Spyware / Malware / Virus Removal

Google Redirect, Can't get to Windows Update

9 min read

Looking for the outcome? Ask AI

JoeSee Topic Starter

Post #1June 23, 2010, 2:03 AM UTC

I have a browser redirect to useless fake looking search pages

Also I can't access Microsoft updates

And it won't let me post here - had to switch computers

Clever but annoying

Tried Malware bytes, no luck. I run Avira AV.

Here is the log - thanks in advance

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:58:29 PM, on 22/06/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USSMB/23
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [Google Update] "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://afsinc.webex.com/client/T27LB/nbr/ieatgpc1.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: nmklo
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\aestsrv.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: NitroPDFDriverCreatorReadSpool (NitroDriverReadSpool) - Nitro PDF Software - C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe
O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
O23 - Service: O2FLASH - O2Micro International - C:\Windows\system32\DRIVERS\o2flash.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\STacSV.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE

–
End of file - 9523 bytes

RPMcMurphy

Post #2June 23, 2010, 5:58 PM UTC

Hello JoeSee and welcome to WhatTheTech. Please follow these guidelines:

Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please follow my instructions carefully and in the order they are posted.
Any underlined text in my posts indicates a clickable link.
You should print any instructions I give you for ease of use and reference.
If you have any questions at all, please stop and ask before proceeding.

🖼Click to load external image (Posted Image) Please download DDS by sUBs from one of the following links and save it to your desktop.

- DDS.scr
- DDS.pif
Disable any script blocking protection (How to Disable your Security Programs)
Double click DDS icon to run the tool (may take up to 3 minutes to run)
When done, DDS.txt will open.
After a few moments, attach.txt will open in a second window.
Save both reports to your desktop.

—————————————————

Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.

🖼Click to load external image (Posted Image) Download GMER Rootkit Scanner from here to your desktop.

Double click the exe file. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

[external image: Posted Image]
Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following …
- IAT/EAT
- Drives/Partition other than Systemdrive (typically C:\)
- Show All (don't miss this one)a
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

If you have trouble running GEMR:

Make sure that your security software is disabled
Uncheck the box next to "Files" this time also
If you still can't run it, try in the Safe Mode

Please include the following in your next post:

DDS and Attach.txt logs

GMER log

JoeSee

Post #3June 23, 2010, 10:48 PM UTC

Hello RPMcMurphy;

Thanks! DDS and GMER posted, attach.txt attached!

DDS (Ver_10-03-17.01) - NTFSx86
Run by [removed] at 18:28:20.27 on 23/06/2010
Internet Explorer: 8.0.6001.18904
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.2.1033.18.2008.910 [GMT -4:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\STacSV.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\aestsrv.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe
C:\Windows\system32\NLSSRV32.EXE
C:\Windows\system32\DRIVERS\o2flash.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\PROGRA~1\MI1933~1\Office12\OUTLOOK.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\user\Desktop\dds.scr
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
uRun: [Google Update] "c:\users\user\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: &ieSpell Options - c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Lookup on Merriam Webster - file://c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\iespell\wikipedia.HTM
IE: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - res://c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - res://c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mi1933~1\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://oas.support.microsoft.com/ActiveX/MSDcode.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {99FE5072-78AA-4FEE-89BA-69A5FA55343F} - hxxp://download.microsoft.com/download/B/3/A/B3A2EA73-793D-4ABE-992D-C81140384044/igdtoolx.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://afsinc.webex.com/client/T27LB/nbr/ieatgpc1.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: nmklo
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

============= SERVICES / DRIVERS ===============

R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-1-12 11608]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\driverstore\filerepository\stwrt.inf_ec3a90dd\AEstSrv.exe [2009-12-3 81920]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-1-12 108289]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-1-12 185089]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-1-12 56816]
R2 NitroDriverReadSpool;NitroPDFDriverCreatorReadSpool;c:\program files\nitro pdf\professional\NitroPDFDriverService.exe [2009-12-16 188736]
R2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2009-12-16 65856]
R3 O2MDGRDR;O2MDGRDR;c:\windows\system32\drivers\o2mdg.sys [2009-12-3 51616]
R3 O2SDGRDR;O2SDGRDR;c:\windows\system32\drivers\o2sdg.sys [2009-12-3 41760]
S2 Norton Internet Security;Norton Internet Security;"c:\program files\norton internet security\engine\16.0.0.125\ccsvchst.exe" /s "norton internet security" /m "c:\program files\norton internet security\engine\16.0.0.125\dimaster.dll" /prefetch:1 –> c:\program files\norton internet security\engine\16.0.0.125\ccSvcHst.exe [?]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]

=============== Created Last 30 ================

2010-06-23 00:47:37 0 d—–w- c:\program files\Trend Micro
2010-06-18 14:32:22 0 d—–w- c:\users\user\appdata\roaming\webex
2010-06-08 20:05:40 0 d—–w- c:\programdata\Actify
2010-06-08 20:05:34 0 d—–w- c:\program files\common files\Actify
2010-06-08 20:05:34 0 d—–w- c:\program files\Actify
2010-06-08 20:04:57 0 d—–w- c:\program files\common files\Wise Installation Wizard

==================== Find3M ====================

2010-06-09 21:33:02 51200 —-a-w- c:\windows\inf\infpub.dat
2010-06-09 21:33:02 143360 —-a-w- c:\windows\inf\infstrng.dat
2010-05-24 16:05:09 103720 —-a-w- c:\users\user\GoToAssistDownloadHelper.exe
2010-05-14 15:58:45 72080 —-a-w- c:\users\user\g2mdlhlpx.exe
2010-05-12 15:21:16 221568 ——w- c:\windows\system32\MpSigStub.exe
2010-04-29 19:39:38 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 19:39:26 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-04-05 16:31:25 143360 —-a-w- c:\windows\inf\infstor.dat
2010-02-04 16:07:57 665600 —-a-w- c:\windows\inf\drvindex.dat
2008-01-21 02:57:01 174 –sha-w- c:\program files\desktop.ini
2006-11-02 12:39:34 30674 —-a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:39:34 30674 —-a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:39:34 287440 —-a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:39:34 287440 —-a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfc.dat
2010-03-05 13:09:58 245760 –sha-w- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2010-01-29 22:18:09 245760 –sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-12-03 13:22:00 8192 –sha-w- c:\windows\users\default\NTUSER.DAT

============= FINISH: 18:29:15.59 ===============

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-23 18:39:06
Windows 6.0.6002 Service Pack 2
Running: cj1kw95e.exe; Driver: C:\Users\user\AppData\Local\Temp\fxldypow.sys

—- System - GMER 1.0.15 —-

SSDT A7DF32AC ZwCreateThread
SSDT A7DF3298 ZwOpenProcess
SSDT A7DF329D ZwOpenThread
SSDT A7DF32A7 ZwTerminateProcess

—- Kernel code sections - GMER 1.0.15 —-

.text ntkrnlpa.exe!KeSetEvent + 221 81CE4984 4 Bytes [AC, 32, DF, A7] {LODSB ; XOR BL, BH; CMPSD }
.text ntkrnlpa.exe!KeSetEvent + 3F1 81CE4B54 4 Bytes [98, 32, DF, A7] {CWDE ; XOR BL, BH; CMPSD }
.text ntkrnlpa.exe!KeSetEvent + 40D 81CE4B70 4 Bytes [9D, 32, DF, A7] {POPF ; XOR BL, BH; CMPSD }
.text ntkrnlpa.exe!KeSetEvent + 621 81CE4D84 4 Bytes [A7, 32, DF, A7] {CMPSD ; XOR BL, BH; CMPSD }

—- User code sections - GMER 1.0.15 —-

.text C:\Program Files\Internet Explorer\iexplore.exe[828] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 0084000A
.text C:\Program Files\Internet Explorer\iexplore.exe[828] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 0085000A
.text C:\Program Files\Internet Explorer\iexplore.exe[828] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 0083000A
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!SetWindowsHookExW 77E987AD 5 Bytes JMP 6CFD9A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!CallNextHookEx 77E98E3B 5 Bytes JMP 6CFCD101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!UnhookWindowsHookEx 77E998DB 5 Bytes JMP 6CF4466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!CreateWindowExW 77EA1305 5 Bytes JMP 6CFDDAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!DialogBoxParamW 77EC10B0 5 Bytes JMP 6CF05505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!DialogBoxIndirectParamW 77EC2EF5 5 Bytes JMP 6D0D473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!DialogBoxParamA 77ED8152 5 Bytes JMP 6D0D46DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!DialogBoxIndirectParamA 77ED847D 5 Bytes JMP 6D0D47A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!MessageBoxIndirectA 77EED4D9 5 Bytes JMP 6D0D4671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!MessageBoxIndirectW 77EED5D3 5 Bytes JMP 6D0D4606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!MessageBoxExA 77EED639 5 Bytes JMP 6D0D45A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] USER32.dll!MessageBoxExW 77EED65D 5 Bytes JMP 6D0D4542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] ole32.dll!OleLoadFromStream 768C1E12 5 Bytes JMP 6D0D4AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[828] ole32.dll!CoCreateInstance 768F9EA6 5 Bytes JMP 6CFDDB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Windows\system32\svchost.exe[1088] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 0082000A
.text C:\Windows\system32\svchost.exe[1088] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 0093000A
.text C:\Windows\system32\svchost.exe[1088] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 0081000A
.text C:\Windows\system32\svchost.exe[1088] ole32.dll!CoCreateInstance 768F9EA6 5 Bytes JMP 0097000A
.text C:\Windows\system32\svchost.exe[1088] USER32.dll!GetCursorPos 77EB0B88 5 Bytes JMP 00F2000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 002B000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 002C000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 002A000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!CreateWindowExW 77EA1305 5 Bytes JMP 6CFDDAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!DialogBoxParamW 77EC10B0 5 Bytes JMP 6CF05505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!DialogBoxIndirectParamW 77EC2EF5 5 Bytes JMP 6D0D473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!DialogBoxParamA 77ED8152 5 Bytes JMP 6D0D46DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!DialogBoxIndirectParamA 77ED847D 5 Bytes JMP 6D0D47A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!MessageBoxIndirectA 77EED4D9 5 Bytes JMP 6D0D4671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!MessageBoxIndirectW 77EED5D3 5 Bytes JMP 6D0D4606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!MessageBoxExA 77EED639 5 Bytes JMP 6D0D45A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2656] USER32.dll!MessageBoxExW 77EED65D 5 Bytes JMP 6D0D4542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Windows\Explorer.EXE[2808] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 0035000A
.text C:\Windows\Explorer.EXE[2808] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 0036000A
.text C:\Windows\Explorer.EXE[2808] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 0034000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 001E000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 001F000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 001D000A
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!SetWindowsHookExW 77E987AD 5 Bytes JMP 6CFD9A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!CallNextHookEx 77E98E3B 5 Bytes JMP 6CFCD101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!UnhookWindowsHookEx 77E998DB 5 Bytes JMP 6CF4466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!CreateWindowExW 77EA1305 5 Bytes JMP 6CFDDAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!DialogBoxParamW 77EC10B0 5 Bytes JMP 6CF05505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!DialogBoxIndirectParamW 77EC2EF5 5 Bytes JMP 6D0D473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!DialogBoxParamA 77ED8152 5 Bytes JMP 6D0D46DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!DialogBoxIndirectParamA 77ED847D 5 Bytes JMP 6D0D47A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!MessageBoxIndirectA 77EED4D9 5 Bytes JMP 6D0D4671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!MessageBoxIndirectW 77EED5D3 5 Bytes JMP 6D0D4606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!MessageBoxExA 77EED639 5 Bytes JMP 6D0D45A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] USER32.dll!MessageBoxExW 77EED65D 5 Bytes JMP 6D0D4542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] ole32.dll!OleLoadFromStream 768C1E12 5 Bytes JMP 6D0D4AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2972] ole32.dll!CoCreateInstance 768F9EA6 5 Bytes JMP 6CFDDB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\PROGRA~1\MI1933~1\Office12\OUTLOOK.EXE[3368] kernel32.dll!SetUnhandledExceptionFilter 76C5A84F 5 Bytes JMP 668E5335 C:\Program Files\Common Files\Microsoft Shared\office12\mso.dll (2007 Microsoft Office component/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] ntdll.dll!NtProtectVirtualMemory 77D34D34 5 Bytes JMP 0073000A
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] ntdll.dll!NtWriteVirtualMemory 77D35674 5 Bytes JMP 0086000A
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] ntdll.dll!KiUserExceptionDispatcher 77D35DC8 5 Bytes JMP 0072000A
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!SetWindowsHookExW 77E987AD 5 Bytes JMP 6CFD9A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!CallNextHookEx 77E98E3B 5 Bytes JMP 6CFCD101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!UnhookWindowsHookEx 77E998DB 5 Bytes JMP 6CF4466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!CreateWindowExW 77EA1305 5 Bytes JMP 6CFDDAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!DialogBoxParamW 77EC10B0 5 Bytes JMP 6CF05505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!DialogBoxIndirectParamW 77EC2EF5 5 Bytes JMP 6D0D473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!DialogBoxParamA 77ED8152 5 Bytes JMP 6D0D46DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!DialogBoxIndirectParamA 77ED847D 5 Bytes JMP 6D0D47A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!MessageBoxIndirectA 77EED4D9 5 Bytes JMP 6D0D4671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!MessageBoxIndirectW 77EED5D3 5 Bytes JMP 6D0D4606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!MessageBoxExA 77EED639 5 Bytes JMP 6D0D45A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] USER32.dll!MessageBoxExW 77EED65D 5 Bytes JMP 6D0D4542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] ole32.dll!OleLoadFromStream 768C1E12 5 Bytes JMP 6D0D4AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[4296] ole32.dll!CoCreateInstance 768F9EA6 5 Bytes JMP 6CFDDB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)

—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

—- EOF - GMER 1.0.15 —-

Attachments:

📎Attach.txt

RPMcMurphy

Post #4June 24, 2010, 12:56 AM UTC

Hi JoeSee,

🖼Click to load external image (Posted Image) You are infected with a trojan know to sometimes have backdoor properties. Backdoor Trojans are very dangerous because they use advanced techniques (backdoors) to steal sensitive information which they send back to the hacker. All passwords should be changed immediately using a different computer and, if necessary, banking and credit card institutions should be notified of the possible security breach.

🖼Click to load external image (Posted Image) Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

——————————————————————–
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
——————————————————————–

Double click on ComboFix.exe & follow the prompts.

When finished, it will produce a report for you.
Please post the C:\ComboFix.txt log.

Please include the following in your next post:

ComboFix log

JoeSee

Post #5June 24, 2010, 3:18 AM UTC

Looks good so far, I was able to get to MS and get updates again

Here is the Combofix log

Is there a thread that explains in non IT language what just went on here?

Thanks a ton!

ComboFix 10-06-23.02 - user 23/06/2010 22:21:24.1.1 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.2.1033.18.2008.892 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\user\g2mdlhlpx.exe
c:\users\user\GoToAssistDownloadHelper.exe
c:\windows\system32\st326146.dll

Infected copy of c:\windows\system32\drivers\kbdclass.sys was found and disinfected
Restored copy from - Kitty had a snack

.
((((((((((((((((((((((((( Files Created from 2010-05-24 to 2010-06-24 )))))))))))))))))))))))))))))))
.

2010-06-24 02:27 . 2010-06-24 02:28 ——– d—–w- c:\users\user\AppData\Local\temp
2010-06-24 02:27 . 2010-06-24 02:27 ——– d—–w- c:\users\Default\AppData\Local\temp
2010-06-23 01:56 . 2010-06-23 01:56 388096 —-a-r- c:\users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-23 00:47 . 2010-06-23 00:47 ——– d—–w- c:\program files\Trend Micro
2010-06-08 20:05 . 2010-06-08 20:08 ——– d—–w- c:\users\user\AppData\Local\Actify
2010-06-08 20:05 . 2010-06-08 20:08 ——– d—–w- c:\programdata\Actify
2010-06-08 20:05 . 2010-06-09 22:34 ——– d—–w- c:\program files\Actify
2010-06-08 20:05 . 2010-06-08 20:05 ——– d—–w- c:\program files\Common Files\Actify
2010-06-08 20:04 . 2010-06-08 20:04 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-24 00:55 . 2010-03-06 02:54 ——– d—–w- c:\users\user\AppData\Roaming\Nitro PDF
2010-06-22 18:21 . 2010-06-18 14:32 ——– d—–w- c:\users\user\AppData\Roaming\webex
2010-05-22 22:56 . 2010-01-29 19:04 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-05-13 12:39 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2010-05-13 12:35 . 2009-12-18 12:32 ——– d—–w- c:\programdata\Microsoft Help
2010-05-12 15:21 . 2009-12-18 14:46 221568 ——w- c:\windows\system32\MpSigStub.exe
2010-05-07 16:55 . 2010-05-07 16:55 255472 —-a-w- c:\users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
2010-04-29 19:39 . 2010-01-29 19:04 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 19:39 . 2010-01-29 19:04 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-04-25 17:05 . 2010-04-25 17:05 ——– d—–w- c:\program files\pdfsam
2010-04-18 14:59 . 2010-04-18 14:59 77824 —-a-w- c:\programdata\WebEx\WebEx\500\mticket.dll
2009-12-03 13:22 . 2009-04-11 19:01 8192 –sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"Google Update"="c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-02-06 135664]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-03-31 217088]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-31 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-31 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-31 154136]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2008-12-11 3563520]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-31 483420]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"VistaSp2"=hex(

:56,5a,bc,51,2a,a4,ca,01

R2 Norton Internet Security;Norton Internet Security;c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\aestsrv.exe [2009-03-31 81920]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 NitroDriverReadSpool;NitroPDFDriverCreatorReadSpool;c:\program files\Nitro PDF\Professional\NitroPDFDriverService.exe [2009-12-16 188736]
S2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2009-12-16 65856]
S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdg.sys [2009-01-08 51616]
S3 O2SDGRDR;O2SDGRDR;c:\windows\system32\DRIVERS\o2sdg.sys [2009-01-08 41760]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder

2010-06-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-838539575-901405792-2825079895-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-20 01:49]

2010-06-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-838539575-901405792-2825079895-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-20 01:49]

2010-06-24 c:\windows\Tasks\User_Feed_Synchronization-{9E4E03DC-1D3F-419D-B181-84371113E51D}.job
- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
IE: &ieSpell; Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling; - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: E&xport; to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-23 22:28
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
Completion time: 2010-06-23 22:31:28
ComboFix-quarantined-files.txt 2010-06-24 02:31

Pre-Run: 94,561,054,720 bytes free
Post-Run: 94,942,498,816 bytes free

- - End Of File - - 5FA0BDD0A124866782FA5A09D45B1F6F

RPMcMurphy

Post #6June 24, 2010, 3:42 AM UTC

JoeSee,

Great! There is no thread I can direct you to, but you had picked up a trojan and a rootkit that we are seeing a ton of lately. The rootkit patches a driver and causes the redirects and other issues you described.

We aren't quite done yet though, please run these next:

🖼Click to load external image (Posted Image) Open Notepad Go to Start> All Programs> Accessories> Notepad ( this will only work with Notepad ) and copy all the text inside the Codebox by highlighting it all and pressing CTRL C on your keyboard, then paste it into Notepad, make sure there is no space before and above DDS::

DDS::
uInternet Settings,ProxyServer = http=127.0.0.1:5555

Save this as CFScript to your desktop.

Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

[external image: Posted Image]

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply.

🖼Click to load external image (Posted Image) You have this program installed, Malwarebytes' Anti-Malware (MBAM). Please update it and run a scan.

Open MBAM

Click the Update tab
Click Check for Updates
If an update is found, it will download and install the latest version.
The program will close to update and reopen.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

🖼Click to load external image (Posted Image) Using Internet Explorer or Firefox, visit Kaspersky Online Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.

2. To optimize scanning time and produce a more sensible report for review:

Close any open programs
Turn off the real time scanner of any existing antivirus program while performing the online scan. Click HERE to see how to disable the most common antivirus programs.

3. Click Run at the Security prompt.

The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.

Once the update is complete, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, adware, dialers, and other riskware
- Archives
- E-mail databases
Click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
Click View report… at the bottom.
Click the Save report… button.

[external image: Posted Image]
Change the Files of type dropdown box to Text file (.txt) and name the file KasReport.txt to save the file to your desktop so that you may post it in your next reply

Please include the following in your next post:

ComboFix log
MBAM log

Kaspersky log

JoeSee

Post #7June 25, 2010, 2:32 AM UTC

OK, here is the latest set - thanks

•ComboFix log
•MBAM log
•Kaspersky log

ComboFix 10-06-23.05 - user 24/06/2010 18:10:57.2.1 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.2.1033.18.2008.1049 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\user\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\user\g2mdlhlpx.exe

.
((((((((((((((((((((((((( Files Created from 2010-05-24 to 2010-06-24 )))))))))))))))))))))))))))))))
.

2010-06-24 22:17 . 2010-06-24 22:19 ——– d—–w- c:\users\user\AppData\Local\temp
2010-06-24 22:17 . 2010-06-24 22:17 ——– d—–w- c:\users\Public\AppData\Local\temp
2010-06-24 22:17 . 2010-06-24 22:17 ——– d—–w- c:\users\Default\AppData\Local\temp
2010-06-24 02:50 . 2009-11-08 14:55 99176 —-a-w- c:\windows\system32\PresentationHostProxy.dll
2010-06-24 02:50 . 2009-11-08 14:55 49472 —-a-w- c:\windows\system32\netfxperf.dll
2010-06-24 02:50 . 2009-11-08 14:55 297808 —-a-w- c:\windows\system32\mscoree.dll
2010-06-24 02:50 . 2009-11-08 14:55 295264 —-a-w- c:\windows\system32\PresentationHost.exe
2010-06-24 02:50 . 2009-11-08 14:55 1130824 —-a-w- c:\windows\system32\dfshim.dll
2010-06-24 02:46 . 2010-06-24 02:46 ——– d—–w- c:\program files\MSXML 4.0
2010-06-24 02:43 . 2010-05-01 14:13 2037248 —-a-w- c:\windows\system32\win32k.sys
2010-06-23 01:56 . 2010-06-23 01:56 388096 —-a-r- c:\users\user\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-23 00:47 . 2010-06-23 00:47 ——– d—–w- c:\program files\Trend Micro
2010-06-08 20:05 . 2010-06-08 20:08 ——– d—–w- c:\users\user\AppData\Local\Actify
2010-06-08 20:05 . 2010-06-08 20:08 ——– d—–w- c:\programdata\Actify
2010-06-08 20:05 . 2010-06-09 22:34 ——– d—–w- c:\program files\Actify
2010-06-08 20:05 . 2010-06-08 20:05 ——– d—–w- c:\program files\Common Files\Actify
2010-06-08 20:04 . 2010-06-08 20:04 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-24 20:59 . 2010-03-06 02:54 ——– d—–w- c:\users\user\AppData\Roaming\Nitro PDF
2010-06-24 17:55 . 2010-06-18 14:32 ——– d—–w- c:\users\user\AppData\Roaming\webex
2010-06-24 16:55 . 2010-06-18 14:32 286720 —-a-w- c:\programdata\WebEx\WebEx\924\msess.dll
2010-06-24 16:55 . 2010-06-18 14:32 2315576 —-a-w- c:\programdata\WebEx\WebEx\924\webexmgr.dll
2010-06-24 16:55 . 2010-06-18 14:32 561152 —-a-w- c:\programdata\WebEx\WebEx\924\mvc.dll
2010-06-24 16:55 . 2010-06-18 14:32 2084864 —-a-w- c:\programdata\WebEx\WebEx\924\atpdmod.dll
2010-06-24 03:08 . 2009-12-03 12:15 ——– d—–w- c:\program files\Microsoft Silverlight
2010-06-24 03:07 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2010-06-24 03:03 . 2009-12-18 12:32 ——– d—–w- c:\programdata\Microsoft Help
2010-06-24 02:54 . 2009-12-03 12:13 ——– d—–w- c:\program files\Microsoft
2010-06-24 02:50 . 2009-12-18 12:35 ——– d—–w- c:\program files\Microsoft.NET
2010-05-26 17:06 . 2010-06-24 02:44 34304 —-a-w- c:\windows\system32\atmlib.dll
2010-05-26 14:47 . 2010-06-24 02:44 289792 —-a-w- c:\windows\system32\atmfd.dll
2010-05-22 22:56 . 2010-01-29 19:04 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-05-21 18:14 . 2009-12-18 14:46 221568 ——w- c:\windows\system32\MpSigStub.exe
2010-05-07 16:55 . 2010-05-07 16:55 255472 —-a-w- c:\users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
2010-05-04 05:59 . 2010-06-24 02:44 916480 —-a-w- c:\windows\system32\wininet.dll
2010-05-04 05:55 . 2010-06-24 02:44 71680 —-a-w- c:\windows\system32\iesetup.dll
2010-05-04 05:55 . 2010-06-24 02:44 109056 —-a-w- c:\windows\system32\iesysprep.dll
2010-05-04 04:31 . 2010-06-24 02:44 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2010-04-29 19:39 . 2010-01-29 19:04 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 19:39 . 2010-01-29 19:04 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-04-23 14:13 . 2010-06-24 02:44 2048 —-a-w- c:\windows\system32\tzres.dll
2010-04-18 14:59 . 2010-04-18 14:59 77824 —-a-w- c:\programdata\WebEx\WebEx\500\mticket.dll
2010-04-16 16:43 . 2010-06-24 02:44 28672 —-a-w- c:\windows\system32\Apphlpdm.dll
2010-04-16 16:43 . 2010-06-24 02:44 173056 —-a-w- c:\windows\AppPatch\AcXtrnal.dll
2010-04-16 16:43 . 2010-06-24 02:44 458752 —-a-w- c:\windows\AppPatch\AcSpecfc.dll
2010-04-16 16:43 . 2010-06-24 02:44 542720 —-a-w- c:\windows\AppPatch\AcLayers.dll
2010-04-16 16:43 . 2010-06-24 02:44 2159616 —-a-w- c:\windows\AppPatch\AcGenral.dll
2010-04-16 14:39 . 2010-06-24 02:44 4240384 —-a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2010-04-05 17:01 . 2010-06-24 02:44 67072 —-a-w- c:\windows\system32\asycfilt.dll
2009-12-03 13:22 . 2009-04-11 19:01 8192 –sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2010-06-24_02.28.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-06-24 02:50 . 2009-11-08 14:55 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.1.6001.18242_none_f290a8a118b9134c\PresentationHostProxy.dll
+ 2010-06-24 02:44 . 2010-03-30 11:59 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.22377_none_2cb6816f90457914\PresentationHostProxy.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 99176 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18236_none_2c57240a7708502f\PresentationHostProxy.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.22380_none_a7f79e1e62233116\ServiceMonikerSupport.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 17256 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18239_none_a7ad138948d4e9a6\ServiceMonikerSupport.dll
+ 2010-06-24 02:50 . 2009-11-08 14:55 11600 c:\windows\winsxs\x86_netfx-mscorees_dll_31bf3856ad364e35_6.1.6001.18242_none_e15f1c362a176592\mscorees.dll
+ 2010-06-24 02:50 . 2009-11-08 14:55 49472 c:\windows\winsxs\x86_netfx-fw_netfxperf_dll_31bf3856ad364e35_6.1.6001.18242_none_5c993a771a2304b1\netfxperf.dll
+ 2010-06-24 02:44 . 2010-03-25 11:54 30544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.22372_none_adfdfb72a63b9516\aspnet_wp.exe
+ 2010-06-24 02:44 . 2010-03-25 11:53 30544 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.18232_none_c4c7a10a8c97cfb4\aspnet_wp.exe
+ 2010-06-24 02:46 . 2010-06-24 02:46 91656 c:\windows\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.1.0_none_365945b9da656e4d\msxml4r.dll
+ 2010-06-24 02:53 . 2010-06-24 02:53 82432 c:\windows\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.0.0_none_3658456fda6654f6\msxml4r.dll
+ 2010-06-24 02:44 . 2010-04-05 17:14 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.22377_none_78f4d4e8cf978645\asycfilt.dll
+ 2010-06-24 02:44 . 2010-04-05 17:01 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6002.18236_none_78957783b65a5d60\asycfilt.dll
+ 2010-06-24 02:44 . 2010-04-05 16:28 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.22665_none_77173258d26ae282\asycfilt.dll
+ 2010-06-24 02:44 . 2010-04-05 16:07 67072 c:\windows\winsxs\x86_microsoft-windows-o..mation-asyncfilters_31bf3856ad364e35_6.0.6001.18454_none_76976349b9461049\asycfilt.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iesetup.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\iernonce.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 71680 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iesetup.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 55808 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\iernonce.dll
+ 2010-06-24 02:43 . 2010-04-16 00:06 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.23013_none_845a52015fda99b1\iecompat.dll
+ 2010-06-24 02:43 . 2010-04-15 04:20 41984 c:\windows\winsxs\x86_microsoft-windows-ie-iecompat_31bf3856ad364e35_8.0.6001.18922_none_83c50ec446c5c666\iecompat.dll
+ 2010-06-24 02:44 . 2010-05-04 04:58 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedssync.exe
+ 2010-06-24 02:44 . 2010-05-04 06:30 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.23019_none_dfbeba5109ad11a7\msfeedsbs.dll
+ 2010-06-24 02:44 . 2010-05-04 04:30 13312 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedssync.exe
+ 2010-06-24 02:44 . 2010-05-04 05:56 55296 c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18928_none_df297713f0983e5c\msfeedsbs.dll
+ 2010-06-24 02:44 . 2010-05-04 06:31 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\WininetPlugin.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\jsproxy.dll
+ 2010-06-24 02:44 . 2010-05-04 05:59 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\WininetPlugin.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 25600 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\jsproxy.dll
+ 2010-06-24 02:44 . 2010-04-23 14:23 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22391_none_17571fa5201e0c64\tzupd.exe
+ 2010-02-24 12:49 . 2010-01-23 09:26 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18248_none_170a947c06d19246\tzupd.exe
+ 2010-06-24 02:44 . 2010-04-23 14:02 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22677_none_158c4f5122e21768\tzupd.exe
+ 2010-02-24 12:49 . 2010-01-23 09:44 19456 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18464_none_150a7fae09bf1281\tzupd.exe
+ 2010-06-24 02:44 . 2010-05-26 17:10 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\lpk.dll
+ 2010-06-24 02:44 . 2010-05-26 17:09 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\fontsub.dll
+ 2010-06-24 02:44 . 2010-05-26 17:08 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\dciman32.dll
+ 2010-06-24 02:44 . 2010-05-26 17:08 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmlib.dll
+ 2009-12-03 13:30 . 2009-12-03 13:30 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\lpk.dll
+ 2010-01-29 18:52 . 2009-10-19 13:35 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\fontsub.dll
+ 2009-12-03 13:30 . 2009-12-03 13:30 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\dciman32.dll
+ 2010-06-24 02:44 . 2010-05-26 17:06 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmlib.dll
+ 2010-06-24 02:44 . 2010-05-26 16:20 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\lpk.dll
+ 2010-06-24 02:44 . 2010-05-26 16:19 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\fontsub.dll
+ 2010-06-24 02:44 . 2010-05-26 16:18 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\dciman32.dll
+ 2010-06-24 02:44 . 2010-05-26 16:17 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmlib.dll
+ 2008-01-21 02:33 . 2008-01-21 02:33 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\lpk.dll
+ 2010-01-29 18:52 . 2009-10-19 14:24 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\fontsub.dll
+ 2009-12-03 13:30 . 2009-12-03 13:30 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\dciman32.dll
+ 2010-06-24 02:44 . 2010-05-26 16:16 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmlib.dll
+ 2010-06-24 02:44 . 2010-04-16 17:14 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22384_none_841f73bf774481ad\Apphlpdm.dll
+ 2010-06-24 02:44 . 2010-04-16 16:43 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18244_none_83c116a45e06721f\Apphlpdm.dll
+ 2010-06-24 02:44 . 2010-04-16 16:08 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22672_none_8241d12f7a17ddea\Apphlpdm.dll
+ 2010-06-24 02:44 . 2010-04-16 16:05 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18461_none_81c2022060f30bb1\Apphlpdm.dll
+ 2010-06-24 02:44 . 2010-04-12 12:23 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6002.22380_none_a7
25653cfb4fe6ae\System.ServiceModel.WasHosting.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 32768 c:\windows\winsxs\msil_system.servicemodel.washosting_b77a5c561934e089_6.0.6002.18239_none_bd
ed3d82e1adee9e\System.ServiceModel.WasHosting.dll
+ 2008-01-21 01:58 . 2010-06-24 22:03 45060 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:02 . 2010-06-24 22:03 71836 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-12-18 12:29 . 2010-06-24 22:03 10222 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-838539575-901405792-2825079895-1000_UserData.bin
+ 2010-06-24 02:50 . 2009-11-08 14:55 11600 c:\windows\System32\MUI\0409\mscorees.dll
+ 2008-09-30 20:41 . 2008-09-30 20:41 91656 c:\windows\System32\msxml4r.dll
- 2010-03-31 12:26 . 2010-02-23 04:54 13312 c:\windows\System32\msfeedssync.exe
+ 2010-06-24 02:44 . 2010-05-04 04:30 13312 c:\windows\System32\msfeedssync.exe
- 2010-03-31 12:26 . 2010-02-23 06:34 55296 c:\windows\System32\msfeedsbs.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 55296 c:\windows\System32\msfeedsbs.dll
+ 2010-06-24 02:44 . 2010-05-04 05:59 64512 c:\windows\System32\migration\WininetPlugin.dll
- 2010-03-31 12:26 . 2010-02-23 06:39 64512 c:\windows\System32\migration\WininetPlugin.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 25600 c:\windows\System32\jsproxy.dll
- 2010-03-31 12:26 . 2010-02-23 06:34 25600 c:\windows\System32\jsproxy.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 55808 c:\windows\System32\iernonce.dll
- 2010-03-31 12:26 . 2010-02-23 06:33 55808 c:\windows\System32\iernonce.dll
- 2009-12-18 12:27 . 2010-06-24 02:19 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-18 12:27 . 2010-06-24 22:06 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-03-18 17:16 . 2010-03-18 17:16 87408 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsFormsIntegration.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 93024 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationTypes.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 35688 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationProvider.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 17784 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Windows.Presentation.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 58240 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Windows.Input.Manipulations.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 67912 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PenIMC.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 31576 c:\windows\Microsoft.NET\Framework\v4.0.30319\WMINet_Utils.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 44920 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.ApplicationServices.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 37240 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Channels.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 64352 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Numerics.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 45952 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.Thunk.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 51032 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Device.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 50552 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.DataSetExtensions.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 81784 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Configuration.Install.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 81800 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ComponentModel.DataAnnotations.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 39784 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.Contract.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 68952 c:\windows\Microsoft.NET\Framework\v4.0.30319\SMDiagnostics.dll
+ 2010-03-18 19:58 . 2010-03-18 19:58 96088 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUtility.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 78152 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17752 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 15192 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 15704 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 16728 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 19288 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18776 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 18264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 14168 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\SetupResources.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\SetupResources.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 42880 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelPerformanceCounters.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 13648 c:\windows\Microsoft.NET\Framework\v4.0.30319\SbsNclPerf.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 58192 c:\windows\Microsoft.NET\Framework\v4.0.30319\regtlibv12.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 32592 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 52040 c:\windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 21336 c:\windows\Microsoft.NET\Framework\v4.0.30319\normalization.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 27984 c:\windows\Microsoft.NET\Framework\v4.0.30319\MUI\0409\mscorsecr.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 40784 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorpe.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 20816 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreeis.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 62880 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 12128 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualC.Dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 97680 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 36168 c:\windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 78168 c:\windows\Microsoft.NET\Framework\v4.0.30319\ISymWrapper.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 58200 c:\windows\Microsoft.NET\Framework\v4.0.30319\InstallUtilLib.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 27992 c:\windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 42312 c:\windows\Microsoft.NET\Framework\v4.0.30319\fusion.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 35656 c:\windows\Microsoft.NET\Framework\v4.0.30319\dw20.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 11592 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 88904 c:\windows\Microsoft.NET\Framework\v4.0.30319\dfdll.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 31048 c:\windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 81248 c:\windows\Microsoft.NET\Framework\v4.0.30319\CustomMarshalers.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 44368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Culture.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 95048 c:\windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 29008 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 29528 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 29016 c:\windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 17240 c:\windows\Microsoft.NET\Framework\v4.0.30319\Accessibility.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 10064 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\CvtResUI.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 24400 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\alinkui.dll
- 2009-12-18 14:39 . 2009-02-18 18:38 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 17256 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-06-24 02:52 . 2010-06-24 02:52 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2009-12-18 12:36 . 2010-05-13 12:35 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2010-03-23 14:30 . 2010-06-24 03:01 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-06-24 02:46 . 2010-06-24 02:46 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2010-06-24 02:53 . 2010-06-24 02:53 32768 c:\windows\Installer\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}\icon.exe
+ 2010-06-24 03:30 . 2010-06-24 03:30 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\b56a80a51f412ce3832eddecb9bf1580\UIAutomationProvider.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\c0ed04db7c18a6c59eddfc18e40e0fb3\System.Windows.Presentation.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\089fd08b7e00981f59306855ea5065e0\System.Web.ApplicationServices.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\eeae22dcbdfe5fbe6ee7aa8810c8d330\System.ServiceModel.Channels.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\52895ca79afea8292b54f053322cff36\System.AddIn.Contract.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\8974f2d78277786a0b4e84f1127a75c0\Microsoft.VisualC.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\46c8b155e6fcd5696ffa15a67824ebab\Accessibility.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\bfee728d4ee25dc94a8d4b88d2acda57\WindowsLiveWriter.ni.exe
+ 2010-06-24 03:28 . 2010-06-24 03:28 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7394ac4f6c093bf8b17b673a4044d5e6\WindowsLive.Writer.Api.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\81ab082be2597d562533493d955b20fa\UIAutomationProvider.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8f17237b1a97a723837bede4c5b10085\System.Windows.Presentation.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\6b60acb027ae9b015ffc61dcba421bd3\System.Web.DynamicData.Design.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\e3da89cc15807bd5c9747b4ba394cd41\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\c57f58acdfc796bc888fcb6603715537\PresentationFontCache.ni.exe
+ 2010-06-24 03:28 . 2010-06-24 03:28 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\44ecfa244cf6aa4212e23ba22349a240\PresentationCFFRasterizer.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\3aa49e133664e428e319de2e6a008335\Microsoft.Vsa.ni.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2009-12-18 14:39 . 2009-02-18 18:38 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-24 02:44 . 2010-04-23 14:23 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.22391_none_17571fa5201e0c64\tzres.dll
+ 2010-06-24 02:44 . 2010-04-23 14:13 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6002.18248_none_170a947c06d19246\tzres.dll
+ 2010-06-24 02:44 . 2010-04-23 14:02 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.22677_none_158c4f5122e21768\tzres.dll
+ 2010-06-24 02:44 . 2010-04-23 13:55 2048 c:\windows\winsxs\x86_microsoft-windows-i..rnational-timezones_31bf3856ad364e35_6.0.6001.18464_none_150a7fae09bf1281\tzres.dll
+ 2010-06-24 02:44 . 2010-04-16 14:43 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22384_none_0e3fd22308cd9762\AcRes.dll
+ 2006-11-02 07:11 . 2006-11-02 07:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18244_none_0de17507ef8f87d4\AcRes.dll
+ 2010-06-24 02:44 . 2010-04-16 14:16 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22672_none_0c622f930ba0f39f\AcRes.dll
+ 2009-04-11 19:02 . 2009-04-11 19:02 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18461_none_0be26083f27c2166\AcRes.dll
- 2010-06-24 02:19 . 2010-06-24 02:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2010-06-24 22:01 . 2010-06-24 22:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-06-24 02:19 . 2010-06-24 02:19 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-06-24 22:01 . 2010-06-24 22:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.3082.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.3076.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.2070.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8024 c:\windows\Microsoft.NET\NETFXRepair.2052.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1055.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1053.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1049.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1046.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1045.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1044.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1043.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1042.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1041.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1040.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1038.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1037.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1036.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1035.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1033.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 9048 c:\windows\Microsoft.NET\NETFXRepair.1032.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1031.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1030.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1029.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8024 c:\windows\Microsoft.NET\NETFXRepair.1028.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8536 c:\windows\Microsoft.NET\NETFXRepair.1025.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8032 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelRegUI.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8040 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelInstallRC.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 8032 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelEvents.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\332105a018674f583e57c47e643a742d\dfsvc.ni.exe
+ 2010-06-24 02:50 . 2009-11-08 14:55 295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.1.6001.18242_none_37f9c545bf07d41a\PresentationHost.exe
+ 2010-06-24 02:44 . 2010-03-30 11:59 295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6002.22377_none_721f9e14369439e2\PresentationHost.exe
+ 2010-06-24 02:44 . 2010-04-05 12:19 295264 c:\windows\winsxs\x86_wpf-presentationhostexe_31bf3856ad364e35_6.0.6002.18236_none_71c040af1d5710fd\PresentationHost.exe
+ 2010-06-24 02:44 . 2010-03-30 11:59 130408 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6002.22377_none_7236d7fc36759770\PresentationHostDLL.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 129896 c:\windows\winsxs\x86_wpf-presentationhostdll_31bf3856ad364e35_6.0.6002.18236_none_71d77a971d386e8b\PresentationHostDLL.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.22380_none_f056fa033aa607
83\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 970752 c:\windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.0.6002.18239_none_071ed24921040f
73\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 442368 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6002.22380_none_0ebeb2ba5a6f811c\System.IdentityModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:20 438272 c:\windows\winsxs\x86_wcf-system.identitymodel_b03f5f7f11d50a3a_6.0.6002.18239_none_25868b0040cd890c\System.IdentityModel.dll
+ 2010-06-24 02:44 . 2010-03-25 11:54 436048 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6002.22372_none_1fb465ed51de1b9c\webengine.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 435024 c:\windows\winsxs\x86_netfx-web_engine_dll_b03f5f7f11d50a3a_6.0.6002.18232_none_367e0b85383a563a\webengine.dll
+ 2010-06-24 02:50 . 2009-11-08 14:55 297808 c:\windows\winsxs\x86_netfx-mscoree_dll_31bf3856ad364e35_6.1.6001.18242_none_7d658e19f5139de5\mscoree.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23019_none_481337e6dd0a172b\ieui.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 164352 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18928_none_477df4a9c3f543e0\ieui.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.23019_none_ff02e517e8e79415\iesysprep.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 109056 c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18928_none_fe6da1dacfd2c0ca\iesysprep.dll
+ 2010-06-24 02:44 . 2010-05-04 04:59 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.23019_none_a941806b8d645750\ie4uinit.exe
+ 2010-06-24 02:44 . 2010-05-04 04:30 173056 c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18928_none_a8ac3d2e744f8405\ie4uinit.exe
+ 2010-06-24 02:44 . 2010-05-04 06:31 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23019_none_2b1475a0bb6f3e25\sqmapi.dll
+ 2010-06-24 02:44 . 2010-05-04 05:58 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18928_none_2a7f3263a25a6ada\sqmapi.dll
+ 2010-06-24 02:44 . 2010-05-04 06:31 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.23019_none_1a973373430e2393\occache.dll
+ 2010-06-24 02:44 . 2010-05-04 05:58 206848 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18928_none_1a01f03629f95048\occache.dll
+ 2010-06-24 02:44 . 2010-05-04 06:32 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\iexplore.exe
+ 2010-06-24 02:44 . 2010-05-04 04:59 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.23019_none_12d2cb5048e98eab\ieUnatt.exe
+ 2010-06-24 02:44 . 2010-05-04 06:00 638232 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\iexplore.exe
+ 2010-06-24 02:44 . 2010-05-04 04:31 133632 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18928_none_123d88132fd4bb60\ieUnatt.exe
+ 2010-06-24 02:44 . 2010-05-04 06:30 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.23019_none_2afdfb3cc92410b5\IEShims.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 197632 c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18928_none_2a68b7ffb00f3d6a\IEShims.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.23019_none_739fafa6797baa47\ieproxy.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 247808 c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18928_none_730a6c696066d6fc\ieproxy.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.23019_none_4357559369617280\msfeeds.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 599040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18928_none_42c21256504c9f35\msfeeds.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.23019_none_1f15d8176ec16c09\iedvtool.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 743424 c:\windows\winsxs\x86_microsoft-windows-ie-devtools_31bf3856ad364e35_8.0.6001.18928_none_1e8094da55ac98be\iedvtool.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.23019_none_20344ff620f8e82a\iepeers.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 184320 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18928_none_1f9f0cb907e414df\iepeers.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.23019_none_57c137c08668408f\iedkcs32.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 387584 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18928_none_572bf4836d536d44\iedkcs32.dll
+ 2010-06-24 02:44 . 2010-05-04 06:31 919040 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.23019_none_e559bec4d0be1fc8\wininet.dll
+ 2010-06-24 02:44 . 2010-05-04 05:59 916480 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18928_none_e4c47b87b7a94c7d\wininet.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.23019_none_c43671ebab5db8a4\mstime.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 611840 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_8.0.6001.18928_none_c3a12eae9248e559\mstime.dll
+ 2010-06-24 02:44 . 2010-05-26 14:54 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22412_none_ac3a633770d08fc3\atmfd.dll
+ 2010-06-24 02:44 . 2010-05-26 14:47 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18262_none_ab7ab4ea57db7e87\atmfd.dll
+ 2010-06-24 02:44 . 2010-05-26 14:35 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22700_none_aa5cc0a773a3ec00\atmfd.dll
+ 2010-06-24 02:44 . 2010-05-26 14:25 289792 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18482_none_a97ea1445ac5641e\atmfd.dll
+ 2010-06-24 02:44 . 2010-04-16 17:14 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22384_none_0e43d34b08c9fcbe\AcXtrnal.dll
+ 2010-06-24 02:44 . 2010-04-16 17:14 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22384_none_0e43d34b08c9fcbe\AcLayers.dll
+ 2010-06-24 02:44 . 2010-04-16 16:43 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18244_none_0de5762fef8bed30\AcXtrnal.dll
+ 2010-06-24 02:44 . 2010-04-16 16:43 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18244_none_0de5762fef8bed30\AcLayers.dll
+ 2010-06-24 02:44 . 2010-04-16 16:08 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22672_none_0c6630bb0b9d58fb\AcXtrnal.dll
+ 2010-06-24 02:44 . 2010-04-16 16:08 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22672_none_0c6630bb0b9d58fb\AcLayers.dll
+ 2010-06-24 02:44 . 2010-04-16 16:05 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18461_none_0be661abf27886c2\AcXtrnal.dll
+ 2010-06-24 02:44 . 2010-04-16 16:05 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18461_none_0be661abf27886c2\AcLayers.dll
+ 2010-06-24 02:44 . 2010-04-16 17:14 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22384_none_0e42d30108cae367\AcSpecfc.dll
+ 2010-06-24 02:44 . 2010-04-16 16:43 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18244_none_0de475e5ef8cd3d9\AcSpecfc.dll
+ 2010-06-24 02:44 . 2010-04-16 16:08 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22672_none_0c6530710b9e3fa4\AcSpecfc.dll
+ 2010-06-24 02:44 . 2010-04-16 16:05 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18461_none_0be56161f2796d6b\AcSpecfc.dll
+ 2010-06-24 02:44 . 2010-03-04 12:53 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6002.22354_none_851a050be8358bb4\System.Security.dll
+ 2010-06-24 02:44 . 2010-03-04 12:53 258048 c:\windows\winsxs\msil_system.security_b03f5f7f11d50a3a_6.0.6002.18222_none_9be4d87dce90ac67\System.Security.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.22380_none_eb7c
4e35f9cf6d41\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 970752 c:\windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.0.6002.18239_none_0244
267be02d7531\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 970752 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.22380_none_
bb39189bd2286c0e\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 970752 c:\windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.0.6002.18239_none_
d200f0e1b88673fe\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 442368 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6002.22380_none_0670c1405dff
cd5a\System.IdentityModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:20 438272 c:\windows\winsxs\msil_system.identitymodel_b77a5c561934e089_6.0.6002.18239_none_1d389986445d
d54a\System.IdentityModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6002.22380_none_87a8a684c9f377a8\SMdiagnostics.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 110592 c:\windows\winsxs\msil_smdiagnostics_b77a5c561934e089_6.0.6002.18239_none_9e707ecab0517f98\SMdiagnostics.dll
+ 2009-12-18 17:17 . 2010-06-24 13:22 221156 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2006-11-02 10:33 . 2010-06-24 22:08 612100 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2010-06-24 22:08 109516 c:\windows\System32\perfc009.dat
+ 2010-06-24 02:44 . 2010-05-04 05:58 206848 c:\windows\System32\occache.dll
- 2010-03-31 12:26 . 2010-02-23 06:37 206848 c:\windows\System32\occache.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 771424 c:\windows\System32\msvcr100_clr0400.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 611840 c:\windows\System32\mstime.dll
- 2010-03-31 12:26 . 2010-02-23 06:35 611840 c:\windows\System32\mstime.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 599040 c:\windows\System32\msfeeds.dll
- 2010-03-31 12:26 . 2010-02-23 06:33 164352 c:\windows\System32\ieui.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 164352 c:\windows\System32\ieui.dll
- 2010-03-31 12:26 . 2010-02-23 06:33 184320 c:\windows\System32\iepeers.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 184320 c:\windows\System32\iepeers.dll
- 2010-03-31 12:26 . 2010-02-23 06:33 387584 c:\windows\System32\iedkcs32.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 387584 c:\windows\System32\iedkcs32.dll
- 2010-03-31 12:26 . 2010-02-23 04:55 173056 c:\windows\System32\ie4uinit.exe
+ 2010-06-24 02:44 . 2010-05-04 04:30 173056 c:\windows\System32\ie4uinit.exe
+ 2006-11-02 12:44 . 2010-06-24 03:09 370816 c:\windows\System32\FNTCACHE.DAT
- 2006-11-02 12:44 . 2010-04-29 15:47 370816 c:\windows\System32\FNTCACHE.DAT
- 2009-12-18 17:27 . 2010-06-24 01:27 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-12-18 17:27 . 2010-06-24 03:14 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-12-18 12:27 . 2010-06-24 02:19 114688 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-12-18 12:27 . 2010-06-24 22:06 114688 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2010-03-18 17:16 . 2010-03-18 17:16 114520 c:\windows\Microsoft.NET\NETFXRepair.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 915800 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpftxt_v0400.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 753504 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 350592 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationClientsideProviders.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 163168 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\UIAutomationClient.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 675672 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Speech.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 334688 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\System.Printing.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 581464 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\ReachFramework.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 832856 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationUI.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 801136 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 181096 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationHost_v0400.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 194424 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Royale.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 478576 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Luna.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 167288 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Classic.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 232304 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.Aero.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 807264 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NaturalLanguage6.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 138592 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xml.Linq.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 699224 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Xaml.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 857960 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Web.Services.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 269672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Transactions.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 113512 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceProcess.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 129912 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Routing.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 390008 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Discovery.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 505208 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.Activities.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 261472 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Security.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 122264 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 291184 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Remoting.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 349568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.DurableInstancing.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 231760 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Net.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 253280 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Messaging.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 134528 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Management.Instrumentation.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 378720 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 123736 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IO.Log.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 125816 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IdentityModel.Selectors.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 392552 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.IdentityModel.dll
+ 2010-03-18 04:51 . 2010-03-18 04:51 109568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.Wrapper.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 246128 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.EnterpriseServices.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 120152 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Dynamic.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 607064 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 182144 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.Protocols.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 395120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 285072 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.DirectoryServices.AccountManagement.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 829280 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Deployment.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 747360 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.SqlXml.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 436600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Services.Client.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 683872 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Linq.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 409448 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.configuration.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 210816 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ComponentModel.Composition.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 149848 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.AddIn.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 122248 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.DurableInstancing.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 525704 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.Core.Presentation.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 112976 c:\windows\Microsoft.NET\Framework\v4.0.30319\sysglobl.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 124240 c:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
+ 2009-08-31 10:44 . 2009-08-31 10:44 144416 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\sqmapi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 295248 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupUi.dll
+ 2010-03-18 20:16 . 2010-03-18 20:16 807256 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\SetupEngine.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 173920 c:\windows\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 121688 c:\windows\Microsoft.NET\Framework\v4.0.30319\PerfCounter.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 150856 c:\windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 130384 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 335184 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvc.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 110936 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsecimpl.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 372048 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 145752 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 413008 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 661352 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 349576 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Compatibility.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 170368 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Transactions.Bridge.Dtc.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 387960 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.Transactions.Bridge.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 746336 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 505184 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.CSharp.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 794464 c:\windows\Microsoft.NET\Framework\v4.0.30319\EventLogMessages.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 688472 c:\windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 129880 c:\windows\Microsoft.NET\Framework\v4.0.30319\CORPerfMonExt.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 105808 c:\windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 105288 c:\windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 139088 c:\windows\Microsoft.NET\Framework\v4.0.30319\AdoNetDiag.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 255304 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\vbc7ui.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 255896 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\Microsoft.VisualBasic.Activities.CompilerUI.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 182088 c:\windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 129896 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2009-12-18 14:41 . 2009-02-18 18:38 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2009-12-18 14:40 . 2009-02-18 18:38 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
- 2009-12-18 14:41 . 2009-03-30 04:42 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2009-12-18 14:39 . 2009-03-30 04:42 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-06-24 02:44 . 2010-03-04 12:53 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2010-06-24 02:46 . 2010-06-24 02:46 432640 c:\windows\Installer\b0351.msi
+ 2010-06-24 02:54 . 2010-06-24 02:54 552448 c:\windows\Installer\10fbd2.msi
+ 2010-06-24 02:53 . 2010-06-24 02:53 428544 c:\windows\Installer\10fbc1.msi
+ 2009-12-18 12:36 . 2010-06-24 03:03 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2009-12-18 12:36 . 2010-06-24 03:03 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2006-10-27 19:23 . 2006-10-27 19:23 347432 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WINWORD.EXE
+ 2006-10-27 19:04 . 2006-10-27 19:04 465200 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\POWERPNT.EXE
+ 2009-03-06 09:26 . 2009-03-06 09:26 770464 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\REGFORM.EXE
+ 2008-10-25 14:27 . 2008-10-25 14:27 177040 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IPOLK.DLL
+ 2010-06-24 03:33 . 2010-06-24 03:33 245760 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\bf56bd4e9996950950b4685dac7f2156\WindowsFormsIntegration.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 195584 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\bbd68c1c06eb762bedb74bc73dc9a414\UIAutomationTypes.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 481792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\00798a39f87603ae67392c44f85b1957\UIAutomationClient.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\0a5fb7acbda333f46ef269b56b063562\System.Xml.Linq.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 187904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\3a3e9feefb5fb9724cd7867a35d69cdf\System.Windows.Input.Manipulations.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 645632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\40ab9da3eafd6bd1cbc6695ba406975a\System.Transactions.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 220672 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\3f1613bcf5b9cf536359bfff7bd18a5a\System.ServiceProcess.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\82ed1ab8f0885159082e80a036ff644b\System.ServiceModel.Routing.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 721920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\0f2c177d8261d29f86d89095eef16727\System.Security.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 310272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\894d864ff8eeb97fad09797d33a06d83\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 758784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b095af4c06f82361e8be3ec0e6347cc3\System.Runtime.Remoting.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 144896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\be70c34efd115166a2710acac3346bfa\System.Numerics.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 651264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\6826a32db8001b220cdd0d6e58aa465a\System.Net.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 625152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\291408f3000e5c3cf1b37a19fe92805d\System.Messaging.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 392704 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\9d6d586577a11ea9a64a425ef3c71908\System.Management.Instrumentation.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 405504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\f7cf3d2a43d81edd5f92789f6f3ee35c\System.IO.Log.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 228352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\9959125c968b7f2c43c656e1393b35ad\System.IdentityModel.Selectors.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 230912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fd54d0f2f9e59c87b568b9abc23d7cdf\System.EnterpriseServices.Wrapper.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 784896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\fd54d0f2f9e59c87b568b9abc23d7cdf\System.EnterpriseServices.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 373248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\026f06d9cc11f8e4bce87765d35feee5\System.Dynamic.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 911872 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\ee2d12ef14e9b70fac2f6d27146f2fe5\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 461824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\6f3b1d1d489ab511340848400b89f056\System.DirectoryServices.Protocols.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 112128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\27cf40470d358fe4a57e502a8350353d\System.Device.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\4d3fc0529d8089c7c0d611f5dd452bba\System.Data.DataSetExtensions.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 973312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac2cd19f2159d48684e17cbdecfaa3b7\System.Configuration.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 145920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\95d48fd5985ea45686feb0bf3dd48965\System.Configuration.Install.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\ea21918644eb5bcc678bd72c4c7564a8\System.ComponentModel.Composition.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 193536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\d09724ed63bd50523934132c98f15fef\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 613888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\d8081c7946511948a128a77803f0985f\System.AddIn.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 402944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\04bf5714cef2ce3fc97d55c9843b36f0\System.Activities.DurableInstancing.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 316928 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\49e65c90ae6199360d5ec36ff8ed04d5\SMSvcHost.ni.exe
+ 2010-06-24 03:30 . 2010-06-24 03:30 142336 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\b420437eca1d1aec1a8bf23cc5173661\SMDiagnostics.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 450048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b4e58d1a3e0ee75b6b107585c92c68e8\PresentationFramework.Aero.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 327168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\6db66420e529cf49087d9809fc19d4b3\PresentationFramework.Royale.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 283648 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\340df2dd99f470883c9a7834a1533f8a\PresentationFramework.Classic.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\054df232cc5c718f35a9808007c053d1\PresentationFramework.Luna.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 302592 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\76127835433040338b1629d47321d87d\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 418304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\6a557c74c85034c1dd514949e7d2e159\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 193024 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\da19e7188e9253fd383e8149b960e102\CustomMarshalers.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\46299301e4aa9211f96e7686c14c1470\WsatConfig.ni.exe
+ 2010-06-24 03:28 . 2010-06-24 03:28 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\ebb6057a26795960b8b0c17f822e1448\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\eff67bb41104c6f66cdf645741c2767b\WindowsLive.Writer.SpellChecker.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dfdfd5b21e5a93d715f685a2d75a99be\WindowsLive.Writer.BlogClient.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dd1aef267c8c9a9c3fa2e95ef6aac22e\WindowsLive.Writer.FileDestinations.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d3c8caabbd9494cdfec776533495795f\WindowsLive.Writer.Interop.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cd4cc6f71ec8a26450b91eae473f16c0\WindowsLive.Writer.Instrumentation.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cd1e2b914904351e924db2db2c1032bd\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c41760cbc2fae3999131042f22f5c2df\WindowsLive.Writer.HtmlParser.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c20f7ed5491cd232f482c5283a0dbd47\WindowsLive.Writer.Mshtml.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9b8995c850bbea96f804647883bbb44e\WindowsLive.Writer.Passport.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\86cb34c7926487cfebc00eb4fd9a016c\WindowsLive.Writer.BrowserControl.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6ad9d894971a17ec7e6e2b7c6bf2ed5e\WindowsLive.Writer.Localization.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\59d1f1cc33e084a1c66eda568e4269aa\WindowsLive.Writer.Extensibility.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0aded4bb8b7da460018a2246be9c3192\WindowsLive.Writer.Controls.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\15ac81544a261e22c1691d212f266778\WindowsLive.Client.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\c62719ee0c2d35ca36bcccf37b60a4ad\WindowsFormsIntegration.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\89489f9a506497dadc57de54263e9ebe\UIAutomationClient.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\20608428d18ca5681cb1af1894733207\TaskScheduler.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\622598bd00035f69c52e29e5ca8b8050\System.Xml.Linq.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\cb5a8e2b3e7e4cd51836c3acb36b123d\System.Web.Routing.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d7a533d68e1dd6033cf47ca308c3705f\System.Web.RegularExpressions.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\10e8467404e4b6564ef22718c7db46f4\System.Web.Extensions.Design.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\53ff9779755cfee83ac6fd6411e2e00b\System.Web.Entity.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\6ff16cd390716f42051274d9413abaf8\System.Web.Entity.Design.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\315070f6f71e735e7068191754af4860\System.Web.DynamicData.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\7b116c427d7528fa1da76ec0d5eb003b\System.Web.Abstractions.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\6b7e54579cc1a225d045f90710e25bfe\System.Transactions.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\6ab74b6e4a68bf93e3b27263317f744d\System.ServiceProcess.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\16944bd9a01375d76431d74279723415\System.Security.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c98ba140a70ea6cb494dc75869845f6f\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4a2709dbba56d5df9d51d86e68af99ad\System.Runtime.Remoting.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\bb8b24798ce7f5fbe65b0eb1a8a11cc6\System.Net.ni.dll
+ 2010-06-24 03:18 . 2010-06-24 03:18 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\320e40e628ff5e04cdb1df518f7c6a6a\System.Messaging.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\65f4d9a8fc295689d68109d0099b356b\System.Management.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\d8d5ada35c3c63fe122727bc6f7ac705\System.Management.Instrumentation.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\f392a161be6c4df987d090dfa3138f29\System.IO.Log.ni.dll
+ 2010-06-24 03:18 . 2010-06-24 03:18 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\3666e4bfb1c842cb114b4e8ba8071a61\System.IdentityModel.Selectors.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5b0655cec8c06bb5fcf3870451b89515\System.EnterpriseServices.Wrapper.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5b0655cec8c06bb5fcf3870451b89515\System.EnterpriseServices.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b7d681010afba351800a16a14706e6ee\System.Drawing.Design.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c2496f8afdb090b244e415fc8d24fcc2\System.DirectoryServices.Protocols.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\22bc42bfc494f179da8e4dfbc58984ee\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e63f206e5fbc356c0c4f76279bdced39\System.Data.Services.Client.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\53b0dc0e577da5b7fd669ace52b185db\System.Data.Services.Design.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\46361a02659be347fa5950e1fa203975\System.Data.Entity.Design.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\6ecbcbf2c7de8474dcb1ee3a212b7ac7\System.Data.DataSetExtensions.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\415e665ca509b2ed73569278ad57f043\System.Configuration.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\e02f453d576a8815fa2fedb19a92b7a5\System.Configuration.Install.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\09c4ffff65698383d7f074ecd2d93e50\System.AddIn.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\c8eb0ce0e0951f8acd0366504511c121\SMSvcHost.ni.exe
+ 2010-06-24 03:17 . 2010-06-24 03:17 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\1e5f52924313bd9c21255a2046340df5\SMDiagnostics.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f0c9dddb08f44024a8e3b80d8d5cd728\ServiceModelReg.ni.exe
+ 2010-06-24 03:16 . 2010-06-24 03:16 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\af2c855fe34c856715fcbe4bd4e07cc1\PresentationFramework.Luna.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9906cc70a0106499a0fff7e06ac3087b\PresentationFramework.Classic.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\68c35c55c9651d3042ac41d23496e896\PresentationFramework.Aero.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5d3b3c41ed8eca789d37578f7a3cee28\PresentationFramework.Luna.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\5ccc082c1ae24fdf58a527c27c302bfe\PresentationFramework.Royale.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\433d990ff7f34012816d4af9c418b9f8\PresentationFramework.Royale.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2de8703db894217915906f081ac3c8b0\PresentationFramework.Aero.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\10cd9b83dc0b5ca57e45078e3264ae12\PresentationFramework.Classic.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\f1dbebefdc4fc2583381fc12091748d1\napsnap.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\066069d586b6d799c24f13ac0f533349\napinit.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\d63bc63c7ce10c2d82e275a44b560b28\MSBuild.ni.exe
+ 2010-06-24 03:28 . 2010-06-24 03:28 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\8fa845f6080de8f787a3682150da8a60\MMCFxCommon.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\0f87900100756069dcb3d66b7c2fe145\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\0676d3f49c8f8e709c42490b8e919b01\Microsoft.ManagementConsole.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\93be1ba0677b1e1f2ec83db1a9f10785\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\8cdbe5070af8739b840ca237acda0b06\Microsoft.Build.Utilities.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6010eb2c3d4b61dd6536cf3c36880d36\Microsoft.Build.Engine.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\ff701f624360bf1729bb3d032a536008\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\6189573ab0aebe759daf13fca9841bec\EventViewer.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\2aea4057ea6b121e350d2639e56290e6\ComSvcConfig.ni.exe
+ 2010-06-24 03:27 . 2010-06-24 03:27 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\3c164f3f7fd2d99e322680fd5d7af675\AspNetMMCExt.ni.dll
- 2009-12-18 14:39 . 2009-03-30 04:42 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-24 02:44 . 2010-03-04 12:53 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2009-12-18 14:41 . 2009-02-18 18:38 970752 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2010-06-24 02:44 . 2010-04-12 12:20 438272 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2009-12-18 14:40 . 2009-02-18 18:38 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-06-24 02:44 . 2010-03-31 13:03 1249280 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6002.22377_none_599877a75e3c7b28\WindowsBase.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 1249280 c:\windows\winsxs\x86_wpf-windowsbase_31bf3856ad364e35_6.0.6002.18236_none_59391a4244ff5243\WindowsBase.dll
+ 2010-06-24 02:44 . 2010-03-31 13:03 5279744 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6002.22377_none_70b1c6c96c6cc352\PresentationFramework.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 5279744 c:\windows\winsxs\x86_wpf-presentationframework_31bf3856ad364e35_6.0.6002.18236_none_70526964532f9a6d\PresentationFramework.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 5988352 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6002.22380_none_fe0f09ef0565c535\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 5967872 c:\windows\winsxs\x86_wcf-system.servicemodel_b03f5f7f11d50a3a_6.0.6002.18239_none_14d6e234ebc3cd25\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-03-25 11:54 5246976 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6002.22372_none_e03cd0a530762349\System.Web.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 5242880 c:\windows\winsxs\x86_system.web_b03f5f7f11d50a3a_6.0.6002.18232_none_f706763d16d25de7\System.Web.dll
+ 2010-06-24 02:44 . 2009-06-17 08:03 1736024 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6002.22377_none_ae5c7d02a66aa525\wpfgfx_v0300.dll
+ 2010-06-24 02:44 . 2010-03-31 13:02 4218880 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6002.22377_none_ae5c7d02a66aa525\PresentationCore.dll
+ 2009-12-18 14:42 . 2009-02-18 18:39 1737064 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6002.18236_none_adfd1f9d8d2d7c40\wpfgfx_v0300.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 4214784 c:\windows\winsxs\x86_presentationcore_31bf3856ad364e35_6.0.6002.18236_none_adfd1f9d8d2d7c40\PresentationCore.dll
+ 2010-06-24 02:50 . 2009-11-08 14:55 1130824 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.1.6001.18242_none_40858864fbe3e0ce\dfshim.dll
+ 2010-06-24 02:46 . 2010-06-24 02:46 1286152 c:\windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9870.0_none_b7e00e6c7b30b69b\msxml4.dll
+ 2010-06-24 02:53 . 2010-06-24 02:53 1245696 c:\windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9841.0_none_b7e10f227b2fceff\msxml4.dll
+ 2010-06-24 02:43 . 2010-05-01 14:26 2045440 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22396_none_bb08445bb10e43f4\win32k.sys
+ 2010-06-24 02:43 . 2010-05-01 14:13 2037248 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18253_none_baa6e66297d2e861\win32k.sys
+ 2010-06-24 02:43 . 2010-05-01 20:27 2036736 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22682_none_b928a137b3e36d83\win32k.sys
+ 2010-06-24 02:43 . 2010-05-01 13:53 2036224 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18468_none_b8baa41a9ab030ba\win32k.sys
+ 2010-06-24 02:44 . 2010-05-07 11:51 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22409_none_f50136d581b61b0e\OESpamFilter.dat
+ 2010-06-24 02:44 . 2010-05-07 11:50 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18260_none_f42db60268d141b4\OESpamFilter.dat
+ 2010-06-24 02:44 . 2010-05-07 12:29 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22697_none_f2b7732784da918e\OESpamFilter.dat
+ 2010-06-24 02:44 . 2010-05-07 11:50 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18479_none_f24574e26baaef69\OESpamFilter.dat
+ 2010-06-24 02:44 . 2010-05-04 06:30 1986048 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.23019_none_2b1475a0bb6f3e25\iertutil.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 1985536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18928_none_2a7f3263a25a6ada\iertutil.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 5953024 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.23019_none_f6b3dde3511488fe\mshtml.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 5950976 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18928_none_f61e9aa637ffb5b3\mshtml.dll
+ 2010-06-24 02:44 . 2010-05-04 06:31 1209856 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.23019_none_9853e32305b4f935\urlmon.dll
+ 2010-06-24 02:44 . 2010-05-04 05:59 1209344 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.18928_none_97be9fe5eca025ea\urlmon.dll
+ 2010-06-24 02:44 . 2010-04-16 14:54 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_441de907d7be2d10\GameUXLegacyGDFs.dll
+ 2010-06-24 02:44 . 2010-04-16 17:15 1696256 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_441de907d7be2d10\gameux.dll
+ 2010-06-24 02:44 . 2010-04-16 14:39 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_43bf8becbe801d82\GameUXLegacyGDFs.dll
+ 2010-02-24 12:49 . 2010-01-06 15:39 1696256 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_43bf8becbe801d82\gameux.dll
+ 2010-06-24 02:44 . 2010-04-16 14:26 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_42404677da91894d\GameUXLegacyGDFs.dll
+ 2010-06-24 02:44 . 2010-04-16 16:09 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_42404677da91894d\gameux.dll
+ 2010-06-24 02:44 . 2010-04-16 14:17 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_41c07768c16cb714\GameUXLegacyGDFs.dll
+ 2009-04-11 19:03 . 2009-04-11 19:03 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_41c07768c16cb714\gameux.dll
+ 2010-06-24 02:44 . 2010-04-16 17:14 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22384_none_0e41d2b708cbca10\AcGenral.dll
+ 2010-06-24 02:44 . 2010-04-16 16:43 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18244_none_0de3759bef8dba82\AcGenral.dll
+ 2010-06-24 02:44 . 2010-04-16 16:08 2157056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22672_none_0c6430270b9f264d\AcGenral.dll
+ 2010-06-24 02:44 . 2010-04-16 16:05 2153984 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18461_none_0be46117f27a5414\AcGenral.dll
+ 2010-06-24 02:44 . 2010-03-31 13:03 1249280 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6002.22377_none_994a55364619f35f\WindowsBase.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 1249280 c:\windows\winsxs\msil_windowsbase_31bf3856ad364e35_6.0.6002.18236_none_98eaf7d12cdcca7a\WindowsBase.dll
+ 2010-06-24 02:44 . 2010-03-19 13:46 3182592 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6002.22372_none_c3a4f0a375ea8be2\System.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 3182592 c:\windows\winsxs\msil_system_b77a5c561934e089_6.0.6002.18232_none_da6e963b5c46c680\System.dll
+ 2010-06-24 02:44 . 2010-04-12 12:22 5988352 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6002.22380_none_8e00a25ea496b
e7d\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 5967872 c:\windows\winsxs\msil_system.servicemodel_b77a5c561934e089_6.0.6002.18239_none_a4c87aa48af4c
66d\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:23 5988352 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6002.22380_none_557c24922
ca54584\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 5967872 c:\windows\winsxs\msil_system.servicemodel.ref_b77a5c561934e089_6.0.6002.18239_none_6c43fcd81
3034d74\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-03-31 13:03 5279744 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6002.22377_none_78e300c80a7
31721\PresentationFramework.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 5279744 c:\windows\winsxs\msil_presentationframework_31bf3856ad364e35_6.0.6002.18236_none_7883a362f13
5ee3c\PresentationFramework.dll
+ 2010-06-24 02:44 . 2010-05-04 05:59 1209344 c:\windows\System32\urlmon.dll
- 2010-03-31 12:26 . 2010-02-23 06:39 1209344 c:\windows\System32\urlmon.dll
+ 2006-11-02 10:22 . 2010-06-24 04:02 6291456 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2006-11-02 10:22 . 2010-06-09 00:17 6291456 c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-09-30 20:43 . 2008-09-30 20:43 1286152 c:\windows\System32\msxml4.dll
+ 2010-06-24 02:44 . 2010-05-04 05:56 5950976 c:\windows\System32\mshtml.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 1985536 c:\windows\System32\iertutil.dll
- 2010-03-31 12:26 . 2010-02-23 06:33 1985536 c:\windows\System32\iertutil.dll
- 2009-12-18 12:27 . 2010-06-24 02:19 1294336 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-12-18 12:27 . 2010-06-24 22:06 1294336 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2010-03-18 17:16 . 2010-03-18 17:16 1663320 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1303896 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WindowsBase.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 6346600 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationFramework.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 3545952 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationCore.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 2650464 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsLexicons0009.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 4881752 c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\NlsData0009.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 2199880 c:\windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 2207568 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.XML.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 4982120 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1711496 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.DataVisualization.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 6067048 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.ServiceModel.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1026936 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 3481928 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 4464480 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.Entity.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 2970968 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Data.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1339736 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1462648 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.Presentation.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1199968 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Activities.dll
+ 2010-03-18 20:26 . 2010-03-18 20:26 1163264 c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\netfx_core_x86.msi
+ 2010-03-18 17:16 . 2010-03-18 17:16 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1141592 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 2989456 c:\windows\Microsoft.NET\Framework\v4.0.30319\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2010-03-18 17:16 . 2010-03-18 17:16 1972552 c:\windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
+ 2010-03-18 17:16 . 2010-03-18 17:16 6730056 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2009-12-18 14:42 . 2009-03-30 04:42 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 3481928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 4982120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 5196112 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-06-24 02:51 . 2010-06-24 02:51 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2010-06-24 02:52 . 2010-06-24 02:52 1160192 c:\windows\Installer\b03d4.msi
+ 2010-04-24 21:05 . 2010-04-24 21:05 4199424 c:\windows\Installer\b03cd.msp
+ 2010-05-19 03:35 . 2010-05-19 03:35 5023744 c:\windows\Installer\b03b6.msp
+ 2010-04-24 21:10 . 2010-04-24 21:10 8486400 c:\windows\Installer\b0367.msp
+ 2010-04-24 21:08 . 2010-04-24 21:08 9129984 c:\windows\Installer\10fc5e.msp
+ 2010-03-24 22:54 . 2010-03-24 22:54 3126272 c:\windows\Installer\10fc24.msp
+ 2010-03-24 22:54 . 2010-03-24 22:54 2516992 c:\windows\Installer\10fc23.msp
+ 2010-04-24 21:07 . 2010-04-24 21:07 4667392 c:\windows\Installer\10fbf7.msp
+ 2010-06-24 02:56 . 2010-06-24 02:56 2317312 c:\windows\Installer\10fbe1.msi
+ 2009-12-18 12:36 . 2010-06-24 03:03 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
- 2009-12-18 12:36 . 2010-05-13 12:35 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-01-30 19:09 . 2010-05-13 12:34 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2010-01-30 19:09 . 2010-06-24 03:03 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2006-10-27 19:04 . 2006-10-27 19:04 7980848 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\PPCORE.DLL
+ 2006-10-27 19:10 . 2006-10-27 19:10 5281592 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\IPEDITOR.DLL
+ 2009-03-06 09:26 . 2009-03-06 09:26 5466488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IPDESIGN.DLL
+ 2008-11-04 05:40 . 2008-11-04 05:40 1442160 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\INFOPATH.EXE
+ 2010-06-24 03:11 . 2010-06-24 03:11 3779072 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\f1f3a74eb37b27b7d05b8ffa941f8473\WindowsBase.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 1055744 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\f307842a5d932b4c92a71a1b77d1148b\UIAutomationClientsideProviders.ni.dll
+ 2010-06-24 03:10 . 2010-06-24 03:10 9000960 c:\windows\assembly\NativeImages_v4.0.30319_32\System\161c6f80ad93b0505054d244f1c6243c\System.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 5571584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2d7c29ad77c15abfa6a8fe6d24840a91\System.Xml.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1776640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d85a3d6ed5bb77f5603e098cccf60bfa\System.Xaml.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 4496384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7775d84ce45d39ac5eede2ba5e966a8a\System.Windows.Forms.DataVisualization.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 1828352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\90550903efefcbf634ee236b6fde4d0a\System.Web.Services.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 1992192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\e59f0799f4351c001f2e4b72064df5de\System.Speech.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 1388032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\67c54ed5743b27d8e8570a7688de93ae\System.ServiceModel.Activities.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 1127424 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\589e9eded9e383f4b7dfa4c66aa5c9bf\System.ServiceModel.Discovery.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 2625024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\30ed505f7ea7d6139128d4a6d9981dc0\System.Runtime.Serialization.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1011200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\591cc2015a0165ede73d3e6770e0e7c2\System.Runtime.DurableInstancing.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1047040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\40125e5383c4af4d0b7a23e2d52b5112\System.Printing.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 1159168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\848c4005079e434e04096d683fab1ded\System.Management.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\81558b32b261e911f8f822f1de63fdca\System.IdentityModel.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 1651200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2fe09cc54a8390b20e380239db34228f\System.Drawing.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1151488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\9cf61683cbb57e80828013b2c9024a7e\System.DirectoryServices.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1872384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\0778748cd9700240f093adfc5dfc5750\System.Deployment.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 6754816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\c12e10c218be4be353975af6abb072d9\System.Data.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 2538496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\0da585d97fb80a097bf7cb4c5002c3ac\System.Data.SqlXml.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 1332736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\b5abc386410cb0b80710bf5b1ca511dc\System.Data.Services.Client.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 2499072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\73dd24232790e0e5c2649dde8e65516c\System.Data.Linq.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 7025664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\85693dfd9ba4905b0fd947fdb51446d5\System.Core.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 4103168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\1f1416d0bd44f4f4b7b447dd46100cb2\System.Activities.ni.dll
+ 2010-06-24 03:31 . 2010-06-24 03:31 3691520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\9a80ca1aff58bb8bd4ba68aedbb0b21d\System.Activities.Presentation.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:31 1506304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\c58f64b1cb8226be2d8d65c852dfe2e3\System.Activities.Core.Presentation.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 2842624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\ea622ab70f67eef23533a326f29c5ed2\ReachFramework.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\29a210cb0025eec8da18645b52d2e559\PresentationUI.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1167872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\f4e162e7a860c3577fbb3455fc1349a5\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1137664 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\d0694f0467545d1f779c687b3c39ded2\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1819648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\a571b1efa54d6a35b336fa5b5e624854\Microsoft.VisualBasic.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1079808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\1dc732b2fb25d70b83fa2cab112525f9\Microsoft.Transactions.Bridge.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 2441728 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\657c944537a05caa1b1f55cffb8aabb9\Microsoft.JScript.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 1612288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\597354cf9a5082f5ca1914732fab0892\Microsoft.CSharp.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d8a8bac81dfd0cd774f5d0e87b310cfb\WindowsLive.Writer.PostEditor.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d418788f937ee3418414e8ee8a149dab\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2010-06-24 03:27 . 2010-06-24 03:27 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c3e1076928a58aa9525a7f2045248630\WindowsLive.Writer.CoreServices.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\7f4e2ded203a366244d61ee0af84a2d3\WindowsBase.ni.dll
+ 2010-06-24 02:47 . 2010-06-24 02:47 3314176 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\717e7ed178c27d2b0763b7d223f97600\WindowsBase.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\aca227476f7f27feef0c990ed486386c\UIAutomationClientsideProviders.ni.dll
+ 2010-06-24 02:47 . 2010-06-24 02:47 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\b8e4a9556d3ddd49ec70aae0516c2007\System.ni.dll
+ 2010-06-24 02:50 . 2010-06-24 02:50 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f4e9769eaf42b9c2c0d795b1a99c3dbc\System.Xml.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\a7f5a83bf1409c24c1ca0c4b36f31fe1\System.WorkflowServices.ni.dll
+ 2010-06-24 02:50 . 2010-06-24 02:50 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\295244b67c7d3324ad422353821c3173\System.Workflow.Runtime.ni.dll
+ 2010-06-24 02:50 . 2010-06-24 02:50 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\a9f49dc15cd71c6d6242f7408dc45b31\System.Workflow.ComponentModel.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\ae0d9045838b9c38c5f227515e0daee6\System.Workflow.Activities.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\fc4e103b1922275f46b3ee6ee5bdffdc\System.Web.Services.ni.dll
+ 2010-06-24 03:30 . 2010-06-24 03:30 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\7285331fd503de286f1066faeb400904\System.Web.Mobile.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\06a991c6fb869c9d1876aff8a7a95249\System.Web.Extensions.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\b26b84cc16a235b2c6905b553e537c4b\System.Speech.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9bf852458a10e5e16435c608d1a178ef\System.ServiceModel.Web.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f38171cd5f65ed09262279ba7aea807c\System.Runtime.Serialization.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\3ea8b230f695348487d8726da572408c\System.Printing.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\9890cc2dbf0782bc3e49eb98104b3fdd\System.IdentityModel.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\64b4c60e1b2b417000db5d8c2828a53f\System.Drawing.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7e489876ae08f12a0e44839226440669\System.DirectoryServices.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\2e07a348f84f3e73de1537854169c533\System.Deployment.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\e9709fb8f0aca4844ebba0df031bd9ea\System.Data.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\aef9de36b989b281f4b969787d0d4905\System.Data.SqlXml.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\def6cce94384d42a84bac491ad2e811c\System.Data.Services.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\3d723245b4405bfb07980ad2a2ccb0c6\System.Data.OracleClient.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\f7f3a6e28ae31c867204b95b08ef9bf6\System.Data.Linq.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\7e118b7d07e035c91ed45db55cfc1c24\System.Data.Linq.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\c81daac68747cd86564db72297308176\System.Data.Entity.ni.dll
+ 2010-06-24 02:48 . 2010-06-24 02:48 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e08d3098da59e16df3882cbff6ae0a23\System.Core.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\7f277c0ce8a649d6f521c11f84a3962f\System.Core.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\6795a6e4b828658a0bfb7591d097dd54\ReachFramework.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\fa23d982183e2e94edee4755107354b7\PresentationUI.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\285b5021c0cde2883234e8e72d4ac041\PresentationBuildTasks.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\0ec562d5cb422abb1565423db64696a8\Narrator.ni.exe
+ 2010-06-24 03:28 . 2010-06-24 03:28 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\36b5c53f1d04137400dce3de405e75c8\MMCEx.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\a4dedfaf9a0d4e721153171b5437999d\MIGUIControls.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\848ebb638e1b40c18a11029aa79104f0\Microsoft.VisualBasic.ni.dll
+ 2010-06-24 03:18 . 2010-06-24 03:18 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\e93b5b375c1a6d54349800540a2f5f43\Microsoft.Transactions.Bridge.ni.dll
+ 2010-06-24 03:29 . 2010-06-24 03:29 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\87f1933f94b406f081cbcc6b7cd76d2a\Microsoft.JScript.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\319a441331da1e11e9b1db6618d3c2b7\Microsoft.Ink.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\44105c2ae30008c7caace925f6d1db0b\Microsoft.Build.Tasks.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\113b44cde39b250de53de33f94fd9027\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-06-24 03:28 . 2010-06-24 03:28 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9376bf0847738f4983bc82ebfc9e9a88\Microsoft.Build.Engine.ni.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 1249280 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-06-24 02:44 . 2010-04-12 12:21 5967872 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 5279744 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2009-12-18 14:42 . 2009-03-30 04:42 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-24 02:44 . 2010-03-25 11:53 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-06-24 02:44 . 2010-04-05 12:19 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2009-12-18 14:42 . 2009-02-18 18:39 4214784 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-06-24 02:44 . 2010-05-04 06:30 11078144 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.23019_none_481337e6dd0a172b\ieframe.dll
+ 2010-06-24 02:44 . 2010-05-04 05:55 11076096 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18928_none_477df4a9c3f543e0\ieframe.dll
+ 2006-11-02 10:24 . 2010-05-28 19:37 32472008 c:\windows\System32\mrt.exe
+ 2010-06-24 02:44 . 2010-05-04 05:55 11076096 c:\windows\System32\ieframe.dll
+ 2010-04-24 21:07 . 2010-04-24 21:07 10118144 c:\windows\Installer\b038f.msp
+ 2010-04-24 21:09 . 2010-04-24 21:09 11750912 c:\windows\Installer\10fc85.msp
+ 2010-06-24 03:00 . 2010-06-24 03:00 21310976 c:\windows\Installer\10fc48.msp
+ 2010-05-24 04:06 . 2010-05-24 04:06 12888576 c:\windows\Installer\10fc3e.msp
+ 2006-10-27 19:23 . 2006-10-27 19:23 17483560 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.4518\WWLIB.DLL
+ 2010-06-24 03:12 . 2010-06-24 03:12 13006336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f3cdd09fc0acc85c7febbd2e2ef9c4e5\System.Windows.Forms.ni.dll
+ 2010-06-24 03:33 . 2010-06-24 03:33 17919488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\40f4f298c3c655b834c73b5046a9cd0b\System.ServiceModel.ni.dll
+ 2010-06-24 03:32 . 2010-06-24 03:32 13273600 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\7afa32d3d9ab340abd33e960a849685c\System.Data.Entity.ni.dll
+ 2010-06-24 03:12 . 2010-06-24 03:12 17629184 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\8357ade60159c25ee88db0aab8686e6d\PresentationFramework.ni.dll
+ 2010-06-24 03:11 . 2010-06-24 03:11 11057664 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7a1eeb425f9318f432afead4b2da965a\PresentationCore.ni.dll
+ 2010-06-24 03:10 . 2010-06-24 03:10 14415872 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\4ff1f12a08d455f195ba996fe77497c6\mscorlib.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a7440b520bb4f5151098d129a877e442\System.Windows.Forms.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9c6fe9d44d22834993e9aa23cc9dc272\System.Windows.Forms.ni.dll
+ 2010-06-24 03:17 . 2010-06-24 03:17 11801088 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\cbca3ed989b8fc96e76f14602ad9c424\System.Web.ni.dll
+ 2010-06-24 03:18 . 2010-06-24 03:18 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\52cbaee4e94489731096be5ecc320958\System.ServiceModel.ni.dll
+ 2010-06-24 02:49 . 2010-06-24 02:49 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\72fac53d8beaf555ea00172a5db70226\System.Design.ni.dll
+ 2010-06-24 02:47 . 2010-06-24 02:48 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\576df1026a947a0cdb2882e7d1270398\PresentationFramework.ni.dll
+ 2010-06-24 03:16 . 2010-06-24 03:16 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0832f9155d800cb802e70409447c1128\PresentationFramework.ni.dll
+ 2010-06-24 03:13 . 2010-06-24 03:13 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\d786572e9e7270cbf3604f4a34d9244e\PresentationCore.ni.dll
+ 2010-06-24 02:47 . 2010-06-24 02:47 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\117ad7def1268317d5d274c2da25cbaf\PresentationCore.ni.dll
+ 2009-12-03 11:58 . 2010-06-24 03:02 272777677 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"Google Update"="c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-02-06 135664]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-03-31 217088]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-31 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-31 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-31 154136]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2008-12-11 3563520]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-31 483420]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"VistaSp2"=hex(

:56,5a,bc,51,2a,a4,ca,01

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 Norton Internet Security;Norton Internet Security;c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_ec3a90dd\aestsrv.exe [2009-03-31 81920]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
S2 NitroDriverReadSpool;NitroPDFDriverCreatorReadSpool;c:\program files\Nitro PDF\Professional\NitroPDFDriverService.exe [2009-12-16 188736]
S2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2009-12-16 65856]
S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdg.sys [2009-01-08 51616]
S3 O2SDGRDR;O2SDGRDR;c:\windows\system32\DRIVERS\o2sdg.sys [2009-01-08 41760]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder

2010-06-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-838539575-901405792-2825079895-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-20 01:49]

2010-06-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-838539575-901405792-2825079895-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-20 01:49]

2010-06-24 c:\windows\Tasks\User_Feed_Synchronization-{9E4E03DC-1D3F-419D-B181-84371113E51D}.job
- c:\windows\system32\msfeedssync.exe [2010-06-24 04:30]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride =
IE: &ieSpell; Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling; - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: E&xport; to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-24 18:18
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Norton Internet Security]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files\Norton Internet Security\Engine\16.0.0.125\diMaster.dll\" /prefetch:1"
.
Completion time: 2010-06-24 18:22:38
ComboFix-quarantined-files.txt 2010-06-24 22:22
ComboFix2.txt 2010-06-24 02:31

Pre-Run: 94,107,267,072 bytes free
Post-Run: 93,815,209,984 bytes free

- - End Of File - - 99875EA8707A1D731C9675CC951D9095

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4235

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18928

24/06/2010 7:04:02 PM
mbam-log-2010-06-24 (19-04-02).txt

Scan type: Quick scan
Objects scanned: 128539
Time elapsed: 5 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

——————————————————————————–
KASPERSKY ONLINE SCANNER 7.0: scan report
Thursday, June 24, 2010
Operating system: Microsoft Windows Vista Home Basic Edition, 32-bit Service Pack 2 (build 6002)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Thursday, June 24, 2010 15:01:27
Records in database: 4308930
——————————————————————————–

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Objects scanned: 121105
Threats found: 2
Infected objects found: 2
Suspicious objects found: 0
Scan duration: 01:37:10

File name / Threat / Threats count
C:\Qoobox\Quarantine\C\Windows\system32\Drivers\kbdclass.sys.vir Infected: Rootkit.Win32.TDSS.ap 1
C:\Users\user\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\184340f3-78a9320f Infected: Exploit.Java.Agent.f 1

Selected area has been scanned.

RPMcMurphy

Post #8June 25, 2010, 12:36 PM UTC

Hi JoeSee,

Your logs look good! We just need to get rid of one bad file, then do some important updating and cleanup:

Click Start > Run or Press Windows Key + R and copy/paste the following single-line command into the Run box and click OK:

cmd /c del /f/a/q "C:\Users\user\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\184340f3-78a9320f"

🖼Click to load external image (Posted Image) Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Download the latest version of Java Runtime Environment (JRE) 6 and save it to your desktop.
Scroll down to where it says "Java SE Runtime Environment (JRE) 6 Update 20. The Java SE Runtime Environment (JRE) allows end-users to run Java applications."
Click the "Download" button to the right.
Select the Windows platform from the dropdown menu.
Read the License Agreement and then check the box that says: " I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue.The page will refresh.
Click on the link to download Windows Offline Installation and save the file to your desktop.
Close any programs you may have running - especially your web browser.
Now go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java version.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u20-windows-i586-p.exe to install the newest version.
After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH Checked
  Applications and AppletsTrace and Log Files
Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Temporary Files Window
Click OK to leave the Java Control Panel.

🖼Click to load external image (Posted Image) Uninstall ComboFix

Press the Windows key + R on your keyboard or click Start -> Run. Copy and past the following text into the run box that opens and press OK:
Combofix /Uninstall

🖼Click to load external image (Posted Image)

🖼Click to load external image (Posted Image) Download TFC to your desktop

Close any open windows.
Double click the TFC icon to run the program
TFC will close all open programs itself in order to run,
Click the Start button to begin the process.
Allow TFC to run uninterrupted.
The program should not take long to finish it's job
Once its finished it should automatically reboot your machine,
if it doesn't, manually reboot to ensure a complete clean

🖼Click to load external image (Posted Image) Now to remove most of the tools that we have used in fixing your machine:

Make sure you have an Internet Connection.
Download OTC to your desktop and run it
A list of tool components used in the cleanup of malware will be downloaded.
If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
Click Yes to begin the cleanup process and remove these components, including this application.
You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.
Manually delete any remaining logs or tools from our fixes

🖼Click to load external image (Posted Image) Finally, I'd like to make a couple of suggestions to help you stay clean in the future:

Restart any anti-malware programs that we disabled while we were cleaning your machine.
Keep your antivirus application current and updated. Also, hang on to MBAM. Scan with them at least weekly.
Consider running in a limited user account. See this post for more information.
Please carefully review the information in our Security - Best Practices and Prevention forum located HERE

Please post once more so I know you are all set and I can close this thread. Good luck and stay safe!

JoeSee

Post #9June 26, 2010, 1:06 AM UTC

OK, thanks all is completed, you can close this thread I am looking for a PayPal link the very next thing - thanks a bunch!

RPMcMurphy

Post #10June 26, 2010, 1:59 AM UTC

You're very welcome, JoeSee. Take care.

Here is the link

RPMcMurphy

Post #11June 26, 2010, 2:03 AM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Google Redirect, Can't get to Windows Update

✨ Ask AI

Ask AI