TechSpot

Browsers cannot display certain pages

By PConnolly346
Apr 19, 2011
  1. Hello,
    First off thank you for whoever is going to help me, this problem is getting rediculous. My computer, a Toshiba Satellite A505-S980 Laptop is working fine except for the fact that some websites just won't load. I use firefox, but I checked on IE and they didn't work either. I have run MalwareBytes and Super Anti-Spyware to no avail. They say my computer is clean. I have run combofix, though I understand it's not a toy and it still hasn't fixed the problem. I have checked my Internet connectivity and its not a problem with a proxy or the website (They work fine on other computers) and I don't think it's a DNS issue. I hope I posted this in the right spot because I think it's gotta be something closer to spyware.
    Thank You So much to anyone willing to help.
    -Pat
     
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Welcome to TechSpot, Pat! I'll help resolve the problem for you.

    Please tell me what happens when you try to access one of these sites:
    1.Do you get any message such as "connection to server was broken"?
    2. Do the particular sites that won't load have anything in common? For instance, are they secure sites?

    We have scans to run checking for malware if needed, but I think your problem might be a setting rather than malware. I'll know more after you describe what is happening when sites don't load.

    And no, Combofix isn't a toy. But it also isn't the type of program that should be run randomly, hoping it will 'fix' a problem when you don't know what the problem is. I suspect it's a setting but your description will help with that.
     
  3. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    Hey Bobeye,


    Thank you for the help,

    1.For example when I try to go to these sites: cnet.com, theworldofjoe.com, funnyjunk.com and some others firefox gives me the "Unable to connect - Firefox can't establish a connection to the server at www...." The same sites won't load on IE either and there are more than those three.
    2.Nope, the sites are completely random it seems, none are secure that I've noticed yet.
    3.The only reason I used combofix is because I had the google redirect issue in the past, and someone recommended it to me and it worked. I've total used in twice in my life,haha.

    Thanks again,
    Patrick
     
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Patrick, "unable to connect" is a server problem, not malware. I can review your scan logs, but you say need to contact the ISP. You should note the following:
    1. Does this happen at a particular time of day?
    2. Are certain sites coming up with this message frequently.
     
  5. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    This problem does not occur on the home PC, just the laptop. And no, this problem is consistent. Any time I try to access any of these sites it happens.
     
  6. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    The sites are all functional. It still points to some setting problem in the laptop.

    Please check and make sure these sites aren't blocked on the laptop. Look in Internet Connections in IE and Tools> Options> Security in Firefox and make sure the domains haven't been blocked.

    I can check the logs for malware, but what you are describing isn't a malware problem> it's sever related. Even if there is some malware on the system, the problem you describe is not caused by malware.

    If you would like us to check the system for malware, please follow the steps in the Preliminary Virus and Malware Removal thread HERE.

    When you have finished, leave the logs for review in your next reply .
    NOTE: Logs must be pasted in the replies. Attached logs will not be reviewed.

    Please do not use any other cleaning programs or scans while I'm helping you, unless I direct you to. Do not use a Registry cleaner or make any changes in the Registry.
     
  7. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    Malware Bytes Log:

    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org

    Database version: 4399

    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    4/20/2011 3:27:45 PM
    mbam-log-2011-04-20 (15-27-45).txt

    Scan type: Quick scan
    Objects scanned: 134686
    Time elapsed: 6 minute(s), 39 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)


    GMER logfile:

    GMER 1.0.15.15570 - http://www.gmer.net
    Rootkit scan 2011-04-20 15:55:38
    Windows 6.1.7600
    Running: fil27r71.exe


    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\002258e33c73
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\002258e33c73 (not active ControlSet)

    ---- EOF - GMER 1.0.15 ----
     
  8. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    DDS Log:
    .
    DDS (Ver_11-03-05.01) - NTFS_AMD64
    Run by Pat at 15:58:49.53 on Wed 04/20/2011
    Internet Explorer: 8.0.7600.16385
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3964.2669 [GMT -7:00]
    .
    AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
    .
    ============== Running Processes ===============
    .
    C:\windows\system32\wininit.exe
    C:\windows\system32\lsm.exe
    C:\windows\system32\svchost.exe -k DcomLaunch
    C:\windows\system32\svchost.exe -k RPCSS
    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\windows\system32\svchost.exe -k netsvcs
    C:\windows\system32\svchost.exe -k LocalService
    C:\windows\system32\svchost.exe -k NetworkService
    C:\windows\System32\spoolsv.exe
    C:\windows\system32\taskhost.exe
    C:\windows\system32\Dwm.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
    C:\windows\Explorer.EXE
    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\System32\igfxtray.exe
    C:\Windows\System32\igfxpers.exe
    C:\windows\system32\igfxsrvc.exe
    C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\windows\system32\svchost.exe -k imgsvc
    C:\windows\system32\ThpSrv.exe
    C:\Windows\system32\TODDSrv.exe
    C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
    C:\Program Files\TOSHIBA\TECO\TecoService.exe
    C:\windows\system32\SearchIndexer.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
    C:\windows\system32\conhost.exe
    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Windows\System32\ThpSrv.exe
    C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
    C:\windows\system32\taskeng.exe
    C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
    C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
    C:\Program Files\TOSHIBA\TECO\Teco.exe
    C:\Program Files (x86)\AIM\aim.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\windows\system32\igfxext.exe
    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
    C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
    C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe
    C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
    C:\windows\System32\svchost.exe -k secsvcs
    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\windows\system32\NOTEPAD.EXE
    C:\windows\system32\SearchProtocolHost.exe
    C:\windows\system32\SearchFilterHost.exe
    C:\windows\system32\DllHost.exe
    C:\windows\system32\DllHost.exe
    C:\Users\Pat\Downloads\dds.scr
    C:\windows\system32\conhost.exe
    C:\windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://www.ask.com?o=14196&l=dis
    mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
    uInternet Settings,ProxyServer = http=127.0.0.1:8992
    uInternet Settings,ProxyOverride = <local>
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
    BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    uRun: [MyTOSHIBA] "C:\Program Files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe" /AUTO
    uRun: [Desktop Software] "C:\Program Files (x86)\Common Files\SupportSoft\bin\bcont.exe" /ini "C:\Program Files (x86)\ComcastUI\Desktop Software\uinstaller.ini" /fromrun /starthidden
    uRun: [Aim] "C:\Program Files (x86)\AIM\aim.exe" /d locale=en-US
    uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" UNATTENDED
    mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
    mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
    mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    mASetup: {01250B8F-D947-4F8A-9408-FE8E3EE2EC92} - C:\Program Files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe /SETUP
    BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    BHO-X64: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll
    TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
    mRun-x64: [IgfxTray] C:\windows\system32\igfxtray.exe
    mRun-x64: [HotKeysCmds] C:\windows\system32\hkcmd.exe
    mRun-x64: [Persistence] C:\windows\system32\igfxpers.exe
    mRun-x64: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
    mRun-x64: [ThpSrv] C:\windows\system32\thpsrv /logon
    mRun-x64: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
    mRun-x64: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
    mRun-x64: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
    mRun-x64: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
    mRun-x64: [Teco] "%ProgramFiles%\TOSHIBA\TECO\Teco.exe" /r
    mRun-x64: [TosWaitSrv] %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
    mRun-x64: [SmartFaceVWatcher] %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
    mRun-x64: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\3rthz914.default\
    FF - prefs.js: network.proxy.type - 0
    FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
    FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: yahoo.homepage.dontask - true
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 Thpdrv;TOSHIBA HDD Protection Driver;C:\Windows\System32\drivers\thpdrv.sys [2009-6-29 34880]
    R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;C:\Windows\System32\drivers\Thpevm.sys [2009-6-29 14784]
    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\Windows\System32\drivers\tos_sps64.sys [2010-7-20 482384]
    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]
    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
    R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-29 128752]
    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-4-20 135336]
    R2 AntiVirService;Avira AntiVir Guard;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-4-20 269480]
    R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2011-4-20 83120]
    R2 cfWiMAXService;ConfigFree WiMAX Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2009-8-10 248688]
    R2 ConfigFree Gadget Service;ConfigFree Gadget Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [2009-7-14 42368]
    R2 ConfigFree Service;ConfigFree Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-3-10 46448]
    R2 rimspci;rimspci;C:\Windows\System32\drivers\rimspe64.sys [2010-7-20 60416]
    R2 risdpcie;risdpcie;C:\Windows\System32\drivers\risdpe64.sys [2010-7-20 81408]
    R2 rixdpcie;rixdpcie;C:\Windows\System32\drivers\rixdpe64.sys [2010-7-20 55808]
    R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\TOSHIBA\TECO\TecoService.exe [2009-8-11 252272]
    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\Windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]
    R3 FwLnk;FwLnk Driver;C:\Windows\System32\drivers\FwLnk.sys [2010-7-20 9216]
    R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;C:\Windows\System32\drivers\IntcHdmi.sys [2009-7-10 139264]
    R3 PGEffect;Pangu effect driver;C:\Windows\System32\drivers\PGEffect.sys [2010-7-20 35008]
    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-7-20 236544]
    R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;C:\Windows\System32\drivers\rtl8192se.sys [2010-7-20 942080]
    R3 TMachInfo;TMachInfo;C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-7-20 51512]
    R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-8-3 137560]
    R3 TPCHSrv;TPCH Service;C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2009-8-4 826224]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-15 136176]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2010-9-28 51712]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-7-23 1255736]
    .
    =============== Created Last 30 ================
    .
    2011-04-20 21:13:40 -------- d-----w- C:\Users\Pat\AppData\Roaming\Avira
    2011-04-20 21:11:05 83120 ----a-w- C:\windows\System32\drivers\avgntflt.sys
    2011-04-20 21:11:04 -------- d-----w- C:\Program Files (x86)\Avira
    2011-04-20 21:11:04 -------- d-----w- C:\PROGRA~3\Avira
    2011-04-20 01:45:46 -------- d-----w- C:\Users\Pat\AppData\Roaming\Big Fish Games
    2011-04-20 01:37:57 -------- d-----w- C:\Program Files (x86)\LeeGT-Games
    2011-04-19 16:41:22 8802128 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{DA56A2B2-5DA0-4737-8275-248C85D73F48}\mpengine.dll
    2011-04-15 00:24:34 -------- d-sh--w- C:\$RECYCLE.BIN
    2011-04-14 19:47:58 46080 ----a-w- C:\windows\System32\atmlib.dll
    2011-04-07 21:46:26 -------- d-----w- C:\Users\Pat\AppData\Roaming\DVDVideoSoft
    2011-04-07 21:46:25 -------- d-----w- C:\Program Files (x86)\DVDVideoSoft
    2011-04-07 21:46:25 -------- d-----w- C:\Program Files (x86)\Common Files\DVDVideoSoft
    2011-04-07 21:16:53 -------- d-----w- C:\Users\Pat\AppData\Roaming\AVS4YOU
    2011-04-07 21:15:54 10915840 ----a-w- C:\windows\SysWow64\libmfxhw32.dll
    2011-04-07 21:15:54 10833920 ----a-w- C:\windows\SysWow64\libmfxsw32.dll
    2011-04-07 21:15:46 -------- d-----w- C:\Program Files (x86)\Common Files\AVSMedia
    2011-04-07 21:15:15 24576 ----a-w- C:\windows\SysWow64\msxml3a.dll
    2011-04-07 21:15:15 1700352 ----a-w- C:\windows\SysWow64\GdiPlus.dll
    2011-04-07 21:15:15 -------- d-----w- C:\Program Files (x86)\AVS4YOU
    2011-04-07 21:15:15 -------- d-----w- C:\PROGRA~3\AVS4YOU
    2011-03-23 06:03:38 902656 ----a-w- C:\windows\System32\d2d1.dll
    2011-03-23 06:03:38 739840 ----a-w- C:\windows\SysWow64\d2d1.dll
    2011-03-23 06:03:38 1540608 ----a-w- C:\windows\System32\DWrite.dll
    2011-03-23 06:03:38 1135104 ----a-w- C:\windows\System32\FntCache.dll
    2011-03-23 06:03:38 1074176 ----a-w- C:\windows\SysWow64\DWrite.dll
    .
    ==================== Find3M ====================
    .
    2011-03-11 06:19:26 1395712 ----a-w- C:\windows\System32\mfc42.dll
    2011-03-11 06:19:26 1359872 ----a-w- C:\windows\System32\mfc42u.dll
    2011-03-11 05:40:24 1164288 ----a-w- C:\windows\SysWow64\mfc42u.dll
    2011-03-11 05:40:24 1137664 ----a-w- C:\windows\SysWow64\mfc42.dll
    2011-03-08 06:14:30 976896 ----a-w- C:\windows\System32\inetcomm.dll
    2011-03-08 05:38:13 740864 ----a-w- C:\windows\SysWow64\inetcomm.dll
    2011-03-03 06:17:10 182272 ----a-w- C:\windows\System32\dnsrslvr.dll
    2011-03-03 06:14:38 30208 ----a-w- C:\windows\System32\dnscacheugc.exe
    2011-03-03 05:27:30 28672 ----a-w- C:\windows\SysWow64\dnscacheugc.exe
    2011-03-03 03:58:32 3133440 ----a-w- C:\windows\System32\win32k.sys
    2011-02-24 06:30:00 476160 ----a-w- C:\windows\System32\XpsGdiConverter.dll
    2011-02-24 06:29:15 1197056 ----a-w- C:\windows\System32\wininet.dll
    2011-02-24 06:24:57 57856 ----a-w- C:\windows\System32\licmgr10.dll
    2011-02-24 05:32:52 288256 ----a-w- C:\windows\SysWow64\XpsGdiConverter.dll
    2011-02-24 05:32:44 981504 ----a-w- C:\windows\SysWow64\wininet.dll
    2011-02-24 05:30:16 44544 ----a-w- C:\windows\SysWow64\licmgr10.dll
    2011-02-24 05:05:13 482816 ----a-w- C:\windows\System32\html.iec
    2011-02-24 04:24:04 1638912 ----a-w- C:\windows\System32\mshtml.tlb
    2011-02-24 04:23:48 386048 ----a-w- C:\windows\SysWow64\html.iec
    2011-02-24 03:50:26 1638912 ----a-w- C:\windows\SysWow64\mshtml.tlb
    2011-02-23 05:16:28 461312 ----a-w- C:\windows\System32\drivers\srv.sys
    2011-02-23 05:16:01 401920 ----a-w- C:\windows\System32\drivers\srv2.sys
    2011-02-23 05:15:50 161792 ----a-w- C:\windows\System32\drivers\srvnet.sys
    2011-02-23 05:15:27 157696 ----a-w- C:\windows\System32\drivers\mrxsmb.sys
    2011-02-23 05:15:14 286720 ----a-w- C:\windows\System32\drivers\mrxsmb10.sys
    2011-02-23 05:15:13 126464 ----a-w- C:\windows\System32\drivers\mrxsmb20.sys
    2011-02-23 05:15:06 90624 ----a-w- C:\windows\System32\drivers\bowser.sys
    2011-02-19 05:32:08 34304 ----a-w- C:\windows\SysWow64\atmlib.dll
    2011-02-19 04:13:39 367104 ----a-w- C:\windows\System32\atmfd.dll
    2011-02-19 03:37:02 294912 ----a-w- C:\windows\SysWow64\atmfd.dll
    2011-02-18 06:37:05 612352 ----a-w- C:\windows\System32\vbscript.dll
    2011-02-18 05:36:26 428032 ----a-w- C:\windows\SysWow64\vbscript.dll
    2011-02-12 06:14:41 267776 ----a-w- C:\windows\System32\FXSCOVER.exe
    2011-02-05 12:41:43 556928 ----a-w- C:\windows\System32\winresume.efi
    2011-02-05 12:41:35 640896 ----a-w- C:\windows\System32\winload.efi
    2011-02-05 12:41:24 20352 ----a-w- C:\windows\System32\kdusb.dll
    2011-02-05 12:41:24 19328 ----a-w- C:\windows\System32\kd1394.dll
    2011-02-05 12:41:23 17792 ----a-w- C:\windows\System32\kdcom.dll
    2011-02-05 12:39:21 603976 ----a-w- C:\windows\System32\winload.exe
    2011-02-05 12:39:21 518160 ----a-w- C:\windows\System32\winresume.exe
    2011-02-03 01:11:20 270720 ------w- C:\windows\System32\MpSigStub.exe
    2011-01-26 06:53:10 982912 ----a-w- C:\windows\System32\drivers\dxgkrnl.sys
    2011-01-26 06:53:10 265088 ----a-w- C:\windows\System32\drivers\dxgmms1.sys
    2011-01-26 06:31:20 144384 ----a-w- C:\windows\System32\cdd.dll
    .
    ============= FINISH: 15:59:24.13 ===============

    Attach Log:

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_11-03-05.01)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 7/22/2010 7:26:17 PM
    System Uptime: 4/20/2011 3:17:23 PM (0 hours ago)
    .
    Motherboard: TOSHIBA | | Portable PC
    Processor: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz | CPU | 1188/800mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 443 GiB total, 143.041 GiB free.
    D: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP86: 4/19/2011 9:40:40 AM - Windows Update
    RP87: 4/19/2011 6:37:08 PM - Installed Mystery Case Files - 13th Skull Collectors Edition
    .
    ==== Installed Programs ======================
    .
    µTorrent
    7-Zip 4.65
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Reader 9.1
    AIM 7
    Apple Application Support
    Apple Software Update
    Audacity 1.2.6
    Avira AntiVir Personal - Free Antivirus
    AVS Update Manager 1.0
    AVS Video Converter 7
    AVS4YOU Software Navigator 1.4
    CCleaner
    Comcast Desktop Software (v1.2.0.9)
    Compatibility Pack for the 2007 Office system
    ConvertXtoDVD 4.0.10.324
    Direct DiscRecorder
    DivX Setup
    Download Updater (AOL LLC)
    DVD MovieFactory for TOSHIBA
    Free 3GP Video Converter version 3.7.23.324
    Free Convert to DIVX AVI WMV MP4 MPEG Converter 5.8
    Free WAV To MP3 Converter 2.1
    Google Earth
    Google Toolbar for Internet Explorer
    Google Update Helper
    HijackThis 2.0.2
    Java(TM) 6 Update 14
    Junk Mail filter update
    K-Lite Codec Pack 4.0.0 (Full)
    Last.fm 1.5.4.27091
    Malwarebytes' Anti-Malware
    Microsoft Choice Guard
    Microsoft Office 2007 Service Pack 2 (SP2)
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Home and Student 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Suite Activation Assistant
    Microsoft Office Word MUI (English) 2007
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Works
    Mozilla Firefox (3.6.16)
    MSVCRT
    Mystery Case Files - 13th Skull Collectors Edition
    Mystery Case Files - Ravenhearst (remove only)
    MyToshiba
    NetZero Launcher
    Quickbooks Financial Center
    QuickTime
    Realtek Ethernet Controller Driver
    Realtek High Definition Audio Driver
    Realtek WLAN Driver
    RICOH R5U230 Media Driver ver.2.06.03.02
    Safari
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Skype Launcher
    Skype Toolbars
    Skype™ 4.2
    Spybot - Search & Destroy
    Toshiba Application Installer
    TOSHIBA Assist
    TOSHIBA ConfigFree
    TOSHIBA DVD PLAYER
    TOSHIBA eco Utility
    TOSHIBA Extended Tiles for Windows Mobility Center
    TOSHIBA Face Recognition
    TOSHIBA Hardware Setup
    TOSHIBA HDD/SSD Alert
    Toshiba Online Backup
    TOSHIBA Service Station
    TOSHIBA Speech System Applications
    TOSHIBA Speech System SR Engine(U.S.) Version1.0
    TOSHIBA Speech System TTS Engine(U.S.) Version1.0
    TOSHIBA Supervisor Password
    TOSHIBA USB Sleep and Charge Utility
    TOSHIBA Value Added Package
    TOSHIBA Web Camera Application
    ToshibaRegistration
    Uninstall 1.0.0.1
    VC80CRTRedist - 8.0.50727.4053
    Visual Studio 2008 x64 Redistributables
    VLC media player 1.1.2
    VoiceOver Kit
    WildTangent Games
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Upload Tool
    Windows Live Writer
    WinRAR archiver
    .
    ==== Event Viewer Messages From Past Week ========
    .
    4/20/2011 3:15:10 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
    4/20/2011 2:11:23 PM, Error: Service Control Manager [7006] - The ScRegSetValueExW call failed for Start with the following error: Access is denied.
    4/18/2011 9:36:04 AM, Error: volsnap [36] - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
    4/14/2011 12:42:27 PM, Error: Service Control Manager [7030] - The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    4/14/2011 12:32:21 PM, Error: Application Popup [1060] - \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
    .
    ==== End Of File ===========================
     
  9. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    I knew I forgot something I wanted to add to my reply- but it escaped me at the time. But here it is:

    Are you trying to access any of these sites from a shortcut, maybe on the desktop, or in the Favorites or Bookmarks? If 'yes', try putting the domain-such as cnet.com-in a search, then choosing the site. If you can access it this way, it means that the shortcut had become corrupt- it happens. So you would do a right click> Delete on that shortcut and create a new one. After accessing the site, you can add it again to the Favorites or Bookmarks.
     
  10. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    Nope, that's not the problem. I'm manually typing the URL in when I try to go to the sites.
     
  11. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Did you look in both IE and Firefox to make sure the sites-or Cookies from the site itself aren't blocked? Since this happens on the same sites, on both browsers, on just the laptop, a good bet is because of a setting. Let' s check that out:

    Internet Explorer: Tools> Internet Options> Restricted Sites> Sites> Scroll through the Web Sites in the box> If you see any of these domains (cnet.com, theworldofjoe.com, funnyjunk.com) or any others that are consistently blocked> highlight the domain> Remove.

    Then, in Internet Options, go to Privacy tab> Setting should be Custom> Click on Sites> This is the 'Per Site Management'> Again scroll through the domains in the Managed sites box> If any of these are found Highlight> either click on Allow or Remove.

    Still in Privacy section> Click on Advanced> Check ';override automatic Cookies settings'> Check 'Allow First Party Cookies> Check Block on Third Party Cookies> Check 'Allow per session Cookies'>

    When finished with all> Click on OK> Apply> OK
    ========================================
    For Firefox: Tools> Options> Privacy> Check 'Accept Cookies from Sites'> Click on Exceptions> Look for these domains> If any are here and Blocked> Click to Highlight> Then click on Allow> Do not check to allow 3rd party Cookies.
    ==========================================
    Both Domains and Cookies can be blocked by the gremlin that resides in every system. And in order to load a site, both the Domain and the First Party Cookie must be allowed. Please check the above and let me know what you fine. As I mentioned before, 'unable to find server' can mean one of 2 things: the internet connection has been broken or a server for a specific site is either down or too busy to handle the traffic. And most to all sites won't load if the First Party Cookies isn't allowed- that's the one for the site itself.
    ==========================================
    I do note some entries that need to be removed though, so I'd like you to run the following:

    Run Eset NOD32 Online AntiVirus scan HERE
    1. Tick the box next to YES, I accept the Terms of Use.
    2. Click Start
    3. When asked, allow the Active X control to install
    4. Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
    5. Click Start
    6. Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
    7. Click Scan
    8. Wait for the scan to finish
    9. Click on "Copy to Clipboard"> (you won't see the 'clipboard')
    10. Click anywhere in the post where you want the logs to go, the do Ctrl V. The log will be sent from the clipboard and pasted in the post.
    11. Re-enable your Antivirus software.
      NOTE: If you forget to copy to the clipboard you can find the log here:
      C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.
    =================================
    Download Combofix from HERE or HERE and save to the desktop
    • Double click combofix.exe & follow the prompts.
    • ComboFix will check to see if the Microsoft Windows Recovery Console is installed. It is recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode if needed.
      **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
    • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
    • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
      [​IMG]
    • .Click on Yes, to continue scanning for malware
    • .If Combofix asks you to update the program, allow
    • .Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    • .Close any open browsers.
    • .Double click combofix.exe[​IMG] & follow the prompts to run.
    • When the scan completes , a report will be generated-it will open a text window. Please paste the C:\ComboFix.txt in next reply..
    Re-enable your Antivirus software.
    Notes:
    1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
    2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
    3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
    4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

    As I mentioned, you could have malware, but it would most likely not be the cause of the failure of those sites to load.
     
  12. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    I was reviewing the logs and noticed you ran an outdated version of Malwarebytes: Old Mbamb> Malwarebytes' Anti-Malware 1.46/Database version: 4399.

    Please remove the version you have, then download and update this version:
    • Please download Malwarebytes' Anti-Malware from from HERE
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to
      [o] Update Malwarebytes' Anti-Malware
      [o] and Launch Malwarebytes' Anti-Malware
    • then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform Quick scan, then click Scan.
      * When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. please attach this log with your reply
      [o] If you accidentally close it, the log file is saved here and will be named like this:
      [o] C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
    =========================================
    Please leave this new log in addition to the other logs.
     
  13. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    ESET:

    ESETSmartInstaller@High as downloader log:
    all ok
    # version=7
    # OnlineScannerApp.exe=1.0.0.1
    # OnlineScanner.ocx=1.0.0.6427
    # api_version=3.0.2
    # EOSSerial=8af340bf860b8449b0797cfb0192646e
    # end=finished
    # remove_checked=false
    # archives_checked=true
    # unwanted_checked=true
    # unsafe_checked=false
    # antistealth_checked=true
    # utc_time=2011-04-23 08:07:59
    # local_time=2011-04-23 01:07:59 (-0800, Pacific Daylight Time)
    # country="United States"
    # lang=1033
    # osver=6.1.7600 NT
    # compatibility_mode=512 16777215 100 0 17356871 17356871 0 0
    # compatibility_mode=1024 16777215 100 0 16844597 16844597 0 0
    # compatibility_mode=1797 16775165 100 94 73388 40005476 0 0
    # compatibility_mode=5893 16776573 100 94 0 55127577 0 0
    # compatibility_mode=8192 67108863 100 0 0 0 0 0
    # scanned=151919
    # found=4
    # cleaned=0
    # scan_time=5152
    C:\Qoobox\Quarantine\C\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\3rthz914.default\extensions\{d848ed34-0405-4006-8642-42c4af85661b}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan (unable to clean) 00000000000000000000000000000000 I
    C:\Qoobox\Quarantine\C\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\3rthz914.default\extensions\{d848ed34-0405-4006-8642-42c4af85661b}\chrome\xulcache.jar.vir JS/Agent.NCP trojan (unable to clean) 00000000000000000000000000000000 I
    C:\Qoobox\Quarantine\C\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\p40izzk4.default\extensions\{d848ed34-0405-4006-8642-42c4af85661b}\chrome.manifest.vir Win32/TrojanDownloader.Tracur.F trojan (unable to clean) 00000000000000000000000000000000 I
    C:\Qoobox\Quarantine\C\Users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\p40izzk4.default\extensions\{d848ed34-0405-4006-8642-42c4af85661b}\chrome\xulcache.jar.vir JS/Agent.NCP trojan (unable to clean) 00000000000000000000000000000000 I
     
  14. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    ComboFix 11-04-24.02 - Pat 04/24/2011 17:22:34.3.2 - x64
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3964.2567 [GMT -7:00]
    Running from: c:\users\Pat\Downloads\ComboFix.exe
    AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
    SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Created a new restore point
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-03-25 to 2011-04-25 )))))))))))))))))))))))))))))))
    .
    .
    2011-04-25 00:37 . 2011-04-25 00:37 -------- d-----w- c:\users\Public\AppData\Local\temp
    2011-04-25 00:37 . 2011-04-25 00:37 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-04-25 00:14 . 2011-04-25 00:20 -------- d-----w- C:\32788R22FWJFW
    2011-04-23 18:39 . 2011-04-23 18:39 -------- d-----w- c:\program files (x86)\ESET
    2011-04-22 20:40 . 2011-04-22 20:40 -------- d-----w- c:\program files (x86)\Mystery Case Files - Dire Grove Collector's Edition
    2011-04-22 20:07 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77087E8C-30F2-42D9-8591-EEF3708711F5}\mpengine.dll
    2011-04-20 21:13 . 2011-04-20 21:13 -------- d-----w- c:\users\Pat\AppData\Roaming\Avira
    2011-04-20 21:11 . 2011-03-04 21:37 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
    2011-04-20 21:11 . 2011-03-04 21:37 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
    2011-04-20 21:11 . 2011-04-20 21:11 -------- d-----w- c:\programdata\Avira
    2011-04-20 21:11 . 2011-04-20 21:11 -------- d-----w- c:\program files (x86)\Avira
    2011-04-20 01:45 . 2011-04-22 20:44 -------- d-----w- c:\users\Pat\AppData\Roaming\Big Fish Games
    2011-04-20 01:37 . 2011-04-20 01:37 -------- d-----w- c:\program files (x86)\LeeGT-Games
    2011-04-14 19:47 . 2011-02-19 06:36 46080 ----a-w- c:\windows\system32\atmlib.dll
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\users\Pat\AppData\Roaming\DVDVideoSoft
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\program files (x86)\DVDVideoSoft
    2011-04-07 21:16 . 2011-04-07 21:16 -------- d-----w- c:\users\Pat\AppData\Roaming\AVS4YOU
    2011-04-07 21:15 . 2010-12-02 17:11 10915840 ----a-w- c:\windows\SysWow64\libmfxhw32.dll
    2011-04-07 21:15 . 2010-12-02 17:11 10833920 ----a-w- c:\windows\SysWow64\libmfxsw32.dll
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\program files (x86)\Common Files\AVSMedia
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\programdata\AVS4YOU
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\program files (x86)\AVS4YOU
    2011-04-07 21:15 . 2010-12-02 17:12 24576 ----a-w- c:\windows\SysWow64\msxml3a.dll
    2011-04-07 21:15 . 2010-12-02 17:12 1700352 ----a-w- c:\windows\SysWow64\GdiPlus.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-02-19 06:37 . 2011-03-23 06:03 1135104 ----a-w- c:\windows\system32\FntCache.dll
    2011-02-19 06:37 . 2011-03-23 06:03 1540608 ----a-w- c:\windows\system32\DWrite.dll
    2011-02-19 06:36 . 2011-03-23 06:03 902656 ----a-w- c:\windows\system32\d2d1.dll
    2011-02-19 05:32 . 2011-03-23 06:03 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
    2011-02-19 05:32 . 2011-03-23 06:03 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
    2011-02-03 01:11 . 2010-08-22 22:23 270720 ------w- c:\windows\system32\MpSigStub.exe
    2011-01-26 06:53 . 2011-02-13 04:41 982912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
    2011-01-26 06:53 . 2011-02-13 04:41 265088 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
    2011-01-26 06:31 . 2011-02-13 04:41 144384 ----a-w- c:\windows\system32\cdd.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot_2011-04-14_19.43.10 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2011-02-13 04:41 . 2010-12-18 05:30 67072 c:\windows\SysWOW64\mshtmled.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 67072 c:\windows\SysWOW64\mshtmled.dll
    - 2011-02-13 04:41 . 2010-12-18 05:26 12800 c:\windows\SysWOW64\msfeedssync.exe
    + 2011-04-14 19:47 . 2011-02-24 05:27 12800 c:\windows\SysWOW64\msfeedssync.exe
    - 2011-02-13 04:41 . 2010-12-18 05:30 64512 c:\windows\SysWOW64\msfeedsbs.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 64512 c:\windows\SysWOW64\msfeedsbs.dll
    + 2011-04-14 19:47 . 2011-02-24 05:32 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
    - 2010-12-24 09:27 . 2010-11-04 05:52 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 44544 c:\windows\SysWOW64\licmgr10.dll
    - 2011-02-13 04:41 . 2010-12-18 05:29 44544 c:\windows\SysWOW64\licmgr10.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 48128 c:\windows\SysWOW64\jsproxy.dll
    - 2010-12-24 09:27 . 2010-11-04 05:48 48128 c:\windows\SysWOW64\jsproxy.dll
    + 2011-04-14 19:47 . 2011-03-03 05:27 28672 c:\windows\SysWOW64\dnscacheugc.exe
    - 2009-07-13 23:38 . 2009-07-14 01:14 28672 c:\windows\SysWOW64\dnscacheugc.exe
    - 2009-07-14 04:54 . 2010-12-16 01:28 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-07-14 04:54 . 2011-04-24 22:17 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-07-14 04:54 . 2010-12-16 01:28 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-07-14 04:54 . 2011-04-24 22:17 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-07-14 04:54 . 2011-04-24 22:17 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-14 04:54 . 2010-12-16 01:28 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2011-04-14 19:47 . 2011-02-19 05:32 34304 c:\windows\SysWOW64\atmlib.dll
    - 2011-02-13 04:41 . 2011-01-07 07:27 34304 c:\windows\SysWOW64\atmlib.dll
    + 2009-07-14 05:10 . 2011-04-20 22:20 45580 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2010-07-22 23:28 . 2011-04-20 22:20 11844 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-515583346-2551849537-2618369934-1000_UserData.bin
    + 2011-04-14 19:47 . 2011-02-24 06:25 97280 c:\windows\system32\mshtmled.dll
    - 2011-02-13 04:41 . 2010-12-18 06:12 97280 c:\windows\system32\mshtmled.dll
    - 2011-02-13 04:41 . 2010-12-18 06:08 12288 c:\windows\system32\msfeedssync.exe
    + 2011-04-14 19:47 . 2011-02-24 06:21 12288 c:\windows\system32\msfeedssync.exe
    - 2011-02-13 04:41 . 2010-12-18 06:12 82944 c:\windows\system32\msfeedsbs.dll
    + 2011-04-14 19:47 . 2011-02-24 06:25 82944 c:\windows\system32\msfeedsbs.dll
    + 2011-04-14 19:47 . 2011-02-24 06:29 95232 c:\windows\system32\migration\WininetPlugin.dll
    - 2010-12-24 09:27 . 2010-11-04 06:35 95232 c:\windows\system32\migration\WininetPlugin.dll
    - 2011-02-13 04:41 . 2010-12-18 06:11 57856 c:\windows\system32\licmgr10.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 57856 c:\windows\system32\licmgr10.dll
    + 2011-04-14 19:47 . 2011-02-05 12:41 20352 c:\windows\system32\kdusb.dll
    + 2011-04-14 19:47 . 2011-02-05 12:41 17792 c:\windows\system32\kdcom.dll
    + 2011-04-14 19:47 . 2011-02-05 12:41 19328 c:\windows\system32\kd1394.dll
    - 2010-12-24 09:27 . 2010-11-04 06:31 64512 c:\windows\system32\jsproxy.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 64512 c:\windows\system32\jsproxy.dll
    - 2009-07-13 23:23 . 2009-07-13 23:23 90624 c:\windows\system32\drivers\bowser.sys
    + 2011-04-14 19:47 . 2011-02-23 05:15 90624 c:\windows\system32\drivers\bowser.sys
    + 2011-04-14 19:47 . 2011-03-03 06:14 30208 c:\windows\system32\dnscacheugc.exe
    - 2009-07-13 23:54 . 2009-07-14 01:39 30208 c:\windows\system32\dnscacheugc.exe
    + 2010-07-23 02:23 . 2011-04-22 20:34 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2010-07-23 02:23 . 2011-04-13 21:13 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2010-07-23 02:23 . 2011-04-13 21:13 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2011-04-21 17:26 . 2011-04-22 20:34 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-07-14 04:54 . 2011-04-22 20:34 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-14 04:54 . 2011-04-13 21:13 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2010-07-22 23:31 . 2011-04-20 22:20 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2010-07-22 23:31 . 2011-03-23 10:19 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-07-14 04:46 . 2011-04-19 22:17 80352 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat
    + 2010-07-22 23:31 . 2011-04-20 22:20 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2010-07-22 23:31 . 2011-03-23 10:19 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2010-07-22 23:31 . 2011-03-23 10:19 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2010-07-22 23:31 . 2011-04-20 22:20 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2010-07-23 02:27 . 2011-04-25 00:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2010-07-23 02:27 . 2011-04-14 19:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2010-07-20 09:06 . 2011-04-25 00:07 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2010-07-20 09:06 . 2011-04-14 19:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2010-03-18 22:27 . 2010-03-18 22:27 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    + 2011-02-10 12:15 . 2011-02-10 12:15 67920 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    - 2010-03-18 21:16 . 2010-03-18 21:16 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2011-04-15 10:03 . 2011-04-15 10:03 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2011-04-15 10:03 . 2011-04-15 10:03 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 62880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 94552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 91488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-04-20 01:38 . 2011-04-20 01:38 14534 c:\windows\Installer\{B073B30C-7D4C-401D-ABF6-993F7A0DE762}\SystemFolder_msiexec.exe
    + 2011-04-15 14:08 . 2011-04-15 14:08 42496 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\c06b7da592baed92addf457aea85d406\System.Windows.Presentation.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 86016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\4ff93b18ea038ffbc6ac2be4c45cb71a\System.Web.ApplicationServices.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 97280 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\5fd7b9d59094742b9c38ec0d96000335\System.AddIn.Contract.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 14336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\9a40ba676e4fd8c1dbbf494d349f6d02\Microsoft.VisualC.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 10752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\cf04bd7a08ca94b6f2c7dc56c4c74b6b\dfsvc.ni.exe
    + 2011-04-15 13:17 . 2011-04-15 13:17 57856 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\29865ac81eef734ca768a364b0ddc8c3\Accessibility.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\9824b202ffe88c945577effdc7fc8fc3\UIAutomationProvider.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\6474ae2cebac637025eab3cbcdc9ffe6\System.Windows.Presentation.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\50cbf014f60fa88f67a763dfbead1fee\System.Web.ApplicationServices.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\f472171edc898ea876f14b97b4f332b8\System.ServiceModel.Channels.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\473102f936b4a823e5e2b2e6282c5104\System.AddIn.Contract.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\1a21a54acf18fabfddb0b94d40e509a1\Microsoft.VisualC.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\7600f9d2a3bc01ba15674667283c2e53\Accessibility.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 60416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\25e24b9842af6168a95af6447edd84e7\System.Windows.Presentation.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 54784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\88ae41e083b3ac7a04f1fb2dc60b6b92\System.Web.DynamicData.Design.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 90624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\d4c5904689901ce4bf1f86c5dacfa3c9\stdole.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 72192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\61c4342c01fae3975e5b03d3f68bd8f3\PresentationFontCache.ni.exe
    + 2011-04-15 12:43 . 2011-04-15 12:43 61952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\2165f694f68ea31be5c889744b7f376a\PresentationCFFRasterizer.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 33792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\15fbefcc4df790796823a7e2e4ede4ad\Microsoft.WSMan.Runtime.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 43520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\9a85013711975f888dbdcd9ba29f7cd9\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 45056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\8eaf21ff4ec85e8c20ca71d336b90aa5\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 36864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\72d8c360968f8ae94a59e3e6a6d4f9f4\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 70144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\5495a3448acaa8da2c0d5e4699d04941\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 40448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4d77bcbe01e9270c4fde9bbb3d7038a3\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 59904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\029c17cd07099cb16415232678393a38\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2011-04-15 10:34 . 2011-04-15 10:34 32256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\40cd41798c41838f8b9a5d37321e6cc3\Microsoft.VisualC.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 65536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\df60a61d94b1a28cbe352cec3ca38303\Microsoft.MediaCenter.iTv.Hosting.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 40960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\66ce64f06074b2df421679c1e9d61a12\LoadMxf.ni.exe
    + 2011-04-15 13:13 . 2011-04-15 13:13 49664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\21ac98f7be6a727c836381b75bfc70aa\ehiUPnP.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 93184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\d8496707757be9191cf8ab416cd4cc55\ehiTVMSMusic.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 28672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\3a636596125a4a71c7aebc8040a23b95\dfsvc.ni.exe
    + 2011-04-15 15:41 . 2011-04-15 15:41 78848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\9d237481823f88cbb89c0834d85df526\Accessibility.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\d381c8ba9eba64ee6207aa811315c81c\WindowsLiveWriter.ni.exe
    + 2011-04-15 13:28 . 2011-04-15 13:28 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9e35005939835c94fe31da77813faa24\WindowsLive.Writer.Api.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\6a8a0fb15f936916d6e51ab8538cff35\UIAutomationProvider.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\4bffc57a97a74462320698ec8d35bb50\System.Windows.Presentation.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\488e644a3bb2fae3aa18fc8853f62bad\System.Web.DynamicData.Design.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\648f4f68ecefd8f36e31e47fd56d941c\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\9527a25b7d80904951b6dd248b7ce04e\System.AddIn.Contract.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\e8a0c6235beecde13d8bc572881ac8b1\stdole.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\59cace9a8ff0a24736f137c3e587273d\PresentationFontCache.ni.exe
    + 2011-04-15 10:32 . 2011-04-15 10:32 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\29b15b9eef203908b55751af62b163e2\PresentationCFFRasterizer.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 49152 c:\windows\assembly\NativeImages_v2.0.50727_32\PCDiag\12aad7c348d9bff705474b2872c8c4a4\PCDiag.ni.exe
    + 2011-04-15 13:30 . 2011-04-15 13:30 79872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\f4c3808dd2780198b469629de091dc14\napcrypt.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\c80b25dbf6abbec80fa0797142181f0a\Microsoft.WSMan.Runtime.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 25088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\ca665309b6753bc6126567290689ba4e\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 27136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\bf84cf9013c3d7bee5ad42c3bc04b2fe\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\b8dcbfd51e0d89e7e16048c9efbc6aad\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 19968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\8342c096f1660f99a19b30529fd105d3\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 86016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\6d6df1b863e704b425cb7610b9cf9343\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 32256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\5aa44d13c29d5251935666fbcc4f9d7c\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 23040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\13d89aae42327385e99037b0a1b97181\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\dc288223f0c505d04491a2a67074cb98\Microsoft.Vsa.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\12de3a3ae03044c5c1684ac7181358d2\Microsoft.VisualC.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d07ea523785675cf42d9b9db1f462f53\Microsoft.Build.Framework.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\90df6fcb66dc94accdf887701b730d76\Microsoft.Build.Framework.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.PCDIAGLib\7202bfcfa502455ccb14a0f1e781c1fa\Interop.PCDIAGLib.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 17408 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.BASICINFOLib\391ec4e6b6aa4b2896f616e14039564c\Interop.BASICINFOLib.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 60416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\aac55d605c2ac3537a6ad1e463759480\ehiUserXp.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f6a3bc61f8be1c37cb60328dd7379d90\dfsvc.ni.exe
    + 2011-04-15 13:27 . 2011-04-15 13:27 23552 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.PCDIAGLib\7dc3dc6cef960bbd27a8e99887d1657e\AxInterop.PCDIAGLib.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 22528 c:\windows\assembly\NativeImages_v2.0.50727_32\AxInterop.BASICINFO#\ffd6596c1b72c1e0e014673edcb41be6\AxInterop.BASICINFOLib.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\11ebcba65c931267301739008a883e60\Accessibility.ni.dll
     
  15. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    - 2011-03-23 10:16 . 2011-03-23 10:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2011-04-20 22:17 . 2011-04-20 22:17 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-03-23 10:16 . 2011-03-23 10:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-04-20 22:17 . 2011-04-20 22:17 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2011-04-15 13:31 . 2011-04-15 13:31 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\1a4701c5a061d081b78353bd04349c3e\dfsvc.ni.exe
    + 2011-04-14 19:48 . 2011-02-24 05:32 288256 c:\windows\SysWOW64\XpsGdiConverter.dll
    - 2011-02-27 22:43 . 2011-01-07 07:31 288256 c:\windows\SysWOW64\XpsGdiConverter.dll
    - 2011-02-13 04:41 . 2010-12-21 05:38 981504 c:\windows\SysWOW64\wininet.dll
    + 2011-04-14 19:47 . 2011-02-24 05:32 981504 c:\windows\SysWOW64\wininet.dll
    - 2011-02-13 04:41 . 2011-01-05 05:37 428032 c:\windows\SysWOW64\vbscript.dll
    + 2011-04-14 19:48 . 2011-02-18 05:36 428032 c:\windows\SysWOW64\vbscript.dll
    - 2011-02-13 04:41 . 2010-12-18 05:30 606208 c:\windows\SysWOW64\mstime.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 606208 c:\windows\SysWOW64\mstime.dll
    - 2011-02-13 04:41 . 2010-12-18 05:30 599040 c:\windows\SysWOW64\msfeeds.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 599040 c:\windows\SysWOW64\msfeeds.dll
    + 2011-04-14 19:48 . 2011-02-18 05:35 716800 c:\windows\SysWOW64\jscript.dll
    - 2011-02-13 04:41 . 2011-01-05 05:34 716800 c:\windows\SysWOW64\jscript.dll
    - 2010-07-23 07:32 . 2010-03-04 07:33 740864 c:\windows\SysWOW64\inetcomm.dll
    + 2011-04-14 19:47 . 2011-03-08 05:38 740864 c:\windows\SysWOW64\inetcomm.dll
    - 2010-12-24 09:27 . 2010-11-04 05:48 176640 c:\windows\SysWOW64\ieui.dll
    + 2011-04-14 19:47 . 2011-02-24 05:29 176640 c:\windows\SysWOW64\ieui.dll
    - 2011-02-13 04:41 . 2010-12-18 05:29 185856 c:\windows\SysWOW64\iepeers.dll
    + 2011-04-14 19:47 . 2011-02-24 05:29 185856 c:\windows\SysWOW64\iepeers.dll
    + 2011-04-14 19:47 . 2011-02-24 05:29 381440 c:\windows\SysWOW64\iedkcs32.dll
    - 2011-02-13 04:41 . 2010-12-18 05:29 381440 c:\windows\SysWOW64\iedkcs32.dll
    - 2009-07-13 23:12 . 2009-07-14 01:15 269824 c:\windows\SysWOW64\dnsapi.dll
    + 2011-04-14 19:47 . 2011-03-03 05:29 269824 c:\windows\SysWOW64\dnsapi.dll
    + 2011-04-14 19:47 . 2011-02-19 03:37 294912 c:\windows\SysWOW64\atmfd.dll
    + 2011-04-14 19:48 . 2011-02-24 06:30 476160 c:\windows\system32\XpsGdiConverter.dll
    + 2011-04-14 19:47 . 2011-02-05 12:39 518160 c:\windows\system32\winresume.exe
    + 2011-04-14 19:47 . 2011-02-05 12:39 603976 c:\windows\system32\winload.exe
    + 2010-07-29 20:18 . 2011-04-24 23:58 174430 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
    + 2010-07-22 23:34 . 2011-04-24 20:01 276318 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
    + 2011-04-14 19:48 . 2011-02-18 06:37 612352 c:\windows\system32\vbscript.dll
    - 2011-02-13 04:41 . 2011-01-05 06:20 612352 c:\windows\system32\vbscript.dll
    - 2009-07-14 02:36 . 2011-04-07 20:43 624178 c:\windows\system32\perfh009.dat
    + 2009-07-14 02:36 . 2011-04-20 22:24 624178 c:\windows\system32\perfh009.dat
    - 2009-07-14 02:36 . 2011-04-07 20:43 106522 c:\windows\system32\perfc009.dat
    + 2009-07-14 02:36 . 2011-04-20 22:24 106522 c:\windows\system32\perfc009.dat
    - 2011-02-13 04:41 . 2010-12-18 06:12 703488 c:\windows\system32\msfeeds.dll
    + 2011-04-14 19:47 . 2011-02-24 06:25 703488 c:\windows\system32\msfeeds.dll
    + 2011-04-14 19:48 . 2011-02-18 06:36 852480 c:\windows\system32\jscript.dll
    - 2011-02-13 04:41 . 2011-01-05 06:16 852480 c:\windows\system32\jscript.dll
    - 2010-07-23 07:32 . 2010-03-04 07:57 976896 c:\windows\system32\inetcomm.dll
    + 2011-04-14 19:47 . 2011-03-08 06:14 976896 c:\windows\system32\inetcomm.dll
    - 2010-12-24 09:27 . 2010-11-04 06:31 247808 c:\windows\system32\ieui.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 247808 c:\windows\system32\ieui.dll
    - 2011-02-13 04:41 . 2010-12-18 06:11 256000 c:\windows\system32\iepeers.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 256000 c:\windows\system32\iepeers.dll
    - 2011-02-13 04:41 . 2010-12-18 06:11 445952 c:\windows\system32\iedkcs32.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 445952 c:\windows\system32\iedkcs32.dll
    + 2011-04-14 19:47 . 2011-02-12 06:14 267776 c:\windows\system32\FXSCOVER.exe
    + 2009-07-14 04:45 . 2011-04-15 10:29 376008 c:\windows\system32\FNTCACHE.DAT
    - 2009-07-14 04:45 . 2011-02-14 11:35 376008 c:\windows\system32\FNTCACHE.DAT
    - 2010-10-18 00:46 . 2010-08-27 03:37 161792 c:\windows\system32\drivers\srvnet.sys
    + 2011-04-14 19:48 . 2011-02-23 05:15 161792 c:\windows\system32\drivers\srvnet.sys
    + 2011-04-14 19:48 . 2011-02-23 05:16 401920 c:\windows\system32\drivers\srv2.sys
    + 2011-04-14 19:48 . 2011-02-23 05:16 461312 c:\windows\system32\drivers\srv.sys
    + 2011-04-14 19:47 . 2011-02-23 05:15 126464 c:\windows\system32\drivers\mrxsmb20.sys
    - 2010-07-23 07:27 . 2010-02-27 07:52 286720 c:\windows\system32\drivers\mrxsmb10.sys
    + 2011-04-14 19:47 . 2011-02-23 05:15 286720 c:\windows\system32\drivers\mrxsmb10.sys
    + 2011-04-14 19:47 . 2011-02-23 05:15 157696 c:\windows\system32\drivers\mrxsmb.sys
    - 2010-07-23 07:27 . 2010-02-27 07:52 157696 c:\windows\system32\drivers\mrxsmb.sys
    - 2009-07-13 23:21 . 2009-07-14 01:40 182272 c:\windows\system32\dnsrslvr.dll
    + 2011-04-14 19:47 . 2011-03-03 06:17 182272 c:\windows\system32\dnsrslvr.dll
    + 2011-04-14 19:47 . 2011-03-03 06:17 356352 c:\windows\system32\dnsapi.dll
    - 2009-07-13 23:21 . 2009-07-14 01:40 356352 c:\windows\system32\dnsapi.dll
    + 2009-07-14 05:12 . 2011-04-22 20:34 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    - 2009-07-14 05:12 . 2011-04-08 21:01 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    + 2011-04-14 19:47 . 2011-02-05 12:39 518160 c:\windows\system32\Boot\winresume.exe
    + 2011-04-14 19:47 . 2011-02-05 12:39 603976 c:\windows\system32\Boot\winload.exe
    + 2011-04-14 19:47 . 2011-02-19 04:13 367104 c:\windows\system32\atmfd.dll
    - 2010-07-22 23:31 . 2010-08-15 04:08 262144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    + 2010-07-22 23:31 . 2011-04-15 10:31 262144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    - 2009-07-14 05:01 . 2011-03-23 10:15 327760 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    + 2009-07-14 05:01 . 2011-04-20 22:16 327760 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
    - 2010-03-18 22:27 . 2010-03-18 22:27 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
    + 2011-02-10 12:15 . 2011-02-10 12:15 597832 c:\windows\Microsoft.NET\Framework64\v4.0.30319\SOS.dll
    - 2010-08-11 22:25 . 2010-05-20 22:38 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 485192 c:\windows\Microsoft.NET\Framework64\v2.0.50727\SOS.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    - 2010-03-18 21:16 . 2010-03-18 21:16 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
    - 2010-03-18 21:16 . 2010-03-18 21:16 955728 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    - 2010-03-18 21:16 . 2010-03-18 21:16 385864 c:\windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2010-08-11 22:25 . 2010-05-20 22:49 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2009-07-13 20:46 . 2009-06-10 21:23 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2010-08-11 22:25 . 2010-05-20 22:49 995160 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 288616 c:\windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 335712 c:\windows\Microsoft.NET\assembly\GAC_64\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 125440 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 237424 c:\windows\Microsoft.NET\assembly\GAC_64\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 187776 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
    + 2010-11-25 21:20 . 2010-11-25 21:20 724992 c:\windows\Installer\17d92710.msi
    + 2011-04-20 01:38 . 2011-04-20 01:38 290092 c:\windows\Installer\{B073B30C-7D4C-401D-ABF6-993F7A0DE762}\MCF7Collectors.exe
    + 2011-04-15 14:08 . 2011-04-15 14:08 314368 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsFormsIntegra#\61fb9d8290fbaa8498a881f593a7a040\WindowsFormsIntegration.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 231424 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationTypes\18b47d7f980b932dc902655b49ec4fbe\UIAutomationTypes.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 121344 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationProvider\75099df6556d7d2c5ca67d3e2d60baac\UIAutomationProvider.ni.dll
    + 2011-04-15 14:08 . 2011-04-15 14:08 637952 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClient\0943772ed435f5c91373cd3aaf03bd73\UIAutomationClient.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 523264 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Linq\9730c5e35945ca85fd5d95a115893876\System.Xml.Linq.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 251904 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Inpu#\71ac43faef5b49a62312dc1328bacb3d\System.Windows.Input.Manipulations.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 900096 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Transactions\af642314ce87e245d23b0b3377e17ebb\System.Transactions.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 275456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceProce#\e83b2ffdb10d5d0e220fdf321b824a0e\System.ServiceProcess.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 108032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\d290ae0296f19582e156be3b30c2a3b4\System.ServiceModel.Channels.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 504832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\a58792587454d2133a0f3358a322052a\System.ServiceModel.Routing.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 928768 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Security\fc2ba0e20f94e3d06517953c31c8f8d3\System.Security.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 374272 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\9b37a4fadc59ceebcc75c8e25fd94019\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 976896 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Remo#\4867752bc719f513f018c3796b6dc54a\System.Runtime.Remoting.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 176128 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Numerics\b3eba7a83ecbeb3c04b3e60a47b02691\System.Numerics.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 904704 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Net\3b806d29af1d1578760b445ad76be619\System.Net.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 767488 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Messaging\281a91a73241f6f7da5446b5514db175\System.Messaging.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 509952 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management.I#\dcd4144daf8c4d510425bdea556c7dab\System.Management.Instrumentation.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 520192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IO.Log\10939629510541abf16bab4eb543a72b\System.IO.Log.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 288256 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityMode#\dc511891e93007ab478154b9f34136d7\System.IdentityModel.Selectors.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 338944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\4fa6feeaa9c0961acda505abdd7298c2\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 489984 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Dynamic\3333b57e4660517077fc343fc2c036a1\System.Dynamic.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 623104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\93b7edc88e1753f7b7fac67375c00328\System.DirectoryServices.Protocols.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 141824 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Device\89bdbc0a3a4cf5e55552c517b356e6bc\System.Device.ni.dll
    + 2011-04-15 14:05 . 2011-04-15 14:05 175104 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.DataSet#\87afb56213bd1b10ee57c3381077e555\System.Data.DataSetExtensions.ni.dll
    + 2011-04-15 14:05 . 2011-04-15 14:05 179712 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuratio#\20a1fd99abd637fbfb5920402d0c9cbc\System.Configuration.Install.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 997888 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\e054bb4b36d43ba46a30e42898f1ecd1\System.ComponentModel.Composition.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 252416 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ComponentMod#\cc15765b854918b113d3aa8cdfd1af21\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 827392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn\0a55ba9f43c0f613a31eab0f36699b03\System.AddIn.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 537600 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.D#\f877a0af35e321f5ee688c486499e071\System.Activities.DurableInstancing.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 424960 c:\windows\assembly\NativeImages_v4.0.30319_64\SMSvcHost\04cecedd1b95f94953ccb0c5c56e12d7\SMSvcHost.ni.exe
    + 2011-04-15 14:03 . 2011-04-15 14:03 182272 c:\windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\97de59073e43ae5d0204d29de02a5a06\SMDiagnostics.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 330240 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\d76fe6f0cec13117368275ff13de5b37\PresentationFramework.Classic.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 553984 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\b26979a8e48281b409b22d51a8ce5ab8\PresentationFramework.Aero.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 745472 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\7593b88a9eee7f888411a6b279ebb2ac\PresentationFramework.Luna.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 387072 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\378f098660135718355db3aafea16411\PresentationFramework.Royale.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 417280 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\e202bc8cd5afa6cf0b1364e6c5ec0077\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 595456 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\57a4a6e73ab36b555fca58c807f5d6ff\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 276992 c:\windows\assembly\NativeImages_v4.0.30319_64\CustomMarshalers\f27fbe7dcc5517a2d9b5f15906271eaf\CustomMarshalers.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 245760 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\c854ff737035c79fdf1b56b95e28fdbc\WindowsFormsIntegration.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 195584 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\c085fc0d222fb39afe14cc8e5eb32eee\UIAutomationTypes.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 481792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\974f99cb0c5b67484ce5a3fd1fc5e7dd\UIAutomationClient.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\6d7c87b19bf40f2bc57ec4429b628c9a\System.Xml.Linq.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 187904 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\21eb4743be4fdd8df5f0a9cd0dd52f5d\System.Windows.Input.Manipulations.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 645632 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\1fac5b5769af4e4dd0aa3f09d9834734\System.Transactions.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 220672 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\4e5c6a1e261c43961b19f4712359234f\System.ServiceProcess.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\9fc58e83505ef6bf05a4529665c7737d\System.ServiceModel.Routing.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 721920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\df00a90a0ca189eb49b071dfd9530347\System.Security.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 310272 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7de8fccb064fff0d219e8594a014b600\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 758784 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\30b7ffac8d9d7ba0364dd19c158fe291\System.Runtime.Remoting.ni.dll
    + 2011-04-15 10:04 . 2011-04-15 10:04 144896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\f2304201110addb8170997ff442e87fc\System.Numerics.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 651264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\56158e581a3dfce8f930fe7388cfe156\System.Net.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 625152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\8b3e59239912537657fc7f9c6b88dd8a\System.Messaging.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 392704 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\117067671949b80852b0a7c112888b7b\System.Management.Instrumentation.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 405504 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\a483116d4df8444911c9d47fd99b8b95\System.IO.Log.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 228352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\3891b868ee83ca630686d547c328da31\System.IdentityModel.Selectors.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 230912 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\547669d593c2ac7c94391e153ea6068f\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 784896 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\547669d593c2ac7c94391e153ea6068f\System.EnterpriseServices.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 373248 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\f9b335b9f86afcae5a54949288010a0f\System.Dynamic.ni.dll
    + 2011-04-15 13:34 . 2011-04-15 13:34 911872 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\8a7ceaec74327e2be758e7291b8a5849\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-04-15 13:34 . 2011-04-15 13:34 461824 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\698dd101afeceb8ffc4a435b9be82038\System.DirectoryServices.Protocols.ni.dll
    + 2011-04-15 13:34 . 2011-04-15 13:34 112128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\65b4592d5d04a0c5b6f102f8d1e065e8\System.Device.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\ee0a48c4f9340f1002baa71004a14932\System.Data.DataSetExtensions.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 973312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\f7f7d2aa985906327e256d05472bdeb3\System.Configuration.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 145920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\9a074aee02c2c27bd8a64bd39bb0f954\System.Configuration.Install.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 193536 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\f02a6c23986ba9eee3699717437b0f94\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\50925baa7781cd6b13b345750b78cac2\System.ComponentModel.Composition.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 613888 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\d5de48c1c29a8498c89ed5da48e40690\System.AddIn.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 402944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\d60de251f6401ab42fe195f6bf25ca73\System.Activities.DurableInstancing.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 316928 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\d42aded7e797fe07a002cec27071b509\SMSvcHost.ni.exe
    + 2011-04-15 13:32 . 2011-04-15 13:32 142336 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\22f477b2dad8700e564daead57f5b825\SMDiagnostics.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\ea81a1bfc0d3e8840be37dffb83fc12e\PresentationFramework.Luna.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 327168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\e4498a63f9913a5d47d26de0da220fdc\PresentationFramework.Royale.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 283648 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\debfd1ead83df514b9a663bf3601669f\PresentationFramework.Classic.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 450048 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\bc6292c4e40c4bf27d35ec5a8065893f\PresentationFramework.Aero.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 302592 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\d6479ba7e3c2150dbe9e713ae7c6cc6d\Microsoft.VisualBasic.Compatibility.Data.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 418304 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\a78fa250714cf42472bc22d0b7ea14e5\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 193024 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\e665571fbfd43f6f3f715b715dd01f14\CustomMarshalers.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 468992 c:\windows\assembly\NativeImages_v2.0.50727_64\WsatConfig\a204d00ba10c911f00293014caafc2a9\WsatConfig.ni.exe
    + 2011-04-15 13:17 . 2011-04-15 13:17 329216 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsFormsIntegra#\24f5de449f83de20ab6e7cd6636a74c0\WindowsFormsIntegration.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 253952 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationTypes\98ed2ce59a02b2ad53b96c0c3b6a874e\UIAutomationTypes.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationProvider\69f823739fd264e2405cc8af76c2196f\UIAutomationProvider.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 653312 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClient\8a1c25a6532f4078b303d6aa1333065f\UIAutomationClient.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 304128 c:\windows\assembly\NativeImages_v2.0.50727_64\TaskScheduler\4ce28e6887c5110334a0523de81a5b59\TaskScheduler.ni.dll
     
  16. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    + 2011-04-15 13:16 . 2011-04-15 13:16 529920 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\b819f184922b7faef750b18a0d82e858\System.Xml.Linq.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 187392 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Routing\02c01af0907002c36a1b898d0bc3c31c\System.Web.Routing.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 261120 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.RegularE#\e710c7ee94372b7b828e50af9a40755d\System.Web.RegularExpressions.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 449024 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity\66669158b4e8688fbbdeefc9a680b46c\System.Web.Entity.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 398848 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Entity.D#\acbbfd99fb86d00db846d84739841e34\System.Web.Entity.Design.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 753664 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\edcdc55c2f52e4a141ab5c7fb26bce59\System.Web.DynamicData.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 204800 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Abstract#\cedb3051c72884cec81d0979940da378\System.Web.Abstractions.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 921600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f0bbdfdeb16f0ee1fdaf0877f7d88cfc\System.Transactions.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 295424 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\78823484d7145e65b3ee87fe946b4fae\System.ServiceProcess.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 928768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Security\ae5dbb7ece9715387344b40d44249877\System.Security.ni.dll
    + 2011-04-15 12:43 . 2011-04-15 12:43 396288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\e2661f961657f6705544823d25728184\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 916480 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Net\091778aa3187d35535f90b00dd95baef\System.Net.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 783360 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Messaging\2939541c1b3a1563d6a7877df6d6e6e8\System.Messaging.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 534016 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.I#\6d89678666d49bb027764c8c0879f032\System.Management.Instrumentation.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 569344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IO.Log\cbd156c642f9698caa21a622cdfe29c2\System.IO.Log.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 294400 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityMode#\ea431ab37ee44a253dd95f563d4376a7\System.IdentityModel.Selectors.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 446464 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\ba9279746ba6eb498176b0130bc1340c\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 288768 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\7cddebcb28b0e9fcbfe66a244eb7cd61\System.Drawing.Design.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 649728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\e7b23ec962ae6a9b0e69547ae4bd4d98\System.DirectoryServices.Protocols.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 493056 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\c1a0f4689ae1cf73a0416e70e946f87b\System.Data.Services.Design.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 194560 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.DataSet#\8d5d24a53750f68ed069d218548310c7\System.Data.DataSetExtensions.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 192000 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\b486333468a782e0d7433bd494480df0\System.Configuration.Install.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 132096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ComponentMod#\e396dd0bab3b9a38d0a8b6a84b3a8409\System.ComponentModel.DataAnnotations.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 889344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn\cfb735ab4102c23ddda6411e3e1c2a1d\System.AddIn.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\System.AddIn.Contra#\f439fd4698b29680c6387ed258592edc\System.AddIn.Contract.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 297984 c:\windows\assembly\NativeImages_v2.0.50727_64\sysglobl\76f801595d49c56ab3d0dd86cff7ce5d\sysglobl.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 525824 c:\windows\assembly\NativeImages_v2.0.50727_64\SMSvcHost\731e7ded67383623d69d38aab9696c84\SMSvcHost.ni.exe
    + 2011-04-15 13:12 . 2011-04-15 13:12 349184 c:\windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\8b2a0f357186101fe26a7ed196b396fe\SMDiagnostics.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 463360 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\fa7db7310a8415385632395042607d6d\PresentationFramework.Aero.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 317440 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\615e2449f6de31234a1b04131d972cc8\PresentationFramework.Royale.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 620544 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\5f0119616775b2bab899d8768c7a909c\PresentationFramework.Luna.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 279040 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\1a7aaba1ab9c2e3d2edf48cea9509552\PresentationFramework.Classic.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 855040 c:\windows\assembly\NativeImages_v2.0.50727_64\napsnap\b904e2dc6fe9a06c3fdecf1586444989\napsnap.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 162816 c:\windows\assembly\NativeImages_v2.0.50727_64\napinit\d163c4448708f49b85ec59c3fec91350\napinit.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 175104 c:\windows\assembly\NativeImages_v2.0.50727_64\naphlpr\765a4776917e3f7190e004ac708e4021\naphlpr.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 127488 c:\windows\assembly\NativeImages_v2.0.50727_64\napcrypt\b121712a09393bbea7d98025920d496d\napcrypt.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 184320 c:\windows\assembly\NativeImages_v2.0.50727_64\MSBuild\3678d0857e9ad8ef89b40a47ec7035e9\MSBuild.ni.exe
    + 2011-04-15 13:14 . 2011-04-15 13:14 417792 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCFxCommon\1edce855e47b6279c45b04ccd67b18e2\MMCFxCommon.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 681472 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\58eab56a3dad06abd5678683831d9f0c\Microsoft.WSMan.Management.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 122368 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\94cc0bd657babf3f9d75aef3d45d512a\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 105984 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Vsa\0a653cd63f7ee2f2ad8544e5f0e7e771\Microsoft.Vsa.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 584192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\e4bdf0f9949189329b888af10a8be118\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 416768 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\b8bd0ab3d0711bee247473a6bc005824\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 713216 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\829e156651ae88ec5e327b73894d49fa\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 999936 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\64afcf8829889a21cf4a893acd6fe54b\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 237056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\5ec243876e1b251455de6f9ea14510a5\Microsoft.PowerShell.Security.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 152576 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\ecd61a6b41ee15a514c4a6e65d9c0348\Microsoft.MediaCenter.ITVVM.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 312320 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c9ae0bffde60abab5fb50c9d0fd839cf\Microsoft.MediaCenter.iTv.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 965632 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\be39dbf25b38624ce290c9391ffeb435\Microsoft.MediaCenter.Sports.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 164864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\46b1931ac42cc387dd3fa93058109223\Microsoft.MediaCenter.Mheg.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 219648 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\36116e534c7812ee174a54e8aa3abda8\Microsoft.MediaCenter.iTv.Media.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 522240 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\147fe6e09b6af26c1572ba5a10668d49\Microsoft.MediaCenter.Interop.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 370176 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\089c000fd05de11983e57437d359ca99\Microsoft.MediaCenter.Playback.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 797696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\35292b1c40de7c9b70fac10964a0564c\Microsoft.ManagementConsole.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 244224 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\d832ebab9b336bd7d7d5a9a6ce8358d6\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 198656 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Uti#\7782d5404093d2c5a723ce1a2ca4a9c8\Microsoft.Build.Utilities.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 142336 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\fe49e18822f811ba5885934068e4c6d5\Microsoft.Build.Framework.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 120832 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Fra#\766c3fae1b31c90c12144de7ba802166\Microsoft.Build.Framework.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 294912 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Con#\302e5bd7cd8eb1a91092f24e4aada304\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 107520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft-Windows-H#\ecc9d0b03e5a0b65d4aaa348f4803d26\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 380928 c:\windows\assembly\NativeImages_v2.0.50727_64\Mcx2Dvcs\6d7e0873f16833c344e9b9b5585282d1\Mcx2Dvcs.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 547328 c:\windows\assembly\NativeImages_v2.0.50727_64\mcupdate\5f223da96a08732eccd7b6b70cfe0249\mcupdate.ni.exe
    + 2011-04-15 13:13 . 2011-04-15 13:13 533504 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\a8ad86daf00511d9b5eecefc4f1fe658\mcstoredb.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 549376 c:\windows\assembly\NativeImages_v2.0.50727_64\mcplayerinterop\37ec523cfc05fab561b27dd2ecc80065\mcplayerinterop.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 696320 c:\windows\assembly\NativeImages_v2.0.50727_64\mcGlidHostObj\ac692908e48bc93b385a186ab74b74d8\mcGlidHostObj.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 156672 c:\windows\assembly\NativeImages_v2.0.50727_64\MCESidebarCtrl\5e9ccd031c5538bc860503f54b4d617a\MCESidebarCtrl.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 659456 c:\windows\assembly\NativeImages_v2.0.50727_64\EventViewer\938c373c9e414f1c3360674f925da421\EventViewer.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 969216 c:\windows\assembly\NativeImages_v2.0.50727_64\ehRecObj\14f00dc7e1bda147817a5e881ddeb094\ehRecObj.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 661504 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiWUapi\96f0e431b898ab61ce982efb5029a575\ehiWUapi.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 933888 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiwmp\27869a1b711abd758db6434784e3e924\ehiwmp.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 145408 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUserXp\207c5f9fb2a43197c5847af6d83b10d7\ehiUserXp.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 196096 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiiTv\4b121c97bf8825d527814204f40349ff\ehiiTv.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 397824 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiExtens\b0850300010766f4cb1d54868c5e8000\ehiExtens.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 110080 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiBmlDataCarousel\58dcdd95ed5632ed521f78e7b8b6d2ef\ehiBmlDataCarousel.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 126976 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiActivScp\1fe31369fbd97e02ff3ad599c01b6082\ehiActivScp.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 389120 c:\windows\assembly\NativeImages_v2.0.50727_64\ehExtHost\bb7a1dfe12563a04a33c7454823ea14a\ehExtHost.ni.exe
    + 2011-04-15 13:12 . 2011-04-15 13:12 313856 c:\windows\assembly\NativeImages_v2.0.50727_64\ehCIR\4d0ab98537a118b62771dd0dfc84a2ef\ehCIR.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 348672 c:\windows\assembly\NativeImages_v2.0.50727_64\CustomMarshalers\441d1cc78fd9efcc1d6f75759ae3b5fe\CustomMarshalers.ni.dll
    + 2011-04-15 13:11 . 2011-04-15 13:11 640000 c:\windows\assembly\NativeImages_v2.0.50727_64\ComSvcConfig\c92afe3489a1236dfb52ec202ec835d1\ComSvcConfig.ni.exe
    + 2011-04-15 13:11 . 2011-04-15 13:11 971264 c:\windows\assembly\NativeImages_v2.0.50727_64\BDATunePIA\b5866d13f13973cb6c1ed4f34da3a307\BDATunePIA.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 321024 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\92820867d7756b2ee6e784d106f4082e\WsatConfig.ni.exe
    + 2011-04-15 13:28 . 2011-04-15 13:28 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\79a83cca2f21238be264aae336216562\WindowsLiveLocal.WriterPlugin.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f9ab2a625fd48f9fae268485410f4024\WindowsLive.Writer.BlogClient.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c9659a499359fad7d5d49da04b04db76\WindowsLive.Writer.Interop.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b455a8c66491c87d4335731d8cbce5ce\WindowsLive.Writer.Interop.Mshtml.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\931755436a5e99c310007f0a9a29f314\WindowsLive.Writer.Controls.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\92c0158518246a43c2528d53f53a4bc6\WindowsLive.Writer.Interop.SHDocVw.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\81e354fe598b6ff467a8651475eaf249\WindowsLive.Writer.SpellChecker.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7db429b61a9d8f29ca887b0db4982e34\WindowsLive.Writer.BrowserControl.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7349b44c7b872bb02692dc5a30d8a11e\WindowsLive.Writer.Localization.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\69549098477a7a7671ff16d4e3048442\WindowsLive.Writer.FileDestinations.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\5412f4edc9a76a425394ba03470b54f0\WindowsLive.Writer.Extensibility.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4d03eae6d85690f400c31a3ae1170b49\WindowsLive.Writer.Instrumentation.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\2061e354d6ef35d339a592b7b3ff339b\WindowsLive.Writer.HtmlParser.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 258560 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1b3c521dc4799e1743574d5f38ab9e5b\WindowsLive.Writer.Mshtml.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\15cb8c5ce17d38e9ff1d8204339bde3f\WindowsLive.Writer.HtmlEditor.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\098245f00f37023dd2d4f4aef4222100\WindowsLive.Writer.Passport.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\c3a2144260b6ac79d6499f29486420fb\WindowsLive.Client.ni.dll
    + 2011-04-15 13:27 . 2011-04-15 13:27 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\dc92545eebf5f0ab962c9e04f6371873\WindowsFormsIntegration.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 185344 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\7f7d2046655d4c9869df1400e96ef148\UIAutomationTypes.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 452096 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\b46016e46c49f5c6e454d799fe3905a1\UIAutomationClient.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 245248 c:\windows\assembly\NativeImages_v2.0.50727_32\TaskScheduler\94b7b6fdf4fae7d8729f497accebfc51\TaskScheduler.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 401408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\d5dfe3fcbea2923bfa33430ff487ffb6\System.Xml.Linq.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\ed71e07845afe0a93b7746b6430dda73\System.Web.Routing.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\86f6b6c6f39adbf30b16f0010eae55ed\System.Web.RegularExpressions.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d9aef815443e4d3c10bc05e599a80567\System.Web.Extensions.Design.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 328192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\e194364704c7634d78692566990695e1\System.Web.Entity.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\e35377eb04faaa818ab7594cfc25c383\System.Web.Entity.Design.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af6bfa76fd64a29416ed911c599a8f63\System.Web.DynamicData.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\ee6d962b3e3145a009995d2a12526492\System.Web.Abstractions.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4be7719ea0e1f2ba2d3fde051d1ef7ab\System.Transactions.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\b6d66d3c48e430796c17d0497ce37972\System.ServiceProcess.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 680960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\395fc7d9f333940351a74aaab5d6ae99\System.Security.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 310784 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\ad1106dcb485b61902595ebdbac11003\System.Runtime.Serialization.Formatters.Soap.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\adc8998d96ca331d17cef00b1ef95a5f\System.Runtime.Remoting.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 624128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\3edb259ce4002a23b081c7499169a03d\System.Net.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\5881d9447d785713df04b6eef6daf417\System.Messaging.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 997888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\94eb4ca06f43edf88bbdecd3729657d5\System.Management.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\88d1e8766ea70faf415ff33ae68ab296\System.Management.Instrumentation.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\faadac81c1e5803ee56cd14b45f4e05c\System.IO.Log.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\f57bc1904dcf818df2884ea65086a288\System.IdentityModel.Selectors.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d571165dafc1dd90e3450ea2a1325657\System.EnterpriseServices.Wrapper.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 628224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\d571165dafc1dd90e3450ea2a1325657\System.EnterpriseServices.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ee36fbb280cddb3efe592efd9119c8d5\System.Drawing.Design.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 887808 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\fddab756434edabe6389b3b2e3edfbee\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\fcffd264d279dfade0e9e81676e2be2e\System.DirectoryServices.Protocols.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 356864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\d6485a7b50ca90fa320ac63da3285585\System.Data.Services.Design.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 946176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\12cc161596458a54666bfb0f47b84c20\System.Data.Services.Client.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 762880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\9d990cc6b3b48a7362036791beb16552\System.Data.Entity.Design.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\08f80695e275fb341524fc324ce572c1\System.Data.DataSetExtensions.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\9d054fc9618b81d5703af1662cd11135\System.Configuration.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\6ab5ba34d9ef6368859b41a78d77cb8b\System.Configuration.Install.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 633344 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\c23507b5fb2ac12c725e5b21e9876718\System.AddIn.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\2309cc00d60111e583b7a5da3bb9e66e\sysglobl.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\1c87b6d89d1bb464c9ff1d8ce8e0d7ed\SMSvcHost.ni.exe
    + 2011-04-15 13:28 . 2011-04-15 13:28 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\c33c0219534ddfe640fe44ccccb41f2b\SMDiagnostics.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b3063a90df90a31a7ab2524bac40b7fc\PresentationFramework.Classic.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b0aaab2b6a3abd5d4a54bdf346152416\PresentationFramework.Luna.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e1f199a523bdc014cd19072d583e7cc\PresentationFramework.Aero.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\35bfb432b168fb51731c8257117093aa\PresentationFramework.Royale.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 723456 c:\windows\assembly\NativeImages_v2.0.50727_32\napsnap\7ab917a7b1576bca7dc9fb2cf9a53569\napsnap.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\napinit\aad191f43e9b4a127501040f917380e6\napinit.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 114176 c:\windows\assembly\NativeImages_v2.0.50727_32\naphlpr\b0ae87278eb84e2b831103df63fa2657\naphlpr.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\f23c6ad56ad4605afc688022a386f2ad\MSBuild.ni.exe
    + 2011-04-15 13:29 . 2011-04-15 13:29 287232 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCFxCommon\e7bf0bdf0202180ab0ef3aa522762b60\MMCFxCommon.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 531456 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Man#\27b7aa571ad3e6f9120fb3fb6f869f07\Microsoft.WSMan.Management.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\51d5e62fd2fbf00f545f39e0d024a98c\Microsoft.Transactions.Bridge.Dtc.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 167424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\e47d78eaaf4e73ffbb55c2e5f3d2c816\Microsoft.PowerShell.Security.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 515584 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\d5dca4260f2ade8d607daf1698ba73ea\Microsoft.PowerShell.ConsoleHost.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 291328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\b0b2c2cd14cfba3ff2c6939de43bfd48\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\94b2b89b9ab207a928b5ae14ddab7fb1\Microsoft.PowerShell.GraphicalHost.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 785920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\1e659b044679bf346882b726851ba3e9\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 561664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Managemen#\8f5d31794203c5d9ba6c89af26d33587\Microsoft.ManagementConsole.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4f0f296e30faa9a8276944f6b55faa57\Microsoft.Build.Utilities.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\46bf9580c6422121b8f20e0d35d30cde\Microsoft.Build.Utilities.v3.5.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\85e2726db1f258e49f0d71c3de15d096\Microsoft.Build.Engine.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\0813e2893e5acbc57418c7e30a93b516\Microsoft.Build.Conversion.v3.5.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 364032 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstoredb\4dd9affd21d3878c841fd7d698662791\mcstoredb.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 553472 c:\windows\assembly\NativeImages_v2.0.50727_32\EventViewer\c5d0b89f0fe0d02f0c7e8393342c2463\EventViewer.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 693248 c:\windows\assembly\NativeImages_v2.0.50727_32\ehRecObj\9fd4e350234ce872cca5a8f834808a96\ehRecObj.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 875520 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiVidCtl\c733aca005090391aa4520b7415e5847\ehiVidCtl.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 442880 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiProxy\8b5dfd678af2ce1e63f4fb45c35247d7\ehiProxy.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 161280 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiExtens\134fdbf744efb0166c20d53bf2eee245\ehiExtens.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 254464 c:\windows\assembly\NativeImages_v2.0.50727_32\ehExtHost32\57e8cac6b563dadf43235da308f3cad7\ehExtHost32.ni.exe
    + 2011-04-15 13:28 . 2011-04-15 13:28 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\690ef8a86cc2ce3dd973cf0ee4ca8cd0\CustomMarshalers.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4c15a608346fc62b46765dd106e3c43f\ComSvcConfig.ni.exe
    + 2011-04-15 13:27 . 2011-04-15 13:27 621568 c:\windows\assembly\NativeImages_v2.0.50727_32\BDATunePIA\1c02b1d787025d0361fb319b6548e79e\BDATunePIA.ni.dll
    + 2011-04-14 19:47 . 2011-02-24 05:32 1228800 c:\windows\SysWOW64\urlmon.dll
    + 2011-04-14 19:47 . 2011-02-24 05:30 5981696 c:\windows\SysWOW64\mshtml.dll
    + 2011-04-14 19:48 . 2011-03-11 05:40 1164288 c:\windows\SysWOW64\mfc42u.dll
    + 2011-04-14 19:48 . 2011-03-11 05:40 1137664 c:\windows\SysWOW64\mfc42.dll
    - 2011-02-13 04:41 . 2010-12-18 05:29 2063360 c:\windows\SysWOW64\iertutil.dll
    + 2011-04-14 19:47 . 2011-02-24 05:29 2063360 c:\windows\SysWOW64\iertutil.dll
    + 2011-04-14 19:47 . 2011-02-24 06:29 1197056 c:\windows\system32\wininet.dll
    - 2011-02-13 04:41 . 2010-12-21 06:16 1197056 c:\windows\system32\wininet.dll
    + 2011-04-14 19:48 . 2011-03-03 03:58 3133440 c:\windows\system32\win32k.sys
    + 2011-04-14 19:47 . 2011-02-24 06:28 1499136 c:\windows\system32\urlmon.dll
    + 2011-04-14 19:47 . 2011-02-24 06:25 1026560 c:\windows\system32\mstime.dll
    - 2011-02-13 04:41 . 2010-12-18 06:12 1026560 c:\windows\system32\mstime.dll
    + 2011-04-14 19:47 . 2011-02-24 06:25 9311744 c:\windows\system32\mshtml.dll
    + 2011-04-14 19:48 . 2011-03-11 06:19 1359872 c:\windows\system32\mfc42u.dll
    + 2011-04-14 19:48 . 2011-03-11 06:19 1395712 c:\windows\system32\mfc42.dll
    + 2011-04-14 19:47 . 2011-02-24 06:24 2447872 c:\windows\system32\iertutil.dll
    - 2011-02-13 04:41 . 2010-12-18 06:11 2447872 c:\windows\system32\iertutil.dll
    - 2009-07-14 04:45 . 2011-03-29 12:57 3798234 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    + 2009-07-14 04:45 . 2011-04-15 10:31 3798234 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    + 2011-02-10 12:15 . 2011-02-10 12:15 4960080 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    - 2010-03-18 22:27 . 2010-03-18 22:27 4960080 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
    + 2011-02-10 12:15 . 2011-02-10 12:15 1453392 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
    - 2010-03-18 22:27 . 2010-03-18 22:27 1453392 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordbi.dll
    + 2011-02-10 12:15 . 2011-02-10 12:15 1513816 c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscordacwks.dll
    + 2011-02-10 12:15 . 2011-02-10 12:15 9801544 c:\windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    - 2010-08-11 22:25 . 2010-05-20 22:38 4567040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 1576784 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
    - 2010-08-11 22:25 . 2010-05-20 22:38 1764184 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 1764184 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscordacwks.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    - 2010-03-18 21:16 . 2010-03-18 21:16 5196112 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 1142104 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
    + 2011-02-10 11:10 . 2011-02-10 11:10 6735176 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 5817168 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2010-08-11 22:25 . 2010-05-20 22:49 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 3481928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 3481928 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 4982120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 4982120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 3111768 c:\windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 3453792 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 3453792 c:\windows\Microsoft.NET\assembly\GAC_64\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 4960080 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 4960080 c:\windows\Microsoft.NET\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    - 2010-12-04 11:01 . 2010-12-04 11:01 3563408 c:\windows\Microsoft.NET\assembly\GAC_64\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 5196112 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 5196112 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-11-20 11:02 . 2010-11-20 11:02 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-04-15 10:02 . 2011-04-15 10:02 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 5060608 c:\windows\assembly\NativeImages_v4.0.30319_64\WindowsBase\9dc9f4b88ccbc7c26faaf073368d10e8\WindowsBase.ni.dll
    + 2011-04-15 14:08 . 2011-04-15 14:08 1424896 c:\windows\assembly\NativeImages_v4.0.30319_64\UIAutomationClients#\1baece3209975181c5fa1c851d24e86c\UIAutomationClientsideProviders.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 6972928 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml\09aeb4c336ecf6237674e72fdc915292\System.Xml.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 2406400 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xaml\2c08c18315f43e0774546863c18268b6\System.Xaml.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 5587456 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Form#\541d06f19794895241928a8851408c6b\System.Windows.Forms.DataVisualization.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 2220032 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\33e2af0b445bc26ba56a0df8fb516dea\System.Web.Services.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 2653696 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Speech\a0c5a5a8c3579c1692385eac048b7350\System.Speech.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 1885184 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\cbe6b184d880020ef9fea96347d3b10a\System.ServiceModel.Activities.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 1547776 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel#\365472df290a28ed18da91dca8cc712b\System.ServiceModel.Discovery.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 3375616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\0877eb3e6ef55103312dc8ba3dc5245d\System.Runtime.Serialization.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 1327616 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Dura#\5ec79675d490aec86462f3eb24da5459\System.Runtime.DurableInstancing.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 1396224 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Printing\4851db77ca90ae967b23e188d1d5630e\System.Printing.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 1438720 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Management\aa26202cb958ed3d8e768a77599a5839\System.Management.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 1401856 c:\windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\2732fbe9f3ed7212b80cb989f716e5a3\System.IdentityModel.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 1051136 c:\windows\assembly\NativeImages_v4.0.30319_64\System.EnterpriseSe#\4fa6feeaa9c0961acda505abdd7298c2\System.EnterpriseServices.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 2248192 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\a6927eb868b45e595123549eb33e709b\System.Drawing.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 1193472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\e0b4f1d645805f5b7d9848e80509003d\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 1587200 c:\windows\assembly\NativeImages_v4.0.30319_64\System.DirectorySer#\de321120508ef1a53dbf3c169d6216d1\System.DirectoryServices.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 2353152 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Deployment\67732c66b4db4c82333de18685455e55\System.Deployment.ni.dll
    + 2011-04-15 14:03 . 2011-04-15 14:03 8485376 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data\501f793a47e8873fd7d017650658f55c\System.Data.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 3323392 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.SqlXml\5f447dc1bfea82509dd474bdfb528ce5\System.Data.SqlXml.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 1750016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Service#\33067ffbeaf66c7ab78a0d2b6daf2cf0\System.Data.Services.Client.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 3320832 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Linq\c19945497aa308f593cf182dc862be9b\System.Data.Linq.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 1247232 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\e4ebe73ce507eba626d0b198568371dd\System.Configuration.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 5633536 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities\b090d846e0e186c63f73c07fba39cab4\System.Activities.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 4817408 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.P#\a53bf4cb16ff6459ac44b41f9d1372b5\System.Activities.Presentation.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 1948160 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Activities.C#\1868640986b129262f0094407666330f\System.Activities.Core.Presentation.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 3910656 c:\windows\assembly\NativeImages_v4.0.30319_64\ReachFramework\311a3ca673e6366fe0ab181f9b76e0be\ReachFramework.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 1987584 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationUI\559817d3613bfd3fb3a0aa261b892be0\PresentationUI.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 1836544 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\7f2d79e19feb190372191e7a406b9484\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 2269696 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\6a6098e5bef4eb29b7e0c4fdd83fea6b\Microsoft.VisualBasic.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 1612800 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualBas#\379bcca927c177470d96ab6ca296ba52\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 1490944 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Transacti#\276dc5052b36548fba49544c4efa7ac6\Microsoft.Transactions.Bridge.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 3288064 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.JScript\e9795ad3782ba917640cfd93379b387b\Microsoft.JScript.ni.dll
    + 2011-04-15 13:18 . 2011-04-15 13:18 1968640 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.CSharp\97efa02b74efa644ed98cbf309d6ccb2\Microsoft.CSharp.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 3779072 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\8d8cf1d60737d945a526fb11577d4b8a\WindowsBase.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 1055744 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\28121866e3d6d8b0dc72d9e250b0af1c\UIAutomationClientsideProviders.ni.dll
     
  17. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    + 2011-04-15 10:04 . 2011-04-15 10:04 9000960 c:\windows\assembly\NativeImages_v4.0.30319_32\System\7abfd34ae39103ceccdfb8b262ed6a97\System.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 5571584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\eb45dda4b68ae7f29995c3a3d909fbe7\System.Xml.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1776640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\738a078bc59722d6b06b5ae5e99569f9\System.Xaml.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 4496384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\eec21f9b08bbed54d9e36038badaf289\System.Windows.Forms.DataVisualization.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 1828352 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\46f59c5b9fee41849705f2b5f1102d66\System.Web.Services.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 1992192 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\01a3b3bf7fadd971e17400c8502ec886\System.Speech.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 1127424 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\6856341eadab4c3ace0e39182649bba2\System.ServiceModel.Discovery.ni.dll
    + 2011-04-15 14:01 . 2011-04-15 14:01 1388032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\4048a5620b0fa66a7414cff30155d30c\System.ServiceModel.Activities.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 2625024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\c46375bba06671d2a9369e630752987a\System.Runtime.Serialization.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1011200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\6b6309a2e7f384bac4ccbdf1eca34c30\System.Runtime.DurableInstancing.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1047040 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\24f97354b0a95ef77b2db8de9e7374fe\System.Printing.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 1159168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\05a0937d76f565aa728348fc24f6c2eb\System.Management.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 1065984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\1f045fc92d6402b27f6b9fb9291d44c3\System.IdentityModel.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 1651200 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\526f0a9717cbd8a50d09a10b5ce81c0d\System.Drawing.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1151488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\6dc0ed081400ec315f895bdc7fd016c4\System.DirectoryServices.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1872384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\2a2a921350a9651e9bd681197edeb88d\System.Deployment.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 6754816 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\adc8f2f7dff3233f2d72bcef8e58226a\System.Data.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 2538496 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\c25dda9b477a33f9f235292114bb535c\System.Data.SqlXml.ni.dll
    + 2011-04-15 13:34 . 2011-04-15 13:34 1332736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\aa778d274523b93d389e581e58698918\System.Data.Services.Client.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 2499072 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\8e0d083a7ad85b579d176e3594b5f3b8\System.Data.Linq.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 7025664 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\69b1f8a15cdfb26e30c8761fa4f96940\System.Core.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 4103168 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\ec488a50a47246a625159744ad8e0931\System.Activities.ni.dll
    + 2011-04-15 13:33 . 2011-04-15 13:33 3691520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\00fb4f96c610880aeee34d8670347a6d\System.Activities.Presentation.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1506304 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\a965a0f825fb91ce7cf78d99263968b4\System.Activities.Core.Presentation.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 2842624 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\3f04b2ab8961aceac03f8ae2ccabe947\ReachFramework.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1622528 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\3aebfb1497141c9466ee8ce68a3bf805\PresentationUI.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1819648 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\ff572ca3a119cd72903df8c6ed667b62\Microsoft.VisualBasic.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1167872 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\320f1578082f1de1f8562ce92c0c2dab\Microsoft.VisualBasic.Activities.Compiler.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1137664 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\2c7956de8e9d90daf06667f55dfede8c\Microsoft.VisualBasic.Compatibility.ni.dll
    + 2011-04-15 13:32 . 2011-04-15 13:32 1079808 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\ac03be8a96bd10965da87208d81eb07d\Microsoft.Transactions.Bridge.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 2441728 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\d4572ad085979b16261058f1433e73e9\Microsoft.JScript.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 1612288 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\32454400da56267e19961852345d7a62\Microsoft.CSharp.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 4927488 c:\windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\1e3f3f8caebccc43bac1ead6c499e86c\WindowsBase.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 1458688 c:\windows\assembly\NativeImages_v2.0.50727_64\UIAutomationClients#\b236de39043cc88d3a3538a21a6d8727\UIAutomationClientsideProviders.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 6948864 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Xml\204425dc0001e539afa7b421e22ad3d2\System.Xml.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 1817600 c:\windows\assembly\NativeImages_v2.0.50727_64\System.WorkflowServ#\289806afa08572ba46f571c49a4653e9\System.WorkflowServices.ni.dll
    + 2011-04-15 12:46 . 2011-04-15 12:46 2707456 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Run#\d78456878eef99f0f4495952e83ecf2d\System.Workflow.Runtime.ni.dll
    + 2011-04-15 12:46 . 2011-04-15 12:46 5955072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Com#\e9915eb362a1c1e9a20d6d94e660b907\System.Workflow.ComponentModel.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 3895296 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Workflow.Act#\63cd5cacc8837a76bd42f6b7fb1c3c7c\System.Workflow.Activities.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 2291712 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\af3b2a74ad03110a907db4e8c2561f33\System.Web.Services.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 3335680 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Mobile\d836571308354d76cbf903aa1f7f5b70\System.Web.Mobile.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 1155072 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\ca207a3f8e7c0b38d7889d6553a26879\System.Web.Extensions.Design.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 3041792 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.Extensio#\41b530f6a8020fe7234f1756b0306e8f\System.Web.Extensions.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 2727936 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Speech\7630c96ebd07515a410f4233bc181d6b\System.Speech.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 2312704 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel#\a1da4b1129cde521b4f8d2190e49bf7f\System.ServiceModel.Web.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 3073536 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\8f330bba5fc6e402f62bbcdf8db81cbb\System.Runtime.Serialization.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 1022976 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\80f3a46ef5dc430c63ee6dec74dd6482\System.Runtime.Remoting.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 1453568 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Printing\d04f22e62959a7aa46af27cd1a6ce8ff\System.Printing.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 1408512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management\febdaf76a9969b639bfcbda99e429ada\System.Management.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 1433088 c:\windows\assembly\NativeImages_v2.0.50727_64\System.IdentityModel\968f3b72f07dfb33c9d22c81a455aeb9\System.IdentityModel.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 1081344 c:\windows\assembly\NativeImages_v2.0.50727_64\System.EnterpriseSe#\ba9279746ba6eb498176b0130bc1340c\System.EnterpriseServices.ni.dll
    + 2011-04-15 15:42 . 2011-04-15 15:42 2311168 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\62f46b8689863e5f23b1b69fe9c92eaf\System.Drawing.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 1640448 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\7d7bc7eaca0f064b75d209ef490ee2c4\System.DirectoryServices.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 1229824 c:\windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3df753899b6693bb07ef99bf4ddf5588\System.DirectoryServices.AccountManagement.ni.dll
    + 2011-04-15 15:42 . 2011-04-15 15:42 2444288 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Deployment\72c2ada0c8d4c5db4d1264db7a884e4e\System.Deployment.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 8692736 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data\8d390d75a41448a48b0c93bbd43d36af\System.Data.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 3461632 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\72ee46246444eda0506c70290feb53a6\System.Data.SqlXml.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 1846272 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Services\1ae3281a91395f38f3db5308bc3f07b3\System.Data.Services.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 1289728 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Service#\2d0a6c2422810bcdfed26f30314eff98\System.Data.Services.Client.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 1506816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.OracleC#\3ddb904739b06cfa2eecfe684cd3135d\System.Data.OracleClient.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 3480576 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Linq\300c68c0168f08ec594fff60631e4928\System.Data.Linq.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 1080320 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity.#\96b4a5aca775953c64296e86e3571621\System.Data.Entity.Design.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 3312128 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Core\b2db5a32768114cfc55b80b01fb2fbfb\System.Core.ni.dll
    + 2011-04-15 10:34 . 2011-04-15 10:34 1308160 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\8de5af4b452750696e15e959e0e7b8a6\System.Configuration.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 3101696 c:\windows\assembly\NativeImages_v2.0.50727_64\ReachFramework\fae264da855e84f7830ffff60496c4ab\ReachFramework.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 2109952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationUI\cfb1bf2fef2f3ea4325302b86c50d30a\PresentationUI.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 1881088 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationBuildTa#\29fa4597e1ce168fbf3dcedce365ff67\PresentationBuildTasks.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 3601920 c:\windows\assembly\NativeImages_v2.0.50727_64\Narrator\e6dc93caa2b09c7bc89196714e672df4\Narrator.ni.exe
    + 2011-04-15 13:15 . 2011-04-15 13:15 2327040 c:\windows\assembly\NativeImages_v2.0.50727_64\MMCEx\02603ae8a95f62ea4b33d1aa583c65a6\MMCEx.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 7966208 c:\windows\assembly\NativeImages_v2.0.50727_64\MIGUIControls\72ba75aaaed25fa07ee66ac55edd3157\MIGUIControls.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 2131968 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualBas#\e2c3e73da17ade8f0e360938b7673013\Microsoft.VisualBasic.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 1598464 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Transacti#\f6957147c628c0dd91fd692c1893343c\Microsoft.Transactions.Bridge.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 5351424 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\e9f43e953c0f2232cecfc417a90b6b6c\Microsoft.PowerShell.Editor.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 1131008 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\883a8405bde38fa11dfe05f13bfee3d4\Microsoft.PowerShell.Commands.Management.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 2175488 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\4726faaad23c07544bce6b911930524f\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-04-15 13:15 . 2011-04-15 13:15 2105344 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\0a2674f2e73449754d046493a83e2af5\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 1508864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\f33297772fb14c4725bde1374082eb03\Microsoft.MediaCenter.Bml.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 1170432 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\e5c8780fbf98347c0b78f8e2fbcec359\Microsoft.MediaCenter.TV.Tuners.Interop.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 1142784 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\c4c3b2f564ea5fd39749707216d4fb8a\Microsoft.MediaCenter.Shell.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 8979456 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\93c74c0596582828383dbd76b381d4d3\Microsoft.MediaCenter.UI.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 1516032 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\3661f440b93a05e3e441a7f1f3c8c402\Microsoft.MediaCenter.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 3208192 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\dc2e65cb6909fd4fb0fd90b9a794641c\Microsoft.JScript.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 2365952 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Ink\c0d443d9ae3d8c0f8aacb5209e6b07a2\Microsoft.Ink.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 2218496 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\7e8da4a8cb6b2493cba5c4e3a1b42070\Microsoft.Build.Tasks.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 2677760 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Tas#\32db3cdf96c5c96fd061a0ccf83c491f\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 2544640 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\e2616d8f95eec6de85c220339a99905f\Microsoft.Build.Engine.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 1137152 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Build.Eng#\c987905a9afa970663c90a683f91e2d3\Microsoft.Build.Engine.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 2801664 c:\windows\assembly\NativeImages_v2.0.50727_64\mcstore\e06c032c0a0f0b18db88ee90110201cf\mcstore.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 4086784 c:\windows\assembly\NativeImages_v2.0.50727_64\mcepg\52426d60c23698309c3673c2f6753a17\mcepg.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 2184192 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiVidCtl\debcd919d1578f02f238b75472e92ff0\ehiVidCtl.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 1201664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiProxy\28a8fd56d1a25c8fcf3ab08be049786d\ehiProxy.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fad88b6dce8269cf6951b3c913a8a358\WindowsLive.Writer.PostEditor.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\60785314e31e1e0b98ae3005d6085f01\WindowsLive.Writer.CoreServices.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 1105408 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3777080b1d4ab052e336b87c99712fc2\WindowsLive.Writer.ApplicationFramework.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 3325952 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\caa9d8bca3092573cdbb67c8e81bf0f3\WindowsBase.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 1047552 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\9277a01f030f100dab838a2337c610d9\UIAutomationClientsideProviders.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 7949312 c:\windows\assembly\NativeImages_v2.0.50727_32\System\50c67f851ae3df2d0ab7d86fd1c5c7e0\System.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 5452800 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\167c8c3817ba1f48fe7396cc56f557e3\System.Xml.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 1358336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\cfe5c3c77d2041ae4c03d198a6e8b5a0\System.WorkflowServices.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 1914880 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\8f1782183b31982f174d72fb90d7716f\System.Workflow.Runtime.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\62a4f0f720e9fbde89029958855f83b2\System.Workflow.ComponentModel.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 2995200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\1bbb5146995a1f32c86f40741d92c2fe\System.Workflow.Activities.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f9fe5fb8add34a7107252b0cc957180f\System.Web.Services.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 2209792 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\47a62bbfa75ce9830af804eef2df16ae\System.Web.Mobile.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 2402816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\9c2369e5f6c0af8a87229db2e62c5367\System.Web.Extensions.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\a2d9bf609f27dd1012b0f5f53e2cf842\System.Speech.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 1705984 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\bd18aa89bc33bcf72fc616f0f738885e\System.ServiceModel.Web.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 2347008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dc01d7a6574e5414acc40f3cd0c4ea1d\System.Runtime.Serialization.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\ee6cdd2f7d1912e83be10c072d20b08d\System.Printing.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 8871936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.A#\375d18dac548687f2f84d031bf84610f\System.Management.Automation.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 1072128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\3310d8cd2857662a7f5e77161790a77f\System.IdentityModel.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 1586688 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\2a34e74599686e7383ae90670a994cdf\System.Drawing.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 1117184 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\cf7ba38149c1045375a57ce45121b2a0\System.DirectoryServices.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 1806848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\fb344a8683aa8f1c4250807eb4b264eb\System.Deployment.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 6618624 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\b9565c454a22ca564978b05db4186f22\System.Data.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 2508288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\2e02ccda4754a42463e74452f55b81d4\System.Data.SqlXml.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 1328640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\f128715ff681876d725e7e96578b1742\System.Data.Services.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\901ca7df5560e0e9aae68a130549e71a\System.Data.OracleClient.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 2516992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\1e54b09b3497c0bb75871fee8d97f832\System.Data.Linq.ni.dll
    + 2011-04-15 13:31 . 2011-04-15 13:31 9921024 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\fb46966f238c774dffacbf8697992e1b\System.Data.Entity.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\bf0286e181064f9ded08895c7f23967d\System.Core.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 2147328 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\47b01e14f159a5ca0ea03e7edf9d7139\ReachFramework.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\88eb524b3a37cca550934d993ac4c205\PresentationUI.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 1449984 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\da62589149dbb3f5cace9d23915fbc50\PresentationBuildTasks.ni.dll
    + 2011-04-15 13:30 . 2011-04-15 13:30 2623488 c:\windows\assembly\NativeImages_v2.0.50727_32\Narrator\e929f9dae243305d3e006a4b4c0ef774\Narrator.ni.exe
    + 2011-04-15 13:30 . 2011-04-15 13:30 1545216 c:\windows\assembly\NativeImages_v2.0.50727_32\MMCEx\2ab5f6334c292908c8070469b8c1e9ea\MMCEx.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 6434304 c:\windows\assembly\NativeImages_v2.0.50727_32\MIGUIControls\7547d315c49d6ab506da38d558760adb\MIGUIControls.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1670144 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\dda6d8c7413334b605fcf590a702e9f1\Microsoft.VisualBasic.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 1092608 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\011179f510aa2d54fb1fb1c43eae85eb\Microsoft.Transactions.Bridge.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 3724288 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\4357ba05dac31aa98389e668b2abd46d\Microsoft.PowerShell.Editor.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1705472 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\3eec9c8a51429210138c9d4c07774731\Microsoft.PowerShell.GPowerShell.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1681920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.PowerShel#\2e51f2a0795860085c24705ad8576acc\Microsoft.PowerShell.Commands.Utility.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 1009664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\0f8be11ad94d8a6375fb868b269bb74d\Microsoft.MediaCenter.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 6499840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.MediaCent#\0ed1916f9d4e93f454be65ff61390596\Microsoft.MediaCenter.UI.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 2332672 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\e757d1ff0f056eecac1e0a22a8bbc252\Microsoft.JScript.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1361408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Ink\a44105e58e3c4e32962a822162fe9757\Microsoft.Ink.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\b0d18518eeefd2b18a779040e1e6fadf\Microsoft.Build.Tasks.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\2a8a75f4dbf81acd088c044a4bf24a63\Microsoft.Build.Tasks.v3.5.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\86065d9c6ceb0d7469fc1e8b80146e63\Microsoft.Build.Engine.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 2035712 c:\windows\assembly\NativeImages_v2.0.50727_32\mcstore\5066cb8287953249f5cd170fa6ecb3e9\mcstore.ni.dll
    + 2011-04-15 13:29 . 2011-04-15 13:29 3025920 c:\windows\assembly\NativeImages_v2.0.50727_32\mcepg\5648f72831fe70598c7b18b5a569f20f\mcepg.ni.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-08-11 22:25 . 2010-05-20 22:38 4567040 c:\windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-04-14 19:48 . 2011-02-07 23:35 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2010-08-11 22:25 . 2010-05-20 22:49 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2011-04-14 19:47 . 2011-02-24 05:29 10989056 c:\windows\SysWOW64\ieframe.dll
    - 2011-02-13 04:41 . 2010-12-21 05:35 10989056 c:\windows\SysWOW64\ieframe.dll
    + 2009-07-14 02:34 . 2011-04-24 11:53 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
    - 2009-07-14 02:34 . 2011-04-14 17:16 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
    + 2010-07-23 17:03 . 2011-04-15 10:06 41455560 c:\windows\system32\MRT.exe
    + 2011-04-14 19:47 . 2011-02-24 06:24 12369408 c:\windows\system32\ieframe.dll
    - 2011-02-13 04:41 . 2010-12-21 06:11 12369408 c:\windows\system32\ieframe.dll
    + 2011-04-14 19:48 . 2011-02-07 23:30 10059600 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
    + 2011-02-11 15:59 . 2011-02-11 15:59 23633408 c:\windows\Installer\75bf6b8a.msp
    + 2011-04-15 10:04 . 2011-04-15 10:04 11722240 c:\windows\assembly\NativeImages_v4.0.30319_64\System\50931796f874c8ad4f66a52699021d6e\System.ni.dll
    + 2011-04-15 14:04 . 2011-04-15 14:04 17046528 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\89ddcbe739742a3f73f41bcb7f0edb80\System.Windows.Forms.ni.dll
    + 2011-04-15 14:07 . 2011-04-15 14:07 24146944 c:\windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\4dea6e07f4fd5017aff0ee8e9fd4ffc0\System.ServiceModel.ni.dll
    + 2011-04-15 14:06 . 2011-04-15 14:06 18089472 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Data.Entity\4c79cc6f58d9abfa97649b19db76448c\System.Data.Entity.ni.dll
    + 2011-04-15 13:17 . 2011-04-15 13:17 10199552 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Core\0f8acbbcf441aa1668be9caec43c8cda\System.Core.ni.dll
    + 2011-04-15 14:02 . 2011-04-15 14:02 22967808 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationFramewo#\af51c794f48eeb736b92d9887b35dfff\PresentationFramework.ni.dll
    + 2011-04-15 13:19 . 2011-04-15 13:19 14810112 c:\windows\assembly\NativeImages_v4.0.30319_64\PresentationCore\8af70bf74f77932786db0d4a4fce0ccc\PresentationCore.ni.dll
    + 2011-04-15 10:03 . 2011-04-15 10:04 19348992 c:\windows\assembly\NativeImages_v4.0.30319_64\mscorlib\8ac942bc694bac7795b45cf6b409524e\mscorlib.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 13006336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\85b61e27d3c08c0c8ff19deb75912e1d\System.Windows.Forms.ni.dll
    + 2011-04-15 14:00 . 2011-04-15 14:00 17919488 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\8964b15d32028ef9dfe776216af8524d\System.ServiceModel.ni.dll
    + 2011-04-15 13:34 . 2011-04-15 13:34 13273600 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\38409bc0ee7cdb9fbc981fefea83ab23\System.Data.Entity.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 17629184 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f1e3e74b135fcd61fa30090a2c2596a6\PresentationFramework.ni.dll
    + 2011-04-15 10:05 . 2011-04-15 10:05 11058176 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\3fe193ac81b9eafd76aafeec99bdbf6a\PresentationCore.ni.dll
    + 2011-04-15 10:04 . 2011-04-15 10:04 14415872 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\eb4e1e70734f6efb9c7de7ec5f452c9e\mscorlib.ni.dll
    + 2011-04-15 10:34 . 2011-04-15 10:34 10597376 c:\windows\assembly\NativeImages_v2.0.50727_64\System\98ac7ad6dcf7484bf8b4478ea6951cb6\System.ni.dll
    + 2011-04-15 12:43 . 2011-04-15 12:43 17378816 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\1109b73499e4e9b612bf55e2014d94df\System.Windows.Forms.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 15232512 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web\402c0dfbdc7583b3006f3d098824bd3a\System.Web.ni.dll
    + 2011-04-15 13:12 . 2011-04-15 13:12 23812096 c:\windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\25ccc2d0b2d7cb50ef99d7649e1556e1\System.ServiceModel.ni.dll
    + 2011-04-15 13:14 . 2011-04-15 13:14 11898880 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\f67bb3690f12a990e59ad85abeaa81d1\System.Management.Automation.ni.dll
    + 2011-04-15 12:45 . 2011-04-15 12:45 13609472 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Design\6b6d8f59352e98be45886c2dea18c720\System.Design.ni.dll
    + 2011-04-15 13:16 . 2011-04-15 13:16 13757952 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Data.Entity\deced468ac01881a5117a59817d65a52\System.Data.Entity.ni.dll
    + 2011-04-15 12:44 . 2011-04-15 12:44 19169792 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\517c391cbd3151250f6dcf4c4b4d193e\PresentationFramework.ni.dll
    + 2011-04-15 15:41 . 2011-04-15 15:41 16513024 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\ba7e600eefb4ace27a48c034937e1e3c\PresentationCore.ni.dll
    + 2011-04-15 10:34 . 2011-04-15 10:34 15566848 c:\windows\assembly\NativeImages_v2.0.50727_64\mscorlib\10e3a3015e967b69f90d58230a694f67\mscorlib.ni.dll
    + 2011-04-15 13:13 . 2011-04-15 13:13 25462272 c:\windows\assembly\NativeImages_v2.0.50727_64\ehshell\0fc29de8fa81251b4a5f6c77ccba9d79\ehshell.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e4ea95056046fdf87f06ae807308b627\System.Windows.Forms.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 11807744 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b867fbc0d573ac5e5fe71143d9caf43b\System.Web.ni.dll
    + 2011-04-15 13:28 . 2011-04-15 13:28 17400320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\e445840cb2432f9e2dd4860bd98c4a05\System.ServiceModel.ni.dll
    + 2011-04-15 10:33 . 2011-04-15 10:33 10578432 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c519a7e1b063eb63b43fa5b3a782c641\System.Design.ni.dll
    + 2011-04-15 10:32 . 2011-04-15 10:32 14322688 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\d7827588b8043e8be3184c8a64a867fc\PresentationFramework.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:32 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\03dd2b7701ca5cfe696d4ca5a0f7b8bb\PresentationCore.ni.dll
    + 2011-04-15 10:31 . 2011-04-15 10:31 11490304 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ebdaeaeb9f66c9035b5f11431f10cda4\mscorlib.ni.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
     
  18. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MyTOSHIBA"="c:\program files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe" [2009-08-06 264048]
    "Desktop Software"="c:\program files (x86)\Common Files\SupportSoft\bin\bcont.exe" [2009-04-24 1025320]
    "Aim"="c:\program files (x86)\AIM\aim.exe" [2011-01-05 4321112]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-01-13 2988784]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "NortonOnlineBackupReminder"="c:\program files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" [2009-07-16 529256]
    "ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2009-07-21 1293624]
    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-30 421888]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-14 421160]
    "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-12-15 47904]
    "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-03-04 281768]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux1"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
    @=""
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 136176]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys [x]
    S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS [x]
    S0 tos_sps64;TOSHIBA tos_sps64 Service;c:\windows\system32\DRIVERS\tos_sps64.sys [x]
    S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
    S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
    S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-29 128752]
    S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-03-04 135336]
    S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2009-08-11 248688]
    S2 ConfigFree Gadget Service;ConfigFree Gadget Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [2009-07-15 42368]
    S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-11 46448]
    S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys [x]
    S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys [x]
    S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys [x]
    S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2009-08-11 252272]
    S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [x]
    S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [x]
    S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
    S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [2010-11-07 24176]
    S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
    S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-07-21 51512]
    S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-08-04 137560]
    S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2009-08-04 826224]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - PBFILTER
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{01250B8F-D947-4F8A-9408-FE8E3EE2EC92}]
    2009-08-06 16:15 264048 ----a-w- c:\program files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-04-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 16:05]
    .
    2011-04-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 16:05]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ThpSrv"="c:\windows\system32\thpsrv" [X]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-02 165912]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-02 387608]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-02 365592]
    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-29 7982112]
    "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [BU]
    "TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE" [BU]
    "HSON"="%ProgramFiles%\TOSHIBA\TBS\HSON.exe" [BU]
    "SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe" [BU]
    "00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe" [BU]
    "Teco"="%ProgramFiles%\TOSHIBA\TECO\Teco.exe" [BU]
    "TosWaitSrv"="%ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe" [BU]
    "SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe" [BU]
    "TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2009-08-04 709976]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.ask.com?o=14196&l=dis
    mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyServer = http=127.0.0.1:8992
    uInternet Settings,ProxyOverride = <local>
    IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000
    FF - ProfilePath - c:\users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\3rthz914.default\
    FF - prefs.js: network.proxy.type - 0
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
    FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
    FF - Ext: StumbleUpon: {AE93811A-5C9A-4d34-8462-F7B864FC4696} - %profile%\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}
    FF - user.js: yahoo.homepage.dontask - true
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Toolbar-Locked - (no file)
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker2"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2011-04-24 18:13:59
    ComboFix-quarantined-files.txt 2011-04-25 01:13
    ComboFix2.txt 2011-04-14 20:23
    ComboFix3.txt 2010-12-24 22:36
    .
    Pre-Run: 144,175,902,720 bytes free
    Post-Run: 144,128,225,280 bytes free
    .
    - - End Of File - - B80169DF9297777A1666436728920048
     
  19. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    MALWAREBYTES:

    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Database version: 6440

    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    4/25/2011 10:50:32 AM
    mbam-log-2011-04-25 (10-50-32).txt

    Scan type: Quick scan
    Objects scanned: 156625
    Time elapsed: 3 minute(s), 28 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 1
    Registry Values Infected: 1
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\ineufbr1v (Malware.Trace) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     
  20. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    NOTE:

    I'm not sure what combofix did, but the sites are working again. At least for now.

    Thanks,
    Pat
     
  21. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Looks like you previously ran Combofix: ComboFix3.txt 2010-12-24 22:36
    And all the entries in the Eset log show Qoobox. This is where Combofix sends the files it quarantines and deletes, but the current scan didn't remove anything.
    When we finish a cleaning, we have you remove the cleaning tools, including Combofix. And when that is done, it removed the logs and backups. It appears you didn't remove it then.

    Did you use this Combofix that was already on the system to run the scan?

    The current version of Mbam found entries that the earlier one missed and deleted them. That might have been the cause of the problem as one entry was ProxyServer (PUM.Bad.Proxy)
     
  22. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    Yes, I used the combofix I already had. I didn't need to download it.
    Should I delete combofix then?
     
  23. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    You need to uninstall the Combofix you had on the system, then download the current version and scan again:
    Uninstall ComboFix and all Backups of the files it deleted
    • Click START> then RUN
    • Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
      ==============================
      Download Combofix from HERE or HERE and save to the desktop
      • Double click combofix.exe & follow the prompts.
      • ComboFix will check to see if the Microsoft Windows Recovery Console is installed. It is recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode if needed.
        **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.
      • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
      • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
      • Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
        [​IMG]
      • .Click on Yes, to continue scanning for malware
      • .If Combofix asks you to update the program, allow
      • .Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • .Close any open browsers.
      • .Double click combofix.exe[​IMG] & follow the prompts to run.
      • When the scan completes , a report will be generated-it will open a text window. Please paste the C:\ComboFix.txt in next reply..
      Re-enable your Antivirus software.
      Notes:
      1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
      2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
      3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
      4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

      Changes are made in this type of program to better deal with what the malware writers are putting out.

      I've recently had several members run an old version of Malwarebytes and it comes out clean. Once they have the current version and updated database, it's amazing how many entries are usually found!
     
  24. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    ComboFix 11-04-26.01 - Pat 04/26/2011 15:41:13.4.2 - x64
    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3964.2552 [GMT -7:00]
    Running from: c:\users\Pat\Downloads\ComboFix.exe
    AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
    SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((( Files Created from 2011-03-26 to 2011-04-26 )))))))))))))))))))))))))))))))
    .
    .
    2011-04-26 22:52 . 2011-04-26 22:52 -------- d-----w- c:\users\Public\AppData\Local\temp
    2011-04-26 22:52 . 2011-04-26 22:52 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-04-26 22:39 . 2011-04-26 22:40 -------- d-----w- C:\32788R22FWJFW
    2011-04-26 12:40 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1FD1232E-43FB-4522-A09F-468D1565ECE3}\mpengine.dll
    2011-04-25 17:45 . 2010-12-21 01:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
    2011-04-23 18:39 . 2011-04-23 18:39 -------- d-----w- c:\program files (x86)\ESET
    2011-04-22 20:40 . 2011-04-26 08:39 -------- d-----w- c:\program files (x86)\Mystery Case Files - Dire Grove Collector's Edition
    2011-04-20 21:13 . 2011-04-20 21:13 -------- d-----w- c:\users\Pat\AppData\Roaming\Avira
    2011-04-20 21:11 . 2011-03-04 21:37 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
    2011-04-20 21:11 . 2011-03-04 21:37 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
    2011-04-20 21:11 . 2011-04-20 21:11 -------- d-----w- c:\programdata\Avira
    2011-04-20 21:11 . 2011-04-20 21:11 -------- d-----w- c:\program files (x86)\Avira
    2011-04-20 01:45 . 2011-04-22 20:44 -------- d-----w- c:\users\Pat\AppData\Roaming\Big Fish Games
    2011-04-20 01:37 . 2011-04-20 01:37 -------- d-----w- c:\program files (x86)\LeeGT-Games
    2011-04-14 19:47 . 2011-02-19 06:36 46080 ----a-w- c:\windows\system32\atmlib.dll
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\users\Pat\AppData\Roaming\DVDVideoSoft
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
    2011-04-07 21:46 . 2011-04-07 21:46 -------- d-----w- c:\program files (x86)\DVDVideoSoft
    2011-04-07 21:16 . 2011-04-07 21:16 -------- d-----w- c:\users\Pat\AppData\Roaming\AVS4YOU
    2011-04-07 21:15 . 2010-12-02 17:11 10915840 ----a-w- c:\windows\SysWow64\libmfxhw32.dll
    2011-04-07 21:15 . 2010-12-02 17:11 10833920 ----a-w- c:\windows\SysWow64\libmfxsw32.dll
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\program files (x86)\Common Files\AVSMedia
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\programdata\AVS4YOU
    2011-04-07 21:15 . 2011-04-07 21:16 -------- d-----w- c:\program files (x86)\AVS4YOU
    2011-04-07 21:15 . 2010-12-02 17:12 24576 ----a-w- c:\windows\SysWow64\msxml3a.dll
    2011-04-07 21:15 . 2010-12-02 17:12 1700352 ----a-w- c:\windows\SysWow64\GdiPlus.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-02-19 06:37 . 2011-03-23 06:03 1135104 ----a-w- c:\windows\system32\FntCache.dll
    2011-02-19 06:37 . 2011-03-23 06:03 1540608 ----a-w- c:\windows\system32\DWrite.dll
    2011-02-19 06:36 . 2011-03-23 06:03 902656 ----a-w- c:\windows\system32\d2d1.dll
    2011-02-19 05:32 . 2011-03-23 06:03 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
    2011-02-19 05:32 . 2011-03-23 06:03 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
    2011-02-03 01:11 . 2010-08-22 22:23 270720 ------w- c:\windows\system32\MpSigStub.exe
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MyTOSHIBA"="c:\program files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe" [2009-08-06 264048]
    "Desktop Software"="c:\program files (x86)\Common Files\SupportSoft\bin\bcont.exe" [2009-04-24 1025320]
    "Aim"="c:\program files (x86)\AIM\aim.exe" [2011-01-05 4321112]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-01-13 2988784]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "NortonOnlineBackupReminder"="c:\program files (x86)\TOSHIBA\Toshiba Online Backup\Activation\TobuActivation.exe" [2009-07-16 529256]
    "ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2009-07-21 1293624]
    "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]
    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-30 421888]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-14 421160]
    "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-12-15 47904]
    "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2011-03-04 281768]
    "Malwarebytes' Anti-Malware (reboot)"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-21 963976]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux1"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
    @=""
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 136176]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys [x]
    S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS [x]
    S0 tos_sps64;TOSHIBA tos_sps64 Service;c:\windows\system32\DRIVERS\tos_sps64.sys [x]
    S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2010-02-17 14920]
    S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2010-02-17 12360]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
    S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2010-06-29 128752]
    S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-03-04 135336]
    S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2009-08-11 248688]
    S2 ConfigFree Gadget Service;ConfigFree Gadget Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [2009-07-15 42368]
    S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-11 46448]
    S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys [x]
    S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys [x]
    S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys [x]
    S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2009-08-11 252272]
    S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [x]
    S3 FwLnk;FwLnk Driver;c:\windows\system32\DRIVERS\FwLnk.sys [x]
    S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
    S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [2010-11-07 24176]
    S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
    S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-07-21 51512]
    S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-08-04 137560]
    S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2009-08-04 826224]
    .
    .
    --- Other Services/Drivers In Memory ---
    .
    *NewlyCreated* - PBFILTER
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{01250B8F-D947-4F8A-9408-FE8E3EE2EC92}]
    2009-08-06 16:15 264048 ----a-w- c:\program files (x86)\TOSHIBA\My Toshiba\MyToshiba.exe
    .
    Contents of the 'Scheduled Tasks' folder
    .
    2011-04-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 16:05]
    .
    2011-04-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-15 16:05]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ThpSrv"="c:\windows\system32\thpsrv" [X]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-02 165912]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-02 387608]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-02 365592]
    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-29 7982112]
    "TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2009-08-04 709976]
    .
    ------- Supplementary Scan -------
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.ask.com?o=14196&l=dis
    mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSNA&bmod=TSNA
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = <local>
    IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000
    FF - ProfilePath - c:\users\Pat\AppData\Roaming\Mozilla\Firefox\Profiles\3rthz914.default\
    FF - prefs.js: network.proxy.type - 0
    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
    FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
    FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
    FF - Ext: StumbleUpon: {AE93811A-5C9A-4d34-8462-F7B864FC4696} - %profile%\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}
    FF - user.js: yahoo.homepage.dontask - true
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false
    .
    - - - - ORPHANS REMOVED - - - -
    .
    Toolbar-Locked - (no file)
    HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
    HKLM-Run-TPwrMain - %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
    HKLM-Run-HSON - %ProgramFiles%\TOSHIBA\TBS\HSON.exe
    HKLM-Run-SmoothView - %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
    HKLM-Run-00TCrdMain - %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
    HKLM-Run-Teco - %ProgramFiles%\TOSHIBA\TECO\Teco.exe
    HKLM-Run-TosWaitSrv - %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
    HKLM-Run-SmartFaceVWatcher - %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
    .
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker2"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2011-04-26 16:16:23
    ComboFix-quarantined-files.txt 2011-04-26 23:16
    ComboFix2.txt 2011-04-25 01:14
    .
    Pre-Run: 134,771,191,808 bytes free
    Post-Run: 134,586,859,520 bytes free
    .
    - - End Of File - - 3FB37CF4F822796280A5CA67AA168E7C
     
  25. PConnolly346

    PConnolly346 TS Rookie Topic Starter Posts: 49

    It's happening again. The websites aren't loading.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...