YES to create the folder.
    [​IMG]

    I`ve attached fixafd.zip, transfer to sick pc, unzip to Desktop so you have fixafd.reg. Double click to run, agree the merge.

    Re-boot and check the connection is restored...
     

    Attached Files:

  9. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Thanks! Looks like that did the trick. Any followup procedures needed?
     
  10. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    Can you start the firewall?
     
  11. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    Yes, it started automatically.
     
  12. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    OK, we need to run an online AV scan to make sure we`ve not left any remnants of the original infection. This will take several hours as it is very thorough. It is well worth doing. If this comes back OK we still have to uninstall the tools we`ve used and clean up.

    As follows please...

    Run ESET Online Scan
    • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
      ESET OnlineScan
    • Click the [​IMG] button.
    • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [​IMG] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [​IMG] icon on your desktop.
    • Check [​IMG]
    • Click the [​IMG] button.
    • Accept any security warnings from your browser.
    • Check [​IMG]
    • Leave the tick out of remove found threats
    • Push the Start button.
    • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
    • When the scan completes, push [​IMG]
    • Push [​IMG], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    • Push the [​IMG] button.
    • Push [​IMG]
    You can refer to this animation by neomage if needed.
    Frequently asked questions available Here Please read them before running the scan.

    Also be aware this scan can take several hours to complete depending on the size of your system.

    ESET log can be found here "C:\Program Files\ESET\EsetOnlineScanner\log.txt".

    Let me see the log in next reply, also give an update on any remaining issue or concerns...

    Thanks,

    Kevin(y)
     
  13. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    There were a few detections. Nothing else to report.

    [email protected] as downloader log:
    all ok
    # version=7
    # OnlineScannerApp.exe=1.0.0.1
    # OnlineScanner.ocx=1.0.0.6583
    # api_version=3.0.2
    # EOSSerial=e2a4c04404ae8340be67709b9b876e52
    # end=finished
    # remove_checked=false
    # archives_checked=true
    # unwanted_checked=true
    # unsafe_checked=false
    # antistealth_checked=true
    # utc_time=2011-12-12 01:18:54
    # local_time=2011-12-11 07:18:54 (-0600, Central Standard Time)
    # country="United States"
    # lang=1033
    # osver=5.1.2600 NT Service Pack 3
    # compatibility_mode=512 16777215 100 0 85715853 85715853 0 0
    # compatibility_mode=1797 16775129 100 93 0 60063790 0 0
    # compatibility_mode=8192 67108863 100 0 0 0 0 0
    # scanned=101202
    # found=5
    # cleaned=0
    # scan_time=10295
    C:\Documents and Settings\Ken\Local Settings\Application Data\Mozilla\Firefox\Profiles\rdge76fq.default\Cache\2\16\A5D76d01 JS/Exploit.Pdfka.PFU trojan (unable to clean) 00000000000000000000000000000000 I
    C:\Program Files\Emulators\Emulator\1964\1964_1.1-1096.exe a variant of Win32/SoftonicDownloader.A application (unable to clean) 00000000000000000000000000000000 I
    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP416\A0072173.dll Win32/Toolbar.Zugo application (unable to clean) 00000000000000000000000000000000 I
    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP425\A0073060.new a variant of Win32/Rootkit.Kryptik.FQ trojan (unable to clean) 00000000000000000000000000000000 I
    C:\System Volume Information\_restore{46DE8921-1D39-44D2-A9E9-64119261F211}\RP426\A0073103.new a variant of Win32/Rootkit.Kryptik.FQ trojan (unable to clean) 00000000000000000000000000000000 I
     
  14. kevinf80

    kevinf80 Malware Specialist

    Joined:
    Mar 21, 2006
    Messages:
    11,383
    First Name:
    Kevin
    OK, run the following:

    Please download OTM by OldTimer.
    Alternative Mirror 1
    Alternative Mirror 2
    Save it to your desktop.
    Double click OTM.exe to start the tool. Vista or Windows 7 users right click and select Run as Administrator
    • Copy the text between the dotted lines below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

      -------------------------------------------------------------------

      :Files
      ipconfig /flushdns /c
      C:\Program Files\Emulators\Emulator\1964\1964_1.1-1096.exe
      C:\Documents and Settings\Ken\Local Settings\Application Data\Mozilla\Firefox\Profiles\rdge76fq.default\Cache\2\16\A5D76d01
      :Commands
      [EmptyTemp]
      [ClearAllRestorePoints]

      ---------------------------------------------------------------------
    • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
    • Click the red [​IMG] button.
    • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
    • Close OTM
    Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

    If the machine reboots, the Results log can be found here:

    c:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log

    Where mmddyyyy_hhmmss is the date of the tool run.

    Next,

    [​IMG] Please download Malwarebytes Anti-Malware and save it to your desktop.
    Alernative D/L mirror
    Alternative D/L mirror

    Double Click mbam-setup.exe to install the application.
    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select "Perform Quick Scan", then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
    • Please save the log to a location you will remember.
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy and paste the entire report in your next reply.

    Extra Note:

    If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

    Let me see those two logs, also give update on any issues/concerns...

    Kevin
     
  15. NotEnoughSand

    NotEnoughSand Thread Starter

    Joined:
    Dec 9, 2011
    Messages:
    16
    One detection on MBAM. Nothing new to report. Question: what about the 5 detection with the online scanner? The instructions said to leave the automatic clean unchecked, so those are still around unless the MoveIt operation targeted those files.


    All processes killed
    ========== FILES ==========
    < ipconfig /flushdns /c >
    Windows IP Configuration
    Successfully flushed the DNS Resolver Cache.
    C:\Documents and Settings\Ken\Desktop\cmd.bat deleted successfully.
    C:\Documents and Settings\Ken\Desktop\cmd.txt deleted successfully.
    C:\Program Files\Emulators\Emulator\1964\1964_1.1-1096.exe moved successfully.
    C:\Documents and Settings\Ken\Local Settings\Application Data\Mozilla\Firefox\Profiles\rdge76fq.default\Cache\2\16\A5D76d01 moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: Administrator
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->FireFox cache emptied: 0 bytes

    User: All Users

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 57482 bytes
    ->Java cache emptied: 0 bytes

    User: Ken
    ->Temp folder emptied: 2537291 bytes
    ->Temporary Internet Files folder emptied: 881471 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 263475756 bytes
    ->Google Chrome cache emptied: 1642864 bytes
    ->Flash cache emptied: 7561296 bytes

    User: LocalService
    ->Temp folder emptied: 66016 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes
    ->FireFox cache emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 67 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 16517 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 877568 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 607 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 264.00 mb


    Restore points cleared and new OTM Restore Point set!

    OTM by OldTimer - Version 3.1.19.0 log created on 12122011_121640

    Files moved on Reboot...

    Registry entries deleted on Reboot...





    Malwarebytes' Anti-Malware 1.51.2.1300
    www.malwarebytes.org

    Database version: 8358

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 8.0.6001.18702

    12/12/2011 12:52:24 PM
    mbam-log-2011-12-12 (12-52-24).txt

    Scan type: Quick scan
    Objects scanned: 184583
    Time elapsed: 14 minute(s), 57 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    c:\WINDOWS\system32\fsquirt.exe (Trojan.Dropper.BCM) -> Quarantined and deleted successfully.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1030525

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice