What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] maax slow laptop

28 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Okay, If you can't get anything to run on it, that probably wont help

It seems that several of your core files have been infected and replaced:

C:\Windows\system32\Event Agent\bin\spoolsv .exe
C:\Windows\system32\Event Agent\bin\services .exe
C:\Windows\system32\Event Agent\lsass .exe
C:\WINDOWS\System32\Event Agent\Bin\smss .exe

note the space before the .exe

so we need to find replacements on your machine, which may be difficult if nothing will run.

Please try and do the following:

You may need to do this in safe mode:

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :filefind
*spoolsv*
*services*
*lsass*
*smss*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Post #17
SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 15:26 on 26/02/2010 by Stella (Administrator - Elevation successful) ========== filefind ========== Searching for "*spoolsv*" C:\WINDOWS\Prefetch\SPOOLSV.EXE-E4D0FF39.pf –a— 12466 bytes [08:23 25/02/2010] [08:23 25/02/2010] 7D42E04018C059BC20014EAA71201670 C:\WINDOWS\System32\en-US\spoolsv.exe.mui –a— 5632 bytes [12:40 02/11/2006] [12:40 02/11/2006] 1A7CEC925B87617DF059F13C0CED6647 C:\WINDOWS\System32\Event Agent\Bin\spoolsv .exe —— 102400 bytes [22:45 08/12/2007] [22:45 08/12/2007] 11AA437A07CCF344341AEBA4BBF3CD77 C:\WINDOWS\System32\spoolsv.exe –a— 127488 bytes [12:46 27/05/2009] [06:28 11/04/2009] 524BFBEA40E6E404737CCBC754647A2E C:\WINDOWS\winsxs\x86_microsoft-windows-p..oler-core.resources_31bf3856ad364e35_6.0.6000.16386_en-us_25a09e0a048aa751\spoolsv.exe.mui –a— 5632 bytes [12:40 02/11/2006] [12:40 02/11/2006] 1A7CEC925B87617DF059F13C0CED6647 C:\WINDOWS\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.0.6000.16386_none_d414e125c49db442\spoolsv.exe –a— 124928 bytes [09:15 02/11/2006] [09:45 02/11/2006] DA612EF2556776DF2630B68BF2D48935 C:\WINDOWS\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.0.6001.18000_none_d64ba321c188c516\spoolsv.exe –a— 125952 bytes [08:43 29/08/2008] [07:33 19/01/2008] 846CDF9A3CF4DA9B306ADFB7D55EE4C2 C:\WINDOWS\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.0.6002.18005_none_d8371c2dbeaa9062\spoolsv.exe –a— 127488 bytes [12:46 27/05/2009] [06:28 11/04/2009] 524BFBEA40E6E404737CCBC754647A2E Searching for "*services*" C:\HP\HPQWare\dtshortcuts\EN_US\High-Speed Services.lnk –a— 1861 bytes [15:41 19/12/2006] [15:41 19/12/2006] D224268ED696A4D2E31000125EBA7669 C:\HP\HPQWare\wc\en_us\Acceller\HighSpeed_Services.ico –a— 33982 bytes [01:23 05/08/2006] [01:23 05/08/2006] 6EA32A26B9135172BA08E909B43ACF95 C:\Program Files\Common Files\Apple\Mobile Device Support\bin\SyncServices.dll –a— 1441693 bytes [00:46 29/08/2009] [00:46 29/08/2009] EB10AD73A5677930B003F610376027BF C:\Program Files\Common Files\Apple\Mobile Device Support\bin\SyncServicesUI.dll –a— 187307 bytes [00:46 29/08/2009] [00:46 29/08/2009] 02EBEB3A5C290C41CB677D6AB057DD48 C:\Program Files\Hewlett-Packard\HP Advisor\InterfaceServices.dll –a— 40960 bytes [00:36 22/11/2006] [00:36 22/11/2006] 9E4F2E0C2B6038A7D5BDF4DD59775AB0 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\de\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\de\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\compaq\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [05:48 06/10/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\compaq\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [05:48 06/10/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\compaq\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [05:48 06/10/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\hp\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [21:26 04/10/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\hp\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [21:26 04/10/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_au\offer_templates\hp\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [21:26 04/10/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\compaq\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\compaq\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\compaq\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\hp\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\hp\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_ca\offer_templates\hp\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_gb\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_gb\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\compaq\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\compaq\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\compaq\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\hp\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\hp\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\en_us\offer_templates\hp\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\compaq\02-consolidated_services.tdf –a— 659 bytes [15:06 19/12/2006] [23:14 22/09/2006] 0D6B02679DB55F0A7F72EAF927EAB8A3 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\compaq\05-eservices.tdf –a— 635 bytes [15:06 19/12/2006] [23:14 22/09/2006] 230B6BD74B7D686742C019C3A1F6219F C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\compaq\10-eservices-add.tdf –a— 646 bytes [15:06 19/12/2006] [23:14 22/09/2006] CB2EC9E874DE1227F1F0B4759BC67835 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\hp\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\hp\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\es_mx\offer_templates\hp\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\compaq\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\compaq\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\compaq\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\hp\02-consolidated_services.tdf –a— 312 bytes [15:06 19/12/2006] [23:14 22/09/2006] 37CAD3D645E5C6468E6BAFFD2216E525 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\hp\05-eservices.tdf –a— 288 bytes [15:06 19/12/2006] [23:14 22/09/2006] 44D390334B3AD11ECEE19406DA2E59D9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\fr_ca\offer_templates\hp\10-eservices-add.tdf –a— 297 bytes [15:06 19/12/2006] [23:14 22/09/2006] 17918274A2FC5FF245B1D3D361EA0B78 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\it\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\it\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\nl\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\nl\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\no\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\no\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\pt\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\pt\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\sv\offer_templates\compaq\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Hewlett-Packard\HP Software UI\Easy Internet Signup\FrontEnd\sv\offer_templates\hp\22-online_services.tdf –a— 295 bytes [15:06 19/12/2006] [23:14 22/09/2006] 8D6FDD5B9FD5A37380B4750BDB8CF8C9 C:\Program Files\Microsoft Office\Templates\1033\Products And Services Overview.pot –a— 69632 bytes [00:47 25/10/2000] [00:47 25/10/2000] 9BD797F411E5C2CE776EEC3D19C630C5 C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Client.dll –a— 294912 bytes [01:55 06/12/2008] [01:55 06/12/2008] 2F69FF4ED483D3FF399534F99BD4694A C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll –a— 114688 bytes [04:40 30/07/2008] [04:40 30/07/2008] 0A7F3B1C1A9CC722F48A7A16394F61C4 C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.dll –a— 442368 bytes [01:55 06/12/2008] [01:55 06/12/2008] AE975C122A442146D7D5A6A996C42F91 C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.DirectoryServices.AccountManagement.dll –a— 286720 bytes [04:40 30/07/2008] [04:40 30/07/2008] 4C6FBCBB7E7D4E3B0CAAA42043B6A01F C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.WorkflowServices.dll –a— 507904 bytes [04:40 30/07/2008] [04:40 30/07/2008] E249D1B3114088C0D390A60643BF2BBC C:\Program Files\Roxio\Roxio MyDVD Basic v9\VideoUI 9\RHAnalysisServices.dll –a— 536576 bytes [07:53 19/09/2006] [07:53 19/09/2006] E0AEB2F2EA012D6DCF7E74CFAD2C3204 C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt –a— 1665878 bytes [12:45 27/05/2009] [18:39 18/02/2009] 532ED87BB64CF19C58AE0F91FA439983 C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt –a— 1445430 bytes [12:45 27/05/2009] [18:39 18/02/2009] 51B31EB324CB5C6936D7A14D49B0BD67 C:\Program Files\Windows NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt –a— 1810352 bytes [12:45 27/05/2009] [18:40 18/02/2009] 6D2BE04D9605C2D479E3CD205C406D7C C:\ProgramData\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\consolidated_services.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\ProgramData\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\eservices-add.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\ProgramData\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\eservices.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk –a— 1688 bytes [12:53 02/11/2006] [09:45 31/08/2008] 9E0AE40B45F915DAEF3C85676F2C17E3 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services\Easy Internet Services.lnk –a— 1859 bytes [20:05 25/08/2008] [20:05 25/08/2008] A699AD7E18804D986BD9DAE1BA6D6F34 C:\Users\All Users\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\consolidated_services.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\Users\All Users\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\eservices-add.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\Users\All Users\Hewlett-Packard\HP Software UI\Easy Internet Signup\offers\en_us\eservices.xml –a— 58 bytes [15:58 19/12/2006] [19:57 25/08/2008] 74781393A996CBA70B5F49F8C7FC754E C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk –a— 1688 bytes [12:53 02/11/2006] [09:45 31/08/2008] 9E0AE40B45F915DAEF3C85676F2C17E3 C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Online Services\Easy Internet Services.lnk –a— 1859 bytes [20:05 25/08/2008] [20:05 25/08/2008] A699AD7E18804D986BD9DAE1BA6D6F34 C:\Users\Stella\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6UD5RT6N\addtional_services_bar[1].gif –a— 0 bytes [15:23 23/02/2010] [15:23 23/02/2010] D41D8CD98F00B204E9800998ECF8427E C:\Users\Stella\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6UD5RT6N\AllServices[1].xml –a— 4074 bytes [06:51 03/02/2010] [06:51 03/02/2010] 6ED6A540FCECAE3C3BF684DD7D6C0967 C:\Users\Stella\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HDOI8GP4\AllServices[1].xml –a— 5157 bytes [15:13 30/04/2009] [15:13 30/04/2009] E7213085BE17BF3BA7FB5066E81D98A1 C:\Users\Stella\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FY7BZLVF\services[1].xml –a— 854 bytes [19:32 26/02/2010] [19:32 26/02/2010] C69F109824D8237D6F6F2E6BE6F46FFA C:\Users\Stella\AppData\Roaming\Microsoft\Office\Recent\Hoechst_Tech_Services_Group 1 .LNK –a— 1784 bytes [09:48 09/03/2009] [09:48 09/03/2009] FE231A2A464318C45A1F68A97BEC1853 C:\Users\Stella\AppData\Roaming\Microsoft\Office\Recent\Hoechst_Tech_Services_Group[1].LNK –a— 1784 bytes [09:47 09/03/2009] [09:47 09/03/2009] B5F6AEC9E2BFC426F0D3439A8C10F926 C:\Users\Stella\AppData\Roaming\Microsoft\Office\Recent\Maness Cleaning Services.LNK –a— 1955 bytes [22:41 25/08/2008] [21:27 02/02/2009] 65E0D37E335C3F0176888AEFEEA53563 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\stella@crossmediaservices[1].txt –a— 98 bytes [14:35 11/11/2008] [14:35 11/11/2008] 082CC4969548F8F124AA38D7A44A868B C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\stella@googleadservices[1].txt –a— 152 bytes [01:56 25/12/2008] [01:56 25/12/2008] EDE9EA735184F5D5CFF2CBBA65B3F379 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][2].txt –a— 403 bytes [19:11 17/04/2009] [19:11 17/04/2009] 05D27C5227EE4B453DFABE5D31428FD0 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][1].txt –a— 257 bytes [21:19 28/10/2008] [21:19 28/10/2008] 528D4E75AF8D7F7CEE0A83E5F2D4892E C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][1].txt –a— 124 bytes [11:46 29/11/2008] [11:46 29/11/2008] B2E7F2DA4D6773E6076F46E5EB832C5B C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][10].txt –a— 522 bytes [22:39 01/02/2010] [22:39 01/02/2010] 37A2C7DA8B61C82141EC6A2697255C6C C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][11].txt –a— 337 bytes [23:04 16/02/2010] [23:04 16/02/2010] 82EAA14E62E4687921E32544751F2B74 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][1].txt –a— 344 bytes [22:07 02/02/2010] [22:07 02/02/2010] 1C0B651EF1E010079DDF601078EB20C2 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][2].txt –a— 329 bytes [15:13 04/02/2010] [15:13 04/02/2010] 6018D895BD4669AC8075AC6ABCE5D375 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][3].txt –a— 344 bytes [17:36 08/02/2010] [17:36 08/02/2010] 04517E0AAA1929176A062486273DB376 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][4].txt –a— 704 bytes [02:35 16/02/2010] [02:35 16/02/2010] AB2F3FB99558621DB4F092F4E06588D4 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][5].txt –a— 362 bytes [02:23 16/02/2010] [02:23 16/02/2010] 4653B37CA10A25B44B8CB5DCB6156172 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][6].txt –a— 354 bytes [21:52 16/02/2010] [21:52 16/02/2010] CEEF7675922AB332CD9AC652CA20F2B5 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][7].txt –a— 553 bytes [22:04 16/02/2010] [22:04 16/02/2010] 09F1639C3759D5EF7AFEB7A1FF7E8DB8 C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][8].txt –a— 323 bytes [22:19 16/02/2010] [22:19 16/02/2010] F63F34D62D130BB2A85C6CCFD461205C C:\Users\Stella\AppData\Roaming\Microsoft\Windows\Cookies\Low\[removed][9].txt –a— 348 bytes [22:52 16/02/2010] [22:52 16/02/2010] 58E3C3894654F79C7C0F04168CF18A18 C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll –a— 258048 bytes [12:45 27/05/2009] [04:42 30/03/2009] 70891F0ED183AC39BE4C5E43666A35C7 C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [12:45 27/05/2009] [02:04 11/04/2009] 296AACAE51A6995D2016C2C3E4774D81 C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll –a— 294912 bytes [11:42 04/03/2009] [11:42 04/03/2009] 2F69FF4ED483D3FF399534F99BD4694A C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll –a— 114688 bytes [11:41 04/03/2009] [11:41 04/03/2009] 0A7F3B1C1A9CC722F48A7A16394F61C4 C:\WINDOWS\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll –a— 442368 bytes [11:42 04/03/2009] [11:42 04/03/2009] AE975C122A442146D7D5A6A996C42F91 C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll –a— 286720 bytes [11:41 04/03/2009] [11:41 04/03/2009] 4C6FBCBB7E7D4E3B0CAAA42043B6A01F C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll –a— 188416 bytes [12:45 27/05/2009] [04:42 30/03/2009] 891AA60D72C0D51286FD7792D53C2A12 C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll –a— 401408 bytes [12:45 27/05/2009] [04:42 30/03/2009] 85290FF9B6B3A161E95AFCCC22480347 C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll –a— 839680 bytes [12:45 27/05/2009] [04:42 30/03/2009] D59A5B6EBFCE6DBF9EE5D8A72EB8219B C:\WINDOWS\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll –a— 507904 bytes [11:41 04/03/2009] [11:41 04/03/2009] E249D1B3114088C0D390A60643BF2BBC C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1ec816c4ea2815668ad7705cd4066f45\System.Data.Services.Design.ni.dll –a— 354816 bytes [15:26 27/05/2009] [15:26 27/05/2009] 760B4F7DA12F8AA05F31E6177BDA4FF7 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2f7becf8b4e0ccbf8ffd212927b70a82\System.Data.Services.Client.ni.dll –a— 939008 bytes [15:26 27/05/2009] [15:26 27/05/2009] 2A22FCFC6FB163A40FB5DA7132FA6FD1 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d8591d22020c2da6180edf325b1a5d06\System.Data.Services.Design.ni.dll –a— 354816 bytes [20:34 14/10/2009] [20:34 14/10/2009] CC0104145D082B8B66387959D2A41512 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e7535982e4bf2036e9e7269641b7be96\System.Data.Services.Client.ni.dll –a— 939008 bytes [20:34 14/10/2009] [20:34 14/10/2009] A6613DE288181EF072390ABC154B7D87 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Services\779ba4946bd8c974895102253eb8c7bd\System.Data.Services.ni.dll –a— 1328128 bytes [15:26 27/05/2009] [15:26 27/05/2009] B6045646C5511EC7536BA611E934DE1F C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Services\96217e2185e9b019a4a8d78e43be3124\System.Data.Services.ni.dll –a— 1328128 bytes [20:34 14/10/2009] [20:34 14/10/2009] 0FC88DE7D6B93A0DF06D43BC6DD888D1 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\34472e4436b3e385c07ee148575e09f6\System.DirectoryServices.AccountManagement.ni.dll –a— 881152 bytes [20:34 14/10/2009] [20:34 14/10/2009] 570B639DD573A109C4E920EBAF6ADFC3 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\384bafb2a4f81a682eb2ae2c7fea976b\System.DirectoryServices.Protocols.ni.dll –a— 455680 bytes [20:30 14/10/2009] [20:30 14/10/2009] 310FC41DF1E4E5D4BC79E1BC0FA4342C C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9c09800674074a10d799efde7c2788ba\System.DirectoryServices.ni.dll –a— 1116672 bytes [15:21 27/05/2009] [15:21 27/05/2009] 54EBD42FCC34E7F370443849A54DD8AC C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c57ed7ebb3d17c24907a0782451b7cd6\System.DirectoryServices.Protocols.ni.dll –a— 455680 bytes [15:22 27/05/2009] [15:22 27/05/2009] F5D9228A5D7ED9D3494375BDD754A460 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f8f2dbea11afbca27219a6aca87a60f9\System.DirectoryServices.ni.dll –a— 1116672 bytes [20:29 14/10/2009] [20:29 14/10/2009] 8B07D6456DA9152B4B9404943902C7A0 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\feabddf5426e1f1715ac6c013ce784cc\System.DirectoryServices.AccountManagement.ni.dll –a— 881152 bytes [15:26 27/05/2009] [15:26 27/05/2009] 2437EA8634338932CA6FEA6C41F3215C C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7315b1a64bf46430386b938ae3257e27\System.EnterpriseServices.ni.dll –a— 627712 bytes [20:29 14/10/2009] [20:29 14/10/2009] 4892BAA383E93F253DDEC625D769A091 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7315b1a64bf46430386b938ae3257e27\System.EnterpriseServices.Wrapper.dll –a— 280064 bytes [20:29 14/10/2009] [20:29 14/10/2009] 25F223605F937214C8304F25860F73CD C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\87f2c180fec78701501d8e3e84fac248\System.EnterpriseServices.ni.dll –a— 627712 bytes [15:21 27/05/2009] [15:21 27/05/2009] F70CFBC5522C623DC66E5BC776C54C88 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\87f2c180fec78701501d8e3e84fac248\System.EnterpriseServices.Wrapper.dll –a— 280064 bytes [15:21 27/05/2009] [15:21 27/05/2009] 25F223605F937214C8304F25860F73CD C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\162f9b45ceca6f7f6fa1fa41b3b2084a\System.Web.Services.ni.dll –a— 1840640 bytes [15:22 27/05/2009] [15:22 27/05/2009] FD4444F756671E3B31F4FF1018EE2DFF C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\3ac86230f8672732e33a9607b9d850c0\System.Web.Services.ni.dll –a— 1840640 bytes [20:29 14/10/2009] [20:29 14/10/2009] 67DE9CC57922DCFA65E26144CC8F3135 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\6cd20be7cbc4f149f2cb27342632f52e\System.WorkflowServices.ni.dll –a— 1356288 bytes [20:35 14/10/2009] [20:35 14/10/2009] 1D9A22E314DF910F7EDD17FC5859EDA7 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\b9c695758c43fa8640afaf9beec74f91\System.WorkflowServices.ni.dll –a— 1356288 bytes [15:26 27/05/2009] [15:26 27/05/2009] 32A9F1196E11DC727002E59D1BF11AB2 C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729\DP_System_Data_Services_Client_gac_x86 -ra— 294912 bytes [11:41 04/03/2009] [11:41 04/03/2009] 31D8266EF0201DEDDFF189A75A5D475A C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729\DP_System_Data_Services_Client_x86 -ra— 294912 bytes [04:40 30/07/2008] [04:40 30/07/2008] 31D8266EF0201DEDDFF189A75A5D475A C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729\DP_System_Data_Services_gac_x86 -ra— 442368 bytes [11:41 04/03/2009] [11:41 04/03/2009] 82F8B1D055AFF7DAF984290AEB453646 C:\WINDOWS\Installer\$PatchCache$\Managed\26DDC2EC4210AC63483DF9D4FCC5B59D\3.5.30729\DP_System_Data_Services_x86 -ra— 442368 bytes [04:40 30/07/2008] [04:40 30/07/2008] 82F8B1D055AFF7DAF984290AEB453646 C:\WINDOWS\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll –a— 14376 bytes [11:30 04/03/2009] [18:03 27/07/2008] B5428386274247435BC060F2004FC7C2 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll –a— 401408 bytes [12:45 27/05/2009] [04:42 30/03/2009] 85290FF9B6B3A161E95AFCCC22480347 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll –a— 188416 bytes [12:45 27/05/2009] [04:42 30/03/2009] 891AA60D72C0D51286FD7792D53C2A12 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll –a— 258048 bytes [12:45 27/05/2009] [04:42 30/03/2009] 70891F0ED183AC39BE4C5E43666A35C7 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [11:30 04/03/2009] [18:03 27/07/2008] 326C587B60592D84F32B10F73DCE58B4 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.tlb –a— 40960 bytes [11:30 04/03/2009] [18:03 27/07/2008] C178E0ABE4E8FDFF0F9B9D30A192C9C8 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [12:45 27/05/2009] [02:04 11/04/2009] 296AACAE51A6995D2016C2C3E4774D81 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll –a— 839680 bytes [12:45 27/05/2009] [04:42 30/03/2009] D59A5B6EBFCE6DBF9EE5D8A72EB8219B C:\WINDOWS\Microsoft.NET\Framework\v3.5\WFServicesReg.exe –a— 196104 bytes [04:40 30/07/2008] [04:40 30/07/2008] 0308D7F0CC20E4A4830F55DF748DD786 C:\WINDOWS\Prefetch\SERVICES .EXE-CFB4D9F1.pf –a— 38700 bytes [17:29 22/02/2010] [16:18 26/02/2010] B58548BED2AF3DE5D799D5DA9ECD8B03 C:\WINDOWS\servicing\Packages\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~en-US~6.0.6000.16386.cat –a— 8413 bytes [12:40 02/11/2006] [11:02 02/11/2006] 03ACD8EA9D320CB04305D888E409CCC0 C:\WINDOWS\servicing\Packages\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~en-US~6.0.6000.16386.mum –a— 2046 bytes [12:40 02/11/2006] [10:05 02/11/2006] 51CB0C840A52CA6F8AA65FF135624647 C:\WINDOWS\servicing\Packages\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~~6.0.6000.16386.cat –a— 10161 bytes [12:34 02/11/2006] [10:28 02/11/2006] E362988D4D7C687DA4CB92837F62DFB9 C:\WINDOWS\servicing\Packages\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~~6.0.6000.16386.mum –a— 1508 bytes [12:34 02/11/2006] [06:50 02/11/2006] C8748B060E619C58B0775472E33DB9FE C:\WINDOWS\System32\AuxiliaryDisplayServices.dll –a— 102912 bytes [12:47 27/05/2009] [06:28 11/04/2009] 1CBE36F6B8F7F067FCEA10B7082FAE9E C:\WINDOWS\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~en-US~6.0.6000.16386.cat –a— 8413 bytes [12:40 02/11/2006] [11:02 02/11/2006] 03ACD8EA9D320CB04305D888E409CCC0 C:\WINDOWS\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Printing-XPSServices-Package~31bf3856ad364e35~x86~~6.0.6000.16386.cat –a— 10161 bytes [12:34 02/11/2006] [10:28 02/11/2006] E362988D4D7C687DA4CB92837F62DFB9 C:\WINDOWS\System32\drivers\etc\services –a— 17244 bytes [10:23 02/11/2006] [21:41 18/09/2006] 9F534244B7F8F55D5C0BB498D8D481E7 C:\WINDOWS\System32\en-US\AuxiliaryDisplayServices.dll.mui –a— 4608 bytes [12:41 02/11/2006] [12:41 02/11/2006] F3C0EC523583498BE1DDC630A7509FD7 C:\WINDOWS\System32\en-US\services.exe.mui –a— 17920 bytes [12:40 02/11/2006] [12:40 02/11/2006] 1626EACF0E7E59F85C59DDDD27C4169C C:\WINDOWS\System32\en-US\services.msc –a— 92745 bytes [12:41 02/11/2006] [12:41 02/11/2006] 7A1D35F59468B8118AF5B8E21DF78AE2 C:\WINDOWS\System32\Event Agent\Bin\services .exe —— 1568841 bytes [12:23 14/05/2008] [12:23 14/05/2008] 133FA0A62FC4063451E0CD1554E46D55 C:\WINDOWS\System32\licensing\ppdlic\TerminalServices-RemoteConnectionManager-License-ppdlic.xrm-ms –a— 4021 bytes [08:43 29/08/2008] [07:14 19/01/2008] D40C66C818895F073A3E617F3A466C00 C:\WINDOWS\System32\licensing\ppdlic\TerminalServices-RemoteConnectionManager-UiEffects-ppdlic.xrm-ms –a— 3084 bytes [08:42 29/08/2008] [07:14 19/01/2008] 72830612581636025945E1C460B1386B C:\WINDOWS\System32\migwiz\dlmanifests\DirectoryServices-ADAM-DL.man –a— 2309 bytes [12:35 02/11/2006] [12:35 02/11/2006] D7937CD02F11126F42BCA7559738E27B C:\WINDOWS\System32\migwiz\dlmanifests\DirectoryServices-Domain-DL.man –a— 2044 bytes [12:34 02/11/2006] [12:34 02/11/2006] EC9AB7D446510EBB8296A4FB2B167E6A C:\WINDOWS\System32\migwiz\dlmanifests\DirectoryServices-ISM-Smtp-DL.man –a— 1851 bytes [08:42 29/08/2008] [11:23 05/01/2008] 4DA47743EAA0E1C5A2975F15080162BA C:\WINDOWS\System32\migwiz\dlmanifests\Microsoft-Windows-CertificateServices-CA-DL.man –a— 1613 bytes [12:35 02/11/2006] [12:35 02/11/2006] 32A009024C4AAB1A38D503A6985B5F7D C:\WINDOWS\System32\migwiz\dlmanifests\Microsoft-Windows-CertificateServices-CAManagement-DL.man –a— 1235 bytes [08:42 29/08/2008] [11:36 05/01/2008] C5C02C4A84ACC3BFD845EE4EBBD6AB8A C:\WINDOWS\System32\migwiz\dlmanifests\Microsoft-Windows-CertificateServices-MSCEP-DL.man –a— 1485 bytes [08:42 29/08/2008] [11:37 05/01/2008] D31D59095D5E189140A78D39753AECDD C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-Drivers-DL.man –a— 1134 bytes [12:35 02/11/2006] [12:35 02/11/2006] 58BE377062DF00A2D6E2C678AEC872DC C:\WINDOWS\System32\migwiz\dlmanifests\terminalservices-licenseserver-DL.man –a— 1800 bytes [08:42 29/08/2008] [11:22 05/01/2008] B65BBC279F1F1BF8990685CB9E35D0AF C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-LocalSessionManager-DL.man –a— 1353 bytes [12:34 02/11/2006] [12:34 02/11/2006] 6912AECCC58707895F5D37016691FAC8 C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-RDP-WinStationExtensions-DL.man –a— 22336 bytes [08:42 29/08/2008] [11:22 05/01/2008] 41D5557C2D119C93CFEE9BEE27A97E1A C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-RemoteConnectionManager-DL.man –a— 1329 bytes [08:42 29/08/2008] [11:22 05/01/2008] 87BDFDD25EDC302A438D3BEC35EFF509 C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-SessionDirectory-Client-DL.man –a— 2215 bytes [08:42 29/08/2008] [11:26 05/01/2008] B413D47A7BD85710D2C521ED604EA881 C:\WINDOWS\System32\migwiz\dlmanifests\TerminalServices-TerminalServicesClient-DL.man –a— 1784 bytes [12:34 02/11/2006] [12:34 02/11/2006] A81BB134CF54A52C20F67AEBFD351D5B C:\WINDOWS\System32\migwiz\dlmanifests\TextServicesFramework-Migration-DL.man –a— 2154 bytes [12:34 02/11/2006] [12:34 02/11/2006] A39976AE141A764DA2C061E1B9D6B7AB C:\WINDOWS\System32\migwiz\dlmanifests\UDDIServices-SDP-DL.man –a— 1518 bytes [12:35 02/11/2006] [12:35 02/11/2006] 5030420A481EFE7DBB731E331F85DC59 C:\WINDOWS\System32\migwiz\dlmanifests\UDDIServicesDatabase-SDP-DL.man –a— 1306 bytes [12:35 02/11/2006] [12:35 02/11/2006] 53C8921A817AB7935BC839AC366083B8 C:\WINDOWS\System32\migwiz\dlmanifests\UDDIServicesWeb-SDP-DL.man –a— 1315 bytes [12:34 02/11/2006] [12:34 02/11/2006] 96B3676F32D512035B283B5371E49CEC C:\WINDOWS\System32\migwiz\dlmanifests\Web-Services-for-Management-Core-DL.man –a— 1914 bytes [08:42 29/08/2008] [11:36 05/01/2008] 2A110F0D2AE009C4F5CC41CB754B3A93 C:\WINDOWS\System32\OpcServices.dll –a— 847360 bytes [03:42 20/01/2010] [01:38 25/09/2009] 4AEDEEC05211864EC41FCB099C1065FA C:\WINDOWS\System32\services.exe –a— 279552 bytes [12:46 27/05/2009] [06:27 11/04/2009] D4E6D91C1349B7BFB3599A6ADA56851B C:\WINDOWS\System32\services.msc –a— 92745 bytes [07:13 02/11/2006] [21:29 18/09/2006] 7A1D35F59468B8118AF5B8E21DF78AE2 C:\WINDOWS\System32\wbem\auxiliarydisplayservices.mof –a— 3039 bytes [12:36 02/11/2006] [12:36 02/11/2006] 55CDB0BF117EC597F3B1065CDADE98DB C:\WINDOWS\System32\wbem\services.mof –a— 2866 bytes [08:35 02/11/2006] [21:46 18/09/2006] 26A11C895A7F0B6D32105EBE127D8500 C:\WINDOWS\System32\winevt\Logs\Microsoft-Windows-TerminalServices-RDPClient%4Operational.evtx –a— 69632 bytes [09:45 31/08/2008] [12:18 31/08/2008] 56334A95A82D9F5C3F02F4A5551F2515 C:\WINDOWS\System32\xpsservices.dll –a— 1554432 bytes [03:42 20/01/2010] [01:49 25/09/2009] 06C426B2FBEC302BD5763D7D654B4022 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7.manifest –a— 7273 bytes [09:38 31/08/2008] [09:23 31/08/2008] 7EC1383B23F3BCDBFB8E3649E9668736 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_ntdsapi.dll_23e203 03 –a— 88576 bytes [09:38 31/08/2008] [09:23 31/08/2008] 7F0F1D4B0D847696F8E309423D227DCE C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7_w32topl.dll_1a0f38 8b –a— 26624 bytes [09:38 31/08/2008] [09:23 31/08/2008] 091D2012DF6E474283F84880F4DDA51A C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699e1659b0.manifest –a— 96175 bytes [15:06 27/05/2009] [14:03 27/05/2009] 25D8D5907BA778EF22059924F3C866A5 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699e1659b0_samlib.dll_caeebf04 –a— 57344 bytes [15:06 27/05/2009] [14:03 27/05/2009] 453DE2958C885527E20C79A3FEFE6AF7 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699e1659b0_samsrv.dll_b7a400ca –a— 483328 bytes [15:06 27/05/2009] [14:03 27/05/2009] 7808BF0E367ED7348808879CEF482AB3 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699e1659b0_samsrv.mof_b7a3f662 –a— 61288 bytes [15:06 27/05/2009] [14:03 27/05/2009] 12A112FFC14DD4CFCF423F119B8E0D35 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_67c6851b290a1ced_services.exe.mui_86ea5e71 –a— 17920 bytes [12:42 02/11/2006] [12:41 02/11/2006] 1626EACF0E7E59F85C59DDDD27C4169C C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56_services .exe_abfc33da –a— 279552 bytes [15:06 27/05/2009] [14:03 27/05/2009] D4E6D91C1349B7BFB3599A6ADA56851B C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56_services .mof_abfc36b4 –a— 2866 bytes [15:06 27/05/2009] [14:03 27/05/2009] 26A11C895A7F0B6D32105EBE127D8500 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-t..nalservices-runtime_31bf3856ad364e35_6.0.6001.18000_none_dcdfef64cc00e5fb.manifest –a— 6159 bytes [09:38 31/08/2008] [09:24 31/08/2008] 5376F384A38FCFB494C45C9DFE630581 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-t..nalservices-runtime_31bf3856ad364e35_6.0.6001.18000_none_dcdfef64cc00e5fb_winsta.dll_4e6f9a4 e –a— 140800 bytes [09:38 31/08/2008] [09:24 31/08/2008] 4AAFC7461633848AA87A363B2CBEC522 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6001.18000_none_c730eb5dc6553c1b.manifest –a— 5498 bytes [09:38 31/08/2008] [09:24 31/08/2008] B1BDAB6E2935160FF4D5E9126ED4D229 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6001.18000_none_c730eb5dc6553c1b_wtsapi32.dll_47 0d4d41 –a— 26624 bytes [09:38 31/08/2008] [09:24 31/08/2008] F42483814FC39170B3982A184EC5AAA2 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..eservices.resources_31bf3856ad364e35_6.0.6000.16386_en-us_d720d262bd3afd78.manifest –a— 3840 bytes [12:42 02/11/2006] [12:41 02/11/2006] CBD55AEAFA52B5EEBCE4F8222AF7D7EB C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..eservices.resources_31bf3856ad364e35_6.0.6000.16386_en-us_d720d262bd3afd78_sti.dll.mui_00a4f15b –a— 7168 bytes [12:42 02/11/2006] [12:41 02/11/2006] 1A4D930B0C21716249256FBF03163D49 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..eservices.resources_31bf3856ad364e35_6.0.6000.16386_en-us_d720d262bd3afd78_wiaservc.dll.mui_54051b53 –a— 3072 bytes [12:42 02/11/2006] [12:41 02/11/2006] 1B3D206BFCF59C50266BC107FE03410E C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95_services_d4a357ca –a— 17244 bytes [10:43 02/11/2006] [10:41 02/11/2006] 9F534244B7F8F55D5C0BB498D8D481E7 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753.manifest –a— 99971 bytes [15:06 27/05/2009] [14:03 27/05/2009] 222A858335B457CF044B50A0001F18B2 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753_sti.dll_d93e8 a42 –a— 198144 bytes [15:06 27/05/2009] [14:03 27/05/2009] 365828E555E9479246EFD9090C41C2D7 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753_wiarpc.dll_5a ecac54 –a— 32768 bytes [15:06 27/05/2009] [14:03 27/05/2009] 73FE2E5FA55088A241AA2732F5D387D6 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753_wiaservc.dll_ 08fa1e78 –a— 453120 bytes [15:06 27/05/2009] [14:03 27/05/2009] 5DE7D67E49B88F5F07F3E53C4B92A352 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753_wiatrace.dll_ dfb4e972 –a— 12800 bytes [15:06 27/05/2009] [14:03 27/05/2009] 428FF21418ADCD6FAD6189CD9520A67B C:\WINDOWS\winsxs\FileMaps\$$_system32_migwiz_dlmanifests_microsoft-windows-directoryservices-adam-dl_6c3018cc6f347ede.cdf-ms –a— 932 bytes [12:37 02/11/2006] [09:23 31/08/2008] 5288BF2488A516E26623E67C97A51BB4 C:\WINDOWS\winsxs\FileMaps\$$_system32_migwiz_dlmanifests_microsoft-windows-textservicesframework-migration-dl_549205906affe6bf.cdf-ms –a— 1460 bytes [12:37 02/11/2006] [14:03 27/05/2009] 6EB5E34A0A1A34860EB02C6E79001BFC C:\WINDOWS\winsxs\FileMaps\program_files_common_files_services_e36ba211a9258e5f.cdf-ms –a— 688 bytes [10:43 02/11/2006] [10:42 02/11/2006] EF03A3F400981382C98C935DDCAE4B2F C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16386_non e_af45ceab5406d544.manifest –a— 4159 bytes [10:21 02/11/2006] [10:18 02/11/2006] 879585026C502645DAE4955C412D25EE C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16720_non e_af40550f540ba4b8.manifest —— 4159 bytes [11:30 04/03/2009] [23:17 27/07/2008] DCE556D166E39729ECBD2F0A8392578B C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.20883_non e_98786bb36dade9ab.manifest —— 4159 bytes [11:30 04/03/2009] [23:19 27/07/2008] F2E216CC3533A8056DED55BB2CB93CA0 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18000_non e_af1a5067545e7e10.manifest —— 4159 bytes [08:27 29/08/2008] [04:05 19/01/2008] 0BF7F2EFDA9A76274D1857A0F4CB56A9 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18111_non e_af1b39c5545db159.manifest —— 4159 bytes [11:30 04/03/2009] [23:42 27/07/2008] D7A980791A9DB4F28DAFEF88019ED49B C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.22230_non e_984faa616e032a6c.manifest —— 4159 bytes [11:30 04/03/2009] [23:28 27/07/2008] 21B9498164BA48DA9CE0FBE94FE5D5F3 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6002.18005_non e_aef5d5a354b01224.manifest —— 4159 bytes [12:27 27/05/2009] [04:16 11/04/2009] D478555750C328C944BFC492D2C93F1E C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.resources_b03f5f7f11d50a3a_6.0.6000.16386_en-us_39857775d33f3750.manifest –a— 589 bytes [12:39 02/11/2006] [12:39 02/11/2006] FFDF335D784414AE4E246994D8CA6E64 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.resources_b03f5f7f11d50a3a_6.0.6000.16720_en-us_397ffdd9d34406c4.manifest —— 589 bytes [11:30 04/03/2009] [23:29 27/07/2008] F8316371541C9F36E285E3FB2815C8A7 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.resources_b03f5f7f11d50a3a_6.0.6000.20883_en-us_22b8147dece64bb7.manifest —— 589 bytes [11:30 04/03/2009] [23:30 27/07/2008] B42B4198EED7D7B4CE58F59DEB218730 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.resources_b03f5f7f11d50a3a_6.0.6001.18111_en-us_395ae28fd3961365.manifest —— 589 bytes [11:30 04/03/2009] [23:41 27/07/2008] 1EB357B8818A3BB92A48D5E841A00482 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices.resources_b03f5f7f11d50a3a_6.0.6001.22230_en-us_228f532bed3b8c78.manifest —— 589 bytes [11:30 04/03/2009] [23:26 27/07/2008] 87AA907E944A2F4C199E42DC3974276C C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16386_none_56c9c34f 311afdf9.manifest –a— 6009 bytes [10:21 02/11/2006] [10:09 02/11/2006] 4B144EFD5F1638EC2E7D90854D71DF62 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16720_none_56c449b3 311fcd6d.manifest —— 6009 bytes [11:30 04/03/2009] [23:18 27/07/2008] CA3EB6B1170B4859309E685881A57C16 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.20883_none_3ffc6057 4ac21260.manifest —— 6009 bytes [11:30 04/03/2009] [23:20 27/07/2008] 4D6E8357AB6260FF13CE20D17619B7BC C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18000_none_569e450b 3172a6c5.manifest —— 6009 bytes [08:27 29/08/2008] [04:08 19/01/2008] 193A823ED217FB3F888ED7686913F90B C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18111_none_569f2e69 3171da0e.manifest —— 6009 bytes [11:30 04/03/2009] [23:43 27/07/2008] 5D0D21656E9D57BF3C425F538868E46F C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.22230_none_3fd39f05 4b175321.manifest —— 6009 bytes [11:30 04/03/2009] [23:29 27/07/2008] 5DC8B8EF5A17D102906252CB7257C836 C:\WINDOWS\winsxs\Manifests\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6002.18005_none_5679ca47 31c43ad9.manifest —— 6009 bytes [12:27 27/05/2009] [04:17 11/04/2009] 7428BC68F574AB7FA4B915FB5CD008C4 C:\WINDOWS\winsxs\Manifests\msil_system.enterpriseservices.resources_b03f5f7f11d50a3a_6.0.6000.16386_en-us_6a1f0a6912468912.manifest –a— 591 bytes [12:39 02/11/2006] [12:39 02/11/2006] 6C4A81517B45BAEB7564959645F83D5B C:\WINDOWS\winsxs\Manifests\msil_system.enterpriseservices.resources_b03f5f7f11d50a3a_6.0.6000.16720_en-us_6a1990cd124b5886.manifest —— 591 bytes [11:30 04/03/2009] [23:29 27/07/2008] E417D39368DE0EB409AB6B2A3D7BEBBC C:\WINDOWS\winsxs\Manifests\msil_system.enterpriseservices.resources_b03f5f7f11d50a3a_6.0.6000.20883_en-us_5351a7712bed9d79.manifest —— 591 bytes [11:30 04/03/2009] [23:30 27/07/2008] 6E90C36B31137AE2409543FEF4688B67 C:\WINDOWS\winsxs\Manifests\msil_system.enterpriseservices.resources_b03f5f7f11d50a3a_6.0.6001.18111_en-us_69f47583129d6527.manifest —— 591 bytes [11:30 04/03/2009] [23:41 27/07/2008] 6ECABAC7DC77497F1D2A77CED7F52752 C:\WINDOWS\winsxs\Manifests\msil_system.enterpriseservices.resources_b03f5f7f11d50a3a_6.0.6001.22230_en-us_5328e61f2c42de3a.manifest —— 591 bytes [11:30 04/03/2009] [23:26 27/07/2008] 304BC1ABA56E3CBE1C27F7EEC3B5F50C C:\WINDOWS\winsxs\Manifests\msil_system.web.services.resources_b03f5f7f11d50a3a_6.0.6000.16386_en-us_062d1aeac309b8ef.manifest –a— 579 bytes [12:39 02/11/2006] [12:39 02/11/2006] B7450320DCE1ECDA770B95F6DB5CB9F9 C:\WINDOWS\winsxs\Manifests\msil_system.web.services.resources_b03f5f7f11d50a3a_6.0.6000.16720_en-us_0627a14ec30e8863.manifest —— 579 bytes [11:30 04/03/2009] [23:29 27/07/2008] 9C3E6A818018EAC034645A77A70E3CEF C:\WINDOWS\winsxs\Manifests\msil_system.web.services.resources_b03f5f7f11d50a3a_6.0.6000.20883_en-us_ef5fb7f2dcb0cd56.manifest —— 579 bytes [11:30 04/03/2009] [23:30 27/07/2008] EA82C6D4A0F19487237795E4AD437520 C:\WINDOWS\winsxs\Manifests\msil_system.web.services.resources_b03f5f7f11d50a3a_6.0.6001.18111_en-us_06028604c3609504.manifest —— 579 bytes [11:30 04/03/2009] [23:41 27/07/2008] 0662AEC0CE4CD307C7652E959B5A7650 C:\WINDOWS\winsxs\Manifests\msil_system.web.services.resources_b03f5f7f11d50a3a_6.0.6001.22230_en-us_ef36f6a0dd060e17.manifest —— 579 bytes [11:30 04/03/2009] [23:26 27/07/2008] 2C25801F6EE0C9CB521AE7E5726D093B C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16386_none_f2f11bcbb1c17 624.manifest –a— 4554 bytes [10:21 02/11/2006] [10:18 02/11/2006] 3983963C40EE2AF99A2D089CD2A303E7 C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16720_none_f2eba22fb1c64 598.manifest —— 4554 bytes [11:30 04/03/2009] [23:19 27/07/2008] 795B8A11A4ECAD512D50A1194742AD5D C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.20883_none_dc23b8d3cb688 a8b.manifest —— 4554 bytes [11:30 04/03/2009] [23:22 27/07/2008] 25800089BBE1C590B54659AC61B29DA5 C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18000_none_f2c59d87b2191 ef0.manifest —— 4554 bytes [08:27 29/08/2008] [04:14 19/01/2008] 499BE306CD249F0CDF725FDE49B6E52F C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_none_f2c686e5b2185 239.manifest —— 4554 bytes [11:30 04/03/2009] [23:45 27/07/2008] 6401096882246FC1FA98BD42E97FFCE8 C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_none_dbfaf781cbbdc b4c.manifest —— 4554 bytes [11:30 04/03/2009] [23:31 27/07/2008] E86585EED6BAD0183BFFC95B7B3971B9 C:\WINDOWS\winsxs\Manifests\msil_system.web.services_b03f5f7f11d50a3a_6.0.6002.18005_none_f2a122c3b26ab 304.manifest —— 4554 bytes [12:27 27/05/2009] [04:19 11/04/2009] 87C788816CD9EFA22B74CEBAD46BA345 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-commonlogservicesapi_31bf3856ad364e35_6.0.6000.16386_none_6c7e646582ec1e49.manif est –a— 4005 bytes [10:21 02/11/2006] [10:16 02/11/2006] 41FCB39626D133692F16DD6B6FBB61B4 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-commonlogservicesapi_31bf3856ad364e35_6.0.6001.18000_none_6eb526617fd72f1d.manif est —— 4005 bytes [08:27 29/08/2008] [04:12 19/01/2008] EA0A68616DB0A147718F737571F9245C C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6000.16386_none_cca68469f44b4003.manifest –a— 7318 bytes [10:20 02/11/2006] [10:10 02/11/2006] 905A2A21CD6CF9367D7A5B09B9A7DDA1 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-d..oryservices-ntdsapi_31bf3856ad364e35_6.0.6001.18000_none_cedd4665f13650d7.manifest —— 7273 bytes [08:27 29/08/2008] [04:39 19/01/2008] 7EC1383B23F3BCDBFB8E3649E9668736 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-d..t-services-unattend_31bf3856ad364e35_6.0.6000.16386_none_c6e497caa7ccecea.manifest –a— 2668 bytes [10:21 02/11/2006] [10:15 02/11/2006] 3226C0FB43563C9DFC48815515F0D1BB C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6000.16386_none_afb79761a4097d90.manifest –a— 94266 bytes [10:20 02/11/2006] [10:16 02/11/2006] B0060C701DDF1161507418B8F8EECBA0 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6001.18000_none_b1ee595da0f48e64.manifest —— 96179 bytes [08:27 29/08/2008] [04:11 19/01/2008] 43CAF0BFC2163C6DEBC8532F56E7D6EC C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-directory-services-sam_31bf3856ad364e35_6.0.6002.18005_none_b3d9d2699e1659b0.manifest —— 96175 bytes [12:27 27/05/2009] [04:18 11/04/2009] 25D8D5907BA778EF22059924F3C866A5 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-ehome-services-ehrecvr_31bf3856ad364e35_6.0.6000.16386_none_bb32bc0824b34955.manifest –a— 22993 bytes [12:33 02/11/2006] [12:33 02/11/2006] 7C829F06A86F427197D6E55BEB9F81CC C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-ehome-services-ehrecvr_31bf3856ad364e35_6.0.6001.18000_none_bd697e04219e5a29.manifest —— 22993 bytes [08:27 29/08/2008] [04:10 19/01/2008] B3B750C1AC7E28CBE23EE675F5DDF6F9 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-ehome-services-ehsched_31bf3856ad364e35_6.0.6000.16386_none_a33c3cde3f230506.manifest –a— 22982 bytes [12:33 02/11/2006] [12:33 02/11/2006] 9FB29E80800C82B0BB83853F5E41385B C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-ehome-services-ehstart_31bf3856ad364e35_6.0.6000.16386_none_ab1d7da23a0771e1.manifest –a— 7607 bytes [12:33 02/11/2006] [12:33 02/11/2006] B1A199C7811ED8FD9EB7C57AEE3380DF C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-live-services_31bf3856ad364e35_6.0.6000.16386_none_d374c2238ee40be9.manifest –a— 11405 bytes [12:33 02/11/2006] [12:33 02/11/2006] 4A438A6109AA950F64BC2197E13B5EF6 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-r..ityanalysisservices_31bf3856ad364e35_6.0.6000.16386_none_a461bbc104a7eda2.man ifest –a— 2920 bytes [10:21 02/11/2006] [10:02 02/11/2006] 2B1D73AF9E725BF025E2AECE0950A60C C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6000.16386_none_b38497a50862ad11.manifest –a— 7928 bytes [10:20 02/11/2006] [10:15 02/11/2006] 437598DE995221790A69AA094B76E330 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5.manifest —— 7928 bytes [08:26 29/08/2008] [04:12 19/01/2008] CB84E167FAA9B8D8A0157B31D16D0A90 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6000.16386_none_cd2d20a848cfd40f.manifest –a— 3746 bytes [10:21 02/11/2006] [10:18 02/11/2006] 50290D068C9273C755E993BDBCD6CC4E C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_cf63e2a445bae4e3.manifest —— 3746 bytes [08:26 29/08/2008] [04:08 19/01/2008] A94DF4BDD6E54C8C4FD8551C166B5759 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-services_31bf3856ad364e35_6.0.6000.16386_none_1498c6cf059ad6dc.manifest –a— 1549 bytes [10:20 02/11/2006] [10:03 02/11/2006] 5ABEB9BBCB4D71E9ADBD6B1BF74014F8 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..alservices-lsmproxy_31bf3856ad364e35_6.0.6000.16386_none_0955733ece724a8d.manifest –a— 44420 bytes [10:21 02/11/2006] [10:14 02/11/2006] 50E48C6AA4A5EC9994DC1E4F4C4229C7 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..alservices-lsmproxy_31bf3856ad364e35_6.0.6001.18000_none_0b8c353acb5d5b61.manifest —— 46459 bytes [08:26 29/08/2008] [04:09 19/01/2008] F1B17678C0FA3A64840307A770340AC2 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..andinkinputservices_31bf3856ad364e35_6.0.6000.16386_none_1a7668d81c27b24e.man ifest –a— 270798 bytes [12:33 02/11/2006] [12:33 02/11/2006] F521EFEA9F87AA310EB7EFB314A31B07 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..andinkinputservices_31bf3856ad364e35_6.0.6001.18000_none_1cad2ad41912c322.man ifest —— 270798 bytes [08:26 29/08/2008] [04:06 19/01/2008] 2390CFF1FAACCB13ACE8B336F20A7F62 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..andinkinputservices_31bf3856ad364e35_6.0.6002.18005_none_1e98a3e016348e6e.man ifest —— 270798 bytes [12:27 27/05/2009] [04:16 11/04/2009] D705EE0A2C8328D997C9D779D62D3B1F C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..inalservices-drprov_31bf3856ad364e35_6.0.6000.16386_none_cba2057f1c57e33a.manifest –a— 7378 bytes [10:21 02/11/2006] [10:11 02/11/2006] 599F5C45FF00BB21C16E563041021A22 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6000.16386_none_4ba58b99242c7f2a.man ifest –a— 24682 bytes [10:21 02/11/2006] [10:13 02/11/2006] BA4DB2B932BCD87CD0E8E777BEED4E71 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6001.18000_none_4ddc4d9521178ffe.man ifest —— 25321 bytes [08:26 29/08/2008] [04:08 19/01/2008] EA2A084DA8AFAC6320D5F3FDE3F366D3 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.18005_none_4fc7c6a11e395b4a.man ifest —— 25321 bytes [12:27 27/05/2009] [04:17 11/04/2009] F57E3949AF61C6F36F994C0AA33D1704 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-drivers_31bf3856ad364e35_6.0.6000.16386_none_4f195649f98f393a.manifest –a— 8485 bytes [10:21 02/11/2006] [10:15 02/11/2006] 6BD4706A7F7332C74EC8F0B23A3ABBFE C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-drivers_31bf3856ad364e35_6.0.6001.18000_none_51501845f67a4a0e.manifest —— 8485 bytes [08:26 29/08/2008] [04:10 19/01/2008] 1760C4114CD535E5DC1E6742FB5926A4 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-runtime_31bf3856ad364e35_6.0.6000.16386_none_daa92d68cf15d527.manifest –a— 6159 bytes [10:20 02/11/2006] [10:08 02/11/2006] BE34EE7977DF50652748A0E5A4959CF0 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-runtime_31bf3856ad364e35_6.0.6001.18000_none_dcdfef64cc00e5fb.manifest —— 6159 bytes [08:26 29/08/2008] [04:01 19/01/2008] 5376F384A38FCFB494C45C9DFE630581 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-sysprep_31bf3856ad364e35_6.0.6000.16386_none_2f62d4554b568aa5.manifest –a— 4285 bytes [10:20 02/11/2006] [10:08 02/11/2006] 45B96742798F69226BB9F9A3906BB7C7 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-sysprep_31bf3856ad364e35_6.0.6001.18000_none_3199965148419b79.manifest —— 4285 bytes [08:26 29/08/2008] [04:01 19/01/2008] 47529966265D53B6F8E87BE2DB72793A C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-sysprep_31bf3856ad364e35_6.0.6002.18005_none_33850f5d456366c5.manifest —— 4285 bytes [12:27 27/05/2009] [04:13 11/04/2009] 534E585209326C7CFDDB9048406F0A8D C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-utildll_31bf3856ad364e35_6.0.6000.16386_none_0f4727e99453b673.manifest –a— 5628 bytes [10:21 02/11/2006] [10:11 02/11/2006] 431244D1142BBBF1052825CF3F6B2E93 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..nalservices-utildll_31bf3856ad364e35_6.0.6001.18000_none_117de9e5913ec747.manifest —— 5628 bytes [08:26 29/08/2008] [04:05 19/01/2008] 2BA2E9216D4DDA6B19A33C8B10C409C6 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16386_none_c4fa2961c96a2b47.manifest –a— 5498 bytes [10:20 02/11/2006] [10:09 02/11/2006] 18EADA1C6FAE6EEE9AAFCCF0D5310C05 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd.manifest –a— 5868 bytes [20:29 25/08/2008] [20:29 25/08/2008] E2DC2019848792E0F4EA8A1797D68017 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.20672_none_c58a98bce2834412.manifest –a— 5868 bytes [20:29 25/08/2008] [20:29 25/08/2008] FE267E7F44E2B059ED56EF47BEACC7CF C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6001.18000_none_c730eb5dc6553c1b.manifest —— 5498 bytes [08:27 29/08/2008] [04:02 19/01/2008] B1BDAB6E2935160FF4D5E9126ED4D229 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-remotepage_31bf3856ad364e35_6.0.6000.16386_none_02bfcfb7b08e7562.manifest –a— 11902 bytes [10:21 02/11/2006] [10:18 02/11/2006] 42FBC4659485EB7A0395BDD4E9B80145 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..services-remotepage_31bf3856ad364e35_6.0.6001.18000_none_04f691b3ad798636.manifest —— 11902 bytes [08:27 29/08/2008] [04:13 19/01/2008] 4DFADEBBE7499A247D155B9FD19ACF40 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-t..tservices.resources_31bf3856ad364e35_6.0.6000.16386_en-us_0f2b30c14b52039f.manifest –a— 2496 bytes [12:39 02/11/2006] [12:39 02/11/2006] 0E277136BCBDA615703EA75B38F1F056 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-terminalservices-core_31bf3856ad364e35_6.0.6000.16386_none_e84b74b087fd42c6.manifest –a— 2077 bytes [10:20 02/11/2006] [10:03 02/11/2006] 299247B4798AF012CFB8CC9F51425DE3 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-terminalservices-rdp_31bf3856ad364e35_6.0.6000.16386_none_59dbe771ba243bd7.manifest –a— 2818 bytes [10:21 02/11/2006] [10:03 02/11/2006] BC28718AC0AB76544C7F4268A11526D4 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.0.6000.16386_none_d3af4de07de445f0.manifest –a— 22813 bytes [10:21 02/11/2006] [10:05 02/11/2006] FBA8EA91E626F06B8A7466E2FF353A9F C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.0.6001.18000_none_d5e60fdc7acf56c4.manifest —— 16558 bytes [08:26 29/08/2008] [04:00 19/01/2008] 56D76CC86433C9F0E1513A3E5DB5D756 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.0.6002.18005_none_d7d188e877f12210.manifest —— 16550 bytes [12:27 27/05/2009] [04:12 11/04/2009] 17F8924F661AF706BF3FC131519BF623 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-w..eservices.resources_31bf3856ad364e35_6.0.6000.16386_en-us_d720d262bd3afd78.manifest –a— 3840 bytes [12:39 02/11/2006] [12:39 02/11/2006] CBD55AEAFA52B5EEBCE4F8222AF7D7EB C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6000.16386_none_305d7915b6684b33.manifest –a— 100342 bytes [12:33 02/11/2006] [12:33 02/11/2006] 1EA22D923548FF062BF05DEEAB3140CC C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6001.18000_none_32943b11b3535c07.manifest —— 100019 bytes [08:27 29/08/2008] [04:39 19/01/2008] 069D3AFD7A76B9D10BB774AB19CD41F6 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753.manifest —— 99971 bytes [12:27 27/05/2009] [04:36 11/04/2009] 222A858335B457CF044B50A0001F18B2 C:\WINDOWS\winsxs\Manifests\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.16386_none_1bf56a0f61b9c262 .manifest –a— 2355 bytes [10:21 02/11/2006] [10:11 02/11/2006] 31F585CC81423F564B756975EBF49774 C:\WINDOWS\winsxs\Manifests\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.16720_none_1beff07361be91d6 .manifest —— 2355 bytes [11:30 04/03/2009] [23:18 27/07/2008] 7F7A09368BC06212B6C8757D3DFA74E2 C:\WINDOWS\winsxs\Manifests\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.20883_none_052807177b60d6c9 .manifest —— 2355 bytes [11:30 04/03/2009] [23:20 27/07/2008] A366C80A8F903B71DFF1EDB2BADF7CC3 C:\WINDOWS\winsxs\Manifests\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6001.18111_none_1bcad52962109e77 .manifest —— 2355 bytes [11:30 04/03/2009] [23:43 27/07/2008] 998633C067E7E4A8C69E4CD246CBCEF6 C:\WINDOWS\winsxs\Manifests\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6001.22230_none_04ff45c57bb6178a .manifest —— 2355 bytes [11:30 04/03/2009] [23:29 27/07/2008] 2CDE1885EF290BB55F6110A0E9924402 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices.tlb_31bf3856ad364e35_6.0.6000.16386_none_b3ce 5f003f86a211.manifest –a— 147688 bytes [10:21 02/11/2006] [10:03 02/11/2006] 5484EFD8941DC51918B53F144E6E2BED C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices.tlb_31bf3856ad364e35_6.0.6000.16720_none_b409 44643f5b56fd.manifest —— 147688 bytes [11:30 04/03/2009] [23:13 27/07/2008] B9EB06EA298FB16AA120B61E0F38A3B2 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices.tlb_31bf3856ad364e35_6.0.6000.20883_none_b455 028558a6ea72.manifest —— 147688 bytes [11:30 04/03/2009] [23:15 27/07/2008] 9AA99C7AAF485F322D3C5CD274D7DC60 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices.tlb_31bf3856ad364e35_6.0.6001.18111_none_b5fb 53403c78e554.manifest —— 147688 bytes [11:30 04/03/2009] [23:32 27/07/2008] 9FD5A54A0CA1482B4C2D4C7FA9EF2ABE C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices.tlb_31bf3856ad364e35_6.0.6001.22230_none_b66e 4fe955a7a3a9.manifest —— 147688 bytes [11:30 04/03/2009] [23:21 27/07/2008] C4C369044992C33ADE6A0B74D99E9B0D C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16386_none_d5d21d67 adbfe774.manifest –a— 47734 bytes [10:21 02/11/2006] [10:14 02/11/2006] D78A587E82AE350A9C0232550B3F0D69 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cb adc4b6e8.manifest —— 47734 bytes [11:30 04/03/2009] [23:18 27/07/2008] 585E7F34BDE290C759093A6BEC21D6FE C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6f c766fbdb.manifest —— 47734 bytes [11:30 04/03/2009] [23:20 27/07/2008] A16BA808A77DA1EBC1241838DDBD6E07 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18000_none_d5a69f23 ae179040.manifest —— 47734 bytes [08:26 29/08/2008] [04:09 19/01/2008] C21AE4136522D9FFD58CE66554BC7989 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881 ae16c389.manifest —— 47734 bytes [11:30 04/03/2009] [23:43 27/07/2008] FC4D13384B0BFA085D6F7DA73AAE9107 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91d c7bc3c9c.manifest —— 47734 bytes [11:30 04/03/2009] [23:29 27/07/2008] 160A686CAAF17BA14115D45688179B20 C:\WINDOWS\winsxs\Manifests\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6002.18005_none_d582245f ae692454.manifest —— 47734 bytes [12:27 27/05/2009] [04:17 11/04/2009] 2861C1FBDA22F657D68F78C200B66CFF C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16386_non e_af45ceab5406d544\System.DirectoryServices.Protocols.dll –a— 188416 bytes [06:34 02/11/2006] [01:14 20/10/2006] 6BDB34DABC3E43A399782FEEF2531616 C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.16720_non e_af40550f540ba4b8\System.DirectoryServices.Protocols.dll –a— 188416 bytes [11:29 04/03/2009] [18:00 27/07/2008] F0D4CE77F1F9D9A7468335B1CE4C061B C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6000.20883_non e_98786bb36dade9ab\System.DirectoryServices.Protocols.dll –a— 188416 bytes [11:29 04/03/2009] [17:55 27/07/2008] F0D4CE77F1F9D9A7468335B1CE4C061B C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18000_non e_af1a5067545e7e10\System.DirectoryServices.Protocols.dll –a— 188416 bytes [08:43 29/08/2008] [11:26 05/01/2008] 710FC83A1C3E2C64F18C342E22C57BA9 C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.18111_non e_af1b39c5545db159\System.DirectoryServices.Protocols.dll –a— 188416 bytes [11:29 04/03/2009] [18:03 27/07/2008] F0D4CE77F1F9D9A7468335B1CE4C061B C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6001.22230_non e_984faa616e032a6c\System.DirectoryServices.Protocols.dll –a— 188416 bytes [11:29 04/03/2009] [17:58 27/07/2008] F0D4CE77F1F9D9A7468335B1CE4C061B C:\WINDOWS\winsxs\msil_system.directoryservices.protocols_b03f5f7f11d50a3a_6.0.6002.18005_non e_aef5d5a354b01224\System.DirectoryServices.Protocols.dll –a— 188416 bytes [12:45 27/05/2009] [04:42 30/03/2009] 891AA60D72C0D51286FD7792D53C2A12 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16386_none_56c9c34f 311afdf9\System.DirectoryServices.dll –a— 397312 bytes [06:34 02/11/2006] [01:14 20/10/2006] 7E1FC67900EA31FA56A6B7542FA27E17 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.16720_none_56c449b3 311fcd6d\System.DirectoryServices.dll –a— 401408 bytes [11:29 04/03/2009] [18:00 27/07/2008] F485CF34C45F850B25A7E38B08A7C435 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6000.20883_none_3ffc6057 4ac21260\System.DirectoryServices.dll –a— 401408 bytes [11:29 04/03/2009] [17:55 27/07/2008] F485CF34C45F850B25A7E38B08A7C435 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18000_none_569e450b 3172a6c5\System.DirectoryServices.dll –a— 401408 bytes [08:44 29/08/2008] [11:26 05/01/2008] BB8F8C6047F473CAD5430266FB69A7DA C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.18111_none_569f2e69 3171da0e\System.DirectoryServices.dll –a— 401408 bytes [11:29 04/03/2009] [18:03 27/07/2008] F485CF34C45F850B25A7E38B08A7C435 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6001.22230_none_3fd39f05 4b175321\System.DirectoryServices.dll –a— 401408 bytes [11:29 04/03/2009] [17:58 27/07/2008] F485CF34C45F850B25A7E38B08A7C435 C:\WINDOWS\winsxs\msil_system.directoryservices_b03f5f7f11d50a3a_6.0.6002.18005_none_5679ca47 31c43ad9\System.DirectoryServices.dll –a— 401408 bytes [12:45 27/05/2009] [04:42 30/03/2009] 85290FF9B6B3A161E95AFCCC22480347 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16386_none_f2f11bcbb1c17 624\System.Web.Services.dll –a— 823296 bytes [06:34 02/11/2006] [01:14 20/10/2006] D01562C5557F59B26ACA8CEA328B8BC7 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.16720_none_f2eba22fb1c64 598\System.Web.Services.dll –a— 839680 bytes [11:29 04/03/2009] [18:00 27/07/2008] A89DFA6DB0C3D00559F770A214962A60 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6000.20883_none_dc23b8d3cb688 a8b\System.Web.Services.dll –a— 839680 bytes [11:29 04/03/2009] [17:55 27/07/2008] A89DFA6DB0C3D00559F770A214962A60 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18000_none_f2c59d87b2191 ef0\System.Web.Services.dll –a— 839680 bytes [08:44 29/08/2008] [11:27 05/01/2008] 553A64D2555FD7AD7688415ABA48F666 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.18111_none_f2c686e5b2185 239\System.Web.Services.dll –a— 839680 bytes [11:29 04/03/2009] [18:03 27/07/2008] A89DFA6DB0C3D00559F770A214962A60 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6001.22230_none_dbfaf781cbbdc b4c\System.Web.Services.dll –a— 839680 bytes [11:29 04/03/2009] [17:58 27/07/2008] A89DFA6DB0C3D00559F770A214962A60 C:\WINDOWS\winsxs\msil_system.web.services_b03f5f7f11d50a3a_6.0.6002.18005_none_f2a122c3b26ab 304\System.Web.Services.dll –a— 839680 bytes [12:45 27/05/2009] [04:42 30/03/2009] D59A5B6EBFCE6DBF9EE5D8A72EB8219B C:\WINDOWS\winsxs\x86_microsoft-windows-c..t-xpsomandstreaming_31bf3856ad364e35_7.0.6002.18107_none_a27672456d27e8b6\xpsservices.dll –a— 1554432 bytes [03:42 20/01/2010] [01:49 25/09/2009] 06C426B2FBEC302BD5763D7D654B4022 C:\WINDOWS\winsxs\x86_microsoft-windows-component-opcom_31bf3856ad364e35_7.0.6002.18107_none_9694f99f3a97a698\OpcServices.dll –a— 847360 bytes [03:42 20/01/2010] [01:38 25/09/2009] 4AEDEEC05211864EC41FCB099C1065FA C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\DirectoryServices-ADAM-DL.man –a— 2309 bytes [12:35 02/11/2006] [12:35 02/11/2006] D7937CD02F11126F42BCA7559738E27B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\DirectoryServices-Domain-DL.man –a— 2044 bytes [12:34 02/11/2006] [12:34 02/11/2006] EC9AB7D446510EBB8296A4FB2B167E6A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\Microsoft-Windows-CertificateServices-CA-DL.man –a— 1613 bytes [12:35 02/11/2006] [12:35 02/11/2006] 32A009024C4AAB1A38D503A6985B5F7D C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\Microsoft-Windows-CertificateServices-MSCEP-DL.man –a— 1372 bytes [12:35 02/11/2006] [12:35 02/11/2006] F13AF5B14ED582D82F8A0552E02942BE C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-Drivers-DL.man –a— 1134 bytes [12:35 02/11/2006] [12:35 02/11/2006] 58BE377062DF00A2D6E2C678AEC872DC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\terminalservices-licenseserver-DL.man –a— 1473 bytes [12:35 02/11/2006] [12:35 02/11/2006] 5C7E99522D363479096286D400BC27B0 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-LocalSessionManager-DL.man –a— 1353 bytes [12:34 02/11/2006] [12:34 02/11/2006] 6912AECCC58707895F5D37016691FAC8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-RDP-WinStationExtensions-DL.man –a— 22479 bytes [12:35 02/11/2006] [12:35 02/11/2006] 4E505FD3B454E1FD08D09D2A1F09F572 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-RemoteConnectionManager-DL.man –a— 1459 bytes [12:34 02/11/2006] [12:34 02/11/2006] CD121A4E28C6B3B3B861CBE3DC23E57D C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-SessionDirectory-Client-DL.man –a— 2013 bytes [12:34 02/11/2006] [12:34 02/11/2006] DCB8B9C7A3289868E2CD3E9B6E22E992 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TerminalServices-TerminalServicesClient-DL.man –a— 1784 bytes [12:34 02/11/2006] [12:34 02/11/2006] A81BB134CF54A52C20F67AEBFD351D5B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\TextServicesFramework-Migration-DL.man –a— 2154 bytes [12:34 02/11/2006] [12:34 02/11/2006] A39976AE141A764DA2C061E1B9D6B7AB C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\UDDIServices-SDP-DL.man –a— 1518 bytes [12:35 02/11/2006] [12:35 02/11/2006] 5030420A481EFE7DBB731E331F85DC59 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\UDDIServicesDatabase-SDP-DL.man –a— 1306 bytes [12:35 02/11/2006] [12:35 02/11/2006] 53C8921A817AB7935BC839AC366083B8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\UDDIServicesWeb-SDP-DL.man –a— 1315 bytes [12:34 02/11/2006] [12:34 02/11/2006] 96B3676F32D512035B283B5371E49CEC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\Web-Services-for-Management-Core-DL.man –a— 1629 bytes [12:34 02/11/2006] [12:34 02/11/2006] 96232A3C211230FE7655E11151044400 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\DirectoryServices-ADAM-DL.man –a— 2309 bytes [12:35 02/11/2006] [12:35 02/11/2006] D7937CD02F11126F42BCA7559738E27B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\DirectoryServices-Domain-DL.man –a— 2044 bytes [12:34 02/11/2006] [12:34 02/11/2006] EC9AB7D446510EBB8296A4FB2B167E6A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\DirectoryServices-ISM-Smtp-DL.man –a— 1851 bytes [08:42 29/08/2008] [11:23 05/01/2008] 4DA47743EAA0E1C5A2975F15080162BA C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Microsoft-Windows-CertificateServices-CA-DL.man –a— 1613 bytes [12:35 02/11/2006] [12:35 02/11/2006] 32A009024C4AAB1A38D503A6985B5F7D C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Microsoft-Windows-CertificateServices-CAManagement-DL.man –a— 1235 bytes [08:42 29/08/2008] [11:36 05/01/2008] C5C02C4A84ACC3BFD845EE4EBBD6AB8A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Microsoft-Windows-CertificateServices-MSCEP-DL.man –a— 1485 bytes [08:42 29/08/2008] [11:37 05/01/2008] D31D59095D5E189140A78D39753AECDD C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-Drivers-DL.man –a— 1134 bytes [12:35 02/11/2006] [12:35 02/11/2006] 58BE377062DF00A2D6E2C678AEC872DC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\terminalservices-licenseserver-DL.man –a— 1800 bytes [08:42 29/08/2008] [11:22 05/01/2008] B65BBC279F1F1BF8990685CB9E35D0AF C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-LocalSessionManager-DL.man –a— 1353 bytes [12:34 02/11/2006] [12:34 02/11/2006] 6912AECCC58707895F5D37016691FAC8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-RDP-WinStationExtensions-DL.man –a— 22336 bytes [08:42 29/08/2008] [11:22 05/01/2008] 41D5557C2D119C93CFEE9BEE27A97E1A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-RemoteConnectionManager-DL.man –a— 1329 bytes [08:42 29/08/2008] [11:22 05/01/2008] 87BDFDD25EDC302A438D3BEC35EFF509 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-SessionDirectory-Client-DL.man –a— 2215 bytes [08:42 29/08/2008] [11:26 05/01/2008] B413D47A7BD85710D2C521ED604EA881 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TerminalServices-TerminalServicesClient-DL.man –a— 1784 bytes [12:34 02/11/2006] [12:34 02/11/2006] A81BB134CF54A52C20F67AEBFD351D5B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\TextServicesFramework-Migration-DL.man –a— 2154 bytes [12:34 02/11/2006] [12:34 02/11/2006] A39976AE141A764DA2C061E1B9D6B7AB C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\UDDIServices-SDP-DL.man –a— 1518 bytes [12:35 02/11/2006] [12:35 02/11/2006] 5030420A481EFE7DBB731E331F85DC59 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\UDDIServicesDatabase-SDP-DL.man –a— 1306 bytes [12:35 02/11/2006] [12:35 02/11/2006] 53C8921A817AB7935BC839AC366083B8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\UDDIServicesWeb-SDP-DL.man –a— 1315 bytes [12:34 02/11/2006] [12:34 02/11/2006] 96B3676F32D512035B283B5371E49CEC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Web-Services-for-Management-Core-DL.man –a— 1914 bytes [08:42 29/08/2008] [11:36 05/01/2008] 2A110F0D2AE009C4F5CC41CB754B3A93 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\DirectoryServices-ADAM-DL.man –a— 2309 bytes [12:35 02/11/2006] [12:35 02/11/2006] D7937CD02F11126F42BCA7559738E27B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\DirectoryServices-Domain-DL.man –a— 2044 bytes [12:34 02/11/2006] [12:34 02/11/2006] EC9AB7D446510EBB8296A4FB2B167E6A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\DirectoryServices-ISM-Smtp-DL.man –a— 1851 bytes [08:42 29/08/2008] [11:23 05/01/2008] 4DA47743EAA0E1C5A2975F15080162BA C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Microsoft-Windows-CertificateServices-CA-DL.man –a— 1613 bytes [12:35 02/11/2006] [12:35 02/11/2006] 32A009024C4AAB1A38D503A6985B5F7D C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Microsoft-Windows-CertificateServices-CAManagement-DL.man –a— 1235 bytes [08:42 29/08/2008] [11:36 05/01/2008] C5C02C4A84ACC3BFD845EE4EBBD6AB8A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Microsoft-Windows-CertificateServices-MSCEP-DL.man –a— 1485 bytes [08:42 29/08/2008] [11:37 05/01/2008] D31D59095D5E189140A78D39753AECDD C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-Drivers-DL.man –a— 1134 bytes [12:35 02/11/2006] [12:35 02/11/2006] 58BE377062DF00A2D6E2C678AEC872DC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\terminalservices-licenseserver-DL.man –a— 1800 bytes [08:42 29/08/2008] [11:22 05/01/2008] B65BBC279F1F1BF8990685CB9E35D0AF C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-LocalSessionManager-DL.man –a— 1353 bytes [12:34 02/11/2006] [12:34 02/11/2006] 6912AECCC58707895F5D37016691FAC8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-RDP-WinStationExtensions-DL.man –a— 22336 bytes [08:42 29/08/2008] [11:22 05/01/2008] 41D5557C2D119C93CFEE9BEE27A97E1A C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-RemoteConnectionManager-DL.man –a— 1329 bytes [08:42 29/08/2008] [11:22 05/01/2008] 87BDFDD25EDC302A438D3BEC35EFF509 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-SessionDirectory-Client-DL.man –a— 2215 bytes [08:42 29/08/2008] [11:26 05/01/2008] B413D47A7BD85710D2C521ED604EA881 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TerminalServices-TerminalServicesClient-DL.man –a— 1784 bytes [12:34 02/11/2006] [12:34 02/11/2006] A81BB134CF54A52C20F67AEBFD351D5B C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\TextServicesFramework-Migration-DL.man –a— 2154 bytes [12:34 02/11/2006] [12:34 02/11/2006] A39976AE141A764DA2C061E1B9D6B7AB C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\UDDIServices-SDP-DL.man –a— 1518 bytes [12:35 02/11/2006] [12:35 02/11/2006] 5030420A481EFE7DBB731E331F85DC59 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\UDDIServicesDatabase-SDP-DL.man –a— 1306 bytes [12:35 02/11/2006] [12:35 02/11/2006] 53C8921A817AB7935BC839AC366083B8 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\UDDIServicesWeb-SDP-DL.man –a— 1315 bytes [12:34 02/11/2006] [12:34 02/11/2006] 96B3676F32D512035B283B5371E49CEC C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Web-Services-for-Management-Core-DL.man –a— 1914 bytes [08:42 29/08/2008] [11:36 05/01/2008] 2A110F0D2AE009C4F5CC41CB754B3A93 C:\WINDOWS\winsxs\x86_microsoft-windows-m..providers.resources_31bf3856ad364e35_6.0.6000.16386_en-us_59f83122d1d1c6b7\AuxiliaryDisplayServices.dll.mui –a— 4608 bytes [12:41 02/11/2006] [12:41 02/11/2006] F3C0EC523583498BE1DDC630A7509FD7 C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6000.16386_none_060a5eac9f9ae2ac\AuxiliaryDisplayServices.dll –a— 102400 bytes [12:36 02/11/2006] [12:36 02/11/2006] 5B88790AD667907BC3395E80902D9678 C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6000.16386_none_060a5eac9f9ae2ac\auxiliarydisplayservices.mof –a— 3039 bytes [12:36 02/11/2006] [12:36 02/11/2006] 55CDB0BF117EC597F3B1065CDADE98DB C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6001.18000_none_084120a89c85f380\AuxiliaryDisplayServices.dll –a— 102912 bytes [08:43 29/08/2008] [07:36 19/01/2008] EE1005543567F4397426875BD0969F1E C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6001.18000_none_084120a89c85f380\auxiliarydisplayservices.mof –a— 3039 bytes [12:36 02/11/2006] [12:36 02/11/2006] 55CDB0BF117EC597F3B1065CDADE98DB C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6002.18005_none_0a2c99b499a7becc\AuxiliaryDisplayServices.dll –a— 102912 bytes [12:47 27/05/2009] [06:28 11/04/2009] 1CBE36F6B8F7F067FCEA10B7082FAE9E C:\WINDOWS\winsxs\x86_microsoft-windows-m..systemdataproviders_31bf3856ad364e35_6.0.6002.18005_none_0a2c99b499a7becc\auxiliarydisplayservices.mof –a— 3039 bytes [12:36 02/11/2006] [12:36 02/11/2006] 55CDB0BF117EC597F3B1065CDADE98DB C:\WINDOWS\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a2085506ff73b6e0\services.msc –a— 92745 bytes [12:41 02/11/2006] [12:41 02/11/2006] 7A1D35F59468B8118AF5B8E21DF78AE2 C:\WINDOWS\winsxs\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.0.6000.16386_en-us_67c6851b290a1ced\services.exe.mui –a— 17920 bytes [12:40 02/11/2006] [12:40 02/11/2006] 1626EACF0E7E59F85C59DDDD27C4169C C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe –a— 279552 bytes [08:35 02/11/2006] [09:45 02/11/2006] 329CF3C97CE4C19375C8ABCABAE258B0 C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.mof –a— 2866 bytes [08:35 02/11/2006] [21:46 18/09/2006] 26A11C895A7F0B6D32105EBE127D8500 C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe –a— 279040 bytes [08:44 29/08/2008] [07:33 19/01/2008] 2B336AB6286D6C81FA02CBAB914E3C6C C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.mof –a— 2866 bytes [08:35 02/11/2006] [21:46 18/09/2006] 26A11C895A7F0B6D32105EBE127D8500 C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe –a— 279552 bytes [12:46 27/05/2009] [06:27 11/04/2009] D4E6D91C1349B7BFB3599A6ADA56851B C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.mof –a— 2866 bytes [08:35 02/11/2006] [21:46 18/09/2006] 26A11C895A7F0B6D32105EBE127D8500 C:\WINDOWS\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6000.16386_none_cd2d20a848cfd40f\services.msc –a— 92745 bytes [07:13 02/11/2006] [21:29 18/09/2006] 7A1D35F59468B8118AF5B8E21DF78AE2 C:\WINDOWS\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.0.6001.18000_none_cf63e2a445bae4e3\services.msc –a— 92745 bytes [07:13 02/11/2006] [21:29 18/09/2006] 7A1D35F59468B8118AF5B8E21DF78AE2 C:\WINDOWS\winsxs\x86_microsoft-windows-t..d-chinese-shuangpin_31bf3856ad364e35_6.0.6000.16386_none_1c7f70bfd9f21587\TableTextServiceSimplifiedShuangPin.txt –a— 1445244 bytes [07:11 02/11/2006] [01:07 27/09/2006] 5376E1CA5D7CB4ADD4CD69C3557A3F76 C:\WINDOWS\winsxs\x86_microsoft-windows-t..d-chinese-shuangpin_31bf3856ad364e35_6.0.6002.18005_none_20a1abc7d3fef1a7\TableTextServiceSimplifiedShuangPin.txt –a— 1445430 bytes [12:45 27/05/2009] [18:39 18/02/2009] 51B31EB324CB5C6936D7A14D49B0BD67 C:\WINDOWS\winsxs\x86_microsoft-windows-t..ied-chinese-quanpin_31bf3856ad364e35_6.0.6000.16386_none_f58de160c359c866\TableTextServiceSimplifiedQuanPin.txt –a— 1665692 bytes [07:11 02/11/2006] [01:07 27/09/2006] 44159F717B2A95551F0C6959C18B11DD C:\WINDOWS\winsxs\x86_microsoft-windows-t..ied-chinese-quanpin_31bf3856ad364e35_6.0.6002.18005_none_f9b01c68bd66a486\TableTextServiceSimplifiedQuanPin.txt –a— 1665878 bytes [12:45 27/05/2009] [18:39 18/02/2009] 532ED87BB64CF19C58AE0F91FA439983 C:\WINDOWS\winsxs\x86_microsoft-windows-t..ied-chinese-zhengma_31bf3856ad364e35_6.0.6000.16386_none_611fba102c7b5aa2\TableTextServiceSimplifiedZhengMa.txt –a— 1810166 bytes [07:11 02/11/2006] [01:07 27/09/2006] AF4BE34135F5DCA765C7596C1933400E C:\WINDOWS\winsxs\x86_microsoft-windows-t..ied-chinese-zhengma_31bf3856ad364e35_6.0.6002.18005_none_6541f518268836c2\TableTextServiceSimplifiedZhengMa.txt –a— 1810352 bytes [12:45 27/05/2009] [18:40 18/02/2009] 6D2BE04D9605C2D479E3CD205C406D7C C:\WINDOWS\winsxs\x86_microsoft-windows-t..onmanager-uieffects_31bf3856ad364e35_6.0.6000.16386_none_f530026ffa00b8f9\TerminalServices-RemoteConnectionManager-UiEffects-ppdlic.xrm-ms –a— 3055 bytes [09:31 02/11/2006] [09:31 02/11/2006] FA2CDFBE22AD8B9E025732EC47C3AF76 C:\WINDOWS\winsxs\x86_microsoft-windows-t..onmanager-uieffects_31bf3856ad364e35_6.0.6001.18000_none_f766c46bf6ebc9cd\TerminalServices-RemoteConnectionManager-UiEffects-ppdlic.xrm-ms –a— 3084 bytes [08:42 29/08/2008] [07:14 19/01/2008] 72830612581636025945E1C460B1386B C:\WINDOWS\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.0.6000.16386_none_8c687fcc5759068e\TerminalServices-RemoteConnectionManager-ppdlic.xrm-ms –a— 3984 bytes [09:31 02/11/2006] [09:31 02/11/2006] C3497654AC06F8016ADF46D077CB7F2D C:\WINDOWS\winsxs\x86_microsoft-windows-t..tionmanager-license_31bf3856ad364e35_6.0.6001.18000_none_f8ff9c9ccf228994\TerminalServices-RemoteConnectionManager-License-ppdlic.xrm-ms –a— 4021 bytes [08:43 29/08/2008] [07:14 19/01/2008] D40C66C818895F073A3E617F3A466C00 C:\WINDOWS\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\services –a— 17244 bytes [06:38 02/11/2006] [21:41 18/09/2006] 9F534244B7F8F55D5C0BB498D8D481E7 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16386_none_528b86b0b782b89 7\System.EnterpriseServices.Thunk.dll –a— 47616 bytes [06:34 02/11/2006] [06:34 02/11/2006] 569077EF776E89D69C2B85245C9DEDC5 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.16720_none_52860d14b787880 b\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [11:30 04/03/2009] [18:00 27/07/2008] 326C587B60592D84F32B10F73DCE58B4 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6000.20883_none_3bbe23b8d129ccf e\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [11:30 04/03/2009] [17:55 27/07/2008] 326C587B60592D84F32B10F73DCE58B4 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18000_none_5260086cb7da616 3\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [08:44 29/08/2008] [11:26 05/01/2008] 4208F41998BEECEE2ED6A6389F0AF974 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.18111_none_5260f1cab7d994a c\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [11:30 04/03/2009] [18:03 27/07/2008] 326C587B60592D84F32B10F73DCE58B4 C:\WINDOWS\winsxs\x86_netfx-clr_sys_entservcs_thunk_dll_b03f5f7f11d50a3a_6.0.6001.22230_none_3b956266d17f0db f\System.EnterpriseServices.Thunk.dll –a— 57392 bytes [11:30 04/03/2009] [17:58 27/07/2008] 326C587B60592D84F32B10F73DCE58B4 C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16386_none_5ef2978f28e693be\sbs_system.enterpriseservices.dll –a— 5120 bytes [06:33 02/11/2006] [06:33 02/11/2006] 82F0AD5A6BF5DA2CC4255C5A6226E8DC C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.16720_none_5f2d7cf328bb48aa\sbs_system.enterpriseservices.dll –a— 14376 bytes [11:30 04/03/2009] [18:00 27/07/2008] B5428386274247435BC060F2004FC7C2 C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6000.20883_none_5f793b144206dc1f\sbs_system.enterpriseservices.dll –a— 14376 bytes [11:30 04/03/2009] [17:55 27/07/2008] B5428386274247435BC060F2004FC7C2 C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18000_none_6129598b25d1a492\sbs_system.enterpriseservices.dll –a— 14376 bytes [08:43 29/08/2008] [11:25 05/01/2008] 5142D33972DE83C71A69AD46BAFFB603 C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.18111_none_611f8bcf25d8d701\sbs_system.enterpriseservices.dll –a— 14376 bytes [11:30 04/03/2009] [18:03 27/07/2008] B5428386274247435BC060F2004FC7C2 C:\WINDOWS\winsxs\x86_netfx-sbs_sys_enterprisesvc_dll_31bf3856ad364e35_6.0.6001.22230_none_619288783f079556\sbs_system.enterpriseservices.dll –a— 14376 bytes [11:30 04/03/2009] [17:58 27/07/2008] B5428386274247435BC060F2004FC7C2 C:\WINDOWS\winsxs\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.16386_none_1bf56a0f61b9c262\System.EnterpriseServices.tlb –a— 40960 bytes [06:34 02/11/2006] [01:14 20/10/2006] 36CDFBB1EBF2CFDC16FACB9A6542098F C:\WINDOWS\winsxs\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.16720_none_1beff07361be91d6\System.EnterpriseServices.tlb –a— 40960 bytes [11:30 04/03/2009] [18:00 27/07/2008] C178E0ABE4E8FDFF0F9B9D30A192C9C8 C:\WINDOWS\winsxs\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6000.20883_none_052807177b60d6c9\System.EnterpriseServices.tlb –a— 40960 bytes [11:30 04/03/2009] [17:55 27/07/2008] C178E0ABE4E8FDFF0F9B9D30A192C9C8 C:\WINDOWS\winsxs\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6001.18111_none_1bcad52962109e77\System.EnterpriseServices.tlb –a— 40960 bytes [11:30 04/03/2009] [18:03 27/07/2008] C178E0ABE4E8FDFF0F9B9D30A192C9C8 C:\WINDOWS\winsxs\x86_netfx-sys_enterpriseservices_tlb_b03f5f7f11d50a3a_6.0.6001.22230_none_04ff45c57bb6178a\System.EnterpriseServices.tlb –a— 40960 bytes [11:30 04/03/2009] [17:58 27/07/2008] C178E0ABE4E8FDFF0F9B9D30A192C9C8 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16386_none_d5d21d67 adbfe774\System.EnterpriseServices.dll –a— 258048 bytes [06:34 02/11/2006] [01:14 20/10/2006] 199AC6DECE667AE0709B13740B21383F C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16386_none_d5d21d67 adbfe774\System.EnterpriseServices.Wrapper.dll –a— 114176 bytes [06:34 02/11/2006] [06:34 02/11/2006] 39CCB95EBB5F67A92932D024F8AC3079 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cb adc4b6e8\System.EnterpriseServices.dll –a— 258048 bytes [11:30 04/03/2009] [18:00 27/07/2008] 9631B15DB7C43C267636FF43C3075E07 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.16720_none_d5cca3cb adc4b6e8\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [11:30 04/03/2009] [18:19 27/07/2008] E786C33D35D39C5CCB523AECC18D7BD7 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6f c766fbdb\System.EnterpriseServices.dll –a— 258048 bytes [11:30 04/03/2009] [17:55 27/07/2008] 9631B15DB7C43C267636FF43C3075E07 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6000.20883_none_bf04ba6f c766fbdb\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [11:30 04/03/2009] [18:15 27/07/2008] E786C33D35D39C5CCB523AECC18D7BD7 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18000_none_d5a69f23 ae179040\System.EnterpriseServices.dll –a— 258048 bytes [08:43 29/08/2008] [11:26 05/01/2008] AF5CDB23E851B084A16F672E49CE1148 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18000_none_d5a69f23 ae179040\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [08:43 29/08/2008] [03:22 19/01/2008] CF175F5AF10AC43872215E1F31C91B25 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881 ae16c389\System.EnterpriseServices.dll –a— 258048 bytes [11:30 04/03/2009] [18:03 27/07/2008] 9631B15DB7C43C267636FF43C3075E07 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.18111_none_d5a78881 ae16c389\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [11:30 04/03/2009] [18:22 27/07/2008] E786C33D35D39C5CCB523AECC18D7BD7 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91d c7bc3c9c\System.EnterpriseServices.dll –a— 258048 bytes [11:30 04/03/2009] [17:58 27/07/2008] 9631B15DB7C43C267636FF43C3075E07 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6001.22230_none_bedbf91d c7bc3c9c\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [11:30 04/03/2009] [18:19 27/07/2008] E786C33D35D39C5CCB523AECC18D7BD7 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6002.18005_none_d582245f ae692454\System.EnterpriseServices.dll –a— 258048 bytes [12:45 27/05/2009] [04:42 30/03/2009] 70891F0ED183AC39BE4C5E43666A35C7 C:\WINDOWS\winsxs\x86_system.enterpriseservices_b03f5f7f11d50a3a_6.0.6002.18005_none_d582245f ae692454\System.EnterpriseServices.Wrapper.dll –a— 113664 bytes [12:45 27/05/2009] [02:04 11/04/2009] 296AACAE51A6995D2016C2C3E4774D81 Searching for "*lsass*" C:\WINDOWS\Prefetch\LSASS .EXE-B7A4A262.pf –a— 66470 bytes [17:29 22/02/2010] [16:18 26/02/2010] D9AE215E5B9ED87D83F37445D8D12512 C:\WINDOWS\System32\en-US\lsass.exe.mui –a— 8704 bytes [12:41 02/11/2006] [12:41 02/11/2006] BC51B12908B2077BB1BD9304AB9B5F79 C:\WINDOWS\System32\Event Agent\lsass .exe –a— 1249280 bytes [19:29 05/05/2009] [19:29 05/05/2009] 29367231978BB804EB14E3E9101C6093 C:\WINDOWS\System32\lsass.exe –a— 9728 bytes [20:25 26/08/2009] [12:48 15/06/2009] 3978F3540329E16C0AC3BCF677E5669F C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.0.6001.18000_en-us_86a7d451969b5727_lsass.exe.mui_00d4b6cf –a— 8704 bytes [09:38 31/08/2008] [09:24 31/08/2008] BC51B12908B2077BB1BD9304AB9B5F79 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db_lsass.exe_682060de –a— 9728 bytes [20:35 26/08/2009] [20:32 26/08/2009] 3978F3540329E16C0AC3BCF677E5669F C:\WINDOWS\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.0.6000.16386_en-us_8471125599b04653\lsass.exe.mui –a— 8704 bytes [12:41 02/11/2006] [12:41 02/11/2006] BC51B12908B2077BB1BD9304AB9B5F79 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa.resources_31bf3856ad364e35_6.0.6001.18000_en-us_86a7d451969b5727\lsass.exe.mui –a— 8704 bytes [12:41 02/11/2006] [12:41 02/11/2006] BC51B12908B2077BB1BD9304AB9B5F79 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16386_none_a413c8c65fe02762\lsass.exe –a— 7680 bytes [08:43 02/11/2006] [09:45 02/11/2006] 6A0E382E74280E4CC0DF17FE2661D003 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16820_none_a44eb0105fb4d975\lsass.exe –a— 7680 bytes [23:53 16/04/2009] [07:26 13/02/2009] 59DE082968FDD257FFF0D209B9A5B460 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\lsass.exe –a— 7680 bytes [20:25 26/08/2009] [13:10 15/06/2009] C731B1FE449D4E9CEA358C9D55B69BE9 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21010_none_a4e2f4e978ca9090\lsass.exe –a— 7680 bytes [23:53 16/04/2009] [04:58 13/02/2009] AFF8A58280863629CA4FFA9E0B259F1E C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\lsass.exe –a— 7680 bytes [20:25 26/08/2009] [12:59 15/06/2009] BA9A67672E025078C77967731BCFC560 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21125_none_a4dd285578ce285b\lsass.exe –a— 7680 bytes [19:14 14/10/2009] [14:47 10/09/2009] D09A5DA84B7C9CA9B02EBCD7FAE41C8D C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18000_none_a64a8ac25ccb3836\lsass.exe –a— 9728 bytes [08:43 29/08/2008] [07:33 19/01/2008] DCF733788C7D088D814E5F80EB4B3E0F C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18215_none_a644c0145ccecd28\lsass.exe –a— 9728 bytes [08:43 29/08/2008] [07:33 19/01/2008] DCF733788C7D088D814E5F80EB4B3E0F C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\lsass.exe –a— 9728 bytes [20:25 26/08/2009] [12:57 15/06/2009] A911ECAC81F94ADEAFBE8E3F7873EDB0 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22376_none_a68e7da1761c2def\lsass.exe –a— 9728 bytes [23:53 16/04/2009] [08:20 13/02/2009] F4C62B07E5BF96F1FDCA9DB393ECED22 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\lsass.exe –a— 9728 bytes [20:25 26/08/2009] [13:03 15/06/2009] 6F1F23D3599EAE17734451936B7F17C6 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22518_none_a6d1618975e9b345\lsass.exe –a— 9728 bytes [19:14 14/10/2009] [11:09 09/09/2009] CB7E838C140B4087B2DA323F2D4523C5 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18005_none_a83603ce59ed0382\lsass.exe –a— 9728 bytes [08:43 29/08/2008] [07:33 19/01/2008] DCF733788C7D088D814E5F80EB4B3E0F C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\lsass.exe –a— 9728 bytes [20:25 26/08/2009] [12:48 15/06/2009] 3978F3540329E16C0AC3BCF677E5669F C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\lsass.exe –a— 9728 bytes [20:25 26/08/2009] [12:51 15/06/2009] 203D86EBD6D8E4C8501B222421E81506 C:\WINDOWS\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22223_none_a8a80213731ca5a7\lsass.exe –a— 9728 bytes [19:14 14/10/2009] [14:44 10/09/2009] 2D3AC5E7AC01E905F3ABD2D745FE3A9B Searching for "*smss*" C:\Microsoft Office Xp Pro\SHAREPT\SQL\X86\BINN\SSMSSH70.DLL -r—- 37136 bytes [23:11 04/04/2001] [23:11 04/04/2001] 4CAE607E66DF2C61E4EBB48FDCA55E9F C:\Microsoft Office Xp Pro\SHAREPT\SQL\X86\BINN\SSMSSO70.DLL -r—- 45328 bytes [23:11 04/04/2001] [23:11 04/04/2001] EFB2CB4731AF9A1A2743A074DADEC849 C:\Microsoft Office Xp Pro\SHAREPT\SQL\X86\BINN\SSMSSP70.DLL -r—- 37136 bytes [23:11 04/04/2001] [23:11 04/04/2001] 5B9FEB9779CB5F339C4AE6DCF474E5B6 C:\WINDOWS\System32\Event Agent\Bin\smss .exe –a— 323652 bytes [05:30 22/04/2009] [05:30 22/04/2009] C683E418BA5EC9C6520F8D518466FDE9 C:\WINDOWS\System32\migwiz\dlmanifests\Smss-DL.man –a— 1916 bytes [12:34 02/11/2006] [12:34 02/11/2006] 0D70B7B03B1006E28AF980DA5E5FDAAD C:\WINDOWS\System32\smss.exe –a— 64000 bytes [12:45 27/05/2009] [06:28 11/04/2009] 98AF15A94CD6AC37248E72E5FE789B35 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06.manifest –a— 28589 bytes [15:06 27/05/2009] [14:03 27/05/2009] EE2C9960F8CFA15B396A299E90B6D237 C:\WINDOWS\winsxs\Backup\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06_smss.exe_d7209c3a –a— 64000 bytes [15:06 27/05/2009] [14:03 27/05/2009] 98AF15A94CD6AC37248E72E5FE789B35 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-smss-bootexecute_31bf3856ad364e35_6.0.6000.16386_none_1eff3a5d1192ed4a.manifest –a— 938 bytes [10:20 02/11/2006] [10:03 02/11/2006] BF416F7AAA884BFAF0229FEDF08BB80A C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6000.16386_none_aa03e6011c468ee6.manifest –a— 28308 bytes [10:20 02/11/2006] [10:09 02/11/2006] 7DD8E03B29821D9F8B404C2880CF5EA3 C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6001.18000_none_ac3aa7fd19319fba.manifest —— 28589 bytes [08:26 29/08/2008] [04:11 19/01/2008] D4CD4DB3C906B3772B70D4409978585C C:\WINDOWS\winsxs\Manifests\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06.manifest —— 28589 bytes [12:27 27/05/2009] [04:18 11/04/2009] EE2C9960F8CFA15B396A299E90B6D237 C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6000.16386_none_0041f38286aeaf07\Smss-DL.man –a— 1916 bytes [12:34 02/11/2006] [12:34 02/11/2006] 0D70B7B03B1006E28AF980DA5E5FDAAD C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Smss-DL.man –a— 1916 bytes [12:34 02/11/2006] [12:34 02/11/2006] 0D70B7B03B1006E28AF980DA5E5FDAAD C:\WINDOWS\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Smss-DL.man –a— 1916 bytes [12:34 02/11/2006] [12:34 02/11/2006] 0D70B7B03B1006E28AF980DA5E5FDAAD C:\WINDOWS\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6000.16386_none_aa03e6011c468ee6\smss.exe –a— 62976 bytes [08:33 02/11/2006] [09:45 02/11/2006] CAA75757BB3695478C23CB0624342A61 C:\WINDOWS\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6001.18000_none_ac3aa7fd19319fba\smss.exe –a— 64000 bytes [08:43 29/08/2008] [07:33 19/01/2008] 6701DDAF68BEDE6BBEEA9D514D73A35B C:\WINDOWS\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe –a— 64000 bytes [12:45 27/05/2009] [06:28 11/04/2009] 98AF15A94CD6AC37248E72E5FE789B35 -=End Of File=-
Post #18
Hi,

Please do the following:

Go to Start > Run > type in cmd to open a command window:


Then copy / paste the following into the open command window

copy /y C:\WINDOWS\System32\spoolsv.exe C:\Windows\system32\Event Agent\bin\spoolsv .exe
copy /y C:\WINDOWS\System32\services.exe C:\Windows\system32\Event Agent\bin\services .exe
copy /y C:\WINDOWS\System32\lsass.exe C:\WINDOWS\System32\Event Agent\lsass .exe
copy /y C:\WINDOWS\System32\smss.exe C:\WINDOWS\System32\Event Agent\Bin\smss .exe


type exit and then try the ComboFix program again.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI