What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Very slow computer [Solved]

16 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello,

My computer has been extremely slow these days. It started a few weeks ago but then it just exponentially got slower and slower. Startup is slow, opening programs is slow and so is browsing.

I have AVG Anti-Virus Free Edition, Malwarebytes and Spybot Search & Destroy.

Here is my Hijackthis log. I appreciate any help in advance:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:44:12 AM, on 6/10/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe
C:\Users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\trend micro\HiJackThis\HiJackThis.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingApp.exe
C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingBar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wapp.verizon.net/bookmarks/bmredir….p;bm=ho_central
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPDSK/1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPDSK/1
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=c:\windows\syswow64\userinit.exe,
O2 - BHO: (no name) - {035EB6DE-F9BE-4B66-A05E-F62CFF7195D5} - C:\Windows\SysWow64\wscui32.dll (file missing)
O2 - BHO: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: eSnipBHO - {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - (no file)
O2 - BHO: DataMngr - {BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL (file missing)
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O3 - Toolbar: vShare Plugin - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll
O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [SansaDispatch] C:\Users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/…tiveXPlugin.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll
O23 - Service: SAS Core Service (!SASCORE) - Unknown owner - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Windows Audio (AudioSrv32) - Unknown owner - c:\windows\system32\reagent32.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: ActiveX Installer (AxInstSV) (AxInstSV32) - Unknown owner - C:\Windows\system32\dpnhpast32.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Desura Install Service - Desura Pty Ltd - C:\Program Files (x86)\Common Files\Desura\desura_service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServicepointService - Radialpoint Inc. - C:\Program Files (x86)\Verizon\VSP\ServicepointService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 15461 bytes
Post #2
Hello Meli and :welcome:

My name is JonTom

  • Malware Logs can sometimes take a lot of time to research and interpret.
  • Please be patient while I try to assist with your problem. If at any time you do not understand what is required, please ask for further explanation.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Read every reply you receive carefully and thoroughly before carrying out the instructions. You may also find it helpful to print out the instructions you receive, as in some instances you may have to disconnect your computer from the Internet.
  • PLEASE NOTE: If you do not reply after 3 days your thread will be closed.

Lets take a closer look at your machine with the following scans:

  • Please perform the following scan


    • Please download DDS from here and save it to your desktop.
    • Disable any script blocking protection (How to Disable your Security Programs)
    • Right click on the DDS icon and select "Run as Administrator" to run the tool (may take up to 3 minutes to run).
    • When done, DDS.txt will open.
    • After a few moments, attach.txt will open in a second window.
    • Save both reports to your desktop.
    • Please post the contents of the DDS.txt and Attach.txt logs in your next reply.

  • aswMBR


    • Download aswMBR.exe to your desktop.
    • Double click the aswMBR.exe to run it.
    • When asked if you want to download Avast's virus definitions please select Yes.
    • Click the "Scan" button to start scan.

    [external image: Posted Image]

    • On completion of the scan click save log, save it to your desktop and post in your next reply.

    [external image: Posted Image]

    Please post both DDS logs and the aswMBR log in your next reply.
Post #3
JonTom, thanks for your prompt responses! Here are the logs you requested: . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31 Run by [removed] at 22:39:06 on 2012-06-10 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8151.6805 [GMT -4:00] . AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} AV: Panda Cloud Antivirus *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59} SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Panda Cloud Antivirus *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe C:\Program Files (x86)\Verizon\VSP\ServicepointService.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe C:\Users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe C:\Users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe C:\Program Files (x86)\AVG\AVG2012\avgtray.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Verizon\VSP\VerizonServicepointComHandler.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\sysWOW64\wbem\wmiprvse.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=7.0unattached&bm=ho_central uSearch Bar = Preserve uInternet Settings,ProxyOverride = ;*.local mWinlogon: Userinit=c:\windows\syswow64\userinit.exe, BHO: {035eb6de-f9be-4b66-a05e-f62cff7195d5} - C:\Windows\SysWow64\wscui32.dll BHO: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - C:\Program Files (x86)\vShare\vshare_toolbar.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: AVG Do Not Track: {31332eef-cb9f-458f-afeb-d30e9a66b6ba} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll BHO: DivX Plus Web Player HTML5 : {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - No File BHO: DataMngr: {be7a24f5-69cb-4708-b77b-b1eda6043b95} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO: Microsoft Web Test Recorder 10.0 Helper: {dda57003-0068-4ed2-9d32-4d1ec707d94d} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll TB: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - C:\Program Files (x86)\vShare\vshare_toolbar.dll TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll TB: Wincore Mediabar: {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll" TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File TB: {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - No File {e7df6bff-55a5-4eb7-a673-4ed3e9456d39} EB: Web Test Recorder 10.0: {5802d092-1784-4908-8cdb-99b6842d353d} - mscoree.dll uRun: [SansaDispatch] C:\Users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe uRun: [Spotify Web Helper] "C:\Users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" mRun: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe mRun: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe mRun: [] mRun: [ClientGW] mRun: [VerizonServicepoint.exe] "C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" mRun: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll Trusted Zone: real.com\rhap-app-4-0 Trusted Zone: real.com\rhapreg DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{1492A9EB-2EB8-4A07-8A7A-936144183A78} : DhcpNameServer = [removed] [removed] Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll AppInit_DLLs: C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll C:\Windows\SysWow64\wscui32.dll BHO-X64: vShare Plugin: {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO-X64: AcroIEHelperStub - No File BHO-X64: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll BHO-X64: AVG Do Not Track - No File BHO-X64: DivX Plus Web Player HTML5 : {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll BHO-X64: Increase performance and video formats for your HTML5 - No File BHO-X64: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll BHO-X64: WormRadar.com IESiteBlocker.NavFilter - No File BHO-X64: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO-X64: SkypeIEPluginBHO - No File BHO-X64: {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - No File BHO-X64: eSnipBHO - No File BHO-X64: DataMngr: {BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll BHO-X64: Microsoft Web Test Recorder 10.0 Helper: {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll TB-X64: vShare Plugin: {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll TB-X64: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll TB-X64: Wincore Mediabar: {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll" TB-X64: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File TB-X64: {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - No File EB-X64: {5802D092-1784-4908-8CDB-99B6842D353D} - No File mRun-x64: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe mRun-x64: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun-x64: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe mRun-x64: [(Default)] mRun-x64: [ClientGW] mRun-x64: [VerizonServicepoint.exe] "C:\Program Files (x86)\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" mRun-x64: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" mRun-x64: [ROC_roc_dec12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun AppInit_DLLs-X64: C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll Hosts: 127.0.0.1 www.spywareinfo.com . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\ FF - prefs.js: browser.startup.homepage - hxxp://isearch.avg.com?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.0.0.9&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11 FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.0.0.9&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11&sap=ku&q= FF - component: C:\Program Files (x86)\AVG\AVG2012\Firefox4\components\avgssff4.dll FF - component: C:\Program Files (x86)\AVG\AVG2012\Firefox4\components\avgssff5.dll FF - component: C:\Program Files (x86)\AVG\AVG2012\Firefox4\components\avgssff6.dll FF - component: C:\Program Files (x86)\AVG\AVG2012\Firefox4\components\avgssff7.dll FF - component: C:\Program Files (x86)\AVG\AVG2012\Firefox4\components\avgssff8.dll FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll FF - component: C:\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\avg@toolbar\components\toolbarhomewmp.dll FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll FF - plugin: C:\Program Files (x86)\Verizon\VSP\nprpspa.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Users\Meli\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll FF - plugin: C:\Users\Meli\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll FF - plugin: C:\Users\Meli\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll . —- FIREFOX POLICIES —- FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extentions.y2layers.installId, 627e8fac-db18-4129-ba09-f7ef2629d8fb FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,BestVideoDownloader,BestVideoDownloader, . ============= SERVICES / DRIVERS =============== . R0 AVGIDSHA;AVGIDSHA;C:\Windows\system32\DRIVERS\avgidsha.sys –> C:\Windows\system32\DRIVERS\avgidsha.sys [?] R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys –> C:\Windows\system32\DRIVERS\avgrkx64.sys [?] R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys –> C:\Windows\system32\DRIVERS\avgldx64.sys [?] R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys –> C:\Windows\system32\DRIVERS\avgmfx64.sys [?] R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys –> C:\Windows\system32\DRIVERS\avgtdia.sys [?] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe –> C:\Windows\system32\atiesrxx.exe [?] R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-2-14 193288] R2 DigiNet;Digidesign Ethernet Support;C:\Windows\system32\DRIVERS\diginet.sys –> C:\Windows\system32\DRIVERS\diginet.sys [?] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-4-27 13336] R2 PaceLicenseDServices;PACE License Services;C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-9-8 2932224] R2 ServicepointService;ServicepointService;C:\Program Files (x86)\Verizon\VSP\ServicepointService.exe [2011-2-23 689464] R2 vToolbarUpdater10.2.0;vToolbarUpdater10.2.0;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe [2012-3-12 918880] R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\system32\DRIVERS\avgidsdrivera.sys –> C:\Windows\system32\DRIVERS\avgidsdrivera.sys [?] R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\system32\DRIVERS\avgidsfiltera.sys –> C:\Windows\system32\DRIVERS\avgidsfiltera.sys [?] R3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE [2012-2-10 240408] R3 HECIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys –> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] S2 !SASCORE;SAS Core Service;"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE" –> C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [?] S2 AudioSrv32;Windows Audio ;c:\windows\system32\reagent32.exe –> c:\windows\system32\reagent32.exe [?] S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-4-30 5106744] S2 AxInstSV32;ActiveX Installer (AxInstSV) ;C:\Windows\system32\dpnhpast32.exe –> C:\Windows\system32\dpnhpast32.exe [?] S2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.EXE [2012-2-10 193816] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2010-5-19 1153368] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-2-29 158856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-5-20 257696] S3 Andbus;LGE Android Platform Composite USB Device;C:\Windows\system32\DRIVERS\lgandbus64.sys –> C:\Windows\system32\DRIVERS\lgandbus64.sys [?] S3 AndDiag;LGE Android Platform USB Serial Port;C:\Windows\system32\DRIVERS\lganddiag64.sys –> C:\Windows\system32\DRIVERS\lganddiag64.sys [?] S3 AndGps;LGE Android Platform USB GPS NMEA Port;C:\Windows\system32\DRIVERS\lgandgps64.sys –> C:\Windows\system32\DRIVERS\lgandgps64.sys [?] S3 ANDModem;LGE Android Platform USB Modem;C:\Windows\system32\DRIVERS\lgandmodem64.sys –> C:\Windows\system32\DRIVERS\lgandmodem64.sys [?] S3 Desura Install Service;Desura Install Service;C:\Program Files (x86)\Common Files\Desura\desura_service.exe [2012-5-31 131912] S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-4-29 129976] S3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0;PCDSRVC{F36B3A4C-F95654BD-06000000}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\PC-Doctor for Windows\pcdsrvc_x64.pkms [2009-9-17 23536] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys –> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys –> C:\Windows\system32\Drivers\usbaapl64.sys [?] S3 VSPerfDrv100;Performance Tools Driver 10.0;C:\Program Files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-1-18 68440] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?] S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;C:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe [2009-7-22 61976] S4 RsFx0103;RsFx0103 Driver;C:\Windows\system32\DRIVERS\RsFx0103.sys –> C:\Windows\system32\DRIVERS\RsFx0103.sys [?] S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-3-30 427880] . =============== Created Last 30 ================ . 2012-06-11 01:05:18 70 —-a-w- C:\Windows\RAVTC.TMP 2012-06-10 15:26:13 ——– d—–w- C:\ProgramData\VS 2012-06-10 15:21:01 ——– d—–w- C:\5f74ccea0e10947af122799a467d355b 2012-06-10 08:43:24 ——– d—–w- C:\Program Files\CCleaner 2012-06-10 08:37:32 ——– d—–w- C:\ProgramData\GFI Software 2012-06-10 08:24:06 388096 —-a-r- C:\Users\Meli\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-05-31 10:48:48 ——– d—–w- C:\Windows\pss 2012-05-31 10:46:48 ——– d—–w- C:\Users\Meli\AppData\Local\{EE7763C0-1D06-49FA-B298-B0276BB47B4F} 2012-05-31 10:46:27 ——– d—–w- C:\Users\Meli\AppData\Local\{D97846C9-7D19-41A0-B7CC-04FB7C3E4FE5} 2012-05-31 04:40:59 ——– d—–w- C:\Users\Meli\AppData\Roaming\RenPy 2012-05-31 04:26:51 ——– d—–w- C:\Program Files (x86)\Common Files\Desura 2012-05-31 04:24:39 ——– d—–w- C:\Program Files (x86)\Desura 2012-05-31 00:40:56 ——– d—–w- C:\Users\Meli\AppData\Local\{49C97FCF-2A35-4D17-84BD-F3CC161A6EAC} 2012-05-31 00:40:37 ——– d—–w- C:\Users\Meli\AppData\Local\{4CA1CFE3-AD9B-4624-9D9F-CE343A6AAAD2} 2012-05-31 00:26:43 ——– d—–w- C:\Users\Meli\AppData\Local\{D091EBBE-85D2-4E44-9708-6A94FB04804E} 2012-05-31 00:25:08 ——– d—–w- C:\Users\Meli\AppData\Local\{C6DF7420-7F83-40F4-B545-A304AE9FEC4F} 2012-05-30 11:16:43 ——– d—–w- C:\Users\Meli\AppData\Local\{25117ED6-C30B-49D0-A1AC-D3B487F75920} 2012-05-30 00:18:24 ——– d—–w- C:\Users\Meli\AppData\Local\{13E0973B-6241-4988-B284-85A8AACFFEAD} 2012-05-30 00:18:03 ——– d—–w- C:\Users\Meli\AppData\Local\{965B6C04-B9AB-454C-AABB-D11EFE754293} 2012-05-29 04:11:09 ——– d—–w- C:\Users\Meli\AppData\Local\DDMSettings 2012-05-29 04:08:06 ——– d—–w- C:\Program Files (x86)\Common Files\PX Storage Engine 2012-05-29 04:07:45 ——– d—–w- C:\Program Files\DivX 2012-05-29 04:07:34 ——– d—–w- C:\Program Files (x86)\Common Files\DivX Shared 2012-05-29 04:05:54 ——– d—–w- C:\ProgramData\DivX 2012-05-29 04:05:35 ——– d—–w- C:\Program Files (x86)\DivX 2012-05-29 04:02:26 ——– d—–w- C:\Program Files (x86)\MKV File Player 2012-05-29 02:46:40 ——– d—–w- C:\Users\Meli\AppData\Local\{084AD1C2-5495-47CF-BE6C-A3F696EFD6F9} 2012-05-29 02:46:22 ——– d—–w- C:\Users\Meli\AppData\Local\{D78A67B6-9D1B-4940-93DF-1851B63F4A2F} 2012-05-28 13:59:54 ——– d—–w- C:\Users\Meli\AppData\Local\{F2887000-B877-42F0-A4A7-D1F24BC3F19A} 2012-05-28 05:09:41 ——– d—–w- C:\Users\Meli\AppData\Local\{E2B760DC-A0F7-4E6F-9746-61ABA780DC33} 2012-05-28 05:09:22 ——– d—–w- C:\Users\Meli\AppData\Local\{22C2A0FE-5713-4115-901D-67F160244468} 2012-05-27 17:21:43 ——– d—–w- C:\Users\Meli\AppData\Local\{2EEBB875-4645-453D-BE5C-C8B1A747DA38} 2012-05-27 17:21:28 ——– d—–w- C:\Users\Meli\AppData\Local\{6F31938D-5F6B-4154-B08F-81DFEED7A786} 2012-05-26 14:06:43 ——– d—–w- C:\Users\Meli\AppData\Local\{1EF97D13-BF69-4E82-AAE1-F15BC054CCED} 2012-05-26 14:05:53 ——– d—–w- C:\Users\Meli\AppData\Local\{15AFE2DB-1F9B-462C-A9EE-5AA77D443DA2} 2012-05-26 03:53:49 ——– d—–w- C:\Users\Meli\AppData\Local\{AF894D5F-B932-4751-B372-56AF16FE4878} 2012-05-26 03:53:32 ——– d—–w- C:\Users\Meli\AppData\Local\{259C8305-A4FC-41A2-B3AF-263FA6DB0B1D} 2012-05-25 01:47:08 ——– d—–w- C:\Users\Meli\AppData\Local\{489427C0-046D-410F-870C-F2A8EDA7D5D7} 2012-05-25 01:46:55 ——– d—–w- C:\Users\Meli\AppData\Local\{0D0A0260-4CCF-4C97-B890-7C9E7C4828AF} 2012-05-24 11:21:43 ——– d—–w- C:\Users\Meli\AppData\Local\{73716358-1B3B-4465-A235-5C8CA6A17DA8} 2012-05-24 11:21:32 ——– d—–w- C:\Users\Meli\AppData\Local\{527464FC-73BC-467F-929D-B28C0684ED46} 2012-05-24 00:01:52 ——– d—–w- C:\Users\Meli\AppData\Local\{DFD3BD87-AD4E-41AC-A216-8F8CAF9ADB9D} 2012-05-24 00:01:41 ——– d—–w- C:\Users\Meli\AppData\Local\{11482BB8-6D6D-4BC3-BBD5-EC2C79127D8B} 2012-05-23 01:13:19 ——– d—–w- C:\Users\Meli\AppData\Local\{7AB81258-6357-41CD-99A5-30B76444ED14} 2012-05-23 01:13:04 ——– d—–w- C:\Users\Meli\AppData\Local\{D14AFB30-7FE3-4599-B6A0-3C10CCBE0107} 2012-05-22 10:41:45 ——– d—–w- C:\Users\Meli\AppData\Local\{FBC6AE42-2902-43C9-91AD-699FDB3F3496} 2012-05-22 10:41:18 ——– d—–w- C:\Users\Meli\AppData\Local\{398E1B2B-70F2-439F-BD52-AB597F445EB6} 2012-05-22 00:55:42 ——– d—–w- C:\Users\Meli\AppData\Local\{CCC1AEA4-C5BA-4F44-9E1C-5F71563B85A2} 2012-05-22 00:55:20 ——– d—–w- C:\Users\Meli\AppData\Local\{A3D6F57E-FAD6-4558-A1E9-BA7D715A4DF9} 2012-05-21 10:50:42 ——– d—–w- C:\Users\Meli\AppData\Local\{347E6533-412D-40A0-B1C4-7917411B4D64} 2012-05-21 10:49:51 ——– d—–w- C:\Users\Meli\AppData\Local\{6BE6B788-17B8-49D9-9488-B45A04C97C00} 2012-05-21 02:44:14 ——– d—–w- C:\Users\Meli\AppData\Local\{B9878B97-9EA8-446D-987B-BA63C28CEB8A} 2012-05-21 02:44:04 ——– d—–w- C:\Users\Meli\AppData\Local\{43947ADB-7F5A-4770-B463-E4129C7B4385} 2012-05-20 19:24:14 ——– d—–w- C:\Users\Meli\AppData\Local\{D270CF11-49B7-43F9-BD76-546582DB7162} 2012-05-20 19:22:13 ——– d—–w- C:\Users\Meli\AppData\Local\{DB342BBF-D083-475C-BB96-D4DD660E5840} 2012-05-20 14:21:05 ——– d—–w- C:\Users\Meli\AppData\Local\{76D1D9A1-BB1A-4C42-9071-D48ECDB522E2} 2012-05-20 14:20:50 ——– d—–w- C:\Users\Meli\AppData\Local\{AF62F25D-F9D1-40CB-8B4A-F3E65C0D5D00} 2012-05-20 04:54:04 8769696 —-a-w- C:\Windows\SysWow64\FlashPlayerInstaller.exe 2012-05-20 04:41:32 ——– d—–w- C:\Users\Meli\AppData\Local\{A404B5D7-02E5-4F14-8D56-88962DB3EE8F} 2012-05-20 04:40:49 419488 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2012-05-20 04:40:47 ——– d—–w- C:\Users\Meli\AppData\Local\{77D1C267-9B18-49BF-83CD-C20162644525} 2012-05-19 18:16:06 ——– d—–w- C:\Users\Meli\AppData\Roaming\Braid 2012-05-19 17:10:09 ——– d—–w- C:\Users\Meli\AppData\Local\{A2A0F90D-D0D8-4407-8D98-B5291994E4F2} 2012-05-19 17:09:58 ——– d—–w- C:\Users\Meli\AppData\Local\{7ABCE3CA-E836-44D3-BC2F-D40FD716ED64} 2012-05-19 05:05:06 ——– d—–w- C:\Users\Meli\AppData\Local\{C4BB7ABC-7142-4FF1-A886-82B4FE9DC59F} 2012-05-19 05:04:52 ——– d—–w- C:\Users\Meli\AppData\Local\{0458BDF4-7531-44F5-A2F8-ABFF726DE5E0} 2012-05-18 10:54:59 ——– d—–w- C:\Users\Meli\AppData\Local\{169640CA-013E-4A90-89AB-B62D87551484} 2012-05-18 04:43:04 ——– d-sh–w- C:\Windows\System32\%APPDATA% 2012-05-18 03:48:45 ——– d—–w- C:\Users\Meli\AppData\Local\{BBFFACFE-8DEA-4B02-BA0E-F351C238BE5F} 2012-05-17 10:52:29 ——– d—–w- C:\Users\Meli\AppData\Local\{148EBD16-D6D2-417A-8A4E-2B8BCD75D6D2} 2012-05-17 10:51:39 ——– d—–w- C:\Users\Meli\AppData\Local\{D2DF5A2D-BCC5-4169-8CCB-78FE552F727C} 2012-05-17 04:54:29 ——– d—–w- C:\Users\Meli\AppData\Local\{3CE85D37-5BA7-4FC8-8453-16EC7993ED66} 2012-05-17 04:54:14 ——– d—–w- C:\Users\Meli\AppData\Local\{A85964D1-8257-4A06-A16C-A74877069E6C} 2012-05-16 11:18:21 ——– d—–w- C:\Users\Meli\AppData\Local\{F69B00D2-CE7D-496C-8681-5C27A0A00DAF} 2012-05-16 11:18:06 ——– d—–w- C:\Users\Meli\AppData\Local\{33B19274-4780-4644-881D-D86D22401AA1} 2012-05-16 02:52:10 ——– d—–w- C:\Users\Meli\AppData\Local\{127C4E16-D2D0-4683-BB22-B3A97ACA435D} 2012-05-16 02:51:54 ——– d—–w- C:\Users\Meli\AppData\Local\{F079B27B-3FE6-4DAA-83E8-6B1A68050EFE} 2012-05-15 10:41:01 ——– d—–w- C:\Users\Meli\AppData\Local\{AE4C57F9-FD7A-43D4-A9C5-AE667757BAEE} 2012-05-15 10:40:21 ——– d—–w- C:\Users\Meli\AppData\Local\{C023ED9E-2DFC-4108-A9C3-900CCFBC6858} 2012-05-14 23:54:51 ——– d—–w- C:\Users\Meli\AppData\Local\{27ADC3B4-5F58-40F5-8AEB-994329A04493} 2012-05-14 23:54:26 ——– d—–w- C:\Users\Meli\AppData\Local\{B83B3E6C-8A15-4C19-B168-F98A2BFE0767} 2012-05-14 11:05:37 ——– d—–w- C:\Users\Meli\AppData\Local\{6B06F759-FCD4-4AE1-80E3-B119B8BBE219} 2012-05-14 11:05:20 ——– d—–w- C:\Users\Meli\AppData\Local\{60E688A7-1937-4917-BA74-8EF061829A95} 2012-05-14 01:52:34 ——– d—–w- C:\Program Files (x86)\Common Files\Steam 2012-05-14 01:52:33 ——– d—–w- C:\Program Files (x86)\Steam 2012-05-13 15:35:21 ——– d—–w- C:\Users\Meli\AppData\Local\{B24F231D-79F0-413F-B372-82BBC1146B4A} 2012-05-13 15:35:07 ——– d—–w- C:\Users\Meli\AppData\Local\{6487E843-1E72-48D3-B5B8-ABD9A72E729E} 2012-05-12 15:35:29 ——– d—–w- C:\Users\Meli\AppData\Local\{C2B1434D-2744-4A85-BBC8-2B15ABD60357} 2012-05-12 15:35:07 ——– d—–w- C:\Users\Meli\AppData\Local\{3D22DF14-B7BD-4EA7-93DD-77D99E5DA35A} 2012-05-12 05:50:10 ——– d—–w- C:\Users\Meli\AppData\Local\{3C5FA061-D869-447A-B96C-E6F38FE01DE8} 2012-05-12 05:49:54 ——– d—–w- C:\Users\Meli\AppData\Local\{C469DA3D-2185-48ED-B022-521488DEADF0} . ==================== Find3M ==================== . 2012-05-20 04:54:10 70304 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-04-21 19:41:03 472808 —-a-w- C:\Windows\SysWow64\deployJava1.dll 2012-04-19 08:50:26 28480 —-a-w- C:\Windows\System32\drivers\avgidsha.sys 2012-04-04 19:56:40 24904 —-a-w- C:\Windows\System32\drivers\mbam.sys 2012-03-31 06:05:57 5559664 —-a-w- C:\Windows\System32\ntoskrnl.exe 2012-03-31 04:39:37 3968368 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2012-03-31 04:39:37 3913072 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe 2012-03-31 03:10:03 3146240 —-a-w- C:\Windows\System32\win32k.sys 2012-03-30 11:35:47 1918320 —-a-w- C:\Windows\System32\drivers\tcpip.sys 2012-03-22 19:12:12 4435968 —-a-w- C:\Windows\SysWow64\GPhotos.scr 2012-03-19 09:17:26 383808 —-a-w- C:\Windows\System32\drivers\avgtdia.sys 2012-03-17 07:58:57 75120 —-a-w- C:\Windows\System32\drivers\partmgr.sys . ============= FINISH: 22:39:36.92 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 5/6/2010 7:34:44 PM System Uptime: 6/10/2012 6:33:53 PM (4 hours ago) . Motherboard: MSI | | IONA Processor: Intel® Core™ i5 CPU 750 @ 2.67GHz | CPU 1 | 2668/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 585 GiB total, 445.802 GiB free. D: is FIXED (NTFS) - 11 GiB total, 1.588 GiB free. E: is CDROM () F: is Removable G: is Removable H: is Removable I: is Removable . ==== Disabled Device Manager Items ============= . Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1} Description: SBRE Device ID: ROOT\LEGACY_SBRE\0000 Manufacturer: Name: SBRE PNP Device ID: ROOT\LEGACY_SBRE\0000 Service: SBRE . ==== System Restore Points =================== . RP238: 5/26/2012 3:08:58 PM - Scheduled Checkpoint RP239: 6/2/2012 7:35:50 PM - Scheduled Checkpoint RP240: 6/4/2012 8:11:26 AM - Windows Update RP241: 6/10/2012 4:22:14 AM - Installed HiJackThis RP242: 6/10/2012 4:34:12 AM - Removed Ad-Aware Antivirus. RP243: 6/10/2012 11:11:58 AM - Windows Update . ==== Installed Programs ====================== . Acrobat.com Adobe AIR Adobe Flash Player 11 Plugin Adobe Reader 9.3 AIM 7 AMR Player 1.3 Apple Application Support Apple Software Update ArcSoft Panorama Maker 5 Audacity 1.3.14 (Unicode) AutocompletePro AVG Security Toolbar Avid Pro Tools Bing Bar Braid Demo BrainWave Generator CamStudio Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common Catalyst Control Center Graphics Previews Vista Catalyst Control Center HydraVision Full Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish Compatibility Pack for the 2007 Office system Counter-Strike Crystal Reports for Visual Studio CyberLink DVD Suite Deluxe D3DX10 DEMO Name It - Notes - v1.0.0 Denizen's Den Denzien's Den Desura DirectX for Managed Code Update (Summer 2004) DivX Setup Dotfuscator Software Services - Community Edition Download Updater (AOL LLC) Dropbox DVD Menu Pack for HP MediaSmart Video Edgeland: Trials of a lost Circling Facebook Plug-In Facebook Video Calling 1.2.0.159 File Uploader Finale 2011 Demo HiJackThis HijackThis 2.0.2 Hotfix for Microsoft Visual Studio 2010 Ultimate - ENU (KB2542054) HP Customer Experience Enhancements HP Games HP MediaSmart DVD HP MediaSmart Music/Photo/Video HP Odometer HP Remote Solution HP Setup HP Support Information HP Update HydraVision IndieCity Client IndieCity Runtime Intel® Rapid Storage Technology Java Auto Updater Java™ 6 Update 31 Junk Mail filter update Kodu Game Lab LabelPrint League of Legends LG United Mobile Driver LG USB WML Modem Driver License Support LightScribe System Software Live 8.2.8 LPK25 Editor Malwarebytes Anti-Malware version 1.60.1.1000 Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Application Error Reporting Microsoft ASP.NET MVC 2 Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools Microsoft Games for Windows - LIVE Redistributable Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Rise Of Nations Microsoft Silverlight 3 SDK Microsoft Silverlight 4 SDK Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft SQL Server 2008 Browser Microsoft SQL Server 2008 R2 Data-Tier Application Framework Microsoft SQL Server 2008 R2 Data-Tier Application Project Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server 2008 R2 Transact-SQL Language Service Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Database Publishing Wizard 1.4 Microsoft SQL Server System CLR Types Microsoft Sync Framework SDK v1.0 SP1 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 Microsoft Visual F# 2.0 Runtime Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Visual Studio 2010 Service Pack 1 Microsoft Visual Studio 2010 SharePoint Developer Tools Microsoft Visual Studio 2010 Ultimate - ENU Microsoft Visual Studio Macro Tools Microsoft Works Microsoft WSE 3.0 Runtime Microsoft XNA Framework Redistributable 3.1 Microsoft XNA Framework Redistributable 4.0 Microsoft XNA Game Studio 4.0 Microsoft XNA Game Studio 4.0 (ARP entry) Microsoft XNA Game Studio 4.0 (Redists) Microsoft XNA Game Studio 4.0 (Shared Components) Microsoft XNA Game Studio 4.0 (Visual Studio) Microsoft XNA Game Studio 4.0 (XnaLiveProxy) Microsoft XNA Game Studio 4.0 Documentation Microsoft XNA Game Studio Platform Tools MKV File Player Movie Theme Pack for HP MediaSmart Video Mozilla Firefox 12.0 (x86 en-US) Mozilla Maintenance Service MSVCRT MSVCRT_amd64 MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Nikon Message Center Nikon Transfer NoteWorthy Composer 2 OpenOffice.org 3.2 Picasa 3 Picture Control Utility PictureMover Power2Go PowerDirector QuickTime Realtek High Definition Audio Driver Recovery Manager Rhapsody Safari Sansa Updater Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft Visual Studio 2010 Ultimate - ENU (KB2251489) Security Update for Microsoft Visual Studio 2010 Ultimate - ENU (KB2644980) Security Update for Microsoft Visual Studio Macro Tools (KB2669970) Sibelius 6 First Skype Click to Call Skype™ 5.8 Spotify Spybot - Search & Destroy Steam System Requirements Lab CYRI Trillian Unity Web Player Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) VC80CRTRedist - 8.0.50727.6195 Verizon Servicepoint 3.7.44 ViewNX ViewSonic Windows 7 x64 Signed Files Visual C++ 2008 x86 Runtime - (v9.0.30729) Visual C++ 2008 x86 Runtime - v9.0.30729.01 Visual C++ 64-bit Redistributables Visual C++ 8.0 Runtime Setup Package (x64) Visual C++ Redistributables Visual Studio 2008 x64 Redistributables Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU vShare Plugin Vuze WCF RIA Services V1.0 SP1 Wincore MediaBar Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live Sync Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Media Player Firefox Plugin WinRAR archiver WinZip 15.0 World of Warcraft Your Doodles Are Bugged! - Demo . ==== Event Viewer Messages From Past Week ======== . 6/9/2012 8:35:51 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd 6/9/2012 8:34:38 PM, Error: Service Control Manager [7023] - 6/9/2012 8:34:16 PM, Error: Service Control Manager [7043] - The AVGIDSAgent service did not shut down properly after receiving a preshutdown control. 6/9/2012 8:33:43 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the avgwd service. 6/9/2012 8:33:13 PM, Error: Service Control Manager [7043] - The Windows Update service did not shut down properly after receiving a preshutdown control. 6/9/2012 11:37:25 PM, Error: Service Control Manager [7000] - The sbwtis service failed to start due to the following error: There are no more endpoints available from the endpoint mapper. 6/6/2012 7:07:32 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Error Reporting Service service to connect. 6/3/2012 11:57:09 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Font Cache Service service to connect. 6/3/2012 11:57:09 PM, Error: Service Control Manager [7000] - The Windows Font Cache Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 6/10/2012 5:19:13 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd SBRE 6/10/2012 5:18:34 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service. 6/10/2012 5:18:31 PM, Error: Service Control Manager [7003] - The SBSD Security Center Service service depends the following service: wscsvc. This service might not be installed. 6/10/2012 5:18:31 PM, Error: Service Control Manager [7003] - The IPsec Policy Agent service depends the following service: BFE. This service might not be installed. 6/10/2012 5:18:30 PM, Error: Service Control Manager [7003] - The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed. 6/10/2012 5:18:30 PM, Error: Service Control Manager [7000] - The MCSTRM service failed to start due to the following error: The system cannot find the file specified. 6/10/2012 5:18:29 PM, Error: Service Control Manager [7000] - The SAS Core Service service failed to start due to the following error: The system cannot find the file specified. 6/10/2012 11:02:08 AM, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service. 6/10/2012 11:02:08 AM, Error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error %%-1073473535. . ==== End Of File =========================== aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-06-10 22:43:51 —————————– 22:43:51.004 OS Version: Windows x64 6.1.7601 Service Pack 1 22:43:51.004 Number of processors: 4 586 0x1E05 22:43:51.004 ComputerName: MELI-PC UserName: Meli 22:43:53.064 Initialize success 22:44:28.988 AVAST engine defs: 12061001 22:44:34.760 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 22:44:34.775 Disk 0 Vendor: Hitachi_ STDO Size: 610480MB BusType: 8 22:44:34.775 Disk 0 MBR read successfully 22:44:34.791 Disk 0 MBR scan 22:44:34.791 Disk 0 unknown MBR code 22:44:34.807 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048 22:44:34.822 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 599109 MB offset 206848 22:44:34.853 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 11269 MB offset 1227182080 22:44:34.900 Disk 0 scanning C:\Windows\system32\drivers 22:44:46.725 Service scanning 22:45:15.029 Modules scanning 22:45:15.043 Disk 0 trace - called modules: 22:45:15.059 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 22:45:15.391 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007b48060] 22:45:15.400 3 CLASSPNP.SYS[fffff88001b8043f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80077ca050] 22:45:19.713 AVAST engine scan C:\Windows 22:45:24.646 AVAST engine scan C:\Windows\system32 22:48:59.303 AVAST engine scan C:\Windows\system32\drivers 22:49:12.777 AVAST engine scan C:\Users\Meli 22:58:35.345 AVAST engine scan C:\ProgramData 23:01:24.452 Scan finished successfully 23:13:26.659 Disk 0 MBR has been saved successfully to "C:\Users\Meli\Desktop\MBR.dat" 23:13:26.659 The log file has been saved successfully to "C:\Users\Meli\Desktop\aswMBR.txt"
Post #4
Hello Meli

Thank you for the logs.

Lets continue as follows:


  • P2P Programs:


    • P2P programs are a major source of Malware infections.
    • From your log I see you have Vuze. We do not pass judgment on file-sharing, however we must inform you that engaging in this activity and having this kind of software installed on your system will always make you more susceptible to Malware infections.
    • The use of P2P programs may be contributing to your current situation, and you would certainly be doing yourself a favour by removing them.
    • If you wish to keep the program(s), please do not use them until your computer is cleaned.
    • Information regarding the risk of using these programs can be found from here and here.
    • It is strongly recommend that you uninstall any P2P programs you have on your system.
    • To do this, Click on the "Windows Orb" (bottom left hand corner of your screen), then on "Conrol Panel" and then on the "Programs and Features" tab.
    • A list of currently installed programs will be displayed.
    • Find the "Vuze" program, click on it once and then click on the "Uninstall" button.
    • If you are prompted to re-boot your computer to complete the uninstall please do so.


      PLEASE NOTE:
    • Even if you are using a P2P program that is deemed safe, it is only the program that is safe. Any files that you receive using a "safe" P2P program may be infected with Malware. The malware writers use P2P file-sharing as a major conduit to spread infected files.

  • Please un-install vShare Plugin


    • Click on "Start" then on "Control Panel" and then on the "Programs and Features" tab.
    • Find the "vShare Plugin" program, click on it once and then click on the "uninstall" button.
    • If you are prompted to re-boot your computer to complete the uninstall please do so.

  • Combofix


    • Download ComboFix from one of the following locations:

      Link 1
      Link 2

    • VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

    • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here .
    • Right click on ComboFix.exe and select "Run as Administrator" to run the program. Follow the prompts.

    • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
    • Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

    [external image: Posted Image]

    • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

    [external image: Posted Image]

    • Click on Yes, to continue scanning for malware.
    • When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
    • Notes: Do not mouse-click Combofix's window while it is running. That may cause it to stall.
    • Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
    • Should there be issues with internet afterward:

      In IE: Tools Menu -> Internet Options -> Connections Tab -> Lan Settings -> uncheck "use a proxy server" or reconfigure the Proxy server again in case you have set it previously.

      In Firefox: Tools Menu -> Options… -> Advanced Tab -> Network Tab -> "Settings" under Connection and uncheck the proxyserver, set it to No Proxy.

    Please post the Combofix log in your next reply.
Post #5
Hey, I had a bit of an issue. I did everything as instructed (uninstallations included). When I ran Combofix it stated that I had antivirus and antispyware software running. I was pretty sure I didn't. I had disabled AVG and it told me that I had Panda and Ad-Aware running when it shouldn't have been true since I uninstalled those yesterday to get rid of all the anti-virus software I had. After I ran Combofix and it restarted, I did have issues with the internet and with any program I tried opening. It would tell me something about the registry for that program having been removed. I didn't save the log and I restarted to make sure I hadn't messed anything up, and everything is back to normal. Sorry I don't have a combofix log What should I do next?
Post #6
Hello Meli

What should I do next?

If a log was saved it will be present on your C drive at:

C:\ComboFix.txt

Please check your C drive for the log and post if it is present. If there is no log just let me know.
Post #7
Found it! ComboFix 12-06-10.01 - Meli 06/11/2012 7:20.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8151.6451 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} AV: Panda Cloud Antivirus *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59} SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Panda Cloud Antivirus *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\Install.exe c:\program files (x86)\AutocompletePro c:\program files (x86)\AutocompletePro\[removed]\chrome.manifest c:\program files (x86)\AutocompletePro\[removed]\chrome\content\browserOverlay.xul c:\program files (x86)\AutocompletePro\[removed]\chrome\content\options.js c:\program files (x86)\AutocompletePro\[removed]\chrome\content\options.xul c:\program files (x86)\AutocompletePro\[removed]\chrome\content\utils.js c:\program files (x86)\AutocompletePro\[removed]\defaults\preferences\predictad.js c:\program files (x86)\AutocompletePro\[removed]\install.rdf c:\program files (x86)\AutocompletePro\unins000.dat c:\program files (x86)\AutocompletePro\unins000.exe c:\programdata\121518b2t827b281r656r4vbi8m1 c:\programdata\603732e5q466t887e628b2oot0o6 c:\programdata\KEYBOARDSERVICESERVICE.DLL c:\users\Meli\.COMMgr c:\users\Meli\AppData\Roaming\5C18C8 c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879} c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\chrome.manifest c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\chrome\xulcache.jar c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\defaults\preferences\xulcache.js c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\install.rdf c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca} c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\chrome.manifest c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\chrome\xulcache.jar c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\defaults\preferences\xulcache.js c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\install.rdf c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813} c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\chrome.manifest c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\chrome\xulcache.jar c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\defaults\preferences\xulcache.js c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\install.rdf c:\windows\SysWow64\NSREG.DLL . . ((((((((((((((((((((((((( Files Created from 2012-05-11 to 2012-06-11 ))))))))))))))))))))))))))))))) . . 2012-06-11 11:25 . 2012-06-11 11:25 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-06-10 15:26 . 2012-06-10 15:26 ——– d—–w- c:\programdata\VS 2012-06-10 15:21 . 2012-06-10 15:21 ——– d—–w- C:\5f74ccea0e10947af122799a467d355b 2012-06-10 08:43 . 2012-06-10 08:43 ——– d—–w- c:\program files\CCleaner 2012-06-10 08:37 . 2012-06-10 08:37 ——– d—–w- c:\programdata\GFI Software 2012-06-10 08:24 . 2012-06-10 08:24 388096 —-a-r- c:\users\Meli\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-05-31 04:40 . 2012-05-31 04:40 ——– d—–w- c:\users\Meli\AppData\Roaming\RenPy 2012-05-31 04:26 . 2012-05-31 04:26 ——– d—–w- c:\program files (x86)\Common Files\Desura 2012-05-31 04:24 . 2012-05-31 05:11 ——– d—–w- c:\program files (x86)\Desura 2012-05-29 04:11 . 2012-05-29 04:11 ——– d—–w- c:\users\Meli\AppData\Local\DDMSettings 2012-05-29 04:08 . 2012-06-09 16:05 ——– d—–w- c:\users\Meli\AppData\Roaming\DivX 2012-05-29 04:08 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\Common Files\PX Storage Engine 2012-05-29 04:07 . 2012-05-29 04:08 ——– d—–w- c:\program files\DivX 2012-05-29 04:07 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\Common Files\DivX Shared 2012-05-29 04:05 . 2012-05-29 04:08 ——– d—–w- c:\programdata\DivX 2012-05-29 04:05 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\DivX 2012-05-29 04:02 . 2012-05-29 04:02 ——– d—–w- c:\program files (x86)\MKV File Player 2012-05-20 04:54 . 2012-05-20 04:54 8769696 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2012-05-20 04:40 . 2012-05-20 04:54 419488 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-05-19 18:16 . 2012-05-19 18:16 ——– d—–w- c:\users\Meli\AppData\Roaming\Braid 2012-05-18 04:43 . 2012-05-18 04:43 ——– d-sh–w- c:\windows\system32\%APPDATA% 2012-05-14 01:52 . 2012-05-19 18:10 ——– d—–w- c:\program files (x86)\Common Files\Steam 2012-05-14 01:52 . 2012-06-10 08:49 ——– d—–w- c:\program files (x86)\Steam 2012-05-14 00:02 . 2012-05-14 00:02 ——– d—–w- c:\program files (x86)\Common Files\Skype . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-20 04:54 . 2011-09-04 20:40 70304 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-04-21 19:41 . 2011-09-21 01:45 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2012-04-19 08:50 . 2012-04-19 08:50 28480 —-a-w- c:\windows\system32\drivers\avgidsha.sys 2012-04-04 19:56 . 2010-05-19 10:33 24904 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-03-31 06:05 . 2012-05-12 05:57 5559664 —-a-w- c:\windows\system32\ntoskrnl.exe 2012-03-31 04:39 . 2012-05-12 05:57 3968368 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-03-31 04:39 . 2012-05-12 05:57 3913072 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-03-31 03:10 . 2012-05-12 05:57 3146240 —-a-w- c:\windows\system32\win32k.sys 2012-03-30 11:35 . 2012-05-12 05:57 1918320 —-a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-22 19:12 . 2012-03-22 19:12 4435968 —-a-w- c:\windows\SysWow64\GPhotos.scr 2012-03-19 09:17 . 2012-03-19 09:17 383808 —-a-w- c:\windows\system32\drivers\avgtdia.sys 2012-03-17 07:58 . 2012-05-12 05:57 75120 —-a-w- c:\windows\system32\drivers\partmgr.sys 2012-03-14 11:56 . 2012-02-22 04:20 2480800 —-a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 2012-03-13 01:29 1869152 —-a-w- c:\program files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll" [2012-03-13 1869152] . [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SansaDispatch"="c:\users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe" [2011-09-27 79872] "Spotify Web Helper"="c:\users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-04 932528] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768] "HP Remote Solution"="c:\program files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe" [2009-08-25 656896] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "VerizonServicepoint.exe"="c:\program files (x86)\Verizon\VSP\VerizonServicepoint.exe" [2011-01-10 4318520] "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-03-13 982880] "ROC_roc_dec12"="c:\program files (x86)\AVG Secure Search\ROC_roc_dec12.exe" [2012-01-15 928096] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-09 98304] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux5"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ServicepointService] @="Service" . R0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x] R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x] R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x] R2 AudioSrv32;Windows Audio ;c:\windows\system32\reagent32.exe [x] R2 AxInstSV32;ActiveX Installer (AxInstSV) ;c:\windows\system32\dpnhpast32.exe [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-20 257696] R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys [x] R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys [x] R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys [x] R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys [x] R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe [2012-02-10 240408] R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe [2012-05-31 131912] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-29 129976] R3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0;PCDSRVC{F36B3A4C-F95654BD-06000000}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms [2009-09-17 23536] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976] R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [x] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-04-30 5106744] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe [2012-02-10 193816] S2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\DRIVERS\diginet.sys [x] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336] S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-09-08 2932224] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] S2 ServicepointService;ServicepointService;c:\program files (x86)\Verizon\VSP\ServicepointService.exe [2011-01-10 689464] S2 vToolbarUpdater10.2.0;vToolbarUpdater10.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe [2012-03-13 918880] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [x] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] . . — Other Services/Drivers In Memory — . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2012-06-11 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-20 04:54] . 2012-06-10 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2536932362-501151085-705957901-1000Core.job - c:\users\Meli\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-21 22:19] . 2012-06-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2536932362-501151085-705957901-1000UA.job - c:\users\Meli\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-21 22:19] . 2012-06-10 c:\windows\Tasks\HPCeeScheduleForMeli.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 11:22] . 2011-04-30 c:\windows\Tasks\PCDRScheduledMaintenance.job - c:\program files\PC-Doctor for Windows\pcdrcui.exe [2009-09-18 07:11] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PC-Doctor for Windows localizer"="c:\program files\PC-Doctor for Windows\localizer.exe" [2009-09-17 95728] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x1 . ——- Supplementary Scan ——- . uStart Page = hxxp://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=7.0unattached&bm=ho_central uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = ;*.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 Trusted Zone: real.com\rhap-app-4-0 Trusted Zone: real.com\rhapreg TCP: DhcpNameServer = [removed] [removed] Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll FF - ProfilePath - c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\ FF - prefs.js: browser.startup.homepage - hxxp://isearch.avg.com?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.0.0.9&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11 FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.0.0.9&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11&sap=ku&q= FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extentions.y2layers.installId, 627e8fac-db18-4129-ba09-f7ef2629d8fb FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,BestVideoDownloader,BestVideoDownloader, . - - - - ORPHANS REMOVED - - - - . BHO-{035EB6DE-F9BE-4B66-A05E-F62CFF7195D5} - c:\windows\SysWow64\wscui32.dll BHO-{BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - c:\progra~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL Toolbar-{28387537-e3f9-4ed7-860c-11e69af4a8a0} - c:\progra~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll Toolbar-10 - (no file) Wow6432Node-HKCU-Run-RESTART_STICKY_NOTES - c:\windows\System32\StikyNot.exe Wow6432Node-HKLM-Run-ClientGW - (no file) BHO-{BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - c:\progra~2\IMESHA~1\MediaBar\Datamngr\x64\BROWSE~1.DLL Toolbar-10 - (no file) WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) ShellIconOverlayIdentifiers-{F5D1CF73-C196-48F8-AAAC-B9181E22B4E6} - c:\program files (x86)\Panda Security\Panda Cloud Antivirus\PSUNShell.DLL ShellIconOverlayIdentifiers-{9AE343CB-BA45-4618-AF6A-0230EE6FC793} - c:\program files (x86)\Panda Security\Panda Cloud Antivirus\PSUNShell.DLL AddRemove-AutocompletePro2_is1 - c:\program files (x86)\AutocompletePro\unins000.exe AddRemove-HijackThis - c:\users\Meli\Desktop\HijackThis.exe AddRemove-Wincore MediaBar - c:\program files (x86)\iMesh Applications\MediaBar\uninstall.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{F36B3A4C-F95654BD-06000000}_0] "ImagePath"="\??\c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-2536932362-501151085-705957901-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-2536932362-501151085-705957901-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\DbgagD\1*] "value"="?\0b\03\17\06\00&?" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe . ************************************************************************** . Completion time: 2012-06-11 07:40:29 - machine was rebooted ComboFix-quarantined-files.txt 2012-06-11 11:40 . Pre-Run: 478,892,093,440 bytes free Post-Run: 479,523,442,688 bytes free . - - End Of File - - 37612B550B34BA9906F34A3D7ED387A4
Post #8
Hello Meli

Thank you for the log.

You mentioned earlier that you uninstalled Ad-aware and Panda:

I had Panda and Ad-Aware running when it shouldn't have been true since I uninstalled those yesterday

Keep AVG as your only antivirus (you should only ever run one AV on your machine).

Just to be certain, please confirm that you have definitely uninstalled Panda and Ad-Aware in your next reply, and we will take care of the leftovers as part of the steps to follow.
Post #9
Yes I have uninstalled both through Add/Remove programs in control panel. Not sure why they showed up in the DDS.txt file.
Post #10
Hello Meli

Thank you for letting me know.

Lets continue:


  • Please work through the following steps


    • Hold down the Windows key (has the Windows symbol on it) and press the "R" key. A Run box will open. Type in Notepad and press Enter then click on "OK").
    • NOTE: Do not Use Wordpad or any other text editor except Notepad or the script will fail.
    • Copy and Paste the text in the quotebox below into the open Notepad window:

      SecCenter::
      AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}
      AV: Panda Cloud Antivirus *Enabled/Updated* {86971480-9989-6750-B122-681A86518D59}
      SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}
      SP: Panda Cloud Antivirus *Enabled/Updated* {3DF6F564-BFB3-68DE-8B92-5368FDD6C7E4}

      DDS::
      Trusted Zone: real.com\rhap-app-4-0
      Trusted Zone: real.com\rhapreg

      Firefox::
      FF - ProfilePath - c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\
      FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extentions.y2layers.installId, 627e8fac-db18-4129-ba09-f7ef2629d8fb
      FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,BestVideoDownloader,BestVideoDownloader,

      Reglock::
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

    • Save this as "CFScript.txt" (including the quotation marks), change the "Save as type" to "All Files" and save it to your desktop.
    • Close any open browsers.
    • Disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    • Refering to the picture below, drag CFScript.txt into ComboFix.exe

      [external image: Posted Image]
    • When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
    • Once the log is produced, re-engage your resident anti virus.

  • MalwareBytes AntiMalware:


    • I can see that you have MBAM installed.
    • Double click on your MalwareBytes AntiMalware icon to launch the program.
    • Click on the "Update" tab and then on "Check for Updates".
    • The program will now install the latest Malware definition files.
    • Once complete, click on the "Scanner" tab, select "Perform Quick Scan"and then click on "Scan".
    • Once the program has scanned your computer, a log file will be created in Notepad.
    • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.


    • If the scan detects any Malware-related objects, make sure that everything is checked, and click "Remove Selected" <– Very Important.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to restart your computer.
    • The log is automatically saved by MBAM and can be viewed by clicking the "Logs" tab.
    • Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process. If asked to restart your computer, please do so immediately.
    • Come back here to this thread and Paste the log in your next reply.

    Please post the Combofix log and the MBAM log in your next reply and let me know how the machine is running now.
Post #11
Combofix log: ComboFix 12-06-15.06 - Meli 06/16/2012 13:32:01.2.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8151.6292 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Meli\Desktop\CFScript.txt AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((( Files Created from 2012-05-16 to 2012-06-16 ))))))))))))))))))))))))))))))) . . 2012-06-16 17:37 . 2012-06-16 17:37 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-06-16 14:22 . 2012-06-16 17:37 ——– d—–w- c:\users\Meli\AppData\Local\PMB Files 2012-06-16 14:22 . 2012-06-16 14:24 ——– d—–w- c:\programdata\PMB Files 2012-06-14 02:57 . 2012-04-26 05:41 77312 —-a-w- c:\windows\system32\rdpwsx.dll 2012-06-14 02:56 . 2012-04-28 03:55 210944 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-06-13 02:39 . 2012-06-13 02:39 ——– d—–w- c:\users\Meli\AppData\Roaming\Unity 2012-06-12 05:42 . 2012-06-12 05:42 ——– d—–w- c:\users\Meli\AppData\Local\AVG Secure Search 2012-06-10 15:26 . 2012-06-10 15:26 ——– d—–w- c:\programdata\VS 2012-06-10 15:21 . 2012-06-10 15:21 ——– d—–w- C:\5f74ccea0e10947af122799a467d355b 2012-06-10 08:43 . 2012-06-10 08:43 ——– d—–w- c:\program files\CCleaner 2012-06-10 08:37 . 2012-06-10 08:37 ——– d—–w- c:\programdata\GFI Software 2012-06-10 08:24 . 2012-06-10 08:24 388096 —-a-r- c:\users\Meli\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-05-31 04:40 . 2012-05-31 04:40 ——– d—–w- c:\users\Meli\AppData\Roaming\RenPy 2012-05-31 04:26 . 2012-05-31 04:26 ——– d—–w- c:\program files (x86)\Common Files\Desura 2012-05-31 04:24 . 2012-05-31 05:11 ——– d—–w- c:\program files (x86)\Desura 2012-05-29 04:11 . 2012-05-29 04:11 ——– d—–w- c:\users\Meli\AppData\Local\DDMSettings 2012-05-29 04:08 . 2012-06-09 16:05 ——– d—–w- c:\users\Meli\AppData\Roaming\DivX 2012-05-29 04:08 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\Common Files\PX Storage Engine 2012-05-29 04:07 . 2012-05-29 04:08 ——– d—–w- c:\program files\DivX 2012-05-29 04:07 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\Common Files\DivX Shared 2012-05-29 04:05 . 2012-05-29 04:08 ——– d—–w- c:\programdata\DivX 2012-05-29 04:05 . 2012-05-29 04:08 ——– d—–w- c:\program files (x86)\DivX 2012-05-29 04:02 . 2012-05-29 04:02 ——– d—–w- c:\program files (x86)\MKV File Player 2012-05-20 04:54 . 2012-05-20 04:54 8769696 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2012-05-20 04:40 . 2012-05-20 04:54 419488 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-05-19 18:16 . 2012-05-19 18:16 ——– d—–w- c:\users\Meli\AppData\Roaming\Braid 2012-05-18 04:43 . 2012-05-18 04:43 ——– d-sh–w- c:\windows\system32\%APPDATA% . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-20 04:54 . 2011-09-04 20:40 70304 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-04-21 19:41 . 2011-09-21 01:45 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2012-04-19 08:50 . 2012-04-19 08:50 28480 —-a-w- c:\windows\system32\drivers\avgidsha.sys 2012-04-04 19:56 . 2010-05-19 10:33 24904 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-03-30 11:35 . 2012-05-12 05:57 1918320 —-a-w- c:\windows\system32\drivers\tcpip.sys 2012-03-22 19:12 . 2012-03-22 19:12 4435968 —-a-w- c:\windows\SysWow64\GPhotos.scr 2012-03-19 09:17 . 2012-03-19 09:17 383808 —-a-w- c:\windows\system32\drivers\avgtdia.sys . . ((((((((((((((((((((((((((((( SnapShot@2012-06-11_11.34.59 ))))))))))))))))))))))))))))))))))))))))) . + 2012-06-14 05:55 . 2012-05-17 22:25 73216 c:\windows\SysWOW64\mshtmled.dll + 2012-06-14 05:55 . 2012-05-17 22:31 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll - 2012-04-14 07:02 . 2012-02-28 01:08 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2012-06-14 05:55 . 2012-05-17 22:31 65024 c:\windows\SysWOW64\jsproxy.dll - 2012-04-14 07:02 . 2012-02-28 01:08 65024 c:\windows\SysWOW64\jsproxy.dll - 2009-07-14 04:54 . 2012-06-11 11:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2012-06-16 13:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2012-06-16 13:44 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-06-11 11:06 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2012-06-16 13:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2012-06-11 11:06 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-04-27 23:58 . 2012-06-16 17:40 84688 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-06-16 13:47 33070 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-05-06 23:36 . 2012-06-16 17:40 27634 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2536932362-501151085-705957901-1000_UserData.bin + 2012-06-14 05:55 . 2012-05-18 01:51 96768 c:\windows\system32\mshtmled.dll - 2012-04-14 07:02 . 2012-02-28 06:47 86528 c:\windows\system32\migration\WininetPlugin.dll + 2012-06-14 05:55 . 2012-05-18 01:56 86528 c:\windows\system32\migration\WininetPlugin.dll + 2012-06-14 05:55 . 2012-05-18 01:56 85504 c:\windows\system32\jsproxy.dll - 2012-04-14 07:02 . 2012-02-28 06:47 85504 c:\windows\system32\jsproxy.dll - 2010-05-06 23:31 . 2012-06-11 03:16 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-06 23:31 . 2012-06-12 11:35 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-06 23:31 . 2012-06-11 03:16 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-05-06 23:31 . 2012-06-12 11:35 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2012-06-12 11:35 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2012-06-11 03:16 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:46 . 2012-06-15 00:59 91888 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2012-05-12 06:16 . 2012-05-12 06:16 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 06:03 . 2012-06-14 06:03 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2012-06-14 06:03 . 2012-06-14 06:03 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-12 06:16 . 2012-05-12 06:16 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll - 2012-05-12 06:16 . 2012-05-12 06:16 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2012-06-14 06:03 . 2012-06-14 06:03 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll - 2012-05-12 06:16 . 2012-05-12 06:16 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-06-14 06:03 . 2012-06-14 06:03 11120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll + 2012-06-14 06:03 . 2012-06-14 06:03 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll - 2012-05-12 06:16 . 2012-05-12 06:16 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2012-06-14 06:03 . 2012-06-14 06:03 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-12 06:16 . 2012-05-12 06:16 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll - 2012-05-12 06:16 . 2012-05-12 06:16 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll + 2012-06-14 06:03 . 2012-06-14 06:03 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll - 2012-05-12 06:16 . 2012-05-12 06:16 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll + 2012-06-14 06:03 . 2012-06-14 06:03 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll - 2012-05-12 06:16 . 2012-05-12 06:16 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll + 2012-06-14 06:03 . 2012-06-14 06:03 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll - 2012-05-12 06:16 . 2012-05-12 06:16 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll + 2012-06-14 06:03 . 2012-06-14 06:03 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll - 2012-05-12 06:16 . 2012-05-12 06:16 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-14 06:03 . 2012-06-14 06:03 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2012-06-14 06:03 . 2012-06-14 06:03 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-12 06:16 . 2012-05-12 06:16 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2012-05-12 06:16 . 2012-05-12 06:16 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2012-06-14 06:03 . 2012-06-14 06:03 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll - 2012-05-12 06:16 . 2012-05-12 06:16 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-06-14 06:03 . 2012-06-14 06:03 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2012-06-14 06:03 . 2012-06-14 06:03 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll - 2012-05-12 06:16 . 2012-05-12 06:16 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll + 2012-06-14 06:03 . 2012-06-14 06:03 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll - 2012-05-12 06:16 . 2012-05-12 06:16 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll + 2012-06-14 06:03 . 2012-06-14 06:03 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2012-05-12 06:16 . 2012-05-12 06:16 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2012-06-14 06:03 . 2012-06-14 06:03 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll - 2012-05-12 06:16 . 2012-05-12 06:16 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll + 2012-06-14 06:03 . 2012-06-14 06:03 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-05-12 06:16 . 2012-05-12 06:16 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2012-05-12 06:16 . 2012-05-12 06:16 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 06:03 . 2012-06-14 06:03 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-12 06:16 . 2012-05-12 06:16 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 06:03 . 2012-06-14 06:03 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-14 06:02 . 2012-06-14 06:02 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2012-05-12 06:16 . 2012-05-12 06:16 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll + 2012-06-14 06:02 . 2012-06-14 06:02 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - 2012-05-12 06:16 . 2012-05-12 06:16 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2012-06-15 01:25 . 2012-06-15 01:25 53760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\11c324b9616d95c2685716fbae9324ab\System.Web.DynamicData.Design.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 93184 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\9180415ecb2b1776dfaaa1551ca61864\Microsoft.SqlServer.CustomControls.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 37888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\2bdcbb73703df2f3d0570754dc026768\Microsoft.SqlServer.Dts.Design.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 98816 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\8fe4b75ea6a604f426cceb14f6ab0071\WindowsFormsIntegration.Package.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 46592 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\be0023b0814db0cd39b177e21632f8e9\System.Web.DynamicData.Design.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 94208 c:\windows\assembly\NativeImages_v4.0.30319_32\ResGen\51551680f568f15adb1efa073493d3f6\ResGen.ni.exe + 2012-06-14 11:33 . 2012-06-14 11:33 39936 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigne#\18014291cd501cf782215c2021a6b027\Microsoft.VSDesigner.Core.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 64512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dd4ff7ac348b3e82d845a48fe9805f3f\Microsoft.VisualStudio.Web.Exports.ni.dll - 2012-05-12 18:58 . 2012-05-12 18:58 64512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dd4ff7ac348b3e82d845a48fe9805f3f\Microsoft.VisualStudio.Web.Exports.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 92160 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cf6729b6bd53683900db4279516925c8\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 51712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9a75e6ebd0776524d75a4d2437b40d50\Microsoft.VisualStudio.Modeling.Components.10.0.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 51200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\8cb384c9e293d6d2918ed29980d7b284\Microsoft.VisualStudio.Platform.AppDomainManager.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 35840 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\86f0eac04f906a9870052f32b4ea91d2\Microsoft.VisualStudio.Language.NavigateTo.Interfaces.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 20992 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\70784487ce028a6c650aa6391b6a466d\Microsoft.VisualStudio.TeamArchitect.Components.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 57344 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\5794a0fa0a9e3c1320c131500849005d\Microsoft.VisualStudio.QualityTools.Wizard.TestProjectWizards.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 78336 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\37c0c7fb670965df9be60e758d854356\Microsoft.VisualStudio.QualityTools.LoadTestExcelAddIn.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 74752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\2203656e2da169c17014bb6fc6205733\Microsoft.VisualStudio.TextTemplating.Modeling.10.0.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 45568 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC.Q#\83828198c6c2940d75572af5b90da6e2\Microsoft.VisualC.QuickSearch.Implementation.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\b44640a78ca7b20aa68c2b3e244c6bbd\Microsoft.TeamFoundation.VersionControl.ControlAdapter.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 64512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\6de09f043c05e1b35dfd1d6d0b193bf9\Microsoft.TeamFoundation.TestImpact.BuildIntegration.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 83456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\af3741f8691913458e726e2a549a943b\Microsoft.SqlServer.Dts.Design.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 94208 c:\windows\assembly\NativeImages_v2.0.50727_64\AxImp\bd103d3ac0beb9864e9c59e37221583b\AxImp.ni.exe + 2012-06-14 11:28 . 2012-06-14 11:28 61440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\afd8a3c56a37a64c6578036a61972083\WindowsLiveWriter.ni.exe + 2012-06-14 11:29 . 2012-06-14 11:29 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 87040 c:\windows\assembly\NativeImages_v2.0.50727_32\SqlWorkbench.Interf#\db2f69a7d81b6c906976c2823b822e42\SqlWorkbench.Interfaces.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 84480 c:\windows\assembly\NativeImages_v2.0.50727_32\ResGen\e16135e9b9f665f1db2214a44f6bcda5\ResGen.ni.exe + 2012-06-14 11:28 . 2012-06-14 11:28 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\eb75b3751d894a97b1d8e10d12d18056\Microsoft.SqlServer.Management.PowerShellTasks.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\b0bd6cc8099a9599d1e7b8d8ad9ba74f\Microsoft.SqlServer.Dts.Design.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 98816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9faa453fbcaf852d2f068252a4d6f082\Microsoft.SqlServer.DlgGrid.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 76288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\7b8f3c49b7df295cc6ddbef33fd85911\Microsoft.SqlServer.CustomControls.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 53248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.DataWareh#\aa5fbe7f781f48c5a47163017c4b33c3\Microsoft.DataWarehouse.Interfaces.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 34304 c:\windows\assembly\NativeImages_v2.0.50727_32\MenuAndCommands\7b47449d1cfc9d2fa869b441a4da8b08\MenuAndCommands.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 69120 c:\windows\assembly\NativeImages_v2.0.50727_32\AxImp\6b414afcf2faead64a8aa4cec36d3eec\AxImp.ni.exe + 2012-06-14 02:57 . 2012-04-26 05:34 9216 c:\windows\system32\rdrmemptylst.exe - 2012-03-14 11:28 . 2012-01-25 06:33 9216 c:\windows\system32\rdrmemptylst.exe - 2012-06-11 11:33 . 2012-06-11 11:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-06-16 17:38 . 2012-06-16 17:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-06-16 17:38 . 2012-06-16 17:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2012-06-11 11:33 . 2012-06-11 11:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-06-14 05:55 . 2012-05-17 22:33 231936 c:\windows\SysWOW64\url.dll - 2012-04-14 07:02 . 2012-02-28 01:09 231936 c:\windows\SysWOW64\url.dll - 2012-04-14 07:02 . 2012-02-28 01:06 716800 c:\windows\SysWOW64\jscript.dll + 2012-06-14 05:55 . 2012-05-17 22:29 716800 c:\windows\SysWOW64\jscript.dll - 2011-09-23 00:17 . 2011-09-23 00:17 142848 c:\windows\SysWOW64\ieUnatt.exe + 2012-06-14 05:55 . 2012-05-17 22:29 142848 c:\windows\SysWOW64\ieUnatt.exe + 2012-06-14 05:55 . 2012-05-17 22:20 176640 c:\windows\SysWOW64\ieui.dll - 2012-04-14 07:02 . 2012-02-28 00:59 176640 c:\windows\SysWOW64\ieui.dll + 2012-06-14 02:57 . 2012-04-24 04:36 140288 c:\windows\SysWOW64\cryptsvc.dll + 2012-06-14 02:57 . 2012-04-24 04:36 103936 c:\windows\SysWOW64\cryptnet.dll + 2010-08-13 13:27 . 2012-06-16 13:44 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2010-08-13 13:27 . 2012-06-11 11:06 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2012-04-14 07:02 . 2012-02-28 06:48 237056 c:\windows\system32\url.dll + 2012-06-14 05:55 . 2012-05-18 01:58 237056 c:\windows\system32\url.dll + 2012-06-14 02:57 . 2012-04-26 05:41 149504 c:\windows\system32\rdpcorekmts.dll - 2012-03-14 11:28 . 2012-01-25 06:38 149504 c:\windows\system32\rdpcorekmts.dll + 2012-06-14 02:57 . 2012-05-01 05:40 209920 c:\windows\system32\profsvc.dll - 2011-06-07 02:27 . 2010-11-20 13:27 209920 c:\windows\system32\profsvc.dll + 2009-07-14 02:36 . 2012-06-14 06:02 726452 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2012-06-09 15:23 726452 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-06-14 06:02 146470 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2012-06-09 15:23 146470 c:\windows\system32\perfc009.dat - 2012-04-14 07:02 . 2012-02-28 06:45 818688 c:\windows\system32\jscript.dll + 2012-06-14 05:55 . 2012-05-18 01:55 818688 c:\windows\system32\jscript.dll - 2011-09-23 00:17 . 2011-09-23 00:17 173056 c:\windows\system32\ieUnatt.exe + 2012-06-14 05:55 . 2012-05-18 01:55 173056 c:\windows\system32\ieUnatt.exe - 2012-04-14 07:02 . 2012-02-28 06:39 248320 c:\windows\system32\ieui.dll + 2012-06-14 05:55 . 2012-05-18 01:47 248320 c:\windows\system32\ieui.dll - 2009-07-14 04:45 . 2012-05-12 15:32 417112 c:\windows\system32\FNTCACHE.DAT + 2009-07-14 04:45 . 2012-06-14 11:11 417112 c:\windows\system32\FNTCACHE.DAT + 2012-06-14 02:57 . 2012-04-24 05:37 184320 c:\windows\system32\cryptsvc.dll + 2012-06-14 02:57 . 2012-04-24 05:37 140288 c:\windows\system32\cryptnet.dll - 2009-07-14 05:01 . 2012-06-11 11:33 380528 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2012-06-16 17:37 380528 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-04-21 15:03 . 2012-04-21 15:03 616024 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Drawing.dll + 2012-06-14 02:56 . 2012-04-23 22:33 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll - 2012-04-21 15:11 . 2012-01-26 23:31 630784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Drawing.dll + 2012-04-21 15:03 . 2012-04-21 15:03 616024 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll - 2012-04-21 15:11 . 2012-01-26 23:33 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-06-14 02:56 . 2012-04-23 22:35 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2012-06-14 06:03 . 2012-06-14 06:03 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-12 06:16 . 2012-05-12 06:16 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll - 2012-05-12 06:16 . 2012-05-12 06:16 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-14 06:03 . 2012-06-14 06:03 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll + 2012-06-14 06:03 . 2012-06-14 06:03 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-12 06:16 . 2012-05-12 06:16 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll - 2012-05-12 06:16 . 2012-05-12 06:16 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll + 2012-06-14 06:03 . 2012-06-14 06:03 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll - 2012-05-12 06:16 . 2012-05-12 06:16 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-14 06:03 . 2012-06-14 06:03 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll + 2012-06-14 06:03 . 2012-06-14 06:03 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2012-05-12 06:16 . 2012-05-12 06:16 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll - 2012-05-12 06:16 . 2012-05-12 06:16 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-06-14 06:03 . 2012-06-14 06:03 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll + 2012-06-14 06:03 . 2012-06-14 06:03 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll + 2012-06-14 06:03 . 2012-06-14 06:03 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-12 06:16 . 2012-05-12 06:16 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll - 2012-05-12 06:16 . 2012-05-12 06:16 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-14 06:03 . 2012-06-14 06:03 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll + 2012-06-14 06:03 . 2012-06-14 06:03 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll - 2012-05-12 06:16 . 2012-05-12 06:16 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll + 2012-06-14 06:03 . 2012-06-14 06:03 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll - 2012-05-12 06:16 . 2012-05-12 06:16 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll + 2012-06-14 06:03 . 2012-06-14 06:03 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll - 2012-05-12 06:16 . 2012-05-12 06:16 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll + 2012-06-14 06:03 . 2012-06-14 06:03 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-06-14 06:03 . 2012-06-14 06:03 236880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll + 2012-06-14 06:03 . 2012-06-14 06:03 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2012-05-12 06:16 . 2012-05-12 06:16 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll - 2012-05-12 06:16 . 2012-05-12 06:16 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll + 2012-06-14 06:03 . 2012-06-14 06:03 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll - 2012-05-12 06:16 . 2012-05-12 06:16 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll + 2012-06-14 06:03 . 2012-06-14 06:03 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll - 2012-05-12 06:16 . 2012-05-12 06:16 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-14 06:03 . 2012-06-14 06:03 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll + 2012-06-14 06:03 . 2012-06-14 06:03 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll - 2012-05-12 06:16 . 2012-05-12 06:16 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll + 2012-06-14 06:03 . 2012-06-14 06:03 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll - 2012-05-12 06:16 . 2012-05-12 06:16 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll + 2012-06-14 06:03 . 2012-06-14 06:03 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll - 2012-05-12 06:16 . 2012-05-12 06:16 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll + 2012-06-14 06:03 . 2012-06-14 06:03 616024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-14 06:03 . 2012-06-14 06:03 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-12 06:16 . 2012-05-12 06:16 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll - 2012-05-12 06:16 . 2012-05-12 06:16 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-06-14 06:03 . 2012-06-14 06:03 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll + 2012-06-14 06:03 . 2012-06-14 06:03 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2012-05-12 06:16 . 2012-05-12 06:16 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll - 2012-05-12 06:16 . 2012-05-12 06:16 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll + 2012-06-14 06:03 . 2012-06-14 06:03 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll - 2012-05-12 06:16 . 2012-05-12 06:16 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-06-14 06:03 . 2012-06-14 06:03 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll + 2012-06-14 06:03 . 2012-06-14 06:03 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll - 2012-05-12 06:16 . 2012-05-12 06:16 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll + 2012-06-14 06:03 . 2012-06-14 06:03 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll - 2012-05-12 06:16 . 2012-05-12 06:16 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll + 2012-06-14 06:03 . 2012-06-14 06:03 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-12 06:16 . 2012-05-12 06:16 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll - 2012-05-12 06:16 . 2012-05-12 06:16 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll + 2012-06-14 06:03 . 2012-06-14 06:03 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll - 2012-05-12 06:16 . 2012-05-12 06:16 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll + 2012-06-14 06:03 . 2012-06-14 06:03 156440 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll - 2012-05-12 06:16 . 2012-05-12 06:16 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll + 2012-06-14 06:03 . 2012-06-14 06:03 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll + 2012-06-14 06:03 . 2012-06-14 06:03 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll - 2012-05-12 06:16 . 2012-05-12 06:16 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-14 06:03 . 2012-06-14 06:03 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll + 2012-06-14 06:03 . 2012-06-14 06:03 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-12 06:16 . 2012-05-12 06:16 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll - 2012-05-12 06:16 . 2012-05-12 06:16 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-06-14 06:03 . 2012-06-14 06:03 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll + 2012-06-14 06:03 . 2012-06-14 06:03 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-05-12 06:16 . 2012-05-12 06:16 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll - 2012-05-12 06:16 . 2012-05-12 06:16 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2012-06-14 06:03 . 2012-06-14 06:03 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll + 2012-06-14 06:03 . 2012-06-14 06:03 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll - 2012-05-12 06:16 . 2012-05-12 06:16 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll - 2012-05-12 06:16 . 2012-05-12 06:16 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-06-14 06:03 . 2012-06-14 06:03 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll + 2012-06-14 06:03 . 2012-06-14 06:03 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-12 06:16 . 2012-05-12 06:16 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll - 2012-05-12 06:16 . 2012-05-12 06:16 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-06-14 06:03 . 2012-06-14 06:03 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll + 2012-06-14 06:03 . 2012-06-14 06:03 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-05-12 06:16 . 2012-05-12 06:16 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll - 2012-05-12 06:16 . 2012-05-12 06:16 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-14 06:03 . 2012-06-14 06:03 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll + 2012-06-14 06:03 . 2012-06-14 06:03 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll - 2012-05-12 06:16 . 2012-05-12 06:16 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll + 2012-06-14 06:03 . 2012-06-14 06:03 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-12 06:16 . 2012-05-12 06:16 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll - 2012-05-12 06:16 . 2012-05-12 06:16 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll + 2012-06-14 06:03 . 2012-06-14 06:03 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 06:03 . 2012-06-14 06:03 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-12 06:16 . 2012-05-12 06:16 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-14 06:03 . 2012-06-14 06:03 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-12 06:16 . 2012-05-12 06:16 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-14 06:03 . 2012-06-14 06:03 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll - 2012-05-12 06:16 . 2012-05-12 06:16 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 06:03 . 2012-06-14 06:03 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll + 2012-06-14 06:03 . 2012-06-14 06:03 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll - 2012-05-12 06:16 . 2012-05-12 06:16 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll + 2012-06-14 06:02 . 2012-06-14 06:02 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll - 2012-05-12 06:16 . 2012-05-12 06:16 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll + 2012-06-14 06:02 . 2012-06-14 06:02 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll - 2012-05-12 06:16 . 2012-05-12 06:16 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-14 06:03 . 2012-06-14 06:03 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll + 2012-06-15 02:28 . 2012-06-15 02:28 337408 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\08becdcc9bd647c4e4d07ceea7fe4895\WindowsFormsIntegration.ni.dll + 2012-06-15 02:28 . 2012-06-15 02:28 244736 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\99cb318f961215576faaa1545dda4f49\System.Windows.Forms.DataVisualization.Design.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 451072 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity\319e75d7f46269746bf9b0e90bb6bd72\System.Web.Entity.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 367104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Entity.D#\36a0e6286d72d98d39588687815731bb\System.Web.Entity.Design.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 973824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DynamicD#\4167c5a7841a7d28d41c1c3729b3924c\System.Web.DynamicData.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 331776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\3e3b88c0768491811650ffae55afb0cb\System.Web.DataVisualization.Design.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 281088 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\ca5505a49a075ee7ad2535f89d9ea992\System.ServiceProcess.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 781824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\0d8257087be3e57b071d1d5ccd705c2f\System.Messaging.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 292352 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing.Desi#\b296ac056fd009b084b03fdfc9559b92\System.Drawing.Design.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 181760 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\52792a7ce63196551c29f5201562c1ae\System.Configuration.Install.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 805888 c:\windows\assembly\NativeImages_v4.0.30319_64\StanCore\137dcf705d1bddbdf480c4d4ae80414f\StanCore.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 235008 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\b4c4bff55aff00f879e0a0bf88c29734\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 467968 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\ae4c27a30f0f1837e9f35d66d4ed853f\Microsoft.VisualStudio.ServiceModel.DomainServices.Tools.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 419840 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\a5bbc6408662a9f1edae4df2ffd3516d\Microsoft.VisualStudio.Tools.Applications.ProgrammingModel.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 247808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\9a98232c5a8d02df6a34123c54be2c93\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 152576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\72838091533154d7db591f65e7ffc3f1\Microsoft.VisualStudio.TeamArchitect.LayerDesigner.Build.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 806400 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\700c4e91f5054af40b8914c7a6fd4d6c\Microsoft.VisualStudio.Tools.Applications.Project.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 864768 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\4208ff59eb58f5119bdb11a6d601466e\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 422912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\25eb7872629fa58a31f99c64225ab508\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 856576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\121355ffab35c4fa8af6830c427e7f41\Microsoft.TeamFoundation.Common.Library.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 997376 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\fc5138f1d4f0ba4c34d1cd51a140255a\Microsoft.SqlServer.ManagedDTS.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 691712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\db3fd8569bf473a683269d5e392bc5a3\Microsoft.SqlServer.GridControl.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 208896 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\924672877ad69c5db3f78169400a8a05\Microsoft.SqlServer.DataStorage.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 126976 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\412cc44f86926b426aea8f08c261398e\Microsoft.SqlServer.DlgGrid.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 270336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\f2b9537dd354206e7adec4dd6996a201\Microsoft.Office.Tools.Common.Design.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 432128 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\c675b829fd9f1309276d261e1eb4a41e\Microsoft.Office.Tools.Common.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 568832 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\8d1b4ebfa49e1da17ae9bdf129185826\Microsoft.Office.Tools.Word.Design.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 199680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\707c1ed861d0d44857b7bdf4b59804e2\Microsoft.Office.Tools.Outlook.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 408576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\61a237651d46bf93ab5e040941e98f16\Microsoft.Office.Tools.Outlook.Implementation.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 993280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\13e7dc4a7c213ce110824a1fcd169f30\Microsoft.Office.Tools.Excel.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 276480 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.NetEnterp#\d5f47776aa2f7478666ec567fb6ad697\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 206336 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\66ae33d9fff62d1cb8060e3468d7f594\WindowsFormsIntegration.Design.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 253952 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 644608 c:\windows\assembly\NativeImages_v4.0.30319_32\WcfTestClient\3969dfb01b82d0c0669f35847584effd\WcfTestClient.ni.exe + 2012-06-14 11:30 . 2012-06-14 11:30 291840 c:\windows\assembly\NativeImages_v4.0.30319_32\WcfSvcHost\fbfc0d8466eb770e6b1da934e421c02f\WcfSvcHost.ni.exe + 2012-06-14 11:30 . 2012-06-14 11:30 742912 c:\windows\assembly\NativeImages_v4.0.30319_32\TF\746dd6dee38619e447248889aab87a10\TF.ni.exe + 2012-06-14 11:34 . 2012-06-14 11:34 194560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\122b5ef2b93132bd770c2c5d753d73ee\System.Windows.Forms.DataVisualization.Design.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 865280 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\c85b43405ac9aa403a714af716ef3c5e\System.Web.Extensions.Design.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 335360 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity\a0abe24dff94a2fb2c27c631a45aa95f\System.Web.Entity.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 297984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Entity.D#\951b0d1b999b49a47fb06f4011565ffa\System.Web.Entity.Design.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 712192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DynamicD#\ae2121b64d021313d3c1ddd621e4d472\System.Web.DynamicData.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 260608 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\15e5acbd2196d1d4bde8466ff690aa76\System.Web.DataVisualization.Design.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\5552b27237c3dbe4f21a10e97adf2edc\System.ServiceProcess.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\a730931e386537e3c229e049c9a6d271\System.Messaging.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 226304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing.Desi#\0640b7fe359ea63a1799465631aa691a\System.Drawing.Design.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 804352 c:\windows\assembly\NativeImages_v4.0.30319_32\StanPackage\c3018eb4434dc13131bd94a268f98f8a\StanPackage.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 631296 c:\windows\assembly\NativeImages_v4.0.30319_32\StanCore\a38a4ec725c1056dcb5190dd702778d2\StanCore.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 168448 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\5cffff036195fbe8c08545f625b64eb8\PresentationFramework.VisualStudio.Design.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 481280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ff0a5f614db3c7a0fe2d6be0c57d6ad0\Microsoft.VisualStudio.DeveloperTools.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 175104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fc07d9920679b40ff8608e6c74e0b83b\Microsoft.VisualStudio.TeamArchitect.ModelStore.Dsl.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 206848 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fbc424a926b26386d7451ef58fd0fc5a\Microsoft.VisualStudio.Project.Contracts.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 333312 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fbb0b3b6d4bbc610c71ca4d769034284\Microsoft.VisualStudio.Tools.Applications.ProgrammingModel.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 848896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fa87ebe6934ad9360cb6c5bcc91d3650\Microsoft.VisualStudio.Shell.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 271360 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f5567416961f79ca9b55665831577a81\Microsoft.VisualStudio.TeamArchitect.UseCase.DslPackage.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 311808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f3e64ea32a00c436368160118ef29f41\Microsoft.VisualStudio.Configuration.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 281600 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ecafda5d187b87eb5b6f45ba0e017321\Microsoft.VisualStudio.ToolIntegration.Backplane.VSHost.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 906752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e674822d1be0e549b65140d8aa06ed46\Microsoft.VisualStudio.TeamArchitect.ComponentDesigner.Dsl.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 184832 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e5cb94fc84442812972a3252970f13d5\Microsoft.VisualStudio.EnterpriseTools.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 203264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e59057d6aee73db9ffa940654831b70f\Microsoft.VisualStudio.TeamArchitect.ModelingProject.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 920064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e2d4b03486da59be0b6e5d7e2f502256\Microsoft.VisualStudio.Shell.9.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 558592 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e07bb819e2e50abd44ca66c7b6dc9460\Microsoft.VisualStudio.TeamArchitect.SequenceDesigner.DslPackage.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 564736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dda785f780dc5e837d21fdd814a91a45\Microsoft.VisualStudio.TeamArchitect.StructuralDesignersCommands.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 922624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\d7412bb336e4f9eac66905893e073959\Microsoft.VisualStudio.AppDesigner.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 272384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\d72e8ec76f2ba19caf2ae6708bcda175\Microsoft.VisualStudio.TeamArchitect.ModelExplorer.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 502272 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\d1d07eae31c23541938173476fa0abbd\Microsoft.VisualStudio.TeamArchitect.DesignersCommon.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 148992 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cfbd30491ba13e72051c99f68bfd867d\Microsoft.VisualStudio.WizardFramework.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 768512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cd5f6dad85baeb3949e97c55466aa391\Microsoft.VisualStudio.TeamArchitect.LayerDesigner.DslPackage.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 376320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cad4269ba819d92378b9954c3bedecde\Microsoft.VisualStudio.TeamFoundation.Client.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 708608 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b926f7aec65111a7e14b3471b28c04d0\Microsoft.VisualStudio.Tools.Office.Runtime.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 102400 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b614c8fbc5465dba705f0228db798b16\Microsoft.VisualStudio.TeamArchitect.LayerDesigner.Build.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 110080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\b007bc764d8c840aff775faa37a862be\Microsoft.VisualStudio.PerformanceTools.HpcProfiler.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 283648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ae05093b40c0f10da51e5fda149c27f9\Microsoft.VisualStudio.TeamArchitect.ModelStore.DslPackage.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 702976 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\acd2246e1148e92d0e6d662cfe45686d\Microsoft.VisualStudio.Diagnostics.Common.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 202752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a5890ea19bafcfbc0e99e92a54eb4280\Microsoft.VisualStudio.Language.CallHierarchy.Implementation.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 279040 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a40114ab33ad81852bed90493b9777f6\Microsoft.VisualStudio.TeamArchitect.ActivityDesigner.DslPackage.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 343552 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9a82ac2685cbe80debd1a9aca8ec8389\Microsoft.VisualStudio.TeamFoundation.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 363008 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9a15ebb2d1cb9f71b861d07c87c1ab45\Microsoft.VisualStudio.ServiceModel.DomainServices.Tools.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 563712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\94583e09517a83c5d8f5d8d6c04eb94b\Microsoft.VisualStudio.Dialogs.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 178176 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\92cafe47079306d9715ed1dcf97227e4\Microsoft.VisualStudio.Tools.Office.ContainerControl.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 985600 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\8a69049ad0a86ad9fe6c1c61c9dce834\Microsoft.VisualStudio.QualityTools.LoadTestExcelCommon.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 336896 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\876a622addf375ff749b9381f5b53818\Microsoft.VisualStudio.VisualBasic.QuickSearch.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 250368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\8595e0150cc8034eecd810bd57dc6633\Microsoft.VisualStudio.Project.VS.Implementation.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 247296 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\856658c27095c26bbfcb7e4764549f47\Microsoft.VisualStudio.Modeling.Sdk.Integration.Shell.10.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 210432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7ae8bd37cc623e187362d40a0ed1cdb8\Microsoft.VisualStudio.Tools.Office.Runtime.Internal.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 819712 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\782167229e8951590e114ab619eeb9b6\Microsoft.VisualStudio.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 475648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7780325f412ff1ad273bebc5b4074bbd\Microsoft.VisualStudio.TeamArchitect.LogicalClassDesigner.DslPackage.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 256512 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\705a4b88d6e3e4897305054949c98a6d\Microsoft.VisualStudio.TextTemplating.VSHost.10.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 328192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6ed314002dbd1ebf6f78e521b67140e9\Microsoft.VisualStudio.TeamFoundation.Build.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 129024 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\62a5559be248aa3b77f4feb3707e875c\Microsoft.VisualStudio.CSharp.Services.Language.Features.QuickSearch.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 420352 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\61892696f14270f3a15497dd90662145\Microsoft.VisualStudio.ServiceModel.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 189952 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\5a377a4c8e2ac2552121e55182607d7e\Microsoft.VisualStudio.PerformanceTools.CounterInfo.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 654336 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\51aa930404d874de9bc53279a8d15315\Microsoft.VisualStudio.TestImpact.Package.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 685568 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\50ff872c00c985e476a26fac259173d1\Microsoft.VisualStudio.TeamArchitect.LogicalClassDesigner.Dsl.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 515072 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4cd904c34450d7e45319587ed8f7d6fb\Microsoft.VisualStudio.ArchitectureTools.Extensibility.ni.dll - 2012-05-12 18:58 . 2012-05-12 18:58 320000 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\47f84b020bd98d8bef8d889067a550e6\Microsoft.VisualStudio.Web.HTML.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 320000 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\47f84b020bd98d8bef8d889067a550e6\Microsoft.VisualStudio.Web.HTML.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 201216 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4387a8db57ce97435fc221a0dbf83153\Microsoft.VisualStudio.TemplateWizard.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 763904 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\32e8fd7c8d6feb5a639075b000d0f2bf\Microsoft.VisualStudio.Modeling.ArtifactMapper.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 721920 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\319b94406fe42b1c4253dc2c6e0aef9d\Microsoft.VisualStudio.TeamArchitect.UseCase.Dsl.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 909312 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\2b979827085184a7b6f11d86bbb5d4a1\Microsoft.VisualStudio.QualityTools.Tips.TuipPackage.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 872448 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1ccb6f39cc03299b2f8ab177af70b87e\Microsoft.VisualStudio.TeamArchitect.ActivityDesigner.Dsl.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\12bb03485a22b0fd802102e0ae247be2\Microsoft.VisualStudio.TeamArchitect.DesignersCommonPackage.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 674304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\10f89b6515cb6ba45ccac3b9dc10e4d1\Microsoft.VisualStudio.Tools.Applications.Project.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 306688 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\0e7b4546989b0d12c0afac3c8dac21aa\Microsoft.VisualStudio.ComponentModelHost.Implementation.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 278016 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\07dd97190ebe8356ecdec77f096742d2\Microsoft.VisualStudio.TeamArchitect.ComponentDesigner.DslPackage.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 203264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\077c66f85aaf4b0ca1f747e37eaef0c3\Microsoft.VisualStudio.Modeling.Sdk.Integration.10.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 559104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\050c911f0058ed09cb178485689b028f\Microsoft.VisualStudio.Web.HTML.Implementation.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 303104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\de152cc627ec2359caee04fcb339b82a\Microsoft.VisualBasic.Compatibility.Data.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 152576 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\f1393f3fa05a3f4db32f11eae8e597bd\Microsoft.TeamFoundation.TestManagement.ClientPackage.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 727552 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\de43f4997a948da3627f73a51ca95549\Microsoft.TeamFoundation.OfficeIntegration.Project.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 860672 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\535b79d2117557b5ad68f01afcfda364\Microsoft.TeamFoundation.TestManagement.Controls.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 707072 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\1b5435e51a6ba74e9bc2ec46ca028836\Microsoft.TeamFoundation.Common.Library.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 312320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\d8ab7b460aa25a6c7bc79bb1ab01dd08\Microsoft.Office.Tools.Outlook.Implementation.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 152064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\860a49d7c61ced07dbe0432167fa976a\Microsoft.Office.Tools.Outlook.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 676864 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\81e67ed225d7b3d4f2f39451a071c31b\Microsoft.Office.Tools.Word.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 730624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\8017f4a5a01ec4bbcab8574053cb7eb6\Microsoft.Office.Tools.Excel.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 440832 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\53e2bd23637fdb635001153fddff252e\Microsoft.Office.Tools.Word.Design.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 861696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\4e407c7f46090bf8ad97b0fd52bce895\Microsoft.Office.Tools.Excel.Design.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 336384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\34e8a3217545a99cae57c13021d978e9\Microsoft.Office.Tools.Common.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 225280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\285a1539600c62cafd7016dfacd95c89\Microsoft.Office.Tools.Common.Design.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 864768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\243825ba2a2c2275da9a2e9fc74b1a12\Microsoft.Office.Tools.Common.Implementation.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 143360 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\ac6272c2c65e0fb9c9fd15fe2052b7b7\Microsoft.Data.Schema.Tasks.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 757248 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\3320a41b536d205c224579766ef5bfea\Microsoft.Data.Schema.Utilities.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 644608 c:\windows\assembly\NativeImages_v4.0.30319_32\MetricsPackage\99cf3f453d3c8cada41f7670c0fce644\MetricsPackage.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 125440 c:\windows\assembly\NativeImages_v4.0.30319_32\HistoricalDebuggerM#\7802f7f49e9ec24f65a31917a757e8ed\HistoricalDebuggerMargin.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 625664 c:\windows\assembly\NativeImages_v4.0.30319_32\Fsi\c15fdbf38bca2e01c9a1f3cd19cb9704\Fsi.ni.exe + 2012-06-14 11:30 . 2012-06-14 11:30 449024 c:\windows\assembly\NativeImages_v4.0.30319_32\FSharp.VS.FSI\1f0a3f95824ad8fc758a84ff9cbc8adc\FSharp.VS.FSI.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 511488 c:\windows\assembly\NativeImages_v4.0.30319_32\Fsc\25d9eacfead8aebaee156ba83489dbc0\Fsc.ni.exe + 2012-06-14 11:29 . 2012-06-14 11:29 852480 c:\windows\assembly\NativeImages_v4.0.30319_32\AspNetMMCExt\b02ad189fc3de84d6361f0bf0cfafbf5\AspNetMMCExt.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 169984 c:\windows\assembly\NativeImages_v2.0.50727_64\xsd\ea8c5201684b4a36af51bba737cc8826\xsd.ni.exe + 2012-06-14 11:37 . 2012-06-14 11:37 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\f4d304fcbfda323997083a1f88b83719\WindowsFormsIntegration.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\681410f842337dccc72eb059738c3ced\TaskScheduler.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\72b4992e45d232251a273a59eb3333d5\System.Web.Routing.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\b905eb57b631a30c60caa4d68c186963\System.Web.Entity.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\e412dfbf1aa49bbe345a02a4d23104f5\System.Web.Entity.Design.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\815769f953ebe3f84439d522c97317b8\System.Web.DynamicData.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\c8144ee08dccdac183527e53c86aa901\System.Web.Abstractions.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f71d2f65d0f149c75ac7a569dbcc8500\System.ServiceProcess.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\d5d612f7d372f500e3062e3814e79d75\System.Messaging.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\fbc02e9f5a14bb93082ebc88bc577413\System.Drawing.Design.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\a88ca70ab9641b8236149bc5dd8d1564\System.Configuration.Install.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 116736 c:\windows\assembly\NativeImages_v2.0.50727_64\ResGen\4914e2b25ab7b1c855948e58052ee86c\ResGen.ni.exe + 2012-06-14 11:37 . 2012-06-14 11:37 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\2f1bad2fb963482a02443d5e7fece2b6\napsnap.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\bb4947f0ecc925a7bcfd129b6eec8f9b\napinit.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\67240ddde494b9cc05cd732ccd099668\MMCFxCommon.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 305664 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\fda2f68162063c54d2e669e85de7dfb1\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 229888 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\dea0c9ca00d2a2a86b6f60a8bd6c9f19\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 311296 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\8c413981cf1a80aa102290581db46e53\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 188416 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\4c1e08576206b0c4a0544e651ee60a60\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 773120 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\3bfe0dc04ff3485c579ffdb76103bd29\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 215040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\003a336d124de62c2fc55eff169d975a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll - 2012-06-10 21:24 . 2012-06-10 21:24 589824 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.TeamFound#\b21d0b7da52249d9ab307f750fb072b9\Microsoft.TeamFoundation.TestManagement.Controller.ni.dll + 2012-06-14 06:01 . 2012-06-14 06:01 589824 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.TeamFound#\b21d0b7da52249d9ab307f750fb072b9\Microsoft.TeamFoundation.TestManagement.Controller.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 258048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\deebe198bb860026cb7d8a2b358aad78\Microsoft.SqlServer.DataStorage.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 764928 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\d44828c0ca5cc7397c2b99f367ced0d1\Microsoft.SqlServer.GridControl.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\71c0a64812a0f8d74d136b7e3e72bc50\Microsoft.SqlServer.CustomControls.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 158720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\273dbaff9b715a2b8f0340a44c754cc5\Microsoft.SqlServer.DlgGrid.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 160768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\14623c44f0d8e3de42156e618399c719\Microsoft.SqlServer.VSTAScriptingLib.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 222208 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\cecf51d4b8ff90f794b8a43ca4317ada\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 978944 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\9f64025d269ffad39a89d1bf5c3e7b97\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 859136 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\9b101da999f553f6aa3bc2cae5d59e66\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\795e07cc078bee3396f1d946f734c871\Microsoft.Office.Tools.v9.0.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 293376 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.NetEnterp#\3794595acf4cb03f2c8a8e6420ad752b\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e29cbd30a31d3c8dae19eb17f70c4ec4\Microsoft.MediaCenter.iTv.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\409dae089f2e041343cff71f822cd505\Microsoft.MediaCenter.ITVVM.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 798720 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\803188573fb19785a94284e097c48a67\Microsoft.ManagementConsole.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\4ae6ccc32dafb4e3765b9db05585bd48\mcplayerinterop.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\b0db345fd62a84c98fd8b0bf3c72e8bb\mcGlidHostObj.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\bc5df15ee827e248dd6f819874a85718\EventViewer.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\08c9aa18b306aa47ddc0ae4a63b05d04\ehExtHost.ni.exe + 2012-06-14 11:28 . 2012-06-14 11:28 126976 c:\windows\assembly\NativeImages_v2.0.50727_32\xsd\3c1d9ddad9c0bb0f62ed1c13e6a5bb8c\xsd.ni.exe + 2012-06-14 11:28 . 2012-06-14 11:28 634368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\6a04374e3327b3b5eeb7b093874a7df6\WindowsLiveLocal.WriterPlugin.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 665600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f9a69f24a6e548c3e15ee04e140208d8\WindowsLive.Writer.Interop.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 122368 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f7c9f161cf2629518715b5bcf365c126\WindowsLive.Writer.Extensibility.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d7335f026e8f9399efa402c453a3bc2f\WindowsLive.Writer.BrowserControl.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 891392 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d5daafb2dd78ae37f2d2c722675bddd6\WindowsLive.Writer.HtmlEditor.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 326144 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c7df834cf8a2c154133c3174b627bb96\WindowsLive.Writer.SpellChecker.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 780800 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4d5f9dcf798af5b9fd541b15bf03aa4e\WindowsLive.Writer.Controls.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 101376 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4a51a5ff974f0c8ccf9cc258001e9167\WindowsLive.Writer.Api.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\312be707fe0875427c91368773be86d5\WindowsLive.Writer.FileDestinations.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\30e1260c171774d03bc06498740920bf\WindowsLive.Writer.Mshtml.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 871424 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2819ee35e8d334f8c91b5a3cfd6b253e\WindowsLive.Writer.BlogClient.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\43a386622879a9626c1c07d8c8f8d944\WindowsLive.Client.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\f2f8201dd3453250dfd9ed1afce630a0\WindowsFormsIntegration.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\f3e052584df9c614407da662dd3c3df3\TaskScheduler.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\06e4119a0a3484bb0ca667a16145ce74\System.Web.Routing.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\4f13c2c06fb97f6659473f02802b377b\System.Web.Extensions.Design.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\bc239944bca7cc6b6ddb473259183c7d\System.Web.Entity.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\3701488fb9e601ebe963db25b784d684\System.Web.Entity.Design.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a09cc9877f51f16a4610b702155e8b70\System.Web.DynamicData.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c6aad1edcc51862ceb26b6b65dad1490\System.Web.Abstractions.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\69ca4a43ba14b66689715ad62aed70e6\System.ServiceProcess.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\2b4d6976393bf5643a4ef2d8dffdf75b\System.Messaging.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\912a0776c2bfd35ff76bd0b8ba977ed4\System.Drawing.Design.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\498d2033c60fe5b777cf923b71b25972\System.Configuration.Install.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\acfafa161ea232928cb02b01c50acf1c\napsnap.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\0abec246c5ca6ec4858bfd3ab84da0ec\napinit.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\1e03b7c2539c5376f0665a4aba04efbd\MMCFxCommon.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 617472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\dea30f3639ea0e8b2d863a7b936e5520\Microsoft.VisualStudio.Tools.Office.Runtime.v10.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 215040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\d7f1a24f4ab28ff9859120d65b72d688\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\63c40affdf685001d24e9b8e869f06b7\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 137728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\5f20693aaa9fd4e4196f2895ef4936ae\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 134144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\496fe440ed2eff2ba78aad700a052408\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 196608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\0988088e9c29cc15990454df60f3ee58\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\e801f37cc6eb7d0914fac8296ea2b119\Microsoft.SqlServer.DataStorage.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 674304 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\da6ff325d3d07cc7da13c4ae46c2ad07\Microsoft.SqlServer.Management.Controls.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 532480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a8f669c2765da3b01b487b559cd4e618\Microsoft.SqlServer.GridControl.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 205824 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\a230df87700489036407d28afe932363\Microsoft.SqlServer.Management.RegisteredServers.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 601088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\62aab043bda3aa7389de6b4bc949be11\Microsoft.SqlServer.ManagedDTS.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 532992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\59dfc558a9b355496e6b21f8a205e1c1\Microsoft.SqlServer.GridControl.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 999936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\44630ccc28f0b24086309c2457586fed\Microsoft.SqlServer.WizardFramework.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\bec43cf8e37ed369958f432c8f719110\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 155648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\aad291d70cc91795d7ea822d36a33b09\Microsoft.Office.Tools.Outlook.v9.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 747008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\a8e6bc734c9447ff27e19635d9e09e8f\Microsoft.Office.Tools.Common.v9.0.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 656896 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\585f5fdb9f2b90726eb0fe4cd05bb426\Microsoft.Office.Tools.Word.v9.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.To#\51ad304ce7ae5aa72a6afdbce7661195\Microsoft.Office.Tools.v9.0.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 232960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\b2f2663103aa8983b122bfbec049d365\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\622b582866fca37f113bd97ae4c6d1f6\Microsoft.ManagementConsole.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Exception#\0cd926bc50da28848213aec7dbc10f49\Microsoft.ExceptionMessageBox.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\02577b78c6ed2f9bda301de888dccad8\EventViewer.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\a6b8eb80cfbdd927b2fa4ecb69fc0209\ehExtHost32.ni.exe - 2012-04-21 15:11 . 2012-01-26 23:33 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-14 02:56 . 2012-04-23 22:35 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll + 2012-06-14 05:55 . 2012-05-17 22:35 1129472 c:\windows\SysWOW64\wininet.dll + 2012-06-14 05:55 . 2012-05-17 22:36 1103872 c:\windows\SysWOW64\urlmon.dll - 2012-05-12 05:57 . 2012-03-31 04:39 3913072 c:\windows\SysWOW64\ntoskrnl.exe + 2012-06-14 02:57 . 2012-05-04 10:03 3913072 c:\windows\SysWOW64\ntoskrnl.exe - 2012-05-12 05:57 . 2012-03-31 04:39 3968368 c:\windows\SysWOW64\ntkrnlpa.exe + 2012-06-14 02:57 . 2012-05-04 10:03 3968368 c:\windows\SysWOW64\ntkrnlpa.exe + 2012-06-14 02:57 . 2012-04-07 11:26 2342400 c:\windows\SysWOW64\msi.dll + 2012-06-14 05:55 . 2012-05-17 22:45 1800192 c:\windows\SysWOW64\jscript9.dll + 2012-06-14 05:55 . 2012-05-17 22:27 1793024 c:\windows\SysWOW64\iertutil.dll + 2012-06-14 05:55 . 2012-05-17 22:48 9737728 c:\windows\SysWOW64\ieframe.dll + 2012-06-14 02:57 . 2012-04-24 04:36 1158656 c:\windows\SysWOW64\crypt32.dll + 2012-06-14 05:55 . 2012-05-18 01:59 1392128 c:\windows\system32\wininet.dll + 2012-06-14 02:57 . 2012-05-15 01:32 3146752 c:\windows\system32\win32k.sys + 2012-06-14 05:55 . 2012-05-18 01:59 1346048 c:\windows\system32\urlmon.dll + 2012-06-14 02:57 . 2012-05-04 11:06 5559664 c:\windows\system32\ntoskrnl.exe - 2012-05-12 05:57 . 2012-03-31 06:05 5559664 c:\windows\system32\ntoskrnl.exe + 2012-06-14 02:57 . 2012-04-07 12:31 3216384 c:\windows\system32\msi.dll + 2012-06-14 05:55 . 2012-05-18 02:06 2311680 c:\windows\system32\jscript9.dll + 2012-06-14 05:55 . 2012-05-18 01:54 2144768 c:\windows\system32\iertutil.dll + 2012-06-14 02:57 . 2012-04-24 05:37 1462272 c:\windows\system32\crypt32.dll + 2009-07-14 04:45 . 2012-06-14 11:14 7114356 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat - 2009-07-14 04:45 . 2012-06-05 02:05 7114356 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2010-05-07 00:00 . 2012-06-16 17:37 9221224 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2536932362-501151085-705957901-1000-8192.dat + 2011-09-24 15:31 . 2012-06-16 17:37 1500544 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2536932362-501151085-705957901-1000-12288.dat - 2011-09-24 15:31 . 2012-06-11 11:33 1500544 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2536932362-501151085-705957901-1000-12288.dat + 2012-03-15 17:17 . 2012-03-15 17:17 5029672 c:\windows\Microsoft.NET\Framework64\v4.0.30319\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:30 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll - 2012-05-12 05:57 . 2012-01-04 03:34 5025792 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:30 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll - 2011-06-07 02:26 . 2010-11-05 01:56 4927488 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Design.dll + 2012-03-15 17:17 . 2012-03-15 17:17 5029672 c:\windows\Microsoft.NET\Framework\v4.0.30319\System.Windows.Forms.dll - 2012-05-12 05:57 . 2012-01-04 02:51 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:32 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:32 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2011-06-07 02:26 . 2010-11-05 01:58 4927488 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1369872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll - 2012-05-12 06:16 . 2012-05-12 06:16 3512072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll + 2012-06-14 06:03 . 2012-06-14 06:03 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll - 2012-05-12 06:16 . 2012-05-12 06:16 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll + 2012-06-14 06:03 . 2012-06-14 06:03 5029672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll - 2012-05-12 06:16 . 2012-05-12 06:16 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-06-14 06:03 . 2012-06-14 06:03 6097256 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll + 2012-06-14 06:03 . 2012-06-14 06:03 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2012-05-12 06:16 . 2012-05-12 06:16 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1354584 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll - 2012-05-12 06:16 . 2012-05-12 06:16 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll + 2012-06-14 06:03 . 2012-06-14 06:03 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2012-05-12 06:16 . 2012-05-12 06:16 6429992 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll - 2012-05-12 06:16 . 2012-05-12 06:16 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3116376 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-12 06:16 . 2012-05-12 06:16 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3825952 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-12 06:16 . 2012-05-12 06:16 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 06:03 . 2012-06-14 06:03 4970768 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-12 06:16 . 2012-05-12 06:16 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-06-14 06:02 . 2012-06-14 06:02 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-12 06:16 . 2012-05-12 06:16 2975064 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll - 2012-05-12 06:16 . 2012-05-12 06:16 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3790112 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll - 2012-05-12 06:16 . 2012-05-12 06:16 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 06:02 . 2012-06-14 06:02 5201168 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll + 2012-06-14 06:03 . 2012-06-14 06:03 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll - 2012-05-12 06:16 . 2012-05-12 06:16 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll + 2012-04-23 02:46 . 2012-04-23 02:46 1187328 c:\windows\Installer\1752e87.msp + 2012-03-15 18:26 . 2012-03-15 18:26 4212736 c:\windows\Installer\1752e7e.msp + 2012-06-15 01:24 . 2012-06-15 01:24 5237248 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\e286701acf74012d3aa4a21953f03b6b\WindowsBase.ni.dll + 2012-06-15 02:28 . 2012-06-15 02:28 1602560 c:\windows\assembly\NativeImages_v4.0.30319_64\System.WorkflowServ#\fb9bda76fdb95462be5964d24b3a3694\System.WorkflowServices.ni.dll + 2012-06-15 02:28 . 2012-06-15 02:28 5922304 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Com#\7e21b535d75b72744702755d91df3e04\System.Workflow.ComponentModel.ni.dll + 2012-06-15 02:28 . 2012-06-15 02:28 3744768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Workflow.Act#\788eeff916be29e97c39ceed908b36c1\System.Workflow.Activities.ni.dll + 2012-06-15 02:28 . 2012-06-15 02:28 5645824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\950f64ba9fb22ca06c5b2b9cf6f5f4b4\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 2964992 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Mobile\1991b901c67dc756a410b4352a0b82d5\System.Web.Mobile.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 1101312 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\a08563ecdd9d8c25776f7697b82441b8\System.Web.Extensions.Design.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 3805184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Extensio#\4e3d591d1ffa8ce8d8659f6b096a968e\System.Web.Extensions.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 5618688 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.DataVisu#\1d5dfd6fd8c797913853b3bb7b58e340\System.Web.DataVisualization.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 1467392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\d2de16284459454472a6875185c64d08\System.Printing.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 2305024 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1225ef41527a975de83f22328d0a3b93\System.Drawing.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 2403328 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\ad9ff5d55f7ea22e80c39e0ff0240984\System.Deployment.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 5048832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\707f90689caf41ad429bf3ad373503cb\System.Activities.Presentation.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 4233216 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\16c9569b75a9f47c38b60ba733936e1a\ReachFramework.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 2056704 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\9c3d6b3ddef66cac069b6ab1fec514f8\PresentationUI.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 1590784 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\ed2c8f02d7747be08cc712594e53cc14\Microsoft.VisualStudio.QualityTools.Resource.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 2625536 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\e2a89a79b9c900f20972936a590eb4b2\Microsoft.VisualStudio.Tools.Office.Designer.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 1687552 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\b7745ad89dde733a93902a2cb018d178\Microsoft.VisualStudio.QualityTools.ExecutionCommon.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 1403904 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\6beef0c40233e3171ecc34a8a6bd62e0\Microsoft.VisualStudio.Tools.Office.AddInProject.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 1790464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\30599d2b7a438eecda7eb8f7bf42e25c\Microsoft.VisualStudio.QualityTools.TMI.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 1637376 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\29ba9db3d3da5eba221c09c4fe867721\Microsoft.VisualStudio.Tools.Office.ProgrammingModel.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 3951616 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualStu#\1502a6510903ef6acdf2c07b998c9ea4\Microsoft.VisualStudio.QualityTools.Common.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 1829888 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\84c1dba9531efedac2fe5adef99668b2\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 2317312 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\70e2694fe050bd480b9f61f935ca2da5\Microsoft.VisualBasic.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 4113920 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\f5cb846be34acf63fb9a5008ff9f4b53\Microsoft.TeamFoundation.Build.Workflow.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1543680 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\f48da186a210d1c8ceac1270b9115e3e\Microsoft.TeamFoundation.Lab.Workflow.Activities.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 2918912 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\d947cd4be37866f1ae8fefaee04d0185\Microsoft.TeamFoundation.VersionControl.Client.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 3103744 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\9bd488eeef44e57498e5f4fee4f84719\Microsoft.TeamFoundation.Build.Controls.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1576448 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\98cccda29270a8007f2635032ca50781\Microsoft.TeamFoundation.Common.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1895424 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\7156b2bf7dc784ae535a485b4d2a0c82\Microsoft.TeamFoundation.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 5553152 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\6c523b9f86133586a3dac00b6908e3be\Microsoft.TeamFoundation.Client.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 2083328 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\56603ff2c9b346a48a2f53892f7521cb\Microsoft.TeamFoundation.Controls.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 1112576 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.SqlServer#\44dabe37f781b446be806b94581ba61a\Microsoft.SqlServer.WizardFramework.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1070080 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\fd7a4b9fbf56ebebaddc77b3795f57e3\Microsoft.Office.Tools.Word.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 2034688 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\e7d617dd44985a9b176115175ef2cc17\Microsoft.Office.Tools.Excel.Implementation.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1139712 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\c1e38aaccd6d11be7981e6c635e5e34f\Microsoft.Office.Tools.Excel.Design.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1470464 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\75124205035892fcf3e8b239b91bebad\Microsoft.Office.Tools.Word.Implementation.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1118208 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\44163163ab2d7df33c1450fe9c439766\Microsoft.Office.Tools.Common.Implementation.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 1908224 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.DataTrans#\e94f8621b6fb0b4d7ac8f4980d157518\Microsoft.DataTransformationServices.Controls.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 3821056 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Build.Tas#\9857693ea27b34f5c8d00356eddefb9b\Microsoft.Build.Tasks.v4.0.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 1592320 c:\windows\assembly\NativeImages_v4.0.30319_64\DTSWizard\bccb869f40c3e25c8c43d7f793daf8a5\DTSWizard.ni.exe + 2012-06-14 11:37 . 2012-06-14 11:37 1007104 c:\windows\assembly\NativeImages_v4.0.30319_64\AspNetMMCExt\582c7d14b9ce7ac950f2a432a0809270\AspNetMMCExt.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 3858432 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 4041216 c:\windows\assembly\NativeImages_v4.0.30319_32\VsDebugPresentation#\db7ef37f239bc6e865a7ac0cd25506d5\VsDebugPresentationPackage.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 1226752 c:\windows\assembly\NativeImages_v4.0.30319_32\System.WorkflowServ#\6831f648f5b925f1194f691b0b491662\System.WorkflowServices.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 4476416 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Com#\a1705962a6725e5f40066496222d67e7\System.Workflow.ComponentModel.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Workflow.Act#\ec819e8a7e4585ffc87ae93d3b0662d8\System.Workflow.Activities.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 4587008 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\7f0476e4df01ca2219f7db531408e91c\System.Windows.Forms.DataVisualization.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 2334720 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Mobile\98709826ecf4cc93d6b85c8fe2c009b7\System.Web.Mobile.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 3127296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Extensio#\27b66f127250f2ba37f9bf1d519c6039\System.Web.Extensions.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 4575232 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.DataVisu#\794ebda123b04ccc874a5624bdced900\System.Web.DataVisualization.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 1060864 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\f87f8bc0bc9563096150f23f6c220e7b\System.Printing.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 1666048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1880064 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\e899cda47704280f54949c69b78c55cc\System.Deployment.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 3757568 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\36299fad6b7b591cfb6bd9e50dbd33df\System.Activities.Presentation.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 2906624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\442af6f7c8b447bdec3ad8d23da89c5a\ReachFramework.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 1641984 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\cf455da9b8fedf66767c1a7ab3eea9c9\PresentationUI.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 2402816 c:\windows\assembly\NativeImages_v4.0.30319_32\perfpkg\1ba9577da9ff33676467d07d50361d13\perfpkg.ni.dll + 2012-06-14 11:34 . 2012-06-14 11:34 3295744 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.XmlEditor\f0b5b7094159c6402fb29b11f23ca5fd\Microsoft.XmlEditor.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2872320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\7ae0a265ab4b790a0743447ac4580c19\Microsoft.Windows.Design.Platform.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1356800 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Windows.D#\5413cd24b06f12338efebeb33f1af6b8\Microsoft.Windows.Design.Platform.WPF.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1694720 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Web.Desig#\1d78f97f2d5320a7ca089b23ce82d329\Microsoft.Web.Design.Client.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 4131328 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\fa9e87a391081f1d745c6afb3f5579f2\Microsoft.VisualStudio.Modeling.ArtifactMapper.VSHost.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2717184 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f80e78dabc503e5124d2bd57d767f44a\Microsoft.VisualStudio.Shell.10.0.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1376256 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\f24ac95b6ce6a6e1ec99d2450369ef06\Microsoft.VisualStudio.ExtensionManager.Implementation.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2509824 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\ee136a751d6dd68494ce1c080c705f2d\Microsoft.VisualStudio.TeamArchitect.SequenceDesigner.Dsl.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 2095104 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e7598e9d2526f466201d6fac02c52776\Microsoft.VisualStudio.Modeling.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1671168 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e38d8db336e1b49b4b88cb40f1d9042f\Microsoft.VisualStudio.TeamFoundation.TeamExplorer.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2040320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\de453f5603c4d175286f63a4f8da6ed9\Microsoft.VisualStudio.Tools.Office.Designer.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1870848 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dd730ea7a90945194826fb32b1cb9ea9\Microsoft.VisualStudio.Shell.UI.Internal.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\dc473453b44311271a4762c131078e98\Microsoft.VisualStudio.Modeling.Sdk.Shell.10.0.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1324032 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\daeff89daf0bf2d04d32518b525489ed\Microsoft.VisualStudio.Debugger.PdtDebug.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1228288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\cdbc8d45b0f350b43b440b4f716e4817\Microsoft.VisualStudio.TeamArchitect.ManagedPackageFramework.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 3098624 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c560d3dbe6363abfada98c46327ba87f\Microsoft.VisualStudio.EnterpriseTools.TypeSystem.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2520064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\bc2962b840000defcb8fa54943f57abc\Microsoft.VisualStudio.EnterpriseTools.ClassDesigner.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1218048 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a706bbf1684e795ebf0c1305137607af\Microsoft.VisualStudio.Tools.Office.AddInProject.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2573824 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a519add6c04574345f0a9db23e7a2267\Microsoft.VisualStudio.TeamFoundation.VersionControl.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1177088 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\a0d59552c045f76a9fb7a901363dabd9\Microsoft.VisualStudio.TestTools.TestGeneration.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1467392 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\992c5e04f25db3272a5212fcf38344a3\Microsoft.VisualStudio.Shell.Design.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1797632 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\9879c7e94341adfea5cef45c90c24ae2\Microsoft.VisualStudio.TraceLogPackage.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1038336 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\97f4b8e5618eff10c301f9c16365e081\Microsoft.VisualStudio.VirtualTreeGrid.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 6949888 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\8af7f6ca404c1cc83a06f479b5ec2525\Microsoft.VisualStudio.CSharp.Services.Language.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 2655232 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\847c5a8184e6277921158132eddff902\Microsoft.VisualStudio.Editor.Implementation.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2346496 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7de1363782a8389606dfffe8c5fbde84\Microsoft.VisualStudio.Platform.WindowManagement.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2285568 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7b680be2e96fe0f496bdec2e7eec830f\Microsoft.VisualStudio.Modeling.Sdk.10.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2290688 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\787a021fe2d5afc0ab1095eccadc398f\Microsoft.VisualStudio.Web.Application.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2900480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6bbe89fa3729f303d7196b77f855634a\Microsoft.VisualStudio.Modeling.Sdk.Diagrams.10.0.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1309184 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6879809b279b32c08aa4461923cd95ad\Microsoft.VisualStudio.Tools.Office.ProgrammingModel.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1400320 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6837cde257e5048403d793e9cfbbca4d\Microsoft.VisualStudio.QualityTools.Resource.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1250816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6710c9178bd88845098a627837105b98\Microsoft.VisualStudio.Silverlight.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1830912 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\670dc5492e82304c6171f81218225f95\Microsoft.VisualStudio.Design.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 6051328 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\6170d350068b13f0a6173d194196e78a\Microsoft.VisualStudio.Editors.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 4050432 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\5b2d2ec07772446db19c0264270d32af\Microsoft.VisualStudio.QualityTools.TestCaseManagement.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 2814464 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4efbc7be233bfb9b5ec7fb9d354be1f7\Microsoft.VisualStudio.Web.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 3427840 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4a698fff7a5da0da6d97eb8a43de7678\Microsoft.VisualStudio.TeamArchitect.Common.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1741312 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\44b96bd8f59a47a292ef7cb8a49c943f\Microsoft.VisualStudio.PerformanceTools.Visualization.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1299968 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4363d5fc5a2642c0ca206a787ba38b0a\Microsoft.VisualStudio.QualityTools.TMI.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 2827264 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\40b6718b7a9c94026feca3a50e543ad8\Microsoft.VisualStudio.Project.VisualC.VCProjectEngine.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 3032576 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3ce83ca880a5e562410957d4cd165fb0\Microsoft.VisualStudio.QualityTools.Common.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 7111680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3b1718cafd0fea8e41f12bbcc4274a43\Microsoft.VisualStudio.Xaml.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1901056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\38db7534852dd4a0fa84c4679bf3230c\Microsoft.VisualStudio.Modeling.Diagrams.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1157632 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\35bcfd68984953bb8fbbb655443f0fd1\Microsoft.VisualStudio.CommonIDE.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1244160 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\33f42ea4156cd71d062c8967db345aae\Microsoft.VisualStudio.TeamFoundation.WorkItemTracking.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1318400 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\27c8235b5d08be137898d12f97af93c7\Microsoft.VisualStudio.Windows.Forms.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 1645056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\26626e46e371d58add5a8d654c871e8e\Microsoft.VisualStudio.TeamArchitect.LayerDesigner.Dsl.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1240064 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\2412bb725a0b63c1d45a035856492348\Microsoft.VisualStudio.QualityTools.ExecutionCommon.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1034752 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\1ae4fb19c35f35f33b93330af17eacc3\Microsoft.VisualStudio.Progression.VSPackage.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 5588480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\14ef122dace04272354a87d3abf45718\Microsoft.VisualStudio.Platform.VSEditor.ni.dll + 2012-06-14 11:32 . 2012-06-14 11:32 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\10168e5ee52482b9106231c5a1df75d8\Microsoft.VisualStudio.QualityTools.Vsip.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1207808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\084567c4d5e7c34ece88b36092563d87\Microsoft.VisualStudio.EnterpriseTools.Shell.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1139200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2cd710a03ffd858273a1fe560ddb9012\Microsoft.VisualBasic.Compatibility.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1838080 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\09c2f8f606e09d85cfe6e0ad89fbe729\Microsoft.VisualBasic.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 3334144 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\fef6a23d6856f6a4a14985877a952815\Microsoft.TeamFoundation.Build.Workflow.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1828352 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\f8ba914d82c0fc07008f9eac08116d9e\Microsoft.TeamFoundation.OfficeIntegration.Excel.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 4133376 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\f4af624f991c0f59c2179ca860ca5e2e\Microsoft.TeamFoundation.Client.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 2587136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\e89ef885e1a1f33574aaee9bf3e23a67\Microsoft.TeamFoundation.Build.Controls.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1256448 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\aa48e2e2016faf91c50aa93d2661a561\Microsoft.TeamFoundation.Common.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1547776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\9479405c87dfe03cdc00b99d23bf5234\Microsoft.TeamFoundation.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 3105280 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\9036ea7cb08e07651fc90de5139a5ef2\Microsoft.TeamFoundation.WorkItemTracking.Controls.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1715200 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\8d6b757c03815a21f11d987137ae575f\Microsoft.TeamFoundation.Controls.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 9389568 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\8c547786bc5b1b7df840ab21a5396c0c\Microsoft.TeamFoundation.VersionControl.Controls.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1043456 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\465523e1960f1905406985a5709a1487\Microsoft.TeamFoundation.OfficeIntegration.Common.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1301504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\39f1d6d0dc03b3c1af6f0df5a391eb68\Microsoft.TeamFoundation.Lab.Workflow.Activities.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 2120192 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.TeamFound#\1758a89157670ad77ceb880524027f09\Microsoft.TeamFoundation.VersionControl.Client.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1551872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\a4cc278a89e7125b79fd00fba1a49a92\Microsoft.Office.Tools.Excel.Implementation.ni.dll + 2012-06-14 11:31 . 2012-06-14 11:31 1117696 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\00d14d201c0e3bd4872d04dcde938197\Microsoft.Office.Tools.Word.Implementation.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 2464768 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript.A#\4aeb8f4b6efd7e9f67462af145960ef7\Microsoft.JScript.AuthoringServices.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1332736 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\c97efb7fcd3061ca02edcc48424aecd3\Microsoft.Data.Schema.Generators.Sql.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 2703360 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\9edc4dd0999a3523c1350c805a83b012\Microsoft.Data.Schema.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1607680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\952338776eb87a2bf0fe4432f2d2f03f\Microsoft.Data.Schema.Tools.Sql.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 1415680 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\7032883e8041a3b21bfa68ee231a767a\Microsoft.Data.Schema.Tools.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 2877440 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Build.Tas#\545d26502454316492990b42b093e673\Microsoft.Build.Tasks.v4.0.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 1818112 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\70cc5e8a5a3372fe0b104c1b20392cd2\System.WorkflowServices.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 2711040 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\aa638ba79250284eb4af4adaa4a4117b\System.Workflow.Runtime.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 5957632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\996dc2af3b9e5c111130935f298908c6\System.Workflow.ComponentModel.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\178797db84abae2eeaed835bd28ca52c\System.Workflow.Activities.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 2292224 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\a32734087cd0db5607d5744ca63235d7\System.Web.Services.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 3336704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\af7689e8cbec5d2755497be23c30e293\System.Web.Mobile.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 3044352 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\768ea257d75839979b4efb2d49d653f6\System.Web.Extensions.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\2c47bc5d426a7cf9ffef1425eda08184\System.Web.Extensions.Design.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 1463808 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\b964519964d302b4977e1380d8d15f1a\System.Printing.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 2318848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\222eb8aa336953a6b0216db2b0c4770d\System.Drawing.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\6e4e9b07f376d445df1718c0011fa99b\System.Deployment.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 3116032 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\1f88a3693c8ddd527a130aff49dc58b3\ReachFramework.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\b91c32fab08ba62d8c7681cc596895be\PresentationUI.ni.dll + 2012-06-14 11:37 . 2012-06-14 11:37 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\ac1ba76ed19d668ce53a74593f040453\Narrator.ni.exe + 2012-06-14 11:37 . 2012-06-14 11:37 2327552 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\df2557ab1b8e4389d846e13dc82eba57\MMCEx.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 7970304 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\61812970c4743b686a67f28687e1dcb6\MIGUIControls.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\1586ee919f86130df9771cf9b8d95d3a\Microsoft.VisualBasic.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 1135616 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.SqlServer#\93dfee1b85f1d022b88a9aa035ff4ba7\Microsoft.SqlServer.ManagedDTS.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 5350912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\ca7e936eed0de2436d87b2601ee3a20a\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2176512 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6caa366471176a065a96d77e8ba01eeb\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3040e2de07177c0a6a66a49de61fdc59\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 1222144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Office.To#\f220562e799e1bc8e7e061d135e15109\Microsoft.Office.Tools.Excel.v9.0.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 1516544 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\b2afc0af3d89ae00e973b4e6e9db382c\Microsoft.MediaCenter.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\73bfbdccdc1b0ae87f70a0ec594fee3c\Microsoft.MediaCenter.Bml.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\653e1ee01f10d658d52ca42e17e74283\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\dac69844e6333484159a4cf544190906\Microsoft.Ink.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 1971200 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.DataTrans#\44b4dc5f8b34a12600bcdd7082d3f659\Microsoft.DataTransformationServices.Controls.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\4b362e9e25c33e371f06403edec8849a\Microsoft.Build.Tasks.ni.dll + 2012-06-14 11:36 . 2012-06-14 11:36 2682880 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\33730d136a34d2f4e56a0322f49ee9b6\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\cc4844e7242c1e35d145bf2439f944c5\mcstore.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1346560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e922440d21cc9b4b3f2c73a082fdbb8b\WindowsLive.Writer.Localization.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1285632 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\696b119ac58a21bc3b9407e429d3db87\WindowsLive.Writer.ApplicationFramework.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 7025152 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\586ef3c4bfc58ee522f5a48b85a5af32\WindowsLive.Writer.PostEditor.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 2193408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3e441b1517e090938365a2ccab3f53f7\WindowsLive.Writer.CoreServices.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\e3e5aa45736b95804bf6bb7eca08a57b\System.WorkflowServices.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\88bfc62ac0195a8ae673c444a3339505\System.Workflow.Runtime.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 4516352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\cfb739be21092d5b8f7b4fde529e6aaa\System.Workflow.ComponentModel.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 2994688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\a815fffab98375c1919df68b5b292725\System.Workflow.Activities.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4a90802e36dee6e10d9bf54832cbf549\System.Web.Mobile.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 2404352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\c45efc7ec92c1da8e67eb597559ec39c\System.Web.Extensions.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 1044480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\991dbe40be5b114ed705bb5b48e6b330\System.Printing.ni.dll + 2012-06-14 11:12 . 2012-06-14 11:12 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll + 2012-06-14 11:12 . 2012-06-14 11:12 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3421b96c2885b8e4137a376ff3d95fa5\System.Deployment.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 2157056 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\87f73de6e080d37be93adfc7d5c31d7a\ReachFramework.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\163517c8a195fb48f7ef6ee17c585bdb\PresentationUI.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\17add09c98fa34255142d42697db53df\Narrator.ni.exe + 2012-06-14 11:29 . 2012-06-14 11:29 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\21abde8efab609732b2ade3f05234e79\MMCEx.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 6438912 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\0e7da0df83f0619e3b0e0a7d7ee05fa3\MIGUIControls.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll - 2012-06-10 16:27 . 2012-06-10 16:27 2176512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.TeamFound#\97eb1aa725cbc7d837fce22b2566ca0f\Microsoft.TeamFoundation.TestManagement.Client.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 2176512 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.TeamFound#\97eb1aa725cbc7d837fce22b2566ca0f\Microsoft.TeamFoundation.TestManagement.Client.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\99ae5f32cd1dc3618659bc3c77f2b2a9\Microsoft.PowerShell.Commands.Utility.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 1704960 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\77b5496d214dd5034294b058c0bb0e8d\Microsoft.PowerShell.GPowerShell.ni.dll + 2012-06-14 11:29 . 2012-06-14 11:29 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\72765e5fab12761eb6d3f58180fa34d7\Microsoft.PowerShell.Editor.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\8ce1d10f94b40f054017865757552f2d\Microsoft.MediaCenter.UI.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\7fab1ec8f5ed6a55a8a73b2c590bd7cd\Microsoft.MediaCenter.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\4d381048e3b9c0914c0f72c6aa0a599d\Microsoft.Ink.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\3893fa9a19b52dee8b2cc424840d5d08\Microsoft.Build.Tasks.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 1970176 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1d2250044b1ecff755e26ed12f6d27cb\Microsoft.Build.Tasks.v3.5.ni.dll + 2012-06-14 11:28 . 2012-06-14 11:28 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\3a4e56a8d1075cf0af0619c383b3e592\mcstore.ni.dll - 2012-05-12 05:57 . 2012-01-04 02:51 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:32 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll + 2012-06-14 02:57 . 2012-03-21 22:32 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll - 2011-06-07 02:26 . 2010-11-05 01:58 4927488 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll + 2012-06-14 05:55 . 2012-05-17 23:11 12314624 c:\windows\SysWOW64\mshtml.dll + 2009-07-14 02:34 . 2012-06-14 11:10 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat - 2009-07-14 02:34 . 2012-06-04 12:12 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat + 2012-06-14 05:55 . 2012-05-18 02:47 17807360 c:\windows\system32\mshtml.dll + 2010-05-31 22:36 . 2012-06-14 06:00 58957832 c:\windows\system32\MRT.exe + 2012-06-14 05:55 . 2012-05-18 02:16 10924032 c:\windows\system32\ieframe.dll + 2012-06-15 01:22 . 2012-06-15 01:22 17355264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\e883d90a0210bf99ca88f3b4ade53a24\System.Windows.Forms.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 15761920 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web\be472c4f636fc5b8fc38476dbfe01358\System.Web.ni.dll + 2012-06-15 01:22 . 2012-06-15 01:22 13314048 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Design\2cf901cb93fe6a24b4466094390ec73a\System.Design.ni.dll + 2012-06-15 01:25 . 2012-06-15 01:25 24407552 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\a3c3789d54894008501ce5891f1eeb40\PresentationFramework.ni.dll + 2012-06-15 01:24 . 2012-06-15 01:24 15908864 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\9d69a7a407bbc43a1bcb2da603af5840\PresentationCore.ni.dll + 2012-06-15 01:23 . 2012-06-15 01:23 11807232 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.TeamFound#\56b629252e404f60842bdb03aa582319\Microsoft.TeamFoundation.VersionControl.Controls.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 13198336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 12079616 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web\fdb5565e4c807a8cd79de9f40c0cd644\System.Web.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 11021824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Design\ecde3362b4d67a0025c3c9d5b9525f4a\System.Design.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 18000896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll + 2012-06-14 06:03 . 2012-06-14 06:03 11451904 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 10661376 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VSDesigner\83e512edfcdc68f3d0c093f3740908bf\Microsoft.VSDesigner.ni.dll + 2012-06-14 11:33 . 2012-06-14 11:33 10574336 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\c28bbd599c019da3b342b10c3ec222d4\Microsoft.VisualStudio.Uml.ni.dll + 2012-06-14 11:30 . 2012-06-14 11:30 15003648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Data.Sche#\cfc725e9e80a088cc1337e8e86a15216\Microsoft.Data.Schema.Sql.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 17383424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\dc5bb74eefdbf954cdfb70dd534d5564\System.Windows.Forms.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 15270912 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\95f38e7485bbe2b73b6055c45196fedd\System.Web.ni.dll + 2012-06-14 11:15 . 2012-06-14 11:15 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\582144c0ee317038621aebc626187b56\System.Design.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 19198464 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\47054c4d5b7e522c21a9d57797410302\PresentationFramework.ni.dll + 2012-06-14 11:14 . 2012-06-14 11:14 16543232 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\3a9d13514a8c4c710fa5ce8e9b5393fe\PresentationCore.ni.dll + 2012-06-14 11:35 . 2012-06-14 11:35 25470976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\0c1f96a4136efe532bbb8eb91d3de300\ehshell.ni.dll + 2012-06-14 11:12 . 2012-06-14 11:13 12436480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 11833344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\a501b7960f6c6e2e39162b83f3303aaa\System.Web.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 10580480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\7c144f89b1f8f292d6940a1b2f8ffbec\System.Design.ni.dll + 2012-06-14 11:13 . 2012-06-14 11:13 14340608 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll + 2012-06-14 11:12 . 2012-06-14 11:12 12237824 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{035EB6DE-F9BE-4B66-A05E-F62CFF7195D5}] c:\windows\SysWow64\wscui32.dll [BU] . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] 2012-06-12 05:38 2068536 —-a-w- c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95}] c:\progra~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\11.1.0.7\AVG Secure Search_toolbar.dll" [2012-06-12 2068536] "{28387537-e3f9-4ed7-860c-11e69af4a8a0}"= "c:\progra~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll" [BU] . [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1] [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj] . [HKEY_CLASSES_ROOT\clsid\{28387537-e3f9-4ed7-860c-11e69af4a8a0}] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 94208 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SansaDispatch"="c:\users\Meli\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe" [2011-09-27 79872] "Spotify Web Helper"="c:\users\Meli\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-04 932528] "RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768] "HP Remote Solution"="c:\program files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe" [2009-08-25 656896] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "VerizonServicepoint.exe"="c:\program files (x86)\Verizon\VSP\VerizonServicepoint.exe" [2011-01-10 4318520] "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008] "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-06-12 1104440] "ROC_roc_dec12"="c:\program files (x86)\AVG Secure Search\ROC_roc_dec12.exe" [2012-01-15 928096] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-09 98304] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux5"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ServicepointService] @="Service" . R0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x] R1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x] R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [x] R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x] R2 AudioSrv32;Windows Audio ;c:\windows\system32\reagent32.exe [x] R2 AxInstSV32;ActiveX Installer (AxInstSV) ;c:\windows\system32\dpnhpast32.exe [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-20 257696] R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys [x] R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys [x] R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys [x] R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys [x] R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe [2012-02-10 240408] R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe [2012-05-31 131912] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-29 129976] R3 PCDSRVC{F36B3A4C-F95654BD-06000000}_0;PCDSRVC{F36B3A4C-F95654BD-06000000}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms [2009-09-17 23536] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 VSPerfDrv100;Performance Tools Driver 10.0;c:\program files (x86)\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [2011-01-18 68440] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976] R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys [x] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x] S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2012-04-30 5106744] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe [2012-02-10 193816] S2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\DRIVERS\diginet.sys [x] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336] S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-09-08 2932224] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] S2 ServicepointService;ServicepointService;c:\program files (x86)\Verizon\VSP\ServicepointService.exe [2011-01-10 689464] S2 vToolbarUpdater11.1.0;vToolbarUpdater11.1.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe [2012-06-12 935480] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [x] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2012-06-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-20 04:54] . 2012-06-10 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2536932362-501151085-705957901-1000Core.job - c:\users\Meli\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-21 22:19] . 2012-06-16 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2536932362-501151085-705957901-1000UA.job - c:\users\Meli\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-21 22:19] . 2012-06-10 c:\windows\Tasks\HPCeeScheduleForMeli.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 11:22] . 2011-04-30 c:\windows\Tasks\PCDRScheduledMaintenance.job - c:\program files\PC-Doctor for Windows\pcdrcui.exe [2009-09-18 07:11] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2012-02-14 22:58 97792 —-a-w- c:\users\Meli\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Panda Malware Icon] @="{F5D1CF73-C196-48F8-AAAC-B9181E22B4E6}" [HKEY_CLASSES_ROOT\CLSID\{F5D1CF73-C196-48F8-AAAC-B9181E22B4E6}] c:\program files (x86)\Panda Security\Panda Cloud Antivirus\PSUNShell.DLL [BU] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Panda Suspect Icon] @="{9AE343CB-BA45-4618-AF6A-0230EE6FC793}" [HKEY_CLASSES_ROOT\CLSID\{9AE343CB-BA45-4618-AF6A-0230EE6FC793}] c:\program files (x86)\Panda Security\Panda Cloud Antivirus\PSUNShell.DLL [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PC-Doctor for Windows localizer"="c:\program files\PC-Doctor for Windows\localizer.exe" [2009-09-17 95728] . ——- Supplementary Scan ——- . uStart Page = hxxp://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=7.0unattached&bm=ho_central uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = ;*.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: DhcpNameServer = [removed] [removed] Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\11.1.0\ViProtocol.dll FF - ProfilePath - c:\users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\ FF - prefs.js: browser.startup.homepage - hxxp://isearch.avg.com?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.1.0.7&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11&sap=hp FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bb8ed0fbc-f422-4a02-9338-a6dba5897175%7D&mid=2e07f7d628bfa40ecb9418456a0d1cfa-94e4fa93780f336ecf7b90fcc4c8f7f771bb9a9e&ds=AVG&v=11.1.0.7&lang=en&pr=fr&d=2011-09-24%2017%3A48%3A11&sap=ku&q= . - - - - ORPHANS REMOVED - - - - . Toolbar-10 - (no file) WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCDSRVC{F36B3A4C-F95654BD-06000000}_0] "ImagePath"="\??\c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\S-1-5-21-2536932362-501151085-705957901-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-2536932362-501151085-705957901-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\DbgagD\1*] "value"="?\0b\03\17\06\00&?" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe . ************************************************************************** . Completion time: 2012-06-16 13:44:13 - machine was rebooted ComboFix-quarantined-files.txt 2012-06-16 17:44 ComboFix2.txt 2012-06-11 11:40 . Pre-Run: 477,153,112,064 bytes free Post-Run: 477,035,077,632 bytes free . - - End Of File - - 2EE6964BE7FCD76EAB19DC51D92D1187 MBAM: Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Database version: v2012.06.16.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Meli :: MELI-PC [administrator] 6/16/2012 2:02:18 PM mbam-log-2012-06-16 (14-02-18).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 216648 Time elapsed: 2 minute(s), 49 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) By the way, I'm not sure at which point it started happening, but I'm not having the slow issues any longer. Is it already fixed? What did it have and how might I have gotten it? Thanks!
Post #12
Hello Meli

Thank you for the logs.

Is it already fixed?

So far so good, but we'll only know for sure once we have run an online scan.

Lets continue:


  • Please run the following scan


  • Note: You will need to use Internet Explorer for this scan.
  • Note for Vista/Windows 7 Users: ESET is compatible but Internet Explorer must be run as Administrator. To do this, right-click on your Internet Explorer icon and select "Run as Administrator".
  • Please disable your real time security programs before performing the scan.


  • Scan your system with Eset Online Scanner
  • Place a check mark in the box YES, I accept the Terms Of Use.
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps).
  • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop.


  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option to "Remove Found Threats" is UN checked.
  • Push the "Start" button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]

Please post the ESET log in your next reply along with a new set of DDS logs.
Post #13
Here's the log! C:\ProgramData\Tarma Installer\{2E1037EA-038A-425F-86B9-6CD19B8497E9}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{2afa2b1d-6e26-4e00-b403-16cbf2ad3879}\chrome\xulcache.jar.vir JS/Agent.NDB trojan C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{d5a3c28a-9df8-453b-aa54-34879d5b36ca}\chrome\xulcache.jar.vir JS/Agent.NDJ trojan C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan C:\Qoobox\Quarantine\C\Users\Meli\AppData\Roaming\Mozilla\Firefox\Profiles\3e7cowdg.default\extensions\{ea0db630-6bd0-4fb7-bc00-aa2407aea813}\chrome\xulcache.jar.vir JS/Agent.NDJ trojan C:\Users\All Users\Tarma Installer\{2E1037EA-038A-425F-86B9-6CD19B8497E9}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1fa06fc1-50f3b619 a variant of Java/TrojanDownloader.Agent.NDJ trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\12f4224d-62d57969 multiple threats C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\44f2359a-6f50f140 multiple threats C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\60b5d41b-6f32cdb4 a variant of Java/TrojanDownloader.Agent.NDJ trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7a955edb-13dea55b a variant of Java/TrojanDownloader.Agent.NDJ trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\5071b523-1572eba3 Java/Exploit.Blacole trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\dcfd067-7cb13c31 a variant of Java/TrojanDownloader.Agent.NDJ trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\f2dc128-71a6d5aa a variant of Java/Exploit.CVE-2011-3544.B trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\939556b-72a52699 multiple threats C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\43c3de87-3ae2c71c a variant of Java/TrojanDownloader.Agent.NDJ trojan C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\c393949-34021ae9 a variant of Java/TrojanDownloader.Agent.NDJ trojan
Post #14
Hello Meli

Thank you for the log.

ESET has detected a number of items held in Combofix quarantine and some additional items that can be removed now:


  • Please work through the following steps


  • Hold down the Windows key (has the Windows symbol on it) and press the "R" key. A Run box will open. Type in Notepad and press Enter then click on "OK").
  • NOTE: Do not Use Wordpad or any other text editor except Notepad or the script will fail.
  • Copy and Paste the text in the quotebox below into the open Notepad window:

    File::
    C:\ProgramData\Tarma Installer\{2E1037EA-038A-425F-86B9-6CD19B8497E9}\_Setupx.dll
    C:\Users\All Users\Tarma Installer\{2E1037EA-038A-425F-86B9-6CD19B8497E9}\_Setupx.dll
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\1fa06fc1-50f3b619
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\12f4224d-62d57969
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\44f2359a-6f50f140
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\60b5d41b-6f32cdb4
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7a955edb-13dea55b
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\5071b523-1572eba3
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\dcfd067-7cb13c31
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\f2dc128-71a6d5aa
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\939556b-72a52699
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\43c3de87-3ae2c71c
    C:\Users\Meli\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\c393949-34021ae9

  • Save this as "CFScript.txt" (including the quotation marks), change the "Save as type" to "All Files" and save it to your desktop.
  • Close any open browsers.
  • Disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Refering to the picture below, drag CFScript.txt into ComboFix.exe

    [external image: Posted Image]

  • When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
  • Once the log is produced, re-engage your resident anti virus.

Please post the Combofix log in your next reply.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI