Page 1 of 10 12345 ... LastLast
Results 1 to 10 of 97

Thread: Search redirect problem

  1. #1
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default Search redirect problem

    Hi,
    Thank you for taking the time to look this over, I am baffled and I don't know really anything about how this stuff works. When I click on a link it takes me to what looks like a advertizement page with additional links on it - I do not remember if I clicked on any of those links but I might have .

    As a sub note and possibly unrelated I bought and installed CyberScrub® Privacy Suite™ 4.2 Professional and it stopped working long before all this happened and when I went to their site and requested a clean download (the program works in a very limited way in that I can scrub individual files but not drives), they wanted to sell me the new version and would not give me the version I purchased because they don't support it. Right now I don't have the money to purchase the new version. I really liked this program but don't know really if it does what it says it does. Like I stated I am a complete novice about this stuff. So if you are allowed to elaborate on this product, I would be interested in how you felt about it... thumbs up, thumbs down... sort of thing. The reason I bring this up and I don't mean to waste your time, but I saw the program on one of the logs and thought about it.

    So thank you again, it amazes me how you all can see this stuff in a way and find fixes for these problems. I see by looking over the site that many other people have this very same problem.

    I am on a home network - I am renting - where there might be up to 4 other devices on at various times. I don't know enough to be aware if their behavior would influence my computer and the settings or me them. I don't understand traffic and what is allowed in what direction but of course do not want my personal property stored on my computer stolen or just stumbled upon by them or anyone else. Thanks for your help you have my gratitude. I have followed all the instructions and I hope I got everything you need. Thank you and

    Please notice the attachment and...

    Here is the log:

    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.2.1
    Run by Owner at 10:40:50 on 2012-04-21
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.311 [GMT -7:00]
    .
    AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
    AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\IDT\WDM\sttray.exe
    C:\Program Files\AVAST Software\Avast\avastUI.exe
    C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection\adawarebp.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
    C:\Documents and Settings\Owner\Application Data\Dropbox\bin\Dropbox.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\System32\svchost.exe -k imgsvc
    C:\Program Files\UPHClean\uphclean.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.google.com
    uInternet Settings,ProxyOverride = *.local
    mURLSearchHooks: Ad-Aware Security Toolbar: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - c:\program files\adawaretb\adawareDx.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Ad-Aware Security Toolbar: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - c:\program files\adawaretb\adawareDx.dll
    BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.0 runtime\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
    TB: Ad-Aware Security Toolbar: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - c:\program files\adawaretb\adawareDx.dll
    TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
    TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
    mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
    mRun: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
    mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [Ad-Aware Browsing Protection] "c:\documents and settings\all users\application data\ad-aware browsing protection\adawarebp.exe"
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    StartupFolder: c:\docume~1\owner\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\owner\application data\dropbox\bin\Dropbox.exe
    StartupFolder: c:\docume~1\owner\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\acroba~1.lnk - c:\program files\adobe\acrobat 5.0\distillr\AcroTray.exe
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    Trusted Zone: microsoft.com\office
    DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1212714337317
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - hxxps://webdl.symantec.com/activex/symdlmgr.cab
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1212769596000
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab
    DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
    DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
    DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab
    TCP: DhcpNameServer = 192.168.1.1
    TCP: Interfaces\{77B3BB3A-0FAB-42D1-AB17-77A11E5D8029} : DhcpNameServer = 192.168.1.1
    TCP: Interfaces\{B5927AE0-655D-4A43-96BF-CDD9CFAB6835} : DhcpNameServer = 192.168.0.1
    Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
    Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll
    Notify: igfxcui - igfxdev.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\owner\application data\mozilla\firefox\profiles\119ckrol.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=utf-8&mssrc=ms_kwd&mstb=adawaretb&q=
    FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\java\jre7\bin\new_plugin\npjp2.dll
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\oracle\javafx 2.0 runtime\bin\new_plugin\npjp2.dll
    FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
    FF - plugin: c:\windows\system32\npdeployJava1.dll
    FF - plugin: c:\windows\system32\npptools.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-11-3 64512]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-6-14 612184]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-6-14 337880]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-6-14 20696]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2011-6-11 44768]
    R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2011-11-3 2152152]
    R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\lavasoft\ad-aware\kernexplorer.sys [2011-11-3 15232]
    S3 brfilt;Brother MFC Filter Driver;c:\windows\system32\drivers\BrFilt.sys [2008-6-9 2944]
    S3 BrSerWDM;Brother Serial driver;c:\windows\system32\drivers\BrSerWdm.sys [2008-6-9 61952]
    S3 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\system32\drivers\BrUsbMdm.sys [2008-6-9 11008]
    S3 BrUsbScn;Brother MFC USB Scanner driver;c:\windows\system32\drivers\BrUsbScn.sys [2008-6-9 10368]
    S3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\commonfx.sys --> c:\windows\system32\drivers\COMMONFX.SYS [?]
    S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\commonfx.sys --> c:\windows\system32\drivers\COMMONFX.SYS [?]
    S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\ct20xut.sys --> c:\windows\system32\drivers\CT20XUT.SYS [?]
    S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\ct20xut.sys --> c:\windows\system32\drivers\CT20XUT.SYS [?]
    S3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\ctaudfx.sys --> c:\windows\system32\drivers\CTAUDFX.SYS [?]
    S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\ctaudfx.sys --> c:\windows\system32\drivers\CTAUDFX.SYS [?]
    S3 CTEAPSFX.SYS;CTEAPSFX.SYS;c:\windows\system32\drivers\cteapsfx.sys --> c:\windows\system32\drivers\CTEAPSFX.SYS [?]
    S3 CTEAPSFX;CTEAPSFX;c:\windows\system32\drivers\cteapsfx.sys --> c:\windows\system32\drivers\CTEAPSFX.SYS [?]
    S3 CTEDSPFX.SYS;CTEDSPFX.SYS;c:\windows\system32\drivers\ctedspfx.sys --> c:\windows\system32\drivers\CTEDSPFX.SYS [?]
    S3 CTEDSPFX;CTEDSPFX;c:\windows\system32\drivers\ctedspfx.sys --> c:\windows\system32\drivers\CTEDSPFX.SYS [?]
    S3 CTEDSPIO.SYS;CTEDSPIO.SYS;c:\windows\system32\drivers\ctedspio.sys --> c:\windows\system32\drivers\CTEDSPIO.SYS [?]
    S3 CTEDSPIO;CTEDSPIO;c:\windows\system32\drivers\ctedspio.sys --> c:\windows\system32\drivers\CTEDSPIO.SYS [?]
    S3 CTEDSPSY.SYS;CTEDSPSY.SYS;c:\windows\system32\drivers\ctedspsy.sys --> c:\windows\system32\drivers\CTEDSPSY.SYS [?]
    S3 CTEDSPSY;CTEDSPSY;c:\windows\system32\drivers\ctedspsy.sys --> c:\windows\system32\drivers\CTEDSPSY.SYS [?]
    S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\cterfxfx.sys --> c:\windows\system32\drivers\CTERFXFX.SYS [?]
    S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\cterfxfx.sys --> c:\windows\system32\drivers\CTERFXFX.SYS [?]
    S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\ctexfifx.sys --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
    S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\ctexfifx.sys --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
    S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\cthwiut.sys --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
    S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\cthwiut.sys --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
    S3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\ctsblfx.sys --> c:\windows\system32\drivers\CTSBLFX.SYS [?]
    S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\ctsblfx.sys --> c:\windows\system32\drivers\CTSBLFX.SYS [?]
    S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;c:\windows\system32\DNINDIS5.sys [2008-6-5 17149]
    S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;c:\windows\system32\drivers\WPN111.sys [2008-6-5 362944]
    .
    =============== Created Last 30 ================
    .
    2012-04-21 02:45:47 -------- d-----w- c:\program files\PC Tools
    2012-04-21 02:30:54 185560 ----a-w- c:\windows\system32\drivers\PCTSD.sys
    2012-04-21 02:30:54 -------- d-----w- c:\program files\common files\PC Tools
    2012-04-21 02:30:10 -------- d-----w- c:\documents and settings\all users\application data\PC Tools
    2012-04-21 02:30:09 -------- d-----w- c:\documents and settings\owner\application data\TestApp
    2012-03-30 02:19:50 -------- d-----w- c:\program files\iPod
    2012-03-30 02:19:35 -------- d-----w- c:\program files\iTunes
    2012-03-26 15:41:34 103864 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
    2012-03-26 15:41:34 103864 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
    .
    ==================== Find3M ====================
    .
    2012-04-04 22:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-03-06 23:15:19 41184 ----a-w- c:\windows\avastSS.scr
    2012-03-06 23:03:51 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-03-01 11:01:32 916992 ----a-w- c:\windows\system32\wininet.dll
    2012-03-01 11:01:32 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2012-03-01 11:01:32 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2012-02-29 14:10:16 177664 ----a-w- c:\windows\system32\wintrust.dll
    2012-02-29 14:10:16 148480 ----a-w- c:\windows\system32\imagehlp.dll
    2012-02-29 12:17:40 385024 ----a-w- c:\windows\system32\html.iec
    2012-02-21 05:56:24 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-02-13 05:51:22 26112 ----a-w- c:\windows\system32\userinit.exe
    2012-02-03 09:22:18 1860096 ----a-w- c:\windows\system32\win32k.sys
    .
    ============= FINISH: 10:44:36.98 ===============

  2. #2
    Emeritus
    Join Date
    Apr 2011
    Location
    USA
    Posts
    1,038

    Default

    Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
    • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
    • The fixes are specific to your problem and should only be used for the issues on this machine.
    • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
    • It's often worth reading through these instructions and printing them for ease of reference.
    • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
    • Please reply to this thread. Do not start a new topic.


    IMPORTANT NOTE : Please do not delete anything unless instructed to.
    DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
    Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data.


    Vista and Windows 7 users:
    These tools MUST be run from the executable (.exe) every time you run them
    with Admin Rights (Right click, choose "Run as Administrator")


    Stay with this topic until I give you the all clean post.

    First we need to make all files and folders VISIBLE:

    • Go to start>control panel>folder options>view
    • Choose to "show hidden files and folders,"
    • Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes.
    • Close the window with OK

    ---------


    Please download aswMBR to your desktop.

    • Right click and Run as Administrator the aswMBR icon to run it.
    • Click the Scan button to start scan.
    • When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.



    Click the image to enlarge it
    ----------

  3. #3
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Hi Jeff,

    Thank you for taking my situation on, I really appreciate it very much!

    Right now I am having trouble getting to the download page... there is a icon to this program you mention that I downloaded a while back and I did run the scan and it said that access was denied to save it to the desktop - the default was the WINDOWS folder that has a lot of stuff in it. Not sure what to do next. Sorry I am such a pain.

    I will try again.

    Michael

  4. #4
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Yep, I am not able to connect to public.avast.com/~gmerek/aswMBR.exe. It takes a long time and when it stops trying it shows this message on Firefox:

    The connection was reset







    The connection to the server was reset while the page was loading.





    The site could be temporarily unavailable or too busy. Try again in a few
    moments.
    If you are unable to load any pages, check your computer's network
    connection.
    If your computer or network is protected by a firewall or proxy, make sure
    that Firefox is permitted to access the Web.



    The scan version I used is aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST software - this is what I had already on my computer desktop.

    Here is the log from v0.9.7.675:

    aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
    Run date: 2011-06-21 13:28:50
    -----------------------------
    13:28:50.500 OS Version: Windows 5.1.2600 Service Pack 3
    13:28:50.500 Number of processors: 2 586 0x602
    13:28:50.500 ComputerName: MICHAEL-9L4P8YF UserName: Owner
    13:28:50.968 Initialize success
    13:28:51.500 AVAST engine defs: 11062100
    13:29:56.015 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    13:29:56.015 Disk 0 Vendor: WDC_WD1600JS-19MHB0 02.01C03 Size: 152627MB BusType: 3
    13:29:58.062 Disk 0 MBR read successfully
    13:29:58.078 Disk 0 MBR scan
    13:29:58.453 Disk 0 Windows XP default MBR code
    13:30:00.484 Disk 0 scanning sectors +312560640
    13:30:00.546 Disk 0 scanning C:\WINDOWS\system32\drivers
    13:30:21.250 Service scanning
    13:30:22.468 Disk 0 trace - called modules:
    13:30:22.500 ntkrnlpa.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    13:30:22.515 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8736cab8]
    13:30:22.531 3 CLASSPNP.SYS[f760efd7] -> nt!IofCallDriver -> \Device\00000078[0x873c5f18]
    13:30:22.546 5 ACPI.sys[f7485620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x873ca350]
    13:30:23.671 AVAST engine scan C:\WINDOWS
    14:02:35.218 AVAST engine scan C:\Documents and Settings\Owner
    14:39:39.859 AVAST engine scan C:\Documents and Settings\All Users
    14:44:28.359 Scan finished successfully
    16:45:29.437 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\MBR.dat"
    16:45:29.500 The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\aswMBR.txt"


    aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
    Run date: 2012-04-21 22:01:18
    -----------------------------
    22:01:18.109 OS Version: Windows 5.1.2600 Service Pack 3
    22:01:18.109 Number of processors: 2 586 0x602
    22:01:18.109 ComputerName: MICHAEL-9L4P8YF UserName: Owner
    22:01:20.593 Initialize success
    22:01:21.062 AVAST engine defs: 12042101
    22:01:23.531 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    22:01:23.546 Disk 0 Vendor: WDC_WD1600JS-19MHB0 02.01C03 Size: 152627MB BusType: 3
    22:01:25.593 Disk 0 MBR read successfully
    22:01:25.609 Disk 0 MBR scan
    22:01:25.625 Disk 0 Windows XP default MBR code
    22:01:27.671 Disk 0 scanning sectors +312560640
    22:01:27.703 Disk 0 scanning C:\WINDOWS\system32\drivers
    22:01:49.281 Service scanning
    22:01:50.578 Disk 0 trace - called modules:
    22:01:50.593 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    22:01:50.609 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87342ab8]
    22:01:50.625 3 CLASSPNP.SYS[f760efd7] -> nt!IofCallDriver -> \Device\00000079[0x8737c0e0]
    22:01:50.656 5 ACPI.sys[f7485620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x873464d0]
    22:01:51.031 AVAST engine scan C:\WINDOWS
    22:45:09.734 AVAST engine scan C:\Documents and Settings\Owner
    22:45:19.718 File: C:\Documents and Settings\Owner\Application Data\Apple Computer\Apple Computer\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    22:51:23.875 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    22:51:24.218 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\sgpeue.dll **INFECTED** Win32:Malware-gen
    23:23:48.203 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\MBR.dat"
    23:23:48.203 The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\aswMBR.txt"

  5. #5
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Ok, what a pain I am!

    I was able to finally download the latest version and I am running the scan now...

    I will post results shortly - wow I amaze myself!

  6. #6
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Okay, there might be some redundancy but here is what the log shows...


    Thank you for your effort Jeff

    aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
    Run date: 2011-06-21 13:28:50
    -----------------------------
    13:28:50.500 OS Version: Windows 5.1.2600 Service Pack 3
    13:28:50.500 Number of processors: 2 586 0x602
    13:28:50.500 ComputerName: MICHAEL-9L4P8YF UserName: Owner
    13:28:50.968 Initialize success
    13:28:51.500 AVAST engine defs: 11062100
    13:29:56.015 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    13:29:56.015 Disk 0 Vendor: WDC_WD1600JS-19MHB0 02.01C03 Size: 152627MB BusType: 3
    13:29:58.062 Disk 0 MBR read successfully
    13:29:58.078 Disk 0 MBR scan
    13:29:58.453 Disk 0 Windows XP default MBR code
    13:30:00.484 Disk 0 scanning sectors +312560640
    13:30:00.546 Disk 0 scanning C:\WINDOWS\system32\drivers
    13:30:21.250 Service scanning
    13:30:22.468 Disk 0 trace - called modules:
    13:30:22.500 ntkrnlpa.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    13:30:22.515 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8736cab8]
    13:30:22.531 3 CLASSPNP.SYS[f760efd7] -> nt!IofCallDriver -> \Device\00000078[0x873c5f18]
    13:30:22.546 5 ACPI.sys[f7485620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x873ca350]
    13:30:23.671 AVAST engine scan C:\WINDOWS
    14:02:35.218 AVAST engine scan C:\Documents and Settings\Owner
    14:39:39.859 AVAST engine scan C:\Documents and Settings\All Users
    14:44:28.359 Scan finished successfully
    16:45:29.437 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\MBR.dat"
    16:45:29.500 The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\aswMBR.txt"


    aswMBR version 0.9.7.675 Copyright(c) 2011 AVAST Software
    Run date: 2012-04-21 22:01:18
    -----------------------------
    22:01:18.109 OS Version: Windows 5.1.2600 Service Pack 3
    22:01:18.109 Number of processors: 2 586 0x602
    22:01:18.109 ComputerName: MICHAEL-9L4P8YF UserName: Owner
    22:01:20.593 Initialize success
    22:01:21.062 AVAST engine defs: 12042101
    22:01:23.531 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    22:01:23.546 Disk 0 Vendor: WDC_WD1600JS-19MHB0 02.01C03 Size: 152627MB BusType: 3
    22:01:25.593 Disk 0 MBR read successfully
    22:01:25.609 Disk 0 MBR scan
    22:01:25.625 Disk 0 Windows XP default MBR code
    22:01:27.671 Disk 0 scanning sectors +312560640
    22:01:27.703 Disk 0 scanning C:\WINDOWS\system32\drivers
    22:01:49.281 Service scanning
    22:01:50.578 Disk 0 trace - called modules:
    22:01:50.593 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    22:01:50.609 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87342ab8]
    22:01:50.625 3 CLASSPNP.SYS[f760efd7] -> nt!IofCallDriver -> \Device\00000079[0x8737c0e0]
    22:01:50.656 5 ACPI.sys[f7485620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x873464d0]
    22:01:51.031 AVAST engine scan C:\WINDOWS
    22:45:09.734 AVAST engine scan C:\Documents and Settings\Owner
    22:45:19.718 File: C:\Documents and Settings\Owner\Application Data\Apple Computer\Apple Computer\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    22:51:23.875 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    22:51:24.218 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\sgpeue.dll **INFECTED** Win32:Malware-gen
    23:23:48.203 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\MBR.dat"
    23:23:48.203 The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\aswMBR.txt"


    aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
    Run date: 2012-04-21 23:32:19
    -----------------------------
    23:32:19.765 OS Version: Windows 5.1.2600 Service Pack 3
    23:32:19.765 Number of processors: 2 586 0x602
    23:32:19.765 ComputerName: MICHAEL-9L4P8YF UserName: Owner
    23:32:20.765 Initialize success
    23:32:21.890 AVAST engine defs: 12042101
    23:32:49.218 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
    23:32:49.218 Disk 0 Vendor: WDC_WD1600JS-19MHB0 02.01C03 Size: 152627MB BusType: 3
    23:32:49.296 Disk 0 MBR read successfully
    23:32:49.312 Disk 0 MBR scan
    23:32:49.328 Disk 0 Windows XP default MBR code
    23:32:49.375 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152617 MB offset 63
    23:32:49.406 Disk 0 scanning sectors +312560640
    23:32:49.671 Disk 0 scanning C:\WINDOWS\system32\drivers
    23:33:49.390 Service scanning
    23:34:04.953 Modules scanning
    23:34:46.875 Disk 0 trace - called modules:
    23:34:46.921 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
    23:34:46.921 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87342ab8]
    23:34:46.921 3 CLASSPNP.SYS[f760efd7] -> nt!IofCallDriver -> \Device\00000079[0x8737c0e0]
    23:34:46.921 5 ACPI.sys[f7485620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP1T0L0-e[0x873464d0]
    23:34:47.359 AVAST engine scan C:\WINDOWS
    23:36:19.984 AVAST engine scan C:\WINDOWS\system32
    23:46:58.609 AVAST engine scan C:\WINDOWS\system32\drivers
    23:48:31.062 AVAST engine scan C:\Documents and Settings\Owner
    23:48:45.796 File: C:\Documents and Settings\Owner\Application Data\Apple Computer\Apple Computer\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    23:57:58.250 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\lfbegkzq.dll **INFECTED** Win32:Malware-gen
    23:57:58.843 File: C:\Documents and Settings\Owner\Local Settings\temp\nsf43.tmp\sgpeue.dll **INFECTED** Win32:Malware-gen
    00:17:19.031 AVAST engine scan C:\Documents and Settings\All Users
    00:23:20.546 Scan finished successfully
    00:26:34.765 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Owner\Desktop\Forum help 4-21-12\MBR.dat"
    00:26:34.781 The log file has been saved successfully to "C:\Documents and Settings\Owner\Desktop\Forum help 4-21-12\aswMBR.txt"

  7. #7
    Emeritus
    Join Date
    Apr 2011
    Location
    USA
    Posts
    1,038

    Default

    Hi,


    Please read through these instructions to familarize yourself with what to expect when this tool runs

    Download ComboFix from one of these locations:

    Link 1
    Link 2

    * IMPORTANT !!! Save ComboFix.exe to your Desktop

    • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
    • Double click on ComboFix.exe & follow the prompts.
    • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.


    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


    Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



    Click on Yes, to continue scanning for malware.

    When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

    Notes:

    1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
    2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
    3. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
    4. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
    5. If after the reboot you get errors about programs being marked for deletion then reboot, that will cure it.
    ---------

  8. #8
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Hi Jeff,

    Thank you for your help!

    I got this message from the forum: The text that you have entered is too long (151499 characters). Please shorten it to 64000 characters long.

    I attached a zip version to this post and split it into three parts - I hope this is ok.

    part I

    ComboFix 12-04-22.01 - Owner 04/22/2012 12:56:22.2.2 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1014.630 [GMT -7:00]
    Running from: c:\documents and settings\Owner\Desktop\Forum help 4-21-12\ComboFix.exe
    AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
    AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\documents and settings\All Users\Application Data\TEMP
    c:\documents and settings\Owner\Recent\Thumbs.db
    c:\windows\system32\SET170.tmp
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-03-22 to 2012-04-22 )))))))))))))))))))))))))))))))
    .
    .
    2012-04-21 17:31 . 2012-04-21 17:31 -------- d-----w- c:\program files\ERUNT
    2012-04-21 02:45 . 2012-04-21 02:45 -------- d-----w- c:\program files\PC Tools
    2012-04-21 02:30 . 2012-04-21 03:23 -------- d-----w- c:\program files\Common Files\PC Tools
    2012-04-21 02:30 . 2012-02-24 17:36 185560 ----a-w- c:\windows\system32\drivers\PCTSD.sys
    2012-04-21 02:30 . 2012-04-21 03:01 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
    2012-04-21 02:30 . 2012-04-21 02:30 -------- d-----w- c:\documents and settings\Owner\Application Data\TestApp
    2012-03-30 02:19 . 2012-03-30 02:19 -------- d-----w- c:\program files\iPod
    2012-03-30 02:19 . 2012-03-30 02:20 -------- d-----w- c:\program files\iTunes
    2012-03-26 15:41 . 2012-03-26 15:41 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
    2012-03-26 15:41 . 2012-03-26 15:41 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-04-04 22:56 . 2010-12-27 09:19 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-03-06 23:15 . 2011-06-11 12:26 41184 ----a-w- c:\windows\avastSS.scr
    2012-03-06 23:15 . 2011-06-11 12:26 201352 ----a-w- c:\windows\system32\aswBoot.exe
    2012-03-06 23:03 . 2011-06-14 22:17 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-03-06 23:03 . 2011-06-14 22:17 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2012-03-06 23:02 . 2011-06-14 22:17 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2012-03-06 23:01 . 2011-06-14 22:17 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2012-03-06 23:01 . 2011-06-14 22:17 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
    2012-03-06 23:01 . 2011-06-14 22:17 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
    2012-03-06 23:01 . 2011-06-14 22:17 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2012-03-06 22:58 . 2011-06-14 22:17 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
    2012-03-01 11:01 . 2002-08-29 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
    2012-03-01 11:01 . 2002-08-29 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2012-03-01 11:01 . 2002-08-29 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2012-02-29 14:10 . 2002-08-29 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
    2012-02-29 14:10 . 2002-08-29 12:00 148480 ----a-w- c:\windows\system32\imagehlp.dll
    2012-02-29 12:17 . 2004-08-04 05:59 385024 ----a-w- c:\windows\system32\html.iec
    2012-02-21 05:56 . 2011-05-14 00:41 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-02-13 05:51 . 2002-08-29 12:00 26112 ----a-w- c:\windows\system32\userinit.exe
    2012-02-03 09:22 . 2002-08-29 12:00 1860096 ----a-w- c:\windows\system32\win32k.sys
    2012-03-18 20:06 . 2011-03-23 18:04 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-06-21_19.41.35 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2012-04-22 19:23 . 2012-04-22 19:23 16384 c:\windows\Temp\Perflib_Perfdata_7ac.dat
    + 2007-01-29 08:58 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
    - 2007-01-29 08:58 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
    + 2002-08-29 12:00 . 2012-04-12 13:14 72332 c:\windows\system32\perfc009.dat
    + 2002-08-29 12:00 . 2011-11-18 12:35 60416 c:\windows\system32\packager.exe
    + 2002-08-29 12:00 . 2011-09-26 18:41 20480 c:\windows\system32\oleaccrc.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 66560 c:\windows\system32\mshtmled.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 66560 c:\windows\system32\mshtmled.dll
    - 2007-08-14 01:54 . 2011-04-25 16:11 55296 c:\windows\system32\msfeedsbs.dll
    + 2007-08-14 01:54 . 2012-03-01 11:01 55296 c:\windows\system32\msfeedsbs.dll
    - 2002-08-29 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
    + 2002-08-29 12:00 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 25600 c:\windows\system32\jsproxy.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 25600 c:\windows\system32\jsproxy.dll
    + 2012-03-30 02:13 . 2012-02-15 18:01 43520 c:\windows\system32\DRVSTORE\usbaapl_87F84F5DA3368BC69CA5BE7F6A79CAA709E36E13\usbaapl.sys
    + 2011-10-14 03:29 . 2011-05-10 15:06 18432 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\netaapl.sys
    + 2002-08-29 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
    - 2011-06-10 23:41 . 2011-05-25 09:00 64512 c:\windows\system32\drivers\Lbd.sys
    + 2011-11-03 20:06 . 2011-11-03 20:06 64512 c:\windows\system32\drivers\Lbd.sys
    + 2011-08-31 06:05 . 2011-08-31 06:05 73064 c:\windows\system32\dnssd.dll
    + 2011-08-31 06:05 . 2011-08-31 06:05 83816 c:\windows\system32\dns-sd.exe
    - 2009-06-10 03:19 . 2011-04-25 16:11 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2009-06-10 03:19 . 2012-03-01 11:01 12800 c:\windows\system32\dllcache\xpshims.dll
    + 2002-08-29 12:00 . 2011-11-18 12:35 60416 c:\windows\system32\dllcache\packager.exe
    + 2002-08-29 12:00 . 2011-09-26 18:41 20480 c:\windows\system32\dllcache\oleaccrc.dll
    + 2011-08-11 06:26 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
    + 2007-01-04 13:36 . 2012-03-01 11:01 66560 c:\windows\system32\dllcache\mshtmled.dll
    - 2007-01-04 13:36 . 2011-04-25 16:11 66560 c:\windows\system32\dllcache\mshtmled.dll
    + 2008-06-06 03:30 . 2012-03-01 11:01 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    - 2008-06-06 03:30 . 2011-04-25 16:11 55296 c:\windows\system32\dllcache\msfeedsbs.dll
    + 2002-08-29 12:00 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
    - 2002-08-29 12:00 . 2008-04-14 00:11 23040 c:\windows\system32\dllcache\mciseq.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 43520 c:\windows\system32\dllcache\licmgr10.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 25600 c:\windows\system32\dllcache\jsproxy.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 25600 c:\windows\system32\dllcache\jsproxy.dll
    + 2009-12-14 07:08 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
    - 2009-12-14 07:08 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
    + 2002-08-29 12:00 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
    - 2002-08-29 12:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll
    + 2008-06-05 23:52 . 2012-04-16 06:34 81920 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2008-06-05 23:52 . 2011-06-21 18:49 81920 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2008-06-05 23:52 . 2011-06-21 18:49 49152 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-06-05 23:52 . 2012-04-16 06:34 49152 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2011-06-23 22:00 . 2012-04-16 06:34 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2011-12-25 11:49 . 2011-12-25 11:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    - 2010-09-23 22:55 . 2010-09-23 22:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    + 2011-12-25 19:07 . 2011-12-25 19:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
    + 2011-12-25 06:55 . 2011-12-25 06:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2010-09-23 09:26 . 2010-09-23 09:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
    - 2010-09-23 09:26 . 2010-09-23 09:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2011-12-25 06:55 . 2011-12-25 06:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
    + 2011-12-25 06:55 . 2011-12-25 06:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    - 2010-09-23 09:26 . 2010-09-23 09:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
    - 2010-09-23 10:17 . 2010-09-23 10:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    + 2011-12-25 07:49 . 2011-12-25 07:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
    - 2010-09-23 10:17 . 2010-09-23 10:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2011-12-25 07:49 . 2011-12-25 07:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
    + 2011-06-29 03:12 . 2011-06-29 03:12 19968 c:\windows\Installer\42f2dc1.msi
    - 2011-06-18 08:16 . 2011-06-18 08:16 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
    + 2011-12-14 05:38 . 2011-12-14 05:38 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 23040 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 23040 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 27136 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 27136 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 11264 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 11264 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 12288 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 12288 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2011-07-09 10:40 . 2011-07-09 10:40 25214 c:\windows\Installer\{7D15B945-2725-4443-AB3F-D900556612FE}\_6FEFF9B68218417F98F549.exe
    + 2011-10-08 01:02 . 2011-10-08 01:02 27136 c:\windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe
    + 2012-02-02 03:48 . 2012-02-02 03:48 75656 c:\windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\ProductName.chm.de_D066A77819B7480BA99CC79FB02C9357.exe
    + 2012-02-02 03:48 . 2012-02-02 03:48 75656 c:\windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\DriverDetective.pt_6CF114D33913468CBA2AA6967939B819.exe
    + 2012-02-02 03:48 . 2012-02-02 03:48 75656 c:\windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\DriverDetective.it_251B66F1CA924E82A1EE29E85D5EC5A1.exe
    + 2012-02-02 03:48 . 2012-02-02 03:48 75656 c:\windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\DriverDetective.fr_E1678746353A46E3A9150D3E8B3832B1.exe
    + 2012-02-02 03:48 . 2012-02-02 03:48 75656 c:\windows\Installer\{686695ED-BB3F-415D-B0DB-18CF535F7B50}\DriverDetective.es_654C8EA5162D4D4084239A5EDD67F462.exe
    + 2012-01-03 17:45 . 2012-01-03 17:45 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\ViewerPS.dll
    + 2012-01-04 06:51 . 2012-01-04 06:51 37296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\reader_sl.exe
    + 2012-01-03 17:44 . 2012-01-03 17:44 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\PDFPrevHndlr.dll
    + 2012-01-04 06:15 . 2012-01-04 06:15 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\eula.exe
    + 2012-01-04 05:52 . 2012-01-04 05:52 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acrotextextractor.exe
    + 2012-01-03 16:19 . 2012-01-03 16:19 16824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32Info.exe
    + 2012-01-03 16:16 . 2012-01-03 16:16 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acroiehelpershim.dll
    + 2012-01-03 16:16 . 2012-01-03 16:16 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroIEHelper.dll
    + 2012-04-12 13:20 . 2011-12-17 19:46 12800 c:\windows\ie8updates\KB2675157-IE8\xpshims.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 66560 c:\windows\ie8updates\KB2675157-IE8\mshtmled.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 55296 c:\windows\ie8updates\KB2675157-IE8\msfeedsbs.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 43520 c:\windows\ie8updates\KB2675157-IE8\licmgr10.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 25600 c:\windows\ie8updates\KB2675157-IE8\jsproxy.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 12800 c:\windows\ie8updates\KB2647516-IE8\xpshims.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 66560 c:\windows\ie8updates\KB2647516-IE8\mshtmled.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 55296 c:\windows\ie8updates\KB2647516-IE8\msfeedsbs.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 43520 c:\windows\ie8updates\KB2647516-IE8\licmgr10.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 25600 c:\windows\ie8updates\KB2647516-IE8\jsproxy.dll
    + 2011-12-14 05:39 . 2011-08-22 23:48 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 43520 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll
    + 2012-01-08 22:11 . 2012-01-08 22:11 81920 c:\windows\assembly\tmp\AD6DGJMB\System.Drawing.Design.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_adccf198\System.Drawing.Design.dll
    + 2012-04-12 13:17 . 2012-04-12 13:17 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_4ba78832\System.Drawing.Design.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7ce43d99\CustomMarshalers.dll
    + 2011-10-13 05:34 . 2011-10-13 05:34 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
    + 2012-02-16 20:52 . 2012-02-16 20:52 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\dab766b18e6fe0a8f53a93c56be7b40e\System.Windows.Presentation.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\36124bfc4baaa1c2063d699e77324080\System.Web.DynamicData.Design.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\89dfd3999ad1d72c59243d7b4bf40d5a\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-10-13 08:28 . 2011-10-13 08:28 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
    + 2012-02-16 19:39 . 2012-02-16 19:39 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3aa4296d4aa01fe0533de2c15f818d5f\PresentationFontCache.ni.exe
    + 2012-02-16 19:39 . 2012-02-16 19:39 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\820acb71782d9cd006800b3ac7e1ca53\PresentationCFFRasterizer.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\d07f0222f62dbed7898a6e2e909d407a\Microsoft.Vsa.ni.dll
    + 2011-10-13 08:28 . 2011-10-13 08:28 30208 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\9855d3fb15e6c63a811b1f0b66d78428\Microsoft.PowerShell.Commands.Utility.resources.ni.dll
    + 2011-10-13 08:28 . 2011-10-13 08:28 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\7618f444d33b1311e952ba9285e4a4b2\Microsoft.PowerShell.Security.resources.ni.dll
    + 2011-10-13 07:12 . 2011-10-13 07:12 19456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1b23e2c0707d81e7eb14f78552562635\Microsoft.PowerShell.Commands.Management.resources.ni.dll
    + 2011-10-13 08:28 . 2011-10-13 08:28 35328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\05bbffbe100ede49139819641a41dfda\Microsoft.PowerShell.ConsoleHost.resources.ni.dll
    + 2011-10-13 07:11 . 2011-10-13 07:11 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
    + 2011-10-13 07:11 . 2011-10-13 07:11 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll
    + 2011-10-13 07:11 . 2011-10-13 07:11 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe
    + 2011-10-13 06:55 . 2011-10-13 06:55 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2012-04-12 13:12 . 2012-04-12 13:12 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2010-10-07 21:20 . 2010-10-07 21:20 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-12-14 05:37 . 2011-07-08 13:49 46080 c:\windows\$NtUninstallKB2633952$\tzchange.exe
    + 2011-12-14 05:37 . 2011-11-08 14:58 16896 c:\windows\$NtUninstallKB2633952$\spuninst\tzchange.dll
    + 2011-12-14 05:37 . 2011-04-26 11:07 33280 c:\windows\$NtUninstallKB2620712$\csrsrv.dll
    + 2012-01-14 01:29 . 2008-04-14 00:11 23040 c:\windows\$NtUninstallKB2598479$\mciseq.dll
    + 2012-01-14 01:29 . 2008-04-14 00:12 58368 c:\windows\$NtUninstallKB2584146$\packager.exe
    + 2011-08-27 23:30 . 2010-11-03 13:12 46080 c:\windows\$NtUninstallKB2570791$\tzchange.exe
    + 2011-08-27 23:30 . 2011-07-09 00:32 16896 c:\windows\$NtUninstallKB2570791$\spuninst\tzchange.dll
    + 2011-08-11 06:55 . 2008-04-13 18:57 10112 c:\windows\$NtUninstallKB2566454$\ndistapi.sys
    + 2011-10-13 05:30 . 2002-08-29 12:00 16896 c:\windows\$NtUninstallKB2564958$\oleaccrc.dll
    + 2011-07-13 06:16 . 2010-12-09 14:30 33280 c:\windows\$NtUninstallKB2507938$\csrsrv.dll
    + 2012-02-16 19:23 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2661637\update\spcustom.dll
    + 2012-02-16 19:23 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2661637\spmsg.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2660465\update\spcustom.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2660465\spmsg.dll
    + 2012-03-15 04:12 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2647518\update\spcustom.dll
    + 2012-03-15 04:12 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2647518\spmsg.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2647516-IE8\update\spcustom.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2647516-IE8\spmsg.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 12800 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\xpshims.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 66560 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mshtmled.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 55296 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\msfeedsbs.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 43520 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\licmgr10.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 25600 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\jsproxy.dll
    + 2012-01-14 01:37 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2646524\update\spcustom.dll
    + 2012-01-14 01:37 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2646524\spmsg.dll
    + 2011-11-12 22:01 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2641690\update\spcustom.dll
    + 2011-11-12 22:01 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2641690\spmsg.dll
    + 2012-03-15 04:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2641653\update\spcustom.dll
    + 2012-03-15 04:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2641653\spmsg.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2639417\update\spcustom.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2639417\spmsg.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2633171\update\spcustom.dll
    + 2011-12-14 05:29 . 2011-10-26 10:50 16896 c:\windows\$hf_mig$\KB2633171\update\mpsyschk.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2633171\spmsg.dll
    + 2012-01-14 01:36 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2631813\update\spcustom.dll
    + 2012-01-14 01:36 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2631813\spmsg.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2624667\update\spcustom.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2624667\spmsg.dll
    + 2012-03-15 04:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2621440\update\spcustom.dll
    + 2012-03-15 04:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2621440\spmsg.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2620712\update\spcustom.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2620712\spmsg.dll
    + 2011-10-28 05:31 . 2011-10-28 05:31 33280 c:\windows\$hf_mig$\KB2620712\SP3QFE\csrsrv.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2619339\update\spcustom.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2619339\spmsg.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2618451\update\spcustom.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2618451\spmsg.dll
    + 2011-12-14 05:39 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2618444-IE8\update\spcustom.dll
    + 2011-12-14 05:39 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2618444-IE8\spmsg.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 12800 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\xpshims.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 66560 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtmled.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 55296 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeedsbs.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 43520 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\licmgr10.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 25600 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\jsproxy.dll
    + 2011-09-16 04:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll
    + 2011-09-16 04:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2616676\spmsg.dll
    + 2011-09-06 23:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll
    + 2011-09-06 23:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2607712\spmsg.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2603381\update\spcustom.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2603381\spmsg.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2598479\update\spcustom.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2598479\spmsg.dll
    + 2011-10-14 14:45 . 2011-10-14 14:45 23040 c:\windows\$hf_mig$\KB2598479\SP3QFE\mciseq.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2592799\spmsg.dll
    + 2011-10-13 05:22 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll
    + 2011-10-13 05:22 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll
    + 2012-01-22 23:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2585542\update\spcustom.dll
    + 2012-01-22 23:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2585542\spmsg.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2584146\update\spcustom.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2584146\spmsg.dll
    + 2011-11-18 12:41 . 2011-11-18 12:41 60416 c:\windows\$hf_mig$\KB2584146\SP3QFE\packager.exe
    + 2011-09-16 04:12 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll
    + 2011-09-16 04:12 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570947\spmsg.dll
    + 2011-08-11 06:58 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll
    + 2011-08-11 06:58 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570222\spmsg.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567680\spmsg.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2566454\spmsg.dll
    + 2011-08-11 06:26 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys
    + 2011-08-11 06:55 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2562937\spmsg.dll
    + 2011-08-12 18:45 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll
    + 2011-08-12 18:45 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll
    + 2011-07-13 06:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll
    + 2011-07-13 06:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2555917\spmsg.dll
    + 2011-11-10 07:44 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893-v2\update\spcustom.dll
    + 2011-11-10 07:44 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893-v2\spmsg.dll
    + 2011-06-29 03:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll
    + 2011-06-29 03:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2541763\spmsg.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll
    + 2011-07-13 06:16 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll
    + 2011-07-13 06:16 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507938\spmsg.dll
    + 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2012-02-16 14:37 . 2012-01-11 19:06 3072 c:\windows\system32\iacenc.dll
    + 2012-02-16 14:37 . 2012-01-11 19:06 3072 c:\windows\system32\dllcache\iacenc.dll
    + 2008-06-06 15:54 . 2012-04-12 13:04 4096 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 4096 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2011-06-18 08:20 . 2011-06-18 08:20 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2012-02-16 14:37 . 2012-01-11 19:05 3072 c:\windows\$hf_mig$\KB2661637\SP3QFE\iacenc.dll
    + 2012-01-11 19:18 . 2011-11-03 18:17 4608 c:\windows\$hf_mig$\KB2603381\update\customaddreg.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    - 2009-07-12 07:02 . 2009-07-12 07:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    + 2009-07-12 08:02 . 2009-07-12 08:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
    - 2009-07-12 07:02 . 2009-07-12 07:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-12 08:02 . 2009-07-12 08:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
    + 2009-07-12 08:05 . 2009-07-12 08:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    - 2009-07-12 07:05 . 2009-07-12 07:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
    + 2009-07-12 08:02 . 2009-07-12 08:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    - 2009-07-12 07:02 . 2009-07-12 07:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
    + 2009-07-12 06:11 . 2009-07-12 06:11 624448 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcr90.dll
    - 2009-07-12 05:11 . 2009-07-12 05:11 624448 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcr90.dll
    + 2009-07-12 06:11 . 2009-07-12 06:11 853312 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcp90.dll
    - 2009-07-12 05:11 . 2009-07-12 05:11 853312 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcp90.dll
    + 2009-07-12 06:14 . 2009-07-12 06:14 245760 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcm90.dll
    - 2009-07-12 05:14 . 2009-07-12 05:14 245760 c:\windows\WinSxS\amd64_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_069f922e\msvcm90.dll
    + 2009-07-12 06:11 . 2009-07-12 06:11 176456 c:\windows\WinSxS\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_673f7fa2\atl90.dll
    - 2009-07-12 05:11 . 2009-07-12 05:11 176456 c:\windows\WinSxS\amd64_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_673f7fa2\atl90.dll
    + 2002-08-29 12:00 . 2011-11-25 21:57 293376 c:\windows\system32\winsrv.dll
    - 2002-08-29 12:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll
    - 2002-08-29 12:00 . 2008-04-14 00:12 176128 c:\windows\system32\winmm.dll
    + 2002-08-29 12:00 . 2011-10-14 14:47 176128 c:\windows\system32\winmm.dll
    + 2008-06-06 01:10 . 2011-11-16 14:21 354816 c:\windows\system32\winhttp.dll
    - 2008-06-06 01:10 . 2009-08-25 09:17 354816 c:\windows\system32\winhttp.dll
    - 2002-08-29 12:00 . 2009-03-08 11:34 105984 c:\windows\system32\url.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 105984 c:\windows\system32\url.dll
    + 2008-07-30 02:59 . 2011-09-26 18:41 611328 c:\windows\system32\uiautomationcore.dll
    + 2002-08-29 12:00 . 2011-11-16 14:21 152064 c:\windows\system32\schannel.dll
    + 2002-08-29 12:00 . 2011-11-03 15:28 386048 c:\windows\system32\qdvd.dll
    - 2002-08-29 12:00 . 2008-04-14 00:12 386048 c:\windows\system32\qdvd.dll
    + 2002-08-29 12:00 . 2012-04-12 13:14 444456 c:\windows\system32\perfh009.dat
    + 2002-08-29 12:00 . 2011-09-26 18:41 220160 c:\windows\system32\oleacc.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 206848 c:\windows\system32\occache.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 206848 c:\windows\system32\occache.dll
    + 2012-01-27 08:33 . 2011-11-09 03:56 637848 c:\windows\system32\npdeployJava1.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 611840 c:\windows\system32\mstime.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 611840 c:\windows\system32\mstime.dll
    - 2007-08-14 01:54 . 2011-04-25 16:11 602112 c:\windows\system32\msfeeds.dll
    + 2007-08-14 01:54 . 2012-03-01 11:01 602112 c:\windows\system32\msfeeds.dll
    + 2012-02-21 05:56 . 2012-02-21 05:56 250016 c:\windows\system32\Macromed\Flash\FlashUtil11f_Plugin.exe
    + 2011-11-14 19:20 . 2011-11-14 19:20 247968 c:\windows\system32\Macromed\Flash\FlashUtil11e_Plugin.exe
    + 2012-01-27 08:33 . 2011-11-09 03:56 223112 c:\windows\system32\javaws.exe
    + 2012-01-27 08:33 . 2012-01-27 08:33 173960 c:\windows\system32\javaw.exe
    + 2012-01-27 08:33 . 2012-01-27 08:33 173960 c:\windows\system32\java.exe
    - 2008-06-05 23:49 . 2011-05-02 15:31 692736 c:\windows\system32\inetcomm.dll
    + 2008-06-05 23:49 . 2011-10-10 14:22 692736 c:\windows\system32\inetcomm.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 184320 c:\windows\system32\iepeers.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 184320 c:\windows\system32\iepeers.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 387584 c:\windows\system32\iedkcs32.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 387584 c:\windows\system32\iedkcs32.dll
    + 2002-08-29 12:00 . 2012-02-29 12:17 174080 c:\windows\system32\ie4uinit.exe
    - 2008-06-05 16:06 . 2011-04-15 05:20 153976 c:\windows\system32\FNTCACHE.DAT
    + 2008-06-05 16:06 . 2012-03-15 08:58 153976 c:\windows\system32\FNTCACHE.DAT
    - 2002-08-29 12:00 . 2011-02-09 13:53 186880 c:\windows\system32\encdec.dll
    + 2002-08-29 12:00 . 2011-10-18 11:13 186880 c:\windows\system32\encdec.dll
    + 2010-07-07 05:35 . 2011-07-01 00:04 101720 c:\windows\system32\drivers\SBREDrv.sys
    + 2008-06-05 23:47 . 2012-01-09 16:20 139784 c:\windows\system32\drivers\rdpwd.sys
    + 2002-08-29 12:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys
    - 2002-08-29 12:00 . 2011-04-29 16:19 456320 c:\windows\system32\drivers\mrxsmb.sys
    - 2002-08-29 12:00 . 2011-02-16 13:22 138496 c:\windows\system32\drivers\afd.sys
    + 2002-08-29 12:00 . 2011-08-17 13:49 138496 c:\windows\system32\drivers\afd.sys
    - 2009-12-24 06:59 . 2009-12-24 06:59 177664 c:\windows\system32\dllcache\wintrust.dll
    + 2009-12-24 06:59 . 2012-02-29 14:10 177664 c:\windows\system32\dllcache\wintrust.dll
    - 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2010-06-18 17:45 . 2011-11-25 21:57 293376 c:\windows\system32\dllcache\winsrv.dll
    + 2011-10-14 14:47 . 2011-10-14 14:47 176128 c:\windows\system32\dllcache\winmm.dll
    + 2007-01-04 13:37 . 2012-03-01 11:01 916992 c:\windows\system32\dllcache\wininet.dll
    - 2008-12-16 12:30 . 2009-08-25 09:17 354816 c:\windows\system32\dllcache\winhttp.dll
    + 2008-12-16 12:30 . 2011-11-16 14:21 354816 c:\windows\system32\dllcache\winhttp.dll
    - 2007-08-14 01:44 . 2009-03-08 11:34 105984 c:\windows\system32\dllcache\url.dll
    + 2007-08-14 01:44 . 2012-03-01 11:01 105984 c:\windows\system32\dllcache\url.dll
    + 2008-12-05 06:54 . 2011-11-16 14:21 152064 c:\windows\system32\dllcache\schannel.dll
    + 2011-08-11 06:27 . 2012-01-09 16:20 139784 c:\windows\system32\dllcache\rdpwd.sys
    + 2002-08-29 12:00 . 2011-11-03 15:28 386048 c:\windows\system32\dllcache\qdvd.dll
    - 2002-08-29 12:00 . 2008-04-14 00:12 386048 c:\windows\system32\dllcache\qdvd.dll
    + 2002-08-29 12:00 . 2011-09-26 18:41 220160 c:\windows\system32\dllcache\oleacc.dll
    - 2007-08-14 01:44 . 2011-04-25 16:11 206848 c:\windows\system32\dllcache\occache.dll
    + 2007-08-14 01:44 . 2012-03-01 11:01 206848 c:\windows\system32\dllcache\occache.dll
    - 2002-08-29 12:00 . 2011-04-25 16:11 611840 c:\windows\system32\dllcache\mstime.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 611840 c:\windows\system32\dllcache\mstime.dll
    + 2008-06-06 03:30 . 2012-03-01 11:01 602112 c:\windows\system32\dllcache\msfeeds.dll
    - 2008-06-06 03:30 . 2011-04-25 16:11 602112 c:\windows\system32\dllcache\msfeeds.dll
    + 2008-11-12 02:10 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys
    - 2008-11-12 02:10 . 2011-04-29 16:19 456320 c:\windows\system32\dllcache\mrxsmb.sys
    + 2008-08-13 06:37 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
    - 2008-08-13 06:37 . 2011-05-02 15:31 692736 c:\windows\system32\dllcache\inetcomm.dll
    + 2012-02-29 14:10 . 2012-02-29 14:10 148480 c:\windows\system32\dllcache\imagehlp.dll
    + 2009-06-10 03:19 . 2012-03-01 11:01 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2009-06-10 03:19 . 2011-04-25 16:11 247808 c:\windows\system32\dllcache\ieproxy.dll
    - 2007-01-04 13:36 . 2011-04-25 16:11 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2007-01-04 13:36 . 2012-03-01 11:01 184320 c:\windows\system32\dllcache\iepeers.dll
    + 2010-06-14 16:10 . 2012-03-01 11:01 743424 c:\windows\system32\dllcache\iedvtool.dll
    - 2010-06-14 16:10 . 2011-04-25 16:11 743424 c:\windows\system32\dllcache\iedvtool.dll
    - 2007-08-14 01:39 . 2011-04-25 16:11 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2007-08-14 01:39 . 2012-03-01 11:01 387584 c:\windows\system32\dllcache\iedkcs32.dll
    + 2007-08-14 01:39 . 2012-02-29 12:17 174080 c:\windows\system32\dllcache\ie4uinit.exe
    - 2002-08-29 12:00 . 2011-02-09 13:53 186880 c:\windows\system32\dllcache\encdec.dll
    + 2002-08-29 12:00 . 2011-10-18 11:13 186880 c:\windows\system32\dllcache\encdec.dll
    + 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
    - 2008-06-20 11:40 . 2011-02-16 13:22 138496 c:\windows\system32\dllcache\afd.sys
    + 2008-06-20 11:40 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
    + 2011-06-22 02:10 . 2011-11-09 03:56 567184 c:\windows\system32\deployJava1.dll
    + 2011-09-19 00:03 . 2011-09-19 00:03 262144 c:\windows\system32\default_user_class.dat
    - 2002-08-29 12:00 . 2008-04-14 00:11 599040 c:\windows\system32\crypt32.dll
    + 2002-08-29 12:00 . 2011-09-28 07:06 599040 c:\windows\system32\crypt32.dll

  9. #9
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Part II

    + 2011-12-25 11:49 . 2011-12-25 11:49 436496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2012-01-31 10:38 . 2012-01-31 10:38 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2011-03-25 13:15 . 2011-03-25 13:15 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-07-07 12:18 . 2011-07-07 12:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-07-07 12:18 . 2011-07-07 12:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2011-03-25 13:15 . 2011-03-25 13:15 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2012-01-28 00:35 . 2012-01-28 00:35 471040 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
    + 2011-12-25 06:55 . 2011-12-25 06:55 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2010-09-23 09:26 . 2010-09-23 09:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
    - 2010-09-23 09:25 . 2010-09-23 09:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2011-12-25 06:53 . 2011-12-25 06:53 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
    + 2011-12-25 07:49 . 2011-12-25 07:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    - 2010-09-23 10:17 . 2010-09-23 10:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
    + 2012-02-03 06:56 . 2012-02-03 06:56 963584 c:\windows\Installer\a75c4.msp
    + 2011-12-25 13:40 . 2011-12-25 13:40 819200 c:\windows\Installer\802256.msp
    + 2011-06-22 03:11 . 2011-06-22 03:11 261632 c:\windows\Installer\35e02f.msi
    + 2012-01-27 08:37 . 2012-01-27 08:37 101376 c:\windows\Installer\35843cc.msi
    + 2012-01-27 08:37 . 2012-01-27 08:37 375808 c:\windows\Installer\35843c8.msi
    + 2012-01-27 08:35 . 2012-01-27 08:35 176128 c:\windows\Installer\35843c4.msi
    + 2012-01-27 08:32 . 2012-01-27 08:32 938496 c:\windows\Installer\35843b6.msi
    + 2012-01-27 08:24 . 2012-01-27 08:24 519168 c:\windows\Installer\35843af.msi
    + 2012-04-21 17:00 . 2012-04-21 17:00 552448 c:\windows\Installer\24d783.msi
    + 2011-06-22 02:10 . 2011-06-22 02:10 677376 c:\windows\Installer\18f3647.msi
    - 2008-06-06 15:54 . 2011-06-18 08:14 409600 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 409600 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 286720 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 286720 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 249856 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 249856 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 794624 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 794624 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2008-06-06 15:54 . 2011-06-18 08:14 135168 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-06-06 15:54 . 2012-04-12 13:04 135168 c:\windows\Installer\{91120409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2012-03-30 02:22 . 2012-03-30 02:22 380928 c:\windows\Installer\{23B8A91D-680B-462B-87AD-3D70F7341731}\iTunesIco.exe
    + 2012-01-03 16:23 . 2012-01-03 16:23 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\pdfshell.dll
    + 2012-01-03 17:44 . 2012-01-03 17:44 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\PDFPrevHndlrShim.exe
    + 2012-01-03 16:22 . 2012-01-03 16:22 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\nppdf32.dll
    + 2012-01-03 17:43 . 2012-01-03 17:43 550360 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AdobeCollabSync.exe
    + 2012-01-03 16:40 . 2012-01-03 16:40 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRdIF.dll
    + 2012-01-04 06:50 . 2012-01-04 06:50 357808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32.exe
    + 2012-01-03 16:16 . 2012-01-03 16:16 665008 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroPDF.dll
    + 2012-01-03 17:38 . 2012-01-03 17:38 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acrobroker.exe
    + 2012-01-03 17:08 . 2012-01-03 17:08 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\a3dutility.exe
    + 2011-01-14 14:10 . 2011-01-14 14:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL
    + 2011-01-14 14:10 . 2011-01-14 14:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL
    + 2012-04-12 13:19 . 2011-12-17 19:46 916992 c:\windows\ie8updates\KB2675157-IE8\wininet.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 105984 c:\windows\ie8updates\KB2675157-IE8\url.dll
    + 2012-04-12 13:20 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2675157-IE8\spuninst\updspapi.dll
    + 2012-04-12 13:20 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2675157-IE8\spuninst\spuninst.exe
    + 2012-04-12 13:19 . 2011-12-17 19:46 206848 c:\windows\ie8updates\KB2675157-IE8\occache.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 611840 c:\windows\ie8updates\KB2675157-IE8\mstime.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 602112 c:\windows\ie8updates\KB2675157-IE8\msfeeds.dll
    + 2012-04-12 13:20 . 2011-12-17 19:46 247808 c:\windows\ie8updates\KB2675157-IE8\ieproxy.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 184320 c:\windows\ie8updates\KB2675157-IE8\iepeers.dll
    + 2012-04-12 13:20 . 2011-12-17 19:46 743424 c:\windows\ie8updates\KB2675157-IE8\iedvtool.dll
    + 2012-04-12 13:20 . 2011-12-17 19:46 387584 c:\windows\ie8updates\KB2675157-IE8\iedkcs32.dll
    + 2012-04-12 13:20 . 2011-12-16 12:23 174080 c:\windows\ie8updates\KB2675157-IE8\ie4uinit.exe
    + 2012-02-16 19:25 . 2011-11-04 19:20 916992 c:\windows\ie8updates\KB2647516-IE8\wininet.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 105984 c:\windows\ie8updates\KB2647516-IE8\url.dll
    + 2012-02-16 19:25 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2647516-IE8\spuninst\updspapi.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2647516-IE8\spuninst\spuninst.exe
    + 2012-02-16 19:25 . 2011-11-04 19:20 206848 c:\windows\ie8updates\KB2647516-IE8\occache.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 611840 c:\windows\ie8updates\KB2647516-IE8\mstime.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 602112 c:\windows\ie8updates\KB2647516-IE8\msfeeds.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 247808 c:\windows\ie8updates\KB2647516-IE8\ieproxy.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 184320 c:\windows\ie8updates\KB2647516-IE8\iepeers.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 743424 c:\windows\ie8updates\KB2647516-IE8\iedvtool.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 387584 c:\windows\ie8updates\KB2647516-IE8\iedkcs32.dll
    + 2012-02-16 19:25 . 2011-11-04 11:24 174080 c:\windows\ie8updates\KB2647516-IE8\ie4uinit.exe
    + 2011-12-14 05:38 . 2011-08-22 23:48 916480 c:\windows\ie8updates\KB2618444-IE8\wininet.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 105984 c:\windows\ie8updates\KB2618444-IE8\url.dll
    + 2011-12-14 05:39 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2618444-IE8\spuninst\updspapi.dll
    + 2011-12-14 05:39 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2618444-IE8\spuninst\spuninst.exe
    + 2011-12-14 05:38 . 2011-08-22 23:48 206848 c:\windows\ie8updates\KB2618444-IE8\occache.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 611840 c:\windows\ie8updates\KB2618444-IE8\mstime.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 602112 c:\windows\ie8updates\KB2618444-IE8\msfeeds.dll
    + 2011-12-14 05:39 . 2011-08-22 23:48 247808 c:\windows\ie8updates\KB2618444-IE8\ieproxy.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 184320 c:\windows\ie8updates\KB2618444-IE8\iepeers.dll
    + 2011-12-14 05:39 . 2011-08-22 23:48 743424 c:\windows\ie8updates\KB2618444-IE8\iedvtool.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 387584 c:\windows\ie8updates\KB2618444-IE8\iedkcs32.dll
    + 2011-12-14 05:38 . 2011-08-22 11:56 174080 c:\windows\ie8updates\KB2618444-IE8\ie4uinit.exe
    + 2011-10-13 05:22 . 2011-06-23 18:36 916480 c:\windows\ie8updates\KB2586448-IE8\wininet.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll
    + 2011-10-13 05:22 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll
    + 2011-10-13 05:22 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe
    + 2011-10-13 05:22 . 2011-06-23 18:36 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll
    + 2011-10-13 05:22 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe
    + 2011-08-12 18:45 . 2011-04-25 16:11 916480 c:\windows\ie8updates\KB2559049-IE8\wininet.dll
    + 2011-08-12 18:45 . 2009-03-08 11:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll
    + 2011-08-12 18:45 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll
    + 2011-08-12 18:45 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe
    + 2011-08-12 18:45 . 2011-04-25 16:11 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll
    + 2011-08-12 18:45 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe
    + 2012-04-22 19:27 . 2012-04-22 19:27 311296 c:\windows\ERDNT\AutoBackup\4-22-2012\Users\00000002\UsrClass.dat
    + 2012-04-22 19:27 . 2005-10-20 19:02 163328 c:\windows\ERDNT\AutoBackup\4-22-2012\ERDNT.EXE
    + 2012-04-21 17:38 . 2005-10-20 19:02 163328 c:\windows\ERDNT\4-21-2012\ERDNT.EXE
    - 2008-11-12 02:10 . 2011-04-29 16:19 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2008-11-12 02:10 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys
    + 2012-02-16 19:38 . 2012-02-16 19:38 970752 c:\windows\assembly\tmp\Q7SVCLO5\System.Deployment.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 970752 c:\windows\assembly\tmp\CXEHK9GJ\System.Deployment.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 843776 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_a15497db\System.Drawing.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_43f18000\System.Drawing.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b4c0e1be\System.Drawing.Design.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_367443ec\System.Drawing.Design.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_aea81f98\CustomMarshalers.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\edc5691acfb65ac37f49de2ec497083a\WsatConfig.ni.exe
    + 2012-04-12 13:22 . 2012-04-12 13:22 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\5be064066858620a8aa628fca459a888\WindowsFormsIntegration.ni.dll
    + 2011-10-13 05:34 . 2011-10-13 05:34 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
    + 2012-02-16 19:41 . 2012-02-16 19:41 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\68f4157e570c77df653057c0583395bd\UIAutomationClient.ni.dll
    + 2012-02-16 20:52 . 2012-02-16 20:52 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\c2a12bd4056b44f8005a7eb3af161e6a\System.Xml.Linq.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\1107b3a711bab40c83e2561ba2431d62\System.Web.Routing.ni.dll
    + 2012-02-16 20:52 . 2012-02-16 20:52 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\67877f896b2b0e42286e838fe307f3fd\System.Web.RegularExpressions.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d7c8c294920cfe79765215e242308d28\System.Web.Extensions.Design.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\5176923a8264305118a299419e1c7bde\System.Web.Entity.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d746c0f0ed36226efb2e0115de42cdd6\System.Web.Entity.Design.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\df5542604898c9ea3fda32c8619ae0e5\System.Web.DynamicData.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\b9c8715157536097b489132574ad5c17\System.Web.Abstractions.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\f25d114cb629d1f512f98883c6535a75\System.Transactions.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\56e433394df8d44e43690a855e403555\System.ServiceProcess.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\5fb9981f4147b537b53be9d58bf4e9b4\System.Security.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1335dd98ce5ce22ad1f51cc274ca5a1d\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\a4b2b1ee81acd843970d9a81b281f1c1\System.Net.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e3436edde657a5111d39d5b2eecf9715\System.Management.Instrumentation.ni.dll
    + 2011-10-13 08:30 . 2011-10-13 08:30 160256 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\5d6a0e02b8e1cff94d07d2507667edc7\System.Management.Automation.resources.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\974ded7dd3bca225a1b90de778846c78\System.IO.Log.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\01eba24390736a59c39becd825b5756e\System.IdentityModel.Selectors.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.Wrapper.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\c0d15fb6308587fef8744d568e64bcda\System.EnterpriseServices.ni.dll
    + 2012-04-12 13:20 . 2012-04-12 13:20 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\cc2cd3bc46c9c2b30e47281e404a3230\System.Drawing.Design.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\78a370dc153011708dd9e4cb0e606bfc\System.DirectoryServices.Protocols.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6e644fc7464d9fe23fc9cd6001296f2f\System.DirectoryServices.AccountManagement.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\bac39be66bb9f987c1948b766833f8e6\System.Data.Services.Client.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\2b5ecd231320e57010043c408783d80b\System.Data.Services.Design.ni.dll
    + 2012-02-16 20:50 . 2012-02-16 20:50 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\4ac9ac2326720485aefd4d79d2024945\System.Data.Entity.Design.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\d504d550fd0a6994fcb1466ea7be92af\System.Data.DataSetExtensions.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\28637135c6939e74450bbbf110b12643\System.Configuration.Install.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\958b5c0114d664ab5ba72575c301e2ea\System.AddIn.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\4dcff3b0e79fc27e31549bb2af00efb5\SMSvcHost.ni.exe
    + 2012-02-16 20:49 . 2012-02-16 20:49 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\bd3bfd5b6ef659dac4d6cccb34577d33\SMDiagnostics.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\edec83be646eb52204c991371751a428\ServiceModelReg.ni.exe
    + 2012-02-16 19:40 . 2012-02-16 19:40 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\52015457bc28e7a9a563d9eab8ab0015\PresentationFramework.Royale.ni.dll
    + 2012-02-16 19:40 . 2012-02-16 19:40 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\46a680814559114706a33282e9df4b7a\PresentationFramework.Classic.ni.dll
    + 2012-02-16 19:40 . 2012-02-16 19:40 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2713754549b1114c9152d33efe5f72c7\PresentationFramework.Aero.ni.dll
    + 2012-02-16 19:40 . 2012-02-16 19:40 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1552f18ca434c1dca6d082df476d089a\PresentationFramework.Luna.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7c51497b188c82e2ccbe6315549ce023\MSBuild.ni.exe
    + 2012-02-16 20:49 . 2012-02-16 20:49 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f0f6dd614d294295c5d8386cc4192034\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 148480 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\fb938a1d399e2cfca2304bdca4fe76dc\Microsoft.PowerShell.Security.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 433664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8a25afef0d57ac430ba392595eba639f\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 492032 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\875af0c2a5e8a4bed88232b6f445cfaa\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2012-04-12 13:48 . 2012-04-12 13:48 968192 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3e041a29f5dfd7b1063478673fff4376\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\fd1338828beec8737fed8f50f4fcc567\Microsoft.Build.Utilities.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\0d5f999c4b7e51151548c37c676c1b8e\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\792168ce8fe03a3db43e12cf736cf91e\Microsoft.Build.Engine.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0a5277c34ddc1f55df1defb4231e814f\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-10-13 07:11 . 2011-10-13 07:11 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a8df37aadb089f1f34d3d2f103966fbc\ComSvcConfig.ni.exe
    + 2012-04-12 13:48 . 2012-04-12 13:48 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\8d6cd6a93f679608d52b6c874088b963\AspNetMMCExt.ni.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2012-04-12 13:12 . 2012-04-12 13:12 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2012-04-12 13:17 . 2012-04-12 13:17 471040 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2012-02-16 19:23 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2661637$\spuninst\updspapi.dll
    + 2012-02-16 19:23 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2661637$\spuninst\spuninst.exe
    + 2012-02-16 19:25 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2660465$\spuninst\updspapi.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2660465$\spuninst\spuninst.exe
    + 2012-03-15 04:12 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2647518$\spuninst\updspapi.dll
    + 2012-03-15 04:12 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2647518$\spuninst\spuninst.exe
    + 2012-01-14 01:37 . 2011-06-20 17:44 293376 c:\windows\$NtUninstallKB2646524$\winsrv.dll
    + 2012-01-14 01:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2646524$\spuninst\updspapi.dll
    + 2012-01-14 01:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2646524$\spuninst\spuninst.exe
    + 2011-11-12 22:01 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2641690$\spuninst\updspapi.dll
    + 2011-11-12 22:01 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2641690$\spuninst\spuninst.exe
    + 2011-11-12 22:01 . 2011-09-09 09:12 599040 c:\windows\$NtUninstallKB2641690$\crypt32.dll
    + 2012-03-15 04:17 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2641653$\spuninst\updspapi.dll
    + 2012-03-15 04:17 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2641653$\spuninst\spuninst.exe
    + 2011-12-14 05:36 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2639417$\spuninst\updspapi.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2639417$\spuninst\spuninst.exe
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2633952$\spuninst\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2633952$\spuninst\spuninst.exe
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2633171$\spuninst\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2633171$\spuninst\spuninst.exe
    + 2012-01-14 01:36 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2631813$\spuninst\updspapi.dll
    + 2012-01-14 01:36 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2631813$\spuninst\spuninst.exe
    + 2012-01-14 01:36 . 2008-04-14 00:12 386048 c:\windows\$NtUninstallKB2631813$\qdvd.dll
    + 2011-12-14 05:36 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2624667$\spuninst\updspapi.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2624667$\spuninst\spuninst.exe
    + 2012-03-15 04:13 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2621440$\spuninst\updspapi.dll
    + 2012-03-15 04:13 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2621440$\spuninst\spuninst.exe
    + 2012-03-15 04:13 . 2011-06-24 14:10 139656 c:\windows\$NtUninstallKB2621440$\rdpwd.sys
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2620712$\spuninst\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2620712$\spuninst\spuninst.exe
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2619339$\spuninst\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2619339$\spuninst\spuninst.exe
    + 2011-12-14 05:37 . 2011-02-09 13:53 186880 c:\windows\$NtUninstallKB2619339$\encdec.dll
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2618451$\spuninst\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2618451$\spuninst\spuninst.exe
    + 2011-09-16 04:18 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2616676$\spuninst\updspapi.dll
    + 2011-09-16 04:18 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2616676$\spuninst\spuninst.exe
    + 2011-09-16 04:18 . 2011-09-03 10:17 599040 c:\windows\$NtUninstallKB2616676$\crypt32.dll
    + 2011-09-06 23:25 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2607712$\spuninst\updspapi.dll
    + 2011-09-06 23:25 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2607712$\spuninst\spuninst.exe
    + 2011-09-06 23:25 . 2008-04-14 00:11 599040 c:\windows\$NtUninstallKB2607712$\crypt32.dll
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2603381$\spuninst\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2603381$\spuninst\spuninst.exe
    + 2012-01-14 01:29 . 2008-04-14 00:12 176128 c:\windows\$NtUninstallKB2598479$\winmm.dll
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2598479$\spuninst\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2598479$\spuninst\spuninst.exe
    + 2011-10-13 05:23 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2592799$\spuninst\updspapi.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2592799$\spuninst\spuninst.exe
    + 2011-10-13 05:23 . 2011-02-16 13:22 138496 c:\windows\$NtUninstallKB2592799$\afd.sys
    + 2012-01-22 23:18 . 2009-08-25 09:17 354816 c:\windows\$NtUninstallKB2585542$\winhttp.dll
    + 2012-01-22 23:18 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2585542$\spuninst\updspapi.dll
    + 2012-01-22 23:18 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2585542$\spuninst\spuninst.exe
    + 2012-01-22 23:18 . 2011-04-29 17:25 151552 c:\windows\$NtUninstallKB2585542$\schannel.dll
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2584146$\spuninst\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2584146$\spuninst\spuninst.exe
    + 2011-09-16 04:12 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570947$\spuninst\updspapi.dll
    + 2011-09-16 04:12 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570947$\spuninst\spuninst.exe
    + 2011-08-27 23:30 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570791$\spuninst\updspapi.dll
    + 2011-08-27 23:30 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570791$\spuninst\spuninst.exe
    + 2011-08-11 06:58 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570222$\spuninst\updspapi.dll
    + 2011-08-11 06:58 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570222$\spuninst\spuninst.exe
    + 2011-08-11 06:58 . 2008-04-14 00:13 139656 c:\windows\$NtUninstallKB2570222$\rdpwd.sys
    + 2011-08-11 06:59 . 2011-04-26 11:07 293376 c:\windows\$NtUninstallKB2567680$\winsrv.dll
    + 2011-08-11 06:59 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567680$\spuninst\updspapi.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567680$\spuninst\spuninst.exe
    + 2011-10-13 05:23 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567053$\spuninst\updspapi.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567053$\spuninst\spuninst.exe
    + 2011-08-11 06:55 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2566454$\spuninst\updspapi.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2566454$\spuninst\spuninst.exe
    + 2011-10-13 05:30 . 2008-07-30 02:59 161296 c:\windows\$NtUninstallKB2564958$\uiautomationcore.dll
    + 2011-10-13 05:30 . 2011-08-12 20:51 382840 c:\windows\$NtUninstallKB2564958$\spuninst\updspapi.dll
    + 2011-10-13 05:30 . 2011-08-12 20:51 231288 c:\windows\$NtUninstallKB2564958$\spuninst\spuninst.exe
    + 2011-10-13 05:30 . 2002-08-29 12:00 163328 c:\windows\$NtUninstallKB2564958$\oleacc.dll
    + 2011-08-11 06:55 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2562937$\spuninst\updspapi.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2562937$\spuninst\spuninst.exe
    + 2011-07-13 06:10 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2555917$\spuninst\updspapi.dll
    + 2011-07-13 06:10 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2555917$\spuninst\spuninst.exe
    + 2011-11-10 07:44 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2544893-v2$\spuninst\updspapi.dll
    + 2011-11-10 07:44 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe
    + 2011-11-10 07:44 . 2011-05-02 15:31 692736 c:\windows\$NtUninstallKB2544893-v2$\inetcomm.dll
    + 2011-06-29 03:11 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2541763$\spuninst\updspapi.dll
    + 2011-06-29 03:11 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2541763$\spuninst\spuninst.exe
    + 2011-06-29 03:11 . 2010-06-30 12:31 149504 c:\windows\$NtUninstallKB2541763$\schannel.dll
    + 2011-08-11 06:59 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2536276-v2$\spuninst\updspapi.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe
    + 2011-08-11 06:59 . 2011-04-29 16:19 456320 c:\windows\$NtUninstallKB2536276-v2$\mrxsmb.sys
    + 2011-07-13 06:16 . 2010-06-18 17:45 293376 c:\windows\$NtUninstallKB2507938$\winsrv.dll
    + 2011-07-13 06:16 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2507938$\spuninst\updspapi.dll
    + 2011-07-13 06:16 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2507938$\spuninst\spuninst.exe
    + 2012-02-16 19:23 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2661637\update\updspapi.dll
    + 2012-02-16 19:23 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2661637\update\update.exe
    + 2012-02-16 19:23 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2661637\spuninst.exe
    + 2012-02-16 19:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2660465\update\updspapi.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2660465\update\update.exe
    + 2012-02-16 19:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2660465\spuninst.exe
    + 2012-03-15 04:12 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2647518\update\updspapi.dll
    + 2012-03-15 04:12 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2647518\update\update.exe
    + 2012-03-15 04:12 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2647518\spuninst.exe
    + 2012-02-16 19:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2647516-IE8\update\updspapi.dll
    + 2012-02-16 19:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2647516-IE8\update\update.exe
    + 2012-02-16 19:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2647516-IE8\spuninst.exe
    + 2012-02-16 14:38 . 2011-12-17 19:45 919552 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\wininet.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 105984 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\url.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 206848 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\occache.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 611840 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mstime.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 602112 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\msfeeds.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 247808 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ieproxy.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 184320 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iepeers.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 743424 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iedvtool.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 387584 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iedkcs32.dll
    + 2012-02-16 14:38 . 2011-12-16 12:33 174080 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ie4uinit.exe
    + 2012-01-14 01:37 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2646524\update\updspapi.dll
    + 2012-01-14 01:37 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2646524\update\update.exe
    + 2012-01-14 01:37 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2646524\spuninst.exe
    + 2011-11-25 21:56 . 2011-11-25 21:56 293376 c:\windows\$hf_mig$\KB2646524\SP3QFE\winsrv.dll
    + 2011-11-12 22:01 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2641690\update\updspapi.dll
    + 2011-11-12 22:01 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2641690\update\update.exe
    + 2011-11-12 22:01 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2641690\spuninst.exe
    + 2011-09-28 07:05 . 2011-09-28 07:05 599552 c:\windows\$hf_mig$\KB2641690\SP3QFE\crypt32.dll
    + 2012-03-15 04:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2641653\update\updspapi.dll
    + 2012-03-15 04:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2641653\update\update.exe
    + 2012-03-15 04:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2641653\spuninst.exe
    + 2011-12-14 05:36 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2639417\update\updspapi.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2639417\update\update.exe
    + 2011-12-14 05:36 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2639417\spuninst.exe
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2633171\update\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2633171\update\update.exe
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2633171\spuninst.exe
    + 2012-01-14 01:36 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2631813\update\updspapi.dll
    + 2012-01-14 01:36 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2631813\update\update.exe
    + 2012-01-14 01:36 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2631813\spuninst.exe
    + 2011-11-03 15:27 . 2011-11-03 15:27 386048 c:\windows\$hf_mig$\KB2631813\SP3QFE\qdvd.dll
    + 2011-12-14 05:36 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2624667\update\updspapi.dll
    + 2011-12-14 05:36 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2624667\update\update.exe
    + 2011-12-14 05:36 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2624667\spuninst.exe
    + 2012-03-15 04:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2621440\update\updspapi.dll
    + 2012-03-15 04:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2621440\update\update.exe
    + 2012-03-15 04:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2621440\spuninst.exe
    + 2012-03-15 04:03 . 2012-01-09 16:19 139784 c:\windows\$hf_mig$\KB2621440\SP3QFE\rdpwd.sys
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2620712\update\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2620712\update\update.exe
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2620712\spuninst.exe
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2619339\update\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2619339\update\update.exe
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2619339\spuninst.exe
    + 2011-10-18 11:12 . 2011-10-18 11:12 186880 c:\windows\$hf_mig$\KB2619339\SP3QFE\encdec.dll
    + 2011-12-14 05:37 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2618451\update\updspapi.dll
    + 2011-12-14 05:37 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2618451\update\update.exe
    + 2011-12-14 05:37 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2618451\spuninst.exe
    + 2011-12-14 05:39 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2618444-IE8\update\updspapi.dll
    + 2011-12-14 05:39 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2618444-IE8\update\update.exe
    + 2011-12-14 05:39 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2618444-IE8\spuninst.exe
    + 2011-12-14 05:30 . 2011-11-04 19:19 919552 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\wininet.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 105984 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\url.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 206848 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\occache.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 611840 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mstime.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 602112 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeeds.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 247808 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieproxy.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 184320 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iepeers.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 743424 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedvtool.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 387584 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iedkcs32.dll
    + 2011-12-14 05:30 . 2011-10-25 12:01 174080 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ie4uinit.exe
    + 2011-09-16 04:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll
    + 2011-09-16 04:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2616676\update\update.exe
    + 2011-09-16 04:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2616676\spuninst.exe
    + 2011-09-09 09:11 . 2011-09-09 09:11 599552 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll
    + 2011-09-06 23:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll
    + 2011-09-06 23:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2607712\update\update.exe
    + 2011-09-06 23:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2607712\spuninst.exe
    + 2011-09-03 10:16 . 2011-09-03 10:16 599552 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2603381\update\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2603381\update\update.exe
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2603381\spuninst.exe
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2598479\update\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2598479\update\update.exe
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2598479\spuninst.exe
    + 2011-10-14 14:45 . 2011-10-14 14:45 176128 c:\windows\$hf_mig$\KB2598479\SP3QFE\winmm.dll
    + 2011-10-13 05:23 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2592799\update\update.exe
    + 2011-10-13 05:23 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2592799\spuninst.exe
    + 2011-10-13 05:13 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys
    + 2011-10-13 05:22 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll
    + 2011-10-13 05:22 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe
    + 2011-10-13 05:22 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe
    + 2011-10-13 05:13 . 2011-08-22 23:47 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll
    + 2011-10-13 05:13 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe
    + 2012-01-22 23:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2585542\update\updspapi.dll
    + 2012-01-22 23:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2585542\update\update.exe
    + 2012-01-22 23:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2585542\spuninst.exe
    + 2011-11-16 14:20 . 2011-11-16 14:20 354816 c:\windows\$hf_mig$\KB2585542\SP3QFE\winhttp.dll
    + 2011-11-16 14:20 . 2011-11-16 14:20 152064 c:\windows\$hf_mig$\KB2585542\SP3QFE\schannel.dll
    + 2012-01-14 01:29 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2584146\update\updspapi.dll
    + 2012-01-14 01:29 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2584146\update\update.exe
    + 2012-01-14 01:29 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2584146\spuninst.exe
    + 2011-09-16 04:12 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll
    + 2011-09-16 04:12 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570947\update\update.exe
    + 2011-09-16 04:12 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570947\spuninst.exe
    + 2011-08-11 06:58 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll
    + 2011-08-11 06:58 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570222\update\update.exe
    + 2011-08-11 06:58 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570222\spuninst.exe
    + 2011-08-11 06:27 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys
    + 2011-08-11 06:59 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567680\update\update.exe
    + 2011-08-11 06:59 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567680\spuninst.exe
    + 2011-06-20 17:43 . 2011-06-20 17:43 293376 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll
    + 2011-10-13 05:23 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll
    + 2011-10-13 05:23 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe
    + 2011-10-13 05:23 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe
    + 2011-08-11 06:55 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2566454\update\update.exe
    + 2011-08-11 06:55 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2566454\spuninst.exe
    + 2011-08-11 06:55 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll
    + 2011-08-11 06:55 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2562937\update\update.exe
    + 2011-08-11 06:55 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2562937\spuninst.exe
    + 2011-08-12 18:45 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll
    + 2011-08-12 18:45 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe
    + 2011-08-12 18:45 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe
    + 2011-08-12 17:50 . 2011-06-23 18:33 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll
    + 2011-08-12 17:50 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe
    + 2011-07-13 06:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll
    + 2011-07-13 06:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2555917\update\update.exe
    + 2011-07-13 06:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2555917\spuninst.exe
    + 2011-11-10 07:44 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893-v2\update\updspapi.dll
    + 2011-11-10 07:44 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893-v2\update\update.exe
    + 2011-11-10 07:44 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893-v2\spuninst.exe
    + 2011-10-10 14:21 . 2011-10-10 14:21 692736 c:\windows\$hf_mig$\KB2544893-v2\SP3QFE\inetcomm.dll
    + 2011-06-29 03:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll
    + 2011-06-29 03:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2541763\update\update.exe
    + 2011-06-29 03:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2541763\spuninst.exe
    + 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll
    + 2011-08-11 06:59 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll
    + 2011-08-11 06:59 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe
    + 2011-08-11 06:59 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe
    + 2011-08-11 06:27 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys
    + 2011-07-13 06:16 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll
    + 2011-07-13 06:16 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507938\update\update.exe
    + 2011-07-13 06:16 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507938\spuninst.exe
    + 2011-04-26 11:02 . 2011-04-26 11:02 293376 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll
    + 2002-08-29 12:00 . 2012-03-01 11:01 1212416 c:\windows\system32\urlmon.dll
    + 2002-08-29 12:00 . 2011-11-03 15:28 1292288 c:\windows\system32\quartz.dll
    + 2002-08-29 12:00 . 2011-11-01 16:07 1288704 c:\windows\system32\ole32.dll
    - 2002-08-29 12:00 . 2010-12-09 13:42 2148864 c:\windows\system32\ntoskrnl.exe
    + 2002-08-29 12:00 . 2011-10-25 13:37 2148864 c:\windows\system32\ntoskrnl.exe
    + 2002-08-29 01:04 . 2011-10-25 12:52 2027008 c:\windows\system32\ntkrnlpa.exe
    - 2002-08-29 01:04 . 2010-12-09 13:07 2027008 c:\windows\system32\ntkrnlpa.exe
    + 2002-08-29 12:00 . 2012-03-01 11:01 5978624 c:\windows\system32\mshtml.dll
    + 2010-01-27 01:07 . 2012-02-21 05:56 8527008 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    + 2007-08-14 01:34 . 2012-03-01 11:01 2000384 c:\windows\system32\iertutil.dll
    + 2012-03-30 02:13 . 2012-02-15 18:01 4547944 c:\windows\system32\DRVSTORE\usbaapl_87F84F5DA3368BC69CA5BE7F6A79CAA709E36E13\usbaaplrc.dll
    + 2011-10-14 03:29 . 2010-04-20 03:29 1461992 c:\windows\system32\DRVSTORE\netaapl_63AA05C4700EB9CAF2D048DAC1D06D764A0D4C41\wdfcoinstaller01009.dll

  10. #10
    Member
    Join Date
    Apr 2012
    Posts
    63

    Default

    Part III

    + 2008-10-16 03:08 . 2012-02-03 09:22 1860096 c:\windows\system32\dllcache\win32k.sys
    + 2007-01-25 12:48 . 2012-03-01 11:01 1212416 c:\windows\system32\dllcache\urlmon.dll
    + 2008-05-07 05:12 . 2011-11-03 15:28 1292288 c:\windows\system32\dllcache\quartz.dll
    + 2010-07-16 12:05 . 2011-11-01 16:07 1288704 c:\windows\system32\dllcache\ole32.dll
    - 2008-10-16 03:08 . 2010-12-09 13:38 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
    + 2008-10-16 03:08 . 2011-10-25 13:33 2192768 c:\windows\system32\dllcache\ntoskrnl.exe
    - 2008-10-16 03:08 . 2010-12-09 13:07 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-10-16 03:08 . 2011-10-25 12:52 2027008 c:\windows\system32\dllcache\ntkrpamp.exe
    + 2008-10-16 03:08 . 2011-10-25 12:52 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
    - 2008-10-16 03:08 . 2010-12-09 13:07 2069376 c:\windows\system32\dllcache\ntkrnlpa.exe
    - 2008-10-16 03:08 . 2010-12-09 13:42 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2008-10-16 03:08 . 2011-10-25 13:37 2148864 c:\windows\system32\dllcache\ntkrnlmp.exe
    + 2007-01-04 13:36 . 2012-03-01 11:01 5978624 c:\windows\system32\dllcache\mshtml.dll
    + 2008-06-06 03:30 . 2012-03-01 11:01 2000384 c:\windows\system32\dllcache\iertutil.dll
    + 2011-12-25 11:50 . 2011-12-25 11:50 5246976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2011-10-26 11:39 . 2011-10-26 11:39 3186688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2011-03-25 13:15 . 2011-03-25 13:15 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2011-07-07 12:18 . 2011-07-07 12:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2011-07-07 12:18 . 2011-07-07 12:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2011-03-25 13:15 . 2011-03-25 13:15 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2012-01-31 11:46 . 2012-01-31 11:46 6385664 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656370\M2656370Uninstall.msp
    + 2011-12-25 19:07 . 2011-12-25 19:07 2064384 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
    + 2011-12-25 19:06 . 2011-12-25 19:06 1269760 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
    - 2010-09-23 22:55 . 2010-09-23 22:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2011-12-25 19:06 . 2011-12-25 19:06 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
    + 2011-12-25 06:54 . 2011-12-25 06:54 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    - 2010-09-23 09:26 . 2010-09-23 09:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
    + 2011-12-25 06:53 . 2011-12-25 06:53 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
    + 2011-12-25 19:06 . 2011-12-25 19:06 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    - 2010-09-23 22:55 . 2010-09-23 22:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
    + 2011-10-14 03:28 . 2011-10-14 03:28 2002432 c:\windows\Installer\d2cf5f.msi
    + 2011-10-08 01:02 . 2011-10-08 01:02 1769984 c:\windows\Installer\b97ab8.msi
    + 2012-01-13 14:13 . 2012-01-13 14:13 3947520 c:\windows\Installer\a967e.msi
    + 2012-01-31 03:46 . 2012-01-31 03:46 7069184 c:\windows\Installer\a75cc.msp
    + 2012-03-22 20:09 . 2012-03-22 20:09 5521920 c:\windows\Installer\a75bd.msp
    + 2011-12-26 17:59 . 2011-12-26 17:59 4368896 c:\windows\Installer\802237.msp
    + 2011-09-20 22:36 . 2011-09-20 22:36 5521408 c:\windows\Installer\75633.msp
    + 2011-08-11 00:43 . 2011-08-11 00:43 3795968 c:\windows\Installer\3ddaae.msp
    + 2011-07-26 15:17 . 2011-07-26 15:17 6824960 c:\windows\Installer\3dda94.msp
    + 2011-08-16 19:35 . 2011-08-16 19:35 5519872 c:\windows\Installer\3dda82.msp
    + 2011-08-11 00:42 . 2011-08-11 00:42 7070208 c:\windows\Installer\3dda71.msp
    + 2011-07-21 19:34 . 2011-07-21 19:34 3456000 c:\windows\Installer\3dda6a.msp
    + 2011-07-27 14:39 . 2011-07-27 14:39 9892352 c:\windows\Installer\3dda5f.msp
    + 2011-11-01 21:34 . 2011-11-01 21:34 2531840 c:\windows\Installer\2c85b83.msp
    + 2011-11-01 21:34 . 2011-11-01 21:34 1552384 c:\windows\Installer\2c85b7b.msp
    + 2011-11-01 21:34 . 2011-11-01 21:34 2247168 c:\windows\Installer\2c85b73.msp
    + 2011-11-17 18:55 . 2011-11-17 18:55 5522944 c:\windows\Installer\2c85b58.msp
    + 2011-10-30 07:10 . 2011-10-30 07:10 6824960 c:\windows\Installer\2c85b47.msp
    + 2012-03-06 04:34 . 2012-03-06 04:34 5519872 c:\windows\Installer\2c71b84.msp
    + 2012-03-27 15:47 . 2012-03-27 15:47 4959232 c:\windows\Installer\26a7e.msp
    + 2012-03-30 02:22 . 2012-03-30 02:22 4288000 c:\windows\Installer\245f89f.msi
    + 2012-03-30 02:13 . 2012-03-30 02:13 1718784 c:\windows\Installer\245ed02.msi
    + 2012-03-30 02:11 . 2012-03-30 02:11 1530368 c:\windows\Installer\245ecb4.msi
    + 2011-11-03 21:31 . 2011-11-03 21:31 5525504 c:\windows\Installer\21c051.msp
    + 2011-05-02 07:06 . 2011-05-02 07:06 2705920 c:\windows\Installer\1de3b2.msp
    + 2011-07-26 20:50 . 2011-07-26 20:50 5522432 c:\windows\Installer\1de3ab.msp
    + 2011-11-11 02:44 . 2011-11-11 02:44 9474048 c:\windows\Installer\1c6cc74.msi
    + 2011-10-31 06:54 . 2011-10-31 06:54 2748416 c:\windows\Installer\1a1fc4.msp
    + 2012-01-25 22:55 . 2012-01-25 22:55 5520384 c:\windows\Installer\1a1fbd.msp
    + 2011-05-23 21:15 . 2011-05-23 21:15 3617792 c:\windows\Installer\17cd62.msp
    + 2011-11-18 02:44 . 2011-11-18 02:44 6976512 c:\windows\Installer\14fb2c.msi
    + 2011-12-06 23:22 . 2011-12-06 23:22 5519360 c:\windows\Installer\108241.msp
    + 2007-04-19 21:09 . 2007-04-19 21:09 1061720 c:\windows\Installer\$PatchCache$\Managed\9040211900063D11C8EF10054038389C\11.0.8173\OMFC.DLL
    + 2012-01-03 16:18 . 2012-01-03 16:18 2405784 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\rt3d.dll
    + 2011-11-18 00:50 . 2011-11-18 00:50 6543872 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\authplay.dll
    + 2011-01-14 14:10 . 2011-01-14 14:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL
    + 2011-01-14 14:10 . 2011-01-14 14:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL
    + 2011-01-14 14:10 . 2011-01-14 14:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL
    + 2011-07-27 12:44 . 2011-07-27 12:44 1791824 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.6612\PPCNV.DLL
    + 2012-04-12 13:19 . 2011-12-17 19:46 1212416 c:\windows\ie8updates\KB2675157-IE8\urlmon.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 5979136 c:\windows\ie8updates\KB2675157-IE8\mshtml.dll
    + 2012-04-12 13:19 . 2011-12-17 19:46 2000384 c:\windows\ie8updates\KB2675157-IE8\iertutil.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 1212416 c:\windows\ie8updates\KB2647516-IE8\urlmon.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 5978112 c:\windows\ie8updates\KB2647516-IE8\mshtml.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 2000384 c:\windows\ie8updates\KB2647516-IE8\iertutil.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 1212416 c:\windows\ie8updates\KB2618444-IE8\urlmon.dll
    + 2011-12-14 05:38 . 2011-10-03 08:35 5971456 c:\windows\ie8updates\KB2618444-IE8\mshtml.dll
    + 2011-12-14 05:38 . 2011-08-22 23:48 2000384 c:\windows\ie8updates\KB2618444-IE8\iertutil.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll
    + 2011-10-13 05:22 . 2011-07-25 15:17 5969920 c:\windows\ie8updates\KB2586448-IE8\mshtml.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll
    + 2011-08-12 18:45 . 2011-05-30 22:19 5964800 c:\windows\ie8updates\KB2559049-IE8\mshtml.dll
    + 2011-08-12 18:45 . 2011-04-25 16:11 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll
    + 2008-10-16 03:08 . 2011-10-25 13:33 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2008-10-16 03:08 . 2010-12-09 13:38 2192768 c:\windows\Driver Cache\i386\ntoskrnl.exe
    - 2008-10-16 03:08 . 2010-12-09 13:07 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    + 2008-10-16 03:08 . 2011-10-25 12:52 2027008 c:\windows\Driver Cache\i386\ntkrpamp.exe
    - 2008-10-16 03:08 . 2010-12-09 13:07 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    + 2008-10-16 03:08 . 2011-10-25 12:52 2069376 c:\windows\Driver Cache\i386\ntkrnlpa.exe
    - 2008-10-16 03:08 . 2010-12-09 13:42 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2008-10-16 03:08 . 2011-10-25 13:37 2148864 c:\windows\Driver Cache\i386\ntkrnlmp.exe
    + 2012-01-08 22:14 . 2012-01-08 22:14 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_52435b0f\System.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_2af6c01d\System.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_84e2b267\System.Xml.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_5da2f319\System.Xml.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_f69a8ead\System.Windows.Forms.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b862fd00\System.Windows.Forms.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 3035136 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b75a6ae2\System.Windows.Forms.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 7917568 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4a02ba12\System.Windows.Forms.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_b69a90cf\System.Drawing.dll
    + 2012-04-12 13:19 . 2012-04-12 13:19 2248704 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_71e44dfe\System.Drawing.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_7020e09c\System.Design.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_415218cc\System.Design.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2e616514\System.Design.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_1a0482e4\System.Design.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_aab813c6\mscorlib.dll
    + 2012-01-08 22:16 . 2012-01-08 22:16 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_02163ff6\mscorlib.dll
    + 2012-02-16 19:39 . 2012-02-16 19:39 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\174c2f776741812aed02c337bbcd1dae\WindowsBase.ni.dll
    + 2012-02-16 19:41 . 2012-02-16 19:41 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\94f5164ff4f664c5e4e7fb4c3af1abad\UIAutomationClientsideProviders.ni.dll
    + 2012-02-16 19:39 . 2012-02-16 19:39 7953408 c:\windows\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll
    + 2012-02-16 19:41 . 2012-02-16 19:41 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll
    + 2012-04-12 13:50 . 2012-04-12 13:50 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\d31d2eb0a862d3c1d3561be5f1570c3e\System.WorkflowServices.ni.dll
    + 2012-02-16 20:52 . 2012-02-16 20:52 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\248ea47105ff4af6ee75e6fdd5b450a1\System.Workflow.Runtime.ni.dll
    + 2012-04-12 13:50 . 2012-04-12 13:50 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\53c2336db392bfa5484850780048e37a\System.Workflow.ComponentModel.ni.dll
    + 2012-04-12 13:50 . 2012-04-12 13:50 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\f243723cda77dd647b250dd9c42c35e2\System.Workflow.Activities.ni.dll
    + 2012-02-16 20:52 . 2012-02-16 20:52 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e9ba004858dcdb5958d86f26f043f85a\System.Web.Services.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\d1dacd5cb445b242b70bf7d606464293\System.Web.Mobile.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\6acbb8bb1a43fab0fdcf55bedd1fbcc3\System.Web.Extensions.ni.dll
    + 2012-02-16 19:41 . 2012-02-16 19:41 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\9578cabac0539ece4ae00eea4c27b8b3\System.Speech.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\285dfbf2380436e187cb624bd1cd4683\System.ServiceModel.Web.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\f2532204217dc10f152afd077b09927c\System.Runtime.Serialization.ni.dll
    + 2012-04-12 13:20 . 2012-04-12 13:20 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\44d507a702c1623810e094adf751f687\System.Printing.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 4950016 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\10fdfb918f01ebc41f38a391334146a9\System.Management.Automation.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\8ef05061cd205c4f2a8583d97f32a603\System.IdentityModel.ni.dll
    + 2012-04-12 13:20 . 2012-04-12 13:20 1591808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8d886cdc2ca5f0ff97cd1afe8773bb6e\System.Drawing.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\77d0e93f024055d04c07cc2700b4c590\System.DirectoryServices.ni.dll
    + 2012-04-12 13:48 . 2012-04-12 13:48 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\3d253a2235f7c03630003bc1fbaf34a3\System.Deployment.ni.dll
    + 2012-02-16 19:40 . 2012-02-16 19:40 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ae888f8633fce3ff1de98e32bce0abbf\System.Data.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\857300fa64d09c69125451fd8894f3da\System.Data.SqlXml.ni.dll
    + 2012-02-16 20:50 . 2012-02-16 20:50 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e9d4a1fb13572c769ddd9b86e55baab4\System.Data.Services.ni.dll
    + 2012-02-16 19:41 . 2012-02-16 19:41 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3d9c33f71d15a3e2e240092a244eba3\System.Data.Linq.ni.dll
    + 2012-02-16 20:50 . 2012-02-16 20:50 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\424160369b301ccd1b6fd86265611955\System.Data.Entity.ni.dll
    + 2012-02-16 19:40 . 2012-02-16 19:40 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\0a6d6717e76be12295711ff02c7aa1d4\System.Core.ni.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\c73e109dbac6b099786cc68fe36e3d0b\ReachFramework.ni.dll
    + 2012-04-12 13:18 . 2012-04-12 13:18 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\20d72aeac1109863b77532d37d3f4fa2\PresentationUI.ni.dll
    + 2012-02-16 19:39 . 2012-02-16 19:39 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\59cd6ce5a254006179eee92952cd2272\PresentationBuildTasks.ni.dll
    + 2012-04-12 13:48 . 2012-04-12 13:48 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\3ec4a3f74cb80c9b9581d778e8645b2c\Microsoft.VisualBasic.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f7071f9a1c0523540f6aa7f11c302fb6\Microsoft.Transactions.Bridge.ni.dll
    + 2012-02-16 20:51 . 2012-02-16 20:51 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\806b1d127ed3e906db972751e87585c4\Microsoft.JScript.ni.dll
    + 2012-04-12 13:48 . 2012-04-12 13:48 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\876b7280cf4e81fd65b120f60d38a7d9\Microsoft.Build.Tasks.ni.dll
    + 2012-04-12 13:48 . 2012-04-12 13:48 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\64ba53308e90fa3837fe47977e2d37b6\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2012-02-16 20:49 . 2012-02-16 20:49 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d6edd4b4619a9052d3dfe50c3067d5e0\Microsoft.Build.Engine.ni.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2010-10-07 21:32 . 2010-10-07 21:32 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    + 2012-01-08 22:15 . 2012-01-08 22:15 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
    - 2011-06-18 08:20 . 2011-06-18 08:20 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-04-12 13:12 . 2012-04-12 13:12 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2012-04-12 13:12 . 2012-04-12 13:12 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2011-06-18 08:21 . 2011-06-18 08:21 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-04-12 13:13 . 2012-04-12 13:13 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    - 2010-10-07 21:20 . 2010-10-07 21:20 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 2064384 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2012-01-08 22:14 . 2012-01-08 22:14 1269760 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
    + 2012-02-16 19:25 . 2011-11-23 13:25 1859584 c:\windows\$NtUninstallKB2660465$\win32k.sys
    + 2012-03-15 04:17 . 2012-01-12 16:53 1859968 c:\windows\$NtUninstallKB2641653$\win32k.sys
    + 2011-12-14 05:36 . 2011-09-06 13:20 1858944 c:\windows\$NtUninstallKB2639417$\win32k.sys
    + 2011-12-14 05:37 . 2010-12-09 13:42 2148864 c:\windows\$NtUninstallKB2633171$\ntoskrnl.exe
    + 2011-12-14 05:37 . 2010-12-09 13:07 2027008 c:\windows\$NtUninstallKB2633171$\ntkrpamp.exe
    + 2011-12-14 05:37 . 2010-12-09 13:07 2027008 c:\windows\$NtUninstallKB2633171$\ntkrnlpa.exe
    + 2011-12-14 05:37 . 2010-12-09 13:42 2148864 c:\windows\$NtUninstallKB2633171$\ntkrnlmp.exe
    + 2012-01-14 01:36 . 2010-02-05 18:27 1291776 c:\windows\$NtUninstallKB2631813$\quartz.dll
    + 2011-12-14 05:36 . 2010-07-16 12:05 1288192 c:\windows\$NtUninstallKB2624667$\ole32.dll
    + 2011-10-13 05:23 . 2011-06-02 14:02 1858944 c:\windows\$NtUninstallKB2567053$\win32k.sys
    + 2011-07-13 06:10 . 2011-03-03 13:21 1857920 c:\windows\$NtUninstallKB2555917$\win32k.sys
    + 2012-01-12 16:54 . 2012-01-12 16:54 1869056 c:\windows\$hf_mig$\KB2660465\SP3QFE\win32k.sys
    + 2012-02-16 14:38 . 2011-12-17 19:45 1214464 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\urlmon.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 5980160 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mshtml.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 2001408 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\iertutil.dll
    + 2012-03-15 04:04 . 2012-02-03 09:26 1869184 c:\windows\$hf_mig$\KB2641653\SP3QFE\win32k.sys
    + 2011-11-23 13:29 . 2011-11-23 13:29 1868544 c:\windows\$hf_mig$\KB2639417\SP3QFE\win32k.sys
    + 2011-10-25 13:34 . 2011-10-25 13:34 2192768 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntoskrnl.exe
    + 2011-10-25 12:52 . 2011-10-25 12:52 2027008 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrpamp.exe
    + 2011-10-25 12:52 . 2011-10-25 12:52 2069376 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlpa.exe
    + 2011-10-25 13:38 . 2011-10-25 13:38 2148864 c:\windows\$hf_mig$\KB2633171\SP3QFE\ntkrnlmp.exe
    + 2011-11-03 15:27 . 2011-11-03 15:27 1292288 c:\windows\$hf_mig$\KB2631813\SP3QFE\quartz.dll
    + 2011-11-01 16:05 . 2011-11-01 16:05 1289216 c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 1214464 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\urlmon.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 5978624 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtml.dll
    + 2011-12-14 05:30 . 2011-11-04 19:19 2001408 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\iertutil.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll
    + 2011-10-13 05:13 . 2011-10-03 08:34 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll
    + 2011-09-06 13:25 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys
    + 2011-08-12 17:50 . 2011-06-23 18:33 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll
    + 2011-08-12 17:50 . 2011-07-25 15:15 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll
    + 2011-08-12 17:50 . 2011-06-23 18:33 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll
    + 2011-06-02 14:07 . 2011-06-02 14:07 1867904 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys
    + 2008-06-06 03:28 . 2012-04-12 13:06 55154568 c:\windows\system32\MRT.exe
    + 2007-08-14 01:54 . 2012-03-02 13:01 11082752 c:\windows\system32\ieframe.dll
    + 2008-06-06 03:30 . 2012-03-02 13:01 11082752 c:\windows\system32\dllcache\ieframe.dll
    + 2011-12-27 01:02 . 2011-12-27 01:02 12482048 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2656353\M2656353Uninstall.msp
    + 2012-03-29 01:10 . 2012-03-29 01:10 12098048 c:\windows\Installer\a75ac.msp
    + 2011-12-26 17:02 . 2011-12-26 17:02 19677184 c:\windows\Installer\802250.msp
    + 2011-07-12 03:43 . 2011-07-12 03:43 11641344 c:\windows\Installer\7563d.msp
    + 2011-07-12 22:50 . 2011-07-12 22:50 17555968 c:\windows\Installer\75623.msp
    + 2011-07-26 23:33 . 2011-07-26 23:33 10984448 c:\windows\Installer\3ddaa6.msp
    + 2011-09-16 02:37 . 2011-09-16 02:37 37148160 c:\windows\Installer\2c85b35.msp
    + 2012-01-04 06:15 . 2012-01-04 06:15 20559288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32.dll
    + 2012-04-12 13:19 . 2011-12-18 22:46 11082240 c:\windows\ie8updates\KB2675157-IE8\ieframe.dll
    + 2012-02-16 19:25 . 2011-11-04 19:20 11081728 c:\windows\ie8updates\KB2647516-IE8\ieframe.dll
    + 2011-12-14 05:38 . 2011-08-24 00:48 11081728 c:\windows\ie8updates\KB2618444-IE8\ieframe.dll
    + 2011-10-13 05:22 . 2011-06-23 18:36 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll
    + 2011-08-12 18:45 . 2011-04-26 17:11 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll
    + 2012-04-22 19:27 . 2012-04-22 19:27 33005568 c:\windows\ERDNT\AutoBackup\4-22-2012\Users\00000001\ntuser.dat
    + 2012-04-12 13:21 . 2012-04-12 13:21 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d96906db18e87ffe2e08f6cda7e2be0f\System.Windows.Forms.ni.dll
    + 2012-04-12 13:49 . 2012-04-12 13:49 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\db1d2470de43ffcb6f562277208d56e5\System.Web.ni.dll
    + 2012-02-16 20:48 . 2012-02-16 20:48 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\1cdcd6d97627d345d5ff446e6ec88b97\System.ServiceModel.ni.dll
    + 2012-04-12 13:19 . 2012-04-12 13:19 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\561138d8d199861578c197c4d24e3934\System.Design.ni.dll
    + 2012-04-12 13:17 . 2012-04-12 13:17 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\029d1d9e6495065aa4f38bcf2315ee8c\PresentationFramework.ni.dll
    + 2012-04-12 13:16 . 2012-04-12 13:16 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\0a059ecfca6e421629a8298b03a7814c\PresentationCore.ni.dll
    + 2011-10-13 05:30 . 2011-10-13 05:30 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
    + 2012-02-16 14:38 . 2011-12-17 19:45 11085312 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\ieframe.dll
    + 2011-11-05 22:19 . 2011-11-05 22:19 11083776 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\ieframe.dll
    + 2011-10-13 05:13 . 2011-08-22 23:47 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll
    + 2011-06-25 08:03 . 2011-06-25 08:03 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
    2011-10-21 09:10 87440 ----a-w- c:\program files\adawaretb\adawareDx.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files\adawaretb\adawareDx.dll" [2011-10-21 87440]
    .
    [HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2012-03-06 23:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Owner\Application Data\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Owner\Application Data\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Owner\Application Data\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
    2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Owner\Application Data\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-03-17 47392]
    "SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-03-12 483422]
    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
    "Ad-Aware Browsing Protection"="c:\documents and settings\All Users\Application Data\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-09-30 252296]
    "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-21 59240]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]
    .
    c:\documents and settings\Owner\Start Menu\Programs\Startup\
    Dropbox.lnk - c:\documents and settings\Owner\Application Data\Dropbox\bin\Dropbox.exe [2012-2-14 24246216]
    ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
    .
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe [2010-9-23 49254]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\AOL 9.1\\waol.exe"=
    "c:\\Program Files\\Intuit\\QuickBooks 2008\\QBDBMgrN.exe"=
    "c:\\Program Files\\Intuit\\QuickBooks 2007\\QBDBMgrN.exe"=
    "c:\\WINDOWS\\system32\\dpvsetup.exe"=
    "c:\\WINDOWS\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\adawaretb\\dtUser.exe"=
    "c:\\Documents and Settings\\Owner\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
    "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "9999:UDP"= 9999:UDP:IDU Service UDP Port
    "2804:TCP"= 2804:TCP:IDU Service TCP Port
    .
    R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [11/3/2011 1:06 PM 64512]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [6/14/2011 3:17 PM 612184]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [6/14/2011 3:17 PM 337880]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [6/14/2011 3:17 PM 20696]
    R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [11/3/2011 1:06 PM 2152152]
    R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [11/3/2011 1:06 PM 15232]
    S3 brfilt;Brother MFC Filter Driver;c:\windows\system32\drivers\BrFilt.sys [6/9/2008 1:55 PM 2944]
    S3 BrSerWDM;Brother Serial driver;c:\windows\system32\drivers\BrSerWdm.sys [6/9/2008 1:52 PM 61952]
    S3 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\system32\drivers\BrUsbMdm.sys [6/9/2008 1:55 PM 11008]
    S3 BrUsbScn;Brother MFC USB Scanner driver;c:\windows\system32\drivers\BrUsbScn.sys [6/9/2008 1:55 PM 10368]
    S3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.SYS --> c:\windows\system32\drivers\COMMONFX.SYS [?]
    S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.SYS --> c:\windows\system32\drivers\COMMONFX.SYS [?]
    S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\CT20XUT.SYS --> c:\windows\system32\drivers\CT20XUT.SYS [?]
    S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS --> c:\windows\system32\drivers\CT20XUT.SYS [?]
    S3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.SYS --> c:\windows\system32\drivers\CTAUDFX.SYS [?]
    S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.SYS --> c:\windows\system32\drivers\CTAUDFX.SYS [?]
    S3 CTEAPSFX.SYS;CTEAPSFX.SYS;c:\windows\system32\drivers\CTEAPSFX.SYS --> c:\windows\system32\drivers\CTEAPSFX.SYS [?]
    S3 CTEAPSFX;CTEAPSFX;c:\windows\system32\drivers\CTEAPSFX.SYS --> c:\windows\system32\drivers\CTEAPSFX.SYS [?]
    S3 CTEDSPFX.SYS;CTEDSPFX.SYS;c:\windows\system32\drivers\CTEDSPFX.SYS --> c:\windows\system32\drivers\CTEDSPFX.SYS [?]
    S3 CTEDSPFX;CTEDSPFX;c:\windows\system32\drivers\CTEDSPFX.SYS --> c:\windows\system32\drivers\CTEDSPFX.SYS [?]
    S3 CTEDSPIO.SYS;CTEDSPIO.SYS;c:\windows\system32\drivers\CTEDSPIO.SYS --> c:\windows\system32\drivers\CTEDSPIO.SYS [?]
    S3 CTEDSPIO;CTEDSPIO;c:\windows\system32\drivers\CTEDSPIO.SYS --> c:\windows\system32\drivers\CTEDSPIO.SYS [?]
    S3 CTEDSPSY.SYS;CTEDSPSY.SYS;c:\windows\system32\drivers\CTEDSPSY.SYS --> c:\windows\system32\drivers\CTEDSPSY.SYS [?]
    S3 CTEDSPSY;CTEDSPSY;c:\windows\system32\drivers\CTEDSPSY.SYS --> c:\windows\system32\drivers\CTEDSPSY.SYS [?]
    S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.SYS --> c:\windows\system32\drivers\CTERFXFX.SYS [?]
    S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.SYS --> c:\windows\system32\drivers\CTERFXFX.SYS [?]
    S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\CTEXFIFX.SYS --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
    S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS --> c:\windows\system32\drivers\CTEXFIFX.SYS [?]
    S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\CTHWIUT.SYS --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
    S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS --> c:\windows\system32\drivers\CTHWIUT.SYS [?]
    S3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.SYS --> c:\windows\system32\drivers\CTSBLFX.SYS [?]
    S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.SYS --> c:\windows\system32\drivers\CTSBLFX.SYS [?]
    S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;c:\windows\system32\DNINDIS5.sys [6/5/2008 4:56 PM 17149]
    S3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;c:\windows\system32\drivers\WPN111.sys [6/5/2008 4:57 PM 362944]
    .
    --- Other Services/Drivers In Memory ---
    .
    *Deregistered* - uphcleanhlp
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2012-04-22 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-11-03 20:06]
    .
    2012-04-20 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-02 00:57]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com
    uInternet Settings,ProxyOverride = *.local
    Trusted Zone: microsoft.com\office
    FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\119ckrol.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=utf-8&mssrc=ms_kwd&mstb=adawaretb&q=
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Toolbar-Locked - (no file)
    MSConfigStartUp-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-04-22 13:07
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scanning hidden processes ...
    .
    scanning hidden autostart entries ...
    .
    scanning hidden files ...
    .
    scan completed successfully
    hidden files: 0
    .
    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (LocalSystem)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,be,2d,e7,65,f7,aa,4c,b6,b2,5f,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,be,2d,e7,65,f7,aa,4c,b6,b2,5f,\
    .
    Completion time: 2012-04-22 13:12:58
    ComboFix-quarantined-files.txt 2012-04-22 20:12
    ComboFix2.txt 2011-06-21 19:46
    .
    Pre-Run: 48,238,772,224 bytes free
    Post-Run: 48,335,585,280 bytes free
    .
    - - End Of File - - 929748583AA68C793CAB8B7CB742596B

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •