What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Google Redirect Virus? Plz Help [Solved]

93 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello ! Unfortunately, I think I've encountered the Google Redirect Virus… :( ! ! Everytime I go to google to search up something, it lags and then when i click a link, it redirects me to a different site.. I've tried Malwarebytes Anti- Malware, and restarted my laptop, but when I went to see if the redirecting was gone…it wasn't… now I have no idea what to do, so I came here for help :(
Post #2

**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days. :)


Hello there, Zefie

:welcome:

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:
  • Read the entire procedure
  • It is important to perform ALL actions in sequence.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Stick with me till you're given the all clear.
  • Remember, absence of symptoms does not mean the infection is all gone.
  • Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to. Remember to backup all your important data(if possible) before moving on.
Post #3
Hello there,

1. All tools MUST be run from the executable. (.exe)
With Admin Rights (Right click, choose "Run as Administrator")

Please download DDS by sUBs from one of the following links and save it to your desktop.
    • DDS.scr
    • DDS.com
    • DDS.pif
  • Disable any script blocking protection (How to Disable your Security Programs)
  • Double click DDS icon to run the tool (may take up to 3 minutes to run)
  • When done, DDS.txt will open.
  • After a few moments, attach.txt will open in a second window.
  • Save both reports to your desktop.
—————————————————
  • Post the contents of the DDS.txt report in your next reply
  • Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
===================================================

Download Security Check by screen317 from here or here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===================================================

On your next reply please post :
DDS log
Checkup log

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!
Post #4
Hi !

Thanks Conspire for helping me with this problem! :thumbup:

Here is the DDS log:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by [removed] at 18:31:24 on 2012-02-18
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3003.1347 [GMT -5:00]
.
AV: avast! Internet Security *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: avast! Internet Security *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
FW: avast! Internet Security *Disabled* {FB460EB6-4C6D-E564-6BF5-EEEF2B44B473}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files\Microsoft LifeCam\MSCamS64.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
-netsvcs
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe
C:\Windows\system32\conhost.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
mRun: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
mRun: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
mPolicies-explorer: HideSCAHealth = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{04EB6DFB-DBFD-4450-A2BA-30E06A43B528} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{F1D0DCCB-1BC2-4BC1-9FCD-34B1DC76C3C1} : DhcpNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO-X64: HP Print Enhancer - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
BHO-X64: HP Smart BHO Class - No File
mRun-x64: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
mRun-x64: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
mRun-x64: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
Hosts: 216.240.133.193 www.google-analytics.com.
Hosts: 216.240.133.193 ad-emea.doubleclick.net.
Hosts: 216.240.133.193 www.statcounter.com.
Hosts: 69.72.252.254 www.google-analytics.com.
Hosts: 69.72.252.254 ad-emea.doubleclick.net.
.
Note: multiple HOSTS entries found. Please refer to Attach.txt
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Lily\AppData\Roaming\Mozilla\Firefox\Profiles\jdvv19p5.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource;=3&q;={searchTerms}
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&invocationType;=tb50-ff-aim-ab-en-us&tb;_uuid=20110821044524515&tb;_oid=21-08-2011&tb;_mrud=21-08-2011&query;=
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
—- FIREFOX POLICIES —-
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false
FF - user.js: browser.sessionstore.resume_from_crash - false
.
============= SERVICES / DRIVERS ===============
.
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2010-8-31 98208]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-3-28 94264]
R2 HPWMISVC;HPWMISVC;C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-1-18 20480]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;C:\Windows\system32\drivers\IntcHdmi.sys –> C:\Windows\system32\drivers\IntcHdmi.sys [?]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;C:\Windows\system32\Drivers\nx6000.sys –> C:\Windows\system32\Drivers\nx6000.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys –> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;C:\Windows\system32\DRIVERS\rtl8192se.sys –> C:\Windows\system32\DRIVERS\rtl8192se.sys [?]
R3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys –> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-21 136176]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-8-21 136176]
S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys –> C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-8-31 225280]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS –> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS –> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS –> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys –> C:\Windows\system32\DRIVERS\yk62x64.sys [?]
.
=============== Created Last 30 ================
.
2012-02-17 03:17:40 20480 —-a-w- C:\Windows\svchost.exe
2012-02-14 23:45:14 509952 —-a-w- C:\Windows\System32\ntshrui.dll
2012-02-14 23:45:14 442880 —-a-w- C:\Windows\SysWow64\ntshrui.dll
2012-02-14 23:45:11 515584 —-a-w- C:\Windows\System32\timedate.cpl
2012-02-14 23:45:11 478208 —-a-w- C:\Windows\SysWow64\timedate.cpl
2012-02-14 23:45:09 3143168 —-a-w- C:\Windows\System32\win32k.sys
2012-02-14 23:45:06 499200 —-a-w- C:\Windows\System32\drivers\afd.sys
2012-02-14 23:45:04 690688 —-a-w- C:\Windows\SysWow64\msvcrt.dll
2012-02-14 23:45:04 634368 —-a-w- C:\Windows\System32\msvcrt.dll
2012-02-13 21:33:55 ——– d—–w- C:\Users\Lily\AppData\Roaming\OpenCandy
2012-02-13 04:44:59 ——– d—–w- C:\Program Files\Paint.NET
2012-02-13 04:44:38 ——– d—–w- C:\Users\Lily\AppData\Local\Paint.NET
2012-02-11 15:50:12 ——– d—–w- C:\Program Files\Microsoft LifeCam
2012-02-11 15:50:12 ——– d—–w- C:\Program Files (x86)\Microsoft LifeCam
2012-02-10 02:46:42 ——– d-sh–w- C:\$RECYCLE.BIN
2012-02-10 01:20:55 98816 —-a-w- C:\Windows\sed.exe
2012-02-10 01:20:55 518144 —-a-w- C:\Windows\SWREG.exe
2012-02-10 01:20:55 256000 —-a-w- C:\Windows\PEV.exe
2012-02-10 01:20:55 208896 —-a-w- C:\Windows\MBR.exe
2012-02-10 01:08:11 ——– d—–w- C:\Program Files (x86)\D7CDE
2012-02-09 00:09:35 1974616 —-a-w- C:\Windows\SysWow64\D3DCompiler_42.dll
2012-02-09 00:09:35 1892184 —-a-w- C:\Windows\SysWow64\D3DX9_42.dll
2012-01-31 21:45:00 ——– d—–w- C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E}
.
==================== Find3M ====================
.
2011-12-14 07:11:03 2308096 —-a-w- C:\Windows\System32\jscript9.dll
2011-12-14 07:04:30 1390080 —-a-w- C:\Windows\System32\wininet.dll
2011-12-14 07:03:38 1493504 —-a-w- C:\Windows\System32\inetcpl.cpl
2011-12-14 06:57:28 2382848 —-a-w- C:\Windows\System32\mshtml.tlb
2011-12-14 03:04:54 1798656 —-a-w- C:\Windows\SysWow64\jscript9.dll
2011-12-14 02:57:18 1127424 —-a-w- C:\Windows\SysWow64\wininet.dll
2011-12-14 02:56:58 1427456 —-a-w- C:\Windows\SysWow64\inetcpl.cpl
2011-12-14 02:50:04 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2011-12-10 20:24:08 23152 —-a-w- C:\Windows\System32\drivers\mbam.sys
.
============= FINISH: 18:32:39.70 ===============

I have also attached the file. :)

Attachments:

Post #5
And here is the Security Check log:

Results of screen317's Security Check version 0.99.31
Windows 7 x64 (UAC is disabled!)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:
ESET Online Scanner v3
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Java™ 6 Update 26
Java version out of date!
Adobe Flash Player 10.3.183.5 Flash Player out of Date!
Adobe Reader 9 Adobe Reader out of date!
Mozilla Firefox (10.0.2)
````````````````````````````````
Process Check:
objlist.exe by Laurent
``````````End of Log````````````

:unsure:
Post #6
Please download aswMBR.exe and save it to your desktop.
  • Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
  • Allow it to update where necessary
  • Click Scan

  • Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
  • You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.
Post #7
Hello!

Umm i downloaded aswMBR.exe and while it was scanning, it stopped working all of a sudden…

[external image: Posted Image]

I closed it and rescanned it again, but it stopped working again.. :smack:
Post #8 last edited
Hmm.. Ok we will first run aswMBR in safe mode and regardless you can make it or not, run MBRCheck too.

Please download MBRCheck.exe to your desktop.
  • Be sure to disable your security programs
  • Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
  • A window will open on your desktop
  • if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
  • If nothing unusual is found just press Enter
  • A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
  • Please post the contents of that file.
Post #9
Okay, Here is the MBRCheck log : MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows 7 Home Premium Edition Windows Information: (build 7600), 64-bit Base Board Manufacturer: Hewlett-Packard BIOS Manufacturer: Hewlett-Packard System Manufacturer: Hewlett-Packard System Product Name: HP G72 Notebook PC Logical Drives Mask: 0x0000003c Kernel Drivers (total 188): 0x02C14000 \SystemRoot\system32\ntoskrnl.exe 0x031F0000 \SystemRoot\system32\hal.dll 0x00BB6000 \SystemRoot\system32\kdcom.dll 0x00C2C000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x00C70000 \SystemRoot\system32\PSHED.dll 0x00C84000 \SystemRoot\system32\CLFS.SYS 0x00CE2000 \SystemRoot\system32\CI.dll 0x00E0B000 \SystemRoot\system32\drivers\Wdf01000.sys 0x00EAF000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x00EBE000 \SystemRoot\system32\DRIVERS\ACPI.sys 0x00F15000 \SystemRoot\system32\DRIVERS\WMILIB.SYS 0x00F1E000 \SystemRoot\system32\DRIVERS\msisadrv.sys 0x00F28000 \SystemRoot\system32\DRIVERS\pci.sys 0x00F5B000 \SystemRoot\system32\DRIVERS\vdrvroot.sys 0x00F68000 \SystemRoot\System32\drivers\partmgr.sys 0x00F7D000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x00F86000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x00F92000 \SystemRoot\system32\DRIVERS\volmgr.sys 0x00DA2000 \SystemRoot\System32\drivers\volmgrx.sys 0x00FA7000 \SystemRoot\System32\drivers\mountmgr.sys 0x010DC000 \SystemRoot\system32\DRIVERS\iaStor.sys 0x01000000 \SystemRoot\system32\DRIVERS\atapi.sys 0x01009000 \SystemRoot\system32\DRIVERS\ataport.SYS 0x01033000 \SystemRoot\system32\DRIVERS\msahci.sys 0x0103E000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS 0x0104E000 \SystemRoot\system32\drivers\amdxata.sys 0x01059000 \SystemRoot\system32\drivers\fltmgr.sys 0x010A5000 \SystemRoot\system32\drivers\fileinfo.sys 0x01221000 \SystemRoot\System32\Drivers\Ntfs.sys 0x0145D000 \SystemRoot\System32\Drivers\msrpc.sys 0x014BB000 \SystemRoot\System32\Drivers\ksecdd.sys 0x014D5000 \SystemRoot\System32\Drivers\cng.sys 0x01548000 \SystemRoot\System32\drivers\pcw.sys 0x01559000 \SystemRoot\System32\Drivers\Fs_Rec.sys 0x0165F000 \SystemRoot\system32\drivers\ndis.sys 0x01751000 \SystemRoot\system32\drivers\NETIO.SYS 0x017B1000 \SystemRoot\System32\Drivers\ksecpkg.sys 0x01802000 \SystemRoot\System32\drivers\tcpip.sys 0x01600000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x01563000 \SystemRoot\system32\DRIVERS\volsnap.sys 0x0164A000 \SystemRoot\System32\Drivers\spldr.sys 0x015AF000 \SystemRoot\System32\drivers\rdyboost.sys 0x017DC000 \SystemRoot\System32\Drivers\mup.sys 0x017EE000 \SystemRoot\System32\drivers\hwpolicy.sys 0x01400000 \SystemRoot\System32\DRIVERS\fvevol.sys 0x0143A000 \SystemRoot\system32\DRIVERS\disk.sys 0x013C3000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS 0x03B2F000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x03B59000 \SystemRoot\System32\Drivers\Null.SYS 0x03B62000 \SystemRoot\System32\Drivers\Beep.SYS 0x03B69000 \SystemRoot\System32\drivers\vga.sys 0x03B77000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x03B9C000 \SystemRoot\System32\drivers\watchdog.sys 0x03BAC000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x03BB5000 \SystemRoot\system32\drivers\rdpencdd.sys 0x03BBE000 \SystemRoot\system32\drivers\rdprefmp.sys 0x03BC7000 \SystemRoot\System32\Drivers\Msfs.SYS 0x03BD2000 \SystemRoot\System32\Drivers\Npfs.SYS 0x01200000 \SystemRoot\system32\DRIVERS\tdx.sys 0x03BE3000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x03CD6000 \SystemRoot\system32\drivers\afd.sys 0x03D5F000 \SystemRoot\System32\DRIVERS\netbt.sys 0x03DA4000 \SystemRoot\system32\drivers\ws2ifsl.sys 0x03DAF000 \SystemRoot\system32\DRIVERS\wfplwf.sys 0x03DB8000 \SystemRoot\system32\DRIVERS\pacer.sys 0x03DDE000 \SystemRoot\system32\DRIVERS\vwififlt.sys 0x03C00000 \SystemRoot\system32\DRIVERS\netbios.sys 0x03C0F000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x03C2A000 \SystemRoot\system32\DRIVERS\termdd.sys 0x03C3E000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x03C8F000 \SystemRoot\system32\drivers\nsiproxy.sys 0x03C9B000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x03CA6000 \SystemRoot\System32\drivers\discache.sys 0x03CB5000 \SystemRoot\System32\Drivers\dfsc.sys 0x010B9000 \SystemRoot\system32\DRIVERS\blbdrive.sys 0x00FC1000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x00FE7000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x03DF4000 \SystemRoot\system32\DRIVERS\CmBatt.sys 0x04804000 \SystemRoot\system32\DRIVERS\igdkmd64.sys 0x03EAE000 \SystemRoot\System32\Drivers\fastfat.SYS 0x03EE4000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x03E00000 \SystemRoot\System32\drivers\dxgmms1.sys 0x03E46000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0x03E53000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x03FD8000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x051D7000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x042BC000 \SystemRoot\system32\DRIVERS\rtl8192se.sys 0x043E4000 \SystemRoot\system32\DRIVERS\vwifibus.sys 0x04200000 \SystemRoot\system32\DRIVERS\Rt64win7.sys 0x0424C000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0x0426A000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x0401E000 \SystemRoot\system32\DRIVERS\SynTP.sys 0x04070000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x04072000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x04081000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys 0x0408E000 \SystemRoot\system32\DRIVERS\wmiacpi.sys 0x04097000 \SystemRoot\system32\DRIVERS\CompositeBus.sys 0x040A7000 \SystemRoot\system32\DRIVERS\AgileVpn.sys 0x040BD000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x040E1000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x040ED000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x0411C000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x04137000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x04158000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x04172000 \SystemRoot\system32\DRIVERS\swenum.sys 0x04174000 \SystemRoot\system32\DRIVERS\ks.sys 0x041B7000 \SystemRoot\system32\DRIVERS\umbus.sys 0x04404000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x0445E000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x05663000 \SystemRoot\system32\drivers\RTKVHD64.sys 0x0588A000 \SystemRoot\system32\drivers\portcls.sys 0x058C7000 \SystemRoot\system32\drivers\drmk.sys 0x058E9000 \SystemRoot\system32\drivers\ksthunk.sys 0x058EF000 \SystemRoot\system32\drivers\IntcHdmi.sys 0x05917000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x05934000 \SystemRoot\System32\Drivers\crashdmp.sys 0x04473000 \SystemRoot\System32\Drivers\dump_iaStor.sys 0x05942000 \SystemRoot\System32\Drivers\dump_dumpfve.sys 0x00030000 \SystemRoot\System32\win32k.sys 0x05991000 \SystemRoot\System32\drivers\Dxapi.sys 0x0599D000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x059BA000 \SystemRoot\System32\Drivers\nx6000.sys 0x059C7000 \SystemRoot\System32\Drivers\usbvideo.sys 0x05600000 \SystemRoot\system32\drivers\usbaudio.sys 0x0561B000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x05629000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x05642000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x0564B000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x05955000 \SystemRoot\system32\DRIVERS\monitor.sys 0x005A0000 \SystemRoot\System32\TSDDD.dll 0x006B0000 \SystemRoot\System32\cdd.dll 0x00950000 \SystemRoot\System32\ATMFD.DLL 0x05963000 \SystemRoot\system32\drivers\luafv.sys 0x0458F000 \SystemRoot\system32\drivers\WudfPf.sys 0x045B0000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x03A00000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x045C5000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x045D8000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x03A53000 \SystemRoot\system32\drivers\HTTP.sys 0x041C9000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x04000000 \SystemRoot\system32\DRIVERS\bowser.sys 0x04279000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x02801000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x0284F000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x02872000 \SystemRoot\System32\DRIVERS\srv2.sys 0x028D9000 \SystemRoot\System32\DRIVERS\srv.sys 0x046E5000 \SystemRoot\system32\drivers\peauth.sys 0x0478B000 \SystemRoot\System32\Drivers\secdrv.SYS 0x04796000 \SystemRoot\System32\drivers\tcpipreg.sys 0x04673000 \??\C:\Users\Lily\AppData\Local\Temp\aswMBR.sys 0x04682000 \SystemRoot\system32\drivers\MSPQM.sys 0x04684000 \SystemRoot\system32\drivers\MSPCLOCK.sys 0x04686000 \??\C:\Users\Lily\AppData\Local\Temp\0054FF0.tmp 0x047A8000 \SystemRoot\System32\Drivers\usbaapl64.sys 0x047B9000 \SystemRoot\system32\DRIVERS\WinUsb.sys 0x047CA000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0x77620000 \Windows\System32\ntdll.dll 0x47950000 \Windows\System32\smss.exe 0xFF940000 \Windows\System32\apisetschema.dll 0xFF900000 \Windows\System32\autochk.exe 0x777F0000 \Windows\System32\psapi.dll 0xFF850000 \Windows\System32\advapi32.dll 0xFF7B0000 \Windows\System32\comdlg32.dll 0xFF710000 \Windows\System32\msvcrt.dll 0x77520000 \Windows\System32\user32.dll 0xFF6C0000 \Windows\System32\ws2_32.dll 0xFF670000 \Windows\System32\Wldap32.dll 0xFF560000 \Windows\System32\msctf.dll 0xFF490000 \Windows\System32\usp10.dll 0xFF410000 \Windows\System32\difxapi.dll 0xFF3A0000 \Windows\System32\gdi32.dll 0xFF1C0000 \Windows\System32\setupapi.dll 0xFF1B0000 \Windows\System32\nsi.dll 0xFF1A0000 \Windows\System32\lpk.dll 0x777E0000 \Windows\System32\normaliz.dll 0xFF120000 \Windows\System32\shlwapi.dll 0x773D0000 \Windows\System32\urlmon.dll 0xFEFF0000 \Windows\System32\rpcrt4.dll 0xFEF10000 \Windows\System32\oleaut32.dll 0xFE180000 \Windows\System32\shell32.dll 0x77270000 \Windows\System32\wininet.dll 0xFE150000 \Windows\System32\imm32.dll 0xFDF40000 \Windows\System32\ole32.dll 0xFDF20000 \Windows\System32\sechost.dll 0x77060000 \Windows\System32\iertutil.dll 0xFDE80000 \Windows\System32\clbcatq.dll 0xFDE60000 \Windows\System32\imagehlp.dll 0x76F40000 \Windows\System32\kernel32.dll Processes (total 63): 0 System Idle Process 4 System 292 C:\Windows\System32\smss.exe 432 csrss.exe 492 C:\Windows\System32\wininit.exe 504 csrss.exe 544 C:\Windows\System32\services.exe 560 C:\Windows\System32\lsass.exe 568 C:\Windows\System32\lsm.exe 688 C:\Windows\System32\svchost.exe 712 C:\Windows\System32\winlogon.exe 812 C:\Windows\System32\svchost.exe 860 C:\Windows\System32\svchost.exe 936 C:\Windows\System32\svchost.exe 988 C:\Windows\System32\svchost.exe 536 C:\Windows\System32\svchost.exe 1120 C:\Windows\System32\svchost.exe 1256 C:\Windows\System32\spoolsv.exe 1296 C:\Windows\System32\svchost.exe 1396 C:\Windows\System32\svchost.exe 1488 C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe 1516 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 1544 C:\Program Files\Bonjour\mDNSResponder.exe 1608 C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 1652 C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 1680 C:\Program Files\Microsoft LifeCam\MSCamS64.exe 1732 C:\Windows\System32\svchost.exe 1772 C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 740 C:\Windows\svchost.exe 2036 C:\Windows\System32\conhost.exe 764 C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe 616 C:\Program Files\Windows Media Player\wmpnetwk.exe 2100 C:\Windows\System32\SearchIndexer.exe 2564 C:\Windows\System32\dwm.exe 2456 C:\Windows\explorer.exe 2092 C:\Windows\System32\taskhost.exe 2708 C:\Windows\System32\igfxtray.exe 2280 C:\Windows\System32\igfxpers.exe 2764 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 2308 C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe 2688 C:\Program Files (x86)\Realtek\Audio\OSD\RtVOsd64.exe 2268 C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe 2700 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 2928 C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe 2828 C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe 448 C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 2364 WmiPrvSE.exe 3276 C:\Windows\System32\svchost.exe 3284 C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe 3348 C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe 3460 C:\Windows\System32\wuauclt.exe 3972 C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe 3688 C:\Program Files (x86)\Mozilla Firefox\firefox.exe 3612 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe 4072 C:\Windows\System32\wisptis.exe 1836 WUDFHost.exe 5076 C:\Windows\System32\taskeng.exe 2032 C:\Windows\System32\audiodg.exe 2724 C:\Windows\System32\SearchProtocolHost.exe 4516 C:\Windows\System32\SearchFilterHost.exe 4832 C:\Windows\System32\dllhost.exe 3664 C:\Users\Lily\Desktop\MBRCheck.exe 4908 C:\Windows\System32\conhost.exe \\.\C: –> \\.\PhysicalDrive0 at offset 0x00000000`0c800000 (NTFS) \\.\D: –> \\.\PhysicalDrive0 at offset 0x00000046`ebc00000 (NTFS) \\.\E: –> \\.\PhysicalDrive0 at offset 0x0000004a`7f500000 (FAT32) PhysicalDrive0 Model Number: SAMSUNGHM321HI, Rev: 2AJ10001 Size Device Name MBR Status ——————————————– 298 GB \\.\PhysicalDrive0 MBR Code Faked! SHA1: 006DAC41B85DE862D5301245E653DB2869A80603 Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done! :) !
Post #10
Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide


Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================


Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs


====================================================


Double click on combofix.exe & follow the prompts.


When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.
Post #11
Okay~ :P

Here is my ComboFix log:

ComboFix 12-02-21.02 - Lily 02/21/2012 15:54:22.7.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3003.2084 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: avast! Internet Security *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: avast! Internet Security *Disabled* {FB460EB6-4C6D-E564-6BF5-EEEF2B44B473}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: avast! Internet Security *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\svchost.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-01-21 to 2012-02-21 )))))))))))))))))))))))))))))))
.
.
2012-02-21 21:05 . 2012-02-21 21:05 ——– d—–w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2012-02-21 21:05 . 2012-02-21 21:05 ——– d—–w- c:\users\Public\AppData\Local\temp
2012-02-21 21:05 . 2012-02-21 21:05 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-02-21 21:05 . 2012-02-21 21:05 ——– d—–w- c:\users\Administrator\AppData\Local\temp
2012-02-14 23:45 . 2012-01-04 09:58 509952 —-a-w- c:\windows\system32\ntshrui.dll
2012-02-14 23:45 . 2012-01-04 09:03 442880 —-a-w- c:\windows\SysWow64\ntshrui.dll
2012-02-14 23:45 . 2012-01-03 06:24 515584 —-a-w- c:\windows\system32\timedate.cpl
2012-02-14 23:45 . 2012-01-03 05:44 478208 —-a-w- c:\windows\SysWow64\timedate.cpl
2012-02-14 23:45 . 2012-01-14 04:02 3143168 —-a-w- c:\windows\system32\win32k.sys
2012-02-14 23:45 . 2011-12-28 03:59 499200 —-a-w- c:\windows\system32\drivers\afd.sys
2012-02-14 23:45 . 2011-12-16 08:42 634368 —-a-w- c:\windows\system32\msvcrt.dll
2012-02-14 23:45 . 2011-12-16 07:59 690688 —-a-w- c:\windows\SysWow64\msvcrt.dll
2012-02-13 21:33 . 2012-02-13 21:33 ——– d—–w- c:\users\Lily\AppData\Roaming\OpenCandy
2012-02-13 04:44 . 2012-02-13 04:45 ——– d—–w- c:\program files\Paint.NET
2012-02-13 04:44 . 2012-02-19 19:47 ——– d—–w- c:\users\Lily\AppData\Local\Paint.NET
2012-02-11 15:50 . 2012-02-11 15:50 ——– d—–w- c:\program files\Microsoft LifeCam
2012-02-11 15:50 . 2012-02-11 15:50 ——– d—–w- c:\program files (x86)\Microsoft LifeCam
2012-02-10 01:08 . 2012-02-17 03:12 ——– d—–w- c:\program files (x86)\D7CDE
2012-02-09 00:09 . 2009-09-04 22:29 1974616 —-a-w- c:\windows\SysWow64\D3DCompiler_42.dll
2012-02-09 00:09 . 2009-09-04 22:29 1892184 —-a-w- c:\windows\SysWow64\D3DX9_42.dll
2012-01-31 21:45 . 2012-01-31 21:45 ——– d—–w- c:\programdata\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-10 20:24 . 2011-12-04 21:57 23152 —-a-w- c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((( SnapShot_2012-02-10_01.31.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-02-13 21:36 . 2012-02-13 21:36 76800 c:\windows\SysWOW64\SetIEInstalledDate.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 74752 c:\windows\SysWOW64\RegisterIEPKEYs.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 54272 c:\windows\SysWOW64\pngfilt.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 48640 c:\windows\SysWOW64\mshtmler.dll
+ 2012-02-15 04:13 . 2011-12-14 02:50 72704 c:\windows\SysWOW64\mshtmled.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 11776 c:\windows\SysWOW64\mshta.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 10752 c:\windows\SysWOW64\msfeedssync.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 41472 c:\windows\SysWOW64\msfeedsbs.dll
+ 2012-02-15 04:13 . 2011-12-14 02:54 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 23552 c:\windows\SysWOW64\licmgr10.dll
+ 2012-02-15 04:13 . 2011-12-14 02:54 65024 c:\windows\SysWOW64\jsproxy.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 78848 c:\windows\SysWOW64\inseng.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 35840 c:\windows\SysWOW64\imgutil.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 86528 c:\windows\SysWOW64\iesysprep.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 74752 c:\windows\SysWOW64\iesetup.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 31744 c:\windows\SysWOW64\iernonce.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 74240 c:\windows\SysWOW64\ie4uinit.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 66048 c:\windows\SysWOW64\icardie.dll
+ 2012-02-17 04:58 . 2012-02-17 04:58 16004 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat
+ 2010-05-15 04:20 . 2012-02-21 20:30 54708 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-02-21 20:30 49506 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-08-22 04:30 . 2012-02-21 20:30 16084 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2893211206-124670239-861361115-1001_UserData.bin
+ 2012-02-13 21:36 . 2012-02-13 21:36 91648 c:\windows\system32\SetIEInstalledDate.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 89088 c:\windows\system32\RegisterIEPKEYs.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 65024 c:\windows\system32\pngfilt.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 48640 c:\windows\system32\mshtmler.dll
+ 2012-02-15 04:13 . 2011-12-14 06:57 96256 c:\windows\system32\mshtmled.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 12288 c:\windows\system32\mshta.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 10752 c:\windows\system32\msfeedssync.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 55296 c:\windows\system32\msfeedsbs.dll
+ 2012-02-15 04:13 . 2011-12-14 07:02 86528 c:\windows\system32\migration\WininetPlugin.dll
+ 2011-12-07 04:22 . 2012-02-10 01:34 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
- 2011-12-07 04:22 . 2011-12-07 21:49 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
+ 2012-02-13 21:36 . 2012-02-13 21:36 30720 c:\windows\system32\licmgr10.dll
+ 2012-02-15 04:13 . 2011-12-14 07:01 85504 c:\windows\system32\jsproxy.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 49664 c:\windows\system32\imgutil.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 85504 c:\windows\system32\iesetup.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 39936 c:\windows\system32\iernonce.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 89088 c:\windows\system32\ie4uinit.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 82432 c:\windows\system32\icardie.dll
- 2009-07-14 05:30 . 2012-02-09 00:09 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-07-14 05:30 . 2012-02-11 15:50 86016 c:\windows\system32\DriverStore\infpub.dat
- 2010-09-14 09:45 . 2010-09-14 09:45 22376 c:\windows\system32\drivers\Sftvollh.sys
+ 2011-10-01 13:30 . 2011-10-01 13:30 22376 c:\windows\system32\drivers\Sftvollh.sys
+ 2011-10-01 13:30 . 2011-10-01 13:30 25960 c:\windows\system32\drivers\Sftredirlh.sys
- 2010-09-14 09:45 . 2010-09-14 09:45 25960 c:\windows\system32\drivers\Sftredirlh.sys
- 2011-08-22 07:24 . 2012-02-06 20:19 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-08-22 07:24 . 2012-02-16 00:13 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-02-16 00:13 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-02-06 20:19 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-08-22 04:34 . 2012-02-10 01:01 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-08-22 04:34 . 2012-02-21 21:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:46 . 2012-02-19 15:34 80184 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
+ 2012-02-11 00:50 . 2012-02-21 21:07 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat
+ 2012-02-11 00:50 . 2012-02-21 21:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\History\History.IE5\index.dat
+ 2012-02-11 00:50 . 2012-02-21 21:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies\index.dat
+ 2011-08-22 04:34 . 2012-02-21 21:07 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-08-22 04:34 . 2012-02-10 01:01 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-08-22 04:34 . 2012-02-21 21:07 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-08-22 04:34 . 2012-02-10 01:01 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-08-22 04:31 . 2012-02-10 01:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-08-22 04:31 . 2012-02-13 15:31 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2011-08-22 04:31 . 2012-02-10 01:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-08-22 04:31 . 2012-02-13 15:31 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2012-01-11 05:14 . 2012-01-11 05:14 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-01-11 05:14 . 2012-01-11 05:14 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-02-15 04:18 . 2012-02-15 04:18 75104 c:\windows\Installer\{95140000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2011-12-15 06:04 . 2011-12-15 06:04 75104 c:\windows\Installer\{95140000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2011-08-24 04:38 . 2011-10-13 20:48 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-08-24 04:38 . 2012-02-16 00:04 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 77610 c:\windows\Installer\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}\_853F67D554F05449430E7E.exe
+ 2012-02-15 19:31 . 2012-02-15 19:31 43520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\42d44cc48edbf4d5b19af6d6afc6cd62\System.Windows.Presentation.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\5c5a54c265c044f359659e6eeff29171\System.Web.ApplicationServices.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\5febe9c0db17256605a3c0b906d124a3\System.Windows.Presentation.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\d948214592e9ee62eefecfc06ac37690\System.Web.ApplicationServices.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\361744396ee71dcc435c93226a8a6754\System.ServiceModel.Channels.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\e9f294ccd724852eaef199ff147c00f3\System.Windows.Presentation.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\a618f2bf552e97953bb5a58217cce18f\System.Web.DynamicData.Design.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\c58f009127ea2a9d60be2f8902e9cf75\PresentationFontCache.ni.exe
+ 2012-02-15 18:05 . 2012-02-15 18:05 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\6b5b7285e73ded10e6b378aa3c953aa4\PresentationCFFRasterizer.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\6b55b29d347c0022cc0044f93754e9fd\Microsoft.WSMan.Runtime.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\ae04a98ddbb0473e21bd3e60ab157a6f\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\aaa25d1f0af3347f48691c17f8569057\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\47091dabbdb72b5f3b313b8022e3a0c6\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\425ba6d1a0b4c23cbc0fbeb56bf44376\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\1d1065b38d27215e74d22b23acbc0e73\Microsoft.MediaCenter.iTv.Hosting.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\781ea72a6c2c2373fbee45f4d0c6b1d2\LoadMxf.ni.exe
+ 2012-02-15 19:19 . 2012-02-15 19:19 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\f5abc5c8d77436ad8b7eecf6d6e80c12\ehiTVMSMusic.ni.dll
+ 2012-02-15 19:09 . 2012-02-15 19:09 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\00662ed791038fedaf3cbb54fb29e69a\WindowsLiveWriter.ni.exe
+ 2012-02-15 19:10 . 2012-02-15 19:10 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3a6ab6bd39fefc87d8dc3c83afbd3bf0\WindowsLive.Writer.Api.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\dff40aec1e3ac5aaff2a774ab31fd89c\WiaProxy32.ni.exe
+ 2012-02-13 04:46 . 2012-02-13 04:46 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\c8fee0baf733a2638ef5dbf722d1d72b\WiaProxy32.ni.exe
+ 2012-02-15 19:13 . 2012-02-15 19:13 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\1cd4052146cc9bb01abadc777c7f44b2\System.Windows.Presentation.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\cc9cbb64a4d1dce2bd2074ea9d352d6e\System.Web.DynamicData.Design.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\60d88a8af5cdd8999b44bb7a05a411ee\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\b9becc8d608b41214c1e302bf83b70ce\PresentationFontCache.ni.exe
+ 2012-02-15 18:09 . 2012-02-15 18:09 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\b669ed26c27a26dbe32110e21034faa7\PresentationCFFRasterizer.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\754eef9c651d1a06b45bc6d77e3e97d8\Microsoft.WSMan.Runtime.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\e09e4e73414cd51143ae71a81b58a00e\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\dc17472b33ff221824e6eb83a6c1808f\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c88fea1db58bb41c35c10d72773717fb\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c46d36fb6cd9f690f4dae90183c414f8\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\514cd9895cb848643af450b42406bcc5\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\7966d0ae949f0d97d94970256b9bf455\Microsoft.Vsa.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\d3d3b8e7e151900796506c40214b7896\Interop.WIA.ni.dll
- 2012-02-10 01:01 . 2012-02-10 01:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-02-21 21:07 . 2012-02-21 21:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-02-21 21:07 . 2012-02-21 21:07 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-02-10 01:01 . 2012-02-10 01:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-02-13 21:36 . 2012-02-13 21:36 152064 c:\windows\SysWOW64\wextract.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 203776 c:\windows\SysWOW64\webcheck.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 420864 c:\windows\SysWOW64\vbscript.dll
+ 2012-02-15 04:13 . 2011-12-14 02:55 231936 c:\windows\SysWOW64\url.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 123392 c:\windows\SysWOW64\occache.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 162304 c:\windows\SysWOW64\msrating.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 161792 c:\windows\SysWOW64\msls31.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 580608 c:\windows\SysWOW64\msfeeds.dll
+ 2012-02-15 04:13 . 2011-12-14 02:53 716800 c:\windows\SysWOW64\jscript.dll
- 2012-01-11 15:26 . 2011-10-14 04:42 716800 c:\windows\SysWOW64\jscript.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 150528 c:\windows\SysWOW64\iexpress.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 142848 c:\windows\SysWOW64\ieUnatt.exe
- 2011-12-15 03:57 . 2011-11-11 05:50 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-02-15 04:13 . 2011-12-14 02:47 176640 c:\windows\SysWOW64\ieui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 118784 c:\windows\SysWOW64\iepeers.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 353584 c:\windows\SysWOW64\iedkcs32.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 434176 c:\windows\SysWOW64\ieapfltr.dll
- 2009-07-13 23:42 . 2009-07-14 01:05 163840 c:\windows\SysWOW64\ieakui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 163840 c:\windows\SysWOW64\ieakui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 227840 c:\windows\SysWOW64\ieaksie.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 130560 c:\windows\SysWOW64\ieakeng.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 110592 c:\windows\SysWOW64\IEAdvpack.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 223232 c:\windows\SysWOW64\dxtrans.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 353792 c:\windows\SysWOW64\dxtmsft.dll
+ 2011-12-04 22:01 . 2012-02-21 21:08 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-14 04:54 . 2012-02-10 01:08 425984 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-02-21 21:08 425984 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2012-02-13 21:36 . 2012-02-13 21:36 101888 c:\windows\SysWOW64\admparse.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 160256 c:\windows\system32\wextract.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 249344 c:\windows\system32\webcheck.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 603648 c:\windows\system32\vbscript.dll
+ 2012-02-15 04:13 . 2011-12-14 07:03 237056 c:\windows\system32\url.dll
+ 2009-07-14 02:36 . 2012-02-17 04:58 624178 c:\windows\system32\perfh009.dat
+ 2009-07-14 02:36 . 2012-02-17 04:58 106522 c:\windows\system32\perfc009.dat
+ 2012-02-13 21:36 . 2012-02-13 21:36 149504 c:\windows\system32\occache.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 197120 c:\windows\system32\msrating.dll
- 2009-07-13 23:39 . 2009-07-14 01:41 222208 c:\windows\system32\msls31.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 222208 c:\windows\system32\msls31.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 697344 c:\windows\system32\msfeeds.dll
+ 2012-02-15 04:13 . 2011-12-14 07:00 818688 c:\windows\system32\jscript.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 103936 c:\windows\system32\inseng.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 165888 c:\windows\system32\iexpress.exe
+ 2012-02-13 21:36 . 2012-02-13 21:36 173056 c:\windows\system32\ieUnatt.exe
+ 2012-02-15 04:13 . 2011-12-14 06:53 248320 c:\windows\system32\ieui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 111616 c:\windows\system32\iesysprep.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 145920 c:\windows\system32\iepeers.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 403248 c:\windows\system32\iedkcs32.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 534528 c:\windows\system32\ieapfltr.dll
- 2009-07-13 23:58 . 2009-07-14 01:27 163840 c:\windows\system32\ieakui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 163840 c:\windows\system32\ieakui.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 267776 c:\windows\system32\ieaksie.dll
- 2009-07-13 23:58 . 2009-07-14 01:41 267776 c:\windows\system32\ieaksie.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 160256 c:\windows\system32\ieakeng.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 135168 c:\windows\system32\IEAdvpack.dll
+ 2009-07-14 04:45 . 2012-02-15 18:03 277328 c:\windows\system32\FNTCACHE.DAT
- 2009-07-14 04:45 . 2011-12-15 15:55 277328 c:\windows\system32\FNTCACHE.DAT
+ 2012-02-13 21:36 . 2012-02-13 21:36 282112 c:\windows\system32\dxtrans.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 452608 c:\windows\system32\dxtmsft.dll
- 2009-07-14 05:30 . 2012-02-09 00:09 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-02-11 15:50 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2011-10-01 13:30 . 2011-10-01 13:30 268648 c:\windows\system32\drivers\Sftplaylh.sys
- 2010-09-14 09:45 . 2010-09-14 09:45 268648 c:\windows\system32\drivers\Sftplaylh.sys
+ 2011-10-01 13:30 . 2011-10-01 13:30 764264 c:\windows\system32\drivers\Sftfslh.sys
+ 2012-02-13 21:36 . 2012-02-13 21:36 114176 c:\windows\system32\admparse.dll
+ 2011-08-22 04:35 . 2012-02-21 04:56 714024 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2011-08-22 04:35 . 2012-02-10 01:00 714024 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2009-07-14 05:01 . 2012-02-10 01:00 234640 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2012-02-21 21:05 234640 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-08-21 06:28 . 2012-02-21 21:05 824832 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2893211206-124670239-861361115-1001-12288.dat
- 2012-01-11 05:14 . 2012-01-11 05:14 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2012-02-15 19:31 . 2012-02-15 19:31 336896 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\6bdb6c455153a223a2180c883ea5a06c\WindowsFormsIntegration.ni.dll
+ 2012-02-15 19:31 . 2012-02-15 19:31 645120 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\8df6331b51fe3ae5b9d0cf8c582d3f84\UIAutomationClient.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 528896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\6bc2cf9d31ae7e22349af3ddb1306c96\System.Xml.Linq.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 256000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\f9e5fcb862d898327924fcac2ff47c4d\System.Windows.Input.Manipulations.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 903168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\5f61f0305f22aed705e0680f58fc5d89\System.Transactions.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\6afb4b90a21aae2e499f577b92102b85\System.ServiceProcess.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 517120 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\bfb5e1c0961fe330c89c043a188cc807\System.ServiceModel.Routing.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\671c48760746239f2dfb0b64a7413624\System.ServiceModel.Channels.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 946688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\d8342f4b914e190a9e5c89c7703dd11f\System.Security.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 376832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\9426384a1d2d2e815e093a0fe88da585\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 987648 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\73d3849c909668636452b43f54edb54e\System.Runtime.Remoting.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 933376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\21fa922f90a47d10fd11107efff5ea4f\System.Net.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\c07fc2256ec2210bfd7f7abf1639833e\System.Messaging.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 521728 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\655c314109b3ab211e13b88d0769651b\System.Management.Instrumentation.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 531456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\cf1c0c4152c5548179dd3e2870f25cc4\System.IO.Log.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 290816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\d8dc2ea040e12c679b5d779370a19e58\System.IdentityModel.Selectors.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 348672 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\fef2650a5b3bf39527150b4058762611\System.EnterpriseServices.Wrapper.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 512000 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\994e60f26b11755207e9c7ebb9fd688b\System.Dynamic.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 632832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\bc62e3c6c42db6e63c18038e9bac5a5c\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\5373b5adf6f12ca3ac8806827259a986\System.Device.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\938f42c2d694b3935ca890fee7d0c8a7\System.Data.DataSetExtensions.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\cde466cd9b88dc7857c40ac43bf7632c\System.Configuration.Install.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 255488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\081bebeff0574ed1969b05eafab5b342\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 865792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\e88489a8cc6a68a7ebb4617d1a20e5e7\System.AddIn.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 560640 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\ba36345815c2011c3f054ebee01a0569\System.Activities.DurableInstancing.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\70edc7fbf7505880ab1652b35f6e9517\SMSvcHost.ni.exe
+ 2012-02-15 19:27 . 2012-02-15 19:27 185344 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\9d160b8d7c69ce50ac1db59a8fa2bcb5\SMDiagnostics.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 622592 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\dbb2bb145d0bac0d0615f52739ad2702\PresentationFramework.Aero.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 428032 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\4d9a6f376f83a6ea5b71a678566ee1de\PresentationFramework.Royale.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 802304 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\3ec560f5f3b643e02b6025363034d624\PresentationFramework.Luna.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 349184 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\1767cdd5d245b5087045d1ad2fbdd8fd\PresentationFramework.Classic.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 289280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\10abc6daca21b4d51f5e34abe73cb5cb\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 600064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\385ffb17c4890d76682d1d0c81f39e09\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\bfab3d0d973b05366401b15f6ab8febb\WindowsFormsIntegration.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 484352 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\f4d55487b0e1eae2de72e1d8e14c4781\UIAutomationClient.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 393216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\35b997b2652f8f564b062e6a6e59055f\System.Xml.Linq.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 189440 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\b16aace2ac6c7e7d6849f3a683776cd1\System.Windows.Input.Manipulations.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 649728 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\07db951fbbd939fc70b0b91a8fa83185\System.Transactions.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\f9977bade8fa997882aa57b430820765\System.ServiceProcess.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 369664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\b6b9eeba0eaffb7691e9fd06c4f3dd10\System.ServiceModel.Routing.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 736768 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\f7ddf9585d0b4b46437dc07b50955b64\System.Security.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\012cb4a4bd973425eac0dbe52cdcc721\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 762880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\e558d70a5dbc430b5a2904eec156749d\System.Runtime.Remoting.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 657408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\6ddba0a0ef4a512f8de2b3feacb8bd4a\System.Net.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\3ae04414918ec66af305d771a18d8b3c\System.Messaging.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\b2990e7dd2ce6c1ec99e4f27f766beb0\System.Management.Instrumentation.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\3ee79197b362398995eba1a67e83d865\System.IO.Log.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 229888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\3e177995dd026b939dc8b6769c77e60f\System.IdentityModel.Selectors.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\06c498e1b0e11e9de295c02f1519b8ff\System.EnterpriseServices.Wrapper.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 787456 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\06c498e1b0e11e9de295c02f1519b8ff\System.EnterpriseServices.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 377856 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\746a79ac47809d2658daf85f2b5a2ad9\System.Dynamic.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 470528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\4946d4a8b1301179885c0621ac7120ca\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\171d40509eccb741a5a4a0908b41c840\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\eca593b1efb8f28f8204c841d6f875f2\System.Device.ni.dll
+ 2012-02-15 19:14 . 2012-02-15 19:14 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\8cec191afd4e0abc87ed7e93f814f1fc\System.Data.DataSetExtensions.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 982528 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\1702c5e18cdd96c022d87c38561f19c9\System.Configuration.ni.dll
+ 2012-02-15 19:14 . 2012-02-15 19:14 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\36c77d53335088d10774054af4dfc034\System.Configuration.Install.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 693760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\a58dbf4346bc2bd65df689cb6b25326c\System.ComponentModel.Composition.ni.dll
+ 2012-02-15 19:14 . 2012-02-15 19:14 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\3924f7fd82f46e76f3b89b9828c3587c\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-15 19:14 . 2012-02-15 19:14 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\b323b1cd4f7e891c9b2def688895cd37\System.AddIn.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 411136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\89c1fb7b7684036e32dafff798d1a744\System.Activities.DurableInstancing.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\2dca989632203f2bc603d76492aff1f3\SMSvcHost.ni.exe
+ 2012-02-15 19:13 . 2012-02-15 19:13 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\3ed5c98553688c7bd5fa0459ddc629bf\SMDiagnostics.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 595968 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9dbdf77b1208ccfea1b67b50084c3f1a\PresentationFramework.Aero.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 387072 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\870a3f81e3fa889dfd5f63ea813d1bb5\PresentationFramework.Royale.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 309760 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\5bf1ff80129ae0bca17f47ccf3dbc0c4\PresentationFramework.Classic.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 755712 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\590ab08a24d15cb6891608c80fdebb1a\PresentationFramework.Luna.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 219136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\f941120c158a98c56b2cd3488c056c6b\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\4a9409b232987a471b8437cd0a35a3ea\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\02479fdb8796f3467d2813668058013a\WsatConfig.ni.exe
+ 2012-02-15 19:24 . 2012-02-15 19:24 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\57f4ab9013cd1319e5a9d6b8f7057c6e\WindowsFormsIntegration.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\aa5be24026d0dc9d7b2e51a745193c60\UIAutomationClient.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\164c2cfa491721e4223837cfbca79ae8\TaskScheduler.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\d888a727d865b1f8d7a83154102cbc1d\System.Xml.Linq.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\ea4822a400bd5ff38b103865d4f1e3d7\System.Web.Routing.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\c0aa83a72a8736fde1e50cac57dab718\System.Web.RegularExpressions.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b21a77586a291eb288955000326494e9\System.Web.Entity.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\7804841372f1a61f7c36b99f338b7b4f\System.Web.Entity.Design.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\f0c4d76c59e017fcd4abd95356f67956\System.Web.DynamicData.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\0049cf9e127ccafef6f33882a3b74d03\System.Web.Abstractions.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\45a8f4049e925c853f633f5ba4cd72d2\System.Transactions.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\41e4e08e8273cda3bbcbb82ef2e35c70\System.ServiceProcess.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\39b7d0b607d4ace2d1a55ae6f9b0e917\System.Security.ni.dll
+ 2012-02-15 18:05 . 2012-02-15 18:05 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\f210e4782ed03b5b50061a045c22e8cf\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\81b2f785e9a232737c72998423fa62bb\System.Net.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\70900b6f83edec5dcbeed17437f4db82\System.Messaging.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\c45d1dde7bf4066ce103d6b8678f19de\System.Management.Instrumentation.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\9caef795f0bc35c26f65564ff6e320d9\System.IO.Log.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\22ca604fec161530e9e4c0ab02d0ff1e\System.IdentityModel.Selectors.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\fd857ce0790fdcc2e50537c57dbbc7cc\System.EnterpriseServices.Wrapper.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\6de8d042a6a0dba2d83d540c0c3ca96e\System.Drawing.Design.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\58e03908fbfa47440f46c030496e7088\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\5d0fb4c78cf05616d8431649786fff0c\System.Data.Services.Design.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\909b4f5e352b7565d749f962c01d025c\System.Data.DataSetExtensions.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\ca6f2ff8271ee7d36af4530105cc6665\System.Configuration.Install.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\eef42f6591fefccfd1ab3c0bf1fcce1c\System.ComponentModel.DataAnnotations.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\99243d571ccb4b70896191908de731fc\System.AddIn.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\88dff55e2296ef5bd0e416bc16f47381\SMSvcHost.ni.exe
+ 2012-02-15 19:18 . 2012-02-15 19:18 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\dc5cafe55b9d035e940c9f27fa14f537\SMDiagnostics.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\a0a43ea786642a9526b33ca2b41c6752\PresentationFramework.Classic.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\364b11a05fd005f87b48516198a132a5\PresentationFramework.Aero.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0601f0db50b01246eb7609170572dd96\PresentationFramework.Luna.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\01237b493b547a4354809dcab56693b1\PresentationFramework.Royale.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 240640 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\c1f23a532c577ffd7e177317536898fb\PaintDotNet.SystemLayer.Native.x64.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 240640 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\0b62990eb4bf8319a8e07f359cdbdbfc\PaintDotNet.SystemLayer.Native.x64.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 417280 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Resourc#\6b8811ba9108360c497b1ff4c6ba42bc\PaintDotNet.Resources.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 417280 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Resourc#\01213737f7b2feb535bd964d9036e0d1\PaintDotNet.Resources.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 781312 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Data\7231e674163a2fd1a9b26899ac0d033d\PaintDotNet.Data.ni.dll
+ 2012-02-15 19:17 . 2012-02-15 19:17 781312 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Data\38290d8af7398a42eed65f349c7e9ceb\PaintDotNet.Data.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\14f77e08a43ca0132689e8a5f539dca8\napsnap.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\1fb014a3775a87ea9713446809cc5f10\napinit.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\f3cb8dae5567dbf08daa81d51424c5c1\MSBuild.ni.exe
+ 2012-02-15 19:20 . 2012-02-15 19:20 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\8c131b90d66af84d65e5bfb73fca09ac\MMCFxCommon.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\d6ed8faac09ad64a649c8cfcedab520d\Microsoft.WSMan.Management.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\47811fe9bfdcf71d0e447f8402b6265d\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\29a1bc1403bcd07755545125a6923fa4\Microsoft.Vsa.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\3bfdad2d1f12c9befeadad4745d56565\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\fac9af958e890da8468929827f3328b9\Microsoft.PowerShell.Security.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f84836d9f5358478fb60399de687494a\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\d1b039892f3d31116e2e2bbf80908b8e\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\16335fee875c1d8d1054b3a9e73f3a87\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e53a91506e983c81963c830802220601\Microsoft.MediaCenter.Playback.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\85588e3f0b3a5021cc015678b5b71c96\Microsoft.MediaCenter.iTv.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\657dff1dba93d43e5bb8edbdd12db6f8\Microsoft.MediaCenter.Sports.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\4b85fa9800a0fe39997629cf2a264e77\Microsoft.MediaCenter.Mheg.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\471c948bc2d5092a6622ca5f5774e44c\Microsoft.MediaCenter.Interop.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 797696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\0f37f34efc81e55b66557ba60d885c78\Microsoft.ManagementConsole.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\b56b95eac805c77e7935787d5bde0354\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\70519d89257a1c4319deafda04041276\Microsoft.Build.Utilities.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\a0eb52d70bc9d46142d926d74115a16f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\178466b242dae65b75d196bf7c71cc41\Mcx2Dvcs.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\45e7b14e800bf2a22eeae61b25785f89\mcupdate.ni.exe
+ 2012-02-15 19:19 . 2012-02-15 19:19 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\4bc51d1b3ddceab62753711ab808aab5\mcstoredb.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\e92f86c4f83d2a73bd6397b427a6bea2\mcplayerinterop.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\983c77dced7a2bf3f2935b59b11d4094\mcGlidHostObj.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\6d9d461495df61360679c71c8a153b60\MCESidebarCtrl.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 262144 c:\windows\assembly\NativeImages_v2.0.50727_64\Interop.WIA\d512683a0f57fb8d8f2cb41d08fa29d8\Interop.WIA.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 714240 c:\windows\assembly\NativeImages_v2.0.50727_64\ICSharpCode.SharpZi#\a3d3cfdd3dc335eb6e94de0d8c2f485a\ICSharpCode.SharpZipLib.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 714240 c:\windows\assembly\NativeImages_v2.0.50727_64\ICSharpCode.SharpZi#\64cc99170ca762d6fc05e8b72c2c2518\ICSharpCode.SharpZipLib.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\de6cee53c76d0a8eb19455f4a8603d1f\EventViewer.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\96d3057a984cd7fb3fa00fd04915ba5e\ehRecObj.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\38ae2dbc06bd8b1f70c71df04b0e0143\ehExtHost.ni.exe
+ 2012-02-15 19:19 . 2012-02-15 19:19 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\95c3c095e4aff9487209d21544a8ce49\ehCIR.ni.dll
+ 2012-02-15 19:18 . 2012-02-15 19:18 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\1c0716049a69a6f09842c95e39c88aad\ComSvcConfig.ni.exe
+ 2012-02-15 19:16 . 2012-02-15 19:16 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\5281fe12f02153a0fdf4a2a9485d00fb\BDATunePIA.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\ebacd33f47bf395f66af1ca53c2a1c8a\WsatConfig.ni.exe
+ 2012-02-15 19:10 . 2012-02-15 19:10 626688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\0692ca93a6196e73a4a66cf21bf7a50e\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ffa0763c0b3bd9915f2584fab1953766\WindowsLive.Writer.HtmlParser.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fb00161940260ca4a4150685c830a0c6\WindowsLive.Writer.FileDestinations.ni.dll
+ 2012-02-15 19:09 . 2012-02-15 19:09 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f4e38498648d71c67ad7eed40afe328c\WindowsLive.Writer.Controls.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d8f4c7adddc53b93055570ca90b7c179\WindowsLive.Writer.Extensibility.ni.dll
+ 2012-02-15 19:09 . 2012-02-15 19:09 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ce78f843a3c1c8f18d7623dc8e60bd0a\WindowsLive.Writer.Interop.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ba82f34051d76743af939edaab90a310\WindowsLive.Writer.SpellChecker.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ab711bbe2a8b0f8661edb733328ef587\WindowsLive.Writer.BlogClient.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8afcb5460f4620f70dd10fe619db8de8\WindowsLive.Writer.Instrumentation.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\794e8246255fc4a99815498a356a59b5\WindowsLive.Writer.Passport.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4774d5deba795b2df34a791e7c45bca5\WindowsLive.Writer.Mshtml.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3bbb4989261b599aba14894a71df1ab9\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\349b9ebfb866992fe429b2d064e63800\WindowsLive.Writer.Localization.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\13687bdc11dbe9f66cad32538ae5a1ac\WindowsLive.Writer.BrowserControl.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\9a9fe2466244ff870b8ad2f780b66fd4\WindowsLive.Client.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a0cec0099a537e10af5be76457a27db1\WindowsFormsIntegration.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba4e07d92829d993edf510cc0930b005\UIAutomationClient.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\fd21cc9e7282991a5b315da08555a533\TaskScheduler.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\37d2f9198ad4e605f216bee3d1f58691\System.Xml.Linq.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\abc5f2bd15f0a4a8a957c296e62e6d5d\System.Web.Routing.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\3235b159c025406d8b626db1aa09fad3\System.Web.RegularExpressions.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\9be3d9596ac08d280da3d7a978e802bd\System.Web.Extensions.Design.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\3c34f6f1ac7f04f832d1964692020fb4\System.Web.Entity.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\df3587fb6492bbcc91d28d5eac3d0515\System.Web.Entity.Design.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2c47055ec299deef83c2c93680ed3aef\System.Web.DynamicData.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\cbb814a6e75310a62c6bf57d0220fa0b\System.Web.Abstractions.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f08bed8a99fdeed5f4ec538947851e29\System.Transactions.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5ca17001998a75ca774d2b80eead5579\System.ServiceProcess.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2726e2ab6218f17a1bef5fe81130078c\System.Security.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c9ba9c9f4251a1978433fb8a5b8b0e01\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0a894f77b9aa64acbd3ce791916357d8\System.Runtime.Remoting.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\e62d625a59508410f047266f3377a447\System.Net.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\184feff3d7c15c27ec0345d27c954cab\System.Messaging.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\0794d7af09099432ebfb51af1d7f15ae\System.Management.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\5487c4ce39dfd1712c6acbe72d74da8f\System.Management.Instrumentation.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\603780605b24668dfd6e85d01b301459\System.IO.Log.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\e5a4bc827a371428406fbc0a743bdbfe\System.IdentityModel.Selectors.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d32385362373fc2e4a60e0c1df1d313c\System.EnterpriseServices.Wrapper.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d32385362373fc2e4a60e0c1df1d313c\System.EnterpriseServices.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\1585bd27d37caf0c4becb2a94107c5e9\System.Drawing.Design.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a3ae72a9ded7bcee59d30e816554f410\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\798a88768617a3dc4436b1194a05c694\System.DirectoryServices.Protocols.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d2629270057a355635f4c31c00aaf07a\System.Data.Services.Client.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1beb76511b6a67e342d65f42ff0815bd\System.Data.Services.Design.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\ec27ef869e1af9a4352594708b7cd7fb\System.Data.Entity.Design.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\5c88e22009cc6ffa451cb1ccd4a4b47e\System.Data.DataSetExtensions.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\15742b3597258ce67cbe219005c197e5\System.Configuration.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\76f83cdfb08ecbdd557d94aecae04faa\System.Configuration.Install.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\64b7e2fa8a11164f2ae27b40e964907c\System.AddIn.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d071f953feda1b725369da479830eb88\SMSvcHost.ni.exe
+ 2012-02-15 19:11 . 2012-02-15 19:11 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\eb46ff3a7098925dd3f0552901668735\SMDiagnostics.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bcb224eff8a955d6e50c4c101a101c4a\PresentationFramework.Classic.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6954c7f14ea634672cdacf2cd793497e\PresentationFramework.Aero.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46e0bdf49703779e61f23d3654733369\PresentationFramework.Royale.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1450308c4daa43ac886a5daffda0fbf8\PresentationFramework.Luna.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\f7501cd90389f8077bbf8ac0301b9b10\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\5da47e263288e9dff6e532ea231a10f5\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 902144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\2600019902fbfbf78bff9afc4f2253e4\PaintDotNet.SystemLayer.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 902144 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\21ce922c99e0cef6268866146e46b73b\PaintDotNet.SystemLayer.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 863232 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\d1156b37d7fd0dd6b5b1684b0de937e6\PaintDotNet.Base.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 863232 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\7e733e4be779176a82d1053e2db95b68\PaintDotNet.Base.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\ced701a3a48f6fca9e9fb48dbaff2ca9\napsnap.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\5f5e10bc18ec53327b8541d461be01d3\napinit.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\570958f58a7b129cd0144f68a729affe\MSBuild.ni.exe
+ 2012-02-15 19:11 . 2012-02-15 19:11 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\921c5ac836dabe56ffcaaed760b641f7\MMCFxCommon.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\5c36d28013ebf02deffc516dbac752ce\Microsoft.WSMan.Management.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4c35f544bfe27946fa0813c2334799ff\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ce2d651576a77738d881834836f9caf0\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\aa066d912933afa738b7f35a1833f212\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\53587eeda1839a02cbe0843aab741c3c\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\30182b7642e5de6fe66d65768c20ee41\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\18bcd4040b8e664cf9d8e5a7b8bd91ba\Microsoft.PowerShell.Security.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\19f3e4fa2162474ccd21e4cae5349a0a\Microsoft.ManagementConsole.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\f83d51fbc59eb8cbf1c9cd8046ce105a\Microsoft.Build.Utilities.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\7dcdedb09ce98ee880a1b4c5cc394b9f\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\895f4724a7b8c51c57262b9ee6ada525\Microsoft.Build.Engine.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\aa4ad0c8b50f5ae1304223cc464e335f\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\2aa4e27292ee3bb5eb469162491ca79c\mcstoredb.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\b9e704d4f0a24ceffd38f7c3da8c154e\EventViewer.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\ce6bbabce153f04b967e48974dce3e46\ehRecObj.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\4e67fa064c2e0480e78a0bfd0d64be4a\ehExtHost32.ni.exe
+ 2012-02-15 19:10 . 2012-02-15 19:10 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\3700bd4fd9d1acf376ed8ac435b49b68\ComSvcConfig.ni.exe
+ 2012-02-15 19:09 . 2012-02-15 19:09 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\6c7304676a603cecc92657a0d23c8306\BDATunePIA.ni.dll
+ 2012-02-15 04:13 . 2011-12-14 02:57 1127424 c:\windows\SysWOW64\wininet.dll
+ 2012-02-15 04:13 . 2011-12-14 02:57 1103360 c:\windows\SysWOW64\urlmon.dll
+ 2012-02-15 04:13 . 2011-12-14 03:04 1798656 c:\windows\SysWOW64\jscript9.dll
+ 2012-02-15 04:13 . 2011-12-14 02:52 1792000 c:\windows\SysWOW64\iertutil.dll
+ 2012-02-15 04:13 . 2011-12-14 03:10 9705472 c:\windows\SysWOW64\ieframe.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 3695416 c:\windows\SysWOW64\ieapfltr.dat
- 2009-07-14 04:54 . 2012-02-10 01:08 3375104 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-02-21 21:08 3375104 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-02-21 21:08 1900544 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-02-10 01:08 1900544 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2012-02-15 04:13 . 2011-12-14 07:04 1390080 c:\windows\system32\wininet.dll
+ 2012-02-15 04:13 . 2011-12-14 07:04 1345536 c:\windows\system32\urlmon.dll
+ 2012-02-15 04:13 . 2011-12-14 07:11 2308096 c:\windows\system32\jscript9.dll
+ 2012-02-15 04:13 . 2011-12-14 06:59 2144256 c:\windows\system32\iertutil.dll
+ 2012-02-13 21:36 . 2012-02-13 21:36 3695416 c:\windows\system32\ieapfltr.dat
- 2009-07-14 04:45 . 2012-02-01 19:12 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2009-07-14 04:45 . 2012-02-15 18:05 3777877 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
+ 2011-10-26 19:46 . 2011-10-26 19:46 3511880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.dll
+ 2012-02-14 23:45 . 2011-10-31 23:16 3182592 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.dll
+ 2011-10-26 19:46 . 2011-10-26 19:46 3511880 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.dll
+ 2012-02-14 23:45 . 2011-10-31 23:17 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1368920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 3511880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 6428520 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 3824480 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 4967248 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 3788128 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-02-15 04:16 . 2012-02-15 04:16 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2012-01-11 05:14 . 2012-01-11 05:14 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-11-18 23:52 . 2011-11-18 23:52 9183232 c:\windows\Installer\feb94c.msp
+ 2011-10-26 21:36 . 2011-10-26 21:36 2829312 c:\windows\Installer\feb942.msp
+ 2010-12-13 19:37 . 2010-12-13 19:37 1625600 c:\windows\Installer\145f0d.msi
+ 2010-06-16 21:42 . 2010-06-16 21:42 1310208 c:\windows\Installer\145f05.msi
+ 2010-06-16 21:42 . 2010-06-16 21:42 1804288 c:\windows\Installer\145efc.msi
+ 2012-02-15 19:25 . 2012-02-15 19:25 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\9d5feeb6727e222673d5bd89f0620ddd\WindowsBase.ni.dll
+ 2012-02-15 19:31 . 2012-02-15 19:31 1430016 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\68f44d619637fac197ee6c8ac9f2aec9\UIAutomationClientsideProviders.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 7037952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\ff247393a6deb90d63811aa88c84dc7e\System.Xml.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 2449408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\e158bd31f13cbc20f6fc7c7f426113d7\System.Xaml.ni.dll
+ 2012-02-15 19:31 . 2012-02-15 19:31 5627904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\843d0370292b7b124f9b9231f87e8e6a\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-02-15 19:31 . 2012-02-15 19:31 2236416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\be0e793afecb54a67a688e4528676e70\System.Web.Services.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 2735616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\ae3a837b63de8d3f3fc63a7bfc16589a\System.Speech.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 1579008 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\aec154cbfb0eec1497fb89ebd6deb344\System.ServiceModel.Discovery.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 1918976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\80b8b6324a73493227b2672b2d6820d3\System.ServiceModel.Activities.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 3412992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\717540eea541a2769a6cf621fd948678\System.Runtime.Serialization.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 1348096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\dc7fbde064d5710780a6b8f27554dc57\System.Runtime.DurableInstancing.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\31c34917df5f24f1ffdd62bfa23f2fb7\System.Printing.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\15112a35e0e355fc344792e49c41628f\System.Management.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 1416192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\bffc049b6775c3f6f144917a4387a0be\System.IdentityModel.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 1098752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\fef2650a5b3bf39527150b4058762611\System.EnterpriseServices.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 2290688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\0443ad47a6be56beca12a7a13261c8ed\System.Drawing.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 1217536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\d94ef12e883b2354af26f19ec7e25110\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 1622528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\026c74ff72ba4fce837134953778e755\System.DirectoryServices.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 2402816 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\e8e5fcc8e7eb9ce898be3c22e8902ee4\System.Deployment.ni.dll
+ 2012-02-15 19:27 . 2012-02-15 19:27 8601600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\8d734fe538fe6f226eab465c8d8e3d5c\System.Data.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 3390976 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\83aa1c4f17f57067d3be29e560331349\System.Data.SqlXml.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 1798656 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\6a0bcd0e756819ea795b161d2156e9a8\System.Data.Services.Client.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 3386368 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\1548624d8ec5142825864c5f59be9b49\System.Data.Linq.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 1257472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\2672be84bcad1c772163d15db0e2864e\System.Configuration.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 1007616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\228bb21cab2c9ce2f69d5e24a9352a3f\System.ComponentModel.Composition.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 5695488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\36f5aa69b510e3aeb24ef402d12c20e0\System.Activities.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\7be5ac01354a0c03d5587607687de1e1\System.Activities.Presentation.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 2064896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\8d549e47084ec2661c944a1eeb9a2be5\System.Activities.Core.Presentation.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 4232704 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\8d8f46afc9b2b65144f29a609f63398e\ReachFramework.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 2056192 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\735f127d0957bacdfe6522f0b8a2dcb0\PresentationUI.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 1623040 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6b82e7a7001a661cb712067b75b7c5ec\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 1838080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6a21c9b7113a1bd6eddff12e138fc96b\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\60ff6c1510fb0e2d70e616650eb7ae47\Microsoft.VisualBasic.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 1526784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\2e6537fafd64c81032b0aaebb7d3180a\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 3313664 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\f38dbc9d7ebe981a7c22b72dffb4a2af\Microsoft.JScript.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 2009600 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\1cf22b5ea0ef63e71b6416a36b656b8a\Microsoft.CSharp.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 3857920 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\6be8cdc102f384653338279eff1f78fd\WindowsBase.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1063424 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\de58d9a7cb1ebe18d9519943fb351105\UIAutomationClientsideProviders.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 9091584 c:\windows\assembly\NativeImages_v4.0.30319_32\System\9c4788acc8f93c33214865395cee2e1c\System.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 5617664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a588133985ef7510d4cc8cc7924f8ec3\System.Xml.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1782272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b74e1ad9110a39851b12cb46b3954163\System.Xaml.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\f0d119151e7a4d59698125eb4b4275ee\System.Windows.Forms.DataVisualization.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1885696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\4d39c6a77db47caf40787ec818691ded\System.Web.Services.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 2012160 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\572316066654286b4629c0a680a76e1b\System.Speech.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1392640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4d1a64fc317c7d5de7321ef42d9443aa\System.ServiceModel.Activities.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1140736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\26150ab602b494d300ae488f81dbef9b\System.ServiceModel.Discovery.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 2647040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7aa036e91909e1bc5e1d35b673defab2\System.Runtime.Serialization.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1021952 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\a2011e79b6ef1c5381d110f75685008c\System.Runtime.DurableInstancing.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\dcbff6c9c548b51344cc4ad4893646b2\System.Printing.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\b7bf9745b6ac67086c7364ee34174c51\System.Management.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1072640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\38b6bf7d0ee6cea88d785e52e991627c\System.IdentityModel.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\9d5b252266a6084a611b2be84fac9e1c\System.Drawing.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\94f406f804865ec1ef81acaf426e48ca\System.DirectoryServices.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1879040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\d612e5ab6df30b2018730c781e979ce8\System.Deployment.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 6815232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\25a90057cd6623c3b3cc07e53c8de77a\System.Data.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 2549760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\79ff5fcb68fc0f3dce4571f8fa950a51\System.Data.SqlXml.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 1343488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\6bbce53ef9b6e8b9204929342f503647\System.Data.Services.Client.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 2517504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\ae45172466a99ef79ed2ab3ae5ad0ef9\System.Data.Linq.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 7069696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\b6ac99f2787a9a672d7a696ef25588ee\System.Core.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 4129792 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\3d60413b16725524801275d92249169b\System.Activities.ni.dll
+ 2012-02-15 19:14 . 2012-02-15 19:14 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\bb8932dfd01f4c645f9902fd703cde49\System.Activities.Presentation.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1547264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\d92c6df050f16ca2610191d283d826bb\System.Activities.Core.Presentation.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 2907136 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\6f94955023126311d6aaa840f8852023\ReachFramework.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1640448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\a593524fad58317c70d237d214a25204\PresentationUI.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\70a16497eb1cc16502203fb15014fd35\Microsoft.VisualBasic.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1136128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\4de0dca5c413e316f948daad4b5e2d6f\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2308d9bc9e1b4fa300140d447aa34d51\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1085952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\38b6c0eb820c7b8ce3efb4bdfb6ba480\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\5beb57c4dedf5103ee84b16d0d269093\Microsoft.JScript.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\bc7e22b7991a4f23c6bb9e83e2241d05\Microsoft.CSharp.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 4927488 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\72f21f61357658b9c6b7b4b1a1e33987\WindowsBase.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\a10c9fe07d5fe5e8c9aef9d7fff8b95a\UIAutomationClientsideProviders.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\e27a134ab834ece4ba174b926a825e15\System.Xml.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\9850a0978d0b56231a7f36f1f4ec9e1f\System.WorkflowServices.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\c64b813d144af3db528b000e06fafde9\System.Workflow.Runtime.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\617108e375db2d547ec78e8b6337a5ac\System.Workflow.ComponentModel.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\5481345c079323560b9ae19499b7e273\System.Workflow.Activities.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\f8fa4f0a541be982825536ceec34fa1a\System.Web.Services.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\145e7ebef796c4b653664f377b07ae7a\System.Web.Mobile.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 3043840 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\8dbb8f75d927391774fc50117e201a6d\System.Web.Extensions.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\699488179469a2284ab33c4f0df1b103\System.Web.Extensions.Design.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\965933e74d0cf876cef852295edff553\System.Speech.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\8155601451adac7127bf5a8607fd0138\System.ServiceModel.Web.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\32e23c5bb537840b23429b439afe35cd\System.Runtime.Serialization.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\fb3749ebeb93d2a57a15e08ab6bb2180\System.Runtime.Remoting.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\69658ce81a377802fdaf0f95f8cbd8f2\System.Printing.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 1408512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\0e9fbb272174b8bba217665ef24ce7a3\System.Management.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 1433088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\4f40e646586dea662bd7370f3fe09d53\System.IdentityModel.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\fd857ce0790fdcc2e50537c57dbbc7cc\System.EnterpriseServices.ni.dll
+ 2012-02-15 18:05 . 2012-02-15 18:05 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\e0f753de983bb53fd10baac20fd9fe01\System.Drawing.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\94d9c7f1fb8a33779f2754b03d615bdf\System.DirectoryServices.AccountManagement.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\7cf15503b61829d997a83449555294c9\System.DirectoryServices.ni.dll
+ 2012-02-15 18:05 . 2012-02-15 18:05 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\1b329a61a6b477b45ee00f74a596ba4b\System.Deployment.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 8692736 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\e0b90ee6ea2cfef9d25eec6cbbb2db58\System.Data.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\8c61d77dc5e3268679be4cc2a15bedc8\System.Data.SqlXml.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\3bd05ae6ad3ee5adb0868dc04a28fea7\System.Data.Services.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\4beaa66f063c5ae7384f31e26d476e21\System.Data.Services.Client.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\a159fbb6848157ea51b5c8923f53a173\System.Data.OracleClient.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\e58c9f2d66916bb8f7da21d85f706415\System.Data.Linq.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\9b2610bab980ce42d8a145c8c2af532b\System.Data.Entity.Design.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\7b94dfe397b4626f568ff83bd2b6e54e\System.Core.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\b5fd9e39d77eac8135fc948b57bcbecc\System.Configuration.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\f520e5f7757a233a8c744e8d3227463f\ReachFramework.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\afd06bd9843b44728c48309c43fde52b\PresentationUI.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\0eee18014e7cc8f4f6fcb4a322657089\PresentationBuildTasks.ni.dll
+ 2012-02-15 19:17 . 2012-02-15 19:17 4402688 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet\a0281a3a8ed2c36635c8a51d16ecb275\PaintDotNet.ni.exe
+ 2012-02-13 04:46 . 2012-02-13 04:46 4402688 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet\5b1b7637b0d3c37b555e33c84c0f018b\PaintDotNet.ni.exe
+ 2012-02-13 04:45 . 2012-02-13 04:45 1327616 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\88a8f406638dc51769964ab6efbe2116\PaintDotNet.SystemLayer.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 1327616 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.SystemL#\1951cc96acaef7f2af1d9e207caab348\PaintDotNet.SystemLayer.ni.dll
+ 2012-02-13 04:46 . 2012-02-13 04:46 1070080 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Effects\a2339697de3d7a2dd48e1c2c68ee48f4\PaintDotNet.Effects.ni.dll
+ 2012-02-15 19:17 . 2012-02-15 19:17 1070080 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Effects\6d37765b577bf51d12fafc5d0826200c\PaintDotNet.Effects.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 2722816 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Core\847ceb22b5d556d71539a6807bd6fcda\PaintDotNet.Core.ni.dll
+ 2012-02-15 19:17 . 2012-02-15 19:17 2722816 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Core\130be1f4bcf10618c341386b0625d2bb\PaintDotNet.Core.ni.dll
+ 2012-02-15 19:16 . 2012-02-15 19:16 1171968 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Base\8511550b47e85cf4eca040d0fb3d029d\PaintDotNet.Base.ni.dll
+ 2012-02-13 04:45 . 2012-02-13 04:45 1171968 c:\windows\assembly\NativeImages_v2.0.50727_64\PaintDotNet.Base\2d0d1efa12695cbc17e7f081a22b6382\PaintDotNet.Base.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\6b653a2d89621c5b293aa3f4c159373d\Narrator.ni.exe
+ 2012-02-15 19:22 . 2012-02-15 19:22 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\65bfcd307102d6b2f559ea944a831257\MMCEx.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 7966208 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\a4118bee5b662208c3da06151117f899\MIGUIControls.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\3b1e06a06617fec4e5c4708987ae64b9\Microsoft.VisualBasic.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 1598464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\678bdf64864ecb76402731097d597f1a\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\d4f3f3c87447de665525f51a9c510add\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2012-02-15 19:22 . 2012-02-15 19:22 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\99beef2cf536672c1f3f79fa275c85a6\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 2175488 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\8f2cb5e410460b417295d3dd64e2531a\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\534900fb6ae887976feb70a3e4d11a5b\Microsoft.PowerShell.Editor.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f60ec0a7332d364d0920a43d933120ba\Microsoft.MediaCenter.Bml.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\d354d4143a28c3763fdfd7328db806bb\Microsoft.MediaCenter.UI.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\a2b32a67efe6f8996a315b344e97c072\Microsoft.MediaCenter.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\7eec424ec594f976e2b5312be9e9fd28\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\5baca0c11e1180954822ecc71f423bb9\Microsoft.MediaCenter.Shell.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 3208192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\84c24afb9fa89d5f52e53bd89c28dbb6\Microsoft.JScript.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\7dcd5f7bbba84aff028b37e2791ecd9c\Microsoft.Ink.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\cb1eb215189e73c8e6954c832af877cf\Microsoft.Build.Tasks.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 2677760 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\99ca04fed6d48227fc547696d35ff210\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\53e48fdc63b81bf2bcff912f2a21d1c0\Microsoft.Build.Engine.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\15b1d9918d92e454a92d78b38817e324\Microsoft.Build.Engine.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\02ccd3463707886826337c5e436d9990\mcstore.ni.dll
+ 2012-02-15 19:19 . 2012-02-15 19:19 4086784 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\c7c81899395ce306902b4483483646cb\mcepg.ni.dll
+ 2012-02-15 19:09 . 2012-02-15 19:09 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7c7994286b132942a77128a722eda0eb\WindowsLive.Writer.PostEditor.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\34d515428081e024fde51f1bb8418eab\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2012-02-15 19:09 . 2012-02-15 19:09 2018304 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\330942a9128fb8c6e93f48e721852387\WindowsLive.Writer.CoreServices.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\585ac5899ab444221c8b41df13b194bc\WindowsBase.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\7302baafd6c169c170e4cb9946cf8744\UIAutomationClientsideProviders.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 7952384 c:\windows\assembly\NativeImages_v2.0.50727_32\System\1f14b3e1ee0847f8662f513e67f92547\System.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49f4cb0755ccc34cd35ff96dc2ef9e3\System.Xml.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\83e604a790d14f761b938491d842e505\System.WorkflowServices.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\bb367de311a5a667d190a6692c712500\System.Workflow.Runtime.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0bbafbdfda6fd92b7fb4f73eea8232ee\System.Workflow.ComponentModel.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6ad8759175f1d88baaecf3778254ede8\System.Workflow.Activities.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e0dbdfca9d4a65b1189481a168295866\System.Web.Services.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\08da6943f50dc536ac83d9412c9467a0\System.Web.Mobile.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 2403840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\295c56a93b0e0870aebea1e1ff6c8a1c\System.Web.Extensions.ni.dll
+ 2012-02-15 19:13 . 2012-02-15 19:13 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\4fd17a17a3491ac0900ce695e0accd05\System.Speech.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\dbe077c5cdcef7f2165db3d73265272c\System.ServiceModel.Web.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\a221123a83601a4a964218b3bd3f4fa6\System.Runtime.Serialization.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\378d6092f62088bb4c6df0c3b08738b8\System.Printing.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\8fcf38adbfd33eef8396282da128b0e8\System.Management.Automation.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\44d15a5bcd3143d53fd67b871c728616\System.IdentityModel.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1586688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\a09ee392fa90849f2e9313a1ebbe0279\System.Drawing.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\63dc10cf90c6a9c70c95d21d15f20a96\System.DirectoryServices.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\633c6734669cdde71728a7d59f1ed1a6\System.Deployment.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\c06a0517281bb4a9c7fcaeb58d38cd63\System.Data.ni.dll
+ 2012-02-15 18:08 . 2012-02-15 18:08 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\24df52cfcb704a481e21428788c7dc22\System.Data.SqlXml.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\dce37eabe9bb4bd40a8393179071d3b5\System.Data.Services.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\d2dff86b5456eccada29a351a227ba44\System.Data.OracleClient.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\dfb2b5f2ce8da373b076adcf6fc39f47\System.Data.Linq.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\433bb06af0bef1a0b4c275c5c126eb04\System.Data.Entity.ni.dll
+ 2012-02-15 19:10 . 2012-02-15 19:10 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\a25e06e527720656434230d3ee420427\System.Core.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\98f8b2daee55f5bfbd8dbb0b54e4d9a6\ReachFramework.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bb6c78075c09c3687df6d5de89e4dfad\PresentationUI.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\ce4a36b917a8cd24d1424e179ce7f36f\PresentationBuildTasks.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\66f20ce02a8f1e7a694573367a7eddb9\Narrator.ni.exe
+ 2012-02-15 19:12 . 2012-02-15 19:12 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\a51531417c51271078f842827a26c99c\MMCEx.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\acdc9c9f34623e58e9acca16034b0512\MIGUIControls.ni.dll
+ 2012-02-15 19:12 . 2012-02-15 19:12 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\4745cd79cd87ef98af5163b152088e28\Microsoft.VisualBasic.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c614532b38e34d7f4b952819f8bfa7c8\Microsoft.Transactions.Bridge.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d3f39090f2a2686fd971970183e3ae49\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8ec0afbea5cbd2ce072ced4b778e50b9\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2ca257d49d5bdd6d04c45cb086f22d4b\Microsoft.PowerShell.Editor.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\db9d6e283344291ab71cb94015294a39\Microsoft.MediaCenter.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\a9d9608aba73e52c1163523848a54e9b\Microsoft.MediaCenter.UI.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\dd8c9dad457c919a28c818d5f6f2d457\Microsoft.JScript.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\fc50bce0e1ed23371ece4d8863086c25\Microsoft.Ink.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\c70384fb53daf2c28d8a641f76c06d0e\Microsoft.Build.Tasks.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9bea316c60079f4ac7ce0353f312874f\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\154f4214ffb1488ed7fadf6381100569\Microsoft.Build.Engine.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\c76b5554d3df1691a29c8916ca722104\mcstore.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\2e569d0399135f239df7fd3f4d51c956\mcepg.ni.dll
+ 2012-02-14 23:45 . 2011-10-31 23:17 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-02-14 23:45 . 2012-01-04 09:03 12868096 c:\windows\SysWOW64\shell32.dll
+ 2012-02-15 04:13 . 2011-12-14 03:30 12282368 c:\windows\SysWOW64\mshtml.dll
+ 2009-07-14 02:34 . 2012-02-21 20:15 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
- 2009-07-14 02:34 . 2012-02-10 01:14 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2012-02-14 23:45 . 2012-01-04 09:59 14164480 c:\windows\system32\shell32.dll
+ 2012-02-15 04:13 . 2011-12-14 07:43 17790464 c:\windows\system32\mshtml.dll
+ 2012-02-15 04:13 . 2011-12-14 07:16 10887168 c:\windows\system32\ieframe.dll
+ 2012-02-16 00:03 . 2012-02-16 00:03 20333056 c:\windows\Installer\14a6c4b.msp
+ 2012-02-13 04:45 . 2012-02-13 04:45 21165568 c:\windows\Installer\127acee.msi
+ 2012-02-15 04:17 . 2012-02-15 04:17 11879936 c:\windows\assembly\NativeImages_v4.0.30319_64\System\bbcac65b1d0045229354424a7595e258\System.ni.dll
+ 2012-02-15 19:28 . 2012-02-15 19:28 17290752 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\97347a1967260991cca95e94b5ba2d41\System.Windows.Forms.ni.dll
+ 2012-02-15 19:30 . 2012-02-15 19:30 24551936 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\49314ff27e3a21bbb1fb675a295f6571\System.ServiceModel.ni.dll
+ 2012-02-15 19:29 . 2012-02-15 19:29 18480128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\78e35b4bf12ee4833ed720a490e958f2\System.Data.Entity.ni.dll
+ 2012-02-15 19:24 . 2012-02-15 19:24 10439168 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\fcefa2871c7dc4d397ff8c6f92abf0d5\System.Core.ni.dll
+ 2012-02-15 19:26 . 2012-02-15 19:26 24406528 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\d0dddbe96a81cd6869f9643fa2809d71\PresentationFramework.ni.dll
+ 2012-02-15 19:25 . 2012-02-15 19:25 15907328 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\efb6d518bb284cdc29a96068726320c0\PresentationCore.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 13138432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\edfa0f31cc4950e16011ecb549f553f7\System.Windows.Forms.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 18058752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\b711fe4f8f23da12b205be1d231d4e2e\System.ServiceModel.ni.dll
+ 2012-02-15 19:15 . 2012-02-15 19:15 13346816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\0816c3b4ab4f25931be80ef29db36024\System.Data.Entity.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 18000384 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\bdf555b4cfed144a3b0b60e0308cbf2b\PresentationFramework.ni.dll
+ 2012-02-15 04:17 . 2012-02-15 04:17 11450880 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\37cfa5ae8473995db30414fa29167c28\PresentationCore.ni.dll
+ 2012-02-15 18:04 . 2012-02-15 18:04 10605056 c:\windows\assembly\NativeImages_v2.0.50727_64\System\3d69c3a887aa1a4b35fdeea64aa5735b\System.ni.dll
+ 2012-02-15 18:05 . 2012-02-15 18:05 17379328 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\3f482a320c87a6050710168acb9a85b4\System.Windows.Forms.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 15252992 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\b990f6f7a10900a8a9c0b622db77c4d2\System.Web.ni.dll
+ 2012-02-15 19:18 . 2012-02-15 19:18 23812096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\9ffd6cb4f54f017fe6363aa29f9e2644\System.ServiceModel.ni.dll
+ 2012-02-15 19:21 . 2012-02-15 19:21 11898880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\7eb9adb90ac86e12ed7dfa7065ba12f9\System.Management.Automation.ni.dll
+ 2012-02-15 18:07 . 2012-02-15 18:07 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\331539212c3e3b69d3a9d273fec2571e\System.Design.ni.dll
+ 2012-02-15 19:23 . 2012-02-15 19:23 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\d68eaefb3b0177f5e655fdb7fe1c3470\System.Data.Entity.ni.dll
+ 2012-02-15 18:06 . 2012-02-15 18:06 19169792 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\51b3b6c7f4e6e53b583906f88427581b\PresentationFramework.ni.dll
+ 2012-02-15 18:05 . 2012-02-15 18:05 16513024 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\c97b9ddcb9464742d0739ccef20f1b9c\PresentationCore.ni.dll
+ 2012-02-15 19:20 . 2012-02-15 19:20 25462272 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\ccf66ac146c031f1461896a142954c9c\ehshell.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 12431360 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ff30db6905f8ec024fc808ed8779c0f3\System.Windows.Forms.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 11824128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\2df79ab909c782d3796e4107d040327d\System.Web.ni.dll
+ 2012-02-15 19:11 . 2012-02-15 19:11 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\3623247db0c19cd14589e6f4d6cfb290\System.ServiceModel.ni.dll
+ 2012-02-15 18:10 . 2012-02-15 18:10 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\2de1178a4e6c8d13ae1994dc67ba657a\System.Design.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 14322688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8435718626a24beaeefc98d45ae77127\PresentationFramework.ni.dll
+ 2012-02-15 18:09 . 2012-02-15 18:09 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\c0508b05f5c28e37711f447a66368e75\PresentationCore.ni.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"PlusService"="c:\program files (x86)\Yuna Software\Messenger Plus!\PlusService.exe" [2011-10-24 801792]
"LifeCam"="c:\program files (x86)\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAHealth"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 136176]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 136176]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-23 225280]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 X6va005;X6va005;c:\users\Lily\AppData\Local\Temp\0054FF0.tmp [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
S2 HPWMISVC;HPWMISVC;c:\program files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-01-18 20480]
S3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 02:47]
.
2012-02-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-22 02:47]
.
2012-02-21 c:\windows\Tasks\HPCeeScheduleForLily.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 03:15]
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-05 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-05 410648]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-01-29 6160928]
"RtkOSD"="c:\program files (x86)\Realtek\Audio\OSD\RtVOsd64.exe" [2010-01-13 995840]
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Lily\AppData\Roaming\Mozilla\Firefox\Profiles\jdvv19p5.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource;=3&q;={searchTerms}
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2706&invocationType;=tb50-ff-aim-ab-en-us&tb;_uuid=20110821044524515&tb;_oid=21-08-2011&tb;_mrud=21-08-2011&query;=
FF - prefs.js: network.proxy.type - 0
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false
FF - user.js: browser.sessionstore.resume_from_crash - false
.
- - - - ORPHANS REMOVED - - - -
.
ShellIconOverlayIdentifiers-{F4B3B0AA-13D1-4a36-BDA2-2055B0F3D5DE} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va005]
"ImagePath"="\??\c:\users\Lily\AppData\Local\Temp\0054FF0.tmp"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\\.\globalroot\systemroot\svchost.exe
.
**************************************************************************
.
Completion time: 2012-02-21 16:21:30 - machine was rebooted
ComboFix-quarantined-files.txt 2012-02-21 21:21
ComboFix2.txt 2012-02-10 01:33
ComboFix3.txt 2012-01-21 17:45
.
Pre-Run: 214,400,413,696 bytes free
Post-Run: 214,214,041,600 bytes free
.
- - End Of File - - 1357660EAADE0AD96F0009F3C6F1EFC1


I uninstalled Norton AntiVirus, but for some reason it still said it was enabled :unsure:
Post #12
It's ok, as long as you have removed Norton then it's fine. Norton doesn't remove itself completely which is a bit of headache.

Download TDSSKiller.exe and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.log.txt


Please post the contents of that log in your next reply.
Post #13
Hello! :P

Here is my TDSKiller log:

20:22:20.0911 4828 TDSS rootkit removing tool 2.7.13.0 Feb 15 2012 19:33:14
20:22:21.0130 4828 ============================================================
20:22:21.0130 4828 Current date / time: 2012/02/22 20:22:21.0130
20:22:21.0130 4828 SystemInfo:
20:22:21.0130 4828
20:22:21.0130 4828 OS Version: 6.1.7600 ServicePack: 0.0
20:22:21.0130 4828 Product type: Workstation
20:22:21.0130 4828 ComputerName: LILY-PC
20:22:21.0131 4828 UserName: Lily
20:22:21.0131 4828 Windows directory: C:\Windows
20:22:21.0131 4828 System windows directory: C:\Windows
20:22:21.0131 4828 Running under WOW64
20:22:21.0131 4828 Processor architecture: Intel x64
20:22:21.0131 4828 Number of processors: 2
20:22:21.0131 4828 Page size: 0x1000
20:22:21.0131 4828 Boot type: Normal boot
20:22:21.0131 4828 ============================================================
20:22:21.0446 4828 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:22:21.0450 4828 \Device\Harddisk0\DR0:
20:22:21.0450 4828 MBR used
20:22:21.0450 4828 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800
20:22:21.0450 4828 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x236FA000
20:22:21.0450 4828 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2375E000, BlocksNum 0x1C9C800
20:22:21.0450 4828 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x253FA800, BlocksNum 0x33AB0
20:22:21.0554 4828 Initialize success
20:22:21.0554 4828 ============================================================
20:22:32.0015 2600 ============================================================
20:22:32.0015 2600 Scan started
20:22:32.0015 2600 Mode: Manual;
20:22:32.0015 2600 ============================================================
20:22:32.0423 2600 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
20:22:32.0427 2600 1394ohci - ok
20:22:32.0468 2600 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
20:22:32.0471 2600 ACPI - ok
20:22:32.0536 2600 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
20:22:32.0537 2600 AcpiPmi - ok
20:22:32.0584 2600 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
20:22:32.0591 2600 adp94xx - ok
20:22:32.0677 2600 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
20:22:32.0681 2600 adpahci - ok
20:22:32.0770 2600 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
20:22:32.0773 2600 adpu320 - ok
20:22:32.0883 2600 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys
20:22:32.0888 2600 AFD - ok
20:22:32.0964 2600 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
20:22:32.0965 2600 agp440 - ok
20:22:33.0015 2600 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
20:22:33.0016 2600 aliide - ok
20:22:33.0037 2600 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
20:22:33.0038 2600 amdide - ok
20:22:33.0061 2600 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
20:22:33.0062 2600 AmdK8 - ok
20:22:33.0080 2600 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
20:22:33.0082 2600 AmdPPM - ok
20:22:33.0114 2600 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys
20:22:33.0116 2600 amdsata - ok
20:22:33.0148 2600 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
20:22:33.0151 2600 amdsbs - ok
20:22:33.0208 2600 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys
20:22:33.0209 2600 amdxata - ok
20:22:33.0263 2600 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
20:22:33.0265 2600 AppID - ok
20:22:33.0402 2600 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
20:22:33.0404 2600 arc - ok
20:22:33.0424 2600 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
20:22:33.0426 2600 arcsas - ok
20:22:33.0465 2600 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
20:22:33.0466 2600 AsyncMac - ok
20:22:33.0496 2600 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
20:22:33.0497 2600 atapi - ok
20:22:33.0581 2600 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
20:22:33.0587 2600 b06bdrv - ok
20:22:33.0604 2600 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
20:22:33.0608 2600 b57nd60a - ok
20:22:33.0633 2600 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
20:22:33.0634 2600 Beep - ok
20:22:33.0717 2600 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
20:22:33.0718 2600 blbdrive - ok
20:22:33.0773 2600 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
20:22:33.0775 2600 bowser - ok
20:22:33.0829 2600 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
20:22:33.0830 2600 BrFiltLo - ok
20:22:33.0860 2600 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
20:22:33.0861 2600 BrFiltUp - ok
20:22:33.0901 2600 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
20:22:33.0903 2600 BridgeMP - ok
20:22:33.0959 2600 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
20:22:33.0963 2600 Brserid - ok
20:22:33.0993 2600 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
20:22:33.0994 2600 BrSerWdm - ok
20:22:34.0035 2600 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
20:22:34.0036 2600 BrUsbMdm - ok
20:22:34.0080 2600 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
20:22:34.0081 2600 BrUsbSer - ok
20:22:34.0111 2600 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
20:22:34.0112 2600 BTHMODEM - ok
20:22:34.0197 2600 catchme - ok
20:22:34.0234 2600 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
20:22:34.0236 2600 cdfs - ok
20:22:34.0269 2600 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
20:22:34.0271 2600 cdrom - ok
20:22:34.0338 2600 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
20:22:34.0339 2600 circlass - ok
20:22:34.0363 2600 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
20:22:34.0368 2600 CLFS - ok
20:22:34.0514 2600 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
20:22:34.0515 2600 CmBatt - ok
20:22:34.0542 2600 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
20:22:34.0543 2600 cmdide - ok
20:22:34.0580 2600 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers\cng.sys
20:22:34.0586 2600 CNG - ok
20:22:34.0623 2600 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
20:22:34.0624 2600 Compbatt - ok
20:22:34.0654 2600 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
20:22:34.0655 2600 CompositeBus - ok
20:22:34.0716 2600 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
20:22:34.0718 2600 crcdisk - ok
20:22:34.0850 2600 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
20:22:34.0852 2600 DfsC - ok
20:22:34.0886 2600 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
20:22:34.0887 2600 discache - ok
20:22:34.0960 2600 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
20:22:34.0961 2600 Disk - ok
20:22:34.0996 2600 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
20:22:34.0997 2600 drmkaud - ok
20:22:35.0070 2600 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys
20:22:35.0081 2600 DXGKrnl - ok
20:22:35.0106 2600 EagleX64 - ok
20:22:35.0201 2600 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
20:22:35.0281 2600 ebdrv - ok
20:22:35.0435 2600 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
20:22:35.0442 2600 elxstor - ok
20:22:35.0475 2600 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
20:22:35.0476 2600 ErrDev - ok
20:22:35.0526 2600 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
20:22:35.0528 2600 exfat - ok
20:22:35.0557 2600 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
20:22:35.0560 2600 fastfat - ok
20:22:35.0585 2600 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
20:22:35.0586 2600 fdc - ok
20:22:35.0646 2600 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
20:22:35.0648 2600 FileInfo - ok
20:22:35.0661 2600 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
20:22:35.0662 2600 Filetrace - ok
20:22:35.0679 2600 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
20:22:35.0680 2600 flpydisk - ok
20:22:35.0700 2600 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
20:22:35.0704 2600 FltMgr - ok
20:22:35.0740 2600 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
20:22:35.0742 2600 FsDepends - ok
20:22:35.0752 2600 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
20:22:35.0754 2600 Fs_Rec - ok
20:22:35.0793 2600 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
20:22:35.0795 2600 fvevol - ok
20:22:35.0869 2600 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
20:22:35.0871 2600 gagp30kx - ok
20:22:35.0922 2600 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:22:35.0923 2600 GEARAspiWDM - ok
20:22:35.0989 2600 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
20:22:35.0990 2600 hcw85cir - ok
20:22:36.0024 2600 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
20:22:36.0028 2600 HdAudAddService - ok
20:22:36.0058 2600 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
20:22:36.0059 2600 HDAudBus - ok
20:22:36.0079 2600 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
20:22:36.0080 2600 HidBatt - ok
20:22:36.0123 2600 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
20:22:36.0125 2600 HidBth - ok
20:22:36.0138 2600 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
20:22:36.0140 2600 HidIr - ok
20:22:36.0179 2600 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
20:22:36.0179 2600 HidUsb - ok
20:22:36.0232 2600 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
20:22:36.0234 2600 HpSAMD - ok
20:22:36.0286 2600 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
20:22:36.0295 2600 HTTP - ok
20:22:36.0317 2600 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
20:22:36.0317 2600 hwpolicy - ok
20:22:36.0384 2600 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
20:22:36.0386 2600 i8042prt - ok
20:22:36.0440 2600 iaStor (be7d72fcf442c26975942007e0831241) C:\Windows\system32\DRIVERS\iaStor.sys
20:22:36.0443 2600 iaStor - ok
20:22:36.0528 2600 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys
20:22:36.0533 2600 iaStorV - ok
20:22:36.0752 2600 igfx (898ab5bfed7040d7ab07af01885eb944) C:\Windows\system32\DRIVERS\igdkmd64.sys
20:22:36.0945 2600 igfx - ok
20:22:37.0083 2600 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
20:22:37.0084 2600 iirsp - ok
20:22:37.0171 2600 IntcAzAudAddService (a3bcbd0f710580a07d1b929d787d36ce) C:\Windows\system32\drivers\RTKVHD64.sys
20:22:37.0195 2600 IntcAzAudAddService - ok
20:22:37.0334 2600 IntcHdmiAddService (cfc68ca36a63637e8ca69669ee3693da) C:\Windows\system32\drivers\IntcHdmi.sys
20:22:37.0336 2600 IntcHdmiAddService - ok
20:22:37.0372 2600 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
20:22:37.0373 2600 intelide - ok
20:22:37.0436 2600 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
20:22:37.0437 2600 intelppm - ok
20:22:37.0461 2600 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:22:37.0462 2600 IpFilterDriver - ok
20:22:37.0530 2600 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
20:22:37.0531 2600 IPMIDRV - ok
20:22:37.0592 2600 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
20:22:37.0594 2600 IPNAT - ok
20:22:37.0643 2600 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
20:22:37.0644 2600 IRENUM - ok
20:22:37.0697 2600 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
20:22:37.0698 2600 isapnp - ok
20:22:37.0737 2600 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
20:22:37.0740 2600 iScsiPrt - ok
20:22:37.0772 2600 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
20:22:37.0773 2600 kbdclass - ok
20:22:37.0844 2600 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
20:22:37.0845 2600 kbdhid - ok
20:22:37.0898 2600 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers\ksecdd.sys
20:22:37.0900 2600 KSecDD - ok
20:22:37.0912 2600 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers\ksecpkg.sys
20:22:37.0915 2600 KSecPkg - ok
20:22:37.0961 2600 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
20:22:37.0962 2600 ksthunk - ok
20:22:38.0029 2600 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
20:22:38.0030 2600 lltdio - ok
20:22:38.0096 2600 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
20:22:38.0098 2600 LSI_FC - ok
20:22:38.0116 2600 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
20:22:38.0118 2600 LSI_SAS - ok
20:22:38.0136 2600 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
20:22:38.0137 2600 LSI_SAS2 - ok
20:22:38.0162 2600 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
20:22:38.0164 2600 LSI_SCSI - ok
20:22:38.0238 2600 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
20:22:38.0240 2600 luafv - ok
20:22:38.0275 2600 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
20:22:38.0276 2600 megasas - ok
20:22:38.0302 2600 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
20:22:38.0306 2600 MegaSR - ok
20:22:38.0348 2600 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
20:22:38.0350 2600 Modem - ok
20:22:38.0384 2600 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
20:22:38.0385 2600 monitor - ok
20:22:38.0407 2600 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
20:22:38.0408 2600 mouclass - ok
20:22:38.0449 2600 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
20:22:38.0450 2600 mouhid - ok
20:22:38.0463 2600 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
20:22:38.0464 2600 mountmgr - ok
20:22:38.0486 2600 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
20:22:38.0489 2600 mpio - ok
20:22:38.0510 2600 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
20:22:38.0511 2600 mpsdrv - ok
20:22:38.0580 2600 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
20:22:38.0582 2600 MRxDAV - ok
20:22:38.0611 2600 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:22:38.0614 2600 mrxsmb - ok
20:22:38.0629 2600 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:22:38.0633 2600 mrxsmb10 - ok
20:22:38.0656 2600 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:22:38.0658 2600 mrxsmb20 - ok
20:22:38.0704 2600 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
20:22:38.0705 2600 msahci - ok
20:22:38.0746 2600 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
20:22:38.0748 2600 msdsm - ok
20:22:38.0787 2600 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
20:22:38.0788 2600 Msfs - ok
20:22:38.0829 2600 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
20:22:38.0830 2600 mshidkmdf - ok
20:22:38.0864 2600 MSHUSBVideo (bb590070d606ae6f008341fc9a7b2ad7) C:\Windows\system32\Drivers\nx6000.sys
20:22:38.0865 2600 MSHUSBVideo - ok
20:22:38.0899 2600 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
20:22:38.0900 2600 msisadrv - ok
20:22:38.0931 2600 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
20:22:38.0933 2600 MSKSSRV - ok
20:22:39.0008 2600 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
20:22:39.0009 2600 MSPCLOCK - ok
20:22:39.0029 2600 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
20:22:39.0030 2600 MSPQM - ok
20:22:39.0070 2600 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
20:22:39.0075 2600 MsRPC - ok
20:22:39.0106 2600 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
20:22:39.0106 2600 mssmbios - ok
20:22:39.0126 2600 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
20:22:39.0127 2600 MSTEE - ok
20:22:39.0149 2600 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
20:22:39.0150 2600 MTConfig - ok
20:22:39.0166 2600 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
20:22:39.0167 2600 Mup - ok
20:22:39.0220 2600 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
20:22:39.0224 2600 NativeWifiP - ok
20:22:39.0266 2600 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
20:22:39.0277 2600 NDIS - ok
20:22:39.0310 2600 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
20:22:39.0311 2600 NdisCap - ok
20:22:39.0357 2600 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
20:22:39.0358 2600 NdisTapi - ok
20:22:39.0396 2600 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
20:22:39.0397 2600 Ndisuio - ok
20:22:39.0412 2600 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
20:22:39.0415 2600 NdisWan - ok
20:22:39.0432 2600 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
20:22:39.0434 2600 NDProxy - ok
20:22:39.0450 2600 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
20:22:39.0451 2600 NetBIOS - ok
20:22:39.0497 2600 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
20:22:39.0499 2600 NetBT - ok
20:22:39.0639 2600 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys
20:22:39.0757 2600 netw5v64 - ok
20:22:39.0880 2600 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
20:22:39.0881 2600 nfrd960 - ok
20:22:39.0942 2600 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
20:22:39.0943 2600 Npfs - ok
20:22:39.0970 2600 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
20:22:39.0970 2600 nsiproxy - ok
20:22:40.0060 2600 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys
20:22:40.0078 2600 Ntfs - ok
20:22:40.0184 2600 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
20:22:40.0185 2600 Null - ok
20:22:40.0217 2600 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys
20:22:40.0219 2600 nvraid - ok
20:22:40.0254 2600 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys
20:22:40.0257 2600 nvstor - ok
20:22:40.0284 2600 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
20:22:40.0287 2600 nv_agp - ok
20:22:40.0337 2600 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
20:22:40.0338 2600 ohci1394 - ok
20:22:40.0375 2600 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
20:22:40.0377 2600 Parport - ok
20:22:40.0415 2600 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
20:22:40.0416 2600 partmgr - ok
20:22:40.0439 2600 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
20:22:40.0442 2600 pci - ok
20:22:40.0457 2600 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
20:22:40.0458 2600 pciide - ok
20:22:40.0481 2600 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
20:22:40.0484 2600 pcmcia - ok
20:22:40.0505 2600 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
20:22:40.0507 2600 pcw - ok
20:22:40.0528 2600 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
20:22:40.0536 2600 PEAUTH - ok
20:22:40.0597 2600 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
20:22:40.0599 2600 PptpMiniport - ok
20:22:40.0627 2600 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
20:22:40.0629 2600 Processor - ok
20:22:40.0688 2600 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
20:22:40.0690 2600 Psched - ok
20:22:40.0744 2600 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
20:22:40.0761 2600 ql2300 - ok
20:22:40.0798 2600 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
20:22:40.0800 2600 ql40xx - ok
20:22:40.0826 2600 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
20:22:40.0827 2600 QWAVEdrv - ok
20:22:40.0843 2600 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
20:22:40.0844 2600 RasAcd - ok
20:22:40.0874 2600 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
20:22:40.0876 2600 RasAgileVpn - ok
20:22:40.0899 2600 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:22:40.0900 2600 Rasl2tp - ok
20:22:40.0919 2600 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
20:22:40.0920 2600 RasPppoe - ok
20:22:40.0939 2600 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
20:22:40.0940 2600 RasSstp - ok
20:22:40.0961 2600 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
20:22:40.0965 2600 rdbss - ok
20:22:40.0991 2600 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
20:22:40.0992 2600 rdpbus - ok
20:22:41.0033 2600 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:22:41.0033 2600 RDPCDD - ok
20:22:41.0052 2600 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
20:22:41.0053 2600 RDPENCDD - ok
20:22:41.0065 2600 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
20:22:41.0065 2600 RDPREFMP - ok
20:22:41.0092 2600 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
20:22:41.0095 2600 RDPWD - ok
20:22:41.0133 2600 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
20:22:41.0136 2600 rdyboost - ok
20:22:41.0203 2600 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
20:22:41.0205 2600 rspndr - ok
20:22:41.0281 2600 RSUSBSTOR (483df0b58ca532e5240e59dc41f30aa2) C:\Windows\system32\Drivers\RtsUStor.sys
20:22:41.0284 2600 RSUSBSTOR - ok
20:22:41.0322 2600 RTL8167 (777fc2c418465404e3d8a290dc247d24) C:\Windows\system32\DRIVERS\Rt64win7.sys
20:22:41.0325 2600 RTL8167 - ok
20:22:41.0395 2600 rtl8192se (03e0627c26943916a7276ac5306206c7) C:\Windows\system32\DRIVERS\rtl8192se.sys
20:22:41.0407 2600 rtl8192se - ok
20:22:41.0434 2600 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
20:22:41.0435 2600 sbp2port - ok
20:22:41.0459 2600 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
20:22:41.0461 2600 scfilter - ok
20:22:41.0503 2600 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS\sdbus.sys
20:22:41.0505 2600 sdbus - ok
20:22:41.0530 2600 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
20:22:41.0531 2600 secdrv - ok
20:22:41.0565 2600 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
20:22:41.0566 2600 Serenum - ok
20:22:41.0587 2600 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
20:22:41.0589 2600 Serial - ok
20:22:41.0638 2600 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
20:22:41.0640 2600 sermouse - ok
20:22:41.0677 2600 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
20:22:41.0678 2600 sffdisk - ok
20:22:41.0709 2600 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
20:22:41.0710 2600 sffp_mmc - ok
20:22:41.0722 2600 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
20:22:41.0723 2600 sffp_sd - ok
20:22:41.0759 2600 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
20:22:41.0760 2600 sfloppy - ok
20:22:41.0844 2600 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
20:22:41.0846 2600 SiSRaid2 - ok
20:22:41.0867 2600 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
20:22:41.0869 2600 SiSRaid4 - ok
20:22:41.0898 2600 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
20:22:41.0900 2600 Smb - ok
20:22:41.0926 2600 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
20:22:41.0927 2600 spldr - ok
20:22:41.0974 2600 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
20:22:41.0979 2600 srv - ok
20:22:42.0004 2600 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
20:22:42.0009 2600 srv2 - ok
20:22:42.0038 2600 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
20:22:42.0042 2600 SrvHsfHDA - ok
20:22:42.0123 2600 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
20:22:42.0140 2600 SrvHsfV92 - ok
20:22:42.0173 2600 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
20:22:42.0182 2600 SrvHsfWinac - ok
20:22:42.0244 2600 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
20:22:42.0246 2600 srvnet - ok
20:22:42.0303 2600 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
20:22:42.0304 2600 stexstor - ok
20:22:42.0357 2600 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
20:22:42.0358 2600 swenum - ok
20:22:42.0422 2600 SynTP (91853f78b68f9f036670291f5edd4eae) C:\Windows\system32\DRIVERS\SynTP.sys
20:22:42.0426 2600 SynTP - ok
20:22:42.0507 2600 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers\tcpip.sys
20:22:42.0528 2600 Tcpip - ok
20:22:42.0662 2600 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS\tcpip.sys
20:22:42.0673 2600 TCPIP6 - ok
20:22:42.0705 2600 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
20:22:42.0706 2600 tcpipreg - ok
20:22:42.0731 2600 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
20:22:42.0732 2600 TDPIPE - ok
20:22:42.0775 2600 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
20:22:42.0776 2600 TDTCP - ok
20:22:42.0798 2600 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
20:22:42.0800 2600 tdx - ok
20:22:42.0813 2600 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
20:22:42.0814 2600 TermDD - ok
20:22:42.0849 2600 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:22:42.0850 2600 tssecsrv - ok
20:22:42.0906 2600 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
20:22:42.0908 2600 tunnel - ok
20:22:42.0943 2600 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
20:22:42.0944 2600 uagp35 - ok
20:22:42.0980 2600 udfs (c06e6f4679ceb8f430b90a51d76d8d3c) C:\Windows\system32\DRIVERS\udfs.sys
20:22:42.0984 2600 udfs - ok
20:22:43.0031 2600 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
20:22:43.0033 2600 uliagpkx - ok
20:22:43.0066 2600 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
20:22:43.0075 2600 umbus - ok
20:22:43.0132 2600 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
20:22:43.0133 2600 UmPass - ok
20:22:43.0170 2600 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
20:22:43.0171 2600 USBAAPL64 - ok
20:22:43.0202 2600 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
20:22:43.0204 2600 usbaudio - ok
20:22:43.0252 2600 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys
20:22:43.0254 2600 usbccgp - ok
20:22:43.0282 2600 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
20:22:43.0286 2600 usbcir - ok
20:22:43.0309 2600 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\DRIVERS\usbehci.sys
20:22:43.0310 2600 usbehci - ok
20:22:43.0362 2600 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys
20:22:43.0366 2600 usbhub - ok
20:22:43.0393 2600 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers\usbohci.sys
20:22:43.0394 2600 usbohci - ok
20:22:43.0421 2600 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
20:22:43.0422 2600 usbprint - ok
20:22:43.0460 2600 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:22:43.0462 2600 USBSTOR - ok
20:22:43.0526 2600 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\DRIVERS\usbuhci.sys
20:22:43.0527 2600 usbuhci - ok
20:22:43.0569 2600 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\system32\Drivers\usbvideo.sys
20:22:43.0571 2600 usbvideo - ok
20:22:43.0608 2600 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
20:22:43.0609 2600 vdrvroot - ok
20:22:43.0658 2600 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
20:22:43.0659 2600 vga - ok
20:22:43.0678 2600 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
20:22:43.0679 2600 VgaSave - ok
20:22:43.0712 2600 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
20:22:43.0714 2600 vhdmp - ok
20:22:43.0732 2600 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
20:22:43.0733 2600 viaide - ok
20:22:43.0771 2600 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
20:22:43.0773 2600 volmgr - ok
20:22:43.0794 2600 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
20:22:43.0799 2600 volmgrx - ok
20:22:43.0816 2600 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
20:22:43.0821 2600 volsnap - ok
20:22:43.0855 2600 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
20:22:43.0857 2600 vsmraid - ok
20:22:43.0891 2600 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
20:22:43.0892 2600 vwifibus - ok
20:22:43.0908 2600 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
20:22:43.0909 2600 vwififlt - ok
20:22:43.0951 2600 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
20:22:43.0953 2600 WacomPen - ok
20:22:44.0015 2600 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
20:22:44.0017 2600 WANARP - ok
20:22:44.0028 2600 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
20:22:44.0030 2600 Wanarpv6 - ok
20:22:44.0097 2600 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
20:22:44.0098 2600 Wd - ok
20:22:44.0152 2600 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
20:22:44.0159 2600 Wdf01000 - ok
20:22:44.0196 2600 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
20:22:44.0197 2600 WfpLwf - ok
20:22:44.0233 2600 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
20:22:44.0234 2600 WIMMount - ok
20:22:44.0366 2600 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
20:22:44.0368 2600 WinUsb - ok
20:22:44.0402 2600 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
20:22:44.0403 2600 WmiAcpi - ok
20:22:44.0445 2600 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
20:22:44.0445 2600 ws2ifsl - ok
20:22:44.0496 2600 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
20:22:44.0498 2600 WudfPf - ok
20:22:44.0519 2600 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:22:44.0522 2600 WUDFRd - ok
20:22:44.0634 2600 X6va005 - ok
20:22:44.0681 2600 yukonw7 (b3eeacf62445e24fbb2cd4b0fb4db026) C:\Windows\system32\DRIVERS\yk62x64.sys
20:22:44.0685 2600 yukonw7 - ok
20:22:44.0709 2600 MBR (0x1B8) (c0dcf0ac171db02db8b0014c5d767cf1) \Device\Harddisk0\DR0
20:22:44.0735 2600 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected
20:22:44.0735 2600 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0)
20:22:44.0763 2600 Boot (0x1200) (6fa0c54d892d7a6b06a2d3aeec34e565) \Device\Harddisk0\DR0\Partition0
20:22:44.0763 2600 \Device\Harddisk0\DR0\Partition0 - ok
20:22:44.0778 2600 Boot (0x1200) (adb9aa13b939be3875cbb850ef658f50) \Device\Harddisk0\DR0\Partition1
20:22:44.0779 2600 \Device\Harddisk0\DR0\Partition1 - ok
20:22:44.0810 2600 Boot (0x1200) (b7eb364ec81d7bc19fa8af0dda9c0381) \Device\Harddisk0\DR0\Partition2
20:22:44.0810 2600 \Device\Harddisk0\DR0\Partition2 - ok
20:22:44.0880 2600 Boot (0x1200) (9883137f11314e14b271ef834b6b88ce) \Device\Harddisk0\DR0\Partition3
20:22:44.0880 2600 \Device\Harddisk0\DR0\Partition3 - ok
20:22:44.0880 2600 ============================================================
20:22:44.0880 2600 Scan finished
20:22:44.0880 2600 ============================================================
20:22:44.0893 4600 Detected object count: 1
20:22:44.0893 4600 Actual detected object count: 1
20:23:17.0759 4600 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - skipped by user
20:23:17.0759 4600 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Skip
20:23:25.0129 4160 Deinitialize success
Post #14
Good morning :) I need you to run TDSSKiller again but this time select cure instead. Also please provide me the latest DDS log for me. Thanks!
Post #15
Sorry for the late update and Thank you for your patience! :D Here is the TDSKiller log with it cured: 21:57:26.0073 4472 TDSS rootkit removing tool [removed] Feb 15 2012 19:33:14 21:57:26.0473 4472 ============================================================ 21:57:26.0473 4472 Current date / time: 2012/02/23 21:57:26.0473 21:57:26.0473 4472 SystemInfo: 21:57:26.0473 4472 21:57:26.0473 4472 OS Version: 6.1.7600 ServicePack: 0.0 21:57:26.0473 4472 Product type: Workstation 21:57:26.0473 4472 ComputerName: LILY-PC 21:57:26.0474 4472 UserName: Lily 21:57:26.0474 4472 Windows directory: C:\Windows 21:57:26.0474 4472 System windows directory: C:\Windows 21:57:26.0474 4472 Running under WOW64 21:57:26.0474 4472 Processor architecture: Intel x64 21:57:26.0474 4472 Number of processors: 2 21:57:26.0474 4472 Page size: 0x1000 21:57:26.0474 4472 Boot type: Normal boot 21:57:26.0474 4472 ============================================================ 21:57:26.0784 4472 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 21:57:26.0788 4472 \Device\Harddisk0\DR0: 21:57:26.0789 4472 MBR used 21:57:26.0789 4472 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 21:57:26.0789 4472 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x236FA000 21:57:26.0789 4472 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2375E000, BlocksNum 0x1C9C800 21:57:26.0789 4472 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x253FA800, BlocksNum 0x33AB0 21:57:26.0900 4472 Initialize success 21:57:26.0900 4472 ============================================================ 21:57:28.0190 3540 ============================================================ 21:57:28.0190 3540 Scan started 21:57:28.0190 3540 Mode: Manual; 21:57:28.0190 3540 ============================================================ 21:57:28.0536 3540 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS \1394ohci.sys 21:57:28.0539 3540 1394ohci - ok 21:57:28.0636 3540 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS \ACPI.sys 21:57:28.0640 3540 ACPI - ok 21:57:28.0670 3540 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS \acpipmi.sys 21:57:28.0672 3540 AcpiPmi - ok 21:57:28.0741 3540 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS \adp94xx.sys 21:57:28.0748 3540 adp94xx - ok 21:57:28.0889 3540 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS \adpahci.sys 21:57:28.0893 3540 adpahci - ok 21:57:28.0949 3540 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS \adpu320.sys 21:57:28.0952 3540 adpu320 - ok 21:57:29.0051 3540 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers \afd.sys 21:57:29.0072 3540 AFD - ok 21:57:29.0142 3540 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS \agp440.sys 21:57:29.0144 3540 agp440 - ok 21:57:29.0193 3540 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS \aliide.sys 21:57:29.0194 3540 aliide - ok 21:57:29.0215 3540 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS \amdide.sys 21:57:29.0216 3540 amdide - ok 21:57:29.0251 3540 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS \amdk8.sys 21:57:29.0252 3540 AmdK8 - ok 21:57:29.0270 3540 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS \amdppm.sys 21:57:29.0272 3540 AmdPPM - ok 21:57:29.0315 3540 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers \amdsata.sys 21:57:29.0317 3540 amdsata - ok 21:57:29.0349 3540 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS \amdsbs.sys 21:57:29.0351 3540 amdsbs - ok 21:57:29.0376 3540 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers \amdxata.sys 21:57:29.0376 3540 amdxata - ok 21:57:29.0430 3540 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers \appid.sys 21:57:29.0432 3540 AppID - ok 21:57:29.0692 3540 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS \arc.sys 21:57:29.0693 3540 arc - ok 21:57:29.0724 3540 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS \arcsas.sys 21:57:29.0726 3540 arcsas - ok 21:57:29.0832 3540 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS \asyncmac.sys 21:57:29.0833 3540 AsyncMac - ok 21:57:29.0885 3540 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS \atapi.sys 21:57:29.0885 3540 atapi - ok 21:57:29.0948 3540 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS \bxvbda.sys 21:57:29.0953 3540 b06bdrv - ok 21:57:30.0004 3540 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS \b57nd60a.sys 21:57:30.0008 3540 b57nd60a - ok 21:57:30.0044 3540 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers \Beep.sys 21:57:30.0045 3540 Beep - ok 21:57:30.0105 3540 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS \blbdrive.sys 21:57:30.0106 3540 blbdrive - ok 21:57:30.0162 3540 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS \bowser.sys 21:57:30.0163 3540 bowser - ok 21:57:30.0207 3540 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS \BrFiltLo.sys 21:57:30.0208 3540 BrFiltLo - ok 21:57:30.0226 3540 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS \BrFiltUp.sys 21:57:30.0227 3540 BrFiltUp - ok 21:57:30.0290 3540 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS \bridge.sys 21:57:30.0291 3540 BridgeMP - ok 21:57:30.0348 3540 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers \Brserid.sys 21:57:30.0352 3540 Brserid - ok 21:57:30.0393 3540 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers \BrSerWdm.sys 21:57:30.0394 3540 BrSerWdm - ok 21:57:30.0424 3540 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers \BrUsbMdm.sys 21:57:30.0425 3540 BrUsbMdm - ok 21:57:30.0447 3540 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers \BrUsbSer.sys 21:57:30.0448 3540 BrUsbSer - ok 21:57:30.0466 3540 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS \bthmodem.sys 21:57:30.0468 3540 BTHMODEM - ok 21:57:30.0530 3540 catchme - ok 21:57:30.0557 3540 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS \cdfs.sys 21:57:30.0558 3540 cdfs - ok 21:57:30.0602 3540 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS \cdrom.sys 21:57:30.0604 3540 cdrom - ok 21:57:30.0660 3540 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS \circlass.sys 21:57:30.0662 3540 circlass - ok 21:57:30.0708 3540 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 21:57:30.0713 3540 CLFS - ok 21:57:30.0837 3540 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS \CmBatt.sys 21:57:30.0838 3540 CmBatt - ok 21:57:30.0876 3540 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS \cmdide.sys 21:57:30.0877 3540 cmdide - ok 21:57:30.0913 3540 CNG (937beb186a735aca91d717044a49d17e) C:\Windows\system32\Drivers \cng.sys 21:57:30.0919 3540 CNG - ok 21:57:30.0967 3540 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS \compbatt.sys 21:57:30.0968 3540 Compbatt - ok 21:57:31.0010 3540 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS \CompositeBus.sys 21:57:31.0011 3540 CompositeBus - ok 21:57:31.0050 3540 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS \crcdisk.sys 21:57:31.0051 3540 crcdisk - ok 21:57:31.0217 3540 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers \dfsc.sys 21:57:31.0219 3540 DfsC - ok 21:57:31.0242 3540 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers \discache.sys 21:57:31.0242 3540 discache - ok 21:57:31.0304 3540 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS \disk.sys 21:57:31.0305 3540 Disk - ok 21:57:31.0352 3540 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers \drmkaud.sys 21:57:31.0353 3540 drmkaud - ok 21:57:31.0403 3540 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers \dxgkrnl.sys 21:57:31.0410 3540 DXGKrnl - ok 21:57:31.0432 3540 EagleX64 - ok 21:57:31.0523 3540 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS \evbda.sys 21:57:31.0574 3540 ebdrv - ok 21:57:31.0692 3540 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS \elxstor.sys 21:57:31.0698 3540 elxstor - ok 21:57:31.0742 3540 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS \errdev.sys 21:57:31.0743 3540 ErrDev - ok 21:57:31.0804 3540 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers \exfat.sys 21:57:31.0807 3540 exfat - ok 21:57:31.0857 3540 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers \fastfat.sys 21:57:31.0860 3540 fastfat - ok 21:57:31.0886 3540 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS \fdc.sys 21:57:31.0887 3540 fdc - ok 21:57:31.0925 3540 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers \fileinfo.sys 21:57:31.0926 3540 FileInfo - ok 21:57:31.0940 3540 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers \filetrace.sys 21:57:31.0941 3540 Filetrace - ok 21:57:31.0958 3540 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS \flpydisk.sys 21:57:31.0959 3540 flpydisk - ok 21:57:31.0978 3540 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers \fltmgr.sys 21:57:31.0982 3540 FltMgr - ok 21:57:32.0041 3540 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers \FsDepends.sys 21:57:32.0042 3540 FsDepends - ok 21:57:32.0053 3540 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers \Fs_Rec.sys 21:57:32.0053 3540 Fs_Rec - ok 21:57:32.0093 3540 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS \fvevol.sys 21:57:32.0096 3540 fvevol - ok 21:57:32.0137 3540 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS \gagp30kx.sys 21:57:32.0138 3540 gagp30kx - ok 21:57:32.0200 3540 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS \GEARAspiWDM.sys 21:57:32.0201 3540 GEARAspiWDM - ok 21:57:32.0234 3540 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers \hcw85cir.sys 21:57:32.0235 3540 hcw85cir - ok 21:57:32.0279 3540 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers \HdAudio.sys 21:57:32.0284 3540 HdAudAddService - ok 21:57:32.0325 3540 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS \HDAudBus.sys 21:57:32.0327 3540 HDAudBus - ok 21:57:32.0346 3540 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS \HidBatt.sys 21:57:32.0347 3540 HidBatt - ok 21:57:32.0368 3540 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS \hidbth.sys 21:57:32.0370 3540 HidBth - ok 21:57:32.0383 3540 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS \hidir.sys 21:57:32.0385 3540 HidIr - ok 21:57:32.0424 3540 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS \hidusb.sys 21:57:32.0425 3540 HidUsb - ok 21:57:32.0477 3540 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS \HpSAMD.sys 21:57:32.0479 3540 HpSAMD - ok 21:57:32.0531 3540 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers \HTTP.sys 21:57:32.0540 3540 HTTP - ok 21:57:32.0562 3540 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers \hwpolicy.sys 21:57:32.0562 3540 hwpolicy - ok 21:57:32.0585 3540 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS \i8042prt.sys 21:57:32.0587 3540 i8042prt - ok 21:57:32.0641 3540 iaStor (be7d72fcf442c26975942007e0831241) C:\Windows\system32\DRIVERS \iaStor.sys 21:57:32.0644 3540 iaStor - ok 21:57:32.0707 3540 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers \iaStorV.sys 21:57:32.0712 3540 iaStorV - ok 21:57:32.0940 3540 igfx (898ab5bfed7040d7ab07af01885eb944) C:\Windows\system32\DRIVERS \igdkmd64.sys 21:57:33.0125 3540 igfx - ok 21:57:33.0229 3540 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS \iirsp.sys 21:57:33.0230 3540 iirsp - ok 21:57:33.0316 3540 IntcAzAudAddService (a3bcbd0f710580a07d1b929d787d36ce) C:\Windows\system32\drivers \RTKVHD64.sys 21:57:33.0330 3540 IntcAzAudAddService - ok 21:57:33.0447 3540 IntcHdmiAddService (cfc68ca36a63637e8ca69669ee3693da) C:\Windows\system32\drivers \IntcHdmi.sys 21:57:33.0449 3540 IntcHdmiAddService - ok 21:57:33.0485 3540 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS \intelide.sys 21:57:33.0486 3540 intelide - ok 21:57:33.0515 3540 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS \intelppm.sys 21:57:33.0516 3540 intelppm - ok 21:57:33.0551 3540 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS \ipfltdrv.sys 21:57:33.0553 3540 IpFilterDriver - ok 21:57:33.0620 3540 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS \IPMIDrv.sys 21:57:33.0622 3540 IPMIDRV - ok 21:57:33.0661 3540 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers \ipnat.sys 21:57:33.0663 3540 IPNAT - ok 21:57:33.0712 3540 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers \irenum.sys 21:57:33.0713 3540 IRENUM - ok 21:57:33.0743 3540 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS \isapnp.sys 21:57:33.0744 3540 isapnp - ok 21:57:33.0783 3540 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS \msiscsi.sys 21:57:33.0786 3540 iScsiPrt - ok 21:57:33.0818 3540 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS \kbdclass.sys 21:57:33.0819 3540 kbdclass - ok 21:57:33.0846 3540 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS \kbdhid.sys 21:57:33.0847 3540 kbdhid - ok 21:57:33.0900 3540 KSecDD (16c1b906fc5ead84769f90b736b6bf0e) C:\Windows\system32\Drivers \ksecdd.sys 21:57:33.0901 3540 KSecDD - ok 21:57:33.0925 3540 KSecPkg (0b711550c56444879d71c7daabda6c83) C:\Windows\system32\Drivers \ksecpkg.sys 21:57:33.0927 3540 KSecPkg - ok 21:57:33.0963 3540 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers \ksthunk.sys 21:57:33.0964 3540 ksthunk - ok 21:57:34.0031 3540 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS \lltdio.sys 21:57:34.0032 3540 lltdio - ok 21:57:34.0076 3540 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS \lsi_fc.sys 21:57:34.0078 3540 LSI_FC - ok 21:57:34.0096 3540 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS \lsi_sas.sys 21:57:34.0098 3540 LSI_SAS - ok 21:57:34.0116 3540 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS \lsi_sas2.sys 21:57:34.0118 3540 LSI_SAS2 - ok 21:57:34.0142 3540 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS \lsi_scsi.sys 21:57:34.0144 3540 LSI_SCSI - ok 21:57:34.0174 3540 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers \luafv.sys 21:57:34.0176 3540 luafv - ok 21:57:34.0211 3540 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS \megasas.sys 21:57:34.0212 3540 megasas - ok 21:57:34.0250 3540 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS \MegaSR.sys 21:57:34.0254 3540 MegaSR - ok 21:57:34.0273 3540 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers \modem.sys 21:57:34.0274 3540 Modem - ok 21:57:34.0309 3540 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS \monitor.sys 21:57:34.0309 3540 monitor - ok 21:57:34.0332 3540 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS \mouclass.sys 21:57:34.0333 3540 mouclass - ok 21:57:34.0363 3540 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS \mouhid.sys 21:57:34.0364 3540 mouhid - ok 21:57:34.0377 3540 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers \mountmgr.sys 21:57:34.0378 3540 mountmgr - ok 21:57:34.0400 3540 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS \mpio.sys 21:57:34.0402 3540 mpio - ok 21:57:34.0423 3540 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers \mpsdrv.sys 21:57:34.0425 3540 mpsdrv - ok 21:57:34.0471 3540 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers \mrxdav.sys 21:57:34.0474 3540 MRxDAV - ok 21:57:34.0503 3540 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS \mrxsmb.sys 21:57:34.0506 3540 mrxsmb - ok 21:57:34.0521 3540 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS \mrxsmb10.sys 21:57:34.0525 3540 mrxsmb10 - ok 21:57:34.0548 3540 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS \mrxsmb20.sys 21:57:34.0550 3540 mrxsmb20 - ok 21:57:34.0574 3540 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS \msahci.sys 21:57:34.0575 3540 msahci - ok 21:57:34.0616 3540 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS \msdsm.sys 21:57:34.0618 3540 msdsm - ok 21:57:34.0668 3540 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers \Msfs.sys 21:57:34.0669 3540 Msfs - ok 21:57:34.0688 3540 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers \mshidkmdf.sys 21:57:34.0689 3540 mshidkmdf - ok 21:57:34.0722 3540 MSHUSBVideo (bb590070d606ae6f008341fc9a7b2ad7) C:\Windows\system32\Drivers \nx6000.sys 21:57:34.0723 3540 MSHUSBVideo - ok 21:57:34.0747 3540 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS \msisadrv.sys 21:57:34.0747 3540 msisadrv - ok 21:57:34.0790 3540 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers \MSKSSRV.sys 21:57:34.0791 3540 MSKSSRV - ok 21:57:34.0811 3540 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers \MSPCLOCK.sys 21:57:34.0812 3540 MSPCLOCK - ok 21:57:34.0833 3540 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers \MSPQM.sys 21:57:34.0834 3540 MSPQM - ok 21:57:34.0862 3540 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers \MsRPC.sys 21:57:34.0866 3540 MsRPC - ok 21:57:34.0898 3540 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS \mssmbios.sys 21:57:34.0899 3540 mssmbios - ok 21:57:34.0918 3540 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers \MSTEE.sys 21:57:34.0919 3540 MSTEE - ok 21:57:34.0941 3540 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS \MTConfig.sys 21:57:34.0942 3540 MTConfig - ok 21:57:34.0969 3540 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers \mup.sys 21:57:34.0970 3540 Mup - ok 21:57:35.0012 3540 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS \nwifi.sys 21:57:35.0016 3540 NativeWifiP - ok 21:57:35.0058 3540 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers \ndis.sys 21:57:35.0069 3540 NDIS - ok 21:57:35.0091 3540 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS \ndiscap.sys 21:57:35.0093 3540 NdisCap - ok 21:57:35.0115 3540 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS \ndistapi.sys 21:57:35.0116 3540 NdisTapi - ok 21:57:35.0155 3540 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS \ndisuio.sys 21:57:35.0156 3540 Ndisuio - ok 21:57:35.0181 3540 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS \ndiswan.sys 21:57:35.0184 3540 NdisWan - ok 21:57:35.0202 3540 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers \NDProxy.sys 21:57:35.0203 3540 NDProxy - ok 21:57:35.0242 3540 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS \netbios.sys 21:57:35.0243 3540 NetBIOS - ok 21:57:35.0266 3540 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS \netbt.sys 21:57:35.0269 3540 NetBT - ok 21:57:35.0441 3540 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS \netw5v64.sys 21:57:35.0546 3540 netw5v64 - ok 21:57:35.0649 3540 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS \nfrd960.sys 21:57:35.0650 3540 nfrd960 - ok 21:57:35.0689 3540 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers \Npfs.sys 21:57:35.0690 3540 Npfs - ok 21:57:35.0706 3540 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers \nsiproxy.sys 21:57:35.0706 3540 nsiproxy - ok 21:57:35.0774 3540 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers \Ntfs.sys 21:57:35.0792 3540 Ntfs - ok 21:57:35.0821 3540 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers \Null.sys 21:57:35.0822 3540 Null - ok 21:57:35.0853 3540 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers \nvraid.sys 21:57:35.0857 3540 nvraid - ok 21:57:35.0924 3540 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers \nvstor.sys 21:57:35.0927 3540 nvstor - ok 21:57:35.0943 3540 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS \nv_agp.sys 21:57:35.0945 3540 nv_agp - ok 21:57:35.0973 3540 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS \ohci1394.sys 21:57:35.0975 3540 ohci1394 - ok 21:57:36.0011 3540 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS \parport.sys 21:57:36.0013 3540 Parport - ok 21:57:36.0052 3540 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers \partmgr.sys 21:57:36.0053 3540 partmgr - ok 21:57:36.0075 3540 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS \pci.sys 21:57:36.0077 3540 pci - ok 21:57:36.0094 3540 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS \pciide.sys 21:57:36.0095 3540 pciide - ok 21:57:36.0118 3540 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS \pcmcia.sys 21:57:36.0121 3540 pcmcia - ok 21:57:36.0142 3540 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers \pcw.sys 21:57:36.0142 3540 pcw - ok 21:57:36.0165 3540 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers \peauth.sys 21:57:36.0173 3540 PEAUTH - ok 21:57:36.0234 3540 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS \raspptp.sys 21:57:36.0236 3540 PptpMiniport - ok 21:57:36.0253 3540 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS \processr.sys 21:57:36.0254 3540 Processor - ok 21:57:36.0303 3540 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS \pacer.sys 21:57:36.0305 3540 Psched - ok 21:57:36.0370 3540 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS \ql2300.sys 21:57:36.0387 3540 ql2300 - ok 21:57:36.0490 3540 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS \ql40xx.sys 21:57:36.0492 3540 ql40xx - ok 21:57:36.0518 3540 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers \qwavedrv.sys 21:57:36.0519 3540 QWAVEdrv - ok 21:57:36.0534 3540 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS \rasacd.sys 21:57:36.0535 3540 RasAcd - ok 21:57:36.0577 3540 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS \AgileVpn.sys 21:57:36.0579 3540 RasAgileVpn - ok 21:57:36.0602 3540 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS \rasl2tp.sys 21:57:36.0603 3540 Rasl2tp - ok 21:57:36.0622 3540 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS \raspppoe.sys 21:57:36.0624 3540 RasPppoe - ok 21:57:36.0642 3540 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS \rassstp.sys 21:57:36.0644 3540 RasSstp - ok 21:57:36.0664 3540 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS \rdbss.sys 21:57:36.0668 3540 rdbss - ok 21:57:36.0694 3540 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS \rdpbus.sys 21:57:36.0695 3540 rdpbus - ok 21:57:36.0714 3540 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS \RDPCDD.sys 21:57:36.0714 3540 RDPCDD - ok 21:57:36.0744 3540 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers \rdpencdd.sys 21:57:36.0745 3540 RDPENCDD - ok 21:57:36.0755 3540 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers \rdprefmp.sys 21:57:36.0756 3540 RDPREFMP - ok 21:57:36.0784 3540 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers \RDPWD.sys 21:57:36.0787 3540 RDPWD - ok 21:57:36.0825 3540 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers \rdyboost.sys 21:57:36.0827 3540 rdyboost - ok 21:57:36.0895 3540 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS \rspndr.sys 21:57:36.0897 3540 rspndr - ok 21:57:36.0973 3540 RSUSBSTOR (483df0b58ca532e5240e59dc41f30aa2) C:\Windows\system32\Drivers \RtsUStor.sys 21:57:36.0976 3540 RSUSBSTOR - ok 21:57:37.0014 3540 RTL8167 (777fc2c418465404e3d8a290dc247d24) C:\Windows\system32\DRIVERS \Rt64win7.sys 21:57:37.0017 3540 RTL8167 - ok 21:57:37.0065 3540 rtl8192se (03e0627c26943916a7276ac5306206c7) C:\Windows\system32\DRIVERS \rtl8192se.sys 21:57:37.0072 3540 rtl8192se - ok 21:57:37.0104 3540 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS \sbp2port.sys 21:57:37.0105 3540 sbp2port - ok 21:57:37.0129 3540 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS \scfilter.sys 21:57:37.0130 3540 scfilter - ok 21:57:37.0173 3540 sdbus (54e47ad086782d3ae9417c155cdceb9b) C:\Windows\system32\DRIVERS \sdbus.sys 21:57:37.0175 3540 sdbus - ok 21:57:37.0200 3540 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers \secdrv.sys 21:57:37.0200 3540 secdrv - ok 21:57:37.0235 3540 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS \serenum.sys 21:57:37.0236 3540 Serenum - ok 21:57:37.0257 3540 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS \serial.sys 21:57:37.0259 3540 Serial - ok 21:57:37.0308 3540 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS \sermouse.sys 21:57:37.0310 3540 sermouse - ok 21:57:37.0347 3540 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS \sffdisk.sys 21:57:37.0348 3540 sffdisk - ok 21:57:37.0368 3540 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS \sffp_mmc.sys 21:57:37.0369 3540 sffp_mmc - ok 21:57:37.0381 3540 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS \sffp_sd.sys 21:57:37.0382 3540 sffp_sd - ok 21:57:37.0407 3540 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS \sfloppy.sys 21:57:37.0408 3540 sfloppy - ok 21:57:37.0448 3540 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS \SiSRaid2.sys 21:57:37.0449 3540 SiSRaid2 - ok 21:57:37.0471 3540 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS \sisraid4.sys 21:57:37.0473 3540 SiSRaid4 - ok 21:57:37.0502 3540 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS \smb.sys 21:57:37.0504 3540 Smb - ok 21:57:37.0541 3540 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers \spldr.sys 21:57:37.0541 3540 spldr - ok 21:57:37.0588 3540 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS \srv.sys 21:57:37.0595 3540 srv - ok 21:57:37.0619 3540 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS \srv2.sys 21:57:37.0623 3540 srv2 - ok 21:57:37.0653 3540 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS \VSTAZL6.SYS 21:57:37.0657 3540 SrvHsfHDA - ok 21:57:37.0704 3540 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS \VSTDPV6.SYS 21:57:37.0721 3540 SrvHsfV92 - ok 21:57:37.0754 3540 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS \VSTCNXT6.SYS 21:57:37.0763 3540 SrvHsfWinac - ok 21:57:37.0803 3540 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS \srvnet.sys 21:57:37.0806 3540 srvnet - ok 21:57:37.0851 3540 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS \stexstor.sys 21:57:37.0852 3540 stexstor - ok 21:57:37.0906 3540 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS \swenum.sys 21:57:37.0906 3540 swenum - ok 21:57:37.0982 3540 SynTP (91853f78b68f9f036670291f5edd4eae) C:\Windows\system32\DRIVERS \SynTP.sys 21:57:37.0984 3540 SynTP - ok 21:57:38.0066 3540 Tcpip (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\drivers \tcpip.sys 21:57:38.0087 3540 Tcpip - ok 21:57:38.0322 3540 TCPIP6 (f18f56efc0bfb9c87ba01c37b27f4da5) C:\Windows\system32\DRIVERS \tcpip.sys 21:57:38.0333 3540 TCPIP6 - ok 21:57:38.0442 3540 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers \tcpipreg.sys 21:57:38.0443 3540 tcpipreg - ok 21:57:38.0468 3540 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers \tdpipe.sys 21:57:38.0469 3540 TDPIPE - ok 21:57:38.0490 3540 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers \tdtcp.sys 21:57:38.0491 3540 TDTCP - ok 21:57:38.0513 3540 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS \tdx.sys 21:57:38.0515 3540 tdx - ok 21:57:38.0528 3540 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS \termdd.sys 21:57:38.0529 3540 TermDD - ok 21:57:38.0575 3540 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS \tssecsrv.sys 21:57:38.0577 3540 tssecsrv - ok 21:57:38.0610 3540 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS \tunnel.sys 21:57:38.0612 3540 tunnel - ok 21:57:38.0647 3540 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS \uagp35.sys 21:57:38.0649 3540 uagp35 - ok 21:57:38.0684 3540 udfs (c06e6f4679ceb8f430b90a51d76d8d3c) C:\Windows\system32\DRIVERS \udfs.sys 21:57:38.0688 3540 udfs - ok 21:57:38.0736 3540 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS \uliagpkx.sys 21:57:38.0737 3540 uliagpkx - ok 21:57:38.0759 3540 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS \umbus.sys 21:57:38.0760 3540 umbus - ok 21:57:38.0803 3540 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS \umpass.sys 21:57:38.0804 3540 UmPass - ok 21:57:38.0841 3540 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers \usbaapl64.sys 21:57:38.0842 3540 USBAAPL64 - ok 21:57:38.0873 3540 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers \usbaudio.sys 21:57:38.0875 3540 usbaudio - ok 21:57:38.0912 3540 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS \usbccgp.sys 21:57:38.0913 3540 usbccgp - ok 21:57:38.0942 3540 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS \usbcir.sys 21:57:38.0957 3540 usbcir - ok 21:57:38.0969 3540 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\DRIVERS \usbehci.sys 21:57:38.0970 3540 usbehci - ok 21:57:39.0011 3540 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS \usbhub.sys 21:57:39.0015 3540 usbhub - ok 21:57:39.0030 3540 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\drivers \usbohci.sys 21:57:39.0031 3540 usbohci - ok 21:57:39.0058 3540 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS \usbprint.sys 21:57:39.0059 3540 usbprint - ok 21:57:39.0098 3540 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS \USBSTOR.SYS 21:57:39.0100 3540 USBSTOR - ok 21:57:39.0119 3540 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\DRIVERS \usbuhci.sys 21:57:39.0120 3540 usbuhci - ok 21:57:39.0162 3540 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\system32\Drivers \usbvideo.sys 21:57:39.0165 3540 usbvideo - ok 21:57:39.0201 3540 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS \vdrvroot.sys 21:57:39.0202 3540 vdrvroot - ok 21:57:39.0230 3540 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS \vgapnp.sys 21:57:39.0231 3540 vga - ok 21:57:39.0249 3540 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers \vga.sys 21:57:39.0251 3540 VgaSave - ok 21:57:39.0283 3540 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS \vhdmp.sys 21:57:39.0286 3540 vhdmp - ok 21:57:39.0304 3540 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS \viaide.sys 21:57:39.0305 3540 viaide - ok 21:57:39.0321 3540 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS \volmgr.sys 21:57:39.0322 3540 volmgr - ok 21:57:39.0344 3540 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers \volmgrx.sys 21:57:39.0348 3540 volmgrx - ok 21:57:39.0377 3540 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS \volsnap.sys 21:57:39.0380 3540 volsnap - ok 21:57:39.0426 3540 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS \vsmraid.sys 21:57:39.0429 3540 vsmraid - ok 21:57:39.0451 3540 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS \vwifibus.sys 21:57:39.0452 3540 vwifibus - ok 21:57:39.0468 3540 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS \vwififlt.sys 21:57:39.0470 3540 vwififlt - ok 21:57:39.0512 3540 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS \wacompen.sys 21:57:39.0513 3540 WacomPen - ok 21:57:39.0554 3540 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS \wanarp.sys 21:57:39.0555 3540 WANARP - ok 21:57:39.0560 3540 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS \wanarp.sys 21:57:39.0561 3540 Wanarpv6 - ok 21:57:39.0624 3540 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 21:57:39.0625 3540 Wd - ok 21:57:39.0657 3540 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers \Wdf01000.sys 21:57:39.0664 3540 Wdf01000 - ok 21:57:39.0724 3540 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS \wfplwf.sys 21:57:39.0724 3540 WfpLwf - ok 21:57:39.0760 3540 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers \wimmount.sys 21:57:39.0761 3540 WIMMount - ok 21:57:39.0861 3540 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS \WinUsb.sys 21:57:39.0862 3540 WinUsb - ok 21:57:39.0896 3540 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS \wmiacpi.sys 21:57:39.0897 3540 WmiAcpi - ok 21:57:39.0950 3540 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers \ws2ifsl.sys 21:57:39.0951 3540 ws2ifsl - ok 21:57:40.0012 3540 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers \WudfPf.sys 21:57:40.0014 3540 WudfPf - ok 21:57:40.0036 3540 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS \WUDFRd.sys 21:57:40.0039 3540 WUDFRd - ok 21:57:40.0139 3540 X6va005 - ok 21:57:40.0175 3540 yukonw7 (b3eeacf62445e24fbb2cd4b0fb4db026) C:\Windows\system32\DRIVERS \yk62x64.sys 21:57:40.0180 3540 yukonw7 - ok 21:57:40.0203 3540 MBR (0x1B8) (c0dcf0ac171db02db8b0014c5d767cf1) \Device\Harddisk0\DR0 21:57:40.0229 3540 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected 21:57:40.0229 3540 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0) 21:57:40.0268 3540 Boot (0x1200) (6fa0c54d892d7a6b06a2d3aeec34e565) \Device\Harddisk0\DR0\Partition0 21:57:40.0269 3540 \Device\Harddisk0\DR0\Partition0 - ok 21:57:40.0283 3540 Boot (0x1200) (adb9aa13b939be3875cbb850ef658f50) \Device\Harddisk0\DR0\Partition1 21:57:40.0284 3540 \Device\Harddisk0\DR0\Partition1 - ok 21:57:40.0315 3540 Boot (0x1200) (b7eb364ec81d7bc19fa8af0dda9c0381) \Device\Harddisk0\DR0\Partition2 21:57:40.0316 3540 \Device\Harddisk0\DR0\Partition2 - ok 21:57:40.0329 3540 Boot (0x1200) (9883137f11314e14b271ef834b6b88ce) \Device\Harddisk0\DR0\Partition3 21:57:40.0330 3540 \Device\Harddisk0\DR0\Partition3 - ok 21:57:40.0330 3540 ============================================================ 21:57:40.0330 3540 Scan finished 21:57:40.0330 3540 ============================================================ 21:57:40.0343 3212 Detected object count: 1 21:57:40.0344 3212 Actual detected object count: 1 21:57:44.0834 3212 \Device\Harddisk0\DR0\# - copied to quarantine 21:57:44.0835 3212 \Device\Harddisk0\DR0 - copied to quarantine 21:57:44.0867 3212 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine 21:57:44.0869 3212 \Device\Harddisk0\DR0\TDLFS\phx.dll - copied to quarantine 21:57:44.0873 3212 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine 21:57:44.0887 3212 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine 21:57:44.0894 3212 \Device\Harddisk0\DR0\TDLFS\phd - copied to quarantine 21:57:44.0900 3212 \Device\Harddisk0\DR0\TDLFS\phdx - copied to quarantine 21:57:44.0902 3212 \Device\Harddisk0\DR0\TDLFS\phs - copied to quarantine 21:57:44.0903 3212 \Device\Harddisk0\DR0\TDLFS\phdata - copied to quarantine 21:57:44.0906 3212 \Device\Harddisk0\DR0\TDLFS\phld - copied to quarantine 21:57:44.0908 3212 \Device\Harddisk0\DR0\TDLFS\phln - copied to quarantine 21:57:44.0911 3212 \Device\Harddisk0\DR0\TDLFS\phlx - copied to quarantine 21:57:44.0913 3212 \Device\Harddisk0\DR0\TDLFS\phm - copied to quarantine 21:57:44.0915 3212 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - will be cured on reboot 21:57:44.0916 3212 \Device\Harddisk0\DR0 - ok 21:57:45.0102 3212 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Cure 21:58:18.0859 3608 Deinitialize success

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI