Spyware / Malware / Virus Removal

Windows 7 Fix, Hidden files, black desktop and etc

5 min read

Looking for the outcome? Ask AI

Severance Topic Starter

Post #1July 8, 2011, 10:37 PM UTC

Once again while at the Library researching on a project, I seem to have gotten a virus. The virus made my desktop background black and removed all of my files and folders. It also removed all files and folders from my account and placed a fake file/virus to my desktop called "Widows 7 Fix (C:\ProgramData\39444216.exe). In addition to this the computer was no longer able to connect to either a wireless internet service, and the dialup program recived an error. After some investigation, I found that all my files were still indeed there, just hidden. After running avast, I found nothing. After running Malwarebytes Quick scan finding a virus. Removed virus and noticed the window 7 fix no longer exists (but the shortcut on the desktop does). After the removal of the program an icon showed up on my desktop called "Home Groups", it apeared to me a networking program. After restarting my computer I notice that some icons near my start bar no longer have images, just basic icons. I am sure there needs to be some kind of clean up so I am submitting to you a log of malwarebytes and Hijack this (after malwarebytes was run)

Malwarebytes

13:35:21 James Mann MESSAGE Protection started successfully
13:35:26 James Mann MESSAGE IP Protection started successfully
13:36:17 James Mann MESSAGE IP Protection stopped
14:05:34 James Mann DETECTION C:\Users\James Mann\AppData\Local\Temp\Adobe_Flash_Player.exe Trojan.FakeAlert ALLOW
14:05:43 James Mann DETECTION C:\Users\James Mann\AppData\Local\Temp\Adobe_Flash_Player.exe Trojan.FakeAlert ALLOW
14:14:37 James Mann DETECTION C:\ProgramData\39444216.exe Trojan.Agent ALLOW
14:56:47 James Mann MESSAGE Protection started successfully
14:56:52 James Mann MESSAGE IP Protection started successfully
14:57:40 James Mann MESSAGE IP Protection stopped
17:18:49 James Mann MESSAGE Protection started successfully
17:18:53 James Mann MESSAGE IP Protection started successfully
17:19:39 James Mann MESSAGE IP Protection stopped
17:38:00 James Mann MESSAGE Protection started successfully
17:38:05 James Mann MESSAGE IP Protection started successfully
17:38:49 James Mann MESSAGE IP Protection stopped

__________

Hijackthis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:15:33 PM, on 7/8/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Electronic Arts\EADM\Core.exe
C:\Program Files (x86)\NetZero\exec.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Roxio\Roxio Burn\Roxio Burn.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\NetZero\exec.exe
C:\Program Files (x86)\NetZero\qsacc\x1exec.exe
C:\Users\James Mann\Desktop\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files (x86)\NetZero\SearchEnh1.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pop-up Blocker - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files (x86)\NetZero\qsacc\X1IEBHO.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files (x86)\NetZero\Toolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [NetZero_uoltray] C:\Program Files (x86)\NetZero\exec.exe regrun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files (x86)\NetZero\qsacc\appres.dll/228"
O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files (x86)\NetZero\qsacc\appres.dll/227"
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
O16 - DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} (CCAWebLogin Control) - https://ahfcas3.ahf2000.aultman.com/auth/CCALogin.CAB
O18 - Protocol: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - D:\Dragon Age- Origins\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit (mi-raysat_3dsmax2011_32) - Unknown owner - C:\Program Files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Realtek87B - Realtek - C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZoneServer System Service (ZSS) - Unknown owner - C:\SERVER WOK 53\Data\rtservice\xRemoteService.exe (file missing)

–
End of file - 14270 bytes

Tomk

Post #2July 11, 2011, 3:11 PM UTC

Welcome back Severance,

I'd like to see a different scan.

As we work through your logs. Please remember to run any tools by Right-clicking on the icon and selecting Run As Administrator….

Please download DDS by sUBs from one of the following links and save it to your desktop.

- DDS.scr
- DDS.pif
Disable any script blocking protection (How to Disable your Security Programs)
Double click DDS icon to run the tool (may take up to 3 minutes to run)
When done, DDS.txt will open.
After a few moments, attach.txt will open in a second window.
Save both reports to your desktop.

—————————————————

Post the contents of the DDS.txt report in your next reply
Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and the click UPLOAD.

Severance

Post #3July 14, 2011, 6:34 AM UTC

I noticed also that everything in the startmenu is empty (all folders) and that my Winows 7 bar that had the recycle bin, webcam and other things is gone. Sorry for the late reply, with school and work its hard to get the time. Thanks so much for taking the time to help. ______ . DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 1:27:04.88 on Thu 07/14/2011 Internet Explorer: 8.0.7600.16385 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3957.2587 [GMT -4:00] . AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Program Files\Dell\DellDock\DockLogin.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe C:\Windows\system32\agr64svc.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWlan.exe C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\DellTPad\Apoint.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE C:\Program Files (x86)\Electronic Arts\EADM\Core.exe C:\Program Files (x86)\Free Download Manager\fdm.exe C:\Program Files (x86)\NetZero\exec.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\NetZero\exec.exe C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conhost.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\taskeng.exe C:\Users\James Mann\Desktop\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://my.netzero.net/s/search?r=minisearch uURLSearchHooks: URLSearchHook Class: {37d2cdbf-2af4-44aa-8113-bd0d2da3c2b8} - C:\Program Files (x86)\NetZero\SearchEnh1.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Pop-up Blocker: {52706ef7-d7a2-49ad-a615-e903858cf284} - C:\Program Files (x86)\NetZero\qsacc\X1IEBHO.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll TB: ZeroBar: {f0f8ecbe-d460-4b34-b007-56a92e8f84a7} - C:\Program Files (x86)\NetZero\Toolbar.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll uRun: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent uRun: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun uRun: [NetZero_uoltray] C:\Program Files (x86)\NetZero\exec.exe regrun uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized mRun: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [Adobe Reader Speed Launcher] "c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" mRun: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m mRun: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2 mRun: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui StartupFolder: C:\Users\JAMESM~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files\Dell\DellDock\DellDock.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Display All Images with Full Quality - "C:\Program Files (x86)\NetZero\qsacc\appres.dll/228" IE: Display Image with Full Quality - "C:\Program Files (x86)\NetZero\qsacc\appres.dll/227" IE: Download all with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlall.htm IE: Download selected with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm IE: Download video with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm IE: Download with Free Download Manager - file://C:\Program Files (x86)\Free Download Manager\dllink.htm IE: E&xport to Microsoft Excel - C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} - hxxps://ahfcas3.ahf2000.aultman.com/auth/CCALogin.CAB DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\PKMCDO.DLL Handler: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL BHO-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll TB-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File TB-X64: {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - No File mRun-x64: [Apoint] C:\Program Files\DellTPad\Apoint.exe mRun-x64: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s mRun-x64: [Broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.exe mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\JAMESM~1\AppData\Roaming\Mozilla\Firefox\Profiles\3zuie2a7.default\ FF - component: C:\Program Files (x86)\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npViewpoint.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npWebLaunch.dll FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Users\James Mann\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: C:\Windows\system32\npmirage.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} FF - Ext: Ant Video Downloader: [removed] - %profile%\extensions\[removed] FF - Ext: avast! WebRep: [removed] - C:\Program Files\AVAST Software\Avast\WebRep\FF . ============= SERVICES / DRIVERS =============== . R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-4-30 55280] R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-6-17 600920] R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-6-17 287576] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904] R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2010-3-27 92160] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-3-27 202752] R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2011-6-17 22360] R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-6-17 64344] R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-6-17 42184] R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648] R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-6-17 366640] R2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit;C:\Program Files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-3-10 86016] R2 Realtek87B;Realtek87B;C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe [2011-3-24 40960] R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-4-30 2320920] R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atipmdag.sys [2010-3-27 6233088] R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2010-3-27 161280] R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\System32\drivers\CtClsFlt.sys [2010-4-30 172704] R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-3-27 56344] R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2011-6-17 25912] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-3-27 239616] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-2-28 136176] S2 ZSS;ZoneServer System Service;C:\SERVER WOK 53\Data\rtservice\xRemoteService.exe –> C:\SERVER WOK 53\Data\rtservice\xRemoteService.exe [?] S3 bcm;WiMAX Network Adapter;C:\Windows\System32\drivers\drxvi314_64.sys [2010-2-11 359040] S3 bcmbusctr;WiMAX Bus Driver;C:\Windows\System32\drivers\BcmBusCtr_64.sys [2010-2-11 62976] S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;D:\Dragon Age- Origins\Dragon Age\bin_ship\daupdatersvc.service.exe [2009-12-15 25832] S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-2-28 136176] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-3-27 220672] S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-2-18 51712] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-8-30 1255736] . =============== Created Last 30 ================ . 2011-07-08 18:20:10 0 —ha-w- C:\Users\JAMESM~1\AppData\Local\BITF52C.tmp 2011-07-08 17:38:01 8873296 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{22CAE910-87B9-450B-8C88-FD598684ED2A}\mpengine.dll 2011-07-03 02:58:56 92208 —-a-w- C:\Windows\SysWow64\wing.dll 2011-07-01 18:14:08 92208 —-a-w- C:\Windows\system\wing.dll 2011-07-01 18:14:08 6736 —-a-w- C:\Windows\system\wingdib.drv 2011-07-01 18:14:08 26112 —-a-w- C:\Windows\system\Wavmix16.dll 2011-07-01 18:14:08 26112 —-a-w- C:\Windows\system\Wavemix.dll 2011-07-01 18:14:08 188960 —-a-w- C:\Windows\system\wingde.dll 2011-07-01 18:13:46 ——– d—–w- C:\PROGRA~3\Individual Software 2011-07-01 18:12:46 ——– d—–w- C:\Program Files (x86)\Common Files\Individual Software 2011-07-01 18:12:45 1645320 —-a-w- C:\Windows\SysWow64\gdiplus.dll 2011-07-01 18:12:45 1388544 —-a-w- C:\Windows\SysWow64\temp.000 2011-07-01 18:12:45 132880 —-a-w- C:\Windows\SysWow64\MSINET.OCX 2011-07-01 18:12:45 ——– d—–w- C:\Program Files (x86)\Typing Instructor Deluxe 2011-06-30 16:06:59 8873296 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll 2011-06-29 00:10:09 ——– d-sh–w- C:\$RECYCLE.BIN 2011-06-28 02:24:49 0 —ha-w- C:\Users\JAMESM~1\AppData\Local\BIT758D.tmp 2011-06-27 21:09:07 ——– d—–w- C:\ComboFix 2011-06-22 17:50:21 ——– d—–w- C:\Program Files (x86)\GLIntercept0_5 2011-06-22 15:01:56 270720 ——w- C:\Windows\System32\MpSigStub.exe 2011-06-22 13:35:14 ——– d—–w- C:\Program Files (x86)\ESET 2011-06-21 15:51:41 98816 —-a-w- C:\Windows\sed.exe 2011-06-21 15:51:41 518144 —-a-w- C:\Windows\SWREG.exe 2011-06-21 15:51:41 256512 —-a-w- C:\Windows\PEV.exe 2011-06-21 15:51:41 208896 —-a-w- C:\Windows\MBR.exe 2011-06-18 03:04:33 ——– d—–w- C:\Program Files (x86)\tamasoftware 2011-06-17 15:43:59 600920 —-a-w- C:\Windows\System32\drivers\aswSnx.sys 2011-06-17 15:43:58 64344 —-a-w- C:\Windows\System32\drivers\aswMonFlt.sys 2011-06-17 15:43:35 40112 —-a-w- C:\Windows\avastSS.scr 2011-06-17 15:43:24 ——– d—–w- C:\Program Files\AVAST Software 2011-06-17 15:43:24 ——– d—–w- C:\PROGRA~3\AVAST Software 2011-06-17 15:18:35 ——– d–h–w- C:\Users\JAMESM~1\AppData\Roaming\Malwarebytes 2011-06-17 15:18:30 39984 —-a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys 2011-06-17 15:18:29 ——– d—–w- C:\PROGRA~3\Malwarebytes 2011-06-17 15:18:25 25912 —-a-w- C:\Windows\System32\drivers\mbam.sys 2011-06-17 15:18:25 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2011-06-17 14:43:53 499712 —-a-w- C:\Windows\System32\drivers\afd.sys 2011-06-17 14:43:53 1896832 —-a-w- C:\Windows\System32\drivers\tcpip.sys 2011-06-17 13:08:52 461312 —-a-w- C:\Windows\System32\drivers\srv.sys 2011-06-17 13:08:52 399872 —-a-w- C:\Windows\System32\drivers\srv2.sys 2011-06-17 13:08:51 161792 —-a-w- C:\Windows\System32\drivers\srvnet.sys 2011-06-17 12:58:55 287744 —-a-w- C:\Windows\System32\drivers\mrxsmb10.sys 2011-06-17 12:58:55 157696 —-a-w- C:\Windows\System32\drivers\mrxsmb.sys 2011-06-17 12:58:55 126464 —-a-w- C:\Windows\System32\drivers\mrxsmb20.sys 2011-06-17 12:58:11 3133952 —-a-w- C:\Windows\System32\win32k.sys 2011-06-17 12:50:09 976896 —-a-w- C:\Windows\System32\inetcomm.dll 2011-06-17 12:50:09 740864 —-a-w- C:\Windows\SysWow64\inetcomm.dll 2011-06-17 11:49:25 759296 —-a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:49:25 1110528 —-a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:47:18 197120 —-a-w- C:\Windows\System32\d3d10_1.dll 2011-06-17 11:47:18 161792 —-a-w- C:\Windows\SysWow64\d3d10_1.dll 2011-06-17 11:44:09 861184 —-a-w- C:\Windows\System32\oleaut32.dll 2011-06-17 11:44:09 571904 —-a-w- C:\Windows\SysWow64\oleaut32.dll 2011-06-17 11:32:30 102400 —-a-w- C:\Windows\System32\drivers\dfsc.sys . ==================== Find3M ==================== . 2011-05-28 03:25:16 1638912 —-a-w- C:\Windows\System32\mshtml.tlb 2011-05-28 03:00:02 1638912 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2011-05-24 11:21:59 404992 —-a-w- C:\Windows\System32\umpnpmgr.dll 2011-05-24 10:34:20 64512 —-a-w- C:\Windows\SysWow64\devobj.dll 2011-05-24 10:34:20 44544 —-a-w- C:\Windows\SysWow64\devrtl.dll 2011-05-24 10:34:00 145920 —-a-w- C:\Windows\SysWow64\cfgmgr32.dll 2011-05-24 10:32:46 252928 —-a-w- C:\Windows\SysWow64\drvinst.exe 2011-05-04 05:30:38 2326016 —-a-w- C:\Windows\System32\tquery.dll 2011-05-04 05:28:07 779264 —-a-w- C:\Windows\System32\mssvp.dll 2011-05-04 05:28:07 2228224 —-a-w- C:\Windows\System32\mssrch.dll 2011-05-04 05:28:06 75264 —-a-w- C:\Windows\System32\msscntrs.dll 2011-05-04 05:28:06 491520 —-a-w- C:\Windows\System32\mssph.dll 2011-05-04 05:28:06 288256 —-a-w- C:\Windows\System32\mssphtb.dll 2011-05-04 05:24:09 593408 —-a-w- C:\Windows\System32\SearchIndexer.exe 2011-05-04 05:24:09 249856 —-a-w- C:\Windows\System32\SearchProtocolHost.exe 2011-05-04 05:24:09 113664 —-a-w- C:\Windows\System32\SearchFilterHost.exe 2011-05-04 04:53:10 1553920 —-a-w- C:\Windows\SysWow64\tquery.dll 2011-05-04 04:52:59 666624 —-a-w- C:\Windows\SysWow64\mssvp.dll 2011-05-04 04:52:59 59392 —-a-w- C:\Windows\SysWow64\msscntrs.dll 2011-05-04 04:52:59 337408 —-a-w- C:\Windows\SysWow64\mssph.dll 2011-05-04 04:52:59 197120 —-a-w- C:\Windows\SysWow64\mssphtb.dll 2011-05-04 04:52:59 1401856 —-a-w- C:\Windows\SysWow64\mssrch.dll 2011-05-04 04:52:12 86528 —-a-w- C:\Windows\SysWow64\SearchFilterHost.exe 2011-05-04 04:52:12 428032 —-a-w- C:\Windows\SysWow64\SearchIndexer.exe 2011-05-04 04:52:12 164352 —-a-w- C:\Windows\SysWow64\SearchProtocolHost.exe 2011-04-22 20:18:47 27008 —-a-w- C:\Windows\System32\drivers\Diskdump.sys 2011-04-22 20:18:28 1197056 —-a-w- C:\Windows\System32\wininet.dll 2011-04-22 20:14:08 57856 —-a-w- C:\Windows\System32\licmgr10.dll 2011-04-22 19:31:50 981504 —-a-w- C:\Windows\SysWow64\wininet.dll 2011-04-22 19:31:26 44544 —-a-w- C:\Windows\SysWow64\licmgr10.dll 2011-04-22 18:49:57 482816 —-a-w- C:\Windows\System32\html.iec 2011-04-22 18:23:59 386048 —-a-w- C:\Windows\SysWow64\html.iec . ============= FINISH: 1:28:13.22 ===============

Attachments:

📎Attach.txt

Tomk

Post #4July 14, 2011, 5:52 PM UTC

Severance,

Obviously you have sought malware removal help before… but didn't finish. You have malware removal tools on your computer that are out of date. Just like with out of date virus definitions for your Anti-Virus program… using old information is not the right way to go about trying to clean your system. For example, the DDS scan that I requested you do… you used an old version of the program. It also appears that you probably have an old version of ComboFix on your system… at least you have several out of date components of it. There are many reasons that we ask you to remove the tools we use, one of which is that using out of date programs is a bad idea because it will not be able to deal with the most current malware. Malware changes daily. Last weeks fix often will not work this week.

All of that being said…. if you still have a copy of ComboFix - please drag it to your recycle bin.

Then-

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://forums.whatthetech.com/How_Disable_…ams_t96260.html
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Severance

Post #5July 15, 2011, 7:49 AM UTC

Aright, after using the Combofix (The one you linked to), I now have my sidebar (windows 7 bar) and my start menu back. The only strange thing is Internet Explorer is no longer on my computer. My guess is that it was infected and quarentened. It said that avast was runnging, but i disabled the real time protection for combofix. ___________________ ComboFix 11-07-14.05 - James Mann 07/14/2011 21:33:08.3.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3957.2364 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . /wow section - STAGE 3 . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\James Mann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Fix c:\users\James Mann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Fix\Uninstall Windows 7 Fix.lnk c:\users\James Mann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 Fix\Windows 7 Fix.lnk . . ((((((((((((((((((((((((( Files Created from 2011-06-15 to 2011-07-15 ))))))))))))))))))))))))))))))) . . 2011-07-15 01:40 . 2011-07-15 01:40 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-07-15 01:40 . 2011-07-15 01:40 ——– d—–w- c:\users\Sharon\AppData\Local\temp 2011-07-08 18:20 . 2011-07-08 18:20 0 —-a-w- c:\users\James Mann\AppData\Local\BITF52C.tmp 2011-07-08 17:38 . 2011-06-20 12:57 8873296 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{22CAE910-87B9-450B-8C88-FD598684ED2A}\mpengine.dll 2011-07-03 02:58 . 1994-09-21 06:00 92208 —-a-w- c:\windows\SysWow64\wing.dll 2011-07-02 00:43 . 2011-07-02 00:43 ——– d—–w- c:\users\Sharon\AppData\Roaming\Macrovision 2011-07-01 18:21 . 2011-07-01 18:21 ——– d—–w- c:\users\Sharon\AppData\Roaming\Individual Software 2011-07-01 18:14 . 1995-12-15 00:32 26112 —-a-w- c:\windows\system\Wavmix16.dll 2011-07-01 18:14 . 1995-12-15 00:32 26112 —-a-w- c:\windows\system\Wavemix.dll 2011-07-01 18:14 . 1994-09-21 06:00 92208 —-a-w- c:\windows\system\wing.dll 2011-07-01 18:14 . 1994-09-21 06:00 6736 —-a-w- c:\windows\system\wingdib.drv 2011-07-01 18:14 . 1994-08-24 06:00 188960 —-a-w- c:\windows\system\wingde.dll 2011-07-01 18:13 . 2011-07-01 18:13 ——– d—–w- c:\programdata\Individual Software 2011-07-01 18:12 . 2011-07-01 18:12 ——– d—–w- c:\program files (x86)\Common Files\Individual Software 2011-07-01 18:12 . 2011-07-02 00:46 ——– d—–w- c:\program files (x86)\Typing Instructor Deluxe 2011-07-01 18:12 . 2004-05-04 15:53 1645320 —-a-w- c:\windows\SysWow64\gdiplus.dll 2011-07-01 18:12 . 2004-03-09 05:00 132880 —-a-w- c:\windows\SysWow64\MSINET.OCX 2011-07-01 18:12 . 2000-08-21 02:00 1388544 —-a-w- c:\windows\SysWow64\temp.000 2011-06-28 02:24 . 2011-06-28 02:24 0 —-a-w- c:\users\James Mann\AppData\Local\BIT758D.tmp 2011-06-22 17:50 . 2011-06-22 19:26 ——– d—–w- c:\program files (x86)\GLIntercept0_5 2011-06-22 15:01 . 2011-05-24 23:14 270720 ——w- c:\windows\system32\MpSigStub.exe 2011-06-22 13:35 . 2011-06-22 13:35 ——– d—–w- c:\program files (x86)\ESET 2011-06-18 03:04 . 2011-06-18 03:04 ——– d—–w- c:\program files (x86)\tamasoftware 2011-06-17 15:44 . 2011-05-10 11:59 22360 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-06-17 15:44 . 2011-05-10 12:04 287576 —-a-w- c:\windows\system32\drivers\aswSP.sys 2011-06-17 15:44 . 2011-05-10 11:59 31064 —-a-w- c:\windows\system32\drivers\aswRdr.sys 2011-06-17 15:44 . 2011-05-10 12:02 53592 —-a-w- c:\windows\system32\drivers\aswTdi.sys 2011-06-17 15:43 . 2011-05-10 12:04 600920 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2011-06-17 15:43 . 2011-05-10 12:10 253888 —-a-w- c:\windows\system32\aswBoot.exe 2011-06-17 15:43 . 2011-05-10 11:59 64344 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-06-17 15:43 . 2011-05-10 12:10 40112 —-a-w- c:\windows\avastSS.scr 2011-06-17 15:43 . 2011-05-10 12:10 199304 —-a-w- c:\windows\SysWow64\aswBoot.exe 2011-06-17 15:43 . 2011-06-17 15:43 ——– d—–w- c:\programdata\AVAST Software 2011-06-17 15:43 . 2011-06-17 15:43 ——– d—–w- c:\program files\AVAST Software 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\users\James Mann\AppData\Roaming\Malwarebytes 2011-06-17 15:18 . 2011-05-29 13:11 39984 —-a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\programdata\Malwarebytes 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-06-17 15:18 . 2011-05-29 13:11 25912 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-06-17 14:43 . 2011-04-25 05:32 1896832 —-a-w- c:\windows\system32\drivers\tcpip.sys 2011-06-17 14:43 . 2011-04-25 02:44 499712 —-a-w- c:\windows\system32\drivers\afd.sys 2011-06-17 13:08 . 2011-04-29 03:13 461312 —-a-w- c:\windows\system32\drivers\srv.sys 2011-06-17 13:08 . 2011-04-29 03:12 399872 —-a-w- c:\windows\system32\drivers\srv2.sys 2011-06-17 13:08 . 2011-04-29 03:12 161792 —-a-w- c:\windows\system32\drivers\srvnet.sys 2011-06-17 12:58 . 2011-05-04 02:51 287744 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-06-17 12:58 . 2011-05-04 02:51 157696 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-06-17 12:58 . 2011-05-04 02:51 126464 —-a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-06-17 12:58 . 2011-05-28 03:07 3133952 —-a-w- c:\windows\system32\win32k.sys 2011-06-17 12:50 . 2011-05-03 05:21 976896 —-a-w- c:\windows\system32\inetcomm.dll 2011-06-17 12:50 . 2011-05-03 04:50 740864 —-a-w- c:\windows\SysWow64\inetcomm.dll 2011-06-17 11:49 . 2011-04-29 05:47 1110528 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:49 . 2011-04-29 05:08 759296 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:47 . 2011-01-17 06:17 197120 —-a-w- c:\windows\system32\d3d10_1.dll 2011-06-17 11:47 . 2011-01-17 05:38 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll 2011-06-17 11:44 . 2010-12-18 06:13 861184 —-a-w- c:\windows\system32\oleaut32.dll 2011-06-17 11:44 . 2010-12-18 05:31 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll 2011-06-17 11:32 . 2011-04-27 02:57 102400 —-a-w- c:\windows\system32\drivers\dfsc.sys . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-06 13:41 . 2011-02-14 16:28 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll 2011-07-06 13:39 . 2010-08-30 23:00 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2011-07-06 13:38 . 2011-02-14 16:26 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2011-07-06 13:38 . 2011-02-14 16:26 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2011-06-30 16:24 . 2010-08-30 23:00 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll 2011-06-30 16:23 . 2011-04-26 18:16 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2011-06-30 16:01 . 2010-08-30 22:58 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2011-06-30 16:01 . 2010-08-30 22:58 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2011-04-23 13:39 . 2011-04-23 13:39 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-5\Microsoft.MediaCenter.Sports.UI.dll 2011-04-22 20:18 . 2011-06-02 19:39 27008 —-a-w- c:\windows\system32\drivers\Diskdump.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-06-21_16.05.31 ))))))))))))))))))))))))))))))))))))))))) . + 2011-06-30 16:07 . 2011-05-04 04:52 86528 c:\windows\SysWOW64\SearchFilterHost.exe - 2009-07-14 00:13 . 2009-07-14 01:14 86528 c:\windows\SysWOW64\SearchFilterHost.exe + 2011-06-30 16:07 . 2011-05-04 04:52 59392 c:\windows\SysWOW64\msscntrs.dll - 2009-07-14 00:12 . 2009-07-14 01:15 59392 c:\windows\SysWOW64\msscntrs.dll + 2011-06-30 16:07 . 2011-05-24 10:34 44544 c:\windows\SysWOW64\devrtl.dll - 2009-07-13 23:16 . 2009-07-14 01:15 44544 c:\windows\SysWOW64\devrtl.dll - 2009-07-13 23:16 . 2009-07-14 01:15 64512 c:\windows\SysWOW64\devobj.dll + 2011-06-30 16:07 . 2011-05-24 10:34 64512 c:\windows\SysWOW64\devobj.dll + 2009-07-14 04:54 . 2011-07-15 01:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2011-06-21 16:05 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 04:54 . 2011-06-21 16:05 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-07-15 01:42 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-07-15 01:42 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-06-21 16:05 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-30 14:07 . 2011-07-14 05:05 61258 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-07-15 01:29 30522 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-05-05 22:36 . 2011-07-15 01:29 17574 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-619826061-120817133-1486808799-1000_UserData.bin + 2011-06-30 16:07 . 2011-05-04 05:28 75264 c:\windows\system32\msscntrs.dll - 2009-07-14 00:29 . 2009-07-14 01:41 75264 c:\windows\system32\msscntrs.dll + 2010-05-05 19:45 . 2011-07-15 01:37 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 19:45 . 2011-06-20 22:38 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 19:45 . 2011-06-20 22:38 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-05-05 19:45 . 2011-07-15 01:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-07-15 01:37 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-06-20 22:38 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-05-05 21:19 . 2011-06-21 15:48 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-05 21:19 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2011-07-08 17:36 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2010-05-05 21:19 . 2011-06-21 15:48 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-05-05 21:19 . 2011-07-15 01:30 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-05-05 21:19 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-05-05 21:19 . 2011-06-21 15:48 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-05 20:55 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 20:55 . 2011-06-21 15:48 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-05 20:55 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-05-05 20:55 . 2011-06-21 15:48 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-02-10 09:15 . 2011-02-10 09:15 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll + 2011-04-13 02:16 . 2011-04-13 02:16 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll + 2011-04-12 19:11 . 2011-04-12 19:11 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll - 2011-02-10 08:10 . 2011-02-10 08:10 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll + 2011-07-06 15:40 . 2011-07-06 15:40 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll - 2011-04-20 20:47 . 2011-04-20 20:47 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2011-07-06 15:40 . 2011-07-06 15:40 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2011-04-20 20:47 . 2011-04-20 20:47 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2011-07-06 15:40 . 2011-07-06 15:40 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2011-04-20 20:47 . 2011-04-20 20:47 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2011-04-20 20:47 . 2011-04-20 20:47 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2011-04-20 20:47 . 2011-04-20 20:47 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2011-04-20 20:46 . 2011-04-20 20:46 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2011-07-06 15:40 . 2011-07-06 15:40 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll - 2011-04-20 20:46 . 2011-04-20 20:46 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2011-07-06 15:40 . 2011-07-06 15:40 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2011-07-06 15:40 . 2011-07-06 15:40 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2011-04-20 20:46 . 2011-04-20 20:46 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2011-04-20 20:46 . 2011-04-20 20:46 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2011-07-06 15:40 . 2011-07-06 15:40 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2011-04-20 20:46 . 2011-04-20 20:46 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2011-07-06 15:40 . 2011-07-06 15:40 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll - 2011-04-20 20:46 . 2011-04-20 20:46 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-07-06 15:40 . 2011-07-06 15:40 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2011-07-06 15:40 . 2011-07-06 15:40 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2011-04-20 20:46 . 2011-04-20 20:46 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2011-07-06 15:40 . 2011-07-06 15:40 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2011-04-20 20:46 . 2011-04-20 20:46 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll - 2011-04-20 20:46 . 2011-04-20 20:46 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2011-07-06 15:40 . 2011-07-06 15:40 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2011-04-20 20:46 . 2011-04-20 20:46 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2011-07-06 15:40 . 2011-07-06 15:40 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll - 2011-04-20 20:46 . 2011-04-20 20:46 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2011-07-06 15:40 . 2011-07-06 15:40 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2011-04-20 20:46 . 2011-04-20 20:46 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2011-07-06 15:40 . 2011-07-06 15:40 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2011-04-20 20:46 . 2011-04-20 20:46 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2011-07-06 15:40 . 2011-07-06 15:40 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2011-04-20 20:46 . 2011-04-20 20:46 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-07-06 15:40 . 2011-07-06 15:40 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-07-06 15:40 . 2011-07-06 15:40 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-04-20 20:46 . 2011-04-20 20:46 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-04-20 20:46 . 2011-04-20 20:46 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-07-06 15:39 . 2011-07-06 15:39 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2011-07-06 15:39 . 2011-07-06 15:39 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2011-04-20 20:46 . 2011-04-20 20:46 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2011-06-30 16:34 . 2011-06-30 16:34 65536 c:\windows\Installer\{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe + 2011-06-30 16:34 . 2011-06-30 16:34 65536 c:\windows\Installer\{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}\ARPPRODUCTICON.exe + 2011-07-07 02:52 . 2011-07-07 02:52 42496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\e7db9562ecd26271bb6ceac7026ea333\System.Windows.Presentation.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\e0fc9c42b2d28edebc1dd2c67c5c94a7\System.Web.ApplicationServices.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 97792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\32d3441efb46d802cdc65de502f28e3b\System.AddIn.Contract.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\512c12c2af578c00e8655b0ec2a92102\Microsoft.VisualC.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\4a82ab8680409c1dc5a55e26742e8900\dfsvc.ni.exe + 2011-07-07 02:46 . 2011-07-07 02:46 58368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\b1136d0eb9ce963a7675b0d6cd7c4c4e\Accessibility.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\4cd8ba75f60cf8dc66767b833520241e\UIAutomationProvider.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\3261cf5aa8c44f49ea44e995bb1c798c\System.Windows.Presentation.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\8f37e1ebcb6a993092f8701f4f0bff4e\System.Web.ApplicationServices.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f43eab6f117c2733cc296f11e8ebe9ed\System.ServiceModel.Channels.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\a1cbada42bb39fc34ee40e9e4afba87e\System.AddIn.Contract.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\2bdbd057211d05a088b7a9004203e58b\Microsoft.VisualC.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\0c39314a7513b436d3aaaeae3b4bd3e7\Accessibility.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\0936d4d4d46026a04b2e21f17e46a012\System.Windows.Presentation.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\1d3a83e09a28dd5fb6cda016154d0211\System.Web.DynamicData.Design.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\01558bff07cd0456e5e5c96baab32109\stdole.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\cac2c644dd74469a15d4916b12e0dd7f\PresentationFontCache.ni.exe + 2011-06-30 19:53 . 2011-06-30 19:53 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\871c244a2ed9b51c7d85cf80ca9f8a54\PresentationCFFRasterizer.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\852d785f12f9f9a83e74697ae3863899\PresentationCFFRasterizer.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\4459b3220c0d01c5095aff4843afe7e1\Microsoft.WSMan.Runtime.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\e1c1b4ab295d49b143ccb298abedcefb\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d50c56a1fcc3eac99b747471a64ca9ba\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\ca1711e2ce458e2a694db63e77093fb8\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4c409e10f8d8aff82b61b74bcbf492aa\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\2d00e7010bf9509e1faba8f4ba11eff2\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\1cc11bb59928fb91fd3c81ed05d93e91\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\462b524ff0c8c0a764db439f7e65cb69\Microsoft.VisualC.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\4fe8c2ca11723478fc8d1754b1688a43\Microsoft.MediaCenter.iTv.Hosting.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\6dae15a913cf2d938ab0b8bd606eef92\LoadMxf.ni.exe + 2011-06-30 20:36 . 2011-06-30 20:36 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\6f48498cd972f0a0736f0830446c5d47\ehiUPnP.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\f8634180de4e5009466f9aacea9cc674\ehiTVMSMusic.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\f920ffd33e54c8c2954b0aa4922e20bb\dfsvc.ni.exe + 2011-06-30 19:52 . 2011-06-30 19:52 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\c2168c88a30bf127c60151d55a5c22be\Accessibility.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\f725e377b47c9b07f51eba56fdd9713c\WindowsLiveWriter.ni.exe + 2011-06-30 20:48 . 2011-06-30 20:48 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\08f47903e3defb93f36922473ea7d85b\WindowsLive.Writer.Api.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\9d7aab9667ebfa0f1ca6793eab33d8c4\WiaProxy32.ni.exe + 2011-06-30 19:49 . 2011-06-30 19:49 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\c23f8386031ea70eb7bdb59367fe2f0f\UIAutomationProvider.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8493fe7a36a59066ccd7d372c323e2f3\System.Windows.Presentation.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\0df3e084246e59e6d76b4c6fe20490e5\System.Web.DynamicData.Design.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\06c1d6555bb91041268c72e494ef8a3b\System.ComponentModel.DataAnnotations.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\ad0f1ab7ed22fca35ebdc7086df735d8\System.AddIn.Contract.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\6919a773b3ef64b520141fffd580d970\stdole.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f335fea7b2493cb9c8b33316b63384f7\PresentationFontCache.ni.exe + 2011-06-30 19:49 . 2011-06-30 19:49 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\8bb5c19c22974f2710cd517f292573b0\PresentationCFFRasterizer.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\14fc256bd9e28939d16a723623463ca7\PresentationCFFRasterizer.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\1d312fff41010364fac3b45fcc267c4b\napcrypt.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\65b9f969c06c88e1ddcba7af0c240d7d\Microsoft.WSMan.Runtime.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ecf78a76d679f911e23ebf3ef33f2b5e\Microsoft.Windows.Diagnosis.SDHost.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e364216f848a0ffe80af6fd29d53307e\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d19a5388794d9c574fba9ed5d0e74202\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c09b3c71ab425c97e66b866ecd648687\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bb93ef5a747a4d1d8539e9f6b0428f6e\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\8a1d7a90314ab9634f2db1fe388ef86d\Microsoft.Windows.Diagnosis.SDEngine.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\618f725ca04e1bbf419c3a16789f8b70\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\c8f3fc98bd32cade613f279bf4af3c77\Microsoft.Vsa.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\ea183e8b958908d26680bb6e88d4fbb0\Microsoft.VisualC.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\b20f6742224b9c733f41e2ea1b834fc2\Microsoft.Build.Framework.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\9d58ae6973a51b87eaf4141686f20fec\Microsoft.Build.Framework.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\ac5697c7cd1a169310fe9ada1822d9e0\Interop.WIA.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\8065ab477932e0308175a4ac031456c5\ehiUserXp.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\1040a6847fcc7f5c3245fe8a68623597\dfsvc.ni.exe + 2011-06-30 19:49 . 2011-06-30 19:49 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5c6e1a094b1e65c69b528151cc19b1ee\Accessibility.ni.dll + 2010-12-25 00:06 . 2011-07-01 18:10 3644 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-619826061-120817133-1486808799-1003_UserData.bin + 2011-07-08 17:35 . 2011-07-08 17:35 9560 c:\windows\system32\NetworkList\Icons\{A84E8EC4-0B58-4BC1-9077-E0C389AAEBF4}_48.bin + 2011-07-08 17:35 . 2011-07-08 17:35 4280 c:\windows\system32\NetworkList\Icons\{A84E8EC4-0B58-4BC1-9077-E0C389AAEBF4}_32.bin + 2011-07-08 17:35 . 2011-07-08 17:35 2456 c:\windows\system32\NetworkList\Icons\{A84E8EC4-0B58-4BC1-9077-E0C389AAEBF4}_24.bin - 2011-06-21 16:03 . 2011-06-21 16:03 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-07-15 01:41 . 2011-07-15 01:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-07-15 01:41 . 2011-07-15 01:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-06-21 16:03 . 2011-06-21 16:03 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-07-07 02:41 . 2011-07-07 02:41 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\cec5dc6db7419a80bba3f9d73833fb65\dfsvc.ni.exe - 2009-07-14 00:14 . 2009-07-14 01:14 164352 c:\windows\SysWOW64\SearchProtocolHost.exe + 2011-06-30 16:07 . 2011-05-04 04:52 164352 c:\windows\SysWOW64\SearchProtocolHost.exe - 2009-07-14 00:14 . 2009-07-14 01:14 428032 c:\windows\SysWOW64\SearchIndexer.exe + 2011-06-30 16:07 . 2011-05-04 04:52 428032 c:\windows\SysWOW64\SearchIndexer.exe - 2009-07-14 00:13 . 2009-07-14 01:15 666624 c:\windows\SysWOW64\mssvp.dll + 2011-06-30 16:07 . 2011-05-04 04:52 666624 c:\windows\SysWOW64\mssvp.dll - 2009-07-14 00:14 . 2009-07-14 01:15 197120 c:\windows\SysWOW64\mssphtb.dll + 2011-06-30 16:07 . 2011-05-04 04:52 197120 c:\windows\SysWOW64\mssphtb.dll + 2011-06-30 16:07 . 2011-05-04 04:52 337408 c:\windows\SysWOW64\mssph.dll - 2009-07-14 00:13 . 2009-07-14 01:15 337408 c:\windows\SysWOW64\mssph.dll + 2011-06-30 16:07 . 2011-05-24 10:32 252928 c:\windows\SysWOW64\drvinst.exe - 2009-07-13 23:16 . 2009-07-14 01:14 252928 c:\windows\SysWOW64\drvinst.exe + 2011-06-30 16:07 . 2011-05-24 10:34 145920 c:\windows\SysWOW64\cfgmgr32.dll - 2009-07-13 23:16 . 2009-07-14 01:15 145920 c:\windows\SysWOW64\cfgmgr32.dll + 2010-06-02 20:55 . 2011-07-14 20:37 246790 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2010-05-07 17:40 . 2011-07-15 01:21 286248 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2011-06-30 16:07 . 2011-05-24 11:21 404992 c:\windows\system32\umpnpmgr.dll + 2011-06-30 16:07 . 2011-05-04 05:24 249856 c:\windows\system32\SearchProtocolHost.exe - 2009-07-14 00:30 . 2009-07-14 01:39 249856 c:\windows\system32\SearchProtocolHost.exe - 2009-07-14 00:32 . 2009-07-14 01:39 593408 c:\windows\system32\SearchIndexer.exe + 2011-06-30 16:07 . 2011-05-04 05:24 593408 c:\windows\system32\SearchIndexer.exe + 2011-06-30 16:07 . 2011-05-04 05:24 113664 c:\windows\system32\SearchFilterHost.exe - 2009-07-14 00:29 . 2009-07-14 01:39 113664 c:\windows\system32\SearchFilterHost.exe + 2009-07-14 02:36 . 2011-07-15 01:35 670886 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2011-06-21 15:53 670886 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-07-15 01:35 124164 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2011-06-21 15:53 124164 c:\windows\system32\perfc009.dat - 2009-07-14 00:30 . 2009-07-14 01:41 779264 c:\windows\system32\mssvp.dll + 2011-06-30 16:07 . 2011-05-04 05:28 779264 c:\windows\system32\mssvp.dll + 2011-06-30 16:07 . 2011-05-04 05:28 288256 c:\windows\system32\mssphtb.dll - 2009-07-14 00:32 . 2009-07-14 01:41 288256 c:\windows\system32\mssphtb.dll + 2011-06-30 16:07 . 2011-05-04 05:28 491520 c:\windows\system32\mssph.dll - 2009-07-14 00:30 . 2009-07-14 01:41 491520 c:\windows\system32\mssph.dll + 2009-07-14 05:01 . 2011-07-15 01:41 392360 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-04-13 02:16 . 2011-04-13 02:16 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll - 2011-02-10 09:15 . 2011-02-10 09:15 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll - 2011-04-20 20:38 . 2011-02-07 23:30 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll + 2011-06-30 16:07 . 2011-03-29 22:26 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll - 2011-02-10 08:10 . 2011-02-10 08:10 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll + 2011-04-12 19:11 . 2011-04-12 19:11 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll + 2011-04-12 19:11 . 2011-04-12 19:11 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll - 2011-02-10 08:10 . 2011-02-10 08:10 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll - 2011-02-10 08:10 . 2011-02-10 08:10 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll + 2011-04-12 19:11 . 2011-04-12 19:11 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll + 2011-06-30 16:07 . 2011-03-29 22:31 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll - 2011-04-20 20:38 . 2011-02-07 23:35 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2011-06-30 16:07 . 2011-03-29 22:31 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2011-04-20 20:38 . 2011-02-07 23:35 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2011-04-20 20:38 . 2011-02-07 23:35 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2011-06-30 16:07 . 2011-03-29 22:31 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll - 2011-04-20 20:47 . 2011-04-20 20:47 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2011-07-06 15:40 . 2011-07-06 15:40 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll + 2011-07-06 15:40 . 2011-07-06 15:40 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2011-04-20 20:47 . 2011-04-20 20:47 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll - 2011-04-20 20:46 . 2011-04-20 20:46 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2011-07-06 15:40 . 2011-07-06 15:40 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll + 2011-07-06 15:40 . 2011-07-06 15:40 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2011-04-20 20:46 . 2011-04-20 20:46 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2011-07-06 15:40 . 2011-07-06 15:40 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-04-20 20:46 . 2011-04-20 20:46 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll - 2011-04-20 20:46 . 2011-04-20 20:46 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll + 2011-07-06 15:40 . 2011-07-06 15:40 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2011-04-20 20:46 . 2011-04-20 20:46 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2011-07-06 15:40 . 2011-07-06 15:40 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll - 2011-04-20 20:46 . 2011-04-20 20:46 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2011-07-06 15:40 . 2011-07-06 15:40 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2011-07-06 15:40 . 2011-07-06 15:40 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll + 2011-07-06 15:40 . 2011-07-06 15:40 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll - 2011-04-20 20:46 . 2011-04-20 20:46 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2011-07-06 15:40 . 2011-07-06 15:40 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2011-04-20 20:46 . 2011-04-20 20:46 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2011-07-06 15:40 . 2011-07-06 15:40 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2011-04-20 20:46 . 2011-04-20 20:46 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2011-04-20 20:46 . 2011-04-20 20:46 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2011-07-06 15:40 . 2011-07-06 15:40 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2011-07-06 15:40 . 2011-07-06 15:40 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2011-07-06 15:40 . 2011-07-06 15:40 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2011-07-06 15:40 . 2011-07-06 15:40 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2011-04-20 20:46 . 2011-04-20 20:46 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll + 2011-07-06 15:40 . 2011-07-06 15:40 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2011-04-20 20:46 . 2011-04-20 20:46 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2011-04-20 20:46 . 2011-04-20 20:46 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll - 2011-04-20 20:46 . 2011-04-20 20:46 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2011-07-06 15:40 . 2011-07-06 15:40 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2011-04-20 20:46 . 2011-04-20 20:46 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2011-07-06 15:40 . 2011-07-06 15:40 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2011-04-20 20:46 . 2011-04-20 20:46 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2011-07-06 15:40 . 2011-07-06 15:40 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2011-04-20 20:46 . 2011-04-20 20:46 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2011-04-20 20:46 . 2011-04-20 20:46 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2011-07-06 15:40 . 2011-07-06 15:40 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll + 2011-07-06 15:40 . 2011-07-06 15:40 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2011-04-20 20:46 . 2011-04-20 20:46 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2011-07-06 15:40 . 2011-07-06 15:40 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2011-07-06 15:40 . 2011-07-06 15:40 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2011-04-20 20:46 . 2011-04-20 20:46 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2011-04-20 20:46 . 2011-04-20 20:46 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2011-07-06 15:40 . 2011-07-06 15:40 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2011-04-20 20:46 . 2011-04-20 20:46 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2011-07-06 15:40 . 2011-07-06 15:40 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll - 2011-04-20 20:46 . 2011-04-20 20:46 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2011-07-06 15:40 . 2011-07-06 15:40 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2011-07-06 15:40 . 2011-07-06 15:40 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2011-04-20 20:46 . 2011-04-20 20:46 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2011-04-20 20:46 . 2011-04-20 20:46 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2011-07-06 15:40 . 2011-07-06 15:40 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll + 2011-07-06 15:40 . 2011-07-06 15:40 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2011-04-20 20:46 . 2011-04-20 20:46 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2011-07-06 15:40 . 2011-07-06 15:40 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2011-04-20 20:46 . 2011-04-20 20:46 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2011-07-06 15:40 . 2011-07-06 15:40 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2011-07-06 15:40 . 2011-07-06 15:40 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll - 2011-04-20 20:46 . 2011-04-20 20:46 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll - 2011-04-20 20:46 . 2011-04-20 20:46 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2011-07-06 15:40 . 2011-07-06 15:40 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2011-04-20 20:47 . 2011-04-20 20:47 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll + 2011-07-06 15:40 . 2011-07-06 15:40 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll - 2011-04-20 20:46 . 2011-04-20 20:46 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2011-07-06 15:40 . 2011-07-06 15:40 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2011-04-20 20:46 . 2011-04-20 20:46 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2011-04-20 20:46 . 2011-04-20 20:46 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2011-07-06 15:40 . 2011-07-06 15:40 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll - 2011-04-20 20:46 . 2011-04-20 20:46 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2011-07-06 15:40 . 2011-07-06 15:40 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll + 2011-07-06 15:40 . 2011-07-06 15:40 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll - 2011-04-20 20:46 . 2011-04-20 20:46 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2011-07-06 15:40 . 2011-07-06 15:40 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2011-04-20 20:46 . 2011-04-20 20:46 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll + 2011-07-06 15:40 . 2011-07-06 15:40 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2011-04-20 20:46 . 2011-04-20 20:46 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll - 2011-04-20 20:46 . 2011-04-20 20:46 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2011-07-06 15:40 . 2011-07-06 15:40 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll + 2011-07-06 15:40 . 2011-07-06 15:40 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll - 2011-04-20 20:46 . 2011-04-20 20:46 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2011-07-06 15:40 . 2011-07-06 15:40 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2011-04-20 20:46 . 2011-04-20 20:46 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2011-04-20 20:46 . 2011-04-20 20:46 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2011-07-06 15:40 . 2011-07-06 15:40 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2011-04-20 20:46 . 2011-04-20 20:46 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2011-07-06 15:40 . 2011-07-06 15:40 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-07-06 15:40 . 2011-07-06 15:40 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2011-04-20 20:46 . 2011-04-20 20:46 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2011-07-06 15:40 . 2011-07-06 15:40 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-20 20:46 . 2011-04-20 20:46 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-07-06 15:40 . 2011-07-06 15:40 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2011-04-20 20:46 . 2011-04-20 20:46 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2011-07-06 15:40 . 2011-07-06 15:40 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2011-07-06 15:40 . 2011-07-06 15:40 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2011-04-20 20:46 . 2011-04-20 20:46 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-07-06 15:39 . 2011-07-06 15:39 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2011-07-06 15:39 . 2011-07-06 15:39 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-20 20:46 . 2011-04-20 20:46 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2011-04-20 20:46 . 2011-04-20 20:46 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-07-06 15:40 . 2011-07-06 15:40 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2011-05-17 10:09 . 2011-05-17 10:09 926720 c:\windows\Installer\220335.msi + 2011-07-07 02:52 . 2011-07-07 02:52 322048 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\67701a0afb40872303a50c673387ba22\WindowsFormsIntegration.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\21b0a1645439e2c615a317dc4cca191d\UIAutomationTypes.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 122368 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\792559a31b651ec7c2d5da9847961736\UIAutomationProvider.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\550c47e15879f39fed79e4eb1c2195db\UIAutomationClient.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 525824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\0a0a776f67e84c2da967ac111c5df164\System.Xml.Linq.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 254976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\cf8c22d4266e070a299c02d2850ef818\System.Windows.Input.Manipulations.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\4b6a7186f6c401b66d1be535e7d6104a\System.Transactions.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 280576 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\a829cc80ca5acc2da26bd8ea918e1a4e\System.ServiceProcess.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 107520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\5381d639b68e4fcd1233df4aaa8fc9be\System.ServiceModel.Channels.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 507904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\23cddffe6a749acdc1cf2bbf7ea2470c\System.ServiceModel.Routing.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 939520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\82566fadb4cce4b082e9d8be861cb407\System.Security.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 376320 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\93ee99e5061f73f7e0d64e28e72acdd8\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\7706bf7b15e5f41daf680bf00fb3040b\System.Runtime.Remoting.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 176640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\97a9eaf09596eebab9ed3e17546ae804\System.Numerics.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 930304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\92ffc2dd1a4c2ea95b472a26e774a835\System.Net.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\b8de5567948f35962ddf7122752ff04d\System.Messaging.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\b131749bfb98ce8ec9b87ce2841afe60\System.Management.Instrumentation.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\0fe92ebf0087c98840e99d37480711c0\System.IO.Log.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\4b0079c9d88b51955f53d52f6b7f3e5a\System.IdentityModel.Selectors.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\c22b41c9c0a31a087d16689ac0889607\System.EnterpriseServices.Wrapper.dll + 2011-07-07 02:46 . 2011-07-07 02:46 511488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\77f9d335a1781905c342869dbf6220c6\System.Dynamic.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 628736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\82362eb90e580c5b2afc3150c69d784f\System.DirectoryServices.Protocols.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\342afec9aa4ee8a572a0cd8da6833a5c\System.Device.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\bf4f62e5c39821ee6225ed92dae486ed\System.Data.DataSetExtensions.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 181248 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\ad9d61d394a46e9f9590b0a9f0fa0ad5\System.Configuration.Install.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\693ee2ff660f89258326be91758da220\System.ComponentModel.DataAnnotations.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\5f08af7480608daceecfec057280efac\System.AddIn.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 553472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\4afbca9170450994db0228341d24c42d\System.Activities.DurableInstancing.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 430080 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\a6cc942cdc5c454b6d707f346946ff02\SMSvcHost.ni.exe + 2011-07-07 02:48 . 2011-07-07 02:48 184832 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\991bb9aedef58467529703e0c83af2de\SMDiagnostics.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 745984 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\fdac975a3fac325ee1cb3961bbc11acf\PresentationFramework.Luna.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 331264 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\e5e71b03b631939f951c85fb1cddab68\PresentationFramework.Classic.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 555520 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\7028852deef01a6e4e4636db5e12e09b\PresentationFramework.Aero.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 387584 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1354d301871cb639ab1b885c626f1ffe\PresentationFramework.Royale.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 422400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\4754eb5629d571dac6586602b1f1fbd6\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\54d05db00d011c7d8e34613a76156a27\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 279552 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\4f99fd1b2d217c9950b0e7c053b9e906\CustomMarshalers.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\97a1f8a5a83114e0cea11549602e8e72\WindowsFormsIntegration.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\7297158168dfc68b1b96bf6b0f56b093\UIAutomationTypes.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\acc81364b5b1d54918a55f0ae0fbc043\UIAutomationClient.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\ff20e15edfa14ce628b0502173347062\System.Xml.Linq.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\40e165d670da20b9911cf7f15db916d2\System.Windows.Input.Manipulations.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\0df91adfb9c0e51b7b967d61e8151b78\System.Transactions.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\840f9b4d51622f9f29888aae168a196c\System.ServiceProcess.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8e99e3e3b47a1b63e678271947a72e22\System.ServiceModel.Routing.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\cbb93497a3dddc9ab32316cc54dfb16a\System.Security.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\a31a4045963913a3228777af311f4428\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 762368 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\8985ef7c12df01b25c53bd80f7103819\System.Runtime.Remoting.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\6bff4a4db9703b01e7495f5f9e0f2baf\System.Numerics.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\ce945fe046c7c152d4785fe24c22eee9\System.Net.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\f07d8a06ff89e9c2db9f2ad73e88d421\System.Messaging.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\ec65b7f29e6d9c27cad0bb4f6199701f\System.Management.Instrumentation.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\5e1621afee65228e6dc7fbc9fb35f091\System.IO.Log.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\1f10456671d393187b6e2511155b8cd6\System.IdentityModel.Selectors.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\401ca9defa4213be5372532a2754d50d\System.EnterpriseServices.Wrapper.dll + 2011-07-07 02:42 . 2011-07-07 02:42 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\401ca9defa4213be5372532a2754d50d\System.EnterpriseServices.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\c87031ba66d6a1809ac68142397eeddf\System.Dynamic.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\f75ffd1a51b56e5171335277ca7d2ead\System.DirectoryServices.Protocols.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\448b1912c09fe3be836533e1c04332ce\System.DirectoryServices.AccountManagement.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\a8f34f6b7fc87869ea63c0a5a45e4106\System.Device.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\8e8d0552f18365e5f57fe20cf3aebcbb\System.Data.DataSetExtensions.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\618e6d3cd8824d6d72ae1767acaa1078\System.Configuration.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\1f12624743789147c54a5c70b34e47b7\System.Configuration.Install.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\4ce4ff836715d7e822200dd340ce8c32\System.ComponentModel.DataAnnotations.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\15f169fe8bb8f4cf564093b812c46959\System.ComponentModel.Composition.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\285ebbd21d182235113a348c951afd12\System.AddIn.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\4a37977779bc648b11b8c333bfc1c2b8\System.Activities.DurableInstancing.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\7190f7e40c8095e13f45e40b1709671f\SMSvcHost.ni.exe + 2011-07-07 02:41 . 2011-07-07 02:41 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\b028b6680f5a3b315320a5bf7b659518\SMDiagnostics.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\b61b31d1f518e9663fc204e7de21215a\PresentationFramework.Aero.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a348b36756a7be813df69750717dd563\PresentationFramework.Luna.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9c37ac442a730e335146d5a82c52ed39\PresentationFramework.Royale.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7da6438d5b963b85283a2b793e60aadf\PresentationFramework.Classic.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\7e182b360a875b8723e9f988bef9f2ca\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\23c48b3a578d71fd90e8d8db8e7d6b37\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\dcc2883f0bbf0909874059fe9768016b\CustomMarshalers.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\3cdff7617120272a285c0778ddbe8785\WsatConfig.ni.exe + 2011-06-30 20:40 . 2011-06-30 20:40 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\034d7dab8fddcce6cc6ac14bf5b938a5\WindowsFormsIntegration.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 472576 c:\windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\99d41e14e62e0c53f6e8647fea14937b\VistaBridgeLibrary.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 472576 c:\windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\7c9a3d3235cfaf6b0d4758e31774695d\VistaBridgeLibrary.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 736768 c:\windows\assembly\NativeImages_v2.0.50727_64\VDialog\ed73ed3a383b036ffd435348fa1ca8b0\VDialog.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 736768 c:\windows\assembly\NativeImages_v2.0.50727_64\VDialog\94cbc5195318da05d26e852e6c4b2cf7\VDialog.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\3037924076c4aaaa6fab19a9308e5d54\UIAutomationTypes.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\fc2c67900e0ace0d072de3eb7a31cce3\UIAutomationProvider.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\021b892d67d9024dcadc010ec9e5d074\UIAutomationClient.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\4cd6cd3dc41c5603693294e236eadb56\TaskScheduler.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\ffb7fbe35e074849c7a79dbabe948ca1\System.Xml.Linq.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\50e18215fcf7801691f04d49a983633a\System.Web.Routing.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\c8747fbd5dd2323b75bcb2c12c13347d\System.Web.RegularExpressions.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\8b169b243129316576604e18d79cfab6\System.Web.RegularExpressions.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\1e400f46cba4bb4902d568a82ad60d2b\System.Web.Entity.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\64773e3cb1730204d222479298c1cc0a\System.Web.Entity.Design.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\4b1f2df7128b1fbc3dde66b64a6349f1\System.Web.DynamicData.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\43e59ba475383c5322c9793d54725242\System.Web.Abstractions.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\e343fffd6ec45648489a22fe2dcf5aae\System.Transactions.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\ddda329caaf3cdad2bbac4de74938f72\System.Transactions.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\dbdfbf571cc7241cc774c10a03d94796\System.ServiceProcess.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\b2020b08219034119bce1e880f7012b9\System.ServiceProcess.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\e5a5e6c0712fd8aa47bbb5c82b484540\System.Security.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\d49b8e18fd6ffad83e5d754510dc0558\System.Security.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\6ab519c7bbe997fb8f7defe5dbce3d3a\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-06-30 19:53 . 2011-06-30 19:53 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\3af29ab4ef4b085402fbb441327bc1cb\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\f0ce9d7a823da2bc5b90916625b5df66\System.Net.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\e1eed4ca47e6db7c74beb540a038fa2e\System.Messaging.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\05306f592a8235eda1def41077c48f56\System.Management.Instrumentation.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\6eccb7acd6ac6e7d0fa8680fcdb3415b\System.IO.Log.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\f9cb3d6a53b63af1c56cd81ff92c449f\System.IdentityModel.Selectors.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\ee435574b1737903fbabea17b56fe63c\System.EnterpriseServices.Wrapper.dll + 2011-06-30 17:57 . 2011-06-30 17:57 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d07f5137a7ee406674e4151548c1525a\System.EnterpriseServices.Wrapper.dll + 2011-06-30 19:55 . 2011-06-30 19:55 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\eb93c5c584d44066b2a55bc94a6efd7c\System.Drawing.Design.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\bd5bee5204b1444288488359989f33c5\System.Drawing.Design.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\bfc8d654000eabfa10c5bca536e9e34d\System.DirectoryServices.Protocols.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\7d49104f885dee3550aeb057ef8dd187\System.DirectoryServices.Protocols.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\5c515902c7ba2ded1fd720503fd54ec8\System.Data.Services.Design.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\57c5c9e7ee7306072de335d0f5636354\System.Data.DataSetExtensions.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\f8e8ca6e1b6511524443663e0cfa2d99\System.Configuration.Install.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\f589ae614b4a352774e2321940f7149d\System.Configuration.Install.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\7e998433b55bda4645a91d878e2477a9\System.ComponentModel.DataAnnotations.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\781679ea2c458cacbdae304246804093\System.AddIn.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\2f9a3f7cb355902f1006b526d6e283a2\System.AddIn.Contract.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\6f0949db9a999cee6e55c5783a90cee0\sysglobl.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\2cc84c9eabf5d843ea8acdbc1e2fc80a\SMSvcHost.ni.exe + 2011-06-30 20:35 . 2011-06-30 20:35 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\4ae695c589ed4ee554302ea297c8076a\SMDiagnostics.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\e207555f45a7e649f1e8b9f770467326\PresentationFramework.Royale.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\cb65355a9bbd399c423bd99919801679\PresentationFramework.Classic.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\714b2f8c07fe3619b3c410b1f1628323\PresentationFramework.Royale.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\6bdbda1d46bf16fd7b2ba3c51720230f\PresentationFramework.Luna.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\62e6217215e4ac93fda351c18ea47c1b\PresentationFramework.Classic.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\37eb9c855b89a40d56921b3396929bce\PresentationFramework.Aero.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\3695ec040d9d9b539a91fa5143131a09\PresentationFramework.Aero.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\1b4f4608a2cdc8b32bf592914e902fe5\PresentationFramework.Luna.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 241152 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\4b11e840a692548e27b99ceb1d6f0e3c\PaintDotNet.SystemLayer.Native.x64.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 241152 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\2a4a852f22a84072ec70fb1000f7c398\PaintDotNet.SystemLayer.Native.x64.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 415232 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Resourc#\f140d89f9c6b69e639ee2f71451cb507\PaintDotNet.Resources.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 415232 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Resourc#\c4185eb21a38af58f18a9b15bdff1bd7\PaintDotNet.Resources.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 764416 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Data\c9c81f06c97dd5e6550ae1ee587b5868\PaintDotNet.Data.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 764416 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Data\1bec440403667ffe22fcb078860869f7\PaintDotNet.Data.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\2ee8a2096e53d60929ba527beb9e1885\napsnap.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\3e9fa433da6237f65e8f56dbabf86813\napinit.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\bc5d158b3f2d97939fe5a6c0f8c8f87b\naphlpr.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\701f374ba78342978c5545d4840259ea\napcrypt.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 408064 c:\windows\assembly\NativeImages_v2.0.50727_64\MyDock.Util\6a590f3beb77a7b600d8bd2c8e58eeab\MyDock.Util.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 408064 c:\windows\assembly\NativeImages_v2.0.50727_64\MyDock.Util\428826f9b359fdc6221e240a4afebc44\MyDock.Util.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\102c7425c3560c7829677aa92f2cadf7\MSBuild.ni.exe + 2011-06-30 20:37 . 2011-06-30 20:37 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\93364e11cdb203a4c112c7abe44afc52\MMCFxCommon.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\50c2c593d7d523723a2dce06afaa83db\Microsoft.WSMan.Management.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\7159dd2e07054feb06d826680fab3aed\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\d9ad995c7eed5c062f79a13382f40ff2\Microsoft.Vsa.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\d1afd9fbf4330a1a527417f78985e35b\Microsoft.Vsa.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\8655c3dd6bfddc6971965a32f4ba9ddb\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f05e252848ac19cce1f2b5a22710009f\Microsoft.PowerShell.ConsoleHost.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\c752ca12c2f05b985d4333af3639dbc8\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\774e416f90e63ceced5217745ddc4fce\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\19eb9afedd454d84b91317ac5baaedf0\Microsoft.PowerShell.Security.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\fb13690e69e392188649d3e3c59cd921\Microsoft.MediaCenter.iTv.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\de2d4bbaa58771b23113771e76a7355a\Microsoft.MediaCenter.Sports.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\d9d07e40aa4d6c3c46995c9574c3fd8a\Microsoft.MediaCenter.ITVVM.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\caf14921c856727e272697e9a362b295\Microsoft.MediaCenter.Interop.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1914d9bcc2faafe5093c491ead42baed\Microsoft.MediaCenter.iTv.Media.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\08f5774ef2dc04109835970cef7233f1\Microsoft.MediaCenter.Playback.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\0076f69bb5c6881d61e165282655c5cb\Microsoft.MediaCenter.Mheg.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 797696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\5be69ad589b672dcbdec01445f56afbc\Microsoft.ManagementConsole.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\b82000397850cfe72f32fe1712dbc3fa\Microsoft.Build.Utilities.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\3b8737dfb0c0b8237b86e58433832e38\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\fe53bc9afbbe7ddcd019b5901f385f56\Microsoft.Build.Framework.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\5dba71a416170b8fcc087cbc041bbd36\Microsoft.Build.Framework.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\d41d9a0fe5e0f68c8d16e446c0db090c\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\7776f0878fd11bf3d82ca292f7f3338f\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\60008858b034574075897c78d928fe04\Mcx2Dvcs.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\f8b5c86ed10424bd5f4fa57998ec1fb7\mcupdate.ni.exe + 2011-06-30 20:36 . 2011-06-30 20:36 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\8f522534b83e5cbb0305486deb61fabc\mcstoredb.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\eaa57fe7cd0ce04bf168fd1dd20ff420\mcplayerinterop.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\ba1c186a0c58fe3bc0e2cbf9d91a9a4e\mcGlidHostObj.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\5e915d085b432c78cabc5d8a06856d68\MCESidebarCtrl.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 262144 c:\windows\assembly\NativeImages_v2.0.50727_64\Interop.WIA\bd8810237d49de889b2ee21d6359b2c3\Interop.WIA.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 714240 c:\windows\assembly\NativeImages_v2.0.50727_64\ICSharpCode.SharpZi#\877a6b7ad926ce3a8dd5c3ac176383c4\ICSharpCode.SharpZipLib.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 714240 c:\windows\assembly\NativeImages_v2.0.50727_64\ICSharpCode.SharpZi#\3aad6c23c58f1139a79199c4266ad299\ICSharpCode.SharpZipLib.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\300dde414cbd950fab9100f4febffee9\EventViewer.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\0d4bd9b9cc3c6604796eebbfeed8c9bc\ehRecObj.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\3246efb99373e55bd1b959773544f022\ehiWUapi.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\f8c0d91c775ad878662d36cb268bf7fc\ehiwmp.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\289204adea622e38771b847a05f17234\ehiUserXp.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\ea53b7b91eaaf84cbee21ecff7fb23ba\ehiiTv.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\a15758a37bd60ea85c32a17af495a155\ehiExtens.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\39d8adbc139377384f9860c83fe28ebd\ehiBmlDataCarousel.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\5ec72efeb5de80ecfded0ef5244e008a\ehiActivScp.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\443f31f2a3891cf1996a148b06095665\ehExtHost.ni.exe + 2011-06-30 20:35 . 2011-06-30 20:35 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\551afe259a7cedb27757a4bc058e35db\ehCIR.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\3d024b5626eab42124b4924936eb7e61\CustomMarshalers.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\f9dce8b8d03f651a4c2276c3605e36ba\ComSvcConfig.ni.exe + 2011-06-30 18:01 . 2011-06-30 18:01 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\50ea580c660f52705eb38c9aa72b3c1f\ComSvcConfig.ni.exe + 2011-06-30 20:34 . 2011-06-30 20:34 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\4ff00c10b4e7ede3121f6262d9541440\BDATunePIA.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\4ad38985138510291545e1e57de60c87\BDATunePIA.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\373a480080a7101d1ade3b5947f82a0b\WsatConfig.ni.exe + 2011-06-30 20:48 . 2011-06-30 20:48 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\6401c4627df691db41a954fe61cc0eb7\WindowsLiveLocal.WriterPlugin.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d7d43a7755d3feb81c3f97b6f96fe88f\WindowsLive.Writer.HtmlParser.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d4c84a9e23527de0cd26a442f1d54a7b\WindowsLive.Writer.Passport.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\cf3cc746f8bd4a0d345b364d9dc35532\WindowsLive.Writer.BrowserControl.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\76839d9a63fa1ea456cf14e174a032cb\WindowsLive.Writer.FileDestinations.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\71a62f294838ba7492efd21846bb4fff\WindowsLive.Writer.Interop.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6a908b5c56cd444fa093a31f0f5da967\WindowsLive.Writer.Mshtml.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6431066959840f2a3652fc945ec7edf7\WindowsLive.Writer.Extensibility.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\525eb3368568bae13088446bd1a7fea7\WindowsLive.Writer.SpellChecker.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\48b6eb446444a54c9bc07767c5545c68\WindowsLive.Writer.Interop.SHDocVw.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\390670d147f267ba735333489472bd2c\WindowsLive.Writer.BlogClient.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\37d94c3f9728d7f7ba35b3b450e0f406\WindowsLive.Writer.Controls.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\31094775e8da8d55a36cd804d8dbc7e8\WindowsLive.Writer.Interop.Mshtml.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\27b62d6dd92040b4fdaf59261143d264\WindowsLive.Writer.Instrumentation.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0ecbf7242833b906eecf3fdc4626497e\WindowsLive.Writer.HtmlEditor.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\09680fa628f8a12a9a9f1935ada464a4\WindowsLive.Writer.Localization.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\668bc50143b5b05b7a70d061f24bb7a3\WindowsLive.Client.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\e353149c06e4844344cf04b12efa75ea\WindowsFormsIntegration.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\efadc7a54e78f3755da53c95bdc293fd\UIAutomationTypes.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\a75001c926c261bf57def3e36d65589c\UIAutomationClient.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\ffdf9317e0b93b23afb730cd479a2a5d\TaskScheduler.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\43c7a50b800812e3867c5d535d5ec7a1\System.Xml.Linq.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\dc5bdd8f4a485330a82e8efe0528d972\System.Web.Routing.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\a195a9d4e3887d3c961e7b45d9871346\System.Web.RegularExpressions.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\3dc1c80ff02ba4d2c2e3e9aed4f54cc7\System.Web.RegularExpressions.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\9851e6d5da6226248832e051e7456e7a\System.Web.Extensions.Design.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\3b6e9a3a3488ee7cf91444b59ca513ce\System.Web.Entity.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\1cf6432592706f0ccf71d8268d1aefb6\System.Web.Entity.Design.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\683fd94cf3441a95c54f9e752d5f82ee\System.Web.DynamicData.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\8d9835767afa6516d9b02476ad8cdff3\System.Web.Abstractions.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\717413fe4e471af11f0e7582de10e54c\System.Transactions.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\1e222b13bd299b1f3b08de3fa5bfddc5\System.Transactions.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\f9ffcc587ef2413ab41b32653958ae3e\System.ServiceProcess.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d9b3bb263a38ca5767baf78cacf380d8\System.ServiceProcess.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\cd75660f4231fbe96d58a15f5cbf032a\System.Security.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\42b85af831d23c585748b8d15de4e5a5\System.Security.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\83e806ce9d3ebebf8d172970127757ab\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\49808a136a06851076bbe79665e5de19\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\443b11b528455611c7549b56349a56eb\System.Runtime.Remoting.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2972274bb857f15e12b49edde916a345\System.Runtime.Remoting.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\e75ac4f1b9e55b9336bde135abc026c8\System.Net.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\490dbe889baa699a3228661d2438dd37\System.Messaging.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\565a1d9d3fed4d64ddb884a49a1a0e25\System.Management.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\a62507f369fa2d0509f29235dd15eed6\System.Management.Instrumentation.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\f30d56b751b798574e6ce7506347b8d0\System.IO.Log.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\af3132a868705a9837d4816641f40ed0\System.IdentityModel.Selectors.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\491bef3594be0a6030dfefd320e14b86\System.EnterpriseServices.Wrapper.dll + 2011-06-30 19:50 . 2011-06-30 19:50 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\491bef3594be0a6030dfefd320e14b86\System.EnterpriseServices.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\01d683a570d33263a72431d385375bea\System.EnterpriseServices.Wrapper.dll + 2011-06-30 18:00 . 2011-06-30 18:00 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\01d683a570d33263a72431d385375bea\System.EnterpriseServices.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ff6fe7446d57402e4050a14ea1251207\System.Drawing.Design.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\868f0d1db924ba60bdb4db448ccc1916\System.Drawing.Design.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\e1134326b8b23452e5ac3f9abf949f18\System.DirectoryServices.AccountManagement.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c633931b350a2fa6db36176cd3c2b0f8\System.DirectoryServices.Protocols.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\4f6cff3f0e5a4a8600ede24ee2ece438\System.DirectoryServices.Protocols.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\48a7107c1d40b7e7c6aa6dffdc405869\System.Data.Services.Client.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2778851146a53b6e88ced224e6853bba\System.Data.Services.Design.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4f282df684db617cf70b4ca6041d604f\System.Data.Entity.Design.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\edf9204db6473ca27b469ad13fb35ba1\System.Data.DataSetExtensions.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e8add38eb4f9c07790b5be549c5f0dae\System.Configuration.ni.dll + 2011-06-30 17:59 . 2011-06-30 17:59 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\382e0e35e0fad4e055dc40b9f1e1d870\System.Configuration.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\f3c2582e86aea03aaea35f9c16a1b33b\System.Configuration.Install.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c6b6161062774afe093c7d2afe7b0b8d\System.Configuration.Install.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\5d67728817b729f128c5c918e699453a\System.AddIn.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\788cc2579c0a59283c3a1f24ac41323f\sysglobl.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d020e27483816c49f80473371fb3c514\SMSvcHost.ni.exe + 2011-06-30 20:48 . 2011-06-30 20:48 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\c3a9fb49784a53ce475a592c15728888\SMDiagnostics.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d739c4b3c1f9e479a626f67071017128\PresentationFramework.Aero.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bb47336255fc109e70899259f2094977\PresentationFramework.Classic.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9115e64a33c13b7a2b94abde9c098d32\PresentationFramework.Luna.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6963f6f4fc68bd1aaaf1a2b01cb23071\PresentationFramework.Luna.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\68f632bff279326062eff2d841f38687\PresentationFramework.Royale.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\27a52ba1706d33e869b9e6de700bbcc9\PresentationFramework.Classic.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\01fb19e134ed95c45d9cdd55802d0ac0\PresentationFramework.Aero.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\01d55f85e9f6240d1de192f0ff29884d\PresentationFramework.Royale.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\53c796b08f5067059ae24fa3bdaff98e\PaintDotNet.SystemLayer.Native.x86.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\1132e138e6f95b155fd2cf64ceeb14a8\PaintDotNet.SystemLayer.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 805376 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\4d8c27dcc839a9506964d513bb3530eb\PaintDotNet.Base.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\5238cf9b328e8b3226a048ebb33be846\napsnap.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\985d63377e634f94b5a57c3617d556af\napinit.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\71c2fc1d1280cd485b65e5375945d19c\naphlpr.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\877c4bda63902c26f94940609de6d0ca\MSBuild.ni.exe + 2011-06-30 20:49 . 2011-06-30 20:49 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\5a66a820bd20848def555cf0a53e4ee8\MMCFxCommon.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\e971674683c536bcae479bf6b43978a3\Microsoft.WSMan.Management.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\3cddcd8c15cf7f01124b4d18e3d5da65\Microsoft.Transactions.Bridge.Dtc.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 532480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\50531bf9c8a2d01f6506b7ae04e7f2fb\Microsoft.SqlServer.GridControl.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d696ecd83047d560fd61516d405b5a12\Microsoft.PowerShell.ConsoleHost.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b40dd81e7805dfcaf68bc4005b630a7d\Microsoft.PowerShell.GraphicalHost.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ae4d802ca546567b0a6053714a3097f0\Microsoft.PowerShell.Security.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\847228cbf936f94fd4beb03d5e475a02\Microsoft.PowerShell.Commands.Management.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7ed8e0f0c5db5f5f796288d3e102087b\Microsoft.PowerShell.Commands.Diagnostics.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\a504c0bec4447c7ec8147ff536f8b5db\Microsoft.ManagementConsole.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\e60b20693c1542d3d467b477f222ca6c\Microsoft.Build.Utilities.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\cabe88480362e7d218cd167e5ff93ab0\Microsoft.Build.Utilities.v3.5.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\76b709b79b54c3bc2677ec4cc5ada8f5\Microsoft.Build.Engine.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c92ca1d14705fa4ee219f998a7188160\Microsoft.Build.Conversion.v3.5.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\6448618db5745bbf8d56052df82414a1\mcstoredb.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\ebaae5d75aa27874c8271a8799c32868\EventViewer.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\0c894577a263ea4df5e3dde399f2661c\ehRecObj.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\f2747d575b6d8d07fc1277773bd1c5e7\ehiVidCtl.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\7f130b6c3d44f0c572719397cbe3459b\ehiProxy.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\e79e25723507c1a8ce45167bcebfb167\ehiExtens.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\07ade9cd02c449501826d9adcdb89198\ehExtHost32.ni.exe + 2011-06-30 20:49 . 2011-06-30 20:49 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\2e8bbdf2a971ffe1ba403c620989954c\CustomMarshalers.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\756b3904b970132fb10c1a278cc80483\ComSvcConfig.ni.exe + 2011-06-30 19:59 . 2011-06-30 19:59 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\70186b262e81391a24d9fbda946a3fe2\BDATunePIA.ni.dll + 2011-06-30 16:07 . 2011-05-04 04:53 1553920 c:\windows\SysWOW64\tquery.dll - 2009-07-14 00:13 . 2009-07-14 01:15 1401856 c:\windows\SysWOW64\mssrch.dll + 2011-06-30 16:07 . 2011-05-04 04:52 1401856 c:\windows\SysWOW64\mssrch.dll + 2011-06-30 17:22 . 2011-06-30 17:22 6336000 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\setup_2.2.1.75[1].msi + 2011-06-30 16:07 . 2011-05-04 05:30 2326016 c:\windows\system32\tquery.dll + 2011-06-30 16:07 . 2011-05-04 05:28 2228224 c:\windows\system32\mssrch.dll - 2009-07-14 00:35 . 2009-07-14 01:41 2228224 c:\windows\system32\mssrch.dll + 2009-07-14 04:45 . 2011-06-30 19:47 4896160 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2011-06-17 14:36 4896160 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2011-06-17 16:27 3802522 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2011-06-30 19:50 3802522 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2010-05-06 21:56 . 2011-07-13 08:19 1116040 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2011-04-12 19:11 . 2011-04-12 19:11 5028200 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll + 2011-03-23 02:01 . 2011-03-23 02:01 3510600 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll + 2011-04-13 02:16 . 2011-04-13 02:16 4967248 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll - 2011-02-10 09:15 . 2011-02-10 09:15 1453392 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll + 2011-04-13 02:16 . 2011-04-13 02:16 1453392 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll - 2011-02-10 09:15 . 2011-02-10 09:15 1513816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll + 2011-04-13 02:16 . 2011-04-13 02:16 1513816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll + 2011-04-13 02:16 . 2011-04-13 02:16 1525064 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll + 2011-04-13 02:16 . 2011-04-13 02:16 9800008 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll - 2009-07-13 20:37 . 2009-06-10 20:40 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2011-06-30 16:07 . 2011-03-29 22:26 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2011-06-30 16:07 . 2011-01-20 00:42 3178496 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll - 2009-07-13 20:37 . 2009-06-10 20:40 3178496 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll + 2011-06-30 16:07 . 2011-03-29 22:26 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll - 2011-04-20 20:38 . 2011-02-07 23:30 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll + 2011-06-30 16:07 . 2011-03-29 22:26 1576784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - 2011-04-20 20:38 . 2011-02-07 23:30 1576784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - 2011-04-20 20:38 . 2011-02-07 23:30 1764184 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll + 2011-06-30 16:07 . 2011-03-29 22:26 1764184 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll + 2011-04-12 19:11 . 2011-04-12 19:11 5028200 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll + 2011-03-23 02:01 . 2011-03-23 02:01 3510600 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll + 2011-04-12 19:11 . 2011-04-12 19:11 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll + 2011-04-12 19:11 . 2011-04-12 19:11 1142104 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll - 2011-02-10 08:10 . 2011-02-10 08:10 1142104 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll + 2011-04-12 19:11 . 2011-04-12 19:11 6735176 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll - 2011-02-10 08:10 . 2011-02-10 08:10 6735176 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll + 2011-06-30 16:07 . 2011-03-29 22:31 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2009-07-13 20:46 . 2009-06-10 21:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll - 2009-07-13 20:46 . 2009-06-10 21:23 3178496 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-06-30 16:07 . 2011-01-19 23:32 3178496 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll + 2011-06-30 16:07 . 2011-03-29 22:31 5915984 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll + 2011-06-30 16:07 . 2011-03-29 22:31 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2011-04-20 20:38 . 2011-02-07 23:35 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll - 2011-04-20 20:47 . 2011-04-20 20:47 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2011-07-06 15:40 . 2011-07-06 15:40 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2011-07-06 15:40 . 2011-07-06 15:40 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2011-04-20 20:46 . 2011-04-20 20:46 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2011-07-06 15:40 . 2011-07-06 15:40 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2011-04-20 20:46 . 2011-04-20 20:46 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2011-07-06 15:40 . 2011-07-06 15:40 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2011-04-20 20:46 . 2011-04-20 20:46 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll - 2011-04-20 20:46 . 2011-04-20 20:46 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2011-07-06 15:40 . 2011-07-06 15:40 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-04-20 20:46 . 2011-04-20 20:46 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2011-04-20 20:46 . 2011-04-20 20:46 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll - 2011-04-20 20:46 . 2011-04-20 20:46 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2011-07-06 15:40 . 2011-07-06 15:40 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2011-04-20 20:46 . 2011-04-20 20:46 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2011-07-06 15:40 . 2011-07-06 15:40 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2011-04-20 20:46 . 2011-04-20 20:46 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll + 2011-07-06 15:40 . 2011-07-06 15:40 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-04-20 20:46 . 2011-04-20 20:46 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2011-07-06 15:40 . 2011-07-06 15:40 3453792 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2011-04-20 20:46 . 2011-04-20 20:46 3453792 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2011-07-06 15:40 . 2011-07-06 15:40 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-04-20 20:46 . 2011-04-20 20:46 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2011-07-06 15:40 . 2011-07-06 15:40 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2011-07-06 15:39 . 2011-07-06 15:39 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-04-20 20:46 . 2011-04-20 20:46 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2011-04-20 20:46 . 2011-04-20 20:46 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2011-07-06 15:40 . 2011-07-06 15:40 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2011-07-06 15:39 . 2011-07-06 15:39 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2011-07-06 15:40 . 2011-07-06 15:40 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2011-04-20 20:46 . 2011-04-20 20:46 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2011-03-25 13:16 . 2011-03-25 13:16 5135872 c:\windows\Installer\6a0b40.msp + 2011-07-07 02:47 . 2011-07-07 02:47 5176320 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\b85182fc8cb6b68aa8d5895b2dcf50fb\WindowsBase.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\fc0f6caeac4b62e4453a981e8dd9e992\UIAutomationClientsideProviders.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 7038976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\40018241d849ad878f76dcbb22d5fc12\System.Xml.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 2447360 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\3cb1b81e1d90af2a7cc6bd2d4e41fd9e\System.Xaml.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 5627392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\9d393c8287d436c1ea11ef2ca2a755ac\System.Windows.Forms.DataVisualization.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 2222592 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\ed8b807859c169bbb7543c43baa3c46f\System.Web.Services.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 2733568 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\a129d574137f4829ef3a6eacee64094d\System.Speech.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 1904640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\8db9c29aee38fc9934549ad6bf59f0d3\System.ServiceModel.Activities.ni.dll + 2011-07-07 02:52 . 2011-07-07 02:52 1561600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\0e6ba2c11ddf0405b6c7066a345f7f15\System.ServiceModel.Discovery.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 3404288 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\11a7b044d8ed163b690a74486484e08f\System.Runtime.Serialization.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 1346560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\abf0cf0b488e39c97d961cd40978e514\System.Runtime.DurableInstancing.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 1422336 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\cbff165d2eee7f23b284f6830fd267c2\System.Printing.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\2b81b61ad1b36207e49962f22658d6ef\System.Management.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\f192d95372b472643187607ef7a55117\System.IdentityModel.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 1096704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\c22b41c9c0a31a087d16689ac0889607\System.EnterpriseServices.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 2290688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\0d248e7219f87d2a3853f8a1d425965a\System.Drawing.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 1622016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\49467224883b56bb7f006c307dbfeb65\System.DirectoryServices.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 1217024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\2637c192d310b158dd6d00dbfe8a49f0\System.DirectoryServices.AccountManagement.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 2400256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\991208daf29872f43e6684f5c6f100e3\System.Deployment.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 8580608 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\e4bc4fb58d9830daa0b8e7e031d3e2ae\System.Data.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 3386880 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\80c2fb68f224322ea14229a75dd4975c\System.Data.SqlXml.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 1791488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\8539eeead63ef32bd938a66589c0816b\System.Data.Services.Client.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 3380736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\36b03e7d976b707f3c8eef3fbe0e469a\System.Data.Linq.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 1255424 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\e06823dc3b60e2b55981f6d74ee9d9e1\System.Configuration.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 1002496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\a2ed1733acb5793b7f6e00d706e7ae1f\System.ComponentModel.Composition.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 5680640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\803b90bb06cdd2834f5be8aa194c8bb5\System.Activities.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 4887040 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\e2d47e53e4ca392fa98d5e23e69827a8\System.Activities.Presentation.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 2005504 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\2273e9b1f9f04cf906d31ab17f24c279\System.Activities.Core.Presentation.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 4127232 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\65847157601a8f77b6e9415eb38d2192\ReachFramework.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 2032128 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\3275a80a6a180597640f877b30a44395\PresentationUI.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\d719ea7ff4729771fd367b5da217e474\Microsoft.VisualBasic.Activities.Compiler.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 1843200 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\b42ecbfe8bc489110fa0aaa1ef379dc2\Microsoft.VisualBasic.Compatibility.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 2314752 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\744d38da96091b44ff26a966425f247d\Microsoft.VisualBasic.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 1510400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\bcace9b4169e7ec28c0c73ed55df0639\Microsoft.Transactions.Bridge.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 3312128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\4351bfa190b7948085e361e0447a9eb8\Microsoft.JScript.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 2009088 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\882e595affe5d439ca4bb68d671f8fb9\Microsoft.CSharp.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\3154b66d01dcd674b256e03d5f359fac\WindowsBase.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\2b22ef03091f893f5b381514149a472b\UIAutomationClientsideProviders.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 9085440 c:\windows\assembly\NativeImages_v4.0.30319_32\System\5a8bf6ab1a6ba60e7355fa4cc61fd0c5\System.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\7cc17b90932adaad5651ceb526cade44\System.Xml.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\19f85a4f6faaeb87a9055ccf23a9f8b7\System.Xaml.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\de9ec945d6cdd90010c824320e8bc332\System.Windows.Forms.DataVisualization.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 1859584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\3e5c07211446b947b1ecb6963946320a\System.Web.Services.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 2011136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\11a89b103320d603c0bfa48179c3fe1d\System.Speech.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\e492bb75168cc53d57c2dd5e32e9911c\System.ServiceModel.Activities.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b66a8b2c0b8c12540831b41c92bede12\System.ServiceModel.Discovery.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\d0ce480f313eb8be9a3a4dd6d7902325\System.Runtime.Serialization.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\b9f7f5b0b28dd57cb5400c437c388545\System.Runtime.DurableInstancing.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 1050112 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\39c3d706f0fbc21443c7747f203b0b34\System.Printing.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\76d7e84f5dca7908b45edba58bd12f48\System.Management.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\02c1363d5beb2ae5c5722bc8f6c5b77a\System.IdentityModel.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\53591520988a6ee49924e1efc911df30\System.Drawing.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\66c88143bc4b9f4a744b6d65e2c3629a\System.DirectoryServices.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 1878016 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\03ca38b342903b50623336b29aa507c9\System.Deployment.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\6e6f321459aa81611031cfb582e77cc6\System.Data.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\dcdaf1644fb3aabdbea894f05d55e1ba\System.Data.SqlXml.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\0e629bbc4ccd76e072189ccbc9d7903f\System.Data.Services.Client.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\b11b842599889fe730da493d0c5e1857\System.Data.Linq.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 7054336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\0d4cdd1b911d6e28b4fd5c43ab39f7ea\System.Core.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 4121088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\4d3a20f0598b5da0ebf9e505b51886b9\System.Activities.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 3713024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\e4566f552e3bda84571e04a7e5d1c41f\System.Activities.Presentation.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 1518080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\236373716dcb48f5687dd6997559a425\System.Activities.Core.Presentation.ni.dll + 2011-07-07 02:42 . 2011-07-07 02:42 2859008 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\48530a5ad6ec27254cde667e02d3f198\ReachFramework.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1630208 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\5dcab8576a5e02d7264bfeed28ce69b9\PresentationUI.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\dcc02014610a0955ea2696b29f00abea\Microsoft.VisualBasic.Compatibility.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\b4879bc20d7a718dcb51f0419721e5e5\Microsoft.VisualBasic.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\aff7d215dd130cd94c54784c2df60e95\Microsoft.VisualBasic.Activities.Compiler.ni.dll + 2011-07-07 02:41 . 2011-07-07 02:41 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\156733cb276aff562e0c39d8b4fde1c6\Microsoft.Transactions.Bridge.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\2f83c7b63b1443a26f40b9f66bec3e2a\Microsoft.JScript.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\fcccb5e4d4bd338c678efcfa2b3e1058\Microsoft.CSharp.ni.dll + 2011-06-30 17:55 . 2011-06-30 17:55 4927488 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\c81c84c47697765de4899f740b641225\WindowsBase.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 4927488 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\9a7fe519c6f4e8b1835103f58c764230\WindowsBase.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\e610635cb374d99e2f1da639ab3c4a2f\UIAutomationClientsideProviders.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\c1a94ffc51f8b13df1f53a498b11eddb\System.Xml.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\a413318043a6d2cf335510930906ba86\System.Xml.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\ad1d0b1b90359583750a7813f8c927c7\System.WorkflowServices.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\fd1e6acea8c9272b705d45d97025d675\System.Workflow.Runtime.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\75922002ccac7c34c37f85b680651e32\System.Workflow.Runtime.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\6e42c599ca35dce41ceed0e4e92e1b6d\System.Workflow.ComponentModel.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\6476971667e15c7f255c2f575e49aef6\System.Workflow.ComponentModel.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\6594308e088edbdb00fd20fbb75a55ee\System.Workflow.Activities.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\3f2d84c6fbe894392dd7cf402ccddcbc\System.Workflow.Activities.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\c16ba3491b593dd05ebc4058d50a62a0\System.Web.Services.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\3fbcda368210e2bb3b2a97e79121426a\System.Web.Services.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\a086b42f66cf3ea72e12872d6b90caca\System.Web.Mobile.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 3041792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\9dd95758fc5553c337a26265e55b07f3\System.Web.Extensions.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\8730b99288f3518a73820106bfdc3a9a\System.Web.Extensions.Design.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\2a640c9d570eded72c1a5a2b7f3c1b75\System.Speech.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\b921807486042f731c2245af7c08816b\System.ServiceModel.Web.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\f7be50d0baef2c65b280e77a6de6f858\System.Runtime.Serialization.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\f35ee562399b021dd81de2db27d8af9c\System.Runtime.Remoting.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\52fd09f748e4e1aacab0343622b1c439\System.Runtime.Remoting.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\9b9cba50f8b8f502f4c0b175ee134b20\System.Printing.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\684d4f74483d91b310a8c393c5efb633\System.Printing.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 1408512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\798dfe98b8deb89bb9b00ff5f04622cc\System.Management.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1408512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\07ee41ebb140e4e2f4b4769d06d81008\System.Management.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 1433088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\009ad6d42ef972d7d0a78e3d8b2258e8\System.IdentityModel.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\ee435574b1737903fbabea17b56fe63c\System.EnterpriseServices.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\d07f5137a7ee406674e4151548c1525a\System.EnterpriseServices.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\a2a7565bc69f3bc0adf70215025aad4a\System.Drawing.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\a02003ba4c5782ac25ad5e99e34dd24a\System.Drawing.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\d2341c41440609c2be1ca7f5ba762ec8\System.DirectoryServices.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\ab5272d0c55e371434b3ab38b5a8e31d\System.DirectoryServices.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3f8340399a6322c0eda86dd9ac7114a9\System.DirectoryServices.AccountManagement.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\5ffa97a96ed3ccf999de4afee23a40a4\System.Deployment.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\47430798b1f34aa911fc690d8ced8a9a\System.Deployment.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 8692736 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\d25a23cfd20c27e9db447dc002c68386\System.Data.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 8692736 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\6548b7e91cb5fd09a1c0497b9693100b\System.Data.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\d51cbbd789ee45aa772405cf365c18b4\System.Data.SqlXml.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\bd445747dacfb4b0f123b91dff354e03\System.Data.SqlXml.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\2a4b31cbc2551043cb1f9db26087fc89\System.Data.Services.ni.dll + 2011-06-30 20:40 . 2011-06-30 20:40 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\ce56e80dd805d1370be7d23604fe9fbc\System.Data.Services.Client.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\fcd975ee9078f268b8260c2a1abe71fc\System.Data.OracleClient.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\2927544982c0a7fc4601751efb17de29\System.Data.OracleClient.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\e5644f8995fe92008c6376e6fa097bfb\System.Data.Linq.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\80d9e58f0ae33baa2beb8dedf2975ef5\System.Data.Entity.Design.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\cbac0c6212e176a2c2766b717a1a9a82\System.Core.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\403bba6861b7d53df13abeee5e8a53c5\System.Core.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\7343284f67e3c15289594d979bd6be05\System.Configuration.ni.dll + 2011-06-30 17:53 . 2011-06-30 17:53 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\0dc6a3ba9c64ebe8d943a1ac39a826f3\System.Configuration.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\e13376a436dff6254e2cdc4635b36ff3\ReachFramework.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\403012bab4059a6c61ef7817f97b4b1a\ReachFramework.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\881e3b15c447aff8523d77dadfb051f6\PresentationUI.ni.dll + 2011-06-30 19:53 . 2011-06-30 19:53 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\52106405117416fc963ec1fd59497c88\PresentationUI.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\6dba89af5c38c7b748c7193b2e2c8f2c\PresentationBuildTasks.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 4349952 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet\bc67cf7820a2c0f8e3168b287605358c\PaintDotNet.ni.exe + 2011-06-30 20:35 . 2011-06-30 20:35 4349952 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet\03ab0a337e0b7f0b1370bdf09041b51b\PaintDotNet.ni.exe + 2011-06-30 20:34 . 2011-06-30 20:34 1310720 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\9e8b233a5efdb104d63666143dc093a3\PaintDotNet.SystemLayer.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1310720 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\7777df3cbaf8a48fdf95dcc7639c07ad\PaintDotNet.SystemLayer.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 1069568 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Effects\eb3d1e586a2397131c1e357cfb091abb\PaintDotNet.Effects.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1069568 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Effects\d70af698db7db6c0e9256fa338a0a02e\PaintDotNet.Effects.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 2607616 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Core\fd96bad51df50809bdd4f24721bb06f0\PaintDotNet.Core.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 2607616 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Core\153e433f26e5069a4c8cfea2bcffff6c\PaintDotNet.Core.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1091584 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Base\37cb9ef291dbd082e61f438f37f481e6\PaintDotNet.Base.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 1091584 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Base\1bc59a7c0ab61e2414d5eb3af2c2fb40\PaintDotNet.Base.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\226b23b9b6f9cee5d7abfc0d950c9d38\Narrator.ni.exe + 2011-06-30 20:38 . 2011-06-30 20:38 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\c7ae597f04825ab2a17a5f66e5c5f868\MMCEx.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 7966208 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\ee90f1e5e0363ff3c307053d82265044\MIGUIControls.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\c6c1e343898e63ec3602143bdbcd4e85\Microsoft.VisualBasic.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\64824259035b565d3e8aa3053f319a0b\Microsoft.VisualBasic.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 1598464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\add2a6704c30c73baa27b677fb022b12\Microsoft.Transactions.Bridge.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\e2dab5d88b2e1d66ab0e014a01a1fe2a\Microsoft.PowerShell.Commands.Management.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 2175488 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\924a1550459060e1dfc45d6fb3726739\Microsoft.PowerShell.Commands.Utility.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\729d5cc07f5ea4e78899b135fb373f02\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\1675b40867bcd8f7449924531487dfb8\Microsoft.PowerShell.Editor.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\aa0ca860d5798ba89b71d07eb7a90f23\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7df550915ad25ef85ac952c920f3b1f9\Microsoft.MediaCenter.UI.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5e48deb3266a1deb548ba331ec70bb6e\Microsoft.MediaCenter.Shell.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5ae76be4484ce454e39e71b15d7ad40a\Microsoft.MediaCenter.Bml.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\3c35b132f64e9e23bd80afcc1a526c83\Microsoft.MediaCenter.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 3208192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\9300e82370041e11d51c54b43e20d40c\Microsoft.JScript.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 3208192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\8cf55eaf3843fb968e7460c9a564cfb7\Microsoft.JScript.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\72b382bc27533e2af6f7858ef51a3df3\Microsoft.Ink.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 2677760 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\e10161b77d8e76c8a5d2d0d12820392e\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4bee5dc75502e0c7f89940ae9fc763fc\Microsoft.Build.Tasks.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\930be5380b6cc5a1537644779c51a64a\Microsoft.Build.Engine.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\2458288e73aaef081dbc85f263f1d1ec\Microsoft.Build.Engine.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\94668b09bd0ae557bc97c8d80ba72dae\mcstore.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 4087296 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\74ac75aaee2ec4264adfbd8a7921f6a4\mcepg.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\8a8c7d6eb6109efcdaf31427dba23cb8\ehiVidCtl.ni.dll + 2011-06-30 20:36 . 2011-06-30 20:36 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\8f4ea304ab5cef3511ec2248d162ed2b\ehiProxy.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 3434496 c:\windows\assembly\NativeImages_v2.0.50727_64\DellDock\78148cd777a5f727e18652035be38441\DellDock.ni.exe + 2011-06-30 18:00 . 2011-06-30 18:00 3434496 c:\windows\assembly\NativeImages_v2.0.50727_64\DellDock\01920a33bb93746d306f2625947d0f60\DellDock.ni.exe + 2011-06-30 20:48 . 2011-06-30 20:48 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\edd6433ded4921802d05626343919b43\WindowsLive.Writer.PostEditor.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\bab6bc7e53c3abdb362dae47155083da\WindowsLive.Writer.ApplicationFramework.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1ac109b05ccf712c59c431ab8d28a47d\WindowsLive.Writer.CoreServices.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fe1e858554242ef38a67d1feb12e9929\WindowsBase.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\93e867e55d7df3a8b4bd1aba3af6f18d\WindowsBase.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\c38fdbce21ee0675e9ab5ae0faed57b5\UIAutomationClientsideProviders.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\f7048e198c963fa189cff3aea17dfee3\System.ni.dll + 2011-06-30 17:59 . 2011-06-30 17:59 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\db1396b6523a2f4365dfe488be1466f9\System.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\682572c507ea7552c3db1842c21bf9c8\System.Xml.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\46f4a1782f6563d472747bc5a87981f4\System.Xml.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\552f8aaaf0883da379ea52a663b059c1\System.WorkflowServices.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\9ae0a5e093e3b7ffa425ce56ba8295e3\System.Workflow.Runtime.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\48cba18aeddce254264944eb645daa02\System.Workflow.Runtime.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\dbe0573833d7f8e4eddb7057398fed50\System.Workflow.ComponentModel.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\2bdd77e038f2ae4b4f55ba5b159c83bb\System.Workflow.ComponentModel.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\abd78d3c9f978f654ad75907db97a939\System.Workflow.Activities.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\ab70b38c4c6f3960f96d0fe4f5d13432\System.Workflow.Activities.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b23902f1472dd40155d43928f1d6af37\System.Web.Services.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\77631b8c99bc572962e558cdac417477\System.Web.Services.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\1209d7e54ef107a1fff6a2b394079f85\System.Web.Mobile.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 2402816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\ed9f2c61572eece33a5e7a2a90aefb24\System.Web.Extensions.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\c1c431a434b0c86097b2cecd0c79698b\System.Speech.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\c7f98d3d0c1e5f3e7bd477034c3a0779\System.ServiceModel.Web.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a93babbfac74bef9adb0aa3fbc36c5ef\System.Runtime.Serialization.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\97e2715fb0520281ec87e08cc254625e\System.Printing.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\52f311529cb8e922835b314c016c164f\System.Printing.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\01fa939a2f6d851ce0e40b0dca6eeea7\System.Management.Automation.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\59694fca62614230df5f9e022f0ef635\System.IdentityModel.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 1586688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e979f76558e7e1f7127a5244fb5a0347\System.Drawing.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1586688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\649101ca83c86fa1e8731d62aad05c10\System.Drawing.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\e1d6a0620f5545c2c446f84b21ba4360\System.DirectoryServices.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\38da25e1b0195292134c5380bc123f67\System.DirectoryServices.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\757b1575d404ad23749b3cf19a2a3afc\System.Deployment.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3d64ee88626eddef7d6e13646b1fa9d9\System.Deployment.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c43652f42ab28395a99b9a5f9517b299\System.Data.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\684e5f7332f44ba751ab5e0813ec5fa3\System.Data.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\c0cecb5f8615e91974fb37b96349427c\System.Data.SqlXml.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\74c5cd4a105d95fe580c7aebf78ef0ef\System.Data.SqlXml.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\2a85eefc9693c9479eb6fb938c8b15e8\System.Data.Services.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\fb69c983fc629a0ec33d469c11afa1c2\System.Data.OracleClient.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\0b3a4c52c587498db726f272a2fd77ff\System.Data.OracleClient.ni.dll + 2011-06-30 20:51 . 2011-06-30 20:51 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\ccce5d4ba4ce73411a2dca61a690a4df\System.Data.Linq.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\675dac95dbdc1037c67db47692afebb1\System.Data.Entity.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e477d309a6af242c726dc1b11f7e5853\System.Core.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\ae8a13463301d0a6fa3a1fa0f11079ac\ReachFramework.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\432902307fd78e168e9499de225caa95\ReachFramework.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\574902210a052d74c690c2bd526fc4ce\PresentationUI.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\2bd7b669c47ca948d7e0158a41ca249e\PresentationUI.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\d9a79535036f12dc866e78811f52f419\PresentationBuildTasks.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\8127c95533a4f936276c34a559325afd\Narrator.ni.exe + 2011-06-30 20:50 . 2011-06-30 20:50 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\02ccd93f83ca013b80308ed37e9f7240\MMCEx.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\b93c6f5403709d7ef7cfe4672f371d9e\MIGUIControls.ni.dll + 2011-06-30 20:50 . 2011-06-30 20:50 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\d3631ae5ccf785b5f21abe80e2acb81b\Microsoft.VisualBasic.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\242c902b4e6dd8e25b75b02dcdbf9800\Microsoft.Transactions.Bridge.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b335e851f72485bbeb81348a639abf19\Microsoft.PowerShell.Commands.Utility.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a6e1bff3b6b9781c8de71f304d576c85\Microsoft.PowerShell.Editor.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\998f37f6365bb025377731541cc8d69a\Microsoft.PowerShell.GPowerShell.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\6697be260fd0c16adec74d23944c5560\Microsoft.MediaCenter.UI.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4901a2b148bb45bcd4bbded2ff078809\Microsoft.MediaCenter.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\6a80dd53f30208b237c99cc2d9bcc29f\Microsoft.JScript.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\0f121405ffc1ce70f972569875eedbef\Microsoft.Ink.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\c6396d4884cb617792b0a096e70f29ec\Microsoft.Build.Tasks.v3.5.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9d88d35f043b015bcc3220537fa39344\Microsoft.Build.Tasks.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8258e53cef69933838c7ceeb403f5a97\Microsoft.Build.Engine.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\7ea086f7955f93323de9d529ae8105c0\mcstore.ni.dll + 2011-06-30 20:49 . 2011-06-30 20:49 3025408 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\c2da327f76e82cfc8358142308d96f7d\mcepg.ni.dll + 2011-06-30 16:07 . 2011-01-19 23:32 3178496 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll - 2009-07-13 20:46 . 2009-06-10 21:23 3178496 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll + 2011-06-30 16:07 . 2011-03-29 22:31 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2009-07-13 20:46 . 2009-06-10 21:23 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2011-06-30 16:07 . 2011-03-29 22:26 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-04-20 20:38 . 2011-02-07 23:30 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2011-06-30 16:07 . 2011-03-29 22:31 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - 2011-04-20 20:38 . 2011-02-07 23:35 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll + 2009-07-14 02:34 . 2011-07-14 20:54 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat - 2009-07-14 02:34 . 2011-06-21 15:59 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2011-06-30 16:07 . 2011-03-29 22:26 10007376 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll + 2011-04-13 15:48 . 2011-04-13 15:48 35326464 c:\windows\Installer\76ad76.msp + 2011-07-06 15:41 . 2011-07-06 15:41 11872768 c:\windows\assembly\NativeImages_v4.0.30319_64\System\a99116941c69e4c693518d57b8c2a861\System.ni.dll + 2011-07-07 02:49 . 2011-07-07 02:49 17288192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\ddee14aa45752907499bd27e0d8915b4\System.Windows.Forms.ni.dll + 2011-07-07 02:51 . 2011-07-07 02:51 24483840 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\2dbeb0d8155771a760efb0a97f139666\System.ServiceModel.ni.dll + 2011-07-07 02:50 . 2011-07-07 02:50 18434048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\5a3b90fdffe37b03bb5046c34c7ee8e3\System.Data.Entity.ni.dll + 2011-07-07 02:46 . 2011-07-07 02:46 10422272 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\4b36fd10cf0f43bf947b63e4cc7f0ba5\System.Core.ni.dll + 2011-07-07 02:48 . 2011-07-07 02:48 23242240 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\7c15f0bf45ad9ac59ffb5e225ca82f82\PresentationFramework.ni.dll + 2011-07-07 02:47 . 2011-07-07 02:47 15102976 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\5977bc366d13d0891536acdbdea28c67\PresentationCore.ni.dll + 2011-07-06 15:41 . 2011-07-06 15:41 19352064 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\086515902736035517c63126be04a3f4\mscorlib.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 13137920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\f3e016a2e799cfe233b13d88e90c0e0b\System.Windows.Forms.ni.dll + 2011-07-07 02:44 . 2011-07-07 02:44 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\dc31b22f78cb510bf470f0ab5ef65816\System.ServiceModel.ni.dll + 2011-07-07 02:43 . 2011-07-07 02:43 13325312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\978e8514751373383f79c3fdd667aa2b\System.Data.Entity.ni.dll + 2011-07-06 15:43 . 2011-07-06 15:43 17671168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\2250ddb1626087da27fb00f46a679ff5\PresentationFramework.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 11106816 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\ca8307311e87b234b2faa5ee08332722\PresentationCore.ni.dll + 2011-07-06 15:42 . 2011-07-06 15:42 14407680 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\74353039393f68f4c068cc37f759e5be\mscorlib.ni.dll + 2011-06-30 17:53 . 2011-06-30 17:53 10597888 c:\windows\assembly\NativeImages_v2.0.50727_64\System\ab027b61440d5e8c9cd19a4b0b418fc8\System.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 10597888 c:\windows\assembly\NativeImages_v2.0.50727_64\System\99a6933ae74c0ab8a886bd6c38164b02\System.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 17378816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\5a3840316ee2c469b6d5028fec341ea5\System.Windows.Forms.ni.dll + 2011-06-30 19:53 . 2011-06-30 19:53 17379328 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\23da8c6665d17e291129a01294e90958\System.Windows.Forms.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 15232512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\f5c297af2f35936a09de9a0a2b3f3b85\System.Web.ni.dll + 2011-06-30 19:54 . 2011-06-30 19:54 15232512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\56eedaf3bed1ca9cc5f4be20dbb478c7\System.Web.ni.dll + 2011-06-30 20:35 . 2011-06-30 20:35 23812096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\59bfdc4e181ab5499932cb8d4293bd47\System.ServiceModel.ni.dll + 2011-06-30 20:38 . 2011-06-30 20:38 11898880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\6389bbd53adfbee7d0014e287f946d7e\System.Management.Automation.ni.dll + 2011-06-30 19:55 . 2011-06-30 19:55 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\81b1b870e97f89f64e8971c9af86d98b\System.Design.ni.dll + 2011-06-30 17:58 . 2011-06-30 17:58 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\3617cadf8b2df78f5a63ac105dd5f526\System.Design.ni.dll + 2011-06-30 20:39 . 2011-06-30 20:39 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\49b9167e1ccc08dfdf80d44a1cc1de78\System.Data.Entity.ni.dll + 2011-06-30 17:57 . 2011-06-30 17:57 19169792 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\86c8a28873af2ed5de232a0a6d939387\PresentationFramework.ni.dll + 2011-06-30 19:53 . 2011-06-30 19:53 19169792 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\31d4fa38e38e9eaf005ecc5ff682b67e\PresentationFramework.ni.dll + 2011-06-30 17:56 . 2011-06-30 17:56 16513024 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\5baa0f346b6241cd4dcb4a79b5d77dab\PresentationCore.ni.dll + 2011-06-30 19:52 . 2011-06-30 19:52 16513024 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\1ed06bbc49c0c37a0c7d472d930dcc91\PresentationCore.ni.dll + 2011-06-30 19:51 . 2011-06-30 19:51 15566848 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\b654f93b365c4463014d8b41152efd54\mscorlib.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 22171136 c:\windows\assembly\NativeImages_v2.0.50727_64\MenuSkinning\c31180ea676489b9d9738feac8d1fe12\MenuSkinning.ni.dll + 2011-06-30 20:34 . 2011-06-30 20:34 22171136 c:\windows\assembly\NativeImages_v2.0.50727_64\MenuSkinning\bfe0b6daa2161d4617136697fc46c26b\MenuSkinning.ni.dll + 2011-06-30 20:37 . 2011-06-30 20:37 25462272 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\1d3a030b54b9e98771e49afe92ed1e77\ehshell.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e59b964b7dc87b3af3d6cf5fdf493836\System.Windows.Forms.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 12431360 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\933baa29f5feba3093ba81c5b9b82b1c\System.Windows.Forms.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 11807744 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\bb3ccd9385192fd043a41c62d37e34fe\System.Web.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 11807744 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\2599be6ca4ccbd8506992d7f1020a911\System.Web.ni.dll + 2011-06-30 20:48 . 2011-06-30 20:48 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\d18e14ad9dd0de4997b57c36bd157d61\System.ServiceModel.ni.dll + 2011-06-30 19:50 . 2011-06-30 19:50 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\cafa6b8a5bd8a55a77e7171107adf673\System.Design.ni.dll + 2011-06-30 18:01 . 2011-06-30 18:01 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\4f738f70f04817b896140cff4183dd46\System.Design.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 14322688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\431b1d1e45e04da6ef224b1dca8c1d92\PresentationFramework.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 14322688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\121c8ef1a1854c4720c5258fc8bcbf5a\PresentationFramework.ni.dll + 2011-06-30 19:49 . 2011-06-30 19:49 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\eef110caf6629511d8cec40960035d6a\PresentationCore.ni.dll + 2011-06-30 18:00 . 2011-06-30 18:00 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\cc3b3763e3de0828697353f924df7b38\PresentationCore.ni.dll + 2011-06-30 19:48 . 2011-06-30 19:48 11490304 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\23bc3936180ff789f44259a211dfc7fc\mscorlib.ni.dll . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EA Core"="c:\program files (x86)\Electronic Arts\EADM\Core.exe" [2009-03-28 3325952] "Free Download Manager"="c:\program files (x86)\Free Download Manager\fdm.exe" [2010-04-29 3727411] "NetZero_uoltray"="c:\program files (x86)\NetZero\exec.exe" [2008-05-07 1701376] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-01-26 15026056] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-22 98304] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-12-29 140520] "Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2009-11-13 1807600] "Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-10-15 498160] "Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2009-06-24 409744] "DellSupportCenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712] . c:\users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . c:\users\James Mann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 136176] R2 ZSS;ZoneServer System Service;c:\server wok 53\Data\rtservice\xRemoteService.exe [x] R3 bcm;WiMAX Network Adapter;c:\windows\system32\DRIVERS\drxvi314_64.sys [x] R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\DRIVERS\BcmBusCtr_64.sys [x] R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;d:\dragon age- origins\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832] R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 136176] R3 PCTINDIS5X64;PCTINDIS5X64 NDIS Protocol Driver;c:\windows\system32\PCTINDIS5X64.SYS [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x] R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-10-09 92160] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2009-06-09 155648] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640] S2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit;c:\program files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-03-10 86016] S2 Realtek87B;Realtek87B;c:\program files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe [2009-06-30 40960] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2009-09-30 2320920] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2011-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 08:35] . 2011-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 08:35] . 2011-07-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-619826061-120817133-1486808799-1000Core.job - c:\users\James Mann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-17 14:18] . 2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-619826061-120817133-1486808799-1000UA.job - c:\users\James Mann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-17 14:18] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-05-10 12:10 134384 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-09-16 357376] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-09 8158240] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://my.netzero.net/s/search?r=minisearch IE: Display All Images with Full Quality - "c:\program files (x86)\NetZero\qsacc\appres.dll/228" IE: Display Image with Full Quality - "c:\program files (x86)\NetZero\qsacc\appres.dll/227" IE: Download all with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlall.htm IE: Download selected with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlselected.htm IE: Download video with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm IE: Download with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dllink.htm IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.40 DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} - hxxps://ahfcas3.ahf2000.aultman.com/auth/CCALogin.CAB FF - ProfilePath - c:\users\James Mann\AppData\Roaming\Mozilla\Firefox\Profiles\3zuie2a7.default\ FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} FF - Ext: Ant Video Downloader: [removed] - %profile%\extensions\[removed] FF - Ext: avast! WebRep: [removed] - c:\program files\AVAST Software\Avast\WebRep\FF . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) AddRemove-DAZ|Studio - c:\windows\unvise32.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files\AVAST Software\Avast\AvastSvc.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Bonjour\mDNSResponder.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWlan.exe c:\program files (x86)\Dell Support Center\bin\sprtsvc.exe . ************************************************************************** . Completion time: 2011-07-14 22:09:14 - machine was rebooted ComboFix-quarantined-files.txt 2011-07-15 02:09 ComboFix2.txt 2011-06-27 21:38 ComboFix3.txt 2011-06-21 16:12 . Pre-Run: 1,257,623,552 bytes free Post-Run: 507,527,168 bytes free . - - End Of File - - E87CFBF7407336B58BA06C6A1B264271

Tomk

Post #6July 15, 2011, 4:40 PM UTC

Severance, I don't see where anything related to Internet explorer was changed… but that doesn't mean something wasn't as Combofix appears to have errored part way through it's scan. Please run it again and let's see if we can get a clean report this time.

Severance

Post #7July 16, 2011, 12:59 AM UTC

Here is what came up after running combofix again. One error during the log report stage, the error was: Registry Editor Cannot export C:\Qoobox\Quarantine\Registry_backups\AddRemove-Daz|Studio.rred.dat: Error opening the file. There may be a disk or file system error.com Everything seems to be running normal, Internet Explorer is also running normally now. _______________ ComboFix 11-07-14.05 - James Mann 07/15/2011 20:13:57.4.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3957.2340 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: avast! Antivirus *Enabled/Outdated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Outdated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2011-06-16 to 2011-07-16 ))))))))))))))))))))))))))))))) . . 2011-07-16 00:21 . 2011-07-16 00:21 ——– d—–w- c:\users\Sharon\AppData\Local\temp 2011-07-16 00:21 . 2011-07-16 00:21 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-07-15 02:22 . 2011-07-15 02:22 ——– d—–w- c:\program files (x86)\Nokia 2011-07-15 02:21 . 2011-07-15 02:21 ——– d—–w- c:\programdata\Installations 2011-07-08 18:20 . 2011-07-08 18:20 0 —-a-w- c:\users\James Mann\AppData\Local\BITF52C.tmp 2011-07-08 17:38 . 2011-06-20 12:57 8873296 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{22CAE910-87B9-450B-8C88-FD598684ED2A}\mpengine.dll 2011-07-03 02:58 . 1994-09-21 06:00 92208 —-a-w- c:\windows\SysWow64\wing.dll 2011-07-02 00:43 . 2011-07-02 00:43 ——– d—–w- c:\users\Sharon\AppData\Roaming\Macrovision 2011-07-01 18:21 . 2011-07-01 18:21 ——– d—–w- c:\users\Sharon\AppData\Roaming\Individual Software 2011-07-01 18:14 . 1995-12-15 00:32 26112 —-a-w- c:\windows\system\Wavmix16.dll 2011-07-01 18:14 . 1995-12-15 00:32 26112 —-a-w- c:\windows\system\Wavemix.dll 2011-07-01 18:14 . 1994-09-21 06:00 92208 —-a-w- c:\windows\system\wing.dll 2011-07-01 18:14 . 1994-09-21 06:00 6736 —-a-w- c:\windows\system\wingdib.drv 2011-07-01 18:14 . 1994-08-24 06:00 188960 —-a-w- c:\windows\system\wingde.dll 2011-07-01 18:13 . 2011-07-01 18:13 ——– d—–w- c:\programdata\Individual Software 2011-07-01 18:12 . 2011-07-01 18:12 ——– d—–w- c:\program files (x86)\Common Files\Individual Software 2011-07-01 18:12 . 2011-07-02 00:46 ——– d—–w- c:\program files (x86)\Typing Instructor Deluxe 2011-07-01 18:12 . 2004-05-04 15:53 1645320 —-a-w- c:\windows\SysWow64\gdiplus.dll 2011-07-01 18:12 . 2004-03-09 05:00 132880 —-a-w- c:\windows\SysWow64\MSINET.OCX 2011-07-01 18:12 . 2000-08-21 02:00 1388544 —-a-w- c:\windows\SysWow64\temp.000 2011-06-28 02:24 . 2011-06-28 02:24 0 —-a-w- c:\users\James Mann\AppData\Local\BIT758D.tmp 2011-06-22 17:50 . 2011-06-22 19:26 ——– d—–w- c:\program files (x86)\GLIntercept0_5 2011-06-22 15:01 . 2011-05-24 23:14 270720 ——w- c:\windows\system32\MpSigStub.exe 2011-06-22 13:35 . 2011-06-22 13:35 ——– d—–w- c:\program files (x86)\ESET 2011-06-18 03:04 . 2011-06-18 03:04 ——– d—–w- c:\program files (x86)\tamasoftware 2011-06-17 15:44 . 2011-05-10 11:59 22360 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-06-17 15:44 . 2011-05-10 12:04 287576 —-a-w- c:\windows\system32\drivers\aswSP.sys 2011-06-17 15:44 . 2011-05-10 11:59 31064 —-a-w- c:\windows\system32\drivers\aswRdr.sys 2011-06-17 15:44 . 2011-05-10 12:02 53592 —-a-w- c:\windows\system32\drivers\aswTdi.sys 2011-06-17 15:43 . 2011-05-10 12:04 600920 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2011-06-17 15:43 . 2011-05-10 12:10 253888 —-a-w- c:\windows\system32\aswBoot.exe 2011-06-17 15:43 . 2011-05-10 11:59 64344 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-06-17 15:43 . 2011-05-10 12:10 40112 —-a-w- c:\windows\avastSS.scr 2011-06-17 15:43 . 2011-05-10 12:10 199304 —-a-w- c:\windows\SysWow64\aswBoot.exe 2011-06-17 15:43 . 2011-06-17 15:43 ——– d—–w- c:\programdata\AVAST Software 2011-06-17 15:43 . 2011-06-17 15:43 ——– d—–w- c:\program files\AVAST Software 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\users\James Mann\AppData\Roaming\Malwarebytes 2011-06-17 15:18 . 2011-05-29 13:11 39984 —-a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\programdata\Malwarebytes 2011-06-17 15:18 . 2011-06-17 15:18 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-06-17 15:18 . 2011-05-29 13:11 25912 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-06-17 14:43 . 2011-04-25 05:32 1896832 —-a-w- c:\windows\system32\drivers\tcpip.sys 2011-06-17 14:43 . 2011-04-25 02:44 499712 —-a-w- c:\windows\system32\drivers\afd.sys 2011-06-17 13:08 . 2011-04-29 03:13 461312 —-a-w- c:\windows\system32\drivers\srv.sys 2011-06-17 13:08 . 2011-04-29 03:12 399872 —-a-w- c:\windows\system32\drivers\srv2.sys 2011-06-17 13:08 . 2011-04-29 03:12 161792 —-a-w- c:\windows\system32\drivers\srvnet.sys 2011-06-17 12:58 . 2011-05-04 02:51 287744 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-06-17 12:58 . 2011-05-04 02:51 157696 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-06-17 12:58 . 2011-05-04 02:51 126464 —-a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-06-17 12:58 . 2011-05-28 03:07 3133952 —-a-w- c:\windows\system32\win32k.sys 2011-06-17 12:50 . 2011-05-03 05:21 976896 —-a-w- c:\windows\system32\inetcomm.dll 2011-06-17 12:50 . 2011-05-03 04:50 740864 —-a-w- c:\windows\SysWow64\inetcomm.dll 2011-06-17 11:49 . 2011-04-29 05:47 1110528 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:49 . 2011-04-29 05:08 759296 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2011-06-17 11:47 . 2011-01-17 06:17 197120 —-a-w- c:\windows\system32\d3d10_1.dll 2011-06-17 11:47 . 2011-01-17 05:38 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll 2011-06-17 11:44 . 2010-12-18 06:13 861184 —-a-w- c:\windows\system32\oleaut32.dll 2011-06-17 11:44 . 2010-12-18 05:31 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll 2011-06-17 11:32 . 2011-04-27 02:57 102400 —-a-w- c:\windows\system32\drivers\dfsc.sys . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-07-06 13:41 . 2011-02-14 16:28 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll 2011-07-06 13:39 . 2010-08-30 23:00 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2011-07-06 13:38 . 2011-02-14 16:26 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2011-07-06 13:38 . 2011-02-14 16:26 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2011-06-30 16:24 . 2010-08-30 23:00 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll 2011-06-30 16:23 . 2011-04-26 18:16 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2011-06-30 16:01 . 2010-08-30 22:58 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2011-06-30 16:01 . 2010-08-30 22:58 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2011-04-23 13:39 . 2011-04-23 13:39 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-5\Microsoft.MediaCenter.Sports.UI.dll 2011-04-22 20:18 . 2011-06-02 19:39 27008 —-a-w- c:\windows\system32\drivers\Diskdump.sys . . ((((((((((((((((((((((((((((( SnapShot_2011-07-15_01.43.03 ))))))))))))))))))))))))))))))))))))))))) . + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\VPNIKE.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\RASSSTP.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\RASPPTP.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\RASMBMGR.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\RASL2TP.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\IPSEC.BIN + 2011-07-15 02:20 . 2011-07-15 02:20 65536 c:\windows\tracing\AGILEVPN.BIN - 2009-07-14 04:54 . 2011-07-15 01:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-07-16 00:25 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-07-16 00:25 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-07-15 01:42 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-07-16 00:25 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-07-15 01:42 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-30 14:07 . 2011-07-16 00:27 62132 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin - 2009-07-14 05:10 . 2011-07-15 01:29 30522 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-07-16 00:27 30522 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-05-05 22:36 . 2011-07-16 00:27 17748 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-619826061-120817133-1486808799-1000_UserData.bin + 2010-05-05 19:45 . 2011-07-16 00:25 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 19:45 . 2011-07-15 01:37 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 19:45 . 2011-07-15 01:37 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-05-05 19:45 . 2011-07-16 00:25 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-07-15 01:37 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2011-07-16 00:25 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-05-05 21:19 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-05 21:19 . 2011-07-16 00:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-05 21:19 . 2011-07-16 00:25 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-05-05 21:19 . 2011-07-15 01:30 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-05-05 21:19 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-05 21:19 . 2011-07-16 00:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-05-05 20:55 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-05 20:55 . 2011-07-16 00:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-05 20:55 . 2011-07-15 01:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-05 20:55 . 2011-07-16 00:25 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-07-15 01:41 . 2011-07-15 01:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-07-16 00:22 . 2011-07-16 00:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-07-16 00:22 . 2011-07-16 00:22 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-07-15 01:41 . 2011-07-15 01:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-05-07 17:40 . 2011-07-15 05:10 286366 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin - 2009-07-14 02:36 . 2011-07-15 01:35 670886 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-07-15 05:12 670886 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-07-15 05:12 124164 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2011-07-15 01:35 124164 c:\windows\system32\perfc009.dat + 2009-07-14 05:01 . 2011-07-16 00:22 392360 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2009-07-14 05:01 . 2011-07-15 01:41 392360 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-07-15 02:22 . 2011-07-15 02:22 544768 c:\windows\Installer\{990C7C7E-7E53-49A1-9766-5369E17892BB}\NPCIA.exe + 2010-05-06 21:56 . 2011-07-15 08:48 1116040 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat - 2010-05-06 21:56 . 2011-07-13 08:19 1116040 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2011-07-15 02:21 . 2011-07-15 02:21 2141184 c:\windows\Installer\24dacb.msi - 2009-07-14 02:34 . 2011-07-14 20:54 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat + 2009-07-14 02:34 . 2011-07-15 05:20 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EA Core"="c:\program files (x86)\Electronic Arts\EADM\Core.exe" [2009-03-28 3325952] "Free Download Manager"="c:\program files (x86)\Free Download Manager\fdm.exe" [2010-04-29 3727411] "NetZero_uoltray"="c:\program files (x86)\NetZero\exec.exe" [2008-05-07 1701376] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-01-26 15026056] "NokiaPCInternetAccess"="c:\program files (x86)\Nokia\PC Internet Access\NPCIA.exe" [2009-09-22 544768] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-22 98304] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-12-29 140520] "Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2009-11-13 1807600] "Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-10-15 498160] "Dell Webcam Central"="c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" [2009-06-24 409744] "DellSupportCenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712] . c:\users\Sharon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . c:\users\James Mann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-12-15 1324384] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 136176] R2 ZSS;ZoneServer System Service;c:\server wok 53\Data\rtservice\xRemoteService.exe [x] R3 bcm;WiMAX Network Adapter;c:\windows\system32\DRIVERS\drxvi314_64.sys [x] R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\DRIVERS\BcmBusCtr_64.sys [x] R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;d:\dragon age- origins\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832] R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 136176] R3 PCTINDIS5X64;PCTINDIS5X64 NDIS Protocol Driver;c:\windows\system32\PCTINDIS5X64.SYS [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x] R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-10-09 92160] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2009-06-09 155648] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640] S2 mi-raysat_3dsmax2011_32;mental ray 3.8 Satellite for Autodesk 3ds Max 2011 32-bit 32-bit;c:\program files (x86)\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe [2010-03-10 86016] S2 Realtek87B;Realtek87B;c:\program files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe [2009-06-30 40960] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2009-09-30 2320920] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2011-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 08:35] . 2011-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-28 08:35] . 2011-07-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-619826061-120817133-1486808799-1000Core.job - c:\users\James Mann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-17 14:18] . 2011-07-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-619826061-120817133-1486808799-1000UA.job - c:\users\James Mann\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-17 14:18] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-05-10 12:10 134384 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-09-16 357376] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-09 8158240] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://my.netzero.net/s/search?r=minisearch IE: Display All Images with Full Quality - "c:\program files (x86)\NetZero\qsacc\appres.dll/228" IE: Display Image with Full Quality - "c:\program files (x86)\NetZero\qsacc\appres.dll/227" IE: Download all with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlall.htm IE: Download selected with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlselected.htm IE: Download video with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm IE: Download with Free Download Manager - file://c:\program files (x86)\Free Download Manager\dllink.htm IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.40 DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} - hxxps://ahfcas3.ahf2000.aultman.com/auth/CCALogin.CAB FF - ProfilePath - c:\users\James Mann\AppData\Roaming\Mozilla\Firefox\Profiles\3zuie2a7.default\ FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} FF - Ext: Ant Video Downloader: [removed] - %profile%\extensions\[removed] FF - Ext: avast! WebRep: [removed] - c:\program files\AVAST Software\Avast\WebRep\FF . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) AddRemove-DAZ|Studio - c:\windows\unvise32.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-619826061-120817133-1486808799-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] @Allowed: (Read) (RestrictedCode) "??"=hex:7e,64,a6,a5,9b,f6,f4,43,8f,dd,67,30,8a,eb,0f,52,2e,57,a6,7a,35,99,e2, 9d,d8,3f,1b,bd,74,b2,de,39,a5,9a,95,75,87,97,ad,95,72,1b,2b,45,1c,6f,15,ce,\ "??"=hex:ef,85,9e,71,92,93,d1,03,9a,7f,44,4a,25,fe,a3,d2 . [HKEY_USERS\S-1-5-21-619826061-120817133-1486808799-1000\Software\SecuROM\License information*] "datasecu"=hex:78,10,00,d2,8c,da,7e,93,02,42,dc,5c,9c,4d,cd,b2,8d,1f,c6,3b,dc, 28,e8,8c,6b,bf,68,26,fd,fe,17,55,6b,28,39,bc,0a,f1,60,59,a0,ba,3e,50,0e,4a,\ "rkeysecu"=hex:67,e8,23,a7,2f,4d,03,22,b0,36,40,bf,20,54,dc,47 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files\AVAST Software\Avast\AvastSvc.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Bonjour\mDNSResponder.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe c:\program files (x86)\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe c:\program files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWlan.exe c:\program files (x86)\Dell Support Center\bin\sprtsvc.exe . ************************************************************************** . Completion time: 2011-07-15 20:32:28 - machine was rebooted ComboFix-quarantined-files.txt 2011-07-16 00:32 ComboFix2.txt 2011-07-15 02:09 ComboFix3.txt 2011-06-27 21:38 ComboFix4.txt 2011-06-21 16:12 . Pre-Run: 4,634,292,224 bytes free Post-Run: 4,564,754,432 bytes free . - - End Of File - - 23AA4BFDA0A61F00C22509617AE02F34

Tomk

Post #8July 16, 2011, 4:04 AM UTC

Severance,

Looking good.

Let's get an online scan:

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

Please go here then click on: [external image: Posted Image]

Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:

- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology
Now click on: [external image: Posted Image]
The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
Now click on: [external image: Posted Image]
Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

Severance

Post #9July 20, 2011, 12:58 AM UTC

Eset Log: C:\Qoobox\Quarantine\C\Users\James Mann\AppData\Roaming\4637A2867EED304013FF0DA6B2AF96AA\enemies-names.txt.vir Win32/Adware.AntimalwareDoctor.AE.Gen application C:\Qoobox\Quarantine\C\Users\James Mann\AppData\Roaming\4637A2867EED304013FF0DA6B2AF96AA\local.ini.vir Win32/Adware.AntimalwareDoctor.AE.Gen application C:\Qoobox\Quarantine\C\Users\James Mann\AppData\Roaming\4637A2867EED304013FF0DA6B2AF96AA\ris700acpt.exe.vir a variant of Win32/Kryptik.PHE trojan C:\Users\James Mann\AppData\Local\imejihafew.dll a variant of Win32/Kryptik.NCK trojan

Severance

Post #10July 20, 2011, 12:58 AM UTC

Tomk

Post #11July 20, 2011, 4:43 AM UTC

Severance,

Open notepad and copy/paste the text in the codebox below into it:

http://forums.whatthetech.com/index.php?showtopic=119404

Collect::
C:\Users\James Mann\AppData\Local\imejihafew.dll

Save this as CFScript.txt

[external image: Posted Image]

Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you. Post that log in your next reply.

**Note**

When CF finishes running, the ComboFix log will open along with a message box–do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.

Ensure you are connected to the internet and click OK on the message box.

Tomk

Post #12July 27, 2011, 9:05 PM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Windows 7 Fix, Hidden files, black desktop and etc

✨ Ask AI

Ask AI