also @ TechSpot: Metro: Last Light Performance, Benchmarked

Google redirect "gethotresults" virus

Discussion in 'Virus and Malware Removal' started by person15, Aug 31, 2012.

Post New Reply
Page 1 of 4

  1. person15 Newcomer, in training Posts: 55

    Hello,

    Today I think I managed to get a Google redirect virus. Clicking on links from a Google search sometimes links me to other sites (such as gethotresults or get-amazing-results, along with other ip addresses). Running Malwarebytes and HitmanPro has not done anything. Please let me know what I should do.

    Many thanks for your help.
    person15, Aug 31, 2012
    #1

  2. person15 Newcomer, in training Posts: 55

    The Malwarebytes log is this:

    Malwarebytes Anti-Malware 1.62.0.1300
    www.malwarebytes.org

    Database version: v2012.08.31.12

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 9.0.8112.16421
    Vivek :: VIVEKW500 [limited]

    8/31/2012 7:06:58 PM
    mbam-log-2012-08-31 (19-06-58).txt

    Scan type: Quick scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 205781
    Time elapsed: 2 minute(s), 15 second(s)

    Memory Processes Detected: 0
    (No malicious items detected)

    Memory Modules Detected: 0
    (No malicious items detected)

    Registry Keys Detected: 0
    (No malicious items detected)

    Registry Values Detected: 0
    (No malicious items detected)

    Registry Data Items Detected: 0
    (No malicious items detected)

    Folders Detected: 0
    (No malicious items detected)

    Files Detected: 0
    (No malicious items detected)

    (end)
    person15, Aug 31, 2012
    #2

  3. person15 Newcomer, in training Posts: 55

    I am completing the third step mentioned (GMER). The GMER log is

    GMER 1.0.15.15641 - http://www.gmer.net
    Rootkit scan 2012-08-31 19:40:18
    Windows 6.1.7601 Service Pack 1
    Running: 9grlctx0.exe


    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001f3ad3f74a
    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\904ce5dcaa31
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001f3ad3f74a (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\904ce5dcaa31 (not active ControlSet)

    ---- EOF - GMER 1.0.15 ----
    person15, Aug 31, 2012
    #3

  4. person15 Newcomer, in training Posts: 55

    Finally, here are the DDS results. Many thanks in advance for any help you can provide. And, please let me know what you would like me to do!

    .
    DDS (Ver_2011-08-26.01) - NTFSAMD64
    Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
    Run by Vivek at 19:43:47 on 2012-08-31
    Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3992.1021 [GMT -4:00]
    .
    AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\DTS.exe
    C:\Windows\system32\ibmpmsvc.exe
    C:\Windows\system32\AtService.exe
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
    C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
    C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE
    C:\Program Files\Intel\WiFi\bin\EvtEng.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe
    C:\Program Files (x86)\McAfee\VirusScan Enterprise\vstskmgr.exe
    C:\Windows\system32\mfevtps.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files (x86)\McAfee\VirusScan Enterprise\mfeann.exe
    C:\Windows\system32\conhost.exe
    C:\Program Files (x86)\McAfee\Common Framework\naPrdMgr.exe
    C:\PROGRA~2\PHAROS~1\Core\CTskMstr.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
    c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
    C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe
    C:\Windows\System32\TpShocks.exe
    C:\Windows\System32\igfxpers.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files (x86)\Google\Drive\googledrivesync.exe
    C:\Users\Vivek\Local Settings\Apps\F.lux\flux.exe
    C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
    C:\Program Files (x86)\Digital Line Detect\DLG.exe
    C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
    C:\Program Files\Lenovo\Zoom\TpScrex.exe
    C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\SysWOW64\rundll32.exe
    C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
    C:\Program Files (x86)\RotateImage\RCIMGDIR.exe
    C:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe
    C:\Windows\system32\rundll32.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files (x86)\McAfee\Common Framework\McTray.exe
    C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
    C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\igfxext.exe
    C:\Program Files (x86)\Google\Drive\googledrivesync.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\svchost.exe -k bthsvcs
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe
    C:\Program Files\ThinkPad\Bluetooth Software\BluetoothHeadsetProxy.exe
    C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
    C:\Windows\system32\svchost.exe -k HsfXAudioService
    C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    C:\Program Files (x86)\Intel\AMT\LMS.exe
    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    c:\Program Files (x86)\Lenovo\System Update\SUService.exe
    C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
    C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Chrome\Application\chrome.exe
    C:\Users\Vivek\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
    C:\Windows\sysWOW64\wbem\wmiprvse.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\wbem\WmiApSrv.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\SysWOW64\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111010195856.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    BHO: ChromeFrame BHO: {ecb3c477-1a0a-44bd-bb57-78f9efe34fa7} - C:\Program Files (x86)\Google\Chrome Frame\Application\21.0.1180.89\npchrome_frame.dll
    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
    TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
    uRun: [Google Update] "C:\Users\Vivek\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    uRun: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
    uRun: [F.lux] "C:\Users\Vivek\Local Settings\Apps\F.lux\flux.exe" /noshow
    mRun: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
    mRun: [Message Center Plus] C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe /start
    mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
    mRun: [RotateImage] C:\Program Files (x86)\RotateImage\RCIMGDIR.exe
    mRun: [McAfeeUpdaterUI] "C:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
    mRun: [ShStatEXE] "C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    StartupFolder: C:\Users\Vivek\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Vivek\AppData\Roaming\Dropbox\bin\Dropbox.exe
    StartupFolder: C:\Users\Vivek\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\ThinkPad\Bluetooth Software\BTTray.exe
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\DIGITA~1.LNK - C:\Program Files (x86)\Digital Line Detect\DLG.exe
    uPolicies-explorer: DisallowCpl = 1 (0x1)
    mPolicies-explorer: HideSCAHealth = 1 (0x1)
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    mPolicies-system: DisableCAD = 1 (0x1)
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
    IE: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
    DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
    DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.1.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
    TCP: Interfaces\{2D6B2DAD-6A3D-4D3B-BE1D-C8117EE66090} : DhcpNameServer = 75.75.75.75 75.75.76.76
    TCP: Interfaces\{2D6B2DAD-6A3D-4D3B-BE1D-C8117EE66090}\16474777966696 : DhcpNameServer = 192.168.4.1 64.134.255.2 64.134.255.10
    TCP: Interfaces\{2D6B2DAD-6A3D-4D3B-BE1D-C8117EE66090}\E456770225F6970275962756C6563737 : DhcpNameServer = 10.0.1.1
    TCP: Interfaces\{41095C22-33CE-46D2-896E-7C6B845BF651} : DhcpNameServer = 152.3.182.5 152.3.182.3 152.3.189.18
    Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\21.0.1180.89\npchrome_frame.dll
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO-X64: AcroIEHelperStub - No File
    BHO-X64: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO-X64: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111010195856.dll
    BHO-X64: scriptproxy - No File
    BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
    BHO-X64: URLRedirectionBHO - No File
    BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
    BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    BHO-X64: ChromeFrame BHO: {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files (x86)\Google\Chrome Frame\Application\21.0.1180.89\npchrome_frame.dll
    BHO-X64: ChromeFrame BHO - No File
    TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
    TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
    mRun-x64: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
    mRun-x64: [Message Center Plus] C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe /start
    mRun-x64: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
    mRun-x64: [RotateImage] C:\Program Files (x86)\RotateImage\RCIMGDIR.exe
    mRun-x64: [McAfeeUpdaterUI] "C:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
    mRun-x64: [ShStatEXE] "C:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
    mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun-x64: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
    mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRunOnce-x64: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
    SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Vivek\AppData\Roaming\Mozilla\Firefox\Profiles\o4wix96c.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/?pc=Z192&install_date=20110905
    FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=Z192&form=ZGAADF&install_date=20110905&q=
    FF - plugin: C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll
    FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
    FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
    FF - plugin: C:\Users\Vivek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: C:\Users\Vivek\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll
    FF - plugin: C:\Users\Vivek\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    FF - plugin: C:\Users\Vivek\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 DzHDD64;DzHDD64;C:\Windows\system32\DRIVERS\DzHDD64.sys --> C:\Windows\system32\DRIVERS\DzHDD64.sys [?]
    R0 iaNvStor;Intel(R) Turbo Memory Controller;C:\Windows\system32\DRIVERS\iaNvStor.sys --> C:\Windows\system32\DRIVERS\iaNvStor.sys [?]
    R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\system32\drivers\mfehidk.sys --> C:\Windows\system32\drivers\mfehidk.sys [?]
    R0 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\system32\drivers\mfewfpk.sys --> C:\Windows\system32\drivers\mfewfpk.sys [?]
    R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
    R0 TPDIGIMN;TPDIGIMN;C:\Windows\system32\DRIVERS\ApsHM64.sys --> C:\Windows\system32\DRIVERS\ApsHM64.sys [?]
    R1 lenovo.smi;Lenovo System Interface Driver;C:\Windows\system32\DRIVERS\smiifx64.sys --> C:\Windows\system32\DRIVERS\smiifx64.sys [?]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
    R2 ATService;AuthenTec Fingerprint Service;C:\Windows\system32\AtService.exe --> C:\Windows\system32\AtService.exe [?]
    R2 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
    R2 DozeSvc;Lenovo Doze Mode Service;C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [2010-3-9 161128]
    R2 dtsvc;Data Transfer Service;C:\Windows\system32\DTS.exe --> C:\Windows\system32\DTS.exe [?]
    R2 HsfXAudioService;HsfXAudioService;C:\Windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 20992]
    R2 McAfeeFramework;McAfee Framework Service;C:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe [2011-1-12 120128]
    R2 McShield;McAfee McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [2011-10-10 190256]
    R2 McTaskManager;McAfee Task Manager;C:\Program Files (x86)\McAfee\VirusScan Enterprise\vstskmgr.exe [2011-1-12 209760]
    R2 mfevtp;McAfee Validation Trust Protection Service;"C:\Windows\system32\mfevtps.exe" --> C:\Windows\system32\mfevtps.exe [?]
    R2 TPHKSVC;On Screen Display;C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [2009-10-5 62320]
    R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Common Files\Intel\Privacy Icon\UNS\UNS.exe [2010-1-4 2058776]
    R3 5U875UVC;Integrated Camera;C:\Windows\system32\DRIVERS\RCUVCMNP.sys --> C:\Windows\system32\DRIVERS\RCUVCMNP.sys [?]
    R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atipmdag.sys --> C:\Windows\system32\DRIVERS\atipmdag.sys [?]
    R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
    R3 CAXHWAZL;CAXHWAZL;C:\Windows\system32\DRIVERS\CAXHWAZL.sys --> C:\Windows\system32\DRIVERS\CAXHWAZL.sys [?]
    R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;C:\Windows\system32\DRIVERS\e1y60x64.sys --> C:\Windows\system32\DRIVERS\e1y60x64.sys [?]
    R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
    R3 intelkmd;intelkmd;C:\Windows\system32\DRIVERS\igdpmd64.sys --> C:\Windows\system32\DRIVERS\igdpmd64.sys [?]
    R3 LenovoRd;LenovoRd;C:\Windows\system32\Drivers\LenovoRd.sys --> C:\Windows\system32\Drivers\LenovoRd.sys [?]
    R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\system32\drivers\mfeavfk.sys --> C:\Windows\system32\drivers\mfeavfk.sys [?]
    R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETw5s64.sys --> C:\Windows\system32\DRIVERS\NETw5s64.sys [?]
    R3 TVTI2C;Lenovo SM bus driver;C:\Windows\system32\DRIVERS\Tvti2c.sys --> C:\Windows\system32\DRIVERS\Tvti2c.sys [?]
    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
    RUnknown szkg5;szkg5; [x]
    S2 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-1-12 135664]
    S2 LENOVO.MICMUTE;Lenovo Microphone Mute;C:\Program Files\Lenovo\HOTKEY\micmute.exe [2009-10-5 45424]
    S3 ADMonitor;AD Monitor;C:\Windows\system32\ADMonitor.exe --> C:\Windows\system32\ADMonitor.exe [?]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-6-28 250056]
    S3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;C:\Windows\system32\Drivers\ATSwpWDF.sys --> C:\Windows\system32\Drivers\ATSwpWDF.sys [?]
    S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
    S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-1-12 135664]
    S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\system32\drivers\mferkdet.sys --> C:\Windows\system32\drivers\mferkdet.sys [?]
    S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys --> C:\Windows\system32\DRIVERS\netw5v64.sys [?]
    S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
    S3 PCDSRVC{127174DC-C366ED8B-06020200}_0;PCDSRVC{127174DC-C366ED8B-06020200}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\PC-Doctor\pcdsrvc_x64.pkms [2011-3-31 25584]
    S3 Power Manager DBC Service;Power Manager DBC Service;C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe [2010-1-4 75112]
    S3 RoxMediaDB10;RoxMediaDB10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-8-5 1124848]
    S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
    S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
    S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
    S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
    SUnknown is3srv;is3srv; [x]
    .
    =============== Created Last 30 ================
    .
    2012-08-31 23:01:1324904----a-w-C:\Windows\System32\drivers\mbam.sys
    2012-08-31 21:12:48--------d-----w-C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2012-08-24 19:36:41342528----a-w-C:\Windows\System32\Spool\prtprocs\x64\hpcpp115.dll
    2012-08-22 17:31:049826504----a-w-C:\Windows\SysWow64\FlashPlayerInstaller.exe
    2012-08-16 07:08:58552960----a-w-C:\Windows\System32\drivers\bthport.sys
    2012-08-16 02:56:33751104----a-w-C:\Windows\System32\win32spl.dll
    2012-08-16 02:56:32559104----a-w-C:\Windows\System32\spoolsv.exe
    2012-08-16 02:56:32492032----a-w-C:\Windows\SysWow64\win32spl.dll
    2012-08-16 02:56:3167072----a-w-C:\Windows\splwow64.exe
    2012-08-16 02:55:51503808----a-w-C:\Windows\System32\srcore.dll
    2012-08-16 02:55:4943008----a-w-C:\Windows\SysWow64\srclient.dll
    2012-08-16 02:55:4259392----a-w-C:\Windows\System32\browcli.dll
    2012-08-16 02:55:42136704----a-w-C:\Windows\System32\browser.dll
    2012-08-16 02:55:4041984----a-w-C:\Windows\SysWow64\browcli.dll
    2012-08-15 15:08:093148800----a-w-C:\Windows\System32\win32k.sys
    2012-08-15 15:08:08956928----a-w-C:\Windows\System32\localspl.dll
    .
    ==================== Find3M ====================
    .
    2012-08-22 17:31:0770344----a-w-C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-08-22 17:31:07426184----a-w-C:\Windows\SysWow64\FlashPlayerApp.exe
    2012-06-29 03:56:342312704----a-w-C:\Windows\System32\jscript9.dll
    2012-06-29 03:49:111392128----a-w-C:\Windows\System32\wininet.dll
    2012-06-29 03:48:071494528----a-w-C:\Windows\System32\inetcpl.cpl
    2012-06-29 03:43:49173056----a-w-C:\Windows\System32\ieUnatt.exe
    2012-06-29 03:39:482382848----a-w-C:\Windows\System32\mshtml.tlb
    2012-06-29 00:16:581800704----a-w-C:\Windows\SysWow64\jscript9.dll
    2012-06-29 00:09:011129472----a-w-C:\Windows\SysWow64\wininet.dll
    2012-06-29 00:08:591427968----a-w-C:\Windows\SysWow64\inetcpl.cpl
    2012-06-29 00:04:43142848----a-w-C:\Windows\SysWow64\ieUnatt.exe
    2012-06-29 00:00:452382848----a-w-C:\Windows\SysWow64\mshtml.tlb
    2012-06-15 15:20:56499712----a-w-C:\Windows\SysWow64\msvcp71.dll
    2012-06-15 15:20:56348160----a-w-C:\Windows\SysWow64\msvcr71.dll
    2012-06-06 12:49:521070152----a-w-C:\Windows\SysWow64\MSCOMCTL.OCX
    2012-06-06 06:06:162004480----a-w-C:\Windows\System32\msxml6.dll
    2012-06-06 06:06:161881600----a-w-C:\Windows\System32\msxml3.dll
    2012-06-06 06:02:541133568----a-w-C:\Windows\System32\cdosys.dll
    2012-06-06 05:05:521390080----a-w-C:\Windows\SysWow64\msxml6.dll
    2012-06-06 05:05:521236992----a-w-C:\Windows\SysWow64\msxml3.dll
    2012-06-06 05:03:06805376----a-w-C:\Windows\SysWow64\cdosys.dll
    .
    ============= FINISH: 19:44:15.14 ===============
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows 7 Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 1/6/2010 11:08:33 AM
    System Uptime: 8/31/2012 6:33:28 PM (1 hours ago)
    .
    Motherboard: LENOVO | | 4058CTO
    Processor: Intel(R) Core(TM)2 Duo CPU T9600 @ 2.80GHz | None | 2801/266mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 287 GiB total, 140.067 GiB free.
    F: is CDROM ()
    Q: is FIXED (NTFS) - 10 GiB total, 2.258 GiB free.
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {53d29ef7-377c-4d14-864b-eb3a85769359}
    Description: AuthenTec Inc. AES2810
    Device ID: USB\VID_08FF&PID_2810\5&231ECBA3&0&1
    Manufacturer: AuthenTec
    Name: AuthenTec Inc. AES2810
    PNP Device ID: USB\VID_08FF&PID_2810\5&231ECBA3&0&1
    Service: ATSwpWDF
    .
    ==== System Restore Points ===================
    .
    RP253: 7/29/2012 2:27:59 PM - Scheduled Checkpoint
    RP254: 8/5/2012 4:02:18 PM - Scheduled Checkpoint
    RP255: 8/16/2012 3:01:04 AM - Windows Update
    RP256: 8/24/2012 9:47:18 AM - Windows Update
    RP257: 8/31/2012 6:28:26 PM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.
    RP258: 8/31/2012 6:35:54 PM - StopZILLA! Restore Point.
    RP259: 8/31/2012 6:59:54 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.
    .
    ==== Installed Programs ======================
    .
    Update for Microsoft Office 2007 (KB2508958)
    "Minimal SYStem 1.0.10"
    µTorrent
    2007 Microsoft Office system
    Access Help
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Reader 9.5.2
    Apple Application Support
    Apple Software Update
    AT&T Service Activation
    Bing Bar
    Business Contact Manager for Outlook 2007 SP2
    C.a.R. Version 9.3
    Catalyst Control Center - Branding
    Catalyst Control Center Core Implementation
    Catalyst Control Center Graphics Full Existing
    Catalyst Control Center Graphics Full New
    Catalyst Control Center Graphics Light
    Catalyst Control Center Graphics Previews Vista
    Catalyst Control Center InstallProxy
    Catalyst Control Center Localization All
    ccc-core-static
    CCC Help Chinese Standard
    CCC Help Chinese Traditional
    CCC Help Dutch
    CCC Help English
    CCC Help French
    CCC Help German
    CCC Help Italian
    CCC Help Japanese
    CCC Help Korean
    CCC Help Portuguese
    CCC Help Spanish
    CCC Help Swedish
    CCleaner
    Civilization III - Gold Edition
    Create Recovery Media
    Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
    DirectX 9 Runtime
    Dropbox
    F.lux
    File Shredder 2.0
    Foxit Reader
    GeoGebra
    Google Chrome
    Google Chrome Frame
    Google Drive
    Google Earth Plug-in
    Google Talk Plugin
    Google Update Helper
    HiJackThis
    Integrated Camera Driver Installer Package Ver.1.32.500.0
    InterVideo WinDVD 8
    IrfanView (remove only)
    Java Auto Updater
    Java(TM) 6 Update 30
    Junk Mail filter update
    Lenovo Welcome
    Malwarebytes Anti-Malware version 1.62.0.1300
    Maple 15
    MATLAB 7.1
    McAfee Agent
    McAfee VirusScan Enterprise
    Message Center Plus
    Microsoft Choice Guard
    Microsoft Office 2003 Web Components
    Microsoft Office 2007 Primary Interop Assemblies
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office 2010 Service Pack 1 (SP1)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access MUI (English) 2010
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2010
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Excel MUI (English) 2010
    Microsoft Office File Validation Add-In
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office Home and Student 2010
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2010
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2010
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2010
    Microsoft Office Professional Hybrid 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (English) 2010
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (French) 2010
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proof (Spanish) 2010
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing (English) 2010
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Publisher MUI (English) 2010
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared MUI (English) 2010
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2010
    Microsoft Office Single Image 2010
    Microsoft Office Small Business Connectivity Components
    Microsoft Office Suite Activation Assistant
    Microsoft Office Word MUI (English) 2007
    Microsoft Office Word MUI (English) 2010
    Microsoft Research AutoCollage Touch 2009
    Microsoft SQL Server 2005
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
    Microsoft SQL Server Setup Support Files (English)
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    MiKTeX 2.8
    MinGW 5.1.6
    Mobile Broadband Connect
    Move Media Player
    Mozilla Firefox 10.0.2 (x86 en-US)
    Mozilla Sunbird (0.9)
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    ParaView-3.8.1 a cross-platform, open-source visualization system
    Pharos
    Programmer's Notepad
    PuTTY version 0.60
    PX Profile Update
    QuickTime
    RealNetworks - Microsoft Visual C++ 2005 Runtime
    RealNetworks - Microsoft Visual C++ 2008 Runtime
    RealPlayer
    RealUpgrade 1.1
    Rescue and Recovery
    RICOH R5U8xx Media Driver ver.3.64.02
    ROOT
    Roxio Activation Module
    Roxio Central Audio
    Roxio Central Copy
    Roxio Central Core
    Roxio Central Data
    Roxio Central Tools
    Roxio Creator Business Edition
    Roxio Express Labeler 3
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition
    Security Update for Microsoft InfoPath 2010 (KB2553322) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596666) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2553091)
    Security Update for Microsoft Office 2010 (KB2553096)
    Security Update for Microsoft Office 2010 (KB2553260) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2589322) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
    Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
    Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)
    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition
    Sonic CinePlayer Decoder Pack
    Sonic Icons for Lenovo
    Strawberry Perl
    System Requirements Lab
    System Update
    ThinkPad Power Manager
    ThinkPad UltraNav Utility
    ThinkVantage Access Connections
    TUGZip 3.5
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office 2010 (KB2553065)
    Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2566458)
    Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2598289) 32-Bit Edition
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Outlook 2007 (KB2596598) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687400) 32-Bit Edition
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
    Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition
    Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition
    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
    Verizon Wireless Mobile Broadband Self Activation
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Mail
    Windows Live Messenger
    Windows Live Movie Maker
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Upload Tool
    Windows Live Writer
    WinMerge 2.12.4
    WinPcap 4.1.1
    WinSCP 4.2.5
    X-Win32 9.5
    xyscan 3.3.0
    .
    ==== Event Viewer Messages From Past Week ========
    .
    8/31/2012 6:36:54 PM, Error: Service Control Manager [7034] - The MATLAB Server service terminated unexpectedly. It has done this 1 time(s).
    8/31/2012 6:33:45 PM, Error: amdkmdag [52236] - CPLIB :: General - Invalid Parameter
    8/31/2012 6:33:45 PM, Error: amdkmdag [43029] - Display is not active
    8/31/2012 6:04:53 PM, Error: Service Control Manager [7034] - The Data Transfer Service service terminated unexpectedly. It has done this 1 time(s).
    8/31/2012 5:19:31 PM, Error: Service Control Manager [7016] - The Data Transfer Service service has reported an invalid current state 0.
    8/31/2012 4:58:45 PM, Error: Microsoft-Windows-Smartcard-Server [616] - Reader monitor 'Lenovo Integrated Smart Card Reader 0' received uncaught error code: Access is denied.
    8/31/2012 4:58:45 PM, Error: Microsoft-Windows-Smartcard-Server [615] - Reader removal monitor error retry threshold reached: Access is denied.
    .
    ==== End Of File ===========================
    person15, Aug 31, 2012
    #4

  5. Broni Malware Annihilator Posts: 39,313   +175

    Welcome aboard [IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    =======================================

    Which browser is affected?

    • Download RogueKiller on the desktop
    • Close all the running programs
    • Windows Vista/7 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • A report (RKreport.txt) should open. Post its content in your next reply. (RKreport could also be found on your desktop)
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    ==================================

    Download aswMBR to your desktop.
    Double click the aswMBR.exe to run it.
    If you see this question: Would you like to download latest Avast! virus definitions?" say "Yes".
    Click the "Scan" button to start scan.
    On completion of the scan click "Save log", save it to your desktop and post in your next reply.

    NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.
    Broni, Aug 31, 2012
    #5

  6. person15 Newcomer, in training Posts: 55

    Thanks a lot for responding. Just to let you know, all three browsers on my computer (IE, Firefox, and Chrome) are affected. The issue happens every two or three clicks: if I am redirected to a page, I can click "back" and click again and get to the right page.

    I tried running RogueKiller (and a bunch of things popped up on the list), but when it gets to the "Running MBR..." stage, I get a Windows popup dialogue that says that RogueKiller has stopped working and needs to close. This happened multiple times -- even when I run as an administrator. There is a "debug" file under an RK_Quarantine folder. Should I post that?
    person15, Sep 1, 2012
    #6
     

  7. Broni Malware Annihilator Posts: 39,313   +175

    Try this instead...

    Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    If normal mode still doesn't work, run the tool from safe mode.

    When the scan is done Notepad will open with rKill log.
    Post it in your next reply.

    NOTE. rKill.txt log will also be present on your desktop.
    Broni, Sep 1, 2012
    #7

  8. person15 Newcomer, in training Posts: 55

    Hi,

    Here is the log from rKill. Thanks for your help, again.

    Rkill 2.3.3 by Lawrence Abrams (Grinler)
    http://www.bleepingcomputer.com/
    Copyright 2008-2012 BleepingComputer.com
    More Information about Rkill can be found at this link:
    http://www.bleepingcomputer.com/forums/topic308364.html

    Program started at: 09/01/2012 09:49:54 PM in x64 mode.
    Windows Version: Windows 7 Professional Service Pack 1

    Checking for Windows services to stop.

    * No malware services found to stop.

    Checking for processes to terminate.

    * C:\Windows\system32\DTS.exe (PID: 960) [WD-HEUR]
    * C:\Users\Vivek\Local Settings\Apps\F.lux\flux.exe (PID: 3376) [UP-HEUR]

    2 proccesses terminated!

    Checking Registry for malware related settings.

    * No issues found in the Registry.

    Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
    * HKLM\Software\Classes\.exe\shell found and deleted!

    * HKCU\SOFTWARE\Classes\.exe "@" exists and is set to exefile!
    * HKCU\SOFTWARE\Classes\.exe has been deleted!
    * HKCU\SOFTWARE\Classes\exefile has been deleted!


    Performing miscellaneous checks.

    * Windows Defender Disabled

    [HKLM\SOFTWARE\Microsoft\Windows Defender]
    "DisableAntiSpyware" = dword:00000001

    Checking Windows Service Integrity:

    * WinDefend [Missing Service]
    * wscsvc [Missing Service]

    * atapi => \SystemRoot\system32\drivers\atapi.sys [Incorrect ImagePath]
    * pcmcia => system32\DRIVERS\pcmcia.sys [Incorrect ImagePath]

    Searching for Missing Digital Signatures:

    * No issues found.

    Program finished at: 09/01/2012 09:50:11 PM
    Execution time: 0 hours(s), 0 minute(s), and 16 seconds(s)
    person15, Sep 1, 2012
    #8

  9. Broni Malware Annihilator Posts: 39,313   +175

    That looks fine.

    Try aswMBR now.
    Broni, Sep 1, 2012
    #9

  10. person15 Newcomer, in training Posts: 55

    Here's the aswMBR log. Just to let you know, I ran this in administrator mode too (although it wasn't in the directions). Please let me know if that's an issue.

    aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
    Run date: 2012-09-01 23:02:04
    -----------------------------
    23:02:04.692 OS Version: Windows x64 6.1.7601 Service Pack 1
    23:02:04.692 Number of processors: 2 586 0x170A
    23:02:04.693 ComputerName: VIVEKW500 UserName: Vivek
    23:02:07.268 Initialize success
    23:02:12.835 AVAST engine defs: 12083102
    23:02:16.328 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
    23:02:16.330 Disk 0 Vendor: Size: 0MB BusType: 0
    23:02:16.332 Disk 1 \Device\Harddisk1\DR1 -> \Device\RobsonImd-0
    23:02:16.335 Disk 1 Vendor: Size: 1405MB BusType: 0
    23:02:16.350 Disk 0 MBR read successfully
    23:02:16.352 Disk 0 MBR scan
    23:02:16.361 Disk 0 unknown MBR code
    23:02:16.364 Disk 0 MBR hidden
    23:02:16.368 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 1200 MB offset 2048
    23:02:16.378 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 294042 MB offset 2459648
    23:02:16.416 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 10000 MB offset 604659712
    23:02:16.444 Disk 0 scanning C:\Windows\system32\drivers
    23:02:40.242 Service scanning
    23:03:17.297 Modules scanning
    23:03:17.518 Disk 0 trace - called modules:
    23:03:17.546 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys iaNvStor.sys hal.dll
    23:03:17.551 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007570060]
    23:03:17.557 3 CLASSPNP.SYS[fffff8800188b43f] -> nt!IofCallDriver -> [0xfffffa80042517e0]
    23:03:17.567 5 ACPI.sys[fffff88000ee27a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004c0a050]
    23:03:22.163 AVAST engine scan C:\Windows
    23:03:33.670 AVAST engine scan C:\Windows\system32
    23:09:33.640 AVAST engine scan C:\Windows\system32\drivers
    23:09:51.250 AVAST engine scan C:\Users\Vivek
    23:38:39.574 AVAST engine scan C:\ProgramData
    23:42:46.762 Scan finished successfully
    00:04:37.431 Disk 0 MBR has been saved successfully to "C:\Users\Vivek\Desktop\MBR.dat"
    00:04:37.476 The log file has been saved successfully to "C:\Users\Vivek\Desktop\aswMBR.txt"
    person15, Sep 2, 2012
    #10

  11. Broni Malware Annihilator Posts: 39,313   +175

    Please download ComboFix from Here, Here or Here to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    • Never rename Combofix unless instructed.
    • Close any open browsers.
    • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
    • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
    • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
    • Close any open browsers.
    • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
    • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
    • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    • Double click on combofix.exe & follow the prompts.

    • NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
    • When finished, it will produce a report for you.
    • Please post the "C:\ComboFix.txt"
    **Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
    **Note 2 for AVG and CA Internet Security (Total Defense Internet Security) users: ComboFix will not run until AVG/CA Internet Security is uninstalled as a protective measure against the anti-virus. This is because AVG/CA Internet Security "falsely" detects ComboFix (or its embedded files) as a threat and may remove them resulting in the tool not working correctly which in turn can cause "unpredictable results". Since AVG/CA Internet Security cannot be effectively disabled before running ComboFix, the author recommends you to uninstall AVG/CA Internet Security first.
    Use AppRemover to uninstall it: http://www.appremover.com/
    We can reinstall it when we're done with CF.
    **Note 3: If you receive an error "Illegal operation attempted on a registery key that has been marked for deletion", restart computer to fix the issue.
    **Note 4: Some infections may take some significant time to be cured. As long as your computer clock is running Combofix is still working. Be patient.


    Make sure, you re-enable your security programs, when you're done with Combofix.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    NOTE.
    If, for some reason, Combofix refuses to run, try the following...

    Delete Combofix file, download fresh one, but rename combofix.exe to your_name.exe BEFORE saving it to your desktop.
    Do NOT run it yet.
    Download Rkill (courtesy of BleepingComputer.com) to your desktop.
    There are 2 different versions. If one of them won't run then download and try to run the other one.
    You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.

    rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/
    iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/

    Restart computer in safe mode

    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista or Windows 7 right-click on it and choose Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • Do not reboot until instructed.
    • If the tool does not run from any of the links provided, please let me know.

    When the scan is done Notepad will open with rKill.txt log.
    NOTE. rKill.txt log will also be present on your desktop.

    Once you've gotten one of them to run, immediately run your_name.exe by double clicking on it.

    IF you had to run rKill post BOTH logs, rKill.txt and Combofix.txt.
    Broni, Sep 2, 2012
    #11

  12. person15 Newcomer, in training Posts: 55

    Hi,

    I just ran ComboFix and had to restart after it finished since I was getting an "Illegal operation attempted on a registry key that has been market for deletion" error. I've pasted the log below. Unfortunately, the symptoms still exist.

    ComboFix 12-09-01.01 - Vivek 09/02/2012 23:23:35.2.2 - x64
    Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3992.1767 [GMT -4:00]
    Running from: c:\users\Vivek\Desktop\ComboFix.exe
    AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
    SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Created a new restore point
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files (x86)\LP
    c:\programdata\774335p0e210t008t785a0hmt7c3
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\_ctypes.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\_elementtree.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\_hashlib.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\_socket.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\_ssl.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\pyexpat.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\pysqlite2._sqlite.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\python26.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\pythoncom26.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\PyWinTypes26.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\select.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\unicodedata.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32api.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32com.shell.shell.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32crypt.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32event.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32file.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32inet.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32pdh.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\win32process.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\windows._cacheinvalidation.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._controls_.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._core_.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._gdi_.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._html2.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._misc_.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._windows_.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wx._wizard.pyd
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxbase293u_net_vc.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxbase293u_vc.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxmsw293u_adv_vc.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxmsw293u_core_vc.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxmsw293u_html_vc.dll
    c:\users\Vivek\AppData\Local\Temp\_MEI45882\wxmsw293u_webview_vc.dll
    c:\users\Vivek\AppData\Roaming\Mozilla\Firefox\Profiles\o4wix96c.default\searchplugins\bing-zugo.xml
    c:\users\Vivek\Taskmgr.exe
    c:\windows\SysWow64\FlashPlayerInstaller.exe
    .
    .
    ((((((((((((((((((((((((( Files Created from 2012-08-03 to 2012-09-03 )))))))))))))))))))))))))))))))
    .
    .
    2012-09-03 03:39 . 2012-09-03 03:39--------d-----w-c:\users\Public\AppData\Local\temp
    2012-09-03 03:39 . 2012-09-03 03:39--------d-----w-c:\users\Default\AppData\Local\temp
    2012-09-01 04:10 . 2012-09-01 04:10--------d-----w-c:\users\Vivek\AppData\Local\Macromedia
    2012-08-31 23:01 . 2012-07-03 17:4624904----a-w-c:\windows\system32\drivers\mbam.sys
    2012-08-31 21:12 . 2012-08-31 23:01--------d-----w-c:\program files (x86)\Malwarebytes' Anti-Malware
    2012-08-24 19:36 . 2012-08-24 19:36342528----a-w-c:\windows\system32\Spool\prtprocs\x64\hpcpp115.dll
    2012-08-16 07:08 . 2012-07-06 20:07552960----a-w-c:\windows\system32\drivers\bthport.sys
    2012-08-16 02:56 . 2012-02-11 06:43751104----a-w-c:\windows\system32\win32spl.dll
    2012-08-16 02:56 . 2012-02-11 06:36559104----a-w-c:\windows\system32\spoolsv.exe
    2012-08-16 02:56 . 2012-02-11 05:43492032----a-w-c:\windows\SysWow64\win32spl.dll
    2012-08-16 02:56 . 2012-02-11 06:3667072----a-w-c:\windows\splwow64.exe
    2012-08-16 02:55 . 2012-05-05 08:36503808----a-w-c:\windows\system32\srcore.dll
    2012-08-16 02:55 . 2012-05-05 07:4643008----a-w-c:\windows\SysWow64\srclient.dll
    2012-08-16 02:55 . 2012-07-04 22:1359392----a-w-c:\windows\system32\browcli.dll
    2012-08-16 02:55 . 2012-07-04 22:13136704----a-w-c:\windows\system32\browser.dll
    2012-08-16 02:55 . 2012-07-04 22:1673216----a-w-c:\windows\system32\netapi32.dll
    2012-08-16 02:55 . 2012-07-04 21:1441984----a-w-c:\windows\SysWow64\browcli.dll
    2012-08-15 15:08 . 2012-07-18 18:153148800----a-w-c:\windows\system32\win32k.sys
    2012-08-15 15:08 . 2012-05-14 05:26956928----a-w-c:\windows\system32\localspl.dll
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-08-22 17:31 . 2012-06-28 04:49426184----a-w-c:\windows\SysWow64\FlashPlayerApp.exe
    2012-08-22 17:31 . 2011-05-27 15:1170344----a-w-c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-08-16 07:01 . 2010-01-08 17:0862134624----a-w-c:\windows\system32\MRT.exe
    2012-06-15 15:20 . 2011-11-02 19:50499712----a-w-c:\windows\SysWow64\msvcp71.dll
    2012-06-15 15:20 . 2011-11-02 19:50348160----a-w-c:\windows\SysWow64\msvcr71.dll
    2012-06-09 05:43 . 2012-07-11 15:1914172672----a-w-c:\windows\system32\shell32.dll
    2012-06-06 12:49 . 2012-06-06 12:491070152----a-w-c:\windows\SysWow64\MSCOMCTL.OCX
    2012-06-06 06:06 . 2012-07-11 15:192004480----a-w-c:\windows\system32\msxml6.dll
    2012-06-06 06:06 . 2012-07-11 15:191881600----a-w-c:\windows\system32\msxml3.dll
    2012-06-06 06:02 . 2012-07-11 15:191133568----a-w-c:\windows\system32\cdosys.dll
    2012-06-06 05:05 . 2012-07-11 15:191390080----a-w-c:\windows\SysWow64\msxml6.dll
    2012-06-06 05:05 . 2012-07-11 15:191236992----a-w-c:\windows\SysWow64\msxml3.dll
    2012-06-06 05:03 . 2012-07-11 15:19805376----a-w-c:\windows\SysWow64\cdosys.dll
    .
    .
    ((((((((((((((((((((((((((((( SnapShot@2011-09-30_01.06.15 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2011-07-01 01:38 . 2010-11-20 12:2151200 c:\windows\twain_32.dll
    - 2009-07-14 00:14 . 2009-07-14 01:1651200 c:\windows\twain_32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2127648 c:\windows\SysWOW64\wups.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2187552 c:\windows\SysWOW64\wudriver.dll
    - 2009-07-14 00:14 . 2009-07-14 01:1687552 c:\windows\SysWOW64\wudriver.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1733792 c:\windows\SysWOW64\wuapp.exe
    - 2009-07-14 00:14 . 2009-07-14 01:1433792 c:\windows\SysWOW64\wuapp.exe
    + 2011-07-01 01:38 . 2010-11-20 12:2140448 c:\windows\SysWOW64\wtsapi32.dll
    - 2009-07-13 23:55 . 2009-07-14 01:1651712 c:\windows\SysWOW64\wsnmp32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2151712 c:\windows\SysWOW64\wsnmp32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2111264 c:\windows\SysWOW64\wshirda.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2136352 c:\windows\SysWOW64\wshbth.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2121504 c:\windows\SysWOW64\wsdchngr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2151712 c:\windows\SysWOW64\wscapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2147104 c:\windows\SysWOW64\wkscli.dll
    - 2009-07-13 23:37 . 2009-07-14 01:1647104 c:\windows\SysWOW64\wkscli.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1728672 c:\windows\SysWOW64\WerFaultSecure.exe
    - 2009-07-13 23:27 . 2009-07-14 01:1428672 c:\windows\SysWOW64\WerFaultSecure.exe
    - 2009-07-13 23:31 . 2009-07-14 01:1689600 c:\windows\SysWOW64\wbem\WmiApRpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2189600 c:\windows\SysWOW64\wbem\WmiApRpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1766048 c:\windows\SysWOW64\w32tm.exe
    + 2011-07-01 01:38 . 2010-11-20 12:2125600 c:\windows\SysWOW64\vpnikeapi.dll
    - 2009-07-14 00:03 . 2009-07-14 01:1656832 c:\windows\SysWOW64\vfwwdm32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2156832 c:\windows\SysWOW64\vfwwdm32.dll
    + 2010-02-18 01:42 . 2010-02-18 01:4251584 c:\windows\SysWOW64\VBAME.DLL
    - 2009-07-14 00:02 . 2009-07-14 01:1631744 c:\windows\SysWOW64\utildll.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2131744 c:\windows\SysWOW64\utildll.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1726624 c:\windows\SysWOW64\userinit.exe
    + 2011-07-01 01:40 . 2010-11-20 12:2181920 c:\windows\SysWOW64\userenv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2178848 c:\windows\SysWOW64\UserAccountControlSettings.dll
    - 2009-07-13 23:40 . 2009-07-14 01:1678848 c:\windows\SysWOW64\UserAccountControlSettings.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1734304 c:\windows\SysWOW64\unlodctr.exe
    + 2011-07-01 01:38 . 2010-11-20 12:2159392 c:\windows\SysWOW64\unimdmat.dll
    - 2009-07-13 23:55 . 2009-07-14 01:1659392 c:\windows\SysWOW64\unimdmat.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1747616 c:\windows\SysWOW64\tzutil.exe
    - 2009-07-13 23:15 . 2009-07-14 01:1447616 c:\windows\SysWOW64\tzutil.exe
    - 2009-07-13 23:34 . 2009-07-14 01:1665024 c:\windows\SysWOW64\TSpkg.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2165024 c:\windows\SysWOW64\TSpkg.dll
    - 2009-07-14 00:02 . 2009-07-14 01:1636864 c:\windows\SysWOW64\tsgqec.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2136864 c:\windows\SysWOW64\tsgqec.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2112288 c:\windows\SysWOW64\tsbyuv.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0212288 c:\windows\SysWOW64\tsbyuv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2121504 c:\windows\SysWOW64\TRAPI.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2169632 c:\windows\SysWOW64\tlscsp.dll
    - 2009-07-13 23:40 . 2009-07-14 01:1682944 c:\windows\SysWOW64\thumbcache.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2182944 c:\windows\SysWOW64\thumbcache.dll
    + 2011-07-01 01:40 . 2009-07-14 01:1661440 c:\windows\SysWOW64\tcpmonui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1751200 c:\windows\SysWOW64\takeown.exe
    + 2011-07-01 01:38 . 2010-11-20 12:2114848 c:\windows\SysWOW64\syssetup.dll
    + 2012-07-11 15:19 . 2012-06-02 04:3496768 c:\windows\SysWOW64\sspicli.dll
    - 2010-04-28 14:41 . 2009-12-11 07:3696768 c:\windows\SysWOW64\sspicli.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2190112 c:\windows\SysWOW64\srvcli.dll
    - 2009-07-13 23:37 . 2009-07-14 01:1690112 c:\windows\SysWOW64\srvcli.dll
    - 2009-07-13 23:17 . 2009-07-14 01:1619968 c:\windows\SysWOW64\spopk.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2119968 c:\windows\SysWOW64\spopk.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2161952 c:\windows\SysWOW64\spbcd.dll
    - 2009-07-13 23:17 . 2009-07-14 01:1661952 c:\windows\SysWOW64\spbcd.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2114336 c:\windows\SysWOW64\slwga.dll
    - 2011-02-09 15:47 . 2010-12-21 05:3814336 c:\windows\SysWOW64\slwga.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2119456 c:\windows\SysWOW64\sisbkup.dll
    - 2009-07-13 23:14 . 2009-07-14 01:1619456 c:\windows\SysWOW64\sisbkup.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2110752 c:\windows\SysWOW64\shunimpl.dll
    - 2009-07-13 23:39 . 2009-07-14 01:1635840 c:\windows\SysWOW64\shimgvw.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2135840 c:\windows\SysWOW64\shimgvw.dll
    - 2009-07-13 23:40 . 2009-07-14 01:1620992 c:\windows\SysWOW64\shgina.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2120992 c:\windows\SysWOW64\shgina.dll
    + 2011-08-10 16:05 . 2011-07-16 04:2525600 c:\windows\SysWOW64\setup16.exe
    - 2011-08-10 16:05 . 2011-07-16 04:3125600 c:\windows\SysWOW64\setup16.exe
    + 2011-07-01 01:40 . 2010-11-20 12:2067584 c:\windows\SysWOW64\Setup\pbkmigr.dll
    + 2012-07-11 15:19 . 2012-06-02 04:4022016 c:\windows\SysWOW64\secur32.dll
    - 2010-04-28 14:41 . 2009-12-11 07:3922016 c:\windows\SysWOW64\secur32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2185504 c:\windows\SysWOW64\secproc_ssp_isv.dll
    - 2010-02-10 17:00 . 2010-01-18 23:2985504 c:\windows\SysWOW64\secproc_ssp_isv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2185504 c:\windows\SysWOW64\secproc_ssp.dll
    - 2010-02-10 17:00 . 2010-01-18 23:2985504 c:\windows\SysWOW64\secproc_ssp.dll
    + 2011-06-29 02:09 . 2011-05-04 04:2886528 c:\windows\SysWOW64\SearchFilterHost.exe
    - 2011-06-29 02:09 . 2011-05-04 04:5286528 c:\windows\SysWOW64\SearchFilterHost.exe
    - 2009-07-13 23:37 . 2009-07-14 01:1617408 c:\windows\SysWOW64\schedcli.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2117408 c:\windows\SysWOW64\schedcli.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2151200 c:\windows\SysWOW64\samcli.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1750688 c:\windows\SysWOW64\runonce.exe
    - 2009-07-13 23:41 . 2009-07-14 01:1450688 c:\windows\SysWOW64\runonce.exe
    - 2010-08-11 16:21 . 2010-06-19 06:2337376 c:\windows\SysWOW64\rtutils.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2137376 c:\windows\SysWOW64\rtutils.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2146080 c:\windows\SysWOW64\RpcRtRemote.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1798816 c:\windows\SysWOW64\Robocopy.exe
    - 2009-07-13 23:21 . 2009-07-14 01:1671168 c:\windows\SysWOW64\resutils.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2171168 c:\windows\SysWOW64\resutils.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1737888 c:\windows\SysWOW64\relog.exe
    + 2011-07-01 01:39 . 2010-11-20 12:2172192 c:\windows\SysWOW64\regapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1722016 c:\windows\SysWOW64\ReAgentc.exe
    + 2011-07-01 01:38 . 2010-11-20 12:2121504 c:\windows\SysWOW64\rdprefdrvapi.dll
    - 2009-07-14 00:01 . 2009-07-14 01:1621504 c:\windows\SysWOW64\rdprefdrvapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2152224 c:\windows\SysWOW64\rdpd3d.dll
    - 2009-07-14 00:02 . 2009-07-14 01:1652224 c:\windows\SysWOW64\rdpd3d.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2169632 c:\windows\SysWOW64\rastapi.dll
    - 2009-07-13 23:54 . 2009-07-14 01:1669632 c:\windows\SysWOW64\rastapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2180896 c:\windows\SysWOW64\QUTIL.DLL
    - 2009-07-13 23:52 . 2009-07-14 01:1680896 c:\windows\SysWOW64\QUTIL.DLL
    - 2009-07-13 23:52 . 2009-07-14 01:1699328 c:\windows\SysWOW64\QSVRMGMT.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:2099328 c:\windows\SysWOW64\QSVRMGMT.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:2071680 c:\windows\SysWOW64\QCLIPROV.DLL
    - 2009-07-13 23:52 . 2009-07-14 01:1671680 c:\windows\SysWOW64\QCLIPROV.DLL
    + 2011-07-01 01:40 . 2010-11-20 12:1751200 c:\windows\SysWOW64\PushPrinterConnections.exe
    + 2011-07-01 01:39 . 2010-11-20 12:1728672 c:\windows\SysWOW64\proquota.exe
    + 2011-04-27 22:11 . 2011-02-18 05:3931232 c:\windows\SysWOW64\prevhost.exe
    - 2011-04-27 22:11 . 2011-02-18 05:3331232 c:\windows\SysWOW64\prevhost.exe
    - 2010-06-24 14:34 . 2009-11-25 16:4799176 c:\windows\SysWOW64\PresentationHostProxy.dll
    + 2011-07-01 01:40 . 2010-11-05 01:5399176 c:\windows\SysWOW64\PresentationHostProxy.dll
    + 2011-07-01 01:38 . 2010-11-20 12:0535328 c:\windows\SysWOW64\pifmgr.dll
    - 2009-07-14 00:02 . 2009-07-14 01:1617408 c:\windows\SysWOW64\perfts.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2017408 c:\windows\SysWOW64\perfts.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2046592 c:\windows\SysWOW64\pdhui.dll
    + 2012-01-11 14:42 . 2011-11-19 14:0167072 c:\windows\SysWOW64\packager.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2077824 c:\windows\SysWOW64\olethk32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2090112 c:\windows\SysWOW64\olepro32.dll
    - 2009-07-13 23:43 . 2009-07-14 01:1690112 c:\windows\SysWOW64\olepro32.dll
    + 2011-08-10 16:05 . 2011-06-15 08:5586016 c:\windows\SysWOW64\odbccu32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:0486016 c:\windows\SysWOW64\odbccu32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:0481920 c:\windows\SysWOW64\odbccr32.dll
    + 2011-08-10 16:05 . 2011-06-15 08:5581920 c:\windows\SysWOW64\odbccr32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2040960 c:\windows\SysWOW64\odbcconf.dll
    - 2009-07-14 00:12 . 2009-07-14 01:1640960 c:\windows\SysWOW64\odbcconf.dll
    + 2011-08-10 16:05 . 2011-07-16 04:2914336 c:\windows\SysWOW64\ntvdm64.dll
    - 2011-08-10 16:05 . 2011-07-16 04:3614336 c:\windows\SysWOW64\ntvdm64.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2069120 c:\windows\SysWOW64\ntlanman.dll
    - 2009-07-13 23:31 . 2009-07-14 01:1669120 c:\windows\SysWOW64\ntlanman.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1798304 c:\windows\SysWOW64\nslookup.exe
    + 2011-07-01 01:38 . 2010-11-20 12:0669120 c:\windows\SysWOW64\nlsbres.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2052224 c:\windows\SysWOW64\nlaapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2022528 c:\windows\SysWOW64\netutils.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1725600 c:\windows\SysWOW64\netiougc.exe
    + 2011-07-01 01:40 . 2010-11-05 01:5849488 c:\windows\SysWOW64\netfxperf.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1724064 c:\windows\SysWOW64\netbtugc.exe
    - 2009-07-13 23:53 . 2009-07-14 01:1424064 c:\windows\SysWOW64\netbtugc.exe
    + 2012-08-16 02:55 . 2012-07-04 21:1657344 c:\windows\SysWOW64\netapi32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2060928 c:\windows\SysWOW64\ncryptui.dll
    - 2009-07-13 23:32 . 2009-07-14 01:1660928 c:\windows\SysWOW64\ncryptui.dll
    + 2011-07-01 01:39 . 2010-11-20 12:2078848 c:\windows\SysWOW64\nci.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2068096 c:\windows\SysWOW64\napdsnap.dll
    - 2009-07-13 23:53 . 2009-07-14 01:2246080 c:\windows\SysWOW64\NAPCRYPT.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:3646080 c:\windows\SysWOW64\NAPCRYPT.DLL
    - 2009-07-13 23:13 . 2009-07-14 01:1470656 c:\windows\SysWOW64\MuiUnattend.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1770656 c:\windows\SysWOW64\MuiUnattend.exe
    - 2009-07-13 23:25 . 2009-07-14 01:1513312 c:\windows\SysWOW64\muifontsetup.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1913312 c:\windows\SysWOW64\muifontsetup.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5811600 c:\windows\SysWOW64\MUI\0409\mscorees.dll
    - 2010-06-24 14:34 . 2009-11-25 16:4711600 c:\windows\SysWOW64\MUI\0409\mscorees.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1922528 c:\windows\SysWOW64\msyuv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1931744 c:\windows\SysWOW64\msvidc32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0231744 c:\windows\SysWOW64\msvidc32.dll
    - 2011-06-29 02:09 . 2011-05-04 04:5259392 c:\windows\SysWOW64\msscntrs.dll
    + 2011-06-29 02:09 . 2011-05-04 04:3259392 c:\windows\SysWOW64\msscntrs.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0213312 c:\windows\SysWOW64\msrle32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1913312 c:\windows\SysWOW64\msrle32.dll
    - 2009-07-13 23:31 . 2009-07-14 01:1473216 c:\windows\SysWOW64\msiexec.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1773216 c:\windows\SysWOW64\msiexec.exe
    + 2012-08-16 07:06 . 2012-06-29 00:0173216 c:\windows\SysWOW64\mshtmled.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1930720 c:\windows\SysWOW64\msdmo.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2380720 c:\windows\SysWOW64\mscories.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5880720 c:\windows\SysWOW64\mscories.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1934304 c:\windows\SysWOW64\msasn1.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1942496 c:\windows\SysWOW64\mimefilt.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2190112 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-shmig\shmig.dll
    - 2009-07-13 23:42 . 2009-07-14 01:1690112 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-shmig\shmig.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2190112 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
    - 2009-07-13 23:42 . 2009-07-14 01:1690112 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
    + 2011-07-01 01:40 . 2010-11-20 12:2167584 c:\windows\SysWOW64\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin\pbkmigr-Mig.dll
    + 2012-08-16 07:06 . 2012-06-29 00:0666048 c:\windows\SysWOW64\migration\WininetPlugin.dll
    - 2011-08-12 15:07 . 2011-07-22 02:4666048 c:\windows\SysWOW64\migration\WininetPlugin.dll
    + 2011-07-01 01:38 . 2010-11-20 12:2190112 c:\windows\SysWOW64\migration\shmig.dll
    - 2009-07-13 23:41 . 2009-07-14 01:1690112 c:\windows\SysWOW64\migration\shmig.dll
    + 2011-10-10 23:04 . 2011-10-10 23:5874848 c:\windows\SysWOW64\MfeOtlkAddin.dll
    + 2011-10-10 23:04 . 2011-10-10 23:5822816 c:\windows\SysWOW64\MFEOtlk.dll
    - 2009-07-14 00:03 . 2009-07-14 01:1536352 c:\windows\SysWOW64\mciqtz32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1936352 c:\windows\SysWOW64\mciqtz32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0284480 c:\windows\SysWOW64\mciavi32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1984480 c:\windows\SysWOW64\mciavi32.dll
    - 2009-07-14 00:12 . 2009-07-14 01:1576800 c:\windows\SysWOW64\mapistub.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1976800 c:\windows\SysWOW64\mapistub.dll
    - 2009-07-14 00:12 . 2009-07-14 01:1576800 c:\windows\SysWOW64\mapi32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1976800 c:\windows\SysWOW64\mapi32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1941984 c:\windows\SysWOW64\luainstall.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1921504 c:\windows\SysWOW64\lsmproxy.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1782944 c:\windows\SysWOW64\logman.exe
    - 2009-07-14 00:08 . 2009-07-14 01:1495232 c:\windows\SysWOW64\logagent.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1795232 c:\windows\SysWOW64\logagent.exe
    + 2012-08-16 07:06 . 2012-06-29 00:0665024 c:\windows\SysWOW64\jsproxy.dll
    - 2011-08-12 15:07 . 2011-07-22 02:4665024 c:\windows\SysWOW64\jsproxy.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0250176 c:\windows\SysWOW64\iyuv_32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1950176 c:\windows\SysWOW64\iyuv_32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1786528 c:\windows\SysWOW64\isoburn.exe
    - 2009-07-13 23:40 . 2009-07-14 01:1486528 c:\windows\SysWOW64\isoburn.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1928672 c:\windows\SysWOW64\iscsium.dll
    - 2009-07-13 23:46 . 2009-07-14 01:1528672 c:\windows\SysWOW64\iscsium.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1952736 c:\windows\SysWOW64\inetmib1.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1790112 c:\windows\SysWOW64\IME\IMESC5\IMSCPROP.exe
    - 2009-07-13 23:26 . 2009-07-14 01:1490112 c:\windows\SysWOW64\IME\IMESC5\IMSCPROP.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1982944 c:\windows\SysWOW64\iccvid.dll
    - 2010-08-11 16:21 . 2010-07-29 06:3082944 c:\windows\SysWOW64\iccvid.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1978848 c:\windows\SysWOW64\iasacct.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1934816 c:\windows\SysWOW64\httpapi.dll
    - 2009-07-13 23:12 . 2009-07-14 01:1534816 c:\windows\SysWOW64\httpapi.dll
    + 2011-04-13 20:07 . 2011-04-13 20:0739424 c:\windows\SysWOW64\HPZipr12.dll
    + 2011-04-13 20:07 . 2011-04-13 20:0754784 c:\windows\SysWOW64\HPZidr12.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1966560 c:\windows\SysWOW64\hbaapi.dll
    - 2009-07-13 23:55 . 2009-07-14 01:1442496 c:\windows\SysWOW64\ftp.exe
    + 2011-07-01 01:39 . 2010-11-20 12:1742496 c:\windows\SysWOW64\ftp.exe
    - 2011-04-27 22:11 . 2011-03-11 05:3774240 c:\windows\SysWOW64\fsutil.exe
    + 2011-04-27 22:11 . 2011-03-11 05:3174240 c:\windows\SysWOW64\fsutil.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1998304 c:\windows\SysWOW64\fphc.dll
    - 2010-01-13 16:31 . 2009-10-19 14:1070656 c:\windows\SysWOW64\fontsub.dll
    + 2011-02-09 15:47 . 2010-09-30 06:4770656 c:\windows\SysWOW64\fontsub.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1993696 c:\windows\SysWOW64\fms.dll
    - 2009-07-13 23:25 . 2009-07-14 01:1593696 c:\windows\SysWOW64\fms.dll
    + 2010-02-20 21:20 . 2010-02-20 21:2031616 c:\windows\SysWOW64\FM20ENU.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:1762976 c:\windows\SysWOW64\findstr.exe
    + 2011-07-01 01:39 . 2010-11-20 12:1959904 c:\windows\SysWOW64\fdeploy.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1969632 c:\windows\SysWOW64\en\AuthFWWizFwk.Resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:1169632 c:\windows\SysWOW64\en\AuthFWWizFwk.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1822528 c:\windows\SysWOW64\elsTrans.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1894208 c:\windows\SysWOW64\eappgnui.dll
    - 2009-07-13 23:56 . 2009-07-14 01:1594208 c:\windows\SysWOW64\eappgnui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1830208 c:\windows\SysWOW64\dsauth.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1882432 c:\windows\SysWOW64\dot3cfg.dll
    + 2011-07-01 01:40 . 2010-11-20 12:1891136 c:\windows\SysWOW64\dot3api.dll
    + 2011-08-31 03:05 . 2011-08-31 03:0573064 c:\windows\SysWOW64\dnssd.dll
    - 2011-07-12 15:20 . 2011-07-12 15:2073064 c:\windows\SysWOW64\dnssd.dll
    - 2011-04-14 18:51 . 2011-03-03 05:2728672 c:\windows\SysWOW64\dnscacheugc.exe
    + 2011-04-14 18:51 . 2011-03-03 05:3628672 c:\windows\SysWOW64\dnscacheugc.exe
    + 2011-08-31 03:05 . 2011-08-31 03:0583816 c:\windows\SysWOW64\dns-sd.exe
    - 2011-07-12 15:20 . 2011-07-12 15:2083816 c:\windows\SysWOW64\dns-sd.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1989600 c:\windows\SysWOW64\Dism\LogProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:1589600 c:\windows\SysWOW64\Dism\LogProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:1549152 c:\windows\SysWOW64\Dism\FolderProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1949152 c:\windows\SysWOW64\Dism\FolderProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:1482944 c:\windows\SysWOW64\Dism\DismHost.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1782944 c:\windows\SysWOW64\Dism\DismHost.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1850688 c:\windows\SysWOW64\Dism\DismCorePS.dll
    + 2011-06-29 02:09 . 2011-05-24 10:4044544 c:\windows\SysWOW64\devrtl.dll
    - 2011-06-29 02:09 . 2011-05-24 10:3444544 c:\windows\SysWOW64\devrtl.dll
    - 2011-06-29 02:09 . 2011-05-24 10:3464512 c:\windows\SysWOW64\devobj.dll
    + 2011-06-29 02:09 . 2011-05-24 10:4064512 c:\windows\SysWOW64\devobj.dll
    - 2011-02-09 15:47 . 2010-12-21 05:3480384 c:\windows\SysWOW64\davclnt.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1880384 c:\windows\SysWOW64\davclnt.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1823040 c:\windows\SysWOW64\cscdll.dll
    - 2009-07-13 23:14 . 2009-07-14 01:1523040 c:\windows\SysWOW64\cscdll.dll
    - 2009-07-13 23:14 . 2009-07-14 01:1534816 c:\windows\SysWOW64\cscapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1834816 c:\windows\SysWOW64\cscapi.dll
    + 2011-07-01 01:39 . 2010-11-20 12:1817408 c:\windows\SysWOW64\credssp.dll
    - 2009-07-14 04:54 . 2011-09-26 19:1116384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-07-14 04:54 . 2012-09-01 05:0916384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-07-14 04:54 . 2012-09-01 05:0949152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-07-14 04:54 . 2011-09-26 19:1149152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-07-14 04:54 . 2011-09-26 19:1116384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-07-14 04:54 . 2012-09-01 05:0916384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-13 23:54 . 2009-07-14 01:1484992 c:\windows\SysWOW64\cmstp.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1784992 c:\windows\SysWOW64\cmstp.exe
    + 2011-07-01 01:38 . 2010-11-20 12:1865024 c:\windows\SysWOW64\CertPolEng.dll
    - 2009-07-13 23:36 . 2009-07-14 01:1565024 c:\windows\SysWOW64\CertPolEng.dll
    - 2009-07-14 00:05 . 2009-07-14 01:1566560 c:\windows\SysWOW64\cca.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1866560 c:\windows\SysWOW64\cca.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1873216 c:\windows\SysWOW64\cabinet.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1811264 c:\windows\SysWOW64\C_ISCII.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:1810752 c:\windows\SysWOW64\browseui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1819456 c:\windows\SysWOW64\bitsperf.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1828160 c:\windows\SysWOW64\AzSqlExt.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1891648 c:\windows\SysWOW64\avifil32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:0291648 c:\windows\SysWOW64\avifil32.dll
    - 2011-04-14 18:51 . 2011-02-19 05:3234304 c:\windows\SysWOW64\atmlib.dll
    + 2011-04-14 18:51 . 2011-02-19 06:3034304 c:\windows\SysWOW64\atmlib.dll
    - 2010-06-09 16:41 . 2010-03-05 07:4267584 c:\windows\SysWOW64\asycfilt.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1867584 c:\windows\SysWOW64\asycfilt.dll
    - 2009-07-14 00:03 . 2009-07-14 01:1470656 c:\windows\SysWOW64\amstream.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1870656 c:\windows\SysWOW64\amstream.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1845568 c:\windows\SysWOW64\acppage.dll
    - 2009-07-13 23:26 . 2009-07-14 01:1445568 c:\windows\SysWOW64\acppage.dll
    person15, Sep 3, 2012
    #12

  13. person15 Newcomer, in training Posts: 55

    - 2009-07-14 00:12 . 2009-07-14 01:4148640 c:\windows\system32\wwanprotdim.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2748640 c:\windows\system32\wwanprotdim.dll
    + 2012-06-21 15:44 . 2012-06-02 22:1944056 c:\windows\system32\wups2.dll
    + 2012-06-21 15:43 . 2012-06-02 22:1938424 c:\windows\system32\wups.dll
    + 2012-06-21 15:43 . 2012-06-02 22:1599840 c:\windows\system32\wudriver.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2778848 c:\windows\system32\WUDFSvc.dll
    - 2009-07-14 00:06 . 2009-07-14 01:4144544 c:\windows\system32\WUDFCoinstaller.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2744544 c:\windows\system32\WUDFCoinstaller.dll
    + 2012-06-21 15:44 . 2012-06-02 22:1957880 c:\windows\system32\wuauclt.exe
    - 2009-07-14 00:34 . 2009-07-14 01:3936864 c:\windows\system32\wuapp.exe
    + 2012-06-21 15:43 . 2012-06-02 19:1536864 c:\windows\system32\wuapp.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2767072 c:\windows\system32\wsnmp32.dll
    - 2009-07-14 00:10 . 2009-07-14 01:4167072 c:\windows\system32\wsnmp32.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2713824 c:\windows\system32\wshirda.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2747104 c:\windows\system32\wshbth.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2726112 c:\windows\system32\wsdchngr.dll
    - 2011-02-09 15:47 . 2010-12-21 06:1697280 c:\windows\system32\wscsvc.dll
    + 2009-07-13 23:48 . 2009-07-14 01:4197280 c:\windows\system32\wscsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2763488 c:\windows\system32\wscapi.dll
    - 2011-08-10 16:05 . 2011-07-16 05:2613312 c:\windows\system32\wow64cpu.dll
    + 2011-08-10 16:05 . 2011-07-16 05:4113312 c:\windows\system32\wow64cpu.dll
    - 2009-07-13 23:53 . 2009-07-14 01:4171680 c:\windows\system32\wkscli.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2771680 c:\windows\system32\wkscli.dll
    - 2009-07-13 23:40 . 2009-07-14 01:3926112 c:\windows\system32\WerFaultSecure.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2526112 c:\windows\system32\WerFaultSecure.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2736352 c:\windows\system32\wdiasqmmodule.dll
    + 2010-01-04 19:37 . 2012-09-03 03:4457576 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2009-07-14 05:10 . 2012-09-03 03:4455770 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
    + 2010-01-06 21:50 . 2012-09-03 03:4414920 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-816525379-3359804378-3665389369-1003_UserData.bin
    - 2009-07-14 00:25 . 2009-07-14 01:4161952 c:\windows\system32\WavDest.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2761952 c:\windows\system32\WavDest.dll
    - 2009-07-13 23:36 . 2009-07-14 01:4161952 c:\windows\system32\vss_ps.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2761952 c:\windows\system32\vss_ps.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2738912 c:\windows\system32\vpnikeapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0938400 c:\windows\system32\vmstorfltres.dll
    - 2009-07-13 23:43 . 2009-07-13 23:4351712 c:\windows\system32\vmictimeprovider.dll
    + 2011-07-01 01:38 . 2010-11-20 09:5751712 c:\windows\system32\vmictimeprovider.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0953760 c:\windows\system32\vmicres.dll
    - 2009-07-14 01:18 . 2009-07-14 01:3053760 c:\windows\system32\vmicres.dll
    - 2009-07-14 01:19 . 2009-07-14 01:3044544 c:\windows\system32\vmbusres.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0944544 c:\windows\system32\vmbusres.dll
    + 2011-07-01 01:38 . 2010-11-20 09:5715872 c:\windows\system32\vmbuspipe.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2768096 c:\windows\system32\vfwwdm32.dll
    - 2009-07-14 00:18 . 2009-07-14 01:4168096 c:\windows\system32\vfwwdm32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2530720 c:\windows\system32\userinit.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2784480 c:\windows\system32\UserAccountControlSettings.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2773216 c:\windows\system32\unimdmat.dll
    - 2009-07-14 00:10 . 2009-07-14 01:4173216 c:\windows\system32\unimdmat.dll
    - 2009-07-13 23:35 . 2009-07-14 01:4159904 c:\windows\system32\umb.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2759904 c:\windows\system32\umb.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2558368 c:\windows\system32\tzutil.exe
    + 2011-07-01 01:41 . 2010-11-20 13:2712288 c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2740960 c:\windows\system32\TsUsbGDCoInstaller.dll
    - 2009-07-13 23:50 . 2009-07-14 01:4186016 c:\windows\system32\TSpkg.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2786016 c:\windows\system32\TSpkg.dll
    - 2009-07-14 00:17 . 2009-07-14 01:3923552 c:\windows\system32\tskill.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2523552 c:\windows\system32\tskill.exe
    - 2009-07-14 00:17 . 2009-07-14 01:4144032 c:\windows\system32\tsgqec.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2744032 c:\windows\system32\tsgqec.dll
    - 2009-07-14 00:17 . 2009-07-14 01:3922016 c:\windows\system32\tsdiscon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2522016 c:\windows\system32\tsdiscon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2522528 c:\windows\system32\tscon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2714848 c:\windows\system32\tsbyuv.dll
    - 2010-02-10 17:00 . 2009-12-19 09:5014848 c:\windows\system32\tsbyuv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2721504 c:\windows\system32\TRAPI.dll
    - 2009-07-14 00:16 . 2009-07-14 01:4173728 c:\windows\system32\tlscsp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2773728 c:\windows\system32\tlscsp.dll
    - 2009-07-13 23:31 . 2009-07-14 01:3969120 c:\windows\system32\taskhost.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2569120 c:\windows\system32\taskhost.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2563488 c:\windows\system32\takeown.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2792672 c:\windows\system32\TabSvc.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2578848 c:\windows\system32\tabcal.exe
    - 2009-07-14 00:03 . 2009-07-14 01:3978848 c:\windows\system32\tabcal.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2717408 c:\windows\system32\syssetup.dll
    + 2012-01-11 18:31 . 2011-11-17 06:3529184 c:\windows\system32\sspisrv.dll
    - 2009-07-13 23:53 . 2009-07-14 01:4113312 c:\windows\system32\sscore.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2713312 c:\windows\system32\sscore.dll
    - 2009-07-13 23:29 . 2009-07-14 01:4118944 c:\windows\system32\spopk.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2718944 c:\windows\system32\spopk.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2739424 c:\windows\system32\spool\prtprocs\x64\winprint.dll
    - 2009-07-14 00:39 . 2009-07-14 01:4139424 c:\windows\system32\spool\prtprocs\x64\winprint.dll
    + 2012-04-21 23:41 . 2010-03-30 00:3060288 c:\windows\system32\spool\drivers\x64\SendToOneNoteUI.dll
    + 2010-01-06 17:36 . 2009-02-27 07:4266440 c:\windows\system32\spool\drivers\x64\msonpui.dll
    + 2012-08-24 19:36 . 2012-08-24 19:3660440 c:\windows\system32\spool\drivers\x64\FxCompChannel_x64.dll
    + 2012-08-24 19:36 . 2012-08-24 19:3632768 c:\windows\system32\spool\drivers\x64\cioum.dll
    + 2012-04-21 23:41 . 2010-03-30 00:3060288 c:\windows\system32\spool\drivers\x64\3\SendToOneNoteUI.dll
    + 2012-08-24 19:36 . 2012-08-24 19:3660440 c:\windows\system32\spool\drivers\x64\3\FxCompChannel_x64.dll
    + 2012-08-24 19:36 . 2012-08-24 19:3632768 c:\windows\system32\spool\drivers\x64\3\cioum.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2778848 c:\windows\system32\spbcd.dll
    - 2009-07-13 23:29 . 2009-07-14 01:4178848 c:\windows\system32\spbcd.dll
    - 2011-02-09 15:47 . 2010-12-21 06:1515360 c:\windows\system32\slwga.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2715360 c:\windows\system32\slwga.dll
    - 2009-07-13 23:23 . 2009-07-14 01:4124064 c:\windows\system32\sisbkup.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2724064 c:\windows\system32\sisbkup.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2711264 c:\windows\system32\shunimpl.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2737376 c:\windows\system32\shimgvw.dll
    - 2009-07-13 23:55 . 2009-07-14 01:4137376 c:\windows\system32\shimgvw.dll
    - 2009-07-13 23:55 . 2009-07-14 01:4128160 c:\windows\system32\shgina.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2728160 c:\windows\system32\shgina.dll
    - 2009-07-14 00:17 . 2009-07-14 01:3921504 c:\windows\system32\shadow.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2521504 c:\windows\system32\shadow.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2588576 c:\windows\system32\setupcl.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2757856 c:\windows\system32\Setup\pbkmigr.dll
    + 2011-04-14 18:51 . 2010-11-20 13:2763488 c:\windows\system32\setbcdlocale.dll
    - 2009-07-13 23:50 . 2009-07-14 01:4128160 c:\windows\system32\secur32.dll
    + 2012-01-11 18:31 . 2011-11-17 06:3528160 c:\windows\system32\secur32.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2730720 c:\windows\system32\seclogon.dll
    - 2009-07-13 23:53 . 2009-07-14 01:4130720 c:\windows\system32\seclogon.dll
    - 2009-07-13 23:53 . 2009-07-14 01:4124064 c:\windows\system32\schedcli.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2724064 c:\windows\system32\schedcli.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2767584 c:\windows\system32\samcli.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2521504 c:\windows\system32\rwinsta.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3921504 c:\windows\system32\rwinsta.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2556832 c:\windows\system32\runonce.exe
    - 2009-07-13 23:57 . 2009-07-14 01:3956832 c:\windows\system32\runonce.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2752224 c:\windows\system32\rtutils.dll
    - 2010-08-11 16:21 . 2010-06-19 06:5352224 c:\windows\system32\rtutils.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2765536 c:\windows\system32\RpcRtRemote.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2710752 c:\windows\system32\riched32.dll
    - 2009-07-14 00:17 . 2009-07-14 01:3916896 c:\windows\system32\reset.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2516896 c:\windows\system32\reset.exe
    - 2009-07-13 23:22 . 2009-07-14 01:3951712 c:\windows\system32\repair-bde.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2551712 c:\windows\system32\repair-bde.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2543008 c:\windows\system32\relog.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2795232 c:\windows\system32\regapi.dll
    + 2012-06-14 15:21 . 2012-04-26 05:4177312 c:\windows\system32\rdpwsx.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2723040 c:\windows\system32\rdprefdrvapi.dll
    - 2009-07-14 00:16 . 2009-07-14 01:4123040 c:\windows\system32\rdprefdrvapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2768096 c:\windows\system32\rdpd3d.dll
    - 2009-07-14 00:17 . 2009-07-14 01:4168096 c:\windows\system32\rdpd3d.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2710240 c:\windows\system32\rdpcfgex.dll
    - 2009-07-14 00:17 . 2009-07-14 01:4110240 c:\windows\system32\rdpcfgex.dll
    - 2009-07-14 00:17 . 2009-07-14 01:3916384 c:\windows\system32\query.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2516384 c:\windows\system32\query.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2526624 c:\windows\system32\qprocess.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3926624 c:\windows\system32\qprocess.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2779872 c:\windows\system32\QCLIPROV.DLL
    - 2009-07-14 00:07 . 2009-07-14 01:4179872 c:\windows\system32\QCLIPROV.DLL
    - 2009-07-14 00:17 . 2009-07-14 01:3923040 c:\windows\system32\qappsrv.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2523040 c:\windows\system32\qappsrv.exe
    + 2011-07-01 01:40 . 2010-11-20 13:2555296 c:\windows\system32\PushPrinterConnections.exe
    + 2011-07-01 01:39 . 2010-11-20 13:2531744 c:\windows\system32\proquota.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2733792 c:\windows\system32\profprov.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2748128 c:\windows\system32\PrintIsolationProxy.dll
    - 2009-07-14 00:39 . 2009-07-14 01:4148128 c:\windows\system32\PrintIsolationProxy.dll
    + 2011-04-27 22:11 . 2011-02-18 10:5131232 c:\windows\system32\prevhost.exe
    - 2011-04-27 22:11 . 2011-02-18 06:3331232 c:\windows\system32\prevhost.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2562976 c:\windows\system32\PnPUnattend.exe
    - 2009-07-14 00:39 . 2009-07-14 01:4122016 c:\windows\system32\PJLMON.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:2722016 c:\windows\system32\PJLMON.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:1235328 c:\windows\system32\pifmgr.dll
    + 2012-01-11 14:42 . 2011-11-19 14:5877312 c:\windows\system32\packager.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2757856 c:\windows\system32\oobe\spprgrss.dll
    - 2009-07-13 23:57 . 2009-07-14 01:3971168 c:\windows\system32\oobe\msoobe.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2471168 c:\windows\system32\oobe\msoobe.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2753248 c:\windows\system32\odbcconf.dll
    - 2009-07-14 00:28 . 2009-07-14 01:4153248 c:\windows\system32\odbcconf.dll
    + 2011-08-10 16:05 . 2011-07-16 05:3916384 c:\windows\system32\ntvdm64.dll
    - 2011-08-10 16:05 . 2011-07-16 05:2416384 c:\windows\system32\ntvdm64.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2715360 c:\windows\system32\nrpsrv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:1369120 c:\windows\system32\nlsbres.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2770656 c:\windows\system32\nlaapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2729184 c:\windows\system32\netutils.dll
    + 2011-07-01 01:41 . 2010-11-05 01:5748976 c:\windows\system32\netfxperf.dll
    - 2009-07-13 23:49 . 2009-07-14 01:4166048 c:\windows\system32\ncryptui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2766048 c:\windows\system32\ncryptui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2790112 c:\windows\system32\nci.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2772192 c:\windows\system32\napdsnap.dll
    + 2011-07-01 01:38 . 2010-11-20 13:4450176 c:\windows\system32\NAPCRYPT.DLL
    - 2009-07-14 00:09 . 2009-07-14 01:5150176 c:\windows\system32\NAPCRYPT.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:2551712 c:\windows\system32\MultiDigiMon.exe
    - 2009-07-14 00:03 . 2009-07-14 01:3951712 c:\windows\system32\MultiDigiMon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2716896 c:\windows\system32\muifontsetup.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5711600 c:\windows\system32\MUI\0409\mscorees.dll
    - 2010-06-24 14:34 . 2009-11-25 16:4711600 c:\windows\system32\MUI\0409\mscorees.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2725600 c:\windows\system32\msyuv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2738912 c:\windows\system32\msvidc32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:4738912 c:\windows\system32\msvidc32.dll
    - 2011-06-29 02:09 . 2011-05-04 05:2875264 c:\windows\system32\msscntrs.dll
    + 2011-06-29 02:09 . 2011-05-04 05:2275264 c:\windows\system32\msscntrs.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2716384 c:\windows\system32\msrle32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:4716384 c:\windows\system32\msrle32.dll
    + 2012-08-16 07:06 . 2012-06-29 03:4096768 c:\windows\system32\mshtmled.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2735840 c:\windows\system32\msdmo.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2746592 c:\windows\system32\msasn1.dll
    - 2010-01-08 16:53 . 2009-08-29 07:5046592 c:\windows\system32\msasn1.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2641472 c:\windows\system32\mimefilt.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2757856 c:\windows\system32\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin\pbkmigr-Mig.dll
    + 2012-08-16 07:06 . 2012-06-29 03:4686528 c:\windows\system32\migration\WininetPlugin.dll
    - 2011-08-12 15:07 . 2011-07-22 05:3486528 c:\windows\system32\migration\WininetPlugin.dll
    + 2011-10-10 23:04 . 2011-10-10 23:5899056 c:\windows\system32\MfeOtlkAddin.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2684992 c:\windows\system32\Mcx2Svc.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2641472 c:\windows\system32\mciqtz32.dll
    - 2009-07-14 00:18 . 2009-07-14 01:4141472 c:\windows\system32\mciqtz32.dll
    + 2012-05-08 21:04 . 2012-05-08 21:0432768 c:\windows\system32\maplec.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2691648 c:\windows\system32\mapistub.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2691648 c:\windows\system32\mapi32.dll
    - 2009-07-13 23:22 . 2009-07-14 01:3979872 c:\windows\system32\manage-bde.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2479872 c:\windows\system32\manage-bde.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2648640 c:\windows\system32\luainstall.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2650176 c:\windows\system32\lsmproxy.dll
    - 2009-07-13 23:20 . 2009-07-14 01:3931232 c:\windows\system32\lsass.exe
    + 2012-01-11 18:31 . 2011-11-17 06:3331232 c:\windows\system32\lsass.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2427648 c:\windows\system32\LogonUI.exe
    - 2009-07-13 23:52 . 2009-07-14 01:3927648 c:\windows\system32\LogonUI.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3921504 c:\windows\system32\logoff.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2421504 c:\windows\system32\logoff.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2690624 c:\windows\system32\KMSVC.DLL
    - 2009-07-14 00:07 . 2009-07-14 01:4190624 c:\windows\system32\KMSVC.DLL
    + 2011-04-14 18:51 . 2011-02-05 17:1020352 c:\windows\system32\kdusb.dll
    - 2011-04-14 18:51 . 2011-02-05 12:4120352 c:\windows\system32\kdusb.dll
    - 2011-04-14 18:51 . 2011-02-05 12:4117792 c:\windows\system32\kdcom.dll
    + 2011-04-14 18:51 . 2011-02-05 17:1017792 c:\windows\system32\kdcom.dll
    + 2011-04-14 18:51 . 2011-02-05 17:1019328 c:\windows\system32\kd1394.dll
    - 2011-04-14 18:51 . 2011-02-05 12:4119328 c:\windows\system32\kd1394.dll
    + 2012-08-16 07:06 . 2012-06-29 03:4585504 c:\windows\system32\jsproxy.dll
    - 2011-08-12 15:07 . 2011-07-22 05:3485504 c:\windows\system32\jsproxy.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2654272 c:\windows\system32\iyuv_32.dll
    - 2010-02-10 17:00 . 2009-12-19 09:4654272 c:\windows\system32\iyuv_32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2491648 c:\windows\system32\isoburn.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2637376 c:\windows\system32\iscsium.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2665536 c:\windows\system32\inetmib1.dll
    + 2012-04-13 15:20 . 2012-03-01 06:3381408 c:\windows\system32\imagehlp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2645056 c:\windows\system32\httpapi.dll
    - 2009-07-13 23:21 . 2009-07-14 01:4145056 c:\windows\system32\httpapi.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0824064 c:\windows\system32\hpzisn12.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0838400 c:\windows\system32\hpzipt12.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0846592 c:\windows\system32\HPZipr12.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0866048 c:\windows\system32\HPZipm12.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0850688 c:\windows\system32\HPZinw12.dll
    + 2011-04-13 20:08 . 2011-04-13 20:0867072 c:\windows\system32\HPZidr12.dll
    + 2010-01-19 19:12 . 2010-01-19 19:1270144 c:\windows\system32\HPBWSDR.DLL
    + 2010-09-27 18:15 . 2010-09-27 18:1557344 c:\windows\system32\hpbpro.dll
    - 2007-02-02 19:37 . 2007-02-02 19:3733280 c:\windows\system32\hpboid.dll
    + 2010-09-27 18:15 . 2010-09-27 18:1533280 c:\windows\system32\hpboid.dll
    + 2010-09-27 18:15 . 2010-09-27 18:1532768 c:\windows\system32\hpbmiapi.dll
    - 2007-02-02 19:37 . 2007-02-02 19:3732768 c:\windows\system32\hpbmiapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2627136 c:\windows\system32\HotStartUserAgent.dll
    - 2009-07-13 23:55 . 2009-07-14 01:4127136 c:\windows\system32\HotStartUserAgent.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2678848 c:\windows\system32\hbaapi.dll
    - 2009-07-14 00:01 . 2009-07-14 01:4078848 c:\windows\system32\hbaapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2418432 c:\windows\system32\FXSUNATD.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2641984 c:\windows\system32\FXSMON.dll
    - 2009-07-14 00:10 . 2009-07-14 01:3948128 c:\windows\system32\ftp.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2448128 c:\windows\system32\ftp.exe
    - 2011-04-27 22:11 . 2011-03-11 06:1596768 c:\windows\system32\fsutil.exe
    + 2011-04-27 22:11 . 2011-03-11 06:3096768 c:\windows\system32\fsutil.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2417920 c:\windows\system32\fixmapi.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2471168 c:\windows\system32\findstr.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2674240 c:\windows\system32\fdProxy.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2672192 c:\windows\system32\fdeploy.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2625600 c:\windows\system32\elsTrans.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2636864 c:\windows\system32\dsauth.dll
    + 2009-07-14 05:30 . 2012-08-16 07:2686016 c:\windows\system32\DriverStore\infpub.dat
    - 2009-07-14 05:30 . 2011-09-29 15:0286016 c:\windows\system32\DriverStore\infpub.dat
    + 2011-07-01 01:38 . 2010-11-20 09:5751712 c:\windows\system32\DriverStore\FileRepository\wvmic.inf_amd64_neutral_b94eb92e8150fa35\vmictimeprovider.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0953760 c:\windows\system32\DriverStore\FileRepository\wvmic.inf_amd64_neutral_b94eb92e8150fa35\vmicres.dll
    + 2011-07-01 01:38 . 2010-11-20 09:5722528 c:\windows\system32\DriverStore\FileRepository\wvmbusvideo.inf_amd64_neutral_8f9a8242d3699a44\VMBusVideoM.sys
    + 2011-07-01 01:38 . 2010-11-20 09:5719456 c:\windows\system32\DriverStore\FileRepository\wvmbusvideo.inf_amd64_neutral_8f9a8242d3699a44\VMBusVideoD.dll
    + 2011-07-01 01:38 . 2010-11-20 09:5721760 c:\windows\system32\DriverStore\FileRepository\wvmbushid.inf_amd64_neutral_6708ad28050a6765\VMBusHID.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3352096 c:\windows\system32\DriverStore\FileRepository\wvmbus.inf_amd64_neutral_fca91999602b0343\winhv.sys
    + 2011-07-01 01:38 . 2010-11-20 13:0944544 c:\windows\system32\DriverStore\FileRepository\wvmbus.inf_amd64_neutral_fca91999602b0343\vmbusres.dll
    + 2011-07-01 01:38 . 2010-11-20 09:5715872 c:\windows\system32\DriverStore\FileRepository\wvmbus.inf_amd64_neutral_fca91999602b0343\vmbuspipe.dll
    + 2011-07-01 01:39 . 2010-11-20 13:3434688 c:\windows\system32\DriverStore\FileRepository\wstorvsc.inf_amd64_neutral_d7bf942e99bb1d41\storvsc.sys
    + 2011-07-01 01:38 . 2010-11-20 13:0938400 c:\windows\system32\DriverStore\FileRepository\wstorflt.inf_amd64_neutral_3db956c41708f7f5\vmstorfltres.dll
    + 2011-07-01 01:38 . 2010-11-20 13:3446464 c:\windows\system32\DriverStore\FileRepository\wstorflt.inf_amd64_neutral_3db956c41708f7f5\vmstorfl.sys
    + 2011-07-01 01:38 . 2010-11-20 13:2783968 c:\windows\system32\DriverStore\FileRepository\wpdcomp.inf_amd64_neutral_11bbf54c8508434e\Wpdcomp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0942496 c:\windows\system32\DriverStore\FileRepository\wnetvsc.inf_amd64_neutral_548addf09cb466fa\netvscres.dll
    + 2011-07-01 01:39 . 2010-11-20 10:4341984 c:\windows\system32\DriverStore\FileRepository\winusb.inf_amd64_neutral_6cb50ae9f480775b\winusb.sys
    + 2011-07-01 01:39 . 2010-11-20 12:4533280 c:\windows\system32\DriverStore\FileRepository\wdmvsc.inf_amd64_neutral_a2cf745000e2ea92\dmvscres.dll
    + 2011-07-01 01:40 . 2010-11-20 09:5771168 c:\windows\system32\DriverStore\FileRepository\wdmvsc.inf_amd64_neutral_a2cf745000e2ea92\dmvsc.sys
    + 2011-04-27 22:11 . 2011-03-11 04:3791648 c:\windows\system32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_26b33263a639795d\USBSTOR.SYS
    + 2011-07-01 01:39 . 2010-11-20 10:4491648 c:\windows\system32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_0725c2806a159a9d\USBSTOR.SYS
    + 2009-07-14 00:06 . 2009-07-14 00:0630720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbuhci.sys
    + 2009-07-14 00:06 . 2009-07-14 00:0625600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbohci.sys
    + 2011-07-01 01:39 . 2010-11-20 10:4352224 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbehci.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2930720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbuhci.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2925600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbohci.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2952736 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbehci.sys
    + 2011-05-10 12:06 . 2011-05-10 12:0651712 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_amd64_neutral_f9d62789100b9e9b\usbaapl64.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4498816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_269d7150439b3372\usbccgp.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2998816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbccgp.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4448640 c:\windows\system32\DriverStore\FileRepository\umbus.inf_amd64_neutral_2d4257afa2e35253\umbus.sys
    + 2011-07-01 01:41 . 2010-11-20 11:0731232 c:\windows\system32\DriverStore\FileRepository\tsgenericusbdriver.inf_amd64_neutral_24c807694f614911\TsUsbGD.sys
    + 2011-07-01 01:39 . 2010-11-20 10:4341984 c:\windows\system32\DriverStore\FileRepository\transfercable.inf_amd64_neutral_82f4c743c8996d67\amd64\winusb.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3414336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_d2425e60845d17d3\sffp_sd.sys
    + 2009-07-14 00:01 . 2009-07-14 00:0113824 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_d2425e60845d17d3\sffp_mmc.sys
    + 2009-07-14 00:01 . 2009-07-14 00:0114336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_d2425e60845d17d3\sffdisk.sys
    + 2011-07-01 01:38 . 2010-11-20 13:2722016 c:\windows\system32\DriverStore\FileRepository\ntprint.inf_amd64_neutral_4616c3de1949be6d\Amd64\PJLMON.DLL
    + 2011-05-10 12:06 . 2011-05-10 12:0622528 c:\windows\system32\DriverStore\FileRepository\netaapl64.inf_amd64_neutral_dc2cbd989eec1514\netaapl64.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4517488 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\viaide.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4548720 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\pciidex.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4512352 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\pciide.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3331104 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\msahci.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4816960 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\intelide.sys
    + 2009-07-13 23:19 . 2009-07-14 01:5217488 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\cmdide.sys
    + 2009-07-13 23:19 . 2009-07-14 01:5224128 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
    + 2009-07-13 23:19 . 2009-07-14 01:5215440 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\amdide.sys
    + 2009-07-13 23:19 . 2009-07-14 01:5215440 c:\windows\system32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\aliide.sys
    + 2009-07-14 00:10 . 2009-07-14 00:1024064 c:\windows\system32\DriverStore\FileRepository\modemcsa.inf_amd64_neutral_b64a610f1f09f267\MODEMCSA.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4332768 c:\windows\system32\DriverStore\FileRepository\mdmcpq.inf_amd64_neutral_fbc4a14a6a13d0c8\usbser.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\spctramc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3415360 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\sonymc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412288 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\snyaitmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\seaddsmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3411264 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\qntmmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3413824 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\qlstrmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3415360 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\powerfil.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\pnrmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3414848 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\plasmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\nsmmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3411264 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\m4mc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3413824 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\libxprmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\jvcmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3417920 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\hpmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3415360 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\examc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412288 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\elmsmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3413312 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\ddsmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412288 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\breecemc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\atlmc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3412800 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\adicvls.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3413824 c:\windows\system32\DriverStore\FileRepository\mchgr.inf_amd64_neutral_407146dba80d1566\adicsc.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3471552 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\volmgr.sys
    + 2009-07-14 00:01 . 2009-07-14 01:4536432 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\vdrvroot.sys
    + 2009-07-13 23:38 . 2009-07-14 01:4564592 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\ULIAGPKX.SYS
    + 2011-07-01 01:39 . 2010-11-20 13:3363360 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\termdd.sys
    + 2009-07-14 00:00 . 2009-07-14 01:4512496 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\swenum.sys
    + 2009-07-14 00:18 . 2009-07-14 01:4524144 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\streamci.dll
    + 2009-07-13 23:31 . 2009-07-14 01:4832320 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\mssmbios.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4815424 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\msisadrv.sys
    + 2009-07-13 23:31 . 2009-07-14 01:4820544 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
    + 2009-07-13 23:38 . 2009-07-14 01:5261008 c:\windows\system32\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3333280 c:\windows\system32\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\kbdhid.sys
    + 2009-07-13 23:19 . 2009-07-14 01:4850768 c:\windows\system32\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\kbdclass.sys
    + 2009-07-14 00:01 . 2009-07-14 01:2816384 c:\windows\system32\DriverStore\FileRepository\iscsi.inf_amd64_neutral_2ef24e9270d8b2a9\iscsilog.dll
    + 2011-07-01 01:38 . 2010-11-20 10:0478848 c:\windows\system32\DriverStore\FileRepository\ipmidrv.inf_amd64_neutral_1cb648411f252d13\IPMIDrv.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4330208 c:\windows\system32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidusb.sys
    + 2009-07-14 00:06 . 2009-07-14 00:0632896 c:\windows\system32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidparse.sys
    + 2011-07-01 01:39 . 2010-11-20 10:4376800 c:\windows\system32\DriverStore\FileRepository\input.inf_amd64_neutral_8693053514b10ee9\hidclass.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3378720 c:\windows\system32\DriverStore\FileRepository\hpsamd.inf_amd64_neutral_84ae149ecc9f8033\HpSAMD.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3219968 c:\windows\system32\DriverStore\FileRepository\dot4prt.inf_amd64_neutral_e7d3f62d0d4411db\Dot4Prt.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3338912 c:\windows\system32\DriverStore\FileRepository\compositebus.inf_amd64_neutral_b9280780a8000d4b\CompositeBus.sys
    + 2011-07-01 01:39 . 2010-11-20 10:4480384 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_e54666f6a3e5af91\BTHUSB.SYS
    + 2009-07-14 00:06 . 2009-07-14 00:0641984 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_e54666f6a3e5af91\bthenum.sys
    + 2011-07-13 00:44 . 2011-04-28 03:5480384 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_de0494b6391d872c\BTHUSB.SYS
    + 2009-07-14 00:06 . 2009-07-14 00:0641984 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_de0494b6391d872c\bthenum.sys
    + 2011-07-13 00:44 . 2011-04-28 03:5480384 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_ca26c6da62d71ca8\BTHUSB.SYS
    + 2009-07-14 00:06 . 2009-07-14 00:0641984 c:\windows\system32\DriverStore\FileRepository\bth.inf_amd64_neutral_ca26c6da62d71ca8\bthenum.sys
    + 2009-07-13 21:59 . 2009-07-14 01:4050688 c:\windows\system32\DriverStore\FileRepository\atiilhag.inf_amd64_neutral_0a660e899f5038a2\amdpcom64.dll
    + 2009-07-13 21:59 . 2009-07-14 01:4050688 c:\windows\system32\DriverStore\FileRepository\atiilhag.inf_amd64_neutral_0a660e899f5038a2\amdpcom32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:3227008 c:\windows\system32\DriverStore\FileRepository\amdsata.inf_amd64_neutral_67db50590108ebd9\amdxata.sys
    + 2011-04-27 22:11 . 2011-03-11 06:4127008 c:\windows\system32\DriverStore\FileRepository\amdsata.inf_amd64_neutral_5c3d0d1e97e99e10\amdxata.sys
    + 2011-07-01 01:38 . 2010-11-20 09:3012800 c:\windows\system32\DriverStore\FileRepository\acpipmi.inf_amd64_neutral_256ad642985694b3\acpipmi.sys
    + 2009-07-13 23:31 . 2009-07-13 23:3114336 c:\windows\system32\DriverStore\FileRepository\acpi.inf_amd64_neutral_aed2e7a487803437\wmiacpi.sys
    + 2009-07-14 00:06 . 2009-07-14 00:0672832 c:\windows\system32\DriverStore\FileRepository\1394.inf_amd64_neutral_0b11366838152a76\ohci1394.sys
    + 2009-07-14 00:06 . 2009-07-14 00:0668096 c:\windows\system32\DriverStore\FileRepository\1394.inf_amd64_neutral_0b11366838152a76\1394bus.sys
    + 2011-07-01 01:39
    person15, Sep 3, 2012
    #13

  14. person15 Newcomer, in training Posts: 55

    + 2011-07-01 01:39 . 2010-11-20 10:4341984 c:\windows\system32\drivers\winusb.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3352096 c:\windows\system32\drivers\winhv.sys
    + 2011-07-01 01:39 . 2010-11-20 10:5288576 c:\windows\system32\drivers\wanarp.sys
    - 2009-07-14 00:10 . 2009-07-14 00:1088576 c:\windows\system32\drivers\wanarp.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3471552 c:\windows\system32\drivers\volmgr.sys
    + 2011-07-01 01:38 . 2010-11-20 13:3446464 c:\windows\system32\drivers\vmstorfl.sys
    - 2009-07-13 23:42 . 2009-07-13 23:4221760 c:\windows\system32\drivers\VMBusHID.sys
    + 2011-07-01 01:38 . 2010-11-20 09:5721760 c:\windows\system32\drivers\VMBusHID.sys
    - 2011-05-11 18:30 . 2011-03-25 03:2230720 c:\windows\system32\drivers\usbuhci.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2930720 c:\windows\system32\drivers\usbuhci.sys
    + 2011-04-27 22:11 . 2011-03-11 04:3791648 c:\windows\system32\drivers\USBSTOR.SYS
    + 2011-07-01 01:38 . 2010-11-20 11:3731744 c:\windows\system32\drivers\usbrpm.sys
    - 2009-07-14 00:35 . 2009-07-14 00:3531744 c:\windows\system32\drivers\usbrpm.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2925600 c:\windows\system32\drivers\usbohci.sys
    - 2011-05-11 18:30 . 2011-03-25 03:2225600 c:\windows\system32\drivers\usbohci.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2952736 c:\windows\system32\drivers\usbehci.sys
    - 2011-05-11 18:30 . 2011-03-25 03:2398816 c:\windows\system32\drivers\usbccgp.sys
    + 2011-05-11 18:30 . 2011-03-25 03:2998816 c:\windows\system32\drivers\usbccgp.sys
    - 2009-07-14 00:06 . 2009-07-14 00:0632896 c:\windows\system32\drivers\USBCAMD2.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4432896 c:\windows\system32\drivers\USBCAMD2.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4448640 c:\windows\system32\drivers\umbus.sys
    - 2009-07-14 00:06 . 2009-07-14 00:0648640 c:\windows\system32\drivers\umbus.sys
    + 2011-07-01 01:41 . 2010-11-20 11:0759392 c:\windows\system32\drivers\TsUsbFlt.sys
    + 2011-07-01 01:39 . 2010-11-20 11:0439424 c:\windows\system32\drivers\tssecsrv.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3363360 c:\windows\system32\drivers\termdd.sys
    - 2009-07-14 00:16 . 2009-07-14 00:1623552 c:\windows\system32\drivers\tdtcp.sys
    + 2012-03-14 17:29 . 2012-02-17 04:5723552 c:\windows\system32\drivers\tdtcp.sys
    - 2009-07-13 23:21 . 2009-07-13 23:2126624 c:\windows\system32\drivers\tdi.sys
    + 2011-07-01 01:38 . 2010-11-20 09:2226624 c:\windows\system32\drivers\tdi.sys
    + 2011-07-01 01:38 . 2010-11-20 10:5145056 c:\windows\system32\drivers\tcpipreg.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3434688 c:\windows\system32\drivers\storvsc.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3414336 c:\windows\system32\drivers\sffp_sd.sys
    - 2010-12-11 03:08 . 2009-10-10 03:1714336 c:\windows\system32\drivers\sffp_sd.sys
    - 2009-07-13 23:50 . 2009-07-13 23:5029696 c:\windows\system32\drivers\scfilter.sys
    + 2011-07-01 01:38 . 2010-11-20 10:0929696 c:\windows\system32\drivers\scfilter.sys
    + 2012-05-09 21:29 . 2012-03-17 07:5875120 c:\windows\system32\drivers\partmgr.sys
    + 2011-07-01 01:39 . 2010-11-20 10:5257856 c:\windows\system32\drivers\ndproxy.sys
    - 2009-07-14 00:10 . 2009-07-14 00:1057856 c:\windows\system32\drivers\ndproxy.sys
    + 2011-07-01 01:38 . 2010-11-20 10:5056832 c:\windows\system32\drivers\ndisuio.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3331104 c:\windows\system32\drivers\msahci.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3394592 c:\windows\system32\drivers\mountmgr.sys
    + 2011-10-10 23:04 . 2011-10-10 23:0397960 c:\windows\system32\drivers\mferkdet.sys
    + 2012-07-11 15:19 . 2012-06-02 05:4895600 c:\windows\system32\drivers\ksecdd.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3333280 c:\windows\system32\drivers\kbdhid.sys
    - 2009-07-14 00:00 . 2009-07-14 00:0033280 c:\windows\system32\drivers\kbdhid.sys
    + 2011-07-01 01:38 . 2010-11-20 10:0478848 c:\windows\system32\drivers\IPMIDrv.sys
    - 2009-07-13 23:47 . 2009-07-13 23:4778848 c:\windows\system32\drivers\IPMIDrv.sys
    + 2011-07-01 01:39 . 2010-11-20 10:5282944 c:\windows\system32\drivers\ipfltdrv.sys
    - 2009-07-14 00:10 . 2009-07-14 00:1082944 c:\windows\system32\drivers\ipfltdrv.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3314720 c:\windows\system32\drivers\hwpolicy.sys
    + 2011-07-01 01:39 . 2010-11-20 13:3378720 c:\windows\system32\drivers\HpSAMD.sys
    - 2009-07-14 00:06 . 2009-07-14 00:0630208 c:\windows\system32\drivers\hidusb.sys
    + 2011-07-01 01:38 . 2010-11-20 10:4330208 c:\windows\system32\drivers\hidusb.sys
    + 2011-07-01 01:39 . 2010-11-20 10:4376800 c:\windows\system32\drivers\hidclass.sys
    + 2012-04-13 15:20 . 2012-03-01 06:4623408 c:\windows\system32\drivers\fs_rec.sys
    + 2011-05-26 02:39 . 2011-04-22 22:1527520 c:\windows\system32\drivers\Diskdump.sys
    + 2011-07-01 01:38 . 2010-11-20 10:3338912 c:\windows\system32\drivers\CompositeBus.sys
    - 2009-07-14 00:00 . 2009-07-14 00:0038912 c:\windows\system32\drivers\CompositeBus.sys
    + 2011-07-13 00:44 . 2011-04-28 03:5480384 c:\windows\system32\drivers\BTHUSB.SYS
    - 2011-07-13 00:44 . 2011-04-28 03:5880384 c:\windows\system32\drivers\BTHUSB.SYS
    + 2011-04-14 18:51 . 2011-02-23 04:5590624 c:\windows\system32\drivers\bowser.sys
    - 2011-04-14 18:51 . 2011-02-23 05:1590624 c:\windows\system32\drivers\bowser.sys
    - 2009-07-13 23:52 . 2009-07-13 23:5261440 c:\windows\system32\drivers\appid.sys
    + 2011-07-01 01:38 . 2010-11-20 10:1461440 c:\windows\system32\drivers\appid.sys
    - 2011-04-27 22:11 . 2011-03-11 06:2227008 c:\windows\system32\drivers\amdxata.sys
    + 2011-04-27 22:11 . 2011-03-11 06:4127008 c:\windows\system32\drivers\amdxata.sys
    + 2011-07-01 01:38 . 2010-11-20 09:3012800 c:\windows\system32\drivers\acpipmi.sys
    + 2011-07-01 01:39 . 2010-11-20 13:2669120 c:\windows\system32\dot3cfg.dll
    + 2011-07-01 01:40 . 2010-11-20 13:2684992 c:\windows\system32\dot3api.dll
    + 2011-08-31 03:05 . 2011-08-31 03:0585864 c:\windows\system32\dnssd.dll
    - 2011-07-12 15:34 . 2011-07-12 15:3485864 c:\windows\system32\dnssd.dll
    + 2011-04-14 18:51 . 2011-03-03 06:2130208 c:\windows\system32\dnscacheugc.exe
    - 2011-04-14 18:51 . 2011-03-03 06:1430208 c:\windows\system32\dnscacheugc.exe
    - 2011-07-12 15:34 . 2011-07-12 15:3496104 c:\windows\system32\dns-sd.exe
    + 2011-08-31 03:05 . 2011-08-31 03:0596104 c:\windows\system32\dns-sd.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2461440 c:\windows\system32\djoin.exe
    - 2009-07-13 23:53 . 2009-07-14 01:3961440 c:\windows\system32\djoin.exe
    - 2009-07-13 23:19 . 2009-07-14 01:4043520 c:\windows\system32\csrsrv.dll
    + 2011-12-14 15:00 . 2011-10-26 05:2143520 c:\windows\system32\csrsrv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2530208 c:\windows\system32\cscdll.dll
    - 2009-07-13 23:23 . 2009-07-14 01:4030208 c:\windows\system32\cscdll.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2546080 c:\windows\system32\cscapi.dll
    - 2009-07-13 23:24 . 2009-07-14 01:4046080 c:\windows\system32\cscapi.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2522016 c:\windows\system32\credssp.dll
    - 2010-01-07 08:05 . 2011-09-30 01:0616384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2010-01-07 08:05 . 2012-09-03 03:4016384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2010-01-07 08:05 . 2012-09-03 03:4032768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2010-01-07 08:05 . 2011-09-30 01:0632768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-07-14 04:54 . 2011-09-30 01:0616384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-07-14 04:54 . 2012-09-03 03:4016384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-14 00:10 . 2009-07-14 01:3992160 c:\windows\system32\cmstp.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2492160 c:\windows\system32\cmstp.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2436864 c:\windows\system32\choice.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3821504 c:\windows\system32\chgusr.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2421504 c:\windows\system32\chgusr.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2424064 c:\windows\system32\chgport.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3824064 c:\windows\system32\chgport.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2422528 c:\windows\system32\chglogon.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3822528 c:\windows\system32\chglogon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2416896 c:\windows\system32\change.exe
    - 2009-07-14 00:17 . 2009-07-14 01:3816896 c:\windows\system32\change.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2580384 c:\windows\system32\certprop.dll
    - 2009-07-13 23:50 . 2009-07-14 01:4080384 c:\windows\system32\certprop.dll
    - 2009-07-13 23:52 . 2009-07-14 01:4071680 c:\windows\system32\CertPolEng.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2571680 c:\windows\system32\CertPolEng.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2595232 c:\windows\system32\cca.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2594720 c:\windows\system32\cabinet.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2513312 c:\windows\system32\C_ISCII.DLL
    - 2009-07-13 23:57 . 2009-07-14 01:4014848 c:\windows\system32\BWUnpairElevated.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2514848 c:\windows\system32\BWUnpairElevated.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2514336 c:\windows\system32\browseui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:5452736 c:\windows\system32\BlbEvents.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2524576 c:\windows\system32\bitsperf.dll
    - 2009-07-13 23:50 . 2009-07-14 01:4031744 c:\windows\system32\AzSqlExt.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2531744 c:\windows\system32\AzSqlExt.dll
    + 2011-04-14 18:51 . 2011-02-19 12:0346080 c:\windows\system32\atmlib.dll
    - 2011-04-14 18:51 . 2011-02-19 06:3646080 c:\windows\system32\atmlib.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2584992 c:\windows\system32\asycfilt.dll
    - 2010-06-09 16:41 . 2010-03-05 07:5284992 c:\windows\system32\asycfilt.dll
    + 2011-07-01 01:39 . 2010-11-20 13:2570656 c:\windows\system32\appinfo.dll
    - 2009-07-14 00:18 . 2009-07-14 01:4089088 c:\windows\system32\amstream.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2589088 c:\windows\system32\amstream.dll
    + 2011-07-01 01:38 . 2010-11-20 13:2553248 c:\windows\system32\acppage.dll
    - 2009-07-13 23:40 . 2009-07-14 01:4053248 c:\windows\system32\acppage.dll
    - 2011-08-24 18:11 . 2011-07-09 05:1649664 c:\windows\servicing\GC64\tzupd.exe
    + 2011-08-24 18:11 . 2011-07-09 05:2949664 c:\windows\servicing\GC64\tzupd.exe
    - 2010-01-06 16:38 . 2011-08-28 15:1616384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2010-01-06 16:38 . 2012-08-27 03:2616384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2011-12-15 18:01 . 2011-12-15 18:0168880 c:\windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5383792 c:\windows\Microsoft.NET\Framework64\v3.5\MSBuild.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5391976 c:\windows\Microsoft.NET\Framework64\v3.5\EdmGen.exe
    - 2009-07-13 20:54 . 2009-06-10 20:3191976 c:\windows\Microsoft.NET\Framework64\v3.5\EdmGen.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5371512 c:\windows\Microsoft.NET\Framework64\v3.5\DataSvcUtil.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338736 c:\windows\Microsoft.NET\Framework64\v3.5\AddInUtil.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338744 c:\windows\Microsoft.NET\Framework64\v3.5\AddInProcess32.exe
    - 2009-07-13 20:54 . 2009-06-10 20:3138744 c:\windows\Microsoft.NET\Framework64\v3.5\AddInProcess32.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338744 c:\windows\Microsoft.NET\Framework64\v3.5\AddInProcess.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5322368 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5342856 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5384808 c:\windows\Microsoft.NET\Framework64\v3.0\WPF\PenIMC.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5232768 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2009-07-14 01:01 . 2009-06-10 20:3032768 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5273728 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    - 2009-07-14 01:01 . 2009-06-10 20:3073728 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    - 2009-07-14 01:01 . 2009-06-10 20:3094208 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5294208 c:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMdiagnostics.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5742328 c:\windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll
    - 2009-07-13 20:37 . 2009-06-10 20:4081920 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Configuration.Install.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5681920 c:\windows\Microsoft.NET\Framework64\v2.0.50727\System.Configuration.Install.dll
    - 2009-07-13 20:37 . 2009-06-10 20:4028672 c:\windows\Microsoft.NET\Framework64\v2.0.50727\RegSvcs.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5628672 c:\windows\Microsoft.NET\Framework64\v2.0.50727\RegSvcs.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5649152 c:\windows\Microsoft.NET\Framework64\v2.0.50727\RegAsm.exe
    - 2009-07-13 20:37 . 2009-06-10 20:4049152 c:\windows\Microsoft.NET\Framework64\v2.0.50727\RegAsm.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5636688 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorie.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3936688 c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorie.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5665536 c:\windows\Microsoft.NET\Framework64\v2.0.50727\MSBuild.exe
    - 2009-07-13 20:37 . 2009-06-10 20:3965536 c:\windows\Microsoft.NET\Framework64\v2.0.50727\MSBuild.exe
    - 2009-07-13 20:37 . 2009-06-10 20:3977824 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5677824 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3936864 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Microsoft.Build.Framework.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5636864 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Microsoft.Build.Framework.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3989600 c:\windows\Microsoft.NET\Framework64\v2.0.50727\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5689600 c:\windows\Microsoft.NET\Framework64\v2.0.50727\ISymWrapper.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3924576 c:\windows\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5624576 c:\windows\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5638216 c:\windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe
    - 2009-07-13 20:37 . 2009-06-10 20:3938216 c:\windows\Microsoft.NET\Framework64\v2.0.50727\cvtres.exe
    - 2009-07-13 20:37 . 2009-06-10 20:3980896 c:\windows\Microsoft.NET\Framework64\v2.0.50727\CustomMarshalers.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5680896 c:\windows\Microsoft.NET\Framework64\v2.0.50727\CustomMarshalers.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3994040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\CORPerfMonExt.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5694040 c:\windows\Microsoft.NET\Framework64\v2.0.50727\CORPerfMonExt.dll
    + 2012-01-11 14:33 . 2011-12-25 20:4043280 c:\windows\Microsoft.NET\Framework64\v2.0.50727\aspnet_wp.exe
    - 2009-07-13 20:37 . 2009-06-10 20:3937720 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Aspnet_perf.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5637720 c:\windows\Microsoft.NET\Framework64\v2.0.50727\Aspnet_perf.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5668944 c:\windows\Microsoft.NET\Framework64\v2.0.50727\AppLaunch.exe
    + 2011-12-15 17:08 . 2011-12-15 17:0857616 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1491976 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5391976 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5371512 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338736 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
    - 2009-07-13 21:10 . 2009-06-10 21:1438744 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338744 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
    - 2009-07-13 21:10 . 2009-06-10 21:1438744 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5338744 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5367912 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    - 2009-07-14 00:35 . 2009-06-10 21:1467912 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5232768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    - 2009-07-14 00:36 . 2009-06-10 21:1432768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5273728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    - 2009-07-14 00:36 . 2009-06-10 21:1473728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5832088 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2381920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5881920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5832768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2332768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2353248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5853248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2397608 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5897608 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2390960 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5790960 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5743344 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2343344 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5780208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5769632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2369632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2395056 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5795056 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5777824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2377824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2336864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5736864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2272192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5772192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5728672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2228672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5732072 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5769120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2269120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5786872 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2012-01-11 14:33 . 2011-12-25 20:4231504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2011-07-01 01:38 . 2010-11-05 01:5730552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2230552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2255632 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2011-07-01 01:39 . 2010-11-05 01:5755632 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    - 2009-07-13 20:46 . 2009-06-10 21:2295560 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5795560 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2011-07-01 01:39 . 2010-11-05 01:5893520 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2011-07-01 01:40 . 2010-11-05 01:5786864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2011-09-18 15:00 . 2011-09-18 15:0087408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4187408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0093024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4193024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0035688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4135688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0011120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4111120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Serialization.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4117784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0017784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
    + 2012-06-16 15:41 . 2012-06-16 15:4158240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0058240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4044920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0044920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0037240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4037240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4064352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0064352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0051032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4051032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4050552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0050552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0081784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4081784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4081800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0081800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4039784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0039784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4068952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0068952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4062880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0062880 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.ApplicationServer.Applications\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Windows.ApplicationServer.Applications.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4776200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4779776 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0012128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2012-06-16 15:40 . 2012-06-16 15:4012128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2012-06-16 15:40 . 2012-06-16 15:4097680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0097680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4715208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4727528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.v4.0.Framework\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v4.0.Framework.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4756184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4791512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Office.Tools.Common\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Common.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0017240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4017240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4094552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0094552 c:\windows\Microsoft.NET\assembly\GAC_64\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-06-16 15:40 . 2012-06-16 15:4091488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0091488 c:\windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2012-06-16 15:39 . 2012-06-16 15:3978168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0078168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2012-06-16 15:39 . 2012-06-16 15:3981248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2011-09-18 15:00 . 2011-09-18 15:0081248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    person15, Sep 3, 2012
    #14

  15. person15 Newcomer, in training Posts: 55

    + 2012-07-11 20:15 . 2012-07-11 20:1525600 c:\windows\Installer\464c69c2.msi
    + 2012-04-11 08:55 . 2012-04-11 08:5541472 c:\windows\Installer\2b68d648.msi
    + 2011-10-10 23:03 . 2011-10-10 23:5810134 c:\windows\Installer\{CE15D1B6-19B6-4D4D-8F43-CF5D2C3356FF}\ARPPRODUCTICON.exe
    - 2010-01-04 20:07 . 2011-09-16 15:4235088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
    + 2010-01-04 20:07 . 2012-08-16 07:1035088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
    - 2010-01-04 20:07 . 2011-09-16 15:4218704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-04 20:07 . 2012-08-16 07:1018704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-04 20:07 . 2012-08-16 07:1020240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
    - 2010-01-04 20:07 . 2011-09-16 15:4220240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
    + 2012-04-21 23:43 . 2012-08-16 07:0834144 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\oisicon.exe
    + 2012-04-21 23:43 . 2012-08-16 07:0843608 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\msouc.exe
    + 2012-04-21 23:43 . 2012-08-16 07:0819296 c:\windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\cagicon.exe
    - 2010-01-06 17:36 . 2011-09-16 15:4135088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2010-01-06 17:36 . 2012-08-16 07:0935088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    - 2010-01-06 17:36 . 2011-09-16 15:4118704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-06 17:36 . 2012-08-16 07:0918704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2010-01-06 17:36 . 2011-09-16 15:4120240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2010-01-06 17:36 . 2012-08-16 07:0920240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2011-10-10 23:03 . 2011-10-10 23:0310134 c:\windows\Installer\{2AAB21C2-4CDA-4189-A0EC-5ED666113F84}\ARPPRODUCTICON.exe
    + 2011-11-16 07:16 . 2011-11-16 07:1665536 c:\windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe
    + 2011-11-16 07:16 . 2011-11-16 07:1665536 c:\windows\Installer\{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}\ARPPRODUCTICON.exe
    + 2012-01-03 13:45 . 2012-01-03 13:4516832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\ViewerPS.dll
    + 2012-01-04 02:51 . 2012-01-04 02:5137296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\reader_sl.exe
    + 2012-01-03 13:44 . 2012-01-03 13:4479280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\PDFPrevHndlr.dll
    + 2012-01-04 02:15 . 2012-01-04 02:1599776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\eula.exe
    + 2012-01-04 01:52 . 2012-01-04 01:5227048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acrotextextractor.exe
    + 2012-01-03 12:19 . 2012-01-03 12:1916824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroRd32Info.exe
    + 2012-01-03 12:16 . 2012-01-03 12:1675200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\acroiehelpershim.dll
    + 2012-01-03 12:16 . 2012-01-03 12:1661888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0500000010\9.5.0\AcroIEHelper.dll
    + 2011-11-02 04:26 . 2011-11-02 04:2653608 c:\windows\Installer\$PatchCache$\Managed\2E666343950ACA84DA7632B07FE4D22B\2.1.6\pthreadVC2.dll
    + 2011-11-02 04:25 . 2011-11-02 04:2517256 c:\windows\Installer\$PatchCache$\Managed\2E666343950ACA84DA7632B07FE4D22B\2.1.6\AppleVersions.dll
    + 2011-02-04 17:40 . 2011-02-04 17:4049488 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\VBAJET32.DLL
    + 2010-12-21 04:48 . 2010-12-21 04:4844992 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.6029\ACERCLR.DLL
    + 2010-02-25 15:07 . 2010-02-25 15:0749488 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\VBAJET32.DLL
    + 2010-01-10 01:47 . 2010-01-10 01:4729528 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\THOCRAPI.DLL
    + 2010-03-23 00:36 . 2010-03-23 00:3682848 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\PEOPLEDATAHANDLER.DLL
    + 2010-03-23 00:36 . 2010-03-23 00:3645984 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OSETUPPS.DLL
    + 2010-03-23 00:36 . 2010-03-23 00:3615776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\OMUOPTINPS.DLL
    + 2010-02-28 06:13 . 2010-02-28 06:1320880 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MUOPTIN.DLL
    + 2010-03-01 09:17 . 2010-03-01 09:1714736 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOCFUIU.DLL
    + 2010-01-10 23:48 . 2010-01-10 23:4818832 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\MSOCFU.DLL
    + 2010-03-23 00:36 . 2010-03-23 00:3658232 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\EXP_XPS.DLL
    + 2010-03-23 00:51 . 2010-03-23 00:5144480 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACERCLR.DLL
    + 2010-03-23 00:51 . 2010-03-23 00:5114776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODTXT.DLL
    + 2010-03-23 00:51 . 2010-03-23 00:5114776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODEXL.DLL
    + 2010-03-23 00:51 . 2010-03-23 00:5114776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEODDBS.DLL
    + 2010-03-23 14:54 . 2010-03-23 14:5437776 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\ACEERR.DLL
    + 2009-02-26 18:09 . 2009-02-26 18:0910120 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\XLCALL32.DLL
    + 2009-02-26 23:43 . 2009-02-26 23:4371520 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\XL12CNVP.DLL
    + 2009-02-27 01:45 . 2009-02-27 01:4520808 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\WRD12EXE.EXE
    + 2011-05-31 20:31 . 2011-05-31 20:3132128 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\VPREVIEW.EXE
    + 2006-07-24 18:50 . 2006-07-24 18:5047920 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\VBAME.DLL
    + 2011-07-20 09:17 . 2011-07-20 09:1733152 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\SETLANG.EXE
    + 2011-07-20 10:28 . 2011-07-20 10:2854104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\SCANOST.EXE
    + 2011-07-20 10:28 . 2011-07-20 10:2875624 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\RM.DLL
    + 2011-07-27 08:53 . 2011-07-27 08:5339464 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\REFIEBAR.DLL
    + 2009-02-26 23:21 . 2009-02-26 23:2138224 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\REFEDIT.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2838248 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\RECALL.DLL
    + 2011-05-27 00:18 . 2011-05-27 00:1852088 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\OUTLVBA.DLL
    + 2009-02-26 17:09 . 2009-02-26 17:0943352 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\OUTLRPC.DLL
    + 2011-07-27 09:17 . 2011-07-27 09:1722432 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\OISCTRL.DLL
    + 2011-07-27 09:25 . 2011-07-27 09:2553728 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\OFFRHD.DLL
    + 2011-07-27 08:53 . 2011-07-27 08:5364872 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\NAME.DLL
    + 2011-07-20 09:23 . 2011-07-20 09:2365408 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSOMSE.DLL
    + 2009-02-26 21:07 . 2009-02-26 21:0767440 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSOHTMED.EXE
    + 2009-02-26 21:07 . 2009-02-26 21:0775120 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSOHEV.DLL
    + 2009-02-26 23:21 . 2009-02-26 23:2125968 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSOEURO.DLL
    + 2011-07-27 08:34 . 2011-07-27 08:3413712 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSOCFU.DLL
    + 2011-07-20 09:23 . 2011-07-20 09:2347472 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSE7.EXE
    + 2009-02-26 17:13 . 2009-02-26 17:1365928 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSAEXP30.DLL
    + 2006-07-24 18:50 . 2006-07-24 18:5092976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MSADDNDR.DLL
    + 2009-02-26 17:09 . 2009-02-26 17:0920352 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\MLSHEXT.DLL
    + 2011-05-31 20:26 . 2011-05-31 20:2688448 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\METCONV.DLL
    + 2011-07-27 21:49 . 2011-07-27 21:4956696 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\EXP_XPS.DLL
    + 2011-07-27 21:49 . 2011-07-27 21:4995608 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\EXP_PDF.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2834208 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\DUMPSTER.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2887408 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\DLGSETP.DLL
    + 2009-02-26 17:46 . 2009-02-26 17:4664344 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\COLLIMP.DLL
    + 2009-02-26 21:07 . 2009-02-26 21:0753120 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\AUTHZAX.DLL
    + 2011-07-27 08:41 . 2011-07-27 08:4155168 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACERCLR.DLL
    + 2009-02-26 15:18 . 2009-02-26 15:1814192 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACEODTXT.DLL
    + 2009-02-26 15:18 . 2009-02-26 15:1814192 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACEODPDX.DLL
    + 2009-02-26 15:18 . 2009-02-26 15:1814192 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACEODEXL.DLL
    + 2009-02-26 15:18 . 2009-02-26 15:1814192 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACEODDBS.DLL
    + 2011-07-27 08:41 . 2011-07-27 08:4147024 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACEERR.DLL
    + 2011-07-27 08:41 . 2011-07-27 08:4155240 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACECNFLT.EXE
    + 2011-07-27 08:40 . 2011-07-27 08:4093576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6612\ACCOLK.DLL
    + 2006-07-24 18:50 . 2006-07-24 18:5047920 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBAME.DLL
    + 2010-01-04 20:06 . 2010-01-04 20:0635648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OLCTLPIA.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1240256 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOSV.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1256656 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSB1XTOR.DLL
    + 2006-07-24 18:50 . 2006-07-24 18:5092976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSADDNDR.DLL
    + 2006-10-27 03:21 . 2006-10-27 03:2182232 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\FBIBLIO.DLL
    + 2009-04-02 20:01 . 2009-04-02 20:0156680 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXP_XPS.DLL
    + 2009-04-04 02:46 . 2009-04-04 02:4697640 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXP_PDF.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1214688 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\CAGCAT10.DLL
    + 2006-10-27 04:13 . 2006-10-27 04:1356192 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACECNFLT.EXE
    + 2009-02-26 18:09 . 2009-02-26 18:0910120 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XLCALL32.DLL
    + 2009-02-26 23:43 . 2009-02-26 23:4371520 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\XL12CNVP.DLL
    + 2009-02-27 01:45 . 2009-02-27 01:4520808 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\WRD12EXE.EXE
    + 2006-07-24 18:50 . 2006-07-24 18:5047920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\VBAME.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2854104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\SCANOST.EXE
    + 2011-07-20 10:28 . 2011-07-20 10:2875624 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\RM.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2838248 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\RECALL.DLL
    + 2011-05-27 00:18 . 2011-05-27 00:1852088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLVBA.DLL
    + 2009-02-26 17:09 . 2009-02-26 17:0943352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\OUTLRPC.DLL
    + 2009-02-26 19:24 . 2009-02-26 19:2471536 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONFILTER.DLL
    + 2009-02-26 19:24 . 2009-02-26 19:2497680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\ONENOTEM.EXE
    + 2006-07-24 18:50 . 2006-07-24 18:5092976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MSADDNDR.DLL
    + 2009-02-26 17:09 . 2009-02-26 17:0920352 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\MLSHEXT.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2834208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\DUMPSTER.DLL
    + 2011-07-20 10:28 . 2011-07-20 10:2887408 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6612\DLGSETP.DLL
    + 2006-07-24 18:50 . 2006-07-24 18:5047920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBAME.DLL
    + 2010-01-06 17:35 . 2010-01-06 17:3517208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ONPIA.DLL
    + 2010-01-04 20:06 . 2010-01-04 20:0635648 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLCTLPIA.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1240256 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOSV.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1256656 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSB1XTOR.DLL
    + 2006-07-24 18:50 . 2006-07-24 18:5092976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSADDNDR.DLL
    + 2006-10-27 03:21 . 2006-10-27 03:2182232 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\FBIBLIO.DLL
    + 2009-04-02 20:01 . 2009-04-02 20:0156680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXP_XPS.DLL
    + 2009-04-04 02:46 . 2009-04-04 02:4697640 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXP_PDF.DLL
    + 2006-10-27 04:12 . 2006-10-27 04:1214688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\CAGCAT10.DLL
    + 2009-03-06 10:48 . 2009-03-06 10:4855152 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACERCLR.DLL
    + 2006-10-27 04:13 . 2006-10-27 04:1356192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACECNFLT.EXE
    + 2010-01-04 20:06 . 2010-01-04 20:0635648 c:\windows\Installer\$PatchCache$\Managed\00002105501100000000000000F01FEC\12.0.4518\OLCTLPIA.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:2788576 c:\windows\ehome\NetBridge.dll
    - 2009-07-14 00:24 . 2009-07-14 01:4188576 c:\windows\ehome\NetBridge.dll
    + 2011-07-01 01:38 . 2010-11-20 13:4456320 c:\windows\ehome\Microsoft.MediaCenter.Mheg.dll
    - 2009-07-14 00:25 . 2009-07-14 01:5156320 c:\windows\ehome\Microsoft.MediaCenter.Mheg.dll
    - 2009-07-14 00:24 . 2009-07-14 01:2842496 c:\windows\ehome\markup.dll
    + 2011-07-01 01:38 . 2010-11-20 13:0342496 c:\windows\ehome\markup.dll
    - 2009-07-13 22:35 . 2009-07-14 01:2094208 c:\windows\ehome\ehCIR.dll
    + 2011-07-01 01:38 . 2010-11-20 12:3294208 c:\windows\ehome\ehCIR.dll
    + 2011-07-01 01:38 . 2010-11-20 12:5767072 c:\windows\diagnostics\system\WindowsMediaPlayerConfiguration\DiagPackage.dll
    + 2011-07-01 01:38 . 2010-11-20 13:3919968 c:\windows\diagnostics\system\HomeGroup\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.dll
    - 2009-07-13 21:14 . 2009-07-14 01:4619968 c:\windows\diagnostics\system\HomeGroup\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.dll
    - 2009-07-13 23:23 . 2009-07-14 01:3871168 c:\windows\bfsvc.exe
    + 2011-07-01 01:38 . 2010-11-20 13:2471168 c:\windows\bfsvc.exe
    + 2012-05-10 21:19 . 2012-05-10 21:1910240 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Xml.Serializ#\7fa267d10b2df6dbd00d00d130715f0a\System.Xml.Serialization.ni.dll
    + 2012-05-10 21:19 . 2012-05-10 21:1943520 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Pres#\054fce9466c6cef615b2f7cc9ff4e7f8\System.Windows.Presentation.ni.dll
    + 2012-05-10 21:19 . 2012-05-10 21:1986016 c:\windows\assembly\NativeImages_v4.0.30319_64\System.Web.Applicat#\ff78ec1b5bf38a8fb74c2d4f41bb308a\System.Web.ApplicationServices.ni.dll
    + 2012-05-10 21:17 . 2012-05-10 21:1797792 c:\windows\assembly\NativeImages_v4.0.30319_64\System.AddIn.Contra#\e144d0028365c62178eb0662911ac910\System.AddIn.Contract.ni.dll
    + 2012-05-10 21:15 . 2012-05-10 21:1514336 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.VisualC\93295f3771dc9e5be2d49d5f5d76a7a6\Microsoft.VisualC.ni.dll
    + 2012-05-10 21:15 . 2012-05-10 21:1555808 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\ae1aa0da6c3f69ae100effa75c1e2316\Microsoft.Office.Tools.v4.0.Framework.ni.dll
    + 2012-05-10 21:15 . 2012-05-10 21:1528160 c:\windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Office.To#\3f51f3b0ffc904203234c8b32f98c31f\Microsoft.Office.Tools.ni.dll
    + 2012-05-10 21:14 . 2012-05-10 21:1410752 c:\windows\assembly\NativeImages_v4.0.30319_64\dfsvc\5ea625ce2d6c08687f70cb81a003a28b\dfsvc.ni.exe
    + 2012-05-10 21:14 . 2012-05-10 21:1458368 c:\windows\assembly\NativeImages_v4.0.30319_64\Accessibility\061cbee19075e086d675a9e1f65725d7\Accessibility.ni.dll
    + 2012-05-10 21:12 . 2012-05-10 21:1296768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\05787d96761cf20b76b927ace10ef1d3\UIAutomationProvider.ni.dll
    + 2012-05-10 21:14 . 2012-05-10 21:1435328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f3a9c6e87bfa4bab3689ec1cdb56964f\System.Windows.Presentation.ni.dll
    + 2012-05-10 21:14 . 2012-05-10 21:1471680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\9b418f37f4594806e1f4b0ed6d083a95\System.Web.ApplicationServices.ni.dll
    + 2012-05-10 21:14 . 2012-05-10 21:1482432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\d09c237ee72af3935f1a01388ef8e315\System.ServiceModel.Channels.ni.dll
    + 2012-05-10 21:12 . 2012-05-10 21:1278848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\59be5fb54e018032511415f0b0523ee3\System.AddIn.Contract.ni.dll
    + 2012-05-10 21:12 . 2012-05-10 21:1211776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\46f273930666397a8cb538ffe9190eef\Microsoft.VisualC.ni.dll
    + 2012-05-10 21:11 . 2012-05-10 21:1121504 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\d1863e1b75c767daef24a3b149faddac\Microsoft.Office.Tools.ni.dll
    + 2012-05-10 21:12 . 2012-05-10 21:1245056 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Office.To#\31173593560b0b4db1a7b6025dabc5e5\Microsoft.Office.Tools.v4.0.Framework.ni.dll
    + 2012-05-10 14:56 . 2012-05-10 14:5644544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\62c1a496dff99a6e5f5e4278d31ca4c1\Accessibility.ni.dll
    + 2012-05-11 16:18 . 2012-05-11 16:1860416 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Pres#\fb4bc14964a1d415bdbe55b62ce73a52\System.Windows.Presentation.ni.dll
    + 2012-06-16 17:02 . 2012-06-16 17:0254784 c:\windows\assembly\NativeImages_v2.0.50727_64\System.Web.DynamicD#\eef76dd965ea0a8ae5fb0c734d84389c\System.Web.DynamicData.Design.ni.dll
    + 2012-05-11 15:38 . 2012-05-11 15:3890624 c:\windows\assembly\NativeImages_v2.0.50727_64\stdole\ee709a01b51c82626f4b2c1173f2db28\stdole.ni.dll
    + 2012-05-11 16:09 . 2012-05-11 16:0972192 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationFontCac#\78f495970511b726a0ca7b8119360e25\PresentationFontCache.ni.exe
    + 2012-05-11 00:11 . 2012-05-11 00:1161952 c:\windows\assembly\NativeImages_v2.0.50727_64\PresentationCFFRast#\1a359e9b908a2565c546a8ca04b241c2\PresentationCFFRasterizer.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0833792 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Run#\9d57c4bbbc0b3243046fc7839da71b00\Microsoft.WSMan.Runtime.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0843520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\d6578432220dbabf2b15027681327bf8\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0840448 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\66deb65a87750efddf62d1e0c0655352\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0836864 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\4b6402dc918e41b8de8c501f29833d91\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0845056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\28545d2b6a0aaef4aa168f9808603bc5\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0870144 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\1d8a17a2c1416a8ad4d6ad2a28b4c5fd\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0859904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.D#\0abc7256549c204f39af7dcc52c9e5d5\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3745056 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\d84c14e69b88aeac74de3f6805b900e7\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3771680 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\abd9d2880ca61bf077d60419f5ec1114\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3759904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\90084df18546aa62b4341a272ea71d30\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 16:08 . 2012-05-11 16:0893696 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\75909fbd25e848d0425e03df4c06a00b\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3743520 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\7003996ae5bd140e50c6a12a7c419910\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3786016 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\397ef046a0d464801359654f6df589be\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3759904 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\317ca97e8f47080ea7950654db36ece0\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3784992 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\2d07593d9552f036c38c9b15b6355390\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
    + 2012-05-11 15:37 . 2012-05-11 15:3787040 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualStu#\07f7dae1df42a6bce3126ce63ea0564e\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 00:10 . 2012-05-11 00:1032256 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.VisualC\3c3a6cce983114e7406e0a6e6116ecd8\Microsoft.VisualC.ni.dll
    + 2012-05-11 16:07 . 2012-05-11 16:0764000 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\da47c045fb26852f5f85c81daf7283ad\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    + 2012-05-11 16:07 . 2012-05-11 16:0766048 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Security.#\470be8218256dec2c8a1a503b70feab1\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    + 2012-05-11 15:38 . 2012-05-11 15:3865536 c:\windows\assembly\NativeImages_v2.0.50727_64\Microsoft.MediaCent#\6ab0575bf49b60fd4b697d47e1754072\Microsoft.MediaCenter.iTv.Hosting.ni.dll
    + 2012-05-11 16:07 . 2012-05-11 16:0740960 c:\windows\assembly\NativeImages_v2.0.50727_64\LoadMxf\1569a004b1f41193818e3b3777f2c73d\LoadMxf.ni.exe
    + 2012-05-11 15:38 . 2012-05-11 15:3849664 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiUPnP\3ee98e8b2084e27d65953bbd7e362bf8\ehiUPnP.ni.dll
    + 2012-05-11 15:38 . 2012-05-11 15:3893184 c:\windows\assembly\NativeImages_v2.0.50727_64\ehiTVMSMusic\1cd9f92749d29b9fd61fcb1c4ae84294\ehiTVMSMusic.ni.dll
    + 2012-05-11 15:38 . 2012-05-11 15:3828672 c:\windows\assembly\NativeImages_v2.0.50727_64\dfsvc\0811f67973c32efb2bfad62a4a2592b5\dfsvc.ni.exe
    + 2012-05-11 15:37 . 2012-05-11 15:3733280 c:\windows\assembly\NativeImages_v2.0.50727_64\AuditPolicyGPManage#\e5caecdfb99f9de3031152786ee208d9\AuditPolicyGPManagedStubs.Interop.ni.dll
    + 2012-05-11 00:11 . 2012-05-11 00:1178848 c:\windows\assembly\NativeImages_v2.0.50727_64\Accessibility\ae9311dcb0e713330a2a86b04cf361dc\Accessibility.ni.dll
    + 2012-06-16 16:57 . 2012-06-16 16:5747616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\b2854071ec4656c370d884ca390e462f\WindowsLiveWriter.ni.exe
    + 2012-06-16 16:57 . 2012-06-16 16:5799840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e64203688b7bb9596f2c9be84884e87f\WindowsLive.Writer.Api.ni.dll
    + 2012-05-11 00:14 . 2012-05-11 00:1460928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ca2eff60beb3ba00a529a2d42dceca22\UIAutomationProvider.ni.dll
    + 2012-05-11 16:30 . 2012-05-11 16:3037888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\66d750f3f8dde0cc865f921497ab3545\System.Windows.Presentation.ni.dll
    + 2012-06-16 16:58 . 2012-06-16 16:5836864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\2b97ccae44726f13c418f1406180c3e8\System.Web.DynamicData.Design.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2994208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\543b0e12423bcec010bdd2ac27c5dc04\System.ComponentModel.DataAnnotations.ni.dll
    + 2012-05-11 00:15 . 2012-05-11 00:1582944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f34410ab8e82063735d876533db26c49\System.AddIn.Contract.ni.dll
    + 2012-05-11 00:17 . 2012-05-11 00:1744032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\d246780b91fd9f6393e85fb13bde94a6\stdole.ni.dll
    + 2012-06-16 16:46 . 2012-06-16 16:4614848 c:\windows\assembly\NativeImages_v2.0.50727_32\SBAIUI\e0483bfc60abf8df22125b41a8d62bcf\SBAIUI.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2947104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\d24744f15243e28ea541a459ff7ff5d5\PresentationFontCache.ni.exe
    + 2012-05-11 00:14 . 2012-05-11 00:1439424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5a9d0ff936810991cedd098fe006a9be\PresentationCFFRasterizer.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2979872 c:\windows\assembly\NativeImages_v2.0.50727_32\napcrypt\87a30ba337ed55d0905f19742e2985bc\napcrypt.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2917920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.WSMan.Run#\9f2e8e0df9ff39ad21088f1d66cfadb1\Microsoft.WSMan.Runtime.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2923040 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\d797123d55bb7b823120d0a7ffbbc2a7\Microsoft.Windows.Diagnosis.Commands.UpdateDiagRootcause.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2932256 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb8ad29814d9e5589bd400d38e7a0b10\Microsoft.Windows.Diagnosis.SDHost.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2921504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\cb42a0f25b7608b2675080081b03f6e5\Microsoft.Windows.Diagnosis.SDEngine.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2925088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\c6e9143be5afb36345875d56b61c444f\Microsoft.Windows.Diagnosis.Commands.GetDiagInput.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2919968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\91767cf3facefe10e00734c815e925ad\Microsoft.Windows.Diagnosis.Commands.WriteDiagProgress.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2927136 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\66cd99d2f576cde047074e98bd5e1848\Microsoft.Windows.Diagnosis.Commands.UpdateDiagReport.ni.dll
    + 2012-05-11 16:29 . 2012-05-11 16:2986528 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Windows.D#\4308e1bdc640e1c3f1ea966e84e48900\Microsoft.Windows.Diagnosis.TroubleshootingPack.ni.dll
    + 2012-05-11 00:17 . 2012-05-11 00:1755296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\06fcf2fbbe38d9425fc49d935498ec93\Microsoft.Vsa.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1686016 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\f006c35edb9f64436d7f0795a7ea319e\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1651712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\be59506a77d76e325dbb02a4ef651eff\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2866560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a516cad7285e7506dc477e03c7468aac\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1635328 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a3d7d37ccd26595b9858116ac8e78e42\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1658368 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\a306bdd890d9250b9cb4c03876f3b146\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1660928 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\9e572d1a5f468ae4226d9c74a54dbf5a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1643008 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\4d661ba2b6ac1a23427070f799fd540c\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1628160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\443eceb48c4c76162ef874395f612590\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1642496 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\11852ce9e3c8a47a9f194e2671a2597f\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.ni.dll
    + 2012-05-11 00:16 . 2012-05-11 00:1628160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualStu#\03f7e17a9422755c383ec2100e178a32\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.ni.dll
    + 2012-05-11 00:13 . 2012-05-11 00:1315872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\55c57057dc81a5e8c5bde3a230f0bcb9\Microsoft.VisualC.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2821504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\c8831ecadb3b99c04fdde12217e715cb\Microsoft.Security.ApplicationId.PolicyManagement.PolicyEngineApi.Interop.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2839936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Security.#\54c9d51df5b739db67a270b421af5fde\Microsoft.Security.ApplicationId.PolicyManagement.XmlHelper.ni.dll
    + 2012-05-11 16:27 . 2012-05-11 16:2751712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\1ce9b3c77346d0cc83a4942e0ae3c11b\Microsoft.Office.Interop.OutlookViewCtl.ni.dll
    + 2012-05-11 00:17 . 2012-05-11 00:1739424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\e5b379c939fd6db9c318faefdcec8616\Microsoft.Interop.eCRM.NetFw.ni.dll
    + 2012-05-11 00:17 . 2012-05-11 00:1762976 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\be6b273db7db07786b1776a2dbeaacf9\Microsoft.Interop.eCRM.Ole.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2874752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e3ef400b1f37e4d3b79a42a8a602ea02\Microsoft.Build.Framework.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2865024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\2095344bf8c40f8baa94ba53a993fb4c\Microsoft.Build.Framework.ni.dll
    + 2012-05-11 00:17 . 2012-05-11 00:1721504 c:\windows\assembly\NativeImages_v2.0.50727_32\ILoader\658b954dac816051e753159c77fd903d\ILoader.ni.dll
    + 2012-05-11 16:27 . 2012-05-11 16:2714336 c:\windows\assembly\NativeImages_v2.0.50727_32\Extensibility\62d4310bee2e4d068d3e46233d4a5bbe\Extensibility.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2860416 c:\windows\assembly\NativeImages_v2.0.50727_32\ehiUserXp\dc93539af5a961641a26ada75f730136\ehiUserXp.ni.dll
    + 2012-05-11 16:28 . 2012-05-11 16:2814336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\53d03b0e238c77cf7e5ac88e02aecd2c\dfsvc.ni.exe
    + 2012-05-11 00:16 . 2012-05-11 00:1614336 c:\windows\assembly\NativeImages_v2.0.50727_32\AuditPolicyGPManage#\2ebfc41cb0193cb129521d80ec206da7\AuditPolicyGPManagedStubs.Interop.ni.dll
    + 2012-05-11 00:14 . 2012-05-11 00:1425600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll
    person15, Sep 3, 2012
    #15

  16. person15 Newcomer, in training Posts: 55

    + 2011-07-01 01:38 . 2010-11-05 01:5361440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1461440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5332768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1432768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5377824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1477824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
    - 2009-07-14 00:36 . 2009-06-10 21:1432768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5232768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5273728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    - 2009-07-14 00:36 . 2009-06-10 21:1473728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1453248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5353248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5881920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2381920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5357344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1457344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1445056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5345056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311104 c:\windows\assembly\GAC_MSIL\Policy.12.0.office\14.0.0.0__71e9bce111e9429c\Policy.12.0.Office.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311640 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Vbe.Interop.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Word\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Word.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.SmartTag.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.PowerPoint\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.PowerPoint.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Graph.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Excel.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311664 c:\windows\assembly\GAC_MSIL\Policy.12.0.Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Policy.12.0.Microsoft.Office.Interop.Access.Dao.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311104 c:\windows\assembly\GAC_MSIL\Policy.11.0.office\14.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311640 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Word\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311664 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311664 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.PowerPoint\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Graph\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4311656 c:\windows\assembly\GAC_MSIL\Policy.11.0.Microsoft.Office.Interop.Excel\14.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
    - 2009-07-14 05:35 . 2009-07-14 02:1336864 c:\windows\assembly\GAC_MSIL\MMCEx.Resources\3.0.0.0_en_31bf3856ad364e35\MMCEx.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 12:1936864 c:\windows\assembly\GAC_MSIL\MMCEx.Resources\3.0.0.0_en_31bf3856ad364e35\MMCEx.Resources.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4783896 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.HostAdapter.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4365536 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInProxy.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4336864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Word.AddInAdapter.v9.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4741408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Outlook.HostAdapter.v10.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4763408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.HostAdapter.v10.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4777752 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4353248 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInProxy.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4336864 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Excel.AddInAdapter.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4349152 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v9.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4723976 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.Contract.v10.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4762392 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.ContainerControl.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4381920 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Office.AddInAdapter.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4377824 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v9.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4732688 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Runtime.v10.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4735256 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.HostAdapter.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4322016 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v9.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4724496 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4345056 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v9.0.dll
    + 2012-04-21 23:47 . 2012-04-21 23:4741408 c:\windows\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0\10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInAdapter.v10.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4363336 c:\windows\assembly\GAC_MSIL\Microsoft.Vbe.Interop\14.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    - 2009-07-13 21:37 . 2009-07-14 01:4777824 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
    + 2011-07-01 01:38 . 2010-11-20 13:4477824 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Security\1.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll
    - 2009-07-14 05:35 . 2009-07-14 02:3340960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:1640960 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:1636864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.Resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:3336864 c:\windows\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.Resources.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4394208 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4377824 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Tools.Outlook.v9.0\9.0.0.0__b03f5f7f11d50a3a\Microsoft.Office.Tools.Outlook.v9.0.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4319320 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.SmartTag\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4346968 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.OneNote\14.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4316248 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
    + 2012-04-21 23:43 . 2012-04-21 23:4379744 c:\windows\assembly\GAC_MSIL\Microsoft.Office.Interop.Access.Dao\14.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5777824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2377824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-07-13 21:10 . 2009-06-10 21:1494208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5394208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2336864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5736864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-07-14 05:35 . 2009-07-14 02:3312800 c:\windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.ApplicationId.Framework.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:1612800 c:\windows\assembly\GAC_MSIL\Microsoft.ApplicationId.Framework.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.ApplicationId.Framework.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 12:3294208 c:\windows\assembly\GAC_MSIL\ehCIR\6.1.0.0__31bf3856ad364e35\ehCIR.dll
    - 2009-07-13 22:35 . 2009-07-14 01:2094208 c:\windows\assembly\GAC_MSIL\ehCIR\6.1.0.0__31bf3856ad364e35\ehCIR.dll
    - 2009-07-14 00:09 . 2009-07-14 01:5150176 c:\windows\assembly\GAC_64\napcrypt\6.1.0.0__31bf3856ad364e35\NAPCRYPT.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:4450176 c:\windows\assembly\GAC_64\napcrypt\6.1.0.0__31bf3856ad364e35\NAPCRYPT.DLL
    + 2011-07-01 01:39 . 2010-11-05 01:5383792 c:\windows\assembly\GAC_64\MSBuild\3.5.0.0__b03f5f7f11d50a3a\MSBuild.exe
    - 2009-07-14 00:25 . 2009-07-14 01:5156320 c:\windows\assembly\GAC_64\Microsoft.MediaCenter.Mheg\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Mheg.dll
    + 2011-07-01 01:38 . 2010-11-20 13:4456320 c:\windows\assembly\GAC_64\Microsoft.MediaCenter.Mheg\6.1.0.0__31bf3856ad364e35\Microsoft.MediaCenter.Mheg.dll
    - 2009-07-13 21:14 . 2009-07-14 01:4619968 c:\windows\assembly\GAC_64\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\6.1.0.0__31bf3856ad364e35\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.dll
    + 2011-07-01 01:38 . 2010-11-20 13:3919968 c:\windows\assembly\GAC_64\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop\6.1.0.0__31bf3856ad364e35\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3989600 c:\windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5689600 c:\windows\assembly\GAC_64\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5680896 c:\windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-07-13 20:37 . 2009-06-10 20:3980896 c:\windows\assembly\GAC_64\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2011-07-01 01:38 . 2010-11-20 12:3646080 c:\windows\assembly\GAC_32\napcrypt\6.1.0.0__31bf3856ad364e35\NAPCRYPT.DLL
    - 2009-07-13 23:53 . 2009-07-14 01:2246080 c:\windows\assembly\GAC_32\napcrypt\6.1.0.0__31bf3856ad364e35\NAPCRYPT.DLL
    - 2009-07-13 20:46 . 2009-06-10 21:2272192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5772192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2011-07-01 01:38 . 2010-11-05 01:5769120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-07-13 20:46 . 2009-06-10 21:2269120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2012-03-17 06:01 . 2012-03-17 06:0111144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
    + 2012-03-17 06:01 . 2012-03-17 06:0163336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    - 2010-01-04 20:10 . 2010-01-04 20:1063336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2012-03-17 06:01 . 2012-03-17 06:0134696 c:\windows\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
    + 2011-08-10 16:05 . 2011-07-16 04:2644032 c:\windows\AppPatch\acwow64.dll
    - 2011-08-10 16:05 . 2011-07-16 04:3244032 c:\windows\AppPatch\acwow64.dll
    - 2011-08-10 16:05 . 2011-07-16 04:305120 c:\windows\SysWOW64\wow32.dll
    + 2011-08-10 16:05 . 2011-07-16 04:245120 c:\windows\SysWOW64\wow32.dll
    + 2012-04-13 15:20 . 2012-03-01 05:295120 c:\windows\SysWOW64\wmi.dll
    - 2009-07-14 00:19 . 2009-07-14 01:115120 c:\windows\SysWOW64\wmi.dll
    + 2011-08-10 16:05 . 2011-07-16 02:212048 c:\windows\SysWOW64\user.exe
    - 2011-08-10 16:05 . 2011-07-16 02:262048 c:\windows\SysWOW64\user.exe
    - 2011-08-24 18:11 . 2011-07-09 04:302048 c:\windows\SysWOW64\tzres.dll
    + 2011-12-14 15:00 . 2011-11-05 04:262048 c:\windows\SysWOW64\tzres.dll
    - 2010-10-13 14:42 . 2010-08-27 05:469728 c:\windows\SysWOW64\sscore.dll
    + 2011-07-01 01:38 . 2010-11-20 12:219728 c:\windows\SysWOW64\sscore.dll
    + 2011-07-01 01:38 . 2010-11-20 12:208192 c:\windows\SysWOW64\spwmp.dll
    - 2009-07-14 00:08 . 2009-07-14 01:168192 c:\windows\SysWOW64\spwmp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:077680 c:\windows\SysWOW64\spwizres.dll
    + 2011-07-01 01:38 . 2010-11-20 12:218704 c:\windows\SysWOW64\riched32.dll
    + 2011-11-02 19:51 . 2012-06-15 15:215632 c:\windows\SysWOW64\pndx5032.dll
    - 2010-07-03 23:18 . 2010-07-03 23:185632 c:\windows\SysWOW64\pndx5032.dll
    - 2010-07-03 23:18 . 2010-07-03 23:186656 c:\windows\SysWOW64\pndx5016.dll
    + 2011-11-02 19:51 . 2012-06-15 15:216656 c:\windows\SysWOW64\pndx5016.dll
    - 2009-07-14 00:19 . 2009-07-14 01:072048 c:\windows\SysWOW64\msxml3r.dll
    + 2012-07-11 15:19 . 2010-06-26 03:242048 c:\windows\SysWOW64\msxml3r.dll
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDUS.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDUGHR1.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDTURME.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDTUQ.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDTUF.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDTAJIK.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDSG.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDSF.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDPO.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDNEPR.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDMON.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDMAORI.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDLT1.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\kbdlk41a.dll
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDINTEL.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINTAM.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINORI.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINMAR.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINKAN.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINHIN.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087168 c:\windows\SysWOW64\KBDINBEN.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDGR1.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDGKL.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDGEO.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:087680 c:\windows\SysWOW64\KBDCZ1.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDBULG.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDBLR.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:086656 c:\windows\SysWOW64\KBDBASH.DLL
    - 2011-08-10 16:05 . 2011-07-16 02:267680 c:\windows\SysWOW64\instnm.exe
    + 2011-08-10 16:05 . 2011-07-16 02:217680 c:\windows\SysWOW64\instnm.exe
    + 2011-07-01 01:38 . 2010-11-20 12:214096 c:\windows\SysWOW64\dxmasf.dll
    - 2009-07-14 00:09 . 2009-07-14 01:164096 c:\windows\SysWOW64\dxmasf.dll
    + 2011-07-01 01:38 . 2010-11-20 11:572560 c:\windows\SysWOW64\dpnaddr.dll
    + 2011-08-10 16:05 . 2011-07-16 02:176144 c:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 02:216144 c:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 02:173584 c:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 02:213584 c:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 02:173072 c:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 02:213072 c:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 02:214608 c:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 02:174608 c:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194096 c:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154096 c:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194096 c:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154096 c:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194608 c:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154608 c:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154096 c:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194096 c:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194096 c:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154096 c:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:194096 c:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:154096 c:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153584 c:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193584 c:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:155120 c:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:195120 c:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 04:193072 c:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 04:153072 c:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    - 2009-07-14 00:41 . 2009-07-14 01:335120 c:\windows\system32\wmi.dll
    + 2012-04-13 15:20 . 2012-03-01 06:285120 c:\windows\system32\wmi.dll
    + 2010-01-20 14:24 . 2012-08-31 21:194480 c:\windows\system32\wdi\ERCQueuedResolutions.dat
    + 2010-02-04 04:49 . 2012-06-05 00:111546 c:\windows\system32\wdi\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
    - 2010-02-04 04:49 . 2011-05-16 14:511546 c:\windows\system32\wdi\{88d4896f-f553-446a-9c75-9dec124ff8b7}.bin
    + 2011-12-14 15:00 . 2011-11-05 05:322048 c:\windows\system32\tzres.dll
    - 2011-08-24 18:11 . 2011-07-09 05:142048 c:\windows\system32\tzres.dll
    + 2011-07-01 01:38 . 2010-11-20 13:258192 c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
    + 2011-07-01 01:38 . 2010-11-20 13:279728 c:\windows\system32\spwmp.dll
    - 2009-07-14 00:23 . 2009-07-14 01:419728 c:\windows\system32\spwmp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:147680 c:\windows\system32\spwizres.dll
    + 2012-06-14 15:21 . 2012-04-26 05:349216 c:\windows\system32\rdrmemptylst.exe
    + 2012-03-17 06:29 . 2012-03-17 06:299560 c:\windows\system32\NetworkList\Icons\{E53B738D-EB4E-46CF-A7AC-2BDAEC1BE81F}_48.bin
    + 2012-03-17 06:29 . 2012-03-17 06:294280 c:\windows\system32\NetworkList\Icons\{E53B738D-EB4E-46CF-A7AC-2BDAEC1BE81F}_32.bin
    + 2012-03-17 06:29 . 2012-03-17 06:292456 c:\windows\system32\NetworkList\Icons\{E53B738D-EB4E-46CF-A7AC-2BDAEC1BE81F}_24.bin
    + 2012-03-09 21:16 . 2012-03-09 21:169560 c:\windows\system32\NetworkList\Icons\{E00605F4-AA14-44D9-90CD-747E1A4ABCBE}_48.bin
    + 2012-03-09 21:16 . 2012-03-09 21:164280 c:\windows\system32\NetworkList\Icons\{E00605F4-AA14-44D9-90CD-747E1A4ABCBE}_32.bin
    + 2012-03-09 21:16 . 2012-03-09 21:162456 c:\windows\system32\NetworkList\Icons\{E00605F4-AA14-44D9-90CD-747E1A4ABCBE}_24.bin
    + 2012-07-04 21:05 . 2012-07-04 21:059560 c:\windows\system32\NetworkList\Icons\{D7D7E478-2763-46CE-9A8E-BF1BB26E390C}_48.bin
    + 2012-07-04 21:05 . 2012-07-04 21:054280 c:\windows\system32\NetworkList\Icons\{D7D7E478-2763-46CE-9A8E-BF1BB26E390C}_32.bin
    + 2012-07-04 21:05 . 2012-07-04 21:052456 c:\windows\system32\NetworkList\Icons\{D7D7E478-2763-46CE-9A8E-BF1BB26E390C}_24.bin
    + 2012-08-13 22:00 . 2012-08-13 22:009560 c:\windows\system32\NetworkList\Icons\{B70F7D97-A63F-46EA-9113-AA503689E216}_48.bin
    + 2012-08-13 22:00 . 2012-08-13 22:004280 c:\windows\system32\NetworkList\Icons\{B70F7D97-A63F-46EA-9113-AA503689E216}_32.bin
    + 2012-08-13 22:00 . 2012-08-13 22:002456 c:\windows\system32\NetworkList\Icons\{B70F7D97-A63F-46EA-9113-AA503689E216}_24.bin
    + 2012-09-03 03:17 . 2012-09-03 03:179560 c:\windows\system32\NetworkList\Icons\{B504597A-1470-4C18-866E-778AAABD129C}_48.bin
    + 2012-09-03 03:17 . 2012-09-03 03:174280 c:\windows\system32\NetworkList\Icons\{B504597A-1470-4C18-866E-778AAABD129C}_32.bin
    + 2012-09-03 03:17 . 2012-09-03 03:172456 c:\windows\system32\NetworkList\Icons\{B504597A-1470-4C18-866E-778AAABD129C}_24.bin
    + 2012-04-04 02:14 . 2012-04-04 02:149560 c:\windows\system32\NetworkList\Icons\{A4A0A658-205E-4477-BE9A-23FF654C8A3B}_48.bin
    + 2012-04-04 02:14 . 2012-04-04 02:144280 c:\windows\system32\NetworkList\Icons\{A4A0A658-205E-4477-BE9A-23FF654C8A3B}_32.bin
    + 2012-04-04 02:14 . 2012-04-04 02:142456 c:\windows\system32\NetworkList\Icons\{A4A0A658-205E-4477-BE9A-23FF654C8A3B}_24.bin
    + 2012-02-06 02:47 . 2012-02-06 02:479560 c:\windows\system32\NetworkList\Icons\{9D79B5BA-6807-4378-B39A-31D4E8E1BA08}_48.bin
    + 2012-02-06 02:47 . 2012-02-06 02:474280 c:\windows\system32\NetworkList\Icons\{9D79B5BA-6807-4378-B39A-31D4E8E1BA08}_32.bin
    + 2012-02-06 02:47 . 2012-02-06 02:472456 c:\windows\system32\NetworkList\Icons\{9D79B5BA-6807-4378-B39A-31D4E8E1BA08}_24.bin
    + 2011-12-25 11:15 . 2011-12-25 11:159560 c:\windows\system32\NetworkList\Icons\{8417E6DC-C068-4EFE-8685-301AAAF7AAF5}_48.bin
    + 2011-12-25 11:15 . 2011-12-25 11:154280 c:\windows\system32\NetworkList\Icons\{8417E6DC-C068-4EFE-8685-301AAAF7AAF5}_32.bin
    + 2011-12-25 11:15 . 2011-12-25 11:152456 c:\windows\system32\NetworkList\Icons\{8417E6DC-C068-4EFE-8685-301AAAF7AAF5}_24.bin
    + 2012-06-28 17:08 . 2012-06-28 17:089560 c:\windows\system32\NetworkList\Icons\{64CBF1DC-F925-4B07-A71A-0A8E9A2CA795}_48.bin
    + 2012-06-28 17:08 . 2012-06-28 17:084280 c:\windows\system32\NetworkList\Icons\{64CBF1DC-F925-4B07-A71A-0A8E9A2CA795}_32.bin
    + 2012-06-28 17:08 . 2012-06-28 17:082456 c:\windows\system32\NetworkList\Icons\{64CBF1DC-F925-4B07-A71A-0A8E9A2CA795}_24.bin
    + 2012-04-03 14:47 . 2012-04-03 14:479560 c:\windows\system32\NetworkList\Icons\{3A3FF67B-4CAE-4CDB-A1F1-DF0878EEC5F2}_48.bin
    + 2012-04-03 14:47 . 2012-04-03 14:474280 c:\windows\system32\NetworkList\Icons\{3A3FF67B-4CAE-4CDB-A1F1-DF0878EEC5F2}_32.bin
    + 2012-04-03 14:47 . 2012-04-03 14:472456 c:\windows\system32\NetworkList\Icons\{3A3FF67B-4CAE-4CDB-A1F1-DF0878EEC5F2}_24.bin
    + 2011-12-21 01:08 . 2011-12-21 01:089560 c:\windows\system32\NetworkList\Icons\{353775CE-2EA3-40ED-8894-694C5ABFCC42}_48.bin
    + 2011-12-21 01:08 . 2011-12-21 01:084280 c:\windows\system32\NetworkList\Icons\{353775CE-2EA3-40ED-8894-694C5ABFCC42}_32.bin
    + 2011-12-21 01:08 . 2011-12-21 01:082456 c:\windows\system32\NetworkList\Icons\{353775CE-2EA3-40ED-8894-694C5ABFCC42}_24.bin
    + 2012-08-18 16:56 . 2012-08-18 16:569560 c:\windows\system32\NetworkList\Icons\{21CBAF37-7B15-40A7-9D8B-BFCAF4003CF6}_48.bin
    + 2012-08-18 16:56 . 2012-08-18 16:564280 c:\windows\system32\NetworkList\Icons\{21CBAF37-7B15-40A7-9D8B-BFCAF4003CF6}_32.bin
    + 2012-08-18 16:56 . 2012-08-18 16:562456 c:\windows\system32\NetworkList\Icons\{21CBAF37-7B15-40A7-9D8B-BFCAF4003CF6}_24.bin
    + 2012-04-02 00:40 . 2012-04-02 00:409560 c:\windows\system32\NetworkList\Icons\{1DB6BAAD-4079-4A7A-8ACE-99D28315DEFA}_48.bin
    + 2012-04-02 00:40 . 2012-04-02 00:404280 c:\windows\system32\NetworkList\Icons\{1DB6BAAD-4079-4A7A-8ACE-99D28315DEFA}_32.bin
    + 2012-04-02 00:40 . 2012-04-02 00:402456 c:\windows\system32\NetworkList\Icons\{1DB6BAAD-4079-4A7A-8ACE-99D28315DEFA}_24.bin
    + 2012-08-13 22:01 . 2012-08-13 22:019560 c:\windows\system32\NetworkList\Icons\{136B0045-CB75-45DE-A70A-543111A0A03F}_48.bin
    + 2012-08-13 22:01 . 2012-08-13 22:014280 c:\windows\system32\NetworkList\Icons\{136B0045-CB75-45DE-A70A-543111A0A03F}_32.bin
    + 2012-08-13 22:01 . 2012-08-13 22:012456 c:\windows\system32\NetworkList\Icons\{136B0045-CB75-45DE-A70A-543111A0A03F}_24.bin
    person15, Sep 3, 2012
    #16

  17. person15 Newcomer, in training Posts: 55

    + 2012-07-11 15:19 . 2010-06-26 03:552048 c:\windows\system32\msxml3r.dll
    - 2009-07-14 00:41 . 2009-07-14 01:302048 c:\windows\system32\msxml3r.dll
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDUS.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDUGHR1.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDTURME.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\KBDTUQ.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\KBDTUF.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDTAJIK.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\KBDSG.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDSF.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDPO.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDNEPR.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDMON.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDMAORI.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDLT1.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\kbdlk41a.dll
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDINTEL.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDINTAM.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDINORI.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDINMAR.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDINKAN.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDINHIN.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDINBEN.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027680 c:\windows\system32\KBDGR1.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\KBDGKL.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:026656 c:\windows\system32\KBDGEO.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:028192 c:\windows\system32\KBDCZ1.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDBULG.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDBLR.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:027168 c:\windows\system32\KBDBASH.DLL
    + 2010-09-27 18:15 . 2010-09-27 18:159728 c:\windows\system32\hpbprops.dll
    - 2007-02-02 19:37 . 2007-02-02 19:379728 c:\windows\system32\hpbprops.dll
    - 2007-02-02 19:37 . 2007-02-02 19:379216 c:\windows\system32\hpboidps.dll
    + 2010-09-27 18:15 . 2010-09-27 18:159216 c:\windows\system32\hpboidps.dll
    + 2011-07-01 01:38 . 2010-11-20 13:275120 c:\windows\system32\dxmasf.dll
    - 2009-07-14 00:23 . 2009-07-14 01:415120 c:\windows\system32\dxmasf.dll
    + 2011-07-01 01:38 . 2010-11-20 09:576656 c:\windows\system32\DriverStore\FileRepository\ws3cap.inf_amd64_neutral_eeaccb8f1560f5fb\vms3cap.sys
    + 2009-07-14 00:06 . 2009-07-14 00:067936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_f935002f367d5bb0\usbd.sys
    + 2011-05-11 18:30 . 2011-03-25 03:287936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbd.sys
    + 2009-07-14 00:06 . 2009-07-14 01:409728 c:\windows\system32\DriverStore\FileRepository\usbcir.inf_amd64_neutral_379fb0c62496be6e\CIRCoInst.dll
    + 2009-07-13 23:31 . 2009-07-13 23:319728 c:\windows\system32\DriverStore\FileRepository\acpi.inf_amd64_neutral_aed2e7a487803437\errdev.sys
    - 2009-07-13 23:42 . 2009-07-13 23:426656 c:\windows\system32\drivers\vms3cap.sys
    + 2011-07-01 01:38 . 2010-11-20 09:576656 c:\windows\system32\drivers\vms3cap.sys
    - 2011-05-11 18:30 . 2011-03-25 03:227936 c:\windows\system32\drivers\usbd.sys
    + 2011-05-11 18:30 . 2011-03-25 03:287936 c:\windows\system32\drivers\usbd.sys
    + 2011-10-10 23:04 . 2011-10-10 23:039984 c:\windows\system32\drivers\mfeclnk.sys
    + 2011-07-01 01:38 . 2010-11-20 12:583072 c:\windows\system32\dpnaddr.dll
    + 2011-08-10 16:05 . 2011-07-16 05:216144 c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:046144 c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
    + 2011-07-01 01:38 . 2010-11-20 12:513072 c:\windows\system32\api-ms-win-core-ums-l1-1-0.dll
    - 2009-07-13 23:21 . 2009-07-14 01:243072 c:\windows\system32\api-ms-win-core-ums-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044608 c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214608 c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214096 c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044096 c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214096 c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044096 c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214608 c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044608 c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214096 c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044096 c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:044096 c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:214096 c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213584 c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043584 c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:045120 c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:215120 c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    - 2011-08-10 16:05 . 2011-07-16 05:043072 c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
    + 2011-08-10 16:05 . 2011-07-16 05:213072 c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
    + 2012-09-03 03:40 . 2012-09-03 03:402048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2011-09-30 01:04 . 2011-09-30 01:042048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2012-09-03 03:40 . 2012-09-03 03:402048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2011-09-30 01:04 . 2011-09-30 01:042048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2010-03-13 05:01 . 2010-03-13 05:019592 c:\windows\Installer\$PatchCache$\Managed\00004109D30000000000000000F01FEC\14.0.4763\XLCALL32.DLL
    + 2012-05-10 21:14 . 2012-05-10 21:149216 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Serializ#\4b540b784465ca3f0742990e5af444e3\System.Xml.Serialization.ni.dll
    + 2012-05-10 14:56 . 2012-05-10 14:569728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\fd866b4158c3bd2a26c875f2896c5573\dfsvc.ni.exe
    - 2009-07-14 05:35 . 2009-07-14 02:134096 c:\windows\assembly\GAC_MSIL\MMCFxCommon.Resources\3.0.0.0_en_31bf3856ad364e35\MMCFxCommon.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 12:194096 c:\windows\assembly\GAC_MSIL\MMCFxCommon.Resources\3.0.0.0_en_31bf3856ad364e35\MMCFxCommon.Resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:334096 c:\windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.SDHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.SDHost.resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:164096 c:\windows\assembly\GAC_MSIL\Microsoft.Windows.Diagnosis.SDHost.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.Windows.Diagnosis.SDHost.resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:166656 c:\windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:336656 c:\windows\assembly\GAC_MSIL\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources\6.1.0.0_en_31bf3856ad364e35\Microsoft.Security.ApplicationId.PolicyManagement.PolicyModel.Resources.dll
    + 2011-07-01 01:38 . 2010-11-20 13:167168 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:327168 c:\windows\assembly\GAC_MSIL\Microsoft.BackgroundIntelligentTransfer.Management.Resources\1.0.0.0_en_31bf3856ad364e35\Microsoft.BackgroundIntelligentTransfer.Management.resources.dll
    + 2011-07-01 01:38 . 2010-11-20 12:198192 c:\windows\assembly\GAC_MSIL\EventViewer.Resources\6.1.0.0_en_31bf3856ad364e35\EventViewer.resources.dll
    - 2009-07-14 05:35 . 2009-07-14 02:128192 c:\windows\assembly\GAC_MSIL\EventViewer.Resources\6.1.0.0_en_31bf3856ad364e35\EventViewer.resources.dll
    - 2010-01-04 20:06 . 2010-01-04 20:064608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
    + 2012-04-21 23:43 . 2012-04-21 23:434608 c:\windows\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16327680 c:\windows\SysWOW64\zipfldr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21327680 c:\windows\SysWOW64\zipfldr.dll
    - 2011-01-12 22:09 . 2010-11-02 04:41135168 c:\windows\SysWOW64\XpsRasterService.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21135168 c:\windows\SysWOW64\XpsRasterService.dll
    + 2011-04-27 22:12 . 2011-03-12 11:23870912 c:\windows\SysWOW64\XpsPrint.dll
    + 2011-04-14 18:51 . 2011-02-24 05:38288256 c:\windows\SysWOW64\XpsGdiConverter.dll
    - 2011-04-14 18:51 . 2011-02-24 05:32288256 c:\windows\SysWOW64\XpsGdiConverter.dll
    - 2011-08-10 16:05 . 2011-06-16 04:35180224 c:\windows\SysWOW64\xmllite.dll
    + 2011-08-10 16:05 . 2011-06-16 04:33180224 c:\windows\SysWOW64\xmllite.dll
    - 2009-07-13 23:19 . 2009-07-14 01:16444928 c:\windows\SysWOW64\wvc.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21444928 c:\windows\SysWOW64\wvc.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21164352 c:\windows\SysWOW64\wuwebv.dll
    - 2009-07-14 00:14 . 2009-07-14 01:16164352 c:\windows\SysWOW64\wuwebv.dll
    - 2009-07-13 23:22 . 2009-07-14 01:14314880 c:\windows\SysWOW64\wusa.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17314880 c:\windows\SysWOW64\wusa.exe
    - 2009-07-14 00:14 . 2009-07-14 01:16560128 c:\windows\SysWOW64\wuapi.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21560128 c:\windows\SysWOW64\wuapi.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21458752 c:\windows\SysWOW64\WSDApi.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21206848 c:\windows\SysWOW64\ws2_32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21198144 c:\windows\SysWOW64\wpdwcn.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16198144 c:\windows\SysWOW64\wpdwcn.dll
    - 2009-07-14 00:06 . 2009-07-14 01:16350720 c:\windows\SysWOW64\WPDSp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21350720 c:\windows\SysWOW64\WPDSp.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16105984 c:\windows\SysWOW64\WPDShServiceObj.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21105984 c:\windows\SysWOW64\WPDShServiceObj.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16541184 c:\windows\SysWOW64\WMVSDECD.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:21541184 c:\windows\SysWOW64\WMVSDECD.DLL
    - 2009-07-14 00:08 . 2009-07-14 01:16739328 c:\windows\SysWOW64\WMSPDMOD.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:21739328 c:\windows\SysWOW64\WMSPDMOD.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:21182272 c:\windows\SysWOW64\wmpsrcwp.dll
    - 2009-07-14 00:08 . 2009-07-14 01:16182272 c:\windows\SysWOW64\wmpsrcwp.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16105472 c:\windows\SysWOW64\wmpshell.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21105472 c:\windows\SysWOW64\wmpshell.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21144384 c:\windows\SysWOW64\wmpps.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21738816 c:\windows\SysWOW64\wmpmde.dll
    - 2010-10-13 14:43 . 2010-08-21 05:36738816 c:\windows\SysWOW64\wmpmde.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21318464 c:\windows\SysWOW64\WMPhoto.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16318464 c:\windows\SysWOW64\WMPhoto.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21352256 c:\windows\SysWOW64\wmpeffects.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16299520 c:\windows\SysWOW64\wmpdxm.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21299520 c:\windows\SysWOW64\wmpdxm.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21616960 c:\windows\SysWOW64\wmdrmsdk.dll
    - 2009-07-14 00:06 . 2009-07-14 01:16616960 c:\windows\SysWOW64\wmdrmsdk.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21436736 c:\windows\SysWOW64\wmdrmnet.dll
    - 2009-07-14 00:05 . 2009-07-14 01:16436736 c:\windows\SysWOW64\wmdrmnet.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21507392 c:\windows\SysWOW64\wmdrmdev.dll
    - 2009-07-14 00:06 . 2009-07-14 01:16507392 c:\windows\SysWOW64\wmdrmdev.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21902656 c:\windows\SysWOW64\WMADMOD.DLL
    - 2009-07-14 00:08 . 2009-07-14 01:16902656 c:\windows\SysWOW64\WMADMOD.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:21269824 c:\windows\SysWOW64\Wldap32.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21410112 c:\windows\SysWOW64\wlanui.dll
    - 2009-07-13 23:52 . 2009-07-14 01:16410112 c:\windows\SysWOW64\wlanui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21428032 c:\windows\SysWOW64\wlanmsm.dll
    - 2009-07-13 23:51 . 2009-07-14 01:16428032 c:\windows\SysWOW64\wlanmsm.dll
    - 2009-07-13 23:51 . 2009-07-14 01:16411648 c:\windows\SysWOW64\wlangpui.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21411648 c:\windows\SysWOW64\wlangpui.dll
    + 2012-04-13 15:20 . 2012-03-01 05:37172544 c:\windows\SysWOW64\wintrust.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21156672 c:\windows\SysWOW64\winsta.dll
    + 2011-07-01 01:39 . 2010-11-20 12:16320000 c:\windows\SysWOW64\winspool.drv
    + 2011-07-01 01:39 . 2010-11-20 12:21134656 c:\windows\SysWOW64\WinSCard.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21335872 c:\windows\SysWOW64\WinSATAPI.dll
    - 2009-07-13 23:22 . 2009-07-14 01:16335872 c:\windows\SysWOW64\WinSATAPI.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21194048 c:\windows\SysWOW64\winmm.dll
    - 2009-07-14 00:03 . 2009-07-14 01:16194048 c:\windows\SysWOW64\winmm.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21351232 c:\windows\SysWOW64\winhttp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:36154624 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pspluginwkr.dll
    - 2009-07-13 23:32 . 2009-07-14 01:23154624 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pspluginwkr.dll
    + 2011-07-01 01:38 . 2010-11-20 12:32104448 c:\windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
    - 2009-07-13 23:29 . 2009-07-14 01:20104448 c:\windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
    + 2011-07-01 01:38 . 2010-11-20 12:17327680 c:\windows\SysWOW64\wimserv.exe
    - 2009-07-13 23:18 . 2009-07-14 01:14327680 c:\windows\SysWOW64\wimserv.exe
    + 2011-07-01 01:38 . 2010-11-20 12:21406528 c:\windows\SysWOW64\wimgapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21109568 c:\windows\SysWOW64\wiavideo.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21416768 c:\windows\SysWOW64\wiadefui.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21381440 c:\windows\SysWOW64\wer.dll
    - 2009-07-13 23:46 . 2009-07-14 01:16782336 c:\windows\SysWOW64\webservices.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21782336 c:\windows\SysWOW64\webservices.dll
    + 2012-01-11 18:31 . 2011-11-17 05:35314880 c:\windows\SysWOW64\webio.dll
    - 2011-02-09 15:47 . 2010-12-21 05:38204800 c:\windows\SysWOW64\WebClnt.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21204800 c:\windows\SysWOW64\WebClnt.dll
    + 2011-07-01 01:37 . 2010-11-20 12:21189952 c:\windows\SysWOW64\wdscore.dll
    - 2009-07-13 23:17 . 2009-07-14 01:16189952 c:\windows\SysWOW64\wdscore.dll
    + 2011-07-01 01:38 . 2010-11-20 12:16172032 c:\windows\SysWOW64\wdmaud.drv
    - 2009-07-14 00:03 . 2009-07-14 01:14172032 c:\windows\SysWOW64\wdmaud.drv
    + 2011-07-01 01:39 . 2010-11-20 12:21276992 c:\windows\SysWOW64\wcncsvc.dll
    - 2011-02-24 16:32 . 2010-09-14 06:07276992 c:\windows\SysWOW64\wcncsvc.dll
    + 2011-07-01 01:37 . 2010-11-20 12:21363008 c:\windows\SysWOW64\wbemcomn.dll
    + 2011-07-01 01:40 . 2010-11-20 12:17257536 c:\windows\SysWOW64\wbem\WmiPrvSE.exe
    - 2009-07-13 23:30 . 2009-07-14 01:16131072 c:\windows\SysWOW64\wbem\WmiDcPrv.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21131072 c:\windows\SysWOW64\wbem\WmiDcPrv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21135680 c:\windows\SysWOW64\wbem\viewprov.dll
    - 2009-07-13 23:30 . 2009-07-14 01:16135680 c:\windows\SysWOW64\wbem\viewprov.dll
    + 2011-07-01 01:37 . 2010-11-20 12:19606208 c:\windows\SysWOW64\wbem\fastprox.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21222208 c:\windows\SysWOW64\wavemsp.dll
    - 2009-07-14 00:19 . 2009-07-14 01:16222208 c:\windows\SysWOW64\wavemsp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21160256 c:\windows\SysWOW64\vdsbas.dll
    - 2009-07-13 23:23 . 2009-07-14 01:16160256 c:\windows\SysWOW64\vdsbas.dll
    - 2009-07-13 23:37 . 2009-07-14 01:16933376 c:\windows\SysWOW64\Vault.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21933376 c:\windows\SysWOW64\Vault.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21638976 c:\windows\SysWOW64\VAN.dll
    - 2009-07-13 23:55 . 2009-07-14 01:16638976 c:\windows\SysWOW64\VAN.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21118784 c:\windows\SysWOW64\uxlib.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21626176 c:\windows\SysWOW64\usp10.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16600064 c:\windows\SysWOW64\usercpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21600064 c:\windows\SysWOW64\usercpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:08833024 c:\windows\SysWOW64\user32.dll
    - 2009-07-13 23:24 . 2009-07-14 01:11833024 c:\windows\SysWOW64\user32.dll
    + 2012-08-16 07:06 . 2012-06-29 00:07231936 c:\windows\SysWOW64\url.dll
    - 2011-08-12 15:07 . 2011-07-22 02:47231936 c:\windows\SysWOW64\url.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21206848 c:\windows\SysWOW64\upnp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21346624 c:\windows\SysWOW64\untfs.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16146432 c:\windows\SysWOW64\twext.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21146432 c:\windows\SysWOW64\twext.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21597504 c:\windows\SysWOW64\TSWorkspace.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21270848 c:\windows\SysWOW64\tsmf.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21352768 c:\windows\SysWOW64\termmgr.dll
    - 2009-07-14 00:20 . 2009-07-14 01:16352768 c:\windows\SysWOW64\termmgr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21181760 c:\windows\SysWOW64\tcpipcfg.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21505856 c:\windows\SysWOW64\taskschd.dll
    + 2011-07-01 01:39 . 2010-11-20 12:17227328 c:\windows\SysWOW64\taskmgr.exe
    - 2009-07-13 23:20 . 2009-07-14 01:14227328 c:\windows\SysWOW64\taskmgr.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17192000 c:\windows\SysWOW64\taskeng.exe
    - 2010-12-15 14:21 . 2010-11-02 04:34192000 c:\windows\SysWOW64\taskeng.exe
    + 2011-07-01 01:39 . 2010-11-20 12:21305152 c:\windows\SysWOW64\taskcomp.dll
    - 2010-12-15 14:21 . 2010-11-02 04:40305152 c:\windows\SysWOW64\taskcomp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21242176 c:\windows\SysWOW64\tapisrv.dll
    - 2010-10-13 14:43 . 2010-08-26 04:39109056 c:\windows\SysWOW64\t2embed.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21109056 c:\windows\SysWOW64\t2embed.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21410624 c:\windows\SysWOW64\systemcpl.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16410624 c:\windows\SysWOW64\systemcpl.dll
    + 2011-11-13 22:08 . 2010-11-20 12:17586752 c:\windows\SysWOW64\sysprep\_update.exe
    + 2011-07-01 01:38 . 2010-11-20 12:21159232 c:\windows\SysWOW64\syncui.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21380416 c:\windows\SysWOW64\sxs.dll
    - 2009-07-13 23:16 . 2009-07-14 01:16380416 c:\windows\SysWOW64\sxs.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16755200 c:\windows\SysWOW64\sud.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21755200 c:\windows\SysWOW64\sud.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21363520 c:\windows\SysWOW64\StructuredQuery.dll
    - 2010-10-13 14:43 . 2010-05-05 06:46363520 c:\windows\SysWOW64\StructuredQuery.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21228352 c:\windows\SysWOW64\stobject.dll
    person15, Sep 3, 2012
    #17

  18. person15 Newcomer, in training Posts: 55

    - 2009-07-13 23:41 . 2009-07-14 01:14293888 c:\windows\SysWOW64\ssText3d.scr
    + 2011-07-01 01:38 . 2010-11-20 12:16293888 c:\windows\SysWOW64\ssText3d.scr
    + 2011-07-01 01:39 . 2010-11-20 12:21301568 c:\windows\SysWOW64\srchadmin.dll
    - 2009-07-13 23:41 . 2009-07-14 01:16301568 c:\windows\SysWOW64\srchadmin.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21189952 c:\windows\SysWOW64\sqmapi.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21778240 c:\windows\SysWOW64\sqlsrv32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21309760 c:\windows\SysWOW64\sqlcese30.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16309760 c:\windows\SysWOW64\sqlcese30.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21352768 c:\windows\SysWOW64\spwizeng.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21100864 c:\windows\SysWOW64\sppinst.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21193536 c:\windows\SysWOW64\sppcomapi.dll
    - 2009-07-14 00:41 . 2009-07-14 01:16121344 c:\windows\SysWOW64\sppc.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20121344 c:\windows\SysWOW64\sppc.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21172544 c:\windows\SysWOW64\spp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21220160 c:\windows\SysWOW64\SndVolSSO.dll
    - 2009-07-14 00:04 . 2009-07-14 01:16220160 c:\windows\SysWOW64\SndVolSSO.dll
    - 2009-07-14 00:04 . 2009-07-14 01:14314368 c:\windows\SysWOW64\SndVol.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17314368 c:\windows\SysWOW64\SndVol.exe
    + 2011-07-01 01:38 . 2010-11-20 12:21152064 c:\windows\SysWOW64\SmartcardCredentialProvider.dll
    - 2009-07-13 23:33 . 2009-07-14 01:16152064 c:\windows\SysWOW64\SmartcardCredentialProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21428544 c:\windows\SysWOW64\shwebsvc.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16428544 c:\windows\SysWOW64\shwebsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21328192 c:\windows\SysWOW64\shsvcs.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16328192 c:\windows\SysWOW64\shsvcs.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21111104 c:\windows\SysWOW64\shsetup.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16350208 c:\windows\SysWOW64\shlwapi.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21350208 c:\windows\SysWOW64\shlwapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21179712 c:\windows\SysWOW64\shdocvw.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16179712 c:\windows\SysWOW64\shdocvw.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16108032 c:\windows\SysWOW64\shacct.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21108032 c:\windows\SysWOW64\shacct.dll
    + 2011-07-01 01:38 . 2010-11-20 12:17113152 c:\windows\SysWOW64\setupugc.exe
    + 2011-07-01 01:38 . 2010-11-20 12:21115712 c:\windows\SysWOW64\setupcln.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21172544 c:\windows\SysWOW64\Setup\RasMigPlugin.dll
    - 2009-07-14 00:13 . 2009-07-14 01:14270336 c:\windows\SysWOW64\sethc.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17270336 c:\windows\SysWOW64\sethc.exe
    + 2011-07-01 01:40 . 2010-11-20 12:21113664 c:\windows\SysWOW64\SessEnv.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21423936 c:\windows\SysWOW64\secproc_isv.dll
    + 2011-07-01 01:40 . 2010-11-20 12:20428032 c:\windows\SysWOW64\secproc.dll
    + 2011-06-29 02:09 . 2011-05-04 04:28164352 c:\windows\SysWOW64\SearchProtocolHost.exe
    - 2011-06-29 02:09 . 2011-05-04 04:52164352 c:\windows\SysWOW64\SearchProtocolHost.exe
    + 2011-06-29 02:09 . 2011-05-04 04:28427520 c:\windows\SysWOW64\SearchIndexer.exe
    + 2011-07-01 01:40 . 2010-11-20 12:21646144 c:\windows\SysWOW64\SearchFolder.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21464896 c:\windows\SysWOW64\scrptadm.dll
    - 2009-07-13 23:38 . 2009-07-14 01:16464896 c:\windows\SysWOW64\scrptadm.dll
    - 2010-12-15 14:21 . 2010-11-02 04:34179712 c:\windows\SysWOW64\schtasks.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17179712 c:\windows\SysWOW64\schtasks.exe
    + 2012-07-11 15:19 . 2012-06-02 04:40225280 c:\windows\SysWOW64\schannel.dll
    - 2009-07-13 23:33 . 2009-07-14 01:16307712 c:\windows\SysWOW64\scesrv.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21307712 c:\windows\SysWOW64\scesrv.dll
    - 2009-07-13 23:33 . 2009-07-14 01:16175616 c:\windows\SysWOW64\scecli.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21175616 c:\windows\SysWOW64\scecli.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21246272 c:\windows\SysWOW64\scansetting.dll
    + 2011-03-08 20:50 . 2010-12-23 05:54850944 c:\windows\SysWOW64\sbe.dll
    + 2011-07-01 01:38 . 2010-11-20 12:08663040 c:\windows\SysWOW64\rpcrt4.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21139264 c:\windows\SysWOW64\rpchttp.dll
    + 2011-11-02 19:51 . 2012-06-15 15:21198832 c:\windows\SysWOW64\rmoc3260.dll
    + 2011-07-01 01:38 . 2010-11-20 12:17278016 c:\windows\SysWOW64\RMActivate_ssp_isv.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17280064 c:\windows\SysWOW64\RMActivate_ssp.exe
    - 2010-02-10 17:00 . 2010-01-18 23:28280064 c:\windows\SysWOW64\RMActivate_ssp.exe
    + 2011-07-01 01:40 . 2010-11-20 12:17327168 c:\windows\SysWOW64\RMActivate_isv.exe
    + 2011-07-01 01:40 . 2010-11-20 12:17322048 c:\windows\SysWOW64\RMActivate.exe
    - 2009-07-13 23:26 . 2009-07-14 01:16473600 c:\windows\SysWOW64\riched20.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21473600 c:\windows\SysWOW64\riched20.dll
    - 2009-07-13 23:41 . 2009-07-14 01:14220672 c:\windows\SysWOW64\Ribbons.scr
    + 2011-07-01 01:38 . 2010-11-20 12:16220672 c:\windows\SysWOW64\Ribbons.scr
    + 2011-07-01 01:38 . 2010-11-20 12:21146944 c:\windows\SysWOW64\remotepg.dll
    - 2009-07-14 00:02 . 2009-07-14 01:16146944 c:\windows\SysWOW64\remotepg.dll
    - 2009-07-13 23:20 . 2009-07-14 01:16247808 c:\windows\SysWOW64\ReAgent.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21247808 c:\windows\SysWOW64\ReAgent.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21140800 c:\windows\SysWOW64\rdpendp.dll
    - 2009-07-14 00:01 . 2009-07-14 01:16186368 c:\windows\SysWOW64\rdpencom.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21186368 c:\windows\SysWOW64\rdpencom.dll
    + 2012-03-14 17:29 . 2012-02-17 05:34826880 c:\windows\SysWOW64\rdpcore.dll
    - 2009-07-13 23:54 . 2009-07-14 01:16372224 c:\windows\SysWOW64\rastls.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21372224 c:\windows\SysWOW64\rastls.dll
    - 2009-07-13 23:54 . 2009-07-14 01:16176640 c:\windows\SysWOW64\rasppp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21176640 c:\windows\SysWOW64\rasppp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21318976 c:\windows\SysWOW64\raschap.dll
    - 2009-07-13 23:52 . 2009-07-14 01:16167936 c:\windows\SysWOW64\QSHVHOST.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:20167936 c:\windows\SysWOW64\QSHVHOST.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:20509440 c:\windows\SysWOW64\qedit.dll
    - 2009-07-14 00:03 . 2009-07-14 01:16509440 c:\windows\SysWOW64\qedit.dll
    + 2012-01-11 14:42 . 2011-10-26 04:32514560 c:\windows\SysWOW64\qdvd.dll
    - 2009-07-14 00:03 . 2009-07-14 01:16514560 c:\windows\SysWOW64\qdvd.dll
    - 2009-07-14 00:03 . 2009-07-14 01:16283136 c:\windows\SysWOW64\qdv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20283136 c:\windows\SysWOW64\qdv.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20190976 c:\windows\SysWOW64\qcap.dll
    - 2009-07-14 00:03 . 2009-07-14 01:16190976 c:\windows\SysWOW64\qcap.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20206848 c:\windows\SysWOW64\qasf.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16206848 c:\windows\SysWOW64\qasf.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20171520 c:\windows\SysWOW64\QAGENT.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:20324608 c:\windows\SysWOW64\puiobj.dll
    + 2011-10-13 18:20 . 2011-08-17 04:24465408 c:\windows\SysWOW64\psisdecd.dll
    - 2010-02-24 16:59 . 2009-12-13 09:30465408 c:\windows\SysWOW64\psisdecd.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20165376 c:\windows\SysWOW64\provsvc.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16165376 c:\windows\SysWOW64\provsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20988160 c:\windows\SysWOW64\propsys.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16988160 c:\windows\SysWOW64\propsys.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20120320 c:\windows\SysWOW64\prntvpt.dll
    - 2009-07-14 00:19 . 2009-07-14 01:16395264 c:\windows\SysWOW64\prnfldr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20395264 c:\windows\SysWOW64\prnfldr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20116736 c:\windows\SysWOW64\prncache.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20932352 c:\windows\SysWOW64\printui.dll
    + 2011-07-01 01:40 . 2010-11-05 01:53295264 c:\windows\SysWOW64\PresentationHost.exe
    - 2010-06-24 14:34 . 2009-11-25 16:47295264 c:\windows\SysWOW64\PresentationHost.exe
    + 2011-07-01 01:40 . 2009-07-14 01:16238080 c:\windows\SysWOW64\ppcsnap.dll
    - 2009-07-13 23:41 . 2009-07-14 01:16441856 c:\windows\SysWOW64\powercpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20441856 c:\windows\SysWOW64\powercpl.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20183296 c:\windows\SysWOW64\PortableDeviceSyncProvider.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16183296 c:\windows\SysWOW64\PortableDeviceSyncProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20427520 c:\windows\SysWOW64\PortableDeviceStatus.dll
    - 2009-07-14 00:07 . 2009-07-14 01:16427520 c:\windows\SysWOW64\PortableDeviceStatus.dll
    + 2011-07-01 01:40 . 2010-11-20 12:20547840 c:\windows\SysWOW64\PortableDeviceApi.dll
    + 2011-11-02 19:51 . 2012-06-15 15:21272896 c:\windows\SysWOW64\pncrt.dll
    + 2011-07-01 01:40 . 2009-07-14 01:16629760 c:\windows\SysWOW64\pmcsnap.dll
    - 2009-07-13 23:22 . 2009-07-14 01:14209920 c:\windows\SysWOW64\PkgMgr.exe
    + 2011-07-01 01:37 . 2010-11-20 12:17209920 c:\windows\SysWOW64\PkgMgr.exe
    - 2009-07-14 00:10 . 2009-07-14 01:16295424 c:\windows\SysWOW64\photowiz.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20295424 c:\windows\SysWOW64\photowiz.dll
    - 2009-07-14 00:11 . 2009-07-14 01:14413696 c:\windows\SysWOW64\PhotoScreensaver.scr
    + 2011-07-01 01:39 . 2010-11-20 12:16413696 c:\windows\SysWOW64\PhotoScreensaver.scr
    - 2009-07-13 23:20 . 2009-07-14 01:14157184 c:\windows\SysWOW64\perfmon.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17157184 c:\windows\SysWOW64\perfmon.exe
    + 2011-07-01 01:39 . 2010-11-20 12:20600576 c:\windows\SysWOW64\PerfCenterCPL.dll
    - 2009-07-13 23:40 . 2009-07-14 01:16600576 c:\windows\SysWOW64\PerfCenterCPL.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20236544 c:\windows\SysWOW64\pdh.dll
    - 2009-07-13 23:19 . 2009-07-14 01:16236544 c:\windows\SysWOW64\pdh.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16859648 c:\windows\SysWOW64\OobeFldr.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20859648 c:\windows\SysWOW64\OobeFldr.dll
    - 2009-07-13 23:16 . 2009-07-14 01:16268288 c:\windows\SysWOW64\oobe\cmisetup.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21268288 c:\windows\SysWOW64\oobe\cmisetup.dll
    - 2009-07-13 23:37 . 2009-07-14 01:16218112 c:\windows\SysWOW64\OnLineIDCpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20218112 c:\windows\SysWOW64\OnLineIDCpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20199168 c:\windows\SysWOW64\onex.dll
    - 2009-07-13 23:51 . 2009-07-14 01:16199168 c:\windows\SysWOW64\onex.dll
    - 2011-06-16 23:38 . 2010-12-18 05:31571904 c:\windows\SysWOW64\oleaut32.dll
    + 2011-10-13 18:19 . 2011-08-27 04:26571904 c:\windows\SysWOW64\oleaut32.dll
    + 2011-10-13 18:19 . 2011-08-27 04:26233472 c:\windows\SysWOW64\oleacc.dll
    - 2009-07-13 23:26 . 2009-07-14 01:16233472 c:\windows\SysWOW64\oleacc.dll
    + 2011-08-10 16:05 . 2011-06-15 08:55163840 c:\windows\SysWOW64\odbctrac.dll
    - 2011-08-10 16:05 . 2011-06-15 09:04163840 c:\windows\SysWOW64\odbctrac.dll
    + 2011-08-10 16:05 . 2011-06-15 08:55319488 c:\windows\SysWOW64\odbcjt32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:04319488 c:\windows\SysWOW64\odbcjt32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:04122880 c:\windows\SysWOW64\odbccp32.dll
    + 2011-08-10 16:05 . 2011-06-15 08:55122880 c:\windows\SysWOW64\odbccp32.dll
    + 2011-07-01 01:40 . 2010-11-20 12:20573440 c:\windows\SysWOW64\odbc32.dll
    - 2011-01-12 22:09 . 2010-10-16 04:34573440 c:\windows\SysWOW64\odbc32.dll
    - 2009-07-13 23:22 . 2009-07-14 01:14197632 c:\windows\SysWOW64\ocsetup.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17197632 c:\windows\SysWOW64\ocsetup.exe
    - 2009-07-13 23:22 . 2009-07-14 01:16174592 c:\windows\SysWOW64\ocsetapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20174592 c:\windows\SysWOW64\ocsetapi.dll
    + 2012-02-16 02:38 . 2012-01-04 08:58442880 c:\windows\SysWOW64\ntshrui.dll
    - 2009-07-13 23:41 . 2009-07-14 01:16442880 c:\windows\SysWOW64\ntshrui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20297472 c:\windows\SysWOW64\ntprint.dll
    - 2009-07-14 00:18 . 2009-07-14 01:16297472 c:\windows\SysWOW64\ntprint.dll
    - 2009-07-13 23:53 . 2009-07-14 01:16656384 c:\windows\SysWOW64\nshwfp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20656384 c:\windows\SysWOW64\nshwfp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20346112 c:\windows\SysWOW64\nshipsec.dll
    - 2009-07-13 23:52 . 2009-07-14 01:16346112 c:\windows\SysWOW64\nshipsec.dll
    - 2009-07-13 23:39 . 2009-07-14 01:16175616 c:\windows\SysWOW64\netplwiz.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20175616 c:\windows\SysWOW64\netplwiz.dll
    - 2009-07-13 23:38 . 2009-07-14 01:16563712 c:\windows\SysWOW64\netlogon.dll
    + 2011-07-01 01:40 . 2010-11-20 12:20563712 c:\windows\SysWOW64\netlogon.dll
    - 2009-07-13 23:37 . 2009-07-14 01:16161792 c:\windows\SysWOW64\netjoin.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20161792 c:\windows\SysWOW64\netjoin.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20166400 c:\windows\SysWOW64\netiohlp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20117248 c:\windows\SysWOW64\netid.dll
    - 2009-07-13 23:52 . 2009-07-14 01:16225792 c:\windows\SysWOW64\netdiagfx.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20225792 c:\windows\SysWOW64\netdiagfx.dll
    + 2011-07-01 01:40 . 2010-11-20 12:20406528 c:\windows\SysWOW64\netcfgx.dll
    + 2011-07-01 01:39 . 2010-11-20 12:17142336 c:\windows\SysWOW64\net1.exe
    + 2011-07-01 01:39 . 2010-11-20 12:20152064 c:\windows\SysWOW64\ncsi.dll
    - 2009-07-13 23:52 . 2009-07-14 01:16152064 c:\windows\SysWOW64\ncsi.dll
    + 2012-07-11 15:19 . 2012-06-02 04:39219136 c:\windows\SysWOW64\ncrypt.dll
    - 2009-07-13 23:33 . 2009-07-14 01:16219136 c:\windows\SysWOW64\ncrypt.dll
    + 2011-07-01 01:39 . 2010-11-20 12:20801280 c:\windows\SysWOW64\NaturalLanguage6.dll
    - 2009-07-14 00:14 . 2009-07-14 01:16801280 c:\windows\SysWOW64\NaturalLanguage6.dll
    - 2009-07-13 23:53 . 2009-07-14 01:22107008 c:\windows\SysWOW64\NAPHLPR.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:36107008 c:\windows\SysWOW64\NAPHLPR.DLL
    - 2009-07-13 23:41 . 2009-07-14 01:14221184 c:\windows\SysWOW64\Mystify.scr
    + 2011-07-01 01:38 . 2010-11-20 12:16221184 c:\windows\SysWOW64\Mystify.scr
    - 2009-07-13 23:39 . 2009-07-14 01:16136192 c:\windows\SysWOW64\mydocs.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20136192 c:\windows\SysWOW64\mydocs.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19320512 c:\windows\SysWOW64\mtxclu.dll
    - 2009-07-13 23:44 . 2009-07-14 01:15320512 c:\windows\SysWOW64\mtxclu.dll
    - 2009-07-13 23:12 . 2009-07-14 01:15232448 c:\windows\SysWOW64\mswsock.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19232448 c:\windows\SysWOW64\mswsock.dll
    - 2009-07-14 00:03 . 2009-07-14 01:15120320 c:\windows\SysWOW64\msvfw32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19120320 c:\windows\SysWOW64\msvfw32.dll
    - 2009-07-13 23:12 . 2009-07-14 01:15690688 c:\windows\SysWOW64\msvcrt.dll
    + 2012-02-16 02:38 . 2011-12-16 07:52690688 c:\windows\SysWOW64\msvcrt.dll
    - 2010-01-08 17:19 . 2009-09-10 05:52257024 c:\windows\SysWOW64\msv1_0.dll
    + 2011-07-01 01:40 . 2010-11-20 12:19257024 c:\windows\SysWOW64\msv1_0.dll
    - 2009-07-13 23:26 . 2009-07-14 01:15167936 c:\windows\SysWOW64\msutb.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19167936 c:\windows\SysWOW64\msutb.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19209920 c:\windows\SysWOW64\mstask.dll
    - 2009-07-13 23:30 . 2009-07-14 01:15209920 c:\windows\SysWOW64\mstask.dll
    - 2011-06-29 02:09 . 2011-05-04 04:52666624 c:\windows\SysWOW64\mssvp.dll
    + 2011-06-29 02:09 . 2011-05-04 04:32666624 c:\windows\SysWOW64\mssvp.dll
    + 2011-06-29 02:09 . 2011-05-04 04:32197120 c:\windows\SysWOW64\mssphtb.dll
    - 2011-06-29 02:09 . 2011-05-04 04:52197120 c:\windows\SysWOW64\mssphtb.dll
    - 2011-06-29 02:09 . 2011-05-04 04:52337408 c:\windows\SysWOW64\mssph.dll
    + 2011-06-29 02:09 . 2011-05-04 04:32337408 c:\windows\SysWOW64\mssph.dll
    - 2009-07-14 00:05 . 2009-07-14 01:15504320 c:\windows\SysWOW64\msscp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19504320 c:\windows\SysWOW64\msscp.dll
    - 2009-07-14 00:12 . 2009-07-14 01:15176128 c:\windows\SysWOW64\msorcl32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19176128 c:\windows\SysWOW64\msorcl32.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19265216 c:\windows\SysWOW64\msnetobj.dll
    - 2009-07-14 00:05 . 2009-07-14 01:15265216 c:\windows\SysWOW64\msnetobj.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19830464 c:\windows\SysWOW64\MSMPEG2ENC.DLL
    - 2009-07-14 00:08 . 2009-07-14 01:15830464 c:\windows\SysWOW64\MSMPEG2ENC.DLL
    - 2009-07-13 23:20 . 2009-07-14 01:14303104 c:\windows\SysWOW64\msinfo32.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17303104 c:\windows\SysWOW64\msinfo32.exe
    - 2009-07-13 23:31 . 2009-07-14 01:15337408 c:\windows\SysWOW64\msihnd.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19337408 c:\windows\SysWOW64\msihnd.dll
    - 2009-07-13 23:40 . 2009-07-14 01:15301568 c:\windows\SysWOW64\msieftp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19301568 c:\windows\SysWOW64\msieftp.dll
    - 2009-07-13 23:27 . 2009-07-14 01:15592384 c:\windows\SysWOW64\msftedit.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19592384 c:\windows\SysWOW64\msftedit.dll
    + 2011-07-01 01:40 . 2010-11-20 12:19341504 c:\windows\SysWOW64\msdrm.dll
    + 2011-07-01 01:39 . 2010-11-05 01:58155472 c:\windows\SysWOW64\mscorier.dll
    - 2010-06-24 14:34 . 2009-11-25 16:47297808 c:\windows\SysWOW64\mscoree.dll
    + 2011-07-01 01:40 . 2010-11-05 01:58297808 c:\windows\SysWOW64\mscoree.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19481792 c:\windows\SysWOW64\mscms.dll
    + 2009-07-14 02:36 . 2011-09-30 04:30152576 c:\windows\SysWOW64\msclmd.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19226304 c:\windows\SysWOW64\MSAC3ENC.DLL
    - 2009-07-14 00:08 . 2009-07-14 01:15226304 c:\windows\SysWOW64\MSAC3ENC.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:19268800 c:\windows\SysWOW64\mprddm.dll
    - 2009-07-13 23:54 . 2009-07-14 01:15158720 c:\windows\SysWOW64\mprapi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19158720 c:\windows\SysWOW64\mprapi.dll
    - 2009-07-13 23:39 . 2009-07-14 01:14101376 c:\windows\SysWOW64\mobsync.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17101376 c:\windows\SysWOW64\mobsync.exe
    + 2011-07-01 01:39 . 2010-11-20 12:19213504 c:\windows\SysWOW64\MMDevAPI.dll
    - 2009-07-14 00:03 . 2009-07-14 01:15213504 c:\windows\SysWOW64\MMDevAPI.dll
    + 2010-01-06 18:07 . 2011-02-23 22:33167952 c:\windows\SysWOW64\mlmodule32.dll
    + 2010-01-06 18:07 . 2011-02-23 22:33369680 c:\windows\SysWOW64\ml32i3.dll
    + 2010-01-06 18:07 . 2011-02-23 22:33260112 c:\windows\SysWOW64\ml32i2.dll
    + 2010-01-06 18:07 . 2011-02-23 22:33253968 c:\windows\SysWOW64\ml32i1.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21109568 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-OfflineFiles-Core\CscMig.dll
    - 2009-07-13 23:14 . 2009-07-14 01:16109568 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-OfflineFiles-Core\CscMig.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21283136 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-iis-rm\iismig.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19892928 c:\windows\SysWOW64\migwiz\migstore.dll
    + 2011-07-01 01:39 . 2010-11-20 12:22156432 c:\windows\SysWOW64\migwiz\MigSetup.exe
    + 2011-07-01 01:38 . 2010-11-20 12:21112128 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Sxs\SxsMigPlugin.dll
    - 2009-07-13 23:15 . 2009-07-14 01:16112128 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Sxs\SxsMigPlugin.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21172544 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasServer-MigPlugin\RasMigPlugin.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21553472 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16553472 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll
    - 2009-07-14 00:06 . 2009-07-14 01:16402944 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL\drmmgrtn.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21402944 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL\drmmgrtn.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21283136 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-DL\iismig.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21172544 c:\windows\SysWOW64\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasServer-MigPlugin\RasMigPlugin-Mig.dll
    + 2011-07-01 01:40 . 2010-11-20 12:21172544 c:\windows\SysWOW64\migration\WSMT\rras\dlmanifests\Microsoft-Windows-RasServer-MigPlugin\RasMigPlugin-DL-Mig.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21112128 c:\windows\SysWOW64\migration\SxsMigPlugin.dll
    - 2009-07-13 23:15 . 2009-07-14 01:16112128 c:\windows\SysWOW64\migration\SxsMigPlugin.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21553472 c:\windows\SysWOW64\migration\MediaPlayer-DLMigPlugin.dll
    - 2009-07-14 00:09 . 2009-07-14 01:16553472 c:\windows\SysWOW64\migration\MediaPlayer-DLMigPlugin.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19101888 c:\windows\SysWOW64\migisol.dll
    - 2009-07-13 23:16 . 2009-07-14 01:15101888 c:\windows\SysWOW64\migisol.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19196608 c:\windows\SysWOW64\mfreadwrite.dll
    - 2010-12-03 05:01 . 2010-05-23 10:11196608 c:\windows\SysWOW64\mfreadwrite.dll
    - 2009-07-14 00:03 . 2009-07-14 01:15176128 c:\windows\SysWOW64\MFPlay.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19176128 c:\windows\SysWOW64\MFPlay.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19296448 c:\windows\SysWOW64\mfds.dll
    + 2011-07-01 01:40 . 2010-11-20 12:19954288 c:\windows\SysWOW64\mfc40u.dll
    - 2010-10-13 14:43 . 2010-08-31 04:32954288 c:\windows\SysWOW64\mfc40u.dll
    - 2010-10-13 14:43 . 2010-08-31 04:32954752 c:\windows\SysWOW64\mfc40.dll
    + 2011-07-01 01:40 . 2010-11-20 12:19954752 c:\windows\SysWOW64\mfc40.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19266752 c:\windows\SysWOW64\MediaMetadataHandler.dll
    - 2009-07-14 00:09 . 2009-07-14 01:15266752 c:\windows\SysWOW64\MediaMetadataHandler.dll
    + 2011-07-01 01:39 . 2010-11-05 02:11312168 c:\windows\SysWOW64\MCEWMDRMNDBootstrap.dll
    + 2011-07-01 01:40 . 2010-11-20 12:17220672 c:\windows\SysWOW64\mcbuilder.exe
    + 2012-08-22 16:53 . 2012-08-22 16:53690888 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe
    + 2012-08-22 16:53 . 2012-08-22 16:53474824 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.dll
    + 2012-08-22 17:31 . 2012-08-22 17:31686792 c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_271_Plugin.exe
    + 2012-06-28 04:49 . 2012-08-22 17:31250056 c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    + 2011-07-01 01:39 . 2010-11-20 12:19127488 c:\windows\SysWOW64\logoncli.dll
    - 2009-07-13 23:37 . 2009-07-14 01:15127488 c:\windows\SysWOW64\logoncli.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19429056 c:\windows\SysWOW64\localsec.dll
    - 2009-07-13 23:29 . 2009-07-14 01:15429056 c:\windows\SysWOW64\localsec.dll
    + 2011-08-10 16:05 . 2011-07-16 04:24272384 c:\windows\SysWOW64\KernelBase.dll
    - 2011-08-10 16:05 . 2011-07-16 04:30272384 c:\windows\SysWOW64\KernelBase.dll
    + 2011-02-09 15:47 . 2010-12-17 07:07542208 c:\windows\SysWOW64\kerberos.dll
    + 2012-08-16 07:06 . 2012-06-29 00:04717824 c:\windows\SysWOW64\jscript.dll
    + 2012-02-11 19:01 . 2011-11-10 10:54157472 c:\windows\SysWOW64\javaws.exe
    + 2012-02-11 19:01 . 2011-11-10 10:54149280 c:\windows\SysWOW64\javaw.exe
    + 2012-02-11 19:01 . 2011-11-10 10:54149280 c:\windows\SysWOW64\java.exe
    + 2011-07-01 01:38 . 2010-11-20 12:19219648 c:\windows\SysWOW64\iTVData.dll
    - 2009-07-14 00:08 . 2009-07-14 01:15219648 c:\windows\SysWOW64\iTVData.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19158720 c:\windows\SysWOW64\itircl.dll
    - 2009-07-13 23:46 . 2009-07-14 01:14144896 c:\windows\SysWOW64\iscsicli.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17144896 c:\windows\SysWOW64\iscsicli.exe
    - 2009-07-13 23:53 . 2009-07-14 01:15400896 c:\windows\SysWOW64\ipsmsnap.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19400896 c:\windows\SysWOW64\ipsmsnap.dll
    - 2009-07-13 23:54 . 2009-07-14 01:15271360 c:\windows\SysWOW64\iprtrmgr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19271360 c:\windows\SysWOW64\iprtrmgr.dll
    - 2009-07-13 23:12 . 2009-07-14 01:15103936 c:\windows\SysWOW64\IPHLPAPI.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:19103936 c:\windows\SysWOW64\IPHLPAPI.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:19202240 c:\windows\SysWOW64\input.dll
    - 2009-07-13 23:26 . 2009-07-14 01:15202240 c:\windows\SysWOW64\input.dll
    + 2011-06-16 23:38 . 2011-05-03 04:30741376 c:\windows\SysWOW64\inetcomm.dll
    + 2011-07-01 01:38 . 2010-11-20 12:08119808 c:\windows\SysWOW64\imm32.dll
    - 2009-07-13 23:25 . 2009-07-14 01:11119808 c:\windows\SysWOW64\imm32.dll
    person15, Sep 3, 2012
    #18

  19. person15 Newcomer, in training Posts: 55

    - 2009-07-13 23:26 . 2009-07-14 01:15374272 c:\windows\SysWOW64\IME\shared\IMETIP.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:19374272 c:\windows\SysWOW64\IME\shared\IMETIP.DLL
    - 2009-07-13 23:26 . 2009-07-14 01:14269824 c:\windows\SysWOW64\IME\shared\IMEPADSV.EXE
    + 2011-07-01 01:38 . 2010-11-20 12:17269824 c:\windows\SysWOW64\IME\shared\IMEPADSV.EXE
    + 2011-07-01 01:38 . 2010-11-20 12:17286208 c:\windows\SysWOW64\IME\shared\IMCCPHR.exe
    - 2009-07-13 23:26 . 2009-07-14 01:14286208 c:\windows\SysWOW64\IME\shared\IMCCPHR.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17362496 c:\windows\SysWOW64\IME\IMETC10\IMTCPROP.exe
    - 2009-07-13 23:26 . 2009-07-14 01:14362496 c:\windows\SysWOW64\IME\IMETC10\IMTCPROP.exe
    + 2011-07-01 01:39 . 2010-11-20 12:19545792 c:\windows\SysWOW64\IME\IMETC10\IMTCCORE.DLL
    - 2009-07-13 23:26 . 2009-07-14 01:15545792 c:\windows\SysWOW64\IME\IMETC10\IMTCCORE.DLL
    + 2011-07-01 01:38 . 2010-11-20 12:19172032 c:\windows\SysWOW64\IME\IMETC10\IMTCCFG.DLL
    - 2009-07-13 23:27 . 2009-07-14 01:15655872 c:\windows\SysWOW64\IME\IMESC5\ImSCCore.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19655872 c:\windows\SysWOW64\IME\IMESC5\ImSCCore.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19126976 c:\windows\SysWOW64\IME\IMESC5\ImSCCfg.DLL
    - 2009-07-13 23:26 . 2009-07-14 01:15126976 c:\windows\SysWOW64\IME\IMESC5\ImSCCfg.DLL
    - 2009-07-13 23:26 . 2009-07-14 01:14105984 c:\windows\SysWOW64\IME\IMEJP10\imjpuexc.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17105984 c:\windows\SysWOW64\IME\IMEJP10\imjpuexc.exe
    - 2009-07-13 23:26 . 2009-07-14 01:14346112 c:\windows\SysWOW64\IME\IMEJP10\IMJPDCT.EXE
    + 2011-07-01 01:38 . 2010-11-20 12:17346112 c:\windows\SysWOW64\IME\IMEJP10\IMJPDCT.EXE
    - 2011-09-14 16:08 . 2011-07-27 04:30361472 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
    + 2011-09-14 16:08 . 2011-07-27 04:27361472 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
    + 2011-07-01 01:40 . 2010-11-20 12:19732160 c:\windows\SysWOW64\imapi2fs.dll
    - 2009-07-13 23:46 . 2009-07-14 01:15732160 c:\windows\SysWOW64\imapi2fs.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19392192 c:\windows\SysWOW64\imapi2.dll
    + 2012-04-13 15:20 . 2012-03-01 05:33159232 c:\windows\SysWOW64\imagehlp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19148992 c:\windows\SysWOW64\ifsutil.dll
    - 2009-07-13 23:15 . 2009-07-14 01:15148992 c:\windows\SysWOW64\ifsutil.dll
    - 2011-03-18 14:04 . 2011-03-18 14:04142848 c:\windows\SysWOW64\ieUnatt.exe
    + 2012-08-16 07:06 . 2012-06-29 00:04142848 c:\windows\SysWOW64\ieUnatt.exe
    + 2012-08-16 07:06 . 2012-06-28 23:57176640 c:\windows\SysWOW64\ieui.dll
    - 2011-08-12 15:07 . 2011-07-22 02:43176640 c:\windows\SysWOW64\ieui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19122880 c:\windows\SysWOW64\iasrecst.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19172032 c:\windows\SysWOW64\iasrad.dll
    - 2009-07-13 23:53 . 2009-07-14 01:15172032 c:\windows\SysWOW64\iasrad.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19312832 c:\windows\SysWOW64\hgcpl.dll
    + 2011-07-01 01:40 . 2010-11-20 12:19584192 c:\windows\SysWOW64\gpprefcl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:08311296 c:\windows\SysWOW64\gdi32.dll
    - 2009-07-13 23:54 . 2009-07-14 01:15216576 c:\windows\SysWOW64\FWPUCLNT.DLL
    + 2011-07-01 01:39 . 2010-11-20 12:19216576 c:\windows\SysWOW64\FWPUCLNT.DLL
    - 2009-07-13 23:31 . 2009-07-14 01:15206336 c:\windows\SysWOW64\framedynos.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19206336 c:\windows\SysWOW64\framedynos.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19202752 c:\windows\SysWOW64\framedyn.dll
    - 2009-07-13 23:41 . 2009-07-14 01:15828928 c:\windows\SysWOW64\fontext.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19828928 c:\windows\SysWOW64\fontext.dll
    - 2009-07-13 23:53 . 2009-07-14 01:15856576 c:\windows\SysWOW64\FirewallControlPanel.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19856576 c:\windows\SysWOW64\FirewallControlPanel.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19124416 c:\windows\SysWOW64\fde.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19320512 c:\windows\SysWOW64\Faultrep.dll
    - 2009-07-13 23:27 . 2009-07-14 01:15320512 c:\windows\SysWOW64\Faultrep.dll
    - 2009-07-14 00:04 . 2009-07-14 01:15488448 c:\windows\SysWOW64\evr.dll
    + 2011-07-01 01:39 . 2010-11-20 12:19488448 c:\windows\SysWOW64\evr.dll
    - 2009-07-13 23:41 . 2009-07-14 01:14288256 c:\windows\SysWOW64\eudcedit.exe
    + 2011-07-01 01:39 . 2010-11-20 12:17288256 c:\windows\SysWOW64\eudcedit.exe
    - 2011-03-08 20:50 . 2010-12-23 05:28534528 c:\windows\SysWOW64\EncDec.dll
    + 2011-12-14 15:00 . 2011-10-15 05:38534528 c:\windows\SysWOW64\EncDec.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18128512 c:\windows\SysWOW64\EhStorAPI.dll
    - 2009-07-13 23:45 . 2009-07-14 01:15128512 c:\windows\SysWOW64\EhStorAPI.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18205312 c:\windows\SysWOW64\efscore.dll
    - 2009-07-13 23:56 . 2009-07-14 01:15222208 c:\windows\SysWOW64\eapphost.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18222208 c:\windows\SysWOW64\eapphost.dll
    - 2009-07-13 23:56 . 2009-07-14 01:15242176 c:\windows\SysWOW64\eapp3hst.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18242176 c:\windows\SysWOW64\eapp3hst.dll
    - 2009-07-14 00:07 . 2009-07-14 01:15630784 c:\windows\SysWOW64\DXPTaskRingtone.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18630784 c:\windows\SysWOW64\DXPTaskRingtone.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18508416 c:\windows\SysWOW64\dxgi.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18210432 c:\windows\SysWOW64\dxdiagn.dll
    - 2009-07-13 23:29 . 2009-07-14 01:15210432 c:\windows\SysWOW64\dxdiagn.dll
    - 2009-07-13 23:39 . 2009-07-14 01:15685056 c:\windows\SysWOW64\dsuiext.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18685056 c:\windows\SysWOW64\dsuiext.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18196608 c:\windows\SysWOW64\dskquoui.dll
    - 2009-07-13 23:41 . 2009-07-14 01:15196608 c:\windows\SysWOW64\dskquoui.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18252928 c:\windows\SysWOW64\DShowRdpFilter.dll
    + 2011-07-01 01:37 . 2010-11-20 12:18323072 c:\windows\SysWOW64\drvstore.dll
    - 2011-06-29 02:09 . 2011-05-24 10:32252928 c:\windows\SysWOW64\drvinst.exe
    + 2011-06-29 02:09 . 2011-05-24 10:37252928 c:\windows\SysWOW64\drvinst.exe
    - 2009-07-14 00:06 . 2009-07-14 01:15402944 c:\windows\SysWOW64\drmmgrtn.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18402944 c:\windows\SysWOW64\drmmgrtn.dll
    + 2011-07-01 01:37 . 2010-11-20 12:18257024 c:\windows\SysWOW64\dpx.dll
    - 2009-07-13 23:52 . 2009-07-14 01:15333824 c:\windows\SysWOW64\dot3ui.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18333824 c:\windows\SysWOW64\dot3ui.dll
    - 2009-07-13 23:52 . 2009-07-14 01:15115200 c:\windows\SysWOW64\dot3msm.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18115200 c:\windows\SysWOW64\dot3msm.dll
    - 2011-07-12 15:20 . 2011-07-12 15:20178536 c:\windows\SysWOW64\dnssdX.dll
    + 2011-08-31 03:05 . 2011-08-31 03:05178536 c:\windows\SysWOW64\dnssdX.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18109056 c:\windows\SysWOW64\dnscmmc.dll
    + 2011-04-14 18:51 . 2011-03-03 05:38270336 c:\windows\SysWOW64\dnsapi.dll
    - 2009-07-13 23:18 . 2009-07-14 01:16345600 c:\windows\SysWOW64\Dism\WimProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21345600 c:\windows\SysWOW64\Dism\WimProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21242688 c:\windows\SysWOW64\Dism\UnattendProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:16242688 c:\windows\SysWOW64\Dism\UnattendProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 12:21347648 c:\windows\SysWOW64\Dism\TransmogProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:21220160 c:\windows\SysWOW64\Dism\SmiProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:16220160 c:\windows\SysWOW64\Dism\SmiProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:20102912 c:\windows\SysWOW64\Dism\OSProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:15159744 c:\windows\SysWOW64\Dism\MsiProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19159744 c:\windows\SysWOW64\Dism\MsiProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:15250880 c:\windows\SysWOW64\Dism\IntlProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:19250880 c:\windows\SysWOW64\Dism\IntlProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18318464 c:\windows\SysWOW64\Dism\DmiProvider.dll
    - 2009-07-13 23:18 . 2009-07-14 01:15318464 c:\windows\SysWOW64\Dism\DmiProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18141312 c:\windows\SysWOW64\Dism\DismProv.dll
    - 2009-07-13 23:18 . 2009-07-14 01:15141312 c:\windows\SysWOW64\Dism\DismProv.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18230912 c:\windows\SysWOW64\Dism\DismCore.dll
    - 2009-07-13 23:18 . 2009-07-14 01:15141312 c:\windows\SysWOW64\Dism\CompatProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18141312 c:\windows\SysWOW64\Dism\CompatProvider.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18541184 c:\windows\SysWOW64\Dism\CbsProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 12:17276480 c:\windows\SysWOW64\diskraid.exe
    - 2009-07-13 23:24 . 2009-07-14 01:14276480 c:\windows\SysWOW64\diskraid.exe
    - 2009-07-13 23:24 . 2009-07-14 01:14133632 c:\windows\SysWOW64\diskpart.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17133632 c:\windows\SysWOW64\diskpart.exe
    + 2011-07-01 01:39 . 2010-11-20 12:18254464 c:\windows\SysWOW64\dhcpcore.dll
    - 2009-07-13 23:23 . 2009-07-14 01:14586752 c:\windows\SysWOW64\dfrgui.exe
    + 2011-07-01 01:38 . 2010-11-20 12:17586752 c:\windows\SysWOW64\dfrgui.exe
    - 2009-07-13 23:42 . 2009-07-14 01:15211456 c:\windows\SysWOW64\DevicePairingFolder.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18211456 c:\windows\SysWOW64\DevicePairingFolder.dll
    - 2009-07-13 23:42 . 2009-07-14 01:15484864 c:\windows\SysWOW64\DeviceCenter.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18484864 c:\windows\SysWOW64\DeviceCenter.dll
    - 2010-07-31 01:59 . 2010-09-15 08:50472808 c:\windows\SysWOW64\deployJava1.dll
    + 2010-07-31 01:59 . 2011-11-10 10:54472808 c:\windows\SysWOW64\deployJava1.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18220672 c:\windows\SysWOW64\defaultlocationcpl.dll
    - 2009-07-13 23:45 . 2009-07-14 01:15220672 c:\windows\SysWOW64\defaultlocationcpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18854016 c:\windows\SysWOW64\dbghelp.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18522752 c:\windows\SysWOW64\d3d11.dll
    - 2009-07-13 23:27 . 2009-07-14 01:15522752 c:\windows\SysWOW64\d3d11.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18489984 c:\windows\SysWOW64\d3d10level9.dll
    - 2009-07-13 23:28 . 2009-07-14 01:15489984 c:\windows\SysWOW64\d3d10level9.dll
    + 2011-06-16 23:38 . 2010-11-20 12:18219136 c:\windows\SysWOW64\d3d10_1core.dll
    - 2011-06-16 23:38 . 2011-01-17 05:38161792 c:\windows\SysWOW64\d3d10_1.dll
    + 2011-06-16 23:38 . 2011-01-17 05:47161792 c:\windows\SysWOW64\d3d10_1.dll
    - 2011-03-08 20:50 . 2011-02-19 05:32739840 c:\windows\SysWOW64\d2d1.dll
    + 2011-03-08 20:50 . 2011-02-19 06:30739840 c:\windows\SysWOW64\d2d1.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18139264 c:\windows\SysWOW64\cscobj.dll
    + 2012-06-14 15:21 . 2012-04-24 04:36140288 c:\windows\SysWOW64\cryptsvc.dll
    + 2012-06-14 15:21 . 2012-04-24 04:36103936 c:\windows\SysWOW64\cryptnet.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18168960 c:\windows\SysWOW64\credui.dll
    - 2011-03-08 20:50 . 2010-12-23 05:28642048 c:\windows\SysWOW64\CPFilters.dll
    + 2011-03-08 20:50 . 2010-12-23 05:54642048 c:\windows\SysWOW64\CPFilters.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18485888 c:\windows\SysWOW64\comdlg32.dll
    - 2010-10-13 14:43 . 2010-08-21 05:33530432 c:\windows\SysWOW64\comctl32.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18530432 c:\windows\SysWOW64\comctl32.dll
    + 2011-07-01 01:40 . 2010-11-20 12:17302592 c:\windows\SysWOW64\cmd.exe
    + 2011-07-01 01:38 . 2010-11-20 12:18230912 c:\windows\SysWOW64\clusapi.dll
    - 2009-07-13 23:22 . 2009-07-14 01:15230912 c:\windows\SysWOW64\clusapi.dll
    - 2011-06-29 02:09 . 2011-05-24 10:34145920 c:\windows\SysWOW64\cfgmgr32.dll
    + 2011-06-29 02:09 . 2011-05-24 10:39145920 c:\windows\SysWOW64\cfgmgr32.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18342016 c:\windows\SysWOW64\certcli.dll
    - 2009-07-13 23:41 . 2009-07-14 01:14776192 c:\windows\SysWOW64\calc.exe
    + 2011-07-01 01:39 . 2010-11-20 12:16776192 c:\windows\SysWOW64\calc.exe
    + 2011-07-01 01:39 . 2010-11-20 12:18132608 c:\windows\SysWOW64\cabview.dll
    - 2010-04-14 16:09 . 2010-01-09 06:52132608 c:\windows\SysWOW64\cabview.dll
    - 2009-07-13 23:41 . 2009-07-14 01:14878592 c:\windows\SysWOW64\Bubbles.scr
    + 2011-07-01 01:38 . 2010-11-20 12:16878592 c:\windows\SysWOW64\Bubbles.scr
    + 2011-07-01 01:38 . 2010-11-20 12:18743424 c:\windows\SysWOW64\blackbox.dll
    - 2009-07-14 00:05 . 2009-07-14 01:15743424 c:\windows\SysWOW64\blackbox.dll
    - 2009-07-13 23:30 . 2009-07-14 01:14186368 c:\windows\SysWOW64\bitsadmin.exe
    + 2011-07-01 01:38 . 2010-11-20 12:16186368 c:\windows\SysWOW64\bitsadmin.exe
    + 2011-07-01 01:39 . 2010-11-20 12:18740864 c:\windows\SysWOW64\batmeter.dll
    + 2011-07-01 01:39 . 2010-11-20 12:23144768 c:\windows\SysWOW64\basecsp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18314368 c:\windows\SysWOW64\azroleui.dll
    - 2009-07-13 23:29 . 2009-07-14 01:14314368 c:\windows\SysWOW64\azroleui.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18762880 c:\windows\SysWOW64\azroles.dll
    - 2009-07-13 23:45 . 2009-07-14 01:14665600 c:\windows\SysWOW64\AuxiliaryDisplayCpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18665600 c:\windows\SysWOW64\AuxiliaryDisplayCpl.dll
    - 2009-07-13 23:40 . 2009-07-14 01:14146944 c:\windows\SysWOW64\autoplay.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18146944 c:\windows\SysWOW64\autoplay.dll
    + 2011-07-01 01:39 . 2010-11-20 12:16658944 c:\windows\SysWOW64\autofmt.exe
    + 2011-07-01 01:39 . 2010-11-20 12:16679424 c:\windows\SysWOW64\autoconv.exe
    - 2009-07-13 23:15 . 2009-07-14 01:14668160 c:\windows\SysWOW64\autochk.exe
    + 2011-07-01 01:39 . 2010-11-20 12:16668160 c:\windows\SysWOW64\autochk.exe
    + 2011-07-01 01:39 . 2010-11-20 12:18195584 c:\windows\SysWOW64\AudioSes.dll
    - 2009-07-14 00:03 . 2009-07-14 01:14195584 c:\windows\SysWOW64\AudioSes.dll
    - 2009-07-14 00:07 . 2009-07-14 01:14243712 c:\windows\SysWOW64\audiodev.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18243712 c:\windows\SysWOW64\audiodev.dll
    + 2011-04-14 18:51 . 2011-02-19 04:34294912 c:\windows\SysWOW64\atmfd.dll
    - 2011-04-14 18:51 . 2011-02-19 03:37294912 c:\windows\SysWOW64\atmfd.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18339968 c:\windows\SysWOW64\appmgr.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18295936 c:\windows\SysWOW64\apphelp.dll
    + 2011-07-01 01:40 . 2010-11-20 12:18640512 c:\windows\SysWOW64\advapi32.dll
    + 2011-07-01 01:37 . 2010-11-20 12:18120320 c:\windows\SysWOW64\AdvancedInstallers\cmiadapter.dll
    - 2009-07-13 23:38 . 2009-07-14 01:14186880 c:\windows\SysWOW64\adsldp.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18186880 c:\windows\SysWOW64\adsldp.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18438272 c:\windows\SysWOW64\AdmTmpl.dll
    - 2009-07-13 23:38 . 2009-07-14 01:14438272 c:\windows\SysWOW64\AdmTmpl.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18309760 c:\windows\SysWOW64\actxprxy.dll
    - 2009-07-13 23:38 . 2009-07-14 01:14202752 c:\windows\SysWOW64\activeds.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18202752 c:\windows\SysWOW64\activeds.dll
    + 2011-07-01 01:38 . 2010-11-20 12:18537600 c:\windows\SysWOW64\ActionCenterCPL.dll
    - 2009-07-13 23:41 . 2009-07-14 01:14537600 c:\windows\SysWOW64\ActionCenterCPL.dll
    - 2009-07-13 23:40 . 2009-07-14 01:14744448 c:\windows\SysWOW64\ActionCenter.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18744448 c:\windows\SysWOW64\ActionCenter.dll
    + 2011-07-01 01:39 . 2010-11-20 12:18131584 c:\windows\SysWOW64\aaclient.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41366080 c:\windows\system32\zipfldr.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27366080 c:\windows\system32\zipfldr.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27229888 c:\windows\system32\XpsRasterService.dll
    - 2011-01-12 22:09 . 2010-11-02 05:18229888 c:\windows\system32\XpsRasterService.dll
    - 2011-04-14 18:51 . 2011-02-24 06:30476160 c:\windows\system32\XpsGdiConverter.dll
    + 2011-04-14 18:51 . 2011-02-24 06:15476160 c:\windows\system32\XpsGdiConverter.dll
    - 2011-08-10 16:05 . 2011-06-16 05:31199680 c:\windows\system32\xmllite.dll
    + 2011-08-10 16:05 . 2011-06-16 05:49199680 c:\windows\system32\xmllite.dll
    - 2009-07-14 00:12 . 2009-07-14 01:41222720 c:\windows\system32\wwanconn.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27222720 c:\windows\system32\wwanconn.dll
    - 2009-07-13 23:31 . 2009-07-14 01:41594432 c:\windows\system32\wvc.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27594432 c:\windows\system32\wvc.dll
    + 2012-06-21 15:43 . 2012-06-02 19:19186752 c:\windows\system32\wuwebv.dll
    - 2009-07-13 23:35 . 2009-07-14 01:39307200 c:\windows\system32\wusa.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25307200 c:\windows\system32\wusa.exe
    - 2009-07-14 00:05 . 2009-07-14 01:41681472 c:\windows\system32\WUDFx.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27681472 c:\windows\system32\WUDFx.dll
    - 2009-07-14 00:05 . 2009-07-14 01:41182784 c:\windows\system32\WUDFPlatform.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27182784 c:\windows\system32\WUDFPlatform.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25226816 c:\windows\system32\WUDFHost.exe
    - 2009-07-14 00:05 . 2009-07-14 01:39226816 c:\windows\system32\WUDFHost.exe
    + 2012-06-21 15:43 . 2012-06-02 22:19701976 c:\windows\system32\wuapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25293888 c:\windows\system32\wsqmcons.exe
    - 2009-07-13 23:40 . 2009-07-14 01:39293888 c:\windows\system32\wsqmcons.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27577536 c:\windows\system32\WSDApi.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27297984 c:\windows\system32\ws2_32.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27215040 c:\windows\system32\wpdwcn.dll
    - 2009-07-14 00:22 . 2009-07-14 01:41215040 c:\windows\system32\wpdwcn.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27431104 c:\windows\system32\WPDSp.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41431104 c:\windows\system32\WPDSp.dll
    - 2009-07-14 00:22 . 2009-07-14 01:41115200 c:\windows\system32\WPDShServiceObj.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27115200 c:\windows\system32\WPDShServiceObj.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27117248 c:\windows\system32\wpdbusenum.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27611840 c:\windows\system32\wpd_ci.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27812032 c:\windows\system32\wpccpl.dll
    - 2011-08-10 16:05 . 2011-07-16 05:26362496 c:\windows\system32\wow64win.dll
    + 2011-08-10 16:05 . 2011-07-16 05:41362496 c:\windows\system32\wow64win.dll
    - 2011-08-10 16:05 . 2011-07-16 05:26243200 c:\windows\system32\wow64.dll
    + 2011-08-10 16:05 . 2011-07-16 05:41243200 c:\windows\system32\wow64.dll
    - 2009-07-14 00:23 . 2009-07-14 01:41666112 c:\windows\system32\WMVSDECD.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:27666112 c:\windows\system32\WMVSDECD.DLL
    - 2009-07-14 00:23 . 2009-07-14 01:41978944 c:\windows\system32\WMSPDMOD.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:27978944 c:\windows\system32\WMSPDMOD.DLL
    - 2009-07-14 00:23 . 2009-07-14 01:41223232 c:\windows\system32\wmpsrcwp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27223232 c:\windows\system32\wmpsrcwp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27132608 c:\windows\system32\wmpshell.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27481280 c:\windows\system32\wmpps.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27392192 c:\windows\system32\WMPhoto.dll
    - 2009-07-14 00:22 . 2009-07-14 01:41392192 c:\windows\system32\WMPhoto.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27605696 c:\windows\system32\wmpeffects.dll
    - 2009-07-14 00:24 . 2009-07-14 01:41358400 c:\windows\system32\wmpdxm.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27358400 c:\windows\system32\wmpdxm.dll
    + 2012-05-08 21:04 . 2012-05-08 21:04281088 c:\windows\system32\WMIMPLEX.dll
    - 2010-12-15 14:21 . 2010-11-02 05:18524288 c:\windows\system32\wmicmiplugin.dll
    + 2011-07-01 01:34 . 2010-11-20 13:27524288 c:\windows\system32\wmicmiplugin.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27781312 c:\windows\system32\wmdrmsdk.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41781312 c:\windows\system32\wmdrmsdk.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41527872 c:\windows\system32\wmdrmnet.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27527872 c:\windows\system32\wmdrmnet.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41636416 c:\windows\system32\wmdrmdev.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27636416 c:\windows\system32\wmdrmdev.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27312832 c:\windows\system32\Wldap32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27414208 c:\windows\system32\wlanui.dll
    - 2009-07-14 00:07 . 2009-07-14 01:41414208 c:\windows\system32\wlanui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27414720 c:\windows\system32\wlanmsm.dll
    - 2009-07-14 00:07 . 2009-07-14 01:41414720 c:\windows\system32\wlanmsm.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27475136 c:\windows\system32\wlangpui.dll
    - 2009-07-14 00:07 . 2009-07-14 01:41475136 c:\windows\system32\wlangpui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27118784 c:\windows\system32\wkssvc.dll
    - 2009-07-13 23:53 . 2009-07-14 01:41118784 c:\windows\system32\wkssvc.dll
    - 2009-07-14 00:16 . 2009-07-14 00:16248832 c:\windows\system32\wksprt.exe
    + 2011-07-01 01:39 . 2010-11-20 11:04248832 c:\windows\system32\wksprt.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25405504 c:\windows\system32\wisptis.exe
    - 2009-07-14 00:02 . 2009-07-14 01:39405504 c:\windows\system32\wisptis.exe
    - 2010-04-14 16:09 . 2009-12-29 08:03220672 c:\windows\system32\wintrust.dll
    + 2012-04-13 15:20 . 2012-03-01 06:38220672 c:\windows\system32\wintrust.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27235008 c:\windows\system32\winsta.dll
    - 2011-08-10 16:05 . 2011-07-16 05:26214528 c:\windows\system32\winsrv.dll
    + 2011-08-10 16:05 . 2011-06-24 05:34214528 c:\windows\system32\winsrv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:24442368 c:\windows\system32\winspool.drv
    - 2009-07-13 23:50 . 2009-07-14 01:41217600 c:\windows\system32\WinSCard.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27217600 c:\windows\system32\WinSCard.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27501248 c:\windows\system32\WinSATAPI.dll
    + 2011-04-14 18:51 . 2011-02-05 17:06518672 c:\windows\system32\winresume.exe
    + 2011-07-01 01:40 . 2010-11-20 13:25390656 c:\windows\system32\winlogon.exe
    + 2011-04-14 18:51 . 2011-02-05 17:06605552 c:\windows\system32\winload.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27444416 c:\windows\system32\winhttp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:44174592 c:\windows\system32\WindowsPowerShell\v1.0\pspluginwkr.dll
    - 2009-07-13 23:49 . 2009-07-14 01:52174592 c:\windows\system32\WindowsPowerShell\v1.0\pspluginwkr.dll
    - 2009-07-13 23:46 . 2009-07-14 01:50109056 c:\windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
    + 2011-07-01 01:38 . 2010-11-20 13:44109056 c:\windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25294912 c:\windows\system32\WindowsAnytimeUpgradeResults.exe
    - 2009-07-13 23:56 . 2009-07-14 01:39294912 c:\windows\system32\WindowsAnytimeUpgradeResults.exe
    - 2009-07-14 00:35 . 2009-07-14 01:41124928 c:\windows\system32\wiavideo.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27124928 c:\windows\system32\wiavideo.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27580096 c:\windows\system32\wiaservc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27462336 c:\windows\system32\wiadefui.dll
    + 2011-04-14 18:51 . 2010-11-20 13:25974336 c:\windows\system32\WFS.exe
    - 2009-07-14 00:36 . 2009-07-14 01:39974336 c:\windows\system32\WFS.exe
    + 2012-01-11 18:31 . 2011-11-17 06:35395776 c:\windows\system32\webio.dll
    - 2010-12-15 14:21 . 2010-10-16 05:19395776 c:\windows\system32\webio.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27258560 c:\windows\system32\WebClnt.dll
    - 2009-07-14 00:18 . 2009-07-14 01:38217088 c:\windows\system32\wdmaud.drv
    + 2011-07-01 01:39 . 2010-11-20 13:24217088 c:\windows\system32\wdmaud.drv
    + 2010-01-08 16:46 . 2012-07-15 01:27356366 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
    + 2010-01-08 18:48 . 2012-09-03 03:15403674 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin
    - 2011-02-24 16:32 . 2010-09-14 06:45367104 c:\windows\system32\wcncsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27367104 c:\windows\system32\wcncsvc.dll
    + 2011-07-01 01:34 . 2010-11-20 13:27529408 c:\windows\system32\wbemcomn.dll
    + 2011-07-01 01:40 . 2010-11-20 13:25372736 c:\windows\system32\wbem\WmiPrvSE.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27754176 c:\windows\system32\wbem\WmiPrvSD.dll
    - 2009-07-13 23:47 . 2009-07-14 01:41228864 c:\windows\system32\wbem\wmiprov.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27228864 c:\windows\system32\wbem\wmiprov.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27191488 c:\windows\system32\wbem\WmiDcPrv.dll
    - 2009-07-13 23:47 . 2009-07-14 01:41191488 c:\windows\system32\wbem\WmiDcPrv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27137728 c:\windows\system32\wbem\WmiApRpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27185856 c:\windows\system32\wbem\viewprov.dll
    - 2009-07-13 23:47 . 2009-07-14 01:41185856 c:\windows\system32\wbem\viewprov.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27265728 c:\windows\system32\wbem\ntevt.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27399360 c:\windows\system32\wbem\msiprov.dll
    + 2011-07-01 01:39 . 2010-11-20 13:26159232 c:\windows\system32\wbem\dsprov.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27255488 c:\windows\system32\wavemsp.dll
    - 2009-07-14 00:41 . 2009-07-14 01:41255488 c:\windows\system32\wavemsp.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27263168 c:\windows\system32\vpnike.dll
    + 2011-07-01 01:40 . 2010-11-20 09:58244224 c:\windows\system32\vmicsvc.exe
    - 2009-07-13 23:42 . 2009-07-13 23:42129024 c:\windows\system32\VmdCoinstall.dll
    + 2011-07-01 01:38 . 2010-11-20 09:57129024 c:\windows\system32\VmdCoinstall.dll
    + 2011-07-01 01:38 . 2010-11-20 09:57130048 c:\windows\system32\VmbusCoinstaller.dll
    - 2009-07-13 23:42 . 2009-07-13 23:42130048 c:\windows\system32\VmbusCoinstaller.dll
    - 2009-07-13 23:36 . 2009-07-14 01:41185856 c:\windows\system32\vdsutil.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27185856 c:\windows\system32\vdsutil.dll
    - 2009-07-13 23:36 . 2009-07-14 01:41190976 c:\windows\system32\vdsbas.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27190976 c:\windows\system32\vdsbas.dll
    + 2011-07-01 01:39 . 2010-11-20 13:25533504 c:\windows\system32\vds.exe
    - 2009-07-14 00:11 . 2009-07-14 01:41691200 c:\windows\system32\VAN.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27691200 c:\windows\system32\VAN.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27154624 c:\windows\system32\uxlib.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27800256 c:\windows\system32\usp10.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27109056 c:\windows\system32\userenv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27625664 c:\windows\system32\usercpl.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41625664 c:\windows\system32\usercpl.dll
    + 2012-08-16 07:06 . 2012-06-29 03:47237056 c:\windows\system32\url.dll
    - 2011-08-12 15:07 . 2011-07-22 05:35237056 c:\windows\system32\url.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27264192 c:\windows\system32\upnp.dll
    - 2011-02-09 15:47 . 2010-12-21 06:15264192 c:\windows\system32\upnp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27403968 c:\windows\system32\untfs.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27214528 c:\windows\system32\umrdp.dll
    + 2011-06-29 02:09 . 2011-05-24 11:42404480 c:\windows\system32\umpnpmgr.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27172544 c:\windows\system32\twext.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41172544 c:\windows\system32\twext.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27750080 c:\windows\system32\TSWorkspace.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27299520 c:\windows\system32\tsmf.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27200192 c:\windows\system32\tscfgwmi.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27112640 c:\windows\system32\thumbcache.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27680960 c:\windows\system32\termsrv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27421888 c:\windows\system32\termmgr.dll
    - 2009-07-14 00:41 . 2009-07-14 01:41421888 c:\windows\system32\termmgr.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27253440 c:\windows\system32\tcpipcfg.dll
    - 2009-07-13 23:31 . 2009-07-14 01:39257024 c:\windows\system32\taskmgr.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25257024 c:\windows\system32\taskmgr.exe
    - 2010-12-15 14:21 . 2010-11-02 05:10464384 c:\windows\system32\taskeng.exe
    + 2011-07-01 01:40 . 2010-11-20 13:25464384 c:\windows\system32\taskeng.exe
    - 2010-12-15 14:21 . 2010-11-02 05:17473600 c:\windows\system32\taskcomp.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27473600 c:\windows\system32\taskcomp.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41243712 c:\windows\system32\taskbarcpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27243712 c:\windows\system32\taskbarcpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27316928 c:\windows\system32\tapisrv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27148992 c:\windows\system32\t2embed.dll
    - 2010-10-13 14:43 . 2010-08-26 05:27148992 c:\windows\system32\t2embed.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41419840 c:\windows\system32\systemcpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27419840 c:\windows\system32\systemcpl.dll
    - 2009-07-13 23:27 . 2009-07-14 01:41207360 c:\windows\system32\sysclass.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27207360 c:\windows\system32\sysclass.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27200192 c:\windows\system32\syncui.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41200192 c:\windows\system32\syncui.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27582656 c:\windows\system32\sxs.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27769536 c:\windows\system32\sud.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41769536 c:\windows\system32\sud.dll
    - 2010-10-13 14:43 . 2010-05-05 07:37483840 c:\windows\system32\StructuredQuery.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27483840 c:\windows\system32\StructuredQuery.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27257024 c:\windows\system32\stobject.dll
    - 2009-07-13 23:57 . 2009-07-14 01:38333824 c:\windows\system32\ssText3d.scr
    + 2011-07-01 01:38 . 2010-11-20 13:24333824 c:\windows\system32\ssText3d.scr
    - 2009-07-13 23:20 . 2009-07-14 01:41136192 c:\windows\system32\sspicli.dll
    + 2012-01-11 18:31 . 2011-11-17 06:35136192 c:\windows\system32\sspicli.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27236032 c:\windows\system32\srvsvc.dll
    - 2010-10-13 14:42 . 2010-08-27 06:14236032 c:\windows\system32\srvsvc.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27128000 c:\windows\system32\srvcli.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27270848 c:\windows\system32\srrstr.dll
    - 2009-07-13 23:36 . 2009-07-14 01:41270848 c:\windows\system32\srrstr.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27340992 c:\windows\system32\srchadmin.dll
    - 2009-07-13 23:56 . 2009-07-14 01:41340992 c:\windows\system32\srchadmin.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27244736 c:\windows\system32\sqmapi.dll
    - 2009-07-14 00:29 . 2009-07-14 01:41933888 c:\windows\system32\sqlsrv32.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27933888 c:\windows\system32\sqlsrv32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27446976 c:\windows\system32\sqlcese30.dll
    - 2009-07-14 00:22 . 2009-07-14 01:41446976 c:\windows\system32\sqlcese30.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27263168 c:\windows\system32\spwizui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27445952 c:\windows\system32\spwizeng.dll
    + 2011-09-30 04:17 . 2011-09-30 04:15263168 c:\windows\system32\SPReview\spwizui.dll
    - 2011-09-29 21:17 . 2011-09-29 21:14263168 c:\windows\system32\SPReview\spwizui.dll
    - 2011-09-29 21:17 . 2011-09-29 21:14301568 c:\windows\system32\SPReview\spreview.exe
    + 2011-09-30 04:17 . 2011-09-30 04:15301568 c:\windows\system32\SPReview\spreview.exe
    - 2011-09-29 21:17 . 2011-09-29 21:14238592 c:\windows\system32\SPReview\sperror.dll
    + 2011-09-30 04:17 . 2011-09-30 04:15238592 c:\windows\system32\SPReview\sperror.dll
    + 2011-07-01 01:40 . 2010-11-20 13:25301568 c:\windows\system32\spreview.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27418816 c:\windows\system32\sppwinob.dll
    - 2009-07-13 23:51 . 2009-07-14 01:41418816 c:\windows\system32\sppwinob.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27102400 c:\windows\system32\sppnp.dll
    - 2009-07-13 23:27 . 2009-07-14 01:41102400 c:\windows\system32\sppnp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27232448 c:\windows\system32\sppcomapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27145920 c:\windows\system32\sppc.dll
    - 2009-07-14 01:04 . 2009-07-14 01:41145920 c:\windows\system32\sppc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27244224 c:\windows\system32\spp.dll
    person15, Sep 3, 2012
    #19

  20. person15 Newcomer, in training Posts: 55

    - 2009-07-14 00:40 . 2009-07-14 01:39267264 c:\windows\system32\spool\tools\PrintBrmEngine.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25267264 c:\windows\system32\spool\tools\PrintBrmEngine.exe
    + 2011-07-01 01:38 . 2010-11-20 13:27221184 c:\windows\system32\spool\tools\Microsoft XPS Document Writer\mxdwdui.dll
    + 2012-04-21 23:41 . 2010-03-30 00:30114568 c:\windows\system32\spool\drivers\x64\SendToOneNoteFilter.dll
    + 2012-04-21 23:41 . 2010-11-20 13:27715776 c:\windows\system32\spool\drivers\x64\mxdwdrv.dll
    + 2010-01-06 17:36 . 2009-02-27 07:42863128 c:\windows\system32\spool\drivers\x64\msonpdrv.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36179712 c:\windows\system32\spool\drivers\x64\hpsysobj.dll
    + 2012-08-24 19:36 . 2012-08-24 19:38186368 c:\windows\system32\spool\drivers\x64\hpspw115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36120832 c:\windows\system32\spool\drivers\x64\HPSecurePrint64.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36193592 c:\windows\system32\spool\drivers\x64\hppdcompio.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36869376 c:\windows\system32\spool\drivers\x64\hpmur115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36218112 c:\windows\system32\spool\drivers\x64\hpmpw081.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36310784 c:\windows\system32\spool\drivers\x64\hpmpm081.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36139264 c:\windows\system32\spool\drivers\x64\hpfxcomw.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36612864 c:\windows\system32\spool\drivers\x64\HPDRVJCT.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36180736 c:\windows\system32\spool\drivers\x64\hpcsat20.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36342528 c:\windows\system32\spool\drivers\x64\hpcpp115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36286720 c:\windows\system32\spool\drivers\x64\hpcpn115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36286720 c:\windows\system32\spool\drivers\x64\hpcpe115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36538112 c:\windows\system32\spool\drivers\x64\hpcev115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36308224 c:\windows\system32\spool\drivers\x64\hpcc6115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36708096 c:\windows\system32\spool\drivers\x64\hpc5r115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:38463872 c:\windows\system32\spool\drivers\x64\cioum64.msi
    + 2012-04-21 23:41 . 2010-03-30 00:30114568 c:\windows\system32\spool\drivers\x64\3\SendToOneNoteFilter.dll
    + 2009-07-14 01:18 . 2010-11-20 13:27630272 c:\windows\system32\spool\drivers\x64\3\PSCRIPT5.DLL
    + 2009-07-14 01:19 . 2010-11-20 13:27847872 c:\windows\system32\spool\drivers\x64\3\PS5UI.DLL
    + 2009-07-14 01:19 . 2010-11-20 13:27221184 c:\windows\system32\spool\drivers\x64\3\mxdwdui.dll
    + 2009-07-14 00:40 . 2010-11-20 13:27715776 c:\windows\system32\spool\drivers\x64\3\mxdwdrv.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36179712 c:\windows\system32\spool\drivers\x64\3\hpsysobj.dll
    + 2012-08-24 19:36 . 2012-08-24 19:38186368 c:\windows\system32\spool\drivers\x64\3\hpspw115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36120832 c:\windows\system32\spool\drivers\x64\3\HPSecurePrint64.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36193592 c:\windows\system32\spool\drivers\x64\3\hppdcompio.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36869376 c:\windows\system32\spool\drivers\x64\3\hpmur115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36218112 c:\windows\system32\spool\drivers\x64\3\hpmpw081.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36310784 c:\windows\system32\spool\drivers\x64\3\hpmpm081.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36139264 c:\windows\system32\spool\drivers\x64\3\hpfxcomw.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36612864 c:\windows\system32\spool\drivers\x64\3\HPDRVJCT.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36180736 c:\windows\system32\spool\drivers\x64\3\hpcsat20.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36342528 c:\windows\system32\spool\drivers\x64\3\hpcpp115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36286720 c:\windows\system32\spool\drivers\x64\3\hpcpn115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36286720 c:\windows\system32\spool\drivers\x64\3\hpcpe115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36538112 c:\windows\system32\spool\drivers\x64\3\hpcev115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36308224 c:\windows\system32\spool\drivers\x64\3\hpcc6115.dll
    + 2012-08-24 19:36 . 2012-08-24 19:36708096 c:\windows\system32\spool\drivers\x64\3\hpc5r115.dll
    + 2009-07-14 00:36 . 2010-11-20 13:26156672 c:\windows\system32\spool\drivers\x64\3\FXSWZRD.DLL
    - 2009-07-14 00:36 . 2009-07-14 01:40156672 c:\windows\system32\spool\drivers\x64\3\FXSWZRD.DLL
    - 2009-07-14 00:36 . 2009-07-14 01:40160256 c:\windows\system32\spool\drivers\x64\3\FXSUI.DLL
    + 2009-07-14 00:36 . 2010-11-20 13:26160256 c:\windows\system32\spool\drivers\x64\3\FXSUI.DLL
    + 2009-07-14 00:35 . 2010-11-20 13:26434688 c:\windows\system32\spool\drivers\x64\3\FXSTIFF.DLL
    + 2009-07-14 00:36 . 2010-11-20 13:26380416 c:\windows\system32\spool\drivers\x64\3\FXSDRV.DLL
    - 2009-07-14 00:35 . 2009-07-14 01:40623104 c:\windows\system32\spool\drivers\x64\3\FXSAPI.DLL
    + 2009-07-14 00:35 . 2010-11-20 13:26623104 c:\windows\system32\spool\drivers\x64\3\FXSAPI.DLL
    + 2012-08-24 19:36 . 2012-08-24 19:38463872 c:\windows\system32\spool\drivers\x64\3\cioum64.msi
    + 2012-08-24 19:36 . 2012-08-24 19:36286720 c:\windows\system32\spool\drivers\W32X86\3\HPCPN115.DLL
    + 2011-07-01 01:40 . 2010-11-20 13:25598016 c:\windows\system32\spinstall.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27418304 c:\windows\system32\Speech\SpeechUX\speechuxcpl.dll
    - 2009-07-14 00:34 . 2009-07-14 01:41418304 c:\windows\system32\Speech\SpeechUX\speechuxcpl.dll
    - 2009-07-14 00:19 . 2009-07-14 01:41225280 c:\windows\system32\SndVolSSO.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27225280 c:\windows\system32\SndVolSSO.dll
    - 2009-07-14 00:19 . 2009-07-14 01:39273920 c:\windows\system32\SndVol.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25273920 c:\windows\system32\SndVol.exe
    - 2009-07-13 23:35 . 2009-07-14 01:41933376 c:\windows\system32\SmiEngine.dll
    + 2011-07-01 01:34 . 2010-11-20 13:27933376 c:\windows\system32\SmiEngine.dll
    - 2009-07-13 23:50 . 2009-07-14 01:41189952 c:\windows\system32\SmartcardCredentialProvider.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27189952 c:\windows\system32\SmartcardCredentialProvider.dll
    - 2009-07-13 23:52 . 2009-07-14 01:39349696 c:\windows\system32\slui.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25349696 c:\windows\system32\slui.exe
    - 2009-07-13 23:55 . 2009-07-14 01:41451072 c:\windows\system32\shwebsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27451072 c:\windows\system32\shwebsvc.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27370688 c:\windows\system32\shsvcs.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27130048 c:\windows\system32\shsetup.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27448512 c:\windows\system32\shlwapi.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27196608 c:\windows\system32\shdocvw.dll
    - 2009-07-14 00:23 . 2009-07-14 01:41357888 c:\windows\system32\sharemediacpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27357888 c:\windows\system32\sharemediacpl.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27135168 c:\windows\system32\shacct.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41135168 c:\windows\system32\shacct.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27217088 c:\windows\system32\Setup\RasMigPlugin.dll
    - 2009-07-14 00:33 . 2009-07-14 01:39279040 c:\windows\system32\sethc.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25279040 c:\windows\system32\sethc.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27121856 c:\windows\system32\SessEnv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27121856 c:\windows\system32\secproc_ssp_isv.dll
    - 2010-02-10 17:00 . 2010-01-19 09:05121856 c:\windows\system32\secproc_ssp_isv.dll
    - 2010-02-10 17:00 . 2010-01-19 09:05121856 c:\windows\system32\secproc_ssp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27121856 c:\windows\system32\secproc_ssp.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27485888 c:\windows\system32\secproc_isv.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27488448 c:\windows\system32\secproc.dll
    - 2011-06-29 02:09 . 2011-05-04 05:24249856 c:\windows\system32\SearchProtocolHost.exe
    + 2011-06-29 02:09 . 2011-05-04 05:19249856 c:\windows\system32\SearchProtocolHost.exe
    + 2011-06-29 02:09 . 2011-05-04 05:19591872 c:\windows\system32\SearchIndexer.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27867840 c:\windows\system32\SearchFolder.dll
    + 2011-06-29 02:09 . 2011-05-04 05:19113664 c:\windows\system32\SearchFilterHost.exe
    - 2011-06-29 02:09 . 2011-05-04 05:24113664 c:\windows\system32\SearchFilterHost.exe
    - 2009-07-13 23:36 . 2009-07-14 01:41170496 c:\windows\system32\sdrsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27170496 c:\windows\system32\sdrsvc.dll
    - 2009-07-13 23:36 . 2009-07-14 01:41762368 c:\windows\system32\sdcpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27762368 c:\windows\system32\sdcpl.dll
    - 2009-07-13 23:54 . 2009-07-14 01:41568832 c:\windows\system32\scrptadm.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27568832 c:\windows\system32\scrptadm.dll
    - 2010-12-15 14:21 . 2010-11-02 05:10285696 c:\windows\system32\schtasks.exe
    + 2011-07-01 01:40 . 2010-11-20 13:25285696 c:\windows\system32\schtasks.exe
    - 2010-10-13 14:43 . 2010-08-21 06:36340992 c:\windows\system32\schannel.dll
    + 2012-07-11 15:19 . 2012-06-02 05:45340992 c:\windows\system32\schannel.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27406016 c:\windows\system32\scesrv.dll
    - 2009-07-13 23:49 . 2009-07-14 01:41406016 c:\windows\system32\scesrv.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27232960 c:\windows\system32\scecli.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27146944 c:\windows\system32\scavengeui.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27303616 c:\windows\system32\scansetting.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27758784 c:\windows\system32\samsrv.dll
    - 2009-07-13 23:36 . 2009-07-14 01:39296960 c:\windows\system32\rstrui.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25296960 c:\windows\system32\rstrui.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27512000 c:\windows\system32\rpcss.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27187904 c:\windows\system32\rpchttp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:25128000 c:\windows\system32\Robocopy.exe
    - 2010-02-10 17:00 . 2010-01-19 09:00305152 c:\windows\system32\RMActivate_ssp_isv.exe
    + 2011-07-01 01:38 . 2010-11-20 13:25305152 c:\windows\system32\RMActivate_ssp_isv.exe
    - 2010-02-10 17:00 . 2010-01-19 09:00306688 c:\windows\system32\RMActivate_ssp.exe
    + 2011-07-01 01:38 . 2010-11-20 13:25306688 c:\windows\system32\RMActivate_ssp.exe
    + 2011-07-01 01:40 . 2010-11-20 13:25362496 c:\windows\system32\RMActivate_isv.exe
    + 2011-07-01 01:40 . 2010-11-20 13:25359424 c:\windows\system32\RMActivate.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27633344 c:\windows\system32\riched20.dll
    - 2009-07-13 23:57 . 2009-07-14 01:38241664 c:\windows\system32\Ribbons.scr
    + 2011-07-01 01:38 . 2010-11-20 13:24241664 c:\windows\system32\Ribbons.scr
    - 2009-07-14 00:17 . 2009-07-14 01:41153088 c:\windows\system32\remotepg.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27153088 c:\windows\system32\remotepg.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27146944 c:\windows\system32\recovery.dll
    - 2009-07-13 23:37 . 2009-07-14 01:41146944 c:\windows\system32\recovery.dll
    - 2009-07-13 23:36 . 2009-07-14 01:39238080 c:\windows\system32\recdisc.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25238080 c:\windows\system32\recdisc.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27313856 c:\windows\system32\ReAgent.dll
    - 2009-07-13 23:32 . 2009-07-14 01:41313856 c:\windows\system32\ReAgent.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27167424 c:\windows\system32\rdpendp.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27222208 c:\windows\system32\rdpencom.dll
    - 2009-07-14 00:16 . 2009-07-14 01:41222208 c:\windows\system32\rdpencom.dll
    + 2011-07-01 01:38 . 2010-11-20 13:13147456 c:\windows\system32\RDPENCDD.dll
    - 2009-07-14 00:16 . 2009-07-14 01:32147456 c:\windows\system32\RDPENCDD.dll
    + 2011-07-01 01:40 . 2010-11-20 11:05274944 c:\windows\system32\rdpdd.dll
    + 2012-06-14 15:21 . 2012-04-26 05:41149504 c:\windows\system32\rdpcorekmts.dll
    - 2009-07-14 00:17 . 2009-07-14 01:41149504 c:\windows\system32\rdpcorekmts.dll
    + 2011-07-01 01:40 . 2010-11-20 13:25210944 c:\windows\system32\rdpclip.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27424448 c:\windows\system32\rastls.dll
    - 2009-07-14 00:10 . 2009-07-14 01:41211456 c:\windows\system32\rasppp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27211456 c:\windows\system32\rasppp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27344064 c:\windows\system32\rasmans.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27337920 c:\windows\system32\raschap.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27107520 c:\windows\system32\QUTIL.DLL
    - 2009-07-14 00:07 . 2009-07-14 01:41107520 c:\windows\system32\QUTIL.DLL
    - 2009-07-14 00:07 . 2009-07-14 01:41124416 c:\windows\system32\QSVRMGMT.DLL
    + 2011-07-01 01:38 . 2010-11-20 13:27124416 c:\windows\system32\QSVRMGMT.DLL
    - 2009-07-14 00:07 . 2009-07-14 01:41223232 c:\windows\system32\QSHVHOST.DLL
    + 2011-07-01 01:39 . 2010-11-20 13:27223232 c:\windows\system32\QSHVHOST.DLL
    + 2011-07-01 01:40 . 2010-11-20 13:27849920 c:\windows\system32\qmgr.dll
    - 2009-07-14 00:18 . 2009-07-14 01:41624128 c:\windows\system32\qedit.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27624128 c:\windows\system32\qedit.dll
    - 2009-07-14 00:18 . 2009-07-14 01:41366592 c:\windows\system32\qdvd.dll
    + 2012-01-11 14:42 . 2011-10-26 05:25366592 c:\windows\system32\qdvd.dll
    - 2009-07-14 00:18 . 2009-07-14 01:41250880 c:\windows\system32\qdv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27250880 c:\windows\system32\qdv.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27181248 c:\windows\system32\qcap.dll
    - 2009-07-14 00:18 . 2009-07-14 01:41181248 c:\windows\system32\qcap.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27254464 c:\windows\system32\qasf.dll
    - 2009-07-14 00:23 . 2009-07-14 01:41254464 c:\windows\system32\qasf.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27476160 c:\windows\system32\QAGENTRT.DLL
    + 2011-07-01 01:40 . 2010-11-20 13:27266240 c:\windows\system32\QAGENT.DLL
    + 2011-07-01 01:39 . 2010-11-20 13:27429568 c:\windows\system32\puiobj.dll
    - 2010-02-24 16:59 . 2009-12-13 09:46613888 c:\windows\system32\psisdecd.dll
    + 2011-10-13 18:20 . 2011-08-17 05:26613888 c:\windows\system32\psisdecd.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41187904 c:\windows\system32\provsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27187904 c:\windows\system32\provsvc.dll
    + 2012-06-14 15:21 . 2012-05-01 05:40209920 c:\windows\system32\profsvc.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27156160 c:\windows\system32\prntvpt.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27416256 c:\windows\system32\prnfldr.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27183808 c:\windows\system32\prncache.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25176640 c:\windows\system32\PresentationSettings.exe
    - 2009-07-13 23:55 . 2009-07-14 01:39176640 c:\windows\system32\PresentationSettings.exe
    + 2011-07-01 01:40 . 2010-11-05 01:53109928 c:\windows\system32\PresentationHostProxy.dll
    - 2010-06-24 14:34 . 2009-11-25 16:47320352 c:\windows\system32\PresentationHost.exe
    + 2011-07-01 01:40 . 2010-11-05 01:53320352 c:\windows\system32\PresentationHost.exe
    - 2009-07-13 23:56 . 2009-07-14 01:41486400 c:\windows\system32\powercpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27486400 c:\windows\system32\powercpl.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27224256 c:\windows\system32\PortableDeviceSyncProvider.dll
    - 2009-07-14 00:22 . 2009-07-14 01:41224256 c:\windows\system32\PortableDeviceSyncProvider.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27435712 c:\windows\system32\PortableDeviceStatus.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41435712 c:\windows\system32\PortableDeviceStatus.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27758272 c:\windows\system32\PortableDeviceApi.dll
    - 2009-07-13 23:35 . 2009-07-14 01:39199168 c:\windows\system32\PkgMgr.exe
    + 2011-07-01 01:34 . 2010-11-20 13:25199168 c:\windows\system32\PkgMgr.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27409600 c:\windows\system32\photowiz.dll
    + 2011-07-01 01:39 . 2010-11-20 13:24477696 c:\windows\system32\PhotoScreensaver.scr
    - 2009-07-14 00:27 . 2009-07-14 01:38477696 c:\windows\system32\PhotoScreensaver.scr
    - 2009-07-13 23:31 . 2009-07-14 01:39172544 c:\windows\system32\perfmon.exe
    + 2011-07-01 01:38 . 2010-11-20 13:25172544 c:\windows\system32\perfmon.exe
    + 2009-07-14 02:36 . 2012-09-01 05:23671120 c:\windows\system32\perfh009.dat
    - 2009-07-14 02:36 . 2011-09-28 16:18671120 c:\windows\system32\perfh009.dat
    - 2009-07-13 23:56 . 2009-07-14 01:41658432 c:\windows\system32\PerfCenterCPL.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27658432 c:\windows\system32\PerfCenterCPL.dll
    - 2009-07-14 02:36 . 2011-09-28 16:18124278 c:\windows\system32\perfc009.dat
    + 2009-07-14 02:36 . 2012-09-01 05:23124278 c:\windows\system32\perfc009.dat
    + 2011-07-01 01:39 . 2010-11-20 13:27300032 c:\windows\system32\pdh.dll
    - 2009-07-13 23:31 . 2009-07-14 01:41300032 c:\windows\system32\pdh.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27898560 c:\windows\system32\OobeFldr.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41898560 c:\windows\system32\OobeFldr.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25109568 c:\windows\system32\oobe\windeploy.exe
    - 2009-07-13 23:29 . 2009-07-14 01:39109568 c:\windows\system32\oobe\windeploy.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27577536 c:\windows\system32\oobe\win32ui.dll
    - 2009-07-13 23:29 . 2009-07-14 01:41577536 c:\windows\system32\oobe\win32ui.dll
    - 2009-07-14 01:00 . 2009-07-14 01:39266240 c:\windows\system32\oobe\Setup.exe
    + 2011-07-01 01:39 . 2010-11-20 13:25266240 c:\windows\system32\oobe\Setup.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27334336 c:\windows\system32\oobe\cmisetup.dll
    - 2009-07-13 23:27 . 2009-07-14 01:41334336 c:\windows\system32\oobe\cmisetup.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27221696 c:\windows\system32\OnLineIDCpl.dll
    - 2009-07-13 23:52 . 2009-07-14 01:41221696 c:\windows\system32\OnLineIDCpl.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27235520 c:\windows\system32\onex.dll
    + 2011-10-13 18:19 . 2011-08-27 05:37861696 c:\windows\system32\oleaut32.dll
    - 2009-07-13 23:39 . 2009-07-14 01:41331776 c:\windows\system32\oleacc.dll
    + 2011-10-13 18:19 . 2011-08-27 05:37331776 c:\windows\system32\oleacc.dll
    - 2011-08-10 16:05 . 2011-06-15 09:58212992 c:\windows\system32\odbctrac.dll
    + 2011-08-10 16:05 . 2011-06-15 10:02212992 c:\windows\system32\odbctrac.dll
    - 2011-08-10 16:05 . 2011-06-15 09:58106496 c:\windows\system32\odbccu32.dll
    + 2011-08-10 16:05 . 2011-06-15 10:02106496 c:\windows\system32\odbccu32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:58106496 c:\windows\system32\odbccr32.dll
    + 2011-08-10 16:05 . 2011-06-15 10:02106496 c:\windows\system32\odbccr32.dll
    - 2011-08-10 16:05 . 2011-06-15 09:58163840 c:\windows\system32\odbccp32.dll
    + 2011-08-10 16:05 . 2011-06-15 10:02163840 c:\windows\system32\odbccp32.dll
    - 2011-01-12 22:09 . 2010-10-16 05:17720896 c:\windows\system32\odbc32.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27720896 c:\windows\system32\odbc32.dll
    + 2011-07-01 01:39 . 2010-11-20 13:25186368 c:\windows\system32\ocsetup.exe
    - 2009-07-13 23:35 . 2009-07-14 01:39186368 c:\windows\system32\ocsetup.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27161792 c:\windows\system32\ocsetapi.dll
    + 2012-02-16 02:38 . 2012-01-04 10:44509952 c:\windows\system32\ntshrui.dll
    - 2009-07-13 23:57 . 2009-07-14 01:41509952 c:\windows\system32\ntshrui.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27344576 c:\windows\system32\ntprint.dll
    - 2009-07-14 00:39 . 2009-07-14 01:41344576 c:\windows\system32\ntprint.dll
    - 2009-07-13 23:48 . 2009-07-14 01:41129536 c:\windows\system32\ntlanman.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27129536 c:\windows\system32\ntlanman.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25109568 c:\windows\system32\nslookup.exe
    - 2009-07-14 00:08 . 2009-07-14 01:41455168 c:\windows\system32\nshipsec.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27455168 c:\windows\system32\nshipsec.dll
    + 2011-07-01 01:38 . 2010-11-20 13:25395776 c:\windows\system32\nltest.exe
    - 2009-07-13 23:53 . 2009-07-14 01:39395776 c:\windows\system32\nltest.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27303616 c:\windows\system32\nlasvc.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41193024 c:\windows\system32\netplwiz.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27193024 c:\windows\system32\netplwiz.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27695808 c:\windows\system32\netlogon.dll
    - 2009-07-13 23:53 . 2009-07-14 01:41188928 c:\windows\system32\netjoin.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27188928 c:\windows\system32\netjoin.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27215552 c:\windows\system32\netiohlp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27165376 c:\windows\system32\netid.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27324096 c:\windows\system32\netdiagfx.dll
    - 2009-07-14 00:08 . 2009-07-14 01:41324096 c:\windows\system32\netdiagfx.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27519680 c:\windows\system32\netcfgx.dll
    - 2009-07-13 23:53 . 2009-07-14 01:39152064 c:\windows\system32\net1.exe
    + 2011-07-01 01:38 . 2010-11-20 13:25152064 c:\windows\system32\net1.exe
    + 2011-07-01 01:40 . 2010-11-20 13:27210944 c:\windows\system32\ncsi.dll
    - 2009-07-13 23:49 . 2009-07-14 01:41307200 c:\windows\system32\ncrypt.dll
    + 2012-07-11 15:19 . 2012-06-02 05:44307200 c:\windows\system32\ncrypt.dll
    + 2011-07-01 01:38 . 2010-11-20 13:44133632 c:\windows\system32\NAPHLPR.DLL
    - 2009-07-14 00:09 . 2009-07-14 01:50133632 c:\windows\system32\NAPHLPR.DLL
    - 2009-07-13 23:57 . 2009-07-14 01:38242688 c:\windows\system32\Mystify.scr
    + 2011-07-01 01:38 . 2010-11-20 13:24242688 c:\windows\system32\Mystify.scr
    - 2009-07-13 23:55 . 2009-07-14 01:41143360 c:\windows\system32\mydocs.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27143360 c:\windows\system32\mydocs.dll
    - 2009-07-13 23:59 . 2009-07-14 01:41372736 c:\windows\system32\mtxclu.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27372736 c:\windows\system32\mtxclu.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27326144 c:\windows\system32\mswsock.dll
    - 2009-07-13 23:19 . 2009-07-14 01:41634880 c:\windows\system32\msvcrt.dll
    + 2012-02-16 02:38 . 2011-12-16 08:46634880 c:\windows\system32\msvcrt.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27312320 c:\windows\system32\msv1_0.dll
    - 2009-07-13 23:46 . 2009-07-14 01:41238080 c:\windows\system32\mstask.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27238080 c:\windows\system32\mstask.dll
    + 2011-06-29 02:09 . 2011-05-04 05:22778752 c:\windows\system32\mssvp.dll
    - 2011-06-29 02:09 . 2011-05-04 05:28288256 c:\windows\system32\mssphtb.dll
    + 2011-06-29 02:09 . 2011-05-04 05:22288256 c:\windows\system32\mssphtb.dll
    - 2011-06-29 02:09 . 2011-05-04 05:28491520 c:\windows\system32\mssph.dll
    + 2011-06-29 02:09 . 2011-05-04 05:22491520 c:\windows\system32\mssph.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27641024 c:\windows\system32\msscp.dll
    - 2009-07-14 00:20 . 2009-07-14 01:41641024 c:\windows\system32\msscp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27571904 c:\windows\system32\mspbda.dll
    - 2009-07-14 00:21 . 2009-07-14 01:41571904 c:\windows\system32\mspbda.dll
    + 2011-07-01 01:38 . 2010-11-20 13:27325632 c:\windows\system32\msnetobj.dll
    - 2009-07-14 00:20 . 2009-07-14 01:41325632 c:\windows\system32\msnetobj.dll
    + 2011-07-01 01:39 . 2010-11-20 13:24378880 c:\windows\system32\msinfo32.exe
    - 2009-07-13 23:31 . 2009-07-14 01:39378880 c:\windows\system32\msinfo32.exe
    + 2011-07-01 01:38 . 2010-11-20 13:24128000 c:\windows\system32\msiexec.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27335360 c:\windows\system32\msieftp.dll
    - 2009-07-13 23:55 . 2009-07-14 01:41335360 c:\windows\system32\msieftp.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27799744 c:\windows\system32\msftedit.dll
    - 2009-07-13 23:39 . 2009-07-14 01:41799744 c:\windows\system32\msftedit.dll
    + 2011-07-01 01:40 . 2010-11-20 13:27457216 c:\windows\system32\msdrm.dll
    - 2010-10-27 13:43 . 2010-08-04 07:07552960 c:\windows\system32\msdri.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27552960 c:\windows\system32\msdri.dll
    + 2011-07-01 01:39 . 2010-11-05 01:57154960 c:\windows\system32\mscorier.dll
    - 2010-06-24 14:34 . 2009-11-25 16:47444752 c:\windows\system32\mscoree.dll
    + 2011-07-01 01:40 . 2010-11-05 01:57444752 c:\windows\system32\mscoree.dll
    + 2011-07-01 01:39 . 2010-11-20 13:24300032 c:\windows\system32\msconfig.exe
    - 2009-07-13 23:31 . 2009-07-14 01:39300032 c:\windows\system32\msconfig.exe
    + 2011-07-01 01:39 . 2010-11-20 13:27625664 c:\windows\system32\mscms.dll
    - 2009-07-13 23:39 . 2009-07-14 01:41625664 c:\windows\system32\mscms.dll
    + 2009-07-14 02:36 . 2011-09-30 04:30175616 c:\windows\system32\msclmd.dll
    + 2011-07-01 01:39 . 2010-11-20 13:27268288 c:\windows\system32\MSAC3ENC.DLL
    - 2009-07-14 00:23 . 2009-07-14 01:41268288 c:\windows\system32\MSAC3ENC.DLL
    + 2011-07-01 01:40 . 2010-11-20 13:26828416 c:\windows\system32\MPSSVC.dll
    + 2011-07-01 01:39 . 2010-11-20 13:26211456 c:\windows\system32\mprddm.dll
    + 2011-07-01 01:39 . 2010-11-20 13:26221184 c:\windows\system32\mprapi.dll
    + 2011-07-01 01:38 . 2010-11-20 13:24102400 c:\windows\system32\mobsync.exe
    - 2009-07-13 23:55 . 2009-07-14 01:39102400 c:\windows\system32\mobsync.exe
    + 2010-01-06 18:07 . 2011-02-23 23:40203792 c:\windows\system32\mlmodule64.dll
    + 2010-01-06 18:07 . 2011-02-23 23:40436240 c:\windows\system32\ml64i3.dll
    + 2010-01-06 18:07 . 2011-02-23 23:40302608 c:\windows\system32\ml64i2.dll
    person15, Sep 3, 2012
    #20
Page 1 of 4

Add New Comment

Social Login & Guest Posting

TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.