What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

becoolsearch / basic-search.net virus

19 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
ARGHHH!!!! *pulling hair out*

Shortly after booting up this morning my machine got hit, and hit hard, by one of those bullsh!t 'XP security center' viruses. It seems to have a tight grip on the machine already. I don't understand the cause of the infection as I am hadn't done anything but open my browser to read email and the news this morning. Can't even open the browser now. I'm running McAfee with all current updates.

I'm posting this from a different machine.

This is a screenshot of my desktop….

[external image: Posted Image]

I can't frigging believe this. right after cleaning up that last issue now this. I haven't done anything that could even remotely be considered risky.
Please help!
:wall:
Post #17
just tried running mbam and it won't run. even tried reinstalling it and it won't respond. each time i try it seems to wake the "XP Sec Center 2012" bullsh!t up and it starts throwing fake warnings on my screen. i have gotten IE to launch after it initially failing to. i will be around today to work on this, but will be out in the mountains all weekend. i have a jump drive here if i need to dl anything on this computer to install on the affected machine. i just shut down the affected machine. i considered restarting in safe mode and running mbam but thought i should wait for your guidance. please help me oh glorious noodletech. your wisdom is desperately needed.
Post #18
Hi SuMMiT,

Yikes! The rogue security programs try to block any application from running, hence MBAM not launching. We'll use safe mode as a last resort. Let's clean this nasty up.

Print out these instructions as we may need to close every window that is open later in the fix.


It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in this guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.

Do not reboot your computer after running rkill as the malware programs will start again.

Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 5 different versions.  If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.
  • rkill.exe
  • rkill.com
  • rkill.scr
  • WiNlOgOn.exe
  • uSeRiNiT.exe

Do not reboot your computer after running rkill as the malware programs will start again.

===================================================

Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.

Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

===================================================

Please run Malwarebytes' Anti-Malware.
  • Click the Update tab, then click Check for Updates.
  • If an update is found, it will download and install the latest version.
  • Next, click Scanner, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Post #19 last edited
was away backpacking all weekend. didn't have to think about the friggin computer for 2 whole days. am about to begin the steps you laid out above. thx.
Post #20
Alrighty. Looks like everything did what it was supposed to. Nice little assortment of utilities there. rkill killed the process 1st try. exehelper ran fine. mbam found 5 infections; 1 file, 4 registry entries. mbam wants me to reboot to complete the removal process but i have not yet done so. pretty sure i can now but just wanted to make sure that it was now safe to since you asked me not to after running rkill. here's the logs: exeHelper by Raktor Build 20100414 Run at 09:51:49 on 08/01/11 Now searching… Checking for numerical processes… Removing HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\957744844 Deleting file C:\Documents and Settings\jzipkin\Local Settings\Application Data\ptx.exe Checking for sysguard processes… Checking for bad processes… Checking for bad files… Checking for bad registry entries… Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values… Resetting policies… –Finished– Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Database version: 7344 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 8/1/2011 10:12:03 AM mbam-log-2011-08-01 (10-12-03).txt Scan type: Quick scan Objects scanned: 278462 Time elapsed: 7 minute(s), 25 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 4 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Documents and Settings\jzipkin\Local Settings\Application Data\ptx.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: c:\documents and settings\jzipkin\local settings\temporary internet files\Content.IE5\1ENYWWYC\e296dhd[1].png (Malware.Gen) -> Quarantined and deleted successfully.
Post #21
Hi SuMMiT,

Yes, please reboot. Then let's give ComboFix a run.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image] 

  • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

  • Click on Yes, to continue scanning for malware.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
Post #22
here ya go:

ComboFix 11-08-01.02 - jzipkin 08/01/2011 13:58:40.4.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3572.2941 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: McAfee® Security-as-a-Service Anti-virus *Disabled/Updated* {8C354827-2F54-4E28-90DC-AD391E77808C}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\JZipkin\Local Settings\Application Data\aykf.exe
c:\documents and settings\JZipkin\Local Settings\Application Data\dpqh.exe
c:\documents and settings\JZipkin\Local Settings\Application Data\rquy.exe
c:\documents and settings\JZipkin\Local Settings\Application Data\sock.exe
c:\windows\Temp\tmp3.tmp
.
.
((((((((((((((((((((((((( Files Created from 2011-07-01 to 2011-08-01 )))))))))))))))))))))))))))))))
.
.
2011-07-29 13:26 . 2011-07-29 13:26 0 —-a-w- c:\documents and settings\All Users\Application Data\laqu.exe
2011-07-29 13:26 . 2011-07-29 13:26 0 —-a-w- c:\documents and settings\All Users\Application Data\fycl.exe
2011-07-29 13:26 . 2011-07-29 13:26 0 —-a-w- c:\documents and settings\All Users\Application Data\chxf.exe
2011-07-29 13:26 . 2011-07-29 13:26 0 —-a-w- c:\documents and settings\All Users\Application Data\bptl.exe
2011-07-28 17:03 . 2011-07-28 17:03 ——– d—–w- c:\documents and settings\JZipkin\Application Data\Avery
2011-07-28 17:00 . 2011-07-28 17:00 ——– d—–w- c:\program files\Avery Dennison
2011-07-28 17:00 . 2011-07-28 17:00 ——– d—–w- c:\documents and settings\All Users\Application Data\Avery
2011-07-27 05:11 . 2011-07-27 05:11 ——– d—–w- c:\program files\ESET
2011-07-12 05:18 . 2011-07-12 05:20 ——– d—–w- c:\program files\Free Internet Window Washer
2011-07-12 03:55 . 2011-07-12 03:55 ——– d—–w- c:\documents and settings\JZipkin\Application Data\Malwarebytes
2011-07-12 03:54 . 2011-07-06 23:52 41272 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-12 03:54 . 2011-07-12 03:54 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-07-12 03:54 . 2011-07-06 23:52 22712 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-07-12 03:54 . 2011-08-01 13:53 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-07-08 17:09 . 2011-07-08 17:09 ——– d—–w- c:\documents and settings\JZipkin\Local Settings\Application Data\Trimble Access Installation Manager
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-01 17:26 . 2010-07-26 18:14 1994 –sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2011-08-01 17:24 . 2010-07-23 18:20 0 —-a-w- c:\documents and settings\JZipkin\Local Settings\Application Data\WavXMapDrive.bat
2011-06-29 15:23 . 2006-12-24 04:11 348160 —-a-w- c:\windows\system32\msvcr71.dll
2011-06-29 15:23 . 2006-12-24 04:11 499712 —-a-w- c:\windows\system32\msvcp71.dll
2011-06-29 15:20 . 2011-06-29 15:20 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{022F2F51-CDDA-4873-8A29-72C66C808A3F}"
[HKEY_CLASSES_ROOT\CLSID\{022F2F51-CDDA-4873-8A29-72C66C808A3F}]
2009-11-07 05:07 297808 ——w- c:\windows\system32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{661963C1-99A1-44e7-A671-1CF3768AE9D4}"
[HKEY_CLASSES_ROOT\CLSID\{661963C1-99A1-44e7-A671-1CF3768AE9D4}]
2009-11-07 05:07 297808 ——w- c:\windows\system32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2010-02-17 278528]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2010-04-05 495708]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2010-04-05 737280]
"nwiz"="nwiz.exe" [2009-12-15 1657448]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-12-15 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-12-15 13770752]
"NVHotkey"="nvHotkey.dll" [2009-12-15 86016]
"OA001Mon"="c:\windows\OA001Mon.exe" [2010-01-28 24576]
"IAStorIcon"="c:\program files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"ChangeTPMAuth"="c:\program files\Wave Systems Corp\Common\ChangeTPMAuth.exe" [2008-05-30 180224]
"WavXMgr"="c:\program files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe" [2008-05-14 105472]
"SecureUpgrade"="c:\program files\Wave Systems Corp\SecureUpgrade.exe" [2008-06-24 243000]
"EmbassySecurityCheck"="c:\program files\Wave Systems Corp\EMBASSY Security Setup\EMBASSYSecurityCheck.exe" [2008-06-24 79160]
"DellControlPoint"="c:\program files\Dell\Dell ControlPoint\Dell.ControlPoint.exe" [2008-08-18 598016]
"DCPstrApp"="c:\program files\Dell\Dell ControlPoint\Security Manager\SecurityDeviceInfoSetRegistryString.exe" [2008-08-04 6656]
"DellConnectionManager"="c:\program files\Dell\Dell ControlPoint\Connection Manager\Dell.UCM.exe" [2008-10-01 1454080]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\DesktopUI\XTray.exe" [2011-01-25 476480]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-06-26 1311312]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Act.Outlook.Service"="c:\program files\ACT\Act for Windows\Act.Outlook.Service.exe" [2009-02-24 28672]
"Act! Preloader"="c:\program files\ACT\Act for Windows\ActSage.exe" [2009-02-24 393216]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-01-31 38840]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"YMailAdvisor"="c:\program files\Yahoo!\Common\YMailAdvisor.exe" [2009-05-08 174424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143360]
"Dell Webcam Central"="c:\program files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" [2008-10-17 442536]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-06-29 273544]
.
c:\documents and settings\McAfeeMVSUser\Start Menu\Programs\Startup\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [N/A]
.
c:\documents and settings\ataylor.WAYPOINT.000\Start Menu\Programs\Startup\
Logitech . Product Registration.lnk - c:\program files\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-8-15 604776]
Dell ControlPoint System Manager.lnk - c:\program files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe [2008-11-11 950048]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-05-06 09:29 64592 —-a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\McAfee\\Managed VirusScan\\Agent\\myAgtSvc.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\ACT\\Act for Windows\\ActSage.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [8/12/2010 2:55 PM 88544]
R2 ASFAgent;ASF Agent;c:\program files\Intel\ASF Agent\ASFAgent.exe [4/19/2007 6:56 AM 133968]
R2 buttonsvc32;Dell ControlPoint Button Service;c:\program files\Dell\Dell ControlPoint\DCPButtonSvc.exe [9/4/2008 6:28 PM 406808]
R2 Credential Vault Host Control Service;Credential Vault Host Control Service;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [11/11/2008 5:35 PM 808296]
R2 Credential Vault Host Storage;Credential Vault Host Storage;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [11/11/2008 5:35 PM 20840]
R2 dcpsysmgrsvc;Dell ControlPoint System Manager;c:\program files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe [11/11/2008 4:00 PM 451872]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [7/22/2010 1:13 PM 13336]
R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [7/26/2010 11:19 AM 10448]
R2 McAfee SiteAdvisor Enterprise Service;McAfee SiteAdvisor Enterprise Service;c:\program files\McAfee\SiteAdvisor Enterprise\McSACore.exe [10/15/2010 3:44 PM 324928]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [11/16/2010 10:37 AM 145936]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [12/10/2010 6:29 PM 29293408]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe [7/22/2010 2:25 PM 291064]
R2 RumorServer;McAfee Peer Distribution Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe [7/22/2010 2:25 PM 291064]
R2 SMManager;Smith Micro Connection Manager Service;c:\program files\Dell\Dell ControlPoint\Connection Manager\SMManager.exe [10/1/2008 5:28 AM 90112]
R2 XobniService;XobniService;c:\program files\Xobni\XobniService.exe [5/20/2010 1:46 PM 55016]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [7/21/2010 5:25 PM 113664]
R3 CCIDFILTER;Broadcom Smart Card Reader Filter Driver;c:\windows\system32\drivers\ccidflt.sys [7/22/2010 1:11 PM 12840]
R3 cvusbdrv;Broadcom USH CV;c:\windows\system32\drivers\cvusbdrv.sys [7/21/2010 5:27 PM 32808]
R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y5132.sys [7/21/2010 5:25 PM 240344]
R3 OA001Afx;Provides a software interface to control audio effects of OA001 camera.;c:\windows\system32\drivers\OA001Afx.sys [7/21/2010 5:25 PM 134144]
R3 OA001Ufd;Creative Camera OA001 Upper Filter Driver;c:\windows\system32\drivers\OA001Ufd.sys [7/21/2010 5:25 PM 133632]
R3 OA001Vid;Creative Camera OA001 Function Driver;c:\windows\system32\drivers\OA001Vid.sys [7/21/2010 5:25 PM 281472]
S2 ACT! Scheduler;ACT! Scheduler;c:\program files\ACT\Act for Windows\Act.Scheduler.exe [2/24/2009 2:08 PM 81920]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/26/2010 11:43 AM 136176]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [7/26/2010 11:43 AM 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [7/11/2011 11:54 PM 41272]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [8/12/2010 2:55 PM 85152]
S3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\drivers\NwUsbCdFil.sys [12/18/2009 12:13 PM 20480]
S3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\drivers\nwusbser2.sys [12/18/2009 12:12 PM 174720]
S3 SMSIVZAM5;SMSIVZAM5 NDIS Protocol Driver;c:\progra~1\VERIZO~1\VZACCE~1\SMSIVZAM5.SYS [4/14/2010 8:29 PM 32408]
S3 TrmbTS;TrmbTS;c:\windows\system32\drivers\TrmbTS.sys [8/26/2010 12:49 PM 29184]
S3 TRMUSB5K;Trimble USB GPS Driver;c:\windows\system32\drivers\TRMUSB5K.SYS [8/26/2010 12:49 PM 9881]
S3 USA19H;USA19H;c:\windows\system32\drivers\USA19H2k.sys [8/13/2010 3:56 PM 704000]
S3 USA19H2KP;Keyspan USB Serial Port Driver;c:\windows\system32\drivers\USA19H2kp.sys [8/13/2010 3:56 PM 24192]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [4/25/2008 12:16 PM 14336]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [7/22/2009 11:08 PM 47128]
S4 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [3/30/2009 3:09 AM 239336]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [9/17/2010 10:14 AM 370008]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]
.
2011-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-26 15:43]
.
2011-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-26 15:43]
.
2011-08-01 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-308600077-3542235570-3293604796-1145.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]
.
2011-08-01 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-308600077-3542235570-3293604796-1145.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://my.yahoo.com/
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 10.0.0.11
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-01 14:05
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(1016)
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
.
Completion time: 2011-08-01 14:06:33
ComboFix-quarantined-files.txt 2011-08-01 18:06
ComboFix2.txt 2011-07-25 14:45
.
Pre-Run: 121,294,671,872 bytes free
Post-Run: 121,703,968,768 bytes free
.
- - End Of File - - DC4749BBE684942ABD98EDCC24B14584
Post #23
Hi SuMMiT,

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text. 

http://forums.whatthetech.com/index.php?s=&showtopic=119397&view=findpost&p=743467

Collect::
c:\documents and settings\All Users\Application Data\laqu.exe
c:\documents and settings\All Users\Application Data\fycl.exe
c:\documents and settings\All Users\Application Data\chxf.exe
c:\documents and settings\All Users\Application Data\bptl.exe
Save this file to your desktop, Save this as "CFScript"

Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …


[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe


Then post the results log using Copy / Paste
Post #24
ok, done.
first i want to mention that when combofix started, i got an error msg stating the "rmbr.cfxxe encountered a prob and needs to close….". after ok'ing that it seemes to run ok, going through all the stages reasonable quickly.

here's the log:

ComboFix 11-08-01.05 - jzipkin 08/01/2011 15:25:11.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3572.2693 [GMT -4:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\jzipkin\Desktop\CFScript.txt
AV: McAfee® Security-as-a-Service Anti-virus *Disabled/Updated* {8C354827-2F54-4E28-90DC-AD391E77808C}
.
file zipped: c:\documents and settings\All Users\Application Data\bptl.exe
file zipped: c:\documents and settings\All Users\Application Data\chxf.exe
file zipped: c:\documents and settings\All Users\Application Data\fycl.exe
file zipped: c:\documents and settings\All Users\Application Data\laqu.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\bptl.exe
c:\documents and settings\All Users\Application Data\chxf.exe
c:\documents and settings\All Users\Application Data\fycl.exe
c:\documents and settings\All Users\Application Data\laqu.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-07-01 to 2011-08-01 )))))))))))))))))))))))))))))))
.
.
2011-08-01 19:36 . 2011-08-01 19:36 ——– d—–w- C:\0fcf88f2bb0dbaf416eee53d7e243aa3
2011-08-01 19:36 . 2011-08-01 19:36 ——– d—–w- c:\windows\SxsCaPendDel
2011-08-01 19:32 . 2011-08-01 19:32 ——– d—–w- c:\windows\LastGood
2011-07-12 03:55 . 2011-07-12 03:55 ——– d—–w- c:\documents and settings\JZipkin\Application Data\Malwarebytes
2011-07-12 03:54 . 2011-07-06 23:52 41272 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-12 03:54 . 2011-07-12 03:54 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2011-07-12 03:54 . 2011-07-06 23:52 22712 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-07-12 03:54 . 2011-08-01 13:53 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-07-08 17:09 . 2011-07-08 17:09 ——– d—–w- c:\documents and settings\JZipkin\Local Settings\Application Data\Trimble Access Installation Manager
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-01 19:41 . 2010-07-26 18:14 1994 –sha-w- c:\documents and settings\All Users\Application Data\KGyGaAvL.sys
2011-08-01 19:39 . 2010-07-23 18:20 0 —-a-w- c:\documents and settings\JZipkin\Local Settings\Application Data\WavXMapDrive.bat
2011-06-29 15:23 . 2006-12-24 04:11 348160 —-a-w- c:\windows\system32\msvcr71.dll
2011-06-29 15:23 . 2006-12-24 04:11 499712 —-a-w- c:\windows\system32\msvcp71.dll
2011-06-29 15:20 . 2011-06-29 15:20 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-02 14:07 . 2008-04-25 16:16 1867904 —-a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-01_18.05.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\SoftwareDistribution\EventCache\{156E5813-221B-4BCD-825F-719D33CA53DB}.bin
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\temp\OX5DLT19HP\System.Data.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\temp\HPV29GNTZ5\System.Transactions.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\temp\8HOV29GNU1\CustomMarshalers.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Xobni.XMapiAccessor\8aa1b8c0230151bd17b314401f15d9a2\Xobni.XMapiAccessor.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\TXTextControl\a588aedd8a2d8c3714a17d9f1ca4465a\TXTextControl.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\TAPIEx_Wrap\0ea6d68b47553261ec27635b2f56a70e\TAPIEx_Wrap.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SQLite\ef0891fcff9d0093700e255dda0456c8\System.Data.SQLite.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\58202ed61096113d08815c0a78313b66\System.Data.OracleClient.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlToolsMailUtiliti#\b9c83bf75060f2a4da020d24afd9ef42\SqlToolsMailUtilities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\ServerSync\9870cb9539d08c35b627adfa1e8aa044\ServerSync.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\office\7ee4bcefaaaf639ba3338d0340765f2b\office.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\office\5d421658b501aa6dc885b352ed9b12ee\office.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Newtonsoft.Json.Net#\63eb24a775f87d25f2a4dbac3402b1a6\Newtonsoft.Json.Net20.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\3d05a3219a430d76825fe4ccc9edf675\Microsoft.WSMan.Management.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\272d51526813ea113970b8e890c92ee2\Microsoft.VisualC.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vbe.Inter#\0464245ed28fdef2c8cd006c16dfce87\Microsoft.Vbe.Interop.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\fd1da54bf44e50616aef20e49fe95af2\Microsoft.SqlServer.DlgGrid.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f851a18d580b4677b51fd925e1475676\Microsoft.SqlServer.SqlWmiManagement.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ed5190af604d93ec2ed375af3abd8b3f\Microsoft.SqlServer.ForEachFromVarEnumerator.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e9a7a16797a586dd49adde1fcb39231e\Microsoft.SqlServer.SQLTask.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e7e2664d5ca193121c8f9c35d7d450f0\Microsoft.SqlServer.SqlEnum.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e381ea2fe519d1d7b0dd206dd05f4cf2\Microsoft.SqlServer.Management.PSProvider.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\de748d7f48f3c3a1a4f332186cf0b5d1\Microsoft.SqlServer.Msxml6_interop.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\d81951a5efa9e348e42a7d5a9d098c46\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\cc624ab6d205a3eaeba6e79eeb0bcdb3\Microsoft.SqlServer.ForEachNodeListEnumerator.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\c8c9363f546d2dd65405164296a5834e\Microsoft.SqlServer.ForEachADOEnumerator.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\bdb795b6f8542f97e80cbfb09ecc56b9\Microsoft.SqlServer.WizardFramework.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b30d6877e54e3e2e332a344235d899a0\Microsoft.SqlServer.GridControl.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\abb4b2ba1c750c13e54443678e728d50\Microsoft.SqlServer.DTSUtilities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a3374aaf7091b2f7abd2589307e7a4ed\Microsoft.SqlServer.Setup.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\968fe4310573bbc51ee75eb4603b7c8b\Microsoft.SqlServer.Management.MultiServerConnection.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\8da24b93c90be059ffb44c4e456914a0\Microsoft.SqlServer.XmlSrc.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\898dac7a97b23589cf6a9e8f5820cec6\Microsoft.SqlServer.WmiEnum.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\84dbd8fea584f29014c5b3d0fc3fae68\Microsoft.SqlServer.DtsTransferProvider.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6caee7b9845c20680598211fbd4fd525\Microsoft.SqlServer.ADONETSrc.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\63d62c785f3af01a44d681e312f1b6c4\Microsoft.SqlServer.DTSPipelineWrap.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\6333b88fee0dbfc7f29535856f2a95d9\Microsoft.SqlServer.Management.CollectorTasks.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5adc20a2f3ade8c9154582988d1f2807\Microsoft.SqlServer.DTSRuntimeWrap.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\52bd0d6eb37ae6588643fb32b5566257\Microsoft.SqlServer.PolicyEnum.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\51c33405cd897b222b90e3ade79a303b\Microsoft.SqlServer.TransferJobsTask.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\4d3c6da79328c318fed863c9d5fd43e8\Microsoft.SqlServer.Management.PSSnapins.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\49fadf4c9a576e97af9b76dab5f3c591\Microsoft.SqlServer.RegSvrEnum.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\44f474765d3bae85d2f18a21620a761e\Microsoft.SqlServer.DtsMsg.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\40fcdbf63a23a9c627ce8ee667f69d75\Microsoft.SqlServer.VSTAScriptingLib.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3bdb1af077cd229f4dd31c6be4dbae84\Microsoft.SqlServer.BatchParser.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2fa4e4fe25bae25ae5e7960a3ac37fd5\Microsoft.SqlServer.WMIEWTask.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2f8f6a426e825b7000a42028b5b2f001\Microsoft.SqlServer.SqlTDiagM.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\279bdda83fff43bbbbe29002ce457982\Microsoft.SqlServer.WMIDRTask.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\256fca46d61d1df627a7955f435b457f\Microsoft.SqlServer.GridControl.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\23c407c1754933b28dfefdb8a764c2a7\Microsoft.SqlServer.XMLTask.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\23bf37e25ddc066efc26f9feea1a1e18\Microsoft.SqlServer.SmoExtended.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\1ab9b97cc9aefef2d70cbb1c0d86ab29\Microsoft.SqlServer.BatchParserClient.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\04095334dff60b0d128ad75478c9246c\Microsoft.SqlServer.SString.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ff9583e53a4bec6da6aae423a613ba6c\Microsoft.PowerShell.Commands.Management.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\adca7827958ca8958a599d82143dce51\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a79a6e4a8bb69504dd5282d90ab05e23\Microsoft.PowerShell.GPowerShell.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\939818eb30e31949fd3a523fc7d8de42\Microsoft.PowerShell.GraphicalHost.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\642276a950670a66fcb19cac8a327e45\Microsoft.PowerShell.Commands.Management.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3d7d5070c97ef550f64bc835a8959341\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\23cb96335bdd8996d925ebfe72fd91c8\Microsoft.PowerShell.Editor.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\13ded54c292128122faea6a4380d4bca\Microsoft.PowerShell.Commands.Utility.resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\ab794ac4cd066f39846b816f5f821a97\Microsoft.Office.Interop.Outlook.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\92a29f895ad9ad7cb8685ee7b5f4703a\Microsoft.Office.Interop.Word.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Exception#\aa7d00a5c8aadcda7f6ad8bc6a91296a\Microsoft.ExceptionMessageBox.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.AnalysisS#\13c480cf1f1dfd075c0f5a2b7d93d8ed\Microsoft.AnalysisServices.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ca34d52f647169377099ff5e3d12fab\IsdiInterop.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.shdocvw\5019705bb988c3e8cc52a52a89fa20ed\Interop.shdocvw.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\interop.msdasc\1e97297b3251606a19b0ace70660f0f0\interop.msdasc.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.ADChronopher\94c105af2689acb2c38a6a308bbf0a03\Interop.ADChronopher.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Infralution.Controls\357dec636df4681162107901d02b72fa\Infralution.Controls.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Infralution.Control#\67ba46da33b3444cb452247d10ffc1b4\Infralution.Controls.VirtualTree.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Win\934e91599236ef7d77d83b79a8de7b96\Infragistics.Act.Win.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Wi#\1d4141c620643aa42e1c358c5e98ee9a\Infragistics.Act.Win.UltraWinListBar.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Sh#\cb33a66d32e0c6a74fe696cf20de743d\Infragistics.Act.Shared.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e1a27c5af785afa478e95fedefb2648c\IAStorUtil.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Genghis\00d5213484c333aa32ff7fc1dd1f6e49\Genghis.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Extensibility\0a79b28d22e8e33b7a8c714f9366d139\Extensibility.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\DevExpress.XtraNavB#\36861cdbb9f02fd67c320114cfeee4a5\DevExpress.XtraNavBar.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1Thesaurus\67e3c11bcf8b20acbb93bac2a2aa3923\C1.Win.C1Thesaurus.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1Spell\1f399b7ae6592e3b2268ac79c02eb157\C1.Win.C1Spell.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1PrintPrevi#\260e12a136ad5ab6818875362d74c740\C1.Win.C1PrintPreview.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1FlexGrid\2ca3fe659f8bcf33fbcd642c43478c5a\C1.Win.C1FlexGrid.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Common\da288b969536aae24a315f141ad9d09a\C1.Common.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Antlr3.Runtime\61738489a56efe12589e18fce2795c31\Antlr3.Runtime.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\actmigration\4bfe7425647b5d3629b1badfe74e053d\actmigration.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI\7231f03feef14e0ef3fe66d3ab2cdd3c\Act.UI.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.WordProcesso#\bde5e3573805efd7f1713361ea2f5be4\Act.UI.WordProcessorDialogs.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Widgets\4c0297c3f62d7fc4fc9c267b0788d990\Act.UI.Widgets.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Preferences\9850bcda604e2419ccff1906fb68ba46\Act.UI.Preferences.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.PickList\19e52370190c2aa9495d841a65f95394\Act.UI.PickList.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Opportunitie#\19c4ad7a751c0c43063e1b4986e7b833\Act.UI.Opportunities.Views.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Import\341fa94c729bd1b0b9606589c9d9ae04\Act.UI.Import.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Groups.Views\2eb42eefd508f9f71ab9a3070de70ad4\Act.UI.Groups.Views.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.GroupCompany#\ad2132356b5a7a7ec9a2b277c7d429ee\Act.UI.GroupCompanyPicker.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Export\c4ca2574b028d8bc3620152af48dcfd8\Act.UI.Export.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Rep#\bc362f1f863c49f1ff9f2f24c8dbce9f\Act.UI.Designer.Report.Resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Con#\e582fd52bd5fdb26eaf5ab7f133d1303\Act.UI.Designer.Conversion.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\aee2f938c6e5e07ec221574d17dd8ab5\Act.UI.Dashboard.Designer.Loader.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\706e7dba13c00d6d03773107f1531c98\Act.UI.Dashboard.Designer.Interfaces.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\2985ad57745df9933f0fc0dea0621b38\Act.UI.Dashboard.Designer.ControlContainer.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\07c7e34f983f9785fcec7f8575485513\Act.UI.Dashboard.Designer.View.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.CriteriaDlg\5bade097c4afa0fcec140bbaf94bf185\Act.UI.CriteriaDlg.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Core\0d23c07a6f4ca39eeb94faf22f4ad77a\Act.UI.Core.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\ACT.UI.Common.Images\b2156f3001d656bd84bdd2d5ad672948\ACT.UI.Common.Images.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.ActivityView#\59d5949f25e6cf11d863b8f92eccfc86\Act.UI.ActivityViews.Widgets.TimeSelector.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Activities.V#\e8f4b8695c45c53d3196997b0f5bbbf5\Act.UI.Activities.Views.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Windows.#\13e0d7f6f552b83898f0052157e8f605\Act.Shared.Windows.Forms.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Utilities\f0dc2ec4eb99fc77f81f7a42fb098e80\Act.Shared.Utilities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.UI.Utili#\7714dc3b3106ad31a3a3a2c0366a4c78\Act.Shared.UI.Utilities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Messaging\2d108448cce19cf5182d61682368c1ad\Act.Shared.Messaging.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Messagin#\5fd5cd6292002d7875035258aa7468f5\Act.Shared.Messaging.Types.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.LicProvi#\b4f5a12369caf73adaf19d962bf85e65\Act.Shared.LicProvider.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Licensing\786c9440fb2ee5010be4a25604ef16f6\Act.Shared.Licensing.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Images\1f806e59570b36f549c611d0a0be178f\Act.Shared.Images.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.FDO\324706c19256f7ba1a89c3123784cbef\Act.Shared.FDO.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Diagnost#\4577c4c1945073ca9f30163c1e927179\Act.Shared.Diagnostics.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Diagnost#\1563a2caf57a1c74c69ad70d15c6a795\Act.Shared.Diagnostics.DefectLogger.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Componen#\a60987a0d9c377b9aa3b99fc22219a8a\Act.Shared.ComponentModel.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.Collecti#\5a19a8f572b30191d48741e6abb1955b\Act.Shared.Collections.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework\8aef543db54f23dedde38f661f003c2c\Act.Framework.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Synch#\4a0821a34a8e0e5766414f9de575af3d\Act.Framework.Synchronization.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Stand#\e2a2b9a66dca60c5bc7343d0f4efb932\Act.Framework.StandaloneActivityRecurUtility.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.DataE#\9cf7095f1f351a53ae6f26ed66f7fb36\Act.Framework.DataExchange.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.DataE#\1ce321c0037a123161e975893d5737f3\Act.Framework.DataExchange.Act6.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Framework.Compo#\a83067e230b2591b1f9a6c30329a56b0\Act.Framework.ComponentModel.Core.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.UI.Cust#\51bb261a9e532f51bb681bd8d20b9c30\Act.Devices.UI.Custom.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Plugin\0479eed5f0d3956eea533ac9df5f3103\Act.Devices.Plugin.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Entities\e44acee65addbb0d77db94c79f94bb60\Act.Devices.Entities.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Devices.Conduit#\3dd28593ff356edb7099df0766909cbe\Act.Devices.Conduit.Records.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Data.Resources\91f17810071781fa08add2bb1ea3bbe5\Act.Data.Resources.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Application.Int#\e758bd5b795385cc79fa2ee53100b42a\Act.Application.Interop.ni.dll
+ 1601-01-01 00:00 . 1601-01-01 00:00 0 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
+ 2011-05-14 00:17 . 2011-05-14 00:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll
+ 2011-05-13 23:45 . 2011-05-13 23:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll
+ 2011-05-14 05:06 . 2011-05-14 05:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll
+ 2011-05-14 05:23 . 2011-05-14 05:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll
+ 2011-05-13 22:37 . 2011-05-13 22:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll
+ 2011-08-01 19:30 . 2011-08-01 19:30 16384 c:\windows\Temp\Perflib_Perfdata_910.dat
+ 2011-08-01 19:30 . 2011-08-01 19:30 16384 c:\windows\Temp\Perflib_Perfdata_604.dat
+ 2011-08-01 19:35 . 2011-08-01 19:35 16384 c:\windows\Temp\Perflib_Perfdata_348.dat
- 2010-07-26 14:23 . 2009-05-26 11:40 17272 c:\windows\system32\spmsg.dll
+ 2010-07-26 14:23 . 2010-07-05 13:15 17272 c:\windows\system32\spmsg.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Web.RegularExpressions.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Drawing.Design.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Configuration.Install.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-08-01 19:37 . 2008-07-25 23:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Vsa.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.VisualBasic.Vsa.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Build.Utilities.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Build.Framework.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\ISymWrapper.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\IEHost.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\CustomMarshalers.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\cscompmgd.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Accessibility.dll
- 2010-11-29 14:34 . 2010-11-29 14:34 69120 c:\windows\assembly\temp\8HOV29GNU1\CustomMarshalers.dll
- 2011-04-28 15:34 . 2011-04-28 15:34 40960 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlToolsMailUtiliti#\b9c83bf75060f2a4da020d24afd9ef42\SqlToolsMailUtilities.ni.dll
- 2011-04-28 15:29 . 2011-04-28 15:29 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\ed5190af604d93ec2ed375af3abd8b3f\Microsoft.SqlServer.ForEachFromVarEnumerator.ni.dll
- 2011-04-28 15:34 . 2011-04-28 15:34 87040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\51c33405cd897b222b90e3ade79a303b\Microsoft.SqlServer.TransferJobsTask.ni.dll
- 2011-04-28 15:34 . 2011-04-28 15:34 69120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\2fa4e4fe25bae25ae5e7960a3ac37fd5\Microsoft.SqlServer.WMIEWTask.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Dashboard.De#\706e7dba13c00d6d03773107f1531c98\Act.UI.Dashboard.Designer.Interfaces.ni.dll
- 2010-11-29 15:01 . 2010-11-29 15:01 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.Shared.UI.Utili#\7714dc3b3106ad31a3a3a2c0366a4c78\Act.Shared.UI.Utilities.ni.dll
- 2010-11-29 14:36 . 2010-11-29 14:36 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-11-29 14:34 . 2011-05-09 14:30 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft_VsaVb.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.VisualC.Dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\IIEHost.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\IEExecRemote.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2011-05-14 05:17 . 2011-05-14 05:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll
+ 2011-05-14 05:12 . 2011-05-14 05:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll
+ 2011-05-14 05:11 . 2011-05-14 05:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll
+ 2008-04-25 16:16 . 2011-08-01 19:42 544872 c:\windows\system32\perfh009.dat
+ 2008-04-25 16:16 . 2011-08-01 19:42 110446 c:\windows\system32\perfc009.dat
+ 2008-04-25 21:27 . 2011-05-02 15:31 692736 c:\windows\system32\inetcomm.dll
- 2008-04-25 21:27 . 2011-03-07 05:33 692736 c:\windows\system32\inetcomm.dll
+ 2009-03-08 08:33 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll
+ 2009-11-03 22:35 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll
+ 2009-11-03 22:28 . 2011-05-02 15:31 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2009-11-03 22:28 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Web.Services.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Web.Mobile.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Transactions.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.ServiceProcess.dll
+ 2011-08-01 19:38 . 2010-02-09 16:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Security.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Runtime.Remoting.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Messaging.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Management.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.EnterpriseServices.Wrapper.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.EnterpriseServices.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Drawing.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.DirectoryServices.Protocols.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.DirectoryServices.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Deployment.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Data.SqlXml.dll
+ 2011-08-01 19:37 . 2008-11-25 16:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Data.OracleClient.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.configuration.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\sysglobl.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.VisualBasic.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.VisualBasic.Compatibility.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-08-01 19:37 . 2008-07-25 23:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.JScript.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Build.Tasks.dll
+ 2011-08-01 19:38 . 2008-07-25 23:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\Microsoft.Build.Engine.dll
+ 2011-08-01 19:37 . 2008-07-25 23:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\AspNetMMCExt.dll
+ 2011-08-01 19:36 . 2011-08-01 19:36 467456 c:\windows\Installer\3f0da.msi
+ 2011-08-01 19:33 . 2009-03-08 08:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll
+ 2011-08-01 19:33 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll
+ 2011-08-01 19:33 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe
- 2010-11-29 14:37 . 2010-11-29 14:37 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
- 2010-11-29 15:15 . 2010-11-29 15:15 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
- 2010-11-29 14:37 . 2010-11-29 14:37 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 506880 c:\windows\assembly\NativeImages_v2.0.50727_32\office\5d421658b501aa6dc885b352ed9b12ee\office.ni.dll
- 2011-04-28 15:26 . 2011-04-28 15:26 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e381ea2fe519d1d7b0dd206dd05f4cf2\Microsoft.SqlServer.Management.PSProvider.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a3374aaf7091b2f7abd2589307e7a4ed\Microsoft.SqlServer.Setup.ni.dll
- 2011-04-28 15:27 . 2011-04-28 15:27 128000 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\49fadf4c9a576e97af9b76dab5f3c591\Microsoft.SqlServer.RegSvrEnum.ni.dll
- 2011-04-28 15:27 . 2011-04-28 15:27 632320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\3bdb1af077cd229f4dd31c6be4dbae84\Microsoft.SqlServer.BatchParser.ni.dll
- 2011-04-28 15:34 . 2011-04-28 15:34 337920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\23c407c1754933b28dfefdb8a764c2a7\Microsoft.SqlServer.XMLTask.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
- 2010-11-29 15:15 . 2010-11-29 15:15 453120 c:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\e1a27c5af785afa478e95fedefb2648c\IAStorUtil.ni.dll
- 2010-11-29 15:15 . 2010-11-29 15:15 517120 c:\windows\assembly\NativeImages_v2.0.50727_32\Genghis\00d5213484c333aa32ff7fc1dd1f6e49\Genghis.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Common\da288b969536aae24a315f141ad9d09a\C1.Common.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
- 2010-11-29 15:16 . 2010-11-29 15:16 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\Antlr3.Runtime\61738489a56efe12589e18fce2795c31\Antlr3.Runtime.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 670720 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Designer.Con#\e582fd52bd5fdb26eaf5ab7f133d1303\Act.UI.Designer.Conversion.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.CriteriaDlg\5bade097c4afa0fcec140bbaf94bf185\Act.UI.CriteriaDlg.ni.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-11-29 14:34 . 2011-05-09 14:30 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-05-14 00:04 . 2011-05-14 00:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll
+ 2011-05-14 00:04 . 2011-05-14 00:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll
+ 2009-11-03 22:35 . 2011-06-02 14:07 1867904 c:\windows\system32\dllcache\win32k.sys
+ 2008-04-25 16:16 . 2011-03-03 13:27 1866880 c:\windows\system32\_000006_.tmp.dll
- 2010-03-23 09:32 . 2010-03-23 09:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2011-01-18 08:39 . 2011-01-18 08:39 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2011-08-01 19:38 . 2008-11-25 16:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.XML.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Windows.Forms.dll
+ 2011-08-01 19:37 . 2010-09-22 14:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Web.dll
+ 2011-08-01 19:38 . 2010-03-23 09:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.dll
+ 2011-08-01 19:37 . 2008-07-25 23:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Design.dll
+ 2011-08-01 19:38 . 2008-07-25 23:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\System.Data.dll
+ 2011-08-01 19:38 . 2011-01-18 08:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC23013\mscorlib.dll
+ 2011-01-19 03:36 . 2011-01-19 03:36 2687488 c:\windows\Installer\3f0db.msp
- 2010-11-29 15:17 . 2010-11-29 15:17 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
- 2010-11-29 14:37 . 2010-11-29 14:37 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
- 2010-11-29 15:17 . 2010-11-29 15:17 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
- 2010-11-29 14:38 . 2010-11-29 14:38 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
- 2010-11-29 15:15 . 2010-11-29 15:15 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
- 2010-11-29 15:15 . 2010-11-29 15:15 3100160 c:\windows\assembly\NativeImages_v2.0.50727_32\Infragistics.Act.Win\934e91599236ef7d77d83b79a8de7b96\Infragistics.Act.Win.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 1315840 c:\windows\assembly\NativeImages_v2.0.50727_32\C1.Win.C1FlexGrid\2ca3fe659f8bcf33fbcd642c43478c5a\C1.Win.C1FlexGrid.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 2662400 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Opportunitie#\19c4ad7a751c0c43063e1b4986e7b833\Act.UI.Opportunities.Views.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 3868160 c:\windows\assembly\NativeImages_v2.0.50727_32\ACT.UI.Common.Images\b2156f3001d656bd84bdd2d5ad672948\ACT.UI.Common.Images.ni.dll
- 2010-11-29 15:14 . 2010-11-29 15:14 2437120 c:\windows\assembly\NativeImages_v2.0.50727_32\Act.UI.Activities.V#\e8f4b8695c45c53d3196997b0f5bbbf5\Act.UI.Activities.Views.ni.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-08-01 19:41 . 2011-08-01 19:41 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-08-01 19:40 . 2011-08-01 19:40 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-08-01 19:38 . 2011-08-01 19:38 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2011-05-09 14:30 . 2011-05-09 14:30 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-11-29 14:34 . 2011-05-09 14:30 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-11-29 14:34 . 2011-08-01 19:41 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-11-29 14:34 . 2011-05-09 14:30 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-11-29 14:34 . 2011-08-01 19:41 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\EnabledUnlockedFDEIconOverlay]
@="{022F2F51-CDDA-4873-8A29-72C66C808A3F}"
[HKEY_CLASSES_ROOT\CLSID\{022F2F51-CDDA-4873-8A29-72C66C808A3F}]
2009-11-07 05:07 297808 ——w- c:\windows\system32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UninitializedFdeIconOverlay]
@="{661963C1-99A1-44e7-A671-1CF3768AE9D4}"
[HKEY_CLASSES_ROOT\CLSID\{661963C1-99A1-44e7-A671-1CF3768AE9D4}]
2009-11-07 05:07 297808 ——w- c:\windows\system32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2010-02-17 278528]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2010-04-05 495708]
"AESTFltr"="c:\windows\system32\AESTFltr.exe" [2010-04-05 737280]
"nwiz"="nwiz.exe" [2009-12-15 1657448]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-12-15 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-12-15 13770752]
"NVHotkey"="nvHotkey.dll" [2009-12-15 86016]
"OA001Mon"="c:\windows\OA001Mon.exe" [2010-01-28 24576]
"IAStorIcon"="c:\program files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696]
"ChangeTPMAuth"="c:\program files\Wave Systems Corp\Common\ChangeTPMAuth.exe" [2008-05-30 180224]
"WavXMgr"="c:\program files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe" [2008-05-14 105472]
"SecureUpgrade"="c:\program files\Wave Systems Corp\SecureUpgrade.exe" [2008-06-24 243000]
"EmbassySecurityCheck"="c:\program files\Wave Systems Corp\EMBASSY Security Setup\EMBASSYSecurityCheck.exe" [2008-06-24 79160]
"DellControlPoint"="c:\program files\Dell\Dell ControlPoint\Dell.ControlPoint.exe" [2008-08-18 598016]
"DCPstrApp"="c:\program files\Dell\Dell ControlPoint\Security Manager\SecurityDeviceInfoSetRegistryString.exe" [2008-08-04 6656]
"DellConnectionManager"="c:\program files\Dell\Dell ControlPoint\Connection Manager\Dell.UCM.exe" [2008-10-01 1454080]
"MVS Splash"="c:\program files\McAfee\Managed VirusScan\DesktopUI\XTray.exe" [2011-01-25 476480]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2010-06-26 1311312]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Act.Outlook.Service"="c:\program files\ACT\Act for Windows\Act.Outlook.Service.exe" [2009-02-24 28672]
"Act! Preloader"="c:\program files\ACT\Act for Windows\ActSage.exe" [2009-02-24 393216]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-01-31 38840]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"YMailAdvisor"="c:\program files\Yahoo!\Common\YMailAdvisor.exe" [2009-05-08 174424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143360]
"Dell Webcam Central"="c:\program files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" [2008-10-17 442536]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-06-29 273544]
.
c:\documents and settings\McAfeeMVSUser\Start Menu\Programs\Startup\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [N/A]
.
c:\documents and settings\ataylor.WAYPOINT.000\Start Menu\Programs\Startup\
Logitech . Product Registration.lnk - c:\program files\Common Files\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-8-15 604776]
Dell ControlPoint System Manager.lnk - c:\program files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe [2008-11-11 950048]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-05-06 09:29 64592 —-a-w- c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\McAfee\\Managed VirusScan\\Agent\\myAgtSvc.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\ACT\\Act for Windows\\ActSage.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [8/12/2010 2:55 PM 88544]
R2 ASFAgent;ASF Agent;c:\program files\Intel\ASF Agent\ASFAgent.exe [4/19/2007 6:56 AM 133968]
R2 buttonsvc32;Dell ControlPoint Button Service;c:\program files\Dell\Dell ControlPoint\DCPButtonSvc.exe [9/4/2008 6:28 PM 406808]
R2 Credential Vault Host Control Service;Credential Vault Host Control Service;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [11/11/2008 5:35 PM 808296]
R2 Credential Vault Host Storage;Credential Vault Host Storage;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [11/11/2008 5:35 PM 20840]
R2 dcpsysmgrsvc;Dell ControlPoint System Manager;c:\program files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe [11/11/2008 4:00 PM 451872]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [7/22/2010 1:13 PM 13336]
R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [7/26/2010 11:19 AM 10448]
R2 McAfee SiteAdvisor Enterprise Service;McAfee SiteAdvisor Enterprise Service;c:\program files\McAfee\SiteAdvisor Enterprise\McSACore.exe [10/15/2010 3:44 PM 324928]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [11/16/2010 10:37 AM 145936]
R2 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [12/10/2010 6:29 PM 29293408]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe [7/22/2010 2:25 PM 291064]
R2 RumorServer;McAfee Peer Distribution Service;c:\program files\McAfee\Managed VirusScan\Agent\myAgtSvc.exe [7/22/2010 2:25 PM 291064]
R2 SMManager;Smith Micro Connection Manager Service;c:\program files\Dell\Dell ControlPoint\Connection Manager\SMManager.exe [10/1/2008 5:28 AM 90112]
R2 XobniService;XobniService;c:\program files\Xobni\XobniService.exe [5/20/2010 1:46 PM 55016]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [7/21/2010 5:25 PM 113664]
R3 CCIDFILTER;Broadcom Smart Card Reader Filter Driver;c:\windows\system32\drivers\ccidflt.sys [7/22/2010 1:11 PM 12840]
R3 cvusbdrv;Broadcom USH CV;c:\windows\system32\drivers\cvusbdrv.sys [7/21/2010 5:27 PM 32808]
R3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y5132.sys [7/21/2010 5:25 PM 240344]
R3 OA001Afx;Provides a software interface to control audio effects of OA001 camera.;c:\windows\system32\drivers\OA001Afx.sys [7/21/2010 5:25 PM 134144]
R3 OA001Ufd;Creative Camera OA001 Upper Filter Driver;c:\windows\system32\drivers\OA001Ufd.sys [7/21/2010 5:25 PM 133632]
R3 OA001Vid;Creative Camera OA001 Function Driver;c:\windows\system32\drivers\OA001Vid.sys [7/21/2010 5:25 PM 281472]
S2 ACT! Scheduler;ACT! Scheduler;c:\program files\ACT\Act for Windows\Act.Scheduler.exe [2/24/2009 2:08 PM 81920]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7/26/2010 11:43 AM 136176]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [7/26/2010 11:43 AM 136176]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [7/11/2011 11:54 PM 41272]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [8/12/2010 2:55 PM 85152]
S3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\drivers\NwUsbCdFil.sys [12/18/2009 12:13 PM 20480]
S3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\drivers\nwusbser2.sys [12/18/2009 12:12 PM 174720]
S3 SMSIVZAM5;SMSIVZAM5 NDIS Protocol Driver;c:\progra~1\VERIZO~1\VZACCE~1\SMSIVZAM5.SYS [4/14/2010 8:29 PM 32408]
S3 TrmbTS;TrmbTS;c:\windows\system32\drivers\TrmbTS.sys [8/26/2010 12:49 PM 29184]
S3 TRMUSB5K;Trimble USB GPS Driver;c:\windows\system32\drivers\TRMUSB5K.SYS [8/26/2010 12:49 PM 9881]
S3 USA19H;USA19H;c:\windows\system32\drivers\USA19H2k.sys [8/13/2010 3:56 PM 704000]
S3 USA19H2KP;Keyspan USB Serial Port Driver;c:\windows\system32\drivers\USA19H2kp.sys [8/13/2010 3:56 PM 24192]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [4/25/2008 12:16 PM 14336]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [7/22/2009 11:08 PM 47128]
S4 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [3/30/2009 3:09 AM 239336]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [9/17/2010 10:14 AM 370008]
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - WUAUSERV
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]
.
2011-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-26 15:43]
.
2011-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-07-26 15:43]
.
2011-08-01 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-308600077-3542235570-3293604796-1145.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]
.
2011-08-01 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-308600077-3542235570-3293604796-1145.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 14:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://my.yahoo.com/
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth; Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
TCP: DhcpNameServer = 10.0.0.11
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-01 15:38
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(988)
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
.
- - - - - - - > 'explorer.exe'(2012)
c:\windows\system32\WININET.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\MSVCR80.dll
c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmUserInterface.dll
c:\windows\system32\btmmhook.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\nvsvc32.exe
c:\drivers\audio\r267815\payload\wdm\stacsv.exe
c:\windows\System32\SCardSvr.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files\Common Files\McAfee\SystemCore\mcshield.exe
c:\program files\Common Files\McAfee\SystemCore\mfeann.exe
c:\windows\system32\msiexec.exe
c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\DellTPad\ApMsgFwd.exe
c:\program files\DellTPad\HidFind.exe
c:\program files\DellTPad\Apntex.exe
c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
c:\progra~1\MI3AA1~1\rapimgr.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
c:\\?\c:\windows\system32\WBEM\WMIADAP.EXE
c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
.
**************************************************************************
.
Completion time: 2011-08-01 15:44:44 - machine was rebooted
ComboFix-quarantined-files.txt 2011-08-01 19:44
ComboFix2.txt 2011-08-01 18:06
ComboFix3.txt 2011-07-25 14:45
.
Pre-Run: 121,704,153,088 bytes free
Post-Run: 121,365,020,672 bytes free
.
- - End Of File - - 164AF35E8F8F3C115A08225141724AF9
Upload was successful
Post #25
Hi SuMMiT,

Everything is looking good. How's the computer running now?

Let's run the ESET scan one more time to make sure we got everything: Eset Online Scanner
  • Place a check mark in the box YES, I accept the Terms Of Use
  • Click the Start button.
  • Now click the Install button.
  • Click Start.  The scanner engine will initialize and update.
  • Do Not place a check mark in the box beside Remove found threats.
  • Click the Scan button.  The scan will now run, please be patient.
  • When the scan finishes click the Details tab.
  • Copy and paste the contents of the C:\Program Files\ESET\log.txt into your next reply.
Post #26
machine seems to be running fine now. the ESET scan is currently running. i gotta run and won't be back till late so will post the results tomorrow morn. dude, serioulsy, thanks for all your help. is it possible to make a donation to support the cause?
Post #27
:thumbup: No problem SuMMiT! Post the results when you get the chance.

And yes absolutely! You may donate to me personally by clicking the yellow donate button in my signature or you may donate to the site by clicking here.
Post #28
Would you be offended if I made the donation to the site? There have been a few instances that y'all have helped me and I want to support the whole community. Again, thx for all your help. Here's the ESET log. Looks clean to me. Yes? ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=7 # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=8cc05ef9cf0e39448607e887e19a9b70 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-07-27 06:18:33 # local_time=2011-07-27 02:18:33 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=97668 # found=0 # cleaned=0 # scan_time=3569 # version=7 # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=8cc05ef9cf0e39448607e887e19a9b70 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-08-01 10:22:14 # local_time=2011-08-01 06:22:14 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=95492 # found=0 # cleaned=0 # scan_time=3571
Post #29
Hi SuMMiT,

Not at all :). It's totally up to you.

And yes your log looks clean! Have you already followed my previous instructions for updating Java and Adobe Reader? Let's cleanup the tools and get you on your way.

Please delete RKill and exehelper from your desktop.

Next, I need you to do the following:

Follow these steps to uninstall Combofix

  • Click START then RUN
  • Now copy/paste Combofix /uninstall into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

[external image: Posted Image]

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI