vista antispyware 2011 fake

View previous topic View next topic Go down

vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 5:14 am

Hello,
I've got the vista antispyware 2011 virus... I do believe i've gotten it before and all I did was run Malwarebites. However, this time after running it, and deleting the two found files, I can't open my internet explorer anymore. I have two USERS's on my computer, it's only stopping me from using internet explorer on my main USER. When i'm on my guest account I have access to everything, which is what i'm using right now. I will post the OTL and other files from the guest account, but please advise me if I should be doing something else.
Thanks,
Nathalie

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 5:31 am

OTL logfile created on: 15/05/2011 3:08:35 PM - Run 3
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Guest\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 59.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 221.11 Gb Total Space | 61.26 Gb Free Space | 27.70% Space Free | Partition Type: NTFS
Drive D: | 11.77 Gb Total Space | 2.17 Gb Free Space | 18.44% Space Free | Partition Type: NTFS

Computer Name: NATHALIE-PC | User Name: Nathalie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/05/15 15:08:02 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Guest\Desktop\OTL.com
PRC - [2011/05/15 14:59:11 | 000,509,552 | ---- | M] (Google Inc.) -- C:\ProgramData\Google\Google Toolbar\Update\gtb9433.tmp.exe
PRC - [2011/03/13 01:18:35 | 000,277,104 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2010/10/18 06:37:35 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
PRC - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/01/22 09:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2010/01/15 05:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/01/20 19:24:21 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
PRC - [2008/01/20 19:24:21 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
PRC - [2008/01/20 19:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2006/09/10 22:49:18 | 000,439,992 | ---- | M] (Druide informatique inc.) -- C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe


========== Modules (SafeList) ==========

MOD - [2011/05/15 15:08:02 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Guest\Desktop\OTL.com
MOD - [2010/08/31 08:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2010/10/12 10:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\WildTangent Games\App\GamesAppService.exe -- (GamesAppService)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/03/15 12:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 12:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/01/22 09:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Running] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 05:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/03/05 10:30:06 | 000,110,592 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe -- (Com4Qlb)


========== Driver Services (SafeList) ==========

DRV - [2011/03/13 19:25:20 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2010/09/07 08:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 08:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 08:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 08:47:30 | 000,050,768 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2009/05/28 12:47:18 | 000,721,904 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2007/12/19 19:27:34 | 000,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\HP\QuickPlay\000.fcl -- ({22D78859-9CE9-4B77-BF18-AC83E81A9263})
DRV - [2007/09/19 13:05:00 | 007,626,400 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/09/09 15:12:28 | 000,176,640 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService)
DRV - [2007/07/11 10:30:22 | 000,007,168 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqRemHid.sys -- (HpqRemHid)
DRV - [2007/07/10 07:27:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007/06/18 17:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2007/03/21 22:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/03/06 19:15:58 | 001,059,112 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2007/02/24 14:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/02/16 14:50:32 | 000,012,032 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2007/01/23 16:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKLM\..\URLSearchHook: {437c4386-9237-441f-a940-009430030ee0} - C:\Program Files\Messenger_Plus_Live_CA-EN\tbMess.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live\tbMess.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {437c4386-9237-441f-a940-009430030ee0} - C:\Program Files\Messenger_Plus_Live_CA-EN\tbMess.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live\tbMess.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:51253

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.facebook.com/?ref=hp"
FF - prefs.js..extensions.enabledItems: {7c5c0f58-e061-457d-9033-77307f5ed00c}:1.5.39.0
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.863
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 51253
FF - prefs.js..network.proxy.type: 1


[2010/11/03 20:21:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathalie\AppData\Roaming\Mozilla\Extensions
[2010/07/09 02:13:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathalie\AppData\Roaming\Mozilla\Extensions\mozswing@mozswing.org
[2010/12/20 00:43:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\extensions
[2010/12/20 00:43:35 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2010/12/20 00:43:36 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\extensions\engine@conduit.com
File not found (No name found) -- C:\PROGRAM FILES\AVG\AVG9\FIREFOX
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{7C5C0F58-E061-457D-9033-77307F5ED00C}

O1 HOSTS File: ([2010/12/16 23:02:45 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Messenger Plus Live CA-EN Toolbar) - {437c4386-9237-441f-a940-009430030ee0} - C:\Program Files\Messenger_Plus_Live_CA-EN\tbMess.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Messenger Plus Live Toolbar) - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live\tbMess.dll (Conduit Ltd.)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Messenger Plus Live CA-EN Toolbar) - {437c4386-9237-441f-a940-009430030ee0} - C:\Program Files\Messenger_Plus_Live_CA-EN\tbMess.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (Messenger Plus Live Toolbar) - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live\tbMess.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Messenger Plus Live CA-EN Toolbar) - {437C4386-9237-441F-A940-009430030EE0} - C:\Program Files\Messenger_Plus_Live_CA-EN\tbMess.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Messenger Plus Live Toolbar) - {9B339F6E-DDCD-401B-8764-230ADBD01761} - C:\Program Files\Messenger_Plus_Live\tbMess.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKCU..\Run: [Gestionnaire Antidote.exe] C:\Program Files\Druide\Antidote\Gestionnaire Antidote.exe (Druide informatique inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} [You must be registered and logged in to see this link.] (Microsoft Office Template and Media Control)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} [You must be registered and logged in to see this link.] (Facebook Photo Uploader 5 Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} [You must be registered and logged in to see this link.] (Shockwave ActiveX Control)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [You must be registered and logged in to see this link.] (MSN Photo Upload Tool)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} [You must be registered and logged in to see this link.] (Solitaire Showdown Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} [You must be registered and logged in to see this link.] (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} [You must be registered and logged in to see this link.] (Reg Error: Value error.)
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} [You must be registered and logged in to see this link.] (MSN Games – Texas Holdem Poker)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} [You must be registered and logged in to see this link.] (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} [You must be registered and logged in to see this link.] (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_23)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} [You must be registered and logged in to see this link.] (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} [You must be registered and logged in to see this link.] (Minesweeper Flags Class)
O16 - DPF: CabBuilder [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Nathalie\Pictures\InStyle-Outtakes-Wallpaper-olivia-wilde-3805779-1280-800.jpg
O24 - Desktop BackupWallPaper: C:\Users\Nathalie\Pictures\InStyle-Outtakes-Wallpaper-olivia-wilde-3805779-1280-800.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/24 19:29:08 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2005/09/11 08:18:54 | 000,000,340 | -HS- | M] () - D:\AUTOMODE -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - (Hewlett-Packard Co.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE - (Microsoft Corporation)
MsConfig - StartUpReg: MsnMsgr - hkey= - key= - C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe (Microsoft Corporation)
MsConfig - StartUpReg: UCam_Menu - hkey= - key= - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
MsConfig - State: "startup" - 2

SafeBootMin: AppMgmt - File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - File not found
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0.3
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0.3
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2F6EFCE6-10DF-49F9-9E64-9AE3775B2588} - Microsoft .NET Framework 1.1 Security Update (KB2416447)
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/04/29 01:07:25 | 000,000,000 | ---D | C] -- C:\Users\Nathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cooking Academy 2 World Cuisine
[2011/04/29 01:07:10 | 000,000,000 | ---D | C] -- C:\Windows\Cooking Academy 2 World Cuisine
[2011/04/27 10:26:27 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011/04/27 10:26:27 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011/04/27 10:26:05 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/04/16 23:39:05 | 000,000,000 | ---D | C] -- C:\Users\Nathalie\AppData\Roaming\CupcakeCafe
[2011/04/16 22:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2011/04/16 22:25:43 | 000,000,000 | ---D | C] -- C:\Users\Nathalie\AppData\Roaming\uTorrent
[1 C:\Users\Nathalie\Documents\*.tmp files -> C:\Users\Nathalie\Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/15 14:58:36 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/05/15 14:58:16 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011/05/15 14:54:56 | 000,067,100 | ---- | M] () -- C:\Users\Nathalie\AppData\Roaming\nvModes.001
[2011/05/15 14:54:55 | 000,067,100 | ---- | M] () -- C:\Users\Nathalie\AppData\Roaming\nvModes.dat
[2011/05/15 14:53:33 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/05/15 14:53:33 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/15 14:53:28 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/05/15 14:53:23 | 3220,037,632 | -HS- | M] () -- C:\hiberfil.sys
[2011/05/15 14:31:25 | 000,002,191 | ---- | M] () -- C:\Users\Nathalie\Desktop\iTunes.lnk
[2011/05/15 14:28:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/05/15 14:02:00 | 000,235,520 | ---- | M] () -- C:\Users\Nathalie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/15 13:35:22 | 000,002,587 | ---- | M] () -- C:\Users\Nathalie\Desktop\Microsoft Office Word 2007.lnk
[2011/05/15 12:00:58 | 000,008,268 | ---- | M] () -- C:\Users\Nathalie\AppData\Local\d3d9caps.dat
[2011/05/15 11:34:59 | 000,002,136 | ---- | M] () -- C:\Users\Nathalie\AppData\Roaming\A339.C3A
[2011/05/15 11:33:53 | 000,011,012 | -HS- | M] () -- C:\Users\Nathalie\AppData\Local\83ugwuk5b886k
[2011/05/15 11:33:53 | 000,011,012 | -HS- | M] () -- C:\ProgramData\83ugwuk5b886k
[2011/05/15 11:31:17 | 000,215,314 | -HS- | M] () -- C:\Users\Nathalie\AppData\Local\pbe.exe
[2011/05/15 11:31:17 | 000,215,314 | -HS- | M] () -- C:\Users\Nathalie\AppData\Local\dvl.exe
[2011/05/13 17:29:05 | 000,001,971 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/05/08 23:33:32 | 000,001,940 | ---- | M] () -- C:\Users\Nathalie\Desktop\Minesweeper.lnk
[2011/04/29 00:31:20 | 000,002,190 | ---- | M] () -- C:\Users\Public\Desktop\WildTangent Games App - hp.lnk
[2011/04/21 14:34:28 | 000,730,526 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2011/04/21 14:34:28 | 000,652,294 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/21 14:34:28 | 000,155,136 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2011/04/21 14:34:28 | 000,129,068 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/16 22:26:09 | 000,000,736 | ---- | M] () -- C:\Users\Nathalie\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2011/04/16 22:26:09 | 000,000,712 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2011/04/15 23:14:56 | 000,392,296 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[1 C:\Users\Nathalie\Documents\*.tmp files -> C:\Users\Nathalie\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/15 12:30:58 | 3220,037,632 | -HS- | C] () -- C:\hiberfil.sys
[2011/05/15 11:31:47 | 000,011,012 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\83ugwuk5b886k
[2011/05/15 11:31:47 | 000,011,012 | -HS- | C] () -- C:\ProgramData\83ugwuk5b886k
[2011/05/15 11:31:17 | 000,215,314 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\pbe.exe
[2011/05/15 11:31:17 | 000,215,314 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\dvl.exe
[2011/05/15 11:31:17 | 000,002,136 | ---- | C] () -- C:\Users\Nathalie\AppData\Roaming\A339.C3A
[2011/05/08 23:33:32 | 000,001,940 | ---- | C] () -- C:\Users\Nathalie\Desktop\Minesweeper.lnk
[2011/04/16 22:26:09 | 000,000,736 | ---- | C] () -- C:\Users\Nathalie\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2011/04/16 22:26:09 | 000,000,712 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2011/04/04 00:08:06 | 000,009,652 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\j638u7q3443b5j
[2011/04/04 00:08:06 | 000,009,652 | -HS- | C] () -- C:\ProgramData\j638u7q3443b5j
[2011/04/04 00:07:49 | 000,228,230 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\gql.exe
[2011/04/04 00:07:48 | 000,228,230 | -HS- | C] () -- C:\Users\Nathalie\AppData\Local\bpx.exe
[2011/03/13 19:07:49 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll
[2011/01/20 14:23:01 | 000,000,583 | ---- | C] () -- C:\Windows\eReg.dat
[2010/12/16 22:30:32 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010/12/15 22:03:18 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2010/12/15 22:03:18 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010/12/15 22:03:18 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2010/12/15 22:03:18 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010/12/15 22:03:18 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010/08/12 03:13:12 | 000,000,183 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/07/22 01:42:14 | 000,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll.old
[2010/02/27 11:22:19 | 000,008,268 | ---- | C] () -- C:\Users\Nathalie\AppData\Local\d3d9caps.dat
[2009/11/27 20:18:04 | 000,000,156 | ---- | C] () -- C:\Windows\Antidote.ini
[2009/11/15 01:03:03 | 000,000,226 | ---- | C] () -- C:\Users\Nathalie\AppData\Roaming\wklnhst.dat
[2009/09/18 07:42:32 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/18 07:42:31 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/08/09 20:35:33 | 000,022,098 | ---- | C] () -- C:\Users\Nathalie\AppData\Roaming\UserTile.png
[2009/05/13 12:20:25 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/12/31 02:57:00 | 000,000,227 | ---- | C] () -- C:\Windows\PowerReg.dat
[2008/11/10 00:33:58 | 000,000,000 | ---- | C] () -- C:\Windows\popcinfo.dat
[2008/10/18 02:42:29 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2008/09/12 13:53:42 | 000,157,529 | ---- | C] () -- C:\Windows\hpoins28.dat
[2008/08/28 20:28:31 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2008/08/09 18:10:05 | 000,067,100 | ---- | C] () -- C:\Users\Nathalie\AppData\Roaming\nvModes.001
[2008/08/08 14:53:28 | 000,067,100 | ---- | C] () -- C:\Users\Nathalie\AppData\Roaming\nvModes.dat
[2008/08/07 20:26:46 | 000,235,520 | ---- | C] () -- C:\Users\Nathalie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/08/06 21:12:39 | 000,101,605 | ---- | C] () -- C:\Windows\hpqins13.dat
[2008/06/18 06:49:04 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2008/06/18 06:45:26 | 000,001,732 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2008/04/24 17:41:10 | 000,730,526 | ---- | C] () -- C:\Windows\System32\perfh00C.dat
[2008/04/24 17:41:10 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat
[2008/04/24 17:41:10 | 000,155,136 | ---- | C] () -- C:\Windows\System32\perfc00C.dat
[2008/04/24 17:41:10 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat
[2007/12/12 17:01:47 | 000,000,932 | ---- | C] () -- C:\Windows\hpomdl28.dat
[2006/11/02 05:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 05:47:37 | 000,392,296 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 05:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 03:33:01 | 000,652,294 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 03:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 03:33:01 | 000,129,068 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 03:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 03:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 01:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 01:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 00:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 00:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/03/09 02:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2003/01/21 02:20:21 | 000,000,140 | -H-- | C] () -- C:\Windows\AJ820503.bin
[1999/01/22 11:46:58 | 000,065,536 | ---- | C] () -- C:\Windows\System32\MSRTEDIT.DLL
[1998/01/12 01:00:00 | 000,040,448 | ---- | C] () -- C:\Windows\System32\REGOBJ.DLL

========== Custom Scans ==========


< %APPDATA%\Microsoft\*.* >
[2009/07/16 01:06:42 | 000,001,674 | -H-- | M] () -- C:\Users\Nathalie\AppData\Roaming\Microsoft\LastFlashConfig.WFC

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %USERPROFILE%\Desktop\*.exe >
[2010/12/15 22:00:43 | 003,991,489 | R--- | M] () -- C:\Users\Nathalie\Desktop\commy.exe
[2010/12/19 15:01:24 | 016,561,952 | ---- | M] (Sun Microsystems, Inc.) -- C:\Users\Nathalie\Desktop\jre-6u23-windows-i586.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\winn32\*.* >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.exe >

< %ProgramFiles%\TinyProxy. >

< %systemroot%\system32\*.* /lockedfiles >
[2011/05/15 14:53:33 | 000,003,216 | -H-- | M] () Unable to obtain MD5 -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/15 14:53:33 | 000,003,216 | -H-- | M] () Unable to obtain MD5 -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2008/01/20 19:24:26 | 000,347,136 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2008/01/20 19:24:26 | 000,214,528 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll
[2009/04/10 21:36:10 | 001,383,424 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\mshtml.tlb
[2006/11/02 00:29:16 | 000,016,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\stdole2.tlb

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.* /lockedfiles >

< %PROGRAMFILES%\*. >
[2008/08/06 21:23:58 | 000,000,000 | ---D | M] -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[2010/12/19 15:08:09 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2009/02/09 06:19:09 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player
[2010/12/14 16:44:26 | 000,000,000 | ---D | M] -- C:\Program Files\Alwil Software
[2008/11/08 20:17:48 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2010/01/10 14:33:09 | 000,000,000 | ---D | M] -- C:\Program Files\AVG
[2008/04/24 20:00:47 | 000,000,000 | ---D | M] -- C:\Program Files\AWS
[2010/08/08 14:19:48 | 000,000,000 | ---D | M] -- C:\Program Files\BitLord
[2010/04/12 13:18:08 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2008/06/18 06:51:14 | 000,000,000 | ---D | M] -- C:\Program Files\Broadcom
[2011/03/13 19:03:59 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2008/06/18 06:50:27 | 000,000,000 | ---D | M] -- C:\Program Files\CONEXANT
[2008/06/18 07:01:32 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2008/09/21 23:36:34 | 000,000,000 | ---D | M] -- C:\Program Files\Disc2Phone
[2010/10/08 11:53:32 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2009/11/27 20:17:24 | 000,000,000 | ---D | M] -- C:\Program Files\Druide
[2008/08/06 21:18:06 | 000,000,000 | ---D | M] -- C:\Program Files\Electronic Arts
[2010/07/22 00:23:36 | 000,000,000 | ---D | M] -- C:\Program Files\Enigma Software Group
[2010/12/07 01:29:50 | 000,000,000 | ---D | M] -- C:\Program Files\GetData
[2011/03/13 18:19:13 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2008/12/31 02:56:27 | 000,000,000 | ---D | M] -- C:\Program Files\Hasbro Interactive
[2010/12/14 23:17:01 | 000,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2008/08/06 21:13:26 | 000,000,000 | ---D | M] -- C:\Program Files\HP
[2011/04/14 11:11:17 | 000,000,000 | ---D | M] -- C:\Program Files\HP Games
[2008/06/18 06:57:01 | 000,000,000 | ---D | M] -- C:\Program Files\HPQ
[2011/01/20 13:51:46 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2011/04/14 11:11:25 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/06/15 02:00:36 | 000,000,000 | ---D | M] -- C:\Program Files\iOrgSoft
[2010/04/12 13:24:51 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2010/04/12 13:25:45 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2010/12/19 15:02:12 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2011/03/13 22:59:29 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/01/20 13:52:07 | 000,000,000 | ---D | M] -- C:\Program Files\Maxis
[2010/12/22 17:19:25 | 000,000,000 | ---D | M] -- C:\Program Files\McAfee Security Scan
[2011/02/04 11:49:27 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger Plus! Live
[2010/02/26 03:57:35 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger_Plus_Live
[2011/02/04 11:52:24 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger_Plus_Live_CA-EN
[2009/04/26 21:49:20 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2008/08/28 21:07:27 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2011/04/22 11:40:22 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2010/12/15 04:09:02 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2010/06/25 03:03:09 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2010/10/08 16:48:50 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2009/05/12 21:24:41 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2008/04/24 19:28:46 | 000,000,000 | ---D | M] -- C:\Program Files\muvee Technologies
[2008/06/18 06:48:49 | 000,000,000 | ---D | M] -- C:\Program Files\NetWaiting
[2010/01/10 19:54:37 | 000,000,000 | ---D | M] -- C:\Program Files\Norton Security Scan
[2008/08/06 21:26:04 | 000,000,000 | R--D | M] -- C:\Program Files\Online Services
[2009/01/02 02:50:03 | 000,000,000 | ---D | M] -- C:\Program Files\PhotoScape
[2010/04/12 13:22:27 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2011/04/19 20:41:00 | 000,000,000 | ---D | M] -- C:\Program Files\RealArcade
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2008/09/12 17:44:25 | 000,000,000 | ---D | M] -- C:\Program Files\ReflexiveArcade
[2011/03/13 22:17:01 | 000,000,000 | ---D | M] -- C:\Program Files\Safe Returner
[2008/08/30 15:22:41 | 000,000,000 | ---D | M] -- C:\Program Files\Shockwave.com
[2010/12/12 20:12:21 | 000,000,000 | R--D | M] -- C:\Program Files\Skype
[2008/08/28 21:07:03 | 000,000,000 | ---D | M] -- C:\Program Files\Snapshot Viewer
[2009/06/15 01:55:09 | 000,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy
[2011/05/15 13:00:12 | 000,000,000 | ---D | M] -- C:\Program Files\Spyware Doctor
[2010/07/23 12:19:47 | 000,000,000 | ---D | M] -- C:\Program Files\Sun
[2010/01/10 20:07:27 | 000,000,000 | ---D | M] -- C:\Program Files\SUPERAntiSpyware
[2008/06/18 06:47:25 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2010/12/16 22:31:28 | 000,000,000 | ---D | M] -- C:\Program Files\TorrentMan
[2006/11/02 06:01:55 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2011/04/16 22:26:09 | 000,000,000 | ---D | M] -- C:\Program Files\uTorrent
[2011/04/10 12:59:20 | 000,000,000 | ---D | M] -- C:\Program Files\uTorrentBar
[2009/01/22 19:03:14 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2011/04/28 20:22:25 | 000,000,000 | ---D | M] -- C:\Program Files\WildGames
[2010/12/19 20:11:07 | 000,000,000 | ---D | M] -- C:\Program Files\WildTangent Games
[2010/10/08 16:48:51 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2010/10/08 16:48:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2010/10/08 16:48:48 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2010/10/08 16:48:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2009/09/22 23:44:09 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2009/04/26 21:44:18 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2011/05/12 08:15:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2010/10/17 03:20:00 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2010/10/08 16:48:49 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2010/10/17 03:20:03 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2010/10/08 16:48:50 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2010/07/22 11:33:07 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2008/06/18 06:52:03 | 000,000,000 | ---D | M] -- C:\Program Files\WinTV
[2009/04/07 03:19:04 | 000,000,000 | ---D | M] -- C:\Program Files\Yahoo!


< MD5 for: AGP440.SYS >
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\ERDNT\cache\AGP440.sys
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\drivers\agp440.sys
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/20 19:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006/11/02 02:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\ERDNT\cache\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 02:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys

< MD5 for: DISK.SYS >
[2009/04/10 23:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\System32\drivers\disk.sys
[2009/04/10 23:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_5c850fad\disk.sys
[2009/04/10 23:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) MD5=5D4AEFC3386920236A548271F8F1AF6A -- C:\Windows\winsxs\x86_disk.inf_31bf3856ad364e35_6.0.6002.18005_none_fbb1faf0714e4ea6\disk.sys
[2008/01/20 19:23:20 | 000,055,352 | ---- | M] (Microsoft Corporation) MD5=64109E623ABD6955C8FB110B592E68B7 -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_90722180\disk.sys
[2008/01/20 19:23:20 | 000,055,352 | ---- | M] (Microsoft Corporation) MD5=64109E623ABD6955C8FB110B592E68B7 -- C:\Windows\winsxs\x86_disk.inf_31bf3856ad364e35_6.0.6001.18000_none_f9c681e4742c835a\disk.sys
[2006/11/02 02:49:51 | 000,052,840 | ---- | M] (Microsoft Corporation) MD5=841AF4C4D41D3E3B2F244E976B0F7963 -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_e0b0b355\disk.sys

< MD5 for: NETLOGON.DLL >
[2009/04/10 23:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\ERDNT\cache\netlogon.dll
[2009/04/10 23:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/10 23:28:23 | 000,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/20 19:24:05 | 000,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2006/11/02 02:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/20 19:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\drivers\nvstor.sys
[2008/01/20 19:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/20 19:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-05-14 00:18:07

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\IEXPLORE.EXE" [2009/04/10 23:27:44 | 000,636,080 | ---- | M] (Microsoft Corporation)

< hklm\software\clients\startmenuinternet|command /64 /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --show-icons [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --hide-icons [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files\Google\Chrome\Application\chrome.exe" [2011/05/07 04:57:16 | 001,010,232 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2008/01/20 19:24:17 | 000,070,656 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\IEXPLORE.EXE" [2009/04/10 23:27:44 | 000,636,080 | ---- | M] (Microsoft Corporation)

========== Alternate Data Streams ==========

@Alternate Data Stream - 163 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:EAD001CC
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:65241CBC
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5F1019FF
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:9857FAE3
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:CF61CE5A
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:641C3888
@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:A561576B
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:60A4BB64

< End of report >

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 5:32 am

aswMBR version 0.9.5.256 Copyright(c) 2011 AVAST Software
Run date: 2011-05-15 15:25:30
-----------------------------
15:25:30.063 OS Version: Windows 6.0.6002 Service Pack 2
15:25:30.063 Number of processors: 2 586 0x6802
15:25:30.064 ComputerName: NATHALIE-PC UserName: Nathalie
15:25:33.255 Initialize success
15:25:35.498 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3
15:25:35.501 Disk 0 Vendor: WDC_WD2500BEVS-60UST0 01.01A01 Size: 238475MB BusType: 3
15:25:37.538 Disk 0 MBR read successfully
15:25:37.541 Disk 0 MBR scan
15:25:37.545 Disk 0 unknown MBR code
15:25:39.560 Disk 0 scanning sectors +488392065
15:25:39.622 Disk 0 scanning C:\Windows\system32\drivers
15:25:49.876 Service scanning
15:25:53.216 Disk 0 trace - called modules:
15:25:53.238 ntkrnlpa.exe CLASSPNP.SYS disk.sys PCTCore.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys
15:25:53.239 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x876e0ac8]
15:25:53.240 3 CLASSPNP.SYS[8bfa78b3] -> nt!IofCallDriver -> [0x875dd600]
15:25:53.240 5 PCTCore.sys[8075beae] -> nt!IofCallDriver -> [0x86fd1918]
15:25:53.240 7 acpi.sys[806086bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-3[0x86f1fb98]
15:25:53.242 Scan finished successfully
15:29:11.622 Disk 0 MBR has been saved successfully to "C:\Users\Guest\Desktop\MBR.dat"
15:29:11.631 The log file has been saved successfully to "C:\Users\Guest\Desktop\aswMBR.txt"

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by Belahzur on Mon 16 May 2011, 8:02 am

Hello.

Please download ComboFix from BleepingComputer.com

Alternate link: GeeksToGo.com


Rename ComboFix.exe to commy.exe before you save it to your Desktop

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
  • Click Start then copy paste the following command into the search box & hit enter: "%userprofile%\desktop\commy.exe" /stepdel
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. This will not install in Vista. Just continue scanning, and skip the console install.
  • When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.


@RealBelahzur - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur

Manager | Tech Officer
Manager | Tech Officer

Posts : 34917
Joined : 2008-08-04
Operating System : XP SP3 Media Centre

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 8:59 am

ComboFix 11-05-15.03 - Nathalie 15/05/2011 18:36:01.9.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.3070.1610 [GMT -7:00]
Running from: c:\users\Guest\Desktop\commy.exe
SP: Spyware Doctor *Disabled/Updated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Guest\Firefox Setup 4.0.1.exe
c:\users\Nathalie\AppData\Local\bpx.exe
c:\users\Nathalie\AppData\Local\dvl.exe
c:\users\Nathalie\AppData\Local\gql.exe
c:\users\Nathalie\AppData\Local\pbe.exe
c:\windows\system32\regobj.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-04-16 to 2011-05-16 )))))))))))))))))))))))))))))))
.
.
2011-05-16 01:45 . 2011-05-16 01:45 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-05-16 01:45 . 2011-05-16 01:45 -------- d-----w- c:\users\Guest\AppData\Local\temp
2011-05-16 01:45 . 2011-05-16 01:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-14 00:18 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92D2EC0A-8C3F-464B-BB0E-F49243C87735}\mpengine.dll
2011-05-11 04:34 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-04-29 08:07 . 2011-04-29 08:07 -------- d-----w- c:\windows\Cooking Academy 2 World Cuisine
2011-04-27 17:26 . 2011-03-03 15:40 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-04-27 17:26 . 2011-03-03 13:35 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-04-27 17:26 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-17 06:39 . 2011-04-17 06:39 -------- d-----w- c:\users\Nathalie\AppData\Roaming\CupcakeCafe
2011-04-17 05:26 . 2011-04-17 05:26 -------- d-----w- c:\program files\uTorrent
2011-04-17 05:25 . 2011-05-15 21:52 -------- d-----w- c:\users\Nathalie\AppData\Roaming\uTorrent
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-14 02:25 . 2011-03-14 02:04 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2011-03-14 02:25 . 2011-03-14 02:04 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2011-03-10 17:03 . 2011-04-14 17:32 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 17:03 . 2011-04-14 17:32 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-03 15:42 . 2011-04-14 17:27 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 17:26 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 17:26 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 17:26 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 17:26 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:25 . 2011-04-14 17:31 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-14 17:31 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-02-22 14:13 . 2011-03-23 04:12 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-22 13:33 . 2011-03-23 04:12 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-02-22 13:33 . 2011-03-23 04:12 797696 ----a-w- c:\windows\system32\FntCache.dll
2011-02-22 13:24 . 2011-04-14 17:32 213504 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-02-22 13:24 . 2011-04-14 17:32 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-02-22 13:23 . 2011-04-14 17:32 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-22 13:23 . 2011-04-14 17:32 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-02-18 16:38 . 2011-04-14 17:31 834048 ----a-w- c:\windows\system32\wininet.dll
2011-02-18 15:45 . 2011-04-14 17:31 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-02-18 14:49 . 2011-04-14 17:31 389632 ----a-w- c:\windows\system32\html.iec
2011-02-18 14:03 . 2011-04-14 17:32 305152 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-18 14:03 . 2011-04-14 17:32 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-02-18 14:03 . 2011-04-14 17:32 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-02-16 16:21 . 2011-04-14 17:27 430080 ----a-w- c:\windows\system32\vbscript.dll
2011-02-16 16:16 . 2011-04-14 17:32 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-02-16 14:02 . 2011-04-14 17:32 292864 ----a-w- c:\windows\system32\atmfd.dll
2011-04-14 16:47 . 2011-05-15 23:05 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 9:00 am

((((((((((((((((((((((((((((( [You must be registered and logged in to see this link.] )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-24 18:23 . 2009-10-09 21:56 10240 c:\windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_7.0.6001.18181_none_0751757cbccdee84\winrssrv.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 20480 c:\windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_7.0.6001.18181_none_0751757cbccdee84\winrshost.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 40448 c:\windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_7.0.6001.18181_none_0751757cbccdee84\winrs.exe
+ 2011-02-24 18:23 . 2009-10-09 21:55 54272 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WsmRes.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 12800 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\wsmprovhost.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 10240 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\wsmplpxy.dll
+ 2011-03-09 21:43 . 2010-12-17 17:07 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22550_none_3228141ddc14a331\tsgqec.dll
+ 2009-08-12 18:27 . 2009-04-11 06:28 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18356_none_31a47728c2f19e4a\tsgqec.dll
+ 2011-03-09 21:43 . 2010-12-17 14:55 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22815_none_3071e357dec95cfc\tsgqec.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18564_none_2fb132dac5d53542\tsgqec.dll
+ 2011-03-09 21:43 . 2010-12-17 15:11 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.22550_none_501659f63783fcb2\tscupgrd.exe
+ 2009-09-18 14:41 . 2009-04-11 06:28 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.18356_none_4f92bd011e60f7cb\tscupgrd.exe
+ 2011-03-09 21:43 . 2010-12-17 13:35 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6001.22815_none_4e6029303a38b67d\tscupgrd.exe
+ 2008-01-21 02:23 . 2008-01-21 02:23 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6001.18564_none_4d9f78b321448ec3\tscupgrd.exe
+ 2011-04-14 17:32 . 2011-02-22 14:56 80384 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.22594_none_8cedc374a04f22ca\mrxsmb20.sys
+ 2011-04-14 17:32 . 2011-02-22 13:24 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18409_none_8cca776786e4063a\mrxsmb20.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 79872 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.22859_none_8b3792aea303dc95\mrxsmb20.sys
+ 2011-04-14 17:32 . 2011-02-22 12:52 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6001.18604_none_8adf022789c2353c\mrxsmb20.sys
+ 2011-01-12 05:48 . 2010-12-14 18:29 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.22547_none_27559a9f7d2695f0\sdshext.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18353_none_26bd2ada6414af94\sdshext.dll
+ 2011-01-12 05:48 . 2010-12-14 17:50 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.22812_none_258a97097fec6e46\sdshext.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.18561_none_24c9e68c66f8468c\sdshext.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 24064 c:\windows\winsxs\x86_microsoft-windows-powershell-sip_31bf3856ad364e35_7.0.6001.18181_none_59899ff38dd96759\pwrshsip.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 20480 c:\windows\winsxs\x86_microsoft-windows-powershell-events_31bf3856ad364e35_7.0.6001.18181_none_c9ed22492e2f9a7e\PSEvents.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 41472 c:\windows\winsxs\x86_microsoft-windows-p..rshell-wsman-plugin_31bf3856ad364e35_7.0.6001.18181_none_682a3d6d73eb8b75\pwrshplugin.dll
+ 2011-02-10 08:06 . 2011-01-20 16:10 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.22573_none_2dd506f0f1e0ce02\printfilterpipelineprxy.dll
+ 2011-02-10 08:06 . 2011-01-20 16:06 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18392_none_2d34c81dd8d44f9c\printfilterpipelineprxy.dll
+ 2011-02-10 08:06 . 2011-01-20 14:20 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22573_none_9e869ca3233b9b1e\rrinstaller.exe
+ 2011-02-10 08:06 . 2011-01-20 16:09 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22573_none_9e869ca3233b9b1e\mfps.dll
+ 2011-02-10 08:06 . 2011-01-20 14:20 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22573_none_9e869ca3233b9b1e\mfpmp.exe
+ 2009-09-10 03:19 . 2009-04-11 06:27 53248 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18392_none_9de65dd00a2f1cb8\rrinstaller.exe
+ 2011-02-10 08:06 . 2011-01-20 16:04 98816 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18392_none_9de65dd00a2f1cb8\mfps.dll
+ 2009-09-10 03:19 . 2009-04-11 06:27 24576 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18392_none_9de65dd00a2f1cb8\mfpmp.exe
+ 2011-04-14 17:27 . 2011-03-03 15:44 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.22601_none_7c2248976ecf9be6\INETRES.dll
+ 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18417_none_7b93dbb655b4b2f0\INETRES.dll
+ 2011-04-14 17:27 . 2011-03-03 12:59 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22867_none_7a00f6fd71d4894b\INETRES.dll
+ 2006-11-02 07:28 . 2006-11-02 08:48 84480 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18612_none_79a866765892e1f2\INETRES.dll
+ 2011-01-12 05:48 . 2010-12-24 15:45 57344 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-rds-isapi_31bf3856ad364e35_6.0.6002.22555_none_7295770d0d34a8b0\msadcs.dll
+ 2011-01-12 05:48 . 2010-12-28 15:53 57344 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-rds-isapi_31bf3856ad364e35_6.0.6002.18362_none_71fe0791f421dbab\msadcs.dll
+ 2011-01-12 05:48 . 2010-12-28 14:33 57344 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-rds-isapi_31bf3856ad364e35_6.0.6001.22821_none_70cb73c10ff99a5d\msadcs.dll
+ 2011-01-12 05:48 . 2010-12-28 14:56 57344 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-rds-isapi_31bf3856ad364e35_6.0.6001.18570_none_700ac343f70572a3\msadcs.dll
+ 2011-02-10 08:06 . 2011-01-20 16:07 37376 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.22573_none_9f60824b84ed5ee6\cdd.dll
+ 2011-02-10 08:06 . 2011-01-20 16:02 37376 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.18392_none_9ec043786be0e080\cdd.dll
+ 2011-04-14 17:31 . 2011-02-18 13:48 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22857_none_2fbc9c88333e49ba\ieUnatt.exe
+ 2011-02-10 08:06 . 2010-12-20 13:52 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22816_none_2fe6dbee331ec09f\ieUnatt.exe
+ 2010-06-10 09:34 . 2010-05-04 16:53 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18602_none_2f640c0119fca261\ieUnatt.exe
+ 2010-06-10 09:34 . 2010-05-04 16:53 26624 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18565_none_2f262b711a2a98e5\ieUnatt.exe
+ 2011-04-14 17:31 . 2011-02-18 13:48 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22857_none_f3c822ffd3666532\mshtmler.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22857_none_f3c822ffd3666532\ieencode.dll
+ 2011-02-10 08:06 . 2010-12-20 13:51 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22816_none_f3f26265d346dc17\mshtmler.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.22816_none_f3f26265d346dc17\ieencode.dll
+ 2006-11-02 07:33 . 2006-11-02 07:33 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18602_none_f36f9278ba24bdd9\mshtmler.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18602_none_f36f9278ba24bdd9\ieencode.dll
+ 2006-11-02 07:33 . 2006-11-02 07:33 48128 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18565_none_f331b1e8ba52b45d\mshtmler.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 78336 c:\windows\winsxs\x86_microsoft-windows-ie-htmleditingsupport_31bf3856ad364e35_6.0.6001.18565_none_f331b1e8ba52b45d\ieencode.dll
+ 2011-04-14 17:31 . 2011-02-18 15:17 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22857_none_ae8cbe4c2005b27d\admparse.dll
+ 2011-02-10 08:06 . 2010-12-20 15:23 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22816_none_aeb6fdb21fe62962\admparse.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18602_none_ae342dc506c40b24\admparse.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 72704 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18565_none_adf64d3506f201a8\admparse.dll
+ 2011-04-14 17:31 . 2011-02-18 19:04 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22592_none_03f9c0c2b85e210c\WininetPlugin.dll
+ 2011-04-14 17:31 . 2011-02-18 19:00 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22592_none_03f9c0c2b85e210c\jsproxy.dll
+ 2011-02-10 08:06 . 2010-12-20 16:42 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22551_none_04240028b83e97f1\WininetPlugin.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22551_none_04240028b83e97f1\jsproxy.dll
+ 2009-06-10 19:33 . 2009-04-11 06:28 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18407_none_03d674b59ef3047c\WininetPlugin.dll
+ 2009-06-10 19:33 . 2009-04-11 06:28 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18407_none_03d674b59ef3047c\jsproxy.dll
+ 2009-06-10 19:33 . 2009-04-11 06:28 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18357_none_03a063339f1b930a\WininetPlugin.dll
+ 2009-06-10 19:33 . 2009-04-11 06:28 27648 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18357_none_03a063339f1b930a\jsproxy.dll
+ 2011-04-14 17:31 . 2011-02-18 15:23 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22857_none_02438ffcbb12dad7\WininetPlugin.dll
+ 2011-04-14 17:31 . 2011-02-18 15:20 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22857_none_02438ffcbb12dad7\jsproxy.dll
+ 2011-02-10 08:06 . 2010-12-20 15:27 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22816_none_026dcf62baf351bc\WininetPlugin.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22816_none_026dcf62baf351bc\jsproxy.dll
+ 2009-05-13 04:07 . 2008-02-22 05:01 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18602_none_01eaff75a1d1337e\WininetPlugin.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18602_none_01eaff75a1d1337e\jsproxy.dll
+ 2009-05-13 04:07 . 2008-02-22 05:01 64512 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18565_none_01ad1ee5a1ff2a02\WininetPlugin.dll
+ 2011-02-10 08:06 . 2010-12-20 15:38 28160 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18565_none_01ad1ee5a1ff2a02\jsproxy.dll
+ 2011-04-14 17:32 . 2011-02-16 18:45 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22589_none_abf5b7af710301e2\lpk.dll
+ 2011-04-14 17:32 . 2011-02-16 18:44 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22589_none_abf5b7af710301e2\fontsub.dll
+ 2011-04-14 17:32 . 2011-02-16 18:44 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22589_none_abf5b7af710301e2\dciman32.dll
+ 2011-04-14 17:32 . 2011-02-16 18:43 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22589_none_abf5b7af710301e2\atmlib.dll
+ 2011-02-10 08:06 . 2011-01-08 08:51 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22566_none_ac0856a970f57dfb\lpk.dll
+ 2011-02-10 08:06 . 2011-01-08 08:51 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22566_none_ac0856a970f57dfb\fontsub.dll
+ 2011-02-10 08:06 . 2011-01-08 08:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22566_none_ac0856a970f57dfb\dciman32.dll
+ 2011-02-10 08:06 . 2011-01-08 08:50 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22566_none_ac0856a970f57dfb\atmlib.dll
+ 2009-07-15 08:29 . 2009-06-15 14:52 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18405_none_abbe991c57a81d34\lpk.dll
+ 2010-12-15 04:37 . 2010-06-16 15:30 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18405_none_abbe991c57a81d34\fontsub.dll
+ 2009-07-15 08:29 . 2009-06-15 14:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18405_none_abbe991c57a81d34\dciman32.dll
+ 2011-04-14 17:32 . 2011-02-16 16:16 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18405_none_abbe991c57a81d34\atmlib.dll
+ 2009-07-15 08:29 . 2009-06-15 14:52 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18371_none_ab6ee69a57e47e48\lpk.dll
+ 2010-12-15 04:37 . 2010-06-16 15:30 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18371_none_ab6ee69a57e47e48\fontsub.dll
+ 2009-07-15 08:29 . 2009-06-15 14:51 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18371_none_ab6ee69a57e47e48\dciman32.dll
+ 2011-02-10 08:06 . 2011-01-08 08:47 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18371_none_ab6ee69a57e47e48\atmlib.dll
+ 2011-04-14 17:32 . 2011-02-16 15:04 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22854_none_aa2ab41973c8da38\lpk.dll
+ 2011-04-14 17:32 . 2011-02-16 15:04 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22854_none_aa2ab41973c8da38\fontsub.dll
+ 2011-04-14 17:32 . 2011-02-16 15:03 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22854_none_aa2ab41973c8da38\dciman32.dll
+ 2011-04-14 17:32 . 2011-02-16 15:02 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22854_none_aa2ab41973c8da38\atmlib.dll
+ 2011-02-10 08:06 . 2011-01-08 07:35 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22830_none_aa3c52c973bc3cfa\lpk.dll
+ 2011-02-10 08:06 . 2011-01-08 07:34 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22830_none_aa3c52c973bc3cfa\fontsub.dll
+ 2011-02-10 08:06 . 2011-01-08 07:34 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22830_none_aa3c52c973bc3cfa\dciman32.dll
+ 2011-02-10 08:06 . 2011-01-08 07:33 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22830_none_aa3c52c973bc3cfa\atmlib.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18599_none_a97ad5445ac72e97\lpk.dll
+ 2010-12-15 04:37 . 2010-06-16 15:12 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18599_none_a97ad5445ac72e97\fontsub.dll
+ 2009-07-15 08:29 . 2009-06-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18599_none_a97ad5445ac72e97\dciman32.dll
+ 2011-04-14 17:32 . 2011-02-16 15:29 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18599_none_a97ad5445ac72e97\atmlib.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 23552 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18579_none_a990751c5ab6f6b5\lpk.dll
+ 2010-12-15 04:37 . 2010-06-16 15:12 72704 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18579_none_a990751c5ab6f6b5\fontsub.dll
+ 2009-07-15 08:29 . 2009-06-15 15:20 10240 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18579_none_a990751c5ab6f6b5\dciman32.dll
+ 2011-02-10 08:06 . 2011-01-08 07:50 34304 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18579_none_a990751c5ab6f6b5\atmlib.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 81408 c:\windows\winsxs\x86_microsoft-windows-eventlog-forwardplugin_31bf3856ad364e35_7.0.6001.18181_none_6685287079008786\wevtfwd.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 79872 c:\windows\winsxs\x86_microsoft-windows-eventcollector_31bf3856ad364e35_7.0.6001.18181_none_ec28a1fcffd9945e\wecutil.exe
+ 2011-02-24 18:23 . 2009-10-09 21:55 56320 c:\windows\winsxs\x86_microsoft-windows-eventcollector_31bf3856ad364e35_7.0.6001.18181_none_ec28a1fcffd9945e\wecapi.dll
+ 2011-04-14 17:31 . 2011-03-02 18:19 86528 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.22600_none_e4529ac0989d4191\dnsrslvr.dll
+ 2011-04-14 17:31 . 2011-03-02 15:40 25088 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.22600_none_e4529ac0989d4191\dnscacheugc.exe
+ 2011-04-14 17:31 . 2011-03-02 15:44 86528 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18416_none_e3c42ddf7f82589b\dnsrslvr.dll
+ 2011-04-14 17:31 . 2009-05-04 09:59 25088 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18416_none_e3c42ddf7f82589b\dnscacheugc.exe
+ 2011-04-14 17:31 . 2011-03-02 14:25 86528 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.22866_none_e23149269ba22ef6\dnsrslvr.dll
+ 2011-04-14 17:31 . 2011-03-02 12:58 25088 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.22866_none_e23149269ba22ef6\dnscacheugc.exe
+ 2011-04-14 17:31 . 2011-03-02 14:49 86528 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18611_none_e1d8b89f8260879d\dnsrslvr.dll
+ 2011-04-14 17:31 . 2009-05-04 10:11 25088 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18611_none_e1d8b89f8260879d\dnscacheugc.exe
+ 2011-04-14 17:32 . 2011-02-22 14:56 69632 c:\windows\winsxs\x86_microsoft-windows-bowser_31bf3856ad364e35_6.0.6002.22594_none_28725acd3ac9d36c\bowser.sys
+ 2011-04-14 17:32 . 2011-02-22 13:23 69632 c:\windows\winsxs\x86_microsoft-windows-bowser_31bf3856ad364e35_6.0.6002.18409_none_284f0ec0215eb6dc\bowser.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 69632 c:\windows\winsxs\x86_microsoft-windows-bowser_31bf3856ad364e35_6.0.6001.22859_none_26bc2a073d7e8d37\bowser.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 69632 c:\windows\winsxs\x86_microsoft-windows-bowser_31bf3856ad364e35_6.0.6001.18604_none_26639980243ce5de\bowser.sys
+ 2011-04-27 17:26 . 2011-03-03 18:15 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.22601_none_8472f7f377064d95\Apphlpdm.dll
+ 2011-04-27 17:26 . 2011-03-03 15:40 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6002.18417_none_83e48b125deb649f\Apphlpdm.dll
+ 2011-04-27 17:26 . 2011-03-03 14:24 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.22867_none_8251a6597a0b3afa\Apphlpdm.dll
+ 2011-04-27 17:26 . 2011-03-03 14:56 28672 c:\windows\winsxs\x86_microsoft-windows-a..-experience-apphelp_31bf3856ad364e35_6.0.6001.18612_none_81f915d260c993a1\Apphlpdm.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 15872 c:\windows\winsxs\msil_microsoft.wsman.management.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_be569b7f201fbc28\Microsoft.WSMan.Management.resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:59 13824 c:\windows\winsxs\msil_microsoft.wsman.management.resources_31bf3856ad364e35_7.0.6001.18181_en-us_1bd3c89c2d26b421\Microsoft.WSMan.Management.resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 69632 c:\windows\winsxs\msil_microsoft.powershell.security_31bf3856ad364e35_7.0.6001.18181_none_6893a9248814c6c8\Microsoft.PowerShell.Security.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 69632 c:\windows\winsxs\msil_microsoft.powershell.editor.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_08f4f8d12faacaa9\Microsoft.PowerShell.Editor.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 69632 c:\windows\winsxs\msil_microsoft.powershell.editor.resources_31bf3856ad364e35_7.0.6001.18181_en-us_667225ee3cb1c2a2\Microsoft.PowerShell.Editor.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 53248 c:\windows\winsxs\msil_microsoft.powershel..s.utility.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_5b5fa8c3bcc0e494\Microsoft.PowerShell.Commands.Utility.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 49152 c:\windows\winsxs\msil_microsoft.powershel..s.utility.resources_31bf3856ad364e35_7.0.6001.18181_en-us_b8dcd5e0c9c7dc8d\Microsoft.PowerShell.Commands.Utility.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 40960 c:\windows\winsxs\msil_microsoft.powershel..owershell.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_863901c1cdcf4418\Microsoft.PowerShell.Gpowershell.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 40960 c:\windows\winsxs\msil_microsoft.powershel..owershell.resources_31bf3856ad364e35_7.0.6001.18181_en-us_e3b62ededad63c11\Microsoft.PowerShell.Gpowershell.resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 45056 c:\windows\winsxs\msil_microsoft.powershel..nsolehost.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_ef69d3079c224e9f\Microsoft.PowerShell.ConsoleHost.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 40960 c:\windows\winsxs\msil_microsoft.powershel..nsolehost.resources_31bf3856ad364e35_7.0.6001.18181_en-us_4ce70024a9294698\Microsoft.PowerShell.ConsoleHost.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 28672 c:\windows\winsxs\msil_microsoft.powershel..hicalhost.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_dbd8f87a0a51cab1\Microsoft.PowerShell.GraphicalHost.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:59 16896 c:\windows\winsxs\msil_microsoft.powershel..hicalhost.resources_31bf3856ad364e35_7.0.6001.18181_en-us_395625971758c2aa\Microsoft.PowerShell.GraphicalHost.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 36864 c:\windows\winsxs\msil_microsoft.powershel..anagement.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_d85bb85592d8cccb\Microsoft.PowerShell.Commands.Management.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 36864 c:\windows\winsxs\msil_microsoft.powershel..anagement.resources_31bf3856ad364e35_7.0.6001.18181_en-us_35d8e5729fdfc4c4\Microsoft.PowerShell.Commands.Management.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 11776 c:\windows\winsxs\msil_microsoft.powershel..agnostics.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_43f368faf190b2b4\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 10752 c:\windows\winsxs\msil_microsoft.powershel..agnostics.resources_31bf3856ad364e35_7.0.6001.18181_en-us_a1709617fe97aaad\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 57344 c:\windows\winsxs\msil_microsoft.backgroun..transfer.management_31bf3856ad364e35_7.0.6001.18181_none_83153c4c305dca2c\Microsoft.BackgroundIntelligentTransfer.Management.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 54272 c:\windows\System32\WsmRes.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 12800 c:\windows\System32\wsmprovhost.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 10240 c:\windows\System32\wsmplpxy.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 10240 c:\windows\System32\winrssrv.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 20480 c:\windows\System32\winrshost.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 40448 c:\windows\System32\winrs.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 24064 c:\windows\System32\WindowsPowerShell\v1.0\pwrshsip.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 20480 c:\windows\System32\WindowsPowerShell\v1.0\PSEvents.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 81408 c:\windows\System32\wevtfwd.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 79872 c:\windows\System32\wecutil.exe
+ 2011-02-24 18:23 . 2009-10-09 21:55 56320 c:\windows\System32\wecapi.dll
- 2008-01-21 02:24 . 2008-01-21 02:24 56320 c:\windows\System32\wecapi.dll
+ 2008-01-21 01:58 . 2011-05-15 21:56 78524 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 13:05 . 2011-05-15 21:56 98620 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-08-07 04:10 . 2011-05-15 21:56 20980 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1777521922-3288485073-514130652-1000_UserData.bin
+ 2010-04-17 06:12 . 2010-04-17 06:12 48464 c:\windows\System32\sirenacm.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 41472 c:\windows\System32\pwrshplugin.dll
- 2010-10-17 10:04 . 2009-09-24 22:54 26112 c:\windows\System32\printfilterpipelineprxy.dll
+ 2011-02-10 08:06 . 2011-01-20 16:06 26112 c:\windows\System32\printfilterpipelineprxy.dll
- 2009-09-10 03:19 . 2009-04-11 06:28 98816 c:\windows\System32\mfps.dll
+ 2011-02-10 08:06 . 2011-01-20 16:04 98816 c:\windows\System32\mfps.dll
+ 2009-10-16 09:33 . 2009-10-16 09:33 41472 c:\windows\System32\drivers\usbaapl.sys
+ 2011-03-14 02:04 . 2009-11-23 20:54 88040 c:\windows\System32\drivers\PCTAppEvent.sys
- 2010-01-11 01:08 . 2010-01-08 00:07 38224 c:\windows\System32\drivers\mbamswissarmy.sys
+ 2010-01-11 01:08 . 2010-12-21 01:09 38224 c:\windows\System32\drivers\mbamswissarmy.sys
+ 2010-01-11 01:08 . 2010-12-21 01:08 20952 c:\windows\System32\drivers\mbam.sys
- 2008-01-21 02:24 . 2008-01-21 02:24 25088 c:\windows\System32\dnscacheugc.exe
+ 2011-04-14 17:31 . 2009-05-04 09:59 25088 c:\windows\System32\dnscacheugc.exe
+ 2008-08-07 04:05 . 2011-05-15 23:09 49152 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-08-07 04:05 . 2010-12-17 00:42 49152 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-04-29 03:22 . 2011-04-29 03:22 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012011042820110429\index.dat
+ 2011-04-29 03:22 . 2011-04-29 03:22 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012011041820110425\index.dat
+ 2011-04-14 07:20 . 2011-04-14 07:20 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012011041420110415\index.dat
+ 2011-04-22 19:34 . 2011-04-22 19:33 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012011041120110418\index.dat
+ 2011-04-12 00:46 . 2011-04-12 00:46 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012011040420110411\index.dat
- 2008-08-07 04:05 . 2010-12-17 00:42 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-08-07 04:05 . 2011-05-15 23:09 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-02-10 08:06 . 2011-01-20 16:07 37376 c:\windows\System32\cdd.dll
+ 2009-11-28 03:31 . 2011-05-08 23:33 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-11-28 03:31 . 2010-12-15 23:56 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-28 03:31 . 2011-05-08 23:33 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-11-28 03:31 . 2010-12-15 23:56 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-11-28 03:31 . 2010-12-15 23:56 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-11-28 03:31 . 2011-05-08 23:33 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-11-27 02:16 . 2010-12-17 00:41 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-27 02:16 . 2011-05-15 21:53 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-27 02:16 . 2011-05-15 21:53 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-11-27 02:16 . 2010-12-17 00:41 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2010-03-18 20:16 . 2010-03-18 20:16 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-25 10:04 . 2010-06-25 10:04 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-03-18 03:00 . 2011-03-18 03:00 90624 c:\windows\Installer\a65bf.msp
+ 2011-01-21 04:46 . 2011-01-21 04:46 27136 c:\windows\Installer\2a8f138.msi
+ 2011-01-21 04:46 . 2011-01-21 04:46 58880 c:\windows\Installer\2a8f10c.msi
+ 2011-04-25 07:23 . 2011-04-25 07:23 21504 c:\windows\Installer\23f4d28.msi
+ 2011-03-13 08:19 . 2011-03-13 08:19 24064 c:\windows\Installer\1592932.msi
+ 2011-01-21 04:46 . 2011-01-21 04:46 61272 c:\windows\Installer\{E6158D07-2637-4ECF-B576-37C489669174}\IconWlc.exe
+ 2011-01-21 04:47 . 2011-01-21 04:47 80395 c:\windows\Installer\{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}\MsblIco.Exe
+ 2011-05-12 15:13 . 2011-05-12 15:13 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
- 2010-11-10 19:11 . 2010-11-10 19:11 49936 c:\windows\Installer\{95120000-00AF-0409-0000-0000000FF1CE}\ppvwicon.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-11-10 19:11 . 2010-11-10 19:11 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2011-05-12 15:13 . 2011-05-12 15:13 35600 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2010-06-04 10:01 . 2011-04-22 10:02 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-06-04 10:01 . 2010-09-29 13:53 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\ViewerPS.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\reader_sl.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 84896 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\PDFPrevHndlr.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\eula.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acrotextextractor.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32Info.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 62376 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acroiehelpershim.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroIEHelper.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\Acrofx32.dll
+ 2006-10-27 04:07 . 2006-10-27 04:07 17680 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.4518\PXBPROXY.DLL
+ 2006-10-27 04:07 . 2006-10-27 04:07 67920 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.4518\PXBCOM.EXE
+ 2011-04-15 19:15 . 2011-04-15 19:15 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\d5041fb072aaf67ac45360a47e23f034\UIAutomationProvider.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\cc3e76326ee0e01ca86f8bb4456591c2\System.Windows.Presentation.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\81e1e3056d0c52027becb2f41ad9485d\System.Web.ApplicationServices.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ca5ab53ed64b64fbe0ea452dfb01fbb5\System.ServiceModel.Channels.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\20c8c3c45d3422008f183f450401169a\System.AddIn.Contract.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\104c4014266e2fc285779f63f14baee8\Microsoft.VisualC.ni.dll
+ 2011-04-15 19:09 . 2011-04-15 19:09 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\ac4619f20486b1bae2d8666b57568bb5\Accessibility.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\19e65cc6f0b9e1351800b927c5fc84a1\UIAutomationProvider.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\e69c1b0e202fa4de0f653ee726026764\System.Windows.Presentation.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\bfd1c65872e8a96bd8bdc7e2dbb50667\System.Web.DynamicData.Design.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\cec537ece447422ed4e333b09603f67c\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\5b563ccf0965537bcea6e69f113855c6\System.AddIn.Contract.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\14d5460fa6feebf34047abeed939f9bf\stdole.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\0c7b2a0925eee0967c30fc4cdf49a837\PresentationFontCache.ni.exe
+ 2011-04-16 07:04 . 2011-04-16 07:04 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c1c77ff2b66cce626dd6746f81bcc80\PresentationCFFRasterizer.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\d0abd01879b714a1b9348c754b91555c\napcrypt.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\3c595ce073efb126470b50f3fb2be7f6\Microsoft.WSMan.Runtime.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\008cd7119d80616a98d0db1c5a516415\Microsoft.WSMan.Runtime.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\669d9f05659d54eab4f5a3820916105b\Microsoft.Vsa.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\6c984804de9a0d7de8e7bd5f06ac5b1f\Microsoft.VisualC.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\da428d179025d9d6f5db8f7d004b4425\Microsoft.Build.Framework.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\85830306e830dcac325690954298ab02\Microsoft.Build.Framework.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 68608 c:\windows\assembly\NativeImages_v2.0.50727_32\loadmxf\103135b7b73cd7f6b297f47b32083e42\loadmxf.ni.exe
+ 2011-04-16 07:02 . 2011-04-16 07:02 57856 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\b9d02f5f6acc6c11170481d9928c48c4\ehiUserXp.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiReplay\790eeff5f3d082a96acbc6df241027ce\ehiReplay.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtCOM\fb5c854560932e1338036026076e1486\ehiExtCOM.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtCOM\5832727c866f22cb6bf4a8f39bd57cff\ehExtCOM.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\bbd8ff7eb576e32b912bcbe73b093419\dfsvc.ni.exe
+ 2011-04-16 07:01 . 2011-04-16 07:01 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\565d193dfea32659de5c814de5207abc\Accessibility.ni.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 15872 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Management.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:59 13824 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.WSMan.Management.resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 69632 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 28672 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:59 16896 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 40960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Gpowershell.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 40960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Gpowershell.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 69632 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Editor.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 69632 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Editor.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 45056 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 40960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 53248 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 49152 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 36864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 36864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 11776 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 10752 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 57344 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management\1.0.0.0__31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.dll
+ 2011-02-24 18:24 . 2009-10-09 21:56 2048 c:\windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_7.0.6001.18181_none_0751757cbccdee84\winrsmgr.dll
+ 2011-02-24 18:24 . 2009-10-09 21:56 2048 c:\windows\winsxs\x86_microsoft-windows-powershell-message_31bf3856ad364e35_7.0.6001.18181_none_1e5ff71bc38b82e2\pwrshmsg.dll
+ 2011-02-10 08:06 . 2011-01-20 14:20 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22573_none_9e869ca3233b9b1e\mferror.dll
+ 2009-09-10 03:19 . 2009-04-11 04:54 2048 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18392_none_9de65dd00a2f1cb8\mferror.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 4608 c:\windows\winsxs\x86_microsoft-windows-g..shell-exe.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_d462ddec7320f3e0\powershell_ise.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 4096 c:\windows\winsxs\x86_microsoft-windows-g..shell-exe.resources_31bf3856ad364e35_7.0.6001.18181_en-us_31e00b098027ebd9\powershell_ise.resources.dll
+ 2011-04-27 17:26 . 2011-03-03 15:20 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.22601_none_0e935657088f634a\AcRes.dll
+ 2006-11-02 07:11 . 2006-11-02 07:11 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6002.18417_none_0e04e975ef747a54\AcRes.dll
+ 2011-04-27 17:26 . 2011-03-03 12:50 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.22867_none_0c7204bd0b9450af\AcRes.dll
+ 2009-05-13 04:00 . 2008-03-08 01:58 2560 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c1_31bf3856ad364e35_6.0.6001.18612_none_0c197435f252a956\AcRes.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 7168 c:\windows\winsxs\msil_microsoft.wsman.runtime_31bf3856ad364e35_7.0.6001.18181_none_0f92f927782e1f17\Microsoft.WSMan.Runtime.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 9728 c:\windows\winsxs\msil_microsoft.powershell.security.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_d4e885ab89266182\Microsoft.PowerShell.Security.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 9216 c:\windows\winsxs\msil_microsoft.powershell.security.resources_31bf3856ad364e35_7.0.6001.18181_en-us_3265b2c8962d597b\Microsoft.PowerShell.Security.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 7680 c:\windows\winsxs\msil_microsoft.backgroun..anagement.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_18b5128d9cde5990\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 7168 c:\windows\winsxs\msil_microsoft.backgroun..anagement.resources_31bf3856ad364e35_7.0.6001.18181_en-us_76323faaa9e55189\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
+ 2011-02-24 18:24 . 2009-10-09 21:56 2048 c:\windows\System32\winrsmgr.dll

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 9:02 am

+ 2011-02-24 18:24 . 2009-10-09 21:56 2048 c:\windows\System32\WindowsPowerShell\v1.0\pwrshmsg.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 4608 c:\windows\System32\WindowsPowerShell\v1.0\fr-FR\powershell_ise.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 4096 c:\windows\System32\WindowsPowerShell\v1.0\en-US\powershell_ise.resources.dll
+ 2008-09-16 06:53 . 2011-05-07 07:49 5542 c:\windows\System32\WDI\ERCQueuedResolutions.dat
+ 2010-08-26 00:12 . 2011-02-08 20:16 2498 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1777521922-3288485073-514130652-501_UserData.bin
+ 2011-03-31 21:34 . 2011-03-31 21:34 9560 c:\windows\System32\networklist\icons\{0EED0C80-DD9F-4354-A570-7A2D957C13EA}_48.bin
+ 2011-03-31 21:34 . 2011-03-31 21:34 4280 c:\windows\System32\networklist\icons\{0EED0C80-DD9F-4354-A570-7A2D957C13EA}_32.bin
+ 2011-03-31 21:34 . 2011-03-31 21:34 2456 c:\windows\System32\networklist\icons\{0EED0C80-DD9F-4354-A570-7A2D957C13EA}_24.bin
+ 2011-05-15 21:53 . 2011-05-15 21:53 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2010-12-17 00:41 . 2010-12-17 00:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-05-15 21:53 . 2011-05-15 21:53 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2010-12-17 00:41 . 2010-12-17 00:41 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-15 19:09 . 2011-04-15 19:09 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\b1c4b8eb5d8e39b56b6808b1c171d48b\dfsvc.ni.exe
+ 2011-02-24 18:23 . 2009-10-09 21:57 7168 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Runtime\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Runtime.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 9728 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.PowerShell.Security.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 9216 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Security.Resources.dll
+ 2011-02-24 18:24 . 2009-10-12 21:51 7680 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_fr_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 7168 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
+ 2010-12-17 05:30 . 2010-12-17 05:30 2560 c:\windows\_MSRSTRT.EXE
+ 2011-04-14 17:26 . 2011-02-14 11:58 388936 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6002.22587_none_fd0571a814cab830\SOS.dll
+ 2011-04-14 17:26 . 2010-10-29 10:54 388936 c:\windows\winsxs\x86_netfx-sos_dll_b03f5f7f11d50a3a_6.0.6002.18403_none_13cb7137fb2a26ee\SOS.dll
+ 2011-04-14 17:26 . 2011-02-14 11:57 363856 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6002.22587_none_a8725c7b4b21684e\mscorjit.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 363856 c:\windows\winsxs\x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_6.0.6002.18403_none_bf385c0b3180d70c\mscorjit.dll
+ 2011-04-14 17:26 . 2011-02-14 11:57 989528 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6002.22587_none_143729e720d5dc1b\mscordacwks.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 989016 c:\windows\winsxs\x86_netfx-mscordacwks_b03f5f7f11d50a3a_6.0.6002.18403_none_2afd297707354ad9\mscordacwks.dll
+ 2011-02-24 18:24 . 2009-07-16 17:22 126976 c:\windows\winsxs\x86_microsoft.powershel..ershell.composition_31bf3856ad364e35_7.0.6001.18181_none_4f8b6a92365daccb\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 112640 c:\windows\winsxs\x86_microsoft.backgroun..r.management.module_31bf3856ad364e35_7.0.6001.18181_none_ca681ee026067a0d\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 241152 c:\windows\winsxs\x86_microsoft-windows-winrsplugins_31bf3856ad364e35_7.0.6001.18181_none_0751757cbccdee84\winrscmd.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 214016 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WsmWmiPl.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 145408 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WsmAuto.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 252416 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WSManMigrationPlugin.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 246272 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WSManHTTPConfig.exe
+ 2011-02-24 18:23 . 2009-08-01 06:27 201184 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\winrm.vbs
+ 2011-03-09 21:43 . 2010-12-29 18:32 429056 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6002.22558_none_e2ba2521a4cbd83e\EncDec.dll
+ 2011-03-09 21:43 . 2010-12-29 18:28 429056 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6002.18363_none_e220b5128bbad88b\EncDec.dll
+ 2011-03-09 21:43 . 2010-12-29 17:13 429056 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.22822_none_e0ee2141a792973d\EncDec.dll
+ 2011-03-09 21:43 . 2010-12-29 17:41 429056 c:\windows\winsxs\x86_microsoft-windows-tvencdec_31bf3856ad364e35_6.0.6001.18571_none_e02d70c48e9e6f83\EncDec.dll
+ 2011-03-09 21:43 . 2010-12-17 17:04 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22550_none_3228141ddc14a331\aaclient.dll
+ 2009-08-12 18:27 . 2009-04-11 06:28 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18356_none_31a47728c2f19e4a\aaclient.dll
+ 2011-03-09 21:43 . 2010-12-17 14:51 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22815_none_3071e357dec95cfc\aaclient.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 136192 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18564_none_2fb132dac5d53542\aaclient.dll
+ 2011-03-09 21:43 . 2010-12-17 15:11 677888 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.22550_none_501659f63783fcb2\mstsc.exe
+ 2011-03-09 21:43 . 2010-12-17 13:54 677888 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.18356_none_4f92bd011e60f7cb\mstsc.exe
+ 2011-03-09 21:43 . 2010-12-17 13:36 677888 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6001.22815_none_4e6029303a38b67d\mstsc.exe
+ 2011-03-09 21:43 . 2010-12-17 15:06 677888 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6001.18564_none_4d9f78b321448ec3\mstsc.exe
+ 2011-03-09 21:43 . 2010-12-29 18:32 153088 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6002.22558_none_34cdc7e2c7d1d766\sbeio.dll
+ 2011-03-09 21:43 . 2010-12-29 18:32 322560 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6002.22558_none_34cdc7e2c7d1d766\sbe.dll
+ 2011-03-09 21:43 . 2010-12-29 18:28 153088 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6002.18363_none_343457d3aec0d7b3\sbeio.dll
+ 2011-03-09 21:43 . 2010-12-29 18:28 322560 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6002.18363_none_343457d3aec0d7b3\sbe.dll
+ 2011-03-09 21:43 . 2010-12-29 17:14 153088 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6001.22822_none_3301c402ca989665\sbeio.dll
+ 2011-03-09 21:43 . 2010-12-29 17:14 323072 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6001.22822_none_3301c402ca989665\sbe.dll
+ 2011-03-09 21:43 . 2010-12-29 17:41 153088 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6001.18571_none_32411385b1a46eab\sbeio.dll
+ 2011-03-09 21:43 . 2010-12-29 17:41 323072 c:\windows\winsxs\x86_microsoft-windows-streambufferengine_31bf3856ad364e35_6.0.6001.18571_none_32411385b1a46eab\sbe.dll
+ 2011-02-10 08:06 . 2011-01-20 16:11 586240 c:\windows\winsxs\x86_microsoft-windows-stobject_31bf3856ad364e35_6.0.6002.22573_none_4c4a63306bf5f541\stobject.dll
+ 2011-02-10 08:06 . 2011-01-20 16:07 586240 c:\windows\winsxs\x86_microsoft-windows-stobject_31bf3856ad364e35_6.0.6002.18392_none_4baa245d52e976db\stobject.dll
+ 2011-04-14 17:32 . 2011-02-18 15:41 147456 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.22592_none_dbfd66b40d06c2ec\srv2.sys
+ 2011-04-14 17:32 . 2011-02-18 14:03 146432 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6002.18407_none_dbda1aa6f39ba65c\srv2.sys
+ 2011-04-14 17:32 . 2011-02-18 13:33 146432 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.22857_none_da4735ee0fbb7cb7\srv2.sys
+ 2011-04-14 17:32 . 2011-02-18 13:31 146432 c:\windows\winsxs\x86_microsoft-windows-smbserver-v2_31bf3856ad364e35_6.0.6001.18602_none_d9eea566f679d55e\srv2.sys
+ 2011-04-14 17:32 . 2011-02-18 15:42 305152 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6002.22592_none_dc0836a00cfea6fb\srv.sys
+ 2011-04-14 17:32 . 2011-02-18 14:03 305152 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6002.18407_none_dbe4ea92f3938a6b\srv.sys
+ 2011-04-14 17:32 . 2011-02-18 13:33 305152 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6001.22857_none_da5205da0fb360c6\srv.sys
+ 2011-04-14 17:32 . 2011-02-18 13:31 304640 c:\windows\winsxs\x86_microsoft-windows-smbserver-v1_31bf3856ad364e35_6.0.6001.18602_none_d9f97552f671b96d\srv.sys
+ 2011-04-14 17:32 . 2011-02-18 15:41 102912 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6002.22592_none_05e6fb7926b225dd\srvnet.sys
+ 2011-04-14 17:32 . 2011-02-18 14:03 102400 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6002.18407_none_05c3af6c0d47094d\srvnet.sys
+ 2011-04-14 17:32 . 2011-02-18 13:33 102912 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6001.22857_none_0430cab32966dfa8\srvnet.sys
+ 2011-04-14 17:32 . 2011-02-18 13:31 102400 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6001.18602_none_03d83a2c1025384f\srvnet.sys
+ 2011-04-14 17:32 . 2011-02-22 14:56 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6002.22594_none_81a43b0e67a6b0f7\mrxsmb.sys
+ 2011-04-14 17:32 . 2011-02-22 13:23 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6002.18409_none_8180ef014e3b9467\mrxsmb.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 106496 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6001.22859_none_7fee0a486a5b6ac2\mrxsmb.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 105984 c:\windows\winsxs\x86_microsoft-windows-smbminirdr_31bf3856ad364e35_6.0.6001.18604_none_7f9579c15119c369\mrxsmb.sys
+ 2011-04-14 17:32 . 2011-02-22 14:56 213504 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6002.22594_none_8ab7596261f7ef59\mrxsmb10.sys
+ 2011-04-14 17:32 . 2011-02-22 13:24 213504 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6002.18409_none_8a940d55488cd2c9\mrxsmb10.sys
+ 2011-04-14 17:32 . 2011-02-22 12:51 213504 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.22859_none_8901289c64aca924\mrxsmb10.sys
+ 2011-04-14 17:32 . 2011-02-22 12:52 213504 c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.18604_none_88a898154b6b01cb\mrxsmb10.sys
+ 2011-02-17 22:17 . 2009-07-10 11:49 247808 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6002.22169_none_cf6894a1335a0efa\shsvcs.dll
+ 2011-02-17 22:17 . 2009-07-10 11:47 247808 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6002.18063_none_ced8f61a1a41d726\shsvcs.dll
+ 2011-02-17 22:17 . 2009-07-10 11:59 247808 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6001.22467_none_cd80222536358728\shsvcs.dll
+ 2011-02-17 22:17 . 2009-07-10 12:21 247808 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6001.18287_none_cce0e39c1d282219\shsvcs.dll
+ 2011-02-17 22:17 . 2009-07-10 12:06 245760 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6000.21081_none_cb7e18273924cc2a\shsvcs.dll
+ 2011-02-17 22:17 . 2009-07-10 12:17 245760 c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6000.16883_none_caf6a3ce20052bcc\shsvcs.dll
+ 2011-02-10 08:06 . 2011-01-21 16:27 353280 c:\windows\winsxs\x86_microsoft-windows-shlwapi_31bf3856ad364e35_6.0.6002.22574_none_fc021fb5bb27f53c\shlwapi.dll
+ 2011-02-10 08:06 . 2011-01-21 16:35 353280 c:\windows\winsxs\x86_microsoft-windows-shlwapi_31bf3856ad364e35_6.0.6002.18393_none_fb61e0e2a21b76d6\shlwapi.dll
+ 2011-02-10 08:06 . 2011-01-21 15:05 352768 c:\windows\winsxs\x86_microsoft-windows-shlwapi_31bf3856ad364e35_6.0.6001.22839_none_fa4beeefbddcaf07\shlwapi.dll
+ 2011-02-10 08:06 . 2011-01-21 15:46 351744 c:\windows\winsxs\x86_microsoft-windows-shlwapi_31bf3856ad364e35_6.0.6001.18588_none_f98b3e72a4e8874d\shlwapi.dll
+ 2011-04-14 17:27 . 2011-02-16 18:47 434176 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6002.22589_none_4a7ca2864463a7df\vbscript.dll
+ 2011-04-14 17:27 . 2011-02-16 16:21 430080 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6002.18405_none_4a4583f32b08c331\vbscript.dll
+ 2011-04-14 17:27 . 2011-02-16 15:07 434176 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.22854_none_48b19ef047298035\vbscript.dll
+ 2011-04-14 17:27 . 2011-02-16 15:35 430080 c:\windows\winsxs\x86_microsoft-windows-scripting-vbscript_31bf3856ad364e35_6.0.6001.18599_none_4801c01b2e27d494\vbscript.dll
+ 2011-04-14 17:27 . 2011-02-16 18:45 512000 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.22589_none_850287ce0da0fba3\jscript.dll
+ 2011-04-14 17:27 . 2011-02-16 16:18 512000 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6002.18405_none_84cb693af44616f5\jscript.dll
+ 2011-04-14 17:27 . 2011-02-16 15:04 512000 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.22854_none_833784381066d3f9\jscript.dll
+ 2011-04-14 17:27 . 2011-02-16 15:32 512000 c:\windows\winsxs\x86_microsoft-windows-scripting-jscript_31bf3856ad364e35_6.0.6001.18599_none_8287a562f7652858\jscript.dll
+ 2011-01-12 05:48 . 2010-12-14 18:29 104960 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.22547_none_27559a9f7d2695f0\sdrsvc.dll
+ 2011-01-12 05:48 . 2010-12-14 18:29 730624 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.22547_none_27559a9f7d2695f0\sdengin2.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 104960 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18353_none_26bd2ada6414af94\sdrsvc.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 730624 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18353_none_26bd2ada6414af94\sdengin2.dll
+ 2011-01-12 05:48 . 2010-12-14 17:50 104960 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.22812_none_258a97097fec6e46\sdrsvc.dll
+ 2011-01-12 05:48 . 2010-12-14 17:50 730624 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.22812_none_258a97097fec6e46\sdengin2.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 104960 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.18561_none_24c9e68c66f8468c\sdrsvc.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 730624 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.18561_none_24c9e68c66f8468c\sdengin2.dll
+ 2011-04-27 17:26 . 2011-03-13 00:19 876032 c:\windows\winsxs\x86_microsoft-windows-printing-xpsprint_31bf3856ad364e35_7.0.6002.22611_none_9f79edb0b27d0b8d\XpsPrint.dll
+ 2011-02-10 08:06 . 2011-01-20 14:35 876032 c:\windows\winsxs\x86_microsoft-windows-printing-xpsprint_31bf3856ad364e35_7.0.6002.22573_none_9f3b0cd6b2abe8ba\XpsPrint.dll
+ 2011-04-27 17:26 . 2011-03-12 21:55 876032 c:\windows\winsxs\x86_microsoft-windows-printing-xpsprint_31bf3856ad364e35_7.0.6002.18427_none_9eeb80cf99622297\XpsPrint.dll
+ 2011-02-10 08:06 . 2011-01-20 14:27 876032 c:\windows\winsxs\x86_microsoft-windows-printing-xpsprint_31bf3856ad364e35_7.0.6002.18392_none_9e9ace03999f6a54\XpsPrint.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 448000 c:\windows\winsxs\x86_microsoft-windows-powershell-exe_31bf3856ad364e35_7.0.6001.18181_none_5a30fdc98d594259\powershell.exe
+ 2011-02-10 08:06 . 2011-01-20 16:11 258048 c:\windows\winsxs\x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_6.0.6002.22573_none_955563862f27c121\winspool.drv
+ 2011-02-10 08:06 . 2011-01-20 16:07 258048 c:\windows\winsxs\x86_microsoft-windows-p..ting-spooler-client_31bf3856ad364e35_6.0.6002.18392_none_94b524b3161b42bb\winspool.drv
+ 2011-02-10 08:06 . 2011-01-20 14:33 667648 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.22573_none_2dd506f0f1e0ce02\printfilterpipelinesvc.exe
+ 2011-02-10 08:06 . 2011-01-20 14:26 667648 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18392_none_2d34c81dd8d44f9c\printfilterpipelinesvc.exe
+ 2011-02-24 18:23 . 2009-10-09 21:57 154112 c:\windows\winsxs\x86_microsoft-windows-p..-wsman-pluginworker_31bf3856ad364e35_7.0.6001.18181_none_51159fd50a929b83\pspluginwkr.dll
+ 2011-02-10 08:06 . 2011-01-20 14:20 261632 c:\windows\winsxs\x86_microsoft-windows-mfreadwrite_31bf3856ad364e35_7.0.6002.22573_none_acedd1b0b9650788\mfreadwrite.dll
+ 2011-02-10 08:06 . 2011-01-20 14:14 261632 c:\windows\winsxs\x86_microsoft-windows-mfreadwrite_31bf3856ad364e35_7.0.6002.18392_none_ac4d92dda0588922\mfreadwrite.dll
+ 2011-02-10 08:06 . 2011-01-20 16:09 209920 c:\windows\winsxs\x86_microsoft-windows-mfplat_31bf3856ad364e35_6.0.6002.22573_none_f8d2061469ef41bd\mfplat.dll
+ 2011-02-10 08:06 . 2011-01-20 16:04 209920 c:\windows\winsxs\x86_microsoft-windows-mfplat_31bf3856ad364e35_6.0.6002.18392_none_f831c74150e2c357\mfplat.dll
+ 2011-02-10 08:06 . 2011-01-20 14:20 302592 c:\windows\winsxs\x86_microsoft-windows-mfmp4src_31bf3856ad364e35_7.0.6002.22573_none_b685785fb25e6824\mfmp4src.dll
+ 2011-02-10 08:06 . 2011-01-20 14:14 302592 c:\windows\winsxs\x86_microsoft-windows-mfmp4src_31bf3856ad364e35_7.0.6002.18392_none_b5e5398c9951e9be\mfmp4src.dll
+ 2011-02-10 08:06 . 2011-01-20 14:21 357376 c:\windows\winsxs\x86_microsoft-windows-mfheaacdec_31bf3856ad364e35_7.0.6002.22573_none_4bb0a387c48c27af\MFHEAACdec.dll
+ 2011-02-10 08:06 . 2011-01-20 14:14 357376 c:\windows\winsxs\x86_microsoft-windows-mfheaacdec_31bf3856ad364e35_7.0.6002.18392_none_4b1064b4ab7fa949\MFHEAACdec.dll
+ 2011-02-10 08:06 . 2011-01-20 14:21 979456 c:\windows\winsxs\x86_microsoft-windows-mfh264dec_31bf3856ad364e35_7.0.6002.22573_none_7de95d72d5a85f03\MFH264Dec.dll
+ 2011-02-10 08:06 . 2011-01-20 14:15 979456 c:\windows\winsxs\x86_microsoft-windows-mfh264dec_31bf3856ad364e35_7.0.6002.18392_none_7d491e9fbc9be09d\MFH264Dec.dll
+ 2011-04-14 17:27 . 2011-03-03 18:16 739840 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.22601_none_7c2248976ecf9be6\inetcomm.dll
+ 2011-04-14 17:27 . 2011-03-03 15:42 739328 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6002.18417_none_7b93dbb655b4b2f0\inetcomm.dll
+ 2011-04-14 17:27 . 2011-03-03 14:25 739328 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.22867_none_7a00f6fd71d4894b\inetcomm.dll
+ 2011-04-14 17:27 . 2011-03-03 15:00 738816 c:\windows\winsxs\x86_microsoft-windows-mail-comm-dll_31bf3856ad364e35_6.0.6001.18612_none_79a866765892e1f2\inetcomm.dll
+ 2011-01-12 05:48 . 2010-12-24 15:45 180224 c:\windows\winsxs\x86_microsoft-windows-m..rds-datacontrol-dll_31bf3856ad364e35_6.0.6002.22555_none_c64985074c3abc9a\msadco.dll
+ 2011-01-12 05:48 . 2010-12-28 15:53 180224 c:\windows\winsxs\x86_microsoft-windows-m..rds-datacontrol-dll_31bf3856ad364e35_6.0.6002.18362_none_c5b2158c3327ef95\msadco.dll
+ 2011-01-12 05:48 . 2010-12-28 14:33 180224 c:\windows\winsxs\x86_microsoft-windows-m..rds-datacontrol-dll_31bf3856ad364e35_6.0.6001.22821_none_c47f81bb4effae47\msadco.dll
+ 2011-01-12 05:48 . 2010-12-28 14:56 180224 c:\windows\winsxs\x86_microsoft-windows-m..rds-datacontrol-dll_31bf3856ad364e35_6.0.6001.18570_none_c3bed13e360b868d\msadco.dll
+ 2011-01-12 05:48 . 2010-12-24 15:45 241664 c:\windows\winsxs\x86_microsoft-windows-m..o-multi-dimensional_31bf3856ad364e35_6.0.6002.22555_none_20e5f8b2bc5a02d2\msadomd.dll
+ 2011-01-12 05:48 . 2010-12-28 15:53 241664 c:\windows\winsxs\x86_microsoft-windows-m..o-multi-dimensional_31bf3856ad364e35_6.0.6002.18362_none_204e8937a34735cd\msadomd.dll
+ 2011-01-12 05:48 . 2010-12-28 14:33 241664 c:\windows\winsxs\x86_microsoft-windows-m..o-multi-dimensional_31bf3856ad364e35_6.0.6001.22821_none_1f1bf566bf1ef47f\msadomd.dll
+ 2011-01-12 05:48 . 2010-12-28 14:56 241664 c:\windows\winsxs\x86_microsoft-windows-m..o-multi-dimensional_31bf3856ad364e35_6.0.6001.18570_none_1e5b44e9a62accc5\msadomd.dll
+ 2011-01-12 05:48 . 2010-12-24 15:45 737280 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-ado15-dll_31bf3856ad364e35_6.0.6002.22555_none_0e6ff059870e9c3d\msado15.dll
+ 2011-01-12 05:48 . 2010-12-28 15:53 708608 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-ado15-dll_31bf3856ad364e35_6.0.6002.18362_none_0dd880de6dfbcf38\msado15.dll
+ 2011-01-12 05:48 . 2010-12-28 14:33 737280 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-ado15-dll_31bf3856ad364e35_6.0.6001.22821_none_0ca5ed0d89d38dea\msado15.dll
+ 2011-01-12 05:48 . 2010-12-28 14:56 708608 c:\windows\winsxs\x86_microsoft-windows-m..ents-mdac-ado15-dll_31bf3856ad364e35_6.0.6001.18570_none_0be53c9070df6630\msado15.dll
+ 2011-01-12 05:48 . 2010-12-24 15:46 413696 c:\windows\winsxs\x86_microsoft-windows-m..c-drivermanager-dll_31bf3856ad364e35_6.0.6002.22555_none_1271c00d00610f35\odbc32.dll
+ 2011-01-12 05:48 . 2010-12-28 15:55 413696 c:\windows\winsxs\x86_microsoft-windows-m..c-drivermanager-dll_31bf3856ad364e35_6.0.6002.18362_none_11da5091e74e4230\odbc32.dll
+ 2011-01-12 05:48 . 2010-12-28 14:34 409600 c:\windows\winsxs\x86_microsoft-windows-m..c-drivermanager-dll_31bf3856ad364e35_6.0.6001.22821_none_10a7bcc1032600e2\odbc32.dll
+ 2011-01-12 05:48 . 2010-12-28 14:57 409600 c:\windows\winsxs\x86_microsoft-windows-m..c-drivermanager-dll_31bf3856ad364e35_6.0.6001.18570_none_0fe70c43ea31d928\odbc32.dll
+ 2011-01-12 05:48 . 2010-12-24 15:45 258048 c:\windows\winsxs\x86_microsoft-windows-m..ac-ado-ddl-security_31bf3856ad364e35_6.0.6002.22555_none_b46da4af56ca6fa2\msadox.dll
+ 2011-01-12 05:48 . 2010-12-28 15:53 253952 c:\windows\winsxs\x86_microsoft-windows-m..ac-ado-ddl-security_31bf3856ad364e35_6.0.6002.18362_none_b3d635343db7a29d\msadox.dll
+ 2011-01-12 05:48 . 2010-12-28 14:33 258048 c:\windows\winsxs\x86_microsoft-windows-m..ac-ado-ddl-security_31bf3856ad364e35_6.0.6001.22821_none_b2a3a163598f614f\msadox.dll
+ 2011-01-12 05:48 . 2010-12-28 14:56 253952 c:\windows\winsxs\x86_microsoft-windows-m..ac-ado-ddl-security_31bf3856ad364e35_6.0.6001.18570_none_b1e2f0e6409b3995\msadox.dll
+ 2011-02-10 08:06 . 2011-01-20 16:37 638336 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.22573_none_9f60824b84ed5ee6\dxgkrnl.sys
+ 2011-02-10 08:06 . 2011-01-20 16:37 638336 c:\windows\winsxs\x86_microsoft-windows-lddmcore_31bf3856ad364e35_7.0.6002.18392_none_9ec043786be0e080\dxgkrnl.sys
+ 2011-04-14 17:31 . 2011-02-18 19:00 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22592_none_66b339e4c4aa186f\ieui.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22551_none_66dd794ac48a8f54\ieui.dll
+ 2010-06-10 09:34 . 2010-05-04 19:10 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18407_none_668fedd7ab3efbdf\ieui.dll
+ 2010-06-10 09:34 . 2010-05-04 19:10 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18357_none_6659dc55ab678a6d\ieui.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22857_none_64fd091ec75ed23a\ieui.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22816_none_65274884c73f491f\ieui.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18602_none_64a47897ae1d2ae1\ieui.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 180736 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18565_none_64669807ae4b2165\ieui.dll
+ 2011-04-14 17:31 . 2011-02-18 15:22 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22857_none_47fe46d8a5c3f934\sqmapi.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 271360 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22857_none_47fe46d8a5c3f934\iertutil.dll
+ 2011-02-10 08:06 . 2010-12-20 15:27 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22816_none_4828863ea5a47019\sqmapi.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 271360 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.22816_none_4828863ea5a47019\iertutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18602_none_47a5b6518c8251db\sqmapi.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 270848 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18602_none_47a5b6518c8251db\iertutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 129536 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18565_none_4767d5c18cb0485f\sqmapi.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 270848 c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_6.0.6001.18565_none_4767d5c18cb0485f\iertutil.dll
+ 2011-04-14 17:31 . 2011-02-18 15:21 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22857_none_378104ab2d62dea2\occache.dll
+ 2011-02-10 08:06 . 2010-12-20 15:26 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.22816_none_37ab44112d435587\occache.dll
+ 2011-04-14 17:31 . 2011-02-18 15:47 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18602_none_3728742414213749\occache.dll
+ 2011-02-10 08:06 . 2010-12-20 15:39 146432 c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_6.0.6001.18565_none_36ea9394144f2dcd\occache.dll
+ 2011-04-14 17:31 . 2011-02-18 15:23 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22857_none_2fbc9c88333e49ba\iexplore.exe
+ 2011-02-10 08:06 . 2010-12-20 15:29 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22816_none_2fe6dbee331ec09f\iexplore.exe
+ 2011-04-14 17:31 . 2011-02-18 15:49 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18602_none_2f640c0119fca261\iexplore.exe
+ 2011-02-10 08:06 . 2010-12-20 15:42 634648 c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18565_none_2f262b711a2a98e5\iexplore.exe
+ 2011-04-14 17:31 . 2011-02-18 19:01 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.22592_none_4a39b6ac59efd41a\mshtmled.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.22551_none_4a63f61259d04aff\mshtmled.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.18407_none_4a166a9f4084b78a\mshtmled.dll
+ 2011-02-10 08:06 . 2010-12-20 16:34 477696 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6002.18357_none_49e0591d40ad4618\mshtmled.dll
+ 2011-04-14 17:31 . 2011-02-18 15:20 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.22857_none_488385e65ca48de5\mshtmled.dll
+ 2011-02-10 08:06 . 2010-12-20 15:26 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.22816_none_48adc54c5c8504ca\mshtmled.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.18602_none_482af55f4362e68c\mshtmled.dll
+ 2011-02-10 08:06 . 2010-12-20 15:38 476672 c:\windows\winsxs\x86_microsoft-windows-ie-htmlediting_31bf3856ad364e35_6.0.6001.18565_none_47ed14cf4390dd10\mshtmled.dll
+ 2011-04-14 17:31 . 2011-02-18 19:01 471040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6002.22592_none_61f75791510173c4\msfeeds.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 471040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6002.22551_none_622196f750e1eaa9\msfeeds.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 471040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6002.18407_none_61d40b8437965734\msfeeds.dll
+ 2011-02-10 08:06 . 2010-12-20 16:34 471040 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6002.18357_none_619dfa0237bee5c2\msfeeds.dll
+ 2011-04-14 17:31 . 2011-02-18 15:20 467456 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22857_none_604126cb53b62d8f\msfeeds.dll
+ 2011-02-10 08:06 . 2010-12-20 15:26 467456 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.22816_none_606b66315396a474\msfeeds.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 467456 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18602_none_5fe896443a748636\msfeeds.dll
+ 2011-02-10 08:06 . 2010-12-20 15:38 467456 c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_6.0.6001.18565_none_5faab5b43aa27cba\msfeeds.dll
+ 2011-04-14 17:31 . 2011-02-18 19:00 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.22592_none_3ed451f40898e96e\iepeers.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.22551_none_3efe915a08796053\iepeers.dll
+ 2011-04-14 17:31 . 2011-02-18 16:35 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.18407_none_3eb105e6ef2dccde\iepeers.dll
+ 2011-02-10 08:06 . 2010-12-20 16:33 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6002.18357_none_3e7af464ef565b6c\iepeers.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.22857_none_3d1e212e0b4da339\iepeers.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.22816_none_3d4860940b2e1a1e\iepeers.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.18602_none_3cc590a6f20bfbe0\iepeers.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 193024 c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_6.0.6001.18565_none_3c87b016f239f264\iepeers.dll
+ 2011-04-14 17:31 . 2011-02-18 19:00 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22592_none_fda2e39c82499b5f\ieapfltr.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22551_none_fdcd2302822a1244\ieapfltr.dll
+ 2011-04-14 17:31 . 2011-02-18 16:35 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18407_none_fd7f978f68de7ecf\ieapfltr.dll
+ 2011-02-10 08:06 . 2010-12-20 16:33 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18357_none_fd49860d69070d5d\ieapfltr.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22857_none_fbecb2d684fe552a\ieapfltr.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22816_none_fc16f23c84decc0f\ieapfltr.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18602_none_fb94224f6bbcadd1\ieapfltr.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 380928 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18565_none_fb5641bf6beaa455\ieapfltr.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22857_none_ae8cbe4c2005b27d\ieakui.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22857_none_ae8cbe4c2005b27d\ieaksie.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22816_none_aeb6fdb21fe62962\ieakui.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.22816_none_aeb6fdb21fe62962\ieaksie.dll
+ 2006-11-02 07:27 . 2006-11-02 09:39 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18602_none_ae342dc506c40b24\ieakui.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18602_none_ae342dc506c40b24\ieaksie.dll
+ 2006-11-02 07:27 . 2006-11-02 09:39 161792 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18565_none_adf64d3506f201a8\ieakui.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 230400 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitmostfiles_31bf3856ad364e35_6.0.6001.18565_none_adf64d3506f201a8\ieaksie.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22857_none_74ab08f870bcfb9e\iedkcs32.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.22816_none_74d5485e709d7283\iedkcs32.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18602_none_74527871577b5445\iedkcs32.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 389120 c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_6.0.6001.18565_none_741497e157a94ac9\iedkcs32.dll
+ 2011-04-14 17:31 . 2011-02-18 19:04 842240 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22592_none_03f9c0c2b85e210c\wininet.dll
+ 2011-02-10 08:06 . 2010-12-20 16:42 842240 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.22551_none_04240028b83e97f1\wininet.dll
+ 2011-04-14 17:31 . 2011-02-18 16:38 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18407_none_03d674b59ef3047c\wininet.dll
+ 2011-02-10 08:06 . 2010-12-20 16:36 834048 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6002.18357_none_03a063339f1b930a\wininet.dll
+ 2011-04-14 17:31 . 2011-02-18 15:23 841728 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22857_none_02438ffcbb12dad7\wininet.dll
+ 2011-02-10 08:06 . 2010-12-20 15:27 841728 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.22816_none_026dcf62baf351bc\wininet.dll
+ 2011-04-14 17:31 . 2011-02-18 15:48 833024 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18602_none_01eaff75a1d1337e\wininet.dll
+ 2011-02-10 08:06 . 2010-12-20 15:40 833024 c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6001.18565_none_01ad1ee5a1ff2a02\wininet.dll
+ 2011-04-14 17:31 . 2011-02-18 19:01 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6002.22592_none_e2d673e992fdb9e8\mstime.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6002.22551_none_e300b34f92de30cd\mstime.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6002.18407_none_e2b327dc79929d58\mstime.dll
+ 2011-02-10 08:06 . 2010-12-20 16:34 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6002.18357_none_e27d165a79bb2be6\mstime.dll
+ 2011-04-14 17:31 . 2011-02-18 15:21 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22857_none_e120432395b273b3\mstime.dll
+ 2011-02-10 08:06 . 2010-12-20 15:26 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.22816_none_e14a82899592ea98\mstime.dll
+ 2011-04-14 17:31 . 2011-02-18 15:46 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18602_none_e0c7b29c7c70cc5a\mstime.dll
+ 2011-02-10 08:06 . 2010-12-20 15:38 671232 c:\windows\winsxs\x86_microsoft-windows-i..mlrenderingadvanced_31bf3856ad364e35_6.0.6001.18565_none_e089d20c7c9ec2de\mstime.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 204800 c:\windows\winsxs\x86_microsoft-windows-gpowershell-exe_31bf3856ad364e35_7.0.6001.18181_none_29ac1eb82cdbbcca\powershell_ise.exe
+ 2011-04-14 17:32 . 2011-02-16 15:45 292864 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22589_none_abf5b7af710301e2\atmfd.dll
+ 2011-02-10 08:06 . 2011-01-08 06:36 292352 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.22566_none_ac0856a970f57dfb\atmfd.dll
+ 2011-04-14 17:32 . 2011-02-16 14:02 292864 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18405_none_abbe991c57a81d34\atmfd.dll
+ 2011-02-10 08:06 . 2011-01-08 06:28 292352 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6002.18371_none_ab6ee69a57e47e48\atmfd.dll
+ 2011-04-14 17:32 . 2011-02-16 13:24 292864 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22854_none_aa2ab41973c8da38\atmfd.dll
+ 2011-02-10 08:06 . 2011-01-08 05:57 292352 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.22830_none_aa3c52c973bc3cfa\atmfd.dll
+ 2011-04-14 17:32 . 2011-02-16 13:24 292864 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18599_none_a97ad5445ac72e97\atmfd.dll
+ 2011-02-10 08:06 . 2011-01-08 05:57 292352 c:\windows\winsxs\x86_microsoft-windows-gdi_31bf3856ad364e35_6.0.6001.18579_none_a990751c5ab6f6b5\atmfd.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 146944 c:\windows\winsxs\x86_microsoft-windows-eventcollector_31bf3856ad364e35_7.0.6001.18181_none_ec28a1fcffd9945e\wecsvc.dll
+ 2011-04-14 17:31 . 2011-03-02 18:19 168448 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.22600_none_e4529ac0989d4191\dnsapi.dll
+ 2011-04-14 17:31 . 2011-03-02 15:44 168448 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6002.18416_none_e3c42ddf7f82589b\dnsapi.dll
+ 2011-04-14 17:31 . 2011-03-02 14:25 167424 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.22866_none_e23149269ba22ef6\dnsapi.dll
+ 2011-04-14 17:31 . 2011-03-02 14:49 167936 c:\windows\winsxs\x86_microsoft-windows-dns-client_31bf3856ad364e35_6.0.6001.18611_none_e1d8b89f8260879d\dnsapi.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 478720 c:\windows\winsxs\x86_microsoft-windows-directx-dxgi_31bf3856ad364e35_7.0.6002.22573_none_2e1661ffbfed5332\dxgi.dll
+ 2011-02-10 08:06 . 2011-01-20 16:03 478720 c:\windows\winsxs\x86_microsoft-windows-directx-dxgi_31bf3856ad364e35_7.0.6002.18392_none_2d76232ca6e0d4cc\dxgi.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 189952 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10_31bf3856ad364e35_7.0.6002.22573_none_e3504f4b6f0c972b\d3d10core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:03 189952 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10_31bf3856ad364e35_7.0.6002.18392_none_e2b01078560018c5\d3d10core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 219648 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.22573_none_43c167124af2b064\d3d10_1core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 160768 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.22573_none_43c167124af2b064\d3d10_1.dll
+ 2011-02-10 08:06 . 2011-01-20 16:03 219648 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.18392_none_4321283f31e631fe\d3d10_1core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:03 160768 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10.1_31bf3856ad364e35_7.0.6002.18392_none_4321283f31e631fe\d3d10_1.dll
+ 2011-02-10 08:06 . 2011-01-20 14:18 486400 c:\windows\winsxs\x86_microsoft-windows-directx-d3d10level9_31bf3856ad364e35_7.0.6002.22573_none_d6f6565f40f3300b\d3d10level9.dll
+ 2011-02-10 08:06 . 2011-01-20 14:11 486400 c:\windows\winsxs\x86_microsoft-windows-directx-d3d10level9_31bf3856ad364e35_7.0.6002.18392_none_d656178c27e6b1a5\d3d10level9.dll
+ 2011-03-23 04:12 . 2011-02-22 15:12 797696 c:\windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.0.6002.22594_none_f82d586ab2bf1fbf\FntCache.dll
+ 2011-02-10 08:06 . 2011-01-20 13:50 797184 c:\windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.0.6002.22573_none_f841f7f8b2afce86\FntCache.dll
+ 2011-03-23 04:12 . 2011-02-22 13:33 797696 c:\windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.0.6002.18409_none_f80a0c5d9954032f\FntCache.dll
+ 2011-02-10 08:06 . 2011-01-20 13:44 797184 c:\windows\winsxs\x86_microsoft-windows-directwrite-fontcache_31bf3856ad364e35_7.0.6002.18392_none_f7a1b92599a35020\FntCache.dll
+ 2011-02-10 08:06 . 2011-01-20 13:54 683008 c:\windows\winsxs\x86_microsoft-windows-d2d_31bf3856ad364e35_7.0.6002.22573_none_9b34d070fd51929c\d2d1.dll
+ 2011-02-10 08:06 . 2011-01-20 13:47 683008 c:\windows\winsxs\x86_microsoft-windows-d2d_31bf3856ad364e35_7.0.6002.18392_none_9a94919de4451436\d2d1.dll

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 9:03 am

+ 2011-02-10 08:06 . 2011-01-20 14:32 847360 c:\windows\winsxs\x86_microsoft-windows-component-opcom_31bf3856ad364e35_7.0.6002.22573_none_96ceeb8053f19c12\OpcServices.dll
+ 2011-02-10 08:06 . 2011-01-20 14:25 847360 c:\windows\winsxs\x86_microsoft-windows-component-opcom_31bf3856ad364e35_7.0.6002.18392_none_962eacad3ae51dac\OpcServices.dll
+ 2011-02-10 08:06 . 2011-01-20 14:30 135680 c:\windows\winsxs\x86_microsoft-windows-c..nt-xpsrasterservice_31bf3856ad364e35_7.0.6002.22573_none_0e3546adcd619853\XpsRasterService.dll
+ 2011-02-10 08:06 . 2011-01-20 14:24 135680 c:\windows\winsxs\x86_microsoft-windows-c..nt-xpsrasterservice_31bf3856ad364e35_7.0.6002.18392_none_0d9507dab45519ed\XpsRasterService.dll
+ 2011-03-23 04:12 . 2011-02-22 16:32 288768 c:\windows\winsxs\x86_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_7.0.6002.22594_none_066fbfa88cc0b22c\XpsGdiConverter.dll
+ 2011-02-10 08:06 . 2011-01-20 14:31 288768 c:\windows\winsxs\x86_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_7.0.6002.22573_none_06845f368cb160f3\XpsGdiConverter.dll
+ 2011-03-23 04:12 . 2011-02-22 14:13 288768 c:\windows\winsxs\x86_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_7.0.6002.18409_none_064c739b7355959c\XpsGdiConverter.dll
+ 2011-02-10 08:06 . 2011-01-20 14:24 288768 c:\windows\winsxs\x86_microsoft-windows-c..ent-xpsgdiconverter_31bf3856ad364e35_7.0.6002.18392_none_05e4206373a4e28d\XpsGdiConverter.dll
+ 2011-04-27 17:26 . 2011-03-03 18:15 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22601_none_0e97577f088bc8a6\AcXtrnal.dll
+ 2011-04-27 17:26 . 2011-03-03 18:15 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.22601_none_0e97577f088bc8a6\AcLayers.dll
+ 2011-04-27 17:26 . 2011-03-03 15:40 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18417_none_0e08ea9def70dfb0\AcXtrnal.dll
+ 2011-04-27 17:26 . 2011-03-03 15:40 542720 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6002.18417_none_0e08ea9def70dfb0\AcLayers.dll
+ 2011-04-27 17:26 . 2011-03-03 14:23 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22867_none_0c7605e50b90b60b\AcXtrnal.dll
+ 2011-04-27 17:26 . 2011-03-03 14:23 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.22867_none_0c7605e50b90b60b\AcLayers.dll
+ 2011-04-27 17:26 . 2011-03-03 14:56 173056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18612_none_0c1d755df24f0eb2\AcXtrnal.dll
+ 2011-04-27 17:26 . 2011-03-03 14:56 541696 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c5_31bf3856ad364e35_6.0.6001.18612_none_0c1d755df24f0eb2\AcLayers.dll
+ 2011-04-27 17:26 . 2011-03-03 18:15 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.22601_none_0e965735088caf4f\AcSpecfc.dll
+ 2011-04-27 17:26 . 2011-03-03 15:40 458752 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6002.18417_none_0e07ea53ef71c659\AcSpecfc.dll
+ 2011-04-27 17:26 . 2011-03-03 14:23 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.22867_none_0c75059b0b919cb4\AcSpecfc.dll
+ 2011-04-27 17:26 . 2011-03-03 14:56 459776 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c4_31bf3856ad364e35_6.0.6001.18612_none_0c1c7513f24ff55b\AcSpecfc.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 286720 c:\windows\winsxs\msil_system.management.automation.resources_31bf3856ad364e35_7.0.6001.18181_fr-fr_247b2f96a4013f52\System.Management.Automation.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 253952 c:\windows\winsxs\msil_system.management.automation.resources_31bf3856ad364e35_7.0.6001.18181_en-us_81f85cb3b108374b\System.Management.Automation.Resources.dll
+ 2009-09-18 14:41 . 2009-03-30 04:42 311296 c:\windows\winsxs\msil_mscorlib.resources_b77a5c561934e089_6.0.6002.22587_fr-fr_a8b7fc95f0fe229c\mscorlib.Resources.dll
+ 2009-09-18 14:41 . 2009-03-30 04:42 311296 c:\windows\winsxs\msil_mscorlib.resources_b77a5c561934e089_6.0.6002.18403_fr-fr_bf7dfc25d75d915a\mscorlib.Resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 274432 c:\windows\winsxs\msil_microsoft.wsman.management_31bf3856ad364e35_7.0.6001.18181_none_d8d86bc4b7b6fa8c\Microsoft.WSMan.Management.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 278528 c:\windows\winsxs\msil_microsoft.powershell.graphicalhost_31bf3856ad364e35_7.0.6001.18181_none_30b23c828e4683e5\Microsoft.PowerShell.GraphicalHost.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 651264 c:\windows\winsxs\msil_microsoft.powershell.gpowershell_31bf3856ad364e35_7.0.6001.18181_none_b8785fb3fbabb6b8\Microsoft.PowerShell.GPowerShell.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 991232 c:\windows\winsxs\msil_microsoft.powershell.editor_31bf3856ad364e35_7.0.6001.18181_none_d0c359e59cd8fbef\Microsoft.PowerShell.Editor.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 200704 c:\windows\winsxs\msil_microsoft.powershell.consolehost_31bf3856ad364e35_7.0.6001.18181_none_28d3ed115c33ded9\Microsoft.PowerShell.ConsoleHost.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 618496 c:\windows\winsxs\msil_microsoft.powershell.commands.utility_31bf3856ad364e35_7.0.6001.18181_none_dc6e46770b94eb12\Microsoft.PowerShell.Commands.Utility.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 262144 c:\windows\winsxs\msil_microsoft.powershell.commands.management_31bf3856ad364e35_7.0.6001.18181_none_94429475924885af\Microsoft.PowerShell.Commands.Management.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 102400 c:\windows\winsxs\msil_microsoft.powershel..ommands.diagnostics_31bf3856ad364e35_7.0.6001.18181_none_244732d10fb3be12\Microsoft.PowerShell.Commands.Diagnostics.dll
+ 2011-02-10 08:06 . 2011-01-20 14:24 135680 c:\windows\System32\XpsRasterService.dll
- 2010-10-17 10:04 . 2009-09-25 01:35 135680 c:\windows\System32\XpsRasterService.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 214016 c:\windows\System32\WsmWmiPl.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 145408 c:\windows\System32\WsmAuto.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 252416 c:\windows\System32\WSManMigrationPlugin.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 246272 c:\windows\System32\WSManHTTPConfig.exe
- 2010-10-17 10:04 . 2009-09-24 22:54 258048 c:\windows\System32\winspool.drv
+ 2011-02-10 08:06 . 2011-01-20 16:07 258048 c:\windows\System32\winspool.drv
+ 2011-02-24 18:23 . 2009-10-09 21:56 241152 c:\windows\System32\winrscmd.dll
+ 2011-02-24 18:23 . 2009-08-01 06:27 201184 c:\windows\System32\winrm.vbs
+ 2011-02-24 18:23 . 2009-10-09 21:57 154112 c:\windows\System32\WindowsPowerShell\v1.0\pspluginwkr.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 204800 c:\windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe
+ 2011-02-24 18:23 . 2009-10-09 21:56 448000 c:\windows\System32\WindowsPowerShell\v1.0\powershell.exe
+ 2011-02-24 18:23 . 2009-10-09 21:57 112640 c:\windows\System32\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
+ 2011-02-24 18:24 . 2009-07-16 17:22 126976 c:\windows\System32\WindowsPowerShell\v1.0\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll
+ 2011-02-24 18:23 . 2009-10-09 21:55 146944 c:\windows\System32\wecsvc.dll
+ 2008-08-07 20:22 . 2011-05-06 03:44 268226 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S4.bin
+ 2008-08-07 23:45 . 2011-05-16 01:09 425520 c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2011-02-10 08:06 . 2011-01-20 16:07 586240 c:\windows\System32\stobject.dll
+ 2011-02-17 22:17 . 2009-07-10 11:47 247808 c:\windows\System32\shsvcs.dll
- 2009-09-18 14:42 . 2009-04-11 06:28 353280 c:\windows\System32\shlwapi.dll
+ 2011-02-10 08:06 . 2011-01-21 16:35 353280 c:\windows\System32\shlwapi.dll
- 2008-01-21 02:23 . 2008-01-21 02:23 153088 c:\windows\System32\sbeio.dll
+ 2011-03-09 21:43 . 2010-12-29 18:28 153088 c:\windows\System32\sbeio.dll
- 2008-01-21 02:23 . 2008-01-21 02:23 322560 c:\windows\System32\sbe.dll
+ 2011-03-09 21:43 . 2010-12-29 18:28 322560 c:\windows\System32\sbe.dll
- 2010-10-17 10:04 . 2009-09-24 22:54 667648 c:\windows\System32\printfilterpipelinesvc.exe
+ 2011-02-10 08:06 . 2011-01-20 14:26 667648 c:\windows\System32\printfilterpipelinesvc.exe
+ 2008-04-25 00:41 . 2011-05-15 23:08 730526 c:\windows\System32\perfh00C.dat
- 2008-04-25 00:41 . 2010-12-03 21:55 730526 c:\windows\System32\perfh00C.dat
- 2006-11-02 10:33 . 2010-12-03 21:55 652294 c:\windows\System32\perfh009.dat
+ 2006-11-02 10:33 . 2011-05-15 23:08 652294 c:\windows\System32\perfh009.dat
+ 2008-04-25 00:41 . 2011-05-15 23:08 155136 c:\windows\System32\perfc00C.dat
- 2008-04-25 00:41 . 2010-12-03 21:55 155136 c:\windows\System32\perfc00C.dat
+ 2006-11-02 10:33 . 2011-05-15 23:08 129068 c:\windows\System32\perfc009.dat
- 2006-11-02 10:33 . 2010-12-03 21:55 129068 c:\windows\System32\perfc009.dat
- 2010-10-17 10:04 . 2009-09-25 01:38 847360 c:\windows\System32\OpcServices.dll
+ 2011-02-10 08:06 . 2011-01-20 14:25 847360 c:\windows\System32\OpcServices.dll
+ 2011-01-12 05:48 . 2010-12-28 15:55 413696 c:\windows\System32\odbc32.dll
+ 2011-03-09 21:43 . 2010-12-17 13:54 677888 c:\windows\System32\mstsc.exe
+ 2011-04-14 17:31 . 2011-02-18 16:36 671232 c:\windows\System32\mstime.dll
- 2010-12-15 04:37 . 2010-10-21 20:07 671232 c:\windows\System32\mstime.dll
- 2010-12-15 04:37 . 2010-10-21 20:06 477696 c:\windows\System32\mshtmled.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 477696 c:\windows\System32\mshtmled.dll
- 2010-12-15 04:37 . 2010-10-21 20:06 471040 c:\windows\System32\msfeeds.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 471040 c:\windows\System32\msfeeds.dll
- 2009-10-03 17:08 . 2010-10-19 18:41 222080 c:\windows\System32\MpSigStub.exe
+ 2009-10-03 17:08 . 2011-02-03 01:11 222080 c:\windows\System32\MpSigStub.exe
+ 2011-02-10 08:06 . 2011-01-20 14:14 261632 c:\windows\System32\mfreadwrite.dll
+ 2011-02-10 08:06 . 2011-01-20 16:04 209920 c:\windows\System32\mfplat.dll
+ 2011-02-10 08:06 . 2011-01-20 14:14 302592 c:\windows\System32\mfmp4src.dll
+ 2011-02-10 08:06 . 2011-01-20 14:14 357376 c:\windows\System32\MFHEAACdec.dll
+ 2011-02-10 08:06 . 2011-01-20 14:15 979456 c:\windows\System32\MFH264Dec.dll
- 2009-09-10 03:19 . 2009-06-04 12:07 512000 c:\windows\System32\jscript.dll
+ 2011-04-14 17:27 . 2011-02-16 16:18 512000 c:\windows\System32\jscript.dll
+ 2010-12-19 22:02 . 2010-12-19 22:02 157472 c:\windows\System32\javaws.exe
+ 2010-12-19 22:02 . 2010-12-19 22:02 145184 c:\windows\System32\javaw.exe
+ 2010-12-19 22:02 . 2010-12-19 22:02 145184 c:\windows\System32\java.exe
+ 2011-04-14 17:31 . 2011-02-18 16:35 193024 c:\windows\System32\iepeers.dll
- 2010-12-15 04:37 . 2010-10-21 20:06 193024 c:\windows\System32\iepeers.dll
+ 2011-04-14 17:31 . 2011-02-18 16:35 380928 c:\windows\System32\ieapfltr.dll
- 2010-12-15 04:37 . 2010-10-21 20:06 380928 c:\windows\System32\ieapfltr.dll
+ 2006-11-02 12:47 . 2011-04-16 06:14 392296 c:\windows\System32\FNTCACHE.DAT
- 2006-11-02 12:47 . 2010-12-15 21:36 392296 c:\windows\System32\FNTCACHE.DAT
+ 2011-03-09 21:43 . 2010-12-29 18:28 429056 c:\windows\System32\EncDec.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 478720 c:\windows\System32\dxgi.dll
+ 2011-03-14 02:04 . 2010-02-05 16:18 100136 c:\windows\System32\drivers\pctwfpfilter.sys
+ 2011-03-14 02:04 . 2010-02-05 16:17 233136 c:\windows\System32\drivers\pctgntdi.sys
+ 2011-02-10 08:06 . 2011-01-20 16:37 638336 c:\windows\System32\drivers\dxgkrnl.sys
- 2009-09-18 14:42 . 2009-04-11 06:28 168448 c:\windows\System32\dnsapi.dll
+ 2011-04-14 17:31 . 2011-03-02 15:44 168448 c:\windows\System32\dnsapi.dll
+ 2010-07-23 19:19 . 2010-12-19 22:02 472808 c:\windows\System32\deployJava1.dll
+ 2011-02-10 08:06 . 2011-01-20 14:11 486400 c:\windows\System32\d3d10level9.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 189952 c:\windows\System32\d3d10core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 219648 c:\windows\System32\d3d10_1core.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 160768 c:\windows\System32\d3d10_1.dll
+ 2011-02-10 08:06 . 2011-01-20 13:47 683008 c:\windows\System32\d2d1.dll
+ 2010-07-23 10:16 . 2011-05-15 23:09 131072 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2011-03-14 02:07 . 2010-01-22 16:56 149456 c:\windows\SGDetectionTool.dll
+ 2011-02-10 16:00 . 2011-05-15 21:52 376768 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-03-14 02:07 . 2010-01-22 16:56 165840 c:\windows\PCTBDRes.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
- 2010-03-18 20:16 . 2010-03-18 20:16 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
- 2010-03-18 20:16 . 2010-03-18 20:16 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
- 2010-03-18 20:16 . 2010-03-18 20:16 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
- 2010-10-11 21:28 . 2010-05-21 10:56 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2011-04-14 17:26 . 2010-10-29 10:54 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2009-09-18 14:43 . 2009-03-30 04:42 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2010-10-11 21:28 . 2010-05-21 10:56 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-01-21 04:46 . 2011-01-21 04:46 429056 c:\windows\Installer\2a8f163.msi
+ 2011-01-21 04:46 . 2011-01-21 04:46 149504 c:\windows\Installer\2a8f125.msi
+ 2010-12-19 22:03 . 2010-12-19 22:03 180224 c:\windows\Installer\16db0c.msi
+ 2010-12-19 22:02 . 2010-12-19 22:02 677376 c:\windows\Installer\16db06.msi
- 2008-08-07 04:23 . 2010-12-15 11:04 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2008-08-07 04:23 . 2011-05-12 15:15 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 390552 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\pdfshell.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 135568 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\nppdf32.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 681872 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\JP2KLib.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 104344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AiodLite.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 702352 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroPDF.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 294808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acrobroker.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 205720 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\a3dutils.dll
+ 2010-12-20 07:51 . 2010-12-20 07:51 472576 c:\windows\Hell's Kitchen\uninstall.exe
+ 2011-04-29 08:07 . 2011-04-29 08:07 574464 c:\windows\Cooking Academy 2 World Cuisine\uninstall.exe
+ 2011-04-10 20:57 . 2011-04-10 20:57 472576 c:\windows\Burger Shop\uninstall.exe
+ 2011-03-14 02:07 . 2010-01-22 16:55 767952 c:\windows\BDTSupport.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 245760 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\8fc284e8227966cd2b53dde575a560ca\WindowsFormsIntegration.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 195584 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5dbaa5605b1c70fc64f0413709f0fd3e\UIAutomationTypes.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 481792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\0ceb105fca50f472ec753d820e4aeeda\UIAutomationClient.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\e8063e4a016ce5f612047826ce85192d\System.Xml.Linq.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 187904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\9cea70e2d0008b1c669381e647fe38b8\System.Windows.Input.Manipulations.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 645632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\f3f4677f38cae89e4f3da7aef67a8286\System.Transactions.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 220672 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\d20b42d2a1e8b587218255d94cf9d51d\System.ServiceProcess.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\63d43147c361a5ea56a438f9c9f405ab\System.ServiceModel.Routing.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 721920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\433e0563cc3bdaed1d5d580a976c5e9e\System.Security.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 310272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\3e118dc6bd8e3139f8e67e4c3b8743b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 758784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\31c1cf0a064cf7c84a4abd209bd01037\System.Runtime.Remoting.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 144896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\be40dc77e976b72345841d9b3090addf\System.Numerics.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 651264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\632fa87e063c2cd93ca6c974f4083370\System.Net.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 625152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\1219fbafa287ea332a64be7b858fce5c\System.Messaging.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 392704 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\a40d6c00e44903ecd90ed228c684be78\System.Management.Instrumentation.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 405504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\03b7ea60ade16ef4e1be509050942005\System.IO.Log.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 228352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\c0d6bf93aa2d4ae88198cc74303444f7\System.IdentityModel.Selectors.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 230912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\9d0dacabf0328c67bdc5bcde92c8a6a0\System.EnterpriseServices.Wrapper.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 784896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\9d0dacabf0328c67bdc5bcde92c8a6a0\System.EnterpriseServices.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 373248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\ab6b818c24bf13aec8a322e19f2e097e\System.Dynamic.ni.dll
+ 2011-04-15 19:30 . 2011-04-15 19:30 461824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\ff9eff4b13bf2907808f44072528a058\System.DirectoryServices.Protocols.ni.dll
+ 2011-04-15 19:30 . 2011-04-15 19:30 911872 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\71e1815286162efb41ca0b818562d816\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-15 19:30 . 2011-04-15 19:30 112128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\9db033b3b35d3244138a3d8ecd9463aa\System.Device.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\17da63b9c8064159c9171c04f3ee7dbb\System.Data.DataSetExtensions.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 973312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\7402f1ee7efe4d136b686df4594355a9\System.Configuration.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 145920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\57590739c0280784ea5cc75a0b954f41\System.Configuration.Install.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\2d2e931b15a2673aae0dd09c3dc4fc00\System.ComponentModel.Composition.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 193536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\05f5ebde5d831cdeff3373cfce7222b2\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 613888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\3a1d261bf1c23b8e7a448dcab04862ec\System.AddIn.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 402944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\06112c8e86e63fa5af32514204d9319d\System.Activities.DurableInstancing.ni.dll
+ 2011-04-15 19:09 . 2011-04-15 19:09 316928 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\fe2a7d68ae44b756dff80870742899e5\SMSvcHost.ni.exe
+ 2011-04-15 19:15 . 2011-04-15 19:15 142336 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\4e17631c0f733accb86b9b30547ad408\SMDiagnostics.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\d896455ac820e0a28f0cfe8ae611ab2f\PresentationFramework.Luna.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 327168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\84347cf0d80a63e04e386abf9b34d0e0\PresentationFramework.Royale.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 450048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\43efb9cfeaa447752d2ccb53f2ff0e42\PresentationFramework.Aero.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 283648 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\2feb56a801c952c6708baa69111b3e1e\PresentationFramework.Classic.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 302592 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\84203be8255a83a0b6a300e9533a1961\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-04-15 19:09 . 2011-04-15 19:09 418304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\e8ca1bcc246baee865abf9ff069793c0\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-04-15 19:09 . 2011-04-15 19:09 193024 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e8379e6b1e0dca52e26b1159ed6b7348\CustomMarshalers.ni.dll
+ 2011-04-16 07:06 . 2011-04-16 07:06 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\7d838a6606af8703d1828983e4eaead5\WsatConfig.ni.exe
+ 2011-04-16 07:06 . 2011-04-16 07:06 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a7053f38509cd157016b3bfccceb8f37\WindowsFormsIntegration.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\84d367fc31a2a78d9d9806c90336bd6f\UIAutomationTypes.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\2161cd27f6e97c0be6dd8e745603c835\UIAutomationClient.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 235520 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\e671425660554ad34cec1b60aed7c008\TaskScheduler.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\bd62631fa47a0a76f79624cf6d8a0820\System.Xml.Linq.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\a44d4f4354e14f4e1575cee2d6497683\System.Web.Routing.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\0caf396f060dbe01a2587834d6a4d823\System.Web.RegularExpressions.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\510982671c27860fb473edc1424f86a3\System.Web.Extensions.Design.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\1b985c89fc8033e651c9f2705bf3c050\System.Web.Entity.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\e6e94016aa78d352d5b08ba1a2252856\System.Web.Entity.Design.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1e3c869501b957b84c406286de65082a\System.Web.DynamicData.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\2df041970e13694c1d86a6e1a98a91da\System.Web.Abstractions.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\2e1f77805242e6ba616571580f9aad81\System.Transactions.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\ce73262a893af528ab9fde7b033f6da2\System.ServiceProcess.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\1be007f7ea5af72f66440d21a786cf2f\System.Security.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\4ebc669b482345b1efe452d4e2ee9705\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\45aadcfa5a64d65be508b335cd7a729e\System.Runtime.Remoting.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\1f976b289464430bf997d9f50a66a403\System.Net.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\afeea6beb2d67a6e0c1aed0376e69777\System.Messaging.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\6abb8798383d6fc844c467df6c6eeeeb\System.Management.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\12d087b43350bef3e16899200586e0d6\System.Management.Instrumentation.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\9d6f502b0c29e25d0986d1b2da79634f\System.IO.Log.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\15dae896a0a67f955349d09eb3812702\System.IdentityModel.Selectors.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\34c839b0fd9f085105dc2c0a1219d02d\System.EnterpriseServices.Wrapper.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\34c839b0fd9f085105dc2c0a1219d02d\System.EnterpriseServices.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\5dd2fa1f99b0570b7e8397adfa0e9e9a\System.Drawing.Design.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6beade2268ecf5e850c02502abe53cb8\System.DirectoryServices.Protocols.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\61a3ac762933ee76fb306a892fd1ad60\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\f6b2950be7e8995f7ac1ce8ce7bb0c25\System.Data.Services.Client.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d4568dc79e6b426d37776edbb314f711\System.Data.Services.Design.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\1b76dc6ebfb66e3e69b1ac47369b4e60\System.Data.Entity.Design.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\7e778b49102fcb282332a9ddbfa2ec5c\System.Data.DataSetExtensions.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\886c8bd1f835e78b659b71aeed3ed15a\System.Configuration.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\819da2483c5c1a292618a58247a5194a\System.Configuration.Install.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\84df06247b65c75461683f155669337f\System.AddIn.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\4e275b57357ccbae6a79720f0f8f0465\sysglobl.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\04a480b777f819e8ec461f6dc97f38c1\SMSvcHost.ni.exe
+ 2011-04-16 07:02 . 2011-04-16 07:02 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\c0863c5df248b7e336227922615628a1\SMDiagnostics.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\cc40d1c026a087c5aa12b022bcdd3e60\ServiceModelReg.ni.exe
+ 2011-04-16 06:18 . 2011-04-16 06:18 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae27ef98a34b890d92982d623fc38360\PresentationFramework.Royale.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8523057f6790305f4968da89e3f64be4\PresentationFramework.Classic.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0dac60e34d8e1b520fa8ebcb4acc85ae\PresentationFramework.Luna.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\075f1bb73b4bf872524a17609c081c5d\PresentationFramework.Aero.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 724992 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\1f8457dd1148268b1181b2c6fda44e42\napsnap.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 110080 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\8a797d9d2294d7978a551878399455ac\napinit.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 115712 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\da3a5511db63187e419a50fbba6eb754\naphlpr.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\3792d84ee88ece7f35c84a9806d0a564\MSBuild.ni.exe

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 9:03 am

+ 2011-04-16 07:03 . 2011-04-16 07:03 285184 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\e1c03e3d9ff974cbfe383801dc9522f2\MMCFxCommon.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\a7e186f3f4cd626f3bb351d03488dbc2\Microsoft.WSMan.Management.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 508928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\1765b6ed53682f5eb2e1e58b29be3941\Microsoft.WSMan.Management.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c59ae82e5eff22ec8b9c4c0f5a8a4ddc\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-02-24 18:28 . 2011-02-24 18:28 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\eaee53b7d427502889a212b816ef1bd9\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2011-02-24 18:28 . 2011-02-24 18:28 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e64e0bfc4bb5ba177e140ea118bba1d5\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b9f20607b04615980e4947809b604ac3\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b64fa876274dc849a1fe90e0bb9c2264\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 729600 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\a528421be3cedbafeeae95b7e9491320\Microsoft.PowerShell.GraphicalHost.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8a9afa1596f09efb40ee219ca55f88e6\Microsoft.PowerShell.Security.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 156160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\8377b51338543b7a672f34c9738f1d6b\Microsoft.PowerShell.Security.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\62c2d83ee6b7c341a7bbfba0ab33b560\Microsoft.PowerShell.ConsoleHost.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\592cc6c42c01748dc6b988acfe1fc745\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 737792 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3a80b6f7a8f46f4874f77a842e2e37ca\Microsoft.PowerShell.Commands.Management.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 227840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\5f63e5c0a38d105ae62efa09bcf44b21\Microsoft.MediaCenter.Shell.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4afd6f23c8a742baab1e635b4f1fe57a\Microsoft.MediaCenter.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 659968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\4a509004d2a4aad196b0c572153a6c38\Microsoft.MediaCenter.Sports.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 558592 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\96846be15be8de0531330213d3c3c806\Microsoft.ManagementConsole.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\bd76a907390f1d9e74aff4fbf9dd4748\Microsoft.Build.Utilities.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\7a8524ea3daedb15fb6808c504603a12\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 888320 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\6a9a6c9107cd8773d0f38600b0a227b2\Microsoft.Build.Engine.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\f52388f0cb56e0232c8f7bdc6c73fb00\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 238592 c:\windows\assembly\NativeImages_v2.0.50727_32\Mcx2Dvcs\582d79f569a10f01624ac03806235c47\Mcx2Dvcs.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 254976 c:\windows\assembly\NativeImages_v2.0.50727_32\mcupdate\4ae21069746af35b30c2ff4479ee6d02\mcupdate.ni.exe
+ 2011-04-16 07:03 . 2011-04-16 07:03 225280 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\3984067010a4ec85ca5d2c1b5c0d7d07\mcstoredb.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 642560 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\8f7278a8d03f7fd0c90ec919bfee797f\mcstore.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 543744 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\3f823badb65f0aad02e9dc613a97f290\EventViewer.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 103936 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiWUapi\4362a58f7a365a0de891c809d670f76b\ehiWUapi.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 338432 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiwmp\e6a49ed7d95f5fd5bf073808a74930dd\ehiwmp.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 797696 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\bc6b2a65ecda70255e48394e54d7c888\ehiVidCtl.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 965632 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\85abda61ca30bc64d389894290e05309\ehiProxy.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 565760 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiPlay\a1d42b32594f0e6f8f4ecfeb94d86b74\ehiPlay.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 160768 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\59c9fe037c933de1fee660faf21f903b\ehiExtens.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 243200 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost\c14f9d073b926509d679e1e5aae8aca1\ehExtHost.ni.exe
+ 2011-04-16 07:02 . 2011-04-16 07:02 305152 c:\windows\assembly\NativeImages_v2.0.50727_32\ehepgdat\036699a1de642280a4d43fa18fbbc102\ehepgdat.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 220160 c:\windows\assembly\NativeImages_v2.0.50727_32\ehCIR\132dbf60d2f21f1167c6a813f8554528\ehCIR.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\5e4551c1842d1006848b51cf72272795\CustomMarshalers.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\93b8ffc620ba0822f1dcbc97cfd25111\ComSvcConfig.ni.exe
+ 2011-04-16 07:01 . 2011-04-16 07:01 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\59e4856df702c30568601a542bf535e7\BDATunePIA.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\947aba750d5f0874677821514f3e5998\AspNetMMCExt.ni.dll
+ 2011-02-24 18:23 . 2009-10-12 21:51 286720 c:\windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_fr_31bf3856ad364e35\System.Management.Automation.Resources.dll
+ 2011-02-24 18:23 . 2009-10-12 21:59 253952 c:\windows\assembly\GAC_MSIL\System.Management.Automation.Resources\1.0.0.0_en_31bf3856ad364e35\System.Management.Automation.Resources.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 274432 c:\windows\assembly\GAC_MSIL\Microsoft.WSMan.Management\1.0.0.0__31bf3856ad364e35\Microsoft.WSMan.Management.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 278528 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GraphicalHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GraphicalHost.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 651264 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.GPowerShell\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.GPowerShell.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 991232 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Editor\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Editor.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 200704 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 618496 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 262144 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll
+ 2011-02-24 18:24 . 2009-10-09 21:57 102400 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Diagnostics\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Diagnostics.dll
+ 2011-04-14 17:26 . 2011-02-14 11:57 5924176 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6002.22587_none_1b73070048d4d048\mscorwks.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 5813072 c:\windows\winsxs\x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_6.0.6002.18403_none_323906902f343f06\mscorwks.dll
+ 2011-04-14 17:26 . 2011-02-14 11:57 4550656 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6002.22587_none_b0cc3812db4d6bc3\mscorlib.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 4550656 c:\windows\winsxs\x86_mscorlib_b77a5c561934e089_6.0.6002.18403_none_c79237a2c1acda81\mscorlib.dll
+ 2011-04-14 17:27 . 2010-11-05 00:40 1837568 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.6002.22519_none_76d520557cc468d3\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-04 18:51 1837568 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.6002.18342_none_8da6678f6319a11a\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-05 23:52 1824256 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.6001.22791_none_7701e1797c6b5336\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-06 11:07 1823744 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.6001.18551_none_8dcb873562c78d83\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-05 00:40 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.22519_none_8783b170e3be8f2c\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-04 18:51 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-05 23:52 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.22791_none_87b07294e365798f\GdiPlus.dll
+ 2011-04-14 17:27 . 2010-11-06 11:07 1748992 c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\GdiPlus.dll
+ 2011-04-14 17:31 . 2011-03-03 15:19 2050560 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22601_none_bb6497e7b0c9c13d\win32k.sys
+ 2011-02-10 08:07 . 2010-12-31 13:59 2048000 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.22560_none_bb22b62fb0fb5265\win32k.sys
+ 2011-04-14 17:31 . 2011-03-03 13:25 2041856 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18417_none_bad62b0697aed847\win32k.sys
+ 2011-02-10 08:07 . 2010-12-31 13:57 2039808 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6002.18365_none_ba9e18f097d93427\win32k.sys
+ 2011-04-14 17:31 . 2011-03-03 12:51 2041344 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22867_none_b943464db3ceaea2\win32k.sys
+ 2011-02-10 08:07 . 2010-12-31 13:24 2039296 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22824_none_b96b851fb3b0f2d9\win32k.sys
+ 2011-04-14 17:31 . 2011-03-03 12:53 2040832 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18612_none_b8eab5c69a8d0749\win32k.sys
+ 2011-02-10 08:07 . 2010-12-31 13:25 2038784 c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18573_none_b8aad4a29abccb1f\win32k.sys
+ 2011-02-24 18:23 . 2009-10-09 21:56 1181696 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_7.0.6001.18181_none_bb807475382e6b2a\WsmSvc.dll
+ 2011-03-09 21:43 . 2010-12-17 17:05 2069504 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22550_none_3228141ddc14a331\mstscax.dll
+ 2011-03-09 21:43 . 2010-12-17 15:45 2067968 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18356_none_31a47728c2f19e4a\mstscax.dll
+ 2011-03-09 21:43 . 2010-12-17 14:54 2069504 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22815_none_3071e357dec95cfc\mstscax.dll
+ 2011-03-09 21:43 . 2010-12-17 16:43 2067456 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18564_none_2fb132dac5d53542\mstscax.dll
+ 2011-02-10 08:06 . 2011-01-20 16:11 1075712 c:\windows\winsxs\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.0.6002.22573_none_e99c5aec22601e6b\shdocvw.dll
+ 2011-02-10 08:06 . 2011-01-20 16:07 1075712 c:\windows\winsxs\x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.0.6002.18392_none_e8fc1c190953a005\shdocvw.dll
+ 2011-01-12 05:48 . 2010-12-14 15:53 1169408 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.22547_none_27559a9f7d2695f0\sdclt.exe
+ 2011-01-12 05:48 . 2010-12-14 14:49 1169408 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18353_none_26bd2ada6414af94\sdclt.exe
+ 2011-01-12 05:48 . 2010-12-14 14:30 1169408 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.22812_none_258a97097fec6e46\sdclt.exe
+ 2011-01-12 05:48 . 2010-12-14 15:49 1169408 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6001.18561_none_24c9e68c66f8468c\sdclt.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3552144 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22505_none_6ea57f0fca62721a\ntoskrnl.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3603856 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22505_none_6ea57f0fca62721a\ntkrnlpa.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3550096 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18327_none_6e08411ab1533fb9\ntoskrnl.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3602320 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18327_none_6e08411ab1533fb9\ntkrnlpa.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3550608 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22777_none_6c755c61cd731614\ntoskrnl.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3602832 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.22777_none_6c755c61cd731614\ntkrnlpa.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3548048 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18538_none_6c17fdaab43422b6\ntoskrnl.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3600272 c:\windows\winsxs\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6001.18538_none_6c17fdaab43422b6\ntkrnlpa.exe
+ 2011-05-11 04:34 . 2011-04-07 12:02 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22623_none_f4e5990d81cbb534\OESpamFilter.dat
+ 2011-05-11 04:34 . 2011-04-07 12:01 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18447_none_f44a5bac68bab581\OESpamFilter.dat
+ 2011-05-11 04:34 . 2011-04-07 12:02 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22897_none_f2b776f384da8bdc\OESpamFilter.dat
+ 2011-05-11 04:34 . 2011-04-07 12:01 2409784 c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18630_none_f267b5c46b9295e4\OESpamFilter.dat
+ 2011-02-10 08:07 . 2010-10-15 13:48 1206104 c:\windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.0.6002.22505_none_5b4bfbb1126d0bc8\ntdll.dll
+ 2011-02-10 08:07 . 2010-10-15 13:48 1205080 c:\windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.0.6002.18327_none_5aaebdbbf95dd967\ntdll.dll
+ 2011-02-10 08:07 . 2010-10-15 13:48 1205592 c:\windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.0.6001.22777_none_591bd903157dafc2\ntdll.dll
+ 2011-02-10 08:07 . 2010-10-15 13:48 1205080 c:\windows\winsxs\x86_microsoft-windows-ntdll_31bf3856ad364e35_6.0.6001.18538_none_58be7a4bfc3ebc64\ntdll.dll
+ 2011-04-14 17:32 . 2011-03-10 19:32 1162240 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6002.22609_none_f58deebe6bca7b4f\mfc42u.dll
+ 2011-04-14 17:32 . 2011-03-10 19:32 1136640 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6002.22609_none_f58deebe6bca7b4f\mfc42.dll
+ 2011-04-14 17:32 . 2011-03-10 17:03 1162240 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6002.18425_none_f4eaaf0d52c0b0e4\mfc42u.dll
+ 2011-04-14 17:32 . 2011-03-10 17:03 1136640 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6002.18425_none_f4eaaf0d52c0b0e4\mfc42.dll
+ 2011-04-14 17:32 . 2011-03-10 15:48 1161728 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6001.22875_none_f357ca546ee0873f\mfc42u.dll
+ 2011-04-14 17:32 . 2011-03-10 15:48 1136640 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6001.22875_none_f357ca546ee0873f\mfc42.dll
+ 2011-04-14 17:32 . 2011-03-10 16:12 1161728 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6001.18622_none_f3013a61559d1294\mfc42u.dll
+ 2011-04-14 17:32 . 2011-03-10 16:12 1136640 c:\windows\winsxs\x86_microsoft-windows-mfc42x_31bf3856ad364e35_6.0.6001.18622_none_f3013a61559d1294\mfc42.dll
+ 2011-02-10 08:06 . 2011-01-20 16:10 2873856 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.22573_none_9e869ca3233b9b1e\mf.dll
+ 2011-02-10 08:06 . 2011-01-20 16:06 2873344 c:\windows\winsxs\x86_microsoft-windows-mediafoundation_31bf3856ad364e35_6.0.6002.18392_none_9de65dd00a2f1cb8\mf.dll
+ 2011-04-14 17:31 . 2011-02-18 19:00 6090752 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22592_none_66b339e4c4aa186f\ieframe.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 6090240 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.22551_none_66dd794ac48a8f54\ieframe.dll
+ 2011-04-14 17:31 . 2011-02-18 16:35 6089216 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18407_none_668fedd7ab3efbdf\ieframe.dll
+ 2011-02-10 08:06 . 2010-12-20 16:33 6089216 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6002.18357_none_6659dc55ab678a6d\ieframe.dll
+ 2011-04-14 17:31 . 2011-02-18 15:19 6081536 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22857_none_64fd091ec75ed23a\ieframe.dll
+ 2011-02-10 08:06 . 2010-12-20 15:25 6081536 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.22816_none_65274884c73f491f\ieframe.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 6078464 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18602_none_64a47897ae1d2ae1\ieframe.dll
+ 2011-02-10 08:06 . 2010-12-20 15:37 6078464 c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6001.18565_none_64669807ae4b2165\ieframe.dll
+ 2011-04-14 17:31 . 2011-02-18 19:01 3609600 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.22592_none_1553dfe138b48a42\mshtml.dll
+ 2011-02-10 08:06 . 2010-12-20 16:40 3609088 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.22551_none_157e1f4738950127\mshtml.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 3608576 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.18407_none_153093d41f496db2\mshtml.dll
+ 2011-02-10 08:06 . 2010-12-20 16:34 3608064 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6002.18357_none_14fa82521f71fc40\mshtml.dll
+ 2011-04-14 17:31 . 2011-02-18 15:20 3593728 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22857_none_139daf1b3b69440d\mshtml.dll
+ 2011-02-10 08:06 . 2010-12-20 15:26 3593216 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.22816_none_13c7ee813b49baf2\mshtml.dll
+ 2011-04-14 17:31 . 2011-02-18 15:45 3592704 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18602_none_13451e9422279cb4\mshtml.dll
+ 2011-02-10 08:06 . 2010-12-20 15:38 3592192 c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6001.18565_none_13073e0422559338\mshtml.dll
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22592_none_fda2e39c82499b5f\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.22551_none_fdcd2302822a1244\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18407_none_fd7f978f68de7ecf\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6002.18357_none_fd49860d69070d5d\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22857_none_fbecb2d684fe552a\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.22816_none_fc16f23c84decc0f\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18602_none_fb94224f6bbcadd1\ieapfltr.dat
+ 2009-07-29 18:30 . 2009-06-18 06:56 2452872 c:\windows\winsxs\x86_microsoft-windows-ie-antiphishfilter_31bf3856ad364e35_6.0.6001.18565_none_fb5641bf6beaa455\ieapfltr.dat
+ 2011-04-14 17:31 . 2011-02-18 19:04 1176576 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22592_none_b6f3e520ed54fa79\urlmon.dll
+ 2011-02-10 08:06 . 2010-12-20 16:42 1176576 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.22551_none_b71e2486ed35715e\urlmon.dll
+ 2011-04-14 17:31 . 2011-02-18 16:38 1176064 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18407_none_b6d09913d3e9dde9\urlmon.dll
+ 2011-02-10 08:06 . 2010-12-20 16:36 1176064 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6002.18357_none_b69a8791d4126c77\urlmon.dll
+ 2011-04-14 17:31 . 2011-02-18 15:22 1175552 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22857_none_b53db45af009b444\urlmon.dll
+ 2011-02-10 08:06 . 2010-12-20 15:27 1175552 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.22816_none_b567f3c0efea2b29\urlmon.dll
+ 2011-04-14 17:31 . 2011-02-18 15:48 1174528 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18602_none_b4e523d3d6c80ceb\urlmon.dll
+ 2011-02-10 08:06 . 2010-12-20 15:40 1174528 c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6001.18565_none_b4a74343d6f6036f\urlmon.dll
+ 2011-04-27 17:26 . 2011-03-03 15:41 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22601_none_44716d3bd77ff8f8\GameUXLegacyGDFs.dll
+ 2011-04-27 17:26 . 2011-03-03 18:16 1696256 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22601_none_44716d3bd77ff8f8\gameux.dll
+ 2011-04-27 17:26 . 2011-03-03 13:35 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18417_none_43e3005abe651002\GameUXLegacyGDFs.dll
+ 2010-10-27 19:29 . 2010-08-26 16:34 1696256 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18417_none_43e3005abe651002\gameux.dll
+ 2011-04-27 17:26 . 2011-03-03 12:58 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22867_none_42501ba1da84e65d\GameUXLegacyGDFs.dll
+ 2011-04-27 17:26 . 2011-03-03 14:25 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22867_none_42501ba1da84e65d\gameux.dll
+ 2011-04-27 17:26 . 2011-03-03 13:01 4240384 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18612_none_41f78b1ac1433f04\GameUXLegacyGDFs.dll
+ 2009-05-13 04:00 . 2008-03-08 04:21 1695744 c:\windows\winsxs\x86_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18612_none_41f78b1ac1433f04\gameux.dll
+ 2011-02-10 08:06 . 2011-01-20 14:19 1172480 c:\windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_7.0.6002.22573_none_ddfb8d90f80cf7eb\d3d10warp.dll
+ 2011-02-10 08:06 . 2011-01-20 14:12 1172480 c:\windows\winsxs\x86_microsoft-windows-directx-warp10_31bf3856ad364e35_7.0.6002.18392_none_dd5b4ebddf007985\d3d10warp.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 1029120 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10_31bf3856ad364e35_7.0.6002.22573_none_e3504f4b6f0c972b\d3d10.dll
+ 2011-02-10 08:06 . 2011-01-20 16:03 1029120 c:\windows\winsxs\x86_microsoft-windows-directx-direct3d10_31bf3856ad364e35_7.0.6002.18392_none_e2b01078560018c5\d3d10.dll
+ 2011-03-23 04:12 . 2011-02-22 15:12 1068544 c:\windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.0.6002.22594_none_c620b940a0defa57\DWrite.dll
+ 2011-02-10 08:06 . 2011-01-20 13:50 1068544 c:\windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.0.6002.22573_none_c63558cea0cfa91e\DWrite.dll
+ 2011-03-23 04:12 . 2011-02-22 13:33 1068544 c:\windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.0.6002.18409_none_c5fd6d338773ddc7\DWrite.dll
+ 2011-02-10 08:06 . 2011-01-20 13:44 1068544 c:\windows\winsxs\x86_microsoft-windows-directwrite_31bf3856ad364e35_7.0.6002.18392_none_c59519fb87c32ab8\DWrite.dll
+ 2011-02-10 08:06 . 2011-01-20 14:36 1554432 c:\windows\winsxs\x86_microsoft-windows-c..t-xpsomandstreaming_31bf3856ad364e35_7.0.6002.22573_none_a2b064268681de30\xpsservices.dll
+ 2011-02-10 08:06 . 2011-01-20 14:28 1554432 c:\windows\winsxs\x86_microsoft-windows-c..t-xpsomandstreaming_31bf3856ad364e35_7.0.6002.18392_none_a21025536d755fca\xpsservices.dll
+ 2011-04-27 17:26 . 2011-03-03 18:15 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.22601_none_0e9556eb088d95f8\AcGenral.dll
+ 2011-04-27 17:26 . 2011-03-03 15:40 2159616 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6002.18417_none_0e06ea09ef72ad02\AcGenral.dll
+ 2011-04-27 17:26 . 2011-03-03 14:23 2157056 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.22867_none_0c7405510b92835d\AcGenral.dll
+ 2011-04-27 17:26 . 2011-03-03 14:56 2153984 c:\windows\winsxs\x86_microsoft-windows-a..ence-mitigations-c3_31bf3856ad364e35_6.0.6001.18612_none_0c1b74c9f250dc04\AcGenral.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 2682880 c:\windows\winsxs\msil_system.management.automation_31bf3856ad364e35_7.0.6001.18181_none_128005966b78570e\System.Management.Automation.dll
+ 2009-05-17 18:59 . 2011-05-12 15:18 2877490 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
+ 2011-02-10 08:06 . 2011-01-20 14:28 1554432 c:\windows\System32\xpsservices.dll
- 2010-10-17 10:04 . 2009-09-25 01:49 1554432 c:\windows\System32\xpsservices.dll
+ 2011-02-24 18:23 . 2009-10-09 21:56 1181696 c:\windows\System32\WsmSvc.dll
+ 2009-10-16 09:33 . 2009-10-16 09:33 3003680 c:\windows\System32\usbaaplrc.dll
+ 2011-04-14 17:31 . 2011-02-18 16:38 1176064 c:\windows\System32\urlmon.dll
- 2010-12-15 04:37 . 2010-10-21 20:08 1176064 c:\windows\System32\urlmon.dll
+ 2006-11-02 10:22 . 2011-05-13 07:27 6553600 c:\windows\System32\SMI\Store\Machine\schema.dat
+ 2011-02-10 08:06 . 2011-01-20 16:07 1075712 c:\windows\System32\shdocvw.dll
- 2009-09-18 14:41 . 2009-04-11 06:27 1169408 c:\windows\System32\sdclt.exe
+ 2011-01-12 05:48 . 2010-12-14 14:49 1169408 c:\windows\System32\sdclt.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3550096 c:\windows\System32\ntoskrnl.exe
+ 2011-02-10 08:07 . 2010-10-15 14:08 3602320 c:\windows\System32\ntkrnlpa.exe
+ 2011-02-10 08:07 . 2010-10-15 13:48 1205080 c:\windows\System32\ntdll.dll
+ 2011-03-09 21:43 . 2010-12-17 15:45 2067968 c:\windows\System32\mstscax.dll
+ 2011-04-14 17:31 . 2011-02-18 16:36 3608576 c:\windows\System32\mshtml.dll
+ 2011-02-10 08:06 . 2011-01-20 16:06 2873344 c:\windows\System32\mf.dll
+ 2011-04-14 17:31 . 2011-02-18 16:35 6089216 c:\windows\System32\ieframe.dll
- 2010-12-15 04:37 . 2010-10-21 20:06 6089216 c:\windows\System32\ieframe.dll
+ 2011-02-10 08:06 . 2011-01-20 14:12 1172480 c:\windows\System32\d3d10warp.dll
+ 2011-02-10 08:06 . 2011-01-20 16:08 1029120 c:\windows\System32\d3d10.dll
+ 2006-11-02 12:47 . 2011-02-10 11:26 4305763 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2008-08-07 08:07 . 2010-12-26 08:06 1704392 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
+ 2011-03-14 02:07 . 2010-01-22 16:56 1652688 c:\windows\PCTBDCore.dll
- 2010-03-18 20:16 . 2010-03-18 20:16 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 1142104 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-02-10 11:10 . 2011-02-10 11:10 6735176 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 5813072 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2010-10-11 21:28 . 2010-05-21 10:56 5813072 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2010-10-11 21:28 . 2010-05-21 10:56 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 3481928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 3481928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 4982120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 4982120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2010-06-25 10:03 . 2010-06-25 10:03 5196112 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-04-15 17:59 . 2011-04-15 17:59 5196112 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-04-15 18:00 . 2011-04-15 18:00 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
- 2010-06-25 10:04 . 2010-06-25 10:04 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-01-12 00:49 . 2011-01-12 00:49 9003008 c:\windows\Installer\a65d1.msp
+ 2010-11-21 06:32 . 2010-11-21 06:32 4165120 c:\windows\Installer\a65b7.msp
+ 2010-11-21 06:34 . 2010-11-21 06:34 1198080 c:\windows\Installer\a659d.msp
+ 2011-03-18 03:01 . 2011-03-18 03:01 9563648 c:\windows\Installer\a6570.msp
+ 2011-01-12 00:50 . 2011-01-12 00:50 8177152 c:\windows\Installer\a6557.msp
+ 2010-11-21 06:33 . 2010-11-21 06:33 1980928 c:\windows\Installer\a6547.msp
+ 2011-04-29 19:27 . 2011-04-29 19:27 4158464 c:\windows\Installer\71dbd.msp
+ 2011-04-29 19:30 . 2011-04-29 19:30 1197056 c:\windows\Installer\71da4.msp
+ 2010-12-23 04:35 . 2010-12-23 04:35 1251328 c:\windows\Installer\23b7952.msi
+ 2010-12-19 22:08 . 2010-12-19 22:08 2283008 c:\windows\Installer\16db12.msi
+ 2008-08-07 04:23 . 2011-05-12 15:15 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
- 2008-08-07 04:23 . 2010-12-15 11:04 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 2207632 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\rt3d.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 6222744 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\authplay.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 5503368 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AGM.dll
+ 2010-11-10 20:49 . 2010-11-10 20:49 1216416 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AdobeCollabSync.exe
+ 2010-11-10 20:49 . 2010-11-10 20:49 1289624 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32.exe
+ 2006-10-27 04:08 . 2006-10-27 04:08 1764112 c:\windows\Installer\$PatchCache$\Managed\00002159FA0090400000000000F01FEC\12.0.4518\PPCNV.DLL
+ 2011-04-15 18:03 . 2011-04-15 18:03 3779072 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\bbd0d0d6986a0409d0344ffecc79dc22\WindowsBase.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1055744 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\893f3289dc3e7ab4549da1039a5a2309\UIAutomationClientsideProviders.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 9000960 c:\windows\assembly\NativeImages_v4.0.30319_32\System\543000b97e61a5d0857ac6af534e676c\System.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 5571584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\8baad7c480f1dde84931a844f8c0a465\System.Xml.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1776640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\9d29e808bc35766f1c1a6dbeb67c015a\System.Xaml.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 4496384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\3181199e69c30e53abe95493600605b2\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1828352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\4aaafda3f42c549d8540d949b7771bfe\System.Web.Services.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1992192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\ec3ecec0502f1821f59f116d65505e1a\System.Speech.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1127424 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\6a3b75723d70cfd7a0ce55deeca72994\System.ServiceModel.Discovery.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1388032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\1ea1e55f1d99243446eb5e1422472da7\System.ServiceModel.Activities.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 2625024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\59bb50b7cded20c8ac981442bd0aaa79\System.Runtime.Serialization.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1011200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\e702d05dee88315b4371d4af77beef14\System.Runtime.DurableInstancing.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 1047040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\1296ce57bf719ccbca5678780f2a1651\System.Printing.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1159168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\6407a29e082d0aa4f118ca86b5266d37\System.Management.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\a457cfdbb3d7d9b4d77787c7081ad9a1\System.IdentityModel.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 1651200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b06f6be1a84e07f2cf7958da9c1af409\System.Drawing.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1151488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\d592154127b090529a5200ea3955e246\System.DirectoryServices.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1872384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\560461d5799ebabcde2d9dfc745b0c6a\System.Deployment.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 6754816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\3c2804ec1e22d048b9fe053a90672189\System.Data.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 2538496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\b9a983c667c3ff1e1fcf8120266f62fa\System.Data.SqlXml.ni.dll
+ 2011-04-15 19:30 . 2011-04-15 19:30 1332736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\73c24f4149a48ab1d77792b376d83f07\System.Data.Services.Client.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 2499072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\967b4093383d27934a962fbc8b50a9a7\System.Data.Linq.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 7025664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\62ffa024e20a305ef5c8119d57577a24\System.Core.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 4103168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\1534957f29d87890a8f83db0bb22bacd\System.Activities.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 3691520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\6738626185c9ca23f4822a5844c70f9c\System.Activities.Presentation.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 1506304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\7dbeb708492a556cdab0c9ed094ec12f\System.Activities.Core.Presentation.ni.dll
+ 2011-04-15 19:16 . 2011-04-15 19:16 2842624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\693e38d8e731f6e05f03c5e9060b6770\ReachFramework.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\fcc8d07ee8e6d9a040f949e2f6179d06\PresentationUI.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1137664 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\8fd1cbc6a9b6150b3a913c6854ed61ca\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1167872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\67ee94329b727ec7399d0ad802501c1a\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-04-15 19:15 . 2011-04-15 19:15 1819648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\3c5cdbca91aeac35c8e9d66bf95997fc\Microsoft.VisualBasic.ni.dll
+ 2011-04-15 19:09 . 2011-04-15 19:09 1079808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\c107e40649746b1e2decadc8a01a6cf0\Microsoft.Transactions.Bridge.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 2441728 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\ff9cbdbc1b59db080abb264ba29d8ae9\Microsoft.JScript.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 1612288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\6115d4bc5f88ad22b84820392c1174b9\Microsoft.CSharp.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\b713b41679bdcb5a6cc0487bb4ceb9f0\WindowsBase.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\f622c994edcea757d2a416e3cd2b1b13\UIAutomationClientsideProviders.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\45f10e36f25d92dd808caab75e45b8ae\System.ni.dll
+ 2011-04-16 06:20 . 2011-04-16 06:20 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\653b1be0c33cfade02fb0a61f135e488\System.Xml.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\ee8fc5253740c428ed4acd512a160aaa\System.WorkflowServices.ni.dll
+ 2011-04-16 06:20 . 2011-04-16 06:20 1911296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\5ed98761e1ae9b1932db90949464d098\System.Workflow.Runtime.ni.dll
+ 2011-04-16 06:20 . 2011-04-16 06:20 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\ce06af33a044d2d1681a34d5056ff763\System.Workflow.ComponentModel.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\e0e96f32122b8826da6ab1d99ab67d6f\System.Workflow.Activities.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\1113c8ce01a5bc82bfde60e7bf4adcf1\System.Web.Services.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\d6a0cba36faf63040b55838c1c9287c0\System.Web.Mobile.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\036ebdc43f636fee8133b572955c1305\System.Web.Extensions.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\38c4b6858ec921d52207a2a822e79061\System.Speech.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\57ef637da6d30d53e3fc12e1ed2dbe8d\System.ServiceModel.Web.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 2346496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ed2e2a6aefaad58224bcd97060507a3d\System.Runtime.Serialization.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0bce6b10c60fff3fea9ccc63f374da69\System.Printing.ni.dll
+ 2011-02-24 18:28 . 2011-02-24 18:28 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\70e9376b793bc8e1762db1ab8308b895\System.Management.Automation.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 8365056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\09a11538344ec0e8b1bceab90b40a371\System.Management.Automation.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\1403b6ce8f9b41a446e2954dd64f1388\System.IdentityModel.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d5100c24f083084e1d2556839904e987\System.Drawing.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\2e0959aca71bd161b5834cfbdbc8a3c7\System.DirectoryServices.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\af9926fcbda1e5916461b5198cf0d325\System.Deployment.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 6621696 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\e1053db6ce65cc97268fc79cc380f0c1\System.Data.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\8c45d91a54a9f4185d485f2bea2cfd72\System.Data.SqlXml.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\e6e3bae7a8cac7daed4840adfcb605f2\System.Data.Services.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 1119232 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\694dd53ab2f684d99bfce62e2f8f0e98\System.Data.OracleClient.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\8b0dea49aab560f2784e3efcafebb674\System.Data.Linq.ni.dll
+ 2011-04-16 07:05 . 2011-04-16 07:05 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6bdf937c9140c6779d816ce1c9d57968\System.Data.Entity.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\3d898b1a36aa22551eb0fd3ebe9bfc11\System.Core.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 2146816 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\9045fdb5e131b1d7855d79c399e43ce2\ReachFramework.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf1cf263c7046fac6780d65b8f5f3068\PresentationUI.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\7a7fdac28dd989c0d75f9c5471fb9842\PresentationBuildTasks.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 2538496 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\ae650eea69973e88123091f2a58c271d\Narrator.ni.exe
+ 2011-04-16 07:04 . 2011-04-16 07:04 1536512 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\b987222d6af55dab31ec15ec51c77241\MMCEx.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 6340096 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\995eb5db2b78e7a0652a892544cd3565\MIGUIControls.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 1711616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\9140c0829b03183f35f543966edc1841\Microsoft.VisualBasic.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4b9dc838670ddf626e49c7b6d8a43ce5\Microsoft.Transactions.Bridge.ni.dll
+ 2011-02-24 18:28 . 2011-02-24 18:28 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\ef8f250680975c3d124c5e973e2c0f14\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\c7138c997d5bfe2acbaf09405463c4cc\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 1609728 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\58c3fc697f5d3cecb10ca659e419ab43\Microsoft.PowerShell.Commands.Utility.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3ff96258401faa3528524f124ac2f4e6\Microsoft.PowerShell.Editor.ni.dll
+ 2011-04-16 07:04 . 2011-04-16 07:04 3722752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\176f15ef6905f5686c524c557bb14464\Microsoft.PowerShell.Editor.ni.dll
+ 2011-02-24 18:29 . 2011-02-24 18:29 1704448 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\0889ae9a52278774b2c0595ecc30c064\Microsoft.PowerShell.GPowerShell.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 5486080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\83cd6f48442d319627dfd2035ab73215\Microsoft.MediaCenter.UI.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\7229b571999ffda51219230f12afcbbe\Microsoft.JScript.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\a753258f9e80a80a3556504a62deac23\Microsoft.Ink.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6d74afde05554d996b3322a418d9e7da\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\5ac955488c1e60518303ce09df1ceff6\Microsoft.Build.Tasks.ni.dll
+ 2011-04-16 07:01 . 2011-04-16 07:01 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\b4419e8b3f5af8815d2531a1eca21346\Microsoft.Build.Engine.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 1732608 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\e3b8b1f9086eec53ce5ce3c8248d5eb8\ehRecObj.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 2130432 c:\windows\assembly\NativeImages_v2.0.50727_32\ehepg\34158e4911660c225dbeffe3a2146763\ehepg.ni.dll
+ 2011-02-24 18:23 . 2009-10-09 21:57 2682880 c:\windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll
- 2010-10-11 21:28 . 2010-05-21 10:56 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-04-14 17:26 . 2010-10-29 10:53 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-02-10 08:06 . 2011-01-21 16:27 11588096 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6002.22574_none_6e51988f2874f7b1\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 11:49 11584512 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6002.22169_none_6e616255286865d7\shell32.dll
+ 2011-02-10 08:06 . 2011-01-21 16:35 11586048 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6002.18393_none_6db159bc0f68794b\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 11:47 11584512 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6002.18063_none_6dd1c3ce0f502e03\shell32.dll
+ 2011-02-10 08:06 . 2011-01-21 15:04 11587584 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.22839_none_6c9b67c92b29b17c\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 11:59 11584512 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.22467_none_6c78efd92b43de05\shell32.dll
+ 2011-02-10 08:06 . 2011-01-21 15:46 11582464 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.18588_none_6bdab74c123589c2\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 12:20 11581440 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6001.18287_none_6bd9b150123678f6\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 12:06 11321856 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.21081_none_6a76e5db2e332307\shell32.dll
+ 2011-02-17 22:17 . 2009-07-10 12:17 11316224 c:\windows\winsxs\x86_microsoft-windows-shell32_31bf3856ad364e35_6.0.6000.16883_none_69ef7182151382a9\shell32.dll
+ 2011-02-10 08:06 . 2011-01-21 16:35 11586048 c:\windows\System32\shell32.dll
+ 2006-11-02 10:24 . 2011-05-12 15:15 42829768 c:\windows\System32\mrt.exe
+ 2011-02-11 15:43 . 2011-02-11 15:43 10951168 c:\windows\Installer\a6595.msp
+ 2011-02-18 18:59 . 2011-02-18 18:59 20308992 c:\windows\Installer\80180.msp
+ 2011-01-30 20:52 . 2011-01-30 20:52 12425728 c:\windows\Installer\3ebc1.msp
+ 2011-04-22 10:00 . 2011-04-22 10:00 20314624 c:\windows\Installer\3db9663.msp
+ 2010-12-19 11:00 . 2010-12-19 11:00 20304384 c:\windows\Installer\2eaa7ad.msp
+ 2010-11-10 20:49 . 2010-11-10 20:49 23724952 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 13006336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\631b850609a41144d4ccfb43e813fa88\System.Windows.Forms.ni.dll
+ 2011-04-15 19:31 . 2011-04-15 19:31 17919488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\3e3b71313fa512912c51799a47273a9c\System.ServiceModel.ni.dll
+ 2011-04-15 19:30 . 2011-04-15 19:30 13273600 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\72bad6f7cb443179bbc04de77093bda0\System.Data.Entity.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 17629184 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\127e76052e5777c12399916d06d4820d\PresentationFramework.ni.dll
+ 2011-04-15 18:03 . 2011-04-15 18:03 11058176 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\82125395225360a2a0512f856aa84936\PresentationCore.ni.dll
+ 2011-04-15 18:02 . 2011-04-15 18:02 14415872 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\efc49e47517e3d16bab15796b3af4ac6\mscorlib.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2bc8bc432d91919ea0bbb2b803a4b6af\System.Windows.Forms.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 11804672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b49ce1a910673d3e96965817e5c0535c\System.Web.ni.dll
+ 2011-04-16 07:02 . 2011-04-16 07:02 17404416 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\9fcd0c2cb56e8317633a8c11e2fbe2c8\System.ServiceModel.ni.dll
+ 2011-04-16 06:19 . 2011-04-16 06:19 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8269de7b5d0f6f37cb5349088db5fc2d\System.Design.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 14328832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\6508f77b1fb9d5161f11a14d46a7957b\PresentationFramework.ni.dll
+ 2011-04-16 06:18 . 2011-04-16 06:18 12216832 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\267585069dce3fd61bd67943953a6d04\PresentationCore.ni.dll
+ 2011-04-16 06:17 . 2011-04-16 06:17 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b2a5854682691830b9f62ec351c8b54e\mscorlib.ni.dll
+ 2011-04-16 07:03 . 2011-04-16 07:03 11588096 c:\windows\assembly\NativeImages_v2.0.50727_32\ehshell\e0fb4a26bfe9b0800e49772a0982c2e9\ehshell.ni.dll
.

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 9:04 am

-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{437c4386-9237-441f-a940-009430030ee0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{437c4386-9237-441f-a940-009430030ee0}]
2010-11-14 05:58 3913000 ----a-w- c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9b339f6e-ddcd-401b-8764-230adbd01761}]
2009-12-31 19:53 2349080 ----a-w- c:\program files\Messenger_Plus_Live\tbMess.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 20:51 3911776 ----a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{437c4386-9237-441f-a940-009430030ee0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{9B339F6E-DDCD-401B-8764-230ADBD01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{437C4386-9237-441F-A940-009430030EE0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2006-09-11 439992]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-03-13 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-03-26 142120]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-09-19 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-19 8497696]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-09-19 81920]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-21 963976]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-21 963976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2006-09-11 439992]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-17 06:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
2007-08-17 06:13 218408 ------w- c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R2 aswFsBlk;aswFsBlk;aswFsBlk.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca2d0924894d30;Google Update Service (gupdate1ca2d0924894d30);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 133104]
R3 GamesAppService;GamesAppService;c:\program files\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 133104]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 RegKernelHelp;RegKernelHelp;c:\program files\Safe Returner\RegKernelHelp.sys [x]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2010-03-11 366840]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-05-28 721904]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2011-03-14 218592]
S1 aswSP;aswSP; [x]
S2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};c:\program files\HP\QuickPlay\000.fcl [2007-12-20 41456]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\Spyware Doctor\BDT\BDTUpdateService.exe [2010-01-22 112592]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - ASWMBR
*Deregistered* - aswMBR
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 02:40]
.
2011-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 02:40]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
mStart Page = [You must be registered and logged in to see this link.]
uInternet Settings,ProxyServer = http=127.0.0.1:51253
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
DPF: CabBuilder - [You must be registered and logged in to see this link.]
FF - ProfilePath - c:\users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 51253
FF - prefs.js: network.proxy.type - 1
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2011-05-15 18:46
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{22D78859-9CE9-4B77-BF18-AC83E81A9263}]
"ImagePath"="\??\c:\program files\HP\QuickPlay\000.fcl"
.
Completion time: 2011-05-15 18:49:21
ComboFix-quarantined-files.txt 2011-05-16 01:49
ComboFix2.txt 2010-12-17 07:19
ComboFix3.txt 2010-12-17 06:11
ComboFix4.txt 2010-12-17 03:45
ComboFix5.txt 2011-05-16 01:33
.
Pre-Run: 64,584,953,856 bytes free
Post-Run: 65,098,014,720 bytes free
.
Current=1 Default=1 Failed=0 LastKnownGood=9 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
- - End Of File - - 0ECD17D937BFC597E2E09FF5310A47A6

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by Belahzur on Mon 16 May 2011, 9:13 am

Hello.

  1. Close any open browsers.
  2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  3. Open notepad and copy/paste the text in the quotebox below into it:
    Code:

    KILLALL::

    DDS::
    uInternet Settings,ProxyServer = http=127.0.0.1:51253
    DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab

    Firefox::
    FF - ProfilePath - c:\users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\
    FF - prefs.js: network.proxy.http - 127.0.0.1
    FF - prefs.js: network.proxy.http_port - 51253
    FF - prefs.js: network.proxy.type - 1
  4. Save this as CFScript.txt, in the same location as ComboFix.exe



  5. Referring to the picture above, drag CFScript into ComboFix.exe
  6. When finished, it shall produce a log for you at C:\ComboFix.txt
  7. Please post the contents of the log in your next reply.


@RealBelahzur - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur

Manager | Tech Officer
Manager | Tech Officer

Posts : 34917
Joined : 2008-08-04
Operating System : XP SP3 Media Centre

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by nathaliedaigle on Mon 16 May 2011, 11:01 am

ComboFix 11-05-15.03 - Nathalie 15/05/2011 20:42:28.10.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.3070.1400 [GMT -7:00]
Running from: c:\users\Nathalie\Desktop\commy.exe
Command switches used :: c:\users\Nathalie\Desktop\CFScript.lnk
SP: Spyware Doctor *Disabled/Updated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2011-04-16 to 2011-05-16 )))))))))))))))))))))))))))))))
.
.
2011-05-16 03:49 . 2011-05-16 03:49 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-05-16 03:49 . 2011-05-16 03:49 -------- d-----w- c:\users\Guest\AppData\Local\temp
2011-05-16 03:49 . 2011-05-16 03:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-14 00:18 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92D2EC0A-8C3F-464B-BB0E-F49243C87735}\mpengine.dll
2011-05-11 04:34 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-04-29 08:07 . 2011-04-29 08:07 -------- d-----w- c:\windows\Cooking Academy 2 World Cuisine
2011-04-27 17:26 . 2011-03-03 15:40 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-04-27 17:26 . 2011-03-03 13:35 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-04-27 17:26 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-17 06:39 . 2011-04-17 06:39 -------- d-----w- c:\users\Nathalie\AppData\Roaming\CupcakeCafe
2011-04-17 05:26 . 2011-04-17 05:26 -------- d-----w- c:\program files\uTorrent
2011-04-17 05:25 . 2011-05-15 21:52 -------- d-----w- c:\users\Nathalie\AppData\Roaming\uTorrent
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-14 02:25 . 2011-03-14 02:04 63360 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2011-03-14 02:25 . 2011-03-14 02:04 218592 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2011-03-10 17:03 . 2011-04-14 17:32 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-10 17:03 . 2011-04-14 17:32 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-03-03 15:42 . 2011-04-14 17:27 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 15:40 . 2011-04-27 17:26 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40 . 2011-04-27 17:26 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40 . 2011-04-27 17:26 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40 . 2011-04-27 17:26 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-03-03 13:25 . 2011-04-14 17:31 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-03-02 15:44 . 2011-04-14 17:31 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-02-22 14:13 . 2011-03-23 04:12 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-22 13:33 . 2011-03-23 04:12 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-02-22 13:33 . 2011-03-23 04:12 797696 ----a-w- c:\windows\system32\FntCache.dll
2011-02-22 13:24 . 2011-04-14 17:32 213504 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-02-22 13:24 . 2011-04-14 17:32 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-02-22 13:23 . 2011-04-14 17:32 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-22 13:23 . 2011-04-14 17:32 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-02-18 16:38 . 2011-04-14 17:31 834048 ----a-w- c:\windows\system32\wininet.dll
2011-02-18 15:45 . 2011-04-14 17:31 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-02-18 14:49 . 2011-04-14 17:31 389632 ----a-w- c:\windows\system32\html.iec
2011-02-18 14:03 . 2011-04-14 17:32 305152 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-18 14:03 . 2011-04-14 17:32 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-02-18 14:03 . 2011-04-14 17:32 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-02-16 16:21 . 2011-04-14 17:27 430080 ----a-w- c:\windows\system32\vbscript.dll
2011-02-16 16:16 . 2011-04-14 17:32 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-02-16 14:02 . 2011-04-14 17:32 292864 ----a-w- c:\windows\system32\atmfd.dll
2011-04-14 16:47 . 2011-05-15 23:05 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-05-16_01.46.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-08-07 04:05 . 2011-05-16 02:12 49152 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-08-07 04:05 . 2011-05-15 23:09 49152 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-08-07 04:05 . 2011-05-16 02:12 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-08-07 04:05 . 2011-05-15 23:09 81920 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-07-23 10:16 . 2011-05-16 02:12 131072 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2010-07-23 10:16 . 2011-05-15 23:09 131072 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{437c4386-9237-441f-a940-009430030ee0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{437c4386-9237-441f-a940-009430030ee0}]
2010-11-14 05:58 3913000 ----a-w- c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9b339f6e-ddcd-401b-8764-230adbd01761}]
2009-12-31 19:53 2349080 ----a-w- c:\program files\Messenger_Plus_Live\tbMess.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 20:51 3911776 ----a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{437c4386-9237-441f-a940-009430030ee0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{9B339F6E-DDCD-401B-8764-230ADBD01761}"= "c:\program files\Messenger_Plus_Live\tbMess.dll" [2009-12-31 2349080]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{437C4386-9237-441F-A940-009430030EE0}"= "c:\program files\Messenger_Plus_Live_CA-EN\tbMess.dll" [2010-11-14 3913000]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{437c4386-9237-441f-a940-009430030ee0}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2006-09-11 439992]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-03-13 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-03-26 142120]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-09-19 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-19 8497696]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-09-19 81920]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-21 963976]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-21 963976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2006-09-11 439992]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-17 06:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
2007-08-17 06:13 218408 ------w- c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R2 aswFsBlk;aswFsBlk;aswFsBlk.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca2d0924894d30;Google Update Service (gupdate1ca2d0924894d30);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 133104]
R3 GamesAppService;GamesAppService;c:\program files\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 133104]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 RegKernelHelp;RegKernelHelp;c:\program files\Safe Returner\RegKernelHelp.sys [x]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2010-03-11 366840]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-05-28 721904]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2011-03-14 218592]
S1 aswSP;aswSP; [x]
S2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};{22D78859-9CE9-4B77-BF18-AC83E81A9263};c:\program files\HP\QuickPlay\000.fcl [2007-12-20 41456]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\Spyware Doctor\BDT\BDTUpdateService.exe [2010-01-22 112592]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - ASWMBR
*Deregistered* - aswMBR
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 02:40]
.
2011-05-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-04 02:40]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
mStart Page = [You must be registered and logged in to see this link.]
uInternet Settings,ProxyServer = http=127.0.0.1:51253
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
DPF: CabBuilder - [You must be registered and logged in to see this link.]
FF - ProfilePath - c:\users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\ehhq9320.default\
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 51253
FF - prefs.js: network.proxy.type - 1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2011-05-15 20:50
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{22D78859-9CE9-4B77-BF18-AC83E81A9263}]
"ImagePath"="\??\c:\program files\HP\QuickPlay\000.fcl"
.
Completion time: 2011-05-15 20:52:26
ComboFix-quarantined-files.txt 2011-05-16 03:52
ComboFix2.txt 2011-05-16 01:49
ComboFix3.txt 2010-12-17 07:19
ComboFix4.txt 2010-12-17 06:11
ComboFix5.txt 2011-05-16 03:41
.
Pre-Run: 64,365,436,928 bytes free
Post-Run: 64,358,068,224 bytes free
.
Current=1 Default=1 Failed=0 LastKnownGood=9 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
- - End Of File - - 2EA1CDE8C4C8CA0394AAFA22C0609034

nathaliedaigle

Newbie Surfer
Newbie Surfer

Posts : 35
Joined : 2010-07-22
Operating System : windows vista

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by Belahzur on Mon 16 May 2011, 10:07 pm

Hello.
The script didn't work as the file was saved as a shortcut (.ink file), when it needs to be a text file (.txt), so try again please, make sure to save the file as a text file.


@RealBelahzur - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur

Manager | Tech Officer
Manager | Tech Officer

Posts : 34917
Joined : 2008-08-04
Operating System : XP SP3 Media Centre

View user profile

Back to top Go down

Re: vista antispyware 2011 fake

Post by Sponsored content Today at 6:23 am


Sponsored content


Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum